Function at 0x60f7f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x198]
cmp eax, dword [ecx + 8]
jbe 0x6108d5
sub esp, 0x218
mov ecx, dword [esp + 0x21c]
test byte [ecx], al
nop
nop
nop
lea edi, [esp + 0xd0]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0xd0], 0x7276726e
mov dword [esp + 0xd4], 1
mov byte [esp + 0xd8], 1
mov dword [esp + 0xdc], 1
mov ecx, dword [esp + 0x21c]
mov edx, dword [ecx + 0x64]
mov ebx, dword [ecx + 0x68]
mov dword [esp + 0xe0], edx
mov dword [esp + 0xe4], ebx
mov edx, dword [ecx + 0x4c]
inc edx
mov ebx, dword [ecx + 0x48]
mov ebp, dword [ecx + 0x50]
mov esi, ecx
add ecx, 0x48
mov dword [esp + 0x214], ecx
cmp ebp, edx
jae 0x60f8ef
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x60f8d9
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x60f8e5
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov esi, ebx
mov edx, ecx
mov ebx, eax
xor eax, eax
mov ecx, edi
mov dword [esi + 0x4c], edx
lea edx, [edx + edx*2]
lea edi, [ebx + edx*8 - 0x18]
mov edx, esi
lea esi, [esp + 0xd0]
call fcn.004664c4
nop
nop
mov ecx, dword [edx + 0x64]
mov ebx, dword [edx + 0x30]
mov ebp, dword [edx + 0x38]
mov esi, ecx
mov ecx, dword [edx + 0x34]
inc ecx
cmp ebp, ecx
jae 0x60f979
mov dword [esp + 0x24], esi
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6b2bc0]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x38], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x60f967
mov dword [ebx + 0x30], eax
jmp 0x60f96f
lea edi, [ebx + 0x30]
call fcn.00465d80
mov edx, ebx
mov esi, dword [esp + 0x24]
mov ebx, eax
xor eax, eax
mov dword [edx + 0x34], ecx
lea ebp, [ebx + ecx*8 - 4]
mov dword [ebp], esi
lea edi, [ebx + ecx*8 - 8]
mov ecx, dword [0x1eaa9f0]
test ecx, ecx
jne 0x60f999
mov dword [edi], 0
jmp 0x60f9a2
xor eax, eax
call fcn.00465d80
xor eax, eax
inc dword [edx + 0x64]
movzx ecx, byte [edx + 0x14]
cmp cl, 4
jne 0x60fb6a
nop
nop
nop
lea edi, [esp + 0xb8]
call fcn.00465fea
mov dword [esp + 0xb8], 0x6c747261
mov dword [esp + 0xbc], 1
mov byte [esp + 0xc0], 1
mov dword [esp + 0xc4], 1
mov ecx, dword [edx + 0x64]
mov ebx, dword [edx + 0x68]
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], ebx
mov ecx, dword [edx + 0x4c]
inc ecx
mov ebx, dword [edx + 0x48]
mov ebp, dword [edx + 0x50]
cmp ebp, ecx
jb 0x60fa19
mov edi, dword [esp + 0x214]
mov eax, ebx
mov ebx, edx
jmp 0x60fa73
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x60fa67
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x60fa73
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8 - 0x18]
lea esi, [esp + 0xb8]
mov edi, ecx
call fcn.004664c4
nop
nop
lea edi, [esp + 0xa0]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0xa0], 0x6c74726d
mov dword [esp + 0xa4], 1
mov byte [esp + 0xa8], 1
mov dword [esp + 0xac], 1
mov ecx, dword [ebx + 0x64]
mov edx, dword [ebx + 0x68]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], edx
mov ecx, dword [ebx + 0x4c]
inc ecx
mov edx, dword [ebx + 0x48]
mov ebp, dword [ebx + 0x50]
cmp ebp, ecx
jb 0x60faf1
mov edi, dword [esp + 0x214]
mov eax, edx
jmp 0x60fb4b
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x60fb3f
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x60fb4b
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8 - 0x18]
lea esi, [esp + 0xa0]
mov eax, edi
mov edi, ecx
call fcn.004664c4
jmp 0x60fd1d
cmp cl, 5
jne 0x60fd14
nop
nop
nop
lea edi, [esp + 0x88]
call fcn.00465fea
mov dword [esp + 0x88], 0x72746c61
mov dword [esp + 0x8c], 1
mov byte [esp + 0x90], 1
mov dword [esp + 0x94], 1
mov ecx, dword [edx + 0x64]
mov ebx, dword [edx + 0x68]
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], ebx
mov ecx, dword [edx + 0x4c]
inc ecx
mov ebx, dword [edx + 0x48]
mov ebp, dword [edx + 0x50]
cmp ebp, ecx
jb 0x60fbda
mov edi, dword [esp + 0x214]
mov eax, ebx
mov ebx, edx
jmp 0x60fc34
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x60fc28
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x60fc34
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8 - 0x18]
lea esi, [esp + 0x88]
