Function at 0x67a750
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xe8]
cmp eax, dword [ecx + 8]
jbe 0x67ba18
sub esp, 0x168
mov ecx, dword [esp + 0x170]
movzx edx, byte [ecx]
cmp dl, 9
ja 0x67af48
cmp dl, 4
ja 0x67ab1b
cmp dl, 2
jbe 0x67a9f6
cmp dl, 3
jne 0x67a9ac
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x67a8b6
mov dword [esp + 0x50], edx
mov eax, dword [esp + 0x16c]
xor ebx, ebx
xor ebp, ebp
xor esi, esi
jmp 0x67a7eb
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x16c]
mov ebx, dword [esp + 0x170]
mov ebp, dword [esp + 0x4c]
mov edx, edi
mov ebx, ebp
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x170]
cmp ebx, edx
jge 0x67a8a1
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x34], esi
mov edi, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
lea esi, [ebx + 1]
test esi, esi
jl 0x67b9f7
cmp ebx, esi
ja 0x67b9f7
cmp esi, edi
ja 0x67b9f7
mov dword [esp + 0x20], ebx
mov dword [esp + 0x4c], esi
movzx edx, word [ecx + 2]
mov word [esp + 0x10], dx
mov dword [esp], eax
sub edi, ebx
shl ebx, 2
mov esi, edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and ebx, edi
add ebx, ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], 1
mov dword [esp + 0xc], esi
call fcn.0067bf80
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x20]
test edx, edx
je 0x67a7bf
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov ebx, dword [esp + 0x34]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.0067ba30
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
jmp 0x67a7bf
mov dword [esp + 0x174], esi
mov dword [esp + 0x178], ebp
add esp, 0x168
ret
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0x138]
xor eax, eax
call fcn.0044cd1a
mov byte [esp + 0x138], 6
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 4]
mov eax, edx
mov edx, dword [ecx]
mov esi, ecx
lea ecx, [ebp + 1]
cmp ecx, ebx
jg 0x67a955
lea ecx, [ebp + 1]
mov dword [esi + 4], ecx
lea ecx, [ebp + ebp*2]
lea edi, [edx + ecx*8]
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x67a932
lea esi, [esp + 0x138]
call fcn.0044d1f4
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x138]
mov dword [esp + 8], eax
call fcn.0040f650
mov eax, dword [esp + 0x50]
jmp 0x67a91b
mov dword [esp + 0x5c], esi
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00438d80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xbc7270]
test edx, edx
jne 0x67a9a5
mov dword [edi], eax
mov esi, edi
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x50]
jmp 0x67a8f8
call fcn.0044cc20
jmp 0x67a996
mov eax, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x14]
movzx ecx, word [ecx + 2]
mov word [esp + 0x10], cx
mov ecx, dword [esp + 0x16c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.0067bf80
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
cmp dl, 1
je 0x67aafe
cmp dl, 2
jne 0x67b9fe
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0x150]
xor eax, eax
call fcn.0044cd1a
mov byte [esp + 0x150], 6
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 4]
mov eax, edx
mov edx, dword [ecx]
mov esi, ecx
lea ecx, [ebp + 1]
cmp ecx, ebx
jg 0x67aaa7
lea ecx, [ebp + 1]
mov dword [esi + 4], ecx
lea ecx, [ebp + ebp*2]
lea edi, [edx + ecx*8]
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x67aa84
lea esi, [esp + 0x150]
call fcn.0044d1f4
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x150]
mov dword [esp + 8], eax
call fcn.0040f650
mov eax, dword [esp + 0x50]
jmp 0x67aa6d
mov dword [esp + 0x5c], esi
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00438d80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xbc7270]
test edx, edx
jne 0x67aaf7
mov dword [edi], eax
mov esi, edi
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x50]
jmp 0x67aa4a
call fcn.0044cc20
jmp 0x67aae8
mov dword [esp + 0x174], 0
mov dword [esp + 0x178], 0
add esp, 0x168
