Function at 0x6c4fa200
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x6c
mov ebx, dword [esp + 0x80]
mov ebp, dword [ebx + 0x1c]
mov eax, dword [ebx + 4]
test ebp, ebp
jne 0x6c4fa598
mov edi, dword [eax + 0x320]
mov ecx, dword [ebx + 0x2094]
mov edx, dword [ebx + 0x2090]
test edi, edi
mov esi, ecx
je 0x6c4faf10
imul esi, dword [ebx + 0x7c]
add esi, edx
test byte [eax + 0x2b0], 0x40
mov dword [esp + 0x44], esi
jne 0x6c4fb9e1
mov eax, dword [ebx + 0x16c8]
mov edx, dword [ebx + 0x1398]
mov edi, dword [esp + 0x44]
mov byte [edx + edi], al
mov eax, dword [ebx + 0x209c]
test eax, eax
jne 0x6c4fa28b
mov ecx, dword [ebx + 0x2728]
mov edx, pe_nt_image_headers32
shl edx, cl
mov dword [ebx + 0x166c], edx
mov dword [ebx + 0x1668], edx
mov dword [ebx + 0x1664], edx
test byte [ebx + 0x3d], 0x80
mov ecx, dword [ebx + 4]
jne 0x6c4fb382
mov esi, dword [ecx + 0x248]
test esi, esi
jne 0x6c4fb382
mov edx, dword [ecx + 0x24c]
test edx, edx
jne 0x6c4fb382
mov edx, dword [ebx + 0x38]
test edx, edx
je 0x6c4fce24
mov ebp, dword [ebx + 0x14]
test ebp, ebp
jne 0x6c4fd27d
cmp dword [ebx + 0x16e8], 3
je 0x6c4fd27d
mov edi, dword [ebx + 0x11d4]
mov ebp, 8
mov ecx, dword [ecx + 0x320]
mov esi, dword [ebx + 0x11d0]
mov dword [esp + 0x3c], edi
sar ebp, cl
mov ecx, dword [ebx + 0x2764]
mov edi, esi
shl edi, cl
mov dword [esp + 0x40], edi
mov edi, esi
imul edi, ebp
test ecx, ecx
mov ecx, dword [ebx + 0x20d8]
mov dword [esp + 0x44], ecx
mov ecx, dword [ebx + 0x20dc]
cmove esi, edi
test eax, eax
mov edi, dword [ebx + 0x20d4]
mov dword [esp + 0x4c], ecx
je 0x6c4fb481
test edx, edx
jne 0x6c4fa341
mov eax, dword [ebx + 0x30]
sub eax, 1
cmp eax, 1
jbe 0x6c4fce98
mov eax, dword [ebx + 0x16c8]
mov dword [esp + 8], 0
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
call dword [ebx + 0x27f8]
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x40]
mov dword [esp], edi
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
lea edx, [edi + ebp]
mov ecx, dword [ebx + 0x16c8]
add ebp, esi
mov dword [esp + 0x38], edx
mov dword [esp + 8], 1
sub eax, 0xffffff80
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
mov dword [esp + 0x34], eax
mov dword [esp], ebx
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
lea edx, [edi + esi]
mov ecx, dword [ebx + 0x16c8]
add edi, ebp
mov dword [esp + 0x38], edx
mov dword [esp + 8], 2
add eax, 0x100
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
mov dword [esp + 0x34], eax
mov dword [esp], ebx
call dword [ebx + 0x27f8]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 8], eax
call dword [ebx + 0x1b88]
mov ebp, dword [esp + 0x84]
mov eax, dword [ebx + 0x16c8]
mov dword [esp + 8], 3
mov dword [esp], ebx
add ebp, 0x180
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebp
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x40]
mov dword [esp + 8], ebp
mov dword [esp], edi
mov dword [esp + 4], eax
call dword [ebx + 0x1b88]
mov eax, dword [ebx + 0x2754]
test eax, eax
jne 0x6c4fbfaa
mov ebp, dword [esp + 0x84]
sar esi, 1
mov eax, dword [ebx + 0x16cc]
mov edi, dword [esp + 0x40]
mov dword [esp + 8], 4
add ebp, 0x200
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebp
sar edi, 1
mov dword [esp], ebx
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x44]
mov dword [esp + 8], ebp
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov ebp, dword [esp + 0x84]
mov eax, dword [ebx + 0x16cc]
mov dword [esp + 8], 5
mov dword [esp], ebx
add ebp, 0x280
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebp
call dword [ebx + 0x27f8]
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], ebp
mov dword [esp + 4], edi
mov dword [esp], edx
call dword [ebx + 0x1b88]
mov ecx, dword [esp + 0x44]
mov ebp, dword [esp + 0x84]
mov edx, dword [ebx + 0x16cc]
mov dword [esp + 8], 6
add ecx, esi
add ebp, 0x300
mov dword [esp + 0x40], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 4], ebp
mov dword [esp], ebx
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x40]
mov dword [esp + 8], ebp
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov ebp, dword [esp + 0x84]
mov eax, dword [ebx + 0x16cc]
add esi, dword [esp + 0x4c]
mov dword [esp + 8], 7
add ebp, 0x380
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebp
mov dword [esp], ebx
call dword [ebx + 0x27f8]
mov dword [esp + 8], ebp
mov dword [esp + 4], edi
mov dword [esp], esi
call dword [ebx + 0x1b88]
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, dword [eax + 0x320]
mov ecx, dword [ebx + 0x2094]
test edx, edx
mov edx, dword [ebx + 0x2090]
mov esi, ecx
je 0x6c4fa9f0
imul esi, dword [ebx + 0x7c]
add esi, edx
test byte [eax + 0x2b0], 0x40
mov dword [esp + 0x44], esi
jne 0x6c4fb941
mov eax, dword [ebx + 0x16c8]
mov edx, dword [ebx + 0x1398]
mov edi, dword [esp + 0x44]
mov byte [edx + edi], al
mov eax, dword [ebx + 0x209c]
test eax, eax
jne 0x6c4fb459
mov eax, dword [ebx + 0x20]
test eax, eax
jne 0x6c4fa601
mov eax, dword [ebx + 0xe4]
test eax, eax
je 0x6c4fc685
mov eax, dword [ebx + 0x16ac]
mov edx, dword [esp + 0x44]
cmp byte [eax + edx], 0
jne 0x6c4fc6b4
test byte [ebx + 0x3d], 0x80
mov edx, dword [ebx + 4]
jne 0x6c4fa636
mov edi, dword [edx + 0x248]
test edi, edi
jne 0x6c4fa636
mov esi, dword [edx + 0x24c]
test esi, esi
je 0x6c4fc335
mov edi, dword [ebx + 0x11d4]
mov ecx, dword [edx + 0x320]
mov eax, dword [ebx + 0x38]
mov esi, dword [ebx + 0x11d0]
mov dword [esp + 0x3c], edi
mov edi, 8
sar edi, cl
test eax, eax
jne 0x6c4fa682
mov edx, dword [ebx + 0x16a4]
mov eax, dword [esp + 0x44]
add eax, dword [ebx + 0x16a8]
test edx, edx
je 0x6c4fc1fe
mov dword [ebx + 0x16a4], 0
mov byte [eax], 1
mov eax, dword [ebx + 0x38]
mov ecx, dword [ebx + 0x2764]
mov edx, esi
mov ebp, esi
imul edx, edi
shl ebp, cl
test ecx, ecx
mov ecx, dword [ebx + 0x20d8]
cmove esi, edx
mov edx, dword [ebx + 0x20d4]
mov dword [esp + 0x44], ecx
mov ecx, dword [ebx + 0x209c]
mov dword [esp + 0x40], edx
mov edx, dword [ebx + 0x20dc]
test ecx, ecx
mov dword [esp + 0x4c], edx
jne 0x6c4fbd22
test eax, eax
jne 0x6c4fa73c
mov eax, dword [ebx + 4]
test byte [eax + 0x330], 1
mov eax, dword [ebx + 0x1db8]
je 0x6c4fa726
test al, 1
jne 0x6c4fd2fe
test al, 2
je 0x6c4fa726
mov edx, dword [ebx + 0x262c]
cmp dword [ebx + 0x2724], 3
mov dword [esp + 0x58], edx
je 0x6c4fd5f0
mov edx, dword [ebx + 0x78]
sub edx, 1
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov eax, dword [ebx + 0x165c]
add eax, 0x1d8
mov dword [esp], eax
call fcn.6c508490
mov eax, dword [ebx + 0x1db8]
test al, 1
lea edx, [ebx + 0x1c04]
jne 0x6c4fc9ca
test al, 2
jne 0x6c4fc947
mov eax, dword [ebx + 4]
mov eax, dword [eax + 0x354]
cmp eax, 7
jle 0x6c4fa770
mov edx, dword [ebx + 0x16e8]
cmp edx, 3
je 0x6c4fa590
cmp eax, 0x1f
jle 0x6c4fa770
cmp edx, 1
jne 0x6c4fa590
cmp eax, 0x2f
jg 0x6c4fa590
mov eax, dword [ebx + 0x38]
test eax, eax
jne 0x6c4fc3f3
mov eax, dword [ebx + 0x26d4]
test eax, eax
je 0x6c4fc3d5
cmp dword [ebx + 0x30], 0x13
je 0x6c4fa590
mov eax, dword [ebx + 0xb4]
test eax, eax
js 0x6c4fa7b9
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x40]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xb8]
test eax, eax
js 0x6c4fa7e4
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
sub eax, 0xffffff80
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
add eax, edi
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xbc]
test eax, eax
js 0x6c4fa811
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x100
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
add eax, esi
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xc0]
test eax, eax
js 0x6c4fa83f
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x180
mov dword [esp + 8], eax
lea eax, [esi + edi]
add eax, dword [esp + 0x40]
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov esi, dword [ebx + 0x2754]
test esi, esi
jne 0x6c4fce46
mov ecx, dword [ebx + 0x2764]
mov esi, dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
shl esi, cl
imul eax, edi
test ecx, ecx
mov ecx, dword [ebx + 0xc4]
cmovne eax, dword [esp + 0x3c]
test ecx, ecx
mov dword [esp + 0x3c], eax
js 0x6c4fa896
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x200
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov edx, dword [ebx + 0xc8]
test edx, edx
js 0x6c4fa8c1
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x4c]
mov dword [esp + 4], esi
add eax, 0x280
mov dword [esp + 8], eax
mov dword [esp], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xcc]
test eax, eax
js 0x6c4fa8f0
