Function at 0x6fce3ef0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xbc
mov edi, dword [esp + 0xd0]
mov esi, dword [esp + 0xe4]
mov eax, dword [esp + 0xf4]
mov dword [esp + 0xa0], 0
mov edi, dword [edi + 0xd8]
mov edx, dword [esi + 0xf0]
mov esi, dword [esp + 0xdc]
shr eax, 0xe
and eax, 1
mov dword [esp + 0x40], edi
mov edi, dword [esp + 0xd0]
mov dword [esp + 0xa4], 3
mov dword [esp + 0xa8], 2
mov dword [esp + 0xac], 1
mov edi, dword [edi + 0x158]
mov dword [esi + 0x1a4], eax
mov esi, dword [esp + 0xd8]
mov dword [esi + 0x1a4], eax
mov esi, dword [esp + 0xd4]
mov dword [esi + 0x1a4], eax
mov esi, dword [esp + 0xd0]
mov dword [esi + 0x1a4], eax
mov eax, dword [esp + 0xdc]
mov dword [eax + 0x168], 0x70752660
mov eax, dword [esp + 0xd8]
mov dword [eax + 0x168], 0x70752660
mov eax, dword [esp + 0xd4]
mov dword [eax + 0x168], 0x70752660
mov eax, dword [esp + 0xdc]
mov dword [esi + 0x168], 0x70752660
mov dword [esi + 0x160], 0x3f
mov dword [eax + 0x160], 0x3f
mov eax, dword [esp + 0xd4]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0xdc]
mov ebx, dword [esp + 0xd0]
mov dword [eax + 0x160], 0x3f
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0x20], 0
mov dword [eax + 0x160], 0x3f
mov eax, edi
imul eax, edi
mov edi, dword [esp + 0xd8]
mov dword [esp + 0x24], eax
lea eax, [edx + 1]
imul edx, eax
shl dword [esp + 0x24], 4
mov dword [esp + 0x28], edx
nop
mov eax, dword [esp + 0x24]
xor edx, edx
add ecx, 4
imul eax, dword [ecx + 0x178]
add ebx, 4
add dword [esp + 0x20], 1
add ebp, 4
add edi, 4
add esi, 4
div dword [esp + 0x28]
sar eax, 6
mov dword [ebx + 0x16c], eax
mov dword [ebp + 0x16c], eax
mov dword [edi + 0x16c], eax
mov dword [esi + 0x16c], eax
mov eax, dword [ecx + 0x158]
mov dword [ebx + 0x188], eax
mov dword [ebp + 0x188], eax
mov dword [edi + 0x188], eax
mov dword [esi + 0x188], eax
cmp dword [esp + 0x20], 6
jne 0x6fce4050
mov ebx, dword [esp + 0x108]
test ebx, ebx
jne 0x6fce4582
lea edi, [esp + 0xac]
xor edx, edx
mov ebp, 3
cmp edx, 2
lea eax, [esp + 0xa4]
je 0x6fce4132
cmp edx, 3
je 0x6fce4462
test edx, edx
je 0x6fce4453
mov ebx, dword [esp + 0xdc]
mov esi, dword [ebx + 0x10]
mov ecx, dword [eax]
cmp ecx, 2
je 0x6fce4143
cmp ecx, 3
je 0x6fce4435
test ecx, ecx
je 0x6fce4444
mov ebx, dword [esp + 0xdc]
mov ebx, dword [ebx + 0x10]
cmp esi, ebx
jle 0x6fce4124
mov dword [eax - 4], ecx
mov dword [eax], edx
cmp edi, eax
je 0x6fce4150
mov edx, dword [eax]
add eax, 4
cmp edx, 2
jne 0x6fce40de
mov ecx, dword [eax]
mov esi, dword [esp + 0xd4]
cmp ecx, 2
mov esi, dword [esi + 0x10]
jne 0x6fce4100
mov ebx, dword [esp + 0xd4]
mov ebx, dword [ebx + 0x10]
jmp 0x6fce411b
sub ebp, 1
sub edi, 4
mov edx, dword [esp + 0xa0]
cmp ebp, 0xffffffff
je 0x6fce416a
test ebp, ebp
jne 0x6fce40d2
mov eax, dword [esp + 0x104]
mov ecx, edx
xor esi, esi
mov dword [esp + 0x34], edx
lea ebx, [esp + 0xb0]
add eax, eax
cmp ecx, 2
mov edi, eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0xa4]
je 0x6fce41c7
cmp ecx, 3
je 0x6fce46e0
test ecx, ecx
je 0x6fce46d0
mov ecx, dword [esp + 0xdc]
mov ecx, dword [ecx + 0x10]
cmp ecx, edi
setl cl
movzx ecx, cl
add esi, ecx
cmp eax, ebx
je 0x6fce41df
mov ecx, dword [eax]
add eax, 4
cmp ecx, 2
jne 0x6fce4194
mov ecx, dword [esp + 0xd4]
mov ecx, dword [ecx + 0x10]
cmp ecx, edi
setl cl
movzx ecx, cl
add esi, ecx
cmp eax, ebx
jne 0x6fce41bd
cmp esi, 1
mov dword [esp + 0x30], esi
mov dword [esp + 0x20], 0
jle 0x6fce4471
mov eax, dword [esp + 0xfc]
xor ebx, ebx
mov dword [esp + 0x20], 0x100000
mov ebp, dword [esp + 0xd0]
mov dword [esp + 0x34], 0
mov dword [esp + 0x24], ebx
shl eax, 4
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x100]
shl eax, 4
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0xfc]
add eax, 1
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x100]
shl dword [esp + 0x50], 4
neg dword [esp + 0x50]
add eax, 1
mov dword [esp + 0x54], eax
shl dword [esp + 0x54], 4
neg dword [esp + 0x54]
cmp edx, 2
je 0x6fce43de
cmp edx, 3
je 0x6fce52c0
test edx, edx
je 0x6fce4893
mov eax, dword [esp + 0xdc]
mov edi, dword [esp + 0x2c]
cmp dword [eax + 0x10], edi
jg 0x6fce4471
cmp edx, 2
je 0x6fce43f2
cmp edx, 3
je 0x6fce52d4
test edx, edx
lea esi, [esi]
je 0x6fce48a0
mov eax, dword [esp + 0xf8]
mov edi, dword [esp + 0xdc]
mov esi, dword [esp + 0x20]
mov ebx, dword [esp + 0xdc]
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [edi + 0x10], esi
mov edi, dword [edi + 0xd8]
mov ecx, dword [ebx + 0xd4]
mov ebx, 1
sub edx, dword [esp + 0x68]
lea esi, [edi + 1]
mov dword [esp + 0x48], ecx
add ecx, 4
shl ebx, cl
mov ecx, esi
shl edx, cl
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0x3c], edi
lea edi, [ebx - 1]
neg ebx
cmp edx, edi
cmovg edx, edi
sub eax, dword [esp + 0x6c]
mov dword [ecx], edx
mov ecx, esi
shl eax, cl
mov ecx, esi
mov esi, dword [esp + 0x3c]
cmp eax, edi
cmovle edi, eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0x4c], edi
mov dword [eax + 8], edi
mov edi, dword [esp + 0x50]
shl edi, cl
cmp edi, ebx
cmovl edi, ebx
mov dword [eax + 4], edi
mov eax, dword [esp + 0x54]
shl eax, cl
cmp eax, ebx
cmovge ebx, eax
mov eax, dword [esp + 0xdc]
test esi, esi
mov dword [eax + 0xc], ebx
mov dword [eax + 0xdc], esi
jne 0x6fce5318
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0x24]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0x28]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0xdc]
cmp dword [esp + 0x28], edx
mov ecx, dword [esp + 0x20]
mov eax, dword [eax + 0x154]
mov dword [esp + 0x38], eax
jg 0x6fce43a0
cmp dword [esp + 0x28], edi
jl 0x6fce43a0
mov eax, dword [esp + 0x4c]
cmp dword [esp + 0x44], eax
jle 0x6fce5404
cmp ecx, dword [esp + 0x20]
jge 0x6fce43b9
mov eax, dword [esp + 0x24]
mov dword [esp + 0x20], ecx
mov eax, dword [esp + eax*4 + 0xa0]
mov dword [esp + 0x34], eax
add dword [esp + 0x24], 1
mov edi, dword [esp + 0x30]
mov eax, dword [esp + 0x24]
cmp eax, edi
je 0x6fce4471
mov edx, dword [esp + eax*4 + 0xa0]
cmp edx, 2
jne 0x6fce4264
mov eax, dword [esp + 0xd4]
mov edi, dword [esp + 0x2c]
cmp dword [eax + 0x10], edi
jg 0x6fce4471
mov eax, dword [esp + 0xd4]
mov edx, dword [esp + 0x100]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov eax, dword [eax + 4]
mov dword [esp], eax
mov eax, dword [esp + 0xf8]
mov ecx, dword [eax]
mov eax, dword [esp + 0xfc]
call fcn.6fce3270
mov ecx, eax
jmp 0x6fce43a0
mov ebx, dword [esp + 0xd8]
mov ebx, dword [ebx + 0x10]
jmp 0x6fce411b
mov ebx, dword [esp + 0xd0]
mov ebx, dword [ebx + 0x10]
jmp 0x6fce411b
