Function at 0x6b5a90
Capabilities:
Access peb ldr_data
Check http status code
Check os version

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x210
mov esi, esp
mov dword [esi + 0x1f8], ebp
mov edi, ecx
mov ebx, dword [ebp + 8]
mov dword [esi + 0x1fc], esp
mov dword [esi + 0x208], 0xffffffff
lea eax, [esi + 0x200]
mov dword [esi + 0x204], 0x6bd2f0
mov ecx, dword fs:[0]
mov dword [esi + 0x200], ecx
mov dword fs:[0], eax
call fcn.006bb730
mov dword [esi + 0x10], eax
mov eax, dword [edi + 0x2c4]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + ecx*4]
mov dword [esi + 0xdc], edx
mov dword [esi + 0x6c], ecx
mov ecx, dword [eax + ecx*4 + 4]
mov eax, ecx
sub eax, edx
mov edx, 0x2aaaaaab
imul edx
mov eax, edx
shr eax, 0x1f
sar edx, 5
add edx, eax
mov eax, dword [edi + 0x70]
mov ebx, 0xabd9c4
add ebx, dword [0xabd9c4]
mov dword [esi + 0x24], ebx
mov ebx, dword [0xabd9b8]
mov dword [esi + 0x20], ebx
mov ebx, 0xabd9a4
add ebx, dword [0xabd9a4]
mov dword [esi + 0x30], ebx
and eax, 0xfffffbff
mov dword [esi + 0xc], edi
mov dword [edi + 0x70], eax
mov dword [esi + 0x58], 0
mov dword [esi + 0x5c], 0
mov dword [esi + 0x60], 0
mov dword [esi + 0x108], ecx
mov edi, dword [esi + 0x10]
sub ecx, dword [esi + 0xdc]
mov dword [esi + 0xd8], ecx
mov ebx, edx
mov dword [esi + 0x14], edi
je 0x6b5c10
cmp ebx, 0x40000000
jae 0x6b78cd
lea edx, [ebx*4]
cmp ebx, 0x400
mov dword [esi + 4], edx
jb 0x6b5bd1
mov eax, dword [0xb34fd0]
mov ecx, dword [0xb34fa0]
add ecx, edi
lea edi, [eax + ecx]
add edi, 0xffffbcc0
lea eax, [edx + 0x23]
mov dword [esi + 8], eax
mov ecx, edi
call dword [0xb0836c]
mov ecx, dword [esi + 8]
call edi
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x6b5bf6
mov eax, dword [0xb34fd0]
mov ecx, dword [0xb34fa0]
add ecx, edi
add ecx, eax
add ecx, 0xffffbcc0
mov dword [esi + 8], ecx
mov edi, edx
call dword [0xb0836c]
mov ecx, edi
call dword [esi + 8]
mov dword [esi + 0x58], eax
lea edi, [eax + ebx*4]
mov dword [esi + 0x60], edi
push dword [esi + 4]
push 0
push eax
call fcn.0077d260
add esp, 0xc
mov dword [esi + 0x5c], edi
mov eax, dword [esi + 0x58]
mov ecx, dword [esi + 0x5c]
sub ecx, eax
test ecx, ecx
jle 0x6b5c37
xor ecx, ecx
nop
mov dword [eax + ecx*4], 0
inc ecx
mov eax, dword [esi + 0x58]
mov edx, dword [esi + 0x5c]
sub edx, eax
sar edx, 2
cmp ecx, edx
jl 0x6b5c20
mov ecx, 0x28
mov dword [esi + 0x2c], ebx
mov eax, ebx
mul ecx
mov ecx, 0xffffffff
cmovno ecx, eax
mov dword [esi + 0x100], ecx
cmp dword [0xb33f34], 0x29864cae
je 0x6b5c78
mov eax, dword [0xb33f2c]
lea ecx, [eax + 1]
mov dword [0xb33f2c], ecx
test ecx, eax
je 0x6b5c78
mov al, 1
xor edx, edx
jmp 0x6b5d9d
cmp dword [0xb33f38], 0x2da3471
mov edi, dword [esi + 0xc]
jne 0x6b5ca2
mov eax, dword [esi + 0x30]
lea ecx, [eax + 0x14]
add ecx, dword [eax + 0x14]
mov dword [esi + 0x18], ecx
cmp dword [esi + 0x20], 0
jg 0x6b5cca
xor eax, eax
xor edx, edx
jmp 0x6b5da0
mov eax, dword [esi + 0x30]
mov ecx, dword [eax]
add ecx, eax
mov dword [esi + 0x18], ecx
xor edx, edx
mov eax, 0
cmp dword [esi + 0x20], 0
jle 0x6b5da0
test byte [0xb53271], 1
jne 0x6b5da0
xor ecx, ecx
mov eax, dword [0xb33f3c]
xor edx, edx
mov dword [esi + 0xc0], eax
cmp eax, 0x98bfcd96
sete dl
shl edx, 3
mov dword [esi + 0x68], edx
xor edx, edx
mov dword [esi + 0x1c], 0
mov dword [esi + 0x28], 0
jmp 0x6b5d4a
lea ecx, [eax*8]
mov edi, 0xffffffff
shl edi, cl
not edi
and edx, edi
mov ecx, dword [esi + 0x30]
mov ebx, dword [esi + 0x28]
lea edi, [ecx + ebx*4]
add edi, 4
add edi, dword [ecx + ebx*4 + 4]
mov dword [esi + 0x18], edi
lea ecx, [ebx + 1]
mov edi, dword [esi + 4]
add edi, eax
add edi, 2
mov dword [esi + 0x1c], 0
mov dword [esi + 0x28], ecx
mov ecx, edi
xor edx, dword [esi + 0xc4]
add ecx, 2
cmp ecx, dword [esi + 0x20]
jge 0x6b5d9b
mov dword [esi + 4], ecx
mov dword [esi + 0xc4], edx
mov eax, dword [esi + 0x24]
lea ebx, [eax + ecx]
mov eax, dword [esi + 0x18]
mov ecx, eax
sub ecx, ebx
mov dword [esi + 8], ecx
mov ecx, dword [esi + 0x1c]
mov edi, ecx
sbb edi, 0
imul ecx, ebx
mul ebx
add edx, ecx
cmp dword [esi + 0xc0], 0x98bfcd96
cmovne edx, edi
cmovne eax, dword [esi + 8]
cmp eax, 2
sbb edx, 0
mov ecx, dword [esi + 0x68]
movzx edx, word [ebx + ecx*2]
jl 0x6b5d00
mov ecx, dword [esi + 4]
jmp 0x6b5d3c
xor eax, eax
mov edi, dword [esi + 0xc]
mov dword [esi + 0xf8], eax
mov dword [esi + 0xc4], edx
cmp dword [0xb33f40], 0x709b8e41
jne 0x6b5dc2
mov dword [0xb33f58], 0x3934ef6e
mov eax, dword [esi + 0x2c]
cmp eax, 2
mov ecx, 1
cmovge ecx, eax
mov dword [esi + 0xfc], ecx
and ecx, 0x7fffffe
mov dword [esi + 0xc0], ecx
mov ecx, 0x4340
mov eax, dword [esi + 0x10]
sub ecx, eax
mov dword [esi + 0x104], ecx
add eax, 0xffffbcc0
mov dword [esi + 0x10], eax
mov dword [esi + 0x208], 0xf
lea eax, [edi + 0x300]
mov dword [esi + 0xd4], eax
lea eax, [edi + 0x304]
