Function at 0x61efe0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xe4]
cmp eax, dword [ecx + 8]
jbe 0x61fe5c
sub esp, 0x164
lea edi, [esp + 0xfc]
xor eax, eax
call fcn.0045f713
mov ecx, dword [esp + 0x168]
mov ebx, dword [ecx]
mov dword [esp + 0xfc], ebx
mov byte [esp + 0x100], 0x52
mov ebx, dword [ecx + 0x80]
mov ebp, dword [ecx + 0x34]
cmp ebp, ebx
jle 0x61fe26
sub ebp, ebx
mov word [esp + 0x102], bp
mov ebx, dword [ecx + 0x18]
mov dword [esp + 0x10c], ebx
mov ebx, dword [ecx + 0xb0]
mov ebp, dword [ecx + 0xac]
mov edx, ebp
mov ebp, dword [ecx + 0xb4]
mov esi, ebp
mov ebp, dword [ecx + 0xb8]
cmp ebp, ebx
ja 0x61fe52
mov dword [esp + 0x84], esi
mov dword [esp + 0x70], ebx
mov dword [esp + 0xd4], edx
mov edi, esi
sub esi, ebp
mov dword [esp + 0x80], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, ebp
lea ecx, [edx + esi]
mov dword [esp + 0xd8], ecx
sub ebx, ebp
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0xe0], ebx
mov ebx, edi
lea edi, [esp + 0xe4]
call fcn.0045f71a
lea ecx, [0x629500]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], edx
mov ecx, dword [esp + 0x70]
mov dword [esp + 0xec], ecx
mov dword [esp + 0xf0], ebx
lea ebp, [esp + 0xd8]
mov dword [esp + 0xf4], ebp
mov ebp, dword [esp + 0x168]
mov dword [esp + 0xf8], ebp
mov eax, ebx
mov ebx, dword [ebp + 0xa0]
mov dword [esp + 0xd0], ebx
mov esi, ecx
mov ecx, dword [ebp + 0xa4]
mov dword [esp + 0x80], ecx
xor edi, edi
jmp 0x61f157
lea edi, [ebx + 1]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xd0]
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x70]
cmp edi, ecx
jge 0x61f22c
mov dword [esp + 0x4c], edi
lea eax, [ebx + edi*8]
mov ecx, dword [eax]
mov dword [esp + 0x7c], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x78], eax
mov ebp, dword [esp + 0xe4]
mov dword [esp], 0x18
lea edx, [esp + 0xe4]
call ebp
mov eax, dword [esp + 0x168]
mov ecx, dword [eax + 0x18]
mov ebx, dword [esp + 0x7c]
cmp ecx, ebx
jbe 0x61f228
mov ebp, dword [eax + 0xa4]
dec ebp
mov ecx, ebx
mov ebx, dword [esp + 0x4c]
cmp ebx, ebp
jne 0x61f12d
mov dword [esp + 0x108], ecx
mov eax, dword [esp + 0x78]
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xe0]
lea ebx, [esp + 0xfc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.0061d140
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], edx
mov eax, dword [esp + 0x168]
mov ebx, dword [esp + 0x4c]
jmp 0x61f12d
mov ecx, ebx
jmp 0x61f1b5
mov dword [ebp + 0xa4], 0
movzx ebx, byte [esp + 0x16c]
test bl, bl
jne 0x61fdde
mov ebx, dword [ebp + 0x38]
test ebx, ebx
je 0x61fd5c
mov dword [ebp + 0x54], 0
mov dword [ebp + 0x58], 0
mov ebx, dword [ebp + 0x40]
test ebx, 1
jne 0x61fcce
mov ebx, dword [ebp + 0x40]
test ebx, 2
jne 0x61fc40
mov dword [ebp + 0x40], 0
mov ebx, dword [ebp + 0x30]
mov ecx, edx
mov edx, dword [ebp + 0x38]
cmp ebx, edx
ja 0x61fc39
mov edx, dword [ebp + 0x68]
test edx, edx
jne 0x61fc32
mov edx, dword [ebp + 0x3c]
cmp ebx, edx
jb 0x61fc2b
mov dword [esp + 0x60], edx
mov ebx, dword [ebp + 0x74]
