Function at 0x1006a91a
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x80
mov edi, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x14]
mov esi, dword [ebp + 8]
mov ebx, dword [esi + 0x4000]
mov edx, dword [esi + 0x4008]
mov eax, dword [esi + 0x4010]
mov dword [ebp - 0x2c], edx
add edx, eax
add ecx, ebx
cmp ecx, 0x80000001
jb 0x1006a9d9
add ebx, 0xffff0000
movd xmm0, ebx
pshufd xmm0, xmm0, 0
xor eax, eax
movdqa xmm1, xmmword [0x1007d140]
movdqa xmm2, xmm0
pxor xmm2, xmm1
movdqu xmm3, xmmword [esi + eax*4]
movdqa xmm4, xmm3
pxor xmm4, xmm1
pcmpgtd xmm4, xmm2
psubd xmm3, xmm0
pand xmm3, xmm4
movdqu xmmword [esi + eax*4], xmm3
add eax, 4
cmp eax, 0x1000
jne 0x1006a975
mov dword [esi + 0x4000], 0x10000
mov eax, dword [esi + 0x4010]
cmp eax, 0x10001
jb 0x1006a9c3
mov dword [esi + 0x4010], 0x10000
mov eax, 0x10000
mov ecx, edx
sub ecx, eax
mov dword [ebp - 0x2c], ecx
mov dword [esi + 0x4008], ecx
mov dword [ebp - 0x24], 0x10000
jmp 0x1006a9dc
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x40], ecx
xor ecx, ecx
inc ecx
test edi, edi
cmovle edi, ecx
mov esi, 0x10001
cmp edi, esi
cmovae edi, esi
mov dword [ebp - 0x68], edi
lea esi, [eax - 4]
cmp esi, 0xfffffffd
jb 0x1006b1bc
cmp edx, dword [ebp + 0xc]
mov edi, dword [ebp - 0x2c]
je 0x1006aa25
mov eax, dword [ebp + 8]
mov dword [eax + 0x4010], 0
mov edx, dword [ebp + 0xc]
mov dword [eax + 0x4008], edx
xor eax, eax
mov edi, edx
mov ebx, edx
mov esi, dword [ebp + 0x14]
mov edx, dword [ebp + 0xc]
add esi, edx
cmp esi, edi
mov dword [ebp - 0x70], esi
jbe 0x1006b1c4
mov edx, ebx
cmp esi, ebx
jae 0x1006aa6a
mov esi, edx
sub esi, dword [ebp - 0x70]
mov eax, 0x10000
cmp esi, eax
cmovae esi, eax
xor eax, eax
cmp esi, 4
cmovae eax, esi
mov esi, dword [ebp + 8]
mov dword [esi + 0x4010], eax
mov edi, edx
sub edi, eax
mov dword [esi + 0x4008], edi
mov esi, dword [ebp + 0x18]
mov dword [ebp - 0x4c], esi
cmp edx, dword [ebp + 0xc]
je 0x1006b0ba
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x400c]
mov dword [ebp - 0x5c], edx
test edx, edx
mov esi, dword [ebp - 0x24]
je 0x1006b1cb
mov edi, dword [ebp + 0x14]
cmp edi, 0x1001
jl 0x1006b2e9
push 0x4014
push dword [ebp - 0x5c]
mov esi, dword [ebp + 8]
push esi
call fcn.100785de
add esp, 0xc
xor edx, edx
cmp edi, 0x7e000000
ja 0x1006d0fe
mov ecx, edi
mov edx, esi
mov esi, dword [esi + 0x4000]
mov edi, dword [edx + 0x4008]
mov eax, dword [ebp + 0xc]
sub eax, esi
mov dword [ebp - 0x2c], eax
mov eax, dword [edx + 0x4010]
lea ebx, [edi + eax]
mov dword [ebp - 0x64], ebx
add eax, ecx
mov dword [edx + 0x4010], eax
lea eax, [esi + ecx]
mov dword [edx + 0x4000], eax
mov eax, ebx
sub eax, esi
mov ecx, dword [ebp + 0x10]
add dword [ebp - 0x4c], ecx
mov dword [edx + 0x4004], 2
mov ecx, dword [ebp + 0xc]
imul ebx, dword [ecx], 0x9e3779b1
shr ebx, 0x14
mov ecx, dword [ebp - 0x68]
shl ecx, 6
or ecx, 1
test edi, edi
cmove eax, edi
mov dword [ebp - 0x30], eax
mov dword [edx + ebx*4], esi
mov dword [ebp - 0x38], edi
mov eax, dword [ebp - 0x64]
cmove eax, edi
mov dword [ebp - 0x64], eax
mov edx, dword [ebp - 0x70]
lea eax, [edx - 5]
mov dword [ebp - 0x34], eax
mov edi, dword [ebp + 0xc]
lea eax, [edi + 1]
mov dword [ebp - 0x10], eax
lea eax, [edi + 2]
mov dword [ebp - 0x14], esi
lea esi, [esi + 1]
mov dword [ebp - 0x60], esi
mov esi, dword [ebp + 0x14]
lea esi, [esi + edi - 0xb]
mov dword [ebp - 0x50], esi
lea edx, [edx - 8]
mov dword [ebp - 0x20], edx
mov ebx, dword [ebp - 0x68]
mov edx, dword [ebp + 0x14]
lea edx, [edx + edi - 5]
mov dword [ebp - 0x84], edx
mov edx, edi
mov edi, dword [ebp - 0x10]
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x28], edx
mov edx, dword [edi]
mov dword [ebp - 0x18], ebx
mov esi, edi
mov edi, dword [ebp - 0x2c]
mov ebx, dword [ebp - 0x60]
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x24], eax
imul edx, edx, 0x9e3779b1
shr edx, 0x14
mov eax, dword [ebp + 8]
mov esi, dword [eax + edx*4]
cmp esi, dword [ebp - 0x14]
cmovb edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, esi
mov esi, dword [ebp + 8]
mov dword [esi + edx*4], ebx
lea edx, [eax + 0xffff]
cmp edx, ebx
jb 0x1006abd9
mov esi, ebx
mov edx, dword [edi + eax]
mov ebx, edi
mov edi, dword [ebp - 0x10]
cmp edx, dword [edi]
je 0x1006ac00
mov esi, dword [ebp - 0x24]
mov ebx, esi
mov edi, dword [ebp - 0x2c]
sub ebx, edi
mov eax, dword [ebp - 0x18]
add eax, esi
lea edx, [ecx + 1]
shr ecx, 6
mov dword [ebp - 0x18], ecx
mov ecx, edx
cmp eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x1c]
jbe 0x1006ab95
jmp 0x1006d032
cmp eax, dword [ebp - 0x14]
mov ecx, dword [ebp + 0xc]
cmovb ecx, dword [ebp - 0x38]
mov dword [ebp - 0x24], ecx
sub esi, eax
mov dword [ebp - 0x60], esi
add ebx, eax
mov dword [ebp - 0x54], ebx
mov ecx, dword [ebp - 0x10]
mov eax, ecx
mov edx, dword [ebp - 0x28]
sub eax, edx
