Function at 0x666c30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9ec7ac]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xc8]
cmp eax, dword [ecx + 8]
jbe 0x668831
sub esp, 0x148
mov eax, dword [esp + 0x14c]
mov ecx, dword [eax]
cmp ecx, 0x5fffffff
jl 0x666c7c
mov edx, dword [eax + 0xc]
test edx, edx
jne 0x666c70
xor ecx, ecx
jmp 0x66881f
add ecx, edx
sub ecx, dword [eax + 4]
xor edx, edx
jmp 0x6687dd
mov dword [esp], eax
mov ecx, dword [esp + 0x154]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x158]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x15c]
mov dword [esp + 0xc], ebx
call fcn.00658cd0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x158]
mov edx, dword [esp + 0x150]
mov dword [edx], ecx
cmp ecx, 0xa
jl 0x666dd5
mov ebx, dword [esp + 0x14c]
mov ecx, dword [ebx + 0xc]
mov ebp, dword [ebx + 8]
mov esi, dword [ebx + 0x10]
mov dword [esp + 0x4c], eax
nop
cmp ecx, eax
jb 0x6687d4
mov dword [esp + 0x94], esi
mov edi, ecx
sub edi, eax
sub esi, eax
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, eax
cmp edi, 7
jbe 0x6687c8
mov dword [esp + 0x3c], eax
mov dword [esp + 0x90], ecx
mov dword [esp + 0x130], ebp
movzx edi, byte [ebp + esi]
movzx ebx, byte [ebp + esi + 1]
mov dword [esp + 0xe8], ebx
shr ebx, 0x18
mov dword [esp + 0xe4], ebx
mov ebx, dword [esp + 0xe8]
shl ebx, 8
or edi, ebx
movzx ebx, byte [ebp + esi + 2]
mov dword [esp + 0xe8], ebx
shl ebx, 0x10
or edi, ebx
mov ebx, dword [esp + 0xe8]
shr ebx, 0x10
mov ebp, dword [esp + 0xe4]
or ebx, ebp
mov ebp, dword [esp + 0x130]
movzx eax, byte [ebp + esi + 3]
mov dword [esp + 0xe8], eax
shr eax, 8
or eax, ebx
mov ebx, dword [esp + 0xe8]
shl ebx, 0x18
mov dword [esp + 0xe8], ebx
movzx ebx, byte [ebp + esi + 4]
or ebx, eax
movzx eax, byte [ebp + esi + 5]
shl eax, 8
or ebx, eax
movzx eax, byte [ebp + esi + 6]
shl eax, 0x10
or eax, ebx
movzx ebx, byte [ebp + esi + 7]
shl ebx, 0x18
lea esi, [ecx - 8]
mov dword [esp + 0x38], esi
mov esi, dword [edx + 0x64]
mov ebp, dword [edx + 0x68]
mov dword [esp + 0xe4], ebp
mov ebp, dword [esp + 0xe8]
or ebp, edi
or eax, ebx
mov ebx, dword [esp + 0xe4]
mov edi, dword [esp + 0x3c]
jmp 0x666e26
mov dword [edx + 0x54], ecx
mov eax, dword [edx + 0xc]
cmp ecx, eax
ja 0x666e07
mov dword [edx + 8], ecx
mov eax, dword [edx + 4]
mov edx, dword [esp + 0x154]
cmp edx, eax
je 0x666e00
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00468df0
add esp, 0x148
ret
mov edx, eax
call fcn.00468500
mov edi, ebx
mov eax, ecx
mov ecx, dword [esp + 0x90]
mov ebx, esi
mov esi, ebp
mov ebp, edx
mov edx, dword [esp + 0x150]
mov dword [esp + 0x48], esi
mov dword [esp + 0x44], ebx
mov edx, dword [edx + 0x14]
mov dword [esp + 0xe8], edx
jmp 0x667451
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0xd0]
jmp 0x666e51
mov ebx, dword [esp + 0x3c]
lea edi, [ebx + 1]
lea eax, [edi + 4]
mov ebx, edi
sub edi, esi
mov ebp, dword [esp + 0x90]
cmp ebp, eax
jb 0x668179
mov dword [esp + 0xd0], edi
mov dword [esp + 0xcc], ebx
mov edx, dword [esp + 0x94]
sub edx, ebx
lea edi, [edx - 4]
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and eax, edi
lea edi, [esi + 4]
mov ebx, dword [esp + 0x130]
add eax, ebx
mov ebx, dword [esp + 0xcc]
sub ebp, ebx
mov ebx, dword [esp + 0x90]
cmp ebx, edi
jb 0x668170
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x138], eax
mov dword [esp + 0x28], esi
mov dword [esp + 0xc4], edx
mov dword [esp + 0xc0], ebp
lea ecx, [ebp - 4]
mov dword [esp + 0x9c], ecx
mov ebp, dword [esp + 0x94]
sub ebp, esi
mov dword [esp + 0xbc], ebp
sub ebx, esi
mov dword [esp + 0xb8], ebx
lea esi, [ebp - 4]
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and edi, esi
mov esi, ecx
and esi, 0x7ffffff8
mov dword [esp + 0x6c], esi
mov ebp, dword [esp + 0x130]
add edi, ebp
mov dword [esp + 0x128], edi
lea ebp, [ebx - 4]
mov dword [esp + 0x88], ebp
lea edi, [esi + 4]
mov dword [esp + 0x58], edi
mov dword [esp + 0xfc], eax
xor eax, eax
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0xfc]
jmp 0x667a38
bsf ebx, ebx
jne 0x666f51
mov ebx, 0x20
bsf ebp, edx
jne 0x666f5b
mov ebp, 0x20
cmp edx, 1
sbb eax, eax
xor eax, 0xffffffff
not eax
and eax, ebx
lea ebx, [ebp + eax]
sar ebx, 3
mov ebp, dword [esp + 0x60]
lea edi, [ebp + ebx + 4]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xc8]
mov eax, ebx
sub ebx, ebp
