Function at 0x6be650
Capabilities:
Execute anti-debugging instructions
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
mov eax, 0x24d8
call fcn.00607e10
push esi
push edi
push dword [0x884c50]
mov edi, dword [sym.imp.KERNEL32.dll_TlsGetValue]
call edi
mov esi, eax
mov ecx, dword [esi + 4]
cmp ecx, dword [esi + 0xc]
jae 0x6be69a
mov dword [ecx], str.LtCollColl3
mov dword [ecx + 0xc], str.StInit
rdtsc
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov dword [ecx + 4], eax
lea eax, [ecx + 0x10]
mov dword [esi + 4], eax
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0xc]
mov edx, dword [esi]
mov ecx, dword [eax]
mov eax, dword [edx]
mov eax, dword [eax + 0xc]
mov eax, dword [ecx + eax*4 + 0x110]
shr eax, 8
not al
and eax, 0xffffff01
mov dword [esp + 0x18], eax
mov eax, dword [esi + 4]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov eax, dword [ecx + eax*4 + 0x110]
mov ecx, dword [esp + 0x18]
shr eax, 8
not al
and eax, 0xffffff01
mov dword [esp + 0x10], eax
or al, cl
je 0x6be6ec
mov byte [esp + 0xf], cl
jmp 0x6be7b8
cmp dword [edx + 0xc], 0
jne 0x6be6fc
cmp dword [edx + 0x44], 0
je 0x6be6fc
mov al, 1
jmp 0x6be6fe
xor al, al
mov ecx, dword [esi + 4]
mov byte [esp + 0xf], al
cmp dword [ecx + 0xc], 0
jne 0x6be715
cmp dword [ecx + 0x44], 0
je 0x6be715
mov cl, 1
jmp 0x6be717
xor cl, cl
cmp al, cl
jne 0x6be7b8
lea eax, [esp + 0xe0]
push eax
push edx
call fcn.006c1560
mov ecx, eax
lea eax, [esp + 0x2e8]
push eax
push dword [esi + 4]
mov dword [esp + 0x40], ecx
call fcn.006c1560
mov edx, eax
add esp, 0x10
mov eax, dword [esp + 0x30]
test eax, eax
je 0x6be759
cmp dword [eax + 0xc], 9
sete al
jmp 0x6be75b
xor al, al
mov byte [esp + 0xf], al
test edx, edx
je 0x6be76c
cmp dword [edx + 0xc], 9
sete cl
jmp 0x6be76e
xor cl, cl
test al, al
je 0x6be795
test cl, cl
je 0x6be795
movzx eax, word [edx + 0x26]
mov ecx, dword [esp + 0x30]
mov edx, dword [edx + 0x1c]
sub edx, eax
movzx eax, word [ecx + 0x26]
mov ecx, dword [ecx + 0x1c]
sub ecx, eax
cmp ecx, edx
setle byte [esp + 0xf]
jmp 0x6be7b8
or cl, al
jne 0x6be7b8
mov eax, dword [esi]
mov ecx, dword [eax + 8]
mov eax, dword [esi + 4]
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0xa0]
comiss xmm0, dword [ecx + 0xa0]
setae byte [esp + 0xf]
mov eax, dword [esp + 0x18]
test byte [esp + 0x10], al
jne 0x6bed8b
push dword [0x884c50]
call edi
mov ecx, eax
mov dword [esp + 0x30], ecx
mov eax, dword [ecx + 4]
mov dword [esp + 0x20], eax
cmp eax, dword [ecx + 0xc]
jae 0x6be801
mov dword [eax], str.StqueryTree
rdtsc
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
mov dword [eax + 4], ecx
add eax, 0xc
mov ecx, dword [esp + 0x30]
mov dword [ecx + 4], eax
cmp byte [esp + 0xf], 0
je 0x6be859
lea eax, [esi + 0x20]
