Function at 0x6c4170
Capabilities:
Execute anti-debugging instructions
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x6f8
push esi
push edi
push dword [0x884c50]
mov dword [esp + 0x3c], ecx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
mov esi, dword [edi + 4]
cmp esi, dword [edi + 0xc]
jae 0x6c41b8
mov dword [esi], str.LtBvTree
mov dword [esi + 0xc], str.StQueryTree
rdtsc
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov dword [esi + 4], eax
lea eax, [esi + 0x10]
mov dword [edi + 4], eax
mov edi, dword [ebp + 8]
lea ecx, [esp + 0x2a0]
mov eax, dword [ebp + 0x14]
mov esi, dword [ebp + 0xc]
mov dword [esp + 0x94], 0
push dword [edi + 8]
mov eax, dword [eax + 4]
push dword [esi + 8]
mov dword [esp + 0x44], eax
lea eax, [esp + 0xa4]
mov dword [esp + 0x98], eax
mov dword [esp + 0xa0], 0x80000080
call fcn.0046efa0
cmp byte [0x87aff0], 0
mov edx, dword [edi + 8]
mov ecx, dword [esi + 8]
mov esi, dword [ebp + 0x10]
mov dword [esp + 0x18], edx
movss xmm4, dword [edx + 0x5c]
movaps xmm2, xmmword [edx + 0x40]
mulss xmm4, dword [esi + 0x58]
mov dword [esp + 0x24], ecx
movss xmm3, dword [ecx + 0x5c]
subps xmm2, xmmword [edx + 0x50]
mulss xmm3, dword [esi + 0x58]
movaps xmm0, xmm4
movaps xmm1, xmmword [ecx + 0x50]
subps xmm1, xmmword [ecx + 0x40]
shufps xmm0, xmm0, 0
mulps xmm2, xmm0
movaps xmm0, xmm3
shufps xmm0, xmm0, 0
mulps xmm1, xmm0
movss xmm0, dword [edx + 0x9c]
mulss xmm0, xmm4
addps xmm2, xmm1
movss xmm1, dword [ecx + 0x9c]
mulss xmm1, xmm3
mulss xmm0, dword [edx + 0xa0]
mulss xmm1, dword [ecx + 0xa0]
movaps xmmword [esp + 0x40], xmm2
addss xmm1, xmm0
movss dword [esp + 0x4c], xmm1
je 0x6c4293
mov eax, dword [esp + 0x38]
add eax, 0x20
jmp 0x6c4295
xor eax, eax
movaps xmm4, xmmword [ecx]
movaps xmm3, xmmword [ecx + 0x20]
movaps xmm1, xmm4
unpcklps xmm1, xmmword [ecx + 0x10]
unpckhps xmm4, xmmword [ecx + 0x10]
movaps xmm2, xmm1
movlhps xmm2, xmm3
movaps xmm5, xmm2
shufps xmm4, xmm3, 0xe4
movhlps xmm5, xmm1
movaps xmm1, xmmword [esp + 0x40]
movaps xmm0, xmm1
shufps xmm5, xmm3, 0xd4
shufps xmm0, xmm1, 0x55
mulps xmm5, xmm0
movaps xmm0, xmm1
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x60]
shufps xmm0, xmm1, 0
mulps xmm0, xmm2
cmp dword [eax + 0x10], 0
shufps xmm1, xmm1, 0xaa
mulps xmm1, xmm4
addps xmm5, xmm0
addps xmm5, xmm1
movaps xmmword [esp + 0x40], xmm5
je 0x6c4474
movss xmm0, dword [ecx + 0x9c]
movss xmm1, dword [edx + 0x9c]
movaps xmm2, xmm0
addss xmm1, xmm0
mulss xmm2, xmm0
movss xmm0, dword [esi + 0xc]
mulss xmm0, dword [0x719760]
mulss xmm2, dword [ecx + 0xa0]
mov ecx, dword [edi]
lea edi, [esp + 0x60]
mulss xmm1, dword [edx + 0xa0]
lea edx, [esp + 0x2a0]
push edi
push ecx
mov eax, dword [ecx]
addss xmm1, xmm2
movss dword [esp + 0x28], xmm2
addss xmm1, xmm0
movss dword [esp], xmm1
push edx
call dword [eax + 0x1c]
mov edi, dword [ebp + 0xc]
mov ecx, dword [esp + 0x18]
