Function at 0x67bed0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x140]
cmp eax, dword [ecx + 8]
jbe 0x67d63c
sub esp, 0x1c0
mov ebx, dword [esp + 0x1c8]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 9
xchg ebp, eax
ja 0x67c6b1
xchg ebp, eax
cmp al, 4
xchg ebp, eax
ja 0x67c214
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jbe 0x67c0c1
xchg ebp, eax
cmp al, 3
xchg ebp, eax
jne 0x67c060
mov ebp, dword [ebx + 0x18]
test ebp, ebp
je 0x67bf53
mov dword [esp + 0x88], ebp
mov esi, dword [esp + 0x1c4]
xor eax, eax
xor ecx, ecx
xor edx, edx
xor edi, edi
xor eax, eax
mov dword [esp + 0x5c], eax
xor eax, eax
jmp 0x67d4b1
mov ecx, dword [esp + 0x1c4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x190]
xor eax, eax
call fcn.0046465a
mov byte [esp + 0x190], 6
mov ecx, dword [esp + 0x1c4]
mov ecx, dword [ecx]
mov ebx, dword [ecx]
mov ebp, dword [ecx + 8]
mov eax, edx
mov edx, dword [ecx + 4]
inc edx
cmp ebp, edx
jae 0x67bff4
mov dword [esp + 0xb4], ecx
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x788da0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb4]
mov dword [edi + 8], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x67bfe2
mov dword [edi], eax
jmp 0x67bfe7
call fcn.004643b0
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x88]
mov ecx, edi
mov dword [ecx + 4], edx
lea ecx, [edx + edx*2]
lea edi, [ebx + ecx*8 - 0x18]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x67c016
lea esi, [esp + 0x190]
call fcn.00464b34
jmp 0x67c03a
lea eax, [0x788da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
call fcn.00411480
mov eax, dword [esp + 0x88]
mov dword [esp + 0x1cc], eax
shl eax, 1
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], eax
mov byte [esp + 0x1d8], 1
add esp, 0x1c0
ret
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0x18]
mov edx, dword [ebx + 0x1c]
movzx ebx, word [ebx + 2]
mov ebp, dword [esp + 0x1c4]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov word [esp + 0x10], bx
call fcn.0067dca0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], ecx
mov dword [esp + 0x1d4], edx
mov byte [esp + 0x1d8], bl
add esp, 0x1c0
ret
xchg ebp, eax
cmp al, 1
xchg ebp, eax
je 0x67c1e4
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x67d1c1
mov ecx, dword [esp + 0x1c4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x1a8]
xor eax, eax
call fcn.0046465a
mov byte [esp + 0x1a8], 6
mov ecx, dword [esp + 0x1c4]
mov ecx, dword [ecx]
mov ebx, dword [ecx]
mov ebp, dword [ecx + 8]
mov eax, edx
mov edx, dword [ecx + 4]
inc edx
cmp ebp, edx
jae 0x67c178
mov dword [esp + 0xb4], ecx
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x788da0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb4]
mov dword [edi + 8], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x67c166
mov dword [edi], eax
jmp 0x67c16b
call fcn.004643b0
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x88]
mov ecx, edi
mov dword [ecx + 4], edx
lea ecx, [edx + edx*2]
lea edi, [ebx + ecx*8 - 0x18]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x67c19a
lea esi, [esp + 0x1a8]
call fcn.00464b34
jmp 0x67c1be
lea eax, [0x788da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x1a8]
mov dword [esp + 8], eax
call fcn.00411480
mov eax, dword [esp + 0x88]
mov dword [esp + 0x1cc], eax
shl eax, 1
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], eax
mov byte [esp + 0x1d8], 1
add esp, 0x1c0
ret
mov dword [esp + 0x1cc], 0
mov dword [esp + 0x1d0], 0
mov dword [esp + 0x1d4], 0