push eax
lea ecx, [esp + 0xa4]
call fcn.0046ee90
push 0x800
lea eax, [esp + 0x4e4]
push eax
push 0
push dword [esi + 0xc]
lea eax, [esi + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
push dword [esi + 4]
push dword [esi]
call fcn.006c1230
mov ecx, dword [esi + 4]
mov dword [esp + 0x60], ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x38], ecx
mov ecx, dword [esi]
mov dword [esp + 0x44], ecx
mov ecx, dword [ebp + 0xc]
jmp 0x6be8ab
movaps xmm0, xmmword [esi + 0x70]
lea eax, [esp + 0x4e0]
xorps xmm0, xmmword [0x719d70]
push 0x800
push eax
push 0
push dword [esi + 0xc]
lea eax, [esp + 0x90]
movaps xmmword [esp + 0x90], xmm0
push eax
lea eax, [esi + 0x20]
push eax
push dword [esi]
push dword [esi + 4]
call fcn.006c1230
mov ecx, dword [esi]
mov dword [esp + 0x60], ecx
mov ecx, dword [ebp + 0xc]
mov dword [esp + 0x38], ecx
mov ecx, dword [esi + 4]
mov dword [esp + 0x44], ecx
mov ecx, dword [ebp + 0x10]
add esp, 0x20
mov dword [esp + 0x28], eax
add eax, 4
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x30], eax
push dword [0x884adc]
call edi
mov ecx, eax
mov eax, dword [esp + 0x30]
shl eax, 5
add eax, 0x7f
and eax, 0xffffff80
mov edi, dword [ecx + 0xc]
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], edi
lea edx, [edi + eax]
cmp eax, dword [ecx + 8]
jg 0x6be8f1
cmp edx, dword [ecx + 0x10]
ja 0x6be8f1
mov dword [ecx + 0xc], edx
jmp 0x6be8fd
push eax
call fcn.0046a3c0
mov edi, eax
mov dword [esp + 0x2c], eax
push dword [0x884c50]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, eax
mov dword [esp + 0x44], ecx
mov eax, dword [ecx + 4]
mov dword [esp + 0x20], eax
cmp eax, dword [ecx + 0xc]
jae 0x6be93c
mov dword [eax], str.StConvertHitlist
rdtsc
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
mov dword [eax + 4], ecx
add eax, 0xc
mov ecx, dword [esp + 0x44]
mov dword [ecx + 4], eax
mov eax, dword [esi + 0xc]
mov eax, dword [eax + 0x60]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x44], eax
test eax, eax
je 0x6be97c
mov eax, dword [esp + 0x40]
mov ecx, eax
mov eax, dword [eax + 0xc]
test eax, eax
je 0x6be969
nop word [eax + eax]
mov ecx, eax
mov eax, dword [ecx + 0xc]
test eax, eax
jne 0x6be960
lea eax, [esp + 0xe0]
push eax
push dword [ecx + 8]
call fcn.0064db20
add esp, 8
xor eax, eax
mov dword [esp + 0x20], eax
cmp dword [esp + 0x28], eax
jle 0x6becac
lea ecx, [edi + 0x18]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x18]
lea edi, [esp + 0x2e0]
mov edx, dword [esp + eax*4 + 0x4e0]
push edi
push edx
mov eax, dword [ecx]
mov dword [esp + 0x24], edx
mov eax, dword [eax + 0x14]
call eax
lea ecx, [esp + 0x60]
push ecx
mov ecx, dword [esi + 0xc]
mov edx, dword [eax]
push ecx
movss xmm0, dword [ecx + 0xc]
mov ecx, dword [esp + 0x48]
