Function at 0x6e67a8
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
jmp 0xaa1eb5
push ebp
mov ebp, esp
mov ecx, 0x3a0
push 0
push 0
dec ecx
jne 0x6e67b0
push ebx
push esi
push edi
mov dword [ebp - 4], eax
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, dword [0x491db8]
call fcn.00405ce8
xor eax, eax
push ebp
push 0x6f185f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x839da4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x18]
call fcn.00405194
mov eax, dword [0x839abc]
cmp byte [eax], 0
jne 0x6e680e
mov eax, dword [0x839a14]
mov eax, dword [eax]
cmp dword [eax], 0
jg 0x6e680e
mov eax, dword [0x839f08]
mov eax, dword [eax]
cmp dword [eax], 0
jle 0x6e682c
mov eax, dword [ebp - 4]
mov byte [eax + 0x7d68], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0xfa4], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x84a1], 0
mov eax, dword [0x83a634]
xor edx, edx
mov dword [eax], edx
xor eax, eax
mov dword [ebp - 0x50], eax
xor ecx, ecx
push ebp
push 0x6ee7ed
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov dword [ebp - 0x50], 1
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x2710
jbe 0x6e697a
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, dword [ebp - 4]
jne 0x6e68f3
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x6e68f3
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x6e68f3
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x18]
test eax, eax
je 0x6e68ea
cmp byte [eax + 0xe78], 0
jne 0x6e68d4
cmp byte [eax + 0xe70], 0
je 0x6e68ea
call fcn.00709004
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x48]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffff
jne 0x6e689b
mov dword [ebp - 0x50], 2
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6e6923
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0xe70], 0
je 0x6e6923
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [0x83a4b8]
cmp byte [eax + 0x754d], 0
je 0x6e697a
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 8]
dec eax
cmp eax, 0
jl 0x6e697a
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x18]
call fcn.004212e4
cmp byte [eax + 0xe70], 0
je 0x6e6971
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x18]
call fcn.00421168
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffff
jne 0x6e6946
mov eax, dword [0x83a634]
mov dword [eax], 1
mov dword [ebp - 0x50], 3
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x7530
jbe 0x6e9fc7
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6e69ee
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0xe78], 0
jne 0x6e69e3
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0xe70], 0
je 0x6e69ee
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [ebp - 4]
cmp byte [eax + 0xf70], 0
jne 0x6e6a18
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x20]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0076c408
xor ebx, ebx
lea eax, reloc.kernel32.dll_DeleteCriticalSection
xor ecx, ecx
mov edx, 0xe6
call fcn.0040398c
call fcn.0040dbe8
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xe]
lea edx, [ebp - 0xc]
lea eax, [ebp - 0xa]
call fcn.0040d88c
cmp word [ebp - 0xa], 6
jb 0x6e6a5c
cmp word [ebp - 0xa], 0x16
jbe 0x6e9fc7
mov eax, 0x14
call fcn.004039ac
test eax, eax
jne 0x6e9fc7
mov eax, dword [0x8396a8]
mov eax, dword [eax]
cmp byte [eax], 0
je 0x6e9fc7
mov eax, dword [ebp - 4]
cmp byte [eax + 0xde1], 0xa
jae 0x6e9fc7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x105c], 0
jne 0x6e9fc7
mov eax, dword [ebp - 4]
cmp byte [eax + 0xfa4], 0
jne 0x6e9fc7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x164], 0
jne 0x6e9fc7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d68], 0
jne 0x6e9fc7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d69], 0
jne 0x6e9fc7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d6b], 0
jne 0x6e9fc7
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x927c0
jbe 0x6e9fc7
jmp 0x6e6b10
jmp 0x56461b
lea esp, [esp + 0x18]
jmp 0x6e9e6f
pushal
mov word [esp + 0xd], di
pop dword [esp + 0x17]
pop dword [esp + 2]
jmp 0x6e7748
push 0x3cea481b
call fcn.009bba4d
jno 0x6e9ed1
jae 0x6e9ecd
insd dword es:[edi], dx
shr ah, 0xe4
lea ebp, reloc.kernel32.dll_DeleteCriticalSection
xlatb
push 0xb4300671
call section.sect_9
stosb byte es:[edi], al
push 0x78
mov ah, 0x17
sub byte [eax + 0x5e], 0x82
int1
push ecx
aaa
push ds
jnp 0x6e9e79
fst dword ds:[esi - reloc.kernel32.dll_DeleteCriticalSection]
retf
cpuid
jmp 0x6e9f35
inc ebx
cli
inc edi
cmpsb byte [esi], byte es:[edi]
xchg edx, eax
int 0xc4
inc edi
clc
cmc
xor al, 0x38
sbb esi, dword [edx + 0x6d]
jl 0x6e9e61
in eax, dx
or al, 0x60
mov eax, dword [ebp + 0xc]
jmp 0x6e9ec7
mov dword [ebp + 0xc], eax
mov dword [ebp + 8], ebx
mov dword [ebp + 4], ecx
jmp 0x6e9f1a
mov dword [ebp], edx
jne 0x6e9f7b
pushal
jmp 0x6ef540
cmp dword [ebp + 0xc], 1
jmp 0x6e9f0b
jmp 0x6ef361
mov eax, dword [0x83a634]
mov dword [eax], 2
mov dword [ebp - 0x50], 4
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7ca5], 0
je 0x6ea01a
mov eax, dword [ebp - 4]
call fcn.006fcd44
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ea012
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, dword [ebp - 4]
je 0x6ea012
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jne 0x6ea01a
mov eax, dword [ebp - 4]
call fcn.006f9d70
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7cbd], 0
je 0x6ea05b
mov eax, dword [ebp - 4]
call fcn.006fcd44
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ea053
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, dword [ebp - 4]
je 0x6ea053
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jne 0x6ea05b
mov eax, dword [ebp - 4]
call fcn.006f9de8
mov eax, dword [0x83a634]
mov dword [eax], 3
mov dword [ebp - 0x50], 5
mov eax, dword [ebp - 4]
cmp byte [eax + 0x82b2], 0
je 0x6ea0e5
push 1
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, 0x6e6768
call fcn.00407698
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 1
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, 0x6e6770
call fcn.00407698
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 4]
mov byte [eax + 0x7d68], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0xfa4], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x82b2], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x84a1], 0
mov eax, dword [0x83a634]
mov dword [eax], 4
mov eax, dword [ebp - 4]
cmp byte [eax + 0xb0b4], 0
je 0x6ea15b
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, 3
call fcn.004039ac
inc eax
imul eax, eax, 0xea60
cdq
cmp edx, dword [esp + 4]
jne 0x6ea12f
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6ea15b
jmp 0x6ea133
pop edx
pop eax
jge 0x6ea15b
mov eax, dword [ebp - 4]
mov byte [eax + 0x7d68], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0xfa4], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x82b2], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x84a1], 0
mov eax, dword [0x83a634]
mov dword [eax], 5
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe70], 0
jne 0x6ea45a
xor eax, eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x50], 6
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 8]
dec eax
cmp eax, 0
jl 0x6ea341
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe70], 0
jne 0x6ea341
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x18]
call fcn.004212e4
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x50], 7
mov edx, dword [ebp - 0x40]
cmp dword [edx + 0x18], 0
je 0x6ea1e2
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x18]
test eax, eax
je 0x6ea206
cmp byte [eax + 0xe70], 0
je 0x6ea206
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x18]
call fcn.00421168
mov edx, dword [0x686e10]
mov eax, dword [ebp - 0x40]
call fcn.00406240
jmp 0x6ea334
mov dword [ebp - 0x50], 8
mov eax, dword [ebp - 0x40]
cmp byte [eax + 0x14], 0
je 0x6ea22e
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x1c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
je 0x6ea22e
mov eax, dword [ebp - 0x40]
mov byte [eax + 0x15], 1
mov dword [ebp - 0x50], 9
mov eax, dword [ebp - 0x40]
cmp byte [eax + 0x15], 0
je 0x6ea286
mov eax, dword [ebp - 0x40]
cmp dword [eax], 1
jne 0x6ea262
push 0
mov eax, dword [ebp - 0x40]
push eax
push 0
push 0
push 0
mov ecx, 0x290
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
call fcn.0070a7c0
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x18]
call fcn.00421168
mov edx, dword [0x686e10]
mov eax, dword [ebp - 0x40]
call fcn.00406240
jmp 0x6ea334
mov dword [ebp - 0x50], 0xa
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
sub eax, 2
jb 0x6ea29e
je 0x6ea2e8
jmp 0x6ea334
mov dword [ebp - 0x50], 0xb
call fcn.00407d74
mov edx, dword [ebp - 0x40]
sub eax, dword [edx + 0xc]
mov edx, dword [ebp - 0x40]
cmp eax, dword [edx + 0x10]
jbe 0x6ea2df
mov eax, dword [ebp - 0x40]
mov byte [eax + 0x15], 1
cmp dword [ebp - 0x44], 0
jne 0x6ea2d4
mov dl, 1
mov eax, dword [0x41e708]
call fcn.004041c0
mov dword [ebp - 0x44], eax
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x44]
call fcn.0042111c
mov dword [ebp - 0x50], 0xc
jmp 0x6ea334
mov dword [ebp - 0x50], 0xd
call fcn.00407d74
mov edx, dword [ebp - 0x40]
sub eax, dword [edx + 0xc]
mov edx, dword [ebp - 0x40]
cmp eax, dword [edx + 0x10]
jbe 0x6ea334
call fcn.00407d74
mov edx, dword [ebp - 0x40]
mov dword [edx + 0xc], eax
cmp dword [ebp - 0x44], 0
jne 0x6ea322
mov dl, 1
mov eax, dword [0x41e708]
call fcn.004041c0
mov dword [ebp - 0x44], eax
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x44]
call fcn.0042111c
mov dword [ebp - 0x50], 0x8c
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffff
jne 0x6ea19b
mov eax, dword [0x83a634]
mov dword [eax], 6
mov dword [ebp - 0x50], 0x96
cmp dword [ebp - 0x44], 0
je 0x6ea45a
mov eax, dword [ebp - 0x44]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x6ea452
inc eax
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe70], 0
jne 0x6ea452
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x44]
call fcn.004212e4
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x50], 0xa0
xor eax, eax
push ebp
push 0x6ea3d8
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
call fcn.006a2c20
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ea43c
mov dword [ebp - 0x50], 0xaa
inc dword [ebp - 0x18]
dec dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ea37a
lea eax, [ebp - 0x44]
call fcn.00411af8
mov eax, dword [0x83a634]
mov dword [eax], 7
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x1f4
jbe 0x6ea54c
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x6ea54c
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
cmp byte [eax + 0xc], 0
jne 0x6ea53f
call fcn.00407d74
mov edx, dword [ebp - 0x70]
sub eax, dword [edx + 8]
mov edx, dword [ebp - 0x70]
cmp eax, dword [edx + 4]
jbe 0x6ea53f
lea ecx, [ebp - 0x54]
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x18]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov edx, dword [0x774c78]
mov eax, dword [ebp - 0x70]
call fcn.00406240
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
push 0
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov ecx, dword [ebp - 0x54]
mov edx, 0x6f18c0
call fcn.0040545c
mov ecx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [0x839fb4]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.006a2c20
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffff
jne 0x6ea4a7
mov eax, dword [0x83a634]
mov dword [eax], 8
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ea5dd
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jbe 0x6ea5dd
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jbe 0x6ea5dd
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [0x839fb4]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.006a2c20
mov eax, dword [ebp - 4]
add eax, 0x9b4c
call fcn.00405140
mov eax, dword [ebp - 4]
add eax, 0x9b54
call fcn.00405140
mov eax, dword [0x83a634]
mov dword [eax], 9
mov dword [ebp - 0x50], 0xe
mov eax, dword [ebp - 4]
cmp byte [eax + 0x105c], 0
jne 0x6ea6a0
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe70], 0
jne 0x6ea6a0
mov eax, dword [ebp - 4]
cmp byte [eax + 0xfa4], 0
je 0x6ea6a0
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jb 0x6ea642
mov eax, dword [ebp - 4]
mov byte [eax + 0xfa4], 0
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jle 0x6ea6a0
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cdq
cmp edx, dword [esp + 4]
jne 0x6ea679
cmp eax, dword [esp]
pop edx
pop eax
ja 0x6ea6a0
jmp 0x6ea67d
pop edx
pop eax
jg 0x6ea6a0
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