mov ebx, dword [esp + 0xd0]
mov esi, dword [ebx + 0x10]
jmp 0x6fce40f9
mov ebx, dword [esp + 0xd8]
mov esi, dword [ebx + 0x10]
jmp 0x6fce40f9
mov eax, dword [esp + 0xe0]
mov ebx, dword [esp + 0x20]
mov edx, eax
mov dword [eax + 0x154], ebx
mov eax, dword [esp + 0x34]
cmp eax, 1
mov dword [edx + 0xec], eax
je 0x6fce46f0
jle 0x6fce59e0
mov eax, dword [esp + 0x34]
cmp eax, 2
je 0x6fce47f0
cmp eax, 3
jne 0x6fce4577
mov esi, dword [esp + 0x40]
mov eax, dword [esp + 0xd8]
test esi, esi
je 0x6fce5991
mov esi, dword [esp + 0xe8]
mov eax, dword [eax + 0x4c]
sub eax, dword [esi]
mov esi, dword [esp + 0xe0]
mov dword [esi + 0x104], eax
mov eax, dword [esp + 0xd8]
mov esi, dword [esp + 0xe8]
mov eax, dword [eax + 0x50]
sub eax, dword [esi + 4]
mov esi, dword [esp + 0xe0]
mov dword [esi + 0x108], eax
mov eax, dword [esp + 0xd8]
mov edx, dword [eax + 0x50]
mov eax, dword [eax + 0x4c]
mov dword [esi + 0x128], edx
mov dword [esi + 0x124], eax
mov eax, dword [esp + 0xd8]
mov esi, dword [esp + 0xe8]
mov edx, dword [eax + 0x50]
mov eax, dword [eax + 0x4c]
mov dword [esi + 4], edx
mov dword [esi], eax
mov eax, dword [esp + 0xd8]
mov esi, dword [esp + 0xe0]
mov edx, dword [eax + 0x28]
mov eax, dword [eax + 0x24]
mov dword [esi + 4], edx
mov dword [esi], eax
mov eax, dword [esp + 0xd8]
mov eax, dword [eax + 0x160]
mov dword [esi + 0x178], eax
mov eax, dword [esp + 0xd4]
mov edx, dword [eax + 0x28]
mov eax, dword [eax + 0x24]
mov dword [esi + 0x198], edx
mov dword [esi + 0x194], eax
add esp, 0xbc
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0xe0]
mov dword [eax + 0x154], 0
mov dword [eax + 0xec], 0
mov ebp, dword [esp + 0x40]
test ebp, ebp
je 0x6fce57c8
mov eax, dword [esp + 0xe4]
mov eax, dword [eax + 0xec]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xd0]
xor ecx, ecx
mov esi, dword [esp + 0xe0]
mov edx, dword [eax + 0x28]
mov eax, dword [eax + 0x24]
mov ebx, esi
mov dword [esi + 0x120], edx
mov edx, dword [esp + 0xd0]
mov dword [esi + 0x11c], eax
mov eax, dword [esp + 0xd0]
mov eax, dword [eax + 0x160]
mov dword [esi + 0x178], eax
mov eax, dword [esp + 0xd0]
mov esi, dword [eax + 0x24]
mov ebp, dword [eax + 0x28]
mov eax, ebx
mov dword [esp + 0x24], esi
mov esi, dword [esp + 0x24]
mov ebx, dword [edx + 0x110]
add ebx, esi
test esi, esi
mov dword [eax], ebx
jne 0x6fce58e7
mov ebx, dword [edx + 0x130]
mov dword [eax + 0x194], ebx
mov ebx, dword [edx + 0x114]
add ebx, ebp
test ebp, ebp
mov dword [eax + 4], ebx
jne 0x6fce58d1
mov ebx, dword [edx + 0x134]
mov edi, dword [esp + 0x40]
mov dword [eax + 0x198], ebx
test edi, edi
je 0x6fce46ac
mov esi, dword [eax]
mov dword [eax + 0x1b8], ebx
mov edi, esi
shr edi, 0x1f
mov dword [eax + 0x124], esi
add esi, edi
sar esi, 1
mov dword [eax], esi
mov esi, dword [eax + 0x194]
mov edi, esi
shr edi, 0x1f
mov dword [eax + 0x1b4], esi
add esi, edi
sar esi, 1
mov dword [eax + 0x194], esi
mov esi, dword [eax + 4]
mov edi, esi
shr edi, 0x1f
mov dword [eax + 0x128], esi
add esi, edi
sar esi, 1
mov dword [eax + 4], esi
mov esi, ebx
shr esi, 0x1f
add ebx, esi
sar ebx, 1
mov dword [eax + 0x198], ebx
cmp dword [esp + 0x20], 2
jne 0x6fce639d
add ecx, 8
add edx, 8
add eax, 8
cmp ecx, 0x20
jne 0x6fce460b
jmp 0x6fce4577
mov ecx, dword [esp + 0xd0]
mov ecx, dword [ecx + 0x10]
jmp 0x6fce41af
mov ecx, dword [esp + 0xd8]
mov ecx, dword [ecx + 0x10]
jmp 0x6fce41af
mov edi, dword [esp + 0xdc]
mov esi, dword [esp + 0xe0]
mov eax, dword [esp + 0xdc]
mov ecx, dword [edi + 0x2c]
mov ebx, dword [edi + 0x30]
mov edx, dword [eax + 0x28]
mov eax, dword [eax + 0x24]
mov dword [esi + 0x194], ecx
mov ecx, dword [esp + 0x40]
mov dword [esi + 0x198], ebx
mov dword [esi + 4], edx
mov dword [esi], eax
test ecx, ecx
je 0x6fce5860
mov edx, dword [edi + 0x50]
mov ebx, esi
mov eax, dword [edi + 0x4c]
mov dword [esi + 0x128], edx
mov edx, dword [edi + 0x58]
mov dword [esi + 0x124], eax
mov eax, dword [edi + 0x54]
mov edi, esi
mov dword [esi + 0x1b8], edx
mov dword [esi + 0x1b4], eax
mov eax, dword [esi + 0x124]
mov esi, dword [esp + 0xe8]
sub eax, dword [esi]
mov dword [ebx + 0x10c], eax
mov eax, dword [ebx + 0x128]
sub eax, dword [esi + 4]
mov esi, dword [esp + 0xec]
mov dword [edi + 0x110], eax
mov eax, dword [edi + 0x1b4]
sub eax, dword [esi]
mov ebx, esi
mov dword [edi + 0x104], eax
mov eax, dword [edi + 0x1b8]
sub eax, dword [esi + 4]
mov esi, dword [esp + 0xe8]
mov dword [edi + 0x108], eax
mov eax, dword [esp + 0xdc]
mov edx, dword [eax + 0x50]
mov eax, dword [eax + 0x4c]
mov dword [esi + 4], edx
mov dword [esi], eax
mov eax, dword [esp + 0xdc]
mov edx, dword [eax + 0x58]
mov eax, dword [eax + 0x54]
mov dword [ebx + 4], edx
mov dword [ebx], eax
mov eax, dword [esp + 0xdc]
mov edx, dword [esp + 0xe0]
mov eax, dword [eax + 0x160]
mov dword [edx + 0x178], eax
add esp, 0xbc
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebx, dword [esp + 0x40]
mov eax, dword [esp + 0xd4]
test ebx, ebx
jne 0x6fce5800
mov edi, dword [esp + 0xec]
mov eax, dword [eax + 0x24]
mov esi, dword [esp + 0xe0]
sub eax, dword [edi]
mov ebx, edi
mov dword [esi + 0x104], eax
mov eax, dword [esp + 0xd4]
mov eax, dword [eax + 0x28]
sub eax, dword [edi + 4]
mov dword [esi + 0x108], eax
mov eax, dword [esp + 0xd4]
mov edx, dword [eax + 0x28]
mov eax, dword [eax + 0x24]
mov dword [ebx + 4], edx
mov dword [ebx], eax
mov eax, dword [esp + 0xd4]
mov esi, dword [esp + 0xe0]
mov edx, dword [eax + 0x28]
mov eax, dword [eax + 0x24]
mov dword [esi + 0x198], edx
mov dword [esi + 0x194], eax
mov eax, dword [esp + 0xd4]
mov eax, dword [eax + 0x160]
mov dword [esi + 0x178], eax
mov eax, dword [esp + 0xd8]
mov edx, dword [eax + 0x28]
mov eax, dword [eax + 0x24]
mov dword [esi + 4], edx
mov dword [esi], eax
add esp, 0xbc
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0x2c]
cmp dword [ebp + 0x10], eax
jg 0x6fce4471
mov eax, dword [ebp + 0xd8]
mov ecx, dword [esp + 0x20]
mov edi, dword [ebp + 0x154]
mov dword [ebp + 0xdc], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp + 0x10], ecx
mov dword [esp + 0x28], edi
mov dword [esp + 0x4c], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x60], eax
add eax, 0x20
cmp eax, 0x3f
ja 0x6fce43a0
mov eax, dword [esp + 0x4c]
add eax, 0x20
cmp eax, 0x3f
ja 0x6fce43a0
mov eax, edi
sub eax, 0xffffff80
mov dword [esp + 0x48], eax
mov dword [esp + 0x74], ebp
mov dword [esp + 0x44], ebp
mov dword [esp + 0x80], 0
mov dword [esp + 0x64], 0x60
mov dword [esp + 0x70], 0x10
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x38], 0
