Function at 0x6d2fa0
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x158
mov eax, dword [0x6d7a68]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, ecx
mov eax, dword [esi + 0x174]
mov ebx, dword [eax + 0x14]
mov ecx, dword [ebp + 8]
add ebx, 4
cmp word [ecx + 4], 0
push edi
mov dword [ebp - 0x120], ebx
je 0x6d2fe6
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
push ebx
call eax
mov edi, eax
jmp 0x6d2fe8
xor edi, edi
mov edx, dword [ebp + 8]
mov eax, dword [edx + 6]
cmp eax, 0x7b9c69f5
mov ecx, 1
mov byte [ebp - 0x119], cl
ja 0x6d3b19
je 0x6d3aa9
cmp eax, 0x4e799a8f
ja 0x6d34b4
je 0x6d3ef7
cmp eax, 0x2597dc70
ja 0x6d3277
je 0x6d46fe
cmp eax, 0x17f91e53
ja 0x6d31ec
je 0x6d3448
cmp eax, 0x1038158b
ja 0x6d31a9
je 0x6d307d
cmp eax, 0xc8d41
je 0x6d3448
cmp eax, 0x2b1b7d7
je 0x6d3ba4
cmp eax, 0x6ee1d63
je 0x6d46fe
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
cmp edi, 0x10
jne 0x6d3448
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
lea edx, [ebx + 4]
push edx
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
mov dword [ebp - 0x128], eax
lea eax, [ebx + 8]
push eax
call edx
test eax, eax
mov dword [ebp - 0x130], eax
je 0x6d30ec
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov edx, dword [ebp - 0x130]
mov eax, dword [eax + 0xc]
push edx
call eax
xor edx, edx
mov cl, 0x20
call fcn.008f8ff0
mov edi, eax
mov eax, dword [ebp - 0x128]
mov ecx, edx
cdq
or edi, eax
or ecx, edx
mov dword [ebp - 0x128], ecx
jmp 0x6d30fb
mov eax, dword [ebp - 0x128]
cdq
mov edi, eax
mov dword [ebp - 0x128], edx
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
add ebx, 0xc
push ebx
call eax
sub eax, 0
je 0x6d315a
sub eax, 1
je 0x6d3144
sub eax, 1
jne 0x6d3bb5
mov eax, dword [esi + 0x17c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax + 8]
mov ecx, dword [eax + 0x1bc]
mov eax, dword [eax + 0x1c0]
add ecx, edi
adc eax, dword [ebp - 0x128]
jmp 0x6d3162
mov ecx, dword [esi + 0x160]
mov eax, dword [esi + 0x164]
add ecx, edi
adc eax, dword [ebp - 0x128]
jmp 0x6d3162
mov eax, dword [ebp - 0x128]
mov ecx, edi
test eax, eax
jg 0x6d3174
jl 0x6d3bb5
test ecx, ecx
jb 0x6d3bb5
mov edx, dword [ebp - 0x130]
test edx, edx
mov dword [esi + 0x160], ecx
mov dword [esi + 0x164], eax
je 0x6d319e
mov ecx, dword [esi + 0x170]
mov edi, dword [ecx]
push eax
mov ebx, eax
mov eax, dword [edi + 0x20]
push edx
sar ebx, 0x1f
call eax
mov ebx, dword [esi + 0x160]
jmp 0x6d344a
cmp eax, 0x10eac6ee
je 0x6d3ca4
cmp eax, 0x149b3bca
je 0x6d3bbd
cmp eax, 0x16e5b5e3
jne 0x6d370a
mov edx, dword [esi + 0x178]
cmp dword [edx + 0x54], 0
je 0x6d370a
cmp eax, 0xbe39eabd
jne 0x6d3f3b
mov eax, ecx
jmp 0x6d3f4c
cmp eax, 0x231acdd9
ja 0x6d324f
je 0x6d3232
cmp eax, 0x19d17db2
je 0x6d3224
cmp eax, 0x207889b5
je 0x6d4142
cmp eax, 0x20d8aeb4
je 0x6d3448
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
add ebx, 4
mov dword [ebp - 0x120], ebx
jmp 0x6d4733
cmp edi, 0x10
jne 0x6d3448
cmp dword [esi + 0x17c], 0
je 0x6d3448
mov ebx, ecx
jmp 0x6d344a
cmp eax, 0x24a73b4e
je 0x6d3ba4
cmp eax, 0x25227614
je 0x6d3448
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
cmp eax, 0x347be5ab
ja 0x6d3302
je 0x6d32f7
cmp eax, 0x2ebe502c
ja 0x6d32c4
je 0x6d423b
cmp eax, 0x267a04c0
je 0x6d479a
cmp eax, 0x2dddfb1b
je 0x6d42f9
cmp eax, 0x2e1b9c17
je 0x6d409c
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
cmp eax, 0x2f79e55b
je 0x6d3448
cmp eax, 0x310d1257
je 0x6d3448
cmp eax, 0x32ac0a22
je 0x6d46fe
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
mov ebx, dword [esi + 0x14]
mov dword [esi + 0x14], edi
jmp 0x6d344a
cmp eax, 0x3ec5852c
ja 0x6d3474
je 0x6d3ba4
cmp eax, 0x34eaf723
je 0x6d46fe
cmp eax, 0x36142a31
je 0x6d3ba4
cmp eax, 0x3683e000
jne 0x6d370a