mov byte [esp + 0x1d8], 0
add esp, 0x1c0
ret
xchg ebp, eax
cmp al, 6
xchg ebp, eax
ja 0x67c2f6
xchg ebp, eax
cmp al, 5
xchg ebp, eax
jne 0x67c28e
mov eax, dword [0xa7ba90]
mov ecx, dword [0xa7ba94]
mov edx, dword [0xa7ba98]
mov ebx, dword [esp + 0x1c4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov word [esp + 0x10], 0
call fcn.0067dca0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], ecx
mov dword [esp + 0x1d4], edx
mov byte [esp + 0x1d8], bl
add esp, 0x1c0
ret
mov eax, dword [0xa7ba80]
mov ecx, dword [0xa7ba84]
mov edx, dword [0xa7ba88]
mov ebx, dword [esp + 0x1c4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov word [esp + 0x10], 0
call fcn.0067dca0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], ecx
mov dword [esp + 0x1d4], edx
mov byte [esp + 0x1d8], bl
add esp, 0x1c0
ret
xchg ebp, eax
cmp al, 7
xchg ebp, eax
jne 0x67c438
mov ecx, dword [esp + 0x1c4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x178]
xor eax, eax
call fcn.0046465a
mov byte [esp + 0x178], 3
mov ecx, dword [esp + 0x1c4]
mov ebx, dword [ecx]
mov ebp, dword [ebx]
mov eax, edx
mov edx, dword [ebx + 8]
mov esi, ecx
mov ecx, dword [ebx + 4]
inc ecx
cmp edx, ecx
jae 0x67c3a9
mov dword [esp + 0xb4], ebx
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x788da0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb4]
mov dword [edi + 8], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x67c392
mov dword [edi], eax
jmp 0x67c397
call fcn.004643b0
mov ebx, edi
mov esi, dword [esp + 0x1c4]
mov ebp, eax
mov eax, dword [esp + 0x88]
mov dword [ebx + 4], ecx
lea ecx, [ecx + ecx*2]
lea edi, [ebp + ecx*8 - 0x18]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x67c3cb
lea esi, [esp + 0x178]
call fcn.00464b34
jmp 0x67c3ef
lea eax, [0x788da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x178]
mov dword [esp + 8], eax
call fcn.00411480
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x1c4]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x67d478
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 1
mov dword [esp + 0x1cc], eax
shl eax, 1
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], eax
mov byte [esp + 0x1d8], 1
add esp, 0x1c0
ret
xchg ebp, eax
cmp al, 8
xchg ebp, eax
jne 0x67c57a
mov ecx, dword [esp + 0x1c4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x160]
xor eax, eax
call fcn.0046465a
mov byte [esp + 0x160], 3
mov ecx, dword [esp + 0x1c4]
mov ebx, dword [ecx]
mov ebp, dword [ebx]
mov eax, edx
mov edx, dword [ebx + 8]
mov esi, ecx
mov ecx, dword [ebx + 4]
inc ecx
cmp edx, ecx
jae 0x67c4eb
mov dword [esp + 0xb4], ebx
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x788da0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb4]
mov dword [edi + 8], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x67c4d4
mov dword [edi], eax
jmp 0x67c4d9
call fcn.004643b0
mov ebx, edi
mov esi, dword [esp + 0x1c4]
mov ebp, eax
mov eax, dword [esp + 0x88]
mov dword [ebx + 4], ecx
lea ecx, [ecx + ecx*2]
lea edi, [ebp + ecx*8 - 0x18]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x67c50d
lea esi, [esp + 0x160]
call fcn.00464b34
jmp 0x67c531
lea eax, [0x788da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x160]
mov dword [esp + 8], eax
call fcn.00411480
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x1c4]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x67d473
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 2
mov dword [esp + 0x1cc], eax
shl eax, 1