push 1
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.006d3648
mov eax, dword [0x83a634]
mov dword [eax], 0xa
mov dword [ebp - 0x50], 0xf
mov eax, dword [ebp - 4]
cmp byte [eax + 0x6b0f], 0
je 0x6ea728
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [0x83a4b8]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
add eax, 0xa
imul eax, eax, 0x3e8
cdq
cmp edx, dword [esp + 4]
jne 0x6ea6f4
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6ea728
jmp 0x6ea6f8
pop edx
pop eax
jge 0x6ea728
mov eax, dword [ebp - 4]
mov byte [eax + 0x6b0f], 0
push 1
mov edx, dword [0x8391c0]
mov edx, dword [edx]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ecx, 0x6f18dc
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x6b13], 0
je 0x6ea79e
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [0x83a4b8]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
add eax, 0xa
imul eax, eax, 0x3e8
cdq
cmp edx, dword [esp + 4]
jne 0x6ea76a
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6ea79e
jmp 0x6ea76e
pop edx
pop eax
jge 0x6ea79e
mov eax, dword [ebp - 4]
mov byte [eax + 0x6b13], 0
push 1
mov edx, dword [0x83a1a8]
mov edx, dword [edx]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ecx, 0x6f18ec
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x6b11], 0
je 0x6ea800
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [0x83a4b8]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
add eax, 0xa
imul eax, eax, 0x3e8
cdq
cmp edx, dword [esp + 4]
jne 0x6ea7e0
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6ea800
jmp 0x6ea7e4
pop edx
pop eax
jge 0x6ea800
mov eax, dword [ebp - 4]
mov byte [eax + 0x6b11], 0
mov ecx, 0x6f18fc
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x6b12], 0
je 0x6ea862
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [0x83a4b8]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
add eax, 0xa
imul eax, eax, 0x3e8
cdq
cmp edx, dword [esp + 4]
jne 0x6ea842
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6ea862
jmp 0x6ea846
pop edx
pop eax
jge 0x6ea862
mov eax, dword [ebp - 4]
mov byte [eax + 0x6b12], 0
mov ecx, 0x6f190c
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x6b14], 0
je 0x6ea8d8
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [0x83a4b8]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
add eax, 0xa
imul eax, eax, 0x3e8
cdq
cmp edx, dword [esp + 4]
jne 0x6ea8a4
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6ea8d8
jmp 0x6ea8a8
pop edx
pop eax
jge 0x6ea8d8
mov eax, dword [ebp - 4]
mov byte [eax + 0x6b14], 0
push 1
mov edx, dword [0x83a700]
mov edx, dword [edx]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ecx, 0x6f191c
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
mov eax, dword [0x83a634]
mov dword [eax], 0xb
mov eax, dword [0x8395a0]
mov eax, dword [eax]
call fcn.00406758
test eax, eax
jl 0x6eaaa0
inc eax
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov dword [ebp - 0x18], 0
mov eax, dword [0x8395a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
mov ax, word [eax + edx*2]
add eax, 0xffffff37
sub ax, 0x1e
jae 0x6eaa91
mov eax, dword [0x8395a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
mov dx, word [eax + edx*2]
movzx eax, dx
mov ecx, dword [ebp - 4]
cmp byte [ecx + eax + 0x6a4c], 0
je 0x6eaa91
mov ecx, dword [0x8395a0]
imul ecx, eax, 0x1d5
mov ebx, dword [0x83999c]
cmp byte [ebx + ecx*4 - 0x5c0f0], 0
je 0x6eaa91
mov ecx, dword [0x8395a0]
mov ecx, dword [0x8395a0]
imul eax, eax, 0x1d5
mov ecx, dword [0x83999c]
cmp dx, word [ecx + eax*4 - 0x5c0f4]
jne 0x6eaa91
call fcn.00407d74
mov edx, dword [0x8395a0]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x18]
movzx ebx, word [edx + ecx*2]
mov edx, dword [ebp - 4]
sub eax, dword [edx + ebx*4 + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [0x8395a0]
imul eax, ebx, 0x1d5
mov edx, dword [0x83999c]
mov eax, dword [edx + eax*4 - reloc.kernel32.dll_DeleteCriticalSection]
add eax, 0xa
imul eax, eax, 0x3e8
cdq
cmp edx, dword [esp + 4]
jne 0x6ea9e1
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6eaa91
jmp 0x6ea9e9
pop edx
pop eax
jge 0x6eaa91
mov eax, dword [0x8395a0]
mov eax, dword [ebp - 4]
mov byte [eax + ebx + 0x6a4c], 0
mov eax, dword [0x8395a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
movzx eax, word [eax + edx*2]
imul eax, eax, 0x1d5
mov edx, dword [0x83999c]
cmp dword [edx + eax*4 - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6eaa4a
push 1
mov eax, dword [0x8395a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
movzx eax, word [eax + edx*2]
imul eax, eax, 0x1d5
mov edx, dword [0x83999c]
mov edx, dword [edx + eax*4 - reloc.kernel32.dll_DeleteCriticalSection]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [0x8395a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
movzx eax, word [eax + edx*2]
sub eax, 0xc9
lea edx, reloc.kernel32.dll_DeleteCriticalSection
call fcn.0040b900
mov ecx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 0x6f192c
call fcn.0040545c
mov ecx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
inc dword [ebp - 0x18]
dec dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ea905
mov eax, dword [0x83a634]
mov dword [eax], 0xc
mov eax, dword [ebp - 4]
cmp byte [eax + 0x105c], 0
jne 0x6eacc1
mov eax, dword [ebp - 4]
cmp byte [eax + 0xfa4], 0
jne 0x6eacc1
mov byte [ebp - 0x71], 0
mov byte [ebp - 0x72], 0
lea eax, [ebp - 0x78]
xor ecx, ecx
mov edx, 6
call fcn.0040398c
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6eab53
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [0x83a4b8]
imul eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0x3e8
cdq
cmp edx, dword [esp + 4]
jne 0x6eab1f
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6eab53
jmp 0x6eab23
pop edx
pop eax
jge 0x6eab53
mov byte [ebp - 0x72], 0x72
mov eax, dword [ebp - 4]
cmp byte [eax + 0xb095], 0
jne 0x6eab3f
mov eax, dword [ebp - 4]
cmp byte [eax + 0xb097], 0
je 0x6eab53
mov eax, dword [ebp - 4]
mov byte [eax + 0xb095], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0xb097], 0
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6eabc4
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [0x83a4b8]
imul eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0x3e8
cdq
cmp edx, dword [esp + 4]
jne 0x6eab90
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6eabc4
jmp 0x6eab94
pop edx
pop eax
jge 0x6eabc4
mov byte [ebp - 0x71], 0x3a
mov eax, dword [ebp - 4]
cmp byte [eax + 0xb095], 0
jne 0x6eabb0
mov eax, dword [ebp - 4]
cmp byte [eax + 0xb096], 0
je 0x6eabc4
mov eax, dword [ebp - 4]
mov byte [eax + 0xb095], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0xb096], 0
mov dword [ebp - 0x18], 0x51
mov esi, dword [0x83a4b8]
add esi, 0x7778
lea ebx, [ebp - 0x78]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
cmp dword [eax + edx*4 + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6eac53
call fcn.00407d74
mov edx, dword [ebp - 4]
mov ecx, dword [ebp - 0x18]
sub eax, dword [edx + ecx*4 + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
imul eax, dword [esi], reloc.kernel32.dll_DeleteCriticalSection
cdq
cmp edx, dword [esp + 4]
jne 0x6eac16
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6eac53
jmp 0x6eac1a
pop edx
pop eax
jge 0x6eac53
mov al, byte [ebp - 0x18]
mov byte [ebx], al
mov eax, dword [ebp - 4]
cmp byte [eax + 0xb095], 0
jne 0x6eac3b
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
cmp byte [eax + edx + 0xb047], 0
je 0x6eac53
mov eax, dword [ebp - 4]
mov byte [eax + 0xb095], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
mov byte [eax + edx + 0xb047], 0
inc dword [ebp - 0x18]
inc ebx
add esi, 4
cmp dword [ebp - 0x18], 0x57
jne 0x6eabda
mov eax, dword [ebp - 4]
cmp byte [eax + 0xb095], 0
je 0x6eacc1
mov eax, dword [ebp - 4]
mov byte [eax + 0xb095], 0
mov dl, byte [ebp - 0x75]
mov al, byte [ebp - 0x76]
call fcn.004087f4
push eax
mov dl, byte [ebp - 0x73]
mov al, byte [ebp - 0x74]
call fcn.004087f4
push eax
push 0
push 0
mov dl, byte [ebp - 0x77]
mov al, byte [ebp - 0x78]
call fcn.004087f4
push eax
mov dl, byte [ebp - 0x72]
mov al, byte [ebp - 0x71]
call fcn.004087f4
pop edx
call fcn.00408808
mov ecx, eax
mov dx, 0x663
mov eax, dword [ebp - 4]
call fcn.006d76a8
mov eax, dword [0x83a634]
mov dword [eax], 0xd
mov dword [ebp - 0x50], 0x10
mov eax, dword [ebp - 4]
cmp byte [eax + 0x8280], 0
je 0x6ead35
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jbe 0x6ead35
mov eax, dword [ebp - 4]
mov byte [eax + 0x8280], 0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
push eax
push 0
push 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 4]
call fcn.006e2438
mov eax, dword [0x83a634]
mov dword [eax], 0xe
mov dword [ebp - 0x50], 0x11
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0xbb8
jbe 0x6eafb9
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
call fcn.006f5c5c
mov eax, dword [ebp - 4]
cmp byte [eax + 0xfa4], 0
jne 0x6eafb9
mov eax, dword [ebp - 4]
cmp byte [eax + 0x847c], 0
jne 0x6eafb9
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x20]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0076dbe8
mov ebx, eax
cmp ebx, 2
jl 0x6eaddd
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe64], 0
jne 0x6eade7
mov eax, dword [ebp - 4]
mov byte [eax + 0xe64], 1
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
jmp 0x6eade7
mov eax, dword [ebp - 4]
mov byte [eax + 0xe64], 0
cmp ebx, 3
jl 0x6eae01
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0xbb8
ja 0x6eae23
cmp ebx, 2
jne 0x6eafb9
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x2710
jbe 0x6eafb9
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x4e20
jae 0x6eafb9
mov eax, dword [ebp - 4]
mov dword [ebp - 0x28], eax
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - 0x3c], eax
mov dl, 1
mov eax, dword [0x41e708]
call fcn.004041c0
mov dword [ebp - 0x34], eax
push 1
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x20]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0076eb14
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x6eaf6e
inc eax
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov dword [ebp - 0x18], 0
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
call fcn.004212e4
mov ebx, eax
test ebx, ebx
je 0x6eaf5f
cmp byte [ebx + 0xfa4], 0
jne 0x6eaf5f
cmp byte [ebx + 0xda2], 0x6e
je 0x6eaf5f
cmp byte [ebx + 0xda2], 0x6f
je 0x6eaf5f
cmp byte [ebx + 0xda2], 0xb
je 0x6eaf5f
cmp byte [ebx + 0xda2], 0x70
je 0x6eaf5f
cmp byte [ebx + 0xda2], 0x37
je 0x6eaf5f
cmp byte [ebx + 0xda2], 0xa
je 0x6eaf5f
cmp byte [ebx + 0xda2], 0x32
je 0x6eaf5f
cmp byte [ebx + 0xda2], 0
jne 0x6eaf1a
cmp byte [ebx + 0x847c], 0
jne 0x6eaf5f
cmp byte [ebx + 0xda2], 0x9c
jne 0x6eaf3e
cmp byte [ebx + 0x15de], 0
je 0x6eaf5f
cmp byte [ebx + 0x15df], 0
je 0x6eaf3e
cmp byte [ebx + 0xeb9], 0
jne 0x6eaf5f
call fcn.00407d74
sub eax, dword [ebx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, dword [ebp - 0x3c]
jae 0x6eaf5f
mov dword [ebp - 0x28], ebx
call fcn.00407d74
sub eax, dword [ebx + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x18]
dec dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6eae9f
mov eax, dword [ebp - 0x34]
call fcn.004041f0
cmp dword [ebp - 0x28], 0
je 0x6eafb9
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0xda2], 0
jne 0x6eafa0
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0xda2], 0
jne 0x6eafb9
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x847c], 0
jne 0x6eafb9
mov eax, 8
call fcn.004039ac
mov edx, eax
mov ecx, 1
mov eax, dword [ebp - 0x28]
call fcn.006d6e9c
mov eax, dword [0x83a634]
mov dword [eax], 0xf
mov dword [ebp - 0x50], 0x12
mov eax, dword [0x839d48]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.0066cc3c
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x6eaff6
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0x41], 0
je 0x6eaff6
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.006d243c
mov eax, dword [0x83a634]
mov dword [eax], 0x10
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6eb04c
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [0x83a4b8]
imul eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0x3e8
cdq
cmp edx, dword [esp + 4]
jne 0x6eb03e
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6eb04c
jmp 0x6eb042
pop edx
pop eax
jge 0x6eb04c
mov eax, dword [ebp - 4]
mov byte [eax + 0x7d68], 1
mov eax, dword [0x83a634]
mov dword [eax], 0x11
mov eax, dword [0x83a4b8]
cmp byte [eax + 0x8e11], 0
je 0x6eb324
mov eax, dword [ebp - 4]
cmp byte [eax + 0xb374], 0
je 0x6eb324
