Function at 0x6d3200
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x7823e7
mov eax, dword fs:[0]
push eax
sub esp, 0x268
push ebx
push esi
push edi
mov eax, dword [0x867e6c]
xor eax, esp
push eax
lea eax, [esp + 0x278]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x30], esi
mov ebx, 7
lea edi, [esi + 0x1d4]
xor eax, eax
mov ecx, edi
mov edx, dword [ecx]
test edx, edx
je 0x6d325a
cmp dword [edx + 0x230], 0
jg 0x6d4404
inc eax
add ecx, 4
cmp eax, 8
jl 0x6d3247
dec ebx
sub edi, 0x20
test ebx, ebx
jge 0x6d3243
jmp 0x6d3270
lea ecx, [esp + 0x134]
lea eax, [esi + 0x1f4]
mov byte [esp + 0x2f], 0
mov dword [esp + 0x38], ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0xa4], 8
xor dl, dl
mov byte [esp + 0x37], dl
mov dword [ecx], 8
mov dword [esp + 0x3c], 7
mov edi, eax
jmp 0x6d32b4
mov dl, byte [esp + 0x37]
mov ebx, dword [edi - 0x20]
test ebx, ebx
je 0x6d3339
mov eax, dword [ebx + 0xc]
cmp eax, dword [ecx]
jge 0x6d32c4
mov dword [ecx], eax
test dl, dl
je 0x6d3348
mov esi, dword [esp + 0x30]
push 0
call fcn.0071a7f0
test al, al
jne 0x6d32e1
cmp dword [ebx + 0x24], 6
jne 0x6d32f2
mov ecx, dword [esp + 0x38]
mov dword [edi], 0
mov byte [esp + 0x37], 0
jmp 0x6d3348
fldz
mov ecx, 1
fcomp dword [ebx + 0x1c]
mov byte [esp + 0x2f], cl
fnstsw ax
test ah, 0x44
jp 0x6d3327
mov eax, dword [esp + 0x78]
fld dword [eax]
mov edx, esi
fadd qword [0x7a8008]
fadd dword [ebx + 0x1c]
fstp dword [ebx + 0x1c]
mov eax, dword [edx + 0x3190]
mov dword [ebx + 0x218], eax
add dword [ebx + 0xc], ecx
mov ecx, dword [esp + 0x38]
mov dword [edi - 0x20], 0
mov dword [edi], ebx
jmp 0x6d3348
test dl, dl
je 0x6d3343
mov dword [edi], 0
mov byte [esp + 0x37], 1
mov eax, dword [esp + 0x3c]
dec eax
sub edi, 0x20
mov dword [esp + 0x3c], eax
test eax, eax
jge 0x6d32b0
mov eax, dword [esp + 0x78]
mov dword [eax + 0x20], 0xffffffff
add ecx, 4
add eax, 4
sub dword [esp + 0xa4], 1
mov dword [esp + 0x38], ecx
mov dword [esp + 0x78], eax
jne 0x6d3295
cmp byte [esp + 0x2f], 0
jne 0x6d3270
mov edx, 0x3d
xor edi, edi
xor eax, eax
cmp eax, 7
mov ecx, eax
jl 0x6d33a3
mov ecx, 7
add ecx, edx
cmp eax, 8
mov ecx, dword [esi + ecx*4]
jge 0x6d33be
cmp ecx, edi
je 0x6d33bb
cmp dword [ecx + 0x24], 6
je 0x6d4404
inc eax
jmp 0x6d3397
add edx, 8
cmp edx, 0x7d
jl 0x6d3395
push esi
call fcn.00719790
test al, al
jne 0x6d4404
push 4
call fcn.006442a0
add esp, 4
cmp eax, edi
je 0x6d33ea
lea edx, [esp + 0x40]
mov dword [eax], edx
jmp 0x6d33ec
xor eax, eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], edi
xor ebx, ebx
mov dword [esp + 0x280], 1
lea edx, [ebx + 0x3d]
lea esp, [esp]
xor eax, eax
cmp eax, 7
mov ecx, eax
jl 0x6d341e
mov ecx, 7
add ecx, edx
cmp eax, 8
mov ecx, dword [esi + ecx*4]
jge 0x6d3430
cmp ecx, edi
jne 0x6d342d
inc ebx
inc eax
jmp 0x6d3412
add edx, 8
cmp edx, 0x7d
jl 0x6d3410