mov dword [esi + 0xd0], eax
mov dword [esi + 0x64], 0
mov dword [esi + 0x208], 0xf
mov ecx, edi
mov edx, dword [ebp + 8]
call fcn.006bb5e0
xor edx, edx
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 0x2c]
jmp 0x6b5e60
mov eax, 0xc8
mov ecx, dword [esi + 4]
mov dword [ecx + 0x14], eax
mov eax, dword [esi + 0x18]
mov dword [eax + 8], 5
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 0x2c]
mov edx, dword [esi + 0x24]
inc edx
cmp edx, ecx
jge 0x6b5fb0
mov eax, dword [eax + 0x2c4]
mov ecx, dword [esi + 0x6c]
mov ecx, dword [eax + ecx*4]
mov dword [esi + 0x24], edx
lea ebx, [edx + edx*2]
shl ebx, 6
lea edx, [ecx + ebx]
mov eax, dword [ecx + ebx + 8]
and eax, 0x17
lea edi, [ecx + ebx]
add edi, 0x90
cmp eax, 5
mov dword [esi + 0x18], edx
jne 0x6b5f10
mov dword [esi + 0x1c], edi
lea eax, [ecx + ebx]
add eax, 0x94
mov dword [esi + 4], eax
mov al, 1
mov dword [esi + 8], eax
mov eax, 1
mov dword [esi + 0x20], 0
nop word [eax + eax]
mov edx, dword [esi + 0x18]
mov dword [edx + 8], eax
mov eax, dword [esi + 0x1c]
mov ecx, dword [eax]
push dword [edx + 0x1c]
push dword [edx + 0x18]
push eax
call fcn.006bb5b0
add esp, 0xc
test eax, eax
je 0x6b5f50
mov ecx, dword [esi + 4]
cmp dword [ecx], 0
jne 0x6b5f50
mov ecx, dword [esi + 4]
mov dword [ecx + 0x14], eax
mov al, 1
mov dword [esi + 0x20], eax
mov eax, 2
test byte [esi + 8], 1
mov dword [esi + 8], 0
jne 0x6b5ec0
jmp 0x6b5e4c
mov dword [esi + 8], ebx
mov dword [esi + 4], ecx
mov ecx, dword [edi]
push dword [edx + 0x1c]
push dword [edx + 0x18]
push edi
call fcn.006bb5b0
add esp, 0xc
test eax, eax
mov ecx, dword [esi + 4]
mov edx, dword [esi + 8]
je 0x6b76de
cmp dword [ecx + edx + 0x94], 0
jne 0x6b76de
mov dword [ecx + edx + 0xa8], eax
jmp 0x6b5e56
test byte [esi + 0x20], 1
je 0x6b76d4
call fcn.006bb5f0
cmp eax, 4
je 0x6b76d4
mov eax, dword [esi + 0x18]
mov eax, dword [eax + 4]
mov ecx, 0xf00
and eax, ecx
cmp eax, 0x100
je 0x6b5f97
cmp eax, 0x400
je 0x6b5e41
cmp eax, 0x200
je 0x6b5e41
jmp 0x6b5e4c
mov eax, 0x11
jmp 0x6b5e46
lea ecx, [esi + 0x148]
push 1
call fcn.005440b0
mov dword [esi + 0x124], 0xabd9cc
mov dword [esi + 0x128], 0
mov dword [esi + 0x12c], 0
mov dword [esi + 0x130], 0
mov byte [esi + 0x134], 1
pxor xmm0, xmm0
lea eax, [esi + 0x138]
movdqu xmmword [eax], xmm0
mov eax, dword [esi + 0x108]
cmp eax, dword [esi + 0xdc]
je 0x6b6030
mov dword [esi + 0x208], 0x11
mov ecx, dword [esi + 0x100]
call fcn.0053e080
mov ecx, eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x130], eax
mov dword [esi + 0x12c], eax
jmp 0x6b6032
xor ecx, ecx
mov ebx, dword [esi + 0xc]
mov dword [esi + 0x128], ecx
cmp dword [esi + 0xd8], 0
jle 0x6b6177
mov eax, dword [esi + 0x6c]
lea edx, [eax*4]
add edx, dword [ebx + 0x2c4]
xor edi, edi
mov eax, dword [esi + 0x12c]
cmp dword [esi + 0xd8], 0x180
mov dword [esi + 8], eax
jl 0x6b6123
xor ebx, ebx
xor edi, edi
mov dword [esi + 0x1c], ecx
mov dword [esi + 4], edx
nop dword [eax]
mov eax, dword [esi + 4]
mov edx, dword [eax]
cmp dword [esi + 8], edi
mov eax, 0
cmova eax, edi
mov dword [0xb33f4c], 0x950cb33e
lea eax, [eax + eax*4]
mov dword [esi + 0x18], eax
movsd xmm0, qword [edx + ebx + 0x24]
mov ecx, dword [esi + 0x1c]
movsd qword [ecx + eax*8 + 0x20], xmm0
movups xmm0, xmmword [edx + ebx + 4]
movups xmm1, xmmword [edx + ebx + 0x14]
movups xmmword [ecx + eax*8 + 0x10], xmm1
lea edx, [edi + 1]
cmp dword [esi + 8], edx
mov eax, 0
cmovbe edx, eax
mov eax, dword [esi + 0x18]
movups xmmword [ecx + eax*8], xmm0
mov eax, dword [esi + 4]
mov eax, dword [eax]
lea edx, [edx + edx*4]
movdqu xmm0, xmmword [eax + ebx + 0xc4]
movups xmm1, xmmword [eax + ebx + 0xd4]
movups xmmword [ecx + edx*8 + 0x10], xmm1
movsd xmm1, qword [eax + ebx + 0xe4]
movsd qword [ecx + edx*8 + 0x20], xmm1
movdqu xmmword [ecx + edx*8], xmm0
mov edx, dword [esi + 4]
add edi, 2
add ebx, 0x180
cmp edi, dword [esi + 0xc0]
jne 0x6b6080
mov ebx, dword [esi + 0xc]
mov ecx, dword [esi + 0x1c]
test byte [esi + 0xfc], 1
je 0x6b6177
lea eax, [edi + edi*2]
shl eax, 6
cmp dword [esi + 8], edi
mov edx, dword [edx]
mov dword [esi + 4], edx
mov edx, 0
cmovbe edi, edx
mov edx, ecx
lea ecx, [edi + edi*4]
mov edi, dword [esi + 4]
movsd xmm0, qword [edi + eax + 0x24]
movsd qword [edx + ecx*8 + 0x20], xmm0
movdqu xmm0, xmmword [edi + eax + 4]
movups xmm1, xmmword [edi + eax + 0x14]
movups xmmword [edx + ecx*8 + 0x10], xmm1
movdqu xmmword [edx + ecx*8], xmm0
mov ecx, edx
mov dword [esi + 0x208], 0xffffffff
mov eax, dword [esi + 0x12c]
test eax, eax
cmove ecx, eax
mov eax, dword [ebx]
mov ebx, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov edi, ecx
mov ecx, ebx
call dword [0xb0836c]
mov dword [esi + 0x208], 0x12
mov ecx, dword [esi + 0xc]
push dword [esi + 0x2c]
push edi
push 0x20
lea eax, [esi + 0x70]
push eax
call ebx
mov eax, dword [esi + 0x70]
