Function at 0x61a930
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x77e447
push eax
mov dword fs:[0], esp
sub esp, 0x1ac
push ebx
push ebp
push esi
push edi
mov esi, ecx
call fcn.004089d0
mov edi, eax
xor ebx, ebx
cmp edi, ebx
jne 0x61a965
xor al, al
jmp 0x61bbc1
cmp byte [0x992082], bl
je 0x61a978
push 0x1b16358
call dword [0x794290]
cmp byte [0x992082], bl
mov edi, dword [edi + 0x2714]
je 0x61a991
push 0x1b16358
call dword [0x79428c]
cmp edi, ebx
je 0x61a95e
call fcn.0067baa0
mov dword [esi + 0x44c], eax
sub eax, dword [esi + 0x448]
cmp eax, dword [esi + 0x444]
jb 0x61bbbf
push ebx
push 0x97275c
push 0x971110
push ebx
push edi
mov byte [esi + 0x8b8], bl
call fcn.0074d229
mov ebp, eax
add esp, 0x14
cmp ebp, ebx
je 0x61a95e
mov eax, dword [ebp + 0x5754]
push eax
push 0x7ab60c
lea eax, [esi + 0x6bc]
push 0x40
push eax
call fcn.0067ad00
fld1
fst dword [esi + 0x6ac]
lea ecx, [esi + 0x6fc]
fst dword [esi + 0x6b0]
fldz
fstp dword [esi + 0x6b4]
fstp dword [esi + 0x6b8]
mov eax, dword [ebp + 0x3e4]
push eax
push 0x79a808
push 0x20
push ecx
call fcn.0067ad00
add esp, 0x20
push ebp
mov ecx, esi
call fcn.00616c60
mov eax, dword [ebp + 0x3a8]
or ecx, 0xffffffff
cmp eax, 3
ja case.0x61aa3c.0
jmp dword [eax*4 + 0x61bbdc]
mov dword [esi + 0x4a0], ebx
jmp 0x61aa69
mov dword [esi + 0x4a0], 1
jmp 0x61aa69
mov dword [esi + 0x4a0], 2
jmp 0x61aa69
mov dword [esi + 0x4a0], ecx
mov eax, dword [ebp + 0x575c]
mov ecx, ebp
mov dword [esi + 0x4d4], eax
call fcn.00446490
test eax, eax
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
jge 0x61aa8e
fadd dword [0x7bb540]
fcomp qword [0x815840]
fnstsw ax
fld qword [0x7c9050]
test ah, 0x41
jne 0x61aaea
mov edx, dword [ebp + 0x300]
fild dword [ebp + 0x300]
test edx, edx
jge 0x61aab7
fadd dword [0x7bb540]
fmulp st(1)
mov ecx, ebp
fstp qword [esp + 0x14]
call fcn.00446490
test eax, eax
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
jge 0x61aad6
fadd dword [0x7bb540]
fdivr qword [esp + 0x14]
fstp dword [esi + 0x8ac]
fld qword [0x7c9050]
fldz
jmp 0x61aaf2
fldz
fst dword [esi + 0x8ac]
fld dword [esi + 0x8ac]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fcom st(2)
fnstsw ax
test ah, 5
jp 0x61ab12
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x61ab29
fstp st(1)
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jnp 0x61ab2d
fstp st(0)
fld dword [0x7c2240]
jmp 0x61ab2d
fstp st(0)
fstp st(1)
fstp dword [esp + 0x14]
mov ecx, ebp
fld dword [esp + 0x14]
fstp dword [esi + 0x8ac]
mov edi, dword [ebp + 0x300]
call fcn.00446490
cmp byte [esi + 0x20d], bl
push eax
push edi
je 0x61ab62
push 0x8bff94
push 0x20
lea eax, [esi + 0x73c]
push eax
jmp 0x61ab70
push str._d__d
push 0x20
lea ecx, [esi + 0x73c]
push ecx
call fcn.0067ad00
fld dword [esi + 0x450]
fld qword [0x888128]
add esp, 0x14
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jp 0x61ac29
fld dword [esi + 0x8ac]
fcompp
fnstsw ax
test ah, 5
jp 0x61ac2b
cmp dword [ebp + 0xd90], ebx
jne 0x61ac2b
xor eax, eax
push 0x32
push 0x8c01a0
lea edx, [esp + 0x24]
push 0x20
push edx
mov byte [esp + 0x2c], bl