mov eax, dword [esi + 0x323c]
cmp eax, ebx
mov dword [esp + 0xd4], ebx
jge 0x6d3451
mov edi, eax
mov dword [esp + 0x38], edi
jmp 0x6d3457
mov dword [esp + 0x38], ebx
mov edi, ebx
add dword [esi + 0x3248], edi
sub eax, ebx
add eax, 0x40
mov dword [esp + 0x74], eax
fild dword [esp + 0x74]
fld qword [0x82dd50]
fcom st(1)
fnstsw ax
test ah, 5
jp 0x6d347d
fstp st(1)
jmp 0x6d347f
fstp st(0)
sub esp, 8
fstp qword [esp]
lea eax, [esi + 0x32e8]
push 0
mov dword [esp + 0xb8], eax
call fcn.00436320
test edi, edi
jle 0x6d355f
mov esi, edi
push 0x630
call fcn.006442a0
add esp, 4
mov dword [esp + 0x94], eax
mov byte [esp + 0x280], 2
test eax, eax
je 0x6d34cf
mov ebx, dword [esp + 0x30]
push eax
call fcn.006fd5b0
jmp 0x6d34d1
xor eax, eax
mov ecx, dword [esp + 0x30]
mov byte [esp + 0x280], 1
mov edx, dword [ecx + 0x3190]
mov dword [eax + 0x18], edx
mov ecx, dword [ecx + 0x3190]
mov dword [eax + 0x218], ecx
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x74], eax
test edi, edi
jne 0x6d3502
xor edx, edx
jmp 0x6d350b
mov edx, dword [esp + 0x54]
sub edx, edi
sar edx, 2
mov ecx, dword [esp + 0x50]
mov ebx, ecx
sub ebx, edi
sar ebx, 2
cmp ebx, edx
jae 0x6d3525
mov dword [ecx], eax
lea eax, [ecx + 4]
mov dword [esp + 0x50], eax
jmp 0x6d3550
mov ebx, ecx
cmp edi, ecx
jbe 0x6d3530
call fcn.006441b7
mov eax, dword [esp + 0x40]
push ebx
push eax
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0x50]
call fcn.004024a0
mov eax, dword [esp + 0x50]
sub esi, 1
jne 0x6d34a3
mov esi, dword [esp + 0x30]
jmp 0x6d3563
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x4c]
sub eax, ecx
sar eax, 2
test eax, eax
jbe 0x6d43dc
mov edx, dword [esi]
mov edx, dword [edx + 0x2d8]
lea eax, [esp + 0x40]
push eax
mov ecx, esi
call edx
mov byte [esp + 0x2f], al
lea eax, [esp + 0xb4]
lea ecx, [esi + 0x105c]
push eax
call fcn.004064a0
mov byte [esp + 0x280], 3
cmp byte [esi + 0x1040], 0
je 0x6d3648
mov ebx, dword [esp + 0x30]
xor esi, esi
cmp dword [ebx + 0x11b4], esi
jle 0x6d3648
mov eax, dword [esp + 0xc4]
add ebx, 0x1198
mov edx, dword [esp + 0xc0]
test edx, edx
jne 0x6d35df
xor ecx, ecx
jmp 0x6d35eb
mov ecx, dword [esp + 0xc8]
sub ecx, edx
sar ecx, 2
mov edi, eax
sub edi, edx
sar edi, 2
cmp edi, ecx
jae 0x6d3606
mov ecx, dword [ebx]
mov dword [eax], ecx
add eax, 4
mov dword [esp + 0xc4], eax
jmp 0x6d3636
mov edi, eax
cmp edx, eax
jbe 0x6d3611
call fcn.006441b7
mov eax, dword [esp + 0xb4]
push edi
push eax
push ebx
lea edx, [esp + 0xa0]
push edx
lea eax, [esp + 0xc4]
call fcn.004024a0
mov eax, dword [esp + 0xc4]
mov ecx, dword [esp + 0x30]
inc esi
add ebx, 4
cmp esi, dword [ecx + 0x11b4]
jl 0x6d35d0
jmp 0x6d364f
mov eax, dword [esp + 0xc4]
mov edi, dword [esp + 0x30]
mov edx, dword [edi + 0x1054]
sub edx, dword [edi + 0x1050]
xor esi, esi
test edx, 0xfffffffc
jle 0x6d3717
