Function at 0x6c4664
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x5d
push 0
push 0
dec ecx
jne 0x6c466d
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x14], ecx
mov esi, edx
mov ebx, eax
lea eax, [ebp - 0x10]
mov edx, dword [0x695aec]
call fcn.004081c4
xor eax, eax
push ebp
push 0x6c7943
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x15], 1
mov eax, esi
and eax, 0xff
cmp eax, 0x3f
jne 0x6c46b7
mov eax, esi
shr eax, 8
and eax, 7
jmp 0x6c46bc
mov eax, esi
and eax, 7
cmp eax, 7
ja case.default.0x6c46c5
jmp dword [eax*4 + 0x6c46cc]
cmp esi, 0x32703f
jg 0x6c4747
je 0x6c4a75
cmp esi, 0x3470
jg 0x6c472e
je 0x6c4e26
sub esi, 0x70
je 0x6c47fa
sub esi, 0x3200
je 0x6c4984
sub esi, 0x100
je 0x6c4b9a
jmp 0x6c5350
sub esi, 0x703f
je 0x6c48a1
sub esi, 0x331
je 0x6c4797
jmp 0x6c5350
cmp esi, 0x73703f
jg 0x6c477a
je 0x6c47cb
sub esi, 0x33703f
je 0x6c4cda
sub esi, 0x10000
je 0x6c5021
sub esi, 0x350231
je 0x6c52f8
jmp 0x6c5350
sub esi, 0x6972703f
je 0x6c5329
sub esi, 0xaf6f800
je 0x6c51f4
jmp 0x6c5350
lea ecx, [ebp - 0x40]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x40]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
fild dword [ebp - 0xc]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov eax, dword [ebp + 0xc]
call fcn.005ad42c
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
fild dword [eax + 0xb48]
call fcn.00404a9c
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x44]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x44]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x48]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x48]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x4c]
mov edx, 3
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov esi, dword [ebp - 0xc]
lea ecx, [ebp - 0x50]
mov edx, 4
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x50]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
push esi
push 0x64
push 0x64
push 0
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ad53c
jmp 0x6c78ff
lea ecx, [ebp - 0x54]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x54]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x58]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x58]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x5c]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x5c], 0
jne 0x6c4904
mov dword [ebp - 0x1c], 0xffffffff
lea ecx, [ebp - 0x60]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x60], 0
jne 0x6c4921
mov dword [ebp - 0x20], 0xffffffff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ac860
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp + 0xc]
call fcn.005ac924
push eax
mov ecx, 1
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
call fcn.005ac9e8
push eax
mov ecx, 2
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x64]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x64]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x68]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x68]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x6c]
mov edx, 3
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov esi, dword [ebp - 0xc]
lea ecx, [ebp - 0x70]
mov edx, 4
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x70]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x74]
mov edx, 5
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x74]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x78]
mov edx, 6
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x78]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2c], eax
push esi
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 0
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ad53c
jmp 0x6c78ff
lea ecx, [ebp - 0x7c]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x7c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x80]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x80]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x84]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x84], 0
jne 0x6c4ade
mov dword [ebp - 0x1c], 0xffffffff
lea ecx, [ebp - 0x88]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x88], 0
jne 0x6c4b01
mov dword [ebp - 0x20], 0xffffffff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ac860
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp + 0xc]
call fcn.005ac924
push eax
mov ecx, 1
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
call fcn.005ac9e8
push eax
mov ecx, 2
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc91]
push eax
mov ecx, 3
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc9d]
push eax
mov ecx, 4
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x8c]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x8c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x90]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x90]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x94]
mov edx, 3
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x94]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov esi, dword [ebp - 0xc]
lea ecx, [ebp - 0x98]
mov edx, 4
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x98]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x9c]
mov edx, 5
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x9c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0xa0]
mov edx, 6
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xa0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xa4]
