Function at 0x6fdd5de0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
xor ebp, ebp
push edi
xor edx, edx
push esi
xor edi, edi
push ebx
xor esi, esi
sub esp, 0x2cc
xor ebx, ebx
movzx eax, byte [esp + 0x2e8]
mov dword [esp + 0x1c0], ebp
xor ebp, ebp
mov dword [esp + 0x1dc], edx
xor edx, edx
mov dword [esp + 0x1e0], ebx
xor ebx, ebx
mov byte [esp + 0xab], al
movzx eax, byte [esp + 0x2ec]
mov dword [esp + 0x1e4], esi
xor esi, esi
mov dword [esp + 0x1e8], edi
xor edi, edi
mov dword [esp + 0x1ec], ebp
xor ebp, ebp
mov byte [esp + 0xaa], al
mov eax, dword [esp + 0x2e0]
mov dword [esp + 0x208], edx
xor edx, edx
mov dword [esp + 0x20c], ebx
xor ebx, ebx
mov dword [esp + 0x210], esi
add eax, 0xc0
mov dword [esp + 0x8c], eax
xor eax, eax
mov dword [esp + 0x1c4], eax
xor eax, eax
mov dword [esp + 0x1c8], eax
xor eax, eax
mov dword [esp + 0x1cc], eax
xor eax, eax
mov dword [esp + 0x1d0], eax
xor eax, eax
mov dword [esp + 0x1d4], eax
xor eax, eax
mov dword [esp + 0x1d8], eax
xor eax, eax
mov dword [esp + 0x1f0], eax
xor eax, eax
mov dword [esp + 0x1f4], eax
xor eax, eax
mov dword [esp + 0x1f8], eax
xor eax, eax
mov dword [esp + 0x1fc], eax
xor eax, eax
mov dword [esp + 0x200], eax
xor eax, eax
mov dword [esp + 0x204], eax
xor eax, eax
mov dword [esp + 0x214], edi
mov dword [esp + 0x218], ebp
mov dword [esp + 0x21c], eax
xor eax, eax
mov dword [esp + 0x220], eax
xor eax, eax
mov dword [esp + 0x224], eax
xor eax, eax
mov dword [esp + 0x228], eax
xor eax, eax
mov dword [esp + 0x22c], eax
xor eax, eax
xor esi, esi
mov dword [esp + 0x230], eax
xor eax, eax
xor edi, edi
mov dword [esp + 0x248], eax
xor eax, eax
xor ebp, ebp
mov dword [esp + 0x24c], eax
xor eax, eax
mov dword [esp + 0x250], eax
xor eax, eax
mov dword [esp + 0x254], eax
xor eax, eax
mov dword [esp + 0x258], eax
xor eax, eax
mov dword [esp + 0x25c], eax
xor eax, eax
mov dword [esp + 0x274], eax
xor eax, eax
mov dword [esp + 0x278], eax
xor eax, eax
mov dword [esp + 0x27c], eax
xor eax, eax
mov dword [esp + 0x280], eax
xor eax, eax
mov dword [esp + 0x234], edx
xor edx, edx
mov dword [esp + 0x238], ebx
xor ebx, ebx
mov dword [esp + 0x23c], esi
xor esi, esi
mov dword [esp + 0x240], edi
xor edi, edi
mov dword [esp + 0x244], ebp
xor ebp, ebp
mov dword [esp + 0x284], eax
xor eax, eax
mov dword [esp + 0x260], edx
xor edx, edx
mov dword [esp + 0x264], ebx
xor ebx, ebx
mov dword [esp + 0x268], esi
xor esi, esi
mov dword [esp + 0x26c], edi
xor edi, edi
mov dword [esp + 0x270], ebp
xor ebp, ebp
mov dword [esp + 0x288], eax
xor eax, eax
mov dword [esp + 0x28c], edx
xor edx, edx
mov dword [esp + 0x290], ebx
xor ebx, ebx
mov dword [esp + 0x294], esi
mov dword [esp + 0x298], edi
mov dword [esp + 0x29c], ebp
mov dword [esp + 0x2a0], eax
xor eax, eax
mov dword [esp + 0x2a4], eax
xor eax, eax
mov dword [esp + 0x2a8], eax
xor eax, eax
mov dword [esp + 0x2ac], eax
xor eax, eax
mov dword [esp + 0x2b0], eax
xor eax, eax
mov dword [esp + 0x2b4], eax
xor eax, eax
mov dword [esp + 0x2b8], edx
mov dword [esp + 0x2bc], ebx
xor esi, esi
xor edi, edi
mov dword [esp + eax + 0xe0], esi
mov dword [esp + eax + 0xe4], edi
add eax, 8
cmp eax, 0x28
jb 0x6fdd605d
xor ebx, ebx
mov dword [esp + eax + 0xe0], ebx
mov eax, dword [ecx + 0x1a8]
mov edi, eax
mov dword [esp + 0x70], eax
mov eax, dword [ecx + 0x1a4]
cmp dword [edi + 0x6ac], 1
mov eax, dword [eax + 8]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x2e0]
mov eax, dword [eax + 0x40]
movzx eax, byte [eax]
mov eax, dword [eax*4 + 0x70765680]
mov dword [esp + 0x94], eax
setne al
xor edx, edx
movzx eax, al
inc eax
mov dword [esp + 0x7c], eax
mov eax, edi
add eax, 0x6c4
mov dword [esp + 0x34], eax
mov eax, dword [ecx + 0x1a0]
mov byte [esp + 0xa9], dl
mov ebx, dword [eax + 0x14]
test ebx, ebx
je 0x6fdd6103
mov eax, dword [edi + 0x6c8]
mov edx, dword [edi + 0x6c4]
add eax, edx
cmp eax, 2
setg byte [esp + 0xa9]
xor eax, eax
mov word [esp + 0xb8], ax
xor eax, eax
mov word [esp + 0xba], ax
mov eax, dword [esp + 0x2e4]
mov edx, dword [eax + 0x10]
imul eax, edx, 0xfa0
lea eax, [ecx + eax + 0x1490]
mov dword [esp + 0x48], eax
xor eax, eax
xor edi, edi
xor ebp, ebp
mov dword [esp + eax + 0x13c], edi
mov dword [esp + eax + 0x140], ebp
add eax, 8
cmp eax, 0x80
jb 0x6fdd6134
mov esi, dword [esp + 0x94]
xor ebx, ebx
mov dword [esp + eax + 0x13c], ebx
test esi, esi
jle 0x6fdd7d8e
lea eax, [ecx + 0x10]
mov esi, ecx
mov dword [esp + 0x54], eax
imul edx, edx, 0xfa0
lea eax, [ecx + 0x9c]
mov dword [esp + 0x74], eax
xor eax, eax
mov dword [esp + 0x5c], eax
xor eax, eax
mov dword [esp + 0x84], eax
xor eax, eax
mov dword [esp + 0x88], eax
lea eax, [ecx + edx]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x5c]
lea esi, [esi]
lea edi, [edi]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2e4]
