Function at 0x6fde68b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov eax, ecx
push edi
add eax, 0x148
push esi
mov edi, ecx
push ebx
sub esp, 0x8bc
mov dword [esp + 0x4c], eax
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x48], eax
call eax
mov edx, dword [edi + 0xbc]
mov ecx, 0xfa
sub esp, 4
cmp dword [edx + 0x90], 0xfa
lea ebx, [esp + 0xe0]
cmovle ecx, dword [edx + 0x90]
xor eax, eax
xor esi, esi
mov dword [ebx + eax], 0
mov dword [ebx + eax + 4], esi
add eax, 8
cmp eax, 0x3e8
jb 0x6fde6901
xor eax, eax
xor edi, edi
xor ebp, ebp
mov dword [esp + eax + 0x4c8], edi
mov dword [esp + eax + 0x4cc], ebp
add eax, 8
cmp eax, 0x3e8
jb 0x6fde691a
mov eax, dword [esp + 0x2c]
mov edi, dword [edx + 0x84]
mov eax, dword [eax + 0xa4]
test eax, eax
sete byte [esp + 0x28]
je 0x6fde71e2
cmp edi, 0xffffffff
jl 0x6fde71e2
inc edi
mov esi, eax
xor edx, edx
jmp 0x6fde6967
test esi, esi
je 0x6fde6979
mov dword [esp + edx*4 + 0x4c8], esi
inc edx
mov esi, dword [esi + 0x2d64]
cmp edx, edi
jle 0x6fde6963
mov edi, dword [esp + 0x4c8]
mov esi, dword [esp + 0x2c]
cmp byte [esp + 0x28], 0
mov edx, dword [esi + 0xc0]
mov dword [esp + 0xe0], edx
jne 0x6fde71d7
test ecx, ecx
jle 0x6fde71d7
xor edx, edx
jmp 0x6fde69b4
test eax, eax
je 0x6fde69c5
inc edx
lea esi, [eax + 0x38]
cmp ecx, edx
mov eax, dword [eax + 0x2d64]
mov dword [ebx + edx*4], esi
jg 0x6fde69b0
mov dword [esp + 0x3c], edx
mov esi, dword [esp + 0x2c]
mov eax, esi
add eax, 0x118
mov dword [esp + 0x40], eax
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [esp + 0x44], eax
call eax
mov ecx, dword [esi + 0x34]
sub esp, 4
test ecx, ecx
je 0x6fde7109
mov eax, dword [esp + 0x2c]
mov edx, dword [eax + 0xc0]
mov esi, dword [eax + 0xbc]
test edx, edx
je 0x6fde6a6b
mov eax, dword [esi + 0x1ac]
test eax, eax
jne 0x6fde6a6b
mov eax, dword [esi + 0x80]
test eax, eax
je 0x6fde6a26
mov eax, dword [esi + 0x84]
test eax, eax
jne 0x6fde6a4e
mov ebp, dword [esi + 0x190]
test ebp, ebp
jne 0x6fde6a4e
mov ecx, dword [esi + 0x98]
test ecx, ecx
jne 0x6fde6a4e
mov edx, dword [esi + 0x90]
test edx, edx
je 0x6fde6a6b
mov eax, dword [esi + 0x184]
test eax, eax
je 0x6fde6a6b
mov esi, dword [esp + 0x2c]
xor eax, eax
mov dword [esp + 4], eax
mov dword [esp], ebx
mov ecx, esi
call fcn.6fde58a0
mov esi, dword [esi + 0xbc]
sub esp, 8
xor eax, eax
xor ebp, ebp
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], esi
jmp 0x6fde6b1a
test eax, 0xfffffffd
jne 0x6fde6aab
mov eax, dword [edx + 0x70]
test eax, eax
je 0x6fde6e19
mov edx, dword [esp + 0x30]
mov eax, 2
not edx
shr edx, 0x1f
test dl, dl
je 0x6fde6e19
mov dword [edi + 0x78], eax
cmp eax, 1
jne 0x6fde6c67
mov eax, dword [esp + 0x2c]
test ebp, ebp
mov dword [eax + 0xd0], ecx
mov byte [edi + 0x8a], 1
je 0x6fde6e06
dec ebp
mov eax, dword [esp + ebp*4 + 0x4c8]
mov dword [eax + 0x78], 3
mov eax, dword [edi + 0x78]
mov ecx, dword [esp + 0x28]
cmp dword [ecx + 0x84], ebp
je 0x6fde6b62
lea edx, [ebp + 1]
mov ecx, dword [esp + edx*4 + 0x4c8]
test ecx, ecx
je 0x6fde6b62
cmp eax, 4
je 0x6fde6c5e
test eax, eax
jne 0x6fde6b8b
