Function at 0x6d74e700
Capabilities:
Check for software breakpoints
Inspect section memory permissions

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x4c
mov ebp, dword [esp + 0x60]
mov ebx, dword [ebp + 0x1c]
mov edi, dword [ebx]
mov dword [ebx + 0x68], 0
mov dword [ebx + 0x1c], 0
mov dword [ebx + 0x20], 0
test edi, edi
je 0x6d74e933
mov eax, dword [ebx + 0x2c]
cmp dword [ebp], eax
jae 0x6d74e926
lea esi, [ebp + 0x1c]
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x2c], esi
mov eax, dword [edi + 4]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d744b40
mov dword [esp + 4], edi
mov dword [esp], ebp
mov dword [esp + 8], eax
mov ebx, eax
call fcn.6d745b00
cmp dword [edi + 4], 0x183
jbe 0x6d74e787
call fcn.6d765640
mov eax, dword [edi + 4]
jmp dword [eax*4 + 0x6d774618]
mov edx, dword [ebp + 0x1c]
imul eax, dword [edi + 0x20], 0x5c
add eax, dword [edx + 0x6c]
mov dword [edx + 0x68], eax
mov esi, dword [ebp]
mov dword [esp + 0x34], esi
mov esi, dword [edx + 0x60]
mov dword [esp + 0x38], esi
and byte [edx + 0xc], 0xef
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + 0x68]
movzx edx, byte [eax + 0x44]
test dl, 3
je 0x6d74e7d4
and edx, 2
mov ecx, dword [eax + 0x40]
mov dword [esp + 0x30], edi
jne case.0x6d74e78a.1
neg ecx
mov dword [eax + 0xc], ecx
test byte [eax + 0x4c], 1
je 0x6d74e7de
and dword [eax + 0xc], 0xfffffff0
mov edx, dword [eax + 0x10]
mov ecx, 4
sub edx, dword [eax + 0xc]
add edx, 0xf
and edx, 0xfffffff0
add edx, 0xc
mov dword [eax + 0x3c], edx
mov edx, 4
mov eax, ebp
mov dword [esp], 0x10
call fcn.6d742d90
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx + 0x68]
test byte [eax + 0x38], 0x20
jne 0x6d75a49c
mov eax, dword [edx + 0x68]
test byte [eax + 0x38], 0x10
jne 0x6d75a47c
mov eax, dword [edx + 0x68]
test byte [eax + 0x38], 8
jne 0x6d75a45f
xor edx, edx
mov ecx, 4
mov eax, ebp
mov dword [esp], 5
call fcn.6d742c20
mov eax, dword [ebp]
mov ecx, 4
mov edx, 4
mov byte [eax], 0x89
mov byte [eax + 1], 0xe5
add eax, 2
mov dword [ebp], eax
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + 0x68]
mov eax, dword [eax + 0x3c]
mov dword [esp], eax
mov eax, ebp
call fcn.6d742d90
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x30], edi
mov eax, dword [eax + 0x68]
test byte [eax + 0x4c], 1
je case.0x6d74e78a.1
mov dword [esp + 4], 0x20000000
mov dword [esp], ebp
call fcn.6d749670
mov dword [esp + 0x30], eax
mov esi, eax
mov eax, dword [ebp + 0x1c]
and esi, 0x7fff
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax + 0x68]
and edx, 0x7fff
mov ecx, dword [eax + 0xc]
mov eax, ebp
call fcn.6d7423c0
mov eax, dword [ebp + 0x1c]
mov ecx, 5
mov eax, dword [eax + 0x68]
mov edx, dword [eax + 0x48]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d742c20
mov eax, dword [esp + 0x30]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
mov dword [esp + 0x30], edi
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp], ebp
call fcn.6d745bd0
mov dword [esp + 4], edi
mov dword [esp], ebp
call fcn.6d7457b0
mov edi, dword [edi]
test edi, edi
je 0x6d74e930
mov eax, dword [ebp + 0x1c]
mov edx, dword [eax + 0x2c]
cmp dword [ebp], edx
jb 0x6d74e758
add esp, 0x4c
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx + 0x60]
test eax, eax
jle 0x6d74e970
xor eax, eax
mov edi, dword [ebx + 0x5c]
jmp 0x6d74e95c
mov esi, dword [edx + 0x10]
mov esi, dword [esi + 0x10]
cmp dword [edx + 4], 0x5c
mov ecx, dword [ecx]
je 0x6d74e951
sub esi, ecx
mov dword [ecx - 4], esi
add eax, 1
cmp dword [ebx + 0x60], eax
jle 0x6d74e970
lea ecx, [edi + eax*8]
mov edx, dword [ecx + 4]
cmp dword [edx + 4], 0x5c
jne 0x6d74e941
mov esi, dword [edx + 0x18]
mov esi, dword [esi + 0x10]
jmp 0x6d74e947
mov eax, dword [ebp + 4]
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [edi + 0x10]
lea edx, [eax - 8]
cmp edx, 7
jbe 0x6d75a690
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
add edx, 1
or edx, 0xffffffd8
mov byte [eax], 0xdd
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757168
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75aa9f
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74dec0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x18]
ja 0x6d757131
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d743170
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d759e6b
mov esi, dword [eax*8 + 0x6d76a240]
mov edx, 0x28
xor ecx, ecx
mov eax, dword [edi + 0x20]
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d742e90
mov eax, dword [ebp]
lea edx, [esi + 1]
or edx, 0xffffffd8
mov byte [eax], 0xdd
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7570af
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75aa74
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d550
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d74eb03
lea eax, [esi - 0x10]
cmp eax, 6
jbe 0x6d75beb8
and esi, 0x7fff
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov ecx, 2
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 1
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d7581df
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov ecx, dword [esp + 0x20]
mov edx, 6
mov dword [esp + 4], esi
mov esi, dword [esp + 0x28]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757344
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75a9c9
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74da00
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
jbe 0x6d75a5a7
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and edx, 7
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax], 0xf2
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x2c
mov byte [eax + 3], dl
add eax, 4
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d7589ee
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov ecx, dword [esp + 0x20]
mov edx, 0xa
mov dword [esp + 4], esi
mov esi, dword [esp + 0x28]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741af0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757206
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75b208
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d0a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d74edaa
mov edx, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
jbe 0x6d75c12e
and eax, 0x7fff
mov ecx, 2
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 1
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d757ea5
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov edx, dword [esp + 0x28]
mov eax, ebp
mov dword [esp], esi
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [esp + 0x20]
and ecx, 0x7fff
call fcn.6d741e40
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757448
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75aa1f
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74dc60
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x18]
mov ecx, dword [edx + 0x10]
ja 0x6d757326
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x18]
ja 0x6d759f75
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75adfe
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and ecx, 0x7fff
and edx, 0x7fff
call fcn.6d742630
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7572e5
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75b08a
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d2f0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757288
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d74efc6
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75ccb3
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741590
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d74f017
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75c285
mov edx, dword [edi + 0x10]
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
and edx, 0x7fff
cmp ecx, eax
je 0x6d75c7b0
mov dword [esp + 8], ecx
mov ecx, 4
mov dword [esp + 4], eax
mov eax, ebp
mov dword [esp], edx
mov edx, 1
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d75778b
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 6
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7573c6
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75b0df
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d7a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d74f184
mov edx, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
jbe 0x6d75c23f
and eax, 0x7fff
mov ecx, 0xb
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 1
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d758b9b
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d743880
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d7575ea
mov edx, dword [edi + 0x18]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov edx, dword [edi + 0x10]
mov dword [esp], eax
mov eax, ebp
and ecx, 0x7fff
call fcn.6d7431c0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d74f2e3
mov edx, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
jbe 0x6d75c2cc
and eax, 0x7fff
mov ecx, 7
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 1
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757f3d
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75b3b1
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74dd90
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7571a9
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d74f3a5
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75cb7e
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741920
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d757489
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
mov ecx, dword [edi + 0x18]
and edx, 0x7fff
call fcn.6d742fa0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d759dc7
mov edx, dword [edi + 0x18]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and ecx, 0x7fff
and edx, 0x7fff
call fcn.6d742ff0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7570f0
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75aee2
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d420
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d74f4a0
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75c1f9
mov edx, dword [edi + 0x10]
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
and edx, 0x7fff
cmp ecx, eax
je 0x6d75c89f
mov dword [esp + 8], ecx
mov ecx, 6
mov dword [esp + 4], eax
mov eax, ebp
mov dword [esp], edx
mov edx, 1
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d758073
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 4
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d741af0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757385
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75b1b3
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d8d0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d74f60d
mov edx, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
jbe 0x6d75c1b3
and eax, 0x7fff
mov ecx, 0xa
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 1
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d758a96
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov ecx, dword [esp + 0x20]
mov edx, 0xb
mov dword [esp + 4], esi
mov esi, dword [esp + 0x28]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741af0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757247
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75b233
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74cf70
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d74f771
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75c175
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741240
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d75763b
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 7
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7574ca
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75a9f4
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74db30
jmp case.0x6d74e78a.1
mov esi, dword [edi + 0x10]
lea eax, [esi - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
jbe 0x6d75a613
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [esi*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and ecx, 7
shl ecx, 3
and edx, 7
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax], 0xf3
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x5a
mov byte [eax + 3], dl
add eax, 4
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov esi, dword [edi + 0x10]
lea eax, [esi - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
jbe 0x6d75a665
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [esi*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and ecx, 7
shl ecx, 3
and edx, 7
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax], 0xf2
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x2a
mov byte [eax + 3], dl
add eax, 4
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d75750b
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75af61
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d1d0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d74f9ae
lea eax, [esi - 0x10]
cmp eax, 6
jbe 0x6d75c337
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [edi + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
and edx, 0x7fff
cmp eax, ecx
je 0x6d75c8d6
mov dword [esp + 8], ecx
mov ecx, 6
mov dword [esp + 4], eax
mov eax, ebp
mov dword [esp], edx
mov edx, 1
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d7576e3
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 2
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757407
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75b134
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d670
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d74fb1c
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75c3c3
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [edi + 0x10]
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
mov ecx, dword [ecx*8 + 0x6d76a240]
and eax, 0x7fff
cmp edx, eax
je 0x6d75a4e2
and ecx, 0x7fff
mov dword [esp + 8], edx
mov edx, 1
mov dword [esp + 4], eax
mov eax, ebp
mov dword [esp], ecx
mov ecx, 5
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d759312
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov ecx, dword [esp + 0x20]
mov edx, 2
mov dword [esp + 4], esi
mov esi, dword [esp + 0x28]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d7575a9
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [edi + 0x10]
mov esi, eax
and esi, 0x7fff
je 0x6d75befd
mov eax, dword [ebp]
or esi, 0xffffffc8
mov edx, esi
mov byte [eax + 1], dl
mov edx, 0x2a
mov byte [eax], 0xd9
add eax, 2
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 4], 0x17
mov dword [esp], 0x17
call fcn.6d742e90
mov eax, dword [ebp]
mov ecx, esi
mov byte [eax], 0xd9
mov byte [eax + 1], cl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d74fcb4
mov edx, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
jbe 0x6d75c37c
and eax, 0x7fff
mov ecx, 3
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 1
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d757f7e
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov edx, dword [esp + 0x28]
mov eax, ebp
mov dword [esp], esi
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [esp + 0x20]
and ecx, 0x7fff
call fcn.6d741d10
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757052
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d74fddc
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d105
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741980
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d759ecd
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 3
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758182
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d74fee9
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75cd19
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741650
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758125
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d74ff47
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d011
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741800
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d75754c
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d74ffa5
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75cf80
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7417a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758016
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d750003
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d40e
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741740
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757e48
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d750061
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d6b7
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7416e0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757deb
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d7500bf
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d06a
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7418c0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758991
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75011d
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75cd44
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741860
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756ff5
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75017b
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75cce6
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7414e0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7598ca
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d7501d9
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75cc80
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741480
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758291
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d750237
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d889
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741540
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758b3e
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d750295
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75cb4b
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7415f0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d758c4b
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
and esi, 0x7fff
je 0x6d75bff8
mov ecx, dword [ebp]
or esi, 0xffffffc8
mov dword [esp + 0x24], esi
mov byte [ecx], 0xd9
mov dword [esp + 0x20], ecx
movzx ecx, byte [esp + 0x24]
mov esi, dword [esp + 0x20]
mov byte [esi + 1], cl
mov ecx, esi
add ecx, 2
mov dword [ebp], ecx
xor ecx, ecx
mov dword [esp + 4], edx
mov edx, 0x2a
mov dword [esp], eax
mov eax, ebp
call fcn.6d742e90
mov eax, dword [ebp]
movzx edx, byte [esp + 0x24]
mov byte [eax], 0xd9
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d756d47
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov esi, edx
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
and esi, 0x7fff
je 0x6d75c63d
mov edx, dword [ebp]
or esi, 0xffffffc8
mov ecx, esi
mov byte [edx + 1], cl
xor ecx, ecx
mov byte [edx], 0xd9
add edx, 2
mov dword [ebp], edx
mov edx, 0x2a
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 4], 0x17
call fcn.6d742e90
mov eax, dword [ebp]
mov edx, esi
mov byte [eax], 0xd9
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d7503ff
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75c400
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741150
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d758795
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov ecx, dword [esp + 0x20]
mov edx, 3
mov dword [esp + 4], esi
mov esi, dword [esp + 0x28]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7585e8
mov ecx, dword [eax + 0x10]
mov edx, 0xf
mov eax, dword [edi + 0x20]
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d742240
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75054f
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75b9d5
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [edi + 0x10]
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
mov ecx, dword [ecx*8 + 0x6d76a240]
and eax, 0x7fff
cmp edx, eax
je 0x6d75a505
and ecx, 0x7fff
mov dword [esp + 8], edx
xor edx, edx
mov dword [esp + 4], eax
mov eax, ebp
mov dword [esp], ecx
mov ecx, 5
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x10]
mov edx, dword [edi + 0x20]
and eax, 0x7fff
and ecx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [ecx*8 + 0x6d76a240]
