Function at 0x666d10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc]
cmp eax, dword [ecx + 8]
jbe 0x6679bd
sub esp, 0x8c
mov edx, dword [esp + 0x90]
test edx, edx
je 0x66713c
movzx ebx, byte [edx]
cmp bl, 0x10
ja 0x666e60
cmp bl, 0xd
je 0x667117
cmp bl, 0xe
jb 0x66712e
mov ebx, dword [edx + 8]
mov ebp, dword [edx + 4]
test ebx, ebx
jbe 0x6679b3
mov eax, dword [ebp]
mov dword [esp], eax
call fcn.00666d10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x90]
movzx edx, byte [ecx]
movzx ebx, word [ecx + 2]
movzx ebp, byte [eax]
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x666d99
mov ecx, eax
jmp 0x666e52
xchg ebp, eax
cmp al, dl
xchg ebp, eax
jne 0x666db7
mov ebp, ebx
and ebx, 0x20
movzx esi, word [eax + 2]
and esi, 0x20
cmp si, bx
jne 0x666db9
mov ecx, eax
jmp 0x666e52
mov ebp, ebx
mov ebx, dword [ecx + 8]
mov esi, dword [ecx + 4]
test ebx, ebx
jbe 0x6679aa
cmp dword [esi], eax
je 0x666e52
mov dword [esp + 0x58], eax
mov byte [esp + 0x23], dl
mov word [esp + 0x2e], bp
lea eax, [0x6c1bc0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
movzx ecx, byte [esp + 0x23]
mov byte [eax], cl
movzx ecx, word [esp + 0x2e]
mov word [eax + 2], cx
mov ecx, dword [0x8f52e0]
lea edi, [eax + 0x10]
test ecx, ecx
jne 0x666e14
mov ecx, dword [esp + 0x58]
mov dword [eax + 0x10], ecx
jmp 0x666e21
mov ecx, eax
mov eax, dword [esp + 0x58]
call fcn.004642e0
mov eax, ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0x8f52e0]
test ecx, ecx
jne 0x666e3e
mov dword [eax + 4], edi
jmp 0x666e50
lea ecx, [eax + 4]
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.004642e0
mov eax, ebx
mov ecx, eax
mov dword [esp + 0x94], ecx
add esp, 0x8c
ret
cmp bl, 0x11
jne 0x667112
mov ebx, dword [edx + 0x28]
test ebx, ebx
jne 0x666e9a
mov ebx, dword [edx + 0x2c]
test ebx, ebx
jne 0x666e9a
lea eax, [0x6c1bc0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov byte [eax], 2
mov dword [esp + 0x94], eax
add esp, 0x8c
ret
mov ebx, dword [edx + 8]
mov ebp, dword [edx + 4]
test ebx, ebx
jbe 0x6679a1
mov eax, dword [ebp]
mov dword [esp], eax
call fcn.00666d10
mov eax, dword [esp + 4]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x90]
mov edx, dword [ecx + 0x2c]
cmp edx, 0xffffffff
jne 0x66708c
mov edx, dword [ecx + 0x28]
test edx, edx
je 0x666fe5
cmp edx, 1
je 0x666f3e
lea eax, [0x6c1bc0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov byte [eax], 0x12
mov dword [eax + 8], 0
mov dword [eax + 0xc], 1
lea edi, [eax + 4]
mov ecx, dword [0x8f52e0]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x666f16
mov dword [eax + 4], edx
jmp 0x666f21
mov ecx, eax
mov eax, edx
call fcn.004642e0
mov eax, ecx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x88], edi
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x54]
xor ebx, ebx
jmp 0x6677aa
movzx ecx, word [ecx + 2]
movzx edx, byte [eax]
cmp dl, 2
je 0x666fd7
mov word [esp + 0x2a], cx
cmp dl, 0xf
jne 0x666f67
and ecx, 0x20
movzx ebx, word [eax + 2]
and ebx, 0x20
cmp bx, cx
je 0x666fd7
lea eax, [0x6c1bc0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov byte [eax], 0xf
movzx ecx, word [esp + 0x2a]
mov word [eax + 2], cx
mov ecx, dword [0x8f52e0]
lea edi, [eax + 0x10]
test ecx, ecx
jne 0x666f9b
mov ecx, dword [esp + 0x54]