mov edi, ecx
call fcn.004664c4
nop
lea edi, [esp + 0x178]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0x178], 0x72746c6d
mov dword [esp + 0x17c], 1
mov ecx, dword [ebx + 0x64]
mov edx, dword [ebx + 0x68]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x18c], edx
mov ecx, dword [ebx + 0x4c]
inc ecx
mov edx, dword [ebx + 0x48]
mov ebp, dword [ebx + 0x50]
cmp ebp, ecx
jb 0x60fc9e
mov edi, dword [esp + 0x214]
mov eax, edx
jmp 0x60fcf8
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x60fcec
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x60fcf8
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8 - 0x18]
lea esi, [esp + 0x178]
mov eax, edi
mov edi, ecx
call fcn.004664c4
jmp 0x60fd1d
mov eax, dword [esp + 0x214]
mov ebx, edx
nop
nop
lea edi, [esp + 0x160]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0x160], 0x66726163
mov dword [esp + 0x164], 1
mov ecx, dword [ebx + 0x64]
mov edx, dword [ebx + 0x68]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x174], edx
mov ecx, dword [ebx + 0x4c]
inc ecx
mov edx, dword [ebx + 0x48]
mov ebp, dword [ebx + 0x50]
cmp ebp, ecx
jb 0x60fd70
mov edi, dword [esp + 0x214]
mov eax, edx
jmp 0x60fdca
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x60fdbe
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x60fdca
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8 - 0x18]
lea esi, [esp + 0x160]
mov edi, ecx
call fcn.004664c4
nop
nop
lea edi, [esp + 0x148]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0x148], 0x6e756d72
mov dword [esp + 0x14c], 1
mov ecx, dword [ebx + 0x64]
mov edx, dword [ebx + 0x68]
mov dword [esp + 0x158], ecx
mov dword [esp + 0x15c], edx
mov ecx, dword [ebx + 0x4c]
inc ecx
mov edx, dword [ebx + 0x48]
mov ebp, dword [ebx + 0x50]
cmp ebp, ecx
jb 0x60fe35
mov edi, dword [esp + 0x214]
mov eax, edx
jmp 0x60fe8f
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x60fe83
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x60fe8f
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8 - 0x18]
lea esi, [esp + 0x148]
mov edi, ecx
call fcn.004664c4
nop
nop
lea edi, [esp + 0x130]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0x130], 0x646e6f6d
mov dword [esp + 0x134], 1
mov ecx, dword [ebx + 0x64]
mov edx, dword [ebx + 0x68]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x144], edx
mov ecx, dword [ebx + 0x4c]
inc ecx
mov edx, dword [ebx + 0x48]
mov ebp, dword [ebx + 0x50]
cmp ebp, ecx
jb 0x60fefa
mov edi, dword [esp + 0x214]
mov eax, edx
jmp 0x60ff54
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x60ff48
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x60ff54
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8 - 0x18]
lea esi, [esp + 0x130]
mov edi, ecx
call fcn.004664c4
nop
nop
lea edi, [esp + 0x118]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0x118], 0x72616e64
mov dword [esp + 0x11c], 0xff
mov byte [esp + 0x120], 0x21
mov dword [esp + 0x124], 0xff
mov ecx, dword [ebx + 0x64]
mov edx, dword [ebx + 0x68]
mov dword [esp + 0x128], ecx
mov dword [esp + 0x12c], edx
mov ecx, dword [ebx + 0x4c]
inc ecx
mov edx, dword [ebx + 0x48]
mov ebp, dword [ebx + 0x50]
cmp ebp, ecx
jb 0x60ffd2
mov edi, dword [esp + 0x214]
mov eax, edx
jmp 0x61002c
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x610020
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x61002c
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8 - 0x18]
lea esi, [esp + 0x118]
mov edi, ecx
call fcn.004664c4
nop
nop
lea edi, [esp + 0x100]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0x100], 0x7472616b
mov dword [esp + 0x104], 1
mov byte [esp + 0x108], 3
mov dword [esp + 0x10c], 1
mov ecx, dword [ebx + 0x64]
mov edx, dword [ebx + 0x68]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], edx
mov ecx, dword [ebx + 0x4c]
inc ecx
mov edx, dword [ebx + 0x48]
mov ebp, dword [ebx + 0x50]
cmp ebp, ecx
jb 0x6100aa
mov edi, dword [esp + 0x214]
mov eax, edx
jmp 0x610104
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x6100f8