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x300
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, dword [esp + 0x3c]
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xd0]
test eax, eax
js 0x6c4fa91f
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x380
mov dword [esp + 8], eax
mov eax, dword [esp + 0x4c]
add eax, dword [esp + 0x3c]
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x2750]
test eax, eax
jne 0x6c4fa590
mov eax, dword [ebx + 0xd4]
test eax, eax
js 0x6c4fa95a
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x400
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, edi
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xd8]
test eax, eax
js 0x6c4fa987
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x480
mov dword [esp + 8], eax
mov eax, dword [esp + 0x4c]
add eax, edi
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xdc]
add edi, dword [esp + 0x3c]
test eax, eax
js 0x6c4fa9b8
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x500
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, edi
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov ebp, dword [ebx + 0xe0]
test ebp, ebp
js 0x6c4fa590
mov eax, dword [esp + 0x84]
add edi, dword [esp + 0x4c]
mov dword [esp + 4], esi
add eax, 0x580
mov dword [esp + 8], eax
mov dword [esp], edi
call dword [ebx + 0x1b8c]
jmp 0x6c4fa590
imul esi, dword [ebx + 0x7c]
add esi, edx
test byte [eax + 0x2b0], 0x40
mov dword [esp + 0x44], esi
jne 0x6c4fb7fb
mov eax, dword [ebx + 0x16c8]
mov edx, dword [ebx + 0x1398]
mov edi, dword [esp + 0x44]
mov byte [edx + edi], al
mov eax, dword [ebx + 0x209c]
test eax, eax
jne 0x6c4fb431
mov eax, dword [ebx + 0x20]
test eax, eax
jne 0x6c4faa3d
mov eax, dword [ebx + 0xe4]
test eax, eax
je 0x6c4fc2dd
mov eax, dword [ebx + 0x16ac]
mov edx, dword [esp + 0x44]
cmp byte [eax + edx], 0
jne 0x6c4fc6c1
test byte [ebx + 0x3d], 0x80
jne 0x6c4fbcf9
mov ecx, dword [ebx + 4]
mov ebp, dword [ecx + 0x248]
test ebp, ebp
jne 0x6c4fbcf9
mov edi, dword [ecx + 0x24c]
mov eax, dword [ebx + 0x38]
test edi, edi
je 0x6c4fc3a3
mov edx, dword [ebx + 0x11d4]
cmp dword [ebx + 0x16e8], 3
mov esi, dword [ebx + 0x11d0]
mov dword [esp + 0x4c], 1
mov dword [esp + 0x40], edx
je 0x6c4fc184
test eax, eax
jne 0x6c4faace
mov ebp, dword [ebx + 0x16a4]
mov eax, dword [esp + 0x44]
add eax, dword [ebx + 0x16a8]
test ebp, ebp
je 0x6c4fc1c6
mov dword [ebx + 0x16a4], 0
mov byte [eax], 1
mov eax, dword [ebx + 0x38]
mov ecx, dword [ebx + 0x2764]
mov ebp, esi
lea edx, [esi*8]
shl ebp, cl
test ecx, ecx
mov ecx, dword [esp + 0x4c]
cmovne edx, esi
mov dword [esp + 0x48], edx
test ecx, ecx
je 0x6c4fbf89
mov edx, dword [ebx + 0x20d8]
mov edi, dword [ebx + 0x20d4]
mov dword [esp + 0x3c], edx
mov edx, dword [ebx + 0x20dc]
mov dword [esp + 0x44], edx
mov edx, dword [ebx + 0x209c]
test edx, edx
jne 0x6c4fba81
test eax, eax
jne 0x6c4fabe0
mov eax, dword [ebx + 4]
test byte [eax + 0x330], 1
mov eax, dword [ebx + 0x1db8]
je 0x6c4fab84
test al, 1
jne 0x6c4fd2b7
test al, 2
je 0x6c4fab84
mov edx, dword [ebx + 0x262c]
cmp dword [ebx + 0x2724], 3
mov dword [esp + 0x5c], edx
je 0x6c4fd46f
mov edx, dword [ebx + 0x78]
sub edx, 1
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov eax, dword [ebx + 0x165c]
add eax, 0x1d8
mov dword [esp], eax
call fcn.6c508490
mov eax, dword [ebx + 0x1db8]
mov edx, dword [ebx + 0x208c]
mov ecx, dword [ebx + 0x2078]
test edx, edx
jne 0x6c4fc38b
lea edx, [ebx + 0x1c24]
test al, 1
jne 0x6c4fcdd7
test al, 2
je 0x6c4fabe0
lea eax, [ebx + 0x860]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.6c500220
mov eax, dword [ebx + 4]
mov eax, dword [eax + 0x354]
cmp eax, 7
jle 0x6c4fac16
mov edx, dword [ebx + 0x16e8]
cmp edx, 3
je 0x6c4fbc55
cmp eax, 0x1f
jle 0x6c4fac16
cmp edx, 1
jne 0x6c4fbc55
cmp eax, 0x2f
nop
jg 0x6c4fbc55
mov eax, dword [ebx + 0x38]
test eax, eax
jne 0x6c4fac53
mov eax, dword [ebx + 0x26d4]
test eax, eax
jne 0x6c4fc6ce
mov eax, dword [ebx + 0x30]
cmp eax, 1
je 0x6c4fb120
cmp eax, 2
je 0x6c4fb120
cmp eax, 0xd
jne 0x6c4fac53
mov eax, dword [ebx + 0x267c]
test eax, eax
je 0x6c4fb120
mov ecx, dword [ebx + 0xb4]
mov eax, dword [ebx + 0x16c8]
test ecx, ecx
js 0x6c4faca1
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp], ebx
mov dword [esp + 4], edx
call dword [ebx + 0x27fc]
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ebp
mov dword [esp], edi
mov dword [esp + 8], ecx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16c8]
mov edx, dword [ebx + 0xb8]
test edx, edx
js 0x6c4facf0
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp], ebx
sub edx, 0xffffff80
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27fc]
mov edx, dword [esp + 0x38]
lea eax, [edi + 8]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16c8]
mov ecx, dword [ebx + 0xbc]
test ecx, ecx
js 0x6c4fad45
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 2
mov dword [esp], ebx
add edx, 0x100
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27fc]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x38]
mov dword [esp + 4], ebp
add eax, edi
mov dword [esp], eax
mov dword [esp + 8], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16c8]
mov edx, dword [ebx + 0xc0]
test edx, edx
js 0x6c4fad96
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 3
mov dword [esp], ebx
add edx, 0x180
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27fc]
mov edx, dword [esp + 0x38]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov edx, dword [esp + 0x48]
lea eax, [edi + edx + 8]
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov ecx, dword [ebx + 0x2754]
test ecx, ecx
jne 0x6c4fc236
mov eax, dword [esp + 0x48]
sar ebp, 1
mov ecx, dword [ebx + 0xc4]
sar eax, 1
test ecx, ecx
mov dword [esp + 0x48], eax
mov eax, dword [ebx + 0x16cc]
js 0x6c4fae09
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp], ebx
add edx, 0x200
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27fc]
mov edx, dword [esp + 0x38]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov edx, dword [esp + 0x3c]
mov dword [esp], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16cc]
mov edx, dword [ebx + 0xc8]
test edx, edx
js 0x6c4fae5c
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 5
mov dword [esp], ebx
add edx, 0x280
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27fc]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x38]
mov dword [esp + 4], ebp
mov dword [esp], eax
mov dword [esp + 8], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16cc]
mov ecx, dword [ebx + 0xcc]
test ecx, ecx
js 0x6c4faeb3
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 6
mov dword [esp], ebx
add edx, 0x300
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27fc]
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
add eax, dword [esp + 0x48]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16cc]
mov edx, dword [ebx + 0xd0]
test edx, edx
js 0x6c4fbc55
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 7
mov dword [esp], ebx
add edx, 0x380
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27fc]
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x44]
add eax, dword [esp + 0x48]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp], eax
call dword [ebx + 0x1b8c]
jmp 0x6c4fbc55
imul esi, dword [ebx + 0x7c]
add esi, edx
test byte [eax + 0x2b0], 0x40
mov dword [esp + 0x44], esi
jne 0x6c4fb8a1
mov edx, dword [ebx + 0x1398]
mov eax, dword [ebx + 0x16c8]
mov edi, dword [esp + 0x44]
mov byte [edx + edi], al
mov edx, dword [ebx + 0x209c]
test edx, edx
jne 0x6c4faf63
mov ecx, dword [ebx + 0x2728]
mov eax, pe_nt_image_headers32
shl eax, cl
mov dword [ebx + 0x166c], eax
mov dword [ebx + 0x1668], eax
mov dword [ebx + 0x1664], eax
test byte [ebx + 0x3d], 0x80
je 0x6c4fb3dd
mov eax, dword [ebx + 0x38]
mov edi, dword [ebx + 0x11d4]
cmp dword [ebx + 0x16e8], 3
mov esi, dword [ebx + 0x11d0]
mov dword [esp + 0x4c], 1
mov dword [esp + 0x40], edi
je 0x6c4fc1a5
test eax, eax
jne 0x6c4fafc7
mov ebp, dword [ebx + 0x16a4]
mov eax, dword [esp + 0x44]
add eax, dword [ebx + 0x16a8]
test ebp, ebp
je 0x6c4fc217
mov dword [ebx + 0x16a4], 0
mov byte [eax], 1
mov edx, dword [ebx + 0x209c]
mov eax, dword [ebx + 0x38]
mov ecx, dword [ebx + 0x2764]
mov ebp, esi
lea edi, [esi*8]
shl ebp, cl
test ecx, ecx
mov ecx, dword [esp + 0x4c]
cmovne edi, esi
mov dword [esp + 0x48], edi
test ecx, ecx
je 0x6c4fbd01
mov ecx, dword [ebx + 0x20d8]
mov edi, dword [ebx + 0x20d4]
mov dword [esp + 0x3c], ecx