mov dword [esp + 0x80], ebx
xor edi, edi
jmp 0x61f2e3
inc dword [edx + 0x14]
lea edi, [ebx + 1]
mov ebx, dword [esp + 0x80]
mov ecx, dword [esp + 0x60]
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0x60]
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x70]
mov dword [esp + 0x48], edi
cmp ebx, edi
jle 0x61f42e
mov ebx, dword [ebp + 0x14]
mov ebp, dword [ebp + 0x10]
add ebp, edx
sub ebx, ebp
test ebx, ebx
jge 0x61f42e
mov ebx, dword [esp + 0x168]
mov ebp, dword [ebx + 0x74]
mov edx, dword [ebx + 0x70]
cmp ebp, edi
jbe 0x61fe49
imul ebp, edi, 0x34
add edx, ebp
mov ebp, edi
lea edi, [esp + 0x130]
mov esi, edx
call fcn.0045fbae
mov ecx, dword [ebx]
mov dword [esp + 0x130], ecx
mov byte [esp + 0x134], 0x51
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x13c], ecx
mov ecx, dword [ebx + 0x8c]
lea edx, [ecx + 1]
mov esi, ebp
mov ebp, dword [ebx + 0x88]
mov edi, ebx
mov ebx, dword [ebx + 0x90]
cmp ebx, edx
jb 0x61f3c6
lea edx, [ecx + 1]
mov dword [edi + 0x8c], edx
mov edx, dword [0x9f0ee0]
imul ecx, ecx, 0x34
add ecx, ebp
test edx, edx
jne 0x61f392
mov edx, edi
mov edi, ecx
mov ebx, esi
lea esi, [esp + 0x130]
call fcn.0045fbae
jmp 0x61f2bc
lea eax, [0x7540e0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x130]
mov dword [esp + 8], eax
call fcn.00411160
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x168]
mov ebx, dword [esp + 0x48]
jmp 0x61f2bc
lea eax, [0x7540e0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00445ed0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x168]
mov dword [ebx + 0x90], edx
mov edx, dword [0x9f0ee0]
test edx, edx
jne 0x61f421
mov dword [ebx + 0x88], eax
mov esi, dword [esp + 0x48]
mov edi, ebx
mov ebp, eax
mov eax, dword [esp + 0x84]
jmp 0x61f363
lea edi, [ebx + 0x88]
call fcn.0045f470
jmp 0x61f40d
test edi, edi
jle 0x61fc1f
mov ebx, dword [esp + 0x168]
mov ebp, dword [ebx + 0x70]
mov edx, dword [ebx + 0x74]
mov esi, dword [ebx + 0x78]
cmp edi, edx
ja 0x61fe40
mov dword [esp + 0xc0], ebp
mov dword [esp + 0x24], esi
lea eax, [0x7540e0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
sub esi, edi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
imul ecx, edi, 0x34
and esi, ecx
lea ecx, [esi + ebp]
mov dword [esp + 0xc], ecx
sub edx, edi
mov dword [esp + 0x10], edx
call fcn.00411280
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
cmp ecx, edx
ja 0x61fe3b
mov ebx, dword [esp + 0x168]
mov dword [ebx + 0x74], ecx
mov dword [ebx + 0x78], edx
mov ecx, dword [0x9f0ee0]
test ecx, ecx
jne 0x61fc0b
mov eax, dword [esp + 0xc0]
mov dword [ebx + 0x70], eax
mov eax, dword [ebx + 0x64]
test eax, eax
jg 0x61f4cd
mov eax, 0xffffffff
mov dword [esp + 0x30], eax
call fcn.00627270
mov eax, dword [esp]
mov ecx, dword [esp + 0x168]
mov edx, dword [ecx + 0x44]
mov ebx, dword [ecx + 0x88]
mov dword [esp + 0xcc], ebx
mov ebp, dword [ecx + 0x8c]
mov dword [esp + 0x80], ebp
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x30]
mov dword [esp + 0xb8], eax
xor eax, eax
