Function at 0x611fd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x74]
cmp eax, dword [ecx + 8]
jbe 0x6137de
sub esp, 0xf4
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov byte [esp + 8], 0x2f
call fcn.00402a80
mov ecx, dword [esp + 0xc]
cmp ecx, 0xffffffff
jne 0x61320f
mov eax, dword [esp + 0xfc]
test eax, eax
je 0x6131f2
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0xbd5160]
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.004b4a80
mov eax, dword [esp + 0x10]
test eax, eax
jge 0x6131f2
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
call fcn.004b46c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
nop
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x6131df
lea ebx, [esp + 0xb4]
cmp ebx, edx
jne 0x6137c5
mov edx, dword [esp + 0xbc]
lea ebx, [eax + edx]
mov dword [esp + 0x70], ebx
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0xb8]
cmp ebx, ebp
ja 0x613196
mov dword [esp + 0x6c], ebp
mov dword [esp + 0xb0], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004614f0
mov eax, dword [esp + 0x70]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x100]
test eax, eax
je 0x61318f
mov ecx, dword [eax]
mov dword [esp + 0x54], ecx
lea eax, [0xaa9660]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
call fcn.00446f30
mov eax, dword [esp + 0xc]
mov dword [esp + 0xac], eax
lea edi, [esp + 0xc4]
xor eax, eax
call fcn.00460de4
lea eax, [0xab5360]
mov dword [esp], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 4], ecx
lea edx, [esp + 0xc4]
mov dword [esp + 8], edx
call fcn.0040d9f0
xor eax, eax
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0xac]
jmp 0x6121c4
lea eax, [esp + 0xc4]
mov dword [esp], eax
call fcn.0040dc60
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x5c], eax
mov ebx, dword [esp + 0xc4]
test ebx, ebx
je 0x61225d
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
lea esi, [eax + 1]
cmp esi, ecx
ja 0x612214
mov dword [esp + 0xa0], edx
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], ecx
lea ecx, [edx + eax*8 + 4]
mov dword [ecx], ebx
mov ecx, dword [0x10fd360]
lea ebx, [edx + eax*8]
test ecx, ecx
jne 0x612209
mov dword [ebx], ebp
jmp 0x6121a6
mov edi, ebx
mov eax, ebp
call fcn.00460b40
jmp 0x6121a6
mov dword [esp + 0x58], ebx
mov dword [esp + 0xa8], ebp
lea ebx, [0xaa9660]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
call fcn.00447080
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xa8]
jmp 0x6121e3
mov dword [esp + 0xa4], edx
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00409500
mov eax, dword [esp + 0xc]
lea ecx, [0xc89da0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e8f50
xor eax, eax
jmp 0x6126eb
inc eax
cmp edx, eax
jle 0x612652
jbe 0x6136da
mov dword [esp + 0x4c], eax
movzx esi, byte [eax + ebp]
xchg esi, eax
mov byte [esp + 0x21], al
xchg esi, eax
lea edi, [esi - 0x21]
xchg edi, eax
cmp al, 0x5e
xchg edi, eax
jb 0x6125cd
mov edi, 1
xchg edi, eax
test al, al
xchg edi, eax
je 0x612291
cmp eax, ecx
jb 0x6136cf
mov edi, eax
sub eax, ecx
mov dword [esp + 0x38], eax
neg eax
sar eax, 0x1f
and ecx, eax
lea eax, [ecx + ebp]
nop
mov ecx, dword [esp + 0xb4]
test ecx, ecx
je 0x6125c1
cmp ebx, ecx
jne 0x6136b7
mov ecx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x38]
lea edx, [ecx + ebp]
mov dword [esp + 0x6c], edx
mov edi, dword [esp + 0xc0]
mov esi, dword [esp + 0xb8]
cmp edx, edi
ja 0x612582
mov dword [esp + 0x68], edi
mov dword [esp + 0xb0], esi
add ecx, esi
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.004614f0
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xb8], eax
nop
nop
mov eax, dword [esp + 0xb4]
test eax, eax
je 0x61256f
lea edx, [esp + 0xb4]
cmp edx, eax
jne 0x61369f
mov ebx, dword [esp + 0xbc]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0xb8]
mov edi, dword [esp + 0xc0]