mov eax, dword [ebp + 0xd0]
mov edx, dword [esp + 0x38]
mov esi, dword [esp + 0x44]
mov edi, eax
mov dword [esp + 0x78], eax
mov eax, edx
and edx, 1
shr eax, 1
imul eax, edi
mov edi, dword [esp + 0x60]
add eax, edx
shl eax, 3
mov dword [esp + 0x58], eax
mov eax, dword [esi + 0x110]
add eax, edi
test edi, edi
jne 0x6fce5332
mov edx, dword [esi + 0x130]
mov dword [esp + 0x3c], edx
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x4c]
mov edx, dword [edi + 0x114]
add edx, esi
test esi, esi
jne 0x6fce5350
mov esi, dword [edi + 0x134]
mov ecx, dword [ebp]
cmp eax, ecx
jg 0x6fce59d4
mov ebx, dword [ebp + 4]
cmp eax, ebx
mov dword [esp + 0x5c], ebx
jl 0x6fce59d4
mov edi, dword [ebp + 8]
cmp edx, edi
jg 0x6fce59d4
mov ebx, dword [ebp + 0xc]
cmp edx, ebx
jl 0x6fce59d4
cmp ecx, dword [esp + 0x3c]
jl 0x6fce59d4
mov ecx, dword [esp + 0x3c]
cmp dword [esp + 0x5c], ecx
jg 0x6fce59d4
cmp edi, esi
jl 0x6fce59d4
cmp ebx, esi
jg 0x6fce59d4
mov ecx, dword [ebp + 0xd8]
test ecx, ecx
jne 0x6fce5900
mov edi, dword [esp + 0x78]
mov ecx, eax
mov ebx, dword [esp + 0x3c]
and ecx, 1
add dword [esp + 0x88], edx
add ecx, ecx
add dword [esp + 0x8c], ebx
mov ebx, edx
sar edx, 1
and ebx, 1
imul edx, edi
or ecx, ebx
add dword [esp + 0x84], eax
sar eax, 1
add dword [esp + 0x90], esi
add eax, edx
mov edx, dword [esp + 0x58]
add eax, dword [ebp + ecx*4 + 0xa0]
mov ecx, dword [esp + 0x3c]
lea ebx, [eax + edx]
mov eax, esi
and eax, 1
mov edx, eax
mov eax, ecx
and eax, 1
add eax, eax
or edx, eax
mov eax, esi
sar eax, 1
mov esi, edi
imul eax, edi
mov edi, ecx
sar edi, 1
add eax, edi
add eax, dword [ebp + edx*4 + 0xe4]
mov edx, esi
add eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x10], edx
mov dword [esp + 8], ebx
add eax, dword [ebp + 0xb8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [0x70fcbea0]
mov edx, dword [esp + 0x74]
mov esi, dword [ebp + 0x188]
mov ecx, dword [ebp + 0x15c]
mov eax, dword [esp + 0x28]
mov ebx, dword [edx + 0x18c]
mov edx, dword [edx + 0x170]
mov edi, dword [ebp + 0x1a4]
mov dword [esp + 0x5c], esi
mov esi, dword [ebp + 0x16c]
mov dword [esp + 0x94], ebx
mov ebx, dword [ebp + 0x168]
mov dword [esp + 0x78], edx
mov edx, dword [ebp + 0x154]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x7c], ebx
mov ebx, dword [ebp + 0x158]
add edx, 0x100
mov dword [esp], eax
mov dword [esp + 0x58], edx
call dword [0x70fcbe40]
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
test eax, eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
je 0x6fce5365
call dword [0x70fcbe84]
cmp eax, 2
jg 0x6fce4b58
mov eax, dword [esp + 0x28]
cmp word [eax + 0x82], 0
je 0x6fce53b0
mov ecx, 5
mov eax, 1
sub ecx, dword [esp + 0x38]
shl eax, cl
or dword [esp + 0x80], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.6fca6810
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
shl eax, 4
add eax, dword [esp + 0x64]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x3c]
test eax, eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp], eax
je 0x6fce53a0
call dword [0x70fcbe88]
test edi, edi
je 0x6fce5370
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [0x70fcbe48]
mov edi, dword [esp + 0x94]
mov ecx, 0x10
mov edx, 0x8000
add edi, edi
imul edi, eax
mov eax, 0x8000
jmp 0x6fce4bf2
or eax, edx
mov esi, eax
mov ebx, eax
imul esi, eax
xor ebx, edx
cmp edi, esi
cmovb eax, ebx
shr edx, 1
sub ecx, 1
jne 0x6fce4bf0
add eax, 0x30
shr eax, 6
movzx eax, ax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [0x70fcbe5c]
mov edi, dword [esp + 0x64]
mov dword [esp + 0x64], 0
lea eax, [eax + eax*4]
shr eax, 7
imul eax, dword [esp + 0x78]
xor edx, edx
mov ecx, dword [esp + 0x70]
div dword [esp + 0x5c]
add ecx, edi
add eax, ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x70], eax
cmp eax, ecx
jg 0x6fce43a0
add dword [esp + 0x38], 1
add dword [esp + 0x44], 8
add dword [esp + 0x74], 4
cmp dword [esp + 0x38], 4
jne 0x6fce4947
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
mov dword [esp + 0x44], eax
mov edi, dword [esp + 0x8c]
mov esi, dword [esp + 0x90]
mov eax, ecx
mov ebx, dword [ebp + 0xc4]
and eax, 0xf
sar ecx, 3
add ecx, dword [eax*4 + 0x707510a0]
mov eax, edx
and eax, 0xf
sar edx, 3
mov eax, dword [eax*4 + 0x707510a0]
mov dword [esp + 0x38], edx
mov edx, ecx
and ecx, 1
add dword [esp + 0x38], eax
mov eax, edi
and eax, 0xf
sar edi, 3
add edi, dword [eax*4 + 0x707510a0]
mov eax, esi
and eax, 0xf
sar esi, 3
add esi, dword [eax*4 + 0x707510a0]
mov eax, dword [ebp + 0x94]
sar edx, 1
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x7c], edx
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0xd0]
sar ebx, 1
mov dword [esp + 0x78], ebx
shr eax, 1
imul ebx, eax
add ebx, edx
mov edx, dword [esp + 0x38]
add ebx, dword [ebp + 0xb0]
and edx, 1
lea edx, [edx + ecx*2]
cmp edx, 1
mov dword [esp + 0x84], edx
je 0x6fce632f
cmp edx, 2
je 0x6fce630d
test edx, edx
je 0x6fce5b10
mov edx, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0xc], edx
mov dword [esp], eax
call dword [0x70fcbeec]
mov eax, dword [ebp + 0x94]
mov edx, dword [ebp + 0xc4]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0xd0]
shr eax, 1
lea ebx, [edx + 0x10]
mov edx, esi
sar edx, 1
mov ecx, edi
mov dword [esp + 0x88], edx
imul edx, eax
and edi, 1
and esi, 1
sar ecx, 1
lea esi, [esi + edi*2]
add edx, ecx
add edx, dword [ebp + 0xf4]
cmp esi, 1
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], esi
je 0x6fce6377
cmp esi, 2
je 0x6fce6351
test esi, esi
je 0x6fce6306
mov edi, dword [esp + 0x38]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ebx
mov dword [esp + 0xc], edi
call dword [0x70fcbeec]
mov eax, dword [ebp + 0xd0]
shr eax, 1
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xbc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [0x70fcbea0]
mov ebx, dword [ebp + 0x19c]
mov edi, dword [ebp + 0x16c]
mov edx, dword [ebp + 0x154]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x74], ebx
mov ebx, dword [ebp + 0x188]
mov dword [esp + 0x38], edi
mov edi, dword [ebp + 0x168]
add edx, 0x100
mov esi, dword [ebp + 0x1a4]
mov dword [esp + 0x3c], edx
mov dword [esp + 0x58], ebx
mov ebx, dword [ebp + 0x180]
mov dword [esp + 0x70], edi
mov edi, dword [ebp + 0x158]
mov dword [esp + 0x5c], ebx
mov ebx, dword [ebp + 0x15c]
mov dword [esp], eax
call dword [0x70fcbe40]
mov eax, dword [esp + 0x38]
mov dword [esp + 8], edi
test ebx, ebx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
je 0x6fce5c50
call dword [0x70fcbe84]
cmp eax, 2
jg 0x6fce4ed0
