Function at 0x610ea0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x98cddc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xf0]
cmp eax, dword [ecx + 8]
jbe 0x613658
sub esp, 0x170
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0xdc]
test ecx, ecx
jne 0x6135d1
lea ecx, [eax + 0x14]
nop
mov dword [esp], ecx
call fcn.00476380
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x1ac]
mov edx, dword [eax + 0x1b0]
mov ebx, dword [eax + 0x1a4]
mov ebp, ebx
sar ebx, 0x1f
mov esi, dword [esp + 4]
cmp edx, ebx
sete dl
setg bl
cmp ecx, ebp
xchg edi, ebx
setae bl
xchg edi, ebx
and edx, edi
or ebx, edx
test bl, bl
je 0x610f21
xor ebp, ebp
jmp 0x610f23
sub ebp, ecx
test ebp, ebp
jne 0x6134af
mov dword [esp + 0x94], esi
mov ecx, dword [0x98d0b8]
lea edi, [eax + 0x1a0]
mov dword [esp + 0x98], edi
nop
test ecx, ecx
je 0x610f71
lea eax, [0x6f9860]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0040eb70
mov eax, dword [esp + 0x174]
mov esi, dword [esp + 0x94]
mov edi, dword [esp + 0x98]
xor eax, eax
call fcn.00471d4a
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0x1b4], 0xffffffff
mov edx, dword [ecx + 0x10]
test edx, edx
jne 0x61338d
mov edx, dword [ecx]
mov ebx, dword [ecx + 4]
test edx, edx
je 0x610fcb
mov dword [esp + 0x154], ebx
mov eax, dword [edx + 4]
lea ecx, [0x961018]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00409f80
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x174]
mov ebx, dword [esp + 0x154]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 5
call fcn.00613960
mov eax, dword [esp + 0x10]
test eax, eax
je 0x6111c4
mov ecx, dword [esp + 0x14]
cmp dword [0x95fd38], eax
je 0x610fff
xor edx, edx
jmp 0x611032
mov dword [esp + 0x78], eax
mov dword [esp + 0xdc], ecx
mov edx, dword [0x95fd3c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004044b0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0xdc]
mov edx, eax
mov eax, dword [esp + 0x78]
test dl, dl
je 0x611059
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0x198]
cmp dword [edx + 0x190], ebx
jne 0x611060
mov eax, dword [0x95fd30]
mov ecx, dword [0x95fd34]
jmp 0x611060
mov edx, dword [esp + 0x174]
mov dword [esp + 0xdc], ecx
mov dword [esp + 0x78], eax
test eax, eax
je 0x61109c
mov ecx, dword [eax + 4]
lea edx, [0x961028]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0x174]
mov ebx, dword [esp + 0x78]
jmp 0x61109e
mov ebx, eax
test eax, eax
jne 0x6110a9
mov eax, 1
jmp 0x6110cb
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 4]
xor eax, 1
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0x174]
mov ebx, dword [esp + 0x78]
test al, al
je 0x6111ad
nop
test ebx, ebx
je 0x611107
mov eax, dword [ebx + 4]
lea ecx, [0x961038]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0x174]
mov ebx, eax
mov eax, dword [esp + 0x78]
jmp 0x611109
mov eax, ebx
test ebx, ebx
jne 0x611135
mov dword [edx + 0xdc], eax
mov ebx, dword [0x98d0b8]
test ebx, ebx
je 0x61112d
call fcn.00471ac0
mov dword [edi], ecx
mov ebx, dword [edx + 0xe0]
mov dword [edi + 4], ebx
mov dword [edx + 0xe0], ecx
jmp 0x6111af
mov dword [esp + 0x154], ebx
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x611171
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0x174]
jmp 0x611192
call fcn.00471ad0
mov ecx, dword [esp + 0xdc]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ebx, [0x7a4a60]
mov dword [edx + 0xdc], ebx
mov dword [edx + 0xe0], eax
mov eax, dword [esp + 0x78]
jmp 0x6111af
mov eax, ebx
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
mov ebx, dword [esp + 0x174]
mov ecx, dword [ebx + 0x190]
mov eax, dword [ebx + 0x198]
cmp ecx, eax
jb 0x613652
mov edx, dword [ebx + 0x194]
sub edx, eax
mov ebp, edx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and eax, ebp
cmp edx, 5
jb 0x613648
mov ecx, dword [ebx + 0x18c]
movzx edx, byte [ecx + eax]
mov ebp, dword [esp + 0x94]
test ebp, ebp
jne 0x61121b
cmp dl, 0x80
je 0x6131df
movzx esi, word [ebx + 0x28]