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [0x83a4b8]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jge 0x6eb324
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jne 0x6eb324
mov eax, dword [ebp - 4]
cmp byte [eax + 0xde1], 0xa
jae 0x6eb324
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe78], 0
jne 0x6eb324
mov eax, dword [ebp - 4]
cmp byte [eax + 0x105c], 0
jne 0x6eb324
mov eax, dword [ebp - 4]
cmp byte [eax + 0xfa4], 0
jne 0x6eb324
mov eax, dword [ebp - 4]
cmp byte [eax + 0x164], 0
jne 0x6eb324
mov eax, dword [ebp - 4]
cmp byte [eax + 0x847c], 0
jne 0x6eb324
cmp dword [ebp - 0x30], 0
je 0x6eb121
cmp dword [ebp - 0x30], 0
je 0x6eb324
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0x41], 0
jne 0x6eb324
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jl 0x6eb1be
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [0x83a69c]
mov edx, dword [edx]
cmp eax, dword [edx + 8]
jge 0x6eb1be
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [0x83a69c]
mov eax, dword [eax]
call fcn.004212e4
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov ax, word [eax]
mov word [ebp - 0xc], ax
mov eax, dword [ebp - 0x80]
movzx eax, word [eax + 2]
call fcn.004039ac
test eax, eax
jne 0x6eb184
mov eax, dword [ebp - 0x80]
mov ax, word [eax + 4]
add word [ebp - 0xc], ax
mov eax, dword [ebp - 0x80]
movzx eax, word [eax + 6]
call fcn.004039ac
test eax, eax
jne 0x6eb1ac
movzx eax, word [ebp - 0xc]
mov edx, dword [ebp - 0x80]
movzx edx, word [edx + 8]
sub eax, edx
xor edx, edx
call fcn.00435144
mov word [ebp - 0xc], ax
movzx eax, word [ebp - 0xc]
imul eax, eax, 0x3c
imul eax, eax, 0x3e8
mov dword [ebp - 0x7c], eax
jmp 0x6eb21a
mov eax, 0x50
call fcn.004039ac
add eax, 0xffffffec
sub eax, 0x14
jae 0x6eb1f6
mov eax, 0x14
call fcn.004039ac
mov ebx, eax
add ebx, 0xa
mov eax, 0x14
call fcn.004039ac
add ebx, eax
imul eax, ebx, 0xea60
mov dword [ebp - 0x7c], eax
jmp 0x6eb21a
mov eax, 0x1e
call fcn.004039ac
mov ebx, eax
add ebx, 0x1e
mov eax, 0x1e
call fcn.004039ac
add ebx, eax
imul eax, ebx, 0xea60
mov dword [ebp - 0x7c], eax
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x7c]
cdq
cmp edx, dword [esp + 4]
jne 0x6eb243
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6eb324
jmp 0x6eb24b
pop edx
pop eax
jge 0x6eb324
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov dl, 1
mov eax, dword [0x41f05c]
call fcn.004041c0
mov dword [ebp - 0x84], eax
mov eax, dword [0x83a4b8]
mov al, byte [eax + 0x8e08]
mov byte [ebp - 0x85], al
mov eax, dword [ebp - 4]
add eax, 0xb35c
call fcn.00405140
push 0
lea eax, reloc.kernel32.dll_DeleteCriticalSection
push eax
mov edx, dword [0x83a4b8]
mov edx, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
lea eax, [ebp - 0x85]
mov ecx, dword [ebp - 0x84]
call fcn.00492768
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 4]
add eax, 0xb360
call fcn.00405194
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 0x84]
mov edx, dword [eax]
call dword [edx]
mov edx, eax
lea ecx, [ebp - 0x8c]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax + 4]
call fcn.0049a430
mov eax, dword [ebp - 0x84]
call fcn.004041f0
mov al, byte [ebp - 0x85]
call fcn.00490db4
push eax
push 0
push 0
push 0
mov eax, dword [ebp - 0x8c]
push eax
mov ecx, 0x304
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
call fcn.0070a7c0
mov eax, dword [0x83a634]
mov dword [eax], 0x12
mov dword [ebp - 0x50], 0x13
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x3e8
jbe 0x6ee7c0
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
call fcn.0040dc1c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xe]
lea edx, [ebp - 0xc]
lea eax, [ebp - 0xa]
call fcn.0040d88c
mov dword [ebp - 0x50], 0x14
mov eax, dword [0x83a4b8]
cmp byte [eax + 0xa8], 0
je 0x6eb3fc
movzx eax, word [ebp - 0xa]
mov edx, dword [0x83a4b8]
cmp eax, dword [edx + 0xac]
je 0x6eb3b4
movzx eax, word [ebp - 0xa]
mov edx, dword [0x83a4b8]
cmp eax, dword [edx + 0xb0]
jne 0x6eb3fc
cmp word [ebp - 0xc], 0
jne 0x6eb3fc
cmp word [ebp - 0xe], 0x1e
ja 0x6eb3fc
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0xea60
jbe 0x6eb3fc
mov eax, dword [ebp - 4]
call fcn.006f1b28
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
call fcn.0040dc1c
mov eax, dword [ebp - 4]
fstp qword [eax + 0x7d40]
wait
mov dword [ebp - 0x50], 0x15
mov eax, dword [0x83a634]
mov dword [eax], 0x13
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6eb468
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 0xc]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x6eb468
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6eb468
mov eax, dword [ebp - 4]
call fcn.0070a320
mov byte [ebp - 0x11], al
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x7d28]
cmp al, byte [ebp - 0x11]
je 0x6eb468
mov eax, dword [ebp - 4]
mov dl, byte [ebp - 0x11]
mov byte [eax + 0x7d28], dl
mov eax, dword [ebp - 4]
call fcn.006d6674
mov eax, dword [0x83a634]
mov dword [eax], 0x14
mov dword [ebp - 0x50], 0x16
cmp dword [ebp - 0x30], 0
je 0x6ee5db
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0x41], 0
je 0x6ee5db
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x30]
cmp eax, dword [edx + 8]
jne 0x6ee5e5
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ee5e5
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x30]
call fcn.0066bb34
test al, al
jne 0x6ee5e5
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x30]
call fcn.0066bb94
test al, al
je 0x6ee5e5
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x30]
call fcn.0066bbd8
test al, al
je 0x6ee5e5
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x30]
call fcn.0066bca4
mov eax, dword [ebp - 0x30]
call fcn.0066bec0
dec eax
jg 0x6ee5e5
mov eax, 4
call fcn.00402ea4
mov dword [ebp - 0x98], eax
mov eax, 1
call fcn.00402ea4
mov dword [ebp - 0x94], eax
mov eax, 4
call fcn.00402ea4
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 0x94]
mov byte [eax], 0
mov eax, dword [ebp - 0x98]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x839a98]
mov eax, dword [eax]
mov esi, eax
lea edi, reloc.kernel32.dll_DeleteCriticalSection
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4bc264]
call fcn.004bd1b0
mov dword [ebp - 0x9c], eax
xor edx, edx
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
dec eax
test eax, eax
jl 0x6ee450
inc eax
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
xor eax, eax
mov dword [ebp - 0xac], eax
xor eax, eax
mov dword [ebp - 0xb0], eax
xor eax, eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
xor eax, eax
mov dword [ebp - 0xbc], eax
xor eax, eax
mov dword [ebp - 0xc0], eax
xor eax, eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
xor eax, eax
mov dword [ebp - 0xcc], eax
xor eax, eax
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0xe4]
call fcn.00405140
lea eax, [ebp - 0xe8]
call fcn.00405140
lea eax, [ebp - 0xec]
call fcn.00405140
lea eax, [ebp - 0xf0]
call fcn.00405140
lea eax, [ebp - 0xf4]
call fcn.00405140
lea eax, [ebp - 0xf8]
call fcn.00405140
imul eax, dword [ebp - 0x18], 0x244d
add eax, 0xe0
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
lea eax, [ebp - 0x54]
mov edx, 0x170
call fcn.0040579c
mov eax, dword [0x83a148]
mov eax, dword [eax]
xor ecx, ecx
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov ebx, dword [eax]
call dword [ebx + 0x14]
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
je 0x6eb6ac
mov eax, 0xff
call fcn.004039ac
mov edx, dword [ebp - 0x98]
add dword [edx], eax
jmp 0x6ee450
lea eax, [ebp - 0x54]
call fcn.00405668
mov edx, eax
mov eax, dword [0x83a148]
mov eax, dword [eax]
mov ecx, 0x170
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp eax, 0x170
je 0x6eb6e5
mov eax, 0xff
call fcn.004039ac
mov edx, dword [ebp - 0x98]
add dword [edx], eax
jmp 0x6ee450
xor eax, eax
push ebp
push 0x6eb767
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.0062891c
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bcf6c
lea ecx, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
mov eax, 0x692b
call fcn.0040ba14
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bd008
lea ecx, reloc.kernel32.dll_DeleteCriticalSection
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x9c]
mov ebx, dword [eax]
call dword [ebx + 0x38]
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
lea eax, [ebp - 0x54]
call fcn.004051d8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6eb78d
mov eax, dword [ebp - 0x54]
call fcn.00405410
cmp eax, 0x6f
je 0x6eb7b1
mov eax, 0xff
call fcn.004039ac
mov edx, dword [ebp - 0x98]
add dword [edx], eax
jmp 0x6ee450
lea eax, [ebp - 0x54]
call fcn.00405668
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov ecx, 0x6f
call fcn.00403150
xor edx, edx
mov dl, byte [ebp - 0x2c7]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6eb7fc
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
je 0x6eb813
mov eax, 0xff
call fcn.004039ac
mov edx, dword [ebp - 0x98]
add dword [edx], eax
jmp 0x6ee450
movzx edx, word [ebp - 0x27a]
lea eax, [ebp - 0x54]
call fcn.0040579c
mov eax, dword [0x83a148]
mov eax, dword [eax]
xor ecx, ecx
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov ebx, dword [eax]
call dword [ebx + 0x14]
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
je 0x6eb85d
mov eax, 0xff
call fcn.004039ac
mov edx, dword [ebp - 0x98]
add dword [edx], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6f17a5
lea eax, [ebp - 0x54]
call fcn.00405668
mov edx, eax
movzx ecx, word [ebp - 0x27a]
mov eax, dword [0x83a148]
mov eax, dword [eax]
mov ebx, dword [eax]
call dword [ebx + 0xc]
movzx edx, word [ebp - 0x27a]
cmp eax, edx
je 0x6eb89c
mov eax, 0xff
call fcn.004039ac
mov edx, dword [ebp - 0x98]
add dword [edx], eax
jmp 0x6ee450
xor eax, eax
push ebp
push 0x6eb8e6
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.006280a4
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
push eax
lea eax, [ebp - 0x54]
call fcn.00405668
movzx ecx, word [ebp - 0x27a]
lea edx, reloc.kernel32.dll_DeleteCriticalSection
call fcn.004a264c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6eb90c
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ebbe6
movzx edx, word [ebp - 0x67e]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
movzx edx, word [ebp - 0x474]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
xor edx, edx
mov dl, byte [ebp - 0x46a]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
xor edx, edx
mov dl, byte [ebp - 0x42f]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
xor edx, edx
mov dl, byte [ebp - 0x3f8]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
xor edx, edx
mov dl, byte [ebp - 0x31e]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ebbe6
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 0x33
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
je 0x6ebbfd
mov eax, 0xff
call fcn.004039ac
mov edx, dword [ebp - 0x98]
add dword [edx], eax
jmp 0x6ee450
xor eax, eax
push ebp
push 0x6ebca1
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, reloc.kernel32.dll_DeleteCriticalSection
lea edx, reloc.kernel32.dll_DeleteCriticalSection
call fcn.004053b4
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bcf6c
lea ecx, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0040ba14
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bd008
lea eax, reloc.kernel32.dll_DeleteCriticalSection
lea edx, reloc.kernel32.dll_DeleteCriticalSection
call fcn.004053b4
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
lea ecx, [ebp - 0x54]
mov eax, dword [ebp - 0x9c]
mov ebx, dword [eax]
call dword [ebx + 0x38]
lea eax, [ebp - 0x54]
call fcn.00405668
lea edx, [ebp - 0xb0]
mov ecx, 4
call fcn.00403150
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ebcc7
mov eax, dword [0x83a1b4]
mov eax, dword [eax]
call fcn.00476854
xor eax, eax
push ebp
push 0x6ebd77
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, reloc.kernel32.dll_DeleteCriticalSection
lea edx, reloc.kernel32.dll_DeleteCriticalSection
call fcn.004053b4
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bcf6c
lea ecx, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0040ba14
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bd008
lea eax, reloc.kernel32.dll_DeleteCriticalSection
lea edx, reloc.kernel32.dll_DeleteCriticalSection
call fcn.004053b4
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
lea ecx, [ebp - 0x54]
mov eax, dword [ebp - 0x9c]
mov ebx, dword [eax]
call dword [ebx + 0x38]
lea eax, [ebp - 0x54]
call fcn.00405668
lea edx, [ebp - 0xa8]
mov ecx, 8
call fcn.00403150