mov eax, dword [esp + 0x28]
cmp word [eax + 0x82], 0
jne 0x6fce4ed0
cmp word [eax + 0x90], 0
jne 0x6fce4ed0
movzx eax, word [eax + 0x80]
mov word [esp + 0x94], ax
add eax, 1
cmp ax, 1
jbe 0x6fce6834
mov eax, dword [esp + 0x70]
or dword [esp + 0x80], 2
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.6fca6810
mov dword [esp + 8], edi
shl eax, 4
add eax, dword [esp + 0x64]
test ebx, ebx
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
je 0x6fce5c90
call dword [0x70fcbe88]
test esi, esi
je 0x6fce5c60
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [0x70fcbe48]
mov edi, dword [esp + 0x74]
mov ecx, 0x10
mov edx, 0x8000
add edi, edi
imul edi, eax
mov eax, 0x8000
jmp 0x6fce4f52
or eax, edx
mov esi, eax
mov ebx, eax
imul esi, eax
xor ebx, edx
cmp edi, esi
cmovb eax, ebx
shr edx, 1
sub ecx, 1
jne 0x6fce4f50
add eax, 0x30
shr eax, 6
movzx eax, ax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [0x70fcbe5c]
mov esi, dword [esp + 0x64]
mov dword [esp + 0x64], 0
lea eax, [eax + eax*4]
shr eax, 7
imul eax, dword [esp + 0x5c]
xor edx, edx
mov ebx, dword [esp + 0x44]
mov ecx, dword [ebp + 0x10]
div dword [esp + 0x58]
add ebx, esi
add eax, ebx
cmp eax, ecx
mov dword [esp + 0x38], eax
jge 0x6fce43a0
mov eax, dword [ebp + 0xd0]
mov edx, dword [esp + 0x78]
mov edi, dword [esp + 0x84]
mov esi, dword [ebp + 0x94]
shr eax, 1
mov ebx, dword [ebp + 0xc4]
imul edx, eax
add edx, dword [esp + 0x7c]
add edx, dword [ebp + 0xb4]
cmp edi, 1
je 0x6fce6662
cmp edi, 2
je 0x6fce66df
test edi, edi
je 0x6fce66d4
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 4], edx
mov dword [esp], ebx
call dword [0x70fcbeec]
mov eax, dword [ebp + 0xd0]
mov edi, dword [ebp + 0x94]
mov ecx, dword [ebp + 0xc4]
shr eax, 1
mov edx, dword [esp + 0x88]
lea esi, [ecx + 0x10]
mov ecx, dword [esp + 0x90]
imul edx, eax
add edx, dword [esp + 0x8c]
add edx, dword [ebp + 0xf8]
cmp ecx, 1
je 0x6fce66b2
cmp ecx, 2
je 0x6fce6690
test ecx, ecx
je 0x6fce665b
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
mov dword [esp + 4], edx
mov dword [esp], esi
call dword [0x70fcbeec]
mov eax, dword [ebp + 0xd0]
shr eax, 1
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0xc0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [0x70fcbea0]
mov esi, dword [ebp + 0x1a4]
mov edi, dword [ebp + 0x1a0]
mov edx, dword [ebp + 0x154]
mov ebx, dword [ebp + 0x184]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x44], esi
mov esi, dword [ebp + 0x188]
mov dword [esp + 0x74], edi
mov edi, dword [ebp + 0x168]
add edx, 0x100
mov dword [esp + 0x5c], ebx
mov ebx, dword [ebp + 0x15c]
mov dword [esp + 0x3c], edx
mov dword [esp + 0x58], esi
mov esi, dword [ebp + 0x16c]
mov dword [esp + 0x70], edi
mov edi, dword [ebp + 0x158]
mov dword [esp], eax
call dword [0x70fcbe40]
mov eax, dword [esp + 0x28]
test ebx, ebx
mov dword [esp + 0xc], esi
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
je 0x6fce64a3
call dword [0x70fcbe84]
cmp eax, 2
jg 0x6fce5163
mov eax, dword [esp + 0x28]
cmp word [eax + 0x82], 0
jne 0x6fce5163
cmp word [eax + 0x90], 0
jne 0x6fce5163
movzx eax, word [eax + 0x80]
mov word [esp + 0x78], ax
add eax, 1
cmp ax, 1
jbe 0x6fce6978
mov eax, dword [esp + 0x70]
or dword [esp + 0x80], 1
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.6fca6810
mov dword [esp + 0xc], esi
mov dword [esp + 8], edi
shl eax, 4
add eax, dword [esp + 0x64]
test ebx, ebx
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
je 0x6fce64d0
call dword [0x70fcbe88]
mov esi, dword [esp + 0x44]
test esi, esi
je 0x6fce64ae
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [0x70fcbe48]
mov edi, dword [esp + 0x74]
mov ecx, 0x10
mov edx, 0x8000
add edi, edi
imul edi, eax
mov eax, 0x8000
jmp 0x6fce51e4
or eax, edx
mov esi, eax
mov ebx, eax
imul esi, eax
xor ebx, edx
cmp edi, esi
cmovb eax, ebx
shr edx, 1
sub ecx, 1
jne 0x6fce51e2
add eax, 0x30
shr eax, 6
movzx eax, ax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [0x70fcbe5c]
lea eax, [eax + eax*4]
shr eax, 7
imul eax, dword [esp + 0x5c]
xor edx, edx
mov ecx, dword [esp + 0x64]
add ecx, dword [esp + 0x38]
div dword [esp + 0x58]
lea ebx, [ecx + eax]
mov esi, dword [esp + 0x4c]
xor edx, edx
mov edi, 0x40
mov ecx, dword [esp + 0x60]
test esi, esi
setne dl
xor eax, eax
test ecx, ecx
setne al
add eax, edx
mov edx, ecx
sar ecx, 0x1f
xor edx, ecx
sub edx, ecx
mov ecx, esi
sub edi, edx
mov edx, esi
sar ecx, 0x1f
mov esi, 0x40
xor edx, ecx
sub edx, ecx
sub esi, edx
add eax, dword [edi*4 + str._v_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_v_v_v_v_v_v_n_n_n_n_n_n_n_n_n_n_n_n_n_n_t_t_t_a_a_a]
add eax, dword [esi*4 + str._v_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_v_v_v_v_v_v_n_n_n_n_n_n_n_n_n_n_n_n_n_n_t_t_t_a_a_a]
shl eax, 4
add eax, ebx
mov ecx, dword [ebp + 0x10]
cmp ecx, eax
jle 0x6fce43a0
mov ebx, dword [esp + 0x60]
mov ecx, eax
mov dword [ebp + 0x10], eax
mov dword [ebp + 0x84], 0xff
mov dword [ebp + 0x24], ebx
mov ebx, dword [esp + 0x4c]
mov dword [ebp + 0x28], ebx
mov ebx, dword [esp + 0x80]
mov dword [ebp + 0x160], ebx
jmp 0x6fce43a0
mov eax, dword [esp + 0xd8]
mov edi, dword [esp + 0x2c]
cmp dword [eax + 0x10], edi
jg 0x6fce4471
mov eax, dword [esp + 0xd8]
mov edx, dword [esp + 0x100]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov eax, dword [eax + 4]
mov dword [esp], eax
mov eax, dword [esp + 0xf8]
mov ecx, dword [eax]
mov eax, dword [esp + 0xfc]
call fcn.6fce3270
lea ecx, [eax + 0x10]
jmp 0x6fce43a0
mov eax, dword [eax + 0x4c]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0x50]
mov dword [esp + 0x44], eax
jmp 0x6fce4371
mov edx, dword [ebp + 0x150]
mov edi, eax
mov ebx, dword [esp + 0x38]
sub edi, dword [edx + ebx*8]
mov dword [esp + 0x3c], edi
jmp 0x6fce498c
mov ecx, dword [ebp + 0x150]
mov esi, edx
mov edi, dword [esp + 0x38]
sub esi, dword [ecx + edi*8 + 4]
jmp 0x6fce49aa
call dword [0x70fcbe90]
jmp 0x6fce4b41
mov eax, dword [esp + 0x58]
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [0x70fcbe74]
mov edi, dword [esp + 0x64]
mov dword [esp + 0x64], 0
jmp 0x6fce4c3b
call dword [0x70fcbe8c]
jmp 0x6fce4bb7
cmp word [eax + 0x90], 0
jne 0x6fce4b58
movzx eax, word [eax + 0x80]
mov word [esp + 0x98], ax
add eax, 1
cmp ax, 1
ja 0x6fce4b58
test edi, edi
jne 0x6fce6755
mov eax, dword [esp + 0x28]
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x707524c0
mov dword [esp], eax
call dword [0x70fcbe74]
jmp 0x6fce4c3b
cmp dword [esp + 0x44], ebx
jl 0x6fce43a0
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0xdc]