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x610104
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8 - 0x18]
lea esi, [esp + 0x100]
mov edi, ecx
call fcn.004664c4
nop
nop
nop
lea edi, [esp + 0x70]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0x70], 0x48617266
mov dword [esp + 0x74], 1
mov byte [esp + 0x78], 1
mov dword [esp + 0x7c], 1
mov ecx, dword [ebx + 0x64]
mov edx, dword [ebx + 0x68]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], edx
mov ecx, dword [ebx + 0x4c]
inc ecx
mov edx, dword [ebx + 0x48]
mov ebp, dword [ebx + 0x50]
cmp ebp, ecx
jb 0x610174
mov edi, dword [esp + 0x214]
mov eax, edx
jmp 0x6101ce
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x6101c2
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x6101ce
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8 - 0x18]
lea esi, [esp + 0x70]
mov edi, ecx
call fcn.004664c4
nop
nop
nop
lea edi, [esp + 0x58]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0x58], 0x48415246
mov dword [esp + 0x5c], 1
mov byte [esp + 0x60], 1
mov dword [esp + 0x64], 1
mov ecx, dword [ebx + 0x64]
mov edx, dword [ebx + 0x68]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], edx
mov ecx, dword [ebx + 0x4c]
inc ecx
mov edx, dword [ebx + 0x48]
mov ebp, dword [ebx + 0x50]
cmp ebp, ecx
jb 0x61022e
mov eax, edx
jmp 0x610288
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x61027c
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x610288
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea edi, [eax + ecx*8 - 0x18]
lea esi, [esp + 0x58]
call fcn.004664c4
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call eax
nop
nop
nop
lea edi, [esp + 0x40]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0x40], 0x42757a7a
mov dword [esp + 0x44], 1
mov byte [esp + 0x48], 1
mov dword [esp + 0x4c], 1
mov ecx, dword [esp + 0x21c]
mov edx, dword [ecx + 0x64]
mov ebx, dword [ecx + 0x68]
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], ebx
mov edx, dword [ecx + 0x4c]
inc edx
mov ebx, dword [ecx + 0x48]
mov ebp, dword [ecx + 0x50]
cmp ebp, edx
jb 0x61030e
mov edi, dword [esp + 0x214]
mov ecx, edx
mov eax, ebx
mov ebx, dword [esp + 0x21c]
jmp 0x610368
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x61035c
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x610368
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8 - 0x18]
lea esi, [esp + 0x40]
mov edi, ecx
call fcn.004664c4
nop
nop
nop
lea edi, [esp + 0x28]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0x28], 0x42555a5a
mov dword [esp + 0x2c], 1
mov byte [esp + 0x30], 1
mov dword [esp + 0x34], 1
mov ecx, dword [ebx + 0x64]
mov edx, dword [ebx + 0x68]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
mov ecx, dword [ebx + 0x4c]
inc ecx
mov edx, dword [ebx + 0x48]
mov ebp, dword [ebx + 0x50]
cmp ebp, ecx
jb 0x6103cf
mov edi, dword [esp + 0x214]
mov eax, edx
jmp 0x610429
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x61041d
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x610429
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8 - 0x18]
lea esi, [esp + 0x28]
mov eax, edi
mov edi, ecx
call fcn.004664c4
lea edi, [esp + 0x1d8]
lea esi, [0x916b60]
call fcn.00466474
xor ecx, ecx
jmp 0x610478
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea edi, [edx + ecx*8 - 0x18]
lea esi, [esp + 0x1c0]
call fcn.004664c4
mov ecx, dword [esp + 0x24]
inc ecx
mov eax, dword [esp + 0x214]
cmp ecx, 7
jge 0x61055b
mov dword [esp + 0x24], ecx
lea edx, [esp + ecx*8 + 0x1d8]
movzx ebp, byte [edx + 4]
mov edx, dword [edx]
nop
lea edi, [esp + 0x1c0]
mov esi, eax
xor eax, eax
call fcn.00465fea
mov dword [esp + 0x1c0], edx
mov dword [esp + 0x1c4], 1
xchg ebp, eax
mov byte [esp + 0x1c8], al
xchg ebp, eax
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x6104d0
mov dword [esp + 0x1cc], 1
mov ecx, dword [ebx + 0x64]
mov edx, dword [ebx + 0x68]
mov dword [esp + 0x1d0], ecx
mov dword [esp + 0x1d4], edx
mov ecx, dword [ebx + 0x4c]
inc ecx
mov edx, dword [ebx + 0x48]
mov ebp, dword [ebx + 0x50]
cmp ebp, ecx
jae 0x610456