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], eax
mov byte [esp + 0x1d8], 1
add esp, 0x1c0
ret
mov ecx, dword [esp + 0x1c4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x148]
xor eax, eax
call fcn.0046465a
mov byte [esp + 0x148], 3
mov ecx, dword [esp + 0x1c4]
mov ebx, dword [ecx]
mov ebp, dword [ebx]
mov eax, edx
mov edx, dword [ebx + 8]
mov esi, ecx
mov ecx, dword [ebx + 4]
inc ecx
cmp edx, ecx
jae 0x67c622
mov dword [esp + 0xb4], ebx
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x788da0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb4]
mov dword [edi + 8], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x67c60b
mov dword [edi], eax
jmp 0x67c610
call fcn.004643b0
mov ebx, edi
mov esi, dword [esp + 0x1c4]
mov ebp, eax
mov eax, dword [esp + 0x88]
mov dword [ebx + 4], ecx
lea ecx, [ecx + ecx*2]
lea edi, [ebp + ecx*8 - 0x18]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x67c644
lea esi, [esp + 0x148]
call fcn.00464b34
jmp 0x67c668
lea eax, [0x788da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x148]
mov dword [esp + 8], eax
call fcn.00411480
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x1c4]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x67d46e
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 4
mov dword [esp + 0x1cc], eax
shl eax, 1
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], eax
mov byte [esp + 0x1d8], 1
add esp, 0x1c0
ret
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
ja 0x67cd56
xchg ebp, eax
cmp al, 0xb
xchg ebp, eax
jbe 0x67cadd
xchg ebp, eax
cmp al, 0xc
xchg ebp, eax
je 0x67c9a6
mov ecx, dword [esp + 0x1c4]
mov edx, dword [ecx]
mov ebp, dword [ebx + 0x30]
mov dword [esp + 0x88], ebp
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x84], edx
lea edi, [esp + 0xe8]
xor eax, eax
call fcn.0046465a
mov byte [esp + 0xe8], 2
mov ecx, dword [esp + 0x1c4]
mov esi, ebx
mov ebx, dword [ecx]
mov edi, ebp
mov ebp, dword [ebx]
mov edx, dword [ebx + 8]
mov ecx, dword [ebx + 4]
inc ecx
cmp edx, ecx
jae 0x67c786
mov dword [esp + 0xb4], ebx
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x788da0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb4]
mov dword [edi + 8], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x67c76d
mov dword [edi], eax
jmp 0x67c772
call fcn.004643b0
mov ebx, edi
mov esi, dword [esp + 0x1c8]
mov edi, dword [esp + 0x88]
mov ebp, eax
xor eax, eax
mov dword [ebx + 4], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ebp + ecx*8 - 0x18]
mov edx, dword [0xaab020]
test edx, edx
jne 0x67c7ae
mov edx, edi
mov edi, ecx
mov ebx, esi
lea esi, [esp + 0xe8]
call fcn.00464b34
jmp 0x67c7db
lea eax, [0x788da0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0xe8]
mov dword [esp + 8], eax
call fcn.00411480
xor eax, eax
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0x1c8]
mov ebp, dword [esp + 0x1c4]
mov esi, dword [ebp]
mov ecx, dword [esi + 4]
mov esi, dword [esi]
mov edi, dword [esp + 0x84]
cmp edi, ecx
jae 0x67d467
shl edx, 1
mov ecx, edi
lea edi, [edi + edi*2]
lea esi, [esi + edi*8 + 8]
mov dword [esi], edx
mov esi, dword [ebp]
inc edx
cmp dword [esi + 0x10], edx
jge 0x67c812
mov dword [esi + 0x10], edx
mov edx, dword [ebx + 8]
mov esi, dword [ebx + 4]
test edx, edx
jbe 0x67d45e
mov eax, dword [esi]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0067bed0
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c8]
mov edx, dword [edx + 0x30]
mov dword [esp + 0x88], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x80], ebx
