Function at 0x65e210
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x3b8
call 0x65e224
pop eax
mov dword [esp + 0x1b8], ecx
mov ebx, edx
mov dword [esp + 0x1f0], eax
mov eax, dword [0x94bccc]
mov dword [esp + 0x34], edx
test eax, eax
je 0x65f79f
mov dword [esp + 0x188], 2
mov dword [esp + 0x198], 0
nop dword [eax]
cmp dword [ebx], 0
je 0x65f790
mov eax, dword [ebx + 4]
mov ecx, dword [ebx + 8]
cmp eax, dword [ebx + 0xc]
jne 0x65e2e0
cmp ecx, dword [ebx + 0x10]
jne 0x65e2e0
mov edx, dword [ebp + 0xc]
mov dword [esp + 0x200], eax
mov dword [esp + 0x204], ecx
mov esi, dword [edx + 0x38]
cmp esi, eax
jbe 0x660a7e
mov edx, dword [edx + 0x34]
test edx, edx
je 0x660a7e
imul edi, eax, 0xf0
mov ebx, dword [edx + edi]
xor ebx, 3
or ebx, dword [edx + edi + 4]
je 0x660a7e
add edi, edx
cmp dword [edi + 0xcc], ecx
jne 0x660a7e
cmp dword [edi + 0x58], 0
mov edi, dword [esp + 0x34]
jne 0x660bd4
mov dword [edi], 0
jmp 0x65e352
mov edx, dword [ebp + 0xc]
mov dword [esp + 0x200], eax
mov dword [esp + 0x204], ecx
cmp dword [edx + 0x38], eax
jbe 0x660ac4
mov edx, dword [edx + 0x34]
test edx, edx
je 0x660ac4
imul esi, eax, 0xf0
mov edi, dword [edx + esi]
xor edi, 3
or edi, dword [edx + esi + 4]
je 0x660ac4
add edx, esi
cmp dword [edx + 0xcc], ecx
jne 0x660ac4
movsd xmm0, qword [edx + 0x5c]
cmp dword [edx + 0x58], 0
mov dword [edx + 0x58], 0
je 0x660be8
mov esi, dword [ebp + 0xc]
mov dword [ebx], 1
movlps qword [ebx + 4], xmm0
mov edx, dword [esi + 0x34]
mov esi, dword [esi + 0x38]
cmp esi, eax
mov dword [esp + 0x200], eax
mov dword [esp + 0x204], ecx
jbe 0x660ac4
test edx, edx
je 0x660ac4
imul esi, eax, 0xf0
mov edi, dword [edx + esi]
xor edi, 3
or edi, dword [edx + esi + 4]
je 0x660ac4
add edx, esi
cmp dword [edx + 0xcc], ecx
jne 0x660ac4
mov esi, dword [ebp + 0xc]
mov byte [edx + 0xe1], 0
mov dword [esp + 0x54], esi
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x58], eax
mov eax, dword [0x94bccc]
test eax, eax
je 0x65e530
mov dword [esp + 0xb0], 2
mov dword [esp + 0xc0], 0
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x200], edx
mov dword [esp + 0x204], eax
cmp dword [ecx + 0x38], edx
jbe 0x660a7e
mov ecx, dword [ecx + 0x34]
test ecx, ecx
je 0x660a7e
imul edx, edx, 0xf0
mov esi, dword [ecx + edx]
xor esi, 3
or esi, dword [ecx + edx + 4]
je 0x660a7e
add ecx, edx
cmp dword [ecx + 0xcc], eax
jne 0x660a7e
cmp dword [ecx + 0x18], 0x3b9aca00
setne byte [esp + 0xf]
mov eax, dword [0x94bccc]
test eax, eax
je 0x65e7d0
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], eax
mov dword [esp], ecx
mov ecx, dword [ecx + 0x38]
cmp ecx, edx
jbe 0x660b07
mov edi, dword [esp]
mov esi, eax
mov ebx, dword [edi + 0x34]
test ebx, ebx
je 0x660b07
imul edi, edx, 0xf0
mov eax, dword [ebx + edi]
xor eax, 3
or eax, dword [ebx + edi + 4]
je 0x660b07
lea eax, [ebx + edi]
cmp dword [eax + 0xcc], esi
jne 0x660b07
mov dword [esp + 0x30], edx
cmp dword [eax + 0x64], 0
mov edx, dword [ebp + 8]
mov dword [esp + 4], edi
je 0x65e950
mov edi, dword [eax + 0x68]
mov dword [esp + 8], esi
cmp dword [edx + 8], edi
jbe 0x660bc0
mov ecx, dword [eax + 0x6c]
mov esi, edx
mov edx, dword [edx + 4]
mov esi, dword [esi + 0x10]
mov dword [esp + 0x60], ecx
lea ecx, [edi + edi*2]
shl ecx, 6
mov dword [esp + 0x80], esi
mov ebx, dword [edx + ecx + 4]
mov esi, dword [edx + ecx]
mov dword [edx + ecx], 2
mov dword [esp + 0x64], ebx
mov ebx, dword [esp + 0x80]
cmp esi, 2
mov dword [edx + ecx + 4], ebx
je 0x660bb7
mov ebx, dword [ebp + 8]
dec dword [ebx + 0xc]
cmp edi, dword [esp + 0x60]
mov dword [ebx + 0x10], edi
jne 0x65e960
mov edi, dword [esp + 8]
test esi, esi
jne 0x660c49
mov dword [eax + 0x64], 0
jmp 0x65e97a
movzx eax, byte [0x94ab88]
test al, al
je 0x65e3b7
movzx eax, al
cmp eax, 1
je 0x65e566
cmp eax, 2
je 0x65e5aa
mov ecx, 0x94ab80
call fcn.007d3740
test al, al
je 0x65e3b7
movzx eax, al
cmp eax, 2
je 0x65e5aa
mov eax, dword [0x94ab80]
mov ecx, dword [0x94bfb8]
cmp ecx, 2
jne 0x65e3b7
cmp dword [0x94bcc0], 0
mov edx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ecx, dword [0x94bcc8]
je 0x65e59a
mov esi, dword [ecx + 8]
dec esi
and esi, 0xfffffff8
lea edx, [esi + edx + 8]
push eax
push edx
call dword [ecx + 0x14]
add esp, 8
test al, al
je 0x65e3b7
mov ecx, dword [0x94ab80]
mov eax, dword [ecx + 0x20]
test eax, eax
je 0x660c5d
mov esi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x24]
mov dword [esp + 8], ecx
mov ecx, dword [ecx + 0x28]
mov edi, dword [esp + 0x58]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x68], edi
mov dword [esp + 0x20], 0
mov dword [esp + 0x30], esi
mov dword [esp + 0x6c], ecx
cmp dword [edx + 0x38], edi
jbe 0x660bf2
mov edx, dword [edx + 0x34]
test edx, edx
je 0x660bf2
imul ebx, edi, 0xf0
mov esi, dword [edx + ebx]
xor esi, 3
or esi, dword [edx + ebx + 4]
je 0x660bf2
add edx, ebx
cmp dword [edx + 0xcc], ecx
jne 0x660bf2
lea ebx, [edx + 0xcc]
cmp eax, 1
mov dword [esp + 0x1c4], ebx
je 0x660c5d
mov esi, dword [esp + 0x30]
mov dword [esp + 0x90], edi
mov dword [esp + 0x94], ecx
mov dword [esp + 0x200], esi
mov dword [esp + 0x204], eax
mov eax, dword [esp]
mov dword [esp + 0x208], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x20c], eax
mov dword [esp + 0x210], 1
mov eax, dword [edx]
xor eax, 3
or eax, dword [edx + 4]
je 0x660c71
cmp dword [ebx], ecx
jne 0x660c71
mov esi, dword [esp + 8]
add edx, 0x20
lea ecx, [esp + 0x10]
lea edi, [esp + 0x1c4]
mov dword [esp + 0x1d8], edx
lea edx, [esp + 0x200]
mov dword [esp + 0x2f8], ecx
mov dword [esp + 0x2fc], edi
mov dword [esp + 0x300], 0x8aa054
lea edi, [esp + 0x1d8]
mov dword [esp + 0x304], edx
lea edx, [esp + 0x2f8]
mov dword [esp + 0x308], edi
mov dword [esp + 0x30c], 0x8aa454
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], 2
lea eax, [esi + 0x1c]
mov dword [esp + 0x40], eax
mov eax, dword [0x94bfb8]
cmp eax, 2
jne 0x65f555
cmp dword [0x94bcc0], 0
mov edi, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ebx, dword [0x94bcc8]
lea eax, [esp + 0x38]