ret
cmp dl, 6
ja 0x67abcb
cmp dl, 5
jne 0x67ab7a
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov eax, dword [0xbaeb98]
mov ecx, dword [0xbaeb94]
mov edx, dword [0xbaeb90]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov word [esp + 0x10], 0
call fcn.0067bf80
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov eax, dword [0xbaeb88]
mov ecx, dword [0xbaeb84]
mov edx, dword [0xbaeb80]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov word [esp + 0x10], 0
call fcn.0067bf80
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
cmp dl, 7
jne 0x67acf9
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0x120]
xor eax, eax
call fcn.0044cd1a
mov byte [esp + 0x120], 3
mov ecx, dword [esp + 0x16c]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ebx, ecx
jg 0x67ac9d
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
lea ecx, [ebp + ebp*2]
lea edi, [edx + ecx*8]
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x67ac7a
lea esi, [esp + 0x120]
call fcn.0044d1f4
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
cmp eax, edx
jae 0x67b9f0
lea edx, [eax + eax*2]
shl edx, 3
mov dword [ecx + edx + 8], 1
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x120]
mov dword [esp + 8], eax
call fcn.0040f650
mov eax, dword [esp + 0x50]
jmp 0x67ac3f
mov dword [esp + 0x5c], edi
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00438d80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xbc7270]
test edx, edx
jne 0x67acf2
mov dword [edi], eax
mov esi, dword [esp + 0x16c]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x50]
jmp 0x67ac1c
call fcn.0044cc20
jmp 0x67acde
cmp dl, 8
jne 0x67ae24
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0x108]
xor eax, eax
call fcn.0044cd1a
mov byte [esp + 0x108], 3
mov ecx, dword [esp + 0x16c]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 8]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 4]
mov edi, ebx
lea ebx, [ecx + 1]
cmp ebx, ebp
jg 0x67adca
lea ebx, [ecx + 1]
mov dword [edi + 4], ebx
lea ecx, [ecx + ecx*2]
lea edi, [edx + ecx*8]
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x67ada7
lea esi, [esp + 0x108]
call fcn.0044d1f4
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
cmp eax, edx
jae 0x67b9e9
lea edx, [eax + eax*2]
shl edx, 3
mov dword [ecx + edx + 8], 2
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x108]
mov dword [esp + 8], eax
call fcn.0040f650
mov eax, dword [esp + 0x50]
jmp 0x67ad6c
mov dword [esp + 0x5c], edi
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00438d80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xbc7270]
test edx, edx
jne 0x67ae1d
mov dword [edi], eax
mov esi, dword [esp + 0x16c]
mov edx, eax
mov eax, dword [esp + 0x50]
jmp 0x67ad4a
call fcn.0044cc20
jmp 0x67ae0b
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0xf0]
xor eax, eax
call fcn.0044cd1a
mov byte [esp + 0xf0], 3
mov ecx, dword [esp + 0x16c]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 8]
mov eax, edx
mov edx, dword [ebx + 4]
mov esi, ecx
mov ecx, dword [ebx]
mov edi, ebx
lea ebx, [edx + 1]
cmp ebx, ebp
jg 0x67aeec
lea ebx, [edx + 1]
mov dword [edi + 4], ebx
lea edx, [edx + edx*2]
lea edi, [ecx + edx*8]
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x67aec9
lea esi, [esp + 0xf0]
call fcn.0044d1f4
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
cmp eax, edx
jae 0x67b9e2
lea edx, [eax + eax*2]
shl edx, 3
mov dword [ecx + edx + 8], 4
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xf0]
mov dword [esp + 8], eax
call fcn.0040f650
mov eax, dword [esp + 0x50]
jmp 0x67ae8e
mov dword [esp + 0x5c], edi
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00438d80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xbc7270]
test edx, edx
jne 0x67af41
mov dword [edi], eax
mov esi, dword [esp + 0x16c]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x50]