mov dword [eax + 0x10], ecx
jmp 0x666fa8
mov ecx, eax
mov eax, dword [esp + 0x54]
call fcn.004642e0
mov eax, ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0x8f52e0]
test ecx, ecx
jne 0x666fc5
mov dword [eax + 4], edi
jmp 0x666fd7
lea ecx, [eax + 4]
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.004642e0
mov eax, ebx
mov dword [esp + 0x94], eax
add esp, 0x8c
ret
movzx ecx, word [ecx + 2]
movzx edx, byte [eax]
cmp dl, 2
je 0x66707e
mov word [esp + 0x2c], cx
cmp dl, 0xe
jne 0x66700e
and ecx, 0x20
movzx ebx, word [eax + 2]
and ebx, 0x20
cmp bx, cx
je 0x66707e
lea eax, [0x6c1bc0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov byte [eax], 0xe
movzx ecx, word [esp + 0x2c]
mov word [eax + 2], cx
mov ecx, dword [0x8f52e0]
lea edi, [eax + 0x10]
test ecx, ecx
jne 0x667042
mov ecx, dword [esp + 0x54]
mov dword [eax + 0x10], ecx
jmp 0x66704f
mov ecx, eax
mov eax, dword [esp + 0x54]
call fcn.004642e0
mov eax, ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0x8f52e0]
test ecx, ecx
jne 0x66706c
mov dword [eax + 4], edi
jmp 0x66707e
lea ecx, [eax + 4]
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.004642e0
mov eax, ebx
mov dword [esp + 0x94], eax
add esp, 0x8c
ret
mov ebx, dword [ecx + 0x28]
cmp ebx, 1
jne 0x6670a7
cmp edx, 1
jne 0x6670a7
mov dword [esp + 0x94], eax
add esp, 0x8c
ret
test ebx, ebx
jg 0x6670b2
xor edx, edx
jmp 0x66746d
lea eax, [0x6c1bc0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov byte [eax], 0x12
mov dword [eax + 8], 0
mov dword [eax + 0xc], 1
lea edi, [eax + 4]
mov ecx, dword [0x8f52e0]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x6670ea
mov dword [eax + 4], edx
jmp 0x6670f5
mov ecx, eax
mov eax, edx
call fcn.004642e0
mov eax, ecx
mov dword [esp + 0x60], eax
mov dword [esp + 0x84], edi
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x54]
xor ebx, ebx
jmp 0x6673b5
cmp bl, 0x13
ja 0x66712e
mov eax, dword [edx + 4]
mov dword [esp + 0x80], eax
mov ecx, dword [edx + 8]
mov dword [esp + 0x48], ecx
mov ebx, edx
xor ebp, ebp
jmp 0x667167
mov dword [esp + 0x94], edx
add esp, 0x8c
ret
mov dword [esp + 0x94], 0
add esp, 0x8c
ret
mov esi, dword [esp + 0x3c]
lea ebp, [esi + 1]
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x90]
cmp ebp, ecx
jge 0x667394
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x70], edx
mov ecx, dword [eax + ebp*4]
mov dword [esp + 0x5c], ecx
mov dword [esp], ecx
call fcn.00666d10
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x70]
cmp ecx, edx
jne 0x6672f9
mov ebx, dword [esp + 0x5c]
cmp eax, ebx
je 0x6672f9
lea eax, [0x6c1bc0]
mov dword [esp], eax
call fcn.0040bd30
mov edi, dword [esp + 4]
mov dword [esp + 0x70], edi
mov eax, dword [0x8f52e0]
test eax, eax
jne 0x6671db
mov esi, dword [esp + 0x90]
call fcn.004649fa
jmp 0x6671f8
lea eax, [0x6c1bc0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
call fcn.00411390
mov ebx, dword [esp + 0x70]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0
mov ebp, dword [0x8f52e0]
test ebp, ebp
jne 0x66721d
mov dword [ebx + 0x14], 0
jmp 0x667227
lea edi, [ebx + 0x14]
xor eax, eax
call fcn.004642e0
mov eax, dword [esp + 0x90]
mov edx, dword [eax + 0xc]
mov ebp, dword [eax + 4]
mov ecx, dword [esp + 0x3c]
cmp ecx, edx
ja 0x6673a2
lea edx, [ebx + 0x10]
