Function at 0x6b0ba8
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x14
push 0
push 0
dec ecx
jne 0x6b0bb0
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x24]
mov edx, dword [0x48de28]
call fcn.00406228
xor eax, eax
push ebp
push 0x6b2545
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
push ebp
push 0x6b0c21
push dword fs:[eax]
mov dword fs:[eax], esp
jmp 0x6b0c08
mov dword [ebp - 0x38], 0x3e8
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov dword [ebp - 0x38], 0x3e9
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test al, al
jne 0x6b0bef
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6b0c56
xor edx, edx
push ebp
push 0x6b1116
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x32c], 0
je 0x6b0c94
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x174]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x16c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x178]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x170], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x468]
mov ecx, 0x14
xor edx, edx
div ecx
mov ebx, eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x468], eax
mov edx, dword [ebp - 0x28]
mov eax, ebx
add dword [edx + 0x408], eax
mov edx, dword [ebp - 0x28]
add dword [edx + 0x40c], eax
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x378], 0
jne 0x6b1064
mov dword [ebp - 0x38], 0x7d3
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x16c], 0
jne 0x6b0efb
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x418], 0
jne 0x6b0d94
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x3b0], 0
je 0x6b0e3b
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x3b4]
mov edx, dword [0x7070f8]
cmp eax, dword [edx + 0x5f98]
jbe 0x6b0e3b
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x3b4], eax
mov dword [ebp - 0x38], 0x3ee
mov eax, dword [ebp - 0x28]
call fcn.006b0a14
mov dword [ebp - 0x38], 0x3ef
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x174]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x16c], eax
mov eax, dword [ebp - 0x28]
call fcn.006acab4
mov dword [ebp - 0x38], 0x3f0
push 1
mov edx, dword [0x707218]
mov edx, dword [edx]
mov cl, 1
mov eax, dword [ebp - 0x28]
call fcn.006a6c7c
jmp 0x6b0e3b
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x418], 0
je 0x6b0e3b
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x418]
cmp byte [eax + 0x3b1], 0
jne 0x6b0e3b
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x3b0], 0
je 0x6b0e3b
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x3b4]
mov edx, dword [0x7070f8]
cmp eax, dword [edx + 0x5f98]
jbe 0x6b0e3b
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x3b4], eax
mov dword [ebp - 0x38], 0x3ee
mov eax, dword [ebp - 0x28]
call fcn.006b0a14
mov dword [ebp - 0x38], 0x3ef
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x174]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x16c], eax
mov eax, dword [ebp - 0x28]
call fcn.006acab4
mov dword [ebp - 0x38], 0x3f0
push 1
mov edx, dword [0x707218]
mov edx, dword [edx]
mov cl, 1
mov eax, dword [ebp - 0x28]
call fcn.006a6c7c
mov dword [ebp - 0x38], 0x7d4
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x16c], 0
jne 0x6b1014
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x370], 0
jne 0x6b1014
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x2b6], 0
jne 0x6b0ebe
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x4aa0], 0
je 0x6b0ebe
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x4aa4], 0
je 0x6b0ebe
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x4aa8], 2
jne 0x6b0ebe
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x174]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x16c], eax
mov eax, dword [ebp - 0x28]
call fcn.006acab4
mov edx, 2
mov eax, dword [ebp - 0x28]
call fcn.00674f28
jmp 0x6b1014
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0xec], 0
je 0x6b0eee
mov eax, dword [0x7070f8]
movzx eax, byte [eax + 0x6514]
mov edx, dword [ebp - 0x28]
mov byte [edx + 0xbc1], al
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.006a5d9c