mov ecx, dword [edi + 0x1054]
sub ecx, dword [edi + 0x1050]
sar ecx, 2
cmp esi, ecx
jb 0x6d368c
call fcn.006441b7
mov eax, dword [esp + 0xc4]
mov edx, dword [edi + 0x1050]
lea ebx, [edx + esi*4]
mov edx, dword [esp + 0xc0]
test edx, edx
jne 0x6d36a4
xor ecx, ecx
jmp 0x6d36b0
mov ecx, dword [esp + 0xc8]
sub ecx, edx
sar ecx, 2
mov edi, eax
sub edi, edx
sar edi, 2
cmp edi, ecx
jae 0x6d36cb
mov ecx, dword [ebx]
mov dword [eax], ecx
add eax, 4
mov dword [esp + 0xc4], eax
jmp 0x6d36fb
mov edi, eax
cmp edx, eax
jbe 0x6d36d6
call fcn.006441b7
mov eax, dword [esp + 0xb4]
push edi
push eax
push ebx
lea edx, [esp + 0xa0]
push edx
lea eax, [esp + 0xc4]
call fcn.004024a0
mov eax, dword [esp + 0xc4]
mov edi, dword [esp + 0x30]
mov ecx, dword [edi + 0x1054]
sub ecx, dword [edi + 0x1050]
inc esi
sar ecx, 2
cmp esi, ecx
jl 0x6d366d
mov dword [esp + 0x3c], 0
mov eax, dword [esp + 0x50]
sub eax, dword [esp + 0x4c]
mov ebx, dword [esp + 0x30]
xor esi, esi
sar eax, 2
xor edi, edi
cmp eax, esi
jle 0x6d37ee
cmp edi, eax
jb 0x6d3743
call fcn.006441b7
mov edx, dword [esp + 0x4c]
mov eax, dword [edx + edi*4]
mov dword [eax + 0x228], esi
mov eax, dword [esp + 0x50]
sub eax, dword [esp + 0x4c]
sar eax, 2
cmp edi, eax
jb 0x6d3764
call fcn.006441b7
mov ecx, dword [esp + 0x4c]
mov edx, dword [ecx + edi*4]
mov dword [edx + 0x220], 0xffffffff
mov eax, dword [esp + 0x50]
sub eax, dword [esp + 0x4c]
sar eax, 2
cmp edi, eax
jb 0x6d3789
call fcn.006441b7
mov ecx, dword [esp + 0x4c]
mov edx, dword [ecx + edi*4]
mov byte [edx + 0x182], 1
mov eax, dword [esp + 0x50]
sub eax, dword [esp + 0x4c]
sar eax, 2
cmp edi, eax
jb 0x6d37ab
call fcn.006441b7
mov ecx, dword [esp + 0x4c]
mov edx, dword [ecx + edi*4]
mov byte [edx + 0x17e], 1
mov eax, dword [esp + 0x50]
sub eax, dword [esp + 0x4c]
sar eax, 2
cmp edi, eax
jb 0x6d37cd
call fcn.006441b7
mov ecx, dword [esp + 0x4c]
mov edx, dword [ecx + edi*4]
mov dword [edx + 0x244], esi
mov eax, dword [esp + 0x50]
sub eax, dword [esp + 0x4c]
inc edi
sar eax, 2
cmp edi, eax
jl 0x6d373c
cmp byte [esp + 0x2f], 0
je 0x6d3806
mov eax, dword [ebx]
mov edx, dword [eax + 0x2dc]
lea ecx, [esp + 0x40]
push ecx
mov ecx, ebx
call edx
mov ecx, 8
lea esi, [esp + 0x134]
lea edi, [esp + 0x104]
push 4
rep movsd dword es:[edi], dword [esi]
call fcn.006442a0
xor esi, esi
add esp, 4
cmp eax, esi
je 0x6d3833
lea ecx, [esp + 0x7c]
mov dword [eax], ecx
jmp 0x6d3835
xor eax, eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], esi
mov byte [esp + 0x280], 5
mov eax, dword [esp + 0x50]
sub eax, dword [esp + 0x4c]
mov dword [esp + 0xa4], esi
sar eax, 2
cmp eax, esi
jle 0x6d3e70
jmp 0x6d3879
mov esi, dword [esp + 0xa4]
cmp esi, eax
jb 0x6d3882
call fcn.006441b7
mov edx, dword [esp + 0x4c]
mov ebx, dword [edx + esi*4]
cmp dword [ebx + 0x228], 0
mov dword [esp + 0x94], ebx
jne 0x6d38d6