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xb0], eax
xor eax, eax
mov dword [esp + 0x50], eax
xor eax, eax
mov dword [esp + 0x54], eax
xor eax, eax
mov dword [esp + 0x58], eax
xor eax, eax
mov dword [esp + 0x5c], eax
xor eax, eax
mov dword [esp + 0x6c], eax
xor eax, eax
mov dword [esp + 0x68], eax
xor eax, eax
mov dword [esp + 0x38], eax
xor eax, eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xb8]
jmp 0x61f575
inc esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], ebp
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x34], edx
mov esi, dword [esp + 0x44]
cmp esi, ebp
jge 0x61f946
jae 0x61fe32
imul ebp, esi, 0x34
lea edi, [ebp + ebx]
mov dword [esp + 0xc4], edi
lea edi, [ebx + ebp + 0x24]
cmp dword [edi], 1
jne 0x61f5ac
mov ebp, dword [esp + 0x54]
mov edi, dword [esp + 0x50]
jmp 0x61f559
lea edi, [ebx + ebp + 0x18]
mov dword [esp + 0xc8], edi
mov edi, dword [ebx + ebp + 0x18]
test edi, edi
jne 0x61f762
mov edi, dword [ecx + 0x28]
mov dword [ebx + ebp + 0x14], edi
add edi, eax
mov dword [ebx + ebp + 0x1c], edi
mov edi, 1
xchg edi, eax
test al, al
xchg edi, eax
jne 0x61f5fc
mov ebp, dword [ebp + ebx + 0x1c]
sub ebp, eax
test ebp, ebp
jle 0x61f5f8
cmp ebp, edx
jge 0x61f5f8
mov edi, dword [esp + 0x50]
mov edx, ebp
mov ebp, dword [esp + 0x54]
jmp 0x61f559
mov ebp, edx
jmp 0x61f5e9
mov dword [esp + 0x74], ebp
call fcn.00627270
mov eax, dword [esp]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0xc8]
inc dword [ecx]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xcc]
mov dword [ebx + edx + 8], eax
movzx ebp, word [esp + 0x102]
mov word [ebx + edx + 6], bp
mov ebp, dword [esp + 0x10c]
mov dword [ebx + edx + 0x10], ebp
mov ebp, dword [edx + ebx + 0x2c]
add ebp, 0x18
mov esi, dword [esp + 0xe4]
mov dword [esp], ebp
lea edx, [esp + 0xe4]
call esi
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xe0]
mov ebx, dword [esp + 0xc4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.0061d140
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], ecx
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [ebx + ecx + 0x28]
mov esi, dword [ecx + ebx + 0x2c]
cmp edx, esi
jle 0x61f75b
cmp eax, ebp
je 0x61f6d6
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0045fe20
mov ecx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x74]
mov eax, dword [edi + esi + 0x2c]
cmp ecx, eax
jb 0x61fe2d
sub ebx, eax
mov edx, ebx
neg ebx
sar ebx, 0x1f
and ebx, eax
add ebx, ebp
mov dword [esp + 0xd8], ebx
sub ecx, eax
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], edx
mov ebx, dword [esp + 0x168]
mov ebp, dword [ebx + 0x5c]
mov eax, esi
mov esi, dword [esp + 0xc8]
cmp dword [esi], ebp
jb 0x61f744
mov dword [ebx + 0xc], 0xffffffff
mov ecx, ebx
mov edx, dword [esp + 0x34]
mov ebx, eax
mov ebp, edi
mov esi, dword [esp + 0x44]
mov eax, dword [esp + 0x64]
jmp 0x61f5db
mov esi, edx
jmp 0x61f6c2
mov dword [esp + 0x40], eax
mov edi, dword [ebp + ebx + 0x1c]
sub eax, edi
test eax, eax
jl 0x61f7ce
mov edi, dword [ecx + 0x4c]
test edi, edi
jne 0x61f7bf