jmp 0x6b1014
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0x54]
jmp 0x6b1014
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x174]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x16c]
jbe 0x6b0f84
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x408]
mov edx, dword [0x7070f8]
cmp eax, dword [edx + 0x238]
jl 0x6b0f84
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x174]
mov ecx, 0x4b
xor edx, edx
div ecx
inc eax
mov edx, dword [ebp - 0x28]
mov edx, dword [edx + 0x174]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx + 0x16c]
add ecx, eax
cmp edx, ecx
jbe 0x6b0f5c
mov edx, dword [ebp - 0x28]
add dword [edx + 0x16c], eax
jmp 0x6b0f6e
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x174]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x16c], eax
mov dword [ebp - 0x38], 0x3ea
mov eax, dword [ebp - 0x28]
call fcn.006acab4
mov dword [ebp - 0x38], 0x3eb
mov dword [ebp - 0x38], 0x7d2
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x178]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x170]
jbe 0x6b1014
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x40c]
mov edx, dword [0x7070f8]
cmp eax, dword [edx + 0x23c]
jl 0x6b1014
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x178]
mov ecx, 0x12
xor edx, edx
div ecx
inc eax
mov edx, dword [ebp - 0x28]
mov edx, dword [edx + 0x178]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx + 0x170]
add ecx, eax
cmp edx, ecx
jbe 0x6b0fec
mov edx, dword [ebp - 0x28]
add dword [edx + 0x170], eax
jmp 0x6b0ffe
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x178]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x170], eax
mov dword [ebp - 0x38], 0x3ec
mov eax, dword [ebp - 0x28]
call fcn.006acab4
mov dword [ebp - 0x38], 0x3ed
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x408]
mov edx, dword [0x7070f8]
cmp eax, dword [edx + 0x238]
jl 0x6b1036
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x408], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x40c]
mov edx, dword [0x7070f8]
cmp eax, dword [edx + 0x23c]
jl 0x6b1058
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x40c], edx
mov dword [ebp - 0x38], 0x3f1
jmp 0x6b110c
mov dword [ebp - 0x38], 0x3f2
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x2b6], 0
jne 0x6b10e1
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x36c]
cmp byte [eax + 0xdd], 0
je 0x6b10bb
cmp dword [eax + 0xe0], 0
jbe 0x6b10bb
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x37c]
mov edx, dword [ebp - 0x28]
mov edx, dword [edx + 0x36c]
cmp eax, dword [edx + 0xe0]
jbe 0x6b1105
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0x50]
jmp 0x6b1105
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x37c]
mov edx, dword [0x7070f8]
cmp eax, dword [edx + 0x1ac8]
jbe 0x6b1105
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0x50]
jmp 0x6b1105
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x37c]
mov edx, dword [0x7070f8]
cmp eax, dword [edx + 0x1acc]
jbe 0x6b1105
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0x50]
mov dword [ebp - 0x38], 0x3f3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6b1183
xor edx, edx
push ebp
push 0x6b154b
push dword fs:[edx]
mov dword fs:[edx], esp
xor ebx, ebx
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x378], 0
jne 0x6b1541
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x2b6], 0
jne 0x6b1541
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x36c]
cmp byte [eax + 0xdc], 0
jne 0x6b1541
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0xd66], 2
je 0x6b1541
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0xfc], 0
jne 0x6b1375
mov eax, dword [ebp - 0x28]
cmp word [eax + 0xad3], 0
jbe 0x6b1375
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x108]
mov edx, dword [0x7070f8]
cmp eax, dword [edx + 0x60]
jbe 0x6b1375
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x16c]
mov dword [ebp - 0x74], eax
xor eax, eax
mov dword [ebp - 0x70], eax
fild qword [ebp - 0x74]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x174]
mov dword [ebp - 0x7c], eax
xor eax, eax