and eax, 0x7fff
and ecx, 0x7fff
test edx, edx
jne 0x6d75a3d1
mov dword [esp], eax
mov edx, 9
mov eax, ebp
call fcn.6d74b1d0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758ee5
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75b386
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c0b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x10]
mov esi, dword [ebp]
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov byte [esi], 0xf
mov byte [esi + 1], 0xbf
add esi, 2
and eax, 0x7fff
mov dword [ebp], esi
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov eax, dword [edi + 0x20]
mov esi, dword [ebp]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov edx, dword [edi + 0x10]
mov eax, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov byte [esi], 0xf
mov byte [esi + 1], 0xbf
add esi, 2
mov dword [ebp], esi
and edx, 0x7fff
mov dword [esp + 4], ecx
xor ecx, ecx
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d75a562
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [eax - 0x10]
cmp ecx, 6
ja 0x6d75072b
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75cf17
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d74b4f0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d75078b
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75ba12
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
and edx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0xc0000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740900
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d75a56d
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [eax - 0x10]
cmp ecx, 6
ja 0x6d750850
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d2ad
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d740900
jmp case.0x6d74e78a.1
mov edx, dword [ebp + 0x1c]
test byte [edx + 0xc], 0x10
je 0x6d75783d
mov esi, dword [esp + 0x30]
mov eax, dword [esi]
cmp eax, edi
je 0x6d7508cb
lea esi, [esi]
mov ecx, dword [eax + 4]
cmp ecx, 0xcd
je 0x6d7508c0
cmp ecx, 7
jne 0x6d7508c5
and word [eax + 8], 0xfffd
mov eax, dword [eax]
cmp eax, edi
jne 0x6d7508b0
mov esi, dword [esp + 0x34]
and word [eax + 8], 0xfffd
mov edi, dword [esp + 0x30]
mov dword [ebp], esi
mov esi, dword [esp + 0x38]
mov dword [edx + 0x60], esi
jmp 0x6d74e7ac
test byte [edi + 8], 1
mov ecx, dword [edi + 0x10]
je 0x6d758e41
mov eax, dword [ebp]
mov esi, dword [ecx + 0x10]
lea edx, [eax + 1]
mov dword [esp + 0x20], edx
mov edx, 0xfffffffc
sub edx, dword [esp + 0x20]
mov byte [eax], 0xe8
mov dword [esp + 0x20], edx
add edx, esi
test byte [ecx + 8], 2
mov dword [eax + 1], edx
lea edx, [eax + 5]
mov dword [ebp], edx
jne case.0x6d74e78a.1
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov edx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov byte [edx], 0xff
and eax, 7
or eax, 0xffffffd0
mov byte [edx + 1], al
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
test byte [edi + 8], 1
je 0x6d756f8f
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d75ca31
mov ecx, dword [eax + 0x10]
mov esi, 0xfffffffc
mov eax, dword [ebp]
lea edx, [eax + 1]
sub esi, edx
mov edx, esi
add edx, ecx
mov byte [eax], 0xe9
mov dword [eax + 1], edx
add eax, 5
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov edx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov byte [edx], 0xff
and eax, 7
or eax, 0xffffffe0
mov byte [edx + 1], al
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d759e19
mov esi, dword [eax + 0x10]
mov edx, 0x28
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
sub esi, eax
lea edx, [esi - 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x83
mov dword [eax + 2], edx
add eax, 6
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758670
mov edx, dword [edi + 0x18]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740750
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x14]
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x20000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x24], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x28], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x3c], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d7423c0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 8], 1
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, dword [esp + 0x24]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d749e70
mov eax, dword [esp + 0x28]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d75a578
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [eax - 0x10]
cmp ecx, 6
ja 0x6d750b4e
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d2e2
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d741360
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
lea edx, [eax - 8]
cmp edx, 7
jbe 0x6d75a5d5
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
add edx, 1
or edx, 0xffffffd8
mov byte [eax], 0xdd
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758e63
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75ac58
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c900
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d742c20
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov esi, dword [ebp]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov byte [esi], 0x89
add esi, 1
mov dword [ebp], esi
mov dword [esp + 4], ecx
xor ecx, ecx
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d750cc6
mov edx, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
jbe 0x6d75bbc5
and eax, 0x7fff
mov ecx, 3
mov eax, dword [eax*8 + 0x6d76a240]
xor edx, edx
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d757d53
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741d10
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d750ddf
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75bc0c
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740a20
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov edx, 7
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7422a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov edx, 7
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74ad70
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d742e00
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov edx, 4
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74ad70
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [edi + 0x10]
and ecx, 0x7fff
and edx, 0x7fff
mov esi, dword [edx*8 + 0x6d76a240]
mov edx, esi
and edx, 0x7fff
test eax, eax
mov dword [esp + 0x20], edx
jne 0x6d7569e3
cmp ecx, edx
je case.0x6d74e78a.1
mov eax, dword [ebp]
shl ecx, 3
and esi, 7
or ecx, 0xffffffc0
or ecx, esi
mov byte [eax], 0x89
mov byte [eax + 1], cl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
mov esi, ecx
and eax, 0x7fff
and esi, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x20], esi
mov edx, eax
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0x10]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, eax
and esi, 0x7fff
cmp dword [esp + 0x20], edx
mov dword [esp + 0x24], esi
je 0x6d75b7c2
cmp edx, dword [esp + 0x24]
je 0x6d75c9b1
mov esi, dword [esp + 0x24]
cmp dword [esp + 0x20], esi
je 0x6d75ca97
mov esi, dword [ebp]
shl edx, 3
and eax, 7
or edx, 0xffffffc0
or edx, eax
mov byte [esi + 1], dl
mov edx, ecx
and edx, 7
shl edx, 3
or edx, 0xffffffc0
or eax, edx
mov byte [esi], 0x89
mov byte [esi + 2], 0x31
mov byte [esi + 3], al
add esi, 4
mov dword [ebp], esi
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [edi + 0x10]
and ecx, 0x7fff
and edx, 0x7fff
mov esi, dword [edx*8 + 0x6d76a240]
mov edx, esi
and edx, 0x7fff
test eax, eax
mov dword [esp + 0x20], edx
jne 0x6d759758
cmp ecx, edx
je case.0x6d74e78a.1
mov eax, dword [ebp]
shl ecx, 3
and esi, 7
or ecx, 0xffffffc0
or ecx, esi
mov byte [eax], 0x89
mov byte [eax + 1], cl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d7591c1
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [edi + 0x10]
mov esi, eax
and esi, 0x7fff
je 0x6d75bcda
mov eax, dword [ebp]
or esi, 0xffffffc8
mov edx, esi
mov byte [eax + 1], dl
mov edx, 0xa
mov byte [eax], 0xd9
add eax, 2
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 4], 0x17
mov dword [esp], 0x17
call fcn.6d742e90
mov eax, dword [ebp]
mov ecx, esi
mov byte [eax], 0xd9
mov byte [eax + 1], cl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, eax
and edx, 0x7fff
cmp ecx, edx
je 0x6d751177
mov edx, dword [ebp]
shl ecx, 3
mov esi, eax
or ecx, 0xffffffc0
and esi, 7
or ecx, esi
mov byte [edx], 0x89
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
mov edx, dword [ebp]
and eax, 7
or eax, 0xffffffc8
mov byte [edx], 0xf
mov byte [edx + 1], al
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 7
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and edx, 7
lea esi, [edx*8]
or edx, 0xffffffc8
or esi, 0xffffffc0
or ecx, esi
mov byte [eax], 0xf
mov byte [eax + 1], 0xb7
mov byte [eax + 2], cl
mov byte [eax + 3], 0x66
mov byte [eax + 4], 0xc1
mov byte [eax + 5], dl
mov byte [eax + 6], 8
add eax, 7
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756a24
mov esi, dword [eax + 0x10]
xor edx, edx
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
sub esi, eax
lea edx, [esi - 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x83
mov dword [eax + 2], edx
add eax, 6
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757ac4
mov edx, dword [edi + 0x18]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740610
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, eax
and edx, 0x7fff
cmp esi, edx
mov dword [esp + 0x20], eax
jne 0x6d75a6f2
mov edx, ecx
mov ecx, dword [esp + 0x20]
mov eax, dword [ebp]
and edx, 7
shl edx, 3
or edx, 0xffffffc0
and ecx, 7
or edx, ecx
mov byte [eax], 0x29
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d75130e
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75bc49
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
and edx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0xc0000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74cb10
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
test byte [edx + 8], 2
je 0x6d75928d
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test esi, esi
jne 0x6d75bf35
mov dword [esp], eax
mov edx, 6
mov eax, ebp
call fcn.6d740420
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x10]
mov eax, dword [edi + 0x20]
test byte [ecx + 8], 2
je 0x6d759c1c
and eax, 0x7fff
mov ecx, dword [ecx + 0x10]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
cmp edx, eax
je 0x6d75b46f
mov dword [esp + 4], edx
mov edx, 6
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d751460
lea eax, [esi - 0x10]
cmp eax, 6
jbe 0x6d75bb80
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [edi + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
and edx, 0x7fff
cmp eax, ecx
je 0x6d75c8e7
mov dword [esp + 8], ecx
mov ecx, 6
mov dword [esp + 4], eax
mov eax, ebp
mov dword [esp], edx
xor edx, edx
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d7588ec
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 2
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov edx, 2
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b360
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758325
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75a943
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74bc10
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758f26
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75161c
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d1d2
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740cc0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x18]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and edx, 0x7fff
mov byte [eax], 0xf
mov byte [eax + 1], 0xb7
add eax, 2
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
mov dword [esp], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x10]
mov ecx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov byte [ecx], 0xf
mov byte [ecx + 1], 0xb7
add ecx, 2
and eax, 0x7fff
mov dword [ebp], ecx
and edx, 0x7fff
xor ecx, ecx
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x18]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and edx, 0x7fff
mov byte [eax], 0xf
mov byte [eax + 1], 0xbf
add eax, 2
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
mov dword [esp], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x10]
mov ecx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov byte [ecx], 0xf
mov byte [ecx + 1], 0xbf
add ecx, 2
and eax, 0x7fff
mov dword [ebp], ecx
and edx, 0x7fff
xor ecx, ecx
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x18]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and edx, 0x7fff
mov byte [eax], 0xf
mov byte [eax + 1], 0xb6
add eax, 2
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
mov dword [esp], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x10]
mov ecx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov byte [ecx], 0xf
mov byte [ecx + 1], 0xb6
add ecx, 2
and eax, 0x7fff
mov dword [ebp], ecx
and edx, 0x7fff
xor ecx, ecx
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x18]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and edx, 0x7fff
mov byte [eax], 0xf
mov byte [eax + 1], 0xbe
add eax, 2
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
mov dword [esp], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x10]
mov ecx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov byte [ecx], 0xf
mov byte [ecx + 1], 0xbe
add ecx, 2
and eax, 0x7fff
mov dword [ebp], ecx
and edx, 0x7fff
xor ecx, ecx
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x10]
mov esi, dword [ebp]
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov byte [esi], 0xf
mov byte [esi + 1], 0xbe
add esi, 2
and eax, 0x7fff
mov dword [ebp], esi
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov eax, dword [edi + 0x20]
mov esi, dword [ebp]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov edx, dword [edi + 0x10]
mov eax, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov byte [esi], 0xf
mov byte [esi + 1], 0xbe
add esi, 2
mov dword [ebp], esi
and edx, 0x7fff
mov dword [esp + 4], ecx
xor ecx, ecx
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x18]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and edx, 0x7fff
mov byte [eax], 0x8b
add eax, 1
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
mov dword [esp], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x10]
mov ecx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov byte [ecx], 0x8b
add ecx, 1
mov dword [ebp], ecx
xor ecx, ecx
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x10]
mov esi, dword [ebp]
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov byte [esi], 0xf
mov byte [esi + 1], 0xb6
add esi, 2
and eax, 0x7fff
mov dword [ebp], esi
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov eax, dword [edi + 0x20]
mov esi, dword [ebp]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov edx, dword [edi + 0x10]
mov eax, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov byte [esi], 0xf
mov byte [esi + 1], 0xb6
add esi, 2
mov dword [ebp], esi
and edx, 0x7fff
mov dword [esp + 4], ecx
xor ecx, ecx
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x10]
mov edx, dword [edi + 0x20]
and eax, 0x7fff
and ecx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [ecx*8 + 0x6d76a240]
and eax, 0x7fff
and ecx, 0x7fff
test edx, edx
jne 0x6d75a2f8
mov dword [esp], eax
mov edx, 5
mov eax, ebp
call fcn.6d74b1d0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [edi + 0x18]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
cmp ecx, eax
je 0x6d75bf8c
mov dword [esp + 4], ecx
mov ecx, edx
mov edx, 5
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b030
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov esi, eax
and esi, 0x7fff
cmp esi, 3
mov dword [esp + 0x20], edx
ja 0x6d75a1b4
mov ecx, dword [ebp]
and edx, 7
and eax, 7
shl edx, 3
or edx, 0xffffffc0
or edx, eax
mov byte [ecx], 0xf
mov byte [ecx + 1], 0xb6
mov byte [ecx + 2], dl
add ecx, 3
mov dword [ebp], ecx
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov edx, 0xf
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b360
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and edx, 7
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax], 0xf
mov byte [eax + 1], 0xb7
mov byte [eax + 2], dl
add eax, 3
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and edx, 7
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax], 0xf
mov byte [eax + 1], 0xbf
mov byte [eax + 2], dl
add eax, 3
mov dword [ebp], eax
jmp case.0x6d74e78a.1
test byte [edi + 8], 1
je 0x6d75a583
mov eax, dword [edi + 0x18]
mov edx, dword [eax + 4]
test edx, edx
je 0x6d751d12
cmp edx, 7
jne 0x6d75a17e
test byte [eax + 8], 2
je 0x6d75a17e
mov ecx, dword [eax + 0x10]
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d7423c0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, ecx
and eax, 0x7fff
and edx, 0x7fff
cmp eax, edx
je case.0x6d74e78a.1
mov edx, dword [ebp]
shl eax, 3
and ecx, 7
or eax, 0xffffffc0
or eax, ecx
mov byte [edx], 0x89
mov byte [edx + 1], al
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov esi, eax
and esi, 0x7fff
cmp esi, 3
mov dword [esp + 0x20], edx
ja 0x6d75a256
mov ecx, dword [ebp]
and edx, 7
and eax, 7
shl edx, 3
or edx, 0xffffffc0
or edx, eax
mov byte [ecx], 0xf
mov byte [ecx + 1], 0xbe
mov byte [ecx + 2], dl
add ecx, 3
mov dword [ebp], ecx
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x10]
mov edx, dword [edi + 0x20]
and eax, 0x7fff
and ecx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [ecx*8 + 0x6d76a240]
and eax, 0x7fff
and ecx, 0x7fff
test edx, edx
jne 0x6d75a23e
mov dword [esp], eax
mov edx, 5
mov eax, ebp
call fcn.6d74b1d0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x10]
mov edx, dword [edi + 0x20]
and eax, 0x7fff
and ecx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [ecx*8 + 0x6d76a240]
and eax, 0x7fff
and ecx, 0x7fff
test edx, edx
jne 0x6d75a2e0
mov dword [esp], eax
mov edx, 3
mov eax, ebp
call fcn.6d74b1d0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [edi + 0x18]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
cmp ecx, eax
je 0x6d75b9a6
mov dword [esp + 4], ecx
mov ecx, edx
mov edx, 7
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b030
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [edi + 0x18]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
cmp ecx, eax
je 0x6d75b9b5
mov dword [esp + 4], ecx
mov ecx, edx
mov edx, 0xf
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b030
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [edi + 0x18]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
cmp ecx, eax
je 0x6d75b3dc
mov dword [esp + 4], ecx
mov ecx, edx
mov edx, 3
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b030
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x10]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and edx, 0x7fff
mov byte [eax], 0x66
mov byte [eax + 1], 0x89
add eax, 2
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
mov dword [esp], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d759927
mov esi, dword [eax + 0x10]
mov edx, 0x28
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
sub esi, eax
lea edx, [esi - 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x82
mov dword [eax + 2], edx
add eax, 6
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7586fc
mov edx, dword [edi + 0x18]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7406b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x14]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 1
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d749d60
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756fb4
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75aeb7
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c570
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756e94
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d752144
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75cd77
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740fd0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756e53
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75b035
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c440
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756df6
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d7521e3
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75ce11
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740f70