mov dword [esp + 0xd8], esi
mov dword [esp + 0xdc], eax
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 1
je 0x65f73f
mov eax, dword [ebx + 8]
lea ecx, [esp + 0xc8]
dec eax
and eax, 0xfffffff8
lea eax, [eax + edi + 8]
push ecx
push eax
call dword [ebx + 0x1c]
add esp, 8
lock inc dword [edi]
jle 0x660cfe
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], edx
mov dword [esp + 0xb0], 1
mov dword [esp + 0xb4], edi
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xc0], esi
mov eax, dword [ebx + 8]
dec eax
and eax, 0xfffffff8
lea edi, [eax + edi + 8]
jmp 0x65f77c
movzx eax, byte [0x94ab94]
test al, al
je 0x65e438
movzx eax, al
cmp eax, 1
je 0x65e806
cmp eax, 2
je 0x65e84a
mov ecx, 0x94ab8c
call fcn.007d3740
test al, al
je 0x65e438
movzx eax, al
cmp eax, 2
je 0x65e84a
mov eax, dword [0x94ab8c]
mov ecx, dword [0x94bfb8]
cmp ecx, 2
jne 0x65e438
cmp dword [0x94bcc0], 0
mov edx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ecx, dword [0x94bcc8]
je 0x65e83a
mov esi, dword [ecx + 8]
dec esi
and esi, 0xfffffff8
lea edx, [esi + edx + 8]
push eax
push edx
call dword [ecx + 0x14]
add esp, 8
test al, al
je 0x65e438
mov eax, dword [0x94ab8c]
mov ecx, dword [eax + 0x20]
test ecx, ecx
je 0x660cca
mov edx, dword [eax + 0x1c]
movsd xmm0, qword [eax + 0x24]
lea esi, [esp + 0xf]
mov dword [esp + 0x2f8], edx
lea edx, [esp + 0x10]
mov dword [esp + 0x2fc], ecx
lea ecx, [eax + 0x1c]
movlps qword [esp + 0x300], xmm0
mov dword [esp + 0x308], 0
mov dword [esp + 0x200], edx
lea edx, [esp + 0x2f8]
mov dword [esp + 0x204], 1
mov dword [esp + 0x208], ecx
mov dword [esp + 0x10], edx
lea edx, [esp + 0x200]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 0x8a99dc
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], eax
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 1
mov eax, dword [0x94bfb8]
cmp eax, 2
jne 0x65e438
cmp dword [0x94bcc0], 0
mov edi, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov esi, dword [0x94bcc8]
je 0x65e917
mov eax, dword [esi + 8]
dec eax
and eax, 0xfffffff8
lea edi, [eax + edi + 8]
lea eax, [esp + 0xc8]
push eax
push edi
call dword [esi + 0x28]
add esp, 8
test al, al
je 0x65e438
lea eax, [esp + 0xc8]
push eax
push edi
call dword [esi + 0x2c]
add esp, 8
jmp 0x65e438
mov edx, dword [esp + 0x30]
mov byte [esp + 0x2f8], 9
mov edi, esi
jmp 0x65e9ba
mov edi, dword [esp + 8]
test esi, esi
je 0x660cae
mov esi, dword [esp + 0x64]
mov dword [eax + 0x64], 1
mov dword [eax + 0x68], esi
lea eax, [edx + ecx + 8]
push 0xb8
push eax
lea eax, [esp + 0x300]
push eax
call fcn.007bd9b0
add esp, 0xc
movzx ebx, byte [esp + 0x2f8]
test ebx, ebx
je 0x65ea60
mov edx, dword [esp + 0x30]
cmp ebx, 9
jne 0x65f998
mov eax, dword [esp]
mov ebx, dword [eax + 0x34]
mov ecx, dword [eax + 0x38]
cmp ecx, edx
mov ecx, dword [esp + 4]
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], edi
jbe 0x660b5f
test ebx, ebx
je 0x660b5f
mov eax, dword [ebx + ecx]
xor eax, 3
or eax, dword [ebx + ecx + 4]
je 0x660b5f
add ebx, ecx
cmp dword [ebx + 0xcc], edi
jne 0x660b5f
cmp byte [ebx + 0x20], 5
je 0x65f8f2
mov eax, dword [0x94bccc]
mov ebx, dword [esp + 0x34]
test eax, eax
je 0x65ecb0
movzx eax, byte [esp + 0xf]
mov ecx, dword [ebp + 0x14]
lea edx, [esp + 0x54]
push eax
call fcn.00482f50
add esp, 4
movzx eax, byte [esp + 0x2f8]
cmp eax, 9
je 0x65efb0
test eax, eax
je 0x65efb0
cmp eax, 3
je 0x65efb0
lea ecx, [esp + 0x2f8]
call fcn.00646900
jmp 0x65efb0
mov eax, dword [esp + 0x304]
mov ecx, dword [esp]
mov edx, dword [esp + 0x310]
mov ebx, dword [esp + 0x314]
mov esi, dword [esp + 0x300]
mov dword [esp + 0x1a4], eax
mov eax, dword [esp + 0x308]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x1a0], eax
movzx eax, byte [esp + 0x31c]
mov byte [esp + 0xd], al
movzx eax, byte [esp + 0x31d]
mov byte [esp + 0xe], al
mov eax, dword [esp + 0x30]
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x318]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edi
mov edi, dword [esp + 0x30c]
cmp dword [ecx + 0x38], eax
movzx eax, byte [esp + 0x31e]
mov byte [esp + 0x60], al
movzx eax, byte [esp + 0x31f]
mov byte [esp + 0x8c], al
jbe 0x660b5f
mov eax, dword [ecx + 0x34]
test eax, eax
je 0x660b5f
mov ebx, dword [esp + 4]
mov ecx, dword [eax + ebx]
xor ecx, 3
or ecx, dword [eax + ebx + 4]
je 0x660b5f
add eax, dword [esp + 4]
mov ecx, dword [esp + 8]
cmp dword [eax + 0xcc], ecx
jne 0x660b5f
mov eax, dword [eax + 0x3c]
mov ebx, dword [esp + 0x34]
test esi, esi
mov dword [esp + 0x1bc], eax
mov eax, edi
je 0x65eb5c
xor eax, eax
cmp esi, 1
jne 0x65eb5c
mov eax, edi
mov ecx, 0
sub eax, dword [esp + 0x30]
cmovb eax, ecx
cmp dword [esp + 0x80], 0
cmovne eax, ecx
mov dword [esp + 0x1c0], eax
mov eax, dword [0x94bccc]
mov dword [esp + 0x64], edi
test eax, eax
je 0x65f06e
mov ecx, dword [esp + 0x1c0]
mov eax, dword [esp + 0x1bc]
test ecx, ecx
je 0x65ee3b
test eax, eax
jne 0x65ee3b
mov eax, dword [0x94bccc]
test eax, eax
je 0x65f59b
mov ebx, edx
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], eax
cmp dword [ecx + 0x38], edx
jbe 0x660b07
mov ecx, dword [ecx + 0x34]
test ecx, ecx
je 0x660b07
imul edx, edx, 0xf0
mov edi, esi
mov esi, dword [ecx + edx]
xor esi, 3
or esi, dword [ecx + edx + 4]
je 0x660b07
add ecx, edx
cmp dword [ecx + 0xcc], eax
jne 0x660b07
mov eax, dword [esp + 0x1a0]
mov dword [esp + 0xd0], edi
mov edx, dword [ebp + 8]
add ecx, 0x64
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xe0], eax
movzx eax, byte [esp + 0xd]
mov dword [esp + 0xe8], ebx
mov byte [esp + 0xec], al
movzx eax, byte [esp + 0xe]
mov byte [esp + 0xed], al
movzx eax, byte [esp + 0x60]
mov byte [esp + 0xee], al
movzx eax, byte [esp + 0x8c]
mov byte [esp + 0xef], al
lea eax, [esp + 0xc8]
mov byte [esp + 0xc8], 0
push eax
call fcn.00661260
add esp, 4
mov ebx, dword [esp + 0x34]
movzx eax, byte [esp + 0x2f8]
cmp eax, 9
jne 0x65ea35
jmp 0x65efb0
movzx eax, byte [0x94aba0]
test al, al
je 0x65ea0f
movzx eax, al
cmp eax, 1
je 0x65ece6
cmp eax, 2