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov dword [esp + 0x39], eax
mov dword [esp + 0x3d], eax
mov dword [esp + 0x41], eax
mov dword [esp + 0x45], eax
mov word [esp + 0x49], ax
mov byte [esp + 0x4b], al
call fcn.0067ad00
add esp, 0x10
push ebx
push ebx
push ebx
sub esp, 0x1c
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004028b0
mov ecx, dword [0x1b0db2c]
call fcn.00606e70
fld dword [0x7ab540]
mov edx, dword [ebp]
mov eax, dword [edx + 0x200]
push ecx
mov ecx, ebp
fstp dword [esp]
call eax
jmp 0x61ac2b
fstp st(0)
fld dword [esi + 0x450]
fld qword [0x8bc138]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jp 0x61acdc
fld dword [esi + 0x8ac]
fcompp
fnstsw ax
test ah, 5
jp 0x61acde
cmp dword [ebp + 0xd90], ebx
jne 0x61acde
xor eax, eax
push 0x1e
push 0x8c01a0
lea ecx, [esp + 0x24]
push 0x20
push ecx
mov byte [esp + 0x2c], bl
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov dword [esp + 0x39], eax
mov dword [esp + 0x3d], eax
mov dword [esp + 0x41], eax
mov dword [esp + 0x45], eax
mov word [esp + 0x49], ax
mov byte [esp + 0x4b], al
call fcn.0067ad00
add esp, 0x10
push ebx
push ebx
push ebx
sub esp, 0x1c
lea edx, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
call fcn.004028b0
mov ecx, dword [0x1b0db2c]
call fcn.00606e70
fld dword [0x7bb5cc]
mov eax, dword [ebp]
mov edx, dword [eax + 0x200]
push ecx
mov ecx, ebp
fstp dword [esp]
call edx
jmp 0x61acde
fstp st(0)
fld dword [0x79ae2c]
fcom dword [esi + 0x450]
fnstsw ax
test ah, 5
jp 0x61ad1f
fcomp dword [esi + 0x8ac]
fnstsw ax
test ah, 0x41
jne 0x61ad21
cmp dword [ebp + 0xd90], ebx
jne 0x61ad21
mov eax, dword [ebp]
fld dword [0x7bb45c]
mov edx, dword [eax + 0x200]
push ecx
mov ecx, ebp
fstp dword [esp]
call edx
jmp 0x61ad21
fstp st(0)
fld dword [0x79ab2c]
fcom dword [esi + 0x450]
fnstsw ax
test ah, 5
jp 0x61ad62
fcomp dword [esi + 0x8ac]
fnstsw ax
test ah, 0x41
jne 0x61ad64
cmp dword [ebp + 0xd90], ebx
jne 0x61ad64
mov eax, dword [ebp]
fld dword [0x7bb59c]
mov edx, dword [eax + 0x200]
push ecx
mov ecx, ebp
fstp dword [esp]
call edx
jmp 0x61ad64
fstp st(0)
fld dword [0x7bb5c0]
fcom dword [esi + 0x450]
fnstsw ax
test ah, 5
jp 0x61ada5
fcomp dword [esi + 0x8ac]
fnstsw ax
test ah, 0x41
jne 0x61ada7
cmp dword [ebp + 0xd90], ebx
jne 0x61ada7
mov eax, dword [ebp]
fld dword [0x7bb4d0]
mov edx, dword [eax + 0x200]
push ecx
mov ecx, ebp
fstp dword [esp]
call edx
jmp 0x61ada7
fstp st(0)
fld dword [esi + 0x8ac]
mov ecx, ebp
fstp dword [esi + 0x450]
call fcn.004464b0
test eax, eax
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
jge 0x61adcc
fadd dword [0x7bb540]
fcomp qword [0x815840]
fnstsw ax
test ah, 0x41
jne 0x61ae20
mov eax, dword [ebp + 0x304]
fild dword [ebp + 0x304]
test eax, eax
jge 0x61adef
fadd dword [0x7bb540]
fmul qword [0x7c9050]
mov ecx, ebp
fstp qword [esp + 0x14]
call fcn.004464b0
test eax, eax
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
jge 0x61ae12
fadd dword [0x7bb540]
fdivr qword [esp + 0x14]
fstp dword [esi + 0x8b0]
fldz
jmp 0x61ae28
fldz
fst dword [esi + 0x8b0]