mov dword [ebp - 0x78], eax
fild qword [ebp - 0x7c]
fdivp st(1)
fmul dword [0x6b2560]
mov eax, dword [0x7070f8]
movzx eax, byte [eax + 0x5b]
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
fcompp
wait
fnstsw ax
sahf
jbe 0x6b1375
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x108], eax
mov eax, dword [ebp - 0x28]
movzx edx, word [eax + 0xad3]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e410
cmp byte [eax + 0x12], 5
jne 0x6b1375
movzx eax, byte [eax + 0x14]
sub al, 1
je 0x6b12a0
sub al, 2
jne 0x6b1375
mov eax, dword [ebp - 0x28]
movzx eax, word [eax + 0xadb]
mov esi, eax
add esi, esi
lea esi, [esi + esi*4]
mov dword [ebp - 0x80], esi
fild dword [ebp - 0x80]
mov eax, dword [0x7070f8]
movzx eax, byte [eax + 0x68]
mov dword [ebp - 0x84], eax
fild dword [ebp - 0x84]
fdivp st(1)
call fcn.004035c8
mov edx, dword [ebp - 0x28]
mov ebx, dword [edx + 0x174]
mov edx, dword [ebp - 0x28]
sub ebx, dword [edx + 0x16c]
cmp eax, ebx
jge 0x6b12eb
mov ebx, eax
cmp ebx, esi
jge 0x6b1315
mov eax, dword [ebp - 0x28]
add dword [eax + 0xfc], ebx
mov dword [ebp - 0x80], ebx
fild dword [ebp - 0x80]
fdiv dword [0x6b2564]
call fcn.004035bc
mov edx, dword [ebp - 0x28]
sub word [edx + 0xadb], ax
jmp 0x6b132c
xor esi, esi
mov eax, dword [ebp - 0x28]
add dword [eax + 0xfc], esi
mov eax, dword [ebp - 0x28]
mov word [eax + 0xadb], 0
mov eax, dword [ebp - 0x28]
cmp word [eax + 0xadb], 0x3e8
jb 0x6b133e
mov bl, 1
jmp 0x6b1375
xor ebx, ebx
mov eax, dword [ebp - 0x28]
mov word [eax + 0xadb], 0
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x2b6], 0
jne 0x6b1369
mov eax, dword [ebp - 0x28]
lea edx, [eax + 0xac0]
mov eax, dword [ebp - 0x28]
call fcn.006945b0
mov eax, dword [ebp - 0x28]
mov word [eax + 0xad3], 0
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x100], 0
jne 0x6b150f
mov eax, dword [ebp - 0x28]
cmp word [eax + 0xad3], 0
jbe 0x6b150f
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x10c]
mov edx, dword [0x7070f8]
cmp eax, dword [edx + 0x64]
jbe 0x6b150f
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x170]
mov dword [ebp - 0x74], eax
xor eax, eax
mov dword [ebp - 0x70], eax
fild qword [ebp - 0x74]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x178]
mov dword [ebp - 0x7c], eax
xor eax, eax
mov dword [ebp - 0x78], eax
fild qword [ebp - 0x7c]
fdivp st(1)
fmul dword [0x6b2560]
mov eax, dword [0x7070f8]
movzx eax, byte [eax + 0x5c]
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
fcompp
wait
fnstsw ax
sahf
jbe 0x6b150f
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x10c], eax
mov eax, dword [ebp - 0x28]
movzx edx, word [eax + 0xad3]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e410
cmp byte [eax + 0x12], 5
jne 0x6b150f
movzx eax, byte [eax + 0x14]
add al, 0xfe
sub al, 2
jae 0x6b150f
mov eax, dword [ebp - 0x28]
movzx eax, word [eax + 0xadb]
mov esi, eax
add esi, esi
lea esi, [esi + esi*4]
mov dword [ebp - 0x80], esi
fild dword [ebp - 0x80]
mov eax, dword [0x7070f8]
movzx eax, byte [eax + 0x69]
mov dword [ebp - 0x84], eax
fild dword [ebp - 0x84]
fdivp st(1)
call fcn.004035c8
mov edx, dword [ebp - 0x28]
mov ebx, dword [edx + 0x178]
mov edx, dword [ebp - 0x28]
sub ebx, dword [edx + 0x170]
cmp eax, ebx
jge 0x6b1485
mov ebx, eax
cmp ebx, esi
jge 0x6b14af
mov eax, dword [ebp - 0x28]
add dword [eax + 0x100], ebx
mov dword [ebp - 0x80], ebx
fild dword [ebp - 0x80]
fdiv dword [0x6b2564]
call fcn.004035bc
mov edx, dword [ebp - 0x28]
sub word [edx + 0xadb], ax
jmp 0x6b14c6
xor esi, esi
mov eax, dword [ebp - 0x28]
add dword [eax + 0x100], esi
mov eax, dword [ebp - 0x28]
mov word [eax + 0xadb], 0
mov eax, dword [ebp - 0x28]
cmp word [eax + 0xadb], 0x3e8
jb 0x6b14d8
mov bl, 1
jmp 0x6b150f
xor ebx, ebx
mov eax, dword [ebp - 0x28]
mov word [eax + 0xadb], 0
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x2b6], 0
jne 0x6b1503
mov eax, dword [ebp - 0x28]
lea edx, [eax + 0xac0]
mov eax, dword [ebp - 0x28]
call fcn.006945b0
mov eax, dword [ebp - 0x28]
mov word [eax + 0xad3], 0
test bl, bl
je 0x6b1541
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x2b6], 0