cmp edi, ebp
jb 0x61252b
lea ebp, [ebx + 1]
mov dword [esp + 0xbc], ebp
mov byte [esi + ebx], 0x25
movzx ebx, byte [esp + 0x21]
mov ebp, ebx
shr bl, 4
movzx ebx, bl
lea esi, [0xb9a176]
movzx ebx, byte [esi + ebx]
nop
mov edi, dword [esp + 0xb4]
test edi, edi
je 0x61251f
cmp edx, edi
jne 0x613687
mov edi, dword [esp + 0xbc]
lea edx, [edi + 1]
mov esi, dword [esp + 0xb8]
mov eax, ebp
mov ebp, dword [esp + 0xc0]
cmp ebp, edx
jb 0x6124d4
lea edx, [edi + 1]
mov dword [esp + 0xbc], edx
mov byte [esi + edi], bl
and eax, 0xf
lea edx, [0xb9a176]
movzx ebx, byte [edx + eax]
nop
mov ebp, dword [esp + 0xb4]
test ebp, ebp
je 0x6124c1
lea esi, [esp + 0xb4]
cmp esi, ebp
jne 0x61366f
mov ebp, dword [esp + 0xbc]
lea edi, [ebp + 1]
mov edx, dword [esp + 0xb8]
mov esi, dword [esp + 0xc0]
cmp edi, esi
ja 0x61247e
lea esi, [ebp + 1]
mov dword [esp + 0xbc], esi
mov byte [edx + ebp], bl
mov eax, dword [esp + 0x4c]
lea ecx, [eax + 1]
mov edx, dword [esp + 0x44]
lea ebx, [esp + 0xb4]
mov ebp, dword [esp + 0x74]
jmp 0x612291
mov byte [esp + 0x23], bl
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
call fcn.00447080
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xb8], edx
movzx ebx, byte [esp + 0x23]
jmp 0x612456
lea esi, [esp + 0xb4]
mov dword [esp + 0xb4], esi
jmp 0x61243a
mov byte [esp + 0x22], bl
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00447080
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xb8], esi
movzx eax, byte [esp + 0x21]
movzx ebx, byte [esp + 0x22]
jmp 0x612401
mov dword [esp + 0xb4], edx
jmp 0x6123df
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.00447080
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xb8], esi
lea edx, [esp + 0xb4]
jmp 0x6123a2
lea edx, [esp + 0xb4]
mov dword [esp + 0xb4], edx
jmp 0x612382
mov dword [esp + 0x78], eax
mov dword [esp + 0x68], ecx
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.00447080
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x68]
mov ebp, dword [esp + 0x38]
jmp 0x612321
mov dword [esp + 0xb4], ebx
jmp 0x6122f9
xchg esi, eax
cmp al, 0x2a
xchg esi, eax
jne 0x6125de
mov edi, 1
jmp 0x6122c1
xchg esi, eax
cmp al, 0x27
xchg esi, eax
jne 0x6125ef
mov edi, 1
jmp 0x6122c1
xchg esi, eax
cmp al, 0x25
xchg esi, eax
jne 0x612600
mov edi, 1
jmp 0x6122c1
mov dword [esp + 0x48], ecx
nop
lea eax, [0xb9912c]
mov dword [esp], eax
mov dword [esp + 4], 0xf
xchg esi, eax
movzx ecx, al
xchg esi, eax
mov dword [esp + 8], ecx
call fcn.004b29e0
mov eax, dword [esp + 0xc]
test eax, eax
xchg edi, ebx
setge bl
xchg edi, ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
lea ebx, [esp + 0xb4]
mov ebp, dword [esp + 0x74]
movzx esi, byte [esp + 0x21]
jmp 0x6122c1
cmp edx, ecx
jb 0x613666
sub edx, ecx
mov eax, edx
neg edx
sar edx, 0x1f
and ecx, edx
add ecx, ebp
nop
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x612a2a
cmp ebx, edx
jne 0x61364e
mov edx, dword [esp + 0xbc]
lea ebx, [edx + eax]
mov dword [esp + 0x6c], ebx
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0xb8]
cmp ebx, ebp
ja 0x6129e7
mov dword [esp + 0x68], ebp
mov dword [esp + 0xb0], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004614f0
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0x70]
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x5c]
cmp eax, ecx
jge 0x61316c
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0xa4]
lea edx, [ecx + eax*8]
mov ebx, dword [edx + 4]
mov dword [esp + 0x34], ebx
mov edx, dword [edx]
mov dword [esp + 0x98], edx
lea ebp, [0xab5360]
mov dword [esp], ebp
mov esi, dword [esp + 0x100]
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.00410690
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
nop
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x613159
lea ebx, [esp + 0xb4]
cmp ebx, edx
jne 0x613759
mov dword [esp + 0x44], ecx