mov esi, dword [esp + 0xc4]
sub esi, dword [esp + 0xc0]
mov edx, dword [esp + 0x30]
sar esi, 2
add edx, 0x254
mov eax, esi
call fcn.005814f0
mov edi, eax
cmp edi, esi
jb 0x6d38c6
call fcn.006441b7
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + edi*4]
mov dword [ebx + 0x220], ecx
push 4
call fcn.006442a0
add esp, 4
test eax, eax
je 0x6d38ec
lea edx, [esp + 0x58]
mov dword [eax], edx
jmp 0x6d38ee
xor eax, eax
mov dword [esp + 0x58], eax
xor edi, edi
mov dword [esp + 0x64], edi
mov dword [esp + 0x68], edi
mov dword [esp + 0x6c], edi
mov byte [esp + 0x280], 7
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x88]
mov eax, ebx
sub eax, esi
test eax, 0xfffffffc
jne 0x6d39a7
mov dword [esp + 0xa0], edi
lea esp, [esp]
test esi, esi
jne 0x6d3938
xor eax, eax
jmp 0x6d3944
mov eax, dword [esp + 0x90]
sub eax, esi
sar eax, 2
mov ecx, ebx
sub ecx, esi
sar ecx, 2
cmp ecx, eax
jae 0x6d395d
mov dword [ebx], edi
add ebx, 4
mov dword [esp + 0x8c], ebx
jmp 0x6d398f
cmp esi, ebx
jbe 0x6d3966
call fcn.006441b7
mov eax, dword [esp + 0x7c]
push ebx
push eax
lea edx, [esp + 0xa8]
push edx
lea eax, [esp + 0x138]
push eax
lea eax, [esp + 0x8c]
call fcn.004024a0
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x88]
inc edi
cmp edi, 8
mov dword [esp + 0xa0], edi
jl 0x6d3930
mov edi, dword [esp + 0x68]
mov eax, ebx
sub eax, esi
sar eax, 2
mov dword [esp + 0x78], 0
test eax, eax
jle 0x6d3b08
mov edi, edi
cmp dword [esp + 0x78], eax
jb 0x6d39dd
call fcn.006441b7
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x68]
mov ecx, dword [esp + 0x78]
mov eax, dword [esi + ecx*4]
fild dword [esp + eax*4 + 0x104]
mov dword [esp + 0x74], eax
mov dword [esp + 0xa0], 0
fstp dword [esp + 0xcc]
fld dword [esp + 0xcc]
fstp dword [esp + 0xa8]
fld dword [esp + 0xa8]
fld qword [0x82dda8]
call fcn.0076ff50
fstp dword [esp + 0xa8]
fld dword [esp + 0xa8]
fcomp qword [0x82dc20]
fnstsw ax
test ah, 0x41
jne 0x6d3af0
fld dword [esp + 0xcc]
fstp dword [esp + 0xa8]
fld dword [esp + 0xa8]
fld qword [0x82dda8]
call fcn.0076ff50
fstp dword [esp + 0xcc]
mov esi, dword [esp + 0x74]
jmp 0x6d3a70
mov ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x6c]
test ecx, ecx
jne 0x6d3a80
xor eax, eax
jmp 0x6d3a85
sub eax, ecx
sar eax, 2
mov edx, edi
sub edx, ecx
sar edx, 2
cmp edx, eax
jae 0x6d3a9b
mov dword [edi], esi
add edi, 4
mov dword [esp + 0x68], edi
jmp 0x6d3ac4
cmp ecx, edi
jbe 0x6d3aa4
call fcn.006441b7
mov eax, dword [esp + 0x58]
push edi
push eax
lea ecx, [esp + 0x7c]
push ecx
lea edx, [esp + 0x160]
push edx
lea eax, [esp + 0x68]
call fcn.004024a0
mov edi, dword [esp + 0x68]
inc dword [esp + 0xa0]
fild dword [esp + 0xa0]
fld dword [esp + 0xcc]
fcompp
fnstsw ax
test ah, 0x41
je 0x6d3a70
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x88]
mov ecx, dword [esp + 0x78]
mov eax, ebx