mov edx, dword [esi + 0x178]
cmp dword [edx + 0x54], 0
je 0x6d334c
mov al, byte [esi + 0x10]
or al, 4
cmp al, 0xcc
jne 0x6d334c
add dword [esi + 0x10], ecx
mov ecx, dword [esi + 0x170]
mov eax, dword [ebp - 0x120]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
add eax, 4
push eax
xor ebx, ebx
call edx
movzx ecx, ax
cmp eax, ecx
jbe 0x6d338b
mov ecx, dword [esi + 0x170]
push pe_nt_image_headers32
lea edx, [ebp - 0x118]
push edx
push eax
call fcn.006c4810
mov edi, eax
add edi, 1
jmp 0x6d33c6
mov ecx, dword [esi + 0x178]
cmp dword [ecx + 0x54], ebx
je 0x6d344a
push eax
lea edx, [ebp - 0x118]
push 0x6928d4
push edx
call fcn.0068ad90
lea eax, [ebp - 0x118]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x6d33b8
sub eax, edx
lea edi, [eax + 1]
lea eax, [ebp - 0x118]
push eax
mov ecx, esi
call fcn.006d23b0
mov ecx, dword [esi + 0x178]
cmp dword [ecx + 0x54], 0
mov ebx, eax
je 0x6d344a
test ebx, ebx
jne 0x6d343c
mov ebx, dword [esi + 0x10]
mov ecx, dword [esi + 0x170]
lea eax, [ebx + 4]
mov dword [esi + 0x10], eax
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x20]
push ebx
call eax
add dword [esi + 0x10], 2
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
add eax, 0xfffffffe
push 0
push eax
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esi + 0x170]
add dword [esi + 0x10], edi
mov edx, dword [ecx]
mov eax, dword [esi + 0x10]
mov edx, dword [edx + 0x14]
push edi
lea ecx, [ebp - 0x118]
push ecx
mov ecx, dword [esi + 0x170]
sub eax, edi
push eax
call edx
mov eax, dword [esi + 0x170]
cmp byte [eax + 8], 0
je 0x6d344a
xor ebx, ebx
mov al, byte [ebp - 0x119]
mov edx, dword [esi + 0x174]
mov cl, al
neg cl
pop edi
pop esi
sbb ecx, ecx
and ecx, ebx
mov dword [edx + 4], ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0067de1d
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x43f291e1
je 0x6d3495
cmp eax, 0x4be46d93
je 0x6d3f87
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
cmp edi, 3
jne 0x6d34a8
mov ecx, dword [esi + 0x178]
cmp dword [ecx + 0x54], 0
jne 0x6d34ad
jmp 0x6d3448
cmp edi, 8
jne 0x6d3448
mov ebx, 1
jmp 0x6d344a
cmp eax, 0x5e1016d6
ja 0x6d3813
je 0x6d3bb5
cmp eax, 0x5804be9a
ja 0x6d36c3
je 0x6d3667
cmp eax, 0x4fdfbe85
ja 0x6d3516
je 0x6d31ca
cmp eax, 0x4e7d2056
je 0x6d46fe
cmp eax, 0x4f091756
je 0x6d46fe
cmp eax, 0x4f6cea0b
je 0x6d46fe
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
cmp eax, 0x521d346a
je 0x6d3448
cmp eax, 0x5764c7d0
je 0x6d3533
cmp eax, 0x57e88726
jne 0x6d370a
mov edx, edi
and edx, 0x7fffffff
cmp edx, 0x10
jne 0x6d3448
cmp dword [esi + 0x17c], 0
je 0x6d3448
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
lea edx, [ebx + 8]
push edx
call eax
mov ecx, dword [esi + 0x170]
mov dword [ebp - 0x130], edx
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
mov dword [ebp - 0x134], eax
lea eax, [ebx + 0x10]
push eax
call edx
test eax, eax
mov dword [ebp - 0x128], eax
jne 0x6d35cf
test edi, edi
mov eax, dword [esi + 0x17c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx]
jns 0x6d35a2
mov edx, dword [eax + 0x14]
jmp 0x6d35a5
mov edx, dword [eax + 0x18]
call edx
xor ecx, ecx
cmp dword [ebp - 0x130], ecx
jg 0x6d35c9
jl 0x6d35bb
cmp dword [ebp - 0x134], eax
jae 0x6d35c9
sub eax, dword [ebp - 0x134]
mov dword [ebp - 0x128], eax
jmp 0x6d35cf
mov dword [ebp - 0x128], ecx
mov eax, dword [ebp + 8]
cmp dword [eax + 6], 0x57e88726
jne 0x6d35f0
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
add ebx, 0x14
push ebx
call eax
test eax, eax
jne 0x6d3602
mov ecx, dword [ebp - 0x128]
push 0
push ecx
push 0
mov ecx, esi
call fcn.006d2ef0
mov edx, dword [esi + 0x160]
mov ecx, dword [ebp - 0x134]
mov ebx, eax
mov eax, dword [esi + 0x164]
and edi, 0x80000000