mov dword [esp + 0x74], eax
mov edx, dword [esp + 0xbc]
lea ebp, [edx + 1]
mov esi, dword [esp + 0xb8]
mov edi, dword [esp + 0xc0]
cmp ebp, edi
ja 0x61310d
lea ebp, [edx + 1]
mov dword [esp + 0xbc], ebp
mov byte [esi + edx], 0x3b
nop
nop
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x613101
cmp ebx, edx
jne 0x613741
mov edx, dword [esp + 0xbc]
lea ebp, [edx + 1]
mov esi, dword [esp + 0xb8]
mov edi, dword [esp + 0xc0]
cmp edi, ebp
jb 0x6130b5
lea ebp, [edx + 1]
mov dword [esp + 0xbc], ebp
mov byte [esi + edx], 0x20
mov edx, dword [esp + 0x34]
test edx, edx
je 0x613098
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov dword [esp + 4], edx
lea ecx, [0xbd5160]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 1
call fcn.004b4a80
mov eax, dword [esp + 0x10]
test eax, eax
jge 0x613098
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.004b46c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
nop
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x613085
lea ebx, [esp + 0xb4]
cmp ebx, edx
jne 0x613729
mov edx, dword [esp + 0xbc]
lea ebp, [eax + edx]
mov dword [esp + 0x6c], ebp
mov esi, dword [esp + 0xc0]
mov edi, dword [esp + 0xb8]
cmp esi, ebp
jb 0x61303c
mov dword [esp + 0x68], esi
mov dword [esp + 0xb0], edi
add edx, edi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004614f0
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
call fcn.00611ef0
movzx eax, byte [esp + 8]
mov byte [esp + 0x20], al
test al, al
je 0x613030
nop
nop
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x61301d
lea ebx, [esp + 0xb4]
cmp ebx, edx
jne 0x613711
mov edx, dword [esp + 0xbc]
lea ebp, [edx + 1]
mov esi, dword [esp + 0xb8]
mov edi, dword [esp + 0xc0]
cmp edi, ebp
jb 0x612fd4
lea ebp, [edx + 1]
mov dword [esp + 0xbc], ebp
mov byte [esi + edx], 0x2a
nop
nop
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x612fc8
cmp ebx, edx
jne 0x6136f9
mov edx, dword [esp + 0xbc]
lea ebp, [edx + 1]
mov esi, dword [esp + 0xb8]
mov edi, dword [esp + 0xc0]
cmp edi, ebp
jb 0x612f7f
lea ebp, [edx + 1]
mov dword [esp + 0xbc], ebp
mov byte [esi + edx], 0x3d
test al, al
je 0x612a84
nop
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x612a78
cmp ebx, edx
jne 0x6136e1
mov edx, dword [esp + 0xbc]
lea ebp, [edx + 7]
mov esi, dword [esp + 0xc0]
mov edi, dword [esp + 0xb8]
cmp ebp, esi
ja 0x612a36
mov dword [edi + edx], 0x2d667475
mov dword [edi + edx + 3], 0x2727382d
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xc0], esi
mov dword [esp + 0xb8], edi
mov edx, dword [esp + 0x44]
mov ebp, dword [esp + 0x74]
xor eax, eax
xor ecx, ecx
jmp 0x612292
mov dword [esp + 0x68], eax
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x64], edx
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00447080
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x64]
jmp 0x6126a3
mov dword [esp + 0xb4], ebx
jmp 0x61267f
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x68], edx
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00447080
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x68]
lea ebx, [esp + 0xb4]
mov ebp, dword [esp + 0x6c]
jmp 0x6129b2
mov dword [esp + 0xb4], ebx
jmp 0x612992
mov ecx, dword [esp + 0x44]
test ecx, ecx
jne 0x612f47
xor eax, eax
test al, al
jne 0x612e84
nop
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x612e78
cmp ebx, edx
jne 0x61361e
mov edx, dword [esp + 0xbc]
lea ebp, [edx + 1]
mov esi, dword [esp + 0xb8]
mov edi, dword [esp + 0xc0]
cmp ebp, edi
ja 0x612e30
lea ebp, [edx + 1]
mov dword [esp + 0xbc], ebp
mov byte [esi + edx], 0x22
mov edx, dword [esp + 0x74]
xor eax, eax
xor ebp, ebp
jmp 0x612aeb
inc eax
cmp ecx, eax
jle 0x612cb3
jbe 0x613619
movzx esi, byte [eax + edx]
xchg esi, eax
cmp al, 0x22
xchg esi, eax
je 0x612b0b
xchg esi, eax
cmp al, 0x5c
xchg esi, eax
jne 0x612aea
cmp eax, ebp
