006fbd40 push ebx
006fbd41 push ebp
006fbd42 mov ebp, dword ptr [esp + 0xc]
006fbd46 test edi, edi
006fbd48 je 0x6fbd8f
006fbd4a mov ebx, dword ptr [edi + 0x14]
006fbd4d cmp dword ptr [ebx], -1
006fbd50 je 0x6fbd8f
006fbd52 test dword ptr [ebx + 8], 0x8000
006fbd59 jne 0x6fbd8f
006fbd5b call 0x499000
006fbd60 test eax, eax
006fbd62 je 0x6fbd68
006fbd64 xor ebx, ebx
006fbd66 jmp 0x6fbd6f
006fbd68 mov ebx, dword ptr [ebx]
006fbd6a cmp ebx, -1
006fbd6d je 0x6fbd8f
006fbd6f movzx eax, byte ptr [ebx + 0x1d82f20]
006fbd76 inc eax
006fbd77 jns 0x6fbd7d
006fbd79 xor eax, eax
006fbd7b jmp 0x6fbd89
006fbd7d cmp eax, 0xff
006fbd82 jl 0x6fbd89
006fbd84 mov eax, 0xff
006fbd89 mov byte ptr [ebx + 0x1d82f20], al
006fbd8f mov ebx, dword ptr [esp + 0x10]
006fbd93 push ebx
006fbd94 push ebp
006fbd95 mov edx, edi
006fbd97 mov ecx, esi
006fbd99 call 0x8c1640
006fbd9e push ebx
006fbd9f push ebp
006fbda0 mov edx, edi
006fbda2 mov ecx, esi
006fbda4 call 0x6f28c0
006fbda9 mov edx, edi
006fbdab mov ecx, esi
006fbdad call 0x8743f0
006fbdb2 lea eax, [ebp - 1]
006fbdb5 cmp eax, 0xe
006fbdb8 ja 0x6fbddd
006fbdba movzx eax, byte ptr [eax + 0x6fbe70]
006fbdc1 jmp dword ptr [eax*4 + 0x6fbe5c]
006fbdc8 mov ebx, 1
006fbdcd jmp 0x6fbddf
006fbdcf mov ebx, 3
006fbdd4 jmp 0x6fbddf
006fbdd6 mov ebx, 2
006fbddb jmp 0x6fbddf
006fbddd xor ebx, ebx
006fbddf mov ecx, dword ptr [esp + 0x10]
006fbde3 push ebp
006fbde4 push ecx
006fbde5 mov edx, edi
006fbde7 mov ecx, esi
006fbde9 call 0x8bf490
006fbdee mov edx, dword ptr [esi + 0xb00]
006fbdf4 mov ecx, dword ptr [edx + 0x30]
006fbdf7 call 0x6d58f0
006fbdfc mov ecx, dword ptr [esi + 0x4c]
006fbdff push ebx
006fbe00 push edi
006fbe01 mov edx, esi
006fbe03 call 0x89dab0
006fbe08 call 0x8f3d20
006fbe0d test eax, eax
006fbe0f je 0x6fbe3d
006fbe11 mov eax, dword ptr [esi + 0x14]
006fbe14 test eax, eax
006fbe16 je 0x6fbe3d
006fbe18 cmp dword ptr [eax], -1
006fbe1b je 0x6fbe3d
006fbe1d xor eax, eax
006fbe1f cmp dword ptr [esi + 0x4c], 0x1d955d0
006fbe26 setne al
006fbe29 mov ecx, eax
006fbe2b shl ecx, 4
006fbe2e add ecx, ebp
006fbe30 add ecx, eax
006fbe32 mov dword ptr [ecx*4 + 0x1d805b0], 1
006fbe3d mov edx, ebp
006fbe3f mov ecx, esi
006fbe41 call 0x9ae1d0
006fbe46 mov edx, dword ptr [esp + 0x10]
006fbe4a mov ecx, dword ptr [esi + 0xb00]
006fbe50 call 0xa36bc0
006fbe55 pop ebp
006fbe56 pop ebx
006fbe57 ret 8
006fbe5a mov edi, edi
006fbe5c fnstsw word ptr [ebp - 0x4230ff91]
006fbe62 outsd dx, dword ptr [esi]
006fbe63 add al, cl
006fbe65 mov ebp, 0xbdd6006f
006fbe6a outsd dx, dword ptr [esi]
006fbe6b add ch, bl
006fbe6d mov ebp, 0x100006f
006fbe72 add al, 4