test ebx, ebx
jge 0x666f8e
xor ebx, ebx
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x130]
mov ecx, dword [esp + 0x90]
mov esi, dword [esp + 0x28]
jmp 0x667c08
mov eax, dword [esp + 0x3c]
mov esi, dword [esp + 0x28]
jmp 0x666fbb
mov eax, dword [esp + 0x3c]
mov esi, dword [esp + 0x28]
mov dword [esp + 0x58], edi
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
mov dword [esp + 0x110], 0
mov ebx, dword [esp + 0x4c]
mov edx, eax
sub eax, ebx
mov dword [esp + 0x104], eax
lea ebx, [edi - 3]
mov dword [esp + 0x108], ebx
mov ebx, dword [esp + 0x104]
test ebx, ebx
jbe 0x667133
mov ebx, dword [esp + 0x94]
cmp edx, ebx
ja 0x668131
mov eax, dword [esp + 0x4c]
cmp edx, eax
jb 0x66812a
mov ecx, dword [esp + 0x150]
mov edi, dword [ecx + 0xc]
mov esi, dword [ecx + 8]
sub edx, eax
mov dword [esp + 0xb4], edx
add edx, esi
sub ebx, eax
neg ebx
sar ebx, 0x1f
and eax, ebx
mov ebx, dword [ecx + 4]
add eax, ebp
cmp edi, edx
jae 0x6670a5
mov dword [esp + 0xb0], esi
mov dword [esp + 0x140], eax
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xc], eax
lea ecx, [0x6e4500]
mov dword [esp + 0x10], ecx
call fcn.0044e230
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x140]
mov esi, dword [esp + 0xb0]
mov dword [esp + 0xb0], edi
mov dword [esp + 0xa8], edx
mov dword [esp + 0x140], ebx
lea ecx, [ebx + esi]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 8], eax
call fcn.00468df0
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x150]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0xb0]
mov dword [ecx + 0xc], eax
mov eax, dword [0x9eca70]
test eax, eax
jne 0x667102
mov ebx, dword [esp + 0x140]
jmp 0x667116
call fcn.00468460
mov ebx, dword [esp + 0x140]
mov dword [edi], ebx
mov ebp, dword [ecx + 4]
mov dword [edi + 4], ebp
mov dword [ecx + 4], ebx
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x58]
mov ebx, edx
sub edx, esi
lea eax, [edx + 3]
mov dword [esp + 0x10c], eax
mov eax, ebp
mov ebp, dword [esp + 0x150]
mov edx, dword [ebp + 0x18]
mov esi, dword [ebp + 0x14]
inc esi
add ebx, edi
mov dword [esp + 0xcc], ebx
mov edi, dword [ebp + 0x10]
cmp edx, esi
jae 0x6671d3
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x716c80]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x150]
mov dword [ebx + 0x18], eax
mov eax, dword [0x9eca70]
test eax, eax
je 0x6671b0
call fcn.00468460
mov dword [edi], ecx
mov ebp, dword [ebx + 0x10]
mov dword [edi + 4], ebp
mov dword [ebx + 0x10], ecx
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0x150]
mov esi, edx
mov edi, ecx
mov ecx, dword [esp + 0x90]
mov dword [ebp + 0x14], esi
lea edx, [esi - 1]
shl edx, 4
add edi, edx
lea esi, [esp + 0x104]
call fcn.00468be8
mov dword [esp + 0x4c], ebx
mov ecx, dword [esp + 0x38]
cmp ecx, ebx
jle 0x667c5a
nop
mov ebp, dword [esp + 0x90]
cmp ebp, ebx
jb 0x668121
mov esi, ebp
sub ebp, ebx
mov edi, ebp
mov ebp, dword [esp + 0x94]
sub ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
cmp edi, 7
jbe 0x668115
movzx edi, byte [eax + ebp]
movzx ecx, byte [eax + ebp + 1]
mov dword [esp + 0xe4], ecx
shr ecx, 0x18
mov ebx, dword [esp + 0xe4]
shl ebx, 8
or edi, ebx
movzx ebx, byte [eax + ebp + 2]
mov dword [esp + 0xe4], ebx
shr ebx, 0x10
or ecx, ebx
mov ebx, dword [esp + 0xe4]
shl ebx, 0x10
or edi, ebx
movzx ebx, byte [eax + ebp + 3]
mov dword [esp + 0xe4], ebx
shr ebx, 8
or ebx, ecx
mov ecx, ebx
mov ebx, dword [esp + 0xe4]
shl ebx, 0x18
mov dword [esp + 0xe4], ebx
movzx edx, byte [eax + ebp + 4]
or edx, ecx
movzx ecx, byte [eax + ebp + 5]
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax + ebp + 6]
shl ecx, 0x10
or ecx, edx
movzx ebp, byte [eax + ebp + 7]
shl ebp, 0x18
mov edx, ebp
mov ebp, dword [esp + 0xcc]
mov ebx, dword [esp + 0x48]
sub ebp, ebx
mov ebx, dword [esp + 0xe4]
or ebx, edi
or ecx, edx
mov edx, ebx
mov ebx, dword [esp + 0xe8]
cmp ebx, 2
jle 0x667419
cmp esi, ebp
jb 0x66810c
mov ebx, esi
sub esi, ebp
mov edi, ebx
mov ebx, dword [esp + 0x94]
sub ebx, ebp
neg ebx
sar ebx, 0x1f
and ebx, ebp
add ebx, eax
cmp esi, 3
jbe 0x668100
cmp dword [ebx], edx
jne 0x667402
mov ebx, dword [esp + 0x3c]
mov esi, ebp
mov ebp, dword [esp + 0x58]
lea ebx, [ebp + ebx + 4]
cmp edi, ebx
jb 0x6680f7
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xa4], ecx
mov ebp, dword [esp + 0x94]
mov ebx, dword [esp + 0xcc]
sub ebp, ebx
