Function at 0x6fbf54
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x204
push 0
push 0
dec ecx
jne 0x6fbf5c
push ebx
push esi
push edi
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x16c], eax
mov ecx, 0x19
lea eax, [ebp - 0xa0]
mov edx, dword [0x4012c8]
call fcn.0040bf84
mov ecx, 0x19
lea eax, [ebp - 0x104]
mov edx, dword [0x4012c8]
call fcn.0040bf84
mov ecx, 0x19
lea eax, [ebp - 0x168]
mov edx, dword [0x4012c8]
call fcn.0040bf84
xor eax, eax
push ebp
push 0x6fd31a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x16c]
cmp dword [eax + 0x788], 1
je 0x6fd2ae
mov eax, dword [ebp - 0x16c]
mov edx, dword [eax + 0x764]
lea eax, [ebp - 0xf68]
mov ecx, 0x6fd334
call fcn.0040ba84
mov eax, dword [ebp - 0xf68]
mov dl, 1
call fcn.00427aa0
test al, al
jne 0x6fc009
push 0
call sub.KERNEL32.DLL_ExitProcess
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x484]
mov edx, dword [eax]
call dword [edx + 0x140]
cmp al, 1
jne 0x6fc044
mov eax, dword [ebp - 0x16c]
cmp dword [eax + 0x888], 1
je 0x6fd2ae
mov eax, dword [ebp - 0x16c]
mov dword [eax + 0x888], 1
mov eax, dword [ebp - 0x16c]
inc dword [eax + 0x71c]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x484]
mov edx, dword [eax]
call dword [edx + 0x140]
test al, al
jne 0x6fcc5f
jmp 0x6fc078
mov eax, 0x12c
call fcn.006b8308
lea edx, [ebp - 0xf6c]
mov eax, 0x6fd368
call fcn.00430e78
lea eax, [ebp - 0xf6c]
mov edx, 0x6fd380
call fcn.0040ba2c
mov eax, dword [ebp - 0xf6c]
call fcn.006d29cc
test al, al
jne 0x6fc06e
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x424]
mov edx, dword [eax]
call dword [edx + 0x140]
test al, al
jne 0x6fc14a
jmp 0x6fc0cf
mov eax, 0x12c
call fcn.006b8308
lea edx, [ebp - 0xf70]
mov eax, 0x6fd368
call fcn.00430e78
lea eax, [ebp - 0xf70]
mov edx, 0x6fd3b0
call fcn.0040ba2c
mov eax, dword [ebp - 0xf70]
call fcn.006d29cc
test al, al
jne 0x6fc0c5
push 0x6fd3e0
mov eax, dword [ebp - 0x16c]
push dword [eax + 0x764]
push 0x6fd408
lea edx, [ebp - 0xf78]
mov eax, 0x6fd368
call fcn.00430e78
push dword [ebp - 0xf78]
push 0x6fd460
lea eax, [ebp - 0xf74]
mov edx, 5
call fcn.0040bb0c
mov eax, dword [ebp - 0xf74]
call fcn.006bad48
push 0
push 0x6fd494
mov eax, dword [ebp - 0x16c]
push dword [eax + 0x764]
push 0x6fd4d0
lea edx, [ebp - 0xf80]
mov eax, 0x6fd368
call fcn.00430e78
push dword [ebp - 0xf80]
push 0x6fd53c
lea eax, [ebp - 0xf7c]
mov edx, 5
call fcn.0040bb0c
mov edx, dword [ebp - 0xf7c]
xor ecx, ecx
mov eax, 0x6fd570
call fcn.006bae50
jmp 0x6fc1ab
mov eax, 0x12c
call fcn.006b8308
lea edx, [ebp - 0xf84]
mov eax, 0x6fd368
call fcn.00430e78
lea eax, [ebp - 0xf84]
mov edx, 0x6fd380
call fcn.0040ba2c
mov eax, dword [ebp - 0xf84]
call fcn.006d29cc
test al, al
jne 0x6fc1a1
lea edx, [ebp - 0xf88]
mov eax, 0x6fd368
call fcn.00430e78
lea eax, [ebp - 0xf88]
mov edx, 0x6fd380
call fcn.0040ba2c
mov eax, dword [ebp - 0xf88]
mov dl, 1
call fcn.00427aa0
test al, al
je 0x6fc48f
lea edx, [ebp - 0xf90]
mov eax, 0x6fd368
call fcn.00430e78
lea eax, [ebp - 0xf90]
mov edx, 0x6fd380
call fcn.0040ba2c
mov edx, dword [ebp - 0xf90]
lea eax, [ebp - 0xf8c]
call fcn.0040b924
mov eax, dword [ebp - 0xf8c]
call fcn.006d3858
cmp edx, 0
jne 0x6fc253
cmp eax, 0
je 0x6fc48f
call fcn.006d2e58
lea edx, [ebp - 0xf94]
mov eax, 0x6fd368
call fcn.00430e78
lea eax, [ebp - 0xf94]
mov edx, 0x6fd380
call fcn.0040ba2c
mov ecx, dword [ebp - 0xf94]
mov dl, 1
mov eax, dword [0x51fd28]
call fcn.00520438
mov dword [ebp - 0x1c0], eax
push 0
lea eax, [ebp - 0xf98]
push eax
mov ecx, 0x6fd58c
mov edx, 0x6fd5b8
mov eax, dword [ebp - 0x1c0]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0xf98], 0
je 0x6fc2f1
push 0
lea eax, [ebp - 0xf9c]
push eax
mov ecx, 0x6fd58c
mov edx, 0x6fd5b8
mov eax, dword [ebp - 0x1c0]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0xf9c]
mov edx, 0x6fd5d4
call fcn.0040bbbc
jne 0x6fc4fa
push 0
lea eax, [ebp - 0xfa0]
push eax
mov ecx, 0x6fd5e4
mov edx, 0x6fd5b8
mov eax, dword [ebp - 0x1c0]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0xfa0], 0
jne 0x6fc4fa
lea edx, [ebp - 0xfa4]
mov eax, 0x6fd368
call fcn.00430e78
lea eax, [ebp - 0xfa4]
mov edx, 0x6fd610
call fcn.0040ba2c
mov edx, dword [ebp - 0xfa4]
xor ecx, ecx
lea eax, [ebp - 0xc34]
call fcn.00407e24
call fcn.00407088
lea eax, [ebp - 0xc34]
call fcn.00407a68
call fcn.00407088
xor esi, esi
lea ecx, [ebp - 0xfa8]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x894]
mov edx, esi
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfa8]
lea eax, [ebp - 0xc34]
call fcn.00408694
call fcn.004088a0
call fcn.00407088
inc esi
cmp esi, 0x58
jne 0x6fc366
lea eax, [ebp - 0xc34]
call fcn.00407fc4
call fcn.00407088
lea edx, [ebp - 0xfac]
mov eax, 0x6fd368
call fcn.00430e78
lea eax, [ebp - 0xfac]
mov edx, 0x6fd610
call fcn.0040ba2c
mov ecx, dword [ebp - 0xfac]
mov dl, 1
mov eax, dword [0x51fd28]
call fcn.00520438
mov dword [ebp - 0x1c0], eax
push 0
lea eax, [ebp - 0xfb0]
push eax
mov ecx, 0x6fd58c
mov edx, 0x6fd5b8
mov eax, dword [ebp - 0x1c0]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0xfb0], 0
je 0x6fc443
push 0
lea eax, [ebp - 0xfb4]
push eax
mov ecx, 0x6fd58c
mov edx, 0x6fd5b8
mov eax, dword [ebp - 0x1c0]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0xfb4]
mov edx, 0x6fd5d4
call fcn.0040bbbc
jne 0x6fc4fa
push 0
lea eax, [ebp - 0xfb8]
push eax
mov ecx, 0x6fd5e4
mov edx, 0x6fd5b8
mov eax, dword [ebp - 0x1c0]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0xfb8], 0
jne 0x6fc4fa
push 0x10
push 0x6fd638
push 0x6fd660
mov eax, dword [0x728208]
call fcn.00565b00
push eax
call sub.user32.dll_MessageBoxW
jmp 0x6fd2ae
push 0x10
push 0x6fd638
push 0x6fd69c
mov eax, dword [0x728208]
call fcn.00565b00
push eax
call sub.user32.dll_MessageBoxW
push 0
call sub.KERNEL32.DLL_ExitProcess
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x40c]
mov edx, 0x6fd6e4
call fcn.0055c02c
mov edx, dword [0x728208]
mov edx, dword [edx + 0x58]
sar edx, 1
jns 0x6fc4d8
adc edx, 0
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x40c]
mov ecx, dword [eax + 0x58]
sar ecx, 1
jns 0x6fc4ee
adc ecx, 0
sub edx, ecx
call fcn.0055b468
jmp 0x6fd2ae
xor eax, eax
mov dword [ebp - 0x1a8], eax
call sub.KERNEL32.DLL_GetLogicalDrives
mov ebx, eax
lea eax, [ebp - 4]
mov edx, 0x6fd704
call fcn.0040b104
lea eax, [ebp - 0x20]
call fcn.0040acdc
xor esi, esi
lea eax, [ebp - 4]
call fcn.0040b268
mov edx, esi
add dx, 0x41
mov word [eax], dx
mov ecx, esi
mov eax, 1
shl eax, cl
test eax, ebx
jbe 0x6fc6a9
mov eax, dword [ebp - 4]
cmp word [eax], 0x41
je 0x6fc6a9
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x424]
mov edx, dword [eax]
call dword [edx + 0x140]
cmp al, 1
jne 0x6fc5c4
mov eax, dword [ebp - 4]
call fcn.0040b81c
push eax
call sub.KERNEL32.DLL_GetDriveTypeW
cmp eax, 3
je 0x6fc5a4
mov eax, dword [ebp - 4]
call fcn.0040b81c
push eax
call sub.KERNEL32.DLL_GetDriveTypeW
cmp eax, 2
jne 0x6fc6a9
mov eax, dword [ebp - 4]
movzx eax, word [eax]
call fcn.006ba128
cmp al, 1
jne 0x6fc6a9
mov eax, dword [ebp - 0x1a8]
lea eax, [ebp + eax*4 - 0xa0]
mov edx, dword [ebp - 4]
call fcn.0040b104
inc dword [ebp - 0x1a8]
jmp 0x6fc6a9
mov eax, dword [ebp - 4]
call fcn.0040b81c
push eax
call sub.KERNEL32.DLL_GetDriveTypeW
cmp eax, 2
je 0x6fc64a
mov eax, dword [ebp - 4]
call fcn.006d2c90
cmp al, 1
je 0x6fc64a
mov eax, dword [ebp - 4]
movzx eax, word [eax]
call fcn.006b809c
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xfc0]
call fcn.00426f44
mov ecx, dword [ebp - 0xfc0]
lea eax, [ebp - 0xfbc]
mov edx, 0x6fd718
call fcn.0040ba84
mov eax, dword [ebp - 0xfbc]
mov ecx, 1
mov edx, dword [ebp - 0x20]
call fcn.0040bd50
test eax, eax
jg 0x6fc64a
lea edx, [ebp - 0xfc4]
mov eax, dword [ebp - 4]
call fcn.006d2fe8
mov eax, dword [ebp - 0xfc4]
mov edx, 0x6fd728
call fcn.0040bbbc
jne 0x6fc6a9
mov eax, dword [ebp - 4]
movzx eax, word [eax]
call fcn.006ba128
cmp al, 1
jne 0x6fc6a9
push dword [ebp - 0x20]
push 0x6fd718
mov eax, dword [ebp - 4]
movzx eax, word [eax]
call fcn.006b809c
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xfc8]
call fcn.00426f44
push dword [ebp - 0xfc8]
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.0040bb0c
mov eax, dword [ebp - 0x1a8]
lea eax, [ebp + eax*4 - 0xa0]
mov edx, dword [ebp - 4]
call fcn.0040b104
inc dword [ebp - 0x1a8]
inc esi
cmp esi, 0x1a
jne 0x6fc520
xor esi, esi
lea ebx, [ebp - 0xa0]
cmp dword [ebx], 0
je 0x6fc748
lea eax, [ebp - 8]
mov edx, dword [ebx]
call fcn.0040b104
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
movzx edx, word [edx]
call fcn.0040b840
mov eax, dword [ebp - 8]
movzx eax, word [eax]
call fcn.006b809c
cmp eax, 0x3e8
je 0x6fc73b
mov eax, dword [ebp - 8]
movzx eax, word [eax]
call fcn.006b809c
push dword [ebp + eax*4 - 0x104]
push 0x6fd758
lea eax, [ebp - 0xfcc]
mov edx, dword [ebp - 8]
movzx edi, word [edx]
mov edx, edi
call fcn.0040b840
push dword [ebp - 0xfcc]
push 0x6fd768
mov eax, edi
call fcn.006b809c
lea eax, [ebp + eax*4 - 0x104]
mov edx, 4
call fcn.0040bb0c
inc esi
add ebx, 4
cmp esi, 0x19
jne 0x6fc6bb
xor eax, eax
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
mov edx, dword [eax]
call dword [edx + 0x48]
xor eax, eax
mov dword [ebp - 0x1a8], eax
lea ebx, [ebp - 0x104]
lea esi, [ebp - 0x168]
cmp dword [ebx], 0
je 0x6fcc36
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x1a8]
mov dword [eax + edx*4 + 0x578], ecx
push 0
lea eax, [ebp - 0xfd0]
push eax
push 0x6fd778
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [eax + edx*4 + 0x578]
lea edx, [ebp - 0xfd8]
call fcn.00426f1c
push dword [ebp - 0xfd8]
push 0x6fd798
lea eax, [ebp - 0xfd4]
mov edx, 3
call fcn.0040bb0c
mov ecx, dword [ebp - 0xfd4]
mov edx, 0x6fd5b8
mov eax, dword [ebp - 0x1c0]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, dword [ebp - 0xfd0]
mov eax, esi
call fcn.0040b0bc
cmp dword [esi], 0
jne 0x6fc818
mov eax, esi
mov edx, 0x6fd7b0
call fcn.0040b0bc
push 0
lea eax, [ebp - 0xfdc]
push eax
push 0x6fd778
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [eax + edx*4 + 0x578]
lea edx, [ebp - 0xfe4]
call fcn.00426f1c
push dword [ebp - 0xfe4]
push 0x6fd7cc
lea eax, [ebp - 0xfe0]
mov edx, 3
call fcn.0040bb0c
mov ecx, dword [ebp - 0xfe0]
mov edx, 0x6fd5b8
mov eax, dword [ebp - 0x1c0]
mov edi, dword [eax]
call dword [edi + 8]
cmp dword [ebp - 0xfdc], 0
je 0x6fcc36
push 0
lea eax, [ebp - 0xfe8]
push eax
push 0x6fd778
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [eax + edx*4 + 0x578]
lea edx, [ebp - 0xff0]
call fcn.00426f1c
push dword [ebp - 0xff0]
push 0x6fd7cc
lea eax, [ebp - 0xfec]
mov edx, 3
call fcn.0040bb0c
mov ecx, dword [ebp - 0xfec]
mov edx, 0x6fd5b8
mov eax, dword [ebp - 0x1c0]
mov edi, dword [eax]
call dword [edi + 8]
mov eax, dword [ebp - 0xfe8]
mov edx, 0x6fd5d4
call fcn.0040bbbc
je 0x6fcc36
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x1ac]
lea eax, [eax + edx*4 + 0x510]
mov edx, dword [ebx]
call fcn.0040b0bc
push 0
lea eax, [ebp - 0xff4]
push eax
push 0x6fd778
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [eax + edx*4 + 0x578]
lea edx, [ebp - 0xffc]
call fcn.00426f1c
push dword [ebp - 0xffc]
push 0x6fd7cc
lea eax, [ebp - 0xff8]
mov edx, 3
call fcn.0040bb0c
mov ecx, dword [ebp - 0xff8]
mov edx, 0x6fd5b8
mov eax, dword [ebp - 0x1c0]
mov edi, dword [eax]
call dword [edi + 8]
mov eax, dword [ebp - 0xff4]
call fcn.00427328
mov ecx, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1ac]
mov ecx, dword [ecx + edi*4 + 0x578]
mov edi, dword [ebp - 0x16c]
mov dword [edi + ecx*8 + 0x5e0], eax
mov dword [edi + ecx*8 + 0x5e4], edx
mov eax, dword [ebx]
test eax, eax
je 0x6fc9a9
sub eax, 4
mov eax, dword [eax]
cmp eax, 6
jge 0x6fcae7
movzx eax, byte [ebp - 0x1a8]
call fcn.006d3270
cmp edx, 0
jne 0x6fc9c6
cmp eax, 0
je 0x6fca5f
movzx eax, byte [ebp - 0x1a8]
call fcn.006d3270
mov dword [ebp - 0x1004], eax
mov dword [ebp - 0x1000], edx
fild qword [ebp - 0x1004]
fdiv dword [0x6fd7d8]
fstp xword [ebp - 0x1e0]
wait
movzx eax, word [ebp - 0x1d8]
push eax
push dword [ebp - 0x1dc]
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x28]
mov edx, dword [0x71ff24]
mov eax, 0x6fd5d4
call fcn.0042a2d4
push 0
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [eax + edx*4 + 0x578]
push dword [ebp + eax*4 - 0x168]
push 0x6fd7e8
push dword [ebp - 0x28]
push 0x6fd7fc
push dword [ebx]
push 0x6fd814
mov eax, ebx
mov edx, 7
call fcn.0040bb0c
jmp 0x6fcc17
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x1a8]
fild qword [eax + edx*8 + 0x5e0]
fdiv dword [0x6fd7d8]
fstp xword [ebp - 0x1f0]
wait
movzx eax, word [ebp - 0x1e8]
push eax
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
lea ecx, [ebp - 0x2c]
mov edx, dword [0x71ff24]
mov eax, 0x6fd5d4
call fcn.0042a2d4
push 0
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [eax + edx*4 + 0x578]
push dword [ebp + eax*4 - 0x168]
push 0x6fd7e8
push dword [ebp - 0x2c]
push 0x6fd7fc
push dword [ebx]
push 0x6fd814
mov eax, ebx
mov edx, 7
call fcn.0040bb0c
jmp 0x6fcc17
movzx eax, byte [ebp - 0x1a8]
call fcn.006d3270
cmp edx, 0
jne 0x6fcafb
cmp eax, 0
je 0x6fcb94
movzx eax, byte [ebp - 0x1a8]
call fcn.006d3270
mov dword [ebp - 0x1004], eax
mov dword [ebp - 0x1000], edx
fild qword [ebp - 0x1004]
fdiv dword [0x6fd7d8]
fstp xword [ebp - 0x200]
wait
movzx eax, word [ebp - 0x1f8]
push eax
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
lea ecx, [ebp - 0x30]
mov edx, dword [0x71ff24]
mov eax, 0x6fd5d4
call fcn.0042a2d4
push 0
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [eax + edx*4 + 0x578]
push dword [ebp + eax*4 - 0x168]
push 0x6fd7e8
push dword [ebp - 0x30]
push 0x6fd7fc
push dword [ebx]
push 0x6fd814
mov eax, ebx
mov edx, 7
call fcn.0040bb0c
jmp 0x6fcc17
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x1a8]
fild qword [eax + edx*8 + 0x5e0]
fdiv dword [0x6fd7d8]
fstp xword [ebp - 0x210]
wait
movzx eax, word [ebp - 0x208]
push eax
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
lea ecx, [ebp - 0x34]
mov edx, dword [0x71ff24]
mov eax, 0x6fd5d4
call fcn.0042a2d4
push 0
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [eax + edx*4 + 0x578]
push dword [ebp + eax*4 - 0x168]
push 0x6fd7e8
push dword [ebp - 0x34]
push 0x6fd7fc
push dword [ebx]
push 0x6fd814
mov eax, ebx
mov edx, 7
call fcn.0040bb0c
mov edx, dword [ebx]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc dword [ebp - 0x1ac]
inc dword [ebp - 0x1a8]
add esi, 4
add ebx, 4
cmp dword [ebp - 0x1a8], 0x19
jne 0x6fc77b
mov eax, dword [ebp - 0x1c0]
call fcn.00408f08
jmp 0x6fcf46
xor eax, eax
push ebp
push 0x6fccb1
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
call sub.ole32.dll_CoInitialize
xor eax, eax
push ebp
push 0x6fcca0
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x16c]
call fcn.006b85c8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6fcca7
call sub.ole32.dll_CoUninitialize
ret
lea ecx, [ebp - 0x1008]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1008]
mov edx, 0x6fd8c0
call fcn.0040bbbc
je 0x6fcf9f
lea ecx, [ebp - 0x100c]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x100c], 0
jne 0x6fcfee
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
mov ecx, 0x6fd904
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x3fc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x94]
jmp 0x6fd004
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x3fc]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x94]
lea ecx, [ebp - 0x1010]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1010]
mov edx, 0x6fd8c0
call fcn.0040bbbc
je 0x6fd05d
lea ecx, [ebp - 0x1014]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x1014], 0
jne 0x6fd0af
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
mov ecx, 0x6fd904
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x3fc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x94]
jmp 0x6fd17c
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x3fc]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x94]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x6fd17c
inc ebx
xor esi, esi
mov eax, dword [0x728208]
mov eax, dword [eax + 0x898]
cmp eax, 0x3e7
je 0x6fd134
mov edx, dword [ebp - 0x16c]
cmp eax, dword [edx + esi*4 + 0x578]
jne 0x6fd134
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov edx, esi
mov ecx, dword [eax]
call dword [ecx + 0x144]
mov eax, dword [ebp - 0x16c]
xor edx, edx
mov dword [eax + 0x888], edx
jmp 0x6fd2ae
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp esi, eax
jne 0x6fd174
mov eax, dword [ebp - 0x16c]
mov edi, dword [eax + 0x41c]
mov eax, dword [edi + 0x2e4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
mov eax, edi
mov ecx, dword [eax]
call dword [ecx + 0x144]
inc esi
dec ebx
jne 0x6fd0ea
lea ecx, [ebp - 0x1018]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1018]
mov edx, 0x6fd904
call fcn.0040bbbc
je 0x6fd25e
lea ecx, [ebp - 0x101c]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x101c], 0
je 0x6fd25e
lea ecx, [ebp - 0x1020]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x41c]
mov eax, dword [eax + 0x2e4]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1020]
mov edx, 0x6fd8c0
call fcn.0040bbbc
je 0x6fd25e
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x3fc]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x94]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x424]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x94]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x424]
mov edx, 0x6fd950
call fcn.0055c02c
mov eax, dword [0x71fe00]
mov eax, dword [eax]
call fcn.0062bd30
jmp 0x6fd2a0
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x424]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x94]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x424]
mov edx, 0x6fd950
call fcn.0055c02c
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x3fc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x94]
mov eax, dword [ebp - 0x16c]
xor edx, edx
mov dword [eax + 0x888], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6fd321
lea eax, [ebp - 0x1020]
mov edx, 7
call fcn.0040ad3c
lea eax, [ebp - 0xffc]
mov edx, 0x1c
call fcn.0040ad3c
lea eax, [ebp - 0xf8c]
call fcn.0040ad24
lea eax, [ebp - 0xf88]
mov edx, 9
call fcn.0040ad3c
lea eax, [ebp - 0x168]
mov ecx, 0x4b
mov edx, dword [0x4012c8]
call fcn.0040c438
lea eax, [ebp - 0x3c]
mov edx, 0xf
call fcn.0040ad3c
ret