mov dword [ebp - 0x5c], eax
lea edi, [eax - 0xf]
lea esi, [ecx + 0xef]
mov eax, edx
shl al, 4
mov ebx, ecx
shl bl, 4
sub bl, al
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x78], esi
mov ecx, esi
mov dword [ebp - 0x80], edi
mov eax, edi
mov edi, dword [ebp - 0x48]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x54]
lea esi, [eax + edi]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], edi
add eax, edi
mov dword [ebp - 0x18], eax
cmp esi, dword [ebp - 0x24]
mov byte [ebp - 0x7c], bl
jbe 0x1006acad
cmp dword [ebp - 0x18], edx
jbe 0x1006acad
mov bh, bl
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x1c]
mov al, byte [eax + edi - 1]
mov byte [ebp - 0x74], al
lea eax, [edi - 1]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x6c]
dec eax
mov ecx, dword [ebp - 0x44]
dec ecx
add bl, 0xf0
mov edx, dword [ebp - 0x58]
dec edx
mov dword [ebp - 0x5c], edx
mov edx, dword [ebp - 0x54]
mov bh, byte [ebp - 0x74]
cmp bh, byte [edx + edi - 1]
mov edx, dword [ebp - 0x28]
je 0x1006ac4a
mov eax, dword [ebp - 0x3c]
sub eax, edx
mov ecx, dword [ebp - 0x78]
lea edi, [eax + ecx]
add edi, 0xffffff11
mov eax, dword [ebp - 0x58]
mov ebx, edx
mov edx, 0x80808081
mul edx
shr edx, 7
add edx, edi
mov edi, dword [ebp - 0x1c]
lea eax, [edi + edx]
add eax, 9
cmp eax, dword [ebp - 0x4c]
ja 0x1006d1e7
lea eax, [ecx - 0xef]
sub eax, ebx
add eax, edi
mov ecx, dword [ebp - 0x3c]
inc ecx
cmp eax, 0xf
mov edx, ebx
jb 0x1006ad85
mov ebx, dword [ebp - 0x80]
add ebx, edi
mov eax, dword [ebp - 0x3c]
mov byte [eax], 0xf0
cmp ebx, 0xff
jl 0x1006ad7d
mov eax, 0x1fd
mov ebx, dword [ebp - 0x6c]
cmp ebx, eax
cmovge ebx, eax
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
sub eax, ebx
add eax, edi
add eax, 0xef
mov edx, 0x80808081
mul edx
shr edx, 7
mov dword [ebp - 0x58], edx
lea eax, [edx + 1]
push eax
push 0xff
push ecx
call fcn.1007856c
add esp, 0xc
add ebx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x44]
sub eax, ebx
mov ecx, 0x80808081
mul ecx
shr edx, 7
mov eax, edx
shl eax, 8
sub edx, eax
add edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x58]
add ecx, eax
add ecx, 2
lea ebx, [edi + edx]
add ebx, 0xfffffef2
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x78]
mov byte [ecx], bl
inc ecx
jmp 0x1006ad90
mov eax, dword [ebp - 0x3c]
mov bl, byte [ebp - 0x7c]
mov byte [eax], bl
mov eax, dword [ebp - 0x78]
sub eax, edx
add eax, ecx
lea ebx, [edi + eax]
add ebx, 0xffffff11
movq xmm0, qword [edx]
movq qword [ecx], xmm0
add ecx, 8
add edx, 8
cmp ecx, ebx
jb 0x1006ad9d
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x60]
mov word [ebx], di
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp - 0x38]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x18], eax
je 0x1006af30
add esi, 4
lea eax, [edx + 4]
cmp dword [ebp - 0x20], eax
jbe 0x1006d22d
mov edx, dword [eax]
xor ecx, ecx
xor edx, dword [esi]
sete bl
je 0x1006af84
bsf ebx, edx
shr ebx, 3
mov edi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
add ecx, ebx
add ecx, 4
mov dword [ebp - 0x28], ecx
lea eax, [ebx + 0xf0]
mov ecx, 0x80808081
mul ecx
shr edx, 7
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + edx]
add eax, 8
cmp eax, dword [ebp - 0x4c]
ja 0x1006d1e7
mov esi, ecx
lea edx, [ecx + 2]
mov ecx, dword [ebp - 0x18]
mov al, byte [ecx]
cmp ebx, 0xf
jb 0x1006aea8
add al, 0xf
mov byte [ecx], al
lea eax, [ebx - 0xf]
mov dword [edx], 0xffffffff
cmp eax, 0x3fc
jb 0x1006ae8f
lea eax, [ebx - 0x40b]
mov ecx, 0x80808081
mul ecx
mov dword [ebp - 0x1c], ebx
mov ebx, edi
mov edi, edx
lea eax, [esi + 6]
shr edi, 9
lea ecx, [edi*4 + 4]
push ecx
push 0xff
push eax
call fcn.1007856c
add esp, 0xc
lea edx, [esi + edi*4]
add edx, 6
imul eax, edi, 0xfffffc04
mov edi, ebx
mov ecx, dword [ebp - 0x1c]
add eax, ecx
add eax, 0xfffffbf5
movzx ecx, ax
imul ecx, ecx, 0x8081
shr ecx, 0x17
add eax, ecx
add edx, ecx
inc edx
mov dword [ebp - 0x3c], edx
mov byte [edx - 1], al
jmp 0x1006aeaf
mov dword [ebp - 0x3c], edx
add al, bl
mov byte [ecx], al
mov edx, dword [ebp - 0x28]
cmp edx, dword [ebp - 0x50]
jae 0x1006d035
lea eax, [edx - 2]
imul ecx, dword [edx - 2], 0x9e3779b1
shr ecx, 0x14
sub eax, edi
mov edx, dword [ebp + 8]
mov dword [edx + ecx*4], eax
mov eax, dword [ebp - 0x28]
imul ecx, dword [eax], 0x9e3779b1
shr ecx, 0x14
mov ebx, dword [ebp - 0x28]
sub ebx, edi
mov eax, dword [edx + ecx*4]
cmp eax, dword [ebp - 0x14]
mov esi, edi
cmovb esi, dword [ebp - 0x30]
mov edi, dword [ebp + 0xc]
mov edx, dword [ebp - 0x38]
cmovb edi, edx
mov dword [ebp - 0x24], edi
mov edx, dword [ebp + 8]
mov dword [edx + ecx*4], ebx
mov edx, dword [ebp - 0x28]
lea ecx, [eax + 0xffff]
cmp ecx, ebx
jb 0x1006b095
add esi, eax
mov ecx, dword [esi]
cmp ecx, dword [edx]
jne 0x1006b095
mov edi, ebx
mov ecx, dword [ebp - 0x3c]
lea ebx, [ecx + 1]
mov byte [ecx], 0