jne 0x6b1541
mov eax, dword [ebp - 0x28]
movzx eax, word [eax + 0xadd]
push eax
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax + 0xadb]
mov edx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.006a2f58
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6b1570
xor edx, edx
push ebp
push 0x6b1924
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x378], 0
jne 0x6b1872
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x100], 0
jg 0x6b15b6
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0xfc], 0
jg 0x6b15b6
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x104], 0
jbe 0x6b1872
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x34]
add eax, eax
lea eax, [eax + eax*4]
xor edx, edx
cmp edx, 0
jne 0x6b15d1
cmp eax, 0x190
jbe 0x6b15e3
jmp 0x6b15d3
jle 0x6b15e3
mov dword [ebp - 0x48], 0x190
mov dword [ebp - 0x44], 0
jmp 0x6b15f6
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x34]
add eax, eax
lea eax, [eax + eax*4]
xor edx, edx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x48]
mov ebx, 0x258
sub ebx, eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x2e0]
cmp ebx, eax
ja 0x6b1880
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x378], 0
jne 0x6b1880
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x2e0]
sub eax, ebx
xor edx, edx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0
jne 0x6b164f
cmp dword [ebp - 0x50], 0xc8
jbe 0x6b1661
jmp 0x6b1651
jle 0x6b1661
mov dword [ebp - 0x58], 0xc8
mov dword [ebp - 0x54], 0
jmp 0x6b166d
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x58]
mov ebx, eax
call sub.kernel32.dll_GetTickCount_1
add ebx, eax
mov eax, dword [ebp - 0x28]
mov dword [eax + 0x2e0], ebx
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x100], 0
jg 0x6b16aa
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0xfc], 0
jg 0x6b16aa
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x2d8], 0
jbe 0x6b1880
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x2d4], 0
jg 0x6b16c3
mov eax, dword [ebp - 0x28]
mov dword [eax + 0x2d4], 1
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x2dc], 0
jg 0x6b16dc
mov eax, dword [ebp - 0x28]
mov dword [eax + 0x2dc], 1
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x2d8], 0
ja 0x6b16f5
mov eax, dword [ebp - 0x28]
mov dword [eax + 0x2d8], 1
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2d4]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0xfc]
jle 0x6b1722
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xfc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0xfc], edx
jmp 0x6b1740
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2d4]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2d4]
mov edx, dword [ebp - 0x28]
sub dword [edx + 0xfc], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2dc]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x100]
jle 0x6b176d
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x100]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x100], edx
jmp 0x6b178b
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2dc]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2dc]
mov edx, dword [ebp - 0x28]
sub dword [edx + 0x100], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2d8]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x104]
jbe 0x6b17b8
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x104]
add dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x104], edx
jmp 0x6b17d6
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2d8]
add dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2d8]
mov edx, dword [ebp - 0x28]
sub dword [edx + 0x104], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x34]
mov ecx, 0xa
xor edx, edx
div ecx
add eax, 5
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x2d4], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x34]
mov ecx, 0xa
xor edx, edx
div ecx
add eax, 5
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x2dc], eax
mov eax, dword [ebp - 0x28]
mov dword [eax + 0x2d8], 5
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
call fcn.006b09bc