fld dword [esi + 0x8b0]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fld qword [0x7c9050]
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x61ae69
fxch st(1)
fcom st(2)
fnstsw ax
test ah, 0x41
jne 0x61ae6d
fstp st(2)
fxch st(1)
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jnp 0x61ae71
fstp st(0)
fld dword [0x7c2240]
jmp 0x61ae71
fstp st(2)
jmp 0x61ae54
fstp st(0)
fstp st(0)
fstp dword [esp + 0x14]
mov ecx, ebp
fld dword [esp + 0x14]
fstp dword [esi + 0x8b0]
mov edi, dword [ebp + 0x304]
call fcn.004464b0
cmp byte [esi + 0x20e], bl
push eax
push edi
je 0x61aea6
push 0x8c0194
push 0x20
lea ecx, [esi + 0x75c]
push ecx
jmp 0x61aeb4
push str._d__d
push 0x20
lea edx, [esi + 0x75c]
push edx
call fcn.0067ad00
fld dword [esi + 0x454]
fld qword [0x888128]
add esp, 0x14
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jp 0x61af4e
fld dword [esi + 0x8b0]
fcompp
fnstsw ax
test ah, 5
jp 0x61af50
cmp dword [ebp + 0xd90], ebx
jne 0x61af50
xor eax, eax
push 0x32
push 0x8c0180
mov dword [esp + 0x25], eax
mov dword [esp + 0x29], eax
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov dword [esp + 0x39], eax
mov dword [esp + 0x3d], eax
mov word [esp + 0x41], ax
mov byte [esp + 0x43], al
lea eax, [esp + 0x24]
push 0x20
push eax
mov byte [esp + 0x2c], bl
call fcn.0067ad00
add esp, 0x10
push ebx
push ebx
push ebx
sub esp, 0x1c
lea edx, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
call fcn.004028b0
mov ecx, dword [0x1b0db2c]
call fcn.00606e70
jmp 0x61af50
fstp st(0)
fld dword [esi + 0x454]
fld qword [0x8bc138]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jp 0x61afe2
fld dword [esi + 0x8b0]
fcompp
fnstsw ax
test ah, 5
jp 0x61afe4
cmp dword [ebp + 0xd90], ebx
jne 0x61afe4
xor eax, eax
push 0x1e
push 0x8c0180
mov dword [esp + 0x25], eax
mov dword [esp + 0x29], eax
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov dword [esp + 0x39], eax
mov dword [esp + 0x3d], eax
mov word [esp + 0x41], ax
mov byte [esp + 0x43], al
lea eax, [esp + 0x24]
push 0x20
push eax
mov byte [esp + 0x2c], bl
call fcn.0067ad00
add esp, 0x10
push ebx
push ebx
push ebx
sub esp, 0x1c
lea edx, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
call fcn.004028b0
mov ecx, dword [0x1b0db2c]
call fcn.00606e70
jmp 0x61afe4
fstp st(0)
fld dword [esi + 0x8b0]
mov edx, 3
fstp dword [esi + 0x454]
mov eax, dword [ebp + 0x3e4]
cmp eax, 0x32
jb 0x61b033
cmp eax, 0x50
jae 0x61b017
lea ecx, [eax - 0x32]
mov eax, 0xcccccccd
mul ecx
shr edx, 3
add edx, 4
jmp 0x61b033
cmp eax, 0x5f
ja 0x61b02e
lea edx, [eax - 0x50]
mov eax, 0xcccccccd
mul edx
shr edx, 2
add edx, 7
jmp 0x61b033
mov edx, 0xa
movzx eax, word [ebp + 0x6020]
lea ecx, [edx + edx*4]
movzx eax, ax
add ecx, ecx
add ecx, ecx
mov dword [esp + 0x14], eax
mov edx, ecx
test edx, edx
fild dword [esp + 0x14]
fld qword [0x7c9050]
mov dword [esp + 0x10], edx
fmul st(1), st(0)
fild dword [esp + 0x10]
jge 0x61b068
fadd dword [0x7bb540]
fdivp st(2)
fxch st(1)
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fst dword [esi + 0x8b4]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fcom st(1)