sub edi, eax
mov eax, ecx
jmp 0x1006adb8
mov ecx, dword [ebp - 0x64]
sub ecx, esi
add ecx, edx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
cmova ecx, eax
lea edi, [esi + 4]
lea eax, [edx + 4]
mov dword [ebp - 0x24], ecx
add ecx, 0xfffffffd
cmp ecx, eax
jbe 0x1006d234
mov edx, dword [eax]
xor ebx, ebx
xor edx, dword [edi]
sete byte [ebp - 0x1c]
je 0x1006affc
bsf ebx, edx
shr ebx, 3
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
lea ecx, [ebx + eax]
add ecx, 4
cmp ecx, edx
je 0x1006afc5
mov dword [ebp - 0x28], ecx
mov edi, dword [ebp - 0x2c]
jmp 0x1006ae02
mov cl, bl
lea ebx, [eax + ecx*4]
lea esi, [esi + ecx*4]
mov edx, dword [ebp - 0x28]
cmp ebx, dword [ebp - 0x20]
jae 0x1006cfe1
mov ecx, ebx
sub ecx, edx
add ecx, 0xfffffffc
mov edx, dword [ebx]
xor edx, dword [esi]
jne 0x1006afb8
add ebx, 4
add esi, 4
add ecx, 4
cmp ebx, dword [ebp - 0x20]
jb 0x1006af9f
jmp 0x1006cfe1
bsf ebx, edx
shr ebx, 3
add ebx, ecx
jmp 0x1006adf4
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp + 0xc]
mov edi, eax
cmp dword [ebp - 0x20], edx
jbe 0x1006b049
mov ebx, edx
mov edx, dword [edx]
xor ecx, ecx
xor edx, dword [eax]
mov edi, eax
sete al
je 0x1006b041
bsf edx, edx
shr edx, 3
mov edi, dword [ebp - 0x2c]
mov ebx, dword [ebp - 0x1c]
add ebx, edx
mov eax, dword [ebp - 0x24]
add eax, edx
mov dword [ebp - 0x28], eax
jmp 0x1006ae02
mov dl, byte [ebp - 0x1c]
mov bl, dl
mov dword [ebp - 0x1c], eax
lea eax, [eax + ebx*4]
lea edi, [edi + ebx*4]
mov edx, dword [ebp - 0x28]
cmp eax, ecx
jae 0x1006d283
mov ebx, eax
sub eax, edx
add eax, 0xfffffffc
mov edx, dword [ebx]
xor edx, dword [edi]
jne 0x1006b034
add ebx, 4
add edi, 4
add eax, 4
cmp ebx, ecx
jb 0x1006b01c
jmp 0x1006d285
bsf ebx, edx
shr ebx, 3
add ebx, eax
jmp 0x1006af69
mov cl, al
lea edx, [ebx + ecx*4]
lea edi, [edi + ecx*4]
cmp edx, dword [ebp - 0x20]
jae 0x1006d316
mov ebx, dword [ebp - 0x28]
add ebx, dword [ebp - 0x64]
sub ebx, esi
mov eax, dword [ebp - 0x84]
cmp ebx, eax
cmovae ebx, eax
mov ecx, edx
sub ecx, ebx
mov ebx, dword [ebp - 0x1c]
mov esi, dword [edx]
xor esi, dword [edi]
jne 0x1006b085
add edx, 4
add edi, 4
add ecx, 4
cmp edx, dword [ebp - 0x20]
jb 0x1006b06c
jmp 0x1006d319
bsf edx, esi
shr edx, 3
add edx, ecx
mov edi, dword [ebp - 0x2c]
jmp 0x1006afed
lea edi, [edx + 1]
mov eax, edi
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x60], eax
lea eax, [edx + 2]
cmp eax, dword [ebp - 0x50]
mov ebx, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x88]
jbe 0x1006ab85
jmp 0x1006d035
cmp eax, 0xffff
mov ecx, dword [ebp - 0x24]
ja 0x1006b400
sub ecx, eax
mov dword [ebp - 0x28], ecx
jbe 0x1006b400
xor edx, edx
mov esi, dword [ebp + 0x14]
cmp esi, 0x7e000000
ja 0x1006d113
test esi, esi
je 0x1006b5fc
mov edi, esi
lea ecx, [eax + esi]
mov edx, dword [ebp + 8]
mov dword [edx + 0x4010], ecx
mov esi, dword [ebp - 0x24]
lea ecx, [esi + edi]
mov dword [edx + 0x4000], ecx
mov ecx, dword [ebp + 0x10]
add dword [ebp - 0x4c], ecx
mov dword [edx + 0x4004], 2
cmp edi, 0xd
jae 0x1006bc20
mov dword [ebp - 0x44], ecx
mov esi, dword [ebp - 0x70]
sub esi, dword [ebp - 0x40]
lea eax, [esi + 0xf0]
mov ecx, 0x80808081
mul ecx
mov eax, dword [ebp - 0x44]
add eax, esi
shr edx, 7
add eax, edx
inc eax
cmp eax, dword [ebp - 0x4c]
mov edx, 0
ja 0x1006d113
mov ecx, esi
cmp esi, 0xf
jb 0x1006cfbd
lea eax, [ecx - 0xf]
mov edx, dword [ebp - 0x44]
mov byte [edx], 0xf0
mov edi, ecx
lea ecx, [edx + 1]
cmp eax, 0xff
jb 0x1006d134
lea eax, [edi - 0x10e]
mov ebx, edx
mov edx, 0x80808081
mul edx
mov esi, edx
shr esi, 7
lea eax, [esi + 1]
push eax
push 0xff
push ecx
call fcn.1007856c
add esp, 0xc
mov eax, esi
shl eax, 8
mov edx, esi
sub edx, eax
lea ecx, [esi + ebx]
add ecx, 2
lea ebx, [ebx + esi + 1]
mov esi, edi
lea eax, [edi + edx]
add eax, 0xfffffef2
mov edx, ebx
jmp 0x1006d136
mov edi, dword [ebp - 0x2c]
jmp 0x1006aa25
mov edx, ebx
jmp 0x1006aa6a
cmp eax, 0xffff
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x24], esi
ja 0x1006b4e9
sub esi, eax
mov dword [ebp - 0x30], esi
jbe 0x1006b4e9
xor edx, edx
mov esi, dword [ebp + 0x14]
cmp esi, 0x7e000000
ja 0x1006d0fe
test esi, esi
je 0x1006b5e5
lea ecx, [edi + eax]
mov dword [ebp - 0x64], ecx
mov edx, ecx
mov ecx, edi
mov edi, dword [ebp - 0x24]
sub edx, edi
test ecx, ecx
cmove edx, ecx
mov dword [ebp - 0x58], edx
mov ecx, dword [ebp + 0x10]
add dword [ebp - 0x4c], ecx
add eax, esi
mov edx, dword [ebp + 8]
mov dword [edx + 0x4010], eax
lea eax, [edi + esi]
mov dword [edx + 0x4000], eax
mov dword [edx + 0x4004], 2
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp + 0xc]
cmp esi, 0xd
mov esi, dword [ebp - 0x68]
jae 0x1006c434
xor edx, edx
cmp edi, 0x7e000000
ja 0x1006d0fe
test edi, edi
mov dword [ebp - 0x24], esi
je 0x1006b5e5
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0x4000]
mov ecx, dword [eax + 0x4008]