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ebd9d
mov eax, dword [0x83a1b4]
mov eax, dword [eax]
call fcn.00476854
call fcn.0040dc1c
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0xa4]
push dword [ebp - 0xa8]
call fcn.004a382c
cmp al, 0xff
jne 0x6ebde1
mov eax, 0xff
call fcn.004039ac
mov edx, dword [ebp - 0x98]
add dword [edx], eax
jmp 0x6ee450
xor eax, eax
push ebp
push 0x6ebe85
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, reloc.kernel32.dll_DeleteCriticalSection
lea edx, reloc.kernel32.dll_DeleteCriticalSection
call fcn.004053b4
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bcf6c
lea ecx, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0040ba14
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bd008
lea eax, reloc.kernel32.dll_DeleteCriticalSection
lea edx, reloc.kernel32.dll_DeleteCriticalSection
call fcn.004053b4
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
lea ecx, [ebp - 0x54]
mov eax, dword [ebp - 0x9c]
mov ebx, dword [eax]
call dword [ebx + 0x38]
lea eax, [ebp - 0x54]
call fcn.00405668
lea edx, [ebp - 0xac]
mov ecx, 4
call fcn.00403150
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ebeab
mov eax, dword [0x83a1b4]
mov eax, dword [eax]
call fcn.00476854
xor eax, eax
push ebp
push 0x6ebf77
push dword fs:[eax]
mov dword fs:[eax], esp
movzx edx, word [ebp - 0x67e]
lea eax, [ebp - 0xe4]
call fcn.0040579c
lea eax, [ebp - 0xe4]
call fcn.00405668
mov edx, eax
movzx ecx, word [ebp - 0x67e]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00403150
lea eax, reloc.kernel32.dll_DeleteCriticalSection
lea edx, reloc.kernel32.dll_DeleteCriticalSection
call fcn.004053b4
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bcf6c
lea ecx, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0040ba14
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bd008
lea ecx, reloc.kernel32.dll_DeleteCriticalSection
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x9c]
mov ebx, dword [eax]
call dword [ebx + 0x38]
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
lea eax, [ebp - 0xe4]
call fcn.004051d8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ebf9d
mov eax, dword [0x83a1b4]
mov eax, dword [eax]
call fcn.00476854
xor eax, eax
push ebp
push 0x6ec069
push dword fs:[eax]
mov dword fs:[eax], esp
movzx edx, word [ebp - 0x474]
lea eax, [ebp - 0xe8]
call fcn.0040579c
lea eax, [ebp - 0xe8]
call fcn.00405668
mov edx, eax
movzx ecx, word [ebp - 0x474]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00403150
lea eax, reloc.kernel32.dll_DeleteCriticalSection
lea edx, reloc.kernel32.dll_DeleteCriticalSection
call fcn.004053b4
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bcf6c
lea ecx, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0040ba14
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bd008
lea ecx, reloc.kernel32.dll_DeleteCriticalSection
mov edx, dword [ebp - 0xe8]
mov eax, dword [ebp - 0x9c]
mov ebx, dword [eax]
call dword [ebx + 0x38]
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
lea eax, [ebp - 0xe8]
call fcn.004051d8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ec08f
cmp dword [ebp - 0xe4], 0
je 0x6ec0a1
cmp dword [ebp - 0xe8], 0
jne 0x6ec0b8
mov eax, 0xff
call fcn.004039ac
mov edx, dword [ebp - 0x98]
add dword [edx], eax
jmp 0x6ee450
movzx edx, word [ebp - 0x2e9]
lea eax, [ebp - 0x54]
call fcn.0040579c
mov eax, dword [0x83a148]
mov eax, dword [eax]
xor ecx, ecx
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov ebx, dword [eax]
call dword [ebx + 0x14]
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
je 0x6ec0fa
mov eax, 0xff
call fcn.004039ac
mov edx, dword [ebp - 0x98]
add dword [edx], eax
jmp 0x6ee450
lea eax, [ebp - 0x54]
call fcn.00405668
mov edx, eax
movzx ecx, word [ebp - 0x2e9]
mov eax, dword [0x83a148]
mov eax, dword [eax]
mov ebx, dword [eax]
call dword [ebx + 0xc]
movzx edx, word [ebp - 0x2e9]
cmp eax, edx
je 0x6ec139
mov eax, 0xff
call fcn.004039ac
mov edx, dword [ebp - 0x98]
add dword [edx], eax
jmp 0x6ee450
xor eax, eax
push ebp
push 0x6ec183
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.006280a4
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
push eax
lea eax, [ebp - 0x54]
call fcn.00405668
movzx ecx, word [ebp - 0x2e9]
lea edx, reloc.kernel32.dll_DeleteCriticalSection
call fcn.004a264c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ec1a9
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
cmp dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ec483
movzx edx, word [ebp - 0xc1d]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
movzx edx, word [ebp - 0xa13]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
xor edx, edx
mov dl, byte [ebp - 0xa09]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
xor edx, edx
mov dl, byte [ebp - 0x9ce]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
xor edx, edx
mov dl, byte [ebp - 0x997]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
xor edx, edx
mov dl, byte [ebp - 0x8bd]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6ec483
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 0x33
call fcn.00627e7c
cmp eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
je 0x6ec49a
mov eax, 0xff
call fcn.004039ac
mov edx, dword [ebp - 0x98]
add dword [edx], eax
jmp 0x6ee450
xor eax, eax
push ebp
push 0x6ec53e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, reloc.kernel32.dll_DeleteCriticalSection
lea edx, reloc.kernel32.dll_DeleteCriticalSection
call fcn.004053b4
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bcf6c
lea ecx, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 4
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0040ba14
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x40]
call fcn.004bd008
lea eax, reloc.kernel32.dll_DeleteCriticalSection
lea edx, reloc.kernel32.dll_DeleteCriticalSection
call fcn.004053b4
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
lea ecx, [ebp - 0x54]
mov eax, dword [ebp - 0x9c]
mov ebx, dword [eax]
call dword [ebx + 0x38]
lea eax, [ebp - 0x54]
call fcn.00405668
lea edx, [ebp - 0xc0]
mov ecx, 4
call fcn.00403150
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ec564
mov eax, dword [ebp - 0x9c]
call fcn.004041f0
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
cmp dword [eax], 0
jg 0x6ee478
mov eax, 0xff
call fcn.004039ac
mov edx, dword [ebp - 0x98]
add dword [edx], eax
mov eax, dword [ebp - 0x98]
cmp dword [eax], 0
je 0x6ee5a1
mov eax, dword [0x839a14]
mov eax, dword [eax]
inc dword [eax]
mov eax, dword [0x839f08]
mov eax, dword [eax]
inc dword [eax]
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 8], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0xc], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x10], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x14], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x18], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x1c], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x20], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x24], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x28], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x2c], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x30], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x34], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x38], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x3c], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x40], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x44], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x48], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x4c], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x50], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x54], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x58], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x5c], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x8c], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x60], edx
jmp 0x6ee5a9
mov eax, dword [ebp - 0x30]
call fcn.0066be24
mov edx, 4
mov eax, dword [ebp - 0x98]
call fcn.00402ed4
mov edx, 1
mov eax, dword [ebp - 0x94]
call fcn.00402ed4
mov edx, 4
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.00402ed4
jmp 0x6ee5e5
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.006d243c
mov eax, dword [0x83a634]
mov dword [eax], 0x15
mov dword [ebp - 0x50], 0x17
mov eax, dword [ebp - 4]
cmp byte [eax + 0x11f2], 0
je 0x6ee652
mov eax, dword [ebp - 4]
mov byte [eax + 0x11f2], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x11f1], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x11f0], 0
mov eax, dword [0x83a634]
mov dword [eax], 0x16
mov eax, dword [ebp - 4]
call fcn.006e2a38
mov eax, dword [0x83a634]
mov dword [eax], 0x17
mov eax, dword [ebp - 4]
call fcn.006e2a74
mov eax, dword [0x83a634]
mov dword [eax], 0x18
mov dword [ebp - 0x50], 0x18
mov byte [ebp - 0x29], 0
xor eax, eax
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x18], 0x89
mov edx, dword [ebp - 4]
cmp word [edx + eax*4 + 0x1638], 0
jbe 0x6ee78f
imul eax, dword [ebp - 0x18], 0x89
mov edx, dword [ebp - 4]
movzx edx, word [edx + eax*4 + 0x1638]
mov eax, dword [0x83a314]
mov eax, dword [eax]
call fcn.006abf60
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x6ee77b
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.0072ed1c
test al, al
jne 0x6ee78f
mov eax, 0x224
call fcn.00402ea4
mov dword [ebp - 0x24], eax
imul eax, dword [ebp - 0x18], 0x89
mov edx, dword [ebp - 4]
mov ecx, dword [ebp - 0x24]
lea esi, reloc.kernel32.dll_DeleteCriticalSection
mov edi, ecx
mov ecx, 0x89
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x28]
test al, al
je 0x6ee70b
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 4]
call fcn.006d5bc8
mov eax, dword [ebp - 4]
call fcn.0071ac98
mov byte [ebp - 0x29], 1
jmp 0x6ee746
push 0
push 0
mov eax, dword [ebp - 4]
push eax
imul eax, dword [ebp - 0x18], 0x89
mov edx, dword [ebp - 4]
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov ecx, 1
mov eax, dword [ebp - 4]
call fcn.006d2454
test al, al
je 0x6ee739
mov byte [ebp - 0x29], 1
mov edx, 0x224
mov eax, dword [ebp - 0x24]
call fcn.00402ed4
cmp byte [ebp - 0x29], 0
je 0x6ee78f
imul eax, dword [ebp - 0x18], 0x89
mov edx, dword [ebp - 4]
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [ebp - 4]
call fcn.007266d0
imul eax, dword [ebp - 0x18], 0x89
mov edx, dword [ebp - 4]
mov word [edx + eax*4 + 0x1638], 0
jmp 0x6ee78f
imul eax, dword [ebp - 0x18], 0x89
mov edx, dword [ebp - 4]
mov word [edx + eax*4 + 0x1638], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x13
jne 0x6ee662
mov eax, dword [0x83a634]
mov dword [eax], 0x19
cmp byte [ebp - 0x29], 0
je 0x6ee7b5
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x68]
mov eax, dword [0x83a634]
mov dword [eax], 0x1a
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x1f4
jbe 0x6ee7e3
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ee85a
mov eax, dword [0x83a634]
mov dword [eax], 0x1b
xor eax, eax
push ebp
push 0x6eed6d
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x50], eax
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
jmp 0x6ee8d6
mov dword [ebp - 0x50], 1
mov eax, dword [0x83a634]
mov dword [eax], 0x1c
movzx eax, word [ebp - 0x148]
mov edx, dword [0x839e9c]
mov dword [edx], eax
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x48]
test al, al
je 0x6ee920
mov eax, dword [0x83a634]
mov dword [eax], 0x1d
mov eax, dword [0x839e9c]
xor edx, edx
mov dword [eax], edx
mov dword [ebp - 0x50], 2
mov eax, dword [0x839a14]
mov eax, dword [eax]
cmp dword [eax], 0
jg 0x6ee920
mov eax, dword [0x839f08]
mov eax, dword [eax]
cmp dword [eax], 0
jg 0x6ee920
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [0x83a4b8]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jae 0x6ee920
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [ebp - 4]
call fcn.0070b0d4
test al, al
jne 0x6ee888
mov dword [ebp - 0x50], 3
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d68], 0
jne 0x6ee974
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d6a], 0
jne 0x6ee974
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d69], 0
jne 0x6ee974
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d6b], 0
je 0x6eed55
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x7d0
jbe 0x6eed55
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d6a], 0
je 0x6ee989
mov eax, dword [ebp - 4]
inc dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7cc8], 0
je 0x6ee9c5
mov eax, dword [0x839abc]
cmp byte [eax], 0
je 0x6ee9a9
