Function at 0x68ded0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x94]
cmp eax, dword [ecx + 8]
jbe 0x68f35a
sub esp, 0x114
mov ecx, dword [esp + 0x120]
cmp ecx, 2
jl 0x68f2ab
mov edx, dword [esp + 0x124]
mov ebx, dword [esp + 0x11c]
mov eax, edx
mov ebp, ebx
xor esi, esi
xor edi, edi
xor eax, eax
mov word [esp + 0x24], ax
xor edx, edx
mov dword [esp + 0x30], edx
xor edx, edx
mov dword [esp + 0x2c], edx
xor edx, edx
mov dword [esp + 0x110], edx
mov edx, dword [esp + 0x124]
xor ebx, ebx
mov dword [esp + 0x38], ebx
mov ebx, ebp
mov eax, edx
jmp 0x68dffd
lea ecx, [esi + 1]
mov ebp, dword [esp + 0x108]
mov esi, dword [esp + 0x110]
movzx edx, word [esp + 0x22]
mov esi, dword [esp + 0x60]
mov dword [esp + 0x34], ecx
movzx ecx, word [esp + 0x24]
mov esi, dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
cmp esi, edx
jge 0x68dfa0
cmp esi, ebx
jge 0x68dfa0
cmp esi, edx
jae 0x68f34c
mov ecx, dword [esp + 0x110]
mov ecx, dword [ecx + esi*4]
cmp esi, ebx
jae 0x68f34c
mov ebp, dword [ebp + esi*4]
cmp ecx, ebp
je 0x68df4b
test esi, esi
jle 0x68e088
mov ecx, dword [esp + 0x30]
cmp esi, ecx
ja 0x68f345
movzx edx, word [esp + 0x24]
mov ebx, dword [esp + 0x110]
mov ebp, dword [esp + 0x3c]
mov eax, dword [esp + 0x60]
inc eax
mov word [esp + 0x24], dx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x2c], esi
mov dword [esp + 0x110], ebx
mov edx, ebp
mov ebx, dword [esp + 0x10c]
mov ecx, dword [esp + 0x120]
mov ebp, dword [esp + 0x11c]
mov esi, eax
mov eax, dword [esp + 0x124]
mov dword [esp + 0x3c], edx
mov dword [esp + 0x10c], ebx
cmp esi, ecx
jg 0x68e6ba
mov dword [esp + 0x60], esi
jge 0x68e6a9
jae 0x68f353
mov ebx, dword [ebp + esi*4]
nop
cmp byte [ebx], 0x12
jne 0x68e6a2
mov edx, dword [ebx + 4]
mov ebp, dword [ebx + 8]
test ebp, ebp
jle 0x68e6a2
mov edx, dword [edx]
cmp byte [edx], 3
je 0x68e682
xor edx, edx
xor ebx, ebx
xor ebp, ebp
xor edx, edx
mov dword [esp + 0x28], edx
xor edx, edx
mov word [esp + 0x22], dx
mov dword [esp + 0x108], ebp
movzx ecx, word [esp + 0x24]
cmp dx, cx
jne 0x68e679
mov dword [esp + 0xb8], eax
xor eax, eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xb8]
jmp 0x68df6e
mov ecx, dword [esp + 0x108]
mov ebp, dword [esp + 0x28]
movzx esi, word [esp + 0x22]
mov edx, dword [esp + 0x60]
cmp edx, edi
jne 0x68e0dd
mov edi, dword [esp + 0x38]
mov edi, dword [esp + 0x10c]
mov dword [esp + 0x110], edi
mov edi, dword [esp + 0x38]
mov edx, esi
mov esi, ebx
mov ebx, ecx
mov dword [esp + 0x38], edi
mov ecx, dword [esp + 0x110]
mov dword [esp + 0x10c], ecx
mov edi, dword [esp + 0x60]
mov ecx, ebp
mov ebp, dword [esp + 0x3c]
jmp 0x68dfc4
mov dword [esp + 0x104], ecx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebp
mov word [esp + 0x26], si
lea ecx, [edi + 1]
cmp edx, ecx
jne 0x68e210
mov ecx, dword [esp + 0x120]
cmp edi, ecx
jae 0x68f33e
mov ecx, dword [esp + 0x38]
lea edx, [ecx + 1]
mov ebx, dword [esp + 0x11c]
mov ebx, dword [ebx + edi*4]
mov edi, ebp
mov ebp, dword [esp + 0x3c]
cmp edx, ebp
ja 0x68e1ae
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x38], edx