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d759180
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75b2dc
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c310
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d759123
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d752282
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d246
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740f10
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756f4e
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75afe0
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c1e0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756ef1
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d752321
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d19f
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740eb0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d759202
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75ada8
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c7d0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758461
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d7523c0
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d632
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741090
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758420
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75b307
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c6a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7583c3
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75245f
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d392
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741030
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756d99
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d7524bd
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d7b8
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7410f0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d75250e
lea eax, [esi - 0x10]
cmp eax, 6
jbe 0x6d75c65b
and esi, 0x7fff
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov ecx, 7
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 1
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov esi, dword [edi + 0x10]
lea eax, [esi - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d752581
lea edx, [eax - 0x10]
cmp edx, 6
jbe 0x6d75ca0b
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [esi*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and ecx, 7
shl ecx, 3
and edx, 7
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax], 0xf2
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x51
mov byte [eax + 3], dl
add eax, 4
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d7525de
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75c43e
and edx, 0x7fff
and eax, 0x7fff
mov esi, dword [edx*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, esi
mov dword [esp + 0x20], eax
and ecx, 0x7fff
and eax, 0x7fff
cmp eax, ecx
je 0x6d75c6f3
mov eax, dword [ebp]
and esi, 7
lea edx, [esi*8]
or edx, 0xffffffc0
mov byte [esp + 0x24], dl
or edx, esi
mov byte [eax + 3], dl
mov edx, 0x73
mov byte [eax], 0x66
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x76
add eax, 4
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 4], 1
mov dword [esp], 2
call fcn.6d7423f0
mov edx, dword [esp + 0x20]
mov eax, dword [ebp]
and edx, 7
or dl, byte [esp + 0x24]
mov byte [eax], 0x66
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x54
mov byte [eax + 3], dl
add eax, 4
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d752696
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75c464
and edx, 0x7fff
and eax, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
mov dword [esp + 4], 0x20000000
mov dword [esp], ebp
mov dword [esp + 0x20], edx
and edx, 0x7fff
mov dword [esp + 0x28], edx
mov dword [esp + 0x24], eax
call fcn.6d749670
mov edx, eax
mov esi, eax
mov eax, dword [ebp]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov dword [eax + 1], 0x80000000
and ecx, 7
or ecx, 0xffffffb8
mov byte [eax], cl
lea ecx, [eax + 5]
mov dword [ebp], ecx
mov ecx, dword [esp + 0x24]
and ecx, 0x7fff
cmp ecx, dword [esp + 0x28]
je 0x6d75c7d2
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [esp + 0x20]
mov byte [eax + 5], 0x66
mov byte [eax + 6], 0xf
and ecx, 7
and edx, 7
shl edx, 3
or edx, 0xffffffc0
or ecx, edx
mov byte [eax + 8], cl
mov ecx, dword [esp + 0x28]
mov byte [eax + 7], 0x6e
add eax, 9
mov dword [ebp], eax
mov eax, ebp
mov byte [esp + 0x20], dl
mov edx, 0x73
mov dword [esp + 4], 0x20
mov dword [esp], 6
call fcn.6d7423f0
mov edx, dword [esp + 0x24]
mov eax, dword [ebp]
and edx, 7
or dl, byte [esp + 0x20]
mov byte [eax], 0x66
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x57
mov byte [eax + 3], dl
add eax, 4
mov dword [ebp], eax
mov dword [esp + 4], esi
mov dword [esp], ebp
call fcn.6d749500
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d7527ac
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75c07e
mov ecx, dword [edi + 0x20]
and edx, 0x7fff
and eax, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov esi, dword [eax*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and edx, 0x7fff
mov dword [esp + 4], 0xc0000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], ecx
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov eax, ebp
mov dword [esp], esi
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [esp + 0x20]
and ecx, 0x7fff
call fcn.6d74ca30
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d752862
lea eax, [esi - 0x10]
cmp eax, 6
jbe 0x6d75c039
and esi, 0x7fff
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov ecx, 3
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 1
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d7584be
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov ecx, dword [esp + 0x20]
mov edx, 7
mov dword [esp + 4], esi
mov esi, dword [esp + 0x28]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d752984
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75c48a
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
and edx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0xc0000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7413f0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d75a608
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [eax - 0x10]
cmp ecx, 6
ja 0x6d752a49
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d7eb
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d74ca30
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d752aa9
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75c51b
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
and edx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0xc0000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741360
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d752b5f
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75c5ac
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
and edx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0xc0000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74ca30
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d75a6e7
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [eax - 0x10]
cmp ecx, 6
ja 0x6d752c24
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d854
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d74cb10
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d75a781
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [eax - 0x10]
cmp ecx, 6
ja 0x6d752c93
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d682
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d7413f0
jmp case.0x6d74e78a.1
mov esi, dword [edi + 0x10]
lea eax, [esi - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
jbe 0x6d75a724
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [esi*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and ecx, 7
shl ecx, 3
and edx, 7
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax], 0xf2
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x5a
mov byte [eax + 3], dl
add eax, 4
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov esi, dword [edi + 0x10]
lea eax, [esi - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
jbe 0x6d75a874
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [esi*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and ecx, 7
shl ecx, 3
and edx, 7
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax], 0xf3
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x2a
mov byte [eax + 3], dl
add eax, 4
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
jbe 0x6d75a78c
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and edx, 7
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax], 0xf3
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x2c
mov byte [eax + 3], dl
add eax, 4
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
test byte [edx + 8], 2
je 0x6d757d0f
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test esi, esi
jne 0x6d75b98e
mov dword [esp], eax
mov edx, 9
mov eax, ebp
call fcn.6d740420
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d752e34
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75b8fb
and edx, 0x7fff
and eax, 0x7fff
mov esi, dword [edx*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, esi
mov dword [esp + 0x20], eax
and ecx, 0x7fff
and eax, 0x7fff
cmp eax, ecx
je 0x6d75c8f8
mov eax, dword [ebp]
and esi, 7
lea edx, [esi*8]
or edx, 0xffffffc0
mov byte [esp + 0x24], dl
or edx, esi
mov byte [eax + 3], dl
mov edx, 0x72
mov byte [eax], 0x66
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x76
add eax, 4
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 4], 1
mov dword [esp], 2
call fcn.6d7423f0
mov edx, dword [esp + 0x20]
mov eax, dword [ebp]
and edx, 7
or dl, byte [esp + 0x24]
mov byte [eax], 0xf
mov byte [eax + 1], 0x54
mov byte [eax + 2], dl
add eax, 3
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d752ee8
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75b921
and eax, 0x7fff
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
mov dword [esp + 4], 0x20000000
mov dword [esp], ebp
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], eax
call fcn.6d749670
mov ecx, dword [esp + 0x24]
and ecx, 0x7fff
mov esi, eax
and esi, 0x7fff
mov edx, dword [esi*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, dword [ebp]
and edx, 7
or edx, 0xffffffb8
mov byte [eax], dl
lea edx, [eax + 5]
mov dword [eax + 1], 0x80000000
mov dword [ebp], edx
mov edx, dword [esp + 0x20]
and edx, 0x7fff
cmp ecx, edx
je 0x6d75d8c7
mov ecx, dword [esp + 0x20]
mov edx, dword [esi*8 + 0x6d76a240]
mov byte [eax + 5], 0x66
mov byte [eax + 6], 0xf
and ecx, 7
shl ecx, 3
and edx, 7
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax + 8], dl
mov edx, dword [esp + 0x24]
mov byte [eax + 7], 0x6e
mov byte [eax + 9], 0xf
mov byte [eax + 0xa], 0x57
and edx, 7
or edx, ecx
mov byte [eax + 0xb], dl
add eax, 0xc
mov dword [ebp], eax
mov eax, dword [esp + 0x28]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
test ecx, ecx
mov esi, dword [eax*8 + 0x6d76a240]
je 0x6d75a34e
mov eax, dword [esp + 0x20]
mov edx, esi
and edx, 0x7fff
and eax, 0x7fff
cmp ecx, 0xffffffff
je 0x6d75c9e4
cmp eax, edx
je 0x6d75d3f8
mov eax, ebp
and esi, 7
call fcn.6d7423c0
mov edx, dword [esp + 0x20]
mov eax, dword [ebp]
and edx, 7
shl edx, 3
or edx, 0xffffffc0
or edx, esi
mov byte [eax], 0x21
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7585a7
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75ad01
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74be60
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758566
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75ab1e
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74bd30
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d759a27
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d7530dc
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d5ff
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740d10
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
mov dword [esp + 0x20], edx
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
cmp esi, 3
jbe 0x6d75a430
mov dword [esp + 4], 0x24000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, edx
and eax, 0x7fff
cmp esi, eax
je 0x6d75319e
mov eax, dword [ebp]
shl esi, 3
and edx, 7
or esi, 0xffffffc0
or edx, esi
mov byte [eax], 0x89
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
mov eax, dword [ebp]
mov esi, dword [esp + 0x28]
mov byte [eax], 0x88
add eax, 1
mov dword [ebp], eax
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, ebp
mov dword [esp], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
and edx, 0x7fff
call fcn.6d7429b0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
cmp esi, 3
mov dword [esp + 0x20], eax
jbe 0x6d75a401
mov dword [esp + 4], 0x24000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, edx
and eax, 0x7fff
cmp esi, eax
je 0x6d75328a
mov eax, dword [ebp]
shl esi, 3
and edx, 7
or esi, 0xffffffc0
or edx, esi
mov byte [eax], 0x89
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
mov eax, dword [ebp]
mov esi, dword [esp + 0x28]
mov byte [eax], 0x88
add eax, 1
mov dword [ebp], eax
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, ebp
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 8], 0
and edx, 0x7fff
mov dword [esp], ecx
xor ecx, ecx
call fcn.6d7429b0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x10]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and edx, 0x7fff
mov byte [eax], 0x89
add eax, 1
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
mov dword [esp], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [ebp]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov byte [ecx], 0x89
add ecx, 1
mov dword [ebp], ecx
xor ecx, ecx
mov dword [esp + 8], 0
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov esi, dword [ebp]
mov ecx, dword [edi + 0x10]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov byte [esi], 0x66
mov byte [esi + 1], 0x89
add esi, 2
mov dword [ebp], esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov esi, dword [ebp]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov byte [esi], 0x66
mov byte [esi + 1], 0x89
add esi, 2
mov dword [ebp], esi
and eax, 0x7fff
mov dword [esp + 4], ecx
xor ecx, ecx
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d742c60
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov eax, dword [edi + 0x20]
mov esi, dword [ebp]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov edx, dword [edi + 0x10]
mov eax, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov byte [esi], 0x8b
add esi, 1
mov dword [ebp], esi
mov dword [esp + 4], ecx
xor ecx, ecx
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
mov dword [esp + 8], 0
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x10]
mov esi, dword [ebp]
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov byte [esi], 0xf
mov byte [esi + 1], 0xb7
add esi, 2
and eax, 0x7fff
mov dword [ebp], esi
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov eax, dword [edi + 0x20]
mov esi, dword [ebp]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov edx, dword [edi + 0x10]
mov eax, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov byte [esi], 0xf
mov byte [esi + 1], 0xb7
add esi, 2
mov dword [ebp], esi
and edx, 0x7fff
mov dword [esp + 4], ecx
xor ecx, ecx
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x10]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
and esi, 0x7fff
cmp esi, 3
jbe 0x6d75a3a0
mov dword [esp + 4], 0x24000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x24], eax
mov eax, edx
and eax, 0x7fff
cmp esi, eax
je 0x6d75361b
mov eax, dword [ebp]
shl esi, 3
and edx, 7
or esi, 0xffffffc0
or edx, esi
mov byte [eax], 0x89
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
mov eax, dword [ebp]
mov esi, dword [esp + 0x24]
mov byte [eax], 0x88
add eax, 1
mov dword [ebp], eax
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
mov dword [esp], 0x17
and edx, 0x7fff
call fcn.6d7429b0
mov eax, dword [esp + 0x20]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
cmp esi, 3
jbe 0x6d75a371
mov dword [esp + 4], 0x24000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x24], eax
mov eax, edx
and eax, 0x7fff
cmp esi, eax
je 0x6d7536ef
mov eax, dword [ebp]
shl esi, 3
and edx, 7
or esi, 0xffffffc0
or edx, esi
mov byte [eax], 0x89
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
mov eax, dword [ebp]
mov esi, dword [esp + 0x24]
mov byte [eax], 0x88
add eax, 1
mov dword [ebp], eax
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, ebp
mov dword [esp], ecx
xor ecx, ecx
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
and edx, 0x7fff
call fcn.6d7429b0
mov eax, dword [esp + 0x20]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [ebp]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov byte [ecx], 0x66
mov byte [ecx + 1], 0x89
add ecx, 2
mov dword [ebp], ecx
xor ecx, ecx
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
test byte [edx + 8], 2
je 0x6d75a009
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test esi, esi
jne 0x6d75b724
mov dword [esp], eax
mov edx, 2
mov eax, ebp
call fcn.6d740420
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756bb8
mov ecx, dword [eax + 0x10]
mov edx, 2
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d759243
mov esi, dword [eax + 0x10]
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d742170
mov eax, dword [ebp]
sub esi, eax
lea edx, [esi - 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x84
mov dword [eax + 2], edx
add eax, 6
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
mov ecx, esi
and eax, 0x7fff
and ecx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
mov ecx, eax
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, edx
and eax, 0x7fff
cmp ecx, eax
je 0x6d75c313
cmp dword [esp + 0x20], eax
je 0x6d75a4bc
mov esi, dword [esp + 0x20]
xor edx, edx
mov dword [esp + 8], eax
mov eax, ebp
mov dword [esp + 4], 0
mov dword [esp], esi
call fcn.6d742ce0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d758ea4
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
mov ecx, dword [edi + 0x18]
and edx, 0x7fff
call fcn.6d743120
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75907f
mov esi, dword [eax*8 + 0x6d76a240]
mov edx, 8
xor ecx, ecx
mov dword [esp + 4], 0x17
mov eax, dword [edi + 0x18]
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d742e90
mov eax, dword [ebp]
lea edx, [esi + 1]
or edx, 0xffffffd8
mov byte [eax], 0xdd
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x10]
test byte [ecx + 8], 2
je 0x6d759880
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x18]
mov ecx, dword [ecx + 0x10]
and edx, 0x7fff
test eax, eax
mov edx, dword [edx*8 + 0x6d76a240]
jne 0x6d75d1fd
mov eax, dword [ebp]
mov esi, 0xfffffffc
lea edx, [eax + 1]
sub esi, edx
add ecx, esi
mov byte [eax], 0xe9
mov dword [eax + 1], ecx
add eax, 5
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d7539e8
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75b3ed
mov edx, dword [edi + 0x10]
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
and edx, 0x7fff
cmp ecx, eax
je 0x6d75c9d3
mov dword [esp + 8], ecx
mov ecx, 6
mov dword [esp + 4], eax
mov eax, ebp
mov dword [esp], edx
xor edx, edx
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d75883d
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 4
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d741af0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x10]
mov edx, dword [edi + 0x20]
and eax, 0x7fff
and ecx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [ecx*8 + 0x6d76a240]
and eax, 0x7fff
and ecx, 0x7fff
test edx, edx
jne 0x6d75a336
mov dword [esp], eax
mov edx, 4
mov eax, ebp
call fcn.6d74b1d0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7592d1
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75add3
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b9b0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
test byte [edx + 8], 2
je 0x6d7597fb
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test esi, esi
jne 0x6d75bfba
mov dword [esp], eax
mov edx, 0xe
mov eax, ebp
call fcn.6d740420
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x10]
mov eax, dword [edi + 0x20]
test byte [ecx + 8], 2
je 0x6d7599d0
and eax, 0x7fff
mov ecx, dword [ecx + 0x10]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