jb 0x613610
mov esi, eax
sub eax, ebp
mov edi, eax
neg eax
sar eax, 0x1f
and ebp, eax
lea eax, [ebp + edx]
nop
mov ebp, dword [esp + 0xb4]
test ebp, ebp
je 0x612ca7
cmp ebx, ebp
jne 0x6135f8
mov dword [esp + 0x6c], esi
mov ebp, dword [esp + 0xbc]
lea edx, [ebp + edi]
mov dword [esp + 0x68], edx
mov ecx, dword [esp + 0xc0]
mov esi, dword [esp + 0xb8]
cmp ecx, edx
jb 0x612c5e
mov dword [esp + 0x64], ecx
mov dword [esp + 0xb0], esi
lea edx, [esi + ebp]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], edi
call fcn.004614f0
mov eax, dword [esp + 0x68]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xb8], eax
nop
mov eax, dword [esp + 0xb4]
test eax, eax
je 0x612c4b
lea edx, [esp + 0xb4]
cmp edx, eax
jne 0x6135e0
mov ebx, dword [esp + 0xbc]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0xb8]
mov edi, dword [esp + 0xc0]
cmp edi, ebp
jb 0x612c0a
lea edi, [ebx + 1]
mov dword [esp + 0xbc], edi
mov byte [esi + ebx], 0x5c
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x74]
lea ebx, [esp + 0xb4]
mov ebp, eax
jmp 0x612aea
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.00447080
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xb8], esi
lea edx, [esp + 0xb4]
jmp 0x612be2
lea edx, [esp + 0xb4]
mov dword [esp + 0xb4], edx
jmp 0x612bc6
mov dword [esp + 0x64], edi
mov dword [esp + 0x9c], eax
mov dword [esp + 0x60], ebp
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.00447080
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x9c]
mov ebp, dword [esp + 0x60]
mov edi, dword [esp + 0x64]
jmp 0x612b65
mov dword [esp + 0xb4], ebx
jmp 0x612b3c
cmp ecx, ebp
jb 0x6135d9
sub ecx, ebp
mov eax, ecx
neg ecx
sar ecx, 0x1f
and ebp, ecx
lea ecx, [ebp + edx]
nop
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x612e24
cmp ebx, edx
jne 0x6135c1
mov edx, dword [esp + 0xbc]
lea ebp, [eax + edx]
mov dword [esp + 0x6c], ebp
mov esi, dword [esp + 0xc0]
mov edi, dword [esp + 0xb8]
cmp esi, ebp
jb 0x612ddb
mov dword [esp + 0x68], esi
mov dword [esp + 0xb0], edi
add edx, edi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004614f0
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xb8], eax
nop
mov eax, dword [esp + 0xb4]
test eax, eax
je 0x612dcb
lea ecx, [esp + 0xb4]
cmp ecx, eax
jne 0x6135a9
mov eax, dword [esp + 0xbc]
lea ecx, [eax + 1]
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0xc0]
cmp ebx, ecx
jb 0x612d91
lea ecx, [eax + 1]
mov dword [esp + 0xbc], ecx
mov byte [edx + eax], 0x22
jmp 0x6126e4
lea ebp, [0xaa98e0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00447080
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xb8], edx
jmp 0x612d7e
lea eax, [esp + 0xb4]
mov dword [esp + 0xb4], eax
jmp 0x612d62
mov dword [esp + 0x68], edx
mov dword [esp + 0x64], eax
mov dword [esp + 0x88], ecx
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00447080
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x68]
jmp 0x612d06
mov dword [esp + 0xb4], ebx
jmp 0x612ce2
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.00447080
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xb8], esi
mov ecx, dword [esp + 0x44]
lea ebx, [esp + 0xb4]
jmp 0x612ad2
mov dword [esp + 0xb4], ebx
jmp 0x612ab2
nop
nop
mov eax, dword [esp + 0xb4]
test eax, eax
je 0x612f3b
cmp ebx, eax
jne 0x613636
mov eax, dword [esp + 0xbc]
lea edx, [ecx + eax]
mov dword [esp + 0x6c], edx
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xb8]
cmp edx, ebx
ja 0x612f07
mov dword [esp + 0x68], ebx
mov dword [esp + 0xb0], ebp
add eax, ebp
mov dword [esp], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004614f0
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xb8], eax
jmp 0x6126e4
mov dword [esp + 0x68], eax
lea ecx, [0xaa98e0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00447080
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x44]