mov ebp, 0xffffffff
mov ecx, dword [esp + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2e0]
mov dword [esp], eax
call fcn.6fed7460
mov ebx, dword [esi + 0x80]
sub esp, 0xc
mov edi, dword [esp + 0x90]
mov ecx, dword [esp + 0x2e0]
mov eax, dword [edi + 0xc]
mov ecx, dword [ecx + 0x18]
mov edx, dword [edi + 0x34]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x2e4]
mov edx, dword [edx + ecx*4]
mov ecx, dword [esp + 0x74]
mov eax, dword [eax + 8]
add eax, ebx
mov ebx, dword [edi + 0x3c]
mov edi, dword [ebx + eax*4]
mov eax, dword [esi + 0x88]
add edx, edi
mov dword [esp + 8], eax
mov eax, dword [esi + 0x84]
mov dword [esp], edx
mov dword [esp + 0x9c], edx
mov dword [esp + 4], eax
call fcn.6fed1390
mov edx, dword [esi + 0x80]
sub esp, 0xc
mov eax, dword [esp + 0x2e0]
mov dword [esp + 0x80], ebp
mov eax, dword [eax + 0x40]
cmp byte [eax + edx], 0
jne 0x6fdd7915
xor edi, edi
xor ecx, ecx
mov dword [esp + 0x124], edi
mov edi, dword [esp + 0x70]
xor ebx, ebx
mov dword [esp + 0x10c], ecx
xor ebp, ebp
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov dword [esp + 0x110], ebx
mov dword [esi + 0x53dc], ecx
mov dword [esp + 0x128], ebp
mov dword [esi + 0x53c4], edx
movzx eax, byte [eax]
cmp dword [edi + 0x6ac], 1
sete bl
test eax, eax
mov ecx, eax
je 0x6fdd75cf
mov dl, al
sub dl, 4
cmp dl, 1
lea edi, [esi + 0x53e4]
jbe 0x6fdd799b
cmp eax, 1
je 0x6fdd799b
sub cl, 6
cmp cl, 1
jbe 0x6fdd7bb3
cmp eax, 2
je 0x6fdd7bb3
cmp eax, 3
je 0x6fdd75cf
cmp byte [esp + 0xa9], 0
jne 0x6fdd7602
lea eax, [esi + 0x53c4]
mov ebp, esi
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x1c0]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x50], eax
xor eax, eax
mov dword [esp + 0x60], eax
xor eax, eax
mov dword [esp + 0x2c], eax
lea esi, [esi]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x2c]
mov eax, dword [eax + edi*4]
test eax, eax
jle 0x6fdd6920
lea eax, [esp + 0xd4]
mov esi, dword [esp + 0x78]
xor edi, edi
mov dword [esp + 0x30], eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x40], eax
lea eax, [esp + 0xc8]
mov dword [esp + 0x3c], eax
lea eax, [esp + 0xcc]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0x38], eax
lea eax, [esp + 0xbc]
mov dword [esp + 0x68], eax
lea eax, [esp + 0xc0]
mov dword [esp + 0x64], eax
mov dword [esp + 0x28], esi
jmp 0x6fdd66e6
mov esi, dword [esp + 0x28]
mov ebx, 0x7fffffff
mov edx, dword [esi + 4]
mov dword [esp + 0xd4], edx
movsx edx, word [esp + 0xd6]
shl eax, 2
cmp edx, eax
jl 0x6fdd685f
mov edx, dword [esp + 0xc0]
xor eax, eax
mov ecx, dword [esp + 0x2e0]
xor esi, esi
mov dword [esp + 0xc8], eax
xor eax, eax
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0xc4], esi
shl eax, 4
add eax, edi
lea eax, [edx + eax*2]
mov eax, dword [esp + eax*4 + 0x1c0]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd8], eax
lea eax, [esp + 0xd8]
mov dword [esp], eax
call fcn.6fdf3030
sub esp, 4
mov eax, dword [esp + 0x20]
movzx ecx, word [esp + 0xd8]
movzx edx, word [esp + 0xda]
shl eax, 2
and eax, 0xfffc
mov ebx, ecx
sub ebx, eax
add ecx, eax
mov word [esp + 0xc4], bx
mov ebx, edx
sub ebx, eax
add eax, edx
mov word [esp + 0xca], ax
mov eax, dword [esp + 0x40]
mov word [esp + 0xc8], cx
mov ecx, dword [esp + 0x2e0]
mov word [esp + 0xc6], bx
mov dword [esp], eax
call fcn.6fdf3030
sub esp, 4
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x2e0]
mov dword [esp], eax
call fcn.6fdf3030
mov ecx, 0xffff8001
sub esp, 4
movsx eax, word [esp + 0xc6]
movsx edx, word [esp + 0xc4]
cmp eax, 0xffff8000
cmovle eax, ecx
cmp edx, 0xffff8000
cmovle edx, ecx
movsx ecx, word [ebp + 0x53a0]
sar edx, 2
mov word [esp + 0xc4], dx
movsx edx, word [esp + 0xc8]
sar eax, 2
mov ebx, eax
cwde
sar edx, 2
mov word [esp + 0xc8], dx
movsx edx, word [esp + 0xca]
sar edx, 2
cmp eax, ecx
jle 0x6fdd64f8
mov ebx, ecx
mov eax, dword [esp + 0x6c]
cmp edx, ecx
cmovg edx, ecx
mov ecx, dword [esp + 0x3c]
mov word [esp + 0xc6], bx
mov ebx, edi
mov word [esp + 0xca], dx
mov edx, dword [esp + 0x60]
shl ebx, 6
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x18], eax
lea eax, [esp + 0xe0]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0xc], eax
mov eax, dword [ecx + 0x608]
lea ecx, [edi*8]
add edx, eax
mov eax, ebx
sub eax, ecx
mov ecx, dword [esp + 0x74]
add edx, eax
mov dword [esp], edx
call fcn.6fed15c0
mov esi, dword [0x70e9f278]
sub esp, 0x20
movsx ebx, word [esp + 0xcc]
mov dword [esp + 0x20], eax
movsx eax, word [ebp + 0xa8]
movsx ecx, word [esp + 0xce]
mov edx, ebx
sub edx, eax
mov eax, edx
sar eax, 0x1f
xor edx, eax
sub edx, eax
movsx eax, word [ebp + 0xaa]
mov dword [esp + 0x44], edx
mov edx, ecx
sub edx, eax
mov eax, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x44]
fld dword [esi + edx*4]
fadd dword [esi + eax*4]