test edx, edx
jne 0x6fce59f0
mov eax, dword [eax + 0x2c]
mov edx, dword [esp + 0x28]
mov edi, eax
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0xdc]
mov ecx, edx
and ecx, 1
add ecx, ecx
sar edx, 1
mov eax, dword [eax + 0x30]
mov esi, eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0x8c], esi
mov ebx, dword [eax + 0xd0]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x70], ebx
and eax, 1
or ecx, eax
mov eax, dword [esp + 0x44]
sar eax, 1
imul eax, ebx
add eax, edx
mov edx, edi
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0xdc]
sar edx, 1
mov ecx, dword [eax + ecx*4 + 0xa0]
mov eax, esi
add dword [esp + 0x84], ecx
mov ecx, edi
and ecx, 1
and eax, 1
add ecx, ecx
or ecx, eax
mov eax, esi
sar eax, 1
imul eax, ebx
mov ebx, edi
lea esi, [eax + edx]
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x88], esi
mov esi, dword [esp + 0xdc]
mov edx, dword [esp + 0x28]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x44]
mov esi, dword [esi + ecx*4 + 0xe4]
add dword [esp + 0x88], esi
mov esi, dword [esp + 0xdc]
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], edx
add esi, 0x24
mov dword [esp + 0x9c], esi
mov esi, dword [esp + 0x20]
mov dword [esp + 0x74], esi
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x48]
mov ecx, edx
shl eax, cl
shl edi, cl
mov ecx, dword [esp + 0xdc]
sub eax, dword [ecx + 0x98]
mov ecx, 0
cmovne ecx, esi
cdq
xor eax, edx
sub edx, eax
mov eax, esi
sub eax, 1
mov esi, eax
mov dword [esp + 0x58], ecx
mov ecx, eax
mov eax, dword [esp + 0xdc]
sar edx, cl
mov ecx, edi
mov edi, 0
mov dword [esp + 0x4c], esi
sub ecx, dword [eax + 0x9c]
cmovne edi, dword [esp + 0x48]
mov eax, ecx
sar eax, 0x1f
xor ecx, eax
sub eax, ecx
mov ecx, esi
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x5c], edi
mov edi, dword [esp + 0x60]
sar eax, cl
mov eax, dword [eax*4 + 0x70752640]
mov ecx, esi
mov esi, dword [esp + 0xdc]
shl edi, cl
shl ebx, cl
mov ecx, dword [esp + 0xdc]
sub ebx, dword [ecx + 0xfc]
mov ecx, 0
cmovne ecx, dword [esp + 0x48]
mov dword [esp + 0x3c], ecx
mov ecx, ebx
sar ecx, 0x1f
xor ebx, ecx
sub ecx, ebx
mov ebx, ecx
movzx ecx, byte [esp + 0x4c]
sar ebx, cl
mov ecx, edi
sub ecx, dword [esi + 0x100]
mov edi, 0
mov esi, dword [esp + 0x48]
cmove esi, edi
mov edi, esi
mov esi, dword [esp + 0x38]
add eax, dword [edx*4 + 0x70752640]
add eax, dword [ebx*4 + 0x70752640]
sub esi, 0xffffff80
mov dword [esp + 0x48], esi
mov esi, ecx
sar esi, 0x1f
xor ecx, esi
sub esi, ecx
movzx ecx, byte [esp + 0x4c]
sar esi, cl
add eax, dword [esi*4 + 0x70752640]
add eax, dword [esp + 0x58]
add eax, dword [esp + 0x5c]
add eax, dword [esp + 0x3c]
add eax, edi
shl eax, 4
add eax, 0x20
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xdc]
mov edi, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x7c], 0
mov dword [esp + 0x64], eax
mov ebx, eax
mov dword [esp + 0x60], 0x70
mov dword [esp + 0x3c], 0
mov dword [esp + 0xd0], ebp
mov edx, dword [esp + 0x3c]
mov eax, edx
and edx, 1
shr eax, 1
imul eax, edi
add eax, edx
shl eax, 3
cmp dword [esp + 0x4c], ecx
jge 0x6fce670d
mov edx, dword [esp + 0x88]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x84]
add edx, eax
mov dword [esp + 0xc], edx
lea edx, [edi + eax]
mov dword [esp + 8], edx
add eax, dword [ebx + 0xb8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call dword [0x70fcbea0]
mov ecx, dword [esp + 0x64]
mov edi, dword [ebx + 0x188]
mov eax, dword [esp + 0x38]
mov ebp, dword [ebx + 0x15c]
mov edx, dword [ecx + 0x18c]
mov esi, dword [ebx + 0x1a4]
mov dword [esp + 0x70], edi
mov edi, dword [ebx + 0x16c]
mov dword [esp + 0x80], edx
mov edx, dword [ecx + 0x170]
mov dword [esp + 0x74], edx
mov edx, dword [ebx + 0x168]
mov dword [esp + 0x78], edx
mov edx, dword [ebx + 0x158]
mov dword [esp + 0x58], edx
mov edx, dword [ebx + 0x154]
mov dword [esp], eax
add edx, 0x100
mov dword [esp + 0x5c], edx
call dword [0x70fcbe40]
mov eax, dword [esp + 0x58]
test ebp, ebp
mov dword [esp + 0xc], edi
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
je 0x6fce5c03
call dword [0x70fcbe84]
cmp eax, 2
jg 0x6fce5b25
mov eax, dword [esp + 0x38]
cmp word [eax + 0x82], 0
jne 0x6fce5b25
cmp word [eax + 0x90], 0
jne 0x6fce5b25
cmp word [eax + 0x80], 0
jne 0x6fce5b25
test esi, esi
jne 0x6fce67c4
mov eax, dword [esp + 0x38]
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x70752440
mov dword [esp], eax
call dword [0x70fcbe74]
lea esi, [esi]
imul eax, dword [esp + 0x74]
xor edx, edx
add esi, dword [esp + 0x4c]
add dword [esp + 0x3c], 1
add dword [esp + 0x64], 4
div dword [esp + 0x70]
add esi, eax
cmp dword [esp + 0x3c], 4
je 0x6fce5c9b
mov dword [esp + 0x4c], esi
mov edi, dword [ebx + 0xd0]
mov ecx, dword [ebx + 0x10]
jmp 0x6fce564a
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x20], 2
cmp dword [eax + 0xec], 2
je 0x6fce45ba
mov eax, dword [esp + 0xe0]
mov dword [eax + 0xec], 5
jmp 0x6fce45a9
mov edi, dword [esp + 0xec]
mov eax, dword [eax + 0x4c]
mov esi, dword [esp + 0xe0]
sub eax, dword [edi]
mov ebx, edi
mov dword [esi + 0x104], eax
mov eax, dword [esp + 0xd4]
mov eax, dword [eax + 0x50]
sub eax, dword [edi + 4]
mov dword [esi + 0x108], eax
mov eax, dword [esp + 0xd4]
mov edx, dword [eax + 0x50]
mov eax, dword [eax + 0x4c]
mov dword [esi + 0x1b8], edx
mov dword [esi + 0x1b4], eax
mov eax, dword [esp + 0xd4]
mov edx, dword [eax + 0x50]
mov eax, dword [eax + 0x4c]
mov dword [ebx + 4], edx
mov dword [ebx], eax
jmp 0x6fce4843
mov ebx, dword [esp + 0xe0]
mov edi, dword [esp + 0xe8]
mov ecx, dword [ebx]
mov esi, ebx
sub ecx, dword [edi]
mov dword [ebx + 0x10c], ecx
mov ecx, dword [ebx + 4]
sub ecx, dword [edi + 4]
mov edi, esi
mov ebx, dword [esp + 0xec]
mov dword [esi + 0x110], ecx
mov ecx, dword [esi + 0x194]
sub ecx, dword [ebx]
mov dword [esi + 0x104], ecx
mov ecx, dword [esi + 0x198]
mov esi, ebx
sub ecx, dword [ebx + 4]
mov dword [edi + 0x108], ecx
mov ecx, dword [esp + 0xe8]
mov dword [ecx], eax
mov eax, dword [esp + 0xdc]
mov dword [ecx + 4], edx
mov edx, dword [eax + 0x30]
mov eax, dword [eax + 0x2c]
mov dword [esi + 4], edx
mov dword [esi], eax
jmp 0x6fce47cb
mov edi, dword [esp + 0xd0]
mov esi, dword [edi + 0x150]
sub ebx, dword [esi + ecx + 4]
jmp 0x6fce4646
mov edi, dword [esp + 0xd0]
mov esi, dword [edi + 0x150]
sub ebx, dword [esi + ecx]
jmp 0x6fce4627
mov ecx, eax
mov ebx, dword [esp + 0x3c]
shr ecx, 0x1f
mov edi, dword [esp + 0x38]
add ecx, eax
sar ecx, 1
add dword [esp + 0x84], ecx
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sar ecx, 1