movss dword [esp], xmm0
push dword [ecx + 8]
mov ecx, eax
call dword [edx + 0x1c]
cmp dword [esp + 0x44], 0
je 0x6beb7d
movaps xmm3, xmmword [esp + 0x70]
subps xmm3, xmmword [esp + 0x60]
movaps xmm2, xmmword [0x786aa0]
movaps xmm4, xmmword [0x727d50]
mov edx, dword [esp + 0xe0]
mov ecx, dword [esp + 0x1f0]
mulps xmm3, xmm2
shufps xmm2, xmm2, 0
subps xmm4, xmm2
mulps xmm2, xmmword [esp + 0x60]
movaps xmmword [esp + 0x90], xmm3
movups xmm7, xmmword [edx + 0x80]
mulps xmm4, xmmword [esp + 0x70]
addps xmm4, xmm2
movaps xmm6, xmm4
movaps xmm0, xmm4
shufps xmm0, xmm4, 0x55
movaps xmm5, xmm4
mulps xmm0, xmmword [esp + 0x250]
shufps xmm6, xmm4, 0
mulps xmm6, xmmword [esp + 0x240]
addps xmm6, xmm0
movaps xmm0, xmm4
shufps xmm0, xmm4, 0xaa
mulps xmm0, xmmword [esp + 0x260]
addps xmm0, xmmword [esp + 0x270]
addps xmm6, xmm0
movaps xmm1, xmm6
movaps xmm0, xmm6
shufps xmm0, xmm6, 0x55
mulps xmm0, xmmword [esp + 0x210]
shufps xmm1, xmm6, 0
mulps xmm1, xmmword [esp + 0x200]
addps xmm1, xmm0
movaps xmm0, xmm6
shufps xmm0, xmm6, 0xaa
mulps xmm0, xmmword [esp + 0x220]
addps xmm0, xmmword [esp + 0x230]
addps xmm1, xmm0
minps xmm5, xmm1
maxps xmm4, xmm1
test ecx, ecx
jle 0x6beb14
subps xmm6, xmm7
lea eax, [esp + 0x110]
nop word [eax + eax]
movaps xmm3, xmmword [eax + 0x10]
movaps xmm1, xmm6
movaps xmm0, xmm3
shufps xmm0, xmm3, 0xff
shufps xmm0, xmm0, 0
mulps xmm1, xmm0
addps xmm1, xmm7
movaps xmm2, xmm1
movaps xmm0, xmm1
shufps xmm2, xmm1, 0x55
mulps xmm2, xmmword [eax - 0x10]
shufps xmm0, xmm1, 0
mulps xmm0, xmmword [eax - 0x20]
shufps xmm1, xmm1, 0xaa
mulps xmm1, xmmword [eax]
add eax, 0x40
addps xmm2, xmm0
addps xmm1, xmm3
addps xmm2, xmm1
minps xmm5, xmm2
maxps xmm4, xmm2
sub ecx, 1
jne 0x6beac0
movaps xmm3, xmmword [esp + 0x90]
movaps xmm1, xmm3
mulps xmm1, xmm3
movaps xmm0, xmm1
shufps xmm0, xmm1, 0x55
addss xmm0, xmm1
shufps xmm1, xmm1, 0xaa
addss xmm1, xmm0
movaps xmm0, xmmword [0x786ab0]
sqrtss xmm1, xmm1
shufps xmm1, xmm1, 0
mulps xmm0, xmm1
movaps xmm2, xmm1
shufps xmm2, xmm1, 0
movaps xmm1, xmmword [edx + 0x90]
shufps xmm1, xmm1, 0xff
shufps xmm0, xmm0, 0
minps xmm1, xmm0
shufps xmm1, xmm1, 0
mulps xmm1, xmm2
addps xmm1, xmm3
minps xmm2, xmm1
subps xmm5, xmm2
addps xmm4, xmm2
minps xmm5, xmm5
maxps xmm4, xmm4
movaps xmmword [esp + 0x60], xmm5
movaps xmmword [esp + 0x70], xmm4
jmp 0x6beb82
movaps xmm5, xmmword [esp + 0x60]
mov ecx, dword [esi + 0xc]
movaps xmm2, xmmword [0x87aea0]
movaps xmm1, xmmword [ecx + 0x20]
addps xmm1, xmm5
mulps xmm1, xmmword [ecx + 0x40]
minps xmm1, xmm2
maxps xmm1, xmmword [0x719320]
movss dword [esp + 0x14], xmm1
fld dword [esp + 0x14]
fistp dword [esp + 0x48]
mov edx, dword [esp + 0x10]
movaps xmm0, xmm1
mov eax, dword [esp + 0x48]