fnstcw word [esp + 0xae]
mov edx, dword [esp + 0xbc]
fadd dword [0x70765770]
movzx eax, word [esp + 0xae]
or ax, 0xc00
mov word [esp + 0xac], ax
fldcw word [esp + 0xac]
fistp qword [esp + 0xa0]
fldcw word [esp + 0xae]
mov eax, dword [esp + 0xa0]
mov esi, dword [ebp + 0xa0]
add eax, edx
mov edx, dword [ebp + 0x9c]
mov dword [esp + 0xbc], eax
movzx edx, word [edx + ebx*2]
mov ebx, dword [ebp + 0x184]
add dx, word [esi + ecx*2]
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x20]
imul ebx, eax
movzx edx, dx
sub ecx, edx
mul dword [ebp + 0x180]
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x68]
add edx, ebx
add eax, 0x80
mov dword [esp + 0x10], esi
mov esi, dword [esp + 0x64]
adc edx, 0
shrd eax, edx, 8
add eax, ecx
mov ecx, ebp
mov dword [esp + 0xd4], eax
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.6fdd5660
sub esp, 0x18
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0xd4]
cmp dword [esi], eax
jbe 0x6fdd66cf
mov edx, dword [esp + 0xcc]
mov dword [esi], eax
mov eax, dword [esp + 0xbc]
mov dword [esi - 4], edi
mov dword [esi - 0x10], edx
mov edx, dword [esp + 0xd0]
mov dword [esi + 4], eax
mov dword [esi - 0xc], edx
mov edx, dword [esp + 0xc0]
mov dword [esi - 8], edx
mov eax, dword [esp + 0x34]
inc edi
mov esi, dword [esp + 0x2c]
add dword [esp + 0x28], 8
cmp dword [eax + esi*4], edi
jle 0x6fdd6920
mov ebx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x34]
mov esi, dword [esp + 0x28]
mov eax, dword [ebp + ebx*4 + 0x53e4]
inc eax
mov dword [esp + 0xbc], eax
mov ecx, dword [ecx + ebx*4]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], edi
mov dword [esp + 8], ebx
lea edx, [ecx - 1]
cmp edi, edx
setl dl
movzx edx, dl
add edx, edi
add edx, eax
lea eax, [esp + 0xe0]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x80]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x2e0]
mov dword [esp + 0xbc], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.6fdf4b90
sub esp, 0x18
mov dword [esp + 0x44], eax
xor eax, eax
mov dword [esp + 0xc0], eax
mov eax, dword [ebp + 0x1a0]
cmp byte [ebp + 0x5398], 0
mov eax, dword [eax + 0xb0]
mov dword [esp + 0x20], eax
mov eax, dword [esi]
mov dword [esp + 0xd4], eax
je 0x6fdd67a0
mov eax, dword [esp + 0x20]
movsx ecx, word [esp + 0xd6]
inc eax
lea edx, [eax*4]
cmp ecx, edx
jge 0x6fdd63a0
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x2e0]
mov dword [esp], esi
call fcn.6fdf3030
sub esp, 4
mov eax, dword [esp + 0x50]
mov dword [esp + 8], esi
mov ebx, dword [esp + 0x48]
mov ecx, dword [esp + 0x54]
mov eax, dword [eax + edi*4 + 0x6cc]
mov eax, dword [eax + 4]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.6fed7580
mov ecx, dword [ebp + 0x80]
sub esp, 0xc
mov eax, dword [esp + 0x58]
mov eax, dword [eax + 0x149c]
mov dword [esp + 0xc], eax
movzx eax, byte [ecx + 0x707621a0]
mov edx, dword [ebx + 0xc]
imul eax, edx
mov edx, eax
movzx eax, byte [ecx + 0x707622a0]
mov ecx, dword [ebx]
mov ebx, 0x40
mov dword [esp + 4], ebx
add eax, edx
add eax, ecx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xe0]
mov dword [esp], eax
call dword [ebp + 0xb4]
cmp eax, 0x7ffffffe
mov ebx, eax
jbe 0x6fdd6910
mov ebx, 0x7fffffff
mov eax, dword [esp + 0x28]
movzx edx, byte [ebp + 0x5398]
mov eax, dword [eax + 4]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x20]
inc eax
test dl, dl
jne 0x6fdd63b3
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x2e0]
mov dword [esp], esi
call fcn.6fdf3030
sub esp, 4
mov eax, dword [esp + 0x50]
mov dword [esp + 8], esi
mov ecx, dword [esp + 0x54]
mov eax, dword [eax + edi*4 + 0x6cc]
mov eax, dword [eax + 4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.6fed7580
mov ecx, dword [ebp + 0x80]
sub esp, 0xc
mov esi, dword [esp + 0x58]
mov eax, dword [esi + 0x149c]
mov esi, dword [esp + 0x48]
mov dword [esp + 0xc], eax
movzx eax, byte [ecx + 0x707621a0]
imul eax, dword [esi + 0xc]
mov edx, eax
movzx eax, byte [ecx + 0x707622a0]
mov ecx, dword [esi]
mov esi, 0x40
mov dword [esp + 4], esi
add eax, edx
add eax, ecx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xe0]
mov dword [esp], eax
call dword [ebp + 0xb4]
cmp ebx, eax
jbe 0x6fdd63c6
mov eax, 1
mov edx, 1
mov dword [esp + 0xc0], eax
jmp 0x6fdd63cd
xor eax, eax
mov dword [esp + 0xc0], eax
jmp 0x6fdd683d
inc dword [esp + 0x2c]
add dword [esp + 0x60], 0x3b8
add dword [esp + 0x4c], 0x18
mov eax, dword [esp + 0x2c]
sub dword [esp + 0x78], 0xffffff80
add dword [esp + 0x50], 0x44
cmp eax, dword [esp + 0x7c]
jne 0x6fdd6330
mov esi, ebp
mov eax, dword [esp + 0x70]
mov eax, dword [eax + 0x6ac]
test eax, eax
jne 0x6fdd739a
mov eax, dword [esp + 0x2e0]
mov eax, dword [eax + 0x3c]
cmp byte [eax], 3
je 0x6fdd7387
mov ecx, dword [esi + 0x53c4]
cmp ecx, 0xffffffff
mov eax, ecx
je 0x6fdd73a0