mov dword [edi + 0x78], 5
mov edi, dword [esp + edx*4 + 0x4c8]
mov ebp, edx
mov eax, dword [edi + 0x78]
cmp eax, 4
je 0x6fde6b9f
mov esi, dword [esp + 0x2c]
mov ecx, dword [edi + 0x74]
mov esi, dword [esi + 0xd0]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], esi
mov esi, ecx
mov edx, dword [esp + 0x30]
sub esi, edx
mov edx, dword [esp + 0x28]
cmp esi, dword [edx + 0x78]
jge 0x6fde6a80
cmp eax, 2
je 0x6fde6c59
cmp eax, 1
jne 0x6fde6adf
mov ecx, dword [edi + 0x74]
jmp 0x6fde6ab4
lea edx, [eax - 4]
cmp edx, 1
jbe 0x6fde6fea
cmp edx, 1
jbe 0x6fde6cbc
test eax, eax
je 0x6fde6cbc
cmp eax, 4
lea edx, [ebp + 1]
je 0x6fde6c5e
sub eax, 4
cmp eax, 1
ja 0x6fde71ce
lea edx, [ebp + 1]
jmp 0x6fde6b11
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx + 0x8c]
mov ecx, dword [esp + 0x38]
or ecx, edx
je 0x6fde707f
mov esi, dword [esp + 0x38]
test esi, esi
je 0x6fde6bd3
test edx, edx
je 0x6fde6bd3
mov ecx, dword [esp + 0x28]
lea edx, [esi + 3]
mov ecx, dword [ecx + 0x7c]
cmp ecx, edx
jle 0x6fde70c1
mov esi, dword [esp + 0x2c]
mov ecx, dword [edi + 0x74]
mov edx, dword [esi + 0xd0]
mov dword [esp + 0x34], ecx
sub ecx, edx
mov edx, ecx
mov ecx, dword [esp + 0x28]
cmp dword [ecx + 0x78], edx
jg 0x6fde6adf
mov ecx, dword [esp + 0x34]
mov esi, 1
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], esi
mov dword [esp + 0x10], ecx
mov ecx, 0x7076584c
mov dword [esp + 8], ecx
mov dword [esp], eax
call fcn.6fd4e660
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + 0xbc]
mov eax, 1
mov edx, dword [ecx + 0x70]
mov dword [esp + 0x28], ecx
test edx, edx
je 0x6fde6c4d
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0xd0]
mov dword [esp + 0x30], eax
sar eax, 0x1f
add eax, 2
cmp eax, 2
mov dword [edi + 0x78], eax
jne 0x6fde6b55
mov ecx, dword [edi + 0x74]
jmp 0x6fde6c7b
inc dword [esp + 0x38]
jmp 0x6fde6b11
mov esi, dword [esp + 0x28]
mov esi, dword [esi + 0x70]
test esi, esi
je 0x6fde6bf5
cmp eax, 2
jne 0x6fde6bf5
mov esi, dword [esp + 0x2c]
mov eax, ecx
mov edx, dword [esi + 0xd0]
mov esi, dword [esp + 0x28]
sub eax, edx
cmp eax, dword [esi + 0x74]
jl 0x6fde6dec
mov esi, dword [esi + 0x70]
test esi, esi
je 0x6fde6e0d
mov eax, dword [esp + 0x2c]
mov dword [eax + 0xd0], ecx
mov eax, 2
mov byte [edi + 0x8a], 1
jmp 0x6fde6adf
mov esi, dword [esp + 0x28]
mov dword [edi + 0x78], 3
test ebp, ebp
je 0x6fde7021
mov eax, dword [esp + ebp*4 + 0x4c4]
mov ecx, dword [esp + 0x2c]
mov byte [eax + 0x8b], 1
mov eax, dword [esp + ebp*4 + 0x4c8]
mov dword [eax + 0x84], ebp
mov dword [esp + 0x34], eax
add eax, 0x38
mov dword [ecx + 0xc0], eax
mov eax, dword [esi + 0x8c]
inc dword [ecx + ebp*4 + 0xd4]
test eax, eax
je 0x6fde6d2b
cmp ebp, 1
jle 0x6fde6d2b
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x6fde6d2b
mov eax, ebp
sar eax, 1
mov eax, dword [esp + eax*4 + 0x4c8]
mov dword [eax + 0x78], 4
cmp dword [esi + 0x130], 1
je 0x6fde6e23
mov edi, dword [esp + 0x3c]
lea eax, [ebp + 1]
test edi, edi
je 0x6fde704c
mov dword [esp + 0x30], eax
mov ecx, eax
mov eax, dword [esp + ecx*4 + 0xe0]
mov edi, dword [esp + 0x2c]