mov edx, 7
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xa4]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
push esi
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ad53c
jmp 0x6c78ff
lea ecx, [ebp - 0xa8]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0xa8]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0xac]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0xac]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0xb0]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0xb0], 0
jne 0x6c4d4f
mov dword [ebp - 0x1c], 0xffffffff
lea ecx, [ebp - 0xb4]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0xb4], 0
jne 0x6c4d72
mov dword [ebp - 0x20], 0xffffffff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ac860
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp + 0xc]
call fcn.005ac924
push eax
mov ecx, 1
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
call fcn.005ac9e8
push eax
mov ecx, 2
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc91]
push eax
mov ecx, 3
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc9d]
push eax
mov ecx, 4
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc61]
push eax
mov ecx, 5
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
mov edx, 0xc
mov eax, dword [ebp - 0x14]
call fcn.00698e18
lea ecx, [ebp - 0xb8]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0xb8]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0xbc]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0xbc]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0xc0]
mov edx, 3
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0xc0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov esi, dword [ebp - 0xc]
lea ecx, [ebp - 0xc4]
mov edx, 4
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xc4]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0xc8]
mov edx, 5
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xc8]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0xcc]
mov edx, 6
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xcc]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xd0]
mov edx, 7
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xd0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0xd4]
mov edx, 8
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0xd8]
mov edx, 9
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xd8]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0xdc]
mov edx, 0xa
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xdc]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0xe0]
mov edx, 0xb
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
push esi
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ab504
jmp 0x6c78ff
lea ecx, [ebp - 0xe4]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0xe4]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0xe8]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0xe8]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0xec]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0xec], 0
jne 0x6c5096
mov dword [ebp - 0x1c], 0xffffffff
lea ecx, [ebp - 0xf0]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0xf0], 0
jne 0x6c50b9
mov dword [ebp - 0x20], 0xffffffff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ac860
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp + 0xc]
call fcn.005ac924
push eax
mov ecx, 1
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc61]
push eax
mov ecx, 2
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc91]
push eax
mov ecx, 3
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc9d]
push eax
mov ecx, 4
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xca9]
push eax
mov ecx, 5
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc6d]
push eax
mov ecx, 6
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc79]
push eax
mov ecx, 7
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc85]
push eax
mov ecx, 8
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
call fcn.005ac9e8
push eax
mov ecx, 9
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xd25]
push eax
mov ecx, 0xa
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0xf4]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0xf4], 0
je 0x6c5280
lea ecx, [ebp - 0xf8]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0xf8], 0
je 0x6c5280
lea ecx, [ebp - 0xfc]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0xfc]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x100]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x100]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
jmp 0x6c529c
mov eax, dword [ebx + 0xf4]
call fcn.005a480c
mov dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0xf4]
call fcn.005a4810
mov dword [ebp - 0x20], eax
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x20]
lea edx, [ebp - 0x1c]
mov eax, dword [ebx + 0x11c]
call fcn.00689070
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebx + 0x164]
mov eax, dword [ebp + 0xc]
call fcn.005acfe0
test al, al
je 0x6c78ff
push 1
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x104]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x104]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0x14], edx
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x14]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
mov byte [ebp - 0x15], 0
jmp 0x6c78ff
cmp esi, 0x6e693f
jg 0x6c53b1
je 0x6c569f
cmp esi, 0x6e69
jg 0x6c5394