mov dword [esp + 0xc4], ebp
lea ecx, [ebp - 4]
neg ecx
sar ecx, 0x1f
mov ebp, dword [esp + 0xc8]
and ecx, ebp
lea ebp, [esi + 4]
add ecx, eax
sub edi, ebx
mov ebx, dword [esp + 0x90]
cmp ebx, ebp
jb 0x6680ee
mov dword [esp + 0xe8], edx
mov dword [esp + 0xc8], edi
mov dword [esp + 0x134], ecx
mov dword [esp + 0xc0], ebp
lea edx, [edi - 4]
mov dword [esp + 0x98], edx
mov ebp, dword [esp + 0x94]
sub ebp, esi
mov dword [esp + 0xbc], ebp
sub ebx, esi
mov dword [esp + 0xb8], ebx
lea esi, [ebp - 4]
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
mov ebp, dword [esp + 0xc0]
and ebp, esi
mov esi, edx
and edx, 0x7ffffff8
mov dword [esp + 0x68], edx
add ebp, eax
mov dword [esp + 0x124], ebp
lea eax, [ebx - 4]
mov dword [esp + 0x80], eax
lea ebp, [edx + 4]
mov dword [esp + 0x54], ebp
mov dword [esp + 0xf4], eax
xor eax, eax
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0xf4]
jmp 0x667cb0
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xd0]
mov esi, dword [esp + 0x48]
jmp 0x666e0e
mov edi, esi
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xd0]
mov esi, dword [esp + 0x48]
jmp 0x666e0e
mov esi, dword [esp + 0x48]
mov edx, dword [esp + 0xe8]
mov ecx, dword [esp + 0x14c]
mov ecx, dword [esp + 0x90]
mov edi, ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x74], ebp
mov dword [esp + 0x78], eax
shr eax, 8
mov dword [esp + 0x20], eax
shr ebp, 8
mov ebx, dword [esp + 0x78]
shl ebx, 0x18
or ebx, ebp
mov dword [esp + 0xe4], ebx
mov ebp, dword [esp + 0x74]
shl ebp, 0x10
mov dword [esp + 0xe0], ebp
mov ebx, dword [esp + 0x78]
shl ebx, 0x10
mov ebp, dword [esp + 0x74]
shr ebp, 0x10
or ebp, ebx
mov dword [esp + 0xdc], ebp
mov eax, 0xbcdcbf9b
mov ebx, dword [esp + 0xe0]
mul ebx
imul eax, ebp, 0xbcdcbf9b
mov dword [esp + 0xe0], eax
imul ebx, ebx, 0xcf1b
add ebx, edx
mov dword [esp + 0xd8], ebx
mov ebp, dword [esp + 0xe4]
shl ebp, 0x10
mov dword [esp + 0xd4], ebp
mov ebx, dword [esp + 0x20]
shl ebx, 0x10
mov ebp, dword [esp + 0xe4]
shr ebp, 0x10
or ebp, ebx
mov eax, dword [esp + 0xd4]
mov ebx, 0xbcdcbf9b
mul ebx
imul ebp, ebp, 0xbcdcbf9b
add ebp, edx
mov ebx, dword [esp + 0xd4]
imul ebx, ebx, 0xcf1b
mov eax, ebx
mov ebx, dword [esp + 0xe0]
mov edx, ebp
mov ebp, dword [esp + 0xd8]
add ebx, ebp
lea ebp, [eax + edx]
shr ebx, 0x11
mov eax, ebp
mov ebp, dword [esp + 0x14c]
lea edx, [ebp + ebx*8 + 0x2c]
mov ecx, dword [edx]
mov dword [esp + 0xe0], ecx
mov edx, dword [edx + 4]
lea ecx, [ebp + ebx*8 + 0x2c]
lea ebx, [ebp + ebx*8 + 0x30]
mov dword [esp + 0xd0], edx
mov dword [esp + 0x3c], edi
mov edx, dword [ebp]
add edx, edi
shr eax, 0x11
lea esi, [ebp + eax*8 + 0x2c]
lea edi, [ebp + eax*8 + 0x2c]
lea eax, [ebp + eax*8 + 0x30]
mov dword [esp + 0x144], eax
mov eax, dword [esi]
mov esi, dword [esi + 4]
mov ebp, dword [esp + 0x74]
mov dword [ecx], ebp
mov dword [ebx], edx
mov ebx, dword [esp + 0x14c]
mov ecx, dword [ebx]
mov edx, ebp
mov ebp, dword [esp + 0xe4]
mov dword [edi], ebp
mov edi, ebp
mov ebp, dword [esp + 0x3c]
lea ecx, [ebp + ecx + 1]
mov ebx, dword [esp + 0x144]
mov dword [ebx], ecx
mov ebx, dword [esp + 0x48]
mov ecx, ebp
sub ebp, ebx
mov ebx, dword [esp + 0xe8]
cmp ebx, 2
jle 0x667746
lea ebx, [ebp + 2]
test ebx, ebx
jl 0x66773f
mov dword [esp + 0xcc], ebp
mov ebp, dword [esp + 0x90]
cmp ebp, ebx
jb 0x6687bf
mov dword [esp + 0x40], ebx
mov dword [esp + 0xd8], eax
mov ebx, dword [esp + 0x94]
mov ebp, dword [esp + 0xcc]
sub ebx, ebp
mov dword [esp + 0xcc], ebx
mov ebx, dword [esp + 0x90]
sub ebx, ebp
mov dword [esp + 0xc8], ebx
lea eax, [ebx - 2]
mov ebx, dword [esp + 0xcc]
lea edi, [ebx - 2]
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
mov ebx, dword [esp + 0x40]
and edi, ebx
mov ebx, dword [esp + 0x130]
add edi, ebx
cmp eax, 3
jbe 0x6687b3
mov eax, ebx
mov ebx, dword [esp + 0xdc]
cmp dword [edi], ebx
jne 0x667728
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
lea ebx, [ecx + 6]
mov edx, ebp
mov ebp, dword [esp + 0x90]
cmp ebp, ebx
jb 0x6687aa
mov esi, ebp
mov ebp, dword [esp + 0x94]
sub ebp, ecx
lea edi, [ebp - 6]
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and ebx, edi
add edx, 6
add ebx, eax
mov edi, esi
sub esi, ecx
cmp edi, edx
jb 0x6687a1
mov dword [esp + 0x13c], ebx
mov dword [esp + 0xd0], ebp
mov dword [esp + 0xc4], esi
lea edi, [esi - 6]
mov dword [esp + 0xa0], edi