nop
mov ebp, dword [esp + 8]
mov dword [esp + 0x7c], ebp
movzx esi, byte [esp + 0x14]
xchg esi, eax
mov byte [esp + 0x37], al
xchg esi, eax
mov ecx, dword [ecx + 4]
mov dword [esp + 0x78], ecx
lea edi, [esp + 0xd0]
xor eax, eax
call fcn.0046465a
mov byte [esp + 0xd0], 2
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edi, dword [ecx]
mov ebx, dword [ecx + 8]
mov esi, dword [ecx + 4]
inc esi
cmp ebx, esi
jae 0x67c904
mov dword [esp + 0xb4], ecx
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x788da0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb4]
mov dword [edi + 8], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x67c8e7
mov dword [edi], eax
jmp 0x67c8ec
call fcn.004643b0
mov edx, dword [esp + 0x88]
mov ebp, dword [esp + 0x7c]
mov esi, ecx
mov ecx, edi
mov edi, eax
mov eax, dword [esp + 0x1c4]
mov dword [ecx + 4], esi
lea ecx, [esi + esi*2]
lea edi, [edi + ecx*8 - 0x18]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x67c926
lea esi, [esp + 0xd0]
call fcn.00464b34
jmp 0x67c955
lea eax, [0x788da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xd0]
mov dword [esp + 8], eax
call fcn.00411480
mov eax, dword [esp + 0x1c4]
mov edx, dword [esp + 0x88]
mov ebp, dword [esp + 0x7c]
mov ebx, dword [eax]
mov ecx, dword [ebx + 4]
mov ebx, dword [ebx]
mov esi, dword [esp + 0x78]
cmp esi, ecx
jae 0x67d457
shl edx, 1
or edx, 1
lea edi, [esi + esi*2]
lea ebx, [ebx + edi*8 + 8]
mov dword [ebx], edx
mov ebx, dword [eax]
inc edx
cmp dword [ebx + 0x10], edx
jge 0x67c981
mov dword [ebx + 0x10], edx
mov edx, dword [esp + 0x84]
test edx, edx
je 0x67c990
test ebp, ebp
jne 0x67c99b
xor ebx, ebx
xor ecx, ecx
xor edx, edx
jmp 0x67d3b3
mov ebx, edx
shl edx, 1
mov edi, dword [eax]
jmp 0x67d36b
mov ecx, dword [esp + 0x1c4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x100]
xor eax, eax
call fcn.0046465a
mov byte [esp + 0x100], 3
mov ecx, dword [esp + 0x1c4]
mov ebx, dword [ecx]
mov ebp, dword [ebx]
mov eax, edx
mov edx, dword [ebx + 8]
mov esi, ecx
mov ecx, dword [ebx + 4]
inc ecx
cmp edx, ecx
jae 0x67ca4e
mov dword [esp + 0xb4], ebx
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x788da0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb4]
mov dword [edi + 8], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x67ca37
mov dword [edi], eax
jmp 0x67ca3c
call fcn.004643b0
mov ebx, edi
mov esi, dword [esp + 0x1c4]
mov ebp, eax
mov eax, dword [esp + 0x88]
mov dword [ebx + 4], ecx
lea ecx, [ecx + ecx*2]
lea edi, [ebp + ecx*8 - 0x18]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x67ca70
lea esi, [esp + 0x100]
call fcn.00464b34
jmp 0x67ca94
lea eax, [0x788da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x100]
mov dword [esp + 8], eax
call fcn.00411480
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x1c4]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x67d35b
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 0x20
mov dword [esp + 0x1cc], eax
shl eax, 1
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], eax
mov byte [esp + 0x1d8], 1
add esp, 0x1c0
ret
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
jne 0x67cc1f
mov ecx, dword [esp + 0x1c4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x130]
xor eax, eax
call fcn.0046465a
mov byte [esp + 0x130], 3
mov ecx, dword [esp + 0x1c4]
mov ebx, dword [ecx]
mov ebp, dword [ebx]
mov eax, edx
mov edx, dword [ebx + 8]
mov esi, ecx
mov ecx, dword [ebx + 4]
inc ecx
cmp edx, ecx