mov esi, dword [esp + 0xe8]
lea edx, [esi + ecx*4]
mov dword [esp + 0x100], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x68e196
mov dword [esi + ecx*4], ebx
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0x50]
mov edi, ecx
mov dword [esp + 0x110], esi
mov dword [esp + 0x3c], ebp
mov ecx, dword [esp + 0x104]
mov ebp, dword [esp + 0x54]
movzx esi, word [esp + 0x26]
jmp 0x68e0b6
mov ecx, edi
mov edi, dword [esp + 0x100]
mov edx, eax
mov eax, ebx
call fcn.0044f0d0
mov eax, edx
mov edi, ecx
jmp 0x68e168
mov dword [esp + 0xfc], ebx
lea eax, [0x7f06c0]
mov dword [esp], eax
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea edx, [ecx + 1]
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0xfc]
movzx esi, word [esp + 0x26]
mov edi, dword [esp + 0x54]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x124]
jmp 0x68e146
mov dword [esp + 0x44], edi
nop
mov ecx, dword [esp + 0x118]
mov ebx, dword [ecx + 0x10]
lea ebp, [ecx + 0x10]
mov dword [esp + 0xf8], ebp
test ebx, ebx
je 0x68e64e
mov esi, dword [0xb91180]
mov edx, dword [ebx + 0x10]
test esi, esi
jne 0x68e60c
mov dword [ecx + 0x10], edx
mov edx, edi
mov edi, ebx
mov esi, eax
xor eax, eax
call fcn.0044f1c1
mov dword [esp + 0xe4], ebx
mov byte [ebx], 3
movzx ecx, word [esp + 0x24]
mov word [ebx + 2], cx
mov ecx, dword [ebx + 0x14]
mov edi, dword [ebx + 0x1c]
mov ebp, dword [esp + 0x2c]
cmp ebp, edi
ja 0x68e5d9
mov dword [esp + 0x108], ecx
mov dword [esp + 0x7c], edi
mov dword [esp], ecx
mov eax, dword [esp + 0x110]
mov dword [esp + 4], eax
shl ebp, 2
mov dword [esp + 8], ebp
call fcn.0044f8d0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0xe4]
mov dword [ecx + 0x18], eax
mov edx, dword [esp + 0x7c]
mov dword [ecx + 0x1c], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x68e5c1
mov edx, dword [esp + 0x108]
mov dword [ecx + 0x14], edx
mov edx, dword [esp + 0x11c]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x120]
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x44]
jmp 0x68e31c
lea edi, [edx + 1]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x118]
mov edx, dword [esp + 0x120]
mov ebp, dword [esp + 0x60]
mov ecx, dword [esp + 0xe4]
mov edx, ebx
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x120]
mov esi, dword [esp + 0x60]
cmp edi, esi
jge 0x68e36c
cmp edi, ebp
jae 0x68f337
mov dword [esp + 0x7c], edi
mov ecx, dword [edx + edi*4]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0068f370
mov eax, dword [0xb91180]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x11c]
lea edi, [ebx + edx*4]
test eax, eax
jne 0x68e360
mov dword [ebx + edx*4], ecx
jmp 0x68e2e8
mov eax, ecx
call fcn.0044f0d0
jmp 0x68e2e8
test esi, esi
jl 0x68f330
mov eax, dword [esp + 0x44]
cmp eax, esi
ja 0x68f330
mov dword [esp], ebx
mov ecx, dword [esp + 0x124]
sub ecx, eax
mov dword [esp + 0x7c], ecx
mov edi, eax
shl eax, 2
neg ecx
sar ecx, 0x1f
and ecx, eax
lea eax, [edx + ecx]
mov dword [esp + 4], eax
sub esi, edi
mov dword [esp + 8], esi
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0xc], ecx
mov byte [esp + 0x10], 0x13