cmp edx, eax
je 0x6d75bf4d
mov dword [esp + 4], edx
mov edx, 0xe
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7594f1
mov esi, dword [eax + 0x10]
mov edx, 0x28
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
sub esi, eax
lea edx, [esi - 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x81
mov dword [eax + 2], edx
add eax, 6
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758628
mov edx, dword [edi + 0x18]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740700
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 1
mov dword [esp + 4], 1
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74a860
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d753d20
mov edx, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
jbe 0x6d75b7fd
and eax, 0x7fff
mov ecx, 0xa
mov eax, dword [eax*8 + 0x6d76a240]
xor edx, edx
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d759543
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov ecx, dword [esp + 0x20]
mov edx, 0xb
mov dword [esp + 4], esi
mov esi, dword [esp + 0x28]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741af0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d753e40
mov edx, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
jbe 0x6d75b521
and eax, 0x7fff
mov ecx, 0xb
mov eax, dword [eax*8 + 0x6d76a240]
xor edx, edx
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
test byte [edx + 8], 2
je 0x6d75a0e3
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test esi, esi
jne 0x6d75b73c
mov dword [esp], eax
mov edx, 4
mov eax, ebp
call fcn.6d740420
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x10]
mov eax, dword [edi + 0x20]
test byte [ecx + 8], 2
je 0x6d758f83
and eax, 0x7fff
mov ecx, dword [ecx + 0x10]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
cmp edx, eax
je 0x6d75bcfa
mov dword [esp + 4], edx
mov edx, 4
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d753f4d
lea eax, [esi - 0x10]
cmp eax, 6
jbe 0x6d75b4dc
and esi, 0x7fff
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov ecx, 3
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edx*8 + 0x6d76a240]
xor edx, edx
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d758cad
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov ecx, dword [esp + 0x20]
mov edx, 7
mov dword [esp + 4], esi
mov esi, dword [esp + 0x28]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, eax
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0x18]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, eax
mov dword [esp + 0x24], eax
mov eax, dword [edi + 0x10]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, eax
and esi, 0x7fff
cmp ecx, edx
mov dword [esp + 0x20], esi
je 0x6d75a63e
cmp edx, dword [esp + 0x20]
je 0x6d75ca71
cmp ecx, dword [esp + 0x20]
je 0x6d75ce8a
mov ecx, dword [ebp]
shl edx, 3
and eax, 7
or edx, 0xffffffc0
or edx, eax
mov byte [ecx + 1], dl
mov edx, dword [esp + 0x28]
mov byte [ecx], 0x89
mov byte [ecx + 2], 9
and edx, 7
shl edx, 3
or edx, 0xffffffc0
or eax, edx
mov byte [ecx + 3], al
add ecx, 4
mov dword [ebp], ecx
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d75983f
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75ab9d
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74bf90
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758366
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75415c
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d47f
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740e50
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
test byte [edx + 8], 2
je 0x6d75a04d
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test esi, esi
jne 0x6d75b6c4
mov dword [esp], eax
mov edx, 8
mov eax, ebp
call fcn.6d740420
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757932
mov ecx, dword [eax + 0x10]
mov edx, 0xc
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7579cb
mov esi, dword [eax + 0x10]
xor edx, edx
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
sub esi, eax
lea edx, [esi - 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x82
mov dword [eax + 2], edx
add eax, 6
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x18]
mov ecx, dword [esp + 0x20]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
mov eax, esi
and eax, 0x7fff
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, eax
and edx, 0x7fff
cmp ecx, edx
je 0x6d75b48f
cmp dword [esp + 0x28], edx
je 0x6d7542f3
mov ecx, dword [esp + 0x28]
mov esi, eax
mov edx, dword [ebp]
and esi, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, esi
mov byte [edx], 0x89
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
mov ecx, dword [esp + 0x20]
and eax, 7
mov edx, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, eax
mov byte [edx], 0x11
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d758744
mov edx, dword [edi + 0x18]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7430d0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d759799
mov esi, dword [eax*8 + 0x6d76a240]
mov edx, 8
xor ecx, ecx
mov eax, dword [edi + 0x20]
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d742e90
mov eax, dword [ebp]
lea edx, [esi + 1]
or edx, 0xffffffd8
mov byte [eax], 0xdd
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75a091
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov esi, edx
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
and esi, 0x7fff
je 0x6d75b754
mov edx, dword [ebp]
or esi, 0xffffffc8
mov ecx, esi
mov byte [edx + 1], cl
xor ecx, ecx
mov byte [edx], 0xd9
add edx, 2
mov dword [ebp], edx
mov edx, 0xa
mov dword [esp], eax
mov eax, ebp
mov dword [esp + 4], 0x17
call fcn.6d742e90
mov eax, dword [ebp]
mov edx, esi
mov byte [eax], 0xd9
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d759a84
mov ecx, dword [eax + 0x10]
mov edx, 0xf
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d7544b5
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75b5f8
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740b10
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d740370
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d742340
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov edx, 5
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7422a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov edx, 5
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74ad70
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x10]
mov edx, dword [edi + 0x20]
and eax, 0x7fff
and ecx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [ecx*8 + 0x6d76a240]
and eax, 0x7fff
and ecx, 0x7fff
test edx, edx
jne 0x6d75a31e
mov dword [esp], eax
mov edx, 8
mov eax, ebp
call fcn.6d74b1d0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [edi + 0x18]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
cmp ecx, eax
je 0x6d75b9c5
mov dword [esp + 4], ecx
mov ecx, edx
mov edx, 0xc
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b030
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [edi + 0x18]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
cmp ecx, eax
je 0x6d75bb31
mov dword [esp + 4], ecx
mov ecx, edx
mov edx, 2
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b030
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x10]
mov edx, dword [edi + 0x20]
and eax, 0x7fff
and ecx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [ecx*8 + 0x6d76a240]
and eax, 0x7fff
and ecx, 0x7fff
test edx, edx
jne 0x6d75a3e9
mov dword [esp], eax
mov edx, 4
mov eax, ebp
call fcn.6d74b1d0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov edx, 0xe
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b360
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [edi + 0x18]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
cmp ecx, eax
je 0x6d75bb3f
mov dword [esp + 4], ecx
mov ecx, edx
mov edx, 0xd
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b030
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [edi + 0x18]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
cmp ecx, eax
je 0x6d75b6f4
mov dword [esp + 4], ecx
mov ecx, edx
mov edx, 4
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b030
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [edi + 0x18]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
cmp ecx, eax
je 0x6d75b4cb
mov dword [esp + 4], ecx
mov ecx, edx
mov edx, 6
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b030
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [edi + 0x18]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
cmp ecx, eax
je 0x6d75bb6f
mov dword [esp + 4], ecx
mov ecx, edx
mov edx, 0xe
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b030
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 0
mov dword [esp + 4], 1
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74a860
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758e00
mov edx, dword [edi + 0x18]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75ac2d
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74bae0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d759fac
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d7549d2
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75ce57
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740c60
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x10]
mov eax, dword [edi + 0x20]
test byte [ecx + 8], 2
je 0x6d75a127
and eax, 0x7fff
mov ecx, dword [ecx + 0x10]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
cmp edx, eax
je 0x6d75b78a
mov dword [esp + 4], edx
mov edx, 0xd
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x10]
mov eax, dword [edi + 0x20]
test byte [ecx + 8], 2
je 0x6d759979
and eax, 0x7fff
mov ecx, dword [ecx + 0x10]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
cmp edx, eax
je 0x6d75bf9a
mov dword [esp + 4], edx
mov edx, 3
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7590d1
mov esi, dword [eax + 0x10]
mov edx, 0x28
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
sub esi, eax
lea edx, [esi - 6]
mov byte [eax], 0xf
mov byte [eax + 1], pe_nt_image_headers32
mov dword [eax + 2], edx
add eax, 6
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d75945f
mov edx, dword [edi + 0x18]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740660
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and esi, 0x7fff
and eax, 0x7fff
mov edx, esi
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d742d90
mov ecx, esi
mov edx, esi
mov eax, ebp
call fcn.6d742340
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d7595e8
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov ecx, dword [esp + 0x20]
mov edx, 0xa
mov dword [esp + 4], esi
mov esi, dword [esp + 0x28]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741af0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d75968d
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d743880
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x18]
mov ecx, dword [edx + 0x10]
ja 0x6d75973a
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x18]
ja 0x6d7582ee
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d75abc8
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and ecx, 0x7fff
and edx, 0x7fff
call fcn.6d742630
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d758d52
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d754d91
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75cee4
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740d70
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74a860
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74a3a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, eax
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0x18]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, eax
mov dword [esp + 0x24], eax
mov eax, dword [edi + 0x10]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, eax
and esi, 0x7fff
cmp ecx, edx
mov dword [esp + 0x20], esi
je 0x6d75a528
cmp edx, dword [esp + 0x20]
je 0x6d75caf2
cmp ecx, dword [esp + 0x20]
je 0x6d75d519
mov ecx, dword [ebp]
shl edx, 3
and eax, 7
or edx, 0xffffffc0
or edx, eax
mov byte [ecx + 1], dl
mov edx, dword [esp + 0x28]
mov byte [ecx], 0x89
mov byte [ecx + 2], 0x21
and edx, 7
shl edx, 3
or edx, 0xffffffc0
or eax, edx
mov byte [ecx + 3], al
add ecx, 4
mov dword [ebp], ecx
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x14]
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x20000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x24], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x28], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x3c], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d7423c0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 8], 0
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, dword [esp + 0x24]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d749e70
mov eax, dword [esp + 0x28]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 0
mov dword [esp + 4], 1
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74a3a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x14]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 0
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d749e70
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x28]
test eax, eax
je 0x6d75cabd
mov eax, dword [ebp]
and eax, 3
jne 0x6d75a54f
or word [edi + 8], 2
mov eax, dword [ebp]
mov dword [edi + 0x10], eax
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
mov dword [edi + 0x10], eax
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 1]
and eax, dword [ebp]
je case.0x6d74e78a.1
sub edx, eax
mov eax, ebp
call fcn.6d742690
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d75510a
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75b843
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
and edx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0xc0000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740990
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d758fda
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov ecx, dword [esp + 0x20]
mov edx, 3
mov dword [esp + 4], esi
mov esi, dword [esp + 0x28]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d75526f
lea eax, [esi - 0x10]
cmp eax, 6
jbe 0x6d75be5b
and esi, 0x7fff
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov ecx, 7
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edx*8 + 0x6d76a240]
xor edx, edx
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d7552df
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75b567
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
and edx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0xc0000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b5d0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov esi, dword [edi + 0x10]
lea eax, [esi - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d755395
lea edx, [eax - 0x10]
cmp edx, 6
jbe 0x6d75cacc
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [esi*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and ecx, 7
shl ecx, 3
and edx, 7
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax], 0xf3
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x51
mov byte [eax + 3], dl
add eax, 4
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d7553f2
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75bd39
mov ecx, dword [edi + 0x20]
and edx, 0x7fff
and eax, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov esi, dword [eax*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and edx, 0x7fff
mov dword [esp + 4], 0xc0000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], ecx
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov eax, ebp
mov dword [esp], esi
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [esp + 0x20]
and ecx, 0x7fff
call fcn.6d74b4f0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d75a869
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [eax - 0x10]
cmp ecx, 6
ja 0x6d7554b7
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d53f
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d74b5d0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d75a85e
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [eax - 0x10]
cmp ecx, 6
ja 0x6d755526
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d5ca
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d740990
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
lea eax, [edx - 0x10]
cmp eax, 6
mov eax, dword [edi + 0x18]
ja 0x6d755586
lea ecx, [eax - 0x10]
cmp ecx, 6
jbe 0x6d75bdca
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
and edx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0xc0000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b4f0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea eax, [edx - 0x10]
cmp eax, 6
ja 0x6d75563c
lea eax, [esi - 0x10]
cmp eax, 6
jbe 0x6d75b635
and esi, 0x7fff
and edx, 0x7fff
mov eax, dword [esi*8 + 0x6d76a240]
mov ecx, 2
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edx*8 + 0x6d76a240]
xor edx, edx
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d759c73
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov ecx, dword [esp + 0x20]
mov edx, 6
mov dword [esp + 4], esi
mov esi, dword [esp + 0x28]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d7593ba
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov ecx, dword [esp + 0x20]
mov edx, 2
mov dword [esp + 4], esi
mov esi, dword [esp + 0x28]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 1
mov dword [esp + 4], 0
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74a860
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d758daf
mov edx, dword [edi + 0x18]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov edx, dword [edi + 0x10]
mov dword [esp], eax
mov eax, ebp
and ecx, 0x7fff
call fcn.6d743040
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d757a62
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
and esi, 0x7fff
je 0x6d75b67a
mov ecx, dword [ebp]
or esi, 0xffffffc8
mov dword [esp + 0x24], esi
mov byte [ecx], 0xd9
mov dword [esp + 0x20], ecx
movzx ecx, byte [esp + 0x24]
mov esi, dword [esp + 0x20]
mov byte [esi + 1], cl
mov ecx, esi
add ecx, 2
mov dword [ebp], ecx
xor ecx, ecx
mov dword [esp + 4], edx
mov edx, 0xa
mov dword [esp], eax
mov eax, ebp
call fcn.6d742e90
mov eax, dword [ebp]
movzx edx, byte [esp + 0x24]
mov byte [eax], 0xd9
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, eax
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x18]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, eax
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0x10]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, eax
and esi, 0x7fff
cmp ecx, edx
mov dword [esp + 0x24], esi
je 0x6d75c6a0
cmp ecx, dword [esp + 0x24]
je 0x6d75c6c3
cmp edx, dword [esp + 0x24]
je 0x6d7559a2
mov ecx, dword [ebp]
shl edx, 3
mov esi, eax
or edx, 0xffffffc0
and esi, 7
or edx, esi
mov byte [ecx], 0x89
mov byte [ecx + 1], dl
add ecx, 2
mov dword [ebp], ecx
mov ecx, dword [esp + 0x20]
and eax, 7
mov edx, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, eax
mov byte [edx], 0x29
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
mov dword [esp + 0x20], esi
mov esi, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, esi
and ecx, 0x7fff
and eax, 0x7fff
cmp eax, ecx
je 0x6d755a19
mov edx, dword [ebp]
shl eax, 3
and esi, 7
or eax, 0xffffffc0
or eax, esi
mov byte [edx], 0x89
mov byte [edx + 1], al
add edx, 2
mov dword [ebp], edx
mov eax, dword [esp + 0x20]
mov edx, 0x10
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
test byte [edx + 8], 2
je 0x6d757c7c
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test esi, esi
jne 0x6d75b694
mov dword [esp], eax
mov edx, 5
mov eax, ebp
call fcn.6d740420
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756b1f
mov ecx, dword [eax + 0x10]
mov edx, 5
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
test byte [edx + 8], 2
je 0x6d7586b8
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test esi, esi
jne 0x6d75b433
mov dword [esp], eax
mov edx, 5
mov eax, ebp
call fcn.6d740420
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x18]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
lea esi, [eax + 1]
mov dword [esp + 0x24], esi
mov ecx, edx
mov dword [esp + 0x20], edx
mov edx, dword [edi + 0x10]
and ecx, 0x7fff
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
mov dword [esp + 0x28], edx
and edx, 0x7fff
cmp esi, 9
jbe switch.0x6d757bb1
test eax, eax
jle 0x6d755b5f
lea esi, [eax - 1]
test esi, eax
je 0x6d75d976
movsx edx, al
cmp eax, edx
mov edx, dword [ebp]
je 0x6d75d988
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x20]
mov byte [edx], 0x69
mov dword [edx + 2], eax
and ecx, 7
shl ecx, 3
and esi, 7
or ecx, 0xffffffc0
or ecx, esi
mov byte [edx + 1], cl
add edx, 6
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, edx
and eax, 0x7fff
mov dword [esp + 0x24], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov ecx, esi
and eax, 0x7fff
and ecx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x20], ecx
mov ecx, eax
and ecx, 0x7fff
cmp dword [esp + 0x20], ecx
je 0x6d75bfd2
cmp dword [esp + 0x24], ecx
je 0x6d75c8b0
mov esi, dword [esp + 0x20]
and eax, 7
and edx, 7
mov ecx, dword [ebp]
mov dword [esp + 0x24], eax
shl esi, 3
or esi, 0xffffffc0
or esi, eax
mov eax, esi
mov byte [ecx + 1], al
mov eax, dword [esp + 0x24]
mov byte [ecx], 0x89
mov byte [ecx + 2], 0xf
mov byte [ecx + 3], 0xaf
shl eax, 3
or eax, 0xffffffc0
or eax, edx
mov byte [ecx + 4], al
add ecx, 5
mov dword [ebp], ecx
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757b54
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d755c61
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d574
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740dd0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
xor ecx, ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and esi, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp]
and edx, 0x7fff
mov byte [eax], 0x8b
add eax, 1
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
mov dword [esp], esi
call fcn.6d7429b0
mov ecx, esi
mov edx, esi
mov dword [esp], 4
mov eax, ebp
call fcn.6d742d20
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov ecx, 5
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [ebp + 0x1c]
and edx, 0x7fff
mov eax, dword [eax + 0x68]
mov eax, dword [eax + 8]
mov dword [esp], eax
mov eax, ebp
call fcn.6d742d20
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x10]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, ecx
sub ecx, 0x10
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
and esi, 0x7fff
and edx, 0x7fff
cmp ecx, 6
jbe 0x6d75a310
mov dword [esp + 0xc], edx
mov ecx, 0x10
mov edx, 0xf2
mov dword [esp + 8], 0x17
mov eax, ebp
mov dword [esp + 4], esi
mov dword [esp], 0
call fcn.6d743250
mov dword [esp], 8
mov ecx, esi
mov edx, esi
mov eax, ebp
call fcn.6d742d20
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x18]
mov ecx, dword [esp + 0x20]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
mov eax, dword [edi + 0x10]
mov edx, esi
and eax, 0x7fff
and edx, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], edx
mov edx, eax
and edx, 0x7fff
cmp ecx, edx
je 0x6d75b44b
cmp dword [esp + 0x28], edx
je 0x6d755e27
mov ecx, dword [esp + 0x28]
mov esi, eax
mov edx, dword [ebp]
and esi, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, esi
mov byte [edx], 0x89
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
mov ecx, dword [esp + 0x20]
and eax, 7
mov edx, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, eax
mov byte [edx], 1
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d755e67
mov edx, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
jbe 0x6d75baa3
and eax, 0x7fff
mov ecx, 2
mov eax, dword [eax*8 + 0x6d76a240]
xor edx, edx
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d759ad5
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741e40
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d755f80
mov edx, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
jbe 0x6d75baea
and eax, 0x7fff
mov ecx, 7
mov eax, dword [eax*8 + 0x6d76a240]
xor edx, edx
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x14]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 0
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d749d60
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x14]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 0
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d749a60
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 1
mov dword [esp + 4], 1
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74a3a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x14]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 1
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d749e70
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 1
mov dword [esp + 4], 0
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d74a3a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, eax
and edx, 0x7fff
cmp esi, edx
mov dword [esp + 0x20], eax
jne 0x6d75a74f
mov edx, ecx
mov ecx, dword [esp + 0x20]
mov eax, dword [ebp]
and edx, 7
shl edx, 3
or edx, 0xffffffc0
and ecx, 7
or edx, ecx
mov byte [eax], 0x19
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
mov dword [esp + 0x20], edx
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov esi, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov ecx, esi
and ecx, 0x7fff
cmp eax, ecx
je 0x6d756287
mov edx, dword [ebp]
shl eax, 3
and esi, 7
or eax, 0xffffffc0
or eax, esi
mov byte [edx], 0x89
mov byte [edx + 1], al
add edx, 2
mov dword [ebp], edx
mov esi, dword [esp + 0x20]
mov edx, 0x28
mov eax, ebp
mov dword [esp], esi
call fcn.6d7421b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756a73
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea ecx, [edx - 0x10]
cmp ecx, 6
ja 0x6d7562c6
lea ecx, [esi - 0x10]
cmp ecx, 6
jbe 0x6d75d4b2
and edx, 0x7fff
and esi, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740c00
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756ad0
mov esi, dword [eax + 0x10]
xor edx, edx
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
sub esi, eax
lea edx, [esi - 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x81
mov dword [eax + 2], edx
add eax, 6
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757b0c
mov edx, dword [edi + 0x18]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7405c0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d742d90
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d7563ed
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75b947
mov edx, dword [edi + 0x10]
and esi, 0x7fff
and eax, 0x7fff
mov ecx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
and edx, 0x7fff
cmp ecx, eax
je 0x6d75c7c1
mov dword [esp + 8], ecx
mov ecx, 4
mov dword [esp + 4], eax
mov eax, ebp
mov dword [esp], edx
xor edx, edx
call fcn.6d7407a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d759d22
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 7
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d759b6d
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 6
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
mov edx, dword [edi + 0x20]
mov ecx, dword [edx + 0x10]
ja 0x6d756c5a
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0x40000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 3
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7419e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d7594a7
mov esi, dword [eax + 0x10]
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x20]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d742170
mov eax, dword [ebp]
sub esi, eax
lea edx, [esi - 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x85
mov dword [eax + 2], edx
add eax, 6
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x14]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 8], 1
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d749a60
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757cc0
mov esi, dword [eax + 0x10]
xor edx, edx
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
sub esi, eax
lea edx, [esi - 6]
mov byte [eax], 0xf
mov byte [eax + 1], pe_nt_image_headers32
mov dword [eax + 2], edx
add eax, 6
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757983
mov edx, dword [edi + 0x18]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740520
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756b70
mov edx, dword [edi + 0x18]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740570
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756c09
mov ecx, dword [eax + 0x10]
mov edx, 7
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d756cff
mov edx, dword [edi + 0x18]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7404d0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
test byte [eax + 8], 2
je 0x6d757a1a
mov edx, dword [edi + 0x18]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740480
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
mov dword [esp + 0x20], esi
mov esi, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, esi
and ecx, 0x7fff
and eax, 0x7fff
cmp eax, ecx
je 0x6d756929
mov edx, dword [ebp]
shl eax, 3
and esi, 7
or eax, 0xffffffc0
or eax, esi
mov byte [edx], 0x89
mov byte [edx + 1], al
add edx, 2
mov dword [ebp], edx
mov eax, dword [esp + 0x20]
xor edx, edx
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
mov dword [esp + 0x20], edx
mov edx, dword [edi + 0x10]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov esi, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov ecx, esi
and ecx, 0x7fff
cmp eax, ecx
je 0x6d75698f
mov edx, dword [ebp]
shl eax, 3
and esi, 7
or eax, 0xffffffc0
or eax, esi
mov byte [edx], 0x89
mov byte [edx + 1], al
add edx, 2
mov dword [ebp], edx
mov esi, dword [esp + 0x20]
mov edx, 0x18
mov eax, ebp
mov dword [esp], esi
call fcn.6d7421b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d742d20
jmp case.0x6d74e78a.1
cmp eax, 0xffffffff
je 0x6d75d966
cmp ecx, dword [esp + 0x20]
je 0x6d756a0c
mov edx, dword [ebp]
shl ecx, 3
and esi, 7
or ecx, 0xffffffc0
or ecx, esi
mov byte [edx], 0x89
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
mov ecx, dword [esp + 0x20]
mov edx, 0x30
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
xor edx, edx
mov esi, dword [ebp]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
mov ecx, edi
sub esi, eax
lea edx, [esi - 6]
mov dword [eax + 2], edx
lea edx, [eax + 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x83
mov eax, dword [esp + 0x2c]
mov dword [ebp], edx
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d756a8d
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d3c5
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740c00
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
xor edx, edx
mov esi, dword [ebp]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
mov ecx, edi
sub esi, eax
lea edx, [esi - 6]
mov dword [eax + 2], edx
lea edx, [eax + 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x81
mov eax, dword [esp + 0x2c]
mov dword [ebp], edx
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, 5
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d7403c0
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740570
mov ecx, edi
mov edx, eax
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, 2
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d7403c0
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, 7
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d7403c0
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [ecx*8 + 0x6d76a240]
mov ecx, 3
mov dword [esp + 8], edx
xor edx, edx
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d7404d0
mov ecx, edi
mov edx, eax
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x11
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf2
mov dword [esp + 8], 0x17
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x10]
mov dword [esp], 0
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d756db3
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75cddd
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d7410f0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d756e10
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75cdaa
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740f70
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75b00b
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c440
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d756eae
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d16c
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740fd0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d756f0b
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d784
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740eb0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75ae8d
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c1e0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
mov esi, 0xfffffffc
mov ecx, dword [edi + 0x10]
lea edx, [eax + 1]
sub esi, edx
mov edx, esi
add edx, ecx
mov byte [eax], 0xe9
mov dword [eax + 1], edx
add eax, 5
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75b189
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c570
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75700f
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75cb18
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d7414e0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75706c
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d138
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741980
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75af0d
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d550
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75b060
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d420
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and edx, 0x7fff
and eax, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and edx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7432b0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75aaca
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74dec0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d7571c3
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d317
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741920
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75b25e
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d0a0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75af37
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74cf70
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d7572a2
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75cbe4
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741590
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75b0b5
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d2f0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75b1de
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74da00
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75b10a
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d8d0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75b15f
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d7a0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75aa4a
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d670
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75aaf4
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74dc60
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x10
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf2
mov dword [esp + 8], 0x17
mov dword [esp + 4], 0x17
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x18]
mov dword [esp], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75af8c
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74db30
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75a99f
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d1d0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d757566
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75cc18
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d7417a0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x11
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf2
mov dword [esp + 8], 0x17
mov dword [esp + 4], 0x17
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x11
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf2
mov dword [esp + 8], 0x17
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [ecx*8 + 0x6d76a240]
mov ecx, 7
mov dword [esp + 8], edx
mov edx, 1
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [ecx*8 + 0x6d76a240]
mov ecx, 2
mov dword [esp + 8], edx
mov edx, 1
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov eax, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
cmp dword [esp + 0x20], eax
je 0x6d75d34b
mov ecx, dword [esp + 0x20]
mov edx, 1
mov dword [esp + 4], eax
mov eax, ebp
mov dword [esp], esi
mov dword [esp + 8], ecx
mov ecx, 6
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x28]
test eax, eax
je 0x6d757850
mov eax, dword [ebp]
and eax, 3
jne 0x6d75ca5e
or word [edi + 8], 2
mov eax, dword [ebp]
mov dword [edi + 0x10], eax
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx + 0x68]
test byte [eax + 0x44], 2
jne 0x6d757926
mov eax, dword [ebp]
mov byte [eax], 0x89
mov byte [eax + 1], 0xec
mov edx, dword [ebp + 0x1c]
add eax, 2
mov dword [ebp], eax
mov eax, dword [edx + 0x68]
test byte [eax + 0x38], 0x20
je 0x6d7578a2
mov edx, 7
mov ecx, 4
mov dword [esp], 0xc
mov eax, ebp
call fcn.6d742c60
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx + 0x68]
test byte [eax + 0x38], 0x10
je 0x6d7578c6
mov edx, 6
mov ecx, 4
mov dword [esp], 8
mov eax, ebp
call fcn.6d742c60
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx + 0x68]
test byte [eax + 0x38], 8
je 0x6d7578e7
mov dword [esp], 4
mov ecx, 4
mov edx, 3
mov eax, ebp
call fcn.6d742c60
mov ecx, 4
mov edx, 5
mov eax, ebp
mov dword [esp], 0
call fcn.6d742c60
mov edx, 4
mov eax, ebp
mov dword [esp], 0x10
mov ecx, 4
call fcn.6d742d20
mov eax, dword [ebp]
mov byte [eax], 0xc3
mov edx, dword [ebp + 0x1c]
add eax, 1
mov dword [ebp], eax
mov dword [edx + 0x68], 0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, 0xc
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d7403c0
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740520
mov ecx, edi
mov edx, eax
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
xor edx, edx
mov esi, dword [ebp]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
mov ecx, edi
sub esi, eax
lea edx, [esi - 6]
mov dword [eax + 2], edx
lea edx, [eax + 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x82
mov eax, dword [esp + 0x2c]
mov dword [ebp], edx
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740480
mov ecx, edi
mov edx, eax
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x11
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf3
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x10]
mov dword [esp], 0
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740610
mov ecx, edi
mov edx, eax
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d7405c0
mov ecx, edi
mov edx, eax
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d757b6e
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d59f
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740dd0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
jmp dword [esi*4 + 0x6d774c28]
mov dword [esp + 8], edx
mov eax, ebp
xor edx, edx
mov dword [esp], ecx
mov ecx, 0x17
mov dword [esp + 4], 3
call fcn.6d742ce0
jmp case.0x6d74e78a.1
mov dword [esp + 8], edx
mov eax, ebp
xor edx, edx
mov dword [esp], ecx
mov ecx, 0x17
mov dword [esp + 4], 2
call fcn.6d742ce0
jmp case.0x6d74e78a.1
mov dword [esp + 8], edx
mov eax, ebp
xor edx, edx
mov dword [esp], ecx
mov ecx, 0x17
mov dword [esp + 4], 1
call fcn.6d742ce0
jmp case.0x6d74e78a.1
cmp ecx, edx
je case.0x6d74e78a.1
mov edx, dword [esp + 0x28]
shl ecx, 3
mov eax, dword [ebp]
or ecx, 0xffffffc0
and edx, 7
or ecx, edx
mov byte [eax], 0x89
mov byte [eax + 1], cl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov ecx, dword [esp + 0x28]
mov eax, dword [ebp]
and ecx, 7
lea edx, [ecx*8]
or edx, 0xffffffc0
or edx, ecx
mov byte [eax], 0x31
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, ebp
call fcn.6d742340
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x20]
mov ecx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test edx, edx
jne 0x6d75bf1d
mov dword [esp], eax
mov edx, 5
mov eax, ebp
call fcn.6d740420
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
xor edx, edx
mov esi, dword [ebp]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
mov ecx, edi
sub esi, eax
lea edx, [esi - 6]
mov dword [eax + 2], edx
lea edx, [eax + 6]
mov byte [eax], 0xf
mov byte [eax + 1], pe_nt_image_headers32
mov eax, dword [esp + 0x2c]