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x128]
push edi
mov dword [ebp - 0x124], edx
mov edx, dword [ebp - 0x130]
push eax
mov dword [esi + 0x160], ecx
push ebx
mov ecx, esi
mov dword [esi + 0x164], edx
call fcn.006d2410
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 0x120]
mov dword [esi + 0x160], ecx
mov dword [esi + 0x164], edx
jmp 0x6d344a
cmp edi, 0x10
jne 0x6d3bb5
mov eax, dword [esi + 0x17c]
test eax, eax
je 0x6d3bb5
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx]
mov edx, dword [eax + 0x18]
call edx
mov ecx, dword [esi + 0x170]
mov edx, dword [ebp - 0x120]
mov ebx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
add edx, 4
push edx
call eax
test eax, eax
je 0x6d344a
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
push 0
push eax
mov eax, dword [edx + 0x20]
call eax
jmp 0x6d344a
cmp eax, 0x5b50e0d0
ja 0x6d37eb
je 0x6d3741
cmp eax, 0x58e62150
je 0x6d3d39
cmp eax, 0x594b8567
je 0x6d371c
cmp eax, 0x59e37cf7
jne 0x6d370a
mov ecx, dword [esi + 0x170]
mov edi, dword [ecx]
mov eax, dword [edi + 0xc]
mov edx, ebx
push 0
add edx, 8
push edx
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [edi + 0x18]
push eax
call edx
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, ebx
add edx, 4
push edx
call eax
mov ebx, eax
cmp ebx, edi
jbe 0x6d344a
sub ebx, 1
jmp 0x6d344a
mov ecx, dword [esi + 0x174]
xor ebx, ebx
mov dword [ecx + 0x10], ebx
mov edx, dword [esi + 0x174]
mov dword [edx + 8], ebx
mov eax, dword [esi + 0x174]
mov dword [eax + 0xc], ebx
mov ecx, dword [esi + 0x174]
mov dword [ecx + 0x1c], ebx
mov edx, dword [esi + 0x174]
push ebx
mov dword [edx + 0x20], ebx
mov ecx, dword [esi + 0x174]
push 8
call fcn.006c82c0
mov ecx, dword [esi + 0x174]
push 8
push 4
call fcn.006cd500
mov dword [ebp - 0x128], eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0xc]
call eax
cmp eax, ebx
je 0x6d37b0
cmp eax, 0xffffffff
je 0x6d37b0
cmp eax, edi
jne 0x6d3793
jmp 0x6d37b4
cmp eax, edi
jne 0x6d37cd
cmp eax, ebx
je 0x6d37cd
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x128]
push eax
call edx
mov ecx, dword [esi + 0x170]
mov edx, dword [ebp - 0x120]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
add edx, 0xc
push edx
call eax
mov ebx, eax
jmp 0x6d344a
cmp eax, 0x5c061720
je 0x6d3448
cmp eax, 0x5ca76efc
je 0x6d3448
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
cmp eax, 0x6d9d9103
ja 0x6d39db
je 0x6d39bb
cmp eax, 0x6863c547
ja 0x6d3987
je 0x6d3ba4
cmp eax, 0x5ffe2936
je 0x6d3ba4
cmp eax, 0x62ec4020
je 0x6d3938
cmp eax, 0x667af71d
jne 0x6d370a
cmp edi, 0x10
jne 0x6d3448
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov edx, dword [edx + 0x10]
lea eax, [ebx + 4]
push eax
call edx
mov ecx, dword [esi + 0x170]
mov edi, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x128], edx
lea edx, [ebx + 0x10]
push edx
call eax
sub eax, 0
je 0x6d38d7
sub eax, 1
je 0x6d38c1
sub eax, 1
jne 0x6d3448
mov eax, dword [esi + 0x17c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
mov ecx, dword [edx + eax + 8]
mov eax, dword [ecx + 0x1bc]
mov ecx, dword [ecx + 0x1c0]
add eax, edi
adc ecx, dword [ebp - 0x128]
jmp 0x6d38df
mov eax, dword [esi + 0x160]
mov ecx, dword [esi + 0x164]
add eax, edi
adc ecx, dword [ebp - 0x128]
jmp 0x6d38df
mov ecx, dword [ebp - 0x128]
mov eax, edi
test ecx, ecx
jg 0x6d38f1
jl 0x6d3448
test eax, eax
jb 0x6d3448
mov dword [esi + 0x164], ecx
mov ecx, dword [esi + 0x170]
mov dword [esi + 0x160], eax
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
add ebx, 0xc
push ebx
call edx
test eax, eax
je 0x6d392e
mov edi, dword [esi + 0x164]
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
push edi
mov edi, dword [esi + 0x160]
push edi
push eax
mov eax, dword [edx + 0x24]