shufps xmm0, xmm1, 0x55
movss dword [esp + 0x14], xmm0
mov dword [edx - 0x18], eax
fld dword [esp + 0x14]
fistp dword [esp + 0x4c]
mov eax, dword [esp + 0x4c]
movaps xmm0, xmm1
shufps xmm0, xmm1, 0xaa
mov dword [edx - 0x14], eax
movss dword [esp + 0x14], xmm0
fld dword [esp + 0x14]
fistp dword [esp + 0x50]
mov eax, dword [esp + 0x50]
shufps xmm1, xmm1, 0xff
mov dword [edx - 0x10], eax
movss dword [esp + 0x14], xmm1
fld dword [esp + 0x14]
fistp dword [esp + 0x54]
mov eax, dword [esp + 0x54]
movaps xmm1, xmmword [esp + 0x70]
mov dword [edx - 0xc], eax
addps xmm1, xmmword [ecx + 0x30]
mulps xmm1, xmmword [ecx + 0x40]
minps xmm1, xmm2
maxps xmm1, xmmword [0x719320]
movss dword [esp + 0x14], xmm1
fld dword [esp + 0x14]
fistp dword [esp + 0x58]
mov eax, dword [esp + 0x58]
movaps xmm0, xmm1
shufps xmm0, xmm1, 0x55
mov dword [edx - 8], eax
movss dword [esp + 0x14], xmm0
fld dword [esp + 0x14]
fistp dword [esp + 0x5c]
mov eax, dword [esp + 0x5c]
movaps xmm0, xmm1
shufps xmm0, xmm1, 0xaa
mov dword [edx - 4], eax
movss dword [esp + 0x14], xmm0
fld dword [esp + 0x14]
fistp dword [esp + 0x38]
mov eax, dword [esp + 0x38]
shufps xmm1, xmm1, 0xff
mov dword [edx], eax
movss dword [esp + 0x14], xmm1
fld dword [esp + 0x14]
fistp dword [esp + 0x34]
mov eax, dword [esp + 0x34]
mov dword [edx + 4], eax
mov eax, dword [esp + 0x1c]
mov dword [edx - 0xc], eax
add edx, 0x20
mov eax, dword [esp + 0x20]
inc eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x20], eax
cmp eax, dword [esp + 0x28]
jl 0x6be993
mov edi, dword [esp + 0x2c]
push dword [0x884c50]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, eax
mov dword [esp + 0x38], ecx
mov eax, dword [ecx + 4]
mov dword [esp + 0x34], eax
cmp eax, dword [ecx + 0xc]
jae 0x6beceb
mov dword [eax], str.StSortHitList
rdtsc
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x1c]
mov dword [eax + 4], ecx
add eax, 0xc
mov ecx, dword [esp + 0x38]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x28]
cmp eax, 1
jle 0x6bed09
push dword [esp + 0x1c]
dec eax
push eax
push 0
push edi
call fcn.006bfc80
mov eax, dword [esp + 0x38]
add esp, 0x10
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x24]
test eax, eax
je 0x6bee75
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
cmp dword [edi + 0xc], 0
mov edx, eax
mov dword [esp + 0x10], edx
jne 0x6bed49
cmp dword [edi + 0x44], 0
je 0x6bed49
mov ecx, dword [edi + 0x20]
cmp ecx, dword [edi + 0x30]
ja 0x6bed49
movzx eax, word [edi + 0x40]
cmp edx, eax
cmovg eax, edx
mov edx, eax
mov dword [esp + 0x10], eax
push dword [0x884adc]
lea edi, [edx + 4]
mov dword [esp + 0x1c], edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, edi
shl ecx, 5
mov dword [esp + 0x1c], ecx
add ecx, 0x7f