cmp dword [esi + 0x64], 0
setne byte [esi + 0x24]
cmp eax, 4
mov ebx, dword [esi + 0xc]
je 0x6b7660
cmp eax, 8
jne 0x6b61e6
mov dword [esi + 0x208], 0xffffffff
mov dword [esi + 4], 1
jmp 0x6b7674
mov eax, dword [ebx]
mov edi, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0x12
mov ecx, ebx
push 0
push 0
push 9
lea eax, [esi + 0x70]
push eax
call edi
cmp dword [esi + 0x70], 4
jne 0x6b625d
mov ebx, dword [esi + 0xc]
mov eax, dword [ebx]
mov edi, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0x12
mov ecx, ebx
push 0
push 0
push 8
lea eax, [esi + 0x70]
push eax
call edi
cmp dword [esi + 0x70], 4
sete al
mov dword [esi + 0x30], eax
mov byte [esi + 0x24], 1
jmp 0x6b6264
mov dword [esi + 0x30], 0
mov ebx, dword [esi + 0xc]
mov eax, dword [ebx]
mov edi, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0x12
mov ecx, ebx
push 0
push dword [esi + 0xd4]
push 6
lea eax, [esi + 0x70]
push eax
call edi
mov ebx, dword [esi + 0xc]
mov eax, dword [ebx]
mov edi, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0x12
mov ecx, ebx
push 0
push dword [esi + 0xd0]
push 7
lea eax, [esi + 0x70]
push eax
call edi
mov dword [esi + 0x54], 0
mov dword [esi + 0x50], 0
movzx eax, byte [0xb33c8b]
cmp al, 0x2a
mov cl, 0x79
je 0x6b636b
nop
mov al, 0x7f
lock cmpxchg byte [0xb33c8b], cl
je 0x6b6302
cmp al, 0x2a
jne 0x6b62f0
jmp 0x6b636b
movaps xmm0, xmmword [0xb33c60]
xorps xmm0, xmmword [0xabd970]
movaps xmmword [0xb33c60], xmm0
movaps xmm0, xmmword [0xb33c70]
xorps xmm0, xmmword [0xabd980]
movaps xmmword [0xb33c70], xmm0
movq xmm0, qword [0xb33c80]
pxor xmm0, xmmword [0xabd990]
movq qword [0xb33c80], xmm0
xor byte [0xb33c88], 0x98
xor byte [0xb33c89], 0xf7
xor byte [0xb33c8a], 0x18
mov al, 0x2a
xchg byte [0xb33c8b], al
mov dword [esi + 0x208], 0x12
mov dword [esi + 0x208], 0x12
push 0xb33c60
lea eax, [esi + 0x158]
push eax
call fcn.005442b0
add esp, 8
push eax
call fcn.0065a500
add esp, 4
mov al, 1
mov dword [esi + 0x28], eax
mov dword [esi + 0x18], 0
xor edi, edi
cmp edi, dword [esi + 0x2c]
mov ecx, dword [esi + 0xc]
jge 0x6b6c49
mov eax, dword [ecx + 0x2c4]
mov edx, dword [esi + 0x6c]
mov eax, dword [eax + edx*4]
mov dword [esi + 8], eax
cmp dword [ecx + 0x304], 0x4e4
mov dword [esi + 4], edi
jne 0x6b6400
movzx eax, byte [0xb33c93]
cmp al, 0x17
mov cl, 0xa0
je 0x6b6459
nop dword [eax + eax]
mov al, 0xf9
lock cmpxchg byte [0xb33c93], cl
je 0x6b6432
cmp al, 0x17
jne 0x6b63e0
jmp 0x6b6459
movzx eax, byte [0xb33ca3]
cmp al, 0x6f
mov cl, pe_nt_image_headers32
je 0x6b64a0
nop word cs:[eax + eax]
mov al, 0x38
lock cmpxchg byte [0xb33ca3], cl
je 0x6b6479
cmp al, 0x6f
jne 0x6b6420
jmp 0x6b64a0
xor byte [0xb33c90], 0x46
xor byte [0xb33c91], 0x13
xor byte [0xb33c92], 0x37
mov al, 0x17
xchg byte [0xb33c93], al
mov dword [esi + 0x208], 0x12
mov dword [esi + 0x208], 0x12
push 0xb33c90
lea eax, [esi + 0x158]
push eax
call fcn.005442b0
add esp, 8
jmp 0x6b64be
xor byte [0xb33ca0], 0x24
xor byte [0xb33ca1], 0x85
xor byte [0xb33ca2], 0xf2
mov al, 0x6f
xchg byte [0xb33ca3], al
mov dword [esi + 0x208], 0x12
mov dword [esi + 0x208], 0x12
push 0xb33ca0
lea eax, [esi + 0x158]
push eax
call fcn.005442b0
add esp, 8
mov eax, dword [esi + 4]
lea ecx, [eax + eax*2]
shl ecx, 6
mov eax, dword [esi + 8]
mov dword [esi + 0x1c], ecx
add ecx, eax
mov eax, dword [esi + 0x18]
or eax, dword [ecx + 4]
mov dword [esi + 0x18], eax
mov dword [esi + 0x20], ecx
lea edx, [esi + 0x70]
call fcn.005ad0d0
cmp dword [esi + 0x88], 0x10
lea eax, [esi + 0x74]
jb 0x6b64f2
mov eax, dword [esi + 0x74]
mov ecx, dword [esi + 0x84]
mov dword [esi + 0x208], 0x16
push ecx
push eax
lea eax, [esi + 0x158]
push eax
call fcn.00652be0
add esp, 0xc
mov eax, dword [esi + 0x88]
cmp eax, 0x10
jb 0x6b657c
mov edi, dword [esi + 0x74]
lea ecx, [eax + 1]
cmp ecx, 0x1000
jb 0x6b6550
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x6b78a0
add eax, 0x24
mov dword [esi + 0x68], eax
mov edi, ecx
jmp 0x6b6553
mov dword [esi + 0x68], ecx
mov eax, dword [0xb34fcc]
mov ebx, dword [0xb34f80]
add ebx, dword [esi + 0x10]
add ebx, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, edi
mov edx, dword [esi + 0x68]
call ebx
cmp byte [esi + 0x24], 0
je 0x6b6c27
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x1c]
mov edx, dword [eax + ecx + 0xa8]
mov eax, dword [esi + 0x58]
mov ecx, dword [esi + 4]
mov dword [eax + ecx*4], edx
test edx, edx
jns 0x6b65b5
mov word [esi + 0x54], 0
mov byte [esi + 0x56], 0
mov eax, dword [esi + 0x28]
and al, 1
mov byte [esi + 0x57], al
mov dword [esi + 0x50], edx
cmp byte [esi + 0x30], 0
mov dword [esi + 8], edx
je 0x6b6650
mov dword [esi + 0x84], 0
mov dword [esi + 0x88], 0xf
mov byte [esi + 0x74], 0
mov dword [esi + 0x70], 0x799e70
mov dword [esi + 0x208], 0x17
test edx, edx
js 0x6b6608