je 0x6c563d
sub esi, 0x61
je 0x6c53f9
sub esi, 8
je 0x6c56c9
sub esi, 0x60d6
je 0x6c545e
jmp 0x6c5768
sub esi, 0x636e61
je 0x6c56d6
sub esi, 0x3fe00
je 0x6c5488
jmp 0x6c5768
cmp esi, 0x636e613f
jg 0x6c53dc
je 0x6c573e
sub esi, 0x726c61
je 0x6c55df
sub esi, 0x31f50000
je 0x6c557a
jmp 0x6c5768
sub esi, 0x676c613f
je 0x6c54ef
sub esi, 0xb000000
je 0x6c5613
jmp 0x6c5768
lea ecx, [ebp - 0x108]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x10c]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x10c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ab884
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xcfd]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x110]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x110]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x114]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x114]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
imul ecx, dword [ebp - 0x20], 0x32
imul edx, dword [ebp - 0x1c], 0x32
mov eax, dword [ebp + 0xc]
call fcn.005ac850
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc29]
mov ecx, 0x32
cdq
idiv ecx
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc2d]
mov ecx, 0x32
cdq
idiv ecx
push eax
mov ecx, 1
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc29]
push eax
mov ecx, 2
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc2d]
push eax
mov ecx, 3
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x118]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x118]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x11c]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x11c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ac850
jmp 0x6c78ff
lea ecx, [ebp - 0x120]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x120]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0xc31], edx
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc31]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x124]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x124], 0
jne 0x6c566b
mov eax, dword [ebp + 0xc]
mov dword [eax + 0xbf5], 0xff
jmp 0x6c78ff
lea ecx, [ebp - 0x128]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x128]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0xbf5], edx
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xbf5]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
call dword [edx + 4]
jmp 0x6c78ff
lea ecx, [ebp - 0x12c]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
cmp byte [ebp - 0x10], 2
jne 0x6c5714
mov eax, dword [ebp + 0xc]
add eax, 0x88
mov edx, dword [ebp - 8]
call fcn.00407460
jmp 0x6c78ff
lea eax, [ebp - 0x130]
push eax
xor ecx, ecx
mov dl, 1
mov eax, 0x6c7984
call fcn.004fc42c
mov edx, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.006b8d74
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x88]
push eax
xor ecx, ecx
mov edx, 0x6c79bc
mov eax, ebx
call fcn.006bd088
jmp 0x6c78ff
mov byte [ebp - 0x15], 0
jmp 0x6c78ff
sub esi, 0x6d62
je 0x6c5783
sub esi, 0x6cf4dd
je 0x6c57b6
jmp 0x6c57e0
lea ecx, [ebp - 0x134]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x134]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 0xc]
call fcn.005ab890
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xced]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
mov byte [ebp - 0x15], 0
jmp 0x6c78ff
cmp esi, 0x6c6f63
jg 0x6c5828
je 0x6c59cf
sub esi, 0x6373
je 0x6c58f7
sub esi, 0xd00
je 0x6c584d
sub esi, 0x300
je 0x6c5b62
sub esi, 0x62ffcc
je 0x6c5972
jmp 0x6c5c1b
sub esi, 0x706b73
je 0x6c599c
sub esi, 0x7cc
je 0x6c58b2
sub esi, 0x6bfef000
je 0x6c5ae7
jmp 0x6c5c1b
lea ecx, [ebp - 0x138]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x138]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x13c]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x13c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ad24c
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xbfd]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc01]
push eax
mov ecx, 1
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x140]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x140]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x6c5948
mov eax, dword [ebx + 0xf0]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x30]
dec eax
cmp eax, dword [ebp - 0x1c]
jl 0x6c5948
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ab9d0
jmp 0x6c78ff
lea eax, [ebp - 0x144]
push eax
xor ecx, ecx
mov dl, 1
mov eax, 0x6c79dc
call fcn.004fc42c
mov edx, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.006b8d74
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xbd4]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x148]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x148]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 0xc]
call fcn.005aa118
jmp 0x6c78ff
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x20], 0xffffffff
or esi, 0xffffffff
lea ecx, [ebp - 0x14c]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 0x14c], 0
je 0x6c5a25
lea ecx, [ebp - 0x150]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x150]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x154]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 0x154], 0
je 0x6c5a6a
lea ecx, [ebp - 0x158]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x158]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x15c]
mov edx, 3
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 0x15c], 0
