Function at 0x6f13f6
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [0x25e1cf00]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x800]
mov edx, dword [eax + 0x820]
and dword [ebp - 0x98], 0
push ebx
push esi
push edi
mov edi, dword [eax + 0x810]
xor ebx, ebx
mov dword [ebp - 0x7c], eax
xor eax, eax
inc ebx
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], edx
cmp ax, word [ecx + 2]
jae 0x6f1dff
mov eax, ecx
add eax, 4
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
movzx esi, word [eax + 4]
movzx eax, word [eax]
add esi, dword [ebp - 0x9c]
push 0x10
lea ecx, [ebp - 0x94]
push ecx
lea ecx, [ebp - 0xa4]
push ecx
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x34]
push ecx
push eax
push esi
push dword [ebp - 0x7c]
mov dword [ebp - 0x8c], eax
call fcn.006f103a
test eax, eax
je 0x6f1ddc
mov eax, dword [ebp - 0x8c]
movzx eax, word [esi + eax*2 - 2]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0xa4]
and eax, 3
push 0
mov dword [ebp - 0x8c], eax
pop eax
setne al
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.006f00eb
movzx esi, ax
mov eax, dword [ebp - 0x7c]
imul esi, dword [eax + 0x81c]
push ebx
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x94], esi
call fcn.006f01d0
test eax, eax
je 0x6f1733
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x7c]
call fcn.006f0f85
push 2
mov word [edi + esi*4 + 2], ax
pop eax
push 0
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x7c]
inc esi
call fcn.006f0f85
push 2
mov word [edi + esi*4 + 2], ax
pop eax
push 0
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x7c]
inc esi
call fcn.006f0f85
push 5
mov word [edi + esi*4 + 2], ax
pop eax
push 0
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x7c]
inc esi
call fcn.006f0f85
push 6
mov word [edi + esi*4 + 2], ax
pop eax
push 0
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x7c]
inc esi
call fcn.006f0f85
push 5
mov word [edi + esi*4 + 2], ax
pop eax
mov word [edi + esi*4], ax
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
inc esi
push ebx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x7c]
call fcn.006f0f85
push 4
mov word [edi + esi*4 + 2], ax
pop eax
push 0
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x7c]
inc esi
call fcn.006f0f85
mov word [edi + esi*4 + 2], ax
push 0
mov eax, 0x9804
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x7c]
inc esi
call fcn.006f0f85
mov word [edi + esi*4 + 2], ax
push 0
mov eax, 0xa000
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x7c]
lea esi, [edi + esi*4 + 4]
call fcn.006f0f85
mov word [esi + 2], ax
xor eax, eax
mov word [esi], ax
mov dword [ebp - 0x84], 0x600
mov edx, dword [ebp - 0x84]
mov eax, edx
shr eax, 8
movzx ecx, al
mov eax, dword [ebp - 0xa0]
mov cx, word [eax + ecx*2]
shl cx, 8
movzx esi, dl
movzx ecx, cx
or ecx, esi
movzx ecx, word [eax + ecx*2]
add edx, 0xfffffa00
mov eax, ecx
movzx edx, dx
and eax, 0x3ff
mov dword [ebp - 0x90], edx
cmp ax, 9
jb 0x6f1716
movzx esi, ax
add esi, dword [ebp - 0x94]
movzx eax, cx
shr eax, 0xa
cmp eax, 4
je 0x6f16f5
push ebx
cmp eax, 8
push ebx
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp + 0xc]