je 0x65ed2a
mov ecx, 0x94ab98
call fcn.007d3740
test al, al
je 0x65ea0f
movzx eax, al
cmp eax, 2
je 0x65ed2a
mov eax, dword [0x94ab98]
mov ecx, dword [0x94bfb8]
cmp ecx, 2
jne 0x65ea0f
cmp dword [0x94bcc0], 0
mov edx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ecx, dword [0x94bcc8]
je 0x65ed1a
mov esi, dword [ecx + 8]
dec esi
and esi, 0xfffffff8
lea edx, [esi + edx + 8]
push eax
push edx
call dword [ecx + 0x14]
add esp, 8
test al, al
je 0x65ea0f
mov eax, dword [0x94ab98]
mov ecx, dword [eax + 0x20]
test ecx, ecx
je 0x660cde
mov edx, dword [eax + 0x1c]
movsd xmm0, qword [eax + 0x24]
lea esi, [esp + 0x10]
mov dword [esp + 0x10], 0x8aa4b0
mov dword [esp + 0x14], 1
mov dword [esp + 0x20], 0
mov dword [esp + 0x18], 0x93d1f8
mov dword [esp + 0x1c], 0
mov dword [esp + 0x38], edx
lea edx, [esp + 0x90]
mov dword [esp + 0x3c], ecx
lea ecx, [eax + 0x1c]
movlps qword [esp + 0x40], xmm0
mov dword [esp + 0x48], 0
mov dword [esp + 0x68], edx
lea edx, [esp + 0x38]
mov dword [esp + 0x6c], 1
mov dword [esp + 0x70], ecx
mov dword [esp + 0x90], edx
lea edx, [esp + 0x68]
mov dword [esp + 0x94], esi
mov dword [esp + 0x98], 0x8a682c
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], eax
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 1
mov eax, dword [0x94bfb8]
cmp eax, 2
jne 0x65ea0f
cmp dword [0x94bcc0], 0
mov edi, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov esi, dword [0x94bcc8]
je 0x65ee10
mov eax, dword [esi + 8]
dec eax
and eax, 0xfffffff8
lea edi, [eax + edi + 8]
lea eax, [esp + 0xc8]
push eax
push edi
call dword [esi + 0x28]
add esp, 8
test al, al
je 0x65ea0f
lea eax, [esp + 0xc8]
push eax
push edi
call dword [esi + 0x2c]
add esp, 8
jmp 0x65ea0f
mov edi, dword [ebp + 0x10]
mov dword [esp], esi
mov esi, 0
mov dword [esp + 4], edx
cmp ecx, edi
cmovae ecx, edi
test eax, eax
cmovle eax, esi
cmp ecx, eax
cmovb eax, ecx
test eax, eax
mov dword [esp + 0x1a8], eax
je 0x65fb67
mov esi, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], edx
cmp dword [ecx + 0x38], esi
jbe 0x660b5f
mov ecx, dword [ecx + 0x34]
test ecx, ecx
je 0x660b5f
imul edi, esi, 0xf0
mov ebx, dword [ecx + edi]
xor ebx, 3
or ebx, dword [ecx + edi + 4]
je 0x660b5f
add ecx, edi
cmp dword [ecx + 0xcc], edx
jne 0x660b5f
mov edi, dword [ecx + 0x38]
mov ebx, 0
test edi, edi
cmovle edi, ebx
mov ebx, dword [esp + 0x34]
cmp eax, edi
mov edi, dword [esp + 0x64]
jbe 0x65fb67
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], edx
mov eax, dword [ecx]
xor eax, 3
or eax, dword [ecx + 4]
je 0x660b07
cmp dword [ecx + 0xcc], edx
jne 0x660b07
mov eax, dword [esp]
mov edx, dword [ebp + 8]
add ecx, 0x64
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x1a0]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0xdc], edi
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 4]
mov dword [esp + 0xe8], eax
movzx eax, byte [esp + 0xd]
mov byte [esp + 0xec], al
movzx eax, byte [esp + 0xe]
mov byte [esp + 0xed], al
movzx eax, byte [esp + 0x60]
mov byte [esp + 0xee], al
movzx eax, byte [esp + 0x8c]
mov byte [esp + 0xef], al
lea eax, [esp + 0xc8]
mov byte [esp + 0xc8], 0
push eax
call fcn.00661260
add esp, 4
movzx eax, byte [esp + 0x2f8]
cmp eax, 9
jne 0x65ea35
nop word cs:[eax + eax]
mov eax, dword [esp + 0xb0]
cmp eax, 2
je 0x65e260
test eax, eax
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xb8]
je 0x65efdd
mov edx, dword [eax + 8]
dec edx
and edx, 0xfffffff8
lea ecx, [edx + ecx + 8]
lea edx, [esp + 0xa8]
push edx
push ecx
call dword [eax + 0x34]
add esp, 8
mov eax, dword [esp + 0xb0]
cmp eax, 2
je 0x65e260
test eax, eax
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xb8]
je 0x65f019
mov edx, dword [eax + 8]
dec edx
and edx, 0xfffffff8
lea ecx, [edx + ecx + 8]
push dword [esp + 0xac]
push dword [esp + 0xac]
push ecx
call dword [eax + 0x40]
add esp, 0xc
mov eax, dword [esp + 0xb0]
cmp eax, 2
je 0x65e260
test eax, eax
je 0x65e260
mov eax, dword [esp + 0xb4]
lock dec dword [eax]
jne 0x65e260
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xb8]
call fcn.0075aba0
jmp 0x65e260
movzx eax, byte [0x94abac]
test al, al
je 0x65eb74
movzx eax, al
cmp eax, 1
je 0x65f0ac
cmp eax, 2
je 0x65f0fc
mov ecx, 0x94aba4
mov ebx, edx
call fcn.007d3740
mov edx, ebx
mov ebx, dword [esp + 0x34]
test al, al
je 0x65eb74
movzx eax, al
cmp eax, 2
je 0x65f0fc
mov eax, dword [0x94aba4]
mov ecx, dword [0x94bfb8]
cmp ecx, 2
jne 0x65eb74
mov ebx, edx
cmp dword [0x94bcc0], 0
mov edx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ecx, dword [0x94bcc8]
je 0x65f0e6
mov edi, esi
mov esi, dword [ecx + 8]
dec esi
and esi, 0xfffffff8
lea edx, [esi + edx + 8]
mov esi, edi
push eax
push edx
call dword [ecx + 0x14]
add esp, 8
mov edx, ebx
mov ebx, dword [esp + 0x34]
test al, al
je 0x65eb74
mov ebx, dword [0x94aba4]
mov ecx, dword [ebx + 0x20]
test ecx, ecx
je 0x660c35
mov eax, dword [ebx + 0x1c]
mov dword [esp + 0x1ec], ebx
cmp ecx, 1
mov dword [esp + 8], eax
mov eax, dword [ebx + 0x24]
mov ebx, dword [ebx + 0x28]
mov dword [esp + 0x38], 0x8aa4d4
mov dword [esp + 0x3c], 1
mov dword [esp + 0x48], 0
mov dword [esp + 0x40], 0x93d1f8
mov dword [esp + 0x44], 0
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x2bc], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x2c0], ecx
mov dword [esp + 0x2c4], eax
mov dword [esp + 0x2c8], ebx
mov dword [esp + 0x2cc], 0
je 0x660c35
mov edi, dword [esp + 8]
cmp ecx, 2
mov dword [esp + 0x2d0], edi
mov dword [esp + 0x2d4], ecx
mov dword [esp + 0x2d8], eax
mov dword [esp + 0x2dc], ebx
mov dword [esp + 0x2e0], 1
jbe 0x660c35
mov dword [esp + 0x2e4], edi
mov dword [esp + 0x2e8], ecx
mov dword [esp + 0x2ec], eax
mov dword [esp + 0x2f0], ebx
mov dword [esp + 0x88], ebx
mov ebx, eax
mov ah, byte [esp + 0x60]
mov dword [esp + 0x2f4], 2
and ah, 1
cmp ecx, 3
mov byte [esp + 0x87], ah
je 0x660c35
mov dword [esp], esi
mov esi, dword [esp + 0x88]
lea eax, [esp + 0x1bc]
cmp ecx, 4
mov dword [esp + 0x1c4], edi
mov dword [esp + 0x1c8], ecx