add dword [esp + 0x88], ecx
mov ecx, ebx
shr ecx, 0x1f
add ecx, ebx
sar ecx, 1
add dword [esp + 0x8c], ecx
mov ecx, esi
shr ecx, 0x1f
mov dword [esp + 4], edx
add ecx, esi
mov dword [esp + 0x10], ebp
sar ecx, 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], edi
mov dword [esp], eax
add dword [esp + 0x90], ecx
call fcn.6fcc21a0
mov dword [esp + 0x10], ebp
mov dword [esp + 0xc], 1
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov ebx, eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.6fcc21a0
mov edx, dword [ebp + 0xd0]
jmp 0x6fce4a89
mov edi, dword [esp + 0xe8]
mov eax, dword [eax + 0x24]
mov esi, dword [esp + 0xe0]
sub eax, dword [edi]
mov dword [esi + 0x104], eax
mov eax, dword [esp + 0xd8]
mov eax, dword [eax + 0x28]
sub eax, dword [edi + 4]
mov dword [esi + 0x108], eax
mov eax, dword [esp + 0xd8]
mov edx, dword [eax + 0x28]
mov eax, dword [eax + 0x24]
mov dword [edi + 4], edx
mov dword [edi], eax
jmp 0x6fce4532
mov ecx, dword [ebp + 0x10]
jmp 0x6fce43a0
test eax, eax
jne 0x6fce4577
jmp 0x6fce459d
mov ebx, dword [eax + 0x54]
mov eax, dword [eax + 0x58]
mov edi, dword [esp + 0x44]
mov dword [esp + 8], 0
mov esi, eax
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], edi
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.6fcc2430
mov ecx, dword [esp + 0xdc]
mov dword [esp + 8], 1
mov dword [esp + 4], esi
mov dword [esp], ebx
add ecx, 0x4c
mov dword [esp + 0x9c], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0x84], eax
mov dword [esp + 0xc], ecx
call fcn.6fcc2430
mov edx, dword [esp + 0x28]
mov dword [esp + 0x88], eax
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x94], eax
mov eax, edi
shr eax, 0x1f
add eax, edi
mov dword [esp + 0x98], eax
mov eax, ebx
shr eax, 0x1f
add eax, ebx
mov dword [esp + 0x90], eax
mov eax, esi
shr eax, 0x1f
add eax, esi
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0xdc]
sar dword [esp + 0x94], 1
sar dword [esp + 0x98], 1
sar dword [esp + 0x90], 1
mov eax, dword [eax + 0xdc]
sar dword [esp + 0x8c], 1
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0xd8]
xor dword [esp + 0x3c], eax
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0xd0]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0xd4]
mov dword [esp + 0x48], eax
jmp 0x6fce5502
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], ecx
jmp 0x6fce4d77
mov ecx, 5
mov eax, 1
sub ecx, dword [esp + 0x3c]
shl eax, cl
or dword [esp + 0x7c], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.6fca6810
mov dword [esp + 0xc], edi
shl eax, 4
add eax, dword [esp + 0x60]
test ebp, ebp
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
je 0x6fce5c10
call dword [0x70fcbe88]
test esi, esi
je 0x6fce5c20
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call dword [0x70fcbe48]
mov ebp, dword [esp + 0x80]
mov ecx, 0x10
mov edx, 0x8000
add ebp, ebp
imul ebp, eax
mov eax, 0x8000
jmp 0x6fce5bb5
or eax, edx
mov edi, eax
mov esi, eax
imul edi, eax
xor esi, edx
cmp ebp, edi
cmovb eax, esi
shr edx, 1
sub ecx, 1
jne 0x6fce5bb3
add eax, 0x30
shr eax, 6
movzx eax, ax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call dword [0x70fcbe5c]
mov esi, dword [esp + 0x60]
mov dword [esp + 0x60], 0
lea eax, [eax + eax*4]
shr eax, 7
jmp 0x6fce5790
call dword [0x70fcbe90]
jmp 0x6fce572e
call dword [0x70fcbe8c]
jmp 0x6fce5b81
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call dword [0x70fcbe74]
mov esi, dword [esp + 0x60]
mov dword [esp + 0x60], 0
jmp 0x6fce5790
call dword [0x70fcbe90]
jmp 0x6fce4e97
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [0x70fcbe74]
mov esi, dword [esp + 0x64]
mov dword [esp + 0x64], 0
jmp 0x6fce4f9b
call dword [0x70fcbe8c]
jmp 0x6fce4f20
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x98]
mov dword [esp + 0x58], esi
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x8c]
mov eax, edx
mov ebp, dword [esp + 0xd0]
and eax, 3
sar edx, 1
add edx, dword [eax*4 + 0x70751060]
mov eax, ebx
and eax, 3
sar ebx, 1
mov eax, dword [eax*4 + 0x70751060]
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0xdc]
add dword [esp + 0x3c], eax
mov eax, esi
and eax, 3
mov ecx, dword [esp + 0x3c]
sar esi, 1
add esi, dword [eax*4 + 0x70751060]
mov eax, edi
and eax, 3
mov ebx, dword [ebx + 0xc4]
sar edi, 1
add edi, dword [eax*4 + 0x70751060]
mov eax, dword [esp + 0xdc]
sar ecx, 1
mov dword [esp + 0x78], ecx
mov dword [esp + 0x4c], ebx
mov ebx, edx
and edx, 1
sar ebx, 1
mov eax, dword [eax + 0x94]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0xd0]
shr eax, 1
imul ecx, eax
add ecx, ebx
mov ebx, dword [esp + 0xdc]
add ecx, dword [ebx + 0xb0]
mov ebx, dword [esp + 0x3c]
and ebx, 1
lea ebx, [ebx + edx*2]
cmp ebx, 1
mov dword [esp + 0x84], ebx
je 0x6fce65c1
cmp ebx, 2
je 0x6fce659f
test ebx, ebx
je 0x6fce664e
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], ecx
mov dword [esp + 0xc], ebx
mov dword [esp], eax
call dword [0x70fcbeec]
mov eax, dword [esp + 0xdc]
mov ebx, dword [esp + 0xdc]
mov eax, dword [eax + 0x94]
mov edx, dword [ebx + 0xc4]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0xd0]
shr eax, 1
lea ebx, [edx + 0x10]
mov edx, esi
mov dword [esp + 0x3c], ebx
mov ebx, edi
and esi, 1
sar ebx, 1
mov dword [esp + 0x88], ebx
imul ebx, eax
sar edx, 1
mov dword [esp + 0x8c], edx
add ebx, edx
mov edx, dword [esp + 0xdc]
add ebx, dword [edx + 0xf4]
mov edx, edi
and edx, 1
lea esi, [edx + esi*2]
cmp esi, 1
mov dword [esp + 0x90], esi
je 0x6fce661d
cmp esi, 2
je 0x6fce65ec
test esi, esi
je 0x6fce65e3
mov esi, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0xc], esi
mov dword [esp], eax
call dword [0x70fcbeec]
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0xd0]
shr eax, 1
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0xbc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call dword [0x70fcbea0]
mov ebx, dword [esp + 0xdc]
mov eax, dword [esp + 0x38]
mov edx, dword [ebx + 0x19c]
mov edi, dword [ebx + 0x16c]
mov esi, dword [ebx + 0x1a4]
mov dword [esp + 0x74], edx
mov edx, dword [ebx + 0x188]
mov dword [esp + 0x5c], edx
mov edx, ebx
mov ebx, dword [ebx + 0x180]
mov dword [esp + 0x64], ebx
mov ebx, dword [edx + 0x168]
mov dword [esp + 0x70], ebx
mov ebx, dword [edx + 0x15c]
mov edx, dword [edx + 0x158]
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0xdc]
mov edx, dword [edx + 0x154]
mov dword [esp], eax
add edx, 0x100
mov dword [esp + 0x4c], edx
call dword [0x70fcbe40]
mov eax, dword [esp + 0x3c]