jae 0x67cb90
mov dword [esp + 0xb4], ebx
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x788da0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb4]
mov dword [edi + 8], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x67cb79
mov dword [edi], eax
jmp 0x67cb7e
call fcn.004643b0
mov ebx, edi
mov esi, dword [esp + 0x1c4]
mov ebp, eax
mov eax, dword [esp + 0x88]
mov dword [ebx + 4], ecx
lea ecx, [ecx + ecx*2]
lea edi, [ebp + ecx*8 - 0x18]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x67cbb2
lea esi, [esp + 0x130]
call fcn.00464b34
jmp 0x67cbd6
lea eax, [0x788da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x130]
mov dword [esp + 8], eax
call fcn.00411480
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x1c4]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x67d356
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 8
mov dword [esp + 0x1cc], eax
shl eax, 1
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], eax
mov byte [esp + 0x1d8], 1
add esp, 0x1c0
ret
mov ecx, dword [esp + 0x1c4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x118]
xor eax, eax
call fcn.0046465a
mov byte [esp + 0x118], 3
mov ecx, dword [esp + 0x1c4]
mov ebx, dword [ecx]
mov ebp, dword [ebx]
mov eax, edx
mov edx, dword [ebx + 8]
mov esi, ecx
mov ecx, dword [ebx + 4]
inc ecx
cmp edx, ecx
jae 0x67ccc7
mov dword [esp + 0xb4], ebx
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x788da0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb4]
mov dword [edi + 8], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x67ccb0
mov dword [edi], eax
jmp 0x67ccb5
call fcn.004643b0
mov ebx, edi
mov esi, dword [esp + 0x1c4]
mov ebp, eax
mov eax, dword [esp + 0x88]
mov dword [ebx + 4], ecx
lea ecx, [ecx + ecx*2]
lea edi, [ebp + ecx*8 - 0x18]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x67cce9
lea esi, [esp + 0x118]
call fcn.00464b34
jmp 0x67cd0d
lea eax, [0x788da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x118]
mov dword [esp + 8], eax
call fcn.00411480
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x1c4]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x67d351
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 0x10
mov dword [esp + 0x1cc], eax
shl eax, 1
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], eax
mov byte [esp + 0x1d8], 1
add esp, 0x1c0
ret
xchg ebp, eax
cmp al, 0xf
xchg ebp, eax
jbe 0x67cf79
xchg ebp, eax
cmp al, 0x10
xchg ebp, eax
je 0x67ced9
xchg ebp, eax
cmp al, 0x12
xchg ebp, eax
jne 0x67ceab
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
test ecx, ecx
je 0x67cd9e
mov dword [esp + 0x88], ecx
mov dword [esp + 0xb0], edx
xor eax, eax
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor edi, edi
jmp 0x67d1ff
mov ecx, dword [esp + 0x1c4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0xb8]
xor eax, eax
call fcn.0046465a
mov byte [esp + 0xb8], 6
mov ecx, dword [esp + 0x1c4]
mov ecx, dword [ecx]
mov ebx, dword [ecx]
mov ebp, dword [ecx + 8]
mov eax, edx
mov edx, dword [ecx + 4]
inc edx
cmp ebp, edx
jae 0x67ce3f
mov dword [esp + 0xb4], ecx
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x788da0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb4]
mov dword [edi + 8], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x67ce2d
mov dword [edi], eax
jmp 0x67ce32
call fcn.004643b0
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x88]
mov ecx, edi
mov dword [ecx + 4], edx
lea ecx, [edx + edx*2]