mov dword [esp + 0x1cc], ebx
mov dword [esp + 0x1f4], eax
mov dword [esp + 0x1d0], esi
mov dword [esp + 0x1d4], 3
jbe 0x660c35
mov dword [esp + 4], edx
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1d8], edi
mov dword [esp + 0x1dc], ecx
mov dword [esp + 0x1e0], ebx
mov dword [esp + 0x1e4], esi
mov esi, dword [esp + 0x54]
mov dword [esp + 0x1e8], 4
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], eax
cmp dword [esi + 0x38], edx
jbe 0x660cb8
mov ebx, dword [esi + 0x34]
test ebx, ebx
je 0x660cb8
imul esi, edx, 0xf0
mov edi, dword [ebx + esi]
xor edi, 3
or edi, dword [ebx + esi + 4]
je 0x660cb8
add ebx, esi
cmp dword [ebx + 0xcc], eax
jne 0x660cb8
lea ecx, [esp + 0x1fc]
mov esi, dword [ebx + 0x3c]
mov dword [esp + 0x1f8], ecx
mov ecx, dword [esp + 0x1b4]
mov dword [esp + 0x1fc], esi
cmp ecx, 5
je 0x660c35
mov edi, dword [esp + 8]
mov esi, dword [esp + 0xa4]
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x90], edi
mov dword [esp + 0x94], ecx
mov dword [esp + 0x98], esi
mov esi, dword [esp + 0x88]
mov dword [esp + 0x9c], esi
mov dword [esp + 0xa0], 5
mov esi, dword [ebx]
xor esi, 3
or esi, dword [ebx + 4]
je 0x660cb8
cmp dword [ebx + 0xcc], eax
jne 0x660cb8
mov ecx, dword [esp + 0x1b4]
cmp ecx, 6
jbe 0x660c35
mov dword [esp + 0x68], edi
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x1a8], edx
mov dword [esp + 0x1ac], eax
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], 6
mov ecx, dword [ebx]
xor ecx, 3
or ecx, dword [ebx + 4]
je 0x660cf2
cmp dword [ebx + 0xcc], eax
jne 0x660cf2
lea ecx, [esp + 0x2bc]
mov edx, dword [esp + 0x1ec]
lea eax, [ebx + 0xd4]
add ebx, 0xd8
mov dword [esp + 0xc8], ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0xcc], ecx
lea ecx, [esp + 0x2d0]
mov dword [esp + 0xd0], 0x8a682c
mov dword [esp + 0xd4], ecx
lea ecx, [esp + 0x1c0]
mov dword [esp + 0xd8], ecx
lea ecx, [esp + 0x2e4]
mov dword [esp + 0xdc], 0x8a9914
mov dword [esp + 0xe0], ecx
lea ecx, [esp + 0x87]
mov dword [esp + 0xe4], ecx
lea ecx, [esp + 0x1c4]
mov dword [esp + 0xe8], 0x8a99dc
mov dword [esp + 0xec], ecx
lea ecx, [esp + 0x1f4]
mov dword [esp + 0xf0], ecx
lea ecx, [esp + 0x1d8]
mov dword [esp + 0xf4], 0x8aa4dc
mov dword [esp + 0xf8], ecx
lea ecx, [esp + 0x1f8]
mov dword [esp + 0xfc], ecx
lea ecx, [esp + 0x90]
mov dword [esp + 0x100], 0x8aa4dc
mov dword [esp + 0x104], ecx
mov dword [esp + 0x108], eax
lea eax, [esp + 0x68]
mov dword [esp + 0x10c], 0x8aa434
lea ecx, [esp + 0xc8]
mov dword [esp + 0x110], eax
lea eax, [edx + 0x1c]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], 7
mov dword [esp + 0x114], ebx
mov dword [esp + 0x118], 0x8a9914
mov dword [esp + 0x1b0], eax
lea eax, [esp + 0x1a8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 1
mov eax, dword [0x94bfb8]
mov ebx, dword [esp + 0x34]
cmp eax, 2
jne 0x65f549
cmp dword [0x94bcc0], 0
mov edi, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov esi, dword [0x94bcc8]
je 0x65f52d
mov eax, dword [esi + 8]
dec eax
and eax, 0xfffffff8
lea edi, [eax + edi + 8]
lea eax, [esp + 0x10]
push eax
push edi
call dword [esi + 0x28]
add esp, 8
test al, al
je 0x65f549
lea eax, [esp + 0x10]
push eax
push edi
call dword [esi + 0x2c]
add esp, 8
mov edx, dword [esp + 4]
mov esi, dword [esp]
jmp 0x65eb74
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0xdead
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set
mov dword [esp + 0xb8], 0x93b6a0
mov edi, str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set
mov ebx, 0x93b6a0
jmp 0x65f775
movzx eax, byte [0x94abdc]
test al, al
je 0x65eb9f
movzx eax, al
cmp eax, 1
je 0x65f5d5
cmp eax, 2
je 0x65f623
mov ecx, 0x94abd4
mov edi, edx
call fcn.007d3740
mov edx, edi
test al, al
je 0x65eb9f
movzx eax, al
cmp eax, 2
je 0x65f623
mov eax, dword [0x94abd4]
mov ecx, dword [0x94bfb8]
cmp ecx, 2
jne 0x65eb9f
mov ebx, edx
cmp dword [0x94bcc0], 0
mov edx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ecx, dword [0x94bcc8]
je 0x65f611
mov dword [esp], esi
mov esi, dword [ecx + 8]
dec esi
and esi, 0xfffffff8
lea edx, [esi + edx + 8]
mov esi, dword [esp]
push eax
push edx
call dword [ecx + 0x14]
add esp, 8
test al, al
mov edx, ebx
je 0x65eb9f
mov eax, dword [0x94abd4]
mov ecx, dword [eax + 0x20]
test ecx, ecx
je 0x660dad
mov edi, edx
mov edx, dword [eax + 0x1c]
movsd xmm0, qword [eax + 0x24]
lea ebx, [esp + 0x10]
mov dword [esp + 0x10], 0x8aa53c
mov dword [esp + 0x14], 1
mov dword [esp + 0x20], 0
mov dword [esp + 0x18], 0x93d1f8
mov dword [esp + 0x1c], 0
mov dword [esp + 0x38], edx
lea edx, [esp + 0x90]
mov dword [esp + 0x3c], ecx
lea ecx, [eax + 0x1c]
movlps qword [esp + 0x40], xmm0
mov dword [esp + 0x48], 0
mov dword [esp + 0x68], edx
lea edx, [esp + 0x38]
mov dword [esp + 0x6c], 1
mov dword [esp + 0x70], ecx
mov dword [esp + 0x90], edx
lea edx, [esp + 0x68]
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], 0x8a682c
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], eax
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 1
mov eax, dword [0x94bfb8]
cmp eax, 2
jne 0x65f738
cmp dword [0x94bcc0], 0
mov edx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ecx, dword [0x94bcc8]
je 0x65f707
mov eax, dword [ecx + 8]
dec eax
and eax, 0xfffffff8
lea edx, [eax + edx + 8]
lea eax, [esp + 0xc8]
mov dword [esp + 4], edx
push eax
push edx
mov dword [esp + 8], ecx
call dword [ecx + 0x28]
add esp, 8
test al, al
je 0x65f738
lea eax, [esp + 0xc8]
push eax
push dword [esp + 8]
mov eax, dword [esp + 8]
call dword [eax + 0x2c]
add esp, 8
mov edx, edi
jmp 0x65eb9f
lea eax, [esp + 0xc8]
push eax
push edi
call dword [ebx + 0x1c]
add esp, 8
mov dword [esp + 0xac], edx
mov dword [esp + 0xa8], eax
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], edi
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xc0], esi
lea eax, [esp + 0xa8]
push eax
push edi
call dword [ebx + 0x30]
add esp, 8
jmp 0x65e3cd
mov eax, dword [esp + 0x1b8]
mov byte [eax], 9
jmp 0x6606a2
movzx eax, byte [0x94ab7c]