call eax
mov ebx, 1
jmp 0x6d344a
mov ecx, dword [esi + 0x178]
cmp dword [ecx + 0x54], 0
je 0x6d370a
mov edi, dword [esi + 0x170]
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
push 0
lea ecx, [ebx + 4]
push ecx
mov ecx, edi
call edx
mov edx, dword [edi]
mov edx, dword [edx + 0xc]
push ebx
mov ecx, edi
mov dword [ebp - 0x128], eax
call edx
mov ecx, dword [ebp - 0x128]
imul ecx, eax
push ecx
push 0
mov ecx, esi
call fcn.006d2ef0
mov ebx, eax
jmp 0x6d344a
cmp eax, 0x6a13228a
je 0x6d3bb5
cmp eax, 0x6bf67bf1
jne 0x6d370a
mov edx, dword [esi + 0x178]
pop edi
pop esi
mov dword [edx + 0x18], ecx
mov al, cl
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0067de1d
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
mov ebx, edi
call edx
test al, al
je 0x6d344a
lea ebx, [edi + 1]
jmp 0x6d344a
cmp eax, 0x74ca5d76
ja 0x6d3a81
je 0x6d3d30
cmp eax, 0x7207819c
je 0x6d3448
cmp eax, 0x721fcf3e
je 0x6d3ba4
cmp eax, 0x74a7e651
jne 0x6d370a
cmp edi, 0x10
jne 0x6d3448
cmp dword [esi + 0x17c], 0
je 0x6d3448
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, ebx
add edx, 4
push edx
call eax
mov ecx, dword [esi + 0x170]
mov edi, dword [ecx]
mov ebx, eax
mov eax, dword [esi + 0x17c]
mov edx, dword [eax]
mov ecx, dword [edx + 0xc]
mov edx, dword [ecx + eax]
add ecx, eax
mov eax, dword [edx + 0x18]
add edi, 0x20
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [edi]
push eax
push ebx
call edx
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
push 0
add ebx, 4
push ebx
call edx
mov ebx, 1
jmp 0x6d344a
cmp eax, 0x794f56a5
je 0x6d3448
cmp eax, 0x7b19edd6
je 0x6d479a
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
mov eax, dword [esi + 0x178]
cmp dword [eax + 0x54], 0
je 0x6d370a
mov eax, dword [esi + 0x170]
mov eax, dword [eax]
mov ecx, dword [esi + 0x170]
lea edx, [ebx + 8]
mov dword [ebp - 0x130], eax
mov eax, dword [eax + 4]
push edx
mov dword [ebp - 0x128], ecx
call eax
movzx ecx, al
push ecx
mov ecx, dword [ebp - 0x128]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
add ebx, 4
push ebx
call eax
push eax
mov edx, dword [ebp - 0x130]
mov ecx, dword [esi + 0x170]
mov eax, dword [edx + 0x3c]
push edi
call eax
pop edi
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0067de1d
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x7bc9086a
ja 0x6d3b43
je 0x6d3448
cmp eax, 0x7bb042c8
je 0x6d3448
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
cmp eax, 0xc03e4272
ja 0x6d3fe4
je 0x6d3fc9
cmp eax, 0xa9773427
ja 0x6d3e44
je 0x6d3df9
cmp eax, 0x94b7dfdc
ja 0x6d3cff
je 0x6d46fe
cmp eax, 0x89c05209
ja 0x6d3c8e
je 0x6d3bbd
cmp eax, 0x7f13c8d5
je 0x6d423b
cmp eax, 0x80438bce
je 0x6d3d30
cmp eax, 0x86cb7a6f
jne 0x6d370a
mov ecx, dword [esi + 0x178]
cmp dword [ecx + 0x54], 0
setne byte [ebp - 0x119]
or ebx, 0xffffffff
jmp 0x6d344a
mov ecx, dword [esi + 0x178]
cmp dword [ecx + 0x54], 0
je 0x6d370a
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 0
push edi
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 0x1000
add edi, 4
push edi
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 0x30000
add edi, 4
push edi
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 0x7fdfffff
add edi, 4
push edi
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 1
add edi, 4
push edi
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 1
add edi, 4
push edi
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 0x24a
add edi, 4
push edi
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 0x4000
add edi, 4
push edi
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 0
add edi, 4
push edi
call eax
mov ebx, 1
jmp 0x6d344a
cmp eax, 0x8d9be3f4
je 0x6d3448
cmp eax, 0x93956d18
jne 0x6d370a
mov ecx, dword [esi + 0x178]