lea edi, [ebx + ecx*8 - 0x18]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x67ce61
lea esi, [esp + 0xb8]
call fcn.00464b34
jmp 0x67ce85
lea eax, [0x788da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xb8]
mov dword [esp + 8], eax
call fcn.00411480
mov eax, dword [esp + 0x88]
mov dword [esp + 0x1cc], eax
shl eax, 1
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], eax
mov byte [esp + 0x1d8], 1
add esp, 0x1c0
ret
xchg ebp, eax
cmp al, 0x13
xchg ebp, eax
jne 0x67d1c1
mov eax, dword [ebx + 4]
mov dword [esp + 0xac], eax
mov ecx, dword [ebx + 8]
mov dword [esp + 0x88], ecx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor edi, edi
jmp 0x67d194
mov edx, dword [ebx + 8]
mov ebp, dword [ebx + 4]
test edx, edx
jbe 0x67d0e0
mov eax, dword [ebp]
mov ecx, dword [esp + 0x1c4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0067bed0
mov eax, dword [esp + 0x1c8]
movzx eax, word [eax + 2]
test ax, 0x20
setne al
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
movzx ebp, byte [esp + 0x14]
mov esi, dword [esp + 0x1c4]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
xchg ebp, eax
mov byte [esp + 0x10], al
xchg ebp, eax
mov byte [esp + 0x14], al
call fcn.0067d860
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
movzx ebx, byte [esp + 0x24]
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], ecx
mov dword [esp + 0x1d4], edx
mov byte [esp + 0x1d8], bl
add esp, 0x1c0
ret
xchg ebp, eax
cmp al, 0xe
xchg ebp, eax
jne 0x67d024
mov edx, dword [ebx + 8]
mov ebp, dword [ebx + 4]
test edx, edx
jbe 0x67d0d7
mov eax, dword [ebp]
mov ecx, dword [esp + 0x1c4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0067bed0
mov eax, dword [esp + 0x1c8]
movzx eax, word [eax + 2]
test ax, 0x20
setne al
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
movzx ebp, byte [esp + 0x14]
mov esi, dword [esp + 0x1c4]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
xchg ebp, eax
mov byte [esp + 0x10], al
xchg ebp, eax
mov byte [esp + 0x14], al
call fcn.0067db80
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
movzx ebx, byte [esp + 0x24]
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], ecx
mov dword [esp + 0x1d4], edx
mov byte [esp + 0x1d8], bl
add esp, 0x1c0
ret
mov edx, dword [ebx + 8]
mov ebp, dword [ebx + 4]
test edx, edx
jbe 0x67d0ce
mov eax, dword [ebp]
mov ecx, dword [esp + 0x1c4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0067bed0
mov eax, dword [esp + 0x1c8]
movzx eax, word [eax + 2]
test ax, 0x20
setne al
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 8]
mov dword [esp + 0x3c], ebx
movzx ebp, byte [esp + 0x14]
xchg ebp, eax
mov byte [esp + 0x36], al
xchg ebp, eax
mov esi, dword [esp + 0x1c4]
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
xchg ebp, eax
mov byte [esp + 0x10], al
xchg ebp, eax
mov byte [esp + 0x14], al
call fcn.0067d9f0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x1cc], edx
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], ecx
movzx eax, byte [esp + 0x36]
mov byte [esp + 0x1d8], al
add esp, 0x1c0
ret
xor eax, eax
mov ecx, eax
call fcn.00464430
xor eax, eax
mov ecx, eax
call fcn.00464430
xor eax, eax
mov ecx, eax
call fcn.00464430
mov dword [esp + 0x58], ebx
mov dword [esp + 0x60], ebp
xchg edi, eax
mov byte [esp + 0x38], al
xchg edi, eax
mov dword [esp + 0x6c], esi
mov dword [esp + 0x84], edx
mov ecx, dword [eax + edx*4]
mov ebx, dword [esp + 0x1c4]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0067bed0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