test al, al
je 0x65e246
movzx eax, al
cmp eax, 1
je 0x65f7d5
cmp eax, 2
je 0x65f819
mov ecx, 0x94ab74
call fcn.007d3740
test al, al
je 0x65e246
movzx eax, al
cmp eax, 2
je 0x65f819
mov eax, dword [0x94ab74]
mov ecx, dword [0x94bfb8]
cmp ecx, 2
jne 0x65e246
cmp dword [0x94bcc0], 0
mov edx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ecx, dword [0x94bcc8]
je 0x65f809
mov esi, dword [ecx + 8]
dec esi
and esi, 0xfffffff8
lea edx, [esi + edx + 8]
push eax
push edx
call dword [ecx + 0x14]
add esp, 8
test al, al
je 0x65e246
mov edi, dword [0x94ab74]
mov dword [esp + 0x2f8], 0x93d1f8
mov dword [esp + 0x2fc], 0
lea eax, [edi + 0x1c]
mov dword [esp + 0x300], eax
mov eax, dword [0x94bfb8]
cmp eax, 2
jne 0x65fad8
cmp dword [0x94bcc0], 0
mov esi, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ebx, dword [0x94bcc8]
lea eax, [esp + 0x2f8]
mov dword [esp + 0xd8], edi
mov dword [esp + 0xdc], eax
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 1
je 0x65ff0a
mov eax, dword [ebx + 8]
lea ecx, [esp + 0xc8]
dec eax
and eax, 0xfffffff8
lea eax, [eax + esi + 8]
push ecx
push eax
call dword [ebx + 0x1c]
add esp, 8
lock inc dword [esi]
jle 0x660cfe
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], edx
mov dword [esp + 0x188], 1
mov dword [esp + 0x18c], esi
mov dword [esp + 0x190], ebx
mov dword [esp + 0x198], edi
mov eax, dword [ebx + 8]
dec eax
and eax, 0xfffffff8
lea esi, [eax + esi + 8]
jmp 0x65ff47
mov esi, dword [ebx + 0x24]
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], edi
mov eax, dword [ebx]
xor eax, 3
or eax, dword [ebx + 4]
je 0x660b5f
cmp dword [ebx + 0xcc], edi
jne 0x660b5f
mov eax, dword [ebx + 0xcc]
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], edi
mov ecx, dword [ebx]
mov dword [esp + 4], eax
xor ecx, 3
or ecx, dword [ebx + 4]
je 0x660b07
cmp dword [ebx + 0xcc], edi
jne 0x660b07
movzx eax, byte [ebx + 0x20]
mov ecx, eax
add cl, 0xfa
cmp cl, 6
jb 0x6604a1
mov ecx, eax
add cl, 0xfd
cmp cl, 2
ja 0x65f968
cmp cl, 1
jne 0x6604a1
movzx eax, al
test eax, eax
je 0x6604a1
cmp eax, 1
jne 0x660478
mov ecx, dword [ebx + 0x28]
lea eax, [ebx + 0x34]
push dword [ebx + 0x30]
push dword [ebx + 0x2c]
push eax
call dword [ecx + 0xc]
mov edx, dword [esp + 0x3c]
add esp, 0xc
jmp 0x6604a1
cmp ebx, 3
jne 0x65fb1e
push 0xa4
lea eax, [esp + 0x304]
push eax
lea eax, [esp + 0xd0]
push eax
call fcn.007bd9b0
add esp, 0xc
mov eax, dword [esp + 0x3a8]
mov ecx, dword [esp + 0x3ac]
mov esi, dword [esp + 0x3a4]
mov edx, dword [esp]
mov dword [esp + 0x30], ecx
mov dword [esp + 4], eax
lea ecx, [esp + 0x10]
mov dword [esp], esi
push esi
call fcn.004928c0
add esp, 4
cmp dword [esp + 0x10], 0
je 0x660dc1
mov eax, dword [esp + 0x18]
movsd xmm0, qword [esp + 0x10]
movsd qword [esp + 0x38], xmm0
mov dword [esp + 0x40], eax
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x90], edi
mov dword [esp + 0x94], eax
cmp dword [edx + 0x38], edi
jbe 0x660d00
mov esi, dword [edx + 0x34]
test esi, esi
je 0x660d00
imul ecx, edi, 0xf0
mov ebx, dword [esi + ecx]
xor ebx, 3
or ebx, dword [esi + ecx + 4]
je 0x660d00
add esi, ecx
cmp dword [esi + 0xcc], eax
jne 0x660d00
mov byte [esi + 0xe5], 0
mov dword [esp + 0x90], edi
mov dword [esp + 0x94], eax
cmp dword [edx + 0x38], edi
mov edi, dword [esp + 0x34]
jbe 0x660d2a
mov edx, dword [edx + 0x34]
test edx, edx
je 0x660d2a
mov esi, dword [edx + ecx]
xor esi, 3
or esi, dword [edx + ecx + 4]
je 0x660d2a
add edx, ecx
cmp dword [edx + 0xcc], eax
jne 0x660d2a
cmp dword [edx + 0x64], 0
je 0x66042e
mov ecx, dword [ebp + 0x14]
mov eax, dword [ecx + 8]
cmp eax, dword [ecx + 0xc]
jbe 0x660423
lea esi, [esp + 0x38]
mov edx, esi
call fcn.00482e30
mov ecx, edi
mov edx, esi
call fcn.00661390
jmp 0x66042e
mov dword [esp + 0x184], 0
mov dword [esp + 0x180], 0xdead
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set
mov dword [esp + 0x190], 0x93b6a0
mov esi, str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set
mov ebx, 0x93b6a0
jmp 0x65ff40
mov edi, dword [esp + 0x1f0]
mov eax, ebx
mov edx, dword [esp + 0x2fc]
mov ecx, dword [esp + 0x300]
mov esi, dword [esp + 0x304]
dec eax
add edi, dword [eax*4 + 0x660e08]
lea eax, [esp + 0x308]
jmp edi
mov eax, dword [0x94bccc]
test eax, eax
je 0x65ff5f
mov eax, dword [0x94bccc]
test eax, eax
je 0x660088
mov al, 1
mov dword [esp + 0x18], 2
mov dword [esp + 0x28], 0
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x54]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], eax
cmp dword [edx + 0x38], ecx
jbe 0x660d73
mov esi, dword [edx + 0x34]
test esi, esi
je 0x660d73
imul ecx, ecx, 0xf0
mov edx, dword [esi + ecx]
xor edx, 3
or edx, dword [esi + ecx + 4]
je 0x660d73
add esi, ecx
cmp dword [esi + 0xcc], eax
jne 0x660d73
mov ecx, dword [ebx + 0x54]
xor eax, eax
mov edx, dword [esp + 0x1a8]
mov dword [esp + 0x2bc], ecx
mov dword [esp + 0x8c], ecx
mov ebx, edx
mov edi, dword [esi + 0x3c]
test edi, edi
cmovle edi, eax
cmp edi, ecx
cmovae edi, ecx
lea ecx, [esi + 0x38]
sub edi, dword [esi + 0xd8]
cmovb edi, eax
mov dword [esp + 0x2d0], edi
call fcn.00484aa0
movq xmm0, qword [esi + 0xd4]
movd xmm1, ebx
mov dword [esp + 0xa4], ebx
pshufd xmm1, xmm1, 0x50
psubd xmm0, xmm1
movq qword [esi + 0xd4], xmm0
mov eax, dword [0x94bccc]
test eax, eax
je 0x66013b
mov ebx, dword [esp + 0x8c]
mov eax, dword [esi + 0x3c]
mov ecx, 0
test eax, eax
cmovle eax, ecx
cmp eax, ebx
cmovae eax, ebx
sub eax, dword [esi + 0xd8]
cmovb eax, ecx
cmp edi, eax
jae 0x65fc82
mov ecx, esi
call fcn.00488650
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0xa4]
mov edi, dword [esp + 4]
add eax, dword [ebx + 0x4c]
jno 0x65fcab
cmp byte [esp + 8], 0
je 0x65fcb5
mov edx, dword [esp + 0x18]
cmp edx, 2
jne 0x65fce4
jmp 0x65fd33
mov dword [ebx + 0x4c], eax
cmp byte [esp + 8], 0
jne 0x65fc9d
cmp dword [esp + 0x18], 0
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
je 0x65fccf
mov edx, dword [eax + 8]
dec edx
and edx, 0xfffffff8
lea ecx, [edx + ecx + 8]
lea edx, [esp + 0x10]