mov edi, dword [ebp + ebx + 0x14]
add edi, dword [ecx + 0x28]
mov dword [ebx + ebp + 0x14], edi
mov edi, dword [esp + 0x38]
mov eax, edi
add edi, 1
mov dword [esp + 0x38], edi
mov esi, dword [ebp + ebx + 0x14]
mov edi, dword [esp + 0x40]
add esi, edi
mov dword [ebx + ebp + 0x1c], esi
add eax, 1
mov esi, dword [esp + 0x3c]
adc esi, 0
mov eax, 1
mov edi, eax
mov dword [esp + 0x3c], esi
mov eax, dword [esp + 0x40]
mov esi, dword [esp + 0x44]
jmp 0x61f5d5
lea edi, [ebx + ebp + 0x14]
mov eax, edi
mov edi, dword [ecx + 0x28]
shr edi, 1
add dword [eax], edi
jmp 0x61f782
mov edi, dword [ebx + ebp + 0x20]
mov eax, esi
mov esi, dword [esp + 0x30]
cmp edi, esi
jb 0x61f87d
mov edi, dword [esp + 0x68]
add edi, 1
mov dword [esp + 0x7c], edi
mov esi, dword [esp + 0x50]
add esi, 1
mov dword [esp + 0x78], esi
mov dword [ebx + ebp + 0x20], 0
mov esi, dword [ecx + 0x28]
mov dword [ebx + ebp + 0x14], esi
mov edi, dword [esp + 0x40]
add esi, edi
mov dword [ebx + ebp + 0x1c], esi
mov esi, dword [esp + 0x68]
add esi, 1
mov esi, dword [esp + 0x6c]
adc esi, 0
mov ebx, dword [esp + 0x50]
add ebx, 1
mov ebx, dword [esp + 0x54]
adc ebx, 0
mov dword [esp + 0xa8], eax
mov eax, 1
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x78]
mov dword [esp + 0x50], eax
mov dword [esp + 0xa0], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x68], ecx
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xa0]
movzx eax, byte [esp + 0x22]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x6c], esi
mov esi, dword [esp + 0x3c]
mov ebx, dword [esp + 0xcc]
jmp 0x61f7ac
test edi, edi
jbe 0x61f940
mov edi, dword [esp + 0x48]
test edi, edi
jne 0x61f91e
mov edi, dword [esp + 0x68]
add edi, 1
mov dword [esp + 0x7c], edi
mov esi, dword [esp + 0x58]
add esi, 1
mov dword [esp + 0x78], esi
mov dword [ebx + ebp + 0x20], 0
mov esi, dword [ecx + 0x28]
mov dword [ebx + ebp + 0x14], esi
mov edi, dword [esp + 0x40]
add esi, edi
mov dword [ebx + ebp + 0x1c], esi
mov esi, dword [esp + 0x68]
add esi, 1
mov esi, dword [esp + 0x6c]
adc esi, 0
mov ebx, dword [esp + 0x58]
add ebx, 1
mov ebx, dword [esp + 0x5c]
adc ebx, 0
mov dword [esp + 0x98], eax
mov eax, 1
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x78]
mov dword [esp + 0x58], eax
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x68], ecx
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0x54]
jmp 0x61f860
mov edi, dword [esp + 0x40]
mov dword [esp + 0x88], eax
xor eax, eax
mov byte [esp + 0x22], al
mov ebx, dword [esp + 0x5c]
mov esi, dword [esp + 0x6c]
mov eax, dword [esp + 0x88]
jmp 0x61f911
mov edi, dword [esp + 0x48]
jmp 0x61f91e
mov eax, dword [esp + 0xdc]
mov ebx, dword [esp + 0x70]
mov ebp, ebx
sub ebx, eax
cmp dword [ecx + 0xb8], ebx
jl 0x61fbd0
mov eax, dword [esp + 0x38]
test eax, eax
seta bl
mov ebp, dword [esp + 0x3c]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
xchg edi, ebx
seta bl
xchg edi, ebx
and esi, ebx
or edi, esi
xchg edi, eax
mov byte [esp + 0x23], al
xchg edi, eax
xchg edi, eax