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x20]
lea eax, [esi + 0x50]
push eax
lea eax, [esi + 0x70]
push eax
push dword [esi + 8]
call fcn.006bb600
add esp, 0xc
lea eax, [esi + 0x158]
push eax
call fcn.0065a500
add esp, 4
mov ecx, eax
movzx eax, byte [0xb33cc4]
cmp al, 0x68
mov dl, 0x66
je 0x6b676b
nop word [eax + eax]
mov al, 1
lock cmpxchg byte [0xb33cc4], dl
je 0x6b6729
cmp al, 0x68
jne 0x6b6630
jmp 0x6b676b
mov dword [esi + 0x208], 0x12
mov ecx, dword [esi + 0x20]
call fcn.006bb620
mov dword [esi + 0x1c], eax
movzx eax, byte [0xb33cd9]
cmp al, 0x3f
mov cl, 0x99
je 0x6b66c3
nop word cs:[eax + eax]
mov al, 0xdf
lock cmpxchg byte [0xb33cd9], cl
je 0x6b6692
cmp al, 0x3f
jne 0x6b6680
jmp 0x6b66c3
movq xmm0, qword [0xb33cd0]
pxor xmm0, xmmword [0xabd900]
movq qword [0xb33cd0], xmm0
xor byte [0xb33cd8], 0xcd
mov al, 0x3f
xchg byte [0xb33cd9], al
mov dword [esi + 0x208], 0x12
mov dword [esi + 0x208], 0x12
push 0xb33cd0
lea eax, [esi + 0x158]
push eax
call fcn.005442b0
add esp, 8
mov ecx, dword [esi + 0x1c]
push ecx
push eax
call fcn.005442b0
add esp, 8
mov ecx, eax
push dword [esi + 8]
call fcn.00651f10
mov ecx, eax
movzx eax, byte [0xb33ce2]
cmp al, 0xf2
mov dl, 0x3c
je 0x6b68d1
nop dword [eax + eax]
mov al, 0x45
lock cmpxchg byte [0xb33ce2], dl
je 0x6b68b1
cmp al, 0xf2
jne 0x6b6710
jmp 0x6b68d1
movdqa xmm0, xmmword [0xb33cb0]
paddb xmm0, xmmword [0xabd910]
movdqa xmmword [0xb33cb0], xmm0
movdqa xmm0, xmmword [0xb33cc0]
paddb xmm0, xmmword [0xabd920]
movd dword [0xb33cc0], xmm0
mov al, 0x68
xchg byte [0xb33cc4], al
mov dword [esi + 0x208], 0x17
mov dword [esi + 0x208], 0x17
push 0xb33cb0
push ecx
call fcn.005442b0
add esp, 8
mov dword [esi + 0xc8], 0
mov ebx, dword [esi + 0xc]
mov eax, dword [ebx]
mov edi, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0x17
mov ecx, ebx
lea eax, [esi + 0xc8]
push eax
lea eax, [esi + 0x50]
push eax
push 0xa
lea eax, [esi + 0x34]
push eax
call edi
cmp dword [esi + 0x34], 4
jne 0x6b6887
cmp dword [esi + 8], 0
js 0x6b6b89
lea ecx, [esi + 0x160]
lea eax, [esi + 0xe0]
push eax
call fcn.0055d5e0
mov dword [esi + 0x208], 0x18
lea ecx, [esi + 0x160]
lea eax, [esi + 0x10c]
push eax
call fcn.0055d5e0
mov ecx, dword [esi + 0x11c]
mov dword [esi + 0x44], 0
mov dword [esi + 0x48], 0xf
mov byte [esi + 0x34], 0
mov edi, dword [esi + 0xf0]
sub edi, ecx
jb 0x6b78af
cmp dword [esi + 0xf4], 0x10
lea eax, [esi + 0xe0]
jb 0x6b6843
mov eax, dword [esi + 0xe0]
add eax, ecx
cmp edi, 0xf
jbe 0x6b68ee
mov dword [esi + 0x208], 0x19
sub esp, 0xc
movzx ecx, byte [esi + 0xcc]
mov byte [esp + 4], cl
mov dword [esp + 8], eax
mov dword [esp], edi
lea ecx, [esi + 0x34]
call fcn.0052ce20
test byte [esi + 0x19c], 1
jne 0x6b6911
jmp 0x6b699e
cmp dword [esi + 0x88], 0x10
lea eax, [esi + 0x74]
jb 0x6b6896
mov eax, dword [esi + 0x74]
push dword [esi + 0x84]
push eax
lea eax, [esi + 0x158]
push eax
call fcn.00652be0
add esp, 0xc
jmp 0x6b6b9e
add byte [0xb33ce0], 0xa7
add byte [0xb33ce1], 0x47
mov al, 0xf2
xchg byte [0xb33ce2], al
mov dword [esi + 0x208], 0x12
mov dword [esi + 0x208], 0x12
push 0xb33ce0
push ecx
call fcn.005442b0
add esp, 8
jmp 0x6b6c27
mov dword [esi + 0x44], edi
push edi
push eax
lea eax, [esi + 0x34]
push eax
call fcn.0077cce0
add esp, 0xc
mov byte [esi + edi + 0x34], 0
test byte [esi + 0x19c], 1
je 0x6b699e
mov eax, dword [esi + 0x180]
mov edi, dword [eax]
lea eax, [esi + 0x190]
test edi, edi
jne 0x6b6931
mov eax, dword [esi + 0x17c]
mov edi, dword [eax]
lea eax, [esi + 0x18c]
mov eax, dword [eax]
add edi, dword [eax]
mov eax, dword [esi + 0x16c]
mov ecx, dword [eax]
sub edi, ecx
cmp edi, 0x1000
jb 0x6b6972
mov eax, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, eax
cmp ecx, 0x20
jae 0x6b78f9
mov ecx, edi
xor ecx, 0x23
and edi, 0x23
lea edi, [ecx + edi*2]
mov dword [esi + 0x208], 0xffffffff
mov dword [esi + 8], eax
jmp 0x6b6975
mov dword [esi + 8], ecx
mov eax, dword [0xb34fcc]
mov ebx, dword [0xb34f80]
add ebx, dword [esi + 0x10]
add ebx, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, dword [esi + 8]
mov edx, edi
call ebx
mov eax, dword [esi + 0x16c]
mov dword [eax], 0
mov eax, dword [esi + 0x17c]
mov dword [eax], 0
mov eax, dword [esi + 0x18c]
mov dword [eax], 0
mov eax, dword [esi + 0x170]
mov dword [eax], 0
mov eax, dword [esi + 0x180]
mov dword [eax], 0
mov eax, dword [esi + 0x190]
mov dword [eax], 0
mov dword [esi + 0x198], 0
mov eax, dword [esi + 0x19c]
and eax, 0xfffffffe
mov dword [esi + 0x19c], eax
mov edx, dword [esi + 0x44]
cmp dword [esi + 0x48], 0x10
lea edi, [esi + 0x34]
jb 0x6b6a0e
mov edi, dword [esi + 0x34]
mov dword [esi + 0x208], 0x1a
lea ecx, [esi + 0x160]
push eax
push edx
push edi
call fcn.006bb4e0
mov eax, dword [esi + 0x48]
cmp eax, 0x10
jb 0x6b6a8b
mov edi, dword [esi + 0x34]
lea ecx, [eax + 1]
cmp ecx, 0x1000
jb 0x6b6a5f