mov edi, dword [eax + 0xc]
and ecx, 0xffffff80
lea edx, [edi + ecx]
cmp ecx, dword [eax + 8]
jg 0x6bee45
cmp edx, dword [eax + 0x10]
ja 0x6bee45
mov dword [eax + 0xc], edx
jmp 0x6bee4f
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov ecx, dword [esi]
mov edx, eax
mov dword [esp + 0x10], edx
cmp dword [ecx + 0xc], 0
jne 0x6bedc0
cmp dword [ecx + 0x44], 0
je 0x6bedc0
mov eax, dword [ecx + 0x20]
cmp eax, dword [ecx + 0x30]
ja 0x6bedc0
movzx eax, word [ecx + 0x40]
cmp edx, eax
cmovg eax, edx
mov edx, eax
mov dword [esp + 0x10], eax
push dword [0x884adc]
add edx, 4
mov dword [esp + 0x1c], edx
call edi
mov ecx, eax
mov eax, dword [esp + 0x18]
shl eax, 5
mov dword [esp + 0x18], eax
add eax, 0x7f
and eax, 0xffffff80
mov edi, dword [ecx + 0xc]
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], edi
lea edx, [edi + eax]
cmp eax, dword [ecx + 8]
jg 0x6bedff
cmp edx, dword [ecx + 0x10]
ja 0x6bedff
mov dword [ecx + 0xc], edx
jmp 0x6bee0b
push eax
call fcn.0046a3c0
mov edi, eax
mov dword [esp + 0x2c], eax
mov edx, dword [esp + 0x18]
push edx
push dword [esp + 0x14]
push edi
push dword [esi + 0xc]
push dword [ebp + 0xc]
push dword [esi + 8]
push dword [esi]
call fcn.006bfec0
mov ecx, dword [esi]
add esp, 0x1c
mov edi, dword [esi + 4]
mov dword [esp + 0x40], ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], edi
mov dword [esp + 0x3c], ecx
jmp 0x6bed11
push ecx
mov ecx, eax
call fcn.0046a3c0
mov edi, eax
push dword [esp + 0x1c]
mov ecx, dword [esp + 0x40]
push dword [esp + 0x14]
push edi
push dword [esi + 0xc]
push ecx
mov ecx, dword [esp + 0x38]
push 0
push ecx
call fcn.006bfec0
add esp, 0x1c
mov dword [esp + 0x24], eax
jmp 0x6beeb9
push dword [0x884adc]
xor eax, eax
mov dword [esp + 0x1c], 4
mov dword [esp + 0x28], eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp dword [eax + 8], 0x80
mov edi, dword [eax + 0xc]
lea ecx, [edi + 0x80]
jl 0x6beeab
cmp ecx, dword [eax + 0x10]
ja 0x6beeab
mov dword [eax + 0xc], ecx
jmp 0x6beeb9
push 0x80
mov ecx, eax
call fcn.0046a3c0
mov edi, eax
mov edx, dword [esp + 0x28]
lea ecx, [edx + 4]
cmp edx, ecx
jge 0x6beede
mov eax, edx
shl eax, 5
add eax, dword [esp + 0x2c]
sub ecx, edx
nop
mov dword [eax], 0xffffffff
lea eax, [eax + 0x20]
sub ecx, 1
jne 0x6beed0
mov edx, dword [esp + 0x24]
lea ecx, [edx + 4]
cmp edx, ecx
jge 0x6bef00
mov eax, edx
shl eax, 5
add eax, edi
sub ecx, edx
mov dword [eax], 0xffffffff
lea eax, [eax + 0x20]
sub ecx, 1
jne 0x6beef2
push dword [0x884c50]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, eax
mov dword [esp + 0x38], ecx
mov eax, dword [ecx + 4]
mov dword [esp + 0x34], eax
cmp eax, dword [ecx + 0xc]
jae 0x6bef3f
mov dword [eax], str.St1_Axis
rdtsc
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x1c]
