Function at 0x6faaa4
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x268
push 0
push 0
dec ecx
jne 0x6faaac
push ebx
push esi
push edi
mov dword [ebp - 0x498], edx
mov dword [ebp - 0x494], eax
mov ecx, 0x19
lea eax, [ebp - 0xa0]
mov edx, dword [0x4012c8]
call fcn.0040bf84
mov ecx, 0x19
lea eax, [ebp - 0x104]
mov edx, dword [0x4012c8]
call fcn.0040bf84
mov ecx, 0x19
lea eax, [ebp - 0x168]
mov edx, dword [0x4012c8]
call fcn.0040bf84
mov ecx, 0x65
lea eax, [ebp - 0x2fc]
mov edx, dword [0x4012c8]
call fcn.0040bf84
mov ecx, 0x65
lea eax, [ebp - 0x490]
mov edx, dword [0x4012c8]
call fcn.0040bf84
xor eax, eax
push ebp
push 0x6fbed8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x494]
cmp dword [eax + 0x788], 1
je 0x6fbe40
mov eax, dword [ebp - 0x494]
mov edx, dword [eax + 0x764]
lea eax, [ebp - 0x1288]
mov ecx, 0x6fbef8
call fcn.0040ba84
mov eax, dword [ebp - 0x1288]
mov dl, 1
call fcn.00427aa0
test al, al
jne 0x6fab85
push 0
call sub.KERNEL32.DLL_ExitProcess
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x484]
mov edx, dword [eax]
call dword [edx + 0x140]
cmp al, 1
jne 0x6fabc0
mov eax, dword [ebp - 0x494]
cmp dword [eax + 0x888], 1
je 0x6fbe40
mov eax, dword [ebp - 0x494]
mov dword [eax + 0x888], 1
mov eax, dword [ebp - 0x494]
inc dword [eax + 0x71c]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x484]
mov edx, dword [eax]
call dword [edx + 0x140]
test al, al
jne 0x6fb7db
jmp 0x6fabf4
mov eax, 0x12c
call fcn.006b723c
lea edx, [ebp - 0x128c]
mov eax, 0x6fbf2c
call fcn.00430e78
lea eax, [ebp - 0x128c]
mov edx, 0x6fbf44
call fcn.0040ba2c
mov eax, dword [ebp - 0x128c]
call fcn.006d1440
test al, al
jne 0x6fabea
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x424]
mov edx, dword [eax]
call dword [edx + 0x140]
test al, al
jne 0x6facc6
jmp 0x6fac4b
mov eax, 0x12c
call fcn.006b723c
lea edx, [ebp - 0x1290]
mov eax, 0x6fbf2c
call fcn.00430e78
lea eax, [ebp - 0x1290]
mov edx, 0x6fbf74
call fcn.0040ba2c
mov eax, dword [ebp - 0x1290]
call fcn.006d1440
test al, al
jne 0x6fac41
push 0x6fbfa4
mov eax, dword [ebp - 0x494]
push dword [eax + 0x764]
push 0x6fbfcc
lea edx, [ebp - 0x1298]
mov eax, 0x6fbf2c
call fcn.00430e78
push dword [ebp - 0x1298]
push 0x6fc024
lea eax, [ebp - 0x1294]
mov edx, 5
call fcn.0040bb0c
mov eax, dword [ebp - 0x1294]
call fcn.006b97bc
push 0
push 0x6fc058
mov eax, dword [ebp - 0x494]
push dword [eax + 0x764]
push 0x6fc094
lea edx, [ebp - 0x12a0]
mov eax, 0x6fbf2c
call fcn.00430e78
push dword [ebp - 0x12a0]
push 0x6fc100
lea eax, [ebp - 0x129c]
mov edx, 5
call fcn.0040bb0c
mov edx, dword [ebp - 0x129c]
xor ecx, ecx
mov eax, 0x6fc134
call fcn.006b98c4
jmp 0x6fad27
mov eax, 0x12c
call fcn.006b723c
lea edx, [ebp - 0x12a4]
mov eax, 0x6fbf2c
call fcn.00430e78
lea eax, [ebp - 0x12a4]
mov edx, 0x6fbf44
call fcn.0040ba2c
mov eax, dword [ebp - 0x12a4]
call fcn.006d1440
test al, al
jne 0x6fad1d
lea edx, [ebp - 0x12a8]
mov eax, 0x6fbf2c
call fcn.00430e78
lea eax, [ebp - 0x12a8]
mov edx, 0x6fbf44
call fcn.0040ba2c
mov eax, dword [ebp - 0x12a8]
mov dl, 1
call fcn.00427aa0
test al, al
je 0x6fb00b
lea edx, [ebp - 0x12b0]
mov eax, 0x6fbf2c
call fcn.00430e78
lea eax, [ebp - 0x12b0]
mov edx, 0x6fbf44
call fcn.0040ba2c
mov edx, dword [ebp - 0x12b0]
lea eax, [ebp - 0x12ac]
call fcn.0040b924
mov eax, dword [ebp - 0x12ac]
call fcn.006d2210
cmp edx, 0
jne 0x6fadcf
cmp eax, 0
je 0x6fb00b
call fcn.006d18cc
lea edx, [ebp - 0x12b4]
mov eax, 0x6fbf2c
call fcn.00430e78
lea eax, [ebp - 0x12b4]
mov edx, 0x6fbf44
call fcn.0040ba2c
mov ecx, dword [ebp - 0x12b4]
mov dl, 1
mov eax, dword [0x51fd28]
call fcn.00520438
mov dword [ebp - 0x4e8], eax
push 0
lea eax, [ebp - 0x12b8]
push eax
mov ecx, 0x6fc150
mov edx, 0x6fc17c
mov eax, dword [ebp - 0x4e8]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x12b8], 0
je 0x6fae6d
push 0
lea eax, [ebp - 0x12bc]
push eax
mov ecx, 0x6fc150
mov edx, 0x6fc17c
mov eax, dword [ebp - 0x4e8]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x12bc]
mov edx, 0x6fc198
call fcn.0040bbbc
jne 0x6fb076
push 0
lea eax, [ebp - 0x12c0]
push eax
mov ecx, 0x6fc1a8
mov edx, 0x6fc17c
mov eax, dword [ebp - 0x4e8]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x12c0], 0
jne 0x6fb076
lea edx, [ebp - 0x12c4]
mov eax, 0x6fbf2c
call fcn.00430e78
lea eax, [ebp - 0x12c4]
mov edx, 0x6fc1d4
call fcn.0040ba2c
mov edx, dword [ebp - 0x12c4]
xor ecx, ecx
lea eax, [ebp - 0xf54]
call fcn.00407e24
call fcn.00407088
lea eax, [ebp - 0xf54]
call fcn.00407a68
call fcn.00407088
xor esi, esi
lea ecx, [ebp - 0x12c8]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x894]
mov edx, esi
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12c8]
lea eax, [ebp - 0xf54]
call fcn.00408694
call fcn.004088a0
call fcn.00407088
inc esi
cmp esi, 0x58
jne 0x6faee2
lea eax, [ebp - 0xf54]
call fcn.00407fc4
call fcn.00407088
lea edx, [ebp - 0x12cc]
mov eax, 0x6fbf2c
call fcn.00430e78
lea eax, [ebp - 0x12cc]
mov edx, 0x6fc1d4
call fcn.0040ba2c
mov ecx, dword [ebp - 0x12cc]
mov dl, 1
mov eax, dword [0x51fd28]
call fcn.00520438
mov dword [ebp - 0x4e8], eax
push 0
lea eax, [ebp - 0x12d0]
push eax
mov ecx, 0x6fc150
mov edx, 0x6fc17c
mov eax, dword [ebp - 0x4e8]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x12d0], 0
je 0x6fafbf
push 0
lea eax, [ebp - 0x12d4]
push eax
mov ecx, 0x6fc150
mov edx, 0x6fc17c
mov eax, dword [ebp - 0x4e8]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x12d4]
mov edx, 0x6fc198
call fcn.0040bbbc
jne 0x6fb076
push 0
lea eax, [ebp - 0x12d8]
push eax
mov ecx, 0x6fc1a8
mov edx, 0x6fc17c
mov eax, dword [ebp - 0x4e8]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x12d8], 0
jne 0x6fb076
push 0x10
push 0x6fc1fc
push 0x6fc224
mov eax, dword [0x726208]
call fcn.00565b00
push eax
call sub.user32.dll_MessageBoxW
jmp 0x6fbe40
push 0x10
push 0x6fc1fc
push 0x6fc260
mov eax, dword [0x726208]
call fcn.00565b00
push eax
call sub.user32.dll_MessageBoxW
push 0
call sub.KERNEL32.DLL_ExitProcess
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x40c]
mov edx, 0x6fc2a8
call fcn.0055c02c
mov edx, dword [0x726208]
mov edx, dword [edx + 0x58]
sar edx, 1
jns 0x6fb054
adc edx, 0
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x40c]
mov ecx, dword [eax + 0x58]
sar ecx, 1
jns 0x6fb06a
adc ecx, 0
sub edx, ecx
call fcn.0055b468
jmp 0x6fbe40
xor eax, eax
mov dword [ebp - 0x4d0], eax
call sub.KERNEL32.DLL_GetLogicalDrives
mov ebx, eax
lea eax, [ebp - 4]
mov edx, 0x6fc2c8
call fcn.0040b104
lea eax, [ebp - 0x20]
call fcn.0040acdc
xor esi, esi
lea eax, [ebp - 4]
call fcn.0040b268
mov edx, esi
add dx, 0x41
mov word [eax], dx
mov ecx, esi
mov eax, 1
shl eax, cl
test eax, ebx
jbe 0x6fb225
mov eax, dword [ebp - 4]
cmp word [eax], 0x41
je 0x6fb225
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x424]
mov edx, dword [eax]
call dword [edx + 0x140]
cmp al, 1
jne 0x6fb140
mov eax, dword [ebp - 4]
call fcn.0040b81c
push eax
call sub.KERNEL32.DLL_GetDriveTypeW
cmp eax, 3
je 0x6fb120
mov eax, dword [ebp - 4]
call fcn.0040b81c
push eax
call sub.KERNEL32.DLL_GetDriveTypeW
cmp eax, 2
jne 0x6fb225
mov eax, dword [ebp - 4]
movzx eax, word [eax]
call fcn.006b8f9c
cmp al, 1
jne 0x6fb225
mov eax, dword [ebp - 0x4d0]
lea eax, [ebp + eax*4 - 0xa0]
mov edx, dword [ebp - 4]
call fcn.0040b104
inc dword [ebp - 0x4d0]
jmp 0x6fb225
mov eax, dword [ebp - 4]
call fcn.0040b81c
push eax
call sub.KERNEL32.DLL_GetDriveTypeW
cmp eax, 2
je 0x6fb1c6
mov eax, dword [ebp - 4]
call fcn.006d1704
cmp al, 1
je 0x6fb1c6
mov eax, dword [ebp - 4]
movzx eax, word [eax]
call fcn.006b7154
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x12e0]
call fcn.00426f44
mov ecx, dword [ebp - 0x12e0]
lea eax, [ebp - 0x12dc]
mov edx, 0x6fc2dc
call fcn.0040ba84
mov eax, dword [ebp - 0x12dc]
mov ecx, 1
mov edx, dword [ebp - 0x20]
call fcn.0040bd50
test eax, eax
jg 0x6fb1c6
lea edx, [ebp - 0x12e4]
mov eax, dword [ebp - 4]
call fcn.006d1a5c
mov eax, dword [ebp - 0x12e4]
mov edx, 0x6fc2ec
call fcn.0040bbbc
jne 0x6fb225
mov eax, dword [ebp - 4]
movzx eax, word [eax]
call fcn.006b8f9c
cmp al, 1
jne 0x6fb225
push dword [ebp - 0x20]
push 0x6fc2dc
mov eax, dword [ebp - 4]
movzx eax, word [eax]
call fcn.006b7154
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x12e8]
call fcn.00426f44
push dword [ebp - 0x12e8]
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.0040bb0c
mov eax, dword [ebp - 0x4d0]
lea eax, [ebp + eax*4 - 0xa0]
mov edx, dword [ebp - 4]
call fcn.0040b104
inc dword [ebp - 0x4d0]
inc esi
cmp esi, 0x1a
jne 0x6fb09c
xor esi, esi
lea ebx, [ebp - 0xa0]
cmp dword [ebx], 0
je 0x6fb2c4
lea eax, [ebp - 8]
mov edx, dword [ebx]
call fcn.0040b104
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
movzx edx, word [edx]
call fcn.0040b840
mov eax, dword [ebp - 8]
movzx eax, word [eax]
call fcn.006b7154
cmp eax, 0x3e8
je 0x6fb2b7
mov eax, dword [ebp - 8]
movzx eax, word [eax]
call fcn.006b7154
push dword [ebp + eax*4 - 0x104]
push 0x6fc31c
lea eax, [ebp - 0x12ec]
mov edx, dword [ebp - 8]
movzx edi, word [edx]
mov edx, edi
call fcn.0040b840
push dword [ebp - 0x12ec]
push 0x6fc32c
mov eax, edi
call fcn.006b7154
lea eax, [ebp + eax*4 - 0x104]
mov edx, 4
call fcn.0040bb0c
inc esi
add ebx, 4
cmp esi, 0x19
jne 0x6fb237
xor eax, eax
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
mov edx, dword [eax]
call dword [edx + 0x48]
xor eax, eax
mov dword [ebp - 0x4d0], eax
lea ebx, [ebp - 0x104]
lea esi, [ebp - 0x168]
cmp dword [ebx], 0
je 0x6fb7b2
mov eax, dword [ebp - 0x494]
mov edx, dword [ebp - 0x4d4]
mov ecx, dword [ebp - 0x4d0]
mov dword [eax + edx*4 + 0x578], ecx
push 0
lea eax, [ebp - 0x12f0]
push eax
push 0x6fc33c
mov eax, dword [ebp - 0x494]
mov edx, dword [ebp - 0x4d4]
mov eax, dword [eax + edx*4 + 0x578]
lea edx, [ebp - 0x12f8]
call fcn.00426f1c
push dword [ebp - 0x12f8]
push 0x6fc35c
lea eax, [ebp - 0x12f4]
mov edx, 3
call fcn.0040bb0c
mov ecx, dword [ebp - 0x12f4]
mov edx, 0x6fc17c
mov eax, dword [ebp - 0x4e8]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, dword [ebp - 0x12f0]
mov eax, esi
call fcn.0040b0bc
cmp dword [esi], 0
jne 0x6fb394
mov eax, esi
mov edx, 0x6fc374
call fcn.0040b0bc
push 0
lea eax, [ebp - 0x12fc]
push eax
push 0x6fc33c
mov eax, dword [ebp - 0x494]
mov edx, dword [ebp - 0x4d4]
mov eax, dword [eax + edx*4 + 0x578]
lea edx, [ebp - 0x1304]
call fcn.00426f1c
push dword [ebp - 0x1304]
push 0x6fc390
lea eax, [ebp - 0x1300]
mov edx, 3
call fcn.0040bb0c
mov ecx, dword [ebp - 0x1300]
mov edx, 0x6fc17c
mov eax, dword [ebp - 0x4e8]
mov edi, dword [eax]
call dword [edi + 8]
cmp dword [ebp - 0x12fc], 0
je 0x6fb7b2
push 0
lea eax, [ebp - 0x1308]
push eax
push 0x6fc33c
mov eax, dword [ebp - 0x494]
mov edx, dword [ebp - 0x4d4]
mov eax, dword [eax + edx*4 + 0x578]
lea edx, [ebp - 0x1310]
call fcn.00426f1c
push dword [ebp - 0x1310]
push 0x6fc390
lea eax, [ebp - 0x130c]
mov edx, 3
call fcn.0040bb0c
mov ecx, dword [ebp - 0x130c]
mov edx, 0x6fc17c
mov eax, dword [ebp - 0x4e8]
mov edi, dword [eax]
call dword [edi + 8]
mov eax, dword [ebp - 0x1308]
mov edx, 0x6fc198
call fcn.0040bbbc
je 0x6fb7b2
mov eax, dword [ebp - 0x494]
mov edx, dword [ebp - 0x4d4]
lea eax, [eax + edx*4 + 0x510]
mov edx, dword [ebx]
call fcn.0040b0bc
push 0
lea eax, [ebp - 0x1314]
push eax
push 0x6fc33c
mov eax, dword [ebp - 0x494]
mov edx, dword [ebp - 0x4d4]
mov eax, dword [eax + edx*4 + 0x578]
lea edx, [ebp - 0x131c]
call fcn.00426f1c
push dword [ebp - 0x131c]
push 0x6fc390
lea eax, [ebp - 0x1318]
mov edx, 3
call fcn.0040bb0c
mov ecx, dword [ebp - 0x1318]
mov edx, 0x6fc17c
mov eax, dword [ebp - 0x4e8]
mov edi, dword [eax]
call dword [edi + 8]
mov eax, dword [ebp - 0x1314]
call fcn.00427328
mov ecx, dword [ebp - 0x494]
mov edi, dword [ebp - 0x4d4]
mov ecx, dword [ecx + edi*4 + 0x578]
mov edi, dword [ebp - 0x494]
mov dword [edi + ecx*8 + 0x5e0], eax
mov dword [edi + ecx*8 + 0x5e4], edx
mov eax, dword [ebx]
test eax, eax
je 0x6fb525
sub eax, 4
mov eax, dword [eax]
cmp eax, 6
jge 0x6fb663
movzx eax, byte [ebp - 0x4d0]
call fcn.006d1ce4
cmp edx, 0
jne 0x6fb542
cmp eax, 0
je 0x6fb5db
movzx eax, byte [ebp - 0x4d0]
call fcn.006d1ce4
mov dword [ebp - 0x1324], eax
mov dword [ebp - 0x1320], edx
fild qword [ebp - 0x1324]
fdiv dword [0x6fc39c]
fstp xword [ebp - 0x500]
wait
movzx eax, word [ebp - 0x4f8]
push eax
push dword [ebp - 0x4fc]
push dword [ebp - 0x500]
lea ecx, [ebp - 0x28]
mov edx, dword [0x71df24]
mov eax, 0x6fc198
call fcn.0042a2d4
push 0
mov eax, dword [ebp - 0x494]
mov edx, dword [ebp - 0x4d4]
mov eax, dword [eax + edx*4 + 0x578]
push dword [ebp + eax*4 - 0x168]
push 0x6fc3ac
push dword [ebp - 0x28]