push edx
push ecx
call dword [eax + 0x34]
add esp, 8
mov edx, dword [esp + 0x18]
cmp edx, 2
je 0x65fd33
test edx, edx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
je 0x65fd07
mov edi, dword [edx + 8]
dec edi
and edi, 0xfffffff8
lea esi, [edi + esi + 8]
mov edi, dword [esp + 4]
push ecx
push eax
push esi
call dword [edx + 0x40]
add esp, 0xc
mov eax, dword [esp + 0x18]
cmp eax, 2
je 0x65fd33
test eax, eax
je 0x65fd33
mov eax, dword [esp + 0x1c]
lock dec dword [eax]
jne 0x65fd33
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
call fcn.0075aba0
mov eax, dword [0x94bccc]
add ebx, 0x48
test eax, eax
je 0x66037a
mov dword [esp + 0xd0], 2
mov dword [esp + 0xe0], 0
mov cl, 1
mov edx, dword [esp + 0x1a8]
mov esi, edi
mov edi, ecx
mov ecx, ebx
mov dword [esp + 8], edx
call fcn.00484aa0
cmp dword [esp], 0
mov eax, dword [esp + 0x64]
je 0x65fda0
movzx eax, byte [esp + 0x60]
cmp dword [esp], 1
mov ebx, eax
jne 0x65fdb7
mov eax, dword [esp + 0x64]
xor ecx, ecx
sub eax, dword [esp + 0x30]
cmovb eax, ecx
cmp dword [esp + 0x80], 0
cmovne eax, ecx
movzx edx, byte [esp + 0x60]
mov ecx, edx
and cl, 0xfe
cmp eax, dword [esp + 8]
movzx eax, dl
movzx ebx, cl
cmovbe ebx, eax
mov eax, edi
test al, al
jne 0x65fdef
cmp dword [esp + 0xd0], 0
mov ecx, dword [esp + 0xd4]
mov eax, dword [esp + 0xd8]
je 0x65fde0
mov edx, dword [eax + 8]
dec edx
and edx, 0xfffffff8
lea ecx, [edx + ecx + 8]
lea edx, [esp + 0xc8]
push edx
push ecx
call dword [eax + 0x34]
add esp, 8
mov edx, dword [esp + 0xd0]
and byte [esp + 0x60], 1
cmp edx, 2
je 0x65fe67
test edx, edx
mov esi, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov edi, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
je 0x65fe2b
mov eax, dword [edx + 8]
dec eax
and eax, 0xfffffff8
lea edi, [eax + edi + 8]
push ecx
push esi
push edi
call dword [edx + 0x40]
add esp, 0xc
mov eax, dword [esp + 0xd0]
mov esi, dword [esp + 4]
cmp eax, 2
je 0x65fe67
test eax, eax
je 0x65fe67
mov eax, dword [esp + 0xd4]
lock dec dword [eax]
jne 0x65fe67
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
call fcn.0075aba0
mov eax, dword [esp]
mov edi, dword [esp + 8]
movsd xmm0, qword [esp + 0x58]
movzx ecx, byte [esp + 0x60]
movzx edx, byte [esp + 0xd]
mov dword [esp + 0x208], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp + 0x20c], eax
mov eax, dword [esp + 0x1a0]
mov dword [esp + 0x210], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x214], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], edi
movsd qword [esp + 0x228], xmm0
mov byte [esp + 0x230], cl
movzx ecx, byte [esp + 0xe]
mov dword [esp + 0x238], esi
mov byte [esp + 0x23c], dl
mov byte [esp + 0x23d], cl
mov byte [esp + 0x23e], bl
mov byte [esp + 0x200], 0
jmp 0x660510
lea eax, [esp + 0xc8]
push eax
push esi
call dword [ebx + 0x1c]
add esp, 8
mov dword [esp + 0x184], edx
mov dword [esp + 0x180], eax
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], esi
mov dword [esp + 0x190], ebx
mov dword [esp + 0x198], edi
lea eax, [esp + 0x180]
push eax
push esi
call dword [ebx + 0x30]
add esp, 8
mov ebx, dword [esp + 0x34]
jmp 0x65e260
movzx eax, byte [0x94abb8]
test al, al
je 0x65fb74
movzx ecx, al
cmp ecx, 1
je 0x65ff81
cmp ecx, 2
jne 0x660a39
mov al, 2
mov ecx, dword [0x94abb0]
movzx edx, al
call fcn.007580e0
test al, al
je 0x65fb74
mov ecx, dword [0x94abb0]
mov eax, dword [ecx + 0x20]
test eax, eax
je 0x660ddf
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x24]
mov esi, dword [ecx + 0x28]
cmp eax, 1
mov dword [esp + 0xc8], 0x8aa510
mov dword [esp + 0xcc], 1
mov dword [esp + 0xd8], 0
mov dword [esp + 0xd0], 0x93d1f8
mov dword [esp + 0xd4], 0
mov dword [esp + 0x68], edi
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], edx
mov dword [esp + 0x74], esi
mov dword [esp + 0x78], 0
je 0x660ddf
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], esi
lea esi, [esp + 0x68]
lea edx, [esp + 0xc8]
mov dword [esp + 0x48], 1
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edx
lea esi, [esp + 0x38]
lea edx, [esp + 0x1a8]
mov dword [esp + 0x18], 0x8a682c
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], edx
lea edx, [esp + 0x10]
lea esi, [ecx + 0x1c]
mov dword [esp + 0x24], 0x8aa434
mov dword [esp + 0x90], edx
lea edx, [esp + 0x90]
mov dword [esp + 0x94], 2
mov dword [esp + 0x98], esi
call fcn.007587f0
jmp 0x65fb74
movzx eax, byte [0x94abc4]
test al, al
je 0x65fb81
movzx ecx, al
cmp ecx, 1
je 0x6600aa
cmp ecx, 2
jne 0x660a50
mov al, 2
mov ecx, dword [0x94abbc]
movzx edx, al
call fcn.007580e0
test al, al
je 0x65fb81
mov edx, dword [0x94abbc]
mov dword [esp + 0xc8], 0x93d1f8
lea esi, [esp + 0x10]
mov dword [esp + 0xcc], 0
mov ecx, esi
lea eax, [edx + 0x1c]
mov dword [esp + 0xd0], eax
lea eax, [esp + 0xc8]
push eax
call fcn.00758000
add esp, 4
mov eax, dword [esp + 0x18]
mov cl, 1
mov dword [esp + 8], ecx
cmp eax, 2
je 0x65fb97
test eax, eax
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
je 0x660126
mov edx, dword [eax + 8]
dec edx
and edx, 0xfffffff8
lea ecx, [edx + ecx + 8]
push esi
push ecx
call dword [eax + 0x30]
add esp, 8
mov dword [esp + 8], 0
jmp 0x65fb97
movzx eax, byte [0x94a530]
test al, al
je 0x65fc55
mov ebx, dword [esp + 0x8c]
movzx eax, al
cmp eax, 1
je 0x660178
cmp eax, 2
je 0x6601d1
mov ecx, 0x94a528
call fcn.007d3740
test al, al
je 0x65fc5c
movzx eax, al
cmp eax, 2
je 0x6601d1
mov eax, dword [0x94a528]
mov ecx, dword [0x94bfb8]
cmp ecx, 2
jne 0x65fc5c
cmp dword [0x94bcc0], 0
mov edx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ecx, dword [0x94bcc8]
je 0x6601c1
mov dword [esp + 0x88], ecx
mov ecx, dword [esp + 0x88]
mov ecx, dword [ecx + 8]
dec ecx
and ecx, 0xfffffff8
lea edx, [ecx + edx + 8]
mov ecx, dword [esp + 0x88]
push eax
push edx
call dword [ecx + 0x14]
add esp, 8
test al, al
je 0x65fc5c
mov eax, dword [0x94a528]
mov ecx, dword [eax + 0x20]
test ecx, ecx
je 0x660df3
movq xmm0, qword [eax + 0x24]
mov edx, dword [eax + 0x1c]
lea edi, [esi + 0xd8]
