Function at 0x67ae20
Capabilities:
Check for software breakpoints
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xa8]
cmp eax, dword [ecx + 8]
jbe 0x67bf71
sub esp, 0x128
mov eax, dword [esp + 0x12c]
movzx ecx, byte [eax + 8]
test cl, cl
jne 0x67bf6a
mov byte [eax + 8], 1
mov ecx, dword [eax]
mov dword [esp + 0x5c], ecx
mov edx, dword [ecx]
mov edx, dword [edx]
mov dword [esp], edx
call fcn.00681af0
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax + 4]
movzx edx, byte [esp + 4]
mov ebx, dword [ecx]
cmp dword [ecx + 4], 4
jne 0x67bf63
cmp dword [ebx], 0x44414548
sete cl
mov byte [esp + 0x36], dl
mov byte [esp + 0x37], cl
mov ebx, dword [esp + 0x12c]
mov ebp, dword [ebx + 4]
test ebp, ebp
je 0x67bf5b
mov dword [esp + 0x68], ebp
mov dword [esp + 0x6c], 0
mov dword [esp + 0x94], 0
mov byte [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
lea ecx, [0x69aa20]
mov dword [esp + 0x94], ecx
setne cl
mov byte [esp + 0x98], cl
mov dword [esp + 0x9c], ebp
lea ecx, [esp + 0x6c]
mov dword [esp + 0xa0], ecx
lea edi, [esp + 0xc8]
xor eax, eax
call fcn.00460de4
mov ecx, dword [ebx + 4]
mov dword [esp + 0x88], ecx
lea edi, [esp + 0xf8]
call fcn.00460de4
lea ecx, [0xb6a860]
mov dword [esp], ecx
mov edx, dword [esp + 0x88]
mov dword [esp + 4], edx
lea edx, [esp + 0xf8]
mov dword [esp + 8], edx
call fcn.0040d9f0
xor eax, eax
jmp 0x67af69
mov byte [esp + 0x34], al
lea ecx, [esp + 0xf8]
mov dword [esp], ecx
call fcn.0040dc60
movzx eax, byte [esp + 0x34]
mov byte [esp + 0x34], al
mov ecx, dword [esp + 0xf8]
test ecx, ecx
je 0x67b00c
mov edx, dword [ecx]
mov dword [esp + 0x64], edx
mov ecx, dword [ecx + 4]
mov dword [esp + 0x48], ecx
cmp ecx, 8
jge 0x67afde
xor ebx, ebx
test bl, bl
je 0x67af51
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x67afc8
lea eax, [0xab48e0]
mov dword [esp], eax
mov ebx, dword [esp + 0x6c]
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.00410d60
mov eax, dword [esp + 0x10]
mov byte [eax], 1
mov eax, 1
jmp 0x67af51
call fcn.0040c7a0
mov eax, dword [esp]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x64]
jmp 0x67af9c
mov dword [esp], edx
lea eax, [0xb93592]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00402a10
movzx ebx, byte [esp + 0xc]
movzx eax, byte [esp + 0x34]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x64]
jmp 0x67af90
mov eax, dword [esp + 0x12c]
mov ecx, dword [eax + 4]
lea edx, [0xb6a860]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [0xb922e8]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 7
call fcn.00410690
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov dword [esp + 0x84], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x54], eax
xor edx, edx
movzx ebx, byte [esp + 0x34]
jmp 0x67b0c4
mov dword [esp + 0x50], edx
lea eax, [ecx + edx*8]
mov ebx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
lea ebp, [0x6a4900]
mov dword [esp + 0x8c], ebp
mov esi, dword [esp + 0x12c]
mov edi, dword [esi]
mov dword [esp + 0x90], edi
mov dword [esp], ebx
mov dword [esp + 4], eax
lea eax, [esp + 0x8c]
mov dword [esp + 8], eax
call fcn.0067bf80
mov eax, dword [esp + 0x50]
lea edx, [eax + 1]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x84]
mov ebx, 1
cmp edx, eax
jl 0x67b057
mov byte [esp + 0x34], bl
lea eax, [0xb6a860]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
lea edx, [0xb9b63e]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x11
call fcn.00410690
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test eax, eax
jle 0x67bf52
mov eax, dword [ecx + 4]
mov ecx, dword [ecx]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x40], eax
mov edx, dword [esp + 0x5c]
lea ebx, [edx + 0x60]
mov dword [esp], ebx
call fcn.00465b50
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x40]
test ecx, ecx
test eax, eax
je 0x67bf4b
movzx eax, byte [esp + 0x34]
test al, al
je 0x67bec9
xor eax, eax
test al, al
je 0x67beb8
movzx eax, byte [esp + 0x37]
test al, al
je 0x67beac
mov edx, dword [esp + 0x134]
test edx, edx
jle 0x67b1cc
mov eax, dword [esp + 0x5c]
mov dword [eax + 0x44], edx
mov ecx, edx
sar edx, 0x1f
mov dword [eax + 0x48], edx
mov ebx, dword [esp + 0x12c]
mov ebp, dword [ebx]
test byte [ebp], al
add ebp, 0x81
mov dword [esp], ebp
mov dword [esp + 4], 0
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 0xa
call fcn.004c4f90
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xf4], edx
mov eax, dword [esp + 0x5c]
movzx ecx, byte [eax + 0x16]
test cl, cl
je 0x67bea2
movzx ecx, byte [esp + 0x36]
test cl, cl
jne 0x67bddb
cmp dword [eax + 0x44], 0xffffffff
setne dl
cmp dword [eax + 0x48], 0xffffffff
setne bl
or edx, ebx
mov byte [esp + 0x39], dl
movzx ebx, byte [eax + 0x16]
test bl, bl
je 0x67bdb1
movzx ebx, byte [esp + 0x37]
test bl, bl
je 0x67bd82
lea eax, [0xb6a860]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
lea edx, [0xb94f90]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xa
call fcn.004109e0
movzx eax, byte [esp + 0x14]
test al, al
je 0x67bd65
lea eax, [0xb6a860]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
lea edx, [0xb94f90]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xa
call fcn.00410690
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test eax, eax
jle 0x67bd5c
mov eax, dword [ecx + 4]
mov ecx, dword [ecx]
cmp eax, 5
jne 0x67bd46
cmp dword [ecx], 0x736f6c63
jne 0x67bd46
cmp byte [ecx + 4], 0x65
jne 0x67bd46
mov eax, dword [esp + 0x5c]
mov byte [eax + 0x50], 1
mov ecx, dword [eax + 4]
mov ebx, dword [ecx + 0x24]
lea ebp, [0xc87600]
cmp dword [ecx + 0x20], ebp
jne 0x67bd3c
je 0x67bd05
mov ecx, dword [eax + 4]
mov ebx, dword [ecx + 0x2c]
test ebx, ebx
setne bl
mov esi, dword [ecx + 0x30]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x67b2f6
movzx ebx, byte [eax + 0x50]
test bl, bl
je 0x67ba7d
mov ecx, dword [eax + 0x4c]
mov dword [esp + 0x44], ecx
nop
lea ebx, [ecx - 0x64]
mov dword [esp + 0x54], ebx
cmp ebx, 0x63
ja 0x67b9a8
cmp ecx, 0x130
jne 0x67b980
mov ebp, dword [0x10d94d0]
mov esi, dword [0x10d94d4]
mov dword [esp + 0x3c], esi
mov dword [esp + 0x58], ebp
xor edx, edx
jmp 0x67b371
mov dword [esp + 0x50], edx
lea eax, [ebp + edx*8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x94]
lea edx, [esp + 0x94]
call eax
mov eax, dword [esp + 0x50]
lea edx, [eax + 1]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x44]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x3c]
cmp edx, esi
jl 0x67b332
lea eax, [0xb6a860]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
lea ecx, [0xb8f248]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
call fcn.004109e0
movzx eax, byte [esp + 0x14]
test al, al
je 0x67b909
movzx eax, byte [esp + 0x39]
test al, al
je 0x67b8fc
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x67b8f3
cmp ecx, 8
je 0x67b8d1
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409480
mov eax, dword [esp + 8]
lea ecx, [0xaa9660]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax + 0x44]
mov edx, dword [eax + 0x48]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.004093d0
mov eax, dword [esp + 8]
lea ecx, [0xaa8ce0]
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov ecx, dword [ecx]
mov dword [esp], ecx
lea ecx, [0xbc6f96]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x55
lea ecx, [esp + 0xa4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 2
call fcn.00681bc0
lea eax, [0xb98527]
mov dword [esp], eax
mov dword [esp + 4], 0xe
mov ecx, dword [esp + 0x94]
lea edx, [esp + 0x94]
call ecx
xor eax, eax
mov ecx, dword [esp + 0x5c]
mov ebx, dword [ecx + 4]
mov ebp, dword [ebx]
cmp dword [ebx + 4], 4
jne 0x67b8c5
cmp dword [ebp], 0x44414548
jne 0x67b732
mov eax, dword [esp + 0x12c]
movzx ebx, byte [eax + 9]
test bl, bl
jne 0x67b701
mov ebx, dword [ecx + 4]
mov ebp, dword [ebx + 0x14]
cmp ebp, 1
jle 0x67b6ed
movzx ebx, byte [ecx + 0x50]
test bl, bl
je 0x67b6e6
movzx ebx, byte [esp + 0x36]
test bl, bl
jne 0x67b671
mov edx, 1
test dl, dl
jne 0x67b60f
mov edx, dword [ecx + 4]
mov ebx, dword [edx + 0x14]
cmp ebx, 1
jle 0x67b5fa
mov edx, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x2c]
mov dword [esp], eax
mov byte [esp + 4], dl
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
lea eax, [ecx + 0x8b]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 3
call fcn.0067c0b0
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov edx, dword [esp + 0x12c]
mov edx, dword [edx + 4]
mov ebx, dword [esp + 0x6c]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
lea edx, [0xc7f880]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 0
call fcn.00670590
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x2c]
mov dword [esp + 0x80], ecx
mov edi, esp
lea esi, [esp + 0xc8]
call fcn.00461288
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x30], ecx
call fcn.0067abc0
mov eax, dword [esp + 0x5c]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c]
mov dword [esp], eax
mov eax, dword [0x10d9400]
mov ecx, dword [0x10d9404]
mov edx, dword [0x10d9408]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.0060c930
add esp, 0x128
ret
jne 0x67b608
cmp dword [edx + 0x18], 1
setge dl
jmp 0x67b52a
xor edx, edx
jmp 0x67b52a
lea eax, [0xb94f90]
mov dword [esp], eax
mov dword [esp + 4], 0xa
mov eax, dword [esp + 0x94]
lea edx, [esp + 0x94]
call eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax + 4]
mov ebx, dword [ecx + 0x14]
cmp ebx, 1
jle 0x67b667
lea ecx, [0xb901f2]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], 5
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x5c]
jmp 0x67b516
jne 0x67b657
cmp dword [ecx + 0x18], 1
jge 0x67b63f
jmp 0x67b657
mov ecx, dword [eax + 4]
lea edx, [0xb6a860]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [0xb94f90]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0xa
call fcn.00410690
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test eax, eax
jle 0x67b6e0
mov eax, dword [ecx + 4]
mov ecx, dword [ecx]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0xb901f2]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 5