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x16c]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x174]
jne 0x6b1851
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0xfc], edx
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x104], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x170]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x178]
jne 0x6b1880
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x100], edx
jmp 0x6b1880
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x2e0], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x408]
mov edx, dword [0x7070f8]
mov edx, dword [edx + 0x238]
neg edx
cmp eax, edx
jge 0x6b18cc
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x16c], 1
jbe 0x6b18cc
mov eax, dword [ebp - 0x28]
dec dword [eax + 0x16c]
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0x238]
mov edx, dword [ebp - 0x28]
add dword [edx + 0x408], eax
mov eax, dword [ebp - 0x28]
call fcn.006acab4
xor ebx, ebx
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x174]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x16c]
jae 0x6b18ee
mov bl, 1
dec eax
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x16c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x178]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x170]
jae 0x6b190e
mov bl, 1
dec eax
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x170], eax
test bl, bl
je 0x6b191a
mov eax, dword [ebp - 0x28]
call fcn.006acab4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6b1949
xor eax, eax
push ebp
push 0x6b1cdb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x410], 0
je 0x6b19fd
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x414]
cmp eax, 0x7530
ja 0x6b19f2
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x410]
cmp byte [eax + 0x378], 0
jne 0x6b19f2
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x410]
cmp byte [eax + 0x370], 0
jne 0x6b19f2
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x410]
mov eax, dword [eax + 0x36c]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x36c]
jne 0x6b19f2
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x410]
mov eax, dword [eax + 0x24]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x24]
cdq
xor eax, edx
sub eax, edx
cmp eax, 0xf
jg 0x6b19f2
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x410]
mov eax, dword [eax + 0x28]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x28]
cdq
xor eax, edx
sub eax, edx
cmp eax, 0xf
jle 0x6b19fd
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x410], edx
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x418], 0
je 0x6b1a67
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x41c]
cmp eax, 0x7530
ja 0x6b1a5c
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x418]
cmp byte [eax + 0x378], 0
jne 0x6b1a5c
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x418]
cmp byte [eax + 0x370], 0
jne 0x6b1a5c
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x418]
mov eax, dword [eax + 0x36c]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x36c]
je 0x6b1a67
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x418], edx
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x420], 0
je 0x6b1ad1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x424]
cmp eax, 0x1770
ja 0x6b1ac6
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x420]
cmp byte [eax + 0x378], 0
jne 0x6b1ac6
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x420]
cmp byte [eax + 0x370], 0
jne 0x6b1ac6
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x420]
mov eax, dword [eax + 0x36c]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x36c]
je 0x6b1ad1
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x420], edx
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x304], 0
je 0x6b1b96
mov eax, dword [ebp - 0x28]
mov byte [eax + 0x330], 1
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x304]
cmp byte [eax + 0x378], 0
je 0x6b1b14
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x2b6], 0x1f
je 0x6b1b14
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x16c], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x304]