mov eax, dword [eax + 0x4010]
add eax, ecx
mov dword [ebp - 0x60], eax
sub eax, edx
test ecx, ecx
mov dword [ebp - 0x54], ecx
cmove eax, ecx
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp + 0x10]
add dword [ebp - 0x4c], ebx
mov ecx, dword [ebp + 8]
mov eax, esi
mov esi, ecx
mov dword [ecx + 0x400c], 0
mov dword [ecx + 0x4010], edi
lea ecx, [eax + edi]
mov dword [esi + 0x4000], ecx
mov dword [esi + 0x4004], 2
mov dword [ebp - 0x34], ebx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x30], eax
cmp edi, 0xd
jae 0x1006b614
xor edx, edx
mov esi, dword [ebp + 0x14]
cmp esi, 0x7e000000
ja 0x1006d113
test esi, esi
je 0x1006b5fc
mov edi, esi
lea ecx, [eax + esi]
mov edx, dword [ebp + 8]
mov dword [edx + 0x4010], ecx
mov esi, dword [ebp - 0x24]
lea ecx, [esi + edi]
mov dword [edx + 0x4000], ecx
mov ecx, dword [ebp + 0x10]
add dword [ebp - 0x4c], ecx
mov dword [edx + 0x4004], 2
cmp edi, 0xd
jae 0x1006c02e
mov dword [ebp - 0x48], ecx
xor edx, edx
mov esi, dword [ebp + 0x14]
cmp esi, 0x7e000000
ja 0x1006d0fe
test esi, esi
je 0x1006b5e5
lea ecx, [edi + eax]
mov dword [ebp - 0x64], ecx
mov edx, ecx
mov ecx, edi
mov edi, dword [ebp - 0x24]
sub edx, edi
test ecx, ecx
cmove edx, ecx
mov dword [ebp - 0x30], edx
mov ecx, dword [ebp + 0x10]
add dword [ebp - 0x4c], ecx
add eax, esi
mov edx, dword [ebp + 8]
mov dword [edx + 0x4010], eax
lea eax, [edi + esi]
mov dword [edx + 0x4000], eax
mov dword [edx + 0x4004], 2
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
cmp esi, 0xd
mov esi, dword [ebp - 0x68]
jae 0x1006c9ed
mov esi, dword [ebp - 0x70]
sub esi, dword [ebp - 0x14]
lea eax, [esi + 0xf0]
mov ecx, 0x80808081
mul ecx
mov ebx, dword [ebp - 0x38]
lea eax, [ebx + esi]
shr edx, 7
add eax, edx
inc eax
cmp eax, dword [ebp - 0x4c]
mov edx, 0
ja 0x1006d0fe
mov ecx, esi
cmp dword [ebp + 0x18], 0
jle 0x1006d0fe
mov eax, dword [ebp + 0x10]
mov byte [eax], 0
mov edx, ecx
jmp 0x1006d0fe
cmp dword [ebp + 0x18], 0
jle 0x1006d113
mov eax, dword [ebp + 0x10]
mov byte [eax], 0
xor edx, edx
inc edx
jmp 0x1006d113
mov esi, dword [ebp + 0xc]
mov ebx, esi
mov edi, dword [ebp - 0x24]
sub ebx, edi
mov eax, edi
sub eax, edx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x70]
lea ecx, [eax - 5]
mov eax, dword [ebp - 0x54]
test eax, eax
mov edx, dword [ebp - 0x60]
cmove edx, eax
mov dword [ebp - 0x60], edx
imul eax, dword [esi], 0x9e3779b1
mov edx, dword [ebp + 0x14]
add edx, esi
add edx, 0xfffffff5
mov dword [ebp - 0x50], edx
shr eax, 0x14
mov edx, dword [ebp + 8]
mov dword [edx + eax*4], edi
mov eax, dword [ebp - 0x68]
shl eax, 6
or eax, 1
lea edx, [esi + 1]
mov dword [ebp - 0x18], edx
lea edx, [esi + 2]
inc edi
mov dword [ebp - 0x10], edi
mov edi, eax
mov dword [ebp - 0x78], ecx
lea eax, [ecx - 3]
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x14]
lea eax, [eax + esi - 5]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x30], esi
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x84], edi
mov ecx, esi
neg ecx
mov ebx, dword [ebp + 0xc]
sub ebx, esi
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp + 0xc]
add edi, ebx
add edi, 0xfffffff5
mov dword [ebp - 0x2c], edi
mov edi, ebx
sub edi, eax
mov dword [ebp - 0x6c], edi
imul eax, dword [ebx], 0x9e3779b1
shr eax, 0x14
mov dword [edx + eax*4], esi
mov edi, dword [ebp - 0x68]
shl edi, 6
or edi, 1
inc esi
add ecx, ebx
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x70]
lea edx, [eax - 5]
lea eax, [ebx + 1]
lea ecx, [ebx + 2]
mov dword [ebp - 0x64], edx
add edx, 0xfffffffd
mov dword [ebp - 0x24], edx
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x44], edx
mov ebx, edi
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x7c], edi
mov edi, dword [eax]
mov dword [ebp - 0x18], edx
mov edx, ebx
mov dword [ebp - 0x10], eax
mov eax, ecx
imul ebx, edi, 0x9e3779b1
shr ebx, 0x14
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + ebx*4]
mov dword [ebp - 0x1c], eax
mov edi, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + ebx*4], esi
cmp ecx, dword [ebp - 0x28]
jb 0x1006bcc0
lea ebx, [ecx + 0xffff]
cmp ebx, esi
jb 0x1006bcc0
mov esi, ecx
mov ecx, dword [ebp - 0x20]
mov ebx, dword [ecx + esi]
mov ecx, dword [ebp - 0x10]
cmp ebx, dword [ecx]
je 0x1006bce2
mov eax, dword [ebp - 0x1c]
mov esi, eax
sub esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
add ecx, eax
lea ebx, [edx + 1]
shr edx, 6
mov dword [ebp - 0x18], edx
mov edx, ebx
cmp ecx, dword [ebp - 0x2c]
jbe 0x1006bc83
jmp 0x1006b122
add esi, dword [ebp - 0x38]
mov dword [ebp - 0x14], esi
mov ecx, dword [ebp - 0x10]
mov edx, ecx
mov eax, dword [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x30], edx
lea edi, [edx - 0xf]
lea edx, [ecx + 0xef]
shl al, 4
mov bh, cl
shl bh, 4
sub bh, al
xor ecx, ecx
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x54], edx