test al, al
xchg edi, eax
jne 0x61fb95
mov ebx, dword [esp + 0x54]
test ebx, ebx
xchg esi, ebx
sete bl
xchg esi, ebx
seta bl
mov edi, dword [esp + 0x50]
test edi, edi
xchg edi, ebx
seta bl
xchg edi, ebx
and edi, esi
or ebx, edi
test bl, bl
jne 0x61fb41
mov ebx, dword [esp + 0x58]
test ebx, ebx
xchg esi, ebx
seta bl
xchg esi, ebx
mov edi, dword [esp + 0x5c]
test edi, edi
xchg edi, ebx
sete bl
xchg edi, ebx
seta bl
and edi, esi
or edi, ebx
xchg edi, eax
test al, al
xchg edi, eax
jne 0x61fae3
test ebp, ebp
seta bl
test eax, eax
xchg esi, ebx
seta bl
xchg esi, ebx
test ebp, ebp
xchg edi, ebx
sete bl
xchg edi, ebx
and edi, esi
or edi, ebx
xchg edi, eax
test al, al
xchg edi, eax
jne 0x61fab8
mov eax, dword [ecx + 0x68]
test eax, eax
jne 0x61faa1
mov eax, dword [esp + 0x6c]
test eax, eax
sete al
seta bl
mov ebp, dword [esp + 0x68]
test ebp, ebp
xchg ebp, ebx
seta bl
xchg ebp, ebx
and ebp, eax
or ebx, ebp
test bl, bl
je 0x61faaf
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
shr eax, 1
mov dword [ecx + 0x1c], eax
cmp eax, 2
jae 0x61fa4e
mov dword [ecx + 0x1c], 2
mov eax, dword [ecx + 0x1c]
mov ebx, dword [esp + 0x30]
add eax, ebx
mov dword [ecx + 0x3c], eax
mov ebx, dword [ecx + 8]
imul eax, ebx
mov dword [ecx + 0x60], eax
movzx eax, byte [esp + 0x23]
test al, al
je 0x61fa8e
mov eax, dword [esp + 0x60]
shr eax, 1
mov dword [ecx + 0x1c], eax
cmp eax, 2
jae 0x61fa81
mov dword [ecx + 0x1c], 2
mov dword [ecx + 0x3c], 1
mov eax, dword [ecx + 8]
mov dword [ecx + 0x60], eax
cmp dword [ecx + 0x3c], 1
jae 0x61faa1
mov dword [ecx + 0x3c], 1
mov eax, dword [ecx + 8]
mov dword [ecx + 0x60], eax
mov dword [esp + 0x170], edx
add esp, 0x164
ret
movzx eax, byte [esp + 0x23]
test al, al
jmp 0x61fa6a
mov ecx, dword [0x9d2358]
test byte [ecx], al
add ecx, 0x78
mov dword [esp], ecx
mov dword [esp + 8], ebp
mov dword [esp + 4], eax
call fcn.004012c0
mov ecx, dword [esp + 0x168]
mov edx, dword [esp + 0x34]
jmp 0x61fa0b
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ebp
mov ecx, dword [0x9d2358]
test byte [ecx], al
mov edx, dword [esp + 0x58]
mov ebx, edx
add edx, eax
mov dword [esp + 0x7c], edx
add ecx, 0x88
mov dword [esp], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
call fcn.004012c0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x28]
add eax, ecx
mov ebp, dword [esp + 0x2c]
mov eax, dword [esp + 0x5c]
adc ebp, eax
mov ecx, dword [esp + 0x168]
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x7c]
jmp 0x61f9e6
mov ecx, dword [0x9d2358]
test byte [ecx], al
mov edx, dword [esp + 0x50]
add eax, edx
mov dword [esp + 0x7c], eax
add ecx, 0x80
mov dword [esp], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
call fcn.004012c0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x50]
add eax, ecx
mov ebp, dword [esp + 0x3c]
mov eax, dword [esp + 0x54]
adc ebp, eax
mov ecx, dword [esp + 0x168]
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x7c]
jmp 0x61f9bb
mov ecx, dword [0x9d2358]
test byte [ecx], al
add ecx, 0x90
mov dword [esp], ecx