je 0x6c5aac
lea ecx, [ebp - 0x160]
mov edx, 3
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x160]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov esi, dword [ebp - 0xc]
lea ecx, [ebp - 0x164]
mov edx, 4
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x164]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
push esi
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ab8c0
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xcfd]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xd11]
push eax
mov ecx, 1
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xd1d]
push eax
mov ecx, 2
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xd05]
push eax
mov ecx, 3
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x168]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x168]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x16c]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x16c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x170]
mov edx, 3
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x170]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov esi, dword [ebp - 0xc]
lea ecx, [ebp - 0x174]
mov edx, 4
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x174]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
push esi
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005aba98
jmp 0x6c78ff
mov byte [ebp - 0x15], 0
jmp 0x6c78ff
cmp esi, 0x696c3f
jg 0x6c5cda
je 0x6c5ec4
cmp esi, 0x7364
jg 0x6c5c92
je 0x6c62e5
cmp esi, 0x6674
jg 0x6c5c75
je 0x6c60db
sub esi, 0x64
je 0x6c6098
sub esi, 8
je 0x6c5d78
sub esi, 0x62f8
je 0x6c6240
jmp 0x6c66ab
sub esi, 0x696c
je 0x6c5e1e
sub esi, 0x2d3
je 0x6c5df4
jmp 0x6c66ab
cmp esi, 0x626174
jg 0x6c5cbd
je 0x6c61dc
sub esi, 0x736c
je 0x6c5f5b
sub esi, 0x300
je 0x6c6541
jmp 0x6c66ab
sub esi, 0x63643f
je 0x6c62bb
sub esi, 0x31000
je 0x6c610f
jmp 0x6c66ab
cmp esi, 0x766c3f
jg 0x6c5d30
je 0x6c65e8
cmp esi, 0x736c3f
jg 0x6c5d13
je 0x6c6001
sub esi, 0x6b736c
je 0x6c6469
sub esi, 0x4fa08
je 0x6c616c
jmp 0x6c66ab
sub esi, 0x74736c
je 0x6c639e
sub esi, 0xd3
je 0x6c6139
jmp 0x6c66ab
cmp esi, 0x706d743f
jg 0x6c5d5b
je 0x6c61aa
sub esi, 0x6261743f
je 0x6c6216
sub esi, 0x911f800
je 0x6c64db
jmp 0x6c66ab
sub esi, 0x74736c3f
je 0x6c6409
sub esi, 0x3f0fd2d
je 0x6c664d
jmp 0x6c66ab
lea ecx, [ebp - 0x178]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x178]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
push 1
push 0
lea eax, [ebp - 4]
push eax
mov cl, 1
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x13c]
call fcn.006a4718
push 0
xor ecx, ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp + 0xc]
call fcn.005ac468
test al, al
jne 0x6c78ff
lea eax, [ebp - 0x17c]
push eax
xor ecx, ecx
mov dl, 1
mov eax, 0x6c7a0c
call fcn.004fc42c
mov edx, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.006b8d74
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x94]
push eax
xor ecx, ecx
mov edx, 0x6c7a44
mov eax, ebx
call fcn.006bd088
jmp 0x6c78ff
lea ecx, [ebp - 0x180]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x180]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x184]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x184]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
push 1
push 0
lea eax, [ebp - 4]
push eax
mov cl, 1
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x13c]
call fcn.006a4718
push 0
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ad628
test al, al
jne 0x6c78ff
lea eax, [ebp - 0x188]
push eax
xor ecx, ecx
mov dl, 1
mov eax, 0x6c7a0c
call fcn.004fc42c
mov edx, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.006b8d74
jmp 0x6c78ff
lea ecx, [ebp - 0x18c]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x18c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
cmp dword [ebp - 0x1c], 0
jl 0x6c5f31
cmp dword [ebp - 0x1c], 0x20
jge 0x6c5f31
lea ecx, [ebp - 0x190]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ada24
mov eax, dword [ebp - 0x190]
push eax
xor ecx, ecx
mov edx, 0x6c7a44
mov eax, ebx
call fcn.006bd088
jmp 0x6c78ff
lea eax, [ebp - 0x194]
push eax
xor ecx, ecx
mov dl, 1
mov eax, 0x6c79dc
call fcn.004fc42c
mov edx, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.006b8d74
jmp 0x6c78ff
lea ecx, [ebp - 0x198]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x198]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x19c]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x19c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
push 1
push 0
lea eax, [ebp - 4]
push eax
mov cl, 1
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x13c]
call fcn.006a4718
push 0
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ad7d4
test al, al
jne 0x6c78ff
lea eax, [ebp - 0x1a0]
push eax
xor ecx, ecx
mov dl, 1
mov eax, 0x6c7a0c
call fcn.004fc42c
mov edx, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.006b8d74
jmp 0x6c78ff
lea ecx, [ebp - 0x1a4]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1a4]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
cmp dword [ebp - 0x1c], 0
jl 0x6c606e
cmp dword [ebp - 0x1c], 0x20
jge 0x6c606e
lea ecx, [ebp - 0x1a8]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ada7c
mov eax, dword [ebp - 0x1a8]
push eax
xor ecx, ecx
mov edx, 0x6c7a44
mov eax, ebx
call fcn.006bd088
jmp 0x6c78ff
lea eax, [ebp - 0x1ac]
push eax
xor ecx, ecx
mov dl, 1
mov eax, 0x6c79dc
call fcn.004fc42c