push eax
je 0x6f16dc
call fcn.006f00eb
movzx eax, ax
mov dword [ebp - 0x80], eax
test ax, ax
jne 0x6f16b7
mov dword [ebp - 0x80], 2
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x7c]
lea esi, [edi + esi*4]
call fcn.006f0f85
mov word [esi + 2], ax
mov eax, dword [ebp - 0x80]
and eax, 0x7ff
jmp 0x6f1713
call fcn.006f00eb
movzx eax, ax
mov dword [ebp - 0x80], eax
test ax, ax
jne 0x6f16b7
mov dword [ebp - 0x80], 5
jmp 0x6f16b7
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x7c]
lea esi, [edi + esi*4]
call fcn.006f0f85
push 5
mov word [esi + 2], ax
pop eax
mov word [esi], ax
inc dword [ebp - 0x84]
mov eax, 0x700
cmp word [ebp - 0x84], ax
jb 0x6f1632
jmp 0x6f1ddc
cmp dword [ebp - 0x8c], 0
je 0x6f1ad2
movzx eax, word [ebp - 0x34]
test byte [eax + 0x25cc2b30], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x34]
je 0x6f177f
push 0
push eax
call fcn.006f0c13
mov ecx, dword [ebp - 0x7c]
push 0
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x34]
push ebx
push ebx
lea eax, [ecx + eax*2]
push eax
push ecx
call fcn.006f0f85
push 2
mov word [edi + esi*4 + 2], ax
pop eax
jmp 0x6f17ab
push 3
push eax
call fcn.006f0c13
mov ecx, dword [ebp - 0x7c]
push 0
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x34]
push ebx
push ebx
lea eax, [ecx + eax*2 + 0x600]
push eax
push ecx
call fcn.006f0f85
mov word [edi + esi*4 + 2], ax
mov eax, ebx
mov word [edi + esi*4], ax
movzx eax, word [ebp - 0x34]
inc esi
test byte [eax + 0x25cc2b30], 4
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c13
movzx eax, word [ebp - 0x34]
mov ecx, dword [ebp - 0x7c]
push 0
lea edx, [ebp - 0x14]
push edx
push ebx
push ebx
lea eax, [ecx + eax*2]
push eax
push ecx
mov dword [ebp - 0x78], eax
call fcn.006f0f85
push 2
mov word [edi + esi*4 + 2], ax
pop eax
push 0
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
inc esi
push dword [ebp - 0x7c]
call fcn.006f0f85
push 5
mov word [edi + esi*4 + 2], ax
pop eax
push 0
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
inc esi
push dword [ebp - 0x7c]
call fcn.006f0f85
mov word [edi + esi*4 + 2], ax
push 6
pop eax
mov word [edi + esi*4], ax
xor eax, eax
inc esi
mov word [edi + esi*4 + 2], ax
mov eax, 0x6003
mov word [edi + esi*4], ax
movzx eax, word [ebp - 0x34]
inc esi
test byte [eax + 0x25cc2b30], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x34]
je 0x6f1870
push 0
push eax
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
jmp 0x6f1890
push 3
push eax
call fcn.006f0c13
mov ecx, dword [ebp - 0x7c]
push 0
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x34]
push ebx
push ebx
lea eax, [ecx + eax*2 + 0x600]
push eax
push ecx
call fcn.006f0f85
mov word [edi + esi*4 + 2], ax
push 4
pop eax
mov word [edi + esi*4], ax
movzx eax, word [ebp - 0x34]
inc esi
test byte [eax + 0x25cc2b30], 4
lea eax, [ebp - 0x14]
je 0x6f18db
push eax
push 0
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
call fcn.006f0f85
push 4
mov word [edi + esi*4 + 2], ax
pop eax
jmp 0x6f18ff
mov ecx, dword [ebp - 0x7c]
push 0
push eax
movzx eax, word [ebp - 0x34]
push ebx
push ebx
lea eax, [ecx + eax*2 + 0x600]