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x6b7908
mov edx, eax
xor edx, 0x24
and eax, 0x24
lea eax, [edx + eax*2]
mov dword [esi + 8], eax
mov edi, ecx
jmp 0x6b6a62
mov dword [esi + 8], ecx
mov eax, dword [0xb34fcc]
mov ebx, dword [0xb34f80]
add ebx, dword [esi + 0x10]
add ebx, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, edi
mov edx, dword [esi + 8]
call ebx
mov dword [esi + 0x44], 0
mov dword [esi + 0x48], 0xf
mov byte [esi + 0x34], 0
mov eax, dword [esi + 0x120]
cmp eax, 0x10
jb 0x6b6b0a
mov edi, dword [esi + 0x10c]
lea ecx, [eax + 1]
cmp ecx, 0x1000
jb 0x6b6ade
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x6b7917
add eax, 0x24
mov dword [esi + 0x208], 0xffffffff
mov dword [esi + 8], eax
mov edi, ecx
jmp 0x6b6ae1
mov dword [esi + 8], ecx
mov eax, dword [0xb34fcc]
mov ebx, dword [0xb34f80]
add ebx, dword [esi + 0x10]
add ebx, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, edi
mov edx, dword [esi + 8]
call ebx
mov eax, dword [esi + 0xf4]
cmp eax, 0x10
jb 0x6b6b7f
mov edi, dword [esi + 0xe0]
lea ecx, [eax + 1]
cmp ecx, 0x1000
jb 0x6b6b53
mov ecx, dword [edi - 4]
mov edx, edi
xor edx, 0xfffffffc
and edi, 0xfffffffc
lea edx, [edx + edi*2]
sub edx, ecx
cmp edx, 0x20
jae 0x6b7926
add eax, 0x24
mov dword [esi + 0x208], 0xffffffff
mov dword [esi + 8], eax
mov edi, ecx
jmp 0x6b6b56
mov dword [esi + 8], ecx
mov eax, dword [0xb34fcc]
mov ebx, dword [0xb34f80]
add ebx, dword [esi + 0x10]
add ebx, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, edi
mov edx, dword [esi + 8]
call ebx
mov dword [esi + 0x208], 0x17
push dword [esi + 0xc8]
lea eax, [esi + 0x158]
push eax
call fcn.005442b0
add esp, 8
cmp byte [esi + 0x57], 0
mov ecx, dword [esi + 0x28]
movzx ecx, cl
mov eax, 0
cmove ecx, eax
mov dword [esi + 0x28], ecx
mov eax, dword [esi + 0x88]
cmp eax, 0x10
jb 0x6b6c1d
mov edi, dword [esi + 0x74]
mov ecx, eax
xor ecx, 1
mov edx, eax
and edx, 1
lea ecx, [ecx + edx*2]
cmp ecx, 0x1000
jb 0x6b6bf1
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x6b78be
add eax, 0x24
mov dword [esi + 8], eax
mov edi, ecx
jmp 0x6b6bf4
mov dword [esi + 8], ecx
mov eax, dword [0xb34fcc]
mov ebx, dword [0xb34f80]
add ebx, dword [esi + 0x10]
add ebx, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, edi
mov edx, dword [esi + 8]
call ebx
mov dword [esi + 0x208], 0x12
mov dword [esi + 0x208], 0x12
lea eax, [esi + 0x158]
push eax
call fcn.0065a500
add esp, 4
mov edi, dword [esi + 4]
inc edi
jmp 0x6b63a0
test byte [esi + 0x28], 1
je 0x6b6feb
mov dword [esi + 0x10c], 0
mov ebx, dword [esi + 0xc]
mov eax, dword [ebx]
mov edi, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0x12
mov ecx, ebx
lea eax, [esi + 0x10c]
push eax
lea eax, [esi + 0x50]
push eax
push 0xb
lea eax, [esi + 0x70]
push eax
call edi
cmp dword [esi + 0x70], 4
jne 0x6b6feb
lea ecx, [esi + 0x160]
lea eax, [esi + 0x34]
push eax
call fcn.0055d5e0
mov dword [esi + 0x208], 0x13
lea ecx, [esi + 0x160]
lea eax, [esi + 0xe0]
push eax
call fcn.0055d5e0
mov ecx, dword [esi + 0xf0]
mov dword [esi + 0x80], 0
mov dword [esi + 0x84], 0xf
mov byte [esi + 0x70], 0
mov edi, dword [esi + 0x44]
sub edi, ecx
jb 0x6b7935
cmp dword [esi + 0x48], 0x10
lea eax, [esi + 0x34]
jb 0x6b6d00
mov eax, dword [esi + 0x34]
add eax, ecx
cmp edi, 0xf
jbe 0x6b6d3c
mov dword [esi + 0x208], 0x14
sub esp, 0xc
movzx ecx, byte [esi + 0xc8]
mov byte [esp + 4], cl
mov dword [esp + 8], eax
mov dword [esp], edi
lea ecx, [esi + 0x70]
call fcn.0052ce20
test byte [esi + 0x19c], 1
jne 0x6b6d62
jmp 0x6b6de9
mov dword [esi + 0x80], edi
push edi
push eax
lea eax, [esi + 0x70]
push eax
call fcn.0077cce0
add esp, 0xc
mov byte [esi + edi + 0x70], 0
test byte [esi + 0x19c], 1
je 0x6b6de9
mov eax, dword [esi + 0x180]
mov ecx, dword [eax]
lea eax, [esi + 0x190]
test ecx, ecx
jne 0x6b6d82
mov eax, dword [esi + 0x17c]
mov ecx, dword [eax]
lea eax, [esi + 0x18c]
mov eax, dword [eax]
add ecx, dword [eax]
mov eax, dword [esi + 0x16c]
mov ebx, dword [eax]
sub ecx, ebx
cmp ecx, 0x1000
jb 0x6b6dbd
mov eax, dword [ebx - 4]
add ebx, 0xfffffffc
sub ebx, eax
cmp ebx, 0x20
jae 0x6b7980
add ecx, 0x23
mov dword [esi + 4], ecx
mov dword [esi + 0x208], 0xffffffff
mov ebx, eax
jmp 0x6b6dc0
mov dword [esi + 4], ecx
mov eax, dword [0xb34fcc]
mov edi, dword [0xb34f80]
add edi, dword [esi + 0x10]
add edi, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov ecx, ebx
mov edx, dword [esi + 4]
call edi
mov eax, dword [esi + 0x16c]
mov dword [eax], 0
mov eax, dword [esi + 0x17c]
mov dword [eax], 0
mov eax, dword [esi + 0x18c]
mov dword [eax], 0
mov eax, dword [esi + 0x170]
mov dword [eax], 0
mov eax, dword [esi + 0x180]
mov dword [eax], 0
mov eax, dword [esi + 0x190]
mov dword [eax], 0
mov dword [esi + 0x198], 0
mov eax, dword [esi + 0x19c]
and eax, 0xfffffffe