push 0x6fc3c0
push dword [ebx]
push 0x6fc3d8
mov eax, ebx
mov edx, 7
call fcn.0040bb0c
jmp 0x6fb793
mov eax, dword [ebp - 0x494]
mov edx, dword [ebp - 0x4d0]
fild qword [eax + edx*8 + 0x5e0]
fdiv dword [0x6fc39c]
fstp xword [ebp - 0x510]
wait
movzx eax, word [ebp - 0x508]
push eax
push dword [ebp - 0x50c]
push dword [ebp - 0x510]
lea ecx, [ebp - 0x2c]
mov edx, dword [0x71df24]
mov eax, 0x6fc198
call fcn.0042a2d4
push 0
mov eax, dword [ebp - 0x494]
mov edx, dword [ebp - 0x4d4]
mov eax, dword [eax + edx*4 + 0x578]
push dword [ebp + eax*4 - 0x168]
push 0x6fc3ac
push dword [ebp - 0x2c]
push 0x6fc3c0
push dword [ebx]
push 0x6fc3d8
mov eax, ebx
mov edx, 7
call fcn.0040bb0c
jmp 0x6fb793
movzx eax, byte [ebp - 0x4d0]
call fcn.006d1ce4
cmp edx, 0
jne 0x6fb677
cmp eax, 0
je 0x6fb710
movzx eax, byte [ebp - 0x4d0]
call fcn.006d1ce4
mov dword [ebp - 0x1324], eax
mov dword [ebp - 0x1320], edx
fild qword [ebp - 0x1324]
fdiv dword [0x6fc39c]
fstp xword [ebp - 0x520]
wait
movzx eax, word [ebp - 0x518]
push eax
push dword [ebp - 0x51c]
push dword [ebp - 0x520]
lea ecx, [ebp - 0x30]
mov edx, dword [0x71df24]
mov eax, 0x6fc198
call fcn.0042a2d4
push 0
mov eax, dword [ebp - 0x494]
mov edx, dword [ebp - 0x4d4]
mov eax, dword [eax + edx*4 + 0x578]
push dword [ebp + eax*4 - 0x168]
push 0x6fc3ac
push dword [ebp - 0x30]
push 0x6fc3c0
push dword [ebx]
push 0x6fc3d8
mov eax, ebx
mov edx, 7
call fcn.0040bb0c
jmp 0x6fb793
mov eax, dword [ebp - 0x494]
mov edx, dword [ebp - 0x4d0]
fild qword [eax + edx*8 + 0x5e0]
fdiv dword [0x6fc39c]
fstp xword [ebp - 0x530]
wait
movzx eax, word [ebp - 0x528]
push eax
push dword [ebp - 0x52c]
push dword [ebp - 0x530]
lea ecx, [ebp - 0x34]
mov edx, dword [0x71df24]
mov eax, 0x6fc198
call fcn.0042a2d4
push 0
mov eax, dword [ebp - 0x494]
mov edx, dword [ebp - 0x4d4]
mov eax, dword [eax + edx*4 + 0x578]
push dword [ebp + eax*4 - 0x168]
push 0x6fc3ac
push dword [ebp - 0x34]
push 0x6fc3c0
push dword [ebx]
push 0x6fc3d8
mov eax, ebx
mov edx, 7
call fcn.0040bb0c
mov edx, dword [ebx]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc dword [ebp - 0x4d4]
inc dword [ebp - 0x4d0]
add esi, 4
add ebx, 4
cmp dword [ebp - 0x4d0], 0x19
jne 0x6fb2f7
mov eax, dword [ebp - 0x4e8]
call fcn.00408f08
jmp 0x6fbac2
xor eax, eax
push ebp
push 0x6fb82d
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
call sub.ole32.dll_CoInitialize
xor eax, eax
push ebp
push 0x6fb81c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x494]
call fcn.006b74fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6fb823
call sub.ole32.dll_CoUninitialize
ret
lea ecx, [ebp - 0x1328]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1328]
mov edx, 0x6fc484
call fcn.0040bbbc
je 0x6fbb1b
lea ecx, [ebp - 0x132c]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x132c], 0
jne 0x6fbb6a
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
mov ecx, 0x6fc4c8
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x3fc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x94]
jmp 0x6fbb80
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x3fc]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x94]