cmp byte [eax + 0x370], 0
je 0x6b1b96
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x2b6], 0x1f
jne 0x6b1b8e
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x304]
cmp byte [eax + 0x2b6], 0
jne 0x6b1b8e
mov ebx, dword [ebp - 0x28]
lea eax, [ebx + 0xd88]
mov edx, dword [ebx + 0x304]
add edx, 0x15
call fcn.00405744
call sub.kernel32.dll_GetTickCount_1
add eax, 0x493e0
mov dword [ebx + 0xd8c], eax
mov eax, dword [ebx + 0x304]
mov eax, dword [eax + 0x375c]
mov dword [ebx + 0xd90], eax
xor eax, eax
mov dword [ebx + 0x304], eax
mov eax, ebx
call fcn.006acd1c
jmp 0x6b1b96
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0x50]
mov dword [ebp - 0x38], 0xbc2
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x318]
mov esi, dword [eax + 8]
dec esi
cmp esi, 0
jl 0x6b1c2e
mov eax, dword [ebp - 0x28]
mov ebx, dword [eax + 0x318]
cmp dword [ebx + 8], 0
jle 0x6b1c2e
mov eax, ebx
mov edx, esi
call fcn.00420a68
test eax, eax
je 0x6b1c28
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x318]
mov edx, esi
call fcn.00420a68
cmp byte [eax + 0x378], 0
jne 0x6b1c18
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x318]
mov edx, esi
call fcn.00420a68
cmp byte [eax + 0x370], 0
jne 0x6b1c18
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x318]
mov edx, esi
call fcn.00420a68
mov eax, dword [eax + 0x304]
cmp eax, dword [ebp - 0x28]
je 0x6b1c28
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x318]
mov edx, esi
call fcn.0042090c
dec esi
cmp esi, 0xffffffff
jne 0x6b1baf
mov dword [ebp - 0x38], 0xbc3
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x340], 0
je 0x6b1c62
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x344]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x348]
jbe 0x6b1c62
mov eax, dword [ebp - 0x28]
call fcn.006a965c
mov dword [ebp - 0x38], 0xbc4
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x34c], 0
je 0x6b1c96
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x350]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x354]
jbe 0x6b1c96
mov eax, dword [ebp - 0x28]
call fcn.006a96b4
mov dword [ebp - 0x38], 0xbc5
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x358], 0
je 0x6b1cca
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x35c]
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x360]
jbe 0x6b1cca
mov eax, dword [ebp - 0x28]
call fcn.006b0930
mov dword [ebp - 0x38], 0xbc6
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6b1d21
xor edx, edx
push ebp
push 0x6b20b3
push dword fs:[edx]
mov dword fs:[edx], esp
mov dword [ebp - 0x38], 4
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x454]
mov edx, dword [0x7070f8]
cmp eax, dword [edx + 0x1978]
jbe 0x6b1d81
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x454], eax
mov eax, dword [ebp - 0x28]
cmp word [eax + 0xf8], 0
jbe 0x6b1d81
mov edx, dword [0x7070f8]
mov edx, dword [edx + 0x197c]
mov eax, dword [ebp - 0x28]
call fcn.006a22f8
mov dword [ebp - 0x38], 0x29
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x458]
mov ebx, dword [0x7070f8]
mov ebx, dword [ebx + 0x198c]
cmp eax, ebx
jbe 0x6b1dc8
mov eax, dword [0x7070f8]
mov eax, dword [ebp - 0x28]
add dword [eax + 0x458], ebx
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x2b6], 0
jne 0x6b1dc8
mov eax, dword [ebp - 0x28]
call fcn.006a2230
mov dword [ebp - 0x38], 0x2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x460]
cmp eax, 0x2710
jbe 0x6b2061
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x460], eax
mov dword [ebp - 0x38], 0x1ae
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x2b6], 0
jne 0x6b1f45
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x2f4], 0
je 0x6b1e62
mov dword [ebp - 0x38], 0x1af
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2f4]
cmp byte [eax + 0x370], 0
je 0x6b1e5b
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x2f4]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2f4]
call fcn.006a234c
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x2f4], edx
mov dword [ebp - 0x38], 0x1b0