mov dword [esi + 0x19c], eax
mov edx, dword [esi + 0x80]
cmp dword [esi + 0x84], 0x10
lea edi, [esi + 0x70]
jb 0x6b6e5f
mov edi, dword [esi + 0x70]
mov dword [esi + 0x208], 0x15
lea ecx, [esi + 0x160]
push eax
push edx
push edi
call fcn.006bb4e0
mov eax, dword [esi + 0x84]
cmp eax, 0x10
jb 0x6b6ed7
mov edi, dword [esi + 0x70]
lea ecx, [eax + 1]
cmp ecx, 0x1000
jb 0x6b6eab
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x6b798f
add eax, 0x24
mov dword [esi + 4], eax
mov edi, ecx
jmp 0x6b6eae
mov dword [esi + 4], ecx
mov eax, dword [0xb34fcc]
mov ebx, dword [0xb34f80]
add ebx, dword [esi + 0x10]
add ebx, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, edi
mov edx, dword [esi + 4]
call ebx
mov dword [esi + 0x80], 0
mov dword [esi + 0x84], 0xf
mov byte [esi + 0x70], 0
mov eax, dword [esi + 0xf4]
cmp eax, 0x10
jb 0x6b6f5c
mov edi, dword [esi + 0xe0]
lea ecx, [eax + 1]
cmp ecx, 0x1000
jb 0x6b6f30
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x6b799e
add eax, 0x24
mov dword [esi + 0x208], 0xffffffff
mov dword [esi + 4], eax
mov edi, ecx
jmp 0x6b6f33
mov dword [esi + 4], ecx
mov eax, dword [0xb34fcc]
mov ebx, dword [0xb34f80]
add ebx, dword [esi + 0x10]
add ebx, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, edi
mov edx, dword [esi + 4]
call ebx
mov eax, dword [esi + 0x48]
cmp eax, 0x10
jb 0x6b6fcb
mov edi, dword [esi + 0x34]
lea ecx, [eax + 1]
cmp ecx, 0x1000
jb 0x6b6f9f
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x6b79ad
mov edx, eax
xor edx, 0x24
and eax, 0x24
lea eax, [edx + eax*2]
mov dword [esi + 4], eax
mov dword [esi + 0x208], 0xffffffff
mov edi, ecx
jmp 0x6b6fa2
mov dword [esi + 4], ecx
mov eax, dword [0xb34fcc]
mov ebx, dword [0xb34f80]
add ebx, dword [esi + 0x10]
add ebx, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, edi
mov edx, dword [esi + 4]
call ebx
mov eax, dword [esi + 0x10c]
mov dword [esi + 0x208], 0x12
push eax
lea eax, [esi + 0x158]
push eax
call fcn.005442b0
add esp, 8
lea ecx, [esi + 0x160]
lea eax, [esi + 0x70]
push eax
call fcn.0055d5e0
mov dword [esi + 0x48], 0
mov dword [esi + 0x4c], 0
cmp dword [esi + 0x84], 0x10
lea eax, [esi + 0x70]
jb 0x6b7017
mov eax, dword [esi + 0x70]
mov edi, dword [esi + 0x80]
cmp edi, 0xf
mov ebx, dword [esi + 0xc]
ja 0x6b7037
movdqu xmm0, xmmword [eax]
lea eax, [esi + 0x38]
movdqu xmmword [eax], xmm0
mov eax, 0xf
jmp 0x6b70a7
mov dword [esi + 8], eax
mov dword [esi + 4], edi
or edi, 0xf
cmp edi, 0x7fffffff
mov eax, 0x7fffffff
cmovae edi, eax
cmp edi, 0xfff
mov dword [esi + 0x1c], edi
jb 0x6b7078
lea ecx, [edi + 0x24]
mov dword [esi + 0x208], 0x1d
call fcn.0053d610
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x6b708a
lea ecx, [edi + 1]
mov dword [esi + 0x208], 0x1d
call fcn.0053d610
mov ebx, dword [esi + 0xc]
mov edi, dword [esi + 4]
mov edx, dword [esi + 8]
mov dword [esi + 0x38], eax
lea ecx, [edi + 1]
push ecx
push edx
push eax
call fcn.0077cce0
add esp, 0xc
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x48], edi
mov dword [esi + 0x4c], eax
mov dword [esi + 0x34], 0x799e70
mov eax, dword [esi + 0x84]
cmp eax, 0x10
jb 0x6b7121
mov edi, dword [esi + 0x70]
lea ecx, [eax + 1]
cmp ecx, 0x1000
jb 0x6b70f2
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x6b7944
add eax, 0x24
mov dword [esi + 0x208], 0xffffffff
mov dword [esi + 4], eax
mov edi, ecx
jmp 0x6b70f5
mov dword [esi + 4], ecx
mov eax, dword [0xb34fcc]
mov ebx, dword [0xb34f80]
add ebx, dword [esi + 0x10]
add ebx, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, edi
mov edx, dword [esi + 4]
call ebx
mov ebx, dword [esi + 0xc]
cmp dword [esi + 0x4c], 0x10
lea edx, [esi + 0x38]
jb 0x6b712d
mov edx, dword [esi + 0x38]
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
mov dword [esi + 4], ecx
mov dword [esi + 0x208], 0xffffffff
mov edi, ebx
mov ebx, edx
call dword [0xb0836c]
mov dword [esi + 0x208], 0x1b
mov ecx, edi
push 0
mov dword [esi + 0x1c], ebx
push ebx
push 0x21
lea eax, [esi + 0x70]
push eax
call dword [esi + 4]
mov eax, dword [esi + 0x70]
cmp eax, 4
mov ebx, dword [esi + 0xc]
je 0x6b717e
cmp eax, 8
jne 0x6b7188
mov edx, 0x12
jmp 0x6b75cf
mov edx, 0x11
jmp 0x6b75cf
movzx eax, byte [0xb33d0d]
cmp al, 0xeb
mov cl, 0xc5
je 0x6b7214
nop word cs:[eax + eax]
mov al, 0x28
lock cmpxchg byte [0xb33d0d], cl
je 0x6b71b2
cmp al, 0xeb
jne 0x6b71a0
jmp 0x6b7214
movaps xmm0, xmmword [0xb33cf0]
xorps xmm0, xmmword [0xabd930]
movaps xmmword [0xb33cf0], xmm0
movq xmm0, qword [0xb33d00]
pxor xmm0, xmmword [0xabd940]
movq qword [0xb33d00], xmm0
xor byte [0xb33d08], 0x98
xor byte [0xb33d09], 0x3a
xor byte [0xb33d0a], 0x1b
xor byte [0xb33d0b], 0xb0
xor byte [0xb33d0c], 0xb9
mov al, 0xeb
xchg byte [0xb33d0d], al
mov dword [esi + 0x208], 0xffffffff
mov dword [esi + 0xe0], 0xb33cf0
mov eax, dword [ebx]