mov edx, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.006b8d74
jmp 0x6c78ff
lea ecx, [ebp - 0x1b0]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1b0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
cmp dword [ebp - 0xc], 0
jne 0x6c60ce
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
call dword [edx + 0x28]
jmp 0x6c78ff
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
call dword [edx + 0x20]
jmp 0x6c78ff
lea ecx, [ebp - 0x1b4]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1b4]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0xcf1], edx
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xcf1]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov eax, dword [eax + 0x470]
mov eax, dword [eax + 0x30]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x1b8]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1b8]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
sete al
mov edx, dword [ebp + 0xc]
mov byte [edx + 0xd33], al
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
cmp byte [eax + 0xd33], 0
je 0x6c78ff
push 1
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x1bc]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1bc]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0xc05], edx
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc05]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x1c0]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1c0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x6c6291
mov eax, dword [ebx + 0xf0]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x20]
dec eax
cmp eax, dword [ebp - 0x1c]
jl 0x6c6291
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005abc40
jmp 0x6c78ff
lea eax, [ebp - 0x1c4]
push eax
xor ecx, ecx
mov dl, 1
mov eax, 0x6c79dc
call fcn.004fc42c
mov edx, dword [ebp - 0x1c4]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.006b8d74
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xbd8]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x1c8]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1c8]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x1cc]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1cc]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x1d0]
mov edx, 3
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1d0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov esi, dword [ebp - 0xc]
lea ecx, [ebp - 0x1d4]
mov edx, 4
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x1d4]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
push esi
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005acff4
jmp 0x6c78ff
lea ecx, [ebp - 0x1d8]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1d8]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x1dc]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
call fcn.005811d8
jmp 0x6c78ff
lea ecx, [ebp - 0x1e0]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1e0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov edx, dword [ebp - 0x1c]
call fcn.00581a28
call fcn.00404aa8
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x1e4]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1e4]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x1e8]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1e8]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov edx, dword [ebp - 0x1c]
call fcn.0057f2fc
jmp 0x6c78ff
lea ecx, [ebp - 0x1ec]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1ec]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov edx, dword [ebp - 0x1c]
call fcn.00582b98
call fcn.00404aa8
mov dword [ebp - 0x1c], eax
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp - 0x1c]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x1f0]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1f0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x1f4]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1f4]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x1c], 0
jl 0x6c65c1
cmp dword [ebp - 0x1c], 0x100
jge 0x6c65c1
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov edx, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], 1
sete cl
mov byte [eax + edx + 0xc8c], cl
jmp 0x6c78ff
xor esi, esi
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
cmp dword [ebp - 0x20], 1
sete dl
mov byte [eax + esi + 0xc8c], dl
inc esi
cmp esi, 0x100
jne 0x6c65c3
jmp 0x6c78ff
lea ecx, [ebp - 0x1f8]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1f8]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov edx, dword [ebp - 0x1c]
cmp byte [eax + edx + 0xc8c], 0
je 0x6c78ff
push 1
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x1fc]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x1fc]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
or ecx, 0xffffffff
mov edx, dword [ebp - 8]
call fcn.00583488
mov dword [ebp - 0x1c], eax
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp - 0x1c]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
mov byte [ebp - 0x15], 0
jmp 0x6c78ff
cmp esi, 0x696d3f
jg 0x6c6725
je 0x6c6d22
cmp esi, 0x6975
jg 0x6c66ff
je 0x6c6b1e
sub esi, 0x65
je 0x6c6791
sub esi, 8
je 0x6c6806
sub esi, 0x64d2
je 0x6c67d4
sub esi, 0x42e
je 0x6c6cea
jmp 0x6c6d54
sub esi, 0x6d3f
je 0x6c688c
sub esi, 0x2e
je 0x6c68d8
sub esi, 0x608
je 0x6c6ba6
jmp 0x6c6d54
cmp esi, 0x73753f
jg 0x6c6768
je 0x6c6bfb
sub esi, 0x69753f
je 0x6c6b73
sub esi, 0x3f02e
je 0x6c6c3a
sub esi, 0x7d2
je 0x6c6960
sub esi, 0x50b26
je 0x6c6b0b