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], ecx
movq qword [esp + 0x98], xmm0
mov dword [esp + 0xa0], 0
lea edx, [esp + 0x2e4]
mov ecx, dword [esi + 0x3c]
mov dword [esp + 0xc8], edx
lea edx, [esi + 0xcc]
mov dword [esp + 0xcc], 0x470660
mov dword [esp + 0xd0], edi
mov dword [esp + 0xd4], 0x4631b0
lea edi, [esp + 0x2bc]
mov dword [esp + 0x68], 0x828398
mov dword [esp + 0x6c], 5
mov dword [esp + 0x78], 0
mov dword [esp + 0xd8], edx
lea edx, [esp + 0x2d0]
mov dword [esp + 0xdc], 0x47c5e0
mov dword [esp + 0xe0], edi
mov dword [esp + 0xe4], 0x4631b0
lea edi, [esp + 0x1c4]
mov dword [esp + 0xe8], edx
lea edx, [eax + 0x1c]
mov dword [esp + 0x1d8], edi
mov dword [esp + 0x1dc], 1
lea edi, [esp + 0x1d8]
mov dword [esp + 0xec], 0x4631b0
mov dword [esp + 0x1e0], edx
lea edx, [esp + 0xc8]
mov dword [esp + 0x48], edi
lea edi, [esp + 0x90]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 1
mov dword [esp + 0x70], edx
lea edx, [esp + 0x68]
mov dword [esp + 0x1c4], edi
mov dword [esp + 0x2e4], ecx
mov dword [esp + 0x74], 5
mov dword [esp + 0x1c8], edx
mov dword [esp + 0x1cc], 0x81c698
mov eax, dword [0x94bfb8]
cmp eax, 2
jne 0x660367
cmp dword [0x94bcc0], 0
mov ebx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov edi, dword [0x94bcc8]
je 0x66034b
mov eax, dword [edi + 8]
dec eax
and eax, 0xfffffff8
lea ebx, [eax + ebx + 8]
lea eax, [esp + 0x38]
push eax
push ebx
call dword [edi + 0x28]
add esp, 8
test al, al
je 0x660367
lea eax, [esp + 0x38]
push eax
push ebx
call dword [edi + 0x2c]
add esp, 8
mov edi, dword [esp + 0x2d0]
mov ebx, dword [esp + 0x2bc]
jmp 0x65fc5c
movzx eax, byte [0x94abd0]
test al, al
je 0x65fd43
movzx ecx, al
cmp ecx, 1
je 0x66039c
cmp ecx, 2
jne 0x660a67
mov al, 2
mov ecx, dword [0x94abc8]
movzx edx, al
call fcn.007580e0
test al, al
je 0x65fd43
mov edx, dword [0x94abc8]
lea esi, [esp + 0xc8]
mov dword [esp + 0x10], 0x93d1f8
mov dword [esp + 0x14], 0
mov ecx, esi
lea eax, [edx + 0x1c]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x10]
push eax
call fcn.00758000
add esp, 4
mov eax, dword [esp + 0xd0]
mov cl, 1
cmp eax, 2
je 0x65fd5b
test eax, eax
mov ecx, dword [esp + 0xd4]
mov eax, dword [esp + 0xd8]
je 0x660414
mov edx, dword [eax + 8]
dec edx
and edx, 0xfffffff8
lea ecx, [edx + ecx + 8]
push esi
push ecx
call dword [eax + 0x30]
add esp, 8
xor ecx, ecx
jmp 0x65fd5b
lea edx, [esp + 0x38]
mov ecx, edi
call fcn.00485690
lea eax, [esp + 0x208]
push 0xa4
lea ecx, [esp + 0xcc]
push ecx
push eax
call fcn.007bd9b0
add esp, 0xc
mov eax, dword [esp]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 4]
mov dword [esp + 0x2ac], eax
mov dword [esp + 0x2b4], edx
mov dword [esp + 0x2b0], ecx
mov byte [esp + 0x200], 3
jmp 0x660510
test dword [ebx + 0x24], 0x7fffffff
je 0x6604a1
push dword [ebx + 0x28]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x58]
mov edi, dword [esp + 0x5c]
mov dword [esp], eax
mov eax, dword [esp + 4]
mov word [ebx + 0x20], pe_nt_image_headers32
mov dword [ebx + 0x24], eax
mov eax, dword [esp]
mov dword [ebx + 0x28], esi
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], edi
cmp dword [eax + 0x38], edx
jbe 0x660b5f
mov eax, dword [eax + 0x34]
test eax, eax
je 0x660b5f
imul ecx, edx, 0xf0
mov edx, dword [eax + ecx]
xor edx, 3
or edx, dword [eax + ecx + 4]
je 0x660b5f
add eax, ecx
cmp dword [eax + 0xcc], edi
jne 0x660b5f
mov eax, dword [eax + 0xcc]
mov dword [esp + 0x204], eax
mov dword [esp + 0x208], esi
mov byte [esp + 0x200], 8
movzx eax, byte [esp + 0x2f8]
cmp eax, 9
je 0x660532
test eax, eax
je 0x660532
cmp eax, 3
je 0x660532
lea ecx, [esp + 0x2f8]
call fcn.00646900
mov eax, dword [0x94bccc]
test eax, eax
je 0x660755
mov esi, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x54]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
cmp dword [edx + 0x38], esi
jbe 0x660cc1
mov edx, dword [edx + 0x34]
test edx, edx
je 0x660cc1
imul edi, esi, 0xf0
mov ebx, dword [edx + edi]
xor ebx, 3
or ebx, dword [edx + edi + 4]
je 0x660cc1
add edx, edi
cmp dword [edx + 0xcc], eax
jne 0x660cc1
cmp dword [edx + 0x64], 0
mov ecx, dword [esp + 0x34]
jne 0x6605bd
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
mov esi, dword [edx]
xor esi, 3
or esi, dword [edx + 4]
je 0x660cc1
cmp dword [edx + 0xcc], eax
jne 0x660cc1
cmp byte [edx + 0x20], 5
jne 0x6605c6
lea edx, [esp + 0x54]
call fcn.00661390
movzx eax, byte [esp + 0xf]
mov ecx, dword [ebp + 0x14]
lea edx, [esp + 0x54]
push eax
call fcn.00482f50
add esp, 4
push 0xb8
lea eax, [esp + 0x204]
push eax
push dword [esp + 0x1c0]
call fcn.007bd9b0
add esp, 0xc
mov eax, dword [esp + 0xb0]
cmp eax, 2
je 0x6606a2
test eax, eax
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xb8]
je 0x660624
mov edx, dword [eax + 8]
dec edx
and edx, 0xfffffff8
lea ecx, [edx + ecx + 8]
lea edx, [esp + 0xa8]
push edx
push ecx
call dword [eax + 0x34]
add esp, 8
mov edx, dword [esp + 0xb0]
cmp edx, 2
je 0x6606a2
test edx, edx
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xac]
mov esi, dword [esp + 0xb4]
mov edx, dword [esp + 0xb8]
je 0x66066a
mov edi, dword [edx + 8]
dec edi
and edi, 0xfffffff8
lea esi, [edi + esi + 8]
push ecx
push eax
push esi
call dword [edx + 0x40]
add esp, 0xc
mov eax, dword [esp + 0xb0]
cmp eax, 2
je 0x6606a2
test eax, eax
je 0x6606a2
mov eax, dword [esp + 0xb4]
lock dec dword [eax]
jne 0x6606a2
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xb8]
call fcn.0075aba0
mov eax, dword [esp + 0x188]
cmp eax, 2
je 0x66074d
test eax, eax
mov ecx, dword [esp + 0x18c]
mov eax, dword [esp + 0x190]
je 0x6606cf
mov edx, dword [eax + 8]
dec edx
and edx, 0xfffffff8
lea ecx, [edx + ecx + 8]
lea edx, [esp + 0x180]
push edx
push ecx
call dword [eax + 0x34]
add esp, 8
mov edx, dword [esp + 0x188]
cmp edx, 2
je 0x66074d
test edx, edx
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0x184]
mov esi, dword [esp + 0x18c]
mov edx, dword [esp + 0x190]
je 0x660715
mov edi, dword [edx + 8]
dec edi
and edi, 0xfffffff8