jmp 0x612ebd
mov dword [esp + 0xb4], ebx
jmp 0x612e9d
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [0xbd5160]
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.004b4a80
mov eax, dword [esp + 0x10]
test eax, eax
setl al
mov ecx, dword [esp + 0x44]
lea ebx, [esp + 0xb4]
jmp 0x612a92
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.00447080
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xb8], esi
movzx eax, byte [esp + 0x20]
lea ebx, [esp + 0xb4]
jmp 0x612964
mov dword [esp + 0xb4], ebx
jmp 0x612944
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.00447080
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xb8], esi
movzx eax, byte [esp + 0x20]
lea ebx, [esp + 0xb4]
jmp 0x61291d
lea ebx, [esp + 0xb4]
mov dword [esp + 0xb4], ebx
jmp 0x6128fd
lea ebx, [esp + 0xb4]
jmp 0x61292b
mov dword [esp + 0x68], edx
mov dword [esp + 0x28], eax
mov dword [esp + 0x90], ecx
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00447080
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x68]
jmp 0x612877
lea ebx, [esp + 0xb4]
mov dword [esp + 0xb4], ebx
jmp 0x612853
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
add esp, 0xf4
ret
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.00447080
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xb8], esi
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x44]
lea ebx, [esp + 0xb4]
jmp 0x6127cd
mov dword [esp + 0xb4], ebx
jmp 0x6127ad
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.00447080
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xb8], esi
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x44]
lea ebx, [esp + 0xb4]
jmp 0x612786
lea ebx, [esp + 0xb4]
mov dword [esp + 0xb4], ebx
jmp 0x61275e
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x104], eax
mov dword [esp + 0x108], ecx
add esp, 0xf4
ret
xor ecx, ecx
jmp 0x61213c
mov dword [esp + 0x6c], edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x80], ecx
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00447080
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x6c]
jmp 0x6120ea
lea edx, [esp + 0xb4]
mov dword [esp + 0xb4], edx
jmp 0x6120c6
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
add esp, 0xf4
ret
mov edx, dword [esp + 0xfc]
cmp ecx, edx
ja 0x6137c0
lea eax, [ecx + 1]
cmp eax, edx
ja 0x6137b9
mov dword [esp + 0x40], ecx
sub edx, eax
mov dword [esp + 0x24], edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
mov edx, dword [esp + 0xf8]
add eax, edx
mov dword [esp + 0x8c], eax
test ecx, ecx
jne 0x613566
xor ebp, ebp
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x613506
test ebx, ebx
jne 0x613523
xor ebp, ebp
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x613506
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004b46c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
nop
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x6134f3
lea ebx, [esp + 0xb4]
cmp ebx, edx
jne 0x6137a1
mov edx, dword [esp + 0xbc]
lea ebp, [eax + edx]
mov dword [esp + 0x70], ebp
mov esi, dword [esp + 0xc0]
mov edi, dword [esp + 0xb8]
cmp ebp, esi
ja 0x6134aa
mov dword [esp + 0x6c], esi
mov dword [esp + 0xb0], edi
add edx, edi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004614f0
mov eax, dword [esp + 0x70]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xb8], eax
nop
nop
mov eax, dword [esp + 0xb4]
test eax, eax
je 0x613497
lea ecx, [esp + 0xb4]
cmp ecx, eax
jne 0x613789
mov eax, dword [esp + 0xbc]
lea edx, [eax + 1]
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0xc0]
cmp edx, ebp
ja 0x61345a
lea ecx, [eax + 1]
mov dword [esp + 0xbc], ecx
mov byte [ebx + eax], 0x2f
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
call fcn.004b46c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
nop