movzx ebx, byte [esp + 0x14]
mov ebp, dword [esp + 0x1c4]
mov dword [esp], ebp
mov esi, dword [esp + 0x6c]
mov dword [esp + 4], esi
mov esi, dword [esp + 0x60]
mov dword [esp + 8], esi
mov esi, dword [esp + 0x58]
mov dword [esp + 0xc], esi
movzx esi, byte [esp + 0x38]
xchg esi, eax
mov byte [esp + 0x10], al
xchg esi, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
mov byte [esp + 0x20], bl
call fcn.0067d650
mov eax, dword [esp + 0x84]
lea edx, [eax + 1]
mov esi, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov ebx, dword [esp + 0x2c]
movzx edi, byte [esp + 0x30]
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0x88]
cmp edx, ecx
jl 0x67d0e9
mov dword [esp + 0x1cc], esi
mov dword [esp + 0x1d0], ebp
mov dword [esp + 0x1d4], ebx
xchg edi, eax
mov byte [esp + 0x1d8], al
xchg edi, eax
add esp, 0x1c0
ret
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x843ba4]
mov dword [esp + 4], eax
call fcn.00436340
mov edx, dword [esp + 0x44]
inc edx
mov esi, eax
mov edi, ecx
mov ecx, dword [esp + 0x88]
mov eax, edx
mov edx, dword [esp + 0xb0]
mov ecx, ebx
mov ebx, ebp
mov ebp, ecx
mov ecx, dword [esp + 0x88]
cmp eax, ecx
jge 0x67d2cb
mov dword [esp + 0x44], eax
mov edi, dword [edx + eax*4]
test eax, eax
jne 0x67d23e
mov eax, dword [esp + 0x1c4]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0067bed0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
movzx ebx, byte [esp + 0x14]
mov ebp, eax
mov eax, ecx
mov ecx, edx
jmp 0x67d1d9
xchg ebp, eax
mov byte [esp + 0x39], al
xchg ebp, eax
mov dword [esp + 0x64], esi
mov dword [esp + 0x70], ebx
mov eax, dword [esp + 0x1c4]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0067bed0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 8]
movzx ebx, byte [esp + 0x14]
mov ebp, dword [esp + 0x70]
test ebp, ebp
je 0x67d27c
test edx, edx
jne 0x67d289
xor ecx, ecx
xor ebp, ebp
xor eax, eax
xor ebx, ebx
jmp 0x67d1d9
mov byte [esp + 0x3b], bl
mov edi, dword [esp + 0x1c4]
mov esi, edi
mov edi, dword [edi]
mov dword [esp + 0x9c], edi
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x94]
jmp 0x67d30b
movzx edx, byte [esp + 0x39]
test dl, dl
jne 0x67d1d9
xor ebx, ebx
jmp 0x67d1d9
mov dword [esp + 0x1cc], ebx
mov dword [esp + 0x1d0], esi
mov dword [esp + 0x1d4], edi
xchg ebp, eax
mov byte [esp + 0x1d8], al
xchg ebp, eax
add esp, 0x1c0
ret
mov edi, dword [esp + 0x9c]
movzx ebx, byte [esp + 0x3b]
mov esi, dword [esp + 0x1c4]
mov dword [esp + 0x48], ebp
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x48]
test esi, esi
je 0x67d2b7
mov ebp, dword [edi]
mov ebx, dword [edi + 4]
shr esi, 1
cmp ebx, esi
jbe 0x67d348
lea ebx, [esi + esi*2]
lea esi, [ebp + ebx*8]
mov edi, dword [esp + 0x48]
test edi, 1
jne 0x67d33b
lea ebx, [ebp + ebx*8 + 4]
mov ebp, dword [ebx]
mov dword [ebx], edx
jmp 0x67d2f0
mov esi, dword [esi + 8]
lea ebx, [ebp + ebx*8 + 8]
mov dword [ebx], edx
mov ebp, esi
jmp 0x67d2f0
mov eax, esi
mov ecx, ebx
call fcn.00464440
call fcn.00464440
call fcn.00464440
call fcn.00464440
mov esi, ecx
mov edx, ebx
mov ebx, dword [esp + 0x84]
test edx, edx
je 0x67d3a7
mov dword [esp + 0x50], edx
mov ecx, esi
mov esi, dword [edi]
mov ebx, dword [edi + 4]
shr edx, 1
cmp ebx, edx
jbe 0x67d44e
lea edx, [edx + edx*2]
mov ebx, dword [esp + 0x50]
test ebx, 1
jne 0x67d39d
lea edx, [esi + edx*8 + 4]
mov ebx, dword [edx]
mov dword [edx], ebp
jmp 0x67d360
lea edx, [esi + edx*8 + 8]
mov ebx, dword [edx]
mov dword [edx], ebp
jmp 0x67d360
mov ecx, dword [esp + 0x80]