fnstsw ax
test ah, 5
jp 0x61b098
fldz
fcom st(1)
fnstsw ax
test ah, 5
jp 0x61b0ad
fstp st(0)
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jnp 0x61b0b1
fstp st(0)
fld dword [0x7c2240]
jmp 0x61b0b1
fstp st(1)
fstp st(1)
cmp byte [esi + 0x20f], bl
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
mov byte [esi + 0x518], bl
fstp dword [esi + 0x8b4]
je 0x61b0e5
push 0x8c0164
lea eax, [esi + 0x77c]
push 0x20
push eax
call fcn.0067ad00
add esp, 0xc
jmp 0x61b107
movzx eax, word [ebp + 0x6020]
push ecx
movzx ecx, ax
push ecx
push str._d__d
lea edx, [esi + 0x77c]
push 0x20
push edx
call fcn.0067ad00
add esp, 0x14
movzx edi, byte [ebp + 0x602e]
push 0xff
lea eax, [esp + 0x41]
push ebx
push eax
mov dword [esi + 0xa18], edi
mov byte [esp + 0x48], bl
call fcn.0074d440
mov eax, dword [esi + 0xd4]
add esp, 0xc
cmp eax, ebx
jl 0x61b2a5
cmp byte [esi + 0x20a], bl
je 0x61b1eb
cmp eax, dword [esi + 0x304]
jge 0x61b312
mov ecx, dword [esi + eax*8 + 0x2b8]
mov edx, dword [ecx + 4]
cmp edx, 0xea60
jbe 0x61b198
mov ecx, dword [ecx + 0x20]
mov eax, 0x45e7b273
mul edx
shr edx, 0xe
add edx, 1
push edx
lea edx, [ecx + 0x24]
push edx
add ecx, 4
push ecx
push 0x8bff08
lea eax, [esp + 0x4c]
push 0x100
push eax
call fcn.0067ad00
add esp, 0x18
jmp 0x61b312
mov dword [esp + 0x10], edx
fild dword [esp + 0x10]
test edx, edx
mov eax, edx
jge 0x61b1ac
fadd dword [0x7bb540]
cmp eax, 1
fdiv qword [0x7bd240]
fstp dword [esp + 0x14]
jne 0x61b271
mov eax, dword [ecx + 0x20]
cmp byte [eax + 0x24], bl
jne 0x61b24b
add eax, 4
push eax
push 0x8bfed0
lea eax, [esp + 0x44]
push 0x100
push eax
call fcn.0067ad00
add esp, 0x10
jmp 0x61b312
cmp eax, dword [esi + 0x3f8]
jge 0x61b312
mov ecx, dword [esi + eax*8 + 0x3ac]
mov edx, dword [ecx + 4]
cmp edx, 0xea60
jbe 0x61b23e
mov ecx, dword [ecx + 0x20]
mov eax, 0x45e7b273
mul edx
shr edx, 0xe
add edx, 1
push edx
lea edx, [ecx + 0x24]
push edx
add ecx, 4
push ecx
push 0x8bff08
lea eax, [esp + 0x4c]
push 0x100
push eax
call fcn.0067ad00
add esp, 0x18
jmp 0x61b312
mov dword [esp + 0x10], edx
fild dword [esp + 0x10]
jmp 0x61b1a0
mov ecx, eax
lea edx, [ecx + 0x24]
push edx
add ecx, 4
push ecx
push 0x8bfe94
lea eax, [esp + 0x48]
push 0x100
push eax
call fcn.0067ad00
add esp, 0x14
jmp 0x61b312
fld dword [esp + 0x14]
mov ecx, dword [ecx + 0x20]
fadd qword [0x795f80]
sub esp, 8
lea edx, [ecx + 0x24]
add ecx, 4
fstp qword [esp]
push edx
push ecx
push 0x8bfe20
lea eax, [esp + 0x50]
push 0x100
push eax
call fcn.0067ad00
add esp, 0x1c
jmp 0x61b312
cmp byte [esi + 0x211], bl
je 0x61b312
push 0x100
lea ecx, [esp + 0x40]
push ebx
push ecx
call fcn.0074d440
add esp, 0xc
cmp edi, ebx
jbe 0x61b312
push 0x7f
lea edx, [esp + 0x141]
push ebx
push edx
mov byte [esp + 0x148], bl
call fcn.0074d440
mov eax, 0x88888889
mul edi
shr edx, 5
push edx
push 0x8c014c
lea eax, [esp + 0x150]
push 0x80
push eax
call fcn.0067ad00
lea ecx, [esp + 0x158]
push ecx
lea edx, [esp + 0x5c]
push edx
call fcn.00409610
add esp, 0x24
mov ecx, ebp
call fcn.0049f110
test al, al