movss xmm6, dword [esi + 0xc]
mulss xmm6, dword [0x719760]
mov eax, dword [edi + 8]
movaps xmm5, xmmword [ecx + 0x50]
addss xmm6, dword [ecx + 0xa0]
subps xmm5, xmmword [eax + 0x30]
movaps xmm4, xmmword [eax]
movaps xmm3, xmmword [eax + 0x20]
movaps xmm1, xmm4
unpcklps xmm1, xmmword [eax + 0x10]
unpckhps xmm4, xmmword [eax + 0x10]
movaps xmm2, xmm1
addss xmm6, dword [esp + 0x20]
movlhps xmm2, xmm3
movaps xmm0, xmm5
shufps xmm0, xmm5, 0x55
movaps xmm7, xmm2
movhlps xmm7, xmm1
shufps xmm7, xmm3, 0xd4
mulps xmm7, xmm0
movaps xmm0, xmm5
mov eax, dword [esp + 0x24]
shufps xmm0, xmm5, 0
mulps xmm0, xmm2
shufps xmm4, xmm3, 0xe4
shufps xmm5, xmm5, 0xaa
mulps xmm5, xmm4
movaps xmm4, xmmword [esp + 0x60]
addps xmm7, xmm0
shufps xmm6, xmm6, 0
addps xmm7, xmm5
movaps xmm5, xmmword [esp + 0x70]
movaps xmm0, xmm7
subps xmm0, xmm6
maxps xmm4, xmm0
movaps xmm0, xmm7
addps xmm0, xmm6
movaps xmmword [esp + 0x60], xmm4
movaps xmm6, xmmword [esp + 0x40]
minps xmm5, xmm0
movaps xmmword [esp + 0x70], xmm5
movaps xmm3, xmm5
movss xmm0, dword [eax + 0x9c]
subps xmm3, xmm4
comiss xmm0, dword [0x718814]
jbe 0x6c4456
subps xmm7, xmmword [eax + 0x80]
movaps xmm1, xmmword [eax + 0x90]
movaps xmm0, xmm1
shufps xmm0, xmm1, 0xd2
shufps xmm1, xmm1, 0xc9
movaps xmm2, xmm7
shufps xmm2, xmm7, 0xc9
mulps xmm2, xmm0
movss xmm0, dword [eax + 0x5c]
mulss xmm0, dword [esi + 0x58]
shufps xmm7, xmm7, 0xd2
mulps xmm7, xmm1
shufps xmm0, xmm0, 0
subps xmm2, xmm7
mulps xmm2, xmm0
addps xmm6, xmm2
xorps xmm2, xmm2
movaps xmm7, xmm2
minps xmm7, xmm6
maxps xmm2, xmm6
addps xmm7, xmm4
addps xmm2, xmm5
movaps xmmword [esp + 0x60], xmm7
movaps xmmword [esp + 0x70], xmm2
jmp 0x6c44b3
mov ecx, dword [edi]
lea edx, [esp + 0x60]
movss xmm0, dword [esi + 0xc]
mulss xmm0, dword [0x719760]
push edx
mov eax, dword [ecx]
lea edx, [esp + 0x2a4]
push ecx
movss dword [esp], xmm0
push edx
call dword [eax + 0x1c]
movaps xmm2, xmmword [esp + 0x70]
movaps xmm7, xmmword [esp + 0x60]
movaps xmm3, xmm2
movaps xmm6, xmmword [esp + 0x40]
subps xmm3, xmm7
mov edi, dword [ebp + 0xc]
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x6c4541
movaps xmm1, xmmword [ecx]
movaps xmm0, xmm2
cmpleps xmm0, xmmword [ecx + 0x10]
cmpleps xmm1, xmm7
andps xmm1, xmm0
movmskps eax, xmm1
and eax, 7
cmp al, 7
je 0x6c45e2
movss xmm4, dword [esi + 0xc]
xorps xmm5, xmm5
mulss xmm4, dword [0x719760]
shufps xmm4, xmm4, 0
subps xmm7, xmm4
addps xmm4, xmm2
movaps xmm2, xmmword [0x7c2830]
mulps xmm2, xmm3
movaps xmm3, xmm5
maxps xmm3, xmm6
minps xmm5, xmm6
mulps xmm3, xmmword [0x7c2840]
movaps xmm0, xmm2
mulps xmm5, xmmword [0x7c2840]
xorps xmm0, xmmword [0x719130]
maxps xmm3, xmm0
minps xmm5, xmm2
addps xmm3, xmm7
addps xmm5, xmm4
movaps xmmword [esp + 0x60], xmm3
movaps xmmword [esp + 0x70], xmm5
movaps xmmword [ecx], xmm3
movaps xmmword [ecx + 0x10], xmm5
mov ecx, dword [edi]
lea edx, [esp + 0x90]
push edx