sub eax, esi
inc ecx
sar eax, 2
cmp ecx, eax
mov dword [esp + 0x78], ecx
jl 0x6d39c0
mov eax, dword [esp + 0x64]
sub edi, eax
sar edi, 2
test edi, edi
jne 0x6d3ba9
mov ecx, ebx
sub ecx, esi
and ecx, 0xfffffffc
cmp ecx, 0x20
je 0x6d3c0c
mov dword [esp + 0x74], ebx
cmp esi, ebx
jbe 0x6d3b44
call fcn.006441b7
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x7c]
cmp esi, ebx
jbe 0x6d3b51
call fcn.006441b7
mov edx, dword [esp + 0x74]
mov eax, dword [esp + 0x7c]
push edx
push edi
push esi
push eax
lea ebx, [esp + 0x134]
lea esi, [esp + 0x8c]
call fcn.0042d120
mov byte [esp + 0x280], 5
mov eax, dword [esp + 0x64]
xor esi, esi
cmp eax, esi
je 0x6d3b8b
push eax
call fcn.006441c7
add esp, 4
mov ecx, dword [esp + 0x58]
push ecx
mov dword [esp + 0x68], esi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], esi
call fcn.006441c7
add esp, 4
jmp 0x6d38d6
mov ebx, dword [esp + 0x30]
lea edx, [ebx + 0x254]
call fcn.005813d0
xor edx, edx
div edi
mov esi, edx
cmp esi, edi
jb 0x6d3bc7
call fcn.006441b7
mov ecx, dword [esp + 0x64]
mov eax, dword [ecx + esi*4]
xor esi, esi
cmp dword [esp + eax*4 + 0x104], esi
jg 0x6d3c3d
mov byte [esp + 0x280], 5
cmp ecx, esi
je 0x6d3bee
push ecx
call fcn.006441c7
add esp, 4
mov edx, dword [esp + 0x58]
push edx
mov dword [esp + 0x68], esi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], esi
call fcn.006441c7
add esp, 4
jmp 0x6d38d6
mov byte [esp + 0x280], 5
test eax, eax
je 0x6d3c25
mov eax, dword [esp + 0x64]
push eax
call fcn.006441c7
add esp, 4
mov ecx, dword [esp + 0x58]
xor eax, eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
push ecx
jmp 0x6d3e46
mov ecx, dword [esp + eax*4 + 0x134]
fld dword [ebx + eax*4 + 0x1f4]
cmp ecx, 8
mov edi, dword [ebx + eax*4 + 0x214]
jge 0x6d3c6c
lea edx, [eax + ecx*8]
fstp st(0)
mov edx, dword [ebx + edx*4 + 0xf4]
mov edi, dword [edx + 0x188]
fld dword [edx + 0x1c]
mov esi, dword [esp + 0x94]
mov edx, dword [esp + eax*4 + 0x104]
dec edx
sub ecx, edx
mov dword [esp + 0x94], ecx
fild dword [esp + 0x94]
mov ecx, eax
shl ecx, 7
fmul qword [0x82ea30]
mov dword [esp + 0x94], ecx
mov dword [esi + 8], eax
mov dword [esi + 0xc], edx
fsubp st(1)
mov dword [esp + eax*4 + 0x104], edx
mov dword [esi + 0x188], edi
fstp dword [esi + 0x1c]
fild dword [esp + 0x94]
fstp dword [esi + 0x10]
cmp edx, 7
je 0x6d3ce5
lea edx, [eax + edx*8]
cmp dword [ebx + edx*4 + 0x114], 0
lea eax, [ebx + edx*4 + 0x114]
je 0x6d3ce5
mov eax, dword [eax]
fld dword [eax + 0x14]
fsub qword [0x82dd88]
jmp 0x6d3ceb
fld dword [0x82ea2c]
fstp dword [esi + 0x14]
lea edx, [ebx + 0x254]
fld dword [esi + 0x14]
call fcn.005813d0
xor edx, edx
mov ecx, 0x14
div ecx
add edx, 0xa
mov dword [esp + 0x94], edx
fild dword [esp + 0x94]
test edx, edx
jge 0x6d3d20
fadd dword [0x82dc74]
mov eax, dword [esi + 8]
fsubp st(1)
mov edx, dword [esi + 0xc]