jmp 0x67ae6c
call fcn.0044cc20
jmp 0x67af2d
cmp dl, 0xd
jbe 0x67b326
cmp dl, 0xf
jbe 0x67b235
cmp dl, 0x10
je 0x67b1bf
cmp dl, 0x12
jne 0x67b11f
mov edx, dword [ecx + 4]
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x67b035
mov dword [esp + 0x50], ecx
mov dword [esp + 0x58], edx
xor eax, eax
xor ebx, ebx
xor ebp, ebp
jmp 0x67af9d
mov esi, dword [esp + 0x24]
inc esi
mov edx, dword [esp + 0x58]
mov ebx, eax
mov ebp, ecx
mov ecx, dword [esp + 0x50]
mov eax, esi
cmp eax, ecx
jge 0x67b020
mov dword [esp + 0x24], eax
mov esi, dword [edx + eax*4]
test eax, eax
jne 0x67afc9
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov dword [esp + 4], esi
call fcn.0067a750
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
jmp 0x67af8a
mov dword [esp + 0x30], ebx
mov dword [esp + 0x38], ebp
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov dword [esp + 4], esi
call fcn.0067a750
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov ebx, dword [esp + 0x38]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.0067ba30
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
jmp 0x67af8a
mov dword [esp + 0x174], ebp
mov dword [esp + 0x178], ebx
add esp, 0x168
ret
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0x60]
xor eax, eax
call fcn.0044cd1a
mov byte [esp + 0x60], 6
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 4]
mov eax, edx
mov edx, dword [ecx]
mov esi, ecx
lea ecx, [ebp + 1]
cmp ecx, ebx
jg 0x67b0c8
lea ecx, [ebp + 1]
mov dword [esi + 4], ecx
lea ecx, [ebp + ebp*2]
lea edi, [edx + ecx*8]
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x67b0a8
lea esi, [esp + 0x60]
call fcn.0044d1f4
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0040f650
mov eax, dword [esp + 0x50]
jmp 0x67b091
mov dword [esp + 0x5c], esi
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00438d80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xbc7270]
test edx, edx
jne 0x67b118
mov dword [edi], eax
mov esi, edi
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x50]
jmp 0x67b071
call fcn.0044cc20
jmp 0x67b109
cmp dl, 0x13
jne 0x67b9fe
mov eax, dword [ecx + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [ecx + 4]
mov dword [esp + 0x54], ecx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
jmp 0x67b1a6
mov dword [esp + 0x28], ebx
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x4c], edx
mov eax, dword [ecx + edx*4]
mov ebx, dword [esp + 0x16c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0067a750
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x28]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.0067baa0
mov eax, dword [esp + 0x4c]
lea edx, [eax + 1]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
cmp edx, eax
jl 0x67b13e
mov dword [esp + 0x174], ebp
mov dword [esp + 0x178], ebx
add esp, 0x168
ret
mov eax, dword [ecx + 4]
mov edx, dword [ecx + 8]
test edx, edx
jbe 0x67b9a3
mov eax, dword [eax]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
call fcn.0067a750
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x170]
movzx edx, word [edx + 2]
test dx, 0x20
setne dl
mov byte [esp + 0xc], dl
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0067bc40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
cmp dl, 0xe
jne 0x67b2b0
mov eax, dword [ecx + 4]
mov edx, dword [ecx + 8]
test edx, edx
jbe 0x67b9b1
mov eax, dword [eax]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
call fcn.0067a750
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x170]
movzx edx, word [edx + 2]
test dx, 0x20
setne dl
mov byte [esp + 0xc], dl
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0067bdb0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
mov eax, dword [ecx + 4]
mov edx, dword [ecx + 8]
test edx, edx
jbe 0x67b9aa
mov eax, dword [eax]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