mov dword [ebp], edx
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x20]
mov ecx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test edx, edx
jne 0x6d75bea0
mov dword [esp], eax
mov edx, 9
mov eax, ebp
call fcn.6d740420
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740a20
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d757e05
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d0d1
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d7418c0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d757e62
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d09d
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d7416e0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741240
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75acd7
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74dd90
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741150
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d758030
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75cf4c
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741740
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov eax, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
cmp dword [esp + 0x20], eax
je 0x6d75d044
mov ecx, dword [esp + 0x20]
mov edx, 1
mov dword [esp + 8], eax
mov eax, ebp
mov dword [esp], esi
mov dword [esp + 4], ecx
mov ecx, 4
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75813f
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75cfde
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741800
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75819c
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75cfb3
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741650
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov eax, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
cmp dword [esp + 0x20], eax
je 0x6d75d8b4
mov ecx, dword [esp + 0x20]
mov edx, 1
mov dword [esp + 8], eax
mov eax, ebp
mov dword [esp], esi
mov dword [esp + 4], ecx
mov ecx, 6
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d7582ab
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d441
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741540
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
lea ecx, [edx - 8]
cmp ecx, 7
ja 0x6d75a96e
and eax, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and ecx, 0x7fff
and edx, 0x7fff
call fcn.6d7408d0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75ab73
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74bc10
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d758380
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d35e
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740e50
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d7583dd
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d279
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741030
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75acad
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c6a0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75847b
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d820
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741090
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 1
mov dword [esp + 4], ecx
mov ecx, 7
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75ad2c
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74bd30
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75b332
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74be60
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, 0xf
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d742240
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740700
mov ecx, edi
mov edx, eax
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740750
mov ecx, edi
mov edx, eax
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x20]
mov ecx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test edx, edx
jne 0x6d75b7e5
mov dword [esp], eax
mov edx, 5
mov eax, ebp
call fcn.6d740420
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d7406b0
mov ecx, edi
mov edx, eax
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x10
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf3
mov dword [esp + 8], 0x17
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x20]
mov dword [esp], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 1
mov dword [esp + 4], ecx
mov ecx, 3
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov eax, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
cmp dword [esp + 0x20], eax
je 0x6d75ce44
mov ecx, dword [esp + 0x20]
xor edx, edx
mov dword [esp + 8], eax
mov eax, ebp
mov dword [esp], esi
mov dword [esp + 4], ecx
mov ecx, 4
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [ecx*8 + 0x6d76a240]
mov ecx, 2
mov dword [esp + 8], edx
xor edx, edx
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d7589ab
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d71d
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741860
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [ecx*8 + 0x6d76a240]
mov ecx, 0xa
mov dword [esp + 8], edx
mov edx, 1
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [ecx*8 + 0x6d76a240]
mov ecx, 0xb
mov dword [esp + 8], edx
mov edx, 1
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d758b58
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75cc4c
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d7415f0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov eax, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
cmp esi, eax
je 0x6d75c012
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
mov ecx, 5
mov dword [esp + 4], esi
mov edx, 1
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x11
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf2
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x10]
mov dword [esp], 0
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
xor edx, edx
mov dword [esp + 4], ecx
mov ecx, 7
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d758d6c
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d4e5
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740d70
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x11
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf3
mov dword [esp + 8], 0x17
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75ae63
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74bae0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
mov esi, 0xfffffffc
lea edx, [eax + 1]
sub esi, edx
mov edx, esi
add edx, ecx
mov byte [eax], 0xe8
mov dword [eax + 1], edx
add eax, 5
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75ac83
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c900
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x10
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf3
mov dword [esp + 8], 0x17
mov dword [esp + 4], 0x17
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x18]
mov dword [esp], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75b288
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c0b0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d758f40
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d21b
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740cc0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [ebp]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
cmp edx, eax
je 0x6d75bb50
mov dword [esp + 4], edx
mov edx, 4
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
xor edx, edx
mov dword [esp + 4], ecx
mov ecx, 3
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x10
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf3
mov dword [esp + 8], 0x17
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x18]
mov dword [esp], 0
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, 0x28
mov esi, dword [ebp]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
mov ecx, edi
sub esi, eax
lea edx, [esi - 6]
mov dword [eax + 2], edx
lea edx, [eax + 6]
mov byte [eax], 0xf
mov byte [eax + 1], pe_nt_image_headers32
mov eax, dword [esp + 0x2c]
mov dword [ebp], edx
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75913d
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75ceb0
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740f10
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75b2b2
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c310
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x11
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf3
mov dword [esp + 8], 0x17
mov dword [esp + 4], 0x17
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75ab49
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c7d0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x20]
mov esi, dword [ebp]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d742170
mov eax, dword [ebp]
mov ecx, edi
sub esi, eax
lea edx, [esi - 6]
mov dword [eax + 2], edx
lea edx, [eax + 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x84
mov eax, dword [esp + 0x2c]
mov dword [ebp], edx
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x20]
mov ecx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test edx, edx
jne 0x6d75b6ac
mov dword [esp], eax
mov edx, 6
mov eax, ebp
call fcn.6d740420
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75afb6
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74b9b0
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 1
mov dword [esp + 4], ecx
mov ecx, 2
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [edx*8 + 0x6d76a240]
xor edx, edx
mov dword [esp + 4], ecx
mov ecx, 2
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740660
mov ecx, edi
mov edx, eax
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x20]
mov esi, dword [ebp]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d742170
mov eax, dword [ebp]
mov ecx, edi
sub esi, eax
lea edx, [esi - 6]
mov dword [eax + 2], edx
lea edx, [eax + 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x85
mov eax, dword [esp + 0x2c]
mov dword [ebp], edx
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, 0x28
mov esi, dword [ebp]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
mov ecx, edi
sub esi, eax
lea edx, [esi - 6]
mov dword [eax + 2], edx
lea edx, [eax + 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x81
mov eax, dword [esp + 0x2c]
mov dword [ebp], edx
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [ecx*8 + 0x6d76a240]
mov ecx, 0xb
mov dword [esp + 8], edx
xor edx, edx
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [ecx*8 + 0x6d76a240]
mov ecx, 0xa
mov dword [esp + 8], edx
xor edx, edx
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and esi, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov eax, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
cmp esi, eax
je 0x6d75b8d4
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
mov ecx, 5
mov dword [esp + 4], esi
xor edx, edx
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
jmp case.0x6d74e78a.1
cmp eax, 0xffffffff
je 0x6d75d951
cmp ecx, dword [esp + 0x20]
je 0x6d759781
mov edx, dword [ebp]
shl ecx, 3
and esi, 7
or ecx, 0xffffffc0
or ecx, esi
mov byte [edx], 0x89
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
mov ecx, dword [esp + 0x20]
mov edx, 8
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x10
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf3
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x18]
mov dword [esp], 0
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x20]
mov ecx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test edx, edx
jne 0x6d75b4b3
mov dword [esp], eax
mov edx, 0xe
mov eax, ebp
call fcn.6d740420
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d75b35c
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74bf90
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
mov ecx, dword [ebp]
and eax, 0x7fff
test edx, edx
mov eax, dword [eax*8 + 0x6d76a240]
jne 0x6d75d665
lea eax, [ecx + 1]
mov edx, 0xfffffffc
sub edx, eax
mov eax, edx
add eax, ecx
mov byte [ecx], 0xe9
mov dword [ecx + 1], eax
add ecx, 5
mov dword [ebp], ecx
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d7598e4
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75cbb1
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741480
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, 0x28
mov esi, dword [ebp]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
mov ecx, edi
sub esi, eax
lea edx, [esi - 6]
mov dword [eax + 2], edx
lea edx, [eax + 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x82
mov eax, dword [esp + 0x2c]
mov dword [ebp], edx
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [ebp]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
cmp edx, eax
je 0x6d75bf6d
mov dword [esp + 4], edx
mov edx, 3
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [ebp]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
cmp edx, eax
je 0x6d75b705
mov dword [esp + 4], edx
mov edx, 0xe
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d759a41
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d750
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740d10
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x20]
mov edx, 0xf
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d7403c0
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d740b10
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov eax, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
cmp dword [esp + 0x20], eax
je 0x6d75d46c
mov ecx, dword [esp + 0x20]
xor edx, edx
mov dword [esp + 4], eax
mov eax, ebp
mov dword [esp], esi
mov dword [esp + 8], ecx
mov ecx, 6
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [ebp]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
cmp edx, eax
je 0x6d75bd1a
mov dword [esp + 4], edx
mov edx, 6
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov edx, dword [esp + 0x28]
mov eax, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
cmp dword [esp + 0x20], eax
je 0x6d75d057
mov ecx, dword [esp + 0x20]
xor edx, edx
mov dword [esp + 8], eax
mov eax, ebp
mov dword [esp], esi
mov dword [esp + 4], ecx
mov ecx, 6
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b8a0
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [ecx*8 + 0x6d76a240]
mov ecx, 7
mov dword [esp + 8], edx
xor edx, edx
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x10
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf2
mov dword [esp + 8], 0x17
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x18]
mov dword [esp], 0
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, 0x28
mov esi, dword [ebp]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7421b0
mov eax, dword [ebp]
mov ecx, edi
sub esi, eax
lea edx, [esi - 6]
mov dword [eax + 2], edx
lea edx, [eax + 6]
mov byte [eax], 0xf
mov byte [eax + 1], 0x83
mov eax, dword [esp + 0x2c]
mov dword [ebp], edx
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x10
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf2
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x20]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 8], eax
mov eax, dword [edi + 0x18]
mov dword [esp], 0
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
and esi, 0x7fff
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74ce10
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov dword [esp], esi
mov eax, dword [ecx*8 + 0x6d76a240]
mov ecx, 3
mov dword [esp + 8], edx
mov edx, 1
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d7407a0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
lea ecx, [edx - 8]
cmp ecx, 7
ja 0x6d75ad56
and eax, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and ecx, 0x7fff
and edx, 0x7fff
call fcn.6d741330
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
lea edx, [eax - 0x10]
cmp edx, 6
ja 0x6d759fc6
lea edx, [esi - 0x10]
cmp edx, 6
jbe 0x6d75d6ea
and eax, 0x7fff
and esi, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d740c60
mov edx, eax
mov eax, dword [esp + 0x2c]
mov ecx, edi
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x20]
mov ecx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test edx, edx
jne 0x6d75b6dc
mov dword [esp], eax
mov edx, 2
mov eax, ebp
call fcn.6d740420
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x20]
mov ecx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test edx, edx
jne 0x6d75b772
mov dword [esp], eax
mov edx, 8
mov eax, ebp
call fcn.6d740420
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, 0x11
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 0xf3
mov dword [esp + 8], 0x17
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x10]
mov dword [esp], 0
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
call fcn.6d743250
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x18]
mov edx, dword [edi + 0x20]
mov ecx, dword [ebp]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
test edx, edx
jne 0x6d75b7aa
mov dword [esp], eax
mov edx, 4
mov eax, ebp
call fcn.6d740420
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [ebp]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x18]
and edx, 0x7fff
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
and eax, 0x7fff
cmp edx, eax
je 0x6d75c10f
mov dword [esp + 4], edx
mov edx, 0xd
mov dword [esp], eax
mov eax, ebp
call fcn.6d7403c0
mov edx, dword [ebp]
mov ecx, edi
mov eax, dword [esp + 0x2c]
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
mov edx, dword [ebp]
mov ecx, dword [edi + 0x18]
and eax, 0x7fff
mov eax, dword [eax*8 + 0x6d76a240]
mov dword [edx + 1], ecx
mov ecx, edi
and eax, 7
or eax, 0xffffffb8
mov byte [edx], al
mov eax, dword [esp + 0x2c]
add edx, 5
mov dword [ebp], edx
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov dword [esp + 4], 0x24000000
mov dword [esp], ebp
call fcn.6d749670
mov edx, eax
and edx, 0x7fff
mov dword [esp + 0x24], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov ecx, eax
and ecx, 0x7fff
cmp esi, ecx
je 0x6d75a204
mov ecx, dword [ebp]
shl esi, 3
and eax, 7
or esi, 0xffffffc0
or eax, esi
mov byte [ecx], 0x89
mov byte [ecx + 1], al
mov eax, dword [edx*8 + 0x6d76a240]
add ecx, 2
mov dword [ebp], ecx
mov edx, dword [esp + 0x20]
and eax, 7
mov ecx, dword [ebp]
and edx, 7
shl edx, 3
or edx, 0xffffffc0
or eax, edx
mov byte [ecx + 2], al
mov eax, dword [esp + 0x24]
mov byte [ecx], 0xf
mov byte [ecx + 1], 0xb6
add ecx, 3
mov dword [ebp], ecx
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.6d749500
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 7
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b360
jmp case.0x6d74e78a.1
mov dword [esp + 4], 0x24000000
mov dword [esp], ebp
call fcn.6d749670
mov edx, eax
and edx, 0x7fff
mov dword [esp + 0x24], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov ecx, eax
and ecx, 0x7fff
cmp esi, ecx
je 0x6d75a2a6
mov ecx, dword [ebp]
shl esi, 3
and eax, 7
or esi, 0xffffffc0
or eax, esi
mov byte [ecx], 0x89
mov byte [ecx + 1], al
mov eax, dword [edx*8 + 0x6d76a240]
add ecx, 2
mov dword [ebp], ecx
mov edx, dword [esp + 0x20]
and eax, 7
mov ecx, dword [ebp]
and edx, 7
shl edx, 3
or edx, 0xffffffc0
or eax, edx
mov byte [ecx + 2], al
mov eax, dword [esp + 0x24]
mov byte [ecx], 0xf
mov byte [ecx + 1], 0xbe
add ecx, 3
mov dword [ebp], ecx
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.6d749500
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 3
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b360
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 5
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b360
jmp case.0x6d74e78a.1
mov ecx, esi
mov eax, ebp
call fcn.6d742ff0
jmp 0x6d755d93
mov dword [esp + 4], edx
mov edx, 0xc
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b360
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 6
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b360
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
and esi, 7
lea edx, [esi*8]
or edx, 0xffffffc0
or edx, esi
mov byte [eax], 0x31
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
mov edx, esi
mov byte [eax], 0x88
add eax, 1
mov dword [ebp], eax
mov eax, ebp
mov dword [esp], ecx
xor ecx, ecx
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
mov edx, esi
mov byte [eax], 0x88
add eax, 1
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
mov dword [esp], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 0xd
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b360