lea ecx, [eax + edx*8]
fstp dword [esi + 0x14]
mov dword [ebx + ecx*4 + 0xf4], esi
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x88]
sub eax, ecx
sar eax, 2
xor edi, edi
test eax, eax
jle 0x6d3e1a
cmp edi, eax
jb 0x6d3d62
call fcn.006441b7
mov ecx, dword [esp + 0x88]
mov edx, dword [ecx + edi*4]
cmp edx, dword [esi + 8]
je 0x6d3d80
mov eax, dword [esp + 0x8c]
sub eax, ecx
inc edi
sar eax, 2
cmp edi, eax
jl 0x6d3d54
jmp 0x6d3e1a
mov ebx, ecx
cmp ecx, dword [esp + 0x8c]
jbe 0x6d3d97
call fcn.006441b7
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x7c]
mov esi, eax
test eax, eax
jne 0x6d3dbf
call fcn.006441b7
mov ecx, dword [esp + 0x88]
xor eax, eax
lea edi, [ebx + edi*4]
cmp edi, dword [eax + 0x10]
ja 0x6d3dca
test esi, esi
je 0x6d3dc3
mov eax, dword [esi]
jmp 0x6d3dc5
mov eax, dword [eax]
jmp 0x6d3daf
xor eax, eax
cmp edi, dword [eax + 0xc]
jae 0x6d3dd6
call fcn.006441b7
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x8c]
lea edx, [edi + 4]
sub eax, edx
sar eax, 2
test eax, eax
jle 0x6d3e00
add eax, eax
add eax, eax
push eax
push edx
push eax
push edi
call fcn.00643dc7
mov ecx, dword [esp + 0x98]
add esp, 0x10
sub dword [esp + 0x8c], 4
cmp ecx, edi
ja 0x6d3e15
cmp edi, dword [esp + 0x8c]
jbe 0x6d3e1a
call fcn.006441b7
mov byte [esp + 0x280], 5
mov eax, dword [esp + 0x64]
xor esi, esi
cmp eax, esi
je 0x6d3e35
push eax
call fcn.006441c7
add esp, 4
mov eax, dword [esp + 0x58]
mov dword [esp + 0x64], esi
mov dword [esp + 0x68], esi
mov dword [esp + 0x6c], esi
push eax
call fcn.006441c7
mov eax, dword [esp + 0x54]
sub eax, dword [esp + 0x50]
mov ecx, dword [esp + 0xa8]
inc ecx
sar eax, 2
add esp, 4
cmp ecx, eax
mov dword [esp + 0xa4], ecx
jl 0x6d3872
fild dword [esp + 0x3c]
mov ecx, dword [esp + 0xac]
fstp qword [esp + 0x94]
call fcn.00436230
fcomp qword [esp + 0x94]
fnstsw ax
test ah, 0x41
jne 0x6d3ea0
cmp dword [esp + 0x38], 0xa
jge 0x6d3ea0
mov al, 1
jmp 0x6d3ea2
xor al, al
mov edi, dword [esp + 0x30]
push eax
xor esi, esi
push esi
push esi
push esi
push esi
mov eax, edi
call fcn.0073aca0
cmp byte [ebp + 8], 0
mov bl, al
jne 0x6d3ec9
push edi
call fcn.00719790
test al, al
sete cl
and bl, cl
mov edx, dword [edi]
mov eax, dword [edx + 0x31c]
mov ecx, edi
call eax
test al, al
sete cl
and bl, cl
jne 0x6d4043
mov eax, dword [esp + 0x3c]
inc eax
mov dword [esp + 0x3c], eax
cmp eax, 0x1f4
jne 0x6d3fb9
mov edx, dword [esp + 0x50]
sub edx, dword [esp + 0x4c]
sar edx, 2
cmp edx, dword [esp + 0xd4]
jge 0x6d4066
push 0x630
call fcn.006442a0
add esp, 4
mov dword [esp + 0x94], eax
mov byte [esp + 0x280], 8
cmp eax, esi
je 0x6d3f38
push eax
mov ebx, edi
call fcn.006fd5b0
jmp 0x6d3f3a
xor eax, eax
mov byte [esp + 0x280], 5
mov ecx, dword [edi + 0x3190]
mov dword [eax + 0x18], ecx
mov edx, dword [edi + 0x3190]
mov dword [eax + 0x218], edx