mov ecx, dword [ebx + 0x20dc]
mov dword [esp + 0x44], ecx
test edx, edx
jne 0x6c4fba81
test eax, eax
jne 0x6c4fb0d3
mov eax, dword [ebx + 4]
test byte [eax + 0x330], 1
mov eax, dword [ebx + 0x1db8]
je 0x6c4fb077
test al, 1
jne 0x6c4fd345
test al, 2
je 0x6c4fb077
mov edx, dword [ebx + 0x262c]
cmp dword [ebx + 0x2724], 3
mov dword [esp + 0x5c], edx
je 0x6c4fd6b4
mov edx, dword [ebx + 0x78]
sub edx, 1
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov eax, dword [ebx + 0x165c]
add eax, 0x1d8
mov dword [esp], eax
call fcn.6c508490
mov eax, dword [ebx + 0x1db8]
mov edx, dword [ebx + 0x208c]
mov ecx, dword [ebx + 0x2078]
test edx, edx
jne 0x6c4fc31d
lea edx, [ebx + 0x1c24]
test al, 1
jne 0x6c4fcd8a
test al, 2
je 0x6c4fb0d3
lea eax, [ebx + 0x860]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.6c500220
mov eax, dword [ebx + 4]
mov eax, dword [eax + 0x354]
cmp eax, 7
jle 0x6c4fb107
mov edx, dword [ebx + 0x16e8]
cmp edx, 3
je 0x6c4fbc55
cmp eax, 0x1f
jle 0x6c4fb107
cmp edx, 1
jne 0x6c4fbc55
cmp eax, 0x2f
jg 0x6c4fbc55
mov eax, dword [ebx + 0x38]
test eax, eax
jne 0x6c4fac53
mov ecx, dword [ebx + 0x26d4]
test ecx, ecx
je 0x6c4fac2b
mov eax, dword [ebx + 0xb4]
test eax, eax
js 0x6c4fb142
mov edx, dword [esp + 0x84]
mov dword [esp + 4], ebp
mov dword [esp], edi
mov dword [esp + 8], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xb8]
test eax, eax
js 0x6c4fb16a
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
sub eax, 0xffffff80
mov dword [esp + 8], eax
lea eax, [edi + 8]
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xbc]
test eax, eax
js 0x6c4fb197
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x100
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48]
add eax, edi
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xc0]
test eax, eax
js 0x6c4fb1c6
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x48]
mov dword [esp + 4], ebp
add eax, 0x180
mov dword [esp + 8], eax
lea eax, [edi + edx + 8]
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x2754]
test eax, eax
jne 0x6c4fc978
mov ecx, dword [ebx + 0x2764]
mov ebp, dword [esp + 0x40]
mov eax, dword [esp + 0x40]
mov edx, dword [ebx + 0xc4]
shl ebp, cl
shl eax, 3
test ecx, ecx
cmovne eax, dword [esp + 0x40]
test edx, edx
mov dword [esp + 0x48], eax
js 0x6c4fb21d
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x200
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xc8]
test eax, eax
js 0x6c4fb248
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x44]
mov dword [esp + 4], ebp
add eax, 0x280
mov dword [esp + 8], eax
mov dword [esp], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xcc]
test eax, eax
js 0x6c4fb277
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x300
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
add eax, dword [esp + 0x48]
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xd0]
test eax, eax
js 0x6c4fb2a6
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x380
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, dword [esp + 0x48]
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x2750]
test eax, eax
jne 0x6c4fbc55
mov eax, dword [ebx + 0xd4]
test eax, eax
js 0x6c4fb2e2
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x400
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
add eax, 8
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xd8]
test eax, eax
js 0x6c4fb310
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x480
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, 8
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [esp + 0x48]
mov ecx, dword [ebx + 0xdc]
add eax, 8
test ecx, ecx
js 0x6c4fb34d
mov edx, dword [esp + 0x84]
mov dword [esp + 0x34], eax
mov dword [esp + 4], ebp
add edx, 0x500
mov dword [esp + 8], edx
mov edx, dword [esp + 0x3c]
add edx, eax
mov dword [esp], edx
call dword [ebx + 0x1b8c]
mov eax, dword [esp + 0x34]
mov edx, dword [ebx + 0xe0]
test edx, edx
js 0x6c4fbc55
mov edx, dword [esp + 0x84]
add eax, dword [esp + 0x44]
mov dword [esp + 4], ebp
add edx, 0x580
mov dword [esp + 8], edx
mov dword [esp], eax
call dword [ebx + 0x1b8c]
jmp 0x6c4fbc55
mov ecx, dword [ecx + 0x320]
mov ebp, 8
mov edx, dword [ebx + 0x38]
mov edi, dword [ebx + 0x11d4]
mov esi, dword [ebx + 0x11d0]
sar ebp, cl
test edx, edx
mov dword [esp + 0x3c], edi
jne 0x6c4fa2f4
mov edi, dword [ebx + 0x16a4]
mov eax, dword [esp + 0x44]
add eax, dword [ebx + 0x16a8]
test edi, edi
je 0x6c4fc1df
mov dword [ebx + 0x16a4], 0
mov byte [eax], 1
mov eax, dword [ebx + 0x209c]
mov edx, dword [ebx + 0x38]
jmp 0x6c4fa2f4
mov ecx, dword [ebx + 4]
mov ebp, dword [ecx + 0x248]
test ebp, ebp
jne 0x6c4faf6d
mov edi, dword [ecx + 0x24c]
mov eax, dword [ebx + 0x38]
test edi, edi
jne 0x6c4faf70
test eax, eax
jne 0x6c4fccfe
mov eax, dword [ebx + 0x11d4]
cmp dword [ebx + 0x16e8], 3
mov esi, dword [ebx + 0x11d0]
mov dword [esp + 0x4c], 1
mov dword [esp + 0x40], eax
jne 0x6c4faf99
jmp 0x6c4fc1b0
mov eax, dword [ebx + 0x20]
test eax, eax
jne 0x6c4fb446
mov eax, dword [ebx + 0xe4]
test eax, eax
je 0x6c4faa51
mov eax, dword [ebx + 0x16ac]
mov edi, dword [esp + 0x44]
mov byte [eax + edi], 1
jmp 0x6c4faa51
mov eax, dword [ebx + 0x20]
test eax, eax
jne 0x6c4fb46e
mov ebp, dword [ebx + 0xe4]
test ebp, ebp
je 0x6c4fa615
mov eax, dword [ebx + 0x16ac]
mov edi, dword [esp + 0x44]
mov byte [eax + edi], 1
jmp 0x6c4fa615
test edx, edx
jne 0x6c4fb4fb
mov eax, dword [ebx + 4]
test byte [eax + 0x330], 1
mov eax, dword [ebx + 0x1db8]
je 0x6c4fb4e5
test al, 1
jne 0x6c4fd38c
test al, 2
je 0x6c4fb4e5
mov edx, dword [ebx + 0x262c]
cmp dword [ebx + 0x2724], 3
mov dword [esp + 0x58], edx
je 0x6c4fd778
mov edx, dword [ebx + 0x78]
sub edx, 1
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov eax, dword [ebx + 0x165c]
add eax, 0x1d8
mov dword [esp], eax
call fcn.6c508490
mov eax, dword [ebx + 0x1db8]
test al, 1
lea edx, [ebx + 0x1c04]
jne 0x6c4fca36
test al, 2
jne 0x6c4fca07
mov eax, dword [ebx + 4]
mov eax, dword [eax + 0x354]
cmp eax, 7
jle 0x6c4fb52f
mov edx, dword [ebx + 0x16e8]
cmp edx, 3
je 0x6c4fa590
cmp eax, 0x1f
jle 0x6c4fb52f
cmp edx, 1
jne 0x6c4fa590
cmp eax, 0x2f
jg 0x6c4fa590
mov eax, dword [ebx + 0x38]
test eax, eax
jne 0x6c4fb562
mov eax, dword [ebx + 0x26d4]
test eax, eax
jne 0x6c4fc6eb
mov eax, dword [ebx + 0x30]
cmp eax, 1
je 0x6c4fc6eb
cmp eax, 2
je 0x6c4fc6eb
cmp eax, 0xd
je 0x6c4fc6dd
mov ecx, dword [ebx + 0xb4]
mov eax, dword [ebx + 0x16c8]
test ecx, ecx
js 0x6c4fb5b4
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 8], 0
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [ebx + 0x27fc]
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x40]
mov dword [esp], edi
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16c8]
mov edx, dword [ebx + 0xb8]
test edx, edx
js 0x6c4fb607
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp], ebx
sub edx, 0xffffff80
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27fc]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x38]
mov dword [esp + 4], eax
lea eax, [edi + ebp]
mov dword [esp], eax
mov dword [esp + 8], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16c8]
mov ecx, dword [ebx + 0xbc]
test ecx, ecx
js 0x6c4fb65d
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 2
mov dword [esp], ebx
add edx, 0x100
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27fc]
mov edx, dword [esp + 0x38]
lea eax, [edi + esi]
mov dword [esp], eax
mov dword [esp + 8], edx
mov edx, dword [esp + 0x40]
mov dword [esp + 4], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16c8]
mov edx, dword [ebx + 0xc0]
test edx, edx
js 0x6c4fb6ae
mov edx, dword [esp + 0x84]
add ebp, esi
mov dword [esp + 0xc], eax
add edi, ebp
mov dword [esp + 8], 3
mov dword [esp], ebx
add edx, 0x180
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27fc]
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x40]
mov dword [esp], edi
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
call dword [ebx + 0x1b8c]
mov ecx, dword [ebx + 0x2754]
test ecx, ecx
jne 0x6c4fca71
mov edi, dword [esp + 0x40]
sar esi, 1
mov edx, dword [ebx + 0xc4]
mov eax, dword [ebx + 0x16cc]
sar edi, 1
test edx, edx
js 0x6c4fb715
mov ebp, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp], ebx
add ebp, 0x200
mov dword [esp + 4], ebp
call dword [ebx + 0x27fc]
mov eax, dword [esp + 0x44]
mov dword [esp + 8], ebp
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16cc]
mov ebp, dword [ebx + 0xc8]
test ebp, ebp
js 0x6c4fb760