mov edi, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0x1b
mov ecx, ebx
push 0
lea eax, [esi + 0xe0]
push eax
push 4
lea eax, [esi + 0x70]
push eax
call edi
mov ebx, dword [esi + 0xc]
mov eax, dword [ebx]
mov edi, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0x1b
mov ecx, ebx
push dword [esi + 0x64]
lea eax, [esi + 0x50]
push eax
push 2
lea eax, [esi + 0x70]
push eax
call edi
mov ecx, dword [esi + 0x70]
mov eax, dword [esi + 0x64]
mov ebx, dword [esi + 0xc]
cmp eax, dword [ebx + 0x308]
setb al
cmp ecx, 8
je 0x6b72ee
cmp ecx, 4
jne 0x6b72a5
mov al, 1
xor ecx, ecx
cmp byte [ebp + 0xc], 0
je 0x6b72f2
test al, al
je 0x6b72f2
mov eax, dword [ebx]
mov edi, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0x1b
mov ecx, ebx
push 0
push 0
push 3
lea eax, [esi + 0x70]
push eax
call edi
cmp dword [esi + 0x70], 4
sete cl
mov al, 1
mov ebx, dword [esi + 0xc]
jmp 0x6b72f2
xor eax, eax
xor ecx, ecx
mov dword [esi + 0x98], 0
mov dword [esi + 0x9c], 0xf
mov byte [esi + 0x88], 0
mov dword [esi + 0x84], 0x799e70
mov dword [esi + 0xb4], 0
mov dword [esi + 0xb8], 0xf
mov byte [esi + 0xa4], 0
mov dword [esi + 0xa0], 0x799e70
mov edx, dword [ebp + 8]
mov dword [esi + 0x70], edx
mov dword [esi + 0x74], 1
mov dword [esi + 0x78], 4
test al, al
je 0x6b7366
test cl, cl
mov eax, 0x22
mov ecx, 0xb0
cmovne eax, ecx
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x58]
mov ecx, dword [esi + 0x5c]
mov dword [esi + 4], eax
sub ecx, eax
test ecx, ecx
jle 0x6b7427
shr ecx, 2
mov eax, dword [ebx + 0x2c4]
mov edx, dword [esi + 0x6c]
mov edi, dword [eax + edx*4]
cmp ecx, 2
mov eax, 1
cmovl ecx, eax
add edi, 4
xor eax, eax
xor edx, edx
mov dword [esi + 8], 0
jmp 0x6b73bd
mov eax, ebx
inc edx
add edi, 0xc0
cmp ecx, edx
je 0x6b7421
mov ebx, dword [edi]
cmp ebx, 0x100
je 0x6b7410
cmp ebx, 0x400
je 0x6b73d7
cmp ebx, 0x200
jne 0x6b73b2
mov ebx, dword [esi + 4]
mov ebx, dword [ebx + edx*4]
test eax, eax
je 0x6b73b0
cmp ebx, 0x65
je 0x6b73b2
cmp eax, 0x65
je 0x6b73b0
cmp eax, 0xc8
je 0x6b73b0
cmp ebx, 0xc8
je 0x6b73b2
cmp ebx, eax
mov ebx, 0xe6
cmovne eax, ebx
jmp 0x6b73b2
cmp dword [esi + 8], 0
jne 0x6b73b2
mov ebx, dword [esi + 4]
mov ebx, dword [ebx + edx*4]
mov dword [esi + 8], ebx
jmp 0x6b73b2
test eax, eax
jne 0x6b743b
jmp 0x6b742e
mov dword [esi + 8], 0
mov dword [esi + 0x208], 0x1c
mov eax, dword [esi + 8]
mov dword [esi + 0x7c], eax
mov eax, dword [esi + 0x18]
mov dword [esi + 0x80], eax
mov edx, dword [esi + 0xe0]
mov dword [esi + 0x208], 0x1c
lea ecx, [esi + 0x84]
call fcn.0055d910
lea ecx, [esi + 0xa0]
mov edx, dword [esi + 0x1c]
call fcn.0055d910
mov byte [esi + 0xbc], 1
mov ebx, dword [esi + 0xc]
mov eax, dword [ebx]
mov edi, dword [eax + 4]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0x1c
mov ecx, ebx
push 0
lea eax, [esi + 0x70]
push eax
push 0
lea eax, [esi + 0x10c]
push eax
call edi
mov eax, dword [esi + 0x10c]
cmp eax, 0x20
mov ebx, dword [esi + 0xc]
je 0x6b74ce
cmp eax, 0x80
jne 0x6b74ca
or dword [ebx + 0x70], 0x200
xor edx, edx
jmp 0x6b74d3
mov edx, 0x11
mov eax, dword [esi + 0xb8]
cmp eax, 0x10
mov dword [esi + 4], edx
jb 0x6b753c
mov edi, dword [esi + 0xa4]
lea ecx, [eax + 1]
cmp ecx, 0x1000
jb 0x6b750d
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x6b7962
add eax, 0x24
mov dword [esi + 8], eax
mov edi, ecx
jmp 0x6b7510
mov dword [esi + 8], ecx
mov eax, dword [0xb34fcc]
mov ebx, dword [0xb34f80]
add ebx, dword [esi + 0x10]
add ebx, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, edi
mov edx, dword [esi + 8]
call ebx
mov edx, dword [esi + 4]
mov dword [esi + 0xb4], 0
mov dword [esi + 0xb8], 0xf
mov byte [esi + 0xa4], 0
mov eax, dword [esi + 0x9c]
cmp eax, 0x10
jb 0x6b75cf
mov edi, dword [esi + 0x88]
lea ecx, [eax + 1]
cmp ecx, 0x1000
jb 0x6b75a0
mov ecx, dword [edi - 4]
mov edx, edi
xor edx, 0xfffffffc
and edi, 0xfffffffc
lea edx, [edx + edi*2]
sub edx, ecx
cmp edx, 0x20
jae 0x6b7971
add eax, 0x24
mov dword [esi + 0x208], 0xffffffff
mov dword [esi + 8], eax
mov edi, ecx
jmp 0x6b75a3
mov dword [esi + 8], ecx
mov eax, dword [0xb34fcc]
mov ebx, dword [0xb34f80]
add ebx, dword [esi + 0x10]
add ebx, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, edi
mov edx, dword [esi + 8]
call ebx
mov edx, dword [esi + 4]
mov eax, dword [esi + 0x4c]
cmp eax, 0x10
jb 0x6b763c
mov edi, dword [esi + 0x38]
lea ecx, [eax + 1]
cmp ecx, 0x1000
mov dword [esi + 4], edx
jb 0x6b760d
mov ecx, dword [edi - 4]
add edi, 0xfffffffc
sub edi, ecx
cmp edi, 0x20
jae 0x6b7953
add eax, 0x24
mov dword [esi + 0x208], 0xffffffff
mov dword [esi + 8], eax
mov edi, ecx
jmp 0x6b7610
mov dword [esi + 8], ecx
mov eax, dword [0xb34fcc]
mov ebx, dword [0xb34f80]
add ebx, dword [esi + 0x10]
add ebx, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, edi
mov edx, dword [esi + 8]
call ebx