mov ebx, dword [esp + 0xcc]
lea ecx, [ebx - 6]
neg ecx
sar ecx, 0x1f
and edx, ecx
mov ecx, edi
and edi, 0x7ffffff8
mov dword [esp + 0x70], edi
add edx, eax
mov dword [esp + 0x12c], edx
mov ebx, dword [esp + 0xc8]
lea eax, [ebx - 6]
mov dword [esp + 0x8c], eax
lea edx, [edi + 4]
mov dword [esp + 0x50], edx
mov dword [esp + 0xec], eax
xor eax, eax
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0xec]
jmp 0x6681cd
mov eax, dword [esp + 0xd8]
mov ebx, dword [esp + 0xe8]
mov edi, dword [esp + 0xe4]
jmp 0x667746
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x14c]
mov ebx, dword [ebp]
mov ebp, dword [esp + 0xd0]
sub ebp, ebx
mov dword [esp + 0xd0], ebp
sub ecx, ebp
sub esi, ebx
mov ebx, dword [esp + 0x14c]
mov ebx, dword [ebx + 4]
mov ebp, dword [esp + 0x3c]
sub ebp, esi
cmp ebx, ecx
jle 0x66778a
mov ecx, ebx
mov ebx, dword [esp + 0xe0]
cmp edx, ebx
jne 0x66778c
jmp 0x666e3d
mov ecx, ebx
lea ebx, [ebp + 1]
cmp ecx, ebx
jle 0x66779b
cmp eax, edi
je 0x666e4a
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x3c]
mov eax, ebp
sub ebp, ebx
sar ebp, 6
lea ebx, [eax + ebp + 2]
add ebp, eax
mov eax, ebp
mov ebp, dword [esp + 0x38]
cmp ebx, ebp
jge 0x66788c
mov ecx, dword [esp + 0x90]
cmp ecx, ebx
jb 0x6679e9
mov edx, dword [esp + 0x94]
mov esi, edx
sub esi, eax
mov edi, ecx
sub edi, eax
lea eax, [edi - 2]
add esi, 0xfffffffe
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, ebx
cmp eax, 7
jbe 0x6679dd
mov ebp, dword [esp + 0x130]
movzx edi, byte [ebp + esi]
movzx eax, byte [ebp + esi + 1]
mov dword [esp + 0xe4], eax
shr eax, 0x18
mov ebp, dword [esp + 0xe4]
shl ebp, 8
or edi, ebp
mov ebp, dword [esp + 0x130]
movzx edx, byte [ebp + esi + 2]
mov dword [esp + 0xe4], edx
shl edx, 0x10
or edx, edi
mov edi, ebp
mov ebp, dword [esp + 0xe4]
shr ebp, 0x10
or eax, ebp
movzx ebp, byte [edi + esi + 3]
mov dword [esp + 0xe4], ebp
shr ebp, 8
or ebp, eax
mov eax, ebp
mov ebp, dword [esp + 0xe4]
shl ebp, 0x18
movzx ecx, byte [edi + esi + 4]
or ecx, eax
movzx eax, byte [edi + esi + 5]
shl eax, 8
or ecx, eax
movzx eax, byte [edi + esi + 6]
shl eax, 0x10
or eax, ecx
movzx ecx, byte [edi + esi + 7]
shl ecx, 0x18
or ebp, edx
or eax, ecx
jmp 0x667432
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x90]
cmp edx, ebx
jge 0x6679c0
ja 0x6679d4
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], ecx
mov ebp, dword [esp + 0x150]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
sub ebx, edx
lea ecx, [edi + ebx]
mov eax, dword [esp + 0x94]
sub eax, edx
neg eax
sar eax, 0x1f
and edx, eax
mov eax, dword [ebp + 4]
mov ebp, dword [esp + 0x130]
add edx, ebp
cmp esi, ecx
jae 0x66793b
mov dword [esp + 0xb4], edi
mov dword [esp + 0xb0], ebx
mov dword [esp + 0x140], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
lea eax, [0x6e4500]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x140]
mov ebx, dword [esp + 0xb0]
mov edi, dword [esp + 0xb4]
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb0], ecx
mov dword [esp + 0x140], eax
lea ebp, [eax + edi]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.00468df0
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0x150]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0xb4]
mov dword [ecx + 0xc], eax
mov eax, dword [0x9eca70]
test eax, eax
jne 0x667991
mov eax, dword [esp + 0x140]
jmp 0x6679a5
call fcn.00468460
mov eax, dword [esp + 0x140]
mov dword [edi], eax
mov edx, dword [ecx + 4]
mov dword [edi + 4], edx
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x90]
sub edx, eax
mov dword [ecx + 0x54], edx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x150]
mov dword [edx + 0x64], eax
mov dword [edx + 0x68], ecx
add esp, 0x148
ret
mov eax, edx
mov ecx, ebx
call fcn.00468520
mov ecx, eax
mov eax, 7
call fcn.004684c0
mov eax, ebx
call fcn.00468520
mov eax, dword [esp + 0x60]
add eax, 8
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x88]
mov ebx, dword [esp + 0xb8]
mov edi, dword [esp + 0xbc]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0xc4]
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0x58]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x138]
mov ebx, dword [esp + 0x60]
cmp ebx, esi
jge 0x666f76
cmp ebx, ecx
ja 0x668169
mov ebp, dword [esp + 0xc0]
sub ebp, ebx
sub edx, ebx
add ebp, 0xfffffffc
add edx, 0xfffffffc
neg edx
sar edx, 0x1f