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x610544
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x610550
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov esi, edi
mov edx, eax
xor eax, eax
jmp 0x610456
movzx ecx, byte [ebx + 0x14]
and ecx, 0xfffffffe
cmp cl, 4
jne 0x610580
lea edi, [esp + 0x1d8]
lea esi, [0x916ba0]
call fcn.00466474
xor ecx, ecx
jmp 0x6107f2
nop
nop
lea edi, [esp + 0xe8]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0xe8], 0x76657274
mov dword [esp + 0xec], 1
mov byte [esp + 0xf0], 0x11
mov dword [esp + 0xf4], 1
mov ecx, dword [ebx + 0x64]
mov edx, dword [ebx + 0x68]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], edx
mov ecx, dword [ebx + 0x4c]
inc ecx
mov edx, dword [ebx + 0x48]
mov ebp, dword [ebx + 0x50]
cmp ebp, ecx
jb 0x6105e6
mov edi, dword [esp + 0x214]
mov eax, edx
jmp 0x610640
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x610634
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x610640
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8 - 0x18]
lea esi, [esp + 0xe8]
mov eax, edi
mov edi, ecx
call fcn.004664c4
mov ecx, dword [esp + 0x220]
mov edx, dword [esp + 0x224]
xor ebp, ebp
jmp 0x6106a6
mov dword [ecx + 0x4c], edx
mov ebx, ecx
lea ecx, [edx + edx*2]
lea ecx, [ebp + ecx*8 - 0x18]
mov edx, edi
mov edi, ecx
mov ebp, esi
lea esi, [esp + 0x190]
call fcn.004664c4
mov ecx, dword [esp + 0x210]
add ecx, 0x10
mov esi, ecx
lea ecx, [edx + 1]
mov eax, dword [esp + 0x214]
mov edx, ebp
mov ebp, ecx
mov ecx, esi
cmp edx, ebp
jle 0x6107b8
mov dword [esp + 0x210], ecx
mov esi, edx
mov edx, dword [ecx + 0xc]
mov edi, ebp
mov ebp, dword [ecx + 4]
mov ebx, dword [ecx + 8]
mov ecx, dword [ecx]
test ebx, ebx
jne 0x6106d7
cmp edx, 0x7fffffff
jne 0x6106d7
mov edx, 1
jmp 0x6106d9
xor edx, edx
mov dword [esp + 0x20], ecx
nop
mov ebx, edi
lea edi, [esp + 0x190]
xor eax, eax
call fcn.00465fea
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], ebp
mov byte [esp + 0x198], dl
test dl, 1
je 0x610713
mov dword [esp + 0x19c], ebp
mov ecx, dword [esp + 0x21c]
mov edx, dword [ecx + 0x64]
mov ebp, dword [ecx + 0x68]
mov dword [esp + 0x1a0], edx
mov dword [esp + 0x1a4], ebp
mov edx, dword [ecx + 0x4c]
inc edx
mov ebp, dword [ecx + 0x48]
mov edi, ebx
mov ebx, dword [ecx + 0x50]
cmp ebx, edx
jae 0x61066c
mov dword [esp + 0x24], edi
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x610794
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x6107a0
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov esi, dword [esp + 0x224]
mov edi, dword [esp + 0x24]
mov edx, ecx
mov ebp, eax
xor eax, eax
mov ecx, ebx
jmp 0x61066c
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
mov eax, dword [eax + 0x2c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call eax
add esp, 0x218
ret
mov dword [ebx + 0x4c], ecx
lea ecx, [ecx + ecx*2]
lea edi, [edx + ecx*8 - 0x18]
lea esi, [esp + 0x1a8]
call fcn.004664c4
mov ecx, dword [esp + 0x24]
inc ecx
mov eax, dword [esp + 0x214]
cmp ecx, 7
jge 0x61065a
mov dword [esp + 0x24], ecx
lea edx, [esp + ecx*8 + 0x1d8]
movzx ebp, byte [edx + 4]
mov edx, dword [edx]
nop
lea edi, [esp + 0x1a8]
mov esi, eax
xor eax, eax
call fcn.00465fea
mov dword [esp + 0x1a8], edx
mov dword [esp + 0x1ac], 1
xchg ebp, eax
mov byte [esp + 0x1b0], al
xchg ebp, eax
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x61084a
mov dword [esp + 0x1b4], 1
mov ecx, dword [ebx + 0x64]
mov edx, dword [ebx + 0x68]
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x1bc], edx
mov ecx, dword [ebx + 0x4c]
inc ecx
mov edx, dword [ebx + 0x48]
mov ebp, dword [ebx + 0x50]
cmp ebp, ecx
jae 0x6107d0
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6c9700]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x21c]
mov dword [ebx + 0x50], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x6108be
mov dword [ebx + 0x48], eax
mov edi, dword [esp + 0x214]
jmp 0x6108ca
mov edi, dword [esp + 0x214]
call fcn.00465d80
mov esi, edi
mov edx, eax
xor eax, eax
jmp 0x6107d0
call fcn.004649b0
jmp fcn.0060f7f0