mov edx, dword [esi + 4]
cmp edx, 0x12
je 0x6b61d0
cmp edx, 0x11
je 0x6b7660
test edx, edx
je 0x6b61d0
mov dword [esi + 4], edx
jmp 0x6b7674
inc dword [esi + 0x64]
mov dword [esi + 0x208], 0xffffffff
mov dword [esi + 4], 0
mov eax, dword [0xb34fb0]
mov edi, dword [0xb34f98]
mov ebx, dword [esi + 0x104]
sub edi, ebx
add edi, eax
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
lea ecx, [esi + 0x124]
call edi
mov eax, dword [0xb34fbc]
mov edi, dword [0xb34f90]
sub edi, ebx
add edi, eax
mov ecx, edi
call dword [0xb0836c]
lea ecx, [esi + 0x148]
call edi
cmp dword [esi + 4], 0
mov edi, dword [esi + 0xc]
je 0x6b5e23
jmp 0x6b77d8
mov eax, dword [esi + 0x18]
mov dword [eax + 8], 5
mov ebx, dword [esi + 0xc]
mov eax, dword [ebx + 0x2ec]
mov ecx, dword [ebp + 8]
mov edx, dword [esi + 0x24]
mov dword [eax + ecx*4], edx
mov eax, dword [ebx]
mov edi, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0xf
mov ecx, ebx
push 0
push dword [esi + 0x18]
push 0x24
lea eax, [esi + 0x148]
push eax
call edi
cmp dword [esi + 0x148], 0
mov ebx, dword [esi + 0xc]
jne 0x6b77d8
mov eax, dword [ebx]
mov edi, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0xf
mov ecx, ebx
push 0
push dword [esi + 0xd4]
push 6
lea eax, [esi + 0x148]
push eax
call edi
mov ebx, dword [esi + 0xc]
mov eax, dword [ebx]
mov edi, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0xf
mov ecx, ebx
push 0
push dword [esi + 0xd0]
push 7
lea eax, [esi + 0x148]
push eax
call edi
mov ebx, dword [esi + 0xc]
mov eax, dword [ebx]
mov edi, dword [eax + 8]
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov dword [esi + 0x208], 0xf
mov ecx, ebx
push 0
push dword [esi + 0x18]
push 0x25
lea eax, [esi + 0x148]
push eax
call edi
mov ebx, dword [esi + 0x58]
test ebx, ebx
je 0x6b788a
mov eax, dword [esi + 0x60]
sub eax, ebx
cmp eax, 0x1000
mov dword [esi + 4], eax
jb 0x6b785a
mov ecx, dword [0xb5324c]
mov eax, dword [ebx - 4]
movzx edi, word [0xabd9ac]
sub edi, dword [esi + 0xc4]
add eax, ecx
xor edx, edx
cmp byte [esi + 0xf8], 0
movzx edi, di
cmove edx, edi
cmp dword [0xb33f34], 0xa964df0c
jne 0x6b7834
mov edi, edx
not edi
add ecx, edi
imul ecx, edx
inc ecx
imul edx, ecx
jmp 0x6b7836
add edx, ecx
mov dword [0xb5324c], edx
sub ebx, eax
add ebx, 0xfffffffc
cmp ebx, 0x20
jae 0x6b78ea
add dword [esi + 4], 0x23
mov dword [esi + 0x208], 0xffffffff
mov ebx, eax
mov eax, dword [0xb34fcc]
mov ecx, dword [0xb34f80]
add ecx, dword [esi + 0x14]
lea edi, [eax + ecx]
add edi, 0xffffbcc0
mov dword [esi + 0x208], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov ecx, ebx
mov edx, dword [esi + 4]
call edi
mov eax, dword [esi + 0x200]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 8
mov dword [esi + 0x208], 0
call fcn.00748ef1
mov dword [esi + 0x208], 0x19
call fcn.00559740
mov dword [esi + 0x208], 5
call fcn.00748ef1
mov eax, dword [0xb34fb4]
mov ecx, dword [0xb34f9c]
add ecx, edi
add ecx, eax
add ecx, 0xffffbcc0
call dword [0xb0836c]
call ecx
mov dword [esi + 0x208], 0xe
call fcn.00748ef1
mov dword [esi + 0x208], 1
call fcn.00748ef1
mov dword [esi + 0x208], 2
call fcn.00748ef1
mov dword [esi + 0x208], 3
call fcn.00748ef1
mov dword [esi + 0x208], 4
call fcn.00748ef1
mov dword [esi + 0x208], 0x14
call fcn.00559740
mov dword [esi + 0x208], 0xa
call fcn.00748ef1
mov dword [esi + 0x208], 0xd
call fcn.00748ef1
mov dword [esi + 0x208], 0xb
call fcn.00748ef1
mov dword [esi + 0x208], 0xc
call fcn.00748ef1
mov dword [esi + 0x208], 6
call fcn.00748ef1
mov dword [esi + 0x208], 7
call fcn.00748ef1
mov dword [esi + 0x208], 8
call fcn.00748ef1
mov dword [esi + 0x208], 9
call fcn.00748ef1
nop dword [eax]
push ebp
sub esp, 0x10
lea esi, [ebp - 0x20c]
mov ebp, dword [esi + 0x1f8]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0x10
lea esi, [ebp - 0x20c]
mov ebp, dword [esi + 0x1f8]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0x10
lea esi, [ebp - 0x20c]
mov ebp, dword [esi + 0x1f8]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0x10
lea esi, [ebp - 0x20c]
mov ebp, dword [esi + 0x1f8]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0x10
lea esi, [ebp - 0x20c]
mov ebp, dword [esi + 0x1f8]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0x10
lea esi, [ebp - 0x20c]
mov ebp, dword [esi + 0x1f8]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0x10
lea esi, [ebp - 0x20c]
mov ebp, dword [esi + 0x1f8]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0x10
lea esi, [ebp - 0x20c]
mov ebp, dword [esi + 0x1f8]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0x10
lea esi, [ebp - 0x20c]
mov ebp, dword [esi + 0x1f8]
mov eax, dword [0xb34fc8]
mov ecx, dword [0xb34f84]
add ecx, dword [esi + 0x14]
lea edi, [eax + ecx]
add edi, 0xffffbcc0
mov ecx, edi
call dword [0xb0836c]
lea ecx, [esi + 0x70]
call edi
add esp, 0x10
pop ebp
ret