and edx, ebx
cmp ebp, 7
jbe 0x66815d
movzx ebp, byte [eax + edx]
movzx edi, byte [eax + edx + 1]
mov dword [esp + 0xe4], edi
shr edi, 0x18
mov ebx, dword [esp + 0xe4]
shl ebx, 8
or ebp, ebx
movzx ebx, byte [eax + edx + 2]
mov dword [esp + 0xe4], ebx
shl ebx, 0x10
or ebp, ebx
mov ebx, dword [esp + 0xe4]
shr ebx, 0x10
or edi, ebx
movzx ebx, byte [eax + edx + 3]
mov dword [esp + 0xe4], ebx
shr ebx, 8
or edi, ebx
mov ebx, dword [esp + 0xe4]
shl ebx, 0x18
movzx ecx, byte [eax + edx + 4]
or ecx, edi
movzx edi, byte [edx + eax + 5]
shl edi, 8
or ecx, edi
movzx edi, byte [edx + eax + 6]
shl edi, 0x10
or edi, ecx
movzx ecx, byte [edx + eax + 7]
shl ecx, 0x18
or ebp, ebx
or ecx, edi
mov ebx, dword [esp + 0x60]
mov edx, ebp
mov ebp, dword [esp + 0x88]
cmp ebx, ebp
ja 0x668154
mov ebp, dword [esp + 0xbc]
sub ebp, ebx
mov dword [esp + 0xac], ebp
mov ebp, dword [esp + 0xb8]
sub ebp, ebx
add ebp, 0xfffffffc
mov dword [esp + 0x84], ebp
mov ebp, dword [esp + 0xac]
add ebp, 0xfffffffc
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
mov ebx, dword [esp + 0x84]
cmp ebx, 7
jbe 0x668148
mov ebx, dword [esp + 0x128]
movzx edi, byte [ebx + ebp]
movzx eax, byte [ebx + ebp + 1]
mov dword [esp + 0xe4], eax
shr eax, 0x18
mov ebx, dword [esp + 0xe4]
shl ebx, 8
or ebx, edi
mov edi, ebx
mov ebx, dword [esp + 0x128]
movzx esi, byte [ebx + ebp + 2]
mov dword [esp + 0xe4], esi
shl esi, 0x10
or edi, esi
mov esi, ebx
mov ebx, dword [esp + 0xe4]
shr ebx, 0x10
or eax, ebx
movzx ebx, byte [esi + ebp + 3]
mov dword [esp + 0xe4], ebx
shr ebx, 8
or eax, ebx
mov ebx, dword [esp + 0xe4]
shl ebx, 0x18
or edi, ebx
xor edx, edi
movzx ebx, byte [esi + ebp + 4]
or ebx, eax
movzx eax, byte [ebp + esi + 5]
shl eax, 8
or ebx, eax
movzx eax, byte [ebp + esi + 6]
shl eax, 0x10
or eax, ebx
movzx ebx, byte [ebp + esi + 7]
shl ebx, 0x18
or ebx, eax
xor ebx, ecx
test ebx, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
test edx, edx
setne al
or ebp, eax
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x6679f0
jmp 0x666f47
inc edi
mov eax, dword [esp + 0x24]
mov esi, edx
mov eax, ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x28], esi
cmp esi, ebx
jle 0x666fbb
cmp dword [esp + 0x4c], eax
jge 0x666fbb
lea edx, [esi - 1]
cmp ecx, edx
jbe 0x668141
lea ebx, [eax - 1]
movzx esi, byte [esi + ebp - 1]
cmp ecx, ebx
jbe 0x66813a
lea eax, [eax + ebp - 1]
xchg esi, ebx
cmp byte [eax], bl
xchg esi, ebx
jne 0x666fb3
cmp edi, 0x20002
jl 0x667bfb
jmp 0x666fa9
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x48]
jmp 0x667894
mov eax, dword [esp + 0x5c]
add eax, 8
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x134]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0xb8]
mov esi, dword [esp + 0xbc]
mov ebx, ebp
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0x98]
mov edi, dword [esp + 0xc8]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x80]
mov ebp, dword [esp + 0x5c]
cmp ebp, edx
jge 0x667e91
cmp ebp, esi
ja 0x6680e5
sub edi, ebp
mov ebx, dword [esp + 0xc4]
sub ebx, ebp
add edi, 0xfffffffc
add ebx, 0xfffffffc
neg ebx
sar ebx, 0x1f
and ebx, ebp
cmp edi, 7
jbe 0x6680d9
movzx edi, byte [ecx + ebx]
movzx esi, byte [ecx + ebx + 1]
mov dword [esp + 0xe4], esi
shr esi, 0x18
mov ebp, dword [esp + 0xe4]
shl ebp, 8
or edi, ebp
movzx ebp, byte [ecx + ebx + 2]
mov dword [esp + 0xe4], ebp
shl ebp, 0x10
or ebp, edi
mov edi, ebp
mov ebp, dword [esp + 0xe4]
shr ebp, 0x10
or ebp, esi
movzx esi, byte [ecx + ebx + 3]
mov dword [esp + 0xe4], esi
shr esi, 8
or esi, ebp
mov ebp, dword [esp + 0xe4]
shl ebp, 0x18
movzx edx, byte [ecx + ebx + 4]
or edx, esi
movzx esi, byte [ecx + ebx + 5]
shl esi, 8
or edx, esi
movzx esi, byte [ecx + ebx + 6]
shl esi, 0x10
or esi, edx
movzx ebx, byte [ecx + ebx + 7]
shl ebx, 0x18
or ebp, edi
or esi, ebx
mov ebx, dword [esp + 0x5c]
cmp ebx, eax
ja 0x6680d0
mov edx, ebp
mov ebp, dword [esp + 0xbc]
sub ebp, ebx
mov dword [esp + 0xc0], ebp
mov ebp, dword [esp + 0xb8]
sub ebp, ebx
add ebp, 0xfffffffc
mov dword [esp + 0x7c], ebp
mov ebp, dword [esp + 0xc0]
add ebp, 0xfffffffc
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
mov ebx, dword [esp + 0x7c]
cmp ebx, 7
jbe 0x6680c4
mov ebx, dword [esp + 0x124]
movzx edi, byte [ebx + ebp]
movzx eax, byte [ebx + ebp + 1]
mov dword [esp + 0xe4], eax
shr eax, 0x18
mov ebx, dword [esp + 0xe4]