mov dword [eax + 4], ecx
add eax, 0xc
mov ecx, dword [esp + 0x38]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x40]
cmp eax, dword [esi]
lea eax, [esp + 0x10]
push eax
mov eax, dword [esp + 0x28]
push 0x7ff
push dword [ebp + 0x14]
mov dword [esp + 0x1c], 0
jne 0x6bef6c
push eax
push edi
push dword [esp + 0x3c]
push dword [esp + 0x44]
jmp 0x6bef76
push dword [esp + 0x34]
push dword [esp + 0x3c]
push eax
push edi
call fcn.00709630
mov esi, eax
add esp, 0x1c
mov eax, dword [esp + 0x18]
shl eax, 5
add eax, 0x7f
push dword [0x884adc]
and eax, 0xffffff80
mov dword [esp + 0x1c], eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edx, eax
mov eax, dword [esp + 0x18]
lea ecx, [eax + 0xf]
and ecx, 0xfffffff0
mov dword [esp + 0x20], ecx
cmp eax, dword [edx + 8]
jg 0x6befc7
add ecx, edi
cmp ecx, dword [edx + 0xc]
jne 0x6befc3
cmp dword [edx + 0x14], edi
je 0x6befc3
mov dword [edx + 0xc], edi
jmp 0x6befd0
mov ecx, dword [esp + 0x20]
push ecx
push edi
mov ecx, edx
call fcn.0046a590
push dword [0x884adc]
mov edi, dword [sym.imp.KERNEL32.dll_TlsGetValue]
call edi
mov edx, eax
mov eax, dword [esp + 0x30]
lea ecx, [eax + 0xf]
and ecx, 0xfffffff0
cmp eax, dword [edx + 8]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x20], ecx
jg 0x6bf00c
add ecx, eax
cmp ecx, dword [edx + 0xc]
jne 0x6bf008
cmp dword [edx + 0x14], eax
je 0x6bf008
mov dword [edx + 0xc], eax
jmp 0x6bf015
mov ecx, dword [esp + 0x20]
push ecx
push eax
mov ecx, edx
call fcn.0046a590
push dword [0x884c50]
call edi
mov ecx, eax
mov dword [esp + 0x38], ecx
mov eax, dword [ecx + 4]
mov dword [esp + 0x34], eax
cmp eax, dword [ecx + 0xc]
jae 0x6bf050
mov dword [eax], str.StSortHits
rdtsc
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x1c]
mov dword [eax + 4], ecx
add eax, 0xc
mov ecx, dword [esp + 0x38]
mov dword [ecx + 4], eax
push dword [0x884c50]
call edi
mov ecx, eax
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 0xc]
jae 0x6bf07a
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [eax], str.MiNumHits
movss dword [eax + 4], xmm0
add eax, 8
mov dword [ecx + 4], eax
cmp esi, 1
jle 0x6bf094
push dword [esp + 0x1c]
lea eax, [esi - 1]
push eax
push 0
push dword [ebp + 0x14]
call fcn.006bfde0
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov dword [eax + esi*8], 0xffffffff
mov dword [eax + esi*8 + 4], 0xffffffff
push dword [0x884c50]
call edi
mov dword [esp + 0x34], eax
mov edi, dword [eax + 4]
cmp edi, dword [eax + 0xc]
jae 0x6bf0d7
mov dword [edi], 0x77f784
rdtsc
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x1c]
lea eax, [edi + 0xc]
mov dword [edi + 4], ecx
mov ecx, dword [esp + 0x34]
mov dword [ecx + 4], eax
pop edi
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret