Function at 0x68faa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x90]
cmp eax, dword [ecx + 8]
jbe 0x6908d2
sub esp, 0x110
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 0x14]
test ecx, ecx
jne 0x68fbae
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x128]
lea edx, [ecx + eax]
mov dword [esp + 0xbc], edx
mov ebx, dword [esp + 0x120]
cmp ebx, edx
jb 0x68fb01
mov ebp, dword [esp + 0x118]
jmp 0x68fb40
lea ecx, [0x95d1a0]
mov dword [esp], ecx
mov ecx, dword [esp + 0x118]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00448250
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov ebp, eax
mov ebx, ecx
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x128]
mov dword [esp + 0x10c], ebp
mov dword [esp + 0xb8], ebx
add eax, ebp
mov dword [esp], eax
mov eax, dword [esp + 0x124]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00460350
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], 0
mov dword [esp + 0x148], 0
add esp, 0x110
ret
mov dword [esp], eax
call fcn.0068ed00
mov eax, dword [esp + 4]
test eax, eax
jg 0x68fbde
mov ebx, dword [esp + 0x120]
mov esi, dword [esp + 0x11c]
mov ecx, dword [esp + 0x118]
xor eax, eax
xor ebp, ebp
xor edx, edx
jmp 0x68fd89
mov dword [esp + 0x98], eax
nop
mov ebx, dword [esp + 0x11c]
lea ecx, [ebx + eax]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x120]
cmp edx, ecx
jl 0x68fc0e
jb 0x6908cc
mov ebp, dword [esp + 0x118]
jmp 0x68fc49
lea eax, [0x95d1a0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov edx, dword [esp + 0x118]
mov dword [esp + 0xc], edx
call fcn.00447f80
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x11c]
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x98]
cmp ebx, ecx
ja 0x6908c5
mov dword [esp + 0x90], edx
mov dword [esp + 0xe8], ebp
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x18]
lea ebx, [0x982de0]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00409610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x11c]
mov ebx, ecx
sub ecx, edx
mov dword [esp + 0xa0], ecx
mov ebp, ecx
neg ecx
sar ecx, 0x1f
and edx, ecx
mov ecx, dword [esp + 0xe8]
add edx, ecx
mov dword [esp + 0xf4], edx
test eax, eax
jne 0x68fd1d
mov eax, dword [esp + 0x98]
cmp eax, 0x10
jge 0x68fd24
cmp eax, 8
jle 0x68fcd4
mov esi, 8
jmp 0x68fcd6
mov esi, eax
mov edi, dword [esp + 0x114]
add edi, 0x24
cmp edi, edx
je 0x68fd85
mov dword [esp], edx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.00460350
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0xe8]
mov edx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0xa0]
jmp 0x68fd85
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x130]
mov dword [esp], ecx
mov ecx, dword [esp + 0x134]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], eax
call fcn.00498860
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x690691
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0xe8]
mov edx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0x5c]
mov dword [esp + 0xf4], edx
mov dword [esp + 0xa0], ebp
mov edi, dword [esp + 0x114]
mov edx, dword [edi + 0x14]
mov ebp, dword [edi + 0x18]
test edx, edx
je 0x690855
mov dword [esp + 0xa8], edx
mov dword [esp + 0x108], ebp
mov dword [esp + 0x9c], eax
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], esi
mov dword [esp + 0xe4], ecx
lea eax, [0x971fa0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
call fcn.00409610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x69006c
mov edx, dword [esp + 0x88]
cmp edx, 5
jb 0x6908bb
mov dword [esp + 0x104], ecx
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 0x1c]
mov ebx, dword [eax + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], ebx
lea ecx, [eax + 0x2c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0xd
lea ecx, [eax + 0x24]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 8
mov dword [esp + 0x1c], 8
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], 5
mov dword [esp + 0x28], edx
mov ebx, dword [esp + 0x124]
mov dword [esp + 0x2c], ebx
mov ebp, dword [esp + 0x128]
mov dword [esp + 0x30], ebp
mov esi, dword [esp + 0x12c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
call fcn.0068c560
mov eax, dword [esp + 0x48]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x128]
lea edx, [ecx + eax]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xdc], ebx
mov ebp, dword [esp + 0x4c]
mov dword [esp + 0x80], ebp
mov esi, dword [esp + 0x84]
lea edi, [esi + edx]
mov dword [esp + 0x58], edi
mov ebp, dword [esp + 0x88]
cmp ebp, edi
jl 0x68ff1a
jb 0x6908b2
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0xd0]
jmp 0x68ff69
lea eax, [0x95d1a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xc], eax
call fcn.00447f80
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0xdc]
mov esi, dword [esp + 0x84]
mov edi, dword [esp + 0x58]
mov ebp, edi
mov dword [esp + 0xf0], ecx
mov ecx, dword [esp + 0x128]
cmp esi, edi
ja 0x6908a9
mov dword [esp + 0x94], ebp
sub ebp, esi
mov dword [esp + 0xa4], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and esi, ebp
mov ebp, dword [esp + 0xf0]
add esi, ebp
mov ebp, dword [esp + 0xa4]
cmp ecx, ebp
ja 0x6908a2
mov dword [esp + 0xf8], esi
mov eax, dword [esp + 0xac]
mov edx, dword [eax + 0x10]
mov ebx, dword [esp + 0x104]
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov edi, dword [esp + 0x124]
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ecx
mov edi, dword [esp + 0x12c]
mov dword [esp + 0x18], edi
call edx
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x70]
cmp eax, ecx
ja 0x69089d
mov ecx, dword [esp + 0xac]
mov ecx, dword [ecx + 0x10]
mov edx, dword [esp + 0x104]
mov dword [esp], edx
mov edx, dword [esp + 0xa4]
sub edx, eax
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
mov edx, dword [esp + 0xf8]
add eax, edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x18], eax
call ecx
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0xf0]
mov edx, dword [esp + 0x94]
jmp 0x690768
lea eax, [0x99c1c0]
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x108]
mov dword [esp + 8], ecx
call fcn.00409610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x6903dd
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jne 0x6900c1
mov ebx, dword [esp + 0x114]
lea edx, [ebx + 0x24]
mov ebp, 8
mov esi, 8
jmp 0x6900dd
mov ebx, dword [esp + 0x114]
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0x9c]
mov edx, dword [esp + 0xf4]
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x68], esi
mov dword [esp + 0xd8], edx
cmp word [ebx + 0x10], 0x304
jne 0x69032f
mov dword [esp + 0x100], ecx
mov dword [esp + 0xb0], eax
mov edi, dword [esp + 0x84]
mov ebx, dword [esp + 0x128]
lea ebp, [ebx + edi]
mov dword [esp + 0xbc], ebp
mov esi, dword [esp + 0x88]
cmp esi, ebp
jb 0x690140
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x10c], eax
jmp 0x690184
lea eax, [0x95d1a0]
mov dword [esp], eax
mov ecx, dword [esp + 0xe4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00448250
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [esp + 0x10c], ecx
mov esi, ebx
mov ebx, dword [esp + 0x128]
mov dword [esp + 0xb8], esi
mov eax, dword [esp + 0x10c]
lea ecx, [eax + edi]
mov dword [esp], ecx
mov ecx, dword [esp + 0x124]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00460350
mov ecx, dword [esp + 0xbc]
test ecx, ecx
jbe 0x690896
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x128]
lea edx, [ebx + edx + 1]
mov ebp, dword [esp + 0x10c]
movzx esi, byte [ebp]
mov edi, dword [esp + 0xb8]
cmp edi, edx
jae 0x69022d
xchg esi, eax
mov byte [esp + 0x53], al
xchg esi, eax
lea eax, [0x95d1a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.00448250
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [ecx + 1]
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0x128]
mov ebp, eax
mov edi, esi
movzx esi, byte [esp + 0x53]
xchg esi, eax
mov byte [ebp + ecx], al
xchg esi, eax
test edx, edx
jbe 0x69088d
mov dword [esp + 0x10c], ebp
mov dword [esp + 0xbc], edx
mov dword [esp + 0xb8], edi
mov byte [ebp], 0x17
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 0x18]
mov edx, dword [esp + 0x100]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x128]
lea eax, [ecx + eax + 1]
mov ecx, dword [esp + 0xbc]
cmp ecx, 3
jbe 0x690883
mov edx, eax
sar eax, 8
mov ebx, dword [esp + 0x10c]
mov byte [ebx + 3], al
cmp ecx, 4
jbe 0x690879
mov byte [ebx + 4], dl
mov eax, dword [esp + 0xb0]
mov eax, dword [eax + 0x1c]
mov edx, dword [esp + 0x100]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], 5
mov edx, dword [esp + 0xb8]
mov dword [esp + 0xc], edx
mov ebp, dword [esp + 0xd8]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x68]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0x18], ebp
lea ebp, [edx - 5]
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 5
add ebp, ebx
mov dword [esp + 0x1c], ebp
add ecx, 0xfffffffb
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], 5
mov dword [esp + 0x30], edx
call eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
jmp 0x690768
mov edi, dword [ebx + 0x24]
mov ebp, dword [ebx + 0x28]
mov dword [ebx + 0x2c], edi
mov dword [ebx + 0x30], ebp
mov ebp, dword [esp + 0x88]
cmp ebp, 5
jb 0x69086d
mov edi, dword [esp + 0xe4]
mov esi, dword [edi]
movzx edx, byte [edi + 4]
mov dword [ebx + 0x34], esi
mov byte [ebx + 0x38], dl
mov eax, dword [eax + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov ecx, dword [esp + 0x84]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x124]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x12c]
mov dword [esp + 0x24], ecx
lea ecx, [ebx + 0x2c]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], 0xd
mov dword [esp + 0x30], 0xd
call eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
jmp 0x690768
lea eax, [0x982de0]
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 8], eax
call fcn.00409610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x690855
mov edx, dword [esp + 0x88]
cmp edx, 5
jb 0x69084b
mov dword [esp + 0xfc], ecx
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 0x1c]
mov ebx, dword [eax + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], ebx
lea ecx, [eax + 0x2c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0xd
lea ecx, [eax + 0x24]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 8
mov dword [esp + 0x1c], 8
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], 5
mov dword [esp + 0x28], edx
mov ebx, dword [esp + 0x124]
mov dword [esp + 0x2c], ebx
mov ebp, dword [esp + 0x128]
mov dword [esp + 0x30], ebp
mov esi, dword [esp + 0x12c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
call fcn.0068c560
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x48]
mov dword [esp + 0x78], edx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xe0], ebx
mov ebp, dword [esp + 0xfc]
mov dword [esp], ebp
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x128]
lea ebx, [edx + ecx]
test eax, eax
je 0x690846
mov dword [esp + 0x60], ebx
mov ebp, eax
mov eax, ebx
mov esi, edx
cmp ebp, 0xffffffff
je 0x69051d
cdq
idiv ebp
jmp 0x69051f
xor edx, edx
sub ebp, edx
mov dword [esp + 0x64], ebp
lea edi, [ebx + ebp]
mov dword [esp + 0x74], edi
mov eax, dword [esp + 0x84]
mov edx, ebp
lea ebp, [edi + eax]
mov dword [esp + 0x54], ebp
mov ebx, dword [esp + 0x88]
cmp ebx, ebp
jl 0x69056b
jb 0x69083d
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xc0]
jmp 0x6905b7
lea ecx, [0x95d1a0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0xc], ecx
call fcn.00447f80
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x64]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0x128]
mov edi, dword [esp + 0x74]
mov ebx, ebp
mov dword [esp + 0xec], ecx
mov ecx, dword [esp + 0x78]
cmp eax, ebp
ja 0x690836
mov dword [esp + 0x8c], ebx
sub ebx, eax
mov dword [esp + 0xa4], ebx
neg ebx
sar ebx, 0x1f
and ebx, eax
mov eax, ebp
mov ebp, dword [esp + 0xec]
add ebx, ebp
cmp esi, edi
jl 0x6905e7
mov esi, edi
mov dword [esp + 0xf8], ebx
mov ebp, dword [esp + 0x124]
cmp ebp, ebx
je 0x690631
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00460350
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x74]
cmp eax, ecx
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xf8]
mov ebp, eax
mov edi, dword [esp + 0x74]
mov eax, dword [esp + 0x54]
jmp 0x69063a
mov ebp, dword [esp + 0x128]
cmp ebp, edi
ja 0x69082d
mov esi, edi
sub edi, ebp
mov edx, dword [esp + 0xa4]
sub edx, ebp
neg edx
sar edx, 0x1f
and ebp, edx
lea edx, [ebx + ebp]
cmp ecx, edi
jl 0x69065d
mov ecx, edi
mov ebp, dword [esp + 0xe0]
cmp ebp, edx
je 0x690687
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00460350
mov eax, dword [esp + 0x54]
mov ebx, dword [esp + 0xf8]
mov esi, dword [esp + 0x74]
mov edx, dword [esp + 0x64]
mov ebp, dword [esp + 0x60]
jmp 0x6906d0
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], edx
add esp, 0x110
ret
lea edi, [edx - 1]
xchg edi, eax
mov byte [ebx + ebp], al
xchg edi, eax
inc ebp
cmp ebp, esi
jge 0x6906db
jb 0x6906c7
jmp 0x690824
mov ecx, dword [esp + 0x9c]
test ecx, ecx
jle 0x690721
mov eax, dword [esp + 0xb4]
mov edx, dword [eax + 0x18]
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xf4]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], ecx
call edx
mov ebx, dword [esp + 0xf8]
mov esi, dword [esp + 0x74]
mov eax, dword [esp + 0xb4]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0xfc]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ecx
call eax
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0xec]
mov edx, dword [esp + 0x8c]
cmp ecx, 3
jbe 0x69081a
lea ebx, [ecx - 5]
mov ebp, ebx
sar ebx, 8
mov byte [eax + 3], bl
cmp ecx, 4
jbe 0x690810
xchg ebp, ebx
mov byte [eax + 4], bl
xchg ebp, ebx
nop
mov ebx, dword [esp + 0x114]
mov ebp, 7
jmp 0x69079c
dec ebp
test ebp, ebp
jl 0x6907f8
cmp ebp, 8
jae 0x6907ec
movzx esi, byte [ebx + ebp + 0x24]
lea edi, [esi + 1]
xchg edi, eax
mov byte [ebx + ebp + 0x24], al
xchg edi, eax
xchg esi, eax
cmp al, 0xff
xchg esi, eax
je 0x69079b
mov dword [esp + 0x138], eax
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], edx
mov dword [esp + 0x144], 0
mov dword [esp + 0x148], 0
add esp, 0x110
ret
mov eax, ebp
mov ecx, 8
call fcn.0045fa20
lea eax, [0x95cee0]
mov dword [esp], eax
lea eax, [0xc94b8c]
mov dword [esp + 4], eax
call fcn.00434020
mov eax, 4
call fcn.0045fa20
mov eax, 3
call fcn.0045fa20
mov eax, ebp
mov ecx, esi
call fcn.0045fa20
mov eax, ebp
mov ecx, edi
call fcn.0045fa80
mov ecx, ebp
call fcn.0045fa80
mov ecx, ebp
mov edx, ebx
call fcn.0045fa60
call fcn.00432300
mov ecx, 5
call fcn.0045fa60
lea eax, [0x95cee0]
mov dword [esp], eax
lea eax, [0xc94b94]
mov dword [esp + 4], eax
call fcn.00434020
mov ecx, 5
mov edx, ebp
call fcn.0045fa60
mov eax, 4
call fcn.0045fa20
mov eax, 3
call fcn.0045fa20
xor eax, eax
mov ecx, edx
call fcn.0045fa20
xor eax, eax
call fcn.0045fa20
call fcn.0045fa80
mov edx, ebp
call fcn.0045fa60
mov eax, esi
mov ecx, edi
call fcn.0045fa80
mov ecx, edi
mov edx, ebp
call fcn.0045fa60
mov ecx, 5
call fcn.0045fa60
mov eax, ebx
call fcn.0045fa80
call fcn.0045fa60
nop
call fcn.0045e560
jmp fcn.0068faa0