mov ebp, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 5
mov dword [esp], ebx
add ebp, 0x280
mov dword [esp + 4], ebp
call dword [ebx + 0x27fc]
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], ebp
mov dword [esp + 4], edi
mov dword [esp], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16cc]
mov ecx, dword [ebx + 0xcc]
test ecx, ecx
js 0x6c4fb7ad
mov ebp, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 6
mov dword [esp], ebx
add ebp, 0x300
mov dword [esp + 4], ebp
call dword [ebx + 0x27fc]
mov eax, dword [esp + 0x44]
mov dword [esp + 8], ebp
mov dword [esp + 4], edi
add eax, esi
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16cc]
mov edx, dword [ebx + 0xd0]
test edx, edx
js 0x6c4fa590
mov ebp, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 7
mov dword [esp], ebx
add ebp, 0x380
mov dword [esp + 4], ebp
call dword [ebx + 0x27fc]
add esi, dword [esp + 0x4c]
mov dword [esp + 8], ebp
mov dword [esp + 4], edi
mov dword [esp], esi
call dword [ebx + 0x1b8c]
jmp 0x6c4fa590
mov dword [esp + 0x10], ecx
lea esi, [ebx + 0x1bd0]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.DCT_coeffs_of_MB_at__dx_d:_n
mov dword [esp + 4], 0x30
mov dword [esp], eax
call sub.avutil_52.dll_av_log
mov edi, dword [esp + 0x84]
lea ecx, [ebx + 0x1b90]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], ecx
lea esi, [esi]
mov ebp, dword [esp + 0x40]
movzx eax, byte [ebp]
add ebp, 1
movsx eax, word [edi + eax*2]
mov dword [esp + 8], 0x6c584d21
mov dword [esp + 4], 0x30
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 4]
mov dword [esp], eax
call sub.avutil_52.dll_av_log
cmp ebp, esi
jne 0x6c4fb844
mov dword [esp + 8], 0x6c584cc9
sub edi, 0xffffff80
mov dword [esp + 4], 0x30
mov eax, dword [ebx + 4]
mov dword [esp], eax
call sub.avutil_52.dll_av_log
add dword [esp + 0x3c], 1
cmp dword [esp + 0x3c], 6
jne 0x6c4fb840
jmp 0x6c4faa07
mov dword [esp], eax
lea esi, [ebx + 0x1bd0]
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.DCT_coeffs_of_MB_at__dx_d:_n
mov dword [esp + 4], 0x30
call sub.avutil_52.dll_av_log
mov edi, dword [esp + 0x84]
lea eax, [ebx + 0x1b90]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], eax
mov ebp, dword [esp + 0x40]
movzx eax, byte [ebp]
add ebp, 1
movsx eax, word [edi + eax*2]
mov dword [esp + 8], 0x6c584d21
mov dword [esp + 4], 0x30
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 4]
mov dword [esp], eax
call sub.avutil_52.dll_av_log
cmp ebp, esi
jne 0x6c4fb8e4
mov dword [esp + 8], 0x6c584cc9
sub edi, 0xffffff80
mov dword [esp + 4], 0x30
mov eax, dword [ebx + 4]
mov dword [esp], eax
call sub.avutil_52.dll_av_log
add dword [esp + 0x3c], 1
cmp dword [esp + 0x3c], 6
jne 0x6c4fb8e0
jmp 0x6c4faf27
mov dword [esp], eax
lea esi, [ebx + 0x1bd0]
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.DCT_coeffs_of_MB_at__dx_d:_n
mov dword [esp + 4], 0x30
call sub.avutil_52.dll_av_log
mov edi, dword [esp + 0x84]
lea eax, [ebx + 0x1b90]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], eax
mov ebp, dword [esp + 0x40]
movzx eax, byte [ebp]
add ebp, 1
movsx eax, word [edi + eax*2]
mov dword [esp + 8], 0x6c584d21
mov dword [esp + 4], 0x30
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 4]
mov dword [esp], eax
call sub.avutil_52.dll_av_log
cmp ebp, esi
jne 0x6c4fb984
mov dword [esp + 8], 0x6c584cc9
sub edi, 0xffffff80
mov dword [esp + 4], 0x30
mov eax, dword [ebx + 4]
mov dword [esp], eax
call sub.avutil_52.dll_av_log
add dword [esp + 0x3c], 1
cmp dword [esp + 0x3c], 6
jne 0x6c4fb980
jmp 0x6c4fa5cb
mov dword [esp], eax
lea esi, [ebx + 0x1bd0]
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.DCT_coeffs_of_MB_at__dx_d:_n
mov dword [esp + 4], 0x30
call sub.avutil_52.dll_av_log
mov edi, dword [esp + 0x84]
lea eax, [ebx + 0x1b90]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], eax
mov ebp, dword [esp + 0x40]
movzx eax, byte [ebp]
add ebp, 1
movsx eax, word [edi + eax*2]
mov dword [esp + 8], 0x6c584d21
mov dword [esp + 4], 0x30
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 4]
mov dword [esp], eax
call sub.avutil_52.dll_av_log
cmp ebp, esi
jne 0x6c4fba24
mov dword [esp + 8], 0x6c584cc9
sub edi, 0xffffff80
mov dword [esp + 4], 0x30
mov eax, dword [ebx + 4]
mov dword [esp], eax
call sub.avutil_52.dll_av_log
add dword [esp + 0x3c], 1
cmp dword [esp + 0x3c], 6
jne 0x6c4fba20
jmp 0x6c4fa24f
test eax, eax
jne 0x6c4fba94
mov eax, dword [ebx + 0x30]
sub eax, 1
cmp eax, 1
jbe 0x6c4fcb18
mov eax, dword [ebx + 0x16c8]
mov ecx, dword [esp + 0x84]
mov dword [esp + 8], 0
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 4], ecx
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
mov dword [esp], edi
mov dword [esp + 8], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov edx, dword [ebx + 0x16c8]
mov dword [esp + 8], 1
mov dword [esp], ebx
sub eax, 0xffffff80
mov dword [esp + 0xc], edx
mov dword [esp + 4], eax
mov dword [esp + 0x34], eax
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x34]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
lea eax, [edi + 8]
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x84]
mov ecx, dword [ebx + 0x16c8]
mov dword [esp + 8], 2
add edx, edi
add eax, 0x100
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], edx
mov dword [esp], ebx
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp], edx
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x48]
mov ecx, dword [ebx + 0x16c8]
mov dword [esp + 8], 3
mov dword [esp], ebx
lea edx, [edi + eax + 8]
mov eax, dword [esp + 0x84]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x38], edx
add eax, 0x180
mov dword [esp + 4], eax
mov dword [esp + 0x34], eax
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp], edx
call dword [ebx + 0x1b88]
mov ecx, dword [ebx + 0x2754]
test ecx, ecx
je 0x6c4fc03c
mov ebp, dword [esp + 0x84]
mov eax, dword [ebx + 0x16cc]
mov dword [esp + 8], 4
mov dword [esp], ebx
add ebp, 0x200
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebp
call dword [ebx + 0x27f8]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], ebp
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov ebp, dword [esp + 0x84]
mov eax, dword [ebx + 0x16cc]
mov dword [esp + 8], 5
mov dword [esp], ebx
add ebp, 0x280
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebp
call dword [ebx + 0x27f8]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
mov dword [esp + 8], ebp
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x4c]
test eax, eax
jne 0x6c4fa590
mov dword [esp + 8], esi
mov esi, 0x10
mov dword [esp + 4], edi
mov dword [esp + 0xc], 0x10
mov eax, dword [ebx + 0x20d4]
mov dword [esp], eax
call dword [ebx + 0x1c24]
mov ecx, dword [ebx + 0x2754]
mov edx, esi
mov eax, dword [ebx + 0x2750]
mov edi, dword [esp + 0x40]
sar edx, cl
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x3c]
add eax, 0x1c2
mov dword [esp + 8], edi
shl eax, 4
mov dword [esp + 4], edx
mov edx, dword [ebx + 0x20d8]
mov dword [esp], edx
call dword [ebx + eax + 4]
mov ecx, dword [ebx + 0x2754]
mov eax, dword [ebx + 0x2750]
mov dword [esp + 8], edi
mov edi, dword [esp + 0x44]
sar esi, cl
mov dword [esp + 0xc], esi
add eax, 0x1c2
mov dword [esp + 4], edi
mov edx, dword [ebx + 0x20dc]
shl eax, 4
mov dword [esp], edx
call dword [ebx + eax + 4]
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebx + 0x38]
jmp 0x6c4faa7d
mov edi, dword [ebx + 0x16c4]
mov ecx, esi
shl ecx, 4
add ecx, edi
mov dword [esp + 0x3c], ecx
mov ecx, esi
shl ecx, 5
add ecx, edi
mov dword [esp + 0x44], ecx
jmp 0x6c4fb007
test eax, eax
jne 0x6c4fbd35
mov eax, dword [ebx + 0x30]
sub eax, 1
cmp eax, 1
jbe 0x6c4fd0a0
mov eax, dword [ebx + 0x16c8]
mov ecx, dword [esp + 0x84]
mov dword [esp + 8], 0
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 4], ecx
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x40]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp], edx
call dword [ebx + 0x1b88]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x84]
mov ecx, dword [ebx + 0x16c8]
mov dword [esp + 8], 1
add edx, edi
add edi, esi
sub eax, 0xffffff80
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], edx
mov dword [esp], ebx
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp], edx
call dword [ebx + 0x1b88]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x84]
mov ecx, dword [ebx + 0x16c8]
mov dword [esp + 8], 2
add edx, esi
add eax, 0x100
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], edx
mov dword [esp], ebx
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp], edx