je 0x61b453
xor eax, eax
mov byte [esi + 0x212], 1
mov dword [esp + 0x1d], eax
mov dword [esp + 0x21], eax
mov dword [esp + 0x25], eax
mov dword [esp + 0x29], eax
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov word [esp + 0x39], ax
mov byte [esp + 0x3b], al
mov eax, dword [ebp + 0xecc]
mov byte [esp + 0x1c], bl
movzx eax, byte [eax + 0x14]
cmp eax, 3
ja case.default.0x61b366
jmp dword [eax*4 + 0x61bbec]
push 0x8c0140
push 0x7ab60c
push 0x20
lea eax, [esp + 0x28]
push eax
jmp 0x61b3f7
push 0x8c0134
push 0x7ab60c
lea ecx, [esp + 0x24]
push 0x20
push ecx
call fcn.0067ad00
mov dword [esi + 0x6a8], 1
jmp 0x61b402
push 0x8c0128
push 0x7ab60c
lea edx, [esp + 0x24]
push 0x20
push edx
call fcn.0067ad00
mov dword [esi + 0x6a8], 2
jmp 0x61b402
push 0x8c011c
push 0x7ab60c
lea eax, [esp + 0x24]
push 0x20
push eax
call fcn.0067ad00
mov dword [esi + 0x6a8], 3
jmp 0x61b402
push 0x8c0140
push 0x7ab60c
push 0x20
lea ecx, [esp + 0x28]
push ecx
call fcn.0067ad00
mov dword [esi + 0x6a8], ebx
add esp, 0x10
lea edx, [esp + 0x1c]
push edx
push 0x7ab60c
lea eax, [esi + 0x79c]
push 0x80
push eax
call fcn.0067ad00
add esp, 0x10
cmp byte [esi + 0x213], bl
je 0x61b459
push 0x8c0114
push 0x8c0104
push 0x8c00e8
push 0x8c0070
lea ecx, [esp + 0x4c]
push 0x100
push ecx
call fcn.0067ad00
add esp, 0x18
jmp 0x61b459
mov byte [esi + 0x212], bl
mov edx, dword [esi]
mov edx, dword [edx + 0x78]
lea eax, [esp + 0x3c]
push eax
mov ecx, esi
call edx
mov eax, dword [ebp + 0x3e4]
mov edi, dword [ebp + 0x3e8]
push eax
call fcn.004e1b20
add esp, 4
cmp edi, eax
mov byte [esi + 0x54c], bl
jb 0x61b48f
mov byte [esi + 0x54d], 1
jmp 0x61b495
mov byte [esi + 0x54d], bl
mov ecx, ebp
call fcn.00610fc0
cmp eax, ebx
je 0x61b504
mov byte [esi + 0x208], 1
fild dword [eax + 0x300]
mov ecx, dword [eax + 0x300]
test ecx, ecx
jge 0x61b4bd
fadd dword [0x7bb540]
mov ecx, eax
fstp dword [esp + 0x14]
call fcn.00446490
test eax, eax
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
jge 0x61b4da
fadd dword [0x7bb540]
fstp dword [esp + 0x10]
fld dword [esp + 0x14]
fdiv dword [esp + 0x10]
fcomp qword [0x7c1340]
fnstsw ax
test ah, 5
jp 0x61b4fc
mov byte [esi + 0x209], 1
jmp 0x61b50a
mov byte [esi + 0x209], bl
jmp 0x61b50a
mov byte [esi + 0x208], bl
lea edi, [esi + 0x45c]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61b555
mov eax, dword [esi + 0x458]
cmp byte [eax], bl
je 0x61b555
push 1
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], ebx
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], 0xffffffff
call fcn.004350c0
lea edi, [esi + 0x46c]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61b5a5
mov eax, dword [esi + 0x468]
cmp byte [eax], 0
je 0x61b5a5
push 1
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 1
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], 0xffffffff
call fcn.004350c0
lea edi, [esi + 0x464]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61b5f5
mov eax, dword [esi + 0x460]
cmp byte [eax], 0
je 0x61b5f5
push 1
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 2