call fcn.0067a750
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x170]
movzx edx, word [edx + 2]
test dx, 0x20
setne dl
mov byte [esp + 0xc], dl
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0067bf20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
cmp dl, 0xb
ja 0x67b582
cmp dl, 0xa
jne 0x67b45d
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0xd8]
xor eax, eax
call fcn.0044cd1a
mov byte [esp + 0xd8], 3
mov ecx, dword [esp + 0x16c]
mov ebx, dword [ecx]
mov ebp, dword [ebx]
mov eax, edx
mov edx, dword [ebx + 4]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [edx + 1]
cmp ebx, ecx
jg 0x67b401
lea ecx, [edx + 1]
mov dword [edi + 4], ecx
lea ecx, [edx + edx*2]
lea edi, [ebp + ecx*8]
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x67b3de
lea esi, [esp + 0xd8]
call fcn.0044d1f4
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
cmp eax, ecx
jae 0x67b9db
lea ecx, [eax + eax*2]
shl ecx, 3
mov dword [edx + ecx + 8], 8
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xd8]
mov dword [esp + 8], eax
call fcn.0040f650
mov eax, dword [esp + 0x50]
jmp 0x67b3a3
mov dword [esp + 0x5c], edi
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00438d80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xbc7270]
test edx, edx
jne 0x67b456
mov dword [edi], eax
mov esi, dword [esp + 0x16c]
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x50]
jmp 0x67b380
call fcn.0044cc20
jmp 0x67b442
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0xc0]
xor eax, eax
call fcn.0044cd1a
mov byte [esp + 0xc0], 3
mov ecx, dword [esp + 0x16c]
mov ebx, dword [ecx]
mov ebp, dword [ebx]
mov eax, edx
mov edx, dword [ebx + 4]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [edx + 1]
cmp ebx, ecx
jg 0x67b526
lea ecx, [edx + 1]
mov dword [edi + 4], ecx
lea ecx, [edx + edx*2]
lea edi, [ebp + ecx*8]
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x67b503
lea esi, [esp + 0xc0]
call fcn.0044d1f4
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
cmp eax, edx
jae 0x67b9d4
lea edx, [eax + eax*2]
shl edx, 3
mov dword [ecx + edx + 8], 0x10
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xc0]
mov dword [esp + 8], eax
call fcn.0040f650
mov eax, dword [esp + 0x50]
jmp 0x67b4c8
mov dword [esp + 0x5c], edi
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00438d80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xbc7270]
test edx, edx
jne 0x67b57b
mov dword [edi], eax
mov esi, dword [esp + 0x16c]
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x50]
jmp 0x67b4a5
call fcn.0044cc20
jmp 0x67b567
cmp dl, 0xc
jne 0x67b6b0
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0xa8]
xor eax, eax
call fcn.0044cd1a
mov byte [esp + 0xa8], 3
mov ecx, dword [esp + 0x16c]
mov ebx, dword [ecx]
mov ebp, dword [ebx]
mov eax, edx
mov edx, dword [ebx + 4]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [edx + 1]
cmp ebx, ecx
jg 0x67b654
lea ecx, [edx + 1]
mov dword [edi + 4], ecx
lea ecx, [edx + edx*2]
mov edx, dword [0xbc7270]
lea edi, [ebp + ecx*8]
test edx, edx
jne 0x67b631
lea esi, [esp + 0xa8]
call fcn.0044d1f4
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
cmp eax, edx
jae 0x67b9cd
lea edx, [eax + eax*2]
shl edx, 3
mov dword [ecx + edx + 8], 0x20
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.0040f650
mov eax, dword [esp + 0x50]
jmp 0x67b5f6
mov dword [esp + 0x5c], edi
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00438d80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xbc7270]
test edx, edx
jne 0x67b6a9
mov dword [edi], eax
mov esi, dword [esp + 0x16c]
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x50]
jmp 0x67b5d3
call fcn.0044cc20
jmp 0x67b695
mov edx, dword [esp + 0x16c]
mov ebx, dword [edx]
mov ebp, dword [ecx + 0x30]
mov dword [esp + 0x50], ebp
mov ebx, dword [ebx + 4]