test ebx, ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
je 0x6fce6457
call dword [0x70fcbe84]
cmp eax, 2
jg 0x6fce623a
mov eax, dword [esp + 0x38]
cmp word [eax + 0x82], 0
jne 0x6fce623a
cmp word [eax + 0x90], 0
jne 0x6fce623a
cmp word [eax + 0x80], 0
jne 0x6fce623a
test esi, esi
jne 0x6fce690d
mov eax, dword [esp + 0x38]
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x70752440
mov dword [esp], eax
call dword [0x70fcbe74]
imul eax, dword [esp + 0x64]
xor edx, edx
mov ecx, dword [esp + 0x58]
div dword [esp + 0x5c]
add ecx, esi
mov esi, dword [esp + 0xdc]
mov esi, dword [esi + 0x10]
mov dword [esp + 0x3c], esi
add eax, ecx
mov ecx, esi
cmp eax, esi
mov dword [esp + 0x4c], eax
jge 0x6fce43a0
mov eax, dword [esp + 0xdc]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0xdc]
mov edx, dword [eax + 0x94]
mov eax, dword [eax + 0xd0]
mov ebx, dword [esi + 0xc4]
mov esi, dword [esp + 0x78]
shr eax, 1
imul esi, eax
add esi, dword [esp + 0x80]
add esi, dword [edi + 0xb4]
mov edi, dword [esp + 0x84]
cmp edi, 1
je 0x6fce68da
cmp edi, 2
je 0x6fce68c0
test edi, edi
je 0x6fce68b7
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [0x70fcbeec]
mov eax, dword [esp + 0xdc]
mov esi, dword [esp + 0xdc]
mov edx, dword [eax + 0x94]
mov eax, dword [eax + 0xd0]
mov ecx, dword [esi + 0xc4]
shr eax, 1
lea esi, [ecx + 0x10]
mov ecx, dword [esp + 0x88]
mov edi, dword [esp + 0xdc]
imul ecx, eax
add ecx, dword [esp + 0x8c]
add ecx, dword [edi + 0xf8]
mov edi, dword [esp + 0x90]
cmp edi, 1
je 0x6fce688e
cmp edi, 2
je 0x6fce6865
test edi, edi
je 0x6fce685e
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 4], ecx
mov dword [esp], esi
call dword [0x70fcbeec]
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0xd0]
shr eax, 1
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov eax, dword [eax + 0xc0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call dword [0x70fcbea0]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0xdc]
mov edx, dword [esp + 0xdc]
mov eax, dword [esp + 0x38]
mov ebx, dword [esi + 0x1a4]
mov esi, dword [esi + 0x1a0]
mov dword [esp + 0x58], esi
mov esi, dword [edi + 0x188]
mov dword [esp + 0x64], esi
mov esi, dword [edi + 0x16c]
mov edi, dword [edi + 0x184]
mov dword [esp + 0x70], edi
mov edi, dword [esp + 0xdc]
mov edi, dword [edi + 0x168]
mov dword [esp + 0x74], edi
mov edi, dword [esp + 0xdc]
mov edi, dword [edi + 0x15c]
mov dword [esp + 0x5c], edi
mov edi, dword [edx + 0x158]
mov edx, dword [edx + 0x154]
mov dword [esp], eax
add edx, 0x100
mov dword [esp + 0x3c], edx
call dword [0x70fcbe40]
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xc], esi
mov dword [esp + 8], edi
test eax, eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
je 0x6fce6719
call dword [0x70fcbe84]
cmp eax, 2
jg 0x6fce64db
mov eax, dword [esp + 0x38]
cmp word [eax + 0x82], 0
jne 0x6fce64db
cmp word [eax + 0x90], 0
jne 0x6fce64db
cmp word [eax + 0x80], 0
jne 0x6fce64db
test ebx, ebx
jne 0x6fce69d6
mov eax, dword [esp + 0x38]
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x70752440
mov dword [esp], eax
call dword [0x70fcbe74]
imul eax, dword [esp + 0x70]
xor edx, edx
add ebx, dword [esp + 0x4c]
div dword [esp + 0x64]
add eax, ebx
mov ebx, dword [esp + 0xdc]
mov ecx, dword [ebx + 0x10]
cmp eax, ecx
jge 0x6fce43a0
mov esi, dword [esp + 0x28]
mov ecx, eax
mov dword [ebx + 0x10], eax
mov ebx, dword [esp + 0x9c]
mov dword [ebx], esi
mov esi, dword [esp + 0x44]
mov dword [ebx + 4], esi
mov ebx, dword [esp + 0xdc]
mov esi, dword [esp + 0x7c]
mov dword [ebx + 0x84], 1
mov dword [ebx + 0x160], esi
jmp 0x6fce43a0
mov eax, dword [esp + 0x70]
or dword [esp + 0x7c], 2
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.6fca6810
mov dword [esp + 0xc], edi
shl eax, 4
add eax, dword [esp + 0x60]
test ebx, ebx
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
je 0x6fce6462
call dword [0x70fcbe88]
test esi, esi
je 0x6fce6475
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call dword [0x70fcbe48]
mov edi, dword [esp + 0x74]
mov ecx, 0x10
mov edx, 0x8000
add edi, edi
imul edi, eax
mov eax, 0x8000
jmp 0x6fce62b8
or eax, edx
mov esi, eax
mov ebx, eax
imul esi, eax
xor ebx, edx
cmp edi, esi
cmovb eax, ebx
shr edx, 1
sub ecx, 1
jne 0x6fce62b6
add eax, 0x30
shr eax, 6
movzx eax, ax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call dword [0x70fcbe5c]
mov esi, dword [esp + 0x60]
mov dword [esp + 0x60], 0
lea eax, [eax + eax*4]
shr eax, 7
jmp 0x6fce5f81
mov ebx, edx
jmp 0x6fce4de6
mov ecx, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0xc], ecx
mov dword [esp], eax
call dword [0x70fcbef8]
jmp 0x6fce4d5f
mov ecx, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0xc], ecx
mov dword [esp], eax
call dword [0x70fcbec8]
jmp 0x6fce4d5f
mov esi, dword [esp + 0x38]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ebx
mov dword [esp + 0xc], esi
call dword [0x70fcbef8]
mov eax, dword [ebp + 0xd0]
shr eax, 1
jmp 0x6fce4de6
mov esi, dword [esp + 0x38]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ebx
mov dword [esp + 0xc], esi
call dword [0x70fcbec8]
mov eax, dword [ebp + 0xd0]
shr eax, 1
jmp 0x6fce4de6
mov eax, dword [esp + 0xe0]
mov ebx, dword [esp + 0xe0]
mov edx, dword [eax + 4]
mov eax, dword [eax]
mov dword [ebx + 0xc], edx
mov dword [ebx + 8], eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], edx
mov dword [ebx + 0x18], eax
mov eax, dword [ebx + 0x194]
mov dword [ebx + 0x1c], edx
mov edx, dword [ebx + 0x198]
mov dword [ebx + 0x19c], eax
mov dword [ebx + 0x1a0], edx
mov dword [ebx + 0x1a4], eax
mov dword [ebx + 0x1a8], edx
mov dword [ebx + 0x1ac], eax
mov eax, dword [ebx + 0x124]
mov dword [ebx + 0x1b0], edx
mov edx, dword [ebx + 0x128]
mov dword [ebx + 0x12c], eax
mov dword [ebx + 0x130], edx
mov dword [ebx + 0x134], eax
mov dword [ebx + 0x138], edx
mov dword [ebx + 0x13c], eax
mov eax, dword [ebx + 0x1b4]
mov dword [ebx + 0x140], edx
mov edx, dword [ebx + 0x1b8]
mov dword [ebx + 0x1bc], eax
mov dword [ebx + 0x1c0], edx
mov dword [ebx + 0x1c4], eax
mov dword [ebx + 0x1c8], edx
mov dword [ebx + 0x1cc], eax
mov dword [ebx + 0x1d0], edx
jmp 0x6fce4577
call dword [0x70fcbe90]
jmp 0x6fce5f25
call dword [0x70fcbe8c]
nop
lea esi, [esi]
jmp 0x6fce6287
mov eax, dword [esp + 0x4c]
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call dword [0x70fcbe74]
mov esi, dword [esp + 0x60]
mov dword [esp + 0x60], 0
jmp 0x6fce5f81
call dword [0x70fcbe90]
jmp 0x6fce512d
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [0x70fcbe74]
jmp 0x6fce5221