mov eax, dword [ebp - 4]
call fcn.006fbb24
jmp 0x6ee9e5
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6ee9e5
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
call fcn.007061dc
jmp 0x6ee9e5
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7cbc], 0
jne 0x6ee9dd
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7cbd], 0
je 0x6ee9e5
mov eax, dword [ebp - 4]
call fcn.006fbb24
mov eax, dword [0x83a634]
mov dword [eax], 0x1e
mov eax, dword [ebp - 4]
cmp byte [eax + 0x84a1], 0
je 0x6eeaa8
mov eax, dword [ebp - 4]
cmp byte [eax + 0xfa4], 0
jne 0x6eeaa8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x105c], 0
jne 0x6eeaa8
mov eax, dword [0x839abc]
cmp byte [eax], 0
jne 0x6eeaa8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x82b2], 0
jne 0x6eeaa8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d70], 0
jne 0x6eeaa8
mov dword [ebp - 0x50], 4
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d78], 0
jne 0x6eeaa1
mov eax, dword [ebp - 4]
mov byte [eax + 0x7d78], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0xb497], 1
mov eax, dword [0x839fb4]
cmp dword [eax], 0
je 0x6eea97
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
push 0
mov ecx, dword [0x83a568]
mov ecx, dword [ecx]
mov eax, dword [0x839fb4]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.006a2a64
mov eax, dword [ebp - 4]
mov byte [eax + 0xb497], 0
mov dword [ebp - 0x50], 5
mov eax, dword [0x83a634]
mov dword [eax], 0x1f
mov dword [ebp - 0x50], 6
mov eax, dword [ebp - 4]
cmp byte [eax + 0x84a1], 0
je 0x6eeb72
mov eax, dword [ebp - 4]
cmp byte [eax + 0xfa4], 0
jne 0x6eeb72
mov eax, dword [ebp - 4]
cmp byte [eax + 0x105c], 0
jne 0x6eeb72
mov eax, dword [0x839abc]
cmp byte [eax], 0
jne 0x6eeb72
mov eax, dword [ebp - 4]
cmp byte [eax + 0x82b2], 0
jne 0x6eeb72
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d70], 0
je 0x6eeb72
mov dword [ebp - 0x50], 7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d78], 0
jne 0x6eeb6b
mov eax, dword [ebp - 4]
mov byte [eax + 0x7d78], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0xb497], 1
mov eax, dword [0x839fb4]
cmp dword [eax], 0
je 0x6eeb61
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
push 0
mov ecx, dword [0x839e8c]
mov ecx, dword [ecx]
mov eax, dword [0x839fb4]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.006a2a64
mov eax, dword [ebp - 4]
mov byte [eax + 0xb497], 0
mov dword [ebp - 0x50], 8
mov eax, dword [0x83a634]
mov dword [eax], 0x20
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d7b], 0
je 0x6eebc7
mov eax, dword [ebp - 4]
cmp byte [eax + 0xfa4], 0
jne 0x6eebc7
mov eax, dword [ebp - 4]
add eax, 0x14
mov edx, dword [ebp - 4]
mov edx, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
call fcn.00405194
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
mov dword [edx + 0x1c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
mov dword [edx + 0x20], eax
mov eax, dword [0x83a634]
mov dword [eax], 0x21
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d79], 0
jne 0x6eec2c
mov eax, dword [ebp - 4]
mov byte [eax + 0x7d79], 1
mov eax, dword [0x83a634]
mov dword [eax], 0x22
mov eax, dword [ebp - 4]
call fcn.006f9dd8
mov eax, dword [0x83a634]
mov dword [eax], 0x23
mov eax, dword [ebp - 4]
call fcn.006fa434
mov eax, dword [0x83a634]
mov dword [eax], 0x24
mov eax, dword [ebp - 4]
call fcn.00730dc8
mov eax, dword [0x83a634]
mov dword [eax], 0x25
mov eax, dword [0x83a634]
mov dword [eax], 0x26
mov dword [ebp - 0x50], 9
mov eax, dword [ebp - 4]
cmp byte [eax + 0xfa4], 0
jne 0x6eec52
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x5c]
mov eax, dword [0x83a634]
mov dword [eax], 0x27
mov dword [ebp - 0x50], 0xa
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d6a], 0
je 0x6eec92
mov eax, dword [ebp - 4]
cmp byte [eax + 0x105c], 0
jne 0x6eec92
push 0
push 0
push 0
push 0
xor ecx, ecx
mov dx, 0x403
mov eax, dword [ebp - 4]
call fcn.006d76a8
mov eax, dword [0x83a634]
mov dword [eax], 0x28
mov dword [ebp - 0x50], 0xb
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d70], 0
jne 0x6eed55
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7d69], 0
je 0x6eed55
mov dword [ebp - 0x50], 0xc
mov eax, dword [ebp - 4]
cmp byte [eax + 0xfa4], 0
jne 0x6eed03
mov eax, dword [ebp - 4]
cmp byte [eax + 0x105c], 0
jne 0x6eed55
mov eax, dword [ebp - 4]
mov ecx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [0x83a0d0]
mov eax, dword [eax]
call fcn.0063f008
jmp 0x6eed55
mov eax, dword [ebp - 4]
cmp byte [eax + 0x8465], 0
jne 0x6eed55
mov eax, dword [ebp - 4]
mov byte [eax + 0x8465], 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [0x83a0d0]
mov eax, dword [eax]
call fcn.0063f008
mov eax, dword [ebp - 4]
mov ecx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [0x83a940]
mov eax, dword [eax]
call fcn.007734cc
mov eax, dword [0x83a634]
mov dword [eax], 0x29
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6eeea9
mov eax, dword [0x83a634]
mov dword [eax], 0x2a
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7cc8], 0
je 0x6eefdb
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6eefdb
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe78], 0
jne 0x6eefdb
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0xe78], 0
jne 0x6eefdb
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x493e0
jbe 0x6eefdb
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov byte [eax + 0x7cbd], 0
call fcn.00407d74
mov edx, dword [ebp - 4]
mov edx, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
xor ecx, ecx
mov dx, 0x57c
call fcn.006d76a8
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
call fcn.006fbb24
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
call fcn.00727d48
push 1
mov edx, dword [0x8395a8]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov cl, 1
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 4]
mov byte [eax + 0x7cbd], 0
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
push 0
push 0
push 0
push 0
xor ecx, ecx
mov dx, 0x57c
mov eax, dword [ebp - 4]
call fcn.006d76a8
mov eax, dword [ebp - 4]
call fcn.006fbb24
mov eax, dword [ebp - 4]
call fcn.00727d48
push 1
mov edx, dword [0x8395a8]
mov edx, dword [edx]
mov cl, 1
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [0x83a634]
mov dword [eax], 0x2b
mov eax, dword [0x839404]
mov eax, dword [eax]
cmp dword [eax], 0xa
jl 0x6ef033
mov eax, dword [0x8390e8]
mov eax, dword [eax]
cmp byte [eax], 0
jne 0x6ef033
call fcn.00407d74
mov edx, dword [0x839cf8]
sub eax, dword [edx]
cmp eax, 0xa4cb80
jbe 0x6ef033
call fcn.00407d74
mov edx, dword [0x839cf8]
mov dword [edx], eax
mov eax, dword [0x839404]
mov eax, dword [eax]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x8392b0]
mov eax, dword [eax]
inc dword [eax]
mov eax, dword [0x83a634]
mov dword [eax], 0x2c
mov eax, dword [0x83a03c]
cmp byte [eax], 0
jne 0x6ef12a
mov eax, dword [0x839c80]
cmp dword [eax], 0
je 0x6ef12a
call fcn.00407d74
mov edx, dword [0x83a334]
sub eax, dword [edx]
cmp eax, 0x493e0
jbe 0x6ef221
mov eax, dword [0x8395dc]
mov eax, dword [eax]
inc dword [eax]
mov eax, dword [0x839c80]
mov eax, dword [eax]
mov byte [eax + 0x9520], 1
mov eax, dword [0x839c80]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x83a03c]
mov byte [eax], 0
mov eax, dword [0x83a5b8]
call fcn.00405140
mov eax, dword [0x839f74]
call fcn.00405140
call fcn.00407d74
mov edx, dword [0x83a86c]
mov dword [edx], eax
call fcn.00407d74
mov edx, dword [0x839520]
mov dword [edx], eax
mov eax, dword [0x839404]
mov eax, dword [eax]
inc dword [eax]
call fcn.00407d74
mov edx, dword [0x839cf8]
mov dword [edx], eax
mov eax, dword [0x8395c0]
mov eax, dword [eax]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x8399b4]
mov eax, dword [eax]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x83a790]
mov eax, dword [eax]
mov byte [eax], 0
call fcn.00407d74
mov edx, dword [0x839a60]
mov edx, dword [edx]
mov dword [edx], eax
call fcn.00407d74
mov edx, dword [0x83984c]
mov edx, dword [edx]
mov dword [edx], eax
mov eax, dword [0x8395dc]
mov eax, dword [eax]
inc dword [eax]
jmp 0x6ef221
mov eax, dword [0x83a03c]
cmp byte [eax], 0
je 0x6ef221
mov eax, dword [0x839c80]
cmp dword [eax], 0
je 0x6ef221
mov eax, dword [0x8390e8]
mov eax, dword [eax]
cmp byte [eax], 0
jne 0x6ef221
call fcn.00407d74
mov edx, dword [0x83a334]
sub eax, dword [edx]
cmp eax, 0x493e0
jbe 0x6ef221
mov eax, dword [0x8395dc]
mov eax, dword [eax]
inc dword [eax]
mov eax, dword [0x839c80]
mov eax, dword [eax]
mov byte [eax + 0x9520], 1
mov eax, dword [0x839c80]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x83a03c]
mov byte [eax], 0
mov eax, dword [0x83a5b8]
call fcn.00405140
mov eax, dword [0x839f74]
call fcn.00405140
call fcn.00407d74
mov edx, dword [0x83a86c]
mov dword [edx], eax
call fcn.00407d74
mov edx, dword [0x839520]
mov dword [edx], eax
mov eax, dword [0x839404]
mov eax, dword [eax]
inc dword [eax]
call fcn.00407d74
mov edx, dword [0x839cf8]
mov dword [edx], eax
mov eax, dword [0x8395c0]
mov eax, dword [eax]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x8399b4]
mov eax, dword [eax]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x83a790]
mov eax, dword [eax]
mov byte [eax], 0
call fcn.00407d74
mov edx, dword [0x839a60]
mov edx, dword [edx]
mov dword [edx], eax
call fcn.00407d74
mov edx, dword [0x83984c]
mov edx, dword [edx]
mov dword [edx], eax
mov eax, dword [0x8395dc]
mov eax, dword [eax]
inc dword [eax]
mov eax, dword [0x83a634]
mov dword [eax], 0x2d
mov eax, dword [0x839c80]
cmp dword [eax], 0
jne 0x6ef631
mov eax, dword [0x839404]
mov eax, dword [eax]
cmp dword [eax], 0xa
jge 0x6ef631
call fcn.00407d74
mov edx, dword [0x83a718]
sub eax, dword [edx]
cmp eax, 0xa4cb80
jbe 0x6ef631
mov eax, dword [0x83a380]
mov eax, dword [eax]
cmp byte [eax], 0
jne 0x6ef631
mov eax, dword [ebp - 4]
cmp byte [eax + 0x105c], 0
jne 0x6ef631
mov eax, dword [ebp - 4]
cmp byte [eax + 0xfa4], 0
jne 0x6ef631
mov eax, dword [ebp - 4]
cmp byte [eax + 0x164], 0
jne 0x6ef631
mov eax, dword [ebp - 4]
cmp byte [eax + 0xde1], 0xa
jae 0x6ef631
mov eax, dword [ebp - 4]
cmp byte [eax + 0x9520], 0
jne 0x6ef631
call fcn.00407d74
mov edx, dword [0x8399f4]
sub eax, dword [edx]
cmp eax, 0x927c0
jbe 0x6ef631
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x927c0
jbe 0x6ef631
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [0x83aae0]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0x6ef631
mov eax, dword [0x83a314]
mov eax, dword [eax]
call fcn.006af150
cmp eax, 0xa
jl 0x6ef631
call fcn.00407d74
mov edx, dword [0x83a86c]
sub eax, dword [edx]
cmp eax, 0xea60
jbe 0x6ef631
jmp 0x6ef346
jmp 0x6e7810
popal
call fcn.006ef34b
add al, dl
cmp ecx, 0xfe0
jne 0x6e9f7b
xor byte [ebp + 0xc], 0x20
jmp 0x6e9f7b
seto ch
mov dword [esp + 0x18], eax
xchg ebx, eax
popal
and ecx, 0xff0
jmp 0x6ef401
mov eax, dword [0x83a634]
mov dword [eax], 0x2e
mov eax, dword [0x839404]
mov eax, dword [eax]
cmp dword [eax], 0xa
jl 0x6ef9f8
mov eax, dword [0x8392a0]
mov eax, dword [eax]
cmp dword [eax], 0
jne 0x6ef9f8
mov eax, dword [0x83a978]
mov eax, dword [eax]
cmp byte [eax], 0
jne 0x6ef9f8
mov eax, dword [0x839850]
mov eax, dword [eax]
cmp byte [eax], 0
je 0x6ef68e
call fcn.00407d74
mov edx, dword [0x8391e4]
mov edx, dword [edx]
sub eax, dword [edx]
cmp eax, 0x493e0
ja 0x6ef6aa
mov eax, dword [0x8399b4]
mov eax, dword [eax]
cmp dword [eax], 0x14
jge 0x6ef6aa
mov eax, dword [0x8395c0]
mov eax, dword [eax]
cmp dword [eax], 0x14
jl 0x6ef9f8
mov eax, dword [0x83a76c]
mov eax, dword [eax]
cmp eax, dword [ebp - 4]
jne 0x6ef6be
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x5c]
mov eax, dword [0x839850]
mov eax, dword [eax]
cmp byte [eax], 0
je 0x6ef7f3
call fcn.00407d74
mov edx, dword [0x8391e4]
mov edx, dword [edx]
sub eax, dword [edx]
cmp eax, 0x493e0
jbe 0x6ef7f3
mov eax, dword [0x83a790]
mov eax, dword [eax]
mov byte [eax], 1
mov eax, dword [0x839850]
mov eax, dword [eax]
mov byte [eax], 0
mov eax, dword [0x83a76c]
xor edx, edx
mov dword [eax], edx
call fcn.00407d74
mov edx, dword [0x8391e4]
mov edx, dword [edx]
mov dword [edx], eax
call fcn.00407d74
mov edx, dword [0x83984c]
mov edx, dword [edx]
mov dword [edx], eax
mov eax, dword [0x8395c0]
mov eax, dword [eax]
inc dword [eax]
call fcn.00407d74
mov edx, dword [0x839a60]
mov edx, dword [edx]
sub eax, dword [edx]
cmp eax, 0x2932e00
jbe 0x6ef790
mov eax, dword [0x83a314]
mov eax, dword [eax]
call fcn.006af150
cmp eax, 0xa
jge 0x6ef790
mov eax, dword [0x8395c0]
mov eax, dword [eax]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x8399b4]