movzx edx, byte [esp + 0x37]
test ebx, ebx
je 0x67d3c6
test esi, esi
je 0x67d3c6
mov ebp, dword [eax]
mov dword [esp + 0xa0], ebp
jmp 0x67d3fe
xor eax, eax
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x1cc], ecx
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], eax
mov byte [esp + 0x1d8], dl
add esp, 0x1c0
ret
mov ebp, dword [esp + 0xa0]
mov edx, eax
mov edi, ebx
mov ebx, ecx
mov ecx, edi
test ecx, ecx
je 0x67d43d
mov dword [esp + 0x4c], ecx
mov edi, dword [ebp]
mov eax, edx
mov edx, dword [ebp + 4]
shr ecx, 1
cmp edx, ecx
jbe 0x67d445
lea edx, [ecx + ecx*2]
mov ecx, ebx
lea ebx, [edi + edx*8]
mov ebp, dword [esp + 0x4c]
test ebp, 1
jne 0x67d432
lea edx, [edi + edx*8 + 4]
mov ebx, dword [edx]
mov dword [edx], esi
jmp 0x67d3ef
mov ebx, dword [ebx + 8]
lea edx, [edi + edx*8 + 8]
mov dword [edx], esi
jmp 0x67d3ef
shl esi, 1
mov eax, esi
mov ecx, ebx
jmp 0x67d3cc
mov eax, ecx
mov ecx, edx
call fcn.00464440
mov eax, edx
mov ecx, ebx
call fcn.00464440
mov eax, esi
call fcn.00464440
xor eax, eax
mov ecx, eax
call fcn.00464430
mov eax, edi
call fcn.00464440
call fcn.00464440
call fcn.00464440
call fcn.00464440
mov ebx, dword [esp + 0x1c8]
mov eax, dword [esp + 0x88]
mov edi, dword [esp + 0x1c4]
mov eax, dword [esp + 0x84]
mov edi, esi
mov dword [esp + 0x5c], edx
mov esi, dword [esp + 0x1c4]
mov edx, ecx
mov ecx, ebp
mov ebp, dword [esp + 0x88]
cmp eax, ebp
jge 0x67d5a1
xchg edi, eax
mov byte [esp + 0x3a], al
xchg edi, eax
mov edi, dword [ebx + 0x1c]
mov ebp, dword [ebx + 0x14]
mov dword [esp + 0xa8], ebp
lea ebp, [eax + 1]
cmp edi, ebp
jb 0x67d632
cmp eax, ebp
ja 0x67d62b
mov dword [esp + 0x40], eax
mov dword [esp + 0x84], ebp
mov dword [esp + 0x74], ecx
mov dword [esp + 0x68], edx
movzx ecx, word [ebx + 2]
mov dword [esp], esi
sub edi, eax
mov edx, edi
xchg edi, ebx
neg ebx
xchg edi, ebx
shl eax, 2
sar edi, 0x1f
and eax, edi
mov edi, dword [esp + 0xa8]
add eax, edi
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], edx
mov word [esp + 0x10], cx
call fcn.0067dca0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov ebp, dword [esp + 0x40]
test ebp, ebp
jne 0x67d550
mov ebp, eax
mov esi, ebx
jmp 0x67d47d
mov ebp, dword [esp + 0x74]
test ebp, ebp
je 0x67d55c
test eax, eax
jne 0x67d569
xor ecx, ecx
xor ebp, ebp
xor edx, edx
xor esi, esi
jmp 0x67d47d
mov byte [esp + 0x3b], bl
mov esi, dword [esp + 0x1c4]
mov edi, dword [esi]
mov dword [esp + 0xa4], edi
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x8c]
jmp 0x67d5e5
movzx esi, byte [esp + 0x3a]
and esi, ebx
jmp 0x67d47d
mov dword [esp + 0x1cc], ecx
mov dword [esp + 0x1d0], edx
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1d4], eax
xchg edi, eax
mov byte [esp + 0x1d8], al
xchg edi, eax
add esp, 0x1c0
ret
mov edi, dword [esp + 0xa4]
movzx ebx, byte [esp + 0x3b]
mov esi, dword [esp + 0x1c4]
mov dword [esp + 0x54], ebp
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x54]
test esi, esi
je 0x67d595
mov ebp, dword [edi]
mov ebx, dword [edi + 4]
shr esi, 1
cmp ebx, esi
jbe 0x67d622
lea ebx, [esi + esi*2]
lea esi, [ebp + ebx*8]
mov edi, dword [esp + 0x54]
test edi, 1
jne 0x67d615
lea ebx, [ebp + ebx*8 + 4]
mov ebp, dword [ebx]
mov dword [ebx], eax
jmp 0x67d5ca
mov esi, dword [esi + 8]
lea ebx, [ebp + ebx*8 + 8]
mov dword [ebx], eax
mov ebp, esi
jmp 0x67d5ca
mov eax, esi
mov ecx, ebx
call fcn.00464440
mov ecx, ebp
call fcn.00464490
mov ecx, ebp
mov edx, edi
call fcn.00464470
nop
call fcn.00462fa0
jmp fcn.0067bed0