cmp dword [ecx + 0x54], 0
je 0x6d370a
cmp eax, 0x10eac6ee
jne 0x6d3cd4
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
lea eax, [ebx + 8]
push eax
call edx
mov byte [ebp - 0x128], al
jmp 0x6d3cdb
mov byte [ebp - 0x128], 0
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
add ebx, 4
mov dword [ebp - 0x130], eax
mov eax, dword [eax + 0xc]
push ebx
call eax
mov ecx, dword [ebp - 0x128]
push eax
push ecx
jmp 0x6d3af2
cmp eax, 0xa2e7fbec
ja 0x6d3dd1
je 0x6d46fe
cmp eax, 0x9b61463e
je 0x6d3d70
cmp eax, 0x9c94e162
je 0x6d3448
cmp eax, 0xa124e28d
jne 0x6d370a
add ebx, 4
add ebx, 4
mov dword [ebp - 0x120], ebx
mov ecx, dword [esi + 0x178]
cmp dword [ecx + 0x54], 0
je 0x6d370a
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x120]
mov edx, dword [edx + 0xc]
push 0
push eax
call edx
push eax
push 0
mov ecx, esi
call fcn.006d2ef0
mov ebx, eax
jmp 0x6d344a
mov eax, dword [esi + 0x178]
cmp dword [eax + 0x54], 0
je 0x6d370a
cmp dword [esi + 0x16c], 0
je 0x6d370a
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
mov eax, ebx
add eax, 4
push eax
call edx
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov ebx, eax
mov eax, dword [esi + 0x16c]
mov edi, dword [eax]
mov eax, dword [edx + 0xc]
push ebx
add edi, 0x44
call eax
mov ecx, dword [esi + 0x16c]
mov edx, dword [edi]
push eax
push ebx
call edx
mov ebx, 1
jmp 0x6d344a
cmp eax, 0xa6c9813b
je 0x6d3448
cmp eax, 0xa8d2a271
je 0x6d3448
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
mov eax, dword [esi + 0x178]
cmp dword [eax + 0x54], 0
je 0x6d370a
mov eax, dword [esi + 0x16c]
test eax, eax
je 0x6d370a
mov edi, dword [eax]
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
mov eax, ebx
add eax, 4
push eax
add edi, 0x48
call edx
mov ecx, dword [esi + 0x16c]
push eax
mov eax, dword [edi]
call eax
mov ebx, 1
jmp 0x6d344a
cmp eax, 0xb61fd3cb
ja 0x6d3ec5
je 0x6d43e4
cmp eax, 0xb20ef57c
ja 0x6d3e91
je 0x6d3bb5
cmp eax, 0xaac4a387
je 0x6d47d4
cmp eax, 0xab2a9c67
je 0x6d3ba4
cmp eax, 0xae57b6b4
je 0x6d31ca
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
cmp eax, 0xb2d13e37
je 0x6d3448
cmp eax, 0xb330e5f0
jne 0x6d370a
mov ecx, dword [esi + 0x178]
mov ebx, dword [ecx + 0x54]
neg ebx
sbb ebx, ebx
and ebx, 0x4a27f701
add ebx, 0xc0000a04
jmp 0x6d344a
cmp eax, 0xbe39eabd
ja 0x6d3f71
je 0x6d31ca
cmp eax, 0xb81509f1
je 0x6d409c
cmp eax, 0xba68c8d1
je 0x6d31ca
cmp eax, 0xbaad2fde
jne 0x6d370a
mov edx, dword [esi + 0x178]
cmp dword [edx + 0x54], 0
je 0x6d3f1f
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
push ebx
call edx
test eax, eax
je 0x6d3f1f
mov ebx, 0x7fe00000
jmp 0x6d344a
mov eax, dword [esi + 0x17c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
mov ebx, eax
jmp 0x6d344a
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
add ebx, 4
push ebx
call edx
mov ecx, dword [esi + 0x170]
cmp byte [ecx + 8], 0
jne 0x6d3f62
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x4c]
push edi
push edi
call eax
mov ecx, dword [esi + 0x170]
movzx ebx, byte [ecx + 8]
jmp 0x6d344a
cmp eax, 0xbf09bd92
je 0x6d46fe
cmp eax, 0xbf30d8c2
jne 0x6d370a
mov edx, edi
and edx, 0x7fffffff
cmp edx, 0x10
jne 0x6d3448
mov ecx, dword [esi + 0x170]
mov edx, dword [ebp - 0x120]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
add edx, 8
push edx
mov ebx, edi
call eax
test eax, 0x1000000
je 0x6d344a
or edi, 0x80000000
mov ebx, edi
jmp 0x6d344a
mov ecx, dword [esi + 0x178]
mov ebx, dword [ecx + 0x54]
neg ebx
sbb ebx, ebx
and ebx, 0x7fdfffff
add ebx, 1
jmp 0x6d344a
cmp eax, 0xe3f32ca3
ja 0x6d42a8
je 0x6d423b
cmp eax, 0xd2401c27
ja 0x6d406a
je 0x6d3ba4
cmp eax, 0xca11307d
ja 0x6d4042
je 0x6d3ba4
cmp eax, 0xc1f70874
je 0x6d3448
cmp eax, 0xc2c09f60
je 0x6d3ba4
cmp eax, 0xc6e54950
je 0x6d46fe