mov dword [ebp - 0x38], 0x1b1
mov dword [ebp - 0x38], 0x2c
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2f4]
cmp eax, dword [ebp - 0x28]
jne 0x6b1f0b
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2f8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
cmp esi, 0
jl 0x6b1ee6
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2f8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x6b1ee6
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2f8]
mov edx, esi
mov ecx, dword [eax]
call dword [ecx + 0x18]
test eax, eax
je 0x6b1ee0
cmp byte [eax + 0x370], 0
jne 0x6b1ecb
mov edx, dword [eax + 0x2f4]
cmp edx, dword [ebp - 0x28]
je 0x6b1ee0
call fcn.006a96d0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x2f8]
mov edx, esi
mov ecx, dword [eax]
call dword [ecx + 0x48]
dec esi
cmp esi, 0xffffffff
jne 0x6b1e91
mov eax, dword [ebp - 0x28]
call fcn.00693624
test al, al
jne 0x6b1f0b
push 1
push 0
push 0
push 0
push 0
mov cx, 0x140a
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
call fcn.006a3c9c
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
call fcn.0068860c
mov dword [ebp - 0x38], 0x2d
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x3830]
test eax, eax
je 0x6b1f3e
cmp byte [eax + 0x370], 0
je 0x6b1f3e
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x3830], edx
mov dword [ebp - 0x38], 0x2e
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x304], 0
je 0x6b2061
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x707274]
cmp eax, dword [edx]
jae 0x6b1f7b
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x314], 5
jae 0x6b1f7b
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x308], edx
mov dword [ebp - 0x38], 0x1a7
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + 0x308]
jbe 0x6b202e
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x304]
mov eax, dword [eax + 0x318]
mov esi, dword [eax + 8]
dec esi
cmp esi, 0
jl 0x6b1ffd
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x304]
mov ebx, dword [eax + 0x318]
cmp dword [ebx + 8], 0
jle 0x6b1ffd
mov dword [ebp - 0x38], 0x1a8
mov eax, ebx
mov edx, esi
call fcn.00420a68
cmp eax, dword [ebp - 0x28]
jne 0x6b1ff7
mov dword [ebp - 0x38], 0x1a9
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x304]
mov eax, dword [eax + 0x318]
mov edx, esi
call fcn.0042090c
jmp 0x6b1ffd
dec esi
cmp esi, 0xffffffff
jne 0x6b1fae
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x304], edx
mov eax, dword [ebp - 0x28]
mov ecx, 0xa
add eax, 0x16c
push eax
mov eax, dword [eax]
xor edx, edx
div ecx
pop edx
mov dword [edx], eax
mov dword [ebp - 0x38], 0x1aa
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov dword [ebp - 0x38], 0x1ab
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x30c], 0
je 0x6b2061
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x30c]
cmp eax, 0xa4cb80
jbe 0x6b2061
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x16c], edx
mov dword [ebp - 0x38], 0x2b
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x45c]
cmp eax, 0x7530
jbe 0x6b20a9
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x45c], eax
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x28]
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x36c]
call fcn.006b651c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6b210f
xor edx, edx
push ebp
push 0x6b23ff
push dword fs:[edx]
mov dword fs:[edx], esp
mov byte [ebp - 0x29], 0
xor ebx, ebx
xor esi, esi
mov eax, dword [ebp - 0x28]
movzx eax, word [eax + esi*2 + 0x240]
test ax, ax
jbe case.0x6b2197.2
cmp ax, 0xea60
jae case.0x6b2197.2
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + esi*4 + 0x258]
cmp eax, 0x3e8
jbe case.0x6b2197.2
mov eax, dword [ebp - 0x28]
dec word [eax + esi*2 + 0x240]
mov eax, dword [ebp - 0x28]
add dword [eax + esi*4 + 0x258], 0x3e8
mov eax, dword [ebp - 0x28]
cmp word [eax + esi*2 + 0x240], 0
jne case.0x6b2197.2
mov byte [ebp - 0x29], 1
mov eax, esi
cmp eax, 0xb
ja case.0x6b2197.2
jmp dword [eax*4 + 0x6b219e]
mov eax, dword [ebp - 0x28]
mov byte [eax + 0x3a5], 0
xor ecx, ecx
mov edx, 5
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