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x94], eax
test esi, esi
jne 0x6d3f6a
xor edx, edx
jmp 0x6d3f73
mov edx, dword [esp + 0x54]
sub edx, esi
sar edx, 2
mov ecx, dword [esp + 0x50]
mov ebx, ecx
sub ebx, esi
sar ebx, 2
cmp ebx, edx
jae 0x6d3f8d
mov dword [ecx], eax
add ecx, 4
mov dword [esp + 0x50], ecx
jmp 0x6d3fb7
mov ebx, ecx
cmp esi, ecx
jbe 0x6d3f98
call fcn.006441b7
mov eax, dword [esp + 0x40]
push ebx
push eax
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0x104]
push ecx
lea eax, [esp + 0x50]
call fcn.004024a0
xor esi, esi
mov ebx, 0x3d
mov edi, edi
xor edx, edx
cmp edx, 7
mov eax, edx
jl 0x6d3fce
mov eax, 7
add eax, ebx
cmp edx, 8
mov eax, dword [edi + eax*4]
jge 0x6d3ff8
cmp eax, esi
je 0x6d3ff5
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
cmp eax, dword [esp + ecx*4 + 0x134]
jge 0x6d3ff5
lea eax, [ecx + eax*8]
mov dword [edi + eax*4 + 0xf4], esi
inc edx
jmp 0x6d3fc2
add ebx, 8
cmp ebx, 0x7d
jl 0x6d3fc0
mov byte [esp + 0x280], 3
mov eax, dword [esp + 0x88]
cmp eax, esi
je 0x6d401c
push eax
call fcn.006441c7
add esp, 4
mov ecx, dword [esp + 0x7c]
push ecx
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], esi
call fcn.006441c7
add esp, 4
jmp 0x6d371f
mov byte [esp + 0x280], 3
mov eax, dword [esp + 0x88]
cmp eax, esi
je 0x6d405f
push eax
call fcn.006441c7
add esp, 4
mov edx, dword [esp + 0x7c]
push edx
jmp 0x6d4087
mov byte [esp + 0x280], 3
mov eax, dword [esp + 0x88]
cmp eax, esi
je 0x6d4082
push eax
call fcn.006441c7
add esp, 4
mov eax, dword [esp + 0x7c]
push eax
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], esi
call fcn.006441c7
mov ecx, dword [esp + 0x3c]
sub dword [edi + 0x323c], ecx
add esp, 4
lea edx, [esp + 0xd8]
push edx
call fcn.00427590
mov byte [esp + 0x280], 9
mov eax, dword [esp + 0x50]
sub eax, dword [esp + 0x4c]
sar eax, 2
cmp eax, 0x10
jae 0x6d432c
mov dword [esp + 0x38], 0
test eax, eax
jle 0x6d413c
cmp dword [esp + 0x38], eax
jb 0x6d40ee
call fcn.006441b7
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x38]
mov eax, dword [ecx + eax*4]
mov edx, dword [eax + 8]
mov dword [esp + 0xb0], eax
lea ebx, [esp + 0xac]
lea esi, [esp + 0xf8]
lea eax, [esp + 0xd8]
mov dword [esp + 0xac], edx
call fcn.00418740
mov eax, dword [esp + 0x50]
sub eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x38]
inc ecx
sar eax, 2
cmp ecx, eax
mov dword [esp + 0x38], ecx
jl 0x6d40e3
mov eax, dword [esp + 0xf0]
mov ebx, dword [eax]
mov esi, dword [esp + 0xd8]
mov dword [esp + 0x3c], 0
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xac], esi
jmp 0x6d4170
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0x98], ecx
test esi, esi
je 0x6d418b
cmp esi, dword [esp + 0xd8]
je 0x6d4190
call fcn.006441b7
cmp ebx, dword [esp + 0x98]
je 0x6d432c
test esi, esi
jne 0x6d4325
call fcn.006441b7
cmp ebx, dword [esi + 0x18]