cmp ecx, 1
ja 0x667251
mov esi, ecx
mov edi, 1
jmp 0x66728f
mov dword [esp + 0x7c], ebp
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
mov dword [esp + 0xc], ecx
lea eax, [0x6bd820]
mov dword [esp + 0x10], eax
call fcn.0044b130
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x3c]
mov ecx, ebp
mov edi, eax
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x78], edx
mov dword [esp + 0x40], edi
lea eax, [0x6bd820]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004114a0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x70]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x40]
mov dword [ecx + 0xc], eax
mov eax, dword [0x8f52e0]
test eax, eax
jne 0x6672de
mov edx, dword [esp + 0x78]
mov dword [ecx + 4], edx
jmp 0x6672ea
lea edi, [ecx + 4]
mov eax, dword [esp + 0x78]
call fcn.004642e0
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x70]
cmp ecx, edx
je 0x66714e
mov ebx, dword [edx + 4]
mov ebp, dword [edx + 0xc]
mov esi, dword [edx + 8]
inc esi
cmp ebp, esi
jae 0x667370
mov dword [esp + 0x74], edx
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6bd820]
mov dword [esp + 0x10], eax
call fcn.0044b130
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x74]
mov dword [ebx + 0xc], edx
mov edx, dword [0x8f52e0]
test edx, edx
jne 0x667357
mov dword [ebx + 4], eax
jmp 0x66735f
lea edi, [ebx + 4]
call fcn.004642e0
mov edx, ebx
mov esi, ecx
mov ebx, eax
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x90]
mov dword [edx + 8], esi
mov ebp, dword [0x8f52e0]
lea edi, [ebx + esi*4 - 4]
test ebp, ebp
jne 0x66738a
mov dword [ebx + esi*4 - 4], eax
jmp 0x66714e
call fcn.004642e0
jmp 0x66714e
mov dword [esp + 0x94], edx
add esp, 0x8c
ret
call fcn.004643a0
mov ebp, dword [esp + 0x34]
lea ebx, [ebp + 1]
mov ecx, dword [esp + 0x90]
cmp dword [ecx + 0x28], ebx
jle 0x667467
mov dword [esp + 0x34], ebx
mov ebp, dword [eax + 8]
inc ebp
mov esi, dword [eax + 4]
mov ecx, dword [eax + 0xc]
cmp ecx, ebp
jae 0x667437
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6bd820]
mov dword [esp + 0x10], eax
call fcn.0044b130
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x60]
mov dword [ebx + 0xc], edx
mov edx, dword [0x8f52e0]
test edx, edx
jne 0x66741b
mov dword [ebx + 4], eax
mov edi, dword [esp + 0x84]
jmp 0x667427
mov edi, dword [esp + 0x84]
call fcn.004642e0
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x34]
mov ebp, ecx
mov esi, eax
mov eax, dword [esp + 0x60]
mov dword [eax + 8], ebp
mov ecx, dword [0x8f52e0]
lea ebx, [esi + ebp*4 - 4]
test ecx, ecx
jne 0x667451
mov dword [esi + ebp*4 - 4], edx
jmp 0x6673a7
mov ecx, edi
mov edi, ebx
mov ebp, eax
mov eax, edx
call fcn.004642e0
mov eax, ebp
mov edi, ecx
jmp 0x6673a7
mov eax, edx
mov edx, dword [esp + 0x60]
mov ebx, dword [ecx + 0x2c]
cmp dword [ecx + 0x28], ebx
jge 0x66753d
mov dword [esp + 0x60], edx
movzx ebx, word [ecx + 2]
movzx ebp, byte [eax]
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x667492
mov ebx, eax
jmp 0x667537
mov word [esp + 0x26], bx
xchg ebp, eax
cmp al, 0x10
xchg ebp, eax
jne 0x6674b4
and ebx, 0x20
movzx esi, word [eax + 2]
and esi, 0x20
cmp si, bx
jne 0x6674b4
mov ebx, eax
jmp 0x667537
lea eax, [0x6c1bc0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov byte [eax], 0x10