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x613447
lea ebx, [esp + 0xb4]
cmp ebx, edx
jne 0x613771
mov edx, dword [esp + 0xbc]
lea ebx, [eax + edx]
mov dword [esp + 0x70], ebx
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0xb8]
cmp ebx, ebp
ja 0x6133fe
mov dword [esp + 0x6c], ebp
mov dword [esp + 0xb0], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004614f0
mov eax, dword [esp + 0x70]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xb8], eax
jmp 0x61212b
mov dword [esp + 0x6c], edx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x84], ecx
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00447080
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x6c]
jmp 0x6133b8
lea edx, [esp + 0xb4]
mov dword [esp + 0xb4], edx
jmp 0x613398
lea ecx, [0xaa98e0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00447080
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xb8], ebx
jmp 0x61334c
lea ecx, [esp + 0xb4]
mov dword [esp + 0xb4], ecx
jmp 0x61332c
mov dword [esp + 0x6c], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x94], ecx
lea eax, [0xaa98e0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00447080
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x6c]
jmp 0x6132cb
lea ebx, [esp + 0xb4]
mov dword [esp + 0xb4], ebx
jmp 0x6132a7
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
add esp, 0xf4
ret
mov dword [esp], eax
mov dword [esp + 4], ebx
lea ecx, [0xbd5160]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 1
call fcn.004b4a80
mov eax, dword [esp + 0x10]
test eax, eax
xchg ebp, ebx
setl bl
xchg ebp, ebx
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0xf8]
mov ebx, dword [esp + 0x24]
jmp 0x61326a
mov dword [esp], edx
mov dword [esp + 4], ecx
lea eax, [0xbd5160]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.004b4a80
mov eax, dword [esp + 0x10]
test eax, eax
xchg ebp, ebx
setl bl
xchg ebp, ebx
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0xf8]
mov ebx, dword [esp + 0x24]
jmp 0x613256
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc754f0]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc754e8]
mov dword [esp + 4], eax
call fcn.00433120
mov eax, ebp
call fcn.00460c20
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc754e0]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc754d8]
mov dword [esp + 4], eax
call fcn.00433120
mov ecx, eax
mov eax, ebp
call fcn.00460c20
call fcn.00460bc0
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc754d0]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc754c8]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc754c0]
mov dword [esp + 4], eax
call fcn.00433120
mov eax, ecx
mov ecx, edx
call fcn.00460c20
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc754b8]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc754b0]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc754a8]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc754a0]
mov dword [esp + 4], eax
call fcn.00433120
mov edx, eax
mov eax, ecx
mov ecx, edx
call fcn.00460c20
mov ecx, edx
call fcn.00460bc0
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75498]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75490]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75488]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75480]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75478]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75470]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75468]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75460]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75458]
mov dword [esp + 4], eax
call fcn.00433120
mov ecx, edx
call fcn.00460c20
call fcn.00460be0
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75450]
mov dword [esp + 4], eax
call fcn.00433120
nop
call fcn.0045f5f0
jmp fcn.00611fd0