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 4
mov dword [esp], eax
mov eax, ebp
call fcn.6d74b360
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
mov edx, dword [esp + 0x20]
mov byte [eax], 0x88
add eax, 1
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 4], ecx
xor ecx, ecx
mov dword [esp], edx
mov edx, esi
mov dword [esp + 8], 0
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
mov byte [eax], 0x88
add eax, 1
mov dword [ebp], eax
mov eax, ebp
mov dword [esp], ecx
mov ecx, edx
mov edx, esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x17
call fcn.6d7429b0
jmp case.0x6d74e78a.1
mov dword [esp], 3
mov ecx, 4
mov edx, 4
mov eax, ebp
call fcn.6d742c20
jmp 0x6d74e832
mov edx, 8
mov ecx, 4
mov dword [esp], 6
mov eax, ebp
call fcn.6d742c20
mov edx, dword [ebp + 0x1c]
jmp 0x6d74e825
mov edx, 0xc
mov ecx, 4
mov dword [esp], 7
mov eax, ebp
call fcn.6d742c20
mov edx, dword [ebp + 0x1c]
jmp 0x6d74e818
mov ecx, dword [esp + 0x24]
and edx, 7
mov eax, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, edx
mov byte [eax], 1
mov byte [eax + 1], cl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
and ecx, 7
lea edx, [ecx*8]
or edx, 0xffffffc0
or edx, ecx
mov byte [eax], 0x31
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
and ecx, 7
lea edx, [ecx*8]
or edx, 0xffffffc0
or edx, ecx
mov byte [eax], 0x31
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
cmp ecx, esi
je case.0x6d74e78a.1
mov edx, dword [ebp]
shl ecx, 3
and eax, 7
or ecx, 0xffffffc0
or ecx, eax
mov byte [edx], 0x89
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov edx, 4
sub edx, eax
mov eax, ebp
call fcn.6d742690
jmp 0x6d7550b8
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
jmp 0x6d75072b
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
jmp 0x6d750850
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
jmp 0x6d750b4e
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x18]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d7423c0
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d742ee0
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
xor ecx, ecx
mov byte [eax], 0xdd
mov byte [eax + 1], 0xd9
add eax, 2
mov dword [ebp], eax
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d7438c0
jmp case.0x6d74e78a.1
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
jmp 0x6d752a49
and eax, 0x7fff
mov edx, dword [esi*8 + 0x6d76a240]
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
and ecx, 0x7fff
call fcn.6d742630
jmp case.0x6d74e78a.1
cmp ecx, esi
je case.0x6d74e78a.1
mov edx, dword [ebp]
shl ecx, 3
and eax, 7
or ecx, 0xffffffc0
or ecx, eax
mov byte [edx], 0x89
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov edx, dword [esi*8 + 0x6d76a240]
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
and ecx, 0x7fff
call fcn.6d742f40
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
mov ecx, 5
mov edx, 0xfffffff4
mov byte [eax], 0xdd
mov byte [eax + 1], 0xd9
add eax, 2
mov dword [ebp], eax
mov eax, dword [edi + 0x10]
mov dword [esp], 0
and eax, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov eax, ebp
call fcn.6d7431c0
mov ecx, 5
mov eax, ebp
mov dword [esp], 0xfffffff4
and esi, 0x7fff
mov edx, esi
call fcn.6d7432b0
jmp case.0x6d74e78a.1
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
jmp 0x6d752c24
mov eax, ecx
and eax, 0x7fff
cmp eax, edx
je 0x6d75a7ba
mov edx, dword [esp + 0x20]
shl esi, 3
mov eax, dword [ebp]
or esi, 0xffffffc0
and edx, 7
or edx, esi
mov byte [eax], 0x89
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp 0x6d7512cc
and eax, 0x7fff
mov edx, dword [esi*8 + 0x6d76a240]
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
and ecx, 0x7fff
call fcn.6d742630
jmp case.0x6d74e78a.1
mov eax, ecx
and eax, 0x7fff
cmp eax, edx
je 0x6d75a89f
mov edx, dword [esp + 0x20]
shl esi, 3
mov eax, dword [ebp]
or esi, 0xffffffc0
and edx, 7
or edx, esi
mov byte [eax], 0x89
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp 0x6d75620e
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
jmp 0x6d752c93
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
call fcn.6d742ee0
jmp case.0x6d74e78a.1
mov dword [esp + 4], 0x20000000
mov dword [esp], ebp
mov dword [esp + 0x1c], edx
call fcn.6d749670
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ecx
and eax, 0x7fff
cmp edx, eax
je 0x6d75a80b
mov eax, dword [ebp]
shl edx, 3
and ecx, 7
or edx, 0xffffffc0
or edx, ecx
mov byte [eax], 0x89
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
movzx ecx, byte [esp + 0x20]
shl esi, 3
or esi, 0xffffffc0
mov eax, dword [ebp]
and ecx, 7
mov edx, ecx
or edx, esi
mov esi, dword [esp + 0x28]
mov byte [eax], 0x89
mov byte [eax + 1], dl
mov edx, dword [esi*8 + 0x6d76a240]
mov byte [eax + 2], 0x29
and edx, 7
shl edx, 3
or edx, 0xffffffc0
or edx, ecx
mov byte [eax + 3], dl
add eax, 4
mov dword [ebp], eax
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
jmp 0x6d755526
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
jmp 0x6d7554b7
and eax, 0x7fff
mov edx, dword [esi*8 + 0x6d76a240]
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and edx, 0x7fff
and ecx, 0x7fff
call fcn.6d742f40
jmp case.0x6d74e78a.1
mov dword [esp + 4], 0x20000000
mov dword [esp], ebp
mov dword [esp + 0x1c], edx
call fcn.6d749670
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ecx
and eax, 0x7fff
cmp edx, eax
je 0x6d75a8f0
mov eax, dword [ebp]
shl edx, 3
and ecx, 7
or edx, 0xffffffc0
or edx, ecx
mov byte [eax], 0x89
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
movzx ecx, byte [esp + 0x20]
shl esi, 3
or esi, 0xffffffc0
mov eax, dword [ebp]
and ecx, 7
mov edx, ecx
or edx, esi
mov esi, dword [esp + 0x28]
mov byte [eax], 0x89
mov byte [eax + 1], dl
mov edx, dword [esi*8 + 0x6d76a240]
mov byte [eax + 2], 0x19
and edx, 7
shl edx, 3
or edx, 0xffffffc0
or edx, ecx
mov byte [eax + 3], dl
add eax, 4
mov dword [ebp], eax
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74bca0
jmp case.0x6d74e78a.1
and edx, 0x7fff
and eax, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
and ecx, 0x7fff
and edx, 0x7fff
call fcn.6d7438c0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d260
jmp 0x6d75753a
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74daa0
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74dbd0
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74dd00
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d710
jmp 0x6d757436
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d5e0
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74df60
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74df60
jmp 0x6d757197
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74dd00
jmp 0x6d757477
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74bdd0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c870
jmp 0x6d759231
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74bca0
jmp 0x6d758354
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c020
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov ecx, 0x11
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 0xf3
mov dword [esp + 8], 0x17
mov dword [esp + 4], 5
and esi, 0x7fff
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, ebp
mov dword [esp], 0xfffffff4
call fcn.6d743250
mov ecx, 5
mov edx, esi
mov dword [esp], 0xfffffff4
mov eax, ebp
call fcn.6d7430d0
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74bb80
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c9a0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c9a0
jmp 0x6d758e92
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c740
jmp 0x6d75844f
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74de30
jmp 0x6d757f6c
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74bf00
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74bdd0
jmp 0x6d758595
and eax, 0x7fff
and edx, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov ecx, 5
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 0xfffffff4
and esi, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7431c0
mov ecx, 5
mov edx, esi
mov dword [esp], 0xfffffff4
mov eax, ebp
call fcn.6d7432b0
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c870
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74ba50
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov esi, dword [eax*8 + 0x6d76a240]
mov ecx, 0x11
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 0xf2
mov dword [esp + 8], 0x17
mov dword [esp + 4], 5
and esi, 0x7fff
and eax, 0x7fff
mov dword [esp + 0xc], eax
mov eax, ebp
mov dword [esp], 0xfffffff4
call fcn.6d743250
mov ecx, 5
mov edx, esi
mov dword [esp], 0xfffffff4
mov eax, ebp
call fcn.6d743170
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74bb80
jmp 0x6d758e2f
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c280
jmp 0x6d756f7d
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c610
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d4c0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d5e0
jmp 0x6d7570de
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d010
jmp 0x6d757276
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d260
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74dbd0
jmp 0x6d7574f9
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74ba50
jmp 0x6d759300
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c280
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c4e0
jmp 0x6d756e82
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c4e0
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d4c0
jmp 0x6d75711f
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d390
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d390
jmp 0x6d757314
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d840
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d970
jmp 0x6d7573b4
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d710
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d840
jmp 0x6d7573f5
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c610
jmp 0x6d756fe3
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d970
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74daa0
jmp 0x6d757373
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d140
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74d010
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74d140
jmp 0x6d757235
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c150
jmp 0x6d758f14
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c3b0
jmp 0x6d7591af
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c3b0
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c740
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74bf00
jmp 0x6d7585d6
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d74c020
jmp 0x6d75986e
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74c150
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [edi + 0x20]
and ecx, 0x7fff
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov eax, ebp
call fcn.6d74de30
jmp case.0x6d74e78a.1
mov ecx, 1
mov eax, ebp
call fcn.6d7423a0
jmp case.0x6d74e78a.1
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
and edx, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, 6
and eax, 0x7fff
mov dword [esp], eax
and ecx, 0x7fff
mov eax, ebp
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov dword [esp], eax
mov edx, 7
mov eax, ebp
mov dword [esp + 4], esi
call fcn.6d742240
jmp case.0x6d74e78a.1
mov ecx, esi
mov edx, dword [ebp]
and eax, 7
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, eax
mov byte [edx], 1
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
mov esi, 0xfffffffc
lea edx, [eax + 1]
sub esi, edx
add ecx, esi
mov byte [eax], 0xe9
mov dword [eax + 1], ecx
add eax, 5
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov ecx, esi
mov edx, dword [ebp]
and eax, 7
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, eax
mov byte [edx], 0x11
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 0xe
mov dword [esp], eax
mov eax, ebp
call fcn.6d742240
jmp 0x6d75982c
mov ecx, 1
mov eax, ebp
call fcn.6d7423a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 3
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [edi + 0x10]
and eax, 0x7fff
and ecx, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 0xb
mov ecx, dword [ecx*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
and ecx, 0x7fff
mov eax, ebp
call fcn.6d741af0
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x20]
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0x40000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d743710
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741e40
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 2
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
xor ecx, ecx
mov edx, 0xa
mov dword [esp], eax
mov eax, ebp
call fcn.6d742e90
jmp case.0x6d74e78a.1
mov dword [esp], eax
mov edx, 5
mov eax, ebp
mov dword [esp + 4], esi
call fcn.6d742240
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 6
mov dword [esp], eax
mov eax, ebp
call fcn.6d742240
jmp 0x6d7592be
mov dword [esp], eax
mov edx, 0xc
mov eax, ebp
mov dword [esp + 4], esi
call fcn.6d742240
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 2
mov dword [esp], eax
mov eax, ebp
call fcn.6d742240
jmp 0x6d75a03a
mov ecx, 1
mov eax, ebp
call fcn.6d7423a0
jmp case.0x6d74e78a.1
lea eax, [ecx + 1]
mov edx, 0xfffffffc
sub edx, eax
mov eax, edx
add eax, ecx
mov byte [ecx], 0xe9
mov dword [ecx + 1], eax
add ecx, 5
mov dword [ebp], ecx
jmp 0x6d759a14
mov dword [esp], eax
mov edx, 2
mov eax, ebp
mov dword [esp + 4], esi
call fcn.6d742240
jmp case.0x6d74e78a.1
mov dword [esp], eax
mov edx, 4
mov eax, ebp
mov dword [esp + 4], esi
call fcn.6d742240
jmp case.0x6d74e78a.1
mov dword [esp], eax
xor ecx, ecx
mov edx, 0xa
mov dword [esp + 4], 0x17
mov eax, ebp
call fcn.6d742e90
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 0xc
mov dword [esp], eax
mov eax, ebp
call fcn.6d742240
jmp 0x6d75a07e
mov eax, dword [ebp]
mov esi, 0xfffffffc
lea edx, [eax + 1]
sub esi, edx
add ecx, esi
mov byte [eax], 0xe9
mov dword [eax + 1], ecx
add eax, 5
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 4
mov dword [esp], eax
mov eax, ebp
call fcn.6d742240
jmp 0x6d75a114
mov edx, dword [ebp]
and eax, 7
lea ecx, [eax*8]
or ecx, 0xffffffc0
or eax, ecx
mov byte [edx], 0x31
mov byte [edx + 1], al
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 7
mov dword [esp], eax
mov eax, ebp
call fcn.6d742240
jmp 0x6d7586e9
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [edi + 0x10]
and eax, 0x7fff
and ecx, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 0xa
mov ecx, dword [ecx*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
and ecx, 0x7fff
mov eax, ebp
call fcn.6d741af0
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x20]
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0x40000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7435b0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov ecx, dword [esp + 0x20]
mov eax, dword [ebp]
and ecx, 7
lea edx, [ecx*8]
or edx, 0xffffffc0
or edx, ecx
mov byte [eax], 0x31
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp 0x6d759725
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
call fcn.6d7424e0
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
call fcn.6d742550
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov edx, dword [esi*8 + 0x6d76a240]
mov dword [esp], eax
mov eax, ebp
and ecx, 0x7fff
and edx, 0x7fff
mov dword [esp + 4], edx
mov edx, 4
call fcn.6d741af0
jmp case.0x6d74e78a.1
mov dword [esp], eax
mov edx, 0xd
mov eax, ebp
mov dword [esp + 4], esi
call fcn.6d742240
jmp case.0x6d74e78a.1
xor ecx, ecx
mov eax, ebp
call fcn.6d7423c0
nop
jmp case.0x6d74e78a.1
xor ecx, ecx
mov eax, ebp
call fcn.6d7423c0
nop
jmp case.0x6d74e78a.1
xor ecx, ecx
mov eax, ebp
call fcn.6d7423c0
nop
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d743880
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x20]
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0x40000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov ecx, dword [esp + 0x28]
mov edx, esi
mov eax, dword [ecx*8 + 0x6d76a240]
mov ecx, dword [esp + 0x20]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7432e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x10]
mov edx, dword [edx*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
mov ecx, dword [ecx*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 2
mov dword [esp], eax
mov eax, ebp
and ecx, 0x7fff
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x10]
mov edx, dword [edx*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
mov ecx, dword [ecx*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 7
mov dword [esp], eax
mov eax, ebp
and ecx, 0x7fff
call fcn.6d7419e0
jmp case.0x6d74e78a.1
xor ecx, ecx
mov eax, ebp
call fcn.6d7423c0
jmp case.0x6d74e78a.1
mov ecx, 1
mov eax, ebp
call fcn.6d7423a0
jmp case.0x6d74e78a.1
lea eax, [ecx + 1]
mov edx, 0xfffffffc
sub edx, eax
mov eax, edx
add eax, ecx
mov byte [ecx], 0xe9
mov dword [ecx + 1], eax
add ecx, 5
mov dword [ebp], ecx
jmp 0x6d758fc7
mov ecx, 1
mov eax, ebp
call fcn.6d7423a0
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 6
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x10]
mov edx, dword [edx*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
mov ecx, dword [ecx*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 3
mov dword [esp], eax
mov eax, ebp
and ecx, 0x7fff
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741d10
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x20]
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0x40000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d743710
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov dword [esp + 4], 0x17
mov edx, 0xa
mov eax, ebp
mov dword [esp], 0x17
call fcn.6d742e90
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
mov esi, 0xfffffffc
lea edx, [eax + 1]
sub esi, edx
add ecx, esi
mov byte [eax], 0xe9
mov dword [eax + 1], ecx
add eax, 5
mov dword [ebp], eax
jmp case.0x6d74e78a.1
lea eax, [ecx + 1]
mov edx, 0xfffffffc
sub edx, eax
mov eax, edx
add eax, ecx
mov byte [ecx], 0xe9
mov dword [ecx + 1], eax
add ecx, 5
mov dword [ebp], ecx
jmp 0x6d759c60
mov ecx, dword [edi + 0x20]
mov edx, dword [edx*8 + 0x6d76a240]
mov esi, dword [eax*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and edx, 0x7fff
mov dword [esp + 4], 0x40000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], ecx
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov edx, dword [esp + 0x28]
mov eax, ebp
mov dword [esp], esi
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [esp + 0x20]
and ecx, 0x7fff
call fcn.6d743440
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x20]
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0x40000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74b6b0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d743440
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 7
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 0xd
mov dword [esp], eax
mov eax, ebp
call fcn.6d742240
jmp 0x6d757d40
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 2
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov dword [esp + 4], 0x17
mov edx, 0x2a
mov eax, ebp
mov dword [esp], 0x17
call fcn.6d742e90
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
mov edx, 5
mov dword [esp], eax
mov eax, ebp
call fcn.6d742240
jmp 0x6d757cad
mov dword [esp], eax
mov edx, 6
mov eax, ebp
mov dword [esp + 4], esi
call fcn.6d742240
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
mov esi, 0xfffffffc
lea edx, [eax + 1]
sub esi, edx
add ecx, esi
mov byte [eax], 0xe9
mov dword [eax + 1], ecx
add eax, 5
mov dword [ebp], eax
jmp case.0x6d74e78a.1
lea eax, [ecx + 1]
mov edx, 0xfffffffc
sub edx, eax
mov eax, edx
add eax, ecx
mov byte [ecx], 0xe9
mov dword [ecx + 1], eax
add ecx, 5
mov dword [ebp], ecx
jmp 0x6d7599bd
xor ecx, ecx
mov eax, ebp
call fcn.6d7423c0
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
mov esi, 0xfffffffc
lea edx, [eax + 1]
sub esi, edx
add ecx, esi
mov byte [eax], 0xe9
mov dword [eax + 1], ecx
add eax, 5
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov dword [esp], eax
mov edx, 0xe
mov eax, ebp
mov dword [esp + 4], esi
call fcn.6d742240
jmp case.0x6d74e78a.1
mov ecx, dword [ebp]
and eax, 7
and edx, 7
shl eax, 3
or eax, 0xffffffc0
or eax, edx
mov byte [ecx], 0xf
mov byte [ecx + 1], 0xaf
mov byte [ecx + 2], al