call fcn.0068db00
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc8], eax
nop
mov ecx, dword [esp + 0x118]
mov edi, dword [ecx + 0x10]
test edi, edi
je 0x68e5a1
mov dword [esp + 0xd0], edi
mov edx, dword [0xb91180]
mov ebx, dword [edi + 0x10]
test edx, edx
jne 0x68e56f
mov dword [ecx + 0x10], ebx
mov edx, eax
xor eax, eax
call fcn.0044f1c1
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0xdc], ecx
mov byte [ecx], 0x12
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx + 0xc]
cmp ebp, 2
jb 0x68e525
mov esi, 2
mov edi, ebp
mov ebp, dword [0xb91180]
test ebp, ebp
jne 0x68e4fc
mov ebp, dword [esp + 0xe4]
mov dword [ebx], ebp
mov dword [ebx + 4], edx
mov dword [ecx + 8], esi
mov dword [ecx + 0xc], edi
mov edx, dword [0xb91180]
test edx, edx
jne 0x68e4eb
mov dword [ecx + 4], ebx
mov edx, dword [esp + 0x38]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x3c]
cmp ebx, ebp
ja 0x68e4a8
mov esi, dword [esp + 0x10c]
mov dword [esp + 0x3c], ebp
mov edi, ebx
mov ebx, dword [0xb91180]
lea ebp, [esi + edx*4]
test ebx, ebx
jne 0x68e497
mov dword [esi + edx*4], ecx
mov eax, dword [esp + 0x124]
mov ecx, edi
mov ebp, dword [esp + 0x3c]
mov edi, dword [esp + 0x54]
jmp 0x68e16c
mov edx, edi
mov edi, ebp
mov eax, ecx
call fcn.0044f0d0
xor eax, eax
mov edi, edx
jmp 0x68e481
lea eax, [0x7f06c0]
mov dword [esp], eax
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043a950
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0x38]
jmp 0x68e46b
lea edi, [ecx + 4]
mov eax, ebx
call fcn.0044f0d0
xor eax, eax
jmp 0x68e455
mov dword [esp + 0x7c], edi
mov edi, ebx
mov eax, dword [esp + 0xe4]
call fcn.0044f0d0
lea ebp, [ebx + 4]
mov edi, ebp
mov eax, edx
call fcn.0044f0d0
xor eax, eax
mov edi, dword [esp + 0x7c]
jmp 0x68e43e
lea eax, [0x7f06c0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 2
call fcn.0043a950
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea esi, [eax + 2]
xor eax, eax
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xc8]
jmp 0x68e422
mov eax, edi
mov edi, dword [esp + 0xf8]
mov ecx, eax
mov eax, ebx
call fcn.0044f0d0
lea edx, [0x7f94e0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004105b0
xor eax, eax
mov edx, dword [esp + 0xc8]
jmp 0x68e3fd
lea eax, [0x7f94e0]
mov dword [esp], eax
call fcn.00409f80
mov ecx, dword [esp + 4]
xor eax, eax
mov edx, dword [esp + 0xc8]
jmp 0x68e404
lea edi, [ecx + 0x14]
mov edx, eax
mov eax, dword [esp + 0x108]
call fcn.0044f0d0
mov eax, edx
jmp 0x68e2c9
lea eax, [0x7ab380]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0043a950
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov ebp, dword [esp + 0x2c]
jmp 0x68e277
mov dword [esp + 0xd4], ebx
mov edi, ebp
mov eax, edx
call fcn.0044f0d0
lea ecx, [0x7f94e0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.004105b0
xor eax, eax
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0xd4]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0x124]
jmp 0x68e252
lea eax, [0x7f94e0]
mov dword [esp], eax
call fcn.00409f80
mov ebx, dword [esp + 4]
xor eax, eax