mov eax, dword [eax]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x83a790]
mov eax, dword [eax]
mov byte [eax], 0
call fcn.00407d74
mov edx, dword [0x839a60]
mov edx, dword [edx]
mov dword [edx], eax
mov eax, dword [0x83aae0]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp 0x6ef7f3
mov eax, dword [ebp - 4]
push dword [eax + 0x18]
push 0x6f1974
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [0x8395c0]
mov eax, dword [eax]
mov eax, dword [eax]
call fcn.0040b900
push dword [ebp - 0x1c5c]
push 0x6f1984
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [0x8399b4]
mov eax, dword [eax]
mov eax, dword [eax]
call fcn.0040b900
push dword [ebp - 0x1c60]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 5
call fcn.004054d0
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov cl, 1
xor edx, edx
call fcn.0077bfe4
call fcn.00407d74
mov edx, dword [0x839a60]
mov edx, dword [edx]
sub eax, dword [edx]
cmp eax, 0x2932e00
jbe 0x6ef855
mov eax, dword [0x83a314]
mov eax, dword [eax]
call fcn.006af150
cmp eax, 0xa
jge 0x6ef855
mov eax, dword [0x8395c0]
mov eax, dword [eax]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x8399b4]
mov eax, dword [eax]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x83a790]
mov eax, dword [eax]
mov byte [eax], 0
call fcn.00407d74
mov edx, dword [0x839a60]
mov edx, dword [edx]
mov dword [edx], eax
mov eax, dword [0x83aae0]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
call fcn.00407d74
mov edx, dword [0x839a60]
mov edx, dword [edx]
sub eax, dword [edx]
cmp eax, 0x2932e00
jbe 0x6ef9f8
mov eax, dword [ebp - 4]
push dword [eax + 0x18]
push 0x6f193c
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [0x8395c0]
mov eax, dword [eax]
mov eax, dword [eax]
call fcn.0040b900
push dword [ebp - 0x1c68]
push 0x6f1984
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [0x8399b4]
mov eax, dword [eax]
mov eax, dword [eax]
call fcn.0040b900
push dword [ebp - 0x1c6c]
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 5
call fcn.004054d0
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
mov cl, 1
mov edx, 0x378
call fcn.0077bfe4
mov eax, 0xff
call fcn.004039ac
mov edx, dword [0x8395c0]
mov edx, dword [edx]
add eax, dword [edx]
mov edx, dword [0x8392a0]
mov edx, dword [edx]
mov dword [edx], eax
mov eax, dword [0x83a314]
mov eax, dword [eax]
call fcn.006b3274
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 8], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0xc], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x10], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x14], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x18], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x1c], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x20], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x24], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x28], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x2c], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x30], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x34], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x38], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x3c], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x40], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x44], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x48], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x4c], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x50], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x54], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x58], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x5c], edx
mov eax, dword [0x8399bc]
xor edx, edx
mov dword [eax + 0x60], edx
mov eax, dword [0x83a634]
mov dword [eax], 0x2f
mov eax, dword [0x839404]
mov eax, dword [eax]
cmp dword [eax], 0xa
jl case.default.0x6efc35
mov eax, dword [0x8390e8]
mov eax, dword [eax]
cmp byte [eax], 0
jne case.default.0x6efc35
mov eax, dword [0x839850]
mov eax, dword [eax]
cmp byte [eax], 0
jne case.default.0x6efc35
mov eax, dword [0x83a76c]
cmp dword [eax], 0
jne case.default.0x6efc35
call fcn.00407d74
mov edx, dword [0x8391e4]
mov edx, dword [edx]
sub eax, dword [edx]
cmp eax, 0xa4cb80
ja 0x6efa81
mov eax, dword [0x83a790]
mov eax, dword [eax]
cmp byte [eax], 0
je case.default.0x6efc35
call fcn.00407d74
mov edx, dword [0x83984c]
mov edx, dword [edx]
sub eax, dword [edx]
cmp eax, 0x927c0
jbe case.default.0x6efc35
mov eax, dword [0x8392a0]
mov eax, dword [eax]
cmp dword [eax], 0
jne 0x6efaef
call fcn.00407d74
mov edx, dword [0x839a60]
mov edx, dword [edx]
sub eax, dword [edx]
cmp eax, 0x2932e00
jbe 0x6efaef
mov eax, dword [0x83a314]
mov eax, dword [eax]
call fcn.006af150
cmp eax, 0xa
jge 0x6efaef
mov eax, dword [0x8395c0]
mov eax, dword [eax]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x8399b4]
mov eax, dword [eax]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x83a790]
mov eax, dword [eax]
mov byte [eax], 0
call fcn.00407d74
mov edx, dword [0x839a60]
mov edx, dword [edx]
mov dword [edx], eax
mov eax, dword [0x83aae0]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
call fcn.0040dc1c
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.004a3474
mov word [ebp - 0xa], ax
cmp word [ebp - 0xa], 0x17
je case.default.0x6efc35
cmp word [ebp - 0xa], 0xb
je case.default.0x6efc35
mov eax, dword [ebp - 4]
cmp byte [eax + 0x105c], 0
jne case.default.0x6efc35
mov eax, dword [ebp - 4]
cmp byte [eax + 0xfa4], 0
jne case.default.0x6efc35
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe70], 0
jne case.default.0x6efc35
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe78], 0
jne case.default.0x6efc35
mov eax, dword [ebp - 4]
cmp byte [eax + 0x164], 0
jne case.default.0x6efc35
mov eax, dword [ebp - 4]
cmp byte [eax + 0xde1], 0xa
jae case.default.0x6efc35
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x927c0
jbe case.default.0x6efc35
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [0x83aae0]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge case.default.0x6efc35
mov eax, dword [0x83a314]
mov eax, dword [eax]
call fcn.006af150
cmp eax, 0xa
jl case.default.0x6efc35
call fcn.00407d74
mov edx, dword [0x8391e4]
mov edx, dword [edx]
mov dword [edx], eax
call fcn.00407d74
mov edx, dword [0x83984c]
mov edx, dword [edx]
mov dword [edx], eax
mov eax, dword [0x839850]
mov eax, dword [eax]
mov byte [eax], 1
mov eax, dword [0x83a790]
mov eax, dword [eax]
mov byte [eax], 0
mov eax, dword [0x83a76c]
mov edx, dword [ebp - 4]
mov dword [eax], edx
call fcn.00513d60
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, 5
call fcn.004039ac
mov edx, dword [0x83a1dc]
mov edx, dword [edx]
mov dword [edx], eax
mov eax, dword [0x83a1dc]
mov eax, dword [eax]
mov eax, dword [eax]
cmp eax, 4
ja case.default.0x6efc35
jmp dword [eax*4 + 0x6efc3c]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dx, 0x613
mov eax, dword [ebp - 4]
call fcn.006d76a8
jmp case.default.0x6efc35
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dx, 0x666
mov eax, dword [ebp - 4]
call fcn.006d76a8
jmp case.default.0x6efc35
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dx, 0x667
mov eax, dword [ebp - 4]
call fcn.006d76a8
jmp case.default.0x6efc35
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dx, 0x668
mov eax, dword [ebp - 4]
call fcn.006d76a8
jmp case.default.0x6efc35
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dx, 0x669
mov eax, dword [ebp - 4]
call fcn.006d76a8
mov eax, dword [0x83a634]
mov dword [eax], 0x30
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [0x839340]
mov eax, dword [eax]
imul eax, dword [eax], 0x3c
imul eax, eax, 0x3e8
cdq
cmp edx, dword [esp + 4]
jne 0x6efd2a
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6efdc7
jmp 0x6efd32
pop edx
pop eax
jge 0x6efdc7
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jl 0x6efd63
mov eax, dword [0x83aa64]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jg 0x6efd6e
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jl 0x6efdc7
mov eax, dword [0x83aa64]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jle 0x6efdc7
push 1
lea ecx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [0x83aa64]
mov eax, dword [eax]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 4]
inc dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [0x83a634]
mov dword [eax], 0x31
mov eax, dword [ebp - 4]
call fcn.0075eb60
mov eax, dword [0x83a634]
mov dword [eax], 0x32
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe70], 0
jne 0x6f0956
mov eax, dword [ebp - 4]
mov ebx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x83e4], 0
je 0x6eff83
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jbe 0x6eff83
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jg 0x6efe6d
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
sub dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - 8], eax
jmp 0x6efe96
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x83e4], 0
mov eax, dword [ebp - 4]
call fcn.00727d48
mov eax, dword [0x83a0a4]
cmp byte [eax], 0
je 0x6eff83
lea eax, reloc.kernel32.dll_DeleteCriticalSection
push eax
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [0x83a744]
call fcn.00407698
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
push eax
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0x6f
mov byte [ebp - 0x1cbc], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1cb4], 0xb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1cac], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1ca4], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c9c], 0xb
mov eax, dword [0x83a4b8]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c94], 0xb
mov eax, dword [ebp - 8]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c8c], 0
mov byte [ebp - 0x1c88], 0x2d
mov byte [ebp - 0x1c84], 2
mov eax, 0x6f1990
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c7c], 0xb
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov ecx, 8
pop eax
call fcn.0040ca34
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0077d770
mov eax, dword [0x83a634]
mov dword [eax], 0x33
mov eax, dword [ebp - 4]
cmp byte [eax + 0x83f4], 0
je 0x6f0118
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jbe 0x6f0118
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
add eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x7fffffff
jge 0x6f0002
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
add dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - 8], eax
jmp 0x6f002b
mov eax, dword [ebp - 4]
mov edx, 0x7fffffff
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [ebp - 4]
mov edx, 0x7fffffff
sub edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x83f4], 0
mov eax, dword [0x83a0a4]
cmp byte [eax], 0
je 0x6f0118
lea eax, reloc.kernel32.dll_DeleteCriticalSection
push eax
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [0x83a744]
call fcn.00407698
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
push eax
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0x6f
mov byte [ebp - 0x1cbc], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1cb4], 0xb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1cac], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1ca4], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c9c], 0xb
mov eax, dword [0x83a4b8]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c94], 0xb
mov eax, dword [ebp - 8]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c8c], 0
mov byte [ebp - 0x1c88], 0x2d
mov byte [ebp - 0x1c84], 2
mov eax, 0x6f1990
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c7c], 0xb
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov ecx, 8
pop eax
call fcn.0040ca34
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0077d770
mov eax, dword [0x83a634]
mov dword [eax], 0x34
mov eax, dword [ebp - 4]
cmp byte [eax + 0x83e4], 0
jne 0x6f02dc
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0x82], 0
je 0x6f02dc
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
mov edx, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
imul edx, dword [edx + 0xac], 0x3e8
cmp eax, edx
jbe 0x6f02dc
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 0xb0]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jg 0x6f01c6
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 0xb0]
mov edx, dword [ebp - 4]
sub dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 0xb0]
mov dword [ebp - 8], eax
jmp 0x6f01ef
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x83e4], 0