shl ebx, 8
or edi, ebx
mov ebx, dword [esp + 0x124]
movzx ecx, byte [ebx + ebp + 2]
mov dword [esp + 0xe4], ecx
shl ecx, 0x10
or ecx, edi
mov edi, ebx
mov ebx, dword [esp + 0xe4]
shr ebx, 0x10
or eax, ebx
movzx ebx, byte [edi + ebp + 3]
mov dword [esp + 0xe4], ebx
shr ebx, 8
or ebx, eax
mov eax, ebx
mov ebx, dword [esp + 0xe4]
shl ebx, 0x18
or ebx, ecx
xor ebx, edx
movzx ecx, byte [edi + ebp + 4]
or ecx, eax
movzx eax, byte [edi + ebp + 5]
shl eax, 8
or ecx, eax
movzx eax, byte [edi + ebp + 6]
shl eax, 0x10
or eax, ecx
movzx ebp, byte [edi + ebp + 7]
shl ebp, 0x18
or eax, ebp
xor eax, esi
test ebx, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
test eax, eax
setne cl
or ecx, ebp
test cl, cl
je 0x667c6a
bsf ecx, eax
jne 0x667e6b
mov ecx, 0x20
bsf eax, ebx
jne 0x667e75
mov eax, 0x20
cmp ebx, 1
sbb ebx, ebx
xor ebx, 0xffffffff
not ebx
and ebx, ecx
lea ecx, [eax + ebx]
sar ecx, 3
mov ebx, dword [esp + 0x5c]
lea ebp, [ebx + ecx + 4]
jmp 0x667e95
mov ebp, dword [esp + 0x54]
mov ecx, dword [esp + 0x14c]
mov ebx, dword [ecx]
mov eax, ecx
mov ecx, dword [esp + 0xe8]
mov edx, ecx
shl ecx, 0x10
mov esi, ebp
mov ebp, dword [esp + 0xa4]
shl ebp, 0x10
mov edi, edx
shr edx, 0x10
or edx, ebp
mov dword [esp + 0xe8], edx
mov ebp, eax
mov eax, 0xbcdcbf9b
mul ecx
mov eax, ebp
mov ebp, dword [esp + 0xe8]
imul ebp, ebp, 0xbcdcbf9b
add ebp, edx
imul ecx, ecx, 0xcf1b
nop
mov edx, ecx
mov ecx, dword [esp + 0xcc]
add ebx, ecx
add ebp, edx
lea edx, [esi - 3]
add ecx, esi
mov dword [esp + 0x3c], ecx
shr ebp, 0x11
lea esi, [eax + ebp*8 + 0x2c]
mov dword [esi], edi
lea ebp, [eax + ebp*8 + 0x30]
mov dword [ebp], ebx
mov dword [esp + 0x108], edx
mov dword [esp + 0x104], 0
mov dword [esp + 0x10c], 1
mov dword [esp + 0x4c], ecx
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 0x18]
mov edx, dword [ebx + 0x14]
inc edx
mov esi, dword [ebx + 0x10]
cmp ebp, edx
jae 0x667fa2
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x716c80]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x150]
mov dword [ebx + 0x18], eax
mov eax, dword [0x9eca70]
test eax, eax
je 0x667f92
call fcn.00468460
mov dword [edi], ecx
mov ebp, dword [ebx + 0x10]
mov dword [edi + 4], ebp
mov dword [ebx + 0x10], ecx
mov eax, dword [esp + 0x14c]
mov esi, ecx
mov ecx, dword [esp + 0x3c]
mov dword [ebx + 0x14], edx
lea ebp, [edx - 1]
shl ebp, 4
lea edi, [esi + ebp]
lea esi, [esp + 0x104]
call fcn.00468be8
mov ecx, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
cmp ecx, ebp
jle 0x66809f
mov ebx, dword [esp + 0x90]
cmp ebx, ebp
jb 0x6680bb
sub ebx, ebp
mov edi, ebx
mov ebx, dword [esp + 0x94]
sub ebx, ebp
neg ebx
sar ebx, 0x1f
and ebx, ebp
cmp edi, 7
jbe 0x6680af
mov edi, dword [esp + 0x130]
movzx ecx, byte [ebx + edi]
movzx esi, byte [ebx + edi + 1]
mov dword [esp + 0xe8], esi
shr esi, 0x18
mov eax, dword [esp + 0xe8]
shl eax, 8
or ecx, eax
movzx eax, byte [ebx + edi + 2]
mov dword [esp + 0xe8], eax
shl eax, 0x10
or ecx, eax
mov eax, dword [esp + 0xe8]
shr eax, 0x10
or esi, eax
movzx eax, byte [ebx + edi + 3]
mov dword [esp + 0xe8], eax
shr eax, 8
or eax, esi
mov esi, dword [esp + 0xe8]
shl esi, 0x18
movzx edx, byte [ebx + edi + 4]
or edx, eax
movzx eax, byte [ebx + edi + 5]
shl eax, 8
or edx, eax
movzx eax, byte [ebx + edi + 6]
shl eax, 0x10
or eax, edx
movzx edx, byte [ebx + edi + 7]
shl edx, 0x18
or ecx, esi
or eax, edx
mov edi, dword [esp + 0x90]
mov ebx, ebp
mov ebp, dword [esp + 0x48]
mov esi, dword [esp + 0xd0]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x130]
jmp 0x666e0e
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0xd0]
jmp 0x667894
mov eax, 7
mov ecx, edi
call fcn.004684c0
mov eax, ebp
mov ecx, ebx
call fcn.00468520
mov eax, 7
mov ecx, ebx
call fcn.004684c0
mov ecx, eax
mov eax, ebx
call fcn.00468520
mov eax, 7
mov ecx, edi
call fcn.004684c0
mov eax, ebp
mov ecx, esi
call fcn.00468520
mov eax, ebp
mov ecx, ebx
call fcn.00468520
mov eax, ebx
mov ecx, edi
call fcn.00468520
mov eax, 3
mov ecx, esi
call fcn.004684c0
mov eax, ebp
mov ecx, esi
call fcn.00468520
mov eax, 7
mov ecx, edi
call fcn.004684c0
mov eax, ebx
mov ecx, ebp
call fcn.00468520
mov ecx, edx
call fcn.00468520
mov ecx, edx
mov edx, ebx
call fcn.00468500
mov eax, ebx
call fcn.004684c0
mov eax, edx
call fcn.004684c0
mov eax, 7
mov ecx, ebx
call fcn.004684c0