mov edx, dword [esp + 0x44]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0x124]
jmp 0x68e252
mov edx, dword [esp + 0x2c]
jmp 0x68e088
mov ebx, dword [edx + 0x18]
mov ebp, dword [edx + 0x14]
mov eax, dword [edx + 0x1c]
movzx edx, word [edx + 2]
and edx, 1
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x124]
jmp 0x68e055
mov edx, ebx
jmp 0x68e03e
mov edx, dword [esp + 0x2c]
xor ecx, ecx
xor ebx, ebx
xor ebp, ebp
xor esi, esi
jmp 0x68e098
mov ecx, dword [esp + 0x38]
mov eax, ebx
mov ebp, edx
xor esi, esi
xor edi, edi
xor eax, eax
mov dword [esp + 0xe0], eax
xor edx, edx
mov dword [esp + 0x7c], edx
mov edx, ebp
mov eax, ebx
jmp 0x68e6ef
inc esi
mov dword [esp + 0xe0], ebp
mov dword [esp + 0x7c], ecx
mov ecx, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x110], ebx
cmp esi, ecx
jg 0x68ed06
mov dword [esp + 0x58], esi
mov dword [esp + 0x78], edx
mov dword [esp + 0x4c], edi
jge 0x68ecf8
jae 0x68f329
mov ebp, dword [eax + esi*4]
nop
movzx ebx, byte [ebp]
cmp bl, 2
jne 0x68ecc1
xor ebx, ebx
mov ebp, dword [esp + 0xe0]
test ebp, ebp
jne 0x68ec7b
mov dword [esp + 0xa8], eax
xor eax, eax
mov byte [esp + 0x21], al
mov eax, dword [esp + 0xa8]
movzx edx, byte [esp + 0x21]
test dl, dl
je 0x68e7ae
nop
movzx edx, byte [ebp]
cmp dl, 3
jne 0x68ec23
cmp dword [ebp + 0x18], 1
jne 0x68ec23
mov dword [esp + 0x90], eax
mov eax, 1
mov byte [esp + 0x20], al
mov eax, dword [esp + 0x90]
movzx ecx, byte [esp + 0x20]
test cl, cl
je 0x68ebb6
mov ecx, 1
test cl, cl
je 0x68e7ae
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x110]
jmp 0x68e6db
cmp esi, edi
jne 0x68e7d2
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x110]
mov ebp, dword [esp + 0x78]
mov edi, esi
mov edi, ebp
mov ebp, ebx
mov ebx, edx
mov edx, edi
mov edi, esi
jmp 0x68e6db
mov dword [esp + 0xec], ebx
lea ecx, [edi + 1]
cmp esi, ecx
jne 0x68e8d7
mov ecx, dword [esp + 0x38]
cmp edi, ecx
jae 0x68f31b
mov edx, dword [esp + 0x7c]
lea ebp, [edx + 1]
mov ecx, dword [eax + edi*4]
mov edi, ebx
mov ebx, dword [esp + 0x78]
cmp ebp, ebx
ja 0x68e873
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x110]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x7c], ebx
mov esi, dword [esp + 0xe8]
lea ebx, [esi + edx*4]
mov dword [esp + 0xf4], ebx
mov ebx, dword [0xb91180]
test ebx, ebx
jne 0x68e85b
mov dword [esi + edx*4], ecx
mov ecx, dword [esp + 0x7c]
mov ebx, edi
mov edx, esi
mov esi, dword [esp + 0x58]
mov ebx, ecx
mov ecx, ebp
mov ebp, ebx
mov ebx, edi
jmp 0x68e7c1
mov edx, edi
mov edi, dword [esp + 0xf4]
mov ebx, eax
mov eax, ecx
call fcn.0044f0d0
mov eax, ebx
mov edi, edx
jmp 0x68e842
mov dword [esp + 0xfc], ecx
lea eax, [0x7f06c0]
mov dword [esp], eax
mov ecx, dword [esp + 0x110]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x7c]
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0xec]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x10c]
jmp 0x68e820
mov ecx, dword [esp + 0x118]
mov edx, dword [esp + 0x38]
jmp 0x68e90e
lea edi, [edx + 1]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x118]
mov edx, dword [esp + 0x38]