jmp 0x6c6d54
sub esi, 0x767865
je 0x6c69f5
sub esi, 0x7601ecda
je 0x6c6aa9
sub esi, 0x1ec042e
je 0x6c69a6
jmp 0x6c6d54
lea ecx, [ebp - 0x200]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x200]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
cmp dword [ebp - 0xc], 0
jne 0x6c67c7
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
call dword [edx + 0x24]
jmp 0x6c78ff
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
call dword [edx + 0x1c]
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
call fcn.005abe00
test al, al
je 0x6c78ff
push 1
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x204]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x204]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x208]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x208]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
movzx ebx, byte [ebp - 0x10]
test bl, bl
jne 0x6c686c
cmp dword [ebp - 0x1c], 0
sete cl
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 0xc]
call fcn.005aba0c
cmp bl, 1
jne 0x6c78ff
cmp dword [ebp - 0x1c], 0
sete cl
mov edx, dword [ebp - 8]
mov eax, dword [ebp + 0xc]
call fcn.005aba60
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
call fcn.005ab6f8
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
lea edx, [ebp - 0x20c]
mov eax, dword [ebp + 0xc]
call fcn.005abde4
mov eax, dword [ebp - 0x20c]
push eax
xor ecx, ecx
mov edx, 0x6c7a44
mov eax, ebx
call fcn.006bd088
jmp 0x6c78ff
lea ecx, [ebp - 0x210]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x210]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], 0x64
lea ecx, [ebp - 0x214]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x214], 0
je 0x6c694d
lea ecx, [ebp - 0x218]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x218]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ab4c4
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax + 0xd35]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xd29]
push eax
mov ecx, 1
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x21c]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x21c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov edx, dword [ebp - 8]
mov eax, dword [ebp + 0xc]
call fcn.005ab4f8
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x220]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x220]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x6c78ff
cmp dword [ebp - 0x1c], 0x20
jge 0x6c78ff
lea ecx, [ebp - 0x224]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x224]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
cmp byte [ebp - 0x10], 0
jne 0x6c6a7d
fild dword [ebp - 0x20]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov edx, dword [ebp - 0x1c]
fstp dword [eax + edx*4 + 0xdcc]
wait
jmp 0x6c78ff
push 0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov edx, dword [ebp - 8]
call fcn.0057e6d4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov edx, dword [ebp - 0x1c]
fstp dword [eax + edx*4 + 0xdcc]
wait
jmp 0x6c78ff
lea ecx, [ebp - 0x228]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x228]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov edx, dword [ebp - 0x1c]
push dword [eax + edx*4 + 0xdcc]
call fcn.0050a610
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
call fcn.00581240
jmp 0x6c78ff
xor esi, esi
lea ecx, [ebp - 0x22c]
lea edx, [esi + 1]
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 0x22c], 0
je 0x6c6b68
lea ecx, [ebp - 0x230]
lea edx, [esi + 1]
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x230]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov ecx, dword [ebp - 0xc]
mov edx, esi
mov eax, dword [ebp + 0xc]
call fcn.005ad50c
inc esi
cmp esi, 4
jne 0x6c6b20
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
xor esi, esi
mov edx, esi
mov eax, dword [ebp + 0xc]
call fcn.005ac814
push eax
mov ecx, esi
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
inc esi
cmp esi, 4
jne 0x6c6b82
jmp 0x6c78ff
xor esi, esi
lea ecx, [ebp - 0x234]
lea edx, [esi + 1]
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 0x234], 0
je 0x6c6bf0
lea ecx, [ebp - 0x238]
lea edx, [esi + 1]
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x238]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov ecx, dword [ebp - 8]
mov edx, esi
mov eax, dword [ebp + 0xc]
call fcn.005ad51c
inc esi
cmp esi, 4
jne 0x6c6ba8
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
xor esi, esi
lea ecx, [ebp - 0x23c]
mov edx, esi
mov eax, dword [ebp + 0xc]
call fcn.005ac824
mov eax, dword [ebp - 0x23c]
push eax
mov ecx, esi
mov edx, 0x6c7a44
mov eax, ebx
call fcn.006bd088
inc esi
cmp esi, 4
jne 0x6c6c0a
jmp 0x6c78ff
lea ecx, [ebp - 0x240]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x240]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x11c]
call fcn.00689c64
mov esi, eax
test esi, esi
jne 0x6c6c9b
lea eax, [ebp - 0x244]
push eax
xor ecx, ecx
mov dl, 1
mov eax, 0x6c7a64
call fcn.004fc42c
mov edx, dword [ebp - 0x244]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.006b8d74
jmp 0x6c78ff
cmp byte [esi + 0xc], 0x17
jne 0x6c6cc0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov eax, dword [eax + 0x470]
mov edx, dword [eax + 0x3c]
mov eax, dword [esi + 0x18]
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x6c78ff
lea eax, [ebp - 0x248]
push eax
xor ecx, ecx
mov dl, 1
mov eax, 0x6c7a64
call fcn.004fc42c
mov edx, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.006b8d74