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
cmp eax, 0xd0738e1f
je 0x6d3ba4
cmp eax, 0xd0fe5166
je 0x6d3448
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
cmp eax, 0xd867148a
ja 0x6d4213
je 0x6d41ff
cmp eax, 0xd2994e3a
je 0x6d41e1
cmp eax, 0xd4ac3ce4
je 0x6d4142
cmp eax, 0xd6eaa3c6
jne 0x6d370a
cmp edi, 8
jae 0x6d3448
mov edx, dword [esi + 0x168]
mov ebx, edx
mov ecx, edi
shr ebx, cl
test bl, 1
je 0x6d3448
cmp eax, 0x2e1b9c17
lea ecx, [edi*4 + 0x7fe01044]
mov ebx, 1
mov dword [ebp - 0x128], ecx
je 0x6d4127
cmp eax, 0xb81509f1
je 0x6d4114
cmp eax, 0xd6eaa3c6
jne 0x6d344a
mov ecx, dword [esi + 0x170]
mov edx, dword [ebp - 0x120]
mov edi, dword [ecx]
mov eax, dword [edi + 0xc]
add edx, 4
push edx
call eax
mov ecx, dword [ebp - 0x128]
mov edx, dword [edi + 0x20]
push eax
push ecx
mov ecx, dword [esi + 0x170]
call edx
jmp 0x6d344a
mov eax, ebx
mov ecx, edi
shl eax, cl
xor eax, edx
mov dword [esi + 0x168], eax
jmp 0x6d344a
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x128]
mov edx, dword [edx + 0xc]
push eax
call edx
mov ebx, eax
jmp 0x6d344a
mov eax, dword [esi + 0x178]
cmp dword [eax + 0x54], 0
je 0x6d370a
mov ebx, ecx
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
push edi
call eax
or eax, 8
cmp eax, 0x9c
je 0x6d4175
cmp eax, 0x11c
je 0x6d4175
xor ebx, ebx
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 5
add edi, 4
push edi
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 1
add edi, 4
push edi
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 0xa28
add edi, 4
push edi
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 2
add edi, 4
push edi
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
push 0xf
push 0x692884
add edi, 4
push edi
call eax
jmp 0x6d344a
mov ecx, dword [esi + 0x178]
mov ebx, dword [ecx + 0x54]
neg ebx
sbb ebx, ebx
and ebx, 0xcfe01700
add ebx, 0xaffffc00
jmp 0x6d344a
sub edi, 0x10
neg edi
sbb edi, edi
and edi, 0xffffffef
add edi, 0x10
mov ebx, edi
jmp 0x6d344a
cmp eax, 0xdaef6833
je 0x6d399d
cmp eax, 0xe24bec1c
je 0x6d3448
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
mov edx, dword [esi + 0x178]
cmp dword [edx + 0x54], 0
je 0x6d370a
mov eax, dword [esi + 0x170]
mov eax, dword [eax]
mov ecx, dword [esi + 0x170]
lea edx, [ebx + 8]
mov dword [ebp - 0x130], eax
mov eax, dword [eax + 0xc]
push edx
mov dword [ebp - 0x128], ecx
call eax
mov ecx, dword [ebp - 0x128]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0xc]
add ebx, 4
push ebx
call eax
mov edx, dword [ebp - 0x130]
mov ecx, dword [esi + 0x170]
push eax
mov eax, dword [edx + 0x4c]
push edi
call eax
pop edi
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0067de1d
mov esp, ebp
pop ebp
ret 4
cmp eax, 0xf4d83810
ja 0x6d4705
je 0x6d3448
cmp eax, 0xe961c8d8
ja 0x6d46e8
je 0x6d4691
cmp eax, 0xe40479ba
je 0x6d43cb
cmp eax, 0xe44bc2df
je 0x6d42f9
cmp eax, 0xe619a249
je 0x6d3448
mov ebx, dword [ebp - 0x120]
mov byte [ebp - 0x119], 0
jmp 0x6d344a
mov ecx, dword [esi + 0x178]
cmp dword [ecx + 0x54], 0
je 0x6d370a
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
push ebx
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov edi, eax
mov eax, dword [edx + 0x1c]
push 0x7d5
push edi
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov edx, dword [edx + 0x1c]
push 1
lea eax, [edi + 2]
push eax
call edx
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
push 0
lea edx, [edi + 4]
push edx
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov edx, dword [edx + 0x1c]
push 2
lea eax, [edi + 6]
push eax
call edx
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
push 1
lea edx, [edi + 8]
push edx
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov edx, dword [edx + 0x1c]
push 2