lea ecx, [ebp - 0x1330]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1330]
mov edx, 0x6fc484
call fcn.0040bbbc
je 0x6fbbd9
lea ecx, [ebp - 0x1334]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x1334], 0
jne 0x6fbc2b
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
mov ecx, 0x6fc4c8
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x3fc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x94]
jmp 0x6fbcf8
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x3fc]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x94]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x6fbcf8
inc ebx
xor esi, esi
mov eax, dword [0x726208]
mov eax, dword [eax + 0x898]
cmp eax, 0x3e7
je 0x6fbcb0
mov edx, dword [ebp - 0x494]
cmp eax, dword [edx + esi*4 + 0x578]
jne 0x6fbcb0
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov edx, esi
mov ecx, dword [eax]
call dword [ecx + 0x144]
mov eax, dword [ebp - 0x494]
xor edx, edx
mov dword [eax + 0x888], edx
jmp 0x6fbe40
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp esi, eax
jne 0x6fbcf0
mov eax, dword [ebp - 0x494]
mov edi, dword [eax + 0x41c]
mov eax, dword [edi + 0x2e4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
mov eax, edi
mov ecx, dword [eax]
call dword [ecx + 0x144]
inc esi
dec ebx
jne 0x6fbc66
lea ecx, [ebp - 0x1338]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1338]
mov edx, 0x6fc4c8
call fcn.0040bbbc
je 0x6fbdf0
lea ecx, [ebp - 0x133c]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x133c], 0
je 0x6fbdf0
lea ecx, [ebp - 0x1340]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1340]
mov edx, 0x6fc484
call fcn.0040bbbc
je 0x6fbdf0
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x3fc]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x94]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x424]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x94]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x424]
mov edx, 0x6fc514
call fcn.0055c02c
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x428]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x94]
mov eax, dword [0x71de00]
mov eax, dword [eax]
call fcn.0062bd30
jmp 0x6fbe32
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x424]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x94]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x424]
mov edx, 0x6fc514
call fcn.0055c02c
mov eax, dword [ebp - 0x494]
mov eax, dword [eax + 0x3fc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x94]
mov eax, dword [ebp - 0x494]
xor edx, edx
mov dword [eax + 0x888], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6fbee2
lea eax, [ebp - 0x1340]
mov edx, 7
call fcn.0040ad3c
lea eax, [ebp - 0x131c]
mov edx, 0x1c
call fcn.0040ad3c
lea eax, [ebp - 0x12ac]
call fcn.0040ad24
lea eax, [ebp - 0x12a8]
mov edx, 9
call fcn.0040ad3c
lea eax, [ebp - 0x490]
mov ecx, 0x65
mov edx, dword [0x4012c8]
call fcn.0040c438
lea eax, [ebp - 0x2fc]
mov ecx, 0x65
mov edx, dword [0x4012c8]
call fcn.0040c438
lea eax, [ebp - 0x168]
mov ecx, 0x4b
mov edx, dword [0x4012c8]
call fcn.0040c438
lea eax, [ebp - 0x3c]
mov edx, 0xf
call fcn.0040ad3c
ret