mov edx, dword [esi + 0x53dc]
cmp edx, 0xffffffff
je 0x6fdd7d6c
xor eax, eax
mov edx, dword [esi + eax + 0x53b4]
mov dword [esp + eax + 0x10c], edx
add eax, 4
cmp eax, 0x18
jb 0x6fdd6992
xor eax, eax
mov edx, dword [esi + eax + 0x53cc]
mov dword [esp + eax + 0x124], edx
add eax, 4
cmp eax, 0x18
jb 0x6fdd69aa
mov eax, dword [esi + 0x53d8]
mov ecx, dword [esp + 0x70]
mov ebp, dword [esp + 0x54]
mov eax, dword [ecx + eax*4 + 0x710]
mov edi, dword [eax + 4]
mov eax, dword [esp + 0x2e4]
imul eax, dword [eax + 0x10], 0xfa0
lea eax, [esi + eax + 0x14b0]
lea ebx, [eax + 4]
mov dword [esp + 0x20], eax
lea eax, [esi + 0x53b4]
mov dword [esp + 8], eax
mov eax, dword [esi + 0x53c0]
mov eax, dword [ecx + eax*4 + 0x6cc]
mov ecx, ebp
mov eax, dword [eax + 4]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.6fed7580
lea eax, [esi + 0x53cc]
mov ecx, ebp
sub esp, 0xc
mov dword [esp + 4], edi
mov edi, dword [esp + 0x20]
mov dword [esp + 8], eax
lea eax, [edi + 0x28]
mov dword [esp], eax
call fcn.6fed7580
mov eax, dword [esi + 0x80]
mov edx, dword [ebx + 0x30]
mov ecx, dword [ebx + 0xc]
movzx edi, byte [eax + 0x707621a0]
movzx eax, byte [eax + 0x707622a0]
sub esp, 0xc
mov dword [esp + 0x28], eax
mov eax, dword [esi + 0x88]
sar eax, 2
mov ebp, eax
mov eax, dword [esi + 0x84]
mov dword [esp + 0x14], edx
sar eax, 2
dec eax
shl eax, 4
movzx eax, byte [ebp + eax + 0x7076263f]
lea ebp, [eax + 0x228]
mov eax, 0x20
mov dword [esp + 0x18], eax
mov eax, edx
mov edx, dword [esp + 0x28]
imul eax, edi
mov dword [esp + 0x30], ebp
add eax, edx
add eax, dword [ebx + 0x24]
mov dword [esp + 0xc], ecx
imul ecx, edi
mov edi, dword [esp + 0x20]
mov dword [esp + 0x10], eax
add ecx, edx
mov edx, dword [edi + 4]
mov edi, dword [esp + 0x58]
mov eax, ecx
add eax, edx
mov dword [esp + 8], eax
lea ebx, [edi + 0x1490]
mov eax, dword [edi + 0x149c]
mov dword [esp + 4], eax
mov eax, dword [edi + 0x1490]
mov dword [esp], eax
call dword [ebp*4 + 0x70e9d3ac]
mov eax, dword [ebx + 0xc]
mov ecx, 0x40
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x1490]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [esi + 0xe0]
mov dword [esp], eax
call dword [esi + 0xb8]
mov edi, dword [esi + 0x53e4]
mov ebp, dword [esi + 0x53c8]
mov ecx, dword [esi + 0x184]
mov ebx, eax
mov eax, dword [esi + 0x53e8]
add eax, edi
mov edi, dword [esi + 0x53ec]
sub edi, eax
mov eax, edi
mov edi, dword [esi + 0x53e0]
add edi, ebp
mov ebp, dword [esi + 0x53b4]
add edi, eax
mov eax, edi
imul ecx, edi
mul dword [esi + 0x180]
add edx, ecx
add eax, 0x80
adc edx, 0
shrd eax, edx, 8
add ebx, eax
test ebp, ebp
jne 0x6fdd6b70
mov ebp, dword [esi + 0x53cc]
test ebp, ebp
je 0x6fdd7229
xor edx, edx
xor eax, eax
mov ecx, dword [esp + 0x2e0]
mov dword [esp + 0xd4], edx
mov edx, dword [esi + 0x1a0]
mov dword [esp + 0xd0], eax
mov ebp, dword [edx + 0x44]
mov eax, dword [edx + 0x40]
cmp ebp, eax
cmovge eax, ebp
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xdc], eax
lea eax, [esp + 0xdc]
mov dword [esp], eax
call fcn.6fdf3030
sub esp, 4
mov eax, dword [esp + 0x20]
movzx ecx, word [esp + 0xdc]
movzx ebp, word [esp + 0xde]
shl eax, 2
and eax, 0xfffc
mov edx, ecx
sub edx, eax
add ecx, eax
mov word [esp + 0xd0], dx
mov edx, ebp
mov word [esp + 0xd4], cx
mov ecx, dword [esp + 0x2e0]
sub edx, eax
add eax, ebp
mov word [esp + 0xd6], ax
lea eax, [esp + 0xd0]
mov dword [esp], eax
mov word [esp + 0xd2], dx
mov dword [esp + 0x3c], eax
call fcn.6fdf3030
sub esp, 4
mov ecx, dword [esp + 0x2e0]
lea eax, [esp + 0xd4]
mov dword [esp], eax
mov dword [esp + 0x40], eax
call fcn.6fdf3030
mov edx, 0xffff8001
movsx ecx, word [esi + 0x53a0]
sub esp, 4
movsx eax, word [esp + 0xd2]
movsx ebp, word [esp + 0xd4]
sar ebp, 2
cmp eax, 0xffff8000
cmovle eax, edx
sar eax, 2
mov edx, eax
cwde
cmp eax, ecx
mov dword [esp + 0x2c], ebp
jle 0x6fdd6c77
mov edx, ecx
movsx eax, word [esp + 0xd6]
movsx ebp, dx
sar eax, 2
cmp eax, ecx
mov edx, eax
jle 0x6fdd6c8d
mov edx, ecx
lea eax, [edx + 2]
mov edx, 0xffff8001
cwde
mov dword [esp + 0x28], eax
movsx eax, word [esp + 0xd0]
cmp eax, 0xffff8000
cmovle eax, edx
lea edx, [ebp*4]
and eax, 0xfffffffc
mov ebp, dword [esp + 0x2c]
movsx ecx, dx
mov edx, dword [esp + 0x28]
mov dword [esp + 0x20], eax
mov word [esp + 0xd0], ax
shl ebp, 2
lea eax, [edx*4]
movsx edx, word [esi + 0x53b8]
cwde
mov word [esp + 0xd2], cx
cmp edx, dword [esp + 0x20]
mov word [esp + 0xd4], bp
mov word [esp + 0xd6], ax
setge byte [esp + 0x28]
cmp edx, ebp
setle dl
and dl, byte [esp + 0x28]
mov byte [esp + 0x28], dl
je 0x6fdd6d28
movsx edx, word [esi + 0x53ba]
cmp eax, edx
setge byte [esp + 0x28]
cmp ecx, edx
setle dl
and dl, byte [esp + 0x28]
mov byte [esp + 0x28], dl
movsx edx, word [esi + 0x53d0]
cmp dword [esp + 0x20], edx
jg 0x6fdd7229
cmp ebp, edx