jmp 0x6c78ff
lea ecx, [ebp - 0x24c]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x24c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
cmp dword [ebp - 0xc], 1
sete al
mov edx, dword [ebp + 0xc]
mov byte [edx + 0xbec], al
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
cmp byte [eax + 0xbec], 0
je 0x6c78ff
push 1
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
mov byte [ebp - 0x15], 0
jmp 0x6c78ff
cmp esi, 0x6f663f
jg 0x6c6d9d
je 0x6c6f2c
sub esi, 0x76
je 0x6c6f9d
sub esi, 0x6ef0
je 0x6c6eb2
sub esi, 0x6d9
je 0x6c6fd0
sub esi, 0x6dfe37
je 0x6c6ffa
jmp 0x6c705d
sub esi, 0x746c66
je 0x6c6dc2
sub esi, 0x6e0009d9
je 0x6c7033
sub esi, 0x5f7f000
je 0x6c6e3d
jmp 0x6c705d
lea ecx, [ebp - 0x250]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x250]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x254]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x254]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
cmp dword [ebp - 0x1c], 0
jl 0x6c78ff
cmp dword [ebp - 0x1c], 0x1f
jg 0x6c78ff
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ad978
mov eax, dword [ebp + 0xc]
call fcn.005ad9a8
jmp 0x6c78ff
lea ecx, [ebp - 0x258]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x258]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
cmp dword [ebp - 0x1c], 0
jl 0x6c78ff
cmp dword [ebp - 0x1c], 0x1f
jg 0x6c78ff
lea ecx, [ebp - 0x25c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ad9f4
mov eax, dword [ebp - 0x25c]
push eax
xor ecx, ecx
mov edx, 0x6c7a44
mov eax, ebx
call fcn.006bd088
jmp 0x6c78ff
lea ecx, [ebp - 0x260]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x260]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x264]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x264]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004074b4
cmp dword [ebp - 0x1c], 0
jge 0x6c6f19
cmp dword [ebp - 0x1c], 0x20
jge 0x6c78ff
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ad978
jmp 0x6c78ff
lea ecx, [ebp - 0x268]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x268]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
cmp dword [ebp - 0x1c], 0
jge 0x6c6f72
cmp dword [ebp - 0x1c], 0x20
jge 0x6c78ff
lea ecx, [ebp - 0x26c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ad9f4
mov eax, dword [ebp - 0x26c]
push eax
xor ecx, ecx
mov edx, 0x6c7a44
mov eax, ebx
call fcn.006bd088
jmp 0x6c78ff
lea ecx, [ebp - 0x270]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x270]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 0xc]
call fcn.005abdd0
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xb3c]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x274]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x274]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005ad4e0
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xbe8]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
mov byte [ebp - 0x15], 0
jmp 0x6c78ff
cmp esi, 0x74736f
jg 0x6c70c5
je 0x6c7119
cmp esi, 0x6b6667
jg 0x6c70a8
je 0x6c774c
sub esi, 0x67
je 0x6c7307
sub esi, 0x3200
je 0x6c7299
sub esi, 0x6844d8
je 0x6c74e1
jmp 0x6c78f5
sub esi, 0x6d6977
je 0x6c789e
sub esi, 0x5fcf0
je 0x6c7600
jmp 0x6c78f5
cmp esi, 0x7366673f
jg 0x6c70fc
je 0x6c76da
sub esi, 0x74756f
je 0x6c720d
sub esi, 0x6af1f1d0
je 0x6c782f
sub esi, 0x2031000
je 0x6c78ce
jmp 0x6c78f5
sub esi, 0x74736f3f
je 0x6c71a9
sub esi, 0x20000
je 0x6c726f
jmp 0x6c78f5
lea ecx, [ebp - 0x278]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x278]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x27c]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x27c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x280]
mov edx, 3
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x280]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov esi, dword [ebp - 0xc]
push esi
cmp dword [ebp - 0x1c], 1
sete dl
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp + 0xc]
call fcn.005ad410
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
cmp byte [eax + 0xd34], 0
je 0x6c71d2
push 1
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xbe0]
push eax
mov ecx, 1
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xbdc]
push eax
mov ecx, 2
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x284]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x284], 0
jne 0x6c723b
mov eax, dword [ebp + 0xc]
mov dword [eax + 0xbf9], 0xff
jmp 0x6c78ff
lea ecx, [ebp - 0x288]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x288]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0xbf9], edx
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xbf9]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x28c]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x28c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004074b4
lea ecx, [ebp - 0x290]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x290]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
sete cl
mov edx, dword [ebp - 4]
mov eax, dword [ebp + 0xc]
call fcn.005ab9e4
jmp 0x6c78ff
mov edx, 0xc
mov eax, dword [ebp - 0x14]
call fcn.00698e18
lea ecx, [ebp - 0x294]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x294]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x298]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x298]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x29c]
mov edx, 3