mov ebp, dword [esp + 0x58]
mov eax, ebx
mov ebx, dword [esp + 0xec]
mov ebp, dword [esp + 0xe0]
mov esi, dword [esp + 0x58]
cmp edi, esi
jge 0x68e964
cmp edi, edx
jae 0x68f314
mov dword [esp + 0x74], edi
mov edx, dword [eax + edi*4]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x4c]
cmp edi, edx
setne bl
mov byte [esp + 8], bl
call fcn.0068f590
mov eax, dword [0xb91180]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x10c]
lea edi, [ebx + edx*4]
test eax, eax
jne 0x68e95b
mov dword [ebx + edx*4], ecx
jmp 0x68e8e4
mov eax, ecx
call fcn.0044f0d0
jmp 0x68e8e4
test esi, esi
jl 0x68f30d
mov edi, dword [esp + 0x4c]
cmp edi, esi
ja 0x68f30d
mov dword [esp], ecx
mov edx, dword [esp + 0x3c]
sub edx, edi
mov ebp, edx
neg edx
shl edi, 2
sar edx, 0x1f
and edx, edi
add edx, eax
mov dword [esp + 4], edx
mov edx, dword [esp + 0x4c]
sub esi, edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
mov byte [esp + 0x10], 0x13
call fcn.0068db00
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc4], eax
nop
mov ecx, dword [esp + 0x118]
mov edi, dword [ecx + 0x10]
test edi, edi
je 0x68eb96
mov dword [esp + 0xd8], edi
mov edx, dword [0xb91180]
mov ebx, dword [edi + 0x10]
test edx, edx
jne 0x68eb66
mov dword [ecx + 0x10], ebx
mov edx, eax
xor eax, eax
call fcn.0044f1c1
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0xcc], ecx
mov byte [ecx], 0x12
mov ebx, dword [ecx + 0xc]
mov ebp, dword [ecx + 4]
cmp ebx, 2
jb 0x68eb1c
mov esi, 2
mov edi, ebx
mov ebx, dword [0xb91180]
test ebx, ebx
jne 0x68eaf3
mov ebx, dword [esp + 0xe0]
mov dword [ebp], ebx
mov dword [ebp + 4], edx
mov dword [ecx + 8], esi
mov dword [ecx + 0xc], edi
mov edx, dword [0xb91180]
test edx, edx
jne 0x68eae2
mov dword [ecx + 4], ebp
mov edx, dword [esp + 0x7c]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x78]
cmp ebx, ebp
ja 0x68ea9c
mov esi, dword [esp + 0x110]
mov dword [esp + 0x7c], ebp
mov edi, ebx
mov ebx, dword [0xb91180]
lea ebp, [esi + edx*4]
test ebx, ebx
jne 0x68ea8b
mov dword [esi + edx*4], ecx
mov eax, dword [esp + 0x10c]
mov ecx, dword [esp + 0x7c]
mov ebp, edi
mov edi, dword [esp + 0xec]
jmp 0x68e846
mov edx, edi
mov edi, ebp
mov eax, ecx
call fcn.0044f0d0
xor eax, eax
mov edi, edx
jmp 0x68ea72
lea eax, [0x7f06c0]
mov dword [esp], eax
mov ecx, dword [esp + 0x110]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043a950
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0x7c]
jmp 0x68ea5c
lea edi, [ecx + 4]
mov eax, ebp
call fcn.0044f0d0
xor eax, eax
jmp 0x68ea46
mov dword [esp + 0x74], edi
mov edi, ebp
mov eax, dword [esp + 0xe0]
call fcn.0044f0d0
lea ebx, [ebp + 4]
mov edi, ebx
mov eax, edx
call fcn.0044f0d0
xor eax, eax
mov edi, dword [esp + 0x74]
jmp 0x68ea2f
lea eax, [0x7f06c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.0043a950
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea esi, [eax + 2]
xor eax, eax
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xc4]
jmp 0x68ea12
lea edx, [ecx + 0x10]
mov eax, edi
mov edi, edx
mov ebp, eax
mov eax, ebx
call fcn.0044f0d0
lea edx, [0x7f94e0]