add ecx, 3
mov dword [ebp], ecx
jmp case.0x6d74e78a.1
mov dword [esp + 4], edx
xor ecx, ecx
mov edx, 0x2a
mov dword [esp], eax
mov eax, ebp
call fcn.6d742e90
jmp case.0x6d74e78a.1
mov ecx, dword [esp + 0x20]
mov eax, dword [ebp]
and ecx, 7
lea edx, [ecx*8]
or edx, 0xffffffc0
or edx, ecx
mov byte [eax], 0x31
mov byte [eax + 1], dl
add eax, 2
mov dword [ebp], eax
jmp 0x6d758c36
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 3
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x20]
mov edx, dword [edx*8 + 0x6d76a240]
mov esi, dword [eax*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and edx, 0x7fff
mov dword [esp + 4], 0x40000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], ecx
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov edx, dword [esp + 0x28]
mov eax, ebp
mov dword [esp], esi
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [esp + 0x20]
and ecx, 0x7fff
call fcn.6d743440
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
lea eax, [ecx + 1]
mov edx, 0xfffffffc
sub edx, eax
mov eax, edx
add eax, ecx
mov byte [ecx], 0xe9
mov dword [ecx + 1], eax
add ecx, 5
mov dword [ebp], ecx
jmp 0x6d75a16b
mov ecx, dword [edi + 0x10]
mov edx, dword [edx*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
mov ecx, dword [ecx*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 2
mov dword [esp], eax
mov eax, ebp
and ecx, 0x7fff
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [esi*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
and ecx, 0x7fff
mov eax, ebp
and edx, 0x7fff
call fcn.6d741e40
jmp case.0x6d74e78a.1
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [edi + 0x10]
and eax, 0x7fff
and ecx, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 0xa
mov ecx, dword [ecx*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
and ecx, 0x7fff
mov eax, ebp
call fcn.6d741af0
jmp case.0x6d74e78a.1
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, dword [edi + 0x10]
and eax, 0x7fff
and edx, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, 6
and eax, 0x7fff
mov dword [esp], eax
and ecx, 0x7fff
mov eax, ebp
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [edi + 0x10]
and eax, 0x7fff
and ecx, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 0xb
mov ecx, dword [ecx*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
and ecx, 0x7fff
mov eax, ebp
call fcn.6d741af0
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
mov ecx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov edx, dword [esi*8 + 0x6d76a240]
mov dword [esp], eax
mov eax, ebp
and ecx, 0x7fff
and edx, 0x7fff
mov dword [esp + 4], edx
mov edx, 4
call fcn.6d741af0
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x10]
mov edx, dword [edx*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
mov ecx, dword [ecx*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 7
mov dword [esp], eax
mov eax, ebp
and ecx, 0x7fff
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov ecx, esi
mov eax, dword [ebp]
and edx, 7
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, edx
mov byte [eax], 1
mov byte [eax + 1], cl
add eax, 2
mov dword [ebp], eax
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 6
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x10]
mov edx, dword [edx*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and ecx, 0x7fff
mov ecx, dword [ecx*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 3
mov dword [esp], eax
mov eax, ebp
and ecx, 0x7fff
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edi + 0x10]
and ecx, 0x7fff
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d743880
jmp case.0x6d74e78a.1
mov edx, dword [edi + 0x10]
mov eax, dword [eax*8 + 0x6d76a240]
mov ecx, dword [esi*8 + 0x6d76a240]
and edx, 0x7fff
mov edx, dword [edx*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
and ecx, 0x7fff
mov eax, ebp
and edx, 0x7fff
call fcn.6d741d10
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
call fcn.6d7424e0
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
call fcn.6d742550
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x20]
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0x40000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7435b0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x20]
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0x40000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov ecx, dword [esp + 0x28]
mov edx, esi
mov eax, dword [ecx*8 + 0x6d76a240]
mov ecx, dword [esp + 0x20]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7432e0
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov ecx, dword [edi + 0x20]
mov eax, dword [eax*8 + 0x6d76a240]
mov esi, dword [edx*8 + 0x6d76a240]
mov ecx, dword [ecx + 0x10]
and eax, 0x7fff
mov dword [esp + 4], 0x40000000
and esi, 0x7fff
mov dword [esp], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.6d749670
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
mov eax, ebp
and edx, 0x7fff
call fcn.6d74cbf0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, esi
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d743440
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov dword [esp], eax
xor ecx, ecx
mov edx, 0x2a
mov dword [esp + 4], 0x17
mov eax, ebp
call fcn.6d742e90
jmp case.0x6d74e78a.1
mov eax, dword [edi + 0x10]
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 7
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d7419e0
jmp case.0x6d74e78a.1
mov edx, dword [ebp]
and eax, 7
lea ecx, [eax*8]
or ecx, 0xffffffc0
or eax, ecx
mov byte [edx], 0x31
mov byte [edx + 1], al
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov ecx, dword [esp + 0x28]
and eax, 7
mov edx, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, eax
or eax, 0xffffffd8
mov byte [edx], 0x29
mov byte [edx + 1], cl
mov byte [edx + 2], 0xf7
mov byte [edx + 3], al
add edx, 4
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
call fcn.6d749670
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x20], eax
mov eax, dword [ebp]
and edx, 7
lea ecx, [edx*8]
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax + 3], dl
mov edx, dword [esp + 0x20]
mov byte [eax], 0x66
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x76
add eax, 4
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, 0x73
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 4], 1
mov dword [esp], 2
and ecx, 0x7fff
call fcn.6d7423f0
mov ecx, dword [esp + 0x20]
mov eax, dword [ebp]
mov edx, dword [ecx*8 + 0x6d76a240]
mov ecx, esi
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
and edx, 7
or edx, ecx
mov byte [eax + 3], dl
mov byte [eax], 0x66
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x54
add eax, 4
mov dword [ebp], eax
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov ecx, 1
mov eax, ebp
call fcn.6d7423a0
jmp case.0x6d74e78a.1
mov ecx, 1
mov eax, ebp
call fcn.6d7423a0
jmp case.0x6d74e78a.1
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
mov dword [esp + 0x1c], edx
call fcn.6d749670
mov edx, dword [esp + 0x1c]
mov edx, dword [edx*8 + 0x6d76a240]
mov dword [esp + 0x28], eax
and eax, 0x7fff
mov ecx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x24], eax
mov eax, dword [ebp]
and edx, 7
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax + 3], dl
mov edx, dword [esp + 0x24]
mov byte [eax], 0x66
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x6e
add eax, 4
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, 0x73
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 4], 0x20
mov dword [esp], 6
and ecx, 0x7fff
call fcn.6d7423f0
mov ecx, dword [esp + 0x24]
mov eax, dword [ebp]
mov edx, dword [ecx*8 + 0x6d76a240]
mov ecx, dword [esp + 0x20]
mov byte [eax], 0x66
mov byte [eax + 1], 0xf
and edx, 7
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax + 3], dl
mov byte [eax + 2], 0x57
add eax, 4
mov dword [ebp], eax
mov eax, dword [esp + 0x28]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp 0x6d752781
mov ecx, 1
mov eax, ebp
call fcn.6d7423a0
jmp case.0x6d74e78a.1
mov edx, dword [ebp]
and eax, 7
and esi, 7
shl eax, 3
or eax, 0xffffffc0
or eax, esi
mov byte [edx], 0xf
mov byte [edx + 1], 0xaf
mov byte [edx + 2], al
add edx, 3
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov ecx, 1
mov eax, ebp
call fcn.6d7423a0
jmp case.0x6d74e78a.1
mov ecx, 1
mov eax, ebp
call fcn.6d7423a0
jmp case.0x6d74e78a.1
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
call fcn.6d749670
mov dword [esp + 0x24], eax
and eax, 0x7fff
mov edx, dword [eax*8 + 0x6d76a240]
mov dword [esp + 0x20], eax
mov eax, dword [ebp]
and edx, 7
lea ecx, [edx*8]
or ecx, 0xffffffc0
or edx, ecx
mov byte [eax + 3], dl
mov edx, dword [esp + 0x20]
mov byte [eax], 0x66
mov byte [eax + 1], 0xf
mov byte [eax + 2], 0x76
add eax, 4
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, 0x72
mov dword [ebp], eax
mov eax, ebp
mov dword [esp + 4], 1
mov dword [esp], 2
and ecx, 0x7fff
call fcn.6d7423f0
mov ecx, dword [esp + 0x20]
mov eax, dword [ebp]
mov edx, dword [ecx*8 + 0x6d76a240]
mov ecx, esi
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
and edx, 7
or edx, ecx
mov byte [eax + 2], dl
mov byte [eax], 0xf
mov byte [eax + 1], 0x54
add eax, 3
mov dword [ebp], eax
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d749500
jmp case.0x6d74e78a.1
mov edx, dword [ebp]
and ecx, 7
and eax, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, eax
mov byte [edx], 0x31
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov ecx, 1
mov eax, ebp
call fcn.6d7423a0
jmp case.0x6d74e78a.1
cmp eax, edx
je case.0x6d74e78a.1
mov edx, dword [ebp]
shl eax, 3
and esi, 7
or eax, 0xffffffc0
or eax, esi
mov byte [edx], 0x89
mov byte [edx + 1], al
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
mov edx, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
call fcn.6d7425c0
jmp case.0x6d74e78a.1
mov eax, dword [ebp]
mov ecx, 0xfffffffc
lea edx, [eax + 1]
sub ecx, edx
mov edx, ecx
mov ecx, edi
add edx, eax
mov dword [eax + 1], edx
lea edx, [eax + 5]
mov byte [eax], 0xe9
mov eax, dword [esp + 0x2c]
mov dword [ebp], edx
call fcn.6d7427a0
jmp case.0x6d74e78a.1
mov edx, 4
sub edx, eax
mov eax, ebp
call fcn.6d742690
jmp 0x6d757850
mov ecx, dword [esp + 0x28]
and eax, 7
mov edx, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, eax
mov byte [edx], 9
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov ecx, dword [esp + 0x28]
and eax, 7
mov edx, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, eax
mov byte [edx], 0x31
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
test byte [edi + 8], 8
je 0x6d7550b8
jmp 0x6d7550ac
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, ebp
mov edx, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and edx, 0x7fff
call fcn.6d7425c0
jmp case.0x6d74e78a.1
mov ecx, dword [esp + 0x28]
and eax, 7
mov edx, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, eax
mov byte [edx], 0x21
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 3
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d757040
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 7
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 0xb
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c80
jmp case.0x6d74e78a.1
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 7
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d759915
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 3
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d7572d3
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 4
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c80
jmp 0x6d757597
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 7
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d758b89
mov ecx, dword [eax + 0x10]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 7
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 3
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov ecx, dword [eax + 0x10]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 3
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741fe0
jmp case.0x6d74e78a.1
mov ecx, dword [eax + 0x10]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 2
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov ecx, dword [eax + 0x10]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 2
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 6
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d756e41
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 0xa
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c80
jmp 0x6d756de4
mov ecx, dword [eax + 0x10]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 6
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov ecx, 1
mov edx, esi
mov eax, ebp
call fcn.6d7423a0
jmp 0x6d7588d7
mov ecx, dword [eax + 0x10]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 3
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov ecx, dword [esp + 0x24]
and eax, 7
mov edx, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, eax
mov byte [edx], 9
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 4
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c80
jmp 0x6d75916e
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 7
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d743440
jmp case.0x6d74e78a.1
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 6
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d758061
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 4
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c80
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741fe0
jmp 0x6d7581cd
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 6
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d758170
mov ecx, dword [eax + 0x10]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 6
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov ecx, 1
mov edx, esi
mov eax, ebp
call fcn.6d7423a0
jmp 0x6d758110
mov ecx, 1
mov edx, esi
mov eax, ebp
call fcn.6d7423a0
jmp 0x6d759d0d
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 5
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c80
jmp case.0x6d74e78a.1
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 2
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d757e93
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 5
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c80
jmp 0x6d757e36
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 0xa
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c80
jmp case.0x6d74e78a.1
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 0xa
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c80
jmp 0x6d75709d
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 2
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d756edf
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 6
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741f70
jmp case.0x6d74e78a.1
and edx, 0x7fff
mov dword [esp + 4], eax
mov eax, ebp
mov dword [esp], edx
mov edx, 3
call fcn.6d742240
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741f70
jmp 0x6d758f71
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 4
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c80
jmp case.0x6d74e78a.1
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 5
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c80
jmp 0x6d75840e
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d7432e0
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d7432e0
jmp case.0x6d74e78a.1
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 0xb
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c80
jmp 0x6d7571f4
mov ecx, 1
mov edx, esi
mov eax, ebp
call fcn.6d7423a0
jmp 0x6d757828
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 2
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d7583b1
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 5
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c80
jmp case.0x6d74e78a.1
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 7
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d756abe
mov dword [esp], ecx
mov edx, 0x20
mov ecx, eax
mov eax, ebp
call fcn.6d7421b0
jmp case.0x6d74e78a.1
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 6
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741f70
jmp 0x6d7582dc
mov ecx, 1
mov edx, esi
mov eax, ebp
call fcn.6d7423a0
jmp 0x6d759c07
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 2
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov ecx, dword [eax + 0x10]
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 7
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 7
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d758d9d
mov ecx, dword [esp + 0x24]
and eax, 7
mov edx, dword [ebp]
and ecx, 7
shl ecx, 3
or ecx, 0xffffffc0
or ecx, eax
mov byte [edx], 0x21
mov byte [edx + 1], cl
add edx, 2
mov dword [ebp], edx
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d743710
jmp case.0x6d74e78a.1
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741fe0
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov edx, dword [ebp]
mov eax, ebp
call fcn.6d741fe0
jmp 0x6d757b9f
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d7435b0
jmp case.0x6d74e78a.1
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 3
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 0xb
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c80
jmp case.0x6d74e78a.1
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 3
mov dword [esp], eax
mov eax, ebp
call fcn.6d742240
jmp 0x6d7598b7
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d7435b0
jmp case.0x6d74e78a.1
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 2
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c20
jmp case.0x6d74e78a.1
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 3
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d759ff7
mov eax, dword [eax*8 + 0x6d76a240]
mov edx, 2
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d7589dc
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 3
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d759a72
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 6
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c20
jmp 0x6d756f3c
mov ecx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and eax, 0x7fff
mov dword [esp + 4], eax
mov eax, dword [edx*8 + 0x6d76a240]
mov edx, 0xa
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741c80
jmp case.0x6d74e78a.1
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d743440
jmp case.0x6d74e78a.1
mov edx, dword [esi*8 + 0x6d76a240]
mov eax, dword [eax*8 + 0x6d76a240]
and edx, 0x7fff
and eax, 0x7fff
mov dword [esp + 4], edx
mov edx, 0xb
mov dword [esp], eax
mov ecx, dword [ebp]
mov eax, ebp
call fcn.6d741c80
jmp 0x6d7584ac
mov ecx, dword [eax*8 + 0x6d76a240]
mov eax, dword [esi*8 + 0x6d76a240]
mov edx, dword [edx*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
and edx, 0x7fff
mov eax, ebp
call fcn.6d743710
jmp case.0x6d74e78a.1
mov ecx, dword [edx*8 + 0x6d76a240]
mov edx, dword [eax + 0x10]
mov eax, dword [esi*8 + 0x6d76a240]
and ecx, 0x7fff
and eax, 0x7fff
mov dword [esp], eax
mov eax, ebp
call fcn.6d741f70
jmp case.0x6d74e78a.1
mov ecx, 1
mov edx, esi
mov eax, ebp
call fcn.6d7423a0
jmp 0x6d75827c
mov dword [esp + 4], 0xc0000000
mov dword [esp], ebp
call fcn.6d749670
mov esi, dword [esi*8 + 0x6d76a240]
and esi, 7
mov edx, eax
mov ecx, eax
mov eax, dword [ebp]
and edx, 0x7fff
mov dword [esp + 0x24], edx
mov edx, dword [edx*8 + 0x6d76a240]
mov byte [eax], 0x66
mov byte [eax + 1], 0xf
and edx, 7
shl edx, 3
or edx, 0xffffffc0
or edx, esi
mov byte [eax + 3], dl
mov edx, dword [esp + 0x24]
mov byte [eax + 2], 0x6e
mov esi, dword [edx*8 + 0x6d76a240]
mov edx, dword [esp + 0x20]
mov byte [eax + 4], 0xf
mov byte [eax + 5], 0x57
and esi, 7
and edx, 7
shl edx, 3
or edx, 0xffffffc0
or edx, esi
mov byte [eax + 6], dl
add eax, 7
mov dword [ebp], eax
mov dword [esp + 4], ecx
mov dword [esp], ebp
call fcn.6d749500
jmp 0x6d752fa2
mov edx, dword [esp + 0x20]
mov ecx, 0xffffffff
mov eax, ebp
call fcn.6d7423a0
jmp case.0x6d74e78a.1
mov edx, dword [esp + 0x20]
mov eax, ebp
call fcn.6d740370
jmp case.0x6d74e78a.1
bsf eax, eax
mov dword [esp], eax
mov eax, ebp
call fcn.6d742e00
jmp case.0x6d74e78a.1
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x20]
mov byte [edx], 0x6b
mov byte [edx + 2], al
and ecx, 7
shl ecx, 3
and esi, 7
or ecx, 0xffffffc0
or ecx, esi
mov byte [edx + 1], cl
add edx, 3
mov dword [ebp], edx
jmp case.0x6d74e78a.1