lea edx, [esp + 0x64]
push edx
mov eax, dword [ecx]
call dword [eax + 0x2c]
mov ecx, dword [edi]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
cmp byte [0x8dd3b6], 0
mov ecx, dword [edi + 8]
mov dword [esp + 0x2f0], edi
mov dword [esp + 0x2ec], ecx
mov dword [esp + 0x2e0], eax
je 0x6c488e
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x90]
lea esi, [ecx + 0xc]
mov dword [esp + 0x34], esi
mov edi, edx
mov eax, dword [ecx + 8]
mov ecx, dword [esi]
mov dword [esp + 0x24], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x1c], ecx
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x94]
lea eax, [edx + eax*4]
mov dword [esp + 0x10], eax
cmp ecx, dword [esp + 0x2c]
je 0x6c46ca
nop dword [eax]
cmp edi, eax
je 0x6c4622
mov eax, dword [ecx]
cmp eax, dword [edi]
jne 0x6c461e
add edi, 4
jmp 0x6c46b5
mov eax, dword [esp + 0x98]
mov dword [esp + 0x94], 0
test eax, eax
js 0x6c4e0a
and eax, 0x3fffffff
mov ecx, 0x7d8954
shl eax, 2
push eax
mov eax, dword [0x7d8954]
push dword [esp + 0x94]
call dword [eax + 0x10]
jmp 0x6c4e0a
mov eax, dword [esp + 0x10]
mov edi, edx
cmp edx, eax
je 0x6c4641
mov edx, dword [esp + 0x90]
nop
mov eax, dword [ecx]
cmp eax, dword [edi]
mov eax, dword [esp + 0x10]
je 0x6c45da
add edi, 4
cmp edi, eax
jne 0x6c4630
mov ecx, dword [ecx + 8]
push dword [esp + 0x3c]
mov eax, dword [ecx]
call dword [eax + 0x1c]
mov esi, dword [esi]
mov eax, 0x2aaaaaab
mov ecx, dword [esp + 0x1c]
sub ecx, esi
imul ecx
mov eax, dword [esp + 0x34]
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
dec dword [eax + 4]
add ecx, edx
mov eax, dword [eax + 4]
sub eax, ecx
lea edx, [eax + eax*2]
lea eax, [ecx + ecx*2]
shl edx, 2
lea ecx, [esi + eax*4]
lea esi, [ecx + 0xc]
test edx, edx
jle 0x6c469e
dec edx
sub esi, ecx
shr edx, 2
inc edx
nop dword [eax + eax]
mov eax, dword [esi + ecx]
lea ecx, [ecx + 4]
mov dword [ecx - 4], eax
sub edx, 1
jne 0x6c4690
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x34]
sub ecx, 0xc
sub dword [esp + 0x2c], 0xc
mov edx, dword [esp + 0x90]
mov eax, dword [esp + 0x10]
add ecx, 0xc
mov dword [esp + 0x1c], ecx
cmp ecx, dword [esp + 0x2c]
jne 0x6c45d0
mov edx, dword [esi + 4]
mov eax, dword [esp + 0x2e0]
mov dword [esp + 0x20], eax
cmp dword [esp + 0x94], edx
je 0x6c4dd2
mov edi, dword [esi]
lea eax, [edx + edx*2]
mov ecx, dword [esp + 0x94]
lea eax, [edi + eax*4]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x10], eax
lea ecx, [eax + ecx*4]
mov dword [esp + 0x30], ecx
cmp eax, ecx
mov ecx, eax
je 0x6c4dd9
cmp edi, dword [esp + 0x14]
je 0x6c472b
mov eax, dword [edi]
cmp eax, dword [ecx]
je 0x6c486e
mov eax, dword [esp + 0x90]
mov edi, ecx
mov ecx, dword [esi + 8]
sub edi, eax
and ecx, 0x3fffffff
sar edi, 2
lea eax, [edx + 1]
sub edx, edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
cmp eax, ecx
jle 0x6c476c
cmp ecx, eax
jge 0x6c476c
add ecx, ecx
cmp eax, ecx
push 0xc