call dword [ebx + 0x1b88]
mov edx, dword [ebx + 0x16c8]
add edi, dword [esp + 0x40]
mov dword [esp + 8], 3
mov dword [esp], ebx
mov dword [esp + 0x40], edi
mov edi, dword [esp + 0x84]
mov dword [esp + 0xc], edx
add edi, 0x180
mov dword [esp + 4], edi
call dword [ebx + 0x27f8]
mov ecx, dword [esp + 0x40]
mov dword [esp + 8], edi
mov dword [esp + 4], ebp
mov dword [esp], ecx
call dword [ebx + 0x1b88]
mov ecx, dword [ebx + 0x2754]
test ecx, ecx
jne 0x6c4fbfaa
mov edi, dword [esp + 0x84]
sar ebp, 1
mov eax, dword [ebx + 0x16cc]
sar esi, 1
mov dword [esp + 8], 4
mov dword [esp], ebx
add edi, 0x200
mov dword [esp + 0xc], eax
mov dword [esp + 4], edi
call dword [ebx + 0x27f8]
mov dword [esp + 8], edi
mov edi, dword [esp + 0x44]
mov dword [esp + 4], ebp
mov dword [esp], edi
call dword [ebx + 0x1b88]
mov edi, dword [esp + 0x84]
mov eax, dword [ebx + 0x16cc]
mov dword [esp + 8], 5
mov dword [esp], ebx
add edi, 0x280
mov dword [esp + 0xc], eax
mov dword [esp + 4], edi
call dword [ebx + 0x27f8]
mov dword [esp + 8], edi
mov edi, dword [esp + 0x4c]
mov dword [esp + 4], ebp
mov dword [esp], edi
call dword [ebx + 0x1b88]
mov edi, dword [esp + 0x44]
mov edx, dword [ebx + 0x16cc]
mov dword [esp + 8], 6
mov dword [esp], ebx
add edi, esi
mov dword [esp + 0x40], edi
mov edi, dword [esp + 0x84]
mov dword [esp + 0xc], edx
add edi, 0x300
mov dword [esp + 4], edi
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x40]
mov dword [esp + 8], edi
mov dword [esp + 4], ebp
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov edi, dword [esp + 0x84]
mov eax, dword [ebx + 0x16cc]
add esi, dword [esp + 0x4c]
mov dword [esp + 8], 7
add edi, 0x380
mov dword [esp + 0xc], eax
mov dword [esp + 4], edi
mov dword [esp], ebx
call dword [ebx + 0x27f8]
mov dword [esp + 8], edi
mov dword [esp + 4], ebp
mov dword [esp], esi
call dword [ebx + 0x1b88]
jmp 0x6c4fa590
mov edi, dword [ebx + 0x16c4]
mov edx, esi
shl edx, 4
add edx, edi
mov dword [esp + 0x3c], edx
mov edx, esi
shl edx, 5
add edx, edi
mov dword [esp + 0x44], edx
jmp 0x6c4fab0e
mov esi, dword [esp + 0x84]
mov eax, dword [ebx + 0x16cc]
mov dword [esp + 8], 4
mov dword [esp], ebx
add esi, 0x200
mov dword [esp + 0xc], eax
mov dword [esp + 4], esi
call dword [ebx + 0x27f8]
mov edi, dword [esp + 0x3c]
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov edi, dword [esp + 0x44]
mov dword [esp], edi
call dword [ebx + 0x1b88]
mov esi, dword [esp + 0x84]
mov eax, dword [ebx + 0x16cc]
mov dword [esp + 8], 5
mov dword [esp], ebx
add esi, 0x280
mov dword [esp + 0xc], eax
mov dword [esp + 4], esi
call dword [ebx + 0x27f8]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x3c]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x4c]
mov dword [esp], edi
call dword [ebx + 0x1b88]
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0x84]
sar ebp, 1
mov edx, dword [ebx + 0x16cc]
mov dword [esp + 8], 4
mov dword [esp], ebx
add eax, 0x200
mov dword [esp + 0xc], edx
mov dword [esp + 4], eax
mov dword [esp + 0x34], eax
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x3c]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp], edx
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov edx, dword [ebx + 0x16cc]
mov dword [esp + 8], 5
mov dword [esp], ebx
add eax, 0x280
mov dword [esp + 0xc], edx
mov dword [esp + 4], eax
mov dword [esp + 0x34], eax
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x34]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x3c]
mov ecx, dword [ebx + 0x16cc]
mov dword [esp + 8], 6
sar eax, 1
add edx, eax
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x34], eax
mov dword [esp], ebx
add edx, 0x300
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27f8]
mov edx, dword [esp + 0x38]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov edx, dword [esp + 0x48]
mov dword [esp], edx
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x34]
add eax, dword [esp + 0x44]
mov edx, dword [ebx + 0x16cc]
mov dword [esp + 8], 7
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x84]
mov dword [esp], ebx
mov dword [esp + 0xc], edx
add eax, 0x380
mov dword [esp + 4], eax
mov dword [esp + 0x34], eax
call dword [ebx + 0x27f8]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp], ecx
call dword [ebx + 0x1b88]
jmp 0x6c4fbc55
test eax, eax
jne 0x6c4faace
mov ecx, dword [ebx + 4]
mov edx, dword [ecx + 0x94]
xor eax, eax
test edx, edx
setne al
mov dword [esp + 0x4c], eax
jmp 0x6c4faaa6
test eax, eax
jne 0x6c4fafc7
mov ecx, dword [ebx + 4]
mov edx, dword [ecx + 0x94]
xor eax, eax
test edx, edx
setne al
mov dword [esp + 0x4c], eax
jmp 0x6c4faf99
mov edi, dword [ebx + 0x1638]
test edi, edi
jne 0x6c4fc6a9
mov byte [eax], 1
mov eax, dword [ebx + 0x38]
jmp 0x6c4faace
mov ecx, dword [ebx + 0x1638]
test ecx, ecx
jne 0x6c4fc37a
mov byte [eax], 1
mov eax, dword [ebx + 0x209c]
mov edx, dword [ebx + 0x38]
jmp 0x6c4fa2f4
mov ebp, dword [ebx + 0x1638]
test ebp, ebp
jne 0x6c4fc312
mov byte [eax], 1
mov eax, dword [ebx + 0x38]
jmp 0x6c4fa682
mov edi, dword [ebx + 0x1638]
test edi, edi
jne 0x6c4fc301
mov byte [eax], 1
mov edx, dword [ebx + 0x209c]
mov eax, dword [ebx + 0x38]
jmp 0x6c4fafc7
mov edx, dword [ebx + 0xc4]
mov eax, dword [ebx + 0x16cc]
test edx, edx
js 0x6c4fc28b
mov ebp, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp], ebx
add ebp, 0x200
mov dword [esp + 4], ebp
call dword [ebx + 0x27fc]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov dword [esp + 8], ebp
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16cc]
mov ebp, dword [ebx + 0xc8]
test ebp, ebp
js 0x6c4fbc55
mov ebp, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 5
mov dword [esp], ebx
add ebp, 0x280
mov dword [esp + 4], ebp
call dword [ebx + 0x27fc]
mov dword [esp + 8], ebp
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [ebx + 0x1b8c]
jmp 0x6c4fbc55
mov ecx, dword [ebx + 0x2728]
mov eax, pe_nt_image_headers32
shl eax, cl
mov dword [ebx + 0x166c], eax
mov dword [ebx + 0x1668], eax
mov dword [ebx + 0x1664], eax
jmp 0x6c4faa51
mov byte [eax], 0
mov edx, dword [ebx + 0x209c]
mov eax, dword [ebx + 0x38]
jmp 0x6c4fafc7
mov byte [eax], 0
mov eax, dword [ebx + 0x38]
jmp 0x6c4fa682
cmp dword [ebx + 0x16e8], 3
lea edx, [ebx + 0x1ca4]
jne 0x6c4fb091
jmp 0x6c4fb08b
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x6c4fcd33
mov ecx, dword [ebx + 0x14]
test ecx, ecx
jne 0x6c4fd28f
cmp dword [ebx + 0x16e8], 3
je 0x6c4fd28f
mov edi, dword [ebx + 0x11d4]
mov ecx, dword [edx + 0x320]
mov esi, dword [ebx + 0x11d0]
mov dword [esp + 0x3c], edi
mov edi, 8
sar edi, cl
jmp 0x6c4fa682
mov byte [eax], 0
mov eax, dword [ebx + 0x209c]
mov edx, dword [ebx + 0x38]
jmp 0x6c4fa2f4
cmp dword [ebx + 0x16e8], 3
lea edx, [ebx + 0x1ca4]
jne 0x6c4fab9e
jmp 0x6c4fab98
test eax, eax
jne 0x6c4fcd55
mov edx, dword [ebx + 0x11d4]
cmp dword [ebx + 0x16e8], 3
mov esi, dword [ebx + 0x11d0]
mov dword [esp + 0x4c], 1
mov dword [esp + 0x40], edx
jne 0x6c4faaa6
jmp 0x6c4fc18f
mov eax, dword [ebx + 0x30]
cmp eax, 1
je 0x6c4fa793
cmp eax, 2
je 0x6c4fa793
cmp eax, 0xd
je 0x6c4fd45c
mov ecx, dword [ebx + 0xb4]
mov eax, dword [ebx + 0x16c8]
test ecx, ecx
js 0x6c4fc445
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 8], 0
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [ebx + 0x27fc]
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp], ecx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16c8]
mov edx, dword [ebx + 0xb8]
test edx, edx
js 0x6c4fc497
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp], ebx
sub edx, 0xffffff80
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27fc]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x38]
mov dword [esp + 4], ebp
add eax, edi
mov dword [esp], eax
mov dword [esp + 8], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16c8]
mov ecx, dword [ebx + 0xbc]
test ecx, ecx
js 0x6c4fc4ec
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 2
mov dword [esp], ebx
add edx, 0x100
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27fc]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x38]
mov dword [esp + 4], ebp
add eax, esi
mov dword [esp], eax
mov dword [esp + 8], edx
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16c8]
mov edx, dword [ebx + 0xc0]
test edx, edx
js 0x6c4fc53c
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 3
mov dword [esp], ebx
add edx, 0x180
mov dword [esp + 4], edx
mov dword [esp + 0x38], edx
call dword [ebx + 0x27fc]
mov edx, dword [esp + 0x38]