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], 0xffffffff
call fcn.004350c0
lea edi, [esi + 0x4e4]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61b645
mov eax, dword [esi + 0x4e0]
cmp byte [eax], 0
je 0x61b645
push 1
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 3
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], 0xffffffff
call fcn.004350c0
lea edi, [esi + 0x4e8]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61b695
mov eax, dword [esi + 0x4ec]
cmp byte [eax], 0
je 0x61b695
push 1
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 4
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], 0xffffffff
call fcn.004350c0
lea edi, [esi + 0x4f0]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61b6e5
mov eax, dword [esi + 0x4f4]
cmp byte [eax], 0
je 0x61b6e5
push 1
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 5
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], 0xffffffff
call fcn.004350c0
lea edi, [esi + 0x4f8]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61b735
mov eax, dword [esi + 0x4fc]
cmp byte [eax], 0
je 0x61b735
push 1
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 6
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], 0xffffffff
call fcn.004350c0
lea edi, [esi + 0x504]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61b785
mov eax, dword [esi + 0x500]
cmp byte [eax], 0
je 0x61b785
push 1
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 7
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], 0xffffffff
call fcn.004350c0
lea ebx, [esi + 0x50c]
mov ecx, ebx
call fcn.00435130
test eax, eax
jne 0x61b7d6
mov eax, dword [esi + 0x508]
cmp byte [eax], 0
je 0x61b7d6
push 1
push 0
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, ebx
mov dword [esp + 0x1c8], 8
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], 0xffffffff
call fcn.004350c0
lea edi, [esi + 0x4dc]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61b827
mov eax, dword [esi + 0x4d8]
cmp byte [eax], 0
je 0x61b827
push 1
push 0
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 9
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], 0xffffffff
call fcn.004350c0
mov edx, dword [esi + 0x4a0]
lea ecx, [esi + edx*4 + 0x484]
call fcn.00435130
test eax, eax
jne 0x61b895
mov eax, dword [esi + 0x4a0]
test eax, eax
jl 0x61b895
mov ecx, dword [esi + eax*4 + 0x478]
cmp byte [ecx], 0
je 0x61b895
push 1
mov edx, ecx
push 0
push edx
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov eax, dword [esi + 0x4a0]
lea ecx, [esi + eax*4 + 0x484]
mov dword [esp + 0x1c8], 0xa
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], 0xffffffff
call fcn.004350c0
mov ecx, dword [esi + 0x4d4]
lea ecx, [esi + ecx*4 + 0x4b4]
call fcn.00435130
test eax, eax
jne 0x61b903
mov eax, dword [esi + 0x4d4]
test eax, eax
jl 0x61b903
mov edx, dword [esi + eax*4 + 0x4a4]
cmp byte [edx], 0
je 0x61b903
push 1
push 0
mov eax, edx
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
mov ecx, dword [esi + 0x4d4]
push eax
lea ecx, [esi + ecx*4 + 0x4b4]
mov dword [esp + 0x1c8], 0xb