cmovl eax, ecx
push eax
push esi
push 0x7d8954
call fcn.00467b80
mov edx, dword [esp + 0x28]
add esp, 0x10
lea esi, [edi + edi*2]
mov edi, dword [esp + 0x38]
shl esi, 2
lea eax, [edx + edx*2]
shl eax, 2
push eax
mov ecx, dword [edi + 0xc]
add ecx, esi
push ecx
lea eax, [ecx + 0xc]
push eax
call fcn.00469c40
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x30c]
mov ecx, dword [esp + 0x2ec]
add esp, 0xc
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0x10]
mov edi, dword [edi + 0xc]
add edi, esi
push edx
mov esi, dword [eax]
mov eax, dword [ecx]
push esi
mov eax, dword [eax + 0x14]
call eax
mov edx, dword [esp + 0x10]
mov dword [esp + 0x2e8], esi
mov esi, dword [ebp + 0x10]
mov dword [esp + 0x2e4], eax
push dword [edx]
lea edx, [esp + 0x2f]
push dword [esp + 0x24]
mov ecx, dword [esi + 0x10]
push dword [ebp + 0xc]
add ecx, 0xc
push dword [ebp + 8]
push esi
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 4]
call eax
cmp byte [eax], 0
je 0x6c4847
cmp dword [esi + 0x18], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
mov eax, dword [esp + 0x2e4]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x18], eax
mov eax, dword [esi]
je 0x6c4816
add eax, 0x5a0
jmp 0x6c481b
add eax, 0x1a0
push dword [esp + 0x24]
shl ecx, 5
add ecx, dword [esp + 0x1c]
push esi
movzx eax, byte [ecx + eax]
mov ecx, dword [esi]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0x9a0]
lea ecx, [esp + 0x2ec]
push ecx
push edx
call eax
add esp, 0x10
jmp 0x6c484c
call fcn.004f4c50
mov esi, dword [esp + 0x34]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [edi], eax
mov edx, dword [esi + 4]
mov eax, dword [esi]
lea ecx, [edx + edx*2]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x90]
add ecx, 4
add edi, 0xc
mov dword [esp + 0x10], ecx
cmp ecx, dword [esp + 0x30]
jne 0x6c4714
jmp 0x6c4dd2
mov edx, dword [esp + 0x94]
mov dword [esp + 0x1c], edx
cmp edx, 1
jle 0x6c48c2
push dword [esp + 0x18]
lea eax, [edx - 1]
push eax
push 0
push dword [esp + 0x9c]
call fcn.006c1590
mov edx, dword [esp + 0xa4]
add esp, 0x10
mov dword [esp + 0x1c], edx
mov ecx, dword [esp + 0x38]
mov edi, dword [esp + 0x90]
mov dword [esp + 0x14], edi
mov dword [esp + 0x40], 0
mov eax, dword [ecx + 8]
mov dword [esp + 0x20], eax
lea eax, [ecx + 0xc]
mov ecx, dword [eax]
mov dword [esp + 0x18], eax
mov eax, dword [eax + 4]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], connect
mov dword [esp + 0x50], edx
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
mov ecx, edx
mov dword [esp + 0x34], eax
lea eax, [edi + edx*4]
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], ecx
test edx, edx
je 0x6c4994
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, dword [esp + 0x10]
mov edx, dword [eax + 0xc]
lea ecx, [ecx + ecx*2]
lea ecx, [ecx*4 + 0x7f]
and ecx, 0xffffff80
lea esi, [ecx + edx]
mov dword [esp + 0x24], esi
mov esi, dword [ebp + 0x10]