push eax
push ecx
call fcn.006f0f85
mov word [edi + esi*4 + 2], ax
mov eax, 0x9804
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x34]
push eax
inc esi
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
call fcn.006f0f85
mov word [edi + esi*4 + 2], ax
push 0
mov eax, 0xa000
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
lea esi, [edi + esi*4 + 4]
push dword [ebp - 0x7c]
call fcn.006f0f85
mov word [esi + 2], ax
xor eax, eax
mov word [esi], ax
mov dword [ebp - 0x84], 0x600
mov edx, dword [ebp - 0x84]
mov eax, edx
shr eax, 8
movzx ecx, al
mov eax, dword [ebp - 0xa0]
mov cx, word [eax + ecx*2]
shl cx, 8
movzx esi, dl
movzx ecx, cx
or ecx, esi
movzx ecx, word [eax + ecx*2]
add edx, 0xfffffa00
mov eax, ecx
movzx edx, dx
and eax, 0x3ff
mov dword [ebp - 0x90], edx
cmp ax, 9
jb 0x6f1ab5
movzx esi, ax
add esi, dword [ebp - 0x94]
movzx eax, cx
shr eax, 0xa
dec eax
dec eax
je 0x6f1a5d
dec eax
dec eax
je 0x6f1a2f
sub eax, 4
je 0x6f1a1c
push 0
push ebx
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.006f00eb
movzx eax, ax
mov dword [ebp - 0x80], eax
test ax, ax
jne 0x6f19e7
mov dword [ebp - 0x80], ebx
movzx edx, word [ebp - 0x34]
test byte [edx + 0x25cc2b30], 4
jne 0x6f1a5d
lea eax, [ebp - 0x14]
push eax
push 3
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x7c]
push ebx
push ebx
lea ecx, [eax + edx*2 + 0x600]
push ecx
push eax
jmp 0x6f1a9e
xor eax, eax
lea esi, [edi + esi*4]
mov word [esi + 2], ax
mov eax, 0x6003
jmp 0x6f1ab2
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
lea esi, [edi + esi*4]
push dword [ebp - 0x7c]
call fcn.006f0f85
push 5
mov word [esi + 2], ax
pop eax
jmp 0x6f1ab2
push ebx
push ebx
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.006f00eb
movzx eax, ax
mov dword [ebp - 0x80], eax
test ax, ax
jne 0x6f1a81
mov dword [ebp - 0x80], 2
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
lea esi, [edi + esi*4]
call fcn.006f0f85
mov word [esi + 2], ax
mov eax, dword [ebp - 0x80]
and eax, 0x7ff
mov word [esi], ax
inc dword [ebp - 0x84]
mov eax, 0x700
cmp word [ebp - 0x84], ax
jb 0x6f195e
jmp 0x6f1ddc
lea eax, [ebp - 0x14]
push eax
push 2
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c13
movzx eax, word [ebp - 0x34]
mov ecx, dword [ebp - 0x7c]
push 0
lea edx, [ebp - 0x14]
push edx
push ebx
lea eax, [ecx + eax*2 + 0x400]
push ebx
push eax
push ecx
mov dword [ebp - 0x8c], eax
call fcn.006f0f85
mov word [edi + esi*4 + 2], ax
mov eax, ebx
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
inc esi
call fcn.006f0c13
movzx eax, word [ebp - 0x34]
mov ecx, dword [ebp - 0x7c]
push 0
lea edx, [ebp - 0x14]
push edx
push ebx
lea eax, [ecx + eax*2 + 0x200]
push ebx
push eax
push ecx
mov dword [ebp - 0x78], eax
call fcn.006f0f85
push 2
mov word [edi + esi*4 + 2], ax
pop eax
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
inc esi
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
call fcn.006f0f85
push 5
mov word [edi + esi*4 + 2], ax
pop eax
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
inc esi
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
call fcn.006f0f85
push 6
mov word [edi + esi*4 + 2], ax
pop eax
mov word [edi + esi*4], ax
xor eax, eax
inc esi
mov word [edi + esi*4 + 2], ax
mov eax, 0x6003
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push 2
lea eax, [ebp - 0x34]
push eax
inc esi
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x8c]
push dword [ebp - 0x7c]
call fcn.006f0f85
push 4
mov word [edi + esi*4 + 2], ax
pop eax
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push 2
lea eax, [ebp - 0x34]
push eax
inc esi
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x8c]
push dword [ebp - 0x7c]
call fcn.006f0f85
mov word [edi + esi*4 + 2], ax
mov eax, 0x9804
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
inc esi
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
call fcn.006f0f85
mov word [edi + esi*4 + 2], ax
mov eax, 0xa000
mov word [edi + esi*4], ax
lea eax, [ebp - 0x14]
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
inc esi
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
lea esi, [edi + esi*4]
push dword [ebp - 0x7c]
call fcn.006f0f85
mov word [esi + 2], ax
xor eax, eax
mov word [esi], ax
mov dword [ebp - 0x84], 0x600
mov edx, dword [ebp - 0x84]
mov eax, edx
shr eax, 8
movzx ecx, al
mov eax, dword [ebp - 0xa0]
mov cx, word [eax + ecx*2]
shl cx, 8
movzx esi, dl
movzx ecx, cx
or ecx, esi
movzx ecx, word [eax + ecx*2]
add edx, 0xfffffa00
mov eax, ecx
movzx edx, dx
and eax, 0x3ff
mov dword [ebp - 0x90], edx
cmp ax, 9
jb 0x6f1dc4
movzx esi, ax
add esi, dword [ebp - 0x94]
movzx eax, cx
shr eax, 0xa
dec eax
dec eax
je 0x6f1d6d
dec eax
dec eax
je 0x6f1d40
sub eax, 4
je 0x6f1d2d
push 0
push ebx
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.006f00eb
movzx eax, ax
mov dword [ebp - 0x80], eax
test ax, ax
jne 0x6f1d0e
mov dword [ebp - 0x80], ebx
lea eax, [ebp - 0x14]
push eax
push 2
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x8c]
jmp 0x6f1daa
xor eax, eax
lea esi, [edi + esi*4]
mov word [esi + 2], ax
mov eax, 0x6003
jmp 0x6f1dc1
lea eax, [ebp - 0x14]
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
lea esi, [edi + esi*4]
push dword [ebp - 0x7c]
call fcn.006f0f85
push 5
mov word [esi + 2], ax
pop eax
jmp 0x6f1dc1
push ebx
push ebx
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.006f00eb
movzx eax, ax
mov dword [ebp - 0x80], eax
test ax, ax
jne 0x6f1d91
mov dword [ebp - 0x80], 2
lea eax, [ebp - 0x14]
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c13
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
lea esi, [edi + esi*4]
call fcn.006f0f85
mov word [esi + 2], ax
mov eax, dword [ebp - 0x80]
and eax, 0x7ff
mov word [esi], ax
inc dword [ebp - 0x84]
mov eax, 0x700
cmp word [ebp - 0x84], ax
jb 0x6f1c85
mov eax, dword [ebp - 0x9c]
movzx eax, word [eax + 2]
inc dword [ebp - 0x98]
add dword [ebp - 0x88], 6
cmp dword [ebp - 0x98], eax
jl 0x6f1453
mov edx, dword [ebp - 0x9c]
and dword [ebp - 0x98], 0
xor eax, eax
cmp ax, word [edx + 2]
jae 0x6f2530
lea ecx, [edx + 4]
mov dword [ebp - 0x90], ecx
jmp 0x6f1e2f
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x9c]
movzx eax, word [ecx + 4]
movzx esi, word [ecx]
push 0x10
lea ecx, [ebp - 0x94]
push ecx
lea ecx, [ebp - 0xa4]
push ecx
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x34]
push ecx
movzx ecx, si
add eax, edx
push ecx
push eax
push dword [ebp - 0x7c]
mov dword [ebp - 0xa8], eax
call fcn.006f103a
test eax, eax
je 0x6f250d
push 2
pop eax
mov dword [ebp - 0x80], eax
cmp ax, si
ja 0x6f250d
test byte [ebp - 0xa4], 3
push 0
pop eax
setne al
mov dword [ebp - 0xa0], eax
movzx eax, word [ebp - 0x80]
push dword [ebp - 0xa0]
mov dword [ebp - 0x78], eax
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.006f00eb
push dword [ebp - 0x78]
movzx esi, ax
mov eax, dword [ebp - 0x7c]
imul esi, dword [eax + 0x81c]
lea eax, [ebp - 0x34]
push eax
call fcn.006f01d0
test eax, eax
je 0x6f1ffa
mov ax, word [ebp - 0x80]
mov ecx, dword [ebp - 0x90]
cmp ax, word [ecx]
lea eax, [ebp - 0x14]
push 0
push eax
lea eax, [ebp - 0x34]
jne 0x6f1f73
push ebx
push dword [ebp - 0x78]
push eax
call fcn.006f0c40
mov eax, dword [ebp - 0x90]
add eax, 2
and dword [ebp - 0x88], 0
mov dword [ebp - 0x8c], eax
lea esi, [edi + esi*4]
push ebx
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x78]
push ebx
push dword [ebp - 0x8c]
push dword [ebp - 0x7c]
call fcn.006f0f85
mov word [esi + 2], ax
mov eax, dword [ebp - 0x88]
mov cx, word [eax + 0x25cc2d2c]
xor cx, word [esi]
mov edx, 0x7ff
and cx, dx
xor word [esi], cx
movzx ecx, word [esi]
mov dx, word [eax + 0x25cc2d2c]
xor dx, cx
mov ecx, 0x7ff
and dx, cx
xor dx, word [eax + 0x25cc2d2c]
add eax, 4
mov word [esi], dx
add esi, 4
mov dword [ebp - 0x88], eax
cmp eax, 0x24
jb 0x6f1f08
jmp 0x6f24f7
push 0
push dword [ebp - 0x78]
push eax
call fcn.006f0c40
and dword [ebp - 0x78], 0
lea esi, [edi + esi*4]
movzx eax, word [esi + 2]
push eax
push dword [ebp - 0x7c]
call fcn.006f0b35
test eax, eax
jne 0x6f1fe8
push eax
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x80]
push eax
push eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x7c]
call fcn.006f0f85
mov word [esi + 2], ax
mov eax, dword [ebp - 0x78]
mov cx, word [eax + 0x25cc2d2c]
xor cx, word [esi]
mov edx, 0x7ff
and cx, dx
xor word [esi], cx
movzx ecx, word [esi]
mov dx, word [eax + 0x25cc2d2c]
xor dx, cx
mov ecx, 0x7ff
and dx, cx
xor dx, word [eax + 0x25cc2d2c]
mov word [esi], dx
add dword [ebp - 0x78], 4
add esi, 4
cmp dword [ebp - 0x78], 0x24
jb 0x6f1f85
jmp 0x6f24f7
mov eax, dword [ebp - 0x90]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x8c], ecx
movzx ecx, cx
lea eax, [edx + edx]
sub ecx, edx
mov edx, dword [ebp - 0xa8]
movzx ecx, word [edx + ecx*2]
mov dword [ebp - 0x88], eax
movzx eax, word [ebp + eax - 0x36]
push ecx
push eax
push dword [ebp - 0x7c]
call fcn.006f0b69
movzx eax, ax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x88]
movzx eax, word [ebp + eax - 0x36]
test byte [eax + 0x25cc2b30], 6
mov dword [ebp - 0x78], eax
je 0x6f2066
mov ax, word [ebp - 0x8c]
cmp word [ebp - 0x80], ax
jne 0x6f2066
mov dword [ebp - 0x94], ebx
push dword [ebp - 0x88]
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0069bb13
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x7c]
mov ax, word [eax + ecx*2 + 0x200]
mov ecx, dword [ebp - 0x88]
mov word [ebp + ecx - 0x76], ax
mov ax, word [ebp - 0x8c]
add esp, 0xc
lea esi, [edi + esi*4]
cmp word [ebp - 0x80], ax
jne 0x6f237a
mov eax, ebx
xor ecx, ecx
cmp ax, word [ebp - 0x94]
jne 0x6f21d6
mov dword [ebp - 0x78], ecx
movzx eax, word [ecx + 0x25cc2d76]
sub eax, 0
je 0x6f2182
dec eax
je 0x6f2156
dec eax
jne 0x6f21bc
push eax
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x80]
push 0
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c40
movzx eax, word [esi + 2]
push eax
push dword [ebp - 0x7c]
call fcn.006f0b35
test eax, eax
jne 0x6f21bc
push eax
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x80]
push eax
push eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x7c]
call fcn.006f0f85
mov cx, word [esi]
mov word [esi + 2], ax
mov eax, dword [ebp - 0x78]
xor cx, word [eax + 0x25cc2d74]
mov edx, 0x7ff
and cx, dx
xor word [esi], cx
movzx ecx, word [esi]
mov dx, word [eax + 0x25cc2d74]
xor dx, cx
mov ecx, 0x7ff
and dx, cx
xor dx, word [eax + 0x25cc2d74]
jmp 0x6f21b9
push 0
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x80]
push ebx
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c40
push 0
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x90]
push ebx
add eax, 2
jmp 0x6f2113
xor eax, eax
mov word [esi + 2], ax
mov ax, word [esi]
xor ax, word [ecx + 0x25cc2d74]
mov edx, 0x7ff
and ax, dx
xor word [esi], ax
movzx eax, word [esi]
mov dx, word [ecx + 0x25cc2d74]
xor dx, ax
mov eax, 0x7ff
and dx, ax
xor dx, word [ecx + 0x25cc2d74]
mov word [esi], dx
mov ecx, dword [ebp - 0x78]
add ecx, 4
add esi, 4
mov dword [ebp - 0x78], ecx
cmp ecx, 0x24
jb 0x6f20bd
jmp 0x6f24f7
mov dword [ebp - 0x84], ecx
movzx eax, word [ecx + 0x25cc2d52]
sub eax, 0
je 0x6f2320
dec eax
je 0x6f22f5
dec eax
jne 0x6f235a
movzx eax, word [ebp - 0x80]
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x14]
push eax
push 3
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c13
cmp dword [ebp - 0x78], 2
mov edx, ebx
jbe 0x6f2252
lea eax, [ebp - 0x32]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x78]
add eax, 0xfffffffe
mov dword [ebp - 0x8c], eax
dec dword [ebp - 0x78]
lea eax, [ebp + edx - 0x14]
push eax
push 2
push dword [ebp - 0x88]
call fcn.006f0c13
add dword [ebp - 0x88], 2
inc edx
dec dword [ebp - 0x8c]
jne 0x6f222d
cmp dword [ebp - 0x78], ebx
jbe 0x6f228c
lea eax, [ebp + edx - 0x14]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x78]
dec eax
lea edx, [ebp + edx*2 - 0x34]
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x88]
push ebx
push edx
call fcn.006f0c13
inc dword [ebp - 0x88]
inc edx
inc edx
dec dword [ebp - 0x8c]
jne 0x6f226f
movzx eax, word [esi + 2]
push eax
push dword [ebp - 0x7c]
call fcn.006f0b35
test eax, eax
jne 0x6f235a
push eax
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x80]
push eax
push eax
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x7c]
call fcn.006f0f85
mov cx, word [esi]
mov word [esi + 2], ax
mov eax, dword [ebp - 0x84]
xor cx, word [eax + 0x25cc2d50]
mov edx, 0x7ff
and cx, dx
xor word [esi], cx
movzx ecx, word [esi]
mov dx, word [eax + 0x25cc2d50]
xor dx, cx
mov ecx, 0x7ff
and dx, cx
xor dx, word [eax + 0x25cc2d50]
jmp 0x6f2357
push ebx
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x80]
push ebx
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c40
push 0
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x90]
push ebx
add eax, 2
jmp 0x6f22af
xor eax, eax
mov word [esi + 2], ax
mov ax, word [esi]
xor ax, word [ecx + 0x25cc2d50]
mov edx, 0x7ff
and ax, dx
xor word [esi], ax
movzx eax, word [esi]
mov dx, word [ecx + 0x25cc2d50]
xor dx, ax
mov eax, 0x7ff
and dx, ax
xor dx, word [ecx + 0x25cc2d50]
mov word [esi], dx
mov ecx, dword [ebp - 0x84]
add ecx, 4
add esi, 4
mov dword [ebp - 0x84], ecx
cmp ecx, 0x24
jb 0x6f21dc
jmp 0x6f24f7
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x84]
movzx ecx, word [eax + 0x25cc2d76]
sub ecx, 0
je 0x6f24a6
dec ecx
je 0x6f246f
dec ecx
jne 0x6f24e0
movzx eax, word [ebp - 0x80]
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x14]
push eax
push 3
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c13
cmp dword [ebp - 0x78], 2
mov edx, ebx
jbe 0x6f23fd
lea eax, [ebp - 0x32]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x78]
add eax, 0xfffffffe
mov dword [ebp - 0x8c], eax
dec dword [ebp - 0x78]
lea eax, [ebp + edx - 0x14]
push eax
push 2
push dword [ebp - 0x88]
call fcn.006f0c13
add dword [ebp - 0x88], 2
inc edx
dec dword [ebp - 0x8c]
jne 0x6f23d8
cmp dword [ebp - 0x78], ebx
jbe 0x6f2437
lea eax, [ebp + edx - 0x14]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x78]
dec eax
lea edx, [ebp + edx*2 - 0x34]
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x88]
push ebx
push edx
call fcn.006f0c13
inc dword [ebp - 0x88]
inc edx
inc edx
dec dword [ebp - 0x8c]
jne 0x6f241a
movzx eax, word [esi + 2]
push eax
push dword [ebp - 0x7c]
call fcn.006f0b35
test eax, eax
jne 0x6f24e0
push eax
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x80]
push eax
push eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x7c]
call fcn.006f0f85
mov word [esi + 2], ax
mov eax, dword [ebp - 0x84]
jmp 0x6f24ac
push 0
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x80]
push 0
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.006f0c40
movzx eax, word [esi + 2]
push eax
push dword [ebp - 0x7c]
call fcn.006f0b35
test eax, eax
jne 0x6f24e0
push eax
lea eax, [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x80]
push eax
push eax
lea eax, [ebp - 0x74]
jmp 0x6f245a
xor ecx, ecx
mov word [esi + 2], cx
mov cx, word [esi]
xor cx, word [eax + 0x25cc2d74]
mov edx, 0x7ff
and cx, dx
xor word [esi], cx
movzx ecx, word [esi]
mov dx, word [eax + 0x25cc2d74]
xor dx, cx
mov ecx, 0x7ff
and dx, cx
xor dx, word [eax + 0x25cc2d74]
mov word [esi], dx
add dword [ebp - 0x84], 4
add esi, 4
cmp dword [ebp - 0x84], 0x24
jb 0x6f2381
inc dword [ebp - 0x80]
mov eax, dword [ebp - 0x90]
mov cx, word [ebp - 0x80]
cmp cx, word [eax]
jbe 0x6f1e8d
mov eax, dword [ebp - 0x9c]
movzx eax, word [eax + 2]
inc dword [ebp - 0x98]
add dword [ebp - 0x90], 6
cmp dword [ebp - 0x98], eax
jl 0x6f1e23
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov eax, ebx
xor ecx, ebp
pop ebx
call fcn.0069bb2a
leave
ret 0xc