mov eax, ebx
mov ecx, ebp
call fcn.00468520
mov eax, 7
mov ecx, ebp
call fcn.004684c0
mov eax, ebx
call fcn.00468520
mov eax, edi
mov ecx, ebx
call fcn.00468520
mov ecx, ebp
call fcn.00468520
lea eax, [esi + 8]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x13c]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0xc8]
mov esi, dword [esp + 0xcc]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x50]
mov ebx, ebp
mov ebp, dword [esp + 0xd0]
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0x70]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x8c]
mov ebx, dword [esp + 0x64]
cmp ebx, edi
jge 0x6683ad
cmp ebx, ecx
ja 0x66879a
sub esi, ebx
sub ebp, ebx
add esi, 0xfffffffa
add ebp, 0xfffffffa
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
cmp esi, 7
jbe 0x66878e
mov esi, ebx
mov ebx, dword [esp + 0x13c]
movzx edx, byte [ebx + ebp]
movzx ecx, byte [ebx + ebp + 1]
mov dword [esp + 0xe4], ecx
shr ecx, 0x18
mov ebx, dword [esp + 0xe4]
shl ebx, 8
or edx, ebx
mov ebx, dword [esp + 0x13c]
movzx edi, byte [ebx + ebp + 2]
mov dword [esp + 0xe4], edi
shl edi, 0x10
or edi, edx
mov edx, ebx
mov ebx, dword [esp + 0xe4]
shr ebx, 0x10
or ebx, ecx
movzx ecx, byte [edx + ebp + 3]
mov dword [esp + 0xe4], ecx
shr ecx, 8
or ecx, ebx
mov ebx, dword [esp + 0xe4]
shl ebx, 0x18
movzx eax, byte [edx + ebp + 4]
or eax, ecx
movzx ecx, byte [edx + ebp + 5]
shl ecx, 8
or eax, ecx
movzx ecx, byte [edx + ebp + 6]
shl ecx, 0x10
or ecx, eax
movzx ebp, byte [edx + ebp + 7]
shl ebp, 0x18
or ebx, edi
or ecx, ebp
mov ebp, dword [esp + 0x8c]
cmp esi, ebp
ja 0x668785
mov dword [esp + 0xe4], ebx
mov ebp, dword [esp + 0xcc]
sub ebp, esi
mov ebx, dword [esp + 0xc8]
sub ebx, esi
add ebx, 0xfffffffa
add ebp, 0xfffffffa
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, esi
cmp ebx, 7
jbe 0x668779
mov ebx, dword [esp + 0x12c]
movzx edi, byte [ebx + ebp]
movzx eax, byte [ebx + ebp + 1]
mov dword [esp + 0xe0], eax
shr eax, 0x18
mov ebx, dword [esp + 0xe0]
shl ebx, 8
or edi, ebx
mov ebx, dword [esp + 0x12c]
movzx edx, byte [ebx + ebp + 2]
mov dword [esp + 0xe0], edx
shl edx, 0x10
or edx, edi
mov edi, ebx
mov ebx, dword [esp + 0xe0]
shr ebx, 0x10
or eax, ebx
movzx ebx, byte [edi + ebp + 3]
mov dword [esp + 0xe0], ebx
shr ebx, 8
or ebx, eax
mov eax, ebx
mov ebx, dword [esp + 0xe0]
shl ebx, 0x18
or edx, ebx
mov ebx, dword [esp + 0xe4]
xor ebx, edx
movzx edx, byte [edi + ebp + 4]
or edx, eax
movzx eax, byte [edi + ebp + 5]
shl eax, 8
or edx, eax
movzx eax, byte [edi + ebp + 6]
shl eax, 0x10
or eax, edx
movzx ebp, byte [edi + ebp + 7]
shl ebp, 0x18
or eax, ebp
xor eax, ecx
test ebx, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
test eax, eax
setne cl
or ecx, ebp
test cl, cl
je 0x668180
bsf ebp, eax
jne 0x66838e
mov ebp, 0x20
bsf eax, ebx
jne 0x668398
mov eax, 0x20
cmp ebx, 1
sbb ebx, ebx
xor ebx, 0xffffffff
not ebx
and ebx, ebp
add ebx, eax
sar ebx, 3
lea edx, [esi + ebx + 4]
lea ebx, [edx - 3]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x14c]
mov ebp, dword [ebx + 4]
mov eax, ebx
mov ebx, dword [esp + 0x3c]
mov ecx, ebx
sub ebx, ebp
test ebx, ebx
jge 0x6683d1
xor ebx, ebx
mov dword [esp + 0x50], edx
mov dword [esp + 0x34], ebx
mov ebp, dword [esp + 0x4c]
lea esi, [ecx + 2]
inc ebp
mov dword [esp + 0x2c], ebp
mov edi, dword [esp + 0x130]
jmp 0x668419
lea edx, [ebp + 1]
mov dword [esp + 0x118], edx
mov edx, dword [esp + 0x34]
mov ebp, dword [esp + 0x2c]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x40], eax
mov esi, ecx
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x40]
cmp ebp, ebx
jle 0x668484
mov ebx, dword [esp + 0x2c]
cmp esi, ebx
jle 0x668484
lea eax, [ebp - 1]
mov ebx, dword [esp + 0x90]
cmp ebx, eax
jbe 0x668772
lea ecx, [esi - 1]
movzx ebp, byte [ebp + edi - 1]
cmp ebx, ecx
jbe 0x668769
lea edx, [esi + edi - 1]
xchg ebp, eax
cmp byte [edx], al
xchg ebp, eax
jne 0x668475
mov ebp, dword [esp + 0x118]
cmp ebp, 0x1ffff
jb 0x6683ee
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x50]
jmp 0x668484
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x4c]
nop
cmp esi, ebx
je 0x6685bc
mov ebp, dword [esp + 0x94]
cmp esi, ebp
ja 0x668760
cmp esi, ebx
jb 0x668757
mov dword [esp + 0x30], esi
mov eax, dword [esp + 0x150]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 8]
sub esi, ebx
mov dword [esp + 0xb4], esi