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], 0xffffffff
call fcn.004350c0
mov ecx, ebx
call fcn.00435130
test eax, eax
jne 0x61b94e
mov eax, dword [esi + 0x508]
cmp byte [eax], 0
je 0x61b94e
push 1
push 0
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, ebx
mov dword [esp + 0x1c8], 0xc
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], 0xffffffff
call fcn.004350c0
lea edi, [esi + 0x514]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61b9a0
mov eax, dword [esi + 0x510]
cmp byte [eax], 0
je 0x61b9a0
push 1
push 0
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 0xd
call fcn.00435280
or ebx, 0xffffffff
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], ebx
call fcn.004350c0
jmp 0x61b9a3
or ebx, 0xffffffff
lea edi, [esi + 0x520]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61b9f0
mov eax, dword [esi + 0x51c]
cmp byte [eax], 0
je 0x61b9f0
push 1
push 0
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 0xe
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], ebx
call fcn.004350c0
lea edi, [esi + 0x528]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61ba3d
mov eax, dword [esi + 0x524]
cmp byte [eax], 0
je 0x61ba3d
push 1
push 0
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 0xf
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], ebx
call fcn.004350c0
lea edi, [esi + 0x530]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61ba8a
mov eax, dword [esi + 0x52c]
cmp byte [eax], 0
je 0x61ba8a
push 1
push 0
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 0x10
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], ebx
call fcn.004350c0
lea edi, [esi + 0x474]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61bad7
mov eax, dword [esi + 0x470]
cmp byte [eax], 0
je 0x61bad7
push 1
push 0
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 0x11
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], ebx
call fcn.004350c0
lea edi, [esi + 0x538]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61bb28
mov edx, dword [esi + 0x534]
cmp byte [edx], al
je 0x61bb28
push 1
push eax
mov eax, dword [esi + 0x52c]
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 0x12
call fcn.00435280
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c4], ebx
call fcn.004350c0
mov ecx, ebp
call fcn.0049f120
test al, al
je 0x61bb76
lea edi, [esi + 0x540]
mov ecx, edi
call fcn.00435130
test eax, eax
jne 0x61bbac
mov eax, dword [esi + 0x53c]
cmp byte [eax], 0
je 0x61bbac
push 1
push 0
push eax
lea ecx, [esp + 0x1c]
call fcn.004351f0
push eax
mov ecx, edi
mov dword [esp + 0x1c8], 0x13
call fcn.00435280
lea ecx, [esp + 0x10]
jmp 0x61bba0
push 0
lea ecx, [esp + 0x18]
call fcn.00435170
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esi + 0x540]
mov dword [esp + 0x1c8], 0x14
call fcn.00435280
lea ecx, [esp + 0x14]
mov dword [esp + 0x1c4], ebx
call fcn.004350c0
mov edx, dword [esi + 0x44c]
mov byte [esi + 0x8b8], 1
mov dword [esi + 0x448], edx
mov al, 1
mov ecx, dword [esp + 0x1bc]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x1b8
ret