006fbe74 add al, byte ptr [ebx]
006fbe76 add byte ptr [eax], al
006fbe78 add al, 4
006fbe7a add al, 0
006fbe7c add al, 0
006fbe7e add ah, cl
006fbe80 sub esp, 0x10
006fbe83 cmp dword ptr [0x1b22be8], 0
006fbe8a push ebx
006fbe8b push esi
006fbe8c push edi
006fbe8d mov edi, edx
006fbe8f mov ebx, ecx
006fbe91 je 0x6fbecc
006fbe93 lea eax, [esp + 0xc]
006fbe97 push eax
006fbe98 push 0xff4
006fbe9d mov edx, 0x408505d6
006fbea2 mov ecx, 0x1b22bf8
006fbea7 mov dword ptr [esp + 0x14], 0
006fbeaf mov dword ptr [esp + 0x18], 1
006fbeb7 mov dword ptr [esp + 0x1c], 0xf2da44
006fbebf mov dword ptr [esp + 0x20], 0x67aea0
006fbec7 call 0x67b040
006fbecc mov esi, dword ptr [esp + 0x20]
006fbed0 push esi
006fbed1 mov edx, edi
006fbed3 mov ecx, ebx
006fbed5 call 0x89c9d0
006fbeda push esi
006fbedb mov edx, edi
006fbedd mov ecx, ebx
006fbedf call 0x886430
006fbee4 push esi
006fbee5 call 0x6eedc0
006fbeea mov eax, dword ptr [esi + 0x3c]
006fbeed and dword ptr [eax + 0x1684], 0xffffffef
006fbef4 push edi
006fbef5 mov edx, ebx
006fbef7 mov ecx, esi
006fbef9 call 0x8b2cf0
006fbefe pop edi
006fbeff pop esi
006fbf00 pop ebx
006fbf01 add esp, 0x10
006fbf04 ret 4
006fbf07 lahf 
006fbf08 int3 
006fbf09 int3 
006fbf0a int3 
006fbf0b int3 
006fbf0c int3 
006fbf0d int3 
006fbf0e int3 
006fbf0f int3 
006fbf10 push esi
006fbf11 mov esi, ecx
006fbf13 push esi
006fbf14 call 0x6eedc0
006fbf19 mov ecx, esi
006fbf1b pop esi
006fbf1c jmp 0x8c1e70
006fbf21 int3 
006fbf22 int3 
006fbf23 int3 
006fbf24 int3 
006fbf25 int3 
006fbf26 int3 
006fbf27 int3 
006fbf28 int3 
006fbf29 int3 
006fbf2a int3 
006fbf2b int3 
006fbf2c int3 
006fbf2d int3 
006fbf2e int3 
006fbf2f int3 
006fbf30 push esi
006fbf31 push edi
006fbf32 mov esi, edx
006fbf34 mov edi, ecx
006fbf36 call 0x54b630
006fbf3b mov edx, esi
006fbf3d mov ecx, edi
006fbf3f call 0x8f3f90
006fbf44 pop edi
006fbf45 mov ecx, esi
006fbf47 pop esi
006fbf48 jmp 0x6d3960
006fbf4d int3 
006fbf4e int3 
006fbf4f int3 
006fbf50 push esi
006fbf51 mov esi, ecx
006fbf53 call 0x54b630
006fbf58 mov ecx, esi
006fbf5a mov dword ptr [0x1c482fc], 0
006fbf64 call 0x8b7f40
006fbf69 call 0x6f3fb0
006fbf6e xor edx, edx
006fbf70 mov ecx, 0x9e
006fbf75 pop esi
006fbf76 jmp 0x477260
006fbf7b int3 
006fbf7c int3 
006fbf7d int3 
006fbf7e int3 
006fbf7f int3 
006fbf80 push esi
006fbf81 mov esi, ecx
006fbf83 test esi, esi
006fbf85 je 0x6fc033
006fbf8b mov eax, dword ptr [0x1ce716c]
006fbf90 test eax, eax
006fbf92 je 0x6fbfa9
006fbf94 mov ecx, dword ptr [eax]
006fbf96 test ecx, ecx
006fbf98 je 0x6fbfa9
006fbf9a cmp dword ptr [ecx + 0x74], 1
006fbf9e jne 0x6fbfa9