mov dword [esp], edx
mov dword [esp + 4], ebp
call fcn.004105b0
xor eax, eax
mov edx, dword [esp + 0xc4]
jmp 0x68e9ed
lea eax, [0x7f94e0]
mov dword [esp], eax
call fcn.00409f80
mov ecx, dword [esp + 4]
xor eax, eax
mov edx, dword [esp + 0xc4]
jmp 0x68e9f4
cmp dl, 0x11
jne 0x68ec1c
mov ecx, dword [ebp + 0x2c]
cmp dword [ebp + 0x28], ecx
jne 0x68ec15
mov ecx, dword [ebp + 4]
mov edx, dword [ebp + 8]
test edx, edx
jbe 0x68f322
mov ecx, dword [ecx]
nop
movzx edx, byte [ecx]
cmp dl, 3
jne 0x68ebec
cmp dword [ecx + 0x18], 1
jne 0x68ebec
mov ecx, 1
jmp 0x68e796
cmp dl, 4
jne 0x68ebfb
mov ecx, 1
jmp 0x68e796
cmp dl, 5
jne 0x68ec0a
mov ecx, 1
jmp 0x68e796
cmp dl, 6
sete cl
jmp 0x68e796
xor ecx, ecx
jmp 0x68e796
xor ecx, ecx
jmp 0x68e796
cmp dl, 4
jne 0x68ec44
mov dword [esp + 0x98], eax
mov eax, 1
mov byte [esp + 0x20], al
mov eax, dword [esp + 0x98]
jmp 0x68e784
cmp dl, 5
jne 0x68ec65
mov dword [esp + 0xa0], eax
mov eax, 1
mov byte [esp + 0x20], al
mov eax, dword [esp + 0xa0]
jmp 0x68e784
cmp dl, 6
sete al
mov byte [esp + 0x20], al
mov eax, dword [esp + 0x10c]
jmp 0x68e784
mov dword [esp + 0xc0], ebx
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.00695d20
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xe0]
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0x4c]
mov byte [esp + 0x21], al
mov eax, dword [esp + 0x10c]
jmp 0x68e74c
cmp bl, 0x12
jne 0x68eced
mov ebx, dword [ebp + 4]
mov edx, dword [ebp + 8]
test edx, edx
jle 0x68eced
mov edx, dword [ebx]
cmp byte [edx], 2
jne 0x68ece2
mov edx, dword [esp + 0x78]
xor ebx, ebx
jmp 0x68e729
mov ebx, edx
mov edx, dword [esp + 0x78]
jmp 0x68e729
mov edx, dword [esp + 0x78]
mov ebx, ebp
jmp 0x68e729
mov ebp, dword [esp + 0xe0]
xor ebx, ebx
jmp 0x68e7ae
mov ecx, dword [esp + 0x7c]
mov eax, ebx
xor ebp, ebp
xor esi, esi
xor edi, edi
jmp 0x68ed1f
inc ebp
mov edx, dword [esp + 0x7c]
mov edx, ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x38], edi
mov dword [esp + 0x10c], ebx
cmp ebp, ecx
jg 0x68f151
mov dword [esp + 0x70], edx
jge 0x68ed67
jae 0x68f306
mov ecx, dword [eax + ebp*4]
nop
movzx edx, byte [ecx]
cmp dl, 3
jne 0x68f128
cmp dword [ecx + 0x18], 1
jne 0x68f128
mov ecx, 1
test cl, cl
je 0x68ed67
mov ecx, dword [esp + 0x70]
jmp 0x68ed14
mov dword [esp + 0x5c], ebp
cmp ebp, esi
jne 0x68ee23
mov ecx, dword [esp + 0x7c]
cmp ebp, ecx
mov edx, dword [esp + 0x70]
jge 0x68ee1d
jae 0x68f2e3
lea esi, [edi + 1]
mov ecx, dword [eax + ebp*4]
cmp esi, edx
ja 0x68edca
mov dword [esp + 0x3c], edx
mov ebp, dword [0xb91180]
lea edx, [ebx + edi*4]
test ebp, ebp
jne 0x68edbb
mov dword [ebx + edi*4], ecx
mov ecx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x5c]
lea edx, [ebp + 1]
mov edi, esi
mov esi, edx
jmp 0x68ed14
mov edi, edx
mov ebp, eax
mov eax, ecx
call fcn.0044f0d0
mov eax, ebp
jmp 0x68eda7
mov dword [esp + 0x6c], edi
mov dword [esp + 0xfc], ecx
lea eax, [0x7f06c0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
call fcn.0043a950
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x110]
mov ecx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x5c]