mov dword [esp + 8], ebp
mov dword [esp + 4], eax
call fcn.004012c0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x168]
mov edx, dword [esp + 0x34]
mov ebp, dword [esp + 0x3c]
movzx edi, byte [esp + 0x23]
jmp 0x61f992
mov edx, dword [ecx + 0xbc]
mov eax, dword [edx]
mov esi, dword [esp + 0xd4]
mov dword [esp], esi
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x84]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
call eax
mov ecx, dword [esp + 0x168]
mov edx, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
jmp 0x61f961
lea edi, [ebx + 0x70]
mov eax, dword [esp + 0xc0]
call fcn.0045f470
jmp 0x61f4c1
mov ebx, dword [esp + 0x168]
jmp 0x61f4c1
mov edx, ebx
jmp 0x61f2aa
mov edx, ebx
jmp 0x61f2aa
mov ebx, edx
jmp 0x61f294
mov byte [esp + 0x100], 0x54
mov eax, dword [esp + 0xe4]
mov dword [esp], 0x18
lea edx, [esp + 0xe4]
call eax
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xe0]
lea ebp, [esp + 0xfc]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
call fcn.0061d140
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], ebx
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0xd4]
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x70]
jmp 0x61f27d
mov byte [esp + 0x100], 0x53
mov eax, dword [esp + 0xe4]
mov dword [esp], 0x18
lea edx, [esp + 0xe4]
call eax
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xe0]
lea ebp, [esp + 0xfc]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
call fcn.0061d140
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], ebx
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0xd4]
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x70]
jmp 0x61f26e
call fcn.00627270
mov eax, dword [esp]
mov ecx, dword [esp + 0x168]
mov edx, dword [ecx + 0x58]
test edx, edx
jne 0x61fd9b
mov dword [ecx + 0x58], 0x1b58
lea ebx, [eax + 0x1b58]
mov dword [ecx + 0x54], ebx
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0xd4]
mov ebp, ecx
mov esi, dword [esp + 0x70]
jmp 0x61f25f
mov ebx, dword [ecx + 0x54]
mov ebp, eax
sub eax, ebx
test eax, eax
jl 0x61fd82
cmp edx, 0x1b58
jae 0x61fdb5
mov dword [ecx + 0x58], 0x1b58
mov ebx, dword [ecx + 0x58]
mov eax, ebx
shr ebx, 1
add ebx, eax
mov dword [ecx + 0x58], ebx
cmp ebx, 0x1d4c0
jbe 0x61fdd0
mov dword [ecx + 0x58], 0x1d4c0
mov ebx, dword [ecx + 0x58]
add ebx, ebp
mov dword [ecx + 0x54], ebx
or dword [ecx + 0x40], 1
jmp 0x61fd82
mov ecx, dword [esp + 0xdc]
mov ebx, esi
sub esi, ecx
cmp dword [ebp + 0xb8], esi
jl 0x61fe02
mov eax, dword [ebp + 0x44]
mov dword [esp + 0x170], eax
add esp, 0x164
ret
mov ecx, dword [ebp + 0xbc]
mov edi, dword [ecx]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov edx, ecx
call edi
mov ebp, dword [esp + 0x168]
jmp 0x61fdf1
xor ebp, ebp
jmp 0x61f03c
call fcn.0045f550
mov eax, esi
mov ecx, ebp
call fcn.0045f4f0
call fcn.0045f530
mov eax, edi
mov ecx, edx
call fcn.0045f550
mov eax, edi
mov ecx, ebp
call fcn.0045f4f0
mov eax, ebp
mov ecx, ebx
call fcn.0045f550
nop
call fcn.0045df10
jmp fcn.0061efe0