mov byte [ebp - 0x58], bh
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x14]
lea esi, [eax + ecx]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], ecx
add eax, ecx
mov dword [ebp - 0x1c], eax
cmp esi, dword [ebp - 0x6c]
jbe 0x1006bd70
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x40]
jbe 0x1006bd70
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x18]
mov bl, byte [eax + ecx - 1]
lea eax, [ecx - 1]
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0x5c]
lea edi, [edx - 1]
mov edx, dword [ebp - 0x54]
dec edx
mov bh, byte [ebp - 0x58]
add bh, 0xf0
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x14]
cmp bl, byte [eax + ecx - 1]
mov ecx, dword [ebp - 0x48]
je 0x1006bd10
mov eax, dword [ebp - 0x44]
mov edi, dword [ebp - 0x40]
sub eax, edi
mov ebx, dword [ebp - 0x74]
lea ecx, [eax + ebx]
add ecx, 0xffffff11
mov eax, dword [ebp - 0x50]
mov edx, 0x80808081
mul edx
shr edx, 7
add edx, ecx
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + edx]
add eax, 9
cmp eax, dword [ebp - 0x4c]
ja 0x1006d226
lea eax, [ebx - 0xef]
sub eax, edi
add eax, ecx
mov edx, dword [ebp - 0x44]
lea ecx, [edx + 1]
cmp eax, 0xf
mov eax, edx
mov edx, ebx
jb 0x1006be50
mov ebx, dword [ebp - 0x3c]
add ebx, dword [ebp - 0x18]
mov byte [eax], 0xf0
cmp ebx, 0xff
jl 0x1006be4b
mov eax, 0x1fd
mov ebx, dword [ebp - 0x5c]
cmp ebx, eax
cmovge ebx, eax
mov eax, dword [ebp - 0x10]
sub eax, edi
mov dword [ebp - 0x10], eax
sub eax, ebx
mov edx, dword [ebp - 0x18]
add eax, edx
add eax, 0xef
mov edx, 0x80808081
mul edx
shr edx, 7
mov dword [ebp - 0x14], edx
lea eax, [edx + 1]
push eax
push 0xff
push ecx
call fcn.1007856c
add esp, 0xc
add ebx, edi
mov eax, dword [ebp - 0x54]
sub eax, ebx
mov ecx, 0x80808081
mul ecx
shr edx, 7
mov eax, edx
shl eax, 8
sub edx, eax
add edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x14]
add ecx, eax
add ecx, 2
mov eax, dword [ebp - 0x18]
lea ebx, [eax + edx]
add ebx, 0xfffffef2
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x44]
mov byte [ecx], bl
inc ecx
jmp 0x1006be55
mov bl, byte [ebp - 0x58]
mov byte [eax], bl
sub edx, edi
add edx, ecx
mov ebx, dword [ebp - 0x18]
add ebx, edx
add ebx, 0xffffff11
movq xmm0, qword [edi]
movq qword [ecx], xmm0
add ecx, 8
add edi, 8
cmp ecx, ebx
jb 0x1006be64
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 0x40]
mov eax, edx
sub eax, esi
mov dword [ebp - 0x10], ebx
mov word [ebx], ax
add esi, 4
lea eax, [edx + 4]
cmp dword [ebp - 0x24], eax
jbe 0x1006d26e
mov edi, dword [eax]
xor edx, edx
xor edi, dword [esi]
sete bl
je 0x1006bfb8
bsf ebx, edi
shr ebx, 3
lea eax, [ebx + 0xf0]
mov edx, 0x80808081
mul edx
shr edx, 7
mov esi, dword [ebp - 0x10]
lea eax, [esi + edx]
add eax, 8
cmp eax, dword [ebp - 0x4c]
ja 0x1006d226
lea edx, [esi + 2]
mov al, byte [ecx]
cmp ebx, 0xf
jb 0x1006bf46
add al, 0xf
mov byte [ecx], al
lea eax, [ebx - 0xf]
mov dword [edx], 0xffffffff
cmp eax, 0x3fc
jb 0x1006bf30
lea eax, [ebx - 0x40b]
mov ecx, 0x80808081
mul ecx
mov edi, edx
mov esi, dword [ebp - 0x10]
lea eax, [esi + 6]
shr edi, 9
lea ecx, [edi*4 + 4]
push ecx
push 0xff
push eax
call fcn.1007856c
add esp, 0xc
lea edx, [esi + edi*4]
add edx, 6
imul eax, edi, 0xfffffc04
add eax, ebx
add eax, 0xfffffbf5
movzx ecx, ax
imul ecx, ecx, 0x8081
shr ecx, 0x17
add eax, ecx
add edx, ecx
inc edx
mov byte [edx - 1], al
jmp 0x1006bf4a
add al, bl
mov byte [ecx], al
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x40]
add eax, ebx
add eax, 4
mov dword [ebp - 0x40], eax
cmp eax, dword [ebp - 0x2c]
jae 0x1006b122
mov edi, dword [ebp - 0x40]
lea eax, [edi - 2]
imul ecx, dword [edi - 2], 0x9e3779b1
shr ecx, 0x14
mov esi, dword [ebp - 0x20]
sub eax, esi
mov edx, dword [ebp + 8]
mov dword [edx + ecx*4], eax
imul ecx, dword [edi], 0x9e3779b1
shr ecx, 0x14
mov eax, edi
sub eax, esi
mov esi, dword [edx + ecx*4]
mov dword [edx + ecx*4], eax
cmp esi, dword [ebp - 0x28]
jb 0x1006bff0
lea ecx, [esi + 0xffff]
cmp ecx, eax
jb 0x1006bff0
add esi, dword [ebp - 0x20]
mov eax, dword [esi]
mov ecx, dword [ebp - 0x40]
cmp eax, dword [ecx]
jne 0x1006bff0
mov ecx, dword [ebp - 0x44]
lea ebx, [ecx + 1]
mov byte [ecx], 0
jmp 0x1006be7e
mov dl, bl
lea ebx, [eax + edx*4]
lea esi, [esi + edx*4]
cmp ebx, dword [ebp - 0x24]
jae 0x1006c012
mov edx, ebx
sub edx, dword [ebp - 0x40]
add edx, 0xfffffffc
mov edi, dword [ebx]
xor edi, dword [esi]
jne 0x1006bfe3
add ebx, 4
add esi, 4
add edx, 4
cmp ebx, dword [ebp - 0x24]
jb 0x1006bfcd
jmp 0x1006c012
bsf ebx, edi
shr ebx, 3
add ebx, edx
jmp 0x1006beaf
mov ecx, dword [ebp - 0x40]
lea eax, [ecx + 1]
mov esi, eax
sub esi, dword [ebp - 0x20]
add ecx, 2
cmp ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x7c]
jbe 0x1006bc7c
jmp 0x1006b122
mov edx, dword [ebp - 0x64]
dec edx
cmp ebx, edx
jb 0x1006d187
cmp ebx, dword [ebp - 0x64]