jne 0x6d41b4
call fcn.006441b7
mov esi, dword [ebx + 0x10]
push 0x27
push str.b0.25_1_0.05_1_____:_____g
lea ecx, [esp + 0x60]
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
call fcn.004016e0
push 0
lea edx, [esp + 0x5c]
push edx
lea eax, [esi + 0x20]
mov byte [esp + 0x288], 0xa
call fcn.00435cc0
mov byte [esp + 0x280], 9
cmp dword [esp + 0x70], 0x10
jb 0x6d420f
mov eax, dword [esp + 0x5c]
push eax
call fcn.006441c7
add esp, 4
lea ecx, [esp + 0x164]
call fcn.00434f60
lea ecx, [esp + 0x1d4]
call fcn.00434f60
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x3c]
push 0x1f
mov dword [esp + 0x164], ecx
xor ebx, ebx
push 0x7b11d8
lea ecx, [esp + 0x60]
mov dword [esp + 0x164], edx
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], ebx
mov byte [esp + 0x64], bl
call fcn.004016e0
push ebx
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x16c]
mov byte [esp + 0x288], 0xb
call fcn.00435cc0
mov esi, 0x10
mov byte [esp + 0x280], 9
cmp dword [esp + 0x70], esi
jb 0x6d4298
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.006441c7
add esp, 4
push 0x24
push str.b0_1_0.05_1___________E
lea ecx, [esp + 0x60]
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], ebx
mov byte [esp + 0x64], 0
call fcn.004016e0
push ebx
lea edx, [esp + 0x5c]
push edx
lea eax, [esp + 0x1dc]
mov byte [esp + 0x288], 0xc
call fcn.00435cc0
mov byte [esp + 0x280], 9
cmp dword [esp + 0x70], esi
jb 0x6d42ee
mov eax, dword [esp + 0x5c]
push eax
call fcn.006441c7
add esp, 4
lea ecx, [esp + 0x15c]
push ecx
lea edx, [edi + 0x325c]
push edx
call fcn.0041f420
lea esi, [esp + 0xac]
call fcn.00417f50
inc dword [esp + 0x3c]
mov ebx, dword [esp + 0xb0]
mov esi, dword [esp + 0xac]
jmp 0x6d4170
mov esi, dword [esi]
jmp 0x6d41aa
push 0x24
xor ebx, ebx
push str.b0_1_0.01_1_______j___7
lea ecx, [esp + 0x60]
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], ebx
mov byte [esp + 0x64], bl
call fcn.004016e0
push ebx
lea eax, [esp + 0x5c]
push eax
lea eax, [edi + 0x3278]
mov byte [esp + 0x288], 0xd
call fcn.00435cc0
cmp dword [esp + 0x70], 0x10
jb 0x6d437b
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.006441c7
add esp, 4
lea esi, [esp + 0xd8]
mov byte [esp + 0x280], 0xe
call fcn.00427610
mov edx, dword [esp + 0xd8]
push edx
call fcn.006441c7
mov eax, dword [esp + 0xc4]
add esp, 4
cmp eax, ebx
je 0x6d43b3
push eax
call fcn.006441c7
add esp, 4
mov eax, dword [esp + 0xb4]
push eax
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ebx
call fcn.006441c7
mov ecx, dword [esp + 0x50]
add esp, 4
xor esi, esi
cmp ecx, esi
je 0x6d43eb
push ecx
call fcn.006441c7
add esp, 4
mov ecx, dword [esp + 0x40]
push ecx
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
call fcn.006441c7
add esp, 4
mov ecx, dword [esp + 0x278]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4