jl 0x6fdd7229
movsx edx, word [esi + 0x53d2]
cmp eax, edx
jl 0x6fdd7229
cmp ecx, edx
jg 0x6fdd7229
cmp byte [esp + 0x28], 0
je 0x6fdd7229
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x9c]
mov ecx, dword [eax + 0x608]
mov eax, dword [esp + 0x98]
add eax, edx
mov edx, dword [esp + 0x90]
mov ebp, dword [edx + 0xc]
sub eax, ebp
mov ebp, dword [ecx + 0x18]
mov dword [esp + 0x20], eax
mov eax, 0x20
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebp
mov eax, dword [esi + 0x53d8]
lea edx, [eax*8]
shl eax, 6
sub eax, edx
mov edx, dword [esp + 0x20]
add edx, dword [ecx + eax + 0x3b8]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
mov eax, dword [esi + 0x53c0]
lea edx, [eax*8]
shl eax, 6
sub eax, edx
mov edx, dword [esp + 0x20]
mov ebp, dword [ecx + eax]
mov ecx, dword [esp + 0x58]
add edx, ebp
mov dword [esp + 8], edx
mov edx, dword [esp + 0x30]
lea ebp, [ecx + 0x1490]
mov eax, dword [ecx + 0x149c]
mov dword [esp + 4], eax
mov eax, dword [ecx + 0x1490]
mov dword [esp], eax
call dword [edx*4 + 0x70e9d3ac]
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x58]
mov eax, dword [eax + 0x1490]
mov dword [esp + 8], eax
mov eax, 0x40
mov dword [esp + 4], eax
mov eax, dword [esi + 0xe0]
mov dword [esp], eax
call dword [esi + 0xb8]
mov edx, dword [esi + 0x53bc]
mov ecx, dword [0x70e9f278]
mov dword [esp + 0xc0], edx
movsx edx, word [esp + 0xb8]
mov dword [esp + 0x2c], eax
mov eax, dword [esi + 0x53b8]
movsx ebp, ax
mov dword [esp + 0xbc], eax
sar eax, 0x10
mov dword [esp + 0x20], eax
mov eax, edx
movsx edx, word [esp + 0xba]
mov dword [esp + 0x30], eax
sub eax, ebp
mov dword [esp + 0x28], edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x28]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x20]
sub edx, eax
mov eax, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x38]
fld dword [ecx + edx*4]
fadd dword [ecx + eax*4]
fnstcw word [esp + 0xae]
fld dword [0x70765770]
fadd st(1), st(0)
fxch st(1)
movzx eax, word [esp + 0xae]
or ax, 0xc00
mov word [esp + 0xac], ax
fldcw word [esp + 0xac]
fistp qword [esp + 0xa0]
fldcw word [esp + 0xae]
mov edx, dword [esi + 0x53c8]
mov eax, dword [esp + 0xa0]
add eax, edx
mov dword [esp + 0x38], eax
movsx eax, word [esi + 0x53b4]
sub eax, ebp
cdq
xor eax, edx
mov ebp, eax
movsx eax, word [esi + 0x53b6]
sub ebp, edx
mov edx, dword [esp + 0x20]
fld dword [ecx + ebp*4]
sub eax, edx
cdq
xor eax, edx
sub eax, edx
fadd dword [ecx + eax*4]
fadd st(1)
fldcw word [esp + 0xac]
fistp qword [esp + 0xa0]
fldcw word [esp + 0xae]
mov ebp, dword [esp + 0x38]
mov eax, dword [esp + 0xa0]
mov edx, dword [esi + 0x53d4]
sub ebp, eax
mov eax, dword [esi + 0x53d0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xc4], ebp
movsx edx, ax
mov dword [esp + 0xc8], eax
sar eax, 0x10
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x30], edx
sub eax, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x28]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x20]
sub edx, eax
mov eax, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x38]
fld dword [ecx + edx*4]
fadd dword [ecx + eax*4]
fadd st(1)
fldcw word [esp + 0xac]
fistp qword [esp + 0xa0]
fldcw word [esp + 0xae]
mov eax, dword [esp + 0xa0]
mov edx, dword [esi + 0x53e0]
add edx, eax
movsx eax, word [esi + 0x53cc]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x30]
sub eax, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x30], eax
movsx eax, word [esi + 0x53ce]
sub eax, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x30]
fld dword [ecx + edx*4]
fadd dword [ecx + eax*4]
faddp st(1)
fldcw word [esp + 0xac]
fistp qword [esp + 0xa0]
fldcw word [esp + 0xae]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0xa0]
mov ecx, dword [esi + 0x184]
sub edx, eax
mov eax, edx
imul ecx, edx
mov dword [esp + 0xd0], edx
mul dword [esi + 0x180]
add edx, ecx
add eax, 0x80
mov ecx, dword [esi + 0x184]
adc edx, 0
shrd eax, edx, 8
mov dword [esp + 0x20], eax
shr edx, 8
mov eax, ebp
imul ecx, ebp
mov dword [esp + 0x24], edx
mul dword [esi + 0x180]
add edx, ecx
add eax, 0x80
mov ecx, dword [esp + 0x2c]
adc edx, 0
shrd eax, edx, 8
mov edx, dword [esp + 0x20]
add eax, edx
add eax, ecx
cmp byte [esp + 0xa9], 0
mov dword [esp + 0xd4], eax
je 0x6fdd7112
mov eax, dword [esi + 0x53c0]
lea ecx, [esp + 0xe0]
mov dword [esp + 0x14], ecx
mov ebp, dword [esp + 0x5c]
mov ecx, dword [esp + 0x2e0]
lea edx, [esp + eax*8 + 0x1c0]
mov dword [esp + 0xc], eax
xor eax, eax
mov dword [esp + 0x10], edx
mov dword [esp + 8], eax
mov eax, dword [esi + 0x80]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6fdf4b90
mov eax, dword [esi + 0x53d8]
sub esp, 0x18
lea ecx, [esp + 0xe0]
lea edx, [esp + eax*8 + 0x240]
mov dword [esp + 0xc], eax
mov eax, 1
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x2e0]