mov eax, dword [eax + 0x40]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], ecx
mov dword [esp], ebx
dec eax
cmp eax, 1
mov eax, 0
cmovbe eax, ecx
add edi, 0x10
mov dword [esp + 4], eax
mov ecx, edi
mov dword [esp + 0x28], edi
call fcn.6fde2e20
sub esp, 0x10
test ebp, ebp
je 0x6fde6e23
mov esi, 1
xor edi, edi
jmp 0x6fde6dca
mov ecx, dword [esp + 0x28]
mov dword [esp + 0xc], esi
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.6fde2e20
mov eax, dword [ebx + esi*4]
sub esp, 0x10
cmp dword [eax + 0x40], 4
cmove edi, esi
inc esi
cmp esi, ebp
jg 0x6fde6e23
mov edx, dword [ebx + esi*4]
mov eax, dword [esp + 0x30]
cmp dword [edx + 0x40], 5
jne 0x6fde6da0
mov eax, esi
lea esi, [esi]
inc eax
mov edx, dword [ebx + eax*4]
cmp dword [edx + 0x40], 5
je 0x6fde6de0
jmp 0x6fde6da0
mov eax, 2
mov ecx, dword [esp + 0x28]
cmp dword [ecx + 0x84], ebp
jne 0x6fde6aeb
jmp 0x6fde6b7f
mov eax, 1
jmp 0x6fde6df1
mov dword [edi + 0x78], 1
jmp 0x6fde6ab4
mov eax, 1
jmp 0x6fde6aa8
mov eax, dword [esp + 0x40]
xor edi, edi
mov dword [esp], eax
call dword [esp + 0x48]
sub esp, 4
mov eax, dword [esp + 0x2c]
lea esi, [eax + 0xa4]
mov dword [esp + 0x28], esi
mov esi, dword [esp + 0x3c]
lea esi, [esi]
lea edi, [edi]
mov ecx, dword [esp + 0x28]
dec esi
call fcn.6fde9580
mov edx, dword [eax + 0x14]
mov eax, dword [eax + 0x10]
mov dword [esp + edi*8 + 0x5c], edx
mov dword [esp + edi*8 + 0x58], eax
inc edi
cmp edi, ebp
jle 0x6fde6e50
mov eax, dword [esp + 0x40]
mov dword [esp + 0x3c], esi
mov dword [esp], eax
call dword [esp + 0x44]
sub esp, 4
mov edi, dword [esp + 0x2c]
mov eax, edi
add eax, 0x130
mov dword [esp], eax
mov dword [esp + 0x30], eax
call dword [esp + 0x48]
sub esp, 4
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
mov dword [ecx + 0x18], eax
mov eax, edi
add eax, 0xb0
mov esi, eax
mov dword [ecx + 0x1c], edx
mov dword [esp], ecx
mov ecx, esi
mov dword [esp + 0x28], eax
call fcn.6fde9530
sub esp, 4
cmp ebp, 1
jle 0x6fde7132
mov eax, dword [edi + 0xbc]
mov ecx, 1
mov esi, dword [eax + 0x8c]
test esi, esi
je 0x6fde6f29
xor edi, edi
jmp 0x6fde6ef5
inc edi
cmp edi, ebp
je 0x6fde6f29
mov eax, dword [esp + edi*4 + 0x4c8]
cmp dword [eax + 0x78], 4
jne 0x6fde6ef0
mov edx, dword [esp + ecx*8 + 0x58]
lea esi, [ecx + 1]
inc edi
mov ecx, dword [esp + ecx*8 + 0x5c]
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp], eax
call fcn.6fde9530
mov ecx, esi
sub esp, 4
cmp edi, ebp
jne 0x6fde6ef5
xor edi, edi
nop
lea esi, [esi]
mov eax, dword [esp + edi*4 + 0x4c8]
cmp dword [eax + 0x78], 4
je 0x6fde6f5f
mov edx, dword [esp + ecx*8 + 0x58]
lea esi, [ecx + 1]
mov ecx, dword [esp + ecx*8 + 0x5c]
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp], eax
call fcn.6fde9530
mov ecx, esi
sub esp, 4
inc edi
cmp edi, ebp
jne 0x6fde6f30
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0xbc]
mov ecx, dword [eax + 0x190]
test ecx, ecx
jne 0x6fde6f8c
mov edx, dword [eax + 0x184]
test edx, edx
je 0x6fde6fad
mov ebp, dword [eax + 0x90]
test ebp, ebp
je 0x6fde6fad
mov edi, dword [eax + 0x1ac]
test edi, edi