jb 0x1006d19e
sub ebx, eax
jmp 0x1006beaf
mov ecx, esi
neg ecx
mov ebx, dword [ebp + 0xc]
sub ebx, esi
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp + 0xc]
add edi, ebx
add edi, 0xfffffff5
mov dword [ebp - 0x2c], edi
mov edi, ebx
sub edi, eax
mov dword [ebp - 0x44], edi
imul eax, dword [ebx], 0x9e3779b1
shr eax, 0x14
mov dword [edx + eax*4], esi
mov edi, dword [ebp - 0x68]
mov edx, edi
shl edx, 6
or edx, 1
inc esi
add ecx, ebx
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x70]
lea ecx, [eax - 5]
mov eax, ebx
inc ebx
add eax, 2
mov dword [ebp - 0x7c], ecx
add ecx, 0xfffffffd
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x38], edx
mov edx, dword [ebp + 0xc]
mov eax, edx
mov edi, dword [ebp - 0x24]
sub eax, edi
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x70]
add eax, 0xfffffffb
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov ecx, dword [ebp - 0x64]
cmove ecx, eax
mov dword [ebp - 0x64], ecx
imul eax, dword [edx], 0x9e3779b1
mov ecx, dword [ebp + 0x14]
adc al, 1
rol dword [ebx + 0x4d89f5c1], 1
lodsb al, byte [esi]
mov ebx, dword [ebp + 0xc]
mov edx, ebx
mov edi, dword [ebp - 0x24]
sub edx, edi
mov eax, dword [ebp - 0x70]
add eax, 0xfffffffb
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov ecx, dword [ebp - 0x64]
cmove ecx, eax
mov dword [ebp - 0x64], ecx
imul eax, dword [ebx], 0x9e3779b1
mov ecx, dword [ebp + 0x14]
add ecx, ebx
add ecx, 0xfffffff5
mov dword [ebp - 0x50], ecx
shr eax, 0x14
mov ecx, dword [ebp + 8]
mov dword [ecx + eax*4], edi
lea eax, [ebx + 1]
mov dword [ebp - 0x18], eax
mov ecx, esi
shl ecx, 6
or ecx, 1
lea eax, [ebx + 2]
lea ebx, [edi + 1]
mov edi, edx
mov edx, ecx
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffffd
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp + 0x14]
mov esi, dword [ebp + 0xc]
lea ecx, [ecx + esi - 5]
mov esi, dword [ebp - 0x68]
mov dword [ebp - 0x84], ecx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ecx]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], esi
mov ecx, edx
mov dword [ebp - 0x10], eax
imul edx, dword [ebp - 0x1c], 0x9e3779b1
shr edx, 0x14
mov eax, dword [ebp + 8]
mov esi, dword [eax + edx*4]
cmp esi, dword [ebp - 0x24]
cmovb edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, esi
mov esi, dword [ebp + 8]
mov dword [esi + edx*4], ebx
lea edx, [eax + 0xffff]
cmp edx, ebx
jb 0x1006cac3
mov esi, ebx
mov edx, dword [edi + eax]
mov ebx, edi
mov edi, dword [ebp - 0x18]
cmp edx, dword [edi]
je 0x1006caea
mov esi, dword [ebp - 0x10]
mov ebx, esi
mov edi, dword [ebp - 0x58]
sub ebx, edi
mov eax, dword [ebp - 0x20]
add eax, esi
lea edx, [ecx + 1]
shr ecx, 6
mov dword [ebp - 0x20], ecx
mov ecx, edx
mov dword [ebp - 0x18], esi
cmp eax, dword [ebp - 0x50]
jbe 0x1006ca81
jmp 0x1006b552
cmp eax, dword [ebp - 0x24]
mov ecx, dword [ebp + 0xc]
cmovb ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x10], ecx
sub esi, eax
mov dword [ebp - 0x78], esi
add ebx, eax
mov dword [ebp - 0x54], ebx
mov ecx, dword [ebp - 0x18]
mov eax, ecx
mov edx, dword [ebp - 0x14]
sub eax, edx
mov dword [ebp - 0x5c], eax
lea edi, [eax - 0xf]
lea esi, [ecx + 0xef]
mov eax, edx
shl al, 4
mov ebx, ecx
shl bl, 4
sub bl, al
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x60], esi
mov ecx, esi
mov dword [ebp - 0x80], edi
mov eax, edi
mov edi, dword [ebp - 0x44]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x6c], ecx
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x54]
lea esi, [eax + edi]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], edi
add eax, edi
mov dword [ebp - 0x1c], eax
cmp esi, dword [ebp - 0x10]
mov byte [ebp - 0x7c], bl
jbe 0x1006cb97
cmp dword [ebp - 0x1c], edx
jbe 0x1006cb97
mov bh, bl
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp - 0x20]
mov al, byte [eax + edi - 1]
mov byte [ebp - 0x3c], al
lea eax, [edi - 1]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x74]
dec eax
mov ecx, dword [ebp - 0x6c]
dec ecx
add bl, 0xf0
mov edx, dword [ebp - 0x48]
dec edx
mov dword [ebp - 0x5c], edx
mov edx, dword [ebp - 0x54]
mov bh, byte [ebp - 0x3c]
cmp bh, byte [edx + edi - 1]
mov edx, dword [ebp - 0x14]
je 0x1006cb34
mov eax, dword [ebp - 0x38]
sub eax, edx
mov ecx, dword [ebp - 0x60]
lea edi, [eax + ecx]
add edi, 0xffffff11
mov eax, dword [ebp - 0x48]
mov ebx, edx
mov edx, 0x80808081
mul edx
shr edx, 7
add edx, edi
mov edi, dword [ebp - 0x20]
lea eax, [edi + edx]
add eax, 9
cmp eax, dword [ebp - 0x4c]
ja 0x1006d1e7
lea eax, [ecx - 0xef]
sub eax, ebx
add eax, edi
mov ecx, dword [ebp - 0x38]
inc ecx
cmp eax, 0xf
mov edx, ebx
jb 0x1006cc6f
mov ebx, dword [ebp - 0x80]
add ebx, edi
mov eax, dword [ebp - 0x38]
mov byte [eax], 0xf0
cmp ebx, 0xff
jl 0x1006cc67
mov eax, 0x1fd
mov ebx, dword [ebp - 0x74]
cmp ebx, eax
cmovge ebx, eax
mov eax, dword [ebp - 0x18]