cmp ecx, dword [eax + 8]
jg 0x6c4975
lea esi, [ecx + edx]
cmp esi, dword [eax + 0x10]
mov esi, dword [ebp + 0x10]
ja 0x6c4975
mov ecx, dword [esp + 0x24]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 0x1c], edx
jmp 0x6c499c
push ecx
mov ecx, eax
call fcn.0046a3c0
mov ecx, dword [esp + 0x10]
mov edx, eax
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 0x1c], edx
jmp 0x6c499c
mov dword [esp + 0x40], 0
mov eax, dword [esp + 0x40]
or ecx, 0x80000000
mov dword [esp + 0x48], ecx
and ecx, 0x3fffffff
mov dword [esp + 0x4c], eax
cmp ecx, edx
jge 0x6c49da
add ecx, ecx
mov eax, edx
cmp edx, ecx
push 0xc
cmovl eax, ecx
push eax
lea eax, [esp + 0x48]
push eax
push 0x7d8954
call fcn.00467b80
mov edx, dword [esp + 0x2c]
add esp, 0x10
mov eax, dword [esp + 0x2e0]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x40]
mov dword [esp + 0x10], edx
cmp ecx, eax
je 0x6c4b77
cmp edi, dword [esp + 0x30]
je 0x6c4b42
mov eax, dword [edi]
mov dword [esp + 0x1c], eax
cmp eax, dword [ecx]
jne 0x6c4a39
movq xmm0, qword [ecx]
movq qword [edx], xmm0
mov eax, dword [ecx + 8]
add ecx, 0xc
mov dword [edx + 8], eax
add edx, 0xc
add edi, 4
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], edi
jmp 0x6c4b2c
jae 0x6c4b09
mov ecx, dword [esp + 0x2e0]
lea edx, [esp + 0x300]
push edx
push dword [esp + 0x20]
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
mov ecx, dword [esi + 0x10]
lea edx, [esp + 0x2b]
mov dword [esp + 0x2e4], eax
add ecx, 0xc
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x2e8], eax
push dword [edi]
mov eax, dword [ecx]
push dword [esp + 0x28]
push dword [ebp + 0xc]
mov eax, dword [eax + 4]
push dword [ebp + 8]
push esi
push edx
call eax
cmp byte [eax], 0
je 0x6c4ae5
cmp dword [esi + 0x18], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
mov eax, dword [esp + 0x2e4]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x14], eax
mov eax, dword [esi]
je 0x6c4ab4
add eax, 0x5a0
jmp 0x6c4ab9
add eax, 0x1a0
push dword [esp + 0x20]
shl ecx, 5
add ecx, dword [esp + 0x18]
push esi
movzx eax, byte [ecx + eax]
mov ecx, dword [esi]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0x9a0]
lea ecx, [esp + 0x2ec]
push ecx
push edx
call eax
add esp, 0x10
jmp 0x6c4aea
call fcn.004f4c50
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x2c]
mov dword [edx + 8], eax
mov eax, dword [edi]
mov dword [edx], eax
add edx, 0xc
add edi, 4
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], edi
jmp 0x6c4b30
mov eax, dword [ecx + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x6c4b29
mov eax, dword [eax]
push dword [esp + 0x3c]
mov ecx, dword [esp + 0x20]
call dword [eax + 0x1c]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x10]
add ecx, 0xc
mov dword [esp + 0x2c], ecx
mov eax, dword [esp + 0x34]
cmp ecx, eax
jne 0x6c4a01
mov esi, dword [esp + 0x44]
jmp 0x6c4b7b
cmp ecx, eax
je 0x6c4b3c