movzx ecx, word [esp + 0x26]
mov word [eax + 2], cx
mov ecx, dword [0x8f52e0]
lea edi, [eax + 0x10]
test ecx, ecx
jne 0x6674e8
mov ecx, dword [esp + 0x54]
mov dword [eax + 0x10], ecx
jmp 0x6674f9
mov ecx, eax
mov eax, dword [esp + 0x54]
call fcn.004642e0
mov eax, ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov edx, dword [0x8f52e0]
test edx, edx
jne 0x667516
mov dword [eax + 4], edi
jmp 0x667528
lea edx, [eax + 4]
mov ebx, edi
mov edi, edx
mov ebp, eax
mov eax, ebx
call fcn.004642e0
mov eax, ebp
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0x54]
mov ebp, dword [ecx + 0x28]
inc ebp
jmp 0x667583
test edx, edx
je 0x66754f
mov dword [esp + 0x94], edx
add esp, 0x8c
ret
lea eax, [0x6c1bc0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov byte [eax], 1
mov dword [esp + 0x94], eax
add esp, 0x8c
ret
mov esi, dword [esp + 0x30]
lea ebp, [esi + 1]
mov edx, dword [esp + 0x60]
mov eax, ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x50], eax
cmp dword [ecx + 0x2c], ebp
jle 0x667700
mov dword [esp + 0x30], ebp
lea eax, [0x6c1bc0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov dword [esp + 0x68], eax
mov byte [eax], 0x12
lea ecx, [eax + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], 2
mov dword [esp + 8], 1
mov dword [esp + 0xc], 2
lea ecx, [0x6bd820]
mov dword [esp + 0x10], ecx
call fcn.0044b130
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov edx, dword [0x8f52e0]
test edx, edx
jne 0x6675fb
mov edx, dword [esp + 0x54]
mov dword [eax], edx
mov ebx, dword [esp + 0x50]
mov dword [eax + 4], ebx
jmp 0x66761c
mov edi, eax
mov eax, dword [esp + 0x54]
call fcn.004642e0
lea edx, [edi + 4]
mov ebx, edi
mov edi, edx
mov ebp, eax
mov eax, dword [esp + 0x50]
call fcn.004642e0
mov eax, ebx
mov edx, ebp
mov ebx, dword [esp + 0x68]
mov dword [ebx + 8], 2
mov dword [ebx + 0xc], ecx
mov ecx, dword [0x8f52e0]
test ecx, ecx
jne 0x667639
mov dword [ebx + 4], eax
jmp 0x667641
lea edi, [ebx + 4]
call fcn.004642e0
mov ecx, dword [esp + 0x90]
movzx ebp, word [ecx + 2]
movzx esi, byte [ebx]
xchg esi, eax
cmp al, 2
xchg esi, eax
jne 0x66765d
mov eax, edx
jmp 0x667572
mov word [esp + 0x24], bp
xchg esi, eax
cmp al, 0x10
xchg esi, eax
jne 0x66767e
and ebp, 0x20
mov eax, edx
movzx edx, word [ebx + 2]
and edx, 0x20
cmp dx, bp
je 0x667572
lea eax, [0x6c1bc0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov byte [eax], 0x10
movzx ecx, word [esp + 0x24]
mov word [eax + 2], cx
mov ecx, dword [0x8f52e0]
lea edi, [eax + 0x10]
test ecx, ecx
jne 0x6676b2
mov ecx, dword [esp + 0x68]
mov dword [eax + 0x10], ecx
jmp 0x6676bf
mov ecx, eax
mov eax, dword [esp + 0x68]
call fcn.004642e0
mov eax, ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0x8f52e0]
test ecx, ecx
jne 0x6676dc
mov dword [eax + 4], edi
jmp 0x6676ee
lea ecx, [eax + 4]
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.004642e0
mov eax, ebx
mov ecx, dword [esp + 0x90]
mov ebx, eax
mov eax, dword [esp + 0x54]
jmp 0x667572
test edx, edx
je 0x66778e
mov ecx, dword [edx + 8]
inc ecx
mov ebx, dword [edx + 4]
mov ebp, dword [edx + 0xc]
cmp ebp, ecx
jae 0x66776a
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6bd820]
mov dword [esp + 0x10], eax
call fcn.0044b130
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x60]