lea eax, [esi + edi]
add eax, dword [esp + 0x40]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov edi, dword [ebx + 0x2754]
test edi, edi
jne 0x6c4fca71
mov edx, dword [ebx + 0xc4]
sar ebp, 1
sar esi, 1
mov eax, dword [ebx + 0x16cc]
test edx, edx
js 0x6c4fc59f
mov edi, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp], ebx
add edi, 0x200
mov dword [esp + 4], edi
call dword [ebx + 0x27fc]
mov dword [esp + 8], edi
mov edi, dword [esp + 0x44]
mov dword [esp + 4], ebp
mov dword [esp], edi
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16cc]
mov edi, dword [ebx + 0xc8]
test edi, edi
js 0x6c4fc5ea
mov edi, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 5
mov dword [esp], ebx
add edi, 0x280
mov dword [esp + 4], edi
call dword [ebx + 0x27fc]
mov dword [esp + 8], edi
mov edi, dword [esp + 0x4c]
mov dword [esp + 4], ebp
mov dword [esp], edi
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16cc]
mov ecx, dword [ebx + 0xcc]
test ecx, ecx
js 0x6c4fc637
mov edi, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 6
mov dword [esp], ebx
add edi, 0x300
mov dword [esp + 4], edi
call dword [ebx + 0x27fc]
mov eax, dword [esp + 0x44]
mov dword [esp + 8], edi
mov dword [esp + 4], ebp
add eax, esi
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16cc]
mov edx, dword [ebx + 0xd0]
test edx, edx
js 0x6c4fa590
mov edi, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 7
mov dword [esp], ebx
add edi, 0x380
mov dword [esp + 4], edi
call dword [ebx + 0x27fc]
add esi, dword [esp + 0x4c]
mov dword [esp + 8], edi
mov dword [esp + 4], ebp
mov dword [esp], esi
call dword [ebx + 0x1b8c]
jmp 0x6c4fa590
mov ecx, dword [ebx + 0x2728]
mov eax, pe_nt_image_headers32
shl eax, cl
mov dword [ebx + 0x166c], eax
mov dword [ebx + 0x1668], eax
mov dword [ebx + 0x1664], eax
jmp 0x6c4fa615
mov byte [eax], 0
mov eax, dword [ebx + 0x38]
jmp 0x6c4faace
mov dword [esp], ebx
call fcn.6c4f9fa0
jmp 0x6c4fa615
mov dword [esp], ebx
call fcn.6c4f9fa0
jmp 0x6c4faa51
cmp dword [ebx + 0x30], 0x13
je 0x6c4fbc55
jmp 0x6c4fb120
mov eax, dword [ebx + 0x267c]
test eax, eax
jne 0x6c4fb562
mov eax, dword [ebx + 0xb4]
test eax, eax
js 0x6c4fc711
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x40]
mov dword [esp], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xb8]
test eax, eax
js 0x6c4fc73d
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x40]
sub eax, 0xffffff80
mov dword [esp + 8], eax
lea eax, [edi + ebp]
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov ecx, dword [ebx + 0xbc]
test ecx, ecx
js 0x6c4fc76b
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x40]
add eax, 0x100
mov dword [esp + 8], eax
lea eax, [edi + esi]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov edx, dword [ebx + 0xc0]
test edx, edx
js 0x6c4fc79a
mov eax, dword [esp + 0x84]
add esi, ebp
add edi, esi
mov dword [esp], edi
add eax, 0x180
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x2754]
test eax, eax
jne 0x6c4fce46
mov eax, dword [esp + 0x3c]
mov ecx, dword [ebx + 0x2764]
mov esi, dword [esp + 0x3c]
imul eax, ebp
shl esi, cl
test ecx, ecx
cmovne eax, dword [esp + 0x3c]
mov dword [esp + 0x3c], eax
mov eax, dword [ebx + 0xc4]
test eax, eax
js 0x6c4fc7f1
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0x44]
mov dword [esp + 4], esi
add eax, 0x200
mov dword [esp + 8], eax
mov dword [esp], edi
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xc8]
test eax, eax
js 0x6c4fc81c
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0x4c]
mov dword [esp + 4], esi
add eax, 0x280
mov dword [esp + 8], eax
mov dword [esp], edi
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xcc]
test eax, eax
js 0x6c4fc84b
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x300
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, dword [esp + 0x3c]
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov edi, dword [ebx + 0xd0]
test edi, edi
js 0x6c4fc87a
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x380
mov dword [esp + 8], eax
mov eax, dword [esp + 0x4c]
add eax, dword [esp + 0x3c]
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov ecx, dword [ebx + 0x2750]
test ecx, ecx
jne 0x6c4fa590
mov edx, dword [ebx + 0xd4]
test edx, edx
js 0x6c4fc8b5
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x400
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, ebp
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xd8]
test eax, eax
js 0x6c4fc8e2
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x480
mov dword [esp + 8], eax
mov eax, dword [esp + 0x4c]
add eax, ebp
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xdc]
add ebp, dword [esp + 0x3c]
test eax, eax
js 0x6c4fc913
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x500
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, ebp
mov dword [esp], eax
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xe0]
test eax, eax
js 0x6c4fa590
mov eax, dword [esp + 0x84]
add ebp, dword [esp + 0x4c]
mov dword [esp + 4], esi
add eax, 0x580
mov dword [esp + 8], eax
mov dword [esp], ebp
call dword [ebx + 0x1b8c]
jmp 0x6c4fa590
mov ecx, dword [esp + 0x4c]
lea eax, [ebx + 0x860]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x40]
mov dword [esp + 8], eax
mov eax, ebx
mov dword [esp + 4], 1
mov dword [esp], ecx
mov ecx, dword [esp + 0x44]
call fcn.6c4ef4f0
jmp 0x6c4fa73c
mov ebp, dword [ebx + 0xc4]
test ebp, ebp
js 0x6c4fc9a7
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x3c]
add eax, 0x200
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [ebx + 0x1b8c]
mov ecx, dword [ebx + 0xc8]
test ecx, ecx
js 0x6c4fbc55
mov eax, dword [esp + 0x84]
add eax, 0x280
mov dword [esp + 8], eax
jmp 0x6c4fc2c3
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x4c]
lea eax, [ebx + 0x3b8]
mov ecx, dword [esp + 0x44]
mov dword [esp + 8], eax
mov eax, ebx
mov dword [esp + 4], 0
mov dword [esp], edx
mov edx, dword [esp + 0x40]
call fcn.6c4ef4f0
lea edx, [ebx + 0x1c14]
mov eax, dword [ebx + 0x1db8]
jmp 0x6c4fa734
mov ecx, dword [esp + 0x4c]
lea eax, [ebx + 0x860]
mov dword [esp + 0xc], edx
mov edx, edi
mov dword [esp + 8], eax
mov eax, ebx
mov dword [esp + 4], 1
mov dword [esp], ecx
mov ecx, dword [esp + 0x44]
call fcn.6c4ef4f0
jmp 0x6c4fb4fb
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x4c]
lea eax, [ebx + 0x3b8]
mov ecx, dword [esp + 0x44]
mov dword [esp + 8], eax
mov eax, ebx
mov dword [esp + 4], 0
mov dword [esp], edx
mov edx, edi
call fcn.6c4ef4f0
lea edx, [ebx + 0x1c14]
mov eax, dword [ebx + 0x1db8]
jmp 0x6c4fb4f3
mov esi, dword [ebx + 0xc4]
mov eax, dword [ebx + 0x16cc]
test esi, esi
js 0x6c4fcac6
mov esi, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp], ebx
add esi, 0x200
mov dword [esp + 4], esi
call dword [ebx + 0x27fc]
mov edi, dword [esp + 0x3c]
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov edi, dword [esp + 0x44]
mov dword [esp], edi
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0x16cc]
mov ecx, dword [ebx + 0xc8]
test ecx, ecx
js 0x6c4fa590
mov esi, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 5
mov dword [esp], ebx
add esi, 0x280
mov dword [esp + 4], esi
call dword [ebx + 0x27fc]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x3c]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x4c]
mov dword [esp], edi
call dword [ebx + 0x1b8c]
jmp 0x6c4fa590
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
mov dword [esp], edi
mov dword [esp + 8], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
sub eax, 0xffffff80
mov dword [esp + 8], eax
lea eax, [edi + 8]
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x100
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48]
add eax, edi
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x48]
mov dword [esp + 4], ebp
add eax, 0x180
mov dword [esp + 8], eax
lea eax, [edi + edx + 8]
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov edx, dword [ebx + 0x2754]
test edx, edx
jne 0x6c4fd3d3
mov ecx, dword [ebx + 0x2764]
mov ebp, dword [esp + 0x40]
mov eax, dword [esp + 0x40]
shl ebp, cl
shl eax, 3
test ecx, ecx
cmovne eax, dword [esp + 0x40]
mov dword [esp + 4], ebp
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x84]
add eax, 0x200
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x44]
mov dword [esp + 4], ebp
add eax, 0x280
mov dword [esp], edx
mov dword [esp + 8], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x300
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
add eax, dword [esp + 0x48]