mov edi, dword [esp + 0x34]
lea esi, [ecx + 8]
nop dword [eax]
mov ecx, dword [esi]
test ecx, ecx
je 0x6c4b5f
mov eax, dword [ecx]
push dword [esp + 0x3c]
call dword [eax + 0x1c]
add esi, 0xc
lea eax, [esi - 8]
cmp eax, edi
jne 0x6c4b50
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
jmp 0x6c4b7b
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x30]
mov eax, ecx
sub eax, edi
mov dword [esp + 0x30], 0
add eax, 3
mov dword [esp + 0x3c], 0
shr eax, 2
cmp edi, ecx
cmova eax, dword [esp + 0x30]
mov dword [esp + 0x34], eax
test eax, eax
je 0x6c4c97
add edx, 8
mov dword [esp + 0x14], edx
nop dword [eax]
nop word [eax + eax]
mov ecx, dword [esp + 0x2e0]
lea edx, [esp + 0x300]
mov esi, dword [edi]
push edx
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
mov dword [esp + 0x2e8], esi
lea edx, [esp + 0x2b]
mov esi, dword [ebp + 0x10]
mov dword [esp + 0x2e4], eax
push dword [edi]
push dword [esp + 0x28]
mov ecx, dword [esi + 0x10]
push dword [ebp + 0xc]
add ecx, 0xc
push dword [ebp + 8]
push esi
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 4]
call eax
cmp byte [eax], 0
je 0x6c4c66
cmp dword [esi + 0x18], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
mov eax, dword [esp + 0x2e4]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x30], eax
mov eax, dword [esi]
je 0x6c4c33
add eax, 0x5a0
jmp 0x6c4c38
add eax, 0x1a0
push dword [esp + 0x20]
shl ecx, 5
add ecx, eax
mov eax, dword [esp + 0x34]
push esi
movzx eax, byte [ecx + eax]
mov ecx, dword [esi]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0x9a0]
lea ecx, [esp + 0x2ec]
push ecx
push edx
call eax
add esp, 0x10
jmp 0x6c4c6b
call fcn.004f4c50
mov ecx, dword [esp + 0x14]
mov dword [ecx], eax
mov eax, dword [edi]
add edi, 4
mov dword [ecx - 8], eax
add ecx, 0xc
mov eax, dword [esp + 0x3c]
inc eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x3c], eax
cmp eax, dword [esp + 0x34]
jne 0x6c4bc0
mov esi, dword [esp + 0x44]
mov ecx, dword [esp + 0x18]
mov edi, esi
mov dword [esp + 0x20], esi
cmp esi, dword [ecx + 4]
mov eax, dword [ecx + 8]
cmovg edi, dword [ecx + 4]
and eax, 0x3fffffff
mov dword [esp + 0x24], edi
cmp eax, esi
jge 0x6c4cd8
add eax, eax
cmp esi, eax
push 0xc
cmovl esi, eax
push esi
push ecx
push 0x7d8954
call fcn.00467b80
mov esi, dword [esp + 0x54]
add esp, 0x10
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
test edi, edi
jle 0x6c4d01
mov edx, dword [esp + 0x40]
mov esi, edi
movq xmm0, qword [edx]
lea edx, [edx + 0xc]
movq qword [ecx], xmm0
lea ecx, [ecx + 0xc]
mov eax, dword [edx - 4]
mov dword [ecx - 4], eax
sub esi, 1
jne 0x6c4ce4
mov esi, dword [esp + 0x44]
mov eax, dword [esp + 0x38]
lea ecx, [edi + edi*2]
mov edi, dword [esp + 0x40]
shl ecx, 2
add edi, ecx
mov edx, dword [eax + 0xc]
mov eax, dword [esp + 0x20]
add edx, ecx
mov ecx, eax
sub ecx, dword [esp + 0x24]
test ecx, ecx
jle 0x6c4d4a
sub edi, edx
test edx, edx