mov eax, dword [ebp - 4]
call fcn.00727d48
mov eax, dword [0x83a0a4]
cmp byte [eax], 0
je 0x6f02dc
lea eax, reloc.kernel32.dll_DeleteCriticalSection
push eax
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [0x83a744]
call fcn.00407698
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
push eax
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0x6f
mov byte [ebp - 0x1cbc], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1cb4], 0xb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1cac], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1ca4], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c9c], 0xb
mov eax, dword [0x83a4b8]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c94], 0xb
mov eax, dword [ebp - 8]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c8c], 0
mov byte [ebp - 0x1c88], 0x2d
mov byte [ebp - 0x1c84], 2
mov eax, 0x6f19a0
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c7c], 0xb
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov ecx, 8
pop eax
call fcn.0040ca34
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0077d770
mov eax, dword [0x83a634]
mov dword [eax], 0x35
mov eax, dword [ebp - 4]
cmp byte [eax + 0x83f4], 0
jne 0x6f0497
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0x7f], 0
je 0x6f0497
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
mov edx, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
imul edx, dword [edx + 0xbc], 0x3e8
cmp eax, edx
jbe 0x6f0497
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
mov edx, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
add eax, dword [edx + 0xc0]
cmp eax, 0x7fffffff
jg 0x6f038c
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 0xc0]
mov edx, dword [ebp - 4]
add dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 0xc0]
mov dword [ebp - 8], eax
jmp 0x6f03aa
mov eax, dword [ebp - 4]
mov edx, 0x7fffffff
sub edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0x7fffffff
mov eax, dword [0x83a0a4]
cmp byte [eax], 0
je 0x6f0497
lea eax, reloc.kernel32.dll_DeleteCriticalSection
push eax
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [0x83a744]
call fcn.00407698
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
push eax
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0x6f
mov byte [ebp - 0x1cbc], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1cb4], 0xb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1cac], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1ca4], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c9c], 0xb
mov eax, dword [0x83a4b8]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c94], 0xb
mov eax, dword [ebp - 8]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c8c], 0
mov byte [ebp - 0x1c88], 0x2b
mov byte [ebp - 0x1c84], 2
mov eax, 0x6f19a0
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c7c], 0xb
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov ecx, 8
pop eax
call fcn.0040ca34
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0077d770
mov eax, dword [0x83a634]
mov dword [eax], 0x36
mov eax, dword [ebp - 4]
cmp ebx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
je 0x6f04c7
push 0
push 0
push 0
push 0
push 0
mov ecx, 0x24f
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
call fcn.0070ad80
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0x80], 0
je 0x6f066b
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
mov edx, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
imul edx, dword [edx + 0xc4], 0x3e8
cmp eax, edx
jbe 0x6f066b
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
mov edx, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
add eax, dword [edx + 0xc8]
cmp eax, 0x7fffffff
jg 0x6f055f
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 0xc8]
mov edx, dword [ebp - 4]
add dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 0xc8]
mov dword [ebp - 8], eax
jmp 0x6f057e
mov eax, dword [ebp - 4]
mov edx, 0x7fffffff
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [ebp - 4]
mov edx, 0x7fffffff
sub edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - 8], edx
mov eax, dword [0x8393e0]
cmp byte [eax], 0
je 0x6f066b
lea eax, reloc.kernel32.dll_DeleteCriticalSection
push eax
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [0x83a744]
call fcn.00407698
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
push eax
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], 0x70
mov byte [ebp - 0x1cbc], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1cb4], 0xb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1cac], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1ca4], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c9c], 0xb
mov eax, dword [0x83a4b8]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c94], 0xb
mov eax, dword [ebp - 8]
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c8c], 0
mov byte [ebp - 0x1c88], 0x2b
mov byte [ebp - 0x1c84], 2
mov eax, 0x6f19a0
mov dword [ebp - reloc.kernel32.dll_DeleteCriticalSection], eax
mov byte [ebp - 0x1c7c], 0xb
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov ecx, 8
pop eax
call fcn.0040ca34
mov eax, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
call fcn.0077d770
mov eax, dword [0x83a634]
mov dword [eax], 0x37
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0x81], 0
je 0x6f073e
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe78], 0
jne 0x6f073e
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jbe 0x6f073e
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
mov edx, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
imul edx, dword [edx + 0x9c], 0x3e8
cmp eax, edx
jbe 0x6f073e
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 0xa0]
cdq
cmp edx, dword [esp + 4]
jne 0x6f070b
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6f0729
jmp 0x6f070f
pop edx
pop eax
jge 0x6f0729
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 0xa0]
mov edx, dword [ebp - 4]
sub dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
jmp 0x6f0734
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.006d641c
mov eax, dword [0x83a634]
mov dword [eax], 0x38
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0x7e], 0
je 0x6f07fd
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe78], 0
jne 0x6f07fd
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jbe 0x6f07fd
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
mov edx, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
imul edx, dword [edx + 0xa4], 0x3e8
cmp eax, edx
jbe 0x6f07fd
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 0xa0]
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
push edx
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
call fcn.00435104
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.006d641c
mov eax, dword [0x83a634]
mov dword [eax], 0x39
mov eax, dword [0x83a4b8]
cmp byte [eax + 0x4d15], 0
je 0x6f0956
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x3e8
jbe 0x6f0956
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0xcc], 0
jle 0x6f087d
mov eax, dword [ebp - 4]
call fcn.007071d8
mov ebx, eax
mov eax, dword [ebp - 4]
dec dword [eax + 0xcc]
mov eax, dword [ebp - 4]
call fcn.007071d8
cmp ebx, eax
je 0x6f0956
mov eax, dword [ebp - 4]
call fcn.006e2bc0
jmp 0x6f0956
mov eax, dword [0x83a4b8]
cmp byte [eax + 0x4d16], 0
je 0x6f0956
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe78], 0
jne 0x6f0956
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jbe 0x6f0956
mov eax, dword [ebp - 4]
sub dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0x3c
mov eax, dword [ebp - 4]
sub dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0xa
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
xor eax, eax
call fcn.00435144
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
dec dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 4]
dec dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov ecx, 0x64
xor edx, edx
div ecx
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jae 0x6f0935
push 0
push 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov ecx, 0x64
xor edx, edx
div ecx
xor edx, edx
push edx
push eax
call fcn.0043514c
mov edx, dword [ebp - 4]
sub dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
jmp 0x6f094c
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 2
ja 0x6f094c
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.006d641c
mov eax, dword [0x83a634]
mov dword [eax], 0x3a
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6f09a7
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x493e0
jbe 0x6f09a7
mov eax, dword [ebp - 4]
add eax, 0x8988
call fcn.00405140
mov eax, dword [ebp - 4]
add eax, 0x898c
call fcn.00405140
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [0x83a634]
mov dword [eax], 0x3b
mov eax, dword [0x8398bc]
mov eax, dword [eax]
cmp dword [eax], 0xa
jl 0x6f09f6
mov eax, dword [0x83952c]
mov eax, dword [eax]
cmp byte [eax], 0
jne 0x6f09f6
call fcn.00407d74
mov edx, dword [0x83a1d8]
sub eax, dword [edx]
cmp eax, 0xa4cb80
jbe 0x6f09f6
call fcn.00407d74
mov edx, dword [0x83a1d8]
mov dword [edx], eax
mov eax, dword [0x8398bc]
mov eax, dword [eax]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x83a508]
cmp byte [eax], 0
jne 0x6f0a92
mov eax, dword [0x83a180]
cmp dword [eax], 0
je 0x6f0a92
call fcn.00407d74
mov edx, dword [0x83a838]
sub eax, dword [edx]
cmp eax, 0x493e0
jbe 0x6f0b31
mov eax, dword [0x83a180]
mov eax, dword [eax]
mov byte [eax + 0x9520], 1
mov eax, dword [0x83a180]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x83a508]
mov byte [eax], 0
mov eax, dword [0x83aa68]
call fcn.00405140
mov eax, dword [0x83a428]
call fcn.00405140
call fcn.00407d74
mov edx, dword [0x839234]
mov dword [edx], eax
call fcn.00407d74
mov edx, dword [0x839a3c]
mov dword [edx], eax
mov eax, dword [0x8398bc]
mov eax, dword [eax]
inc dword [eax]
call fcn.00407d74
mov edx, dword [0x83a1d8]
mov dword [edx], eax
jmp 0x6f0b31
mov eax, dword [0x83a508]
cmp byte [eax], 0
je 0x6f0b31
mov eax, dword [0x83a180]
cmp dword [eax], 0
je 0x6f0b31
mov eax, dword [0x83952c]
mov eax, dword [eax]
cmp byte [eax], 0
jne 0x6f0b31
call fcn.00407d74
mov edx, dword [0x83a838]
sub eax, dword [edx]
cmp eax, 0x493e0
jbe 0x6f0b31
mov eax, dword [0x83a180]
mov eax, dword [eax]
mov byte [eax + 0x9520], 1
mov eax, dword [0x83a180]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x83a508]
mov byte [eax], 0
mov eax, dword [0x83aa68]
call fcn.00405140
mov eax, dword [0x83a428]
call fcn.00405140
call fcn.00407d74
mov edx, dword [0x839234]
mov dword [edx], eax
call fcn.00407d74
mov edx, dword [0x839a3c]
mov dword [edx], eax
mov eax, dword [0x8398bc]
mov eax, dword [eax]
inc dword [eax]
call fcn.00407d74
mov edx, dword [0x83a1d8]
mov dword [edx], eax
mov eax, dword [0x83a634]
mov dword [eax], 0x3c
call fcn.0040dbbc
mov eax, dword [0x8395b4]
fsub qword [eax]
fcomp dword [0x6f1870]
fnstsw ax
sahf
jb 0x6f0d6e
mov eax, dword [0x83a180]
cmp dword [eax], 0
jne 0x6f0d6e
mov eax, dword [0x8398bc]
mov eax, dword [eax]
cmp dword [eax], 0xa
jge 0x6f0d6e
call fcn.00407d74
mov edx, dword [0x839120]
sub eax, dword [edx]
cmp eax, 0xa4cb80
jbe 0x6f0d6e
mov eax, dword [0x83a878]
mov eax, dword [eax]
cmp byte [eax], 0
jne 0x6f0d6e
mov eax, dword [ebp - 4]
cmp byte [eax + 0x105c], 0
jne 0x6f0d6e
mov eax, dword [ebp - 4]
cmp byte [eax + 0xfa4], 0
jne 0x6f0d6e
mov eax, dword [ebp - 4]
cmp byte [eax + 0x164], 0
jne 0x6f0d6e
mov eax, dword [ebp - 4]
cmp byte [eax + 0xde1], 0xa
jae 0x6f0d6e
mov eax, dword [ebp - 4]
cmp byte [eax + 0x9520], 0
jne 0x6f0d6e
call fcn.00407d74
mov edx, dword [0x8399f4]
sub eax, dword [edx]
cmp eax, 0x927c0
jbe 0x6f0d6e
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x927c0
jbe 0x6f0d6e
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [0x83aae0]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0x6f0d6e
mov eax, dword [0x83a314]
mov eax, dword [eax]
call fcn.006af150
cmp eax, 0xa
jl 0x6f0d6e
call fcn.00407d74
mov edx, dword [0x839234]
sub eax, dword [edx]
cmp eax, 0xea60
jbe 0x6f0d6e
jmp 0x6f0c71
jmp 0x6e9e55
mov eax, dword [0x83a634]
mov dword [eax], 0x3d
mov eax, dword [ebp - 4]
call fcn.007603ec
mov eax, dword [0x83a634]
mov dword [eax], 0x3e
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [0x8397f8]
mov eax, dword [eax]
imul eax, dword [eax], 0x3c
imul eax, eax, 0x3e8
cdq
cmp edx, dword [esp + 4]
jne 0x6f0dc2
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6f0e5f
jmp 0x6f0dca
pop edx
pop eax
jge 0x6f0e5f