mov dword [esp + 0x10], edx
mov dword [esp + 8], eax
mov eax, dword [esi + 0x80]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6fdf4b90
sub esp, 0x18
lea eax, [esp + 0xc4]
mov ebp, dword [esp + 0x40]
mov ecx, esi
mov dword [esp + 0x10], eax
lea eax, [esp + 0xc0]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xbc]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x14], ebp
mov dword [esp + 4], eax
mov eax, dword [esi + 0x53c0]
lea eax, [esp + eax*8 + 0x1c0]
mov dword [esp], eax
call fcn.6fdd5660
mov ecx, esi
sub esp, 0x18
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x10], eax
lea eax, [esp + 0xcc]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc8]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 4], eax
mov eax, dword [esi + 0x53d8]
lea eax, [esp + eax*8 + 0x240]
mov dword [esp], eax
call fcn.6fdd5660
sub esp, 0x18
mov eax, dword [esp + 0xd4]
cmp ebx, eax
jbe 0x6fdd7229
mov edx, dword [esp + 0xb8]
mov edi, dword [esp + 0xc4]
mov ecx, dword [esi + 0x53ec]
mov ebx, dword [esi + 0x53e4]
mov dword [esp + 0x10c], edx
mov ebp, dword [esi + 0x53e8]
mov dword [esp + 0x124], edx
mov edx, dword [esp + 0xbc]
mov dword [esp + 0x110], edx
mov edx, dword [esp + 0xc8]
mov dword [esp + 0x128], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 0x114], edx
mov edx, dword [esp + 0xcc]
mov dword [esp + 0x12c], edx
mov edx, dword [esp + 0xd0]
add edi, edx
add edi, ecx
sub edi, ebx
mov ebx, eax
sub edi, ebp
cmp dword [esp + 0x80], ebx
mov eax, dword [esi + 0x53c4]
mov edx, dword [esi + 0x53dc]
jae 0x6fdd73d0
cmp dword [esp + 0x80], eax
jae 0x6fdd73d0
cmp dword [esp + 0x80], edx
jae 0x6fdd73d0
mov eax, dword [esp + 0x2e0]
mov edi, dword [esp + 0x5c]
mov edx, dword [eax + 0x60]
mov eax, dword [esi + 0x80]
mov byte [edx + eax], 1
mov eax, dword [esp + 0x2e0]
mov ecx, dword [esp + 0x1b8]
mov edx, dword [eax + 0x68]
mov eax, dword [esi + 0x80]
mov byte [edx + eax], cl
mov ecx, dword [esp + 0x2e0]
mov dword [esp + 8], edi
mov eax, dword [esi + 0x80]
mov dword [esp + 4], eax
movzx eax, byte [esp + 0x1b4]
mov dword [esp], eax
call fcn.6fdf0350
sub esp, 0xc
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp], 0
mov dword [esp + 8], eax
lea eax, [esp + 0x1a4]
mov dword [esp + 4], eax
call fcn.6fdf14a0
sub esp, 0x10
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp], 0
mov dword [esp + 8], eax
movsx eax, byte [esp + 0x1a8]
mov dword [esp + 4], eax
call fcn.6fdf1890
sub esp, 0x10
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp], 1
mov dword [esp + 8], eax
lea eax, [esp + 0x1ac]
mov dword [esp + 4], eax
call fcn.6fdf14a0
sub esp, 0x10
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp], 1
mov dword [esp + 8], eax
movsx eax, byte [esp + 0x1b0]
mov dword [esp + 4], eax
call fcn.6fdf1890
sub esp, 0x10
mov edi, dword [esp + 0x1bc]
add dword [esp + 0x84], edi
jmp 0x6fdd7543
mov eax, dword [esp + 0x2e0]
mov eax, dword [eax + 0x40]
cmp byte [eax], 0
je 0x6fdd6970
mov ecx, dword [esi + 0x53c4]
cmp dword [esp + 0x80], 0xffffffff
mov eax, ecx
mov edx, dword [esi + 0x53dc]
je 0x6fdd73dc
cmp dword [esp + 0x80], ecx
jae 0x6fdd73dc
xor edi, edi
mov ebx, 0xffffffff
cmp dword [esp + 0x80], edx
jb 0x6fdd725c
nop
cmp eax, ebx
jbe 0x6fdd73dc
cmp edx, ebx
ja 0x6fdd79e3
cmp edx, eax
nop
jb 0x6fdd77b0
mov eax, dword [esp + 0x2e0]
mov ebp, 0xffffffff
mov edi, dword [esp + 0x5c]
mov ecx, dword [esp + 0x2e0]
mov edx, dword [eax + 0x60]
mov eax, dword [esi + 0x80]
mov byte [edx + eax], 0
mov dword [esp + 8], edi
mov eax, dword [esi + 0x80]
mov dword [esp], 1
mov dword [esp + 4], eax
call fcn.6fdf0350
sub esp, 0xc
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp], 0
mov dword [esp + 8], eax
lea eax, [esi + 0x53b4]
mov dword [esp + 4], eax
call fcn.6fdf14a0
sub esp, 0x10
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp + 8], eax
movsx eax, byte [esi + 0x53c0]
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.6fdf1890
mov edx, dword [esi + 0x80]
movzx ebx, word [esi + 0x53b6]
sub bx, word [esi + 0x53ba]
sub esp, 0x10
mov eax, dword [esp + 0x2e0]
mov eax, dword [eax + 0xa4]
lea ecx, [eax + edx*4]
mov edx, dword [esi + 0x53b8]
mov eax, dword [esi + 0x53b4]
mov word [ecx + 2], bx
sub eax, edx
mov word [ecx], ax
mov eax, dword [esp + 0x2e0]
mov ecx, dword [esi + 0x53bc]
mov edx, dword [eax + 0x68]
mov eax, dword [esi + 0x80]
mov byte [edx + eax], cl
mov ecx, dword [esp + 0x2e0]
mov dword [esp + 0xc], edi
mov eax, dword [esi + 0x80]
mov dword [esp + 4], ebp
mov dword [esp], 1
mov dword [esp + 8], eax
call fcn.6fdf1890
sub esp, 0x10
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp], 1
mov dword [esp + 8], eax
lea eax, [esp + 0xb8]
mov dword [esp + 4], eax
call fcn.6fdf14a0
mov edi, dword [esi + 0x53c8]
xor eax, eax