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x380
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, dword [esp + 0x48]
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [ebx + 0x2750]
test eax, eax
jne 0x6c4fbc55
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x400
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
add eax, 8
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x480
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, 8
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov edx, dword [esp + 0x84]
mov eax, dword [esp + 0x48]
mov dword [esp + 4], ebp
add edx, 0x500
mov dword [esp + 8], edx
mov edx, dword [esp + 0x3c]
add eax, 8
mov dword [esp + 0x34], eax
add edx, eax
mov dword [esp], edx
call dword [ebx + 0x1b88]
mov edx, dword [esp + 0x84]
mov eax, dword [esp + 0x34]
add eax, dword [esp + 0x44]
mov dword [esp + 4], ebp
add edx, 0x580
mov dword [esp + 8], edx
mov dword [esp], eax
call dword [ebx + 0x1b88]
jmp 0x6c4fbc55
mov esi, dword [ebx + 0x14]
test esi, esi
jne 0x6c4fd2a5
cmp dword [ebx + 0x16e8], 3
je 0x6c4fd2a5
mov edi, dword [ebx + 0x11d4]
mov esi, dword [ebx + 0x11d0]
mov dword [esp + 0x4c], 1
mov dword [esp + 0x40], edi
jmp 0x6c4fafc7
mov edi, dword [ebx + 0x11d4]
mov ecx, dword [edx + 0x320]
mov esi, dword [ebx + 0x11d0]
mov dword [esp + 0x3c], edi
mov edi, 8
sar edi, cl
jmp 0x6c4fa65a
mov esi, dword [ebx + 0x14]
test esi, esi
jne 0x6c4fd072
cmp dword [ebx + 0x16e8], 3
je 0x6c4fd072
mov edx, dword [ebx + 0x11d4]
mov esi, dword [ebx + 0x11d0]
mov dword [esp + 0x4c], 1
mov dword [esp + 0x40], edx
jmp 0x6c4faace
lea eax, [ebx + 0x3b8]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.6c500220
lea edx, [ebx + 0x1c64]
mov ecx, dword [ebx + 0x207c]
mov eax, dword [ebx + 0x1db8]
jmp 0x6c4fb099
lea eax, [ebx + 0x3b8]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.6c500220
lea edx, [ebx + 0x1c64]
mov ecx, dword [ebx + 0x207c]
mov eax, dword [ebx + 0x1db8]
jmp 0x6c4faba6
mov edi, dword [ebx + 0x11d4]
mov ebp, 8
mov ecx, dword [ecx + 0x320]
mov esi, dword [ebx + 0x11d0]
mov dword [esp + 0x3c], edi
sar ebp, cl
jmp 0x6c4fb3aa
mov eax, dword [ebx + 0xc4]
test eax, eax
js 0x6c4fce75
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x44]
add eax, 0x200
mov dword [esp + 8], eax
mov dword [esp], edi
call dword [ebx + 0x1b8c]
mov eax, dword [ebx + 0xc8]
test eax, eax
js 0x6c4fa590
mov eax, dword [esp + 0x84]
add eax, 0x280
mov dword [esp + 8], eax
jmp 0x6c4fcafe
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x84]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
sub eax, 0xffffff80
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
lea eax, [edi + ebp]
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x40]
add eax, 0x100
mov dword [esp + 8], eax
lea eax, [edi + esi]
add esi, ebp
mov dword [esp + 4], edx
add edi, esi
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x40]
mov dword [esp], edi
add eax, 0x180
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call dword [ebx + 0x1b88]
mov eax, dword [ebx + 0x2754]
test eax, eax
jne 0x6c4fd422
mov eax, dword [esp + 0x3c]
mov ecx, dword [ebx + 0x2764]
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x44]
imul eax, ebp
shl esi, cl
test ecx, ecx
cmovne eax, dword [esp + 0x3c]
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x84]
add eax, 0x200
mov dword [esp + 8], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0x4c]
mov dword [esp + 4], esi
add eax, 0x280
mov dword [esp + 8], eax
mov dword [esp], edi
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x300
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, dword [esp + 0x3c]
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x380
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
add eax, edi
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [ebx + 0x2750]
test eax, eax
jne 0x6c4fa590
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x400
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, ebp
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x480
mov dword [esp + 8], eax
mov eax, edi
add eax, ebp
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
add ebp, dword [esp + 0x3c]
mov dword [esp + 4], esi
add eax, 0x500
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, ebp
add ebp, edi
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
mov dword [esp], ebp
add eax, 0x580
mov dword [esp + 8], eax
call dword [ebx + 0x1b88]
jmp 0x6c4fa590
cmp dword [ecx + 0x128], 2
jne 0x6c4fa590
mov edi, dword [ebx + 0x11d4]
mov esi, dword [ebx + 0x11d0]
mov dword [esp + 0x4c], 1
mov dword [esp + 0x40], edi
jmp 0x6c4faace
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp], ecx
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
sub eax, 0xffffff80
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
add eax, edi
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x100
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
add eax, esi
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], ebp
add eax, 0x180
mov dword [esp + 8], eax
lea eax, [esi + edi]
add eax, dword [esp + 0x40]
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov edx, dword [ebx + 0x2754]
test edx, edx
jne 0x6c4fd422
mov eax, dword [esp + 0x3c]
mov ecx, dword [ebx + 0x2764]
mov esi, dword [esp + 0x3c]
imul eax, edi
shl esi, cl
test ecx, ecx
cmovne eax, dword [esp + 0x3c]
mov dword [esp + 4], esi
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x84]
add eax, 0x200
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x4c]
mov dword [esp + 4], esi
add eax, 0x280
mov dword [esp], edx
mov dword [esp + 8], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x300
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, dword [esp + 0x3c]
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x380
mov dword [esp + 8], eax
mov eax, dword [esp + 0x4c]
add eax, dword [esp + 0x3c]
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [ebx + 0x2750]
test eax, eax
jne 0x6c4fa590
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x400
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, edi
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], esi
add eax, 0x480
mov dword [esp + 8], eax
mov eax, dword [esp + 0x4c]
add eax, edi
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
add edi, dword [esp + 0x3c]
mov dword [esp + 4], esi
add eax, 0x500
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
add eax, edi
mov dword [esp], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
add edi, dword [esp + 0x4c]
mov dword [esp + 4], esi
add eax, 0x580
mov dword [esp + 8], eax
mov dword [esp], edi
call dword [ebx + 0x1b88]
jmp 0x6c4fa590
cmp dword [ecx + 0x128], 2
jne 0x6c4fa590
jmp 0x6c4fa2d7
cmp dword [edx + 0x128], 2
jne 0x6c4fa590
lea esi, [esi]
jmp 0x6c4fc358
cmp dword [ecx + 0x128], 2
jne 0x6c4fa590
jmp 0x6c4fcd16
mov eax, dword [ebx + 0x262c]
cmp dword [ebx + 0x2724], 3
mov dword [esp + 0x5c], eax
je 0x6c4fd8f4
mov edx, dword [ebx + 0x78]
sub edx, 1
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov eax, dword [ebx + 0x1658]
add eax, 0x1d8
mov dword [esp], eax
call fcn.6c508490
mov eax, dword [ebx + 0x1db8]
jmp 0x6c4fab3e
mov eax, dword [ebx + 0x262c]
cmp dword [ebx + 0x2724], 3
mov dword [esp + 0x58], eax
je 0x6c4fd9b8
mov edx, dword [ebx + 0x78]
sub edx, 1
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov eax, dword [ebx + 0x1658]
add eax, 0x1d8
mov dword [esp], eax
call fcn.6c508490
mov eax, dword [ebx + 0x1db8]
jmp 0x6c4fa6e0
mov eax, dword [ebx + 0x262c]
cmp dword [ebx + 0x2724], 3
mov dword [esp + 0x5c], eax
je 0x6c4fd830
mov edx, dword [ebx + 0x78]
sub edx, 1
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov eax, dword [ebx + 0x1658]
add eax, 0x1d8
mov dword [esp], eax
call fcn.6c508490
mov eax, dword [ebx + 0x1db8]
jmp 0x6c4fb031
mov eax, dword [ebx + 0x262c]
cmp dword [ebx + 0x2724], 3
mov dword [esp + 0x58], eax
je 0x6c4fd533
mov edx, dword [ebx + 0x78]
sub edx, 1
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov eax, dword [ebx + 0x1658]
add eax, 0x1d8
mov dword [esp], eax
call fcn.6c508490
mov eax, dword [ebx + 0x1db8]
jmp 0x6c4fb49f
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x3c]
add eax, 0x200
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x44]
add eax, 0x280
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [ebx + 0x1b88]
jmp 0x6c4fbc55
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x84]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x44]