mov dword [ebx + 0xc], edx
mov edx, dword [0x8f52e0]
test edx, edx
jne 0x66775a
mov dword [ebx + 4], eax
jmp 0x667762
lea edi, [ebx + 4]
call fcn.004642e0
mov edx, ebx
mov ebx, eax
mov eax, dword [esp + 0x50]
mov dword [edx + 8], ecx
mov ebp, dword [0x8f52e0]
lea edi, [ebx + ecx*4 - 4]
test ebp, ebp
jne 0x667784
mov dword [ebx + ecx*4 - 4], eax
jmp 0x66753d
call fcn.004642e0
jmp 0x66753d
mov dword [esp + 0x94], eax
add esp, 0x8c
ret
mov ebp, dword [esp + 0x38]
lea ebx, [ebp + 1]
mov ecx, dword [esp + 0x90]
mov ebp, dword [ecx + 0x28]
dec ebp
cmp ebx, ebp
jge 0x66785f
mov dword [esp + 0x38], ebx
mov ebp, dword [eax + 8]
inc ebp
mov esi, dword [eax + 4]
mov ecx, dword [eax + 0xc]
cmp ecx, ebp
jae 0x66782f
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6bd820]
mov dword [esp + 0x10], eax
call fcn.0044b130
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0xc], edx
mov edx, dword [0x8f52e0]
test edx, edx
jne 0x667813
mov dword [ebx + 4], eax
mov edi, dword [esp + 0x88]
jmp 0x66781f
mov edi, dword [esp + 0x88]
call fcn.004642e0
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x38]
mov ebp, ecx
mov esi, eax
mov eax, dword [esp + 0x6c]
mov dword [eax + 8], ebp
mov ecx, dword [0x8f52e0]
lea ebx, [esi + ebp*4 - 4]
test ecx, ecx
jne 0x667849
mov dword [esi + ebp*4 - 4], edx
jmp 0x66779c
mov ecx, edi
mov edi, ebx
mov ebp, eax
mov eax, edx
call fcn.004642e0
mov eax, ebp
mov edi, ecx
jmp 0x66779c
movzx ecx, word [ecx + 2]
movzx ebx, byte [edx]
cmp bl, 2
je 0x667905
mov word [esp + 0x28], cx
cmp bl, 0xf
jne 0x667888
and ecx, 0x20
movzx ebp, word [edx + 2]
and ebp, 0x20
cmp bp, cx
je 0x667905
lea eax, [0x6c1bc0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov byte [eax], 0xf
movzx ecx, word [esp + 0x28]
mov word [eax + 2], cx
mov ecx, dword [0x8f52e0]
lea edi, [eax + 0x10]
test ecx, ecx
jne 0x6678bc
mov ecx, dword [esp + 0x54]
mov dword [eax + 0x10], ecx
jmp 0x6678c9
mov ecx, eax
mov eax, dword [esp + 0x54]
call fcn.004642e0
mov eax, ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0x8f52e0]
test ecx, ecx
jne 0x6678e6
mov dword [eax + 4], edi
jmp 0x6678f8
lea ecx, [eax + 4]
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.004642e0
mov eax, ebx
mov edi, dword [esp + 0x88]
mov edx, eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax + 4]
mov ebx, dword [eax + 0xc]
mov ebp, dword [eax + 8]
inc ebp
cmp ebx, ebp
jae 0x667971
mov dword [esp + 0x4c], edx
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6bd820]
mov dword [esp + 0x10], eax
call fcn.0044b130
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0xc], edx
mov edx, dword [0x8f52e0]
test edx, edx
jne 0x66795b
mov dword [ebx + 4], eax
jmp 0x667967
mov edi, dword [esp + 0x88]
call fcn.004642e0
mov edx, dword [esp + 0x4c]
mov ebp, ecx
mov ecx, eax
mov eax, ebx
mov dword [eax + 8], ebp
mov ebx, dword [0x8f52e0]
lea edi, [ecx + ebp*4 - 4]
test ebx, ebx
jne 0x667988
mov dword [ecx + ebp*4 - 4], edx
jmp 0x667993
mov ecx, eax
mov eax, edx
call fcn.004642e0
mov eax, ecx
mov dword [esp + 0x94], eax
add esp, 0x8c
ret
xor eax, eax
mov ecx, eax
call fcn.00464360
xor eax, eax
mov ecx, eax
call fcn.00464360
xor eax, eax
mov ecx, eax
call fcn.00464360
nop
call fcn.00462ed0
jmp fcn.00666d10