sub esp, 0x10
add dword [esp + 0x84], edi
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2e4]
mov edi, dword [esp + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2e0]
mov ecx, edi
mov dword [esp], eax
call fcn.6fed74c0
mov ecx, 1
sub esp, 0xc
movzx eax, byte [esp + 0xaa]
mov dword [esp + 4], ecx
mov ecx, edi
mov dword [esp + 8], eax
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.6fed8ce0
sub esp, 0xc
inc dword [esp + 0x5c]
mov eax, dword [esp + 0x5c]
cmp dword [esp + 0x94], eax
jne 0x6fdd61b0
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0x2e0]
add dword [edi + 0x4c8], eax
add esp, 0x2cc
mov al, 1
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
cmp bl, 1
sbb eax, eax
and eax, 2
inc eax
cmp byte [esp + 0xa9], 0
mov dword [esi + 0x53e4], eax
mov eax, 3
mov dword [esi + 0x53e8], eax
mov eax, 5
mov dword [esi + 0x53ec], eax
je 0x6fdd62fe
mov eax, dword [esp + 0x2e0]
xor edx, edx
xor ebx, ebx
mov edi, dword [esp + 0x70]
mov ecx, 1
mov dword [esi + 0x53f0], edx
mov dword [esi + 0x53f4], ecx
mov dword [esi + 0x53a8], eax
mov eax, dword [esp + 0x2e4]
mov dword [esi + 0x53f8], ebx
mov dword [esi + 0x53ac], eax
mov eax, dword [esp + 0x5c]
mov dword [esi + 0x53b0], eax
mov eax, dword [edi + 0x6c8]
mov ebp, dword [edi + 0x6c4]
add eax, ebp
cmp byte [esi + 0x5418], 0
mov dword [esi + 0x53f0], eax
je 0x6fdd7ba1
cmp eax, 1
jle 0x6fdd7683
mov ebx, 1
mov ecx, dword [esi + 4]
inc ebx
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [esi + 0x53f0]
cmp eax, ebx
jg 0x6fdd7670
lea ebx, [esi + 0x53f8]
jmp 0x6fdd76ac
mov edx, 1
lock xadd dword [esi + 0x53f4], edx
mov eax, dword [esi + 0x53f0]
inc edx
cmp edx, eax
jle 0x6fdd7730
mov edx, dword [esi + 0x53f4]
cmp edx, eax
jl 0x6fdd7690
cmp byte [esi + 0x5418], 0
je 0x6fdd79d7
xor eax, eax
mov ecx, esi
mov dword [esp + 0x14], eax
xor eax, eax
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2e4]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2e0]
mov dword [esp + 4], eax
call fcn.6fdd57e0
mov eax, 1
sub esp, 0x18
lock xadd dword [ebx], eax
inc eax
cmp eax, dword [esi + 0x53f0]
je 0x6fdd7d55
mov eax, 0xffffffff
mov dword [esp + 4], eax
mov eax, dword [esi + 0x53fc]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
jmp 0x6fdd694b
mov eax, dword [esp + 0x70]
dec edx
mov eax, dword [eax + 0x6c4]
cmp edx, eax
jge 0x6fdd79c3
xor eax, eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x5c]
mov ecx, esi
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2e4]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2e0]
mov dword [esp + 4], eax
call fcn.6fdd57e0
mov edx, 1
sub esp, 0x18
lock xadd dword [ebx], edx
mov eax, dword [esi + 0x53f0]
inc edx
cmp edx, eax
jne 0x6fdd76ac
mov eax, dword [esi + 0x53fc]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [esi + 0x53f0]
sub esp, 4
jmp 0x6fdd76ac
mov eax, dword [esp + 0x2e0]
mov edi, dword [esp + 0x5c]
mov ecx, dword [esp + 0x2e0]
mov edx, dword [eax + 0x60]
mov eax, dword [esi + 0x80]
mov byte [edx + eax], 0
mov dword [esp + 8], edi
mov eax, dword [esi + 0x80]
mov dword [esp], 2
mov dword [esp + 4], eax
call fcn.6fdf0350
sub esp, 0xc
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp], 1
mov dword [esp + 8], eax
lea eax, [esi + 0x53cc]
mov dword [esp + 4], eax
call fcn.6fdf14a0
sub esp, 0x10
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp + 8], eax
movsx eax, byte [esi + 0x53d8]
mov dword [esp], 1
mov dword [esp + 4], eax
call fcn.6fdf1890
mov edx, dword [esi + 0x80]
movzx ebx, word [esi + 0x53ce]
sub bx, word [esi + 0x53d2]
sub esp, 0x10
mov eax, dword [esp + 0x2e0]
mov eax, dword [eax + 0xa8]
lea ecx, [eax + edx*4]
mov edx, dword [esi + 0x53d0]
mov eax, dword [esi + 0x53cc]
mov word [ecx + 2], bx
mov ebx, 0xffffffff
sub eax, edx
mov word [ecx], ax
mov eax, dword [esp + 0x2e0]
mov ecx, dword [esi + 0x53d4]
mov edx, dword [eax + 0x6c]
mov eax, dword [esi + 0x80]
mov byte [edx + eax], cl
mov ecx, dword [esp + 0x2e0]
mov dword [esp + 0xc], edi
mov eax, dword [esi + 0x80]
mov dword [esp + 4], ebx
mov dword [esp], 0
mov dword [esp + 8], eax
call fcn.6fdf1890
sub esp, 0x10
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp], 0
mov dword [esp + 8], eax
lea eax, [esp + 0xb8]
mov dword [esp + 4], eax
call fcn.6fdf14a0
mov edi, dword [esi + 0x53e0]
sub esp, 0x10
add dword [esp + 0x84], edi
mov edi, 1
mov dword [esp + 0x88], edi
jmp 0x6fdd7543
mov eax, dword [esi + 0x84]
mov ecx, esi
mov dword [esp + 0x198], edx
mov dword [esp + 0x19c], eax
mov eax, dword [esi + 0x88]
mov dword [esp + 0x1a0], eax
lea eax, [esp + 0x13c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2e4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2e0]
mov dword [esp], eax
call fcn.6fdd5260
sub esp, 0x10
cmp byte [esp + 0xab], 0