mov dword [esp + 0x4c], ebx
lea edi, [esp + 0x90]
xor eax, eax
call fcn.0044cd1a
mov byte [esp + 0x90], 2
mov ecx, dword [edx]
mov dword [esp + 0x5c], ecx
mov esi, ebp
mov ebp, dword [ecx + 4]
mov edi, ebx
mov ebx, dword [ecx]
mov edx, dword [ecx + 8]
lea ecx, [ebp + 1]
cmp ecx, edx
jg 0x67b94c
lea ecx, [ebp + 1]
mov edx, dword [esp + 0x5c]
mov dword [edx + 4], ecx
lea ecx, [ebp + ebp*2]
mov edx, dword [0xbc7270]
lea ecx, [ebx + ecx*8]
test edx, edx
jne 0x67b920
mov edx, edi
mov edi, ecx
mov ebx, esi
lea esi, [esp + 0x90]
call fcn.0044d1f4
mov ecx, dword [esp + 0x16c]
mov ebp, dword [ecx]
mov esi, dword [ebp + 4]
mov ebp, dword [ebp]
cmp edx, esi
jae 0x67b9c6
shl ebx, 1
lea esi, [edx + edx*2]
shl esi, 3
mov dword [ebp + esi + 8], ebx
mov ebp, dword [ecx]
mov esi, dword [ebp + 0x10]
inc ebx
cmp esi, ebx
jge 0x67b75b
mov dword [ebp + 0x10], ebx
mov ebx, dword [esp + 0x170]
mov ebp, dword [ebx + 4]
mov esi, dword [ebx + 8]
test esi, esi
jbe 0x67b9bf
mov eax, dword [ebp]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0067a750
mov eax, dword [esp + 0x16c]
mov ecx, dword [eax]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x48], edx
mov ebx, dword [esp + 8]
mov dword [esp + 0x44], ebx
mov ebp, dword [esp + 0x170]
mov ebp, dword [ebp + 0x30]
mov dword [esp + 0x50], ebp
mov ecx, dword [ecx + 4]
mov dword [esp + 0x40], ecx
lea edi, [esp + 0x78]
mov esi, eax
xor eax, eax
call fcn.0044cd1a
mov byte [esp + 0x78], 2
mov eax, dword [esi]
mov ecx, dword [eax + 8]
mov edi, dword [eax + 4]
mov edx, dword [eax]
lea ebx, [edi + 1]
cmp ebx, ecx
jg 0x67b8c2
lea ecx, [edi + 1]
mov dword [eax + 4], ecx
lea eax, [edi + edi*2]
mov ecx, dword [0xbc7270]
lea edi, [edx + eax*8]
test ecx, ecx
jne 0x67b898
mov eax, esi
lea esi, [esp + 0x78]
call fcn.0044d1f4
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
mov ebx, dword [esp + 0x40]
cmp ebx, edx
jae 0x67b9b8
shl ebp, 1
or ebp, 1
lea edx, [ebx + ebx*2]
shl edx, 3
mov dword [ecx + edx + 8], ebp
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
inc ebp
cmp edx, ebp
jge 0x67b828
mov dword [ecx + 0x10], ebp
mov dword [esp], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
shl ecx, 1
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x10], ecx
call fcn.0067ba30
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
shl eax, 1
mov dword [esp + 0x10], eax
call fcn.0067ba30
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x78]
mov dword [esp + 8], eax
call fcn.0040f650
mov eax, dword [esp + 0x16c]
mov ebp, dword [esp + 0x50]
jmp 0x67b7f9
mov dword [esp + 0x5c], eax
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00438d80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xbc7270]
test edx, edx
jne 0x67b919
mov dword [edi], eax
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x16c]
mov edx, eax
mov eax, edi
mov edi, ecx
jmp 0x67b7d4
call fcn.0044cc20
jmp 0x67b903
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x90]
mov dword [esp + 8], eax
call fcn.0040f650
xor eax, eax
mov edx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
jmp 0x67b72b
lea eax, [0x7a67c0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00438d80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xbc7270]
test edx, edx
jne 0x67b99c
mov dword [edi], eax
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x4c]
mov ebp, ecx
mov ebx, eax
xor eax, eax
jmp 0x67b6fa
call fcn.0044cc20
jmp 0x67b989
call fcn.00426630
ud2
call fcn.00426630
ud2
call fcn.00426630
ud2
call fcn.00426630
ud2
call fcn.00426630
ud2
call fcn.00426630
ud2
call fcn.00426630
ud2
call fcn.00426630
ud2
call fcn.00426630
ud2
call fcn.00426630
ud2
call fcn.00426630
ud2
call fcn.00426630
ud2
call fcn.00426730
ud2
lea eax, [0x771de0]
mov dword [esp], eax
lea eax, [0x8f77a8]
mov dword [esp + 4], eax
call fcn.00427510
ud2
call fcn.0044b4c0
jmp fcn.0067a750