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jl 0x6f0dfb
mov eax, dword [0x83943c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jg 0x6f0e06
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jl 0x6f0e5f
mov eax, dword [0x83943c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jle 0x6f0e5f
push 1
lea ecx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [0x83943c]
mov eax, dword [eax]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - reloc.kernel32.dll_DeleteCriticalSection]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 4]
inc dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [0x83a634]
mov dword [eax], 0x3f
xor eax, eax
push ebp
push 0x6f115c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x83939c]
mov eax, dword [eax]
cmp eax, dword [ebp - 4]
jne 0x6f0ea5
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe78], 0
jne 0x6f0e9c
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe70], 0
je 0x6f0ea5
mov eax, dword [0x83939c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x83a0b4]
mov eax, dword [eax]
cmp eax, dword [ebp - 4]
jne 0x6f0ed2
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe78], 0
jne 0x6f0ec9
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe70], 0
je 0x6f0ed2
mov eax, dword [0x83a0b4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x83982c]
mov eax, dword [eax]
cmp eax, dword [ebp - 4]
jne 0x6f0eff
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe78], 0
jne 0x6f0ef6
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe70], 0
je 0x6f0eff
mov eax, dword [0x83982c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x839370]
mov eax, dword [eax]
cmp eax, dword [ebp - 4]
jne 0x6f0f2c
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe78], 0
jne 0x6f0f23
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe70], 0
je 0x6f0f2c
mov eax, dword [0x839370]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x839d08]
mov eax, dword [eax]
cmp eax, dword [ebp - 4]
jne 0x6f0f59
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe78], 0
jne 0x6f0f50
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe70], 0
je 0x6f0f59
mov eax, dword [0x839d08]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x839edc]
mov eax, dword [eax]
cmp eax, dword [ebp - 4]
jne 0x6f0f86
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe78], 0
jne 0x6f0f7d
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe70], 0
je 0x6f0f86
mov eax, dword [0x839edc]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 4]
cmp byte [eax + 0xde1], 6
jae 0x6f1152
mov eax, dword [0x83939c]
cmp dword [eax], 0
je 0x6f0fb0
mov eax, dword [0x83939c]
mov eax, dword [eax]
cmp byte [eax + 0xe70], 0
je 0x6f0fbc
mov eax, dword [0x83939c]
mov edx, dword [ebp - 4]
mov dword [eax], edx
jmp 0x6f0fd9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [0x83939c]
mov edx, dword [edx]
cmp eax, dword [edx + 0x5c]
jbe 0x6f0fd9
mov eax, dword [0x83939c]
mov edx, dword [ebp - 4]
mov dword [eax], edx
mov eax, dword [0x83a0b4]
cmp dword [eax], 0
je 0x6f0ff3
mov eax, dword [0x83a0b4]
mov eax, dword [eax]
cmp byte [eax + 0xe70], 0
je 0x6f100b
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jle 0x6f102e
mov eax, dword [0x83a0b4]
mov edx, dword [ebp - 4]
mov dword [eax], edx
jmp 0x6f102e
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [0x83a0b4]
mov edx, dword [edx]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jle 0x6f102e
mov eax, dword [0x83a0b4]
mov edx, dword [ebp - 4]
mov dword [eax], edx
mov eax, dword [0x83982c]
cmp dword [eax], 0
je 0x6f1048
mov eax, dword [0x83982c]
mov eax, dword [eax]
cmp byte [eax + 0xe70], 0
je 0x6f1054
mov eax, dword [0x83982c]
mov edx, dword [ebp - 4]
mov dword [eax], edx
jmp 0x6f1077
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [0x83982c]
mov edx, dword [edx]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jle 0x6f1077
mov eax, dword [0x83982c]
mov edx, dword [ebp - 4]
mov dword [eax], edx
mov eax, dword [0x839370]
cmp dword [eax], 0
je 0x6f1091
mov eax, dword [0x839370]
mov eax, dword [eax]
cmp byte [eax + 0xe70], 0
je 0x6f109d
mov eax, dword [0x839370]
mov edx, dword [ebp - 4]
mov dword [eax], edx
jmp 0x6f10c0
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [0x839370]
mov edx, dword [edx]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jle 0x6f10c0
mov eax, dword [0x839370]
mov edx, dword [ebp - 4]
mov dword [eax], edx
mov eax, dword [0x839d08]
cmp dword [eax], 0
je 0x6f10da
mov eax, dword [0x839d08]
mov eax, dword [eax]
cmp byte [eax + 0xe70], 0
je 0x6f10e6
mov eax, dword [0x839d08]
mov edx, dword [ebp - 4]
mov dword [eax], edx
jmp 0x6f1109
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [0x839d08]
mov edx, dword [edx]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jle 0x6f1109
mov eax, dword [0x839d08]
mov edx, dword [ebp - 4]
mov dword [eax], edx
mov eax, dword [0x839edc]
cmp dword [eax], 0
je 0x6f1123
mov eax, dword [0x839edc]
mov eax, dword [eax]
cmp byte [eax + 0xe70], 0
je 0x6f112f
mov eax, dword [0x839edc]
mov edx, dword [ebp - 4]
mov dword [eax], edx
jmp 0x6f1152
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [0x839edc]
mov edx, dword [edx]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jae 0x6f1152
mov eax, dword [0x839edc]
mov edx, dword [ebp - 4]
mov dword [eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6f1197
mov eax, dword [0x83a634]
mov dword [eax], 0x40
xor eax, eax
push ebp
push 0x6f12bc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x83a4b8]
cmp byte [eax + 0x4afc], 0
je 0x6f1259
mov eax, dword [ebp - 4]
cmp byte [eax + 0x831e], 0
jbe 0x6f1259
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [0x83a4b8]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jbe 0x6f1259
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
inc byte [eax + 0x831f]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x831f], 9
jbe 0x6f121b
mov eax, dword [ebp - 4]
mov byte [eax + 0x831f], 0
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x831f]
mov edx, dword [0x83a4b8]
mov al, byte [edx + eax + 0x4aec]
mov edx, dword [ebp - 4]
mov byte [edx + 0xe12], al
mov eax, dword [0x83a634]
mov dword [eax], 0x41
mov eax, dword [ebp - 4]
call fcn.006d6674
mov eax, dword [0x83a634]
mov dword [eax], 0x42
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6f1294
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0xe78], 0
jne 0x6f1289
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0xe70], 0
je 0x6f1294
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [0x83a634]
mov dword [eax], 0x43
mov eax, dword [ebp - 4]
call fcn.006f19e4
mov eax, dword [0x83a634]
mov dword [eax], 0x44
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6f1309
mov eax, dword [0x83a634]
mov dword [eax], 0x45
xor edx, edx
push ebp
push 0x6f1440
push dword fs:[edx]
mov dword fs:[edx], esp
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0xea60
jbe 0x6f1436
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6f1384
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0xe78], 0
jne 0x6f1379
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0xe70], 0
je 0x6f1384
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [ebp - 4]
cmp byte [eax + 0x831c], 0
je 0x6f13fb
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov eax, dword [eax + 8]
dec eax
cmp eax, 0
jl 0x6f1436
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp dword [eax + 8], 0
jle 0x6f1436
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x18]
call fcn.004212e4
test eax, eax
je 0x6f13f0
cmp byte [eax + 0xe78], 0
jne 0x6f13df
cmp byte [eax + 0xe70], 0
je 0x6f13f0
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x18]
call fcn.00421168
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffff
jne 0x6f13a9
jmp 0x6f1436
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6f1436
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0xe78], 0
jne 0x6f142b
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cmp byte [eax + 0xe70], 0
je 0x6f1436
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6f148d
mov eax, dword [0x83a634]
mov dword [eax], 0x46
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jle 0x6f1546
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
je 0x6f14c8
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jne 0x6f1546
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
cdq
cmp edx, dword [esp + 4]
jne 0x6f14f3
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6f1546
jmp 0x6f14f7
pop edx
pop eax
jge 0x6f1546
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x8448], 0
je 0x6f1529
mov eax, dword [ebp - 4]
cmp byte [eax + 0x8448], 0
je 0x6f1546
mov eax, dword [ebp - 4]
call fcn.0071acc4
test al, al
je 0x6f1546
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x8440]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.006d3648
mov eax, dword [ebp - 4]
cmp byte [eax + 0x8978], 0
je 0x6f15c5
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jbe 0x6f15c5
mov eax, dword [ebp - 4]
mov byte [eax + 0x8978], 0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + reloc.kernel32.dll_DeleteCriticalSection], edx
mov eax, dword [ebp - 4]
mov al, byte [eax + 0xe11]
mov edx, dword [ebp - 4]
cmp al, byte [edx + 0xe10]
je 0x6f15c5
mov eax, dword [ebp - 4]
mov al, byte [eax + 0xe11]
mov edx, dword [ebp - 4]
mov byte [edx + 0xe10], al
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0xe10]
mov dx, 0x52d
mov eax, dword [ebp - 4]
call fcn.006d76a8
mov eax, dword [0x83a634]
mov dword [eax], 0x47
mov eax, dword [ebp - 4]
cmp byte [eax + 0x8fa4], 0xff
je 0x6f1622
call fcn.00407d74
mov edx, dword [ebp - 4]
cmp eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
jbe 0x6f1622
mov eax, dword [ebp - 4]
mov byte [eax + 0x8fa4], 0xff
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [0x83a634]
mov dword [eax], 0x48
mov eax, dword [ebp - 4]
call fcn.006e2b78
mov eax, dword [0x83a634]
mov dword [eax], 0x49
mov eax, dword [0x83a634]
mov dword [eax], 0x4a
mov eax, dword [ebp - 4]
cmp dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0
jle 0x6f1711
mov eax, dword [ebp - 4]
cmp byte [eax + 0x763c], 0
jne 0x6f1711
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe70], 0
jne 0x6f1711
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe78], 0
jne 0x6f1711
mov eax, dword [ebp - 4]
cmp byte [eax + 0x58e7], 0
je 0x6f1711
mov eax, dword [ebp - 4]
call fcn.006d1cc8
test al, al
je 0x6f1711
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7648], 0
jne 0x6f1711
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
cmp eax, 0x3e8
jbe 0x6f1711
call fcn.00407d74
mov edx, dword [ebp - 4]
mov dword [edx + reloc.kernel32.dll_DeleteCriticalSection], eax
call fcn.00407d74
mov edx, dword [ebp - 4]
sub eax, dword [edx + reloc.kernel32.dll_DeleteCriticalSection]
xor edx, edx
push edx
push eax
mov eax, dword [0x83a4b8]
imul eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection], 0x3e8
cdq
cmp edx, dword [esp + 4]
jne 0x6f16ed
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6f1711
jmp 0x6f16f1
pop edx
pop eax
jge 0x6f1711
mov eax, dword [ebp - 4]
mov byte [eax + 0x7648], 1
push 0
push 0
push 0
push 0
xor ecx, ecx
mov dx, 0x5a9
mov eax, dword [ebp - 4]
call fcn.006d76a8
mov eax, dword [0x83a634]
mov dword [eax], 0x4b
xor eax, eax
push ebp
push 0x6f174b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x83a094]
cmp dword [eax], 0
je 0x6f1741
mov eax, dword [ebp - 4]
push eax
mov eax, dword [0x83a094]
mov eax, dword [eax]
call eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6f1787
mov eax, dword [0x83a634]
mov dword [eax], 0x4c
mov eax, dword [ebp - 4]
call fcn.006c81ec
mov eax, dword [0x83a634]
mov dword [eax], 0x4d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6f1869
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 0x10
call fcn.00405164
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 0xd
call fcn.00405164
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 2
call fcn.00405164
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 3
call fcn.00405164
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 0x42
call fcn.00405164
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, 0x5a
call fcn.00405164
lea eax, reloc.kernel32.dll_DeleteCriticalSection
mov edx, dword [0x491db8]
call fcn.00405db8
lea eax, [ebp - 0xf8]
mov edx, 6
call fcn.00405164
lea eax, [ebp - 0x8c]
call fcn.00405140
lea eax, [ebp - 0x54]
call fcn.00405140
lea eax, [ebp - 0x38]
call fcn.00405140
lea eax, [ebp - 0x100]
mov edx, 2
call fcn.00405164
ret