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x29c]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov esi, dword [ebp - 0xc]
lea ecx, [ebp - 0x2a0]
mov edx, 4
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x2a0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x2a4]
mov edx, 5
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x2a4]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x2a8]
mov edx, 6
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x2a8]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x2ac]
mov edx, 7
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x2ac]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x2b0]
mov edx, 8
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x2b0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x2b4]
mov edx, 9
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x2b4]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x2b8]
mov edx, 0xa
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x2b8]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x3c], eax
push esi
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x38]
push eax
cmp dword [ebp - 0x3c], 1
sete al
push eax
push 0
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
call fcn.005abc54
jmp 0x6c78ff
lea ecx, [ebp - 0x2bc]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x2bc], 0
jne 0x6c7540
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
call fcn.005ac7d4
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, dword [ebp + 0xc]
call fcn.005ac794
push eax
mov ecx, 1
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x2c0]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2c0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
cmp dword [ebp - 0x1c], 0
jl 0x6c78ff
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov eax, dword [eax + 0x474]
mov eax, dword [eax + 0x1c]
cmp eax, dword [ebp - 0x1c]
jle 0x6c78ff
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov eax, dword [eax + 0x474]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x1c]
mov esi, dword [eax + edx*4]
mov eax, esi
call fcn.00598884
test eax, eax
je 0x6c78ff
mov eax, esi
call fcn.00598884
call fcn.0054d454
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
mov eax, esi
call fcn.00598884
call fcn.0054c140
push eax
mov ecx, 1
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x2c4]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x2c4], 0
jne 0x6c764b
lea ecx, [ebp - 0x2c8]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x2c8], 0
jne 0x6c764b
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
call fcn.0057db64
jmp 0x6c78ff
lea ecx, [ebp - 0x2cc]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2cc]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x2d0]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x1c], 0
jle 0x6c78ff
cmp dword [ebp - 0x1c], 0x20
jge 0x6c78ff
cmp dword [ebp - 0x20], 0
je 0x6c76be
mov dword [ebp - 0x20], 1
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov edx, dword [ebp - 0x1c]
movzx ecx, byte [ebp - 0x20]
mov byte [eax + edx + 0xd8c], cl
jmp 0x6c78ff
lea ecx, [ebp - 0x2d4]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2d4]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jle 0x6c78ff
cmp dword [ebp - 0x1c], 0x20
jge 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov edx, dword [ebp - 0x1c]
movzx eax, byte [eax + edx + 0xd8c]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x2d8]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x2d8], 0
jne 0x6c7797
lea ecx, [ebp - 0x2dc]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x2dc], 0
jne 0x6c7797
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
call fcn.0057db50
jmp 0x6c78ff
lea ecx, [ebp - 0x2e0]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2e0]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x2e4]
mov edx, 2
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2e4]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x1c], 0
jle 0x6c78ff
cmp dword [ebp - 0x1c], 0x20
jge 0x6c78ff
cmp dword [ebp - 0x20], 0
jl 0x6c780c
cmp dword [ebp - 0x20], 0xff
jle 0x6c7813
mov dword [ebp - 0x20], 0xff
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov edx, dword [ebp - 0x1c]
movzx ecx, byte [ebp - 0x20]
mov byte [eax + edx + 0xdac], cl
jmp 0x6c78ff
lea ecx, [ebp - 0x2e8]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2e8]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jle 0x6c78ff
cmp dword [ebp - 0x1c], 0x20
jge 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x334]
mov edx, dword [ebp - 0x1c]
movzx eax, byte [eax + edx + 0xdac]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
lea ecx, [ebp - 0x2ec]
mov edx, 1
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2ec]
lea ecx, [ebp - 0x10]
mov eax, ebx
call fcn.006bcf94
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 0xc]
call fcn.005ad48c
jmp 0x6c78ff
push 1
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.006c09a0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xbe4]
push eax
xor ecx, ecx
mov edx, 0x6c7964
mov eax, ebx
call fcn.006bd050
jmp 0x6c78ff
mov byte [ebp - 0x15], 0
jmp 0x6c78ff
mov byte [ebp - 0x15], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6c794a
lea eax, [ebp - 0x2ec]
mov edx, 0x64
call fcn.00407458
lea eax, [ebp - 0x15c]
mov edx, 0x48
call fcn.00407458
lea eax, [ebp - 0x10]
mov edx, dword [0x695aec]
call fcn.0040829c
lea eax, [ebp - 4]
call fcn.00407450
ret