jne 0x6fde6fad
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0xc0]
mov eax, dword [eax + 0x40]
dec eax
cmp eax, 1
jbe 0x6fde7144
mov eax, dword [esp + 0x30]
mov edi, dword [esp + 0x44]
mov dword [esp], eax
call edi
sub esp, 4
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x160]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call edi
sub esp, 4
add esp, 0x8bc
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x70765898
mov dword [esp + 8], eax
mov eax, 1
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.6fd4e660
mov ecx, dword [esp + 0x2c]
mov eax, dword [edi + 0x78]
mov ecx, dword [ecx + 0xbc]
lea edx, [eax - 4]
mov dword [esp + 0x28], ecx
jmp 0x6fde6b6e
mov eax, dword [esp + 0x4c8]
xor edx, edx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x84], edx
mov dword [esp + 0x34], eax
add eax, 0x38
mov dword [ecx + 0xc0], eax
inc dword [ecx + 0xd4]
jmp 0x6fde6d2b
mov ecx, eax
mov dword [esp + 0x30], eax
xor eax, eax
lea esi, [esi]
lea edi, [edi]
inc eax
mov esi, dword [esp + eax*4 + 0x4c4]
cmp eax, ecx
lea edx, [esi + 0x38]
mov dword [esp + 0x28], esi
mov dword [ebx + eax*4], edx
jne 0x6fde7060
mov ecx, dword [esp + 0x30]
jmp 0x6fde6d4d
mov eax, dword [edi + 0x74]
mov dword [edi + 0x78], 5
mov dword [esp + 0xc], eax
mov eax, str.B_ref_at_frame__d_incompatible_with_B_pyramid_n
mov dword [esp + 8], eax
mov eax, 1
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.6fd4e660
mov ecx, dword [esp + 0x2c]
mov eax, dword [edi + 0x78]
mov ecx, dword [ecx + 0xbc]
mov dword [esp + 0x28], ecx
jmp 0x6fde6b22
mov eax, 1
mov esi, str.B_ref_at_frame__d_incompatible_with_B_pyramid_and__d_reference_frames_n
mov dword [edi + 0x78], 5
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x10], ecx
mov ecx, 5
mov dword [esp + 0xc], ecx
mov dword [esp + 8], esi
mov dword [esp], eax
call fcn.6fd4e660
mov ecx, dword [esp + 0x2c]
mov eax, dword [edi + 0x78]
mov ecx, dword [ecx + 0xbc]
mov dword [esp + 0x28], ecx
jmp 0x6fde6b22
test edi, edi
je 0x6fde69f4
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], edi
lea ecx, [eax + 0x10]
mov eax, dword [eax + 0xbc]
mov dword [esp], eax
call fcn.6fde2490
sub esp, 8
jmp 0x6fde69f4
test ebp, ebp
mov ecx, 1
jg 0x6fde6f29
jmp 0x6fde6f64
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call dword [esp + 0x48]
sub esp, 4
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x3c]
mov edx, dword [eax + 0xa4]
mov eax, dword [eax + 0xc0]
test edi, edi
mov dword [esp + 0xe0], eax
jle 0x6fde71c7
inc edi
lea eax, [esp + 0xe4]
lea esi, [ebx + edi*4]
lea esi, [esi]
lea ecx, [edx + 0x38]
add eax, 4
mov dword [eax - 4], ecx
cmp eax, esi
mov edx, dword [edx + 0x2d64]
jne 0x6fde7180
mov eax, dword [esp + 0x40]
xor ecx, ecx
mov esi, 1
mov dword [esp + edi*4 + 0xe0], ecx
mov dword [esp], eax
call dword [esp + 0x44]
sub esp, 4
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.6fde58a0
sub esp, 8
jmp 0x6fde6fad
mov edi, 1
jmp 0x6fde7193
mov esi, dword [esp + 0x28]
jmp 0x6fde6cc7
xor esi, esi
mov dword [esp + 0x3c], esi
jmp 0x6fde69c9
xor edi, edi
jmp 0x6fde6980