add eax, 0x200
mov dword [esp + 8], eax
mov dword [esp], edi
call dword [ebx + 0x1b88]
mov eax, dword [esp + 0x84]
add eax, 0x280
mov dword [esp + 8], eax
jmp 0x6c4fc01f
mov eax, dword [ebx + 0x267c]
test eax, eax
je 0x6c4fa793
jmp 0x6c4fc3f3
mov eax, dword [ebx + 0x2624]
test eax, eax
jne 0x6c4fab59
mov eax, dword [ebx + 0x1dbc]
cmp eax, 1
je 0x6c4fdad7
cmp eax, 2
je 0x6c4fdaca
test eax, eax
jne 0x6c4fab59
mov dword [esp + 0x58], 1
mov eax, ebp
mov edx, 0x80000000
mov ebp, esi
mov esi, eax
mov dword [esp + 0x50], 0x7fffffff
mov dword [esp + 0x54], 0
mov ecx, dword [esp + 0x5c]
test ecx, ecx
mov ecx, dword [esp + 0x54]
sete byte [esp + 0x2f]
mov eax, dword [ebx + ecx*8 + 0x1de4]
movzx ecx, byte [esp + 0x2f]
shl eax, cl
cmp edx, eax
cmovl edx, eax
cmp dword [esp + 0x50], eax
cmovle eax, dword [esp + 0x50]
add dword [esp + 0x54], 1
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x58]
cmp dword [esp + 0x54], eax
jl 0x6c4fd4c0
mov ecx, dword [esp + 0x50]
mov eax, esi
mov esi, ebp
mov ebp, eax
mov eax, dword [ebx + 0x78]
neg ecx
cmp ecx, edx
cmovge edx, ecx
mov ecx, 0
add edx, 0x3f
sar edx, 6
add edx, dword [ebx + 0x2094]
cmovs edx, ecx
cmp eax, edx
lea ecx, [eax - 1]
cmovle edx, ecx
jmp 0x6c4fab5f
mov edx, dword [ebx + 0x2624]
test edx, edx
jne 0x6c4fd3a3
mov eax, dword [ebx + 0x1dbc]
cmp eax, 1
je 0x6c4fdaa3
cmp eax, 2
je 0x6c4fda96
test eax, eax
jne 0x6c4fd3a3
mov dword [esp + 0x54], 1
mov dword [esp + 0x48], 0x7fffffff
mov edx, 0x80000000
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x50]
test eax, eax
sete byte [esp + 0x5c]
mov eax, dword [ebx + ecx*8 + 0x1dc4]
movzx ecx, byte [esp + 0x5c]
shl eax, cl
cmp edx, eax
cmovl edx, eax
cmp dword [esp + 0x48], eax
cmovle eax, dword [esp + 0x48]
add dword [esp + 0x50], 1
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x50], eax
jl 0x6c4fd57e
mov ecx, dword [esp + 0x48]
mov eax, dword [ebx + 0x78]
neg ecx
cmp ecx, edx
cmovge edx, ecx
mov ecx, 0
add edx, 0x3f
sar edx, 6
add edx, dword [ebx + 0x2094]
cmovs edx, ecx
cmp eax, edx
lea ecx, [eax - 1]
cmovle edx, ecx
jmp 0x6c4fd3a9
mov eax, dword [ebx + 0x2624]
test eax, eax
jne 0x6c4fa6fb
mov eax, dword [ebx + 0x1dbc]
cmp eax, 1
je 0x6c4fdabd
cmp eax, 2
je 0x6c4fdab0
test eax, eax
jne 0x6c4fa6fb
mov dword [esp + 0x54], 1
mov eax, ebp
mov edx, 0x80000000
mov ebp, edi
mov edi, eax
mov dword [esp + 0x48], 0x7fffffff
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x50]
test eax, eax
sete byte [esp + 0x5c]
mov eax, dword [ebx + ecx*8 + 0x1de4]
movzx ecx, byte [esp + 0x5c]
shl eax, cl
cmp edx, eax
cmovl edx, eax
cmp dword [esp + 0x48], eax
cmovle eax, dword [esp + 0x48]
add dword [esp + 0x50], 1
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x50], eax
jl 0x6c4fd641
mov ecx, dword [esp + 0x48]
mov eax, edi
mov edi, ebp
mov ebp, eax
mov eax, dword [ebx + 0x78]
neg ecx
cmp ecx, edx
cmovge edx, ecx
mov ecx, 0
add edx, 0x3f
sar edx, 6
add edx, dword [ebx + 0x2094]
cmovs edx, ecx
cmp eax, edx
lea ecx, [eax - 1]
cmovle edx, ecx
jmp 0x6c4fa701
mov eax, dword [ebx + 0x2624]
test eax, eax
jne 0x6c4fb04c
mov eax, dword [ebx + 0x1dbc]
cmp eax, 1
je 0x6c4fdaf1
cmp eax, 2
je 0x6c4fdae4
test eax, eax
jne 0x6c4fb04c
mov dword [esp + 0x58], 1
mov eax, ebp
mov edx, 0x80000000
mov ebp, esi
mov esi, eax
mov dword [esp + 0x50], 0x7fffffff
mov dword [esp + 0x54], 0
mov ecx, dword [esp + 0x5c]
test ecx, ecx
mov ecx, dword [esp + 0x54]
sete byte [esp + 0x2f]
mov eax, dword [ebx + ecx*8 + 0x1de4]
movzx ecx, byte [esp + 0x2f]
shl eax, cl
cmp edx, eax
cmovl edx, eax
cmp dword [esp + 0x50], eax
cmovle eax, dword [esp + 0x50]
add dword [esp + 0x54], 1
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x58]
cmp dword [esp + 0x54], eax
jl 0x6c4fd705
mov ecx, dword [esp + 0x50]
mov eax, esi
mov esi, ebp
mov ebp, eax
mov eax, dword [ebx + 0x78]
neg ecx
cmp ecx, edx
cmovge edx, ecx
mov ecx, 0
add edx, 0x3f
sar edx, 6
add edx, dword [ebx + 0x2094]
cmovs edx, ecx
cmp eax, edx
lea ecx, [eax - 1]
cmovle edx, ecx
jmp 0x6c4fb052
mov eax, dword [ebx + 0x2624]
test eax, eax
jne 0x6c4fb4ba
mov eax, dword [ebx + 0x1dbc]
cmp eax, 1
je 0x6c4fdb0b
cmp eax, 2
je 0x6c4fdafe
test eax, eax
jne 0x6c4fb4ba
mov dword [esp + 0x54], 1
mov dword [esp + 0x48], 0x7fffffff
mov edx, 0x80000000
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x50]
test eax, eax
sete byte [esp + 0x5c]
mov eax, dword [ebx + ecx*8 + 0x1de4]
movzx ecx, byte [esp + 0x5c]
shl eax, cl
cmp edx, eax
cmovl edx, eax
cmp dword [esp + 0x48], eax
cmovle eax, dword [esp + 0x48]
add dword [esp + 0x50], 1
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x50], eax
jl 0x6c4fd7c3
mov ecx, dword [esp + 0x48]
mov eax, dword [ebx + 0x78]
neg ecx
cmp ecx, edx
cmovge edx, ecx
mov ecx, 0
add edx, 0x3f
sar edx, 6
add edx, dword [ebx + 0x2094]
cmovs edx, ecx
cmp eax, edx
lea ecx, [eax - 1]
cmovle edx, ecx
jmp 0x6c4fb4c0
mov eax, dword [ebx + 0x2624]
test eax, eax
jne 0x6c4fd35c
mov eax, dword [ebx + 0x1dbc]
cmp eax, 1
je 0x6c4fdb25
cmp eax, 2
je 0x6c4fdb18
test eax, eax
jne 0x6c4fd35c
mov dword [esp + 0x58], 1
mov eax, ebp
mov edx, 0x80000000
mov ebp, esi
mov esi, eax
mov dword [esp + 0x50], 0x7fffffff
mov dword [esp + 0x54], 0
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x54]
test eax, eax
sete byte [esp + 0x2f]
mov eax, dword [ebx + ecx*8 + 0x1dc4]
movzx ecx, byte [esp + 0x2f]
shl eax, cl
cmp edx, eax
cmovl edx, eax
cmp dword [esp + 0x50], eax
cmovle eax, dword [esp + 0x50]
add dword [esp + 0x54], 1
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x58]
cmp dword [esp + 0x54], eax
jl 0x6c4fd881
mov ecx, dword [esp + 0x50]
mov eax, esi
mov esi, ebp
mov ebp, eax
mov eax, dword [ebx + 0x78]
neg ecx
cmp ecx, edx
cmovge edx, ecx
mov ecx, 0
add edx, 0x3f
sar edx, 6
add edx, dword [ebx + 0x2094]
cmovs edx, ecx
cmp eax, edx
lea ecx, [eax - 1]
cmovle edx, ecx
jmp 0x6c4fd362
mov eax, dword [ebx + 0x2624]
test eax, eax
jne 0x6c4fd2ce
mov eax, dword [ebx + 0x1dbc]
cmp eax, 1
je 0x6c4fdb3f
cmp eax, 2
je 0x6c4fdb32
test eax, eax
jne 0x6c4fd2ce
mov dword [esp + 0x58], 1
mov eax, ebp
mov edx, 0x80000000
mov ebp, esi
mov esi, eax
mov dword [esp + 0x50], 0x7fffffff
mov dword [esp + 0x54], 0
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x54]
test eax, eax
sete byte [esp + 0x2f]
mov eax, dword [ebx + ecx*8 + 0x1dc4]
movzx ecx, byte [esp + 0x2f]
shl eax, cl
cmp edx, eax
cmovl edx, eax
cmp dword [esp + 0x50], eax
cmovle eax, dword [esp + 0x50]
add dword [esp + 0x54], 1
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x58]
cmp dword [esp + 0x54], eax
jl 0x6c4fd945
mov ecx, dword [esp + 0x50]
mov eax, esi
mov esi, ebp
mov ebp, eax
mov eax, dword [ebx + 0x78]
neg ecx
cmp ecx, edx
cmovge edx, ecx
mov ecx, 0
add edx, 0x3f
sar edx, 6
add edx, dword [ebx + 0x2094]
cmovs edx, ecx
cmp eax, edx
lea ecx, [eax - 1]
cmovle edx, ecx
jmp 0x6c4fd2d4
mov edx, dword [ebx + 0x2624]
test edx, edx
jne 0x6c4fd315
mov eax, dword [ebx + 0x1dbc]
cmp eax, 1
je 0x6c4fda89
cmp eax, 2
je 0x6c4fda7c
test eax, eax
jne 0x6c4fd315
mov dword [esp + 0x54], 1
mov eax, ebp
mov edx, 0x80000000
mov ebp, edi
mov edi, eax
mov dword [esp + 0x48], 0x7fffffff
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x50]
test eax, eax
sete byte [esp + 0x5c]
mov eax, dword [ebx + ecx*8 + 0x1dc4]
movzx ecx, byte [esp + 0x5c]
shl eax, cl
cmp edx, eax
cmovl edx, eax
cmp dword [esp + 0x48], eax
cmovle eax, dword [esp + 0x48]
add dword [esp + 0x50], 1
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x50], eax
jl 0x6c4fda09
mov ecx, dword [esp + 0x48]
mov eax, edi
mov edi, ebp
mov ebp, eax
mov eax, dword [ebx + 0x78]
neg ecx
cmp ecx, edx
cmovge edx, ecx
mov ecx, 0
add edx, 0x3f
sar edx, 6
add edx, dword [ebx + 0x2094]
cmovs edx, ecx
cmp eax, edx
lea ecx, [eax - 1]
cmovle edx, ecx
jmp 0x6c4fd31b
mov dword [esp + 0x54], 2
jmp 0x6c4fd9ee
mov dword [esp + 0x54], 4
jmp 0x6c4fd9ee
mov dword [esp + 0x54], 2
jmp 0x6c4fd569
mov dword [esp + 0x54], 4
jmp 0x6c4fd569
mov dword [esp + 0x54], 2
jmp 0x6c4fd626
mov dword [esp + 0x54], 4
jmp 0x6c4fd626
mov dword [esp + 0x58], 2
jmp 0x6c4fd4a5
mov dword [esp + 0x58], 4
jmp 0x6c4fd4a5
mov dword [esp + 0x58], 2
jmp 0x6c4fd6ea
mov dword [esp + 0x58], 4
jmp 0x6c4fd6ea
mov dword [esp + 0x54], 2
jmp 0x6c4fd7ae
mov dword [esp + 0x54], 4
jmp 0x6c4fd7ae
mov dword [esp + 0x58], 2
jmp 0x6c4fd866
mov dword [esp + 0x58], 4
jmp 0x6c4fd866
mov dword [esp + 0x58], 2
jmp 0x6c4fd92a
mov dword [esp + 0x58], 4
jmp 0x6c4fd92a