call dword [0x70fcbe8c]
jmp 0x6fce51af
mov eax, dword [esp + 0x74]
or dword [esp + 0x7c], 1
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.6fca6810
mov dword [esp + 0xc], esi
mov dword [esp + 8], edi
shl eax, 4
add eax, dword [esp + 0x60]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x5c]
test eax, eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
je 0x6fce674a
call dword [0x70fcbe88]
test ebx, ebx
je 0x6fce6724
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call dword [0x70fcbe48]
mov edi, dword [esp + 0x58]
mov ecx, 0x10
mov edx, 0x8000
add edi, edi
imul edi, eax
mov eax, 0x8000
jmp 0x6fce6559
or eax, edx
mov esi, eax
mov ebx, eax
imul esi, eax
xor ebx, edx
cmp edi, esi
cmovb eax, ebx
shr edx, 1
sub ecx, 1
jne 0x6fce6557
add eax, 0x30
shr eax, 6
movzx eax, ax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call dword [0x70fcbe5c]
mov ebx, dword [esp + 0x60]
lea eax, [eax + eax*4]
shr eax, 7
jmp 0x6fce61de
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], ecx
mov dword [esp + 0xc], ebx
mov dword [esp], eax
call dword [0x70fcbef8]
jmp 0x6fce5da5
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], ecx
mov dword [esp + 0xc], ebx
mov dword [esp], eax
call dword [0x70fcbec8]
jmp 0x6fce5da5
mov dword [esp + 0x3c], ebx
jmp 0x6fce5e59
mov esi, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0xc], esi
mov dword [esp], eax
call dword [0x70fcbef8]
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0xd0]
shr eax, 1
jmp 0x6fce5e59
mov esi, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0xc], esi
mov dword [esp], eax
call dword [0x70fcbec8]
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0xd0]
shr eax, 1
jmp 0x6fce5e59
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x4c], ecx
jmp 0x6fce5dd2
mov esi, edx
jmp 0x6fce5084
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 4], edx
mov dword [esp], ebx
call dword [0x70fcbec8]
mov eax, dword [ebp + 0xd0]
mov edi, dword [ebp + 0x94]
mov ecx, dword [ebp + 0xc4]
shr eax, 1
jmp 0x6fce502c
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
mov dword [esp + 4], edx
mov dword [esp], esi
call dword [0x70fcbef8]
mov eax, dword [ebp + 0xd0]
shr eax, 1
jmp 0x6fce5084
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
mov dword [esp + 4], edx
mov dword [esp], esi
call dword [0x70fcbec8]
mov eax, dword [ebp + 0xd0]
shr eax, 1
jmp 0x6fce5084
mov ecx, ebx
mov edi, esi
mov ebx, edx
jmp 0x6fce502c
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 4], edx
mov dword [esp], ebx
call dword [0x70fcbef8]
mov eax, dword [ebp + 0xd0]
mov edi, dword [ebp + 0x94]
mov ecx, dword [ebp + 0xc4]
shr eax, 1
jmp 0x6fce502c
mov ebp, dword [esp + 0xd0]
jmp 0x6fce43a0
call dword [0x70fcbe90]
jmp 0x6fce6182
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call dword [0x70fcbe74]
mov ebx, dword [esp + 0x60]
jmp 0x6fce61de
call dword [0x70fcbe8c]
jmp 0x6fce6528
mov eax, dword [esp + 0x28]
mov edi, 0x10
mov dword [esp], eax
call dword [0x70fcbe48]
mov esi, dword [esp + 0x94]
mov edx, 0x8000
add esi, esi
imul esi, eax
mov eax, 0x8000
jmp 0x6fce6782
or eax, edx
mov ebx, eax
mov ecx, eax
imul ebx, eax
xor ecx, edx
cmp esi, ebx
cmovb eax, ecx
shr edx, 1
sub edi, 1
jne 0x6fce6780
add eax, 0x30
shr eax, 6
movzx eax, ax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], 0x707524c0
mov dword [esp], eax
call dword [0x70fcbe5c]
lea eax, [eax + eax*4]
shr eax, 7
jmp 0x6fce4c3b
mov eax, dword [esp + 0x38]
mov esi, 0x10
mov dword [esp], eax
call dword [0x70fcbe48]
mov ebp, dword [esp + 0x80]
mov edx, 0x8000
add ebp, ebp
imul ebp, eax
mov eax, 0x8000
jmp 0x6fce67f2
or eax, edx
mov edi, eax
mov ecx, eax
imul edi, eax
xor ecx, edx
cmp ebp, edi
cmovb eax, ecx
shr edx, 1
sub esi, 1
jne 0x6fce67f0
add eax, 0x30
shr eax, 6
movzx eax, ax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], 0x70752440
mov dword [esp], eax
call dword [0x70fcbe5c]
lea eax, [eax + eax*4]
shr eax, 7
jmp 0x6fce5790
test esi, esi
jne 0x6fce68f4
mov eax, dword [esp + 0x28]
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x707524c0
mov dword [esp], eax
call dword [0x70fcbe74]
jmp 0x6fce4f9b
mov esi, ecx
jmp 0x6fce60ab
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 4], ecx
mov dword [esp], esi
call dword [0x70fcbef8]
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0xd0]
shr eax, 1
jmp 0x6fce60ab
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 4], ecx
mov dword [esp], esi
call dword [0x70fcbec8]
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0xd0]
shr eax, 1
jmp 0x6fce60ab
mov ecx, ebx
mov ebx, esi
jmp 0x6fce6045
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [0x70fcbef8]
jmp 0x6fce6023
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [0x70fcbec8]
jmp 0x6fce6023
mov ecx, dword [esp + 0x74]
mov edx, 0x707524c0
xor esi, esi
mov eax, dword [esp + 0x28]
call fcn.6fce31f0
jmp 0x6fce4f9b
mov eax, dword [esp + 0x38]
mov esi, 0x10
mov ebx, 0x8000
mov dword [esp], eax
call dword [0x70fcbe48]
mov edi, dword [esp + 0x74]
add edi, edi
imul edi, eax
mov eax, 0x8000
jmp 0x6fce6936
or eax, ebx
mov ecx, eax
mov edx, eax
imul ecx, eax
xor edx, ebx
cmp edi, ecx
cmovb eax, edx
shr ebx, 1
sub esi, 1
jne 0x6fce6934
add eax, 0x30
shr eax, 6
movzx eax, ax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], 0x70752440
mov dword [esp], eax
call dword [0x70fcbe5c]
lea eax, [eax + eax*4]
shr eax, 7
jmp 0x6fce5f81
mov ebx, dword [esp + 0x44]
test ebx, ebx
jne 0x6fce6a41
mov eax, dword [esp + 0x28]
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x707524c0
mov dword [esp], eax
call dword [0x70fcbe74]
imul eax, dword [esp + 0x5c]
xor edx, edx
mov ebx, dword [esp + 0x38]
mov ecx, dword [esp + 0x80]
div dword [esp + 0x58]
add ebx, eax
test ecx, ecx
mov eax, ebx
jne 0x6fce5237
mov edi, dword [esp + 0x60]
or edi, dword [esp + 0x4c]
je 0x6fce5284
jmp 0x6fce5237
mov eax, dword [esp + 0x38]
mov ebx, 0x10
mov esi, 0x8000
mov dword [esp], eax
call dword [0x70fcbe48]
mov edi, dword [esp + 0x58]
add edi, edi
imul edi, eax
mov eax, 0x8000
jmp 0x6fce69ff
or eax, esi
mov ecx, eax
mov edx, eax
imul ecx, eax
xor edx, esi
cmp edi, ecx
cmovb eax, edx
shr esi, 1
sub ebx, 1
jne 0x6fce69fd
add eax, 0x30
shr eax, 6
movzx eax, ax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], 0x70752440
mov dword [esp], eax
call dword [0x70fcbe5c]
lea eax, [eax + eax*4]
shr eax, 7
jmp 0x6fce61de
mov ecx, dword [esp + 0x74]
mov edx, 0x707524c0
mov eax, dword [esp + 0x28]
call fcn.6fce31f0
jmp 0x6fce69a1