sub eax, edx
mov dword [ebp - 0x18], eax
sub eax, ebx
add eax, edi
add eax, 0xef
mov edx, 0x80808081
mul edx
shr edx, 7
mov dword [ebp - 0x54], edx
lea eax, [edx + 1]
push eax
push 0xff
push ecx
call fcn.1007856c
add esp, 0xc
add ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x6c]
sub eax, ebx
mov ecx, 0x80808081
mul ecx
shr edx, 7
mov eax, edx
shl eax, 8
sub edx, eax
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x54]
add ecx, eax
add ecx, 2
lea ebx, [edi + edx]
add ebx, 0xfffffef2
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x60]
mov byte [ecx], bl
inc ecx
jmp 0x1006cc7a
mov eax, dword [ebp - 0x38]
mov bl, byte [ebp - 0x7c]
mov byte [eax], bl
mov eax, dword [ebp - 0x60]
sub eax, edx
add eax, ecx
lea ebx, [edi + eax]
add ebx, 0xffffff11
movq xmm0, qword [edx]
movq qword [ecx], xmm0
add ecx, 8
add edx, 8
cmp ecx, ebx
jb 0x1006cc87
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x78]
mov dword [ebp - 0x18], ebx
mov word [ebx], di
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x10], eax
mov dword [ebp - 0x14], edx
je 0x1006ce0d
add esi, 4
lea edi, [edx + 4]
cmp dword [ebp - 0x28], edi
jbe 0x1006d2c6
mov edx, dword [edi]
xor ecx, ecx
xor edx, dword [esi]
sete bl
je 0x1006ce95
bsf edx, edx
shr edx, 3
mov edi, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x14]
add ecx, edx
add ecx, 4
mov dword [ebp - 0x14], ecx
lea eax, [edx + 0xf0]
mov ecx, 0x80808081
mov ebx, edx
mul ecx
shr edx, 7
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + edx]
add eax, 8
cmp eax, dword [ebp - 0x4c]
ja 0x1006d1e7
lea edx, [ecx + 2]
mov ecx, dword [ebp - 0x20]
mov al, byte [ecx]
cmp ebx, 0xf
jb 0x1006cd8b
add al, 0xf
mov byte [ecx], al
lea eax, [ebx - 0xf]
mov dword [edx], 0xffffffff
cmp eax, 0x3fc
jb 0x1006cd75
lea eax, [ebx - 0x40b]
mov ecx, 0x80808081
mul ecx
mov edi, edx
mov esi, dword [ebp - 0x18]
lea eax, [esi + 6]
shr edi, 9
lea ecx, [edi*4 + 4]
push ecx
push 0xff
push eax
call fcn.1007856c
add esp, 0xc
lea edx, [esi + edi*4]
add edx, 6
imul eax, edi, 0xfffffc04
mov edi, dword [ebp + 0xc]
add eax, ebx
add eax, 0xfffffbf5
movzx ecx, ax
imul ecx, ecx, 0x8081
shr ecx, 0x17
add eax, ecx
add edx, ecx
inc edx
mov byte [edx - 1], al
jmp 0x1006cd8f
add al, bl
mov byte [ecx], al
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x38], edx
cmp ecx, dword [ebp - 0x50]
jae 0x1006b552
lea eax, [ecx - 2]
imul ecx, dword [ecx - 2], 0x9e3779b1
shr ecx, 0x14
mov esi, dword [ebp - 0x58]
sub eax, esi
mov edx, dword [ebp + 8]
mov dword [edx + ecx*4], eax
mov eax, dword [ebp - 0x14]
imul ecx, dword [eax], 0x9e3779b1
shr ecx, 0x14
mov ebx, dword [ebp - 0x14]
sub ebx, esi
mov eax, dword [edx + ecx*4]
cmp eax, dword [ebp - 0x24]
cmovb esi, dword [ebp - 0x30]
cmovb edi, dword [ebp - 0x2c]
mov dword [ebp - 0x10], edi
mov dword [edx + ecx*4], ebx
mov edx, dword [ebp - 0x14]
lea ecx, [eax + 0xffff]
cmp ecx, ebx
jb 0x1006cf84
add esi, eax
mov ecx, dword [esi]
cmp ecx, dword [edx]
jne 0x1006cf84
mov edi, ebx
mov ecx, dword [ebp - 0x38]
lea ebx, [ecx + 1]
mov byte [ecx], 0
sub edi, eax
mov dword [ebp - 0x20], ecx
jmp 0x1006cca5
mov ecx, dword [ebp - 0x64]
sub ecx, esi
add ecx, edx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
cmova ecx, eax
lea edi, [esi + 4]
lea eax, [edx + 4]
mov dword [ebp - 0x10], ecx
add ecx, 0xfffffffd
cmp ecx, eax
jbe 0x1006d30e
mov edx, dword [eax]
xor ebx, ebx
xor edx, dword [edi]
sete byte [ebp - 0x1c]
je 0x1006cee4
bsf edx, edx
shr edx, 3
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp - 0x14]
lea ecx, [edx + eax]
add ecx, 4
mov eax, dword [ebp - 0x10]
cmp ecx, eax
jne 0x1006cce9
mov dword [ebp - 0x1c], edx
mov edx, eax
mov ebx, edi
cmp dword [ebp - 0x28], eax
jbe 0x1006cf3c
mov edx, dword [eax]
xor ecx, ecx
xor edx, dword [ebx]
sete al
mov edi, ebx
je 0x1006cf2f
bsf edx, edx
shr edx, 3
mov eax, dword [ebp - 0x1c]
add eax, edx
mov ecx, dword [ebp - 0x10]
add ecx, edx
mov edx, eax
jmp 0x1006cce9
mov cl, bl
lea eax, [edi + ecx*4]
lea esi, [esi + ecx*4]
mov edx, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x28]
jae 0x1006d386
mov ecx, eax
sub ecx, edx
add ecx, 0xfffffffc
mov ebx, dword [ebp + 0xc]
mov edx, eax
mov eax, edx
mov edx, dword [edx]
xor edx, dword [esi]
jne 0x1006ced2
add eax, 4
add esi, 4
add ecx, 4
cmp eax, dword [ebp - 0x28]
mov edx, eax
jb 0x1006ceb5
jmp 0x1006d38b
bsf edx, edx
shr edx, 3
add edx, ecx
mov ecx, dword [ebp - 0x14]
mov edi, ebx
jmp 0x1006cce4
mov dl, byte [ebp - 0x1c]
mov bl, dl
mov dword [ebp - 0x1c], eax
lea eax, [eax + ebx*4]
lea edi, [edi + ebx*4]
mov edx, dword [ebp - 0x14]
cmp eax, ecx
jae 0x1006d403
mov ebx, eax
sub ebx, edx
add ebx, 0xfffffffc
mov edx, eax
mov eax, edx
mov edx, dword [edx]
xor edx, dword [edi]
jne 0x1006cf22
add eax, 4
add edi, 4
add ebx, 4
cmp eax, ecx
mov edx, eax
jb 0x1006cf06