add esi, edx
sub ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebx, ebp
mov ebp, dword [eax + 4]
add ebx, edi
cmp ecx, esi
jae 0x668527
mov dword [esp + 0x140], ebx
mov dword [esp + 0xb0], edx
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xc], eax
lea ecx, [0x6e4500]
mov dword [esp + 0x10], ecx
call fcn.0044e230
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0x140]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xa8], esi
mov dword [esp + 0x140], ebp
lea eax, [ebp + edx]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov eax, dword [esp + 0xb4]
mov dword [esp + 8], eax
call fcn.00468df0
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x150]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0xb0]
mov dword [ecx + 0xc], eax
mov eax, dword [0x9eca70]
test eax, eax
jne 0x668585
mov ebx, dword [esp + 0x140]
jmp 0x668599
call fcn.00468460
mov ebx, dword [esp + 0x140]
mov dword [edi], ebx
mov ebp, dword [ecx + 4]
mov dword [edi + 4], ebp
mov dword [ecx + 4], ebx
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x30]
sub ebp, ebx
mov dword [esp + 0x114], ebp
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x50]
mov edi, dword [esp + 0x130]
mov dword [esp + 0x11c], 1
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 0x18]
mov esi, dword [ebx + 0x14]
inc esi
mov eax, dword [ebx + 0x10]
cmp ebp, esi
jae 0x668641
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x716c80]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x150]
mov dword [ebx + 0x18], eax
mov eax, dword [0x9eca70]
test eax, eax
je 0x66862b
call fcn.00468460
mov dword [edi], ecx
mov ebp, dword [ebx + 0x10]
mov dword [edi + 4], ebp
mov dword [ebx + 0x10], ecx
mov edi, dword [esp + 0x130]
mov esi, edx
mov eax, ecx
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x50]
mov dword [ebx + 0x14], esi
lea ebp, [esi - 1]
shl ebp, 4
add ebp, eax
lea esi, [esp + 0x114]
mov eax, edi
mov edi, ebp
call fcn.00468be8
mov ecx, dword [esp + 0x3c]
lea ebp, [edx + ecx + 2]
mov dword [esp + 0x4c], ebp
add ecx, edx
mov ebx, dword [esp + 0x38]
cmp ebp, ebx
jge 0x668737
nop
mov ebx, dword [esp + 0x90]
cmp ebx, ebp
jb 0x66874e
mov edi, ebp
mov ebp, dword [esp + 0x94]
sub ebp, ecx
sub ebx, ecx
lea ecx, [ebx - 2]
lea ebx, [ebp - 2]
neg ebx
sar ebx, 0x1f
and ebx, edi
cmp ecx, 7
jbe 0x668744
movzx ebp, byte [eax + ebx]
movzx ecx, byte [eax + ebx + 1]
mov dword [esp + 0xe4], ecx
shr ecx, 0x18
mov edx, dword [esp + 0xe4]
shl edx, 8
or ebp, edx
movzx edx, byte [eax + ebx + 2]
mov dword [esp + 0xe4], edx
shl edx, 0x10
or ebp, edx
mov edx, dword [esp + 0xe4]
shr edx, 0x10
or ecx, edx
movzx edx, byte [eax + ebx + 3]
mov dword [esp + 0xe4], edx
shr edx, 8
or edx, ecx
mov ecx, dword [esp + 0xe4]
shl ecx, 0x18
movzx esi, byte [eax + ebx + 4]
or esi, edx
movzx edx, byte [eax + ebx + 5]
shl edx, 8
or esi, edx
movzx edx, byte [eax + ebx + 6]
shl edx, 0x10
or edx, esi
movzx ebx, byte [eax + ebx + 7]
shl ebx, 0x18
or ebp, ecx
or edx, ebx
mov ebx, edi
mov eax, edx
mov edi, dword [esp + 0x130]
jmp 0x667432
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
jmp 0x667894
mov eax, 7
call fcn.004684c0
mov eax, ebp
mov ecx, ebx
call fcn.00468520
mov eax, ebx
mov ecx, esi
call fcn.00468520
mov ecx, esi
mov edx, ebp
call fcn.00468500
mov eax, ecx
mov ecx, ebx
call fcn.004684c0
mov ecx, ebx
call fcn.004684c0
mov eax, 7
mov ecx, ebx
call fcn.004684c0
mov eax, esi
mov ecx, ebp
call fcn.00468520
mov eax, 7
mov ecx, esi
call fcn.004684c0
mov eax, ebx
call fcn.00468520
mov eax, edx
mov ecx, edi
call fcn.00468520
mov eax, ebx
mov ecx, ebp
call fcn.00468520
mov ecx, eax
mov eax, 3
call fcn.004684c0
mov eax, ebx
mov ecx, ebp
call fcn.00468520
mov eax, 7
mov ecx, edi
call fcn.004684c0
call fcn.00468520
mov dword [ebp + 4], ebx
inc edx
cmp edx, 0x8000
jge 0x668800
lea ebx, [eax + edx*8 + 0x30]
mov ebx, dword [ebx]
lea ebp, [eax + edx*8 + 0x2c]
cmp ebx, ecx
jge 0x6687f7
xor ebx, ebx
jmp 0x6687d9
mov esi, dword [eax]
sub ebx, esi
add ebx, dword [eax + 4]
jmp 0x6687d9
mov ecx, dword [eax + 4]
mov dword [eax], ecx
jmp 0x666c7c
lea edx, [eax + ecx*8 + 0x2c]
mov dword [edx], 0
lea edx, [eax + ecx*8 + 0x30]
mov dword [edx], 0
inc ecx
cmp ecx, 0x8000
jl 0x66880a
mov ecx, dword [eax + 4]
mov dword [eax], ecx
jmp 0x666c7c
call fcn.00467050
jmp fcn.00666c30