jmp case.0x6b2197.2
mov bl, 1
push 1
mov cl, 1
mov edx, 0x6b2570
mov eax, dword [ebp - 0x28]
call fcn.006a6c7c
xor ecx, ecx
mov edx, 3
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
jmp case.0x6b2197.2
mov bl, 1
push 1
mov cl, 1
mov edx, 0x6b2588
mov eax, dword [ebp - 0x28]
call fcn.006a6c7c
xor ecx, ecx
mov edx, 9
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
jmp case.0x6b2197.2
mov eax, dword [ebp - 0x28]
mov byte [eax + 0x3f1], 0
jmp case.0x6b2197.2
mov eax, dword [ebp - 0x28]
mov byte [eax + 0x3f3], 0
jmp case.0x6b2197.2
xor ecx, ecx
mov edx, 0xc
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
jmp case.0x6b2197.2
xor ecx, ecx
mov edx, 0xb
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
jmp case.0x6b2197.2
xor ecx, ecx
mov edx, 6
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
jmp case.0x6b2197.2
xor ecx, ecx
mov edx, 0xd
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
inc esi
cmp esi, 0xc
jne 0x6b2125
xor esi, esi
mov eax, dword [ebp - 0x28]
cmp word [eax + esi*2 + 0x290], 0
jbe case.default.0x6b22db
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
cmp eax, dword [edx + esi*4 + 0x29c]
jbe case.default.0x6b22db
mov eax, dword [ebp - 0x28]
mov word [eax + esi*2 + 0x290], 0
mov bl, 1
mov eax, esi
cmp eax, 5
ja case.default.0x6b22db
jmp dword [eax*4 + 0x6b22e2]
push 1
mov cl, 1
mov edx, 0x6b25a0
mov eax, dword [ebp - 0x28]
call fcn.006a6c7c
xor ecx, ecx
mov edx, 4
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
jmp case.default.0x6b22db
push 1
mov cl, 1
mov edx, 0x6b25b8
mov eax, dword [ebp - 0x28]
call fcn.006a6c7c
xor ecx, ecx
mov edx, 7
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
jmp case.default.0x6b22db
push 1
mov cl, 1
mov edx, 0x6b25d0
mov eax, dword [ebp - 0x28]
call fcn.006a6c7c
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
jmp case.default.0x6b22db
push 1
mov cl, 1
mov edx, 0x6b25e8
mov eax, dword [ebp - 0x28]
call fcn.006a6c7c
jmp case.default.0x6b22db
push 1
mov cl, 1
mov edx, 0x6b2604
mov eax, dword [ebp - 0x28]
call fcn.006a6c7c
xor ecx, ecx
mov edx, 0xa
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
jmp case.default.0x6b22db
push 1
mov cl, 1
mov edx, 0x6b261c
mov eax, dword [ebp - 0x28]
call fcn.006a6c7c
xor ecx, ecx
mov edx, 8
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
inc esi
cmp esi, 6
jne 0x6b229a
cmp byte [ebp - 0x29], 0
je 0x6b23e1
mov eax, dword [ebp - 0x28]
call fcn.006a5aa4
mov edx, dword [ebp - 0x28]
mov dword [edx + 0xb0], eax
mov eax, dword [ebp - 0x28]
call fcn.006a5c98
test bl, bl
je 0x6b23f5
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0x5c]
mov eax, dword [ebp - 0x28]
call fcn.006a92bc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6b2424
xor eax, eax
push ebp
push 0x6b24bd
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0x450]
mov edx, dword [0x7070f8]
cmp eax, dword [edx + 0x6478]
jbe 0x6b24b3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x450], eax
mov eax, dword [ebp - 0x28]
cmp word [eax + 0x240], 0
jbe 0x6b24b3
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x32f], 0
je 0x6b2482
mov eax, dword [ebp - 0x28]
sub dword [eax + 0x338], 0x3e8
mov eax, dword [ebp - 0x28]
movzx edx, byte [eax + 0x2e4]
inc edx
mov eax, dword [ebp - 0x28]
call fcn.006ad3f0
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x408], edx
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x40c], edx
mov eax, dword [ebp - 0x28]
call fcn.006acab4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6b24e2
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xd5c]
test eax, eax
je 0x6b24f7
mov edx, dword [ebp - 0x28]
mov edx, dword [edx + 0x24]
mov dword [eax], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xd60]
test eax, eax
je 0x6b250c
mov edx, dword [ebp - 0x28]
mov edx, dword [edx + 0x28]
mov dword [eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6b254c
lea eax, [ebp - 0xa4]
mov edx, 8
call fcn.004054f4
lea eax, [ebp - 0x6c]
mov edx, 5
call fcn.004054f4
lea eax, [ebp - 0x24]
mov edx, dword [0x48de28]
call fcn.004062f8
ret