lea eax, [edi + 0xa]
push eax
call edx
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
push 3
lea edx, [edi + 0xc]
push edx
call eax
mov esi, dword [esi + 0x170]
mov edx, dword [esi]
mov eax, dword [edx + 0x1c]
push 0x1c8
add edi, 0xe
push edi
mov ecx, esi
call eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov al, 1
pop ebx
call fcn.0067de1d
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
add ebx, 4
push ebx
mov dword [ebp - 0x120], ebx
call eax
mov edi, eax
mov ecx, dword [esi + 0x178]
cmp dword [ecx + 0x54], 0
je 0x6d370a
xor eax, eax
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov eax, dword [esi + 0x17c]
mov ebx, 0x1000
mov dword [ebp - 0x140], ebx
mov edx, dword [eax]
mov ecx, dword [edx + 0xc]
mov edx, dword [ecx + eax]
add ecx, eax
mov eax, dword [edx + 0x10]
call eax
cmp edi, eax
jb 0x6d44d7
mov eax, dword [esi + 0x17c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov edx, dword [eax]
mov edx, dword [edx + 0xc]
lea ebx, [edx + eax]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov edx, dword [ebx]
mov edx, dword [edx + 0x10]
mov ecx, ebx
mov dword [ebp - 0x128], eax
call edx
mov ecx, dword [ebp - 0x128]
add ecx, eax
cmp edi, ecx
jae 0x6d44d2
mov ecx, dword [esi + 0x17c]
push edi
call fcn.006d1d20
mov ebx, eax
mov eax, dword [esi + 0x17c]
mov dword [ebp - 0x150], ebx
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
add edi, 0x1000
and edi, 0xfffff000
sub edi, ebx
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x144], edi
mov dword [ebp - 0x13c], 0x40
jmp 0x6d462e
mov ebx, 0x1000
mov ecx, dword [esi + 0x170]
push 0
push edi
call fcn.006c4df0
test eax, eax
jne 0x6d4527
and edi, 0xffffc000
cmp edi, 0x7fe00000
jae 0x6d3448
mov eax, 0x7fe00000
sub eax, edi
mov dword [ebp - 0x150], edi
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], 0x10000
mov dword [ebp - 0x13c], 1
jmp 0x6d4642
cmp edi, dword [esi + 0x138]
jb 0x6d4586
cmp edi, dword [esi + 0x13c]
jae 0x6d4586
lea ecx, [ebp - 0x154]
push ecx
push edi
mov ecx, esi
call fcn.006d2b40
test eax, eax
je 0x6d3448
mov edx, dword [ebp - 0x154]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov eax, 0x40
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], 0x20000
jmp 0x6d4642
mov ecx, dword [esi + 0x170]
lea eax, [ebp - 0x158]
push eax
call fcn.006d1cd0
cmp edi, eax
jb 0x6d45d8
mov ecx, dword [ebp - 0x158]
lea edx, [ecx + eax]
cmp edi, edx
jae 0x6d45d8
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov eax, 4
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], 0x20000
jmp 0x6d4642
cmp edi, 0x7fe00000
jae 0x6d45fe
and edi, 0xfffff000
mov dword [ebp - 0x150], edi
mov dword [ebp - 0x14c], edi
mov dword [ebp - 0x13c], 0x40
jmp 0x6d4628
cmp edi, 0x7fe01000
jae 0x6d3448
mov dword [ebp - 0x150], 0x7fe00000
mov dword [ebp - 0x14c], 0x7fe00000
mov dword [ebp - 0x13c], 2
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x148], 0x80
mov dword [ebp - 0x138], 0x1000000
mov ecx, dword [esi + 0x170]
mov edi, dword [ebp - 0x120]
mov ebx, dword [ecx]
push 0x1c
lea eax, [ebp - 0x150]
push eax
mov eax, dword [ebx + 0xc]
lea edx, [edi + 4]
push edx
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ebx + 0x14]
push eax
call edx
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
add edi, 8
push edi
mov ebx, 0x1c
call edx
cmp eax, ebx
jae 0x6d344a
jmp 0x6d3448
mov ecx, dword [esi + 0x168]
mov eax, ecx
not eax
xor ebx, ebx
and eax, 0xf
jne 0x6d46af
lea ebx, [eax + 4]
mov eax, ecx
shr eax, 4
not eax
and eax, 0xf
movzx eax, byte [eax + 0x6928c4]
add ebx, eax
cmp ebx, 8
jae 0x6d3bb5
lea edx, [ecx + 1]
or edx, ecx
mov ecx, dword [esi + 0x170]
mov dword [esi + 0x168], edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
push 0