je 0x6c4d3a
movq xmm0, qword [edi + edx]
movq qword [edx], xmm0
mov eax, dword [edi + edx + 8]
mov dword [edx + 8], eax
add edx, 0xc
sub ecx, 1
jne 0x6c4d26
mov esi, dword [esp + 0x44]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x38]
mov edi, dword [esp + 0x4c]
mov dword [ecx + 0x10], eax
xor eax, eax
cmp edi, dword [esp + 0x40]
push dword [0x884adc]
cmove esi, eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x48], esi
lea eax, [eax + eax*2]
lea esi, [eax*4 + 0x7f]
and esi, 0xffffff80
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
lea edx, [esi + 0xf]
and edx, 0xfffffff0
cmp esi, dword [eax + 8]
jg 0x6c4d9c
lea ecx, [edx + edi]
cmp ecx, dword [eax + 0xc]
jne 0x6c4d9c
cmp dword [eax + 0x14], edi
je 0x6c4d9c
mov dword [eax + 0xc], edi
jmp 0x6c4da5
push edx
push edi
mov ecx, eax
call fcn.0046a590
mov eax, dword [esp + 0x48]
mov dword [esp + 0x44], 0
test eax, eax
js 0x6c4dd2
and eax, 0x3fffffff
mov ecx, 0x7d8954
lea eax, [eax + eax*2]
shl eax, 2
push eax
mov eax, dword [0x7d8954]
push dword [esp + 0x44]
call dword [eax + 0x10]
mov eax, dword [esp + 0x90]
mov edx, dword [esp + 0x98]
mov dword [esp + 0x94], 0
test edx, edx
js 0x6c4e07
and edx, 0x3fffffff
mov ecx, 0x7d8954
shl edx, 2
push edx
push eax
mov eax, dword [0x7d8954]
call dword [eax + 0x10]
mov esi, dword [ebp + 0x10]
mov edx, dword [esp + 0x38]
push dword [0x884c50]
mov eax, dword [edx + 0x10]
mov edi, dword [edx + 0xc]
lea ecx, [eax + eax*2]
lea eax, [edi + ecx*4]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x90], eax
mov eax, dword [eax + 8]
mov dword [esp + 0x8c], eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, eax
mov dword [esp + 0x30], ecx
mov eax, dword [ecx + 4]
mov dword [esp + 0x24], eax
cmp eax, dword [ecx + 0xc]
jae 0x6c4e71
mov dword [eax], str.StNarrowPhase
rdtsc
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov dword [eax + 4], ecx
add eax, 0xc
mov ecx, dword [esp + 0x30]
mov dword [ecx + 4], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
mov ecx, eax
mov dword [esp + 0x20], ecx
cmp edi, dword [esp + 0x18]
je 0x6c4ed5
nop dword [eax]
mov eax, dword [ecx]
lea edx, [esp + 0x500]
push edx
push dword [edi]
mov eax, dword [eax + 0x14]
call eax
mov ecx, dword [edi]
lea edx, [esp + 0x80]
push dword [ebp + 0x14]
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ecx
mov ecx, dword [edi + 8]
push esi
push edx
push dword [ebp + 8]
mov eax, dword [ecx]
call dword [eax + 0x18]
mov ecx, dword [esp + 0x20]
add edi, 0xc
cmp edi, dword [esp + 0x18]
jne 0x6c4e90
push dword [0x884c50]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
mov esi, dword [edi + 4]
cmp esi, dword [edi + 0xc]
jae 0x6c4f04
mov dword [esi], 0x77f784
rdtsc
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x18]
lea eax, [esi + 0xc]
mov dword [esi + 4], ecx
mov dword [edi + 4], eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10