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x2e0]
je 0x6fdd7993
mov eax, dword [eax + 0x3c]
cmp byte [eax], 3
ja 0x6fdd7c1a
mov eax, dword [esp + 0x2e0]
mov eax, dword [eax + 0x40]
jmp 0x6fdd6260
test bl, bl
je 0x6fdd7bf5
mov eax, 3
xor edx, edx
mov dword [esi + 0x53e4], eax
xor eax, eax
mov dword [esi + 0x53e8], eax
mov dword [esi + 0x53ec], edx
jmp 0x6fdd62f0
sub edx, eax
mov eax, 1
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
jmp 0x6fdd774d
mov ecx, esi
call fcn.6fdec7d0
jmp 0x6fdd76c3
mov eax, dword [esp + 0x2e0]
mov ebp, dword [esp + 0x5c]
mov ecx, dword [esp + 0x2e0]
mov edx, dword [eax + 0x60]
mov eax, dword [esi + 0x80]
mov byte [edx + eax], 0
mov dword [esp + 8], ebp
mov eax, dword [esi + 0x80]
mov dword [esp], 3
mov dword [esp + 4], eax
call fcn.6fdf0350
sub esp, 0xc
mov dword [esp + 0xc], ebp
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp], 0
mov dword [esp + 8], eax
lea eax, [esp + 0x10c]
mov dword [esp + 4], eax
call fcn.6fdf14a0
sub esp, 0x10
mov dword [esp + 0xc], ebp
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp + 8], eax
movsx eax, byte [esi + 0x53c0]
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.6fdf1890
mov edx, dword [esi + 0x80]
sub esp, 0x10
mov eax, dword [esp + 0x2e0]
movzx ebx, word [esp + 0x10e]
mov eax, dword [eax + 0xa4]
sub bx, word [esp + 0x112]
lea ecx, [eax + edx*4]
mov edx, dword [esp + 0x110]
mov eax, dword [esp + 0x10c]
mov word [ecx + 2], bx
sub eax, edx
mov word [ecx], ax
mov eax, dword [esp + 0x2e0]
mov ecx, dword [esp + 0x114]
mov edx, dword [eax + 0x68]
mov eax, dword [esi + 0x80]
mov byte [edx + eax], cl
mov ecx, dword [esp + 0x2e0]
mov dword [esp + 0xc], ebp
mov eax, dword [esi + 0x80]
mov dword [esp], 1
mov dword [esp + 8], eax
lea eax, [esp + 0x124]
mov dword [esp + 4], eax
call fcn.6fdf14a0
sub esp, 0x10
mov dword [esp + 0xc], ebp
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp + 8], eax
movsx eax, byte [esi + 0x53d8]
mov dword [esp], 1
mov dword [esp + 4], eax
call fcn.6fdf1890
mov edx, dword [esi + 0x80]
sub esp, 0x10
mov eax, dword [esp + 0x2e0]
movzx ebx, word [esp + 0x126]
add dword [esp + 0x84], edi
mov eax, dword [eax + 0xa8]
sub bx, word [esp + 0x12a]
lea ecx, [eax + edx*4]
mov edx, dword [esp + 0x128]
mov eax, dword [esp + 0x124]
mov word [ecx + 2], bx
sub eax, edx
mov word [ecx], ax
mov eax, dword [esp + 0x2e0]
mov ecx, dword [esp + 0x12c]
mov edx, dword [eax + 0x6c]
mov eax, dword [esi + 0x80]
mov byte [edx + eax], cl
mov eax, 2
mov dword [esp + 0x88], eax
jmp 0x6fdd7543
mov ecx, esi
call fcn.6fdec650
mov eax, dword [esi + 0x53f0]
jmp 0x6fdd7666
test bl, bl
jne 0x6fdd79a3
mov eax, dword [esp + 0x88]
lea edx, [eax + eax*2]
mov eax, dword [esp + 0x5c]
lea eax, [eax + eax*8]
shl eax, 2
lea edx, [eax + edx*4]
lea eax, [edx + 0x707655c0]
mov edx, dword [edx + 0x707655c0]
mov dword [esi + 0x53e4], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [edi + 4], edx
mov dword [edi + 8], eax
jmp 0x6fdd62f0
mov eax, dword [esp + 0x88]
lea edx, [eax + eax*2]
mov eax, dword [esp + 0x5c]
lea eax, [eax + eax*8]
shl eax, 2
lea edx, [eax + edx*4]
lea eax, [edx + 0x70765620]
mov edx, dword [edx + 0x70765620]
jmp 0x6fdd7bde
cmp dword [esp + 0x80], 0xffffffff
je 0x6fdd7d7f
mov eax, dword [esp + 0x2e0]
mov edi, dword [esp + 0x5c]
mov edx, dword [eax + 0x60]
mov eax, dword [esi + 0x80]
mov byte [edx + eax], 1
mov eax, dword [esp + 0x2e0]
mov ecx, dword [esp + 0x1b8]
mov edx, dword [eax + 0x68]
mov eax, dword [esi + 0x80]
mov byte [edx + eax], cl
mov ecx, dword [esp + 0x2e0]
mov dword [esp + 8], edi
mov eax, dword [esi + 0x80]
mov dword [esp + 4], eax
movzx eax, byte [esp + 0x1b4]
mov dword [esp], eax
call fcn.6fdf0350
sub esp, 0xc
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp], 0
mov dword [esp + 8], eax
lea eax, [esp + 0x1a4]
mov dword [esp + 4], eax
call fcn.6fdf14a0
sub esp, 0x10
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp], 0
mov dword [esp + 8], eax
movsx eax, byte [esp + 0x1a8]
mov dword [esp + 4], eax
call fcn.6fdf1890
sub esp, 0x10
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp], 1
mov dword [esp + 8], eax
lea eax, [esp + 0x1ac]
mov dword [esp + 4], eax
call fcn.6fdf14a0
sub esp, 0x10
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x2e0]
mov eax, dword [esi + 0x80]
mov dword [esp], 1
mov dword [esp + 8], eax
movsx eax, byte [esp + 0x1b0]
mov dword [esp + 4], eax
call fcn.6fdf1890
mov eax, edi
sub esp, 0x10
mov ecx, dword [esp + 0x1bc]
add dword [esp + 0x84], ecx
jmp 0x6fdd7547
mov eax, dword [esi + 0x53fc]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
jmp 0x6fdd7710
cmp dword [esp + 0x80], 0xffffffff
jne 0x6fdd73b2
jmp 0x6fdd73e6
add esp, 0x2cc
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
xor eax, eax
jmp 0x6fdd75b3