lea edx, [ebx*4 + 0x7fe01044]
push edx
call eax
jmp 0x6d344a
cmp eax, 0xecac0fd0
je 0x6d399d
cmp eax, 0xeff990d0
jne 0x6d370a
mov ebx, ecx
jmp 0x6d344a
cmp eax, 0xf6650286
ja 0x6d4857
je 0x6d3ba4
cmp eax, 0xf5da310b
je 0x6d47d4
cmp eax, 0xf5e7f2f4
je 0x6d4791
cmp eax, 0xf631f2b5
jne 0x6d370a
mov eax, dword [esi + 0x178]
cmp dword [eax + 0x54], 0
mov ebx, dword [ebp - 0x120]
je 0x6d4785
mov edi, dword [esi + 0x170]
mov edx, dword [edi]
mov edx, dword [edx + 0xc]
lea eax, [ebx + 8]
push eax
mov ecx, edi
call edx
and eax, 0x2000
push eax
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
lea ecx, [ebx + 4]
push ecx
mov ecx, edi
call edx
push eax
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
push ebx
mov ecx, edi
call edx
push eax
mov ecx, esi
call fcn.006d2ef0
mov ebx, eax
jmp 0x6d344a
mov byte [ebp - 0x119], 0
jmp 0x6d344a
add ebx, 8
mov dword [ebp - 0x120], ebx
mov eax, dword [esi + 0x178]
cmp dword [eax + 0x54], 0
je 0x6d370a
mov ecx, dword [esi + 0x170]
mov edi, dword [ecx]
mov edx, dword [ebp - 0x120]
mov eax, dword [edi + 0xc]
push edx
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [edi + 0xc]
sub eax, 4
push eax
call edx
mov ebx, eax
jmp 0x6d344a
mov eax, dword [esi + 0x178]
cmp dword [eax + 0x54], 0
je 0x6d3bb5
cmp dword [esi + 0x17c], 0
je 0x6d3bb5
push 0x14
lea ecx, [ebp - 0x18]
push ecx
mov ecx, dword [esi + 0x170]
push edi
call fcn.006c4810
lea edx, [ebp - 0x18]
push 0x5c
push edx
call fcn.0068acb0
add esp, 8
test eax, eax
je 0x6d481c
mov eax, 0x692870
jmp 0x6d482e
push 0x5c
push 0x692870
call fcn.0068acb0
add esp, 8
add eax, 1
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00680882
add esp, 8
test eax, eax
jne 0x6d3bb5
mov dword [esi + 0x160], eax
mov dword [esi + 0x164], eax
lea ebx, [eax + 0x10]
jmp 0x6d344a
cmp eax, 0xf6a3fc2f
je 0x6d4945
cmp eax, 0xf740085f
jne 0x6d370a
mov edx, dword [esi + 0x178]
add ebx, 4
cmp dword [edx + 0x54], 0
mov dword [ebp - 0x120], ebx
jne 0x6d488e
mov dword [ebp - 0x128], 0xaffffe00
jmp 0x6d48c9
test edi, edi
je 0x6d48bf
cmp edi, 0x7fe00000
jb 0x6d48a2
cmp edi, 0x80000000
jb 0x6d48bf
mov eax, dword [esi + 0x17c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp edi, eax
jne 0x6d3448
mov dword [ebp - 0x128], 0x7fe01400
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
mov edx, dword [ebp - 0x128]
mov eax, dword [eax + 0xc]
push edx
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
mov edi, eax
mov eax, ebx
add eax, 4
push eax
call edx
mov ebx, eax
cmp edi, ebx
jbe 0x6d48fc
mov edi, ebx
jmp 0x6d48ff
lea ebx, [edi - 1]
mov edx, dword [ebp - 0x128]
mov ecx, dword [esi + 0x170]
mov eax, dword [ecx]
push edi
add edx, 4
push edx
mov edx, dword [ebp - 0x120]
mov dword [ebp - 0x130], eax
mov eax, dword [eax + 0xc]
push edx
call eax
mov edx, dword [ebp - 0x130]
mov ecx, dword [esi + 0x170]
push eax
mov eax, dword [edx + 0x4c]
call eax
mov ecx, dword [esi + 0x170]
cmp byte [ecx + 8], 0
jmp 0x6d3446
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
add ebx, 0xc
push ebx
call eax
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx]
push 0
mov dword [ebp - 0x128], eax
push eax
mov eax, dword [edx + 0x20]
call eax
cmp edi, 0x10
jne 0x6d3448
cmp dword [esi + 0x17c], 0
je 0x6d3448
mov eax, dword [esi + 0x170]
mov ecx, dword [ebp - 0x120]
mov ebx, dword [eax]
mov edx, dword [ebx + 0xc]
add ecx, 8
push 0
mov edi, eax
push ecx
mov ecx, edi
call edx
mov ecx, dword [ebp - 0x120]
push eax
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
add ecx, 4
push ecx
mov ecx, edi
call edx
push eax
mov ecx, esi
call fcn.006d2410
mov ecx, dword [esi + 0x170]
mov edx, dword [ebx + 0x20]
push eax
mov eax, dword [ebp - 0x128]
push eax
call edx
mov ebx, 1
jmp 0x6d344a