mov edi, dword [esp + 0x6c]
jmp 0x68ed93
mov ecx, edx
mov esi, edi
jmp 0x68edab
lea ecx, [esi + 1]
cmp ebp, ecx
jne 0x68eedb
mov ecx, dword [esp + 0x7c]
cmp esi, ecx
jae 0x68f2ff
lea edx, [edi + 1]
mov esi, dword [eax + esi*4]
mov ecx, dword [esp + 0x70]
cmp edx, ecx
ja 0x68ee8c
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], ecx
mov ecx, dword [0xb91180]
lea edx, [ebx + edi*4]
test ecx, ecx
jne 0x68ee75
mov dword [ebx + edi*4], esi
mov ecx, dword [esp + 0x7c]
cmp ebp, ecx
mov edx, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
mov edi, esi
jmp 0x68ed7d
mov edi, edx
mov ecx, eax
mov eax, esi
call fcn.0044f0d0
mov edx, dword [esp + 0x7c]
cmp ebp, edx
mov eax, ecx
mov ecx, edx
jmp 0x68ee66
mov dword [esp + 0xfc], esi
lea eax, [0x7f06c0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.0043a950
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x110]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x38]
jmp 0x68ee48
mov dword [esp + 0x78], ecx
mov dword [esp + 0x40], esi
mov edx, dword [esp + 0x7c]
jmp 0x68ef01
inc edx
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x5c]
mov ebx, dword [esp + 0x10c]
mov esi, ecx
mov ecx, edx
mov edx, dword [esp + 0x7c]
cmp ecx, ebp
jge 0x68ef4e
cmp esi, edx
jae 0x68f2f8
mov dword [esp + 0x74], esi
mov ebx, dword [eax + esi*4]
movzx esi, byte [ebx]
cmp ecx, edx
jae 0x68f2f8
mov edx, dword [eax + ecx*4]
movzx ebp, byte [edx]
xchg esi, eax
xchg ebp, ebx
cmp al, bl
xchg ebp, ebx
xchg esi, eax
jae 0x68ef33
mov edx, ecx
jmp 0x68eee9
jne 0x68ef4a
mov edx, dword [edx + 0x18]
cmp dword [ebx + 0x18], edx
setl dl
test dl, dl
jne 0x68ef2f
mov edx, ecx
mov ecx, dword [esp + 0x74]
jmp 0x68eee9
xor edx, edx
jmp 0x68ef3e
mov ecx, dword [esp + 0x40]
cmp ecx, edx
jae 0x68f2f1
mov ebx, dword [eax + ecx*4]
lea ebp, [eax + ecx*4]
cmp esi, edx
jae 0x68f2f1
mov dword [esp + 0xf0], ebp
mov dword [esp + 0xfc], ebx
mov ebp, dword [0xb91180]
mov edx, dword [eax + esi*4]
lea ebx, [eax + esi*4]
test ebp, ebp
jne 0x68f0ff
mov dword [eax + ecx*4], edx
mov edx, dword [esp + 0xfc]
mov dword [eax + esi*4], edx
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x78]
jmp 0x68efc2
lea esi, [eax + 1]
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x5c]
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0x7c]
mov edi, dword [esp + 0x38]
mov ebp, esi
cmp ebp, ebx
jge 0x68f02e
mov esi, dword [eax + ecx*4]
cmp ebp, edx
jae 0x68f2ea
mov dword [esp + 0x48], ebp
mov ecx, dword [eax + ebp*4]
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.006912a0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x110]
mov edx, dword [ecx + eax*4]
test byte [edx], al
nop
mov ebx, dword [0xb91180]
mov ebp, dword [esp + 0x118]
mov esi, dword [ebp + 0x10]
test ebx, ebx
jne 0x68f011
mov dword [edx + 0x10], esi
mov dword [ebp + 0x10], edx
jmp 0x68efa5
lea edi, [edx + 0x10]
mov ebx, eax
mov eax, esi
call fcn.0044f0d0
lea edi, [ebp + 0x10]
mov eax, edx
call fcn.0044f0d0
mov eax, ebx
jmp 0x68efa5
mov edx, dword [eax + ecx*4]
mov dword [esp], edx
call fcn.0068d930