jmp 0x1006d405
bsf edx, edx
shr edx, 3
add edx, ebx
jmp 0x1006ce46
mov cl, al
mov eax, dword [ebp - 0x10]
lea edx, [eax + ecx*4]
mov ebx, edi
lea edi, [edi + ecx*4]
cmp edx, dword [ebp - 0x28]
jae 0x1006d23c
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x64]
sub eax, esi
mov ecx, dword [ebp - 0x84]
cmp eax, ecx
cmovae eax, ecx
mov ecx, edx
sub ecx, eax
mov esi, dword [edx]
xor esi, dword [edi]
jne 0x1006cf75
add edx, 4
add edi, 4
add ecx, 4
cmp edx, dword [ebp - 0x28]
jb 0x1006cf5c
jmp 0x1006d23c
bsf edx, esi
shr edx, 3
add edx, ecx
mov edi, ebx
jmp 0x1006ce84
lea ecx, [edx + 1]
mov ebx, ecx
mov edi, dword [ebp - 0x58]
sub ebx, edi
lea eax, [edx + 2]
cmp eax, dword [ebp - 0x50]
mov esi, dword [ebp - 0x68]
mov edx, dword [ebp - 0x88]
jbe 0x1006ca74
jmp 0x1006b552
mov eax, ecx
shl al, 4
mov edi, dword [ebp - 0x44]
mov byte [edi], al
lea eax, [edi + 1]
jmp 0x1006d141
mov ecx, dword [ebp - 0x34]
dec ecx
cmp ebx, ecx
jae 0x1006cff7
movzx ecx, word [esi]
cmp cx, word [ebx]
jne 0x1006cff7
add ebx, 2
add esi, 2
cmp ebx, dword [ebp - 0x34]
jae 0x1006d007
mov cl, byte [esi]
xor edx, edx
cmp cl, byte [ebx]
sete dl
add ebx, edx
mov edi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
sub ebx, eax
jmp 0x1006adfa
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x70]
mov ebx, edx
sub esi, edx
lea eax, [esi + 0xf0]
mov ecx, 0x80808081
mul ecx
mov eax, dword [ebp - 0x3c]
add eax, esi
shr edx, 7
add eax, edx
inc eax
cmp eax, dword [ebp - 0x4c]
mov edx, 0
ja 0x1006d0fe
mov ecx, esi
cmp esi, 0xf
jb 0x1006d0cd
lea eax, [ecx - 0xf]
mov edx, dword [ebp - 0x3c]
mov byte [edx], 0xf0
mov edi, ecx
lea ecx, [edx + 1]
cmp eax, 0xff
jb 0x1006d0dc
lea eax, [edi - 0x10e]
mov dword [ebp - 0x3c], edx
mov edx, 0x80808081
mul edx
mov esi, edx
shr esi, 7
lea eax, [esi + 1]
push eax
push 0xff
push ecx
call fcn.1007856c
add esp, 0xc
mov eax, esi
shl eax, 8
mov edx, esi
sub edx, eax
mov eax, dword [ebp - 0x3c]
lea ecx, [esi + eax]
add ecx, 2
lea eax, [eax + esi + 1]
mov dword [ebp - 0x24], eax
mov esi, edi
lea eax, [edi + edx]
add eax, 0xfffffef2
mov edx, dword [ebp - 0x24]
jmp 0x1006d0de
mov eax, ecx
shl al, 4
mov edi, dword [ebp - 0x3c]
mov esi, edi
mov byte [ecx], al
add edx, 2
mov eax, edx
mov esi, edi
mov byte [ecx], al
add edx, 2
mov eax, edx
mov edi, ecx
mov ecx, esi
push ecx
push dword [ebp - 0x40]
push eax
mov esi, ecx
call fcn.100785de
add esp, 0xc
add edi, esi
sub edi, dword [ebp + 0x10]
inc edi
mov edx, edi
jmp 0x1006d113
movzx edx, word [esi]
cmp dx, word [ebx]
jne 0x1006c01e
add ebx, 2
add esi, 2
jmp 0x1006c01e
mov dl, byte [esi]
mov byte [ebp - 0x18], dl
mov dl, byte [ebp - 0x18]
cmp dl, byte [ebx]
mov edx, 0
sete dl
add ebx, edx
jmp 0x1006c027
xor edx, edx
jmp 0x1006d0fe
mov ebx, eax
jmp 0x1006af8f
mov dword [ebp - 0x1c], eax
jmp 0x1006b00d
mov eax, dword [ebp - 0x34]
dec eax
cmp edx, eax
jae 0x1006d252
movzx eax, word [edi]
cmp ax, word [edx]
jne 0x1006d252
add edx, 2
add edi, 2
cmp edx, dword [ebp - 0x34]
jae 0x1006d262
mov al, byte [edi]
xor ecx, ecx
cmp al, byte [edx]
sete cl
add edx, ecx
mov edi, ebx
mov eax, dword [ebp - 0x10]
sub edx, eax
jmp 0x1006ce84
mov ebx, eax
jmp 0x1006bfc0
mov ebx, eax
mov edx, dword [ebp - 0x24]
lea eax, [edx - 1]
cmp ebx, eax
jae 0x1006d29d
movzx eax, word [edi]
cmp ax, word [ebx]
jne 0x1006d29d
add ebx, 2
add edi, 2
cmp ebx, edx
jae 0x1006d2ac
mov al, byte [edi]
xor ecx, ecx
cmp al, byte [ebx]
sete cl
add ebx, ecx
mov eax, dword [ebp - 0x28]
sub ebx, dword [ebp - 0x1c]
jmp 0x1006af6f
mov eax, edi
jmp 0x1006cea0
mov dword [ebp - 0x1c], eax
jmp 0x1006cef5
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
dec eax
cmp edx, eax
jae 0x1006d334
movzx eax, word [edi]
cmp ax, word [edx]
mov esi, dword [ebp - 0x2c]
jne 0x1006d337
add edx, 2
add edi, 2
jmp 0x1006d337
mov esi, dword [ebp - 0x2c]
cmp edx, dword [ebp - 0x34]
jae 0x1006d347
mov al, byte [edi]
xor ecx, ecx
cmp al, byte [edx]
sete cl
add edx, ecx
mov edi, esi
sub edx, dword [ebp - 0x24]
jmp 0x1006afed
mov ebx, dword [ebp + 0xc]
mov edx, eax
mov ecx, dword [ebp - 0x34]
dec ecx
cmp edx, ecx
jae 0x1006d3a1
movzx ecx, word [esi]
cmp cx, word [edx]
jne 0x1006d3a1
add edx, 2
add esi, 2
cmp edx, dword [ebp - 0x34]
jae 0x1006d3b5
mov cl, byte [esi]
mov eax, edx
xor edx, edx
cmp cl, byte [eax]
sete dl
add eax, edx
mov edx, eax
mov ecx, dword [ebp - 0x14]
sub edx, edi
jmp 0x1006cedd
mov edx, eax
mov eax, dword [ebp - 0x10]
dec eax
cmp edx, eax
jae 0x1006d420
movzx eax, word [edi]
cmp ax, word [edx]
mov ebx, dword [ebp + 0xc]
jne 0x1006d423
add edx, 2
add edi, 2
jmp 0x1006d423
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x10]
cmp edx, eax
jae 0x1006d435
mov al, byte [edi]
xor ecx, ecx
cmp al, byte [edx]
sete cl
add edx, ecx
mov eax, dword [ebp - 0x14]
mov edi, ebx
sub edx, dword [ebp - 0x1c]
jmp 0x1006ce4c