movzx edi, word [ecx + eax + 1]
cmp si, 0x304
jne 0x611245
mov dword [esp + 0x84], eax
mov eax, 0x303
mov word [esp + 0x2c], ax
mov eax, dword [esp + 0x84]
jmp 0x61124a
mov word [esp + 0x2c], si
movzx ebp, byte [ebx + 0x2a]
rol di, 8
movzx ecx, word [ecx + eax + 3]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x6114e0
mov eax, ebx
movzx ebx, word [esp + 0x2c]
cmp bx, di
jne 0x61127c
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x6116b4
jmp 0x6114e2
mov word [esp + 0x2e], di
mov dword [esp], eax
mov byte [esp + 4], 0x46
call fcn.00613d60
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
movzx eax, word [esp + 0x2e]
mov word [esp], ax
call fcn.00409eb0
mov eax, dword [esp + 4]
lea ecx, [0x6e0760]
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], eax
movzx eax, word [esp + 0x2c]
mov word [esp], ax
call fcn.00409eb0
mov eax, dword [esp + 4]
lea ecx, [0x6e0760]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
lea eax, [0x742c92]
mov dword [esp], eax
mov dword [esp + 4], 0x39
lea eax, [esp + 0x160]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d54a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x34], ecx
lea edi, [esp + 0x110]
mov edx, eax
xor eax, eax
call fcn.00471d4a
mov dword [esp + 0x110], edx
mov eax, dword [esp + 0x34]
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x190]
mov edx, dword [eax + 0x198]
cmp ecx, edx
jb 0x613641
mov ebx, dword [eax + 0x18c]
mov ebp, dword [eax + 0x194]
sub ecx, edx
sub ebp, edx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and edx, ebp
add edx, ebx
cmp ecx, 5
jl 0x6113a7
mov ecx, 5
lea ebx, [esp + 0x118]
cmp ebx, edx
je 0x6113c2
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00472440
lea eax, [0x704b00]
mov dword [esp], eax
lea eax, [esp + 0x110]
mov dword [esp + 4], eax
call fcn.00409df0
mov eax, dword [0x7a4724]
mov ecx, dword [esp + 8]
mov dword [esp + 0x150], ecx
lea edx, [0x961058]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00409f80
mov eax, dword [esp + 8]
test eax, eax
jne 0x61144b
lea eax, [0x7a4720]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0xdc], eax
mov eax, dword [0x98d0b8]
test eax, eax
jne 0x61142c
mov eax, dword [esp + 0x150]
jmp 0x611443
call fcn.00471ac0
mov eax, dword [esp + 0x150]
mov dword [edi], eax
mov edx, dword [ecx + 0xe0]
mov dword [edi + 4], edx
mov dword [ecx + 0xe0], eax
jmp 0x6114bf
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x611487
mov ecx, dword [esp + 0x150]
mov edx, dword [esp + 0x174]
jmp 0x6114a8
call fcn.00471ad0
mov ecx, dword [esp + 0x150]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov ecx, edx
mov eax, dword [ecx + 0xdc]
mov ecx, dword [ecx + 0xe0]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
mov eax, ebx
cmp dl, 0x15
je 0x6114ec
cmp dl, 0x16
jne 0x6114f7
cmp di, 0x1000
jb 0x6116b4
mov ecx, dword [eax + 4]
mov dword [esp + 0x144], ecx
mov edx, dword [eax]
lea edi, [esp + 0xf8]
mov ebx, eax
xor eax, eax
call fcn.00471d4a
lea ecx, [0x740499]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], 0x2f
mov dword [esp + 0x108], edx
mov ecx, dword [esp + 0x144]
mov dword [esp + 0x10c], ecx
mov ecx, dword [ebx + 0x190]
mov eax, dword [ebx + 0x198]
cmp ecx, eax
jb 0x61363c
mov edx, dword [ebx + 0x18c]
mov ebp, dword [ebx + 0x194]
sub ecx, eax
sub ebp, eax
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and eax, ebp
add eax, edx
cmp ecx, 5
jl 0x61157b
mov ecx, 5
lea edx, [esp + 0x100]
cmp edx, eax
je 0x611596
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00472440
lea eax, [0x704b00]
mov dword [esp], eax
lea eax, [esp + 0xf8]
mov dword [esp + 4], eax
call fcn.00409df0
mov eax, dword [0x7a4724]
mov ecx, dword [esp + 8]
mov dword [esp + 0x150], ecx
lea edx, [0x961068]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00409f80
mov eax, dword [esp + 8]
test eax, eax
jne 0x61161f
lea eax, [0x7a4720]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0xdc], