006fbd40 push ebx
006fbd41 push ebp
006fbd42 mov ebp, dword ptr [esp + 0xc]
006fbd46 test edi, edi
006fbd48 je 0x6fbd8f
006fbd4a mov ebx, dword ptr [edi + 0x14]
006fbd4d cmp dword ptr [ebx], -1
006fbd50 je 0x6fbd8f
006fbd52 test dword ptr [ebx + 8], 0x8000
006fbd59 jne 0x6fbd8f
006fbd5b call 0x499000
006fbd60 test eax, eax
006fbd62 je 0x6fbd68
006fbd64 xor ebx, ebx
006fbd66 jmp 0x6fbd6f
006fbd68 mov ebx, dword ptr [ebx]
006fbd6a cmp ebx, -1
006fbd6d je 0x6fbd8f
006fbd6f movzx eax, byte ptr [ebx + 0x1d82f20]
006fbd76 inc eax
006fbd77 jns 0x6fbd7d
006fbd79 xor eax, eax
006fbd7b jmp 0x6fbd89
006fbd7d cmp eax, 0xff
006fbd82 jl 0x6fbd89
006fbd84 mov eax, 0xff
006fbd89 mov byte ptr [ebx + 0x1d82f20], al
006fbd8f mov ebx, dword ptr [esp + 0x10]
006fbd93 push ebx
006fbd94 push ebp
006fbd95 mov edx, edi
006fbd97 mov ecx, esi
006fbd99 call 0x8c1640
006fbd9e push ebx
006fbd9f push ebp
006fbda0 mov edx, edi
006fbda2 mov ecx, esi
006fbda4 call 0x6f28c0
006fbda9 mov edx, edi
006fbdab mov ecx, esi
006fbdad call 0x8743f0
006fbdb2 lea eax, [ebp - 1]
006fbdb5 cmp eax, 0xe
006fbdb8 ja 0x6fbddd
006fbdba movzx eax, byte ptr [eax + 0x6fbe70]
006fbdc1 jmp dword ptr [eax*4 + 0x6fbe5c]
006fbdc8 mov ebx, 1
006fbdcd jmp 0x6fbddf
006fbdcf mov ebx, 3
006fbdd4 jmp 0x6fbddf
006fbdd6 mov ebx, 2
006fbddb jmp 0x6fbddf
006fbddd xor ebx, ebx
006fbddf mov ecx, dword ptr [esp + 0x10]
006fbde3 push ebp
006fbde4 push ecx
006fbde5 mov edx, edi
006fbde7 mov ecx, esi
006fbde9 call 0x8bf490
006fbdee mov edx, dword ptr [esi + 0xb00]
006fbdf4 mov ecx, dword ptr [edx + 0x30]
006fbdf7 call 0x6d58f0
006fbdfc mov ecx, dword ptr [esi + 0x4c]
006fbdff push ebx
006fbe00 push edi
006fbe01 mov edx, esi
006fbe03 call 0x89dab0
006fbe08 call 0x8f3d20
006fbe0d test eax, eax
006fbe0f je 0x6fbe3d
006fbe11 mov eax, dword ptr [esi + 0x14]
006fbe14 test eax, eax
006fbe16 je 0x6fbe3d
006fbe18 cmp dword ptr [eax], -1
006fbe1b je 0x6fbe3d
006fbe1d xor eax, eax
006fbe1f cmp dword ptr [esi + 0x4c], 0x1d955d0
006fbe26 setne al
006fbe29 mov ecx, eax
006fbe2b shl ecx, 4
006fbe2e add ecx, ebp
006fbe30 add ecx, eax
006fbe32 mov dword ptr [ecx*4 + 0x1d805b0], 1
006fbe3d mov edx, ebp
006fbe3f mov ecx, esi
006fbe41 call 0x9ae1d0
006fbe46 mov edx, dword ptr [esp + 0x10]
006fbe4a mov ecx, dword ptr [esi + 0xb00]
006fbe50 call 0xa36bc0
006fbe55 pop ebp
006fbe56 pop ebx
006fbe57 ret 8
006fbe5a mov edi, edi
006fbe5c fnstsw word ptr [ebp - 0x4230ff91]
006fbe62 outsd dx, dword ptr [esi]
006fbe63 add al, cl
006fbe65 mov ebp, 0xbdd6006f
006fbe6a outsd dx, dword ptr [esi]
006fbe6b add ch, bl
006fbe6d mov ebp, 0x100006f
006fbe72 add al, 4
006fbe74 add al, byte ptr [ebx]
006fbe76 add byte ptr [eax], al
006fbe78 add al, 4
006fbe7a add al, 0
006fbe7c add al, 0
006fbe7e add ah, cl
006fbe80 sub esp, 0x10
006fbe83 cmp dword ptr [0x1b22be8], 0
006fbe8a push ebx
006fbe8b push esi
006fbe8c push edi
006fbe8d mov edi, edx
006fbe8f .byte 0x8b