lea esi, [edi + esi + 8]
push ecx
push eax
push esi
call dword [edx + 0x40]
add esp, 0xc
mov eax, dword [esp + 0x188]
cmp eax, 2
je 0x66074d
test eax, eax
je 0x66074d
mov eax, dword [esp + 0x18c]
lock dec dword [eax]
jne 0x66074d
mov ecx, dword [esp + 0x18c]
mov edx, dword [esp + 0x190]
call fcn.0075aba0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movzx eax, byte [0x94abe8]
test al, al
je 0x66053f
movzx eax, al
cmp eax, 1
je 0x66078b
cmp eax, 2
je 0x6607cf
mov ecx, 0x94abe0
call fcn.007d3740
test al, al
je 0x66053f
movzx eax, al
cmp eax, 2
je 0x6607cf
mov eax, dword [0x94abe0]
mov ecx, dword [0x94bfb8]
cmp ecx, 2
jne 0x66053f
cmp dword [0x94bcc0], 0
mov edx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ecx, dword [0x94bcc8]
je 0x6607bf
mov esi, dword [ecx + 8]
dec esi
and esi, 0xfffffff8
lea edx, [esi + edx + 8]
push eax
push edx
call dword [ecx + 0x14]
add esp, 8
test al, al
je 0x66053f
mov eax, dword [0x94abe0]
mov ecx, dword [eax + 0x20]
test ecx, ecx
je 0x660dcb
mov edx, dword [eax + 0x1c]
movsd xmm0, qword [eax + 0x24]
mov dword [esp + str.pop_frame__frame], 0x8aa578
mov dword [esp + 0x2fc], 1
lea esi, [esp + 0x10]
mov dword [esp + 0x308], 0
mov dword [esp + 0x68], esi
lea esi, [eax + 0x1c]
mov dword [esp + 0x10], edx
lea edx, [esp + 0x90]
mov dword [esp + 0x14], ecx
movlps qword [esp + 0x18], xmm0
mov dword [esp + 0x20], 0
mov dword [esp + 0x300], edx
lea edx, [esp + 0x68]
mov dword [esp + 0x304], 1
mov dword [esp + 0x38], edx
lea edx, [esp + 0x38]
mov dword [esp + 0x3c], 1
mov dword [esp + 0x40], esi
lea esi, [esp + 0x200]
mov dword [esp + 0xd8], edx
lea edx, [esp + 0x2f8]
mov dword [esp + 0xdc], eax
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], fcn.00660fb0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 1
mov dword [esp + 0x6c], edx
mov dword [esp + 0x70], 0x8a682c
mov eax, dword [0x94bfb8]
cmp eax, 2
jne 0x66053f
cmp dword [0x94bcc0], 0
mov edi, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov esi, dword [0x94bcc8]
je 0x6608d7
mov eax, dword [esi + 8]
dec eax
and eax, 0xfffffff8
lea edi, [eax + edi + 8]
lea eax, [esp + 0xc8]
push eax
push edi
call dword [esi + 0x28]
add esp, 8
test al, al
je 0x66053f
lea eax, [esp + 0xc8]
push eax
push edi
call dword [esi + 0x2c]
add esp, 8
jmp 0x66053f
mov ecx, 0x94abb0
call fcn.007d3740
test al, al
jne 0x65ff81
jmp 0x65fb74
mov ecx, 0x94abbc
call fcn.007d3740
test al, al
jne 0x6600aa
jmp 0x65fb81
mov ecx, 0x94abc8
call fcn.007d3740
test al, al
jne 0x66039c
jmp 0x65fd43
lea eax, [esp + 0x204]
mov dword [esp + 0x2f8], eax
lea eax, [esp + 0x2f8]
mov dword [esp + 0xc8], 0x828150
mov dword [esp + 0xcc], 1
mov dword [esp + 0x2fc], 0x47c5e0
mov dword [esp + 0xd8], 0
jmp 0x660b94
lea eax, [esp + 0x204]
mov dword [esp + 0xc8], 0x828150
mov dword [esp + 0xcc], 1
mov dword [esp + 0xd8], 0
mov dword [esp + 0x2f8], eax
lea eax, [esp + 0x2f8]
mov dword [esp + 0x2fc], 0x47c5e0
jmp 0x660b3c
lea eax, [esp + 0x3c]
mov dword [esp + 0xc8], 0x828150
mov dword [esp + 0xcc], 1
mov dword [esp + 0xd8], 0
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0x47c5e0
lea eax, [esp + 0x10]
lea ecx, [esp + 0xc8]
mov edx, 0x828168
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], 1
call fcn.007c1b50
lea eax, [esp + 0x3c]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc8], 0x828150
mov dword [esp + 0xcc], 1
mov dword [esp + 0x14], 0x47c5e0
mov dword [esp + 0xd8], 0
lea eax, [esp + 0x10]
lea ecx, [esp + 0xc8]
mov edx, 0x828158
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], 1
call fcn.007c1b50
mov eax, dword [esp + 0x64]
add edx, ecx
mov dword [edx + 4], eax
mov ecx, 0x8ac6bc
mov edx, 0xb
push 0x8aad14
call fcn.007c2000
mov ecx, str.assertion_failed:_N::next_stream_.is_none__
mov edx, 0x2c
push 0x8aac1c
call fcn.007c1ca0
mov ecx, 0x8aabe0
call fcn.007c1fe0
lea eax, [esp + 0x6c]
mov dword [esp + 0xc8], 0x828150
mov dword [esp + 0xcc], 1
mov dword [esp + 0xd8], 0
mov dword [esp + 0x200], eax
mov dword [esp + 0x204], 0x47c5e0
lea eax, [esp + 0x200]
jmp 0x660b94
mov ecx, 0x8a6758
mov edx, 0x22
push 0x8aa4b8
call fcn.007c2000
mov ecx, 0x8aad34
mov edx, 0x25
push 0x8aad5c
call fcn.007c1ca0
mov ecx, 0x8a6758
mov edx, 0x22
push 0x8aa444
call fcn.007c2000
lea eax, [esp + 0x94]
mov dword [esp + 0xc8], 0x828150
mov dword [esp + 0xcc], 1
mov dword [esp + 0xd8], 0
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], 0x47c5e0
lea eax, [esp + 0x68]
jmp 0x660b94
mov ecx, 0x8aad24
call fcn.007c1fe0
lea eax, [esp + 0x6c]
jmp 0x660b63
lea eax, [esp + 0x14]
jmp 0x660a85
mov ecx, 0x8a6758
mov edx, 0x22
push 0x8aa464
call fcn.007c2000
mov ecx, 0x8a6758
mov edx, 0x22
push 0x8aa474
call fcn.007c2000
lea eax, [esp + 0x1ac]
jmp 0x660b63
ud2
lea ecx, [esp + 0x68]
lea eax, [esp + 0x94]
mov dword [esp + 0x10], 0x828150
mov dword [esp + 0x14], 1
mov dword [esp + 0x20], 0
mov edx, 0x828168
jmp 0x660d52
lea ecx, [esp + 0x68]
lea eax, [esp + 0x94]
mov dword [esp + 0x10], 0x828150
mov dword [esp + 0x14], 1
mov dword [esp + 0x20], 0
mov edx, 0x828158
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x10]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], 0x47c5e0
mov dword [esp + 0x1c], 1
call fcn.007c1b50
lea eax, [esp + 0x6c]
mov dword [esp + 0xc8], 0x828150
mov dword [esp + 0xcc], 1
mov dword [esp + 0xd8], 0
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], 0x47c5e0
lea eax, [esp + 0x38]
jmp 0x660b3c
mov ecx, 0x8a6758
mov edx, 0x22
push 0x8aa518
call fcn.007c2000
mov ecx, 0x8aa544
call fcn.007c1fe0
mov ecx, 0x8a6758
mov edx, 0x22
push 0x8aa554
call fcn.007c2000
mov ecx, 0x8a6758
mov edx, 0x22
push 0x8aa4ec
call fcn.007c2000
mov ecx, 0x8a6758
mov edx, 0x22
push 0x828368
call fcn.007c2000
nop
fisub word [esi]
add byte [eax], al
push cs
daa
add byte [eax], al
fisubr dword [edx]
add byte [eax], al
das
daa
add byte [eax], al
mov dword [0xdd000027], eax
daa
add byte [eax], al
sub dword [ecx], ebx
add byte [eax], al
sub dword [ecx], ebx
add byte [eax], al
int3