mov eax, dword [esp + 0x38]
lea ecx, [eax + 1]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x110]
mov edx, dword [ebx + edx*4]
mov ebp, dword [esp + 0x70]
cmp ecx, ebp
ja 0x68f0ad
mov esi, dword [esp + 0x10c]
mov dword [esp + 0x38], ecx
mov edi, ebx
mov ebx, dword [0xb91180]
lea ecx, [esi + eax*4]
test ebx, ebx
jne 0x68f092
mov dword [esi + eax*4], edx
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x7c]
cmp ecx, edx
mov eax, edi
mov ecx, edx
mov ebx, esi
mov edx, ebp
mov esi, dword [esp + 0x38]
mov ebp, dword [esp + 0x5c]
jmp 0x68ee6e
mov eax, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.0044f0d0
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x7c]
cmp ecx, edx
mov edi, ebx
jmp 0x68f07d
mov dword [esp + 0xfc], edx
lea edx, [0x7f06c0]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.0043a950
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x110]
jmp 0x68f05d
mov ebp, edi
mov edi, dword [esp + 0xf0]
mov esi, eax
mov eax, edx
call fcn.0044f0d0
mov edi, ebx
mov eax, dword [esp + 0xfc]
call fcn.0044f0d0
mov eax, esi
mov edi, ebp
jmp 0x68ef97
cmp dl, 4
jne 0x68f137
mov ecx, 1
jmp 0x68ed5d
cmp dl, 5
jne 0x68f146
mov ecx, 1
jmp 0x68ed5d
cmp dl, 6
sete cl
jmp 0x68ed5d
mov eax, ebx
xor ecx, ecx
xor ebp, ebp
jmp 0x68f15d
mov ebx, ecx
mov ecx, esi
cmp ecx, edi
jge 0x68f28f
mov dword [esp + 0x110], ebx
lea esi, [ecx + 1]
cmp esi, edi
jge 0x68f288
cmp ecx, edi
jae 0x68f2dc
mov ebx, dword [eax + ecx*4]
cmp byte [ebx], 2
jne 0x68f281
cmp esi, edi
jae 0x68f2dc
mov ebx, dword [eax + ecx*4 + 4]
cmp byte [ebx], 2
jne 0x68f1a5
mov ecx, dword [esp + 0x110]
jmp 0x68f159
cmp ecx, edi
jae 0x68f2d5
mov dword [esp + 0x68], esi
lea ebx, [ebp + 1]
mov ecx, dword [eax + ecx*4]
cmp ebx, edx
ja 0x68f21c
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x110]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x3c], edx
mov esi, dword [0xb91180]
mov edx, dword [esp + 0xe8]
lea ebx, [edx + ebp*4]
test esi, esi
jne 0x68f209
mov dword [edx + ebp*4], ecx
mov esi, dword [esp + 0x68]
mov ecx, edx
mov ebp, dword [esp + 0x7c]
mov edx, dword [esp + 0x3c]
jmp 0x68f159
mov ebp, edi
mov edi, ebx
mov esi, eax
mov eax, ecx
call fcn.0044f0d0
mov eax, esi
mov edi, ebp
jmp 0x68f1f6
mov dword [esp + 0x64], ebp
mov dword [esp + 0xfc], ecx
lea eax, [0x7f06c0]
mov dword [esp], eax
mov ecx, dword [esp + 0x110]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x68]
mov edi, dword [esp + 0x38]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x10c]
jmp 0x68f1d7
cmp ecx, edi
jmp 0x68f1a7
cmp ecx, edi
jmp 0x68f1a7
mov dword [esp + 0x128], ebx
mov dword [esp + 0x12c], ebp
mov dword [esp + 0x130], edx
add esp, 0x114
ret
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], ecx
mov eax, dword [esp + 0x124]
mov dword [esp + 0x130], eax
add esp, 0x114
ret
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004288c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004288c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004288c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.0044d880
jmp fcn.0068ded0