call fcn.006709e0
movzx edx, byte [esp + 0x10]
xor edx, 1
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x5c]
jmp 0x67b50e
xor eax, eax
xor ecx, ecx
jmp 0x67b6aa
xor edx, edx
jmp 0x67b50e
jne 0x67b6fa
mov ebx, dword [ebx + 0x18]
test ebx, ebx
jge 0x67b4f0
add esp, 0x128
ret
lea eax, [0xb98527]
mov dword [esp], eax
mov dword [esp + 4], 0xe
mov eax, dword [esp + 0x94]
lea edx, [esp + 0x94]
call eax
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x5c]
jmp 0x67b4e1
mov ebp, dword [esp + 0x54]
cmp ebp, 0x63
jbe 0x67b4ce
mov ebp, dword [esp + 0x44]
cmp ebp, 0xcc
je 0x67b4ce
cmp ebp, 0x130
je 0x67b4ce
test al, al
jne 0x67b890
mov eax, dword [ebx + 0x14]
cmp eax, 1
jle 0x67b844
mov eax, dword [esp + 0x40]
test eax, eax
je 0x67b83b
cmp eax, 8
jne 0x67b830
mov ebx, dword [esp + 0x60]
cmp dword [ebx], 0x6e656469
jne 0x67b82c
cmp dword [ebx + 4], 0x79746974
jne 0x67b7b1
mov eax, dword [esp + 0x12c]
mov byte [eax + 9], 0
mov byte [ecx + 0x50], 1
jmp 0x67b4ce
test eax, eax
mov esi, dword [esp + 0x12c]
mov byte [esi + 9], 1
lea edi, [0xb92511]
mov dword [esp + 0xd8], edi
mov dword [esp + 0xdc], 7
je 0x67b7f3
cmp eax, 7
jne 0x67b7f3
cmp dword [ebx], 0x6e756863
jne 0x67b7f3
cmp word [ebx + 4], 0x656b
jne 0x67b7f3
cmp byte [ebx + 6], 0x64
je 0x67b7fa
mov eax, esi
jmp 0x67b4ce
lea eax, [0xb9b63e]
mov dword [esp], eax
mov dword [esp + 4], 0x11
mov eax, dword [esp + 0x94]
lea edx, [esp + 0x94]
call eax
mov ecx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x44]
mov esi, dword [esp + 0x12c]
jmp 0x67b7f3
test eax, eax
jmp 0x67b7b3
test eax, eax
mov ebx, dword [esp + 0x60]
jmp 0x67b7b3
mov ebx, dword [esp + 0x60]
jmp 0x67b7b3
jne 0x67b857
cmp dword [ebx + 0x18], 1
jl 0x67b857
mov eax, dword [esp + 0x40]
test eax, eax
jmp 0x67b775
mov byte [ecx + 0x50], 1
lea eax, [0xb9b63e]
mov dword [esp], eax
mov dword [esp + 4], 0x11
mov eax, dword [esp + 0x94]
lea edx, [esp + 0x94]
call eax
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x44]
jmp 0x67b4ce
lea eax, [0xb9b63e]
mov dword [esp], eax
mov dword [esp + 4], 0x11
mov eax, dword [esp + 0x94]
lea edx, [esp + 0x94]
call eax
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x44]
jmp 0x67b4ce
mov ebp, dword [esp + 0x54]
cmp ebp, 0x63
jmp 0x67b739
mov ebx, dword [esp + 0x60]
cmp dword [ebx], 0x6e656469
jne 0x67b3cc
cmp dword [ebx + 4], 0x79746974
jne 0x67b3cc
jmp 0x67b4ae
mov ebx, dword [esp + 0x60]
jmp 0x67b4ae
mov ecx, dword [esp + 0x40]
mov ebx, dword [esp + 0x60]
jmp 0x67b4ae
mov eax, dword [esp + 0x12c]
mov ecx, dword [eax]
mov dword [esp + 0x7c], ecx
test byte [ecx], al
call fcn.0048c5d0
lea edi, [esp + 0xb4]
mov esi, esp
call fcn.004612ce
mov eax, dword [esp + 0x7c]
add eax, 0x64
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1d
lea edi, [esp + 0xc]
lea esi, [esp + 0xb4]
call fcn.004612ce
call fcn.00679360
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], edx
jmp 0x67b3aa
nop
cmp ebx, 0x63
ja 0x67b997
mov ebp, dword [0x10d94e0]
mov esi, dword [0x10d94e4]
jmp 0x67b326
cmp ecx, 0xcc
je 0x67b986
xor esi, esi
xor ebp, ebp
jmp 0x67b326
cmp ecx, 0xcc
je 0x67b30e
cmp ecx, 0x130
je 0x67b30e
lea eax, [0xb6a860]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
lea edx, [0xb96b8e]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xc
call fcn.004109e0
movzx eax, byte [esp + 0x14]
mov byte [esp + 0x38], al
nop
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
lea edx, [0xb9a266]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x10
call fcn.0060e450
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x67b375
movzx eax, byte [esp + 0x38]
test al, al
jne 0x67b375
mov eax, dword [esp + 0x40]
test eax, eax
jne 0x67b375
mov ecx, dword [esp + 0x134]
test ecx, ecx
jle 0x67b375
mov eax, dword [esp + 0x130]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x138]
mov dword [esp + 8], eax
call fcn.00683240
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], ecx
jmp 0x67b375
mov ebx, dword [ecx + 0x24]
mov ecx, dword [ecx + 0x20]
test ecx, ecx
je 0x67bcde
mov esi, dword [ecx + 8]
cmp esi, 0x1a0af671
jne 0x67bcea
lea ebp, [0xc875a0]
cmp ebp, ecx
jne 0x67bcde
mov dword [esp + 0x74], ebx
test byte [ebx], al
lea eax, [ebx + 0x18]
mov dword [esp + 0x78], eax
mov dword [esp], eax
call fcn.0046aed0
mov eax, dword [esp + 0x74]
movzx ecx, byte [eax + 0x21]
test cl, cl
je 0x67bc8f
movzx eax, byte [eax + 0x20]
test al, al
je 0x67bc82
xor eax, eax
xor ecx, ecx
mov byte [esp + 0x35], cl
mov byte [esp + 0x3a], al
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call fcn.0046b290
movzx eax, byte [esp + 0x3a]
movzx ecx, byte [esp + 0x35]
test al, al
jne 0x67bb53
test cl, cl
jne 0x67bb0c
mov eax, dword [esp + 0x5c]
jmp 0x67b2f6
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.00677d30
lea eax, [0xb94f90]
mov dword [esp], eax
mov dword [esp + 4], 0xa
mov ecx, dword [esp + 0x94]
lea edx, [esp + 0x94]
call ecx
lea eax, [0xb901f2]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], 5
jmp 0x67bb03
mov byte [esp + 0x3b], cl
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
lea ebx, [0xacc160]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00409660
mov eax, dword [0x10d7e20]
mov ecx, dword [0x10d7e24]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0x40001
mov dword [esp + 0x14], 0
call fcn.0046cd50
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
je 0x67bc74
cmp dword [0x10e4878], eax
je 0x67bc32
cmp dword [0x10e47a0], eax
je 0x67bbe1
mov eax, dword [esp + 0x5c]
mov byte [eax + 0x50], 1
movzx ecx, byte [esp + 0x3b]
jmp 0x67baff
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [0x10e47a4]
mov dword [esp + 8], eax
call fcn.004038f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x67bbcf
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov ecx, dword [ecx + 0x10]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
je 0x67bc2c
mov eax, dword [esp + 0x5c]
mov byte [eax + 0x50], 1
movzx ecx, byte [esp + 0x3b]
jmp 0x67baff
mov eax, dword [esp + 0x5c]
jmp 0x67bc22
mov dword [esp + 0x70], ecx
mov dword [esp + 0x4c], eax
mov dword [esp], eax
mov dword [esp + 4], ecx
mov edx, dword [0x10e487c]
mov dword [esp + 8], edx
call fcn.004038f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x67bc67
mov eax, dword [esp + 0x5c]
movzx ecx, byte [esp + 0x3b]
jmp 0x67baff
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x70]
jmp 0x67bbc7
mov eax, dword [esp + 0x5c]
mov ecx, 1
jmp 0x67baff
mov eax, dword [esp + 0x5c]
mov byte [eax + 0x50], 1
jmp 0x67bad9
mov ecx, dword [eax + 4]
lea edx, [0xc830e0]
cmp dword [eax], edx
jne 0x67bcd2
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
test ecx, ecx
setg cl
sete dl
cmp eax, 0x40000
setae al
and edx, eax
or ecx, edx
test cl, cl
je 0x67bcc6
xor eax, eax
mov ecx, 1
jmp 0x67badd
mov eax, 1
xor ecx, ecx
jmp 0x67badd
mov ecx, 0xffffffff
mov eax, 0xffffffff
jmp 0x67bca2
mov eax, 1
xor ecx, ecx
jmp 0x67bafb
cmp esi, 0x2b9fd821
jne 0x67bcde
cmp ebp, ecx
jne 0x67bcde
mov ebx, dword [ebx]
movzx ebx, byte [ebx + 0x15]
mov eax, ebx
xor ecx, ecx
jmp 0x67bafb
test byte [ebx], al
lea eax, [ebx + 0x10]
mov dword [esp], eax
call fcn.00465b50
mov eax, dword [esp + 4]
test eax, eax
je 0x67bd29
mov eax, dword [esp + 0x5c]
lea ebp, [0xc87600]
jmp 0x67b2cb
mov eax, dword [esp + 0x5c]
mov byte [eax + 0x50], 1
lea ebp, [0xc87600]
jmp 0x67b2cb
mov ebx, 0
jmp 0x67b2c5
movzx eax, byte [esp + 0x36]
test al, al
je 0x67b2a8
mov eax, dword [esp + 0x5c]
jmp 0x67b2b0
xor ecx, ecx
xor eax, eax
jmp 0x67b289
lea eax, [0xb957e2]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], 0xa
jmp 0x67b24b
test dl, dl
jne 0x67b216
mov ebx, dword [eax + 0x4c]
lea ebp, [ebx - 0x64]
cmp ebp, 0x63
jbe 0x67b216
cmp ebx, 0xcc
je 0x67b216
cmp ebx, 0x130
je 0x67b216
mov ebx, dword [eax + 4]
mov ebp, dword [ebx + 0x14]
cmp ebp, 1
jle 0x67bdd1
movzx ebx, byte [eax + 0x17]
test bl, bl
je 0x67b24b
mov byte [eax + 0x50], 1
jmp 0x67b24b
jne 0x67bdc8
cmp dword [ebx + 0x18], 1
jge 0x67bdbc
jmp 0x67bdc8
lea eax, [0xb6a860]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
lea edx, [0xb98527]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xe
call fcn.00410690
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
test ecx, ecx
jle 0x67be9b
mov eax, dword [eax + 4]
test eax, eax
jne 0x67be29
mov eax, dword [esp + 0x5c]
movzx ecx, byte [esp + 0x36]
jmp 0x67b1e9
lea eax, [0xb6a860]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
lea edx, [0xb94f90]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xa
call fcn.00410690
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test eax, eax
jle 0x67be95
mov eax, dword [ecx + 4]
mov ecx, dword [ecx]
cmp eax, 0xa
je 0x67be78
xor eax, eax
test al, al
je 0x67be1b
mov eax, dword [esp + 0x5c]
mov byte [eax + 0x50], 0
jmp 0x67be1b
mov dword [esp], ecx
lea ecx, [0xb957e2]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00402a10
movzx eax, byte [esp + 0xc]
jmp 0x67be6a
xor eax, eax
xor ecx, ecx
jmp 0x67be63
xor eax, eax
jmp 0x67be17
movzx ecx, byte [esp + 0x36]
jmp 0x67b1e9
mov edx, dword [esp + 0x134]
jmp 0x67b162
movzx eax, byte [esp + 0x37]
mov edx, dword [esp + 0x134]
jmp 0x67b1cc
test ecx, ecx
je 0x67bed4
xor eax, eax
jmp 0x67b142
mov eax, dword [esp + 0x5c]
mov edx, dword [eax + 0x4c]
lea ebx, [edx - 0x64]
cmp ebx, 0x63
ja 0x67beea
xor eax, eax
jmp 0x67b142
cmp edx, 0xcc
jne 0x67bef9
xor eax, eax
jmp 0x67b142
cmp edx, 0x130
je 0x67bef2
lea eax, [0xb6a860]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
lea edx, [0xb98527]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xe
call fcn.00410690
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
test ecx, ecx
jle 0x67bf47
mov eax, dword [eax + 4]
test eax, eax
sete al
mov ecx, dword [esp + 0x40]
jmp 0x67b142
xor eax, eax
jmp 0x67bf39
xor eax, eax
jmp 0x67b142
xor ecx, ecx
xor eax, eax
jmp 0x67b10a
mov ebp, dword [eax + 0x34]
jmp 0x67aea7
xor ecx, ecx
jmp 0x67ae8d
add esp, 0x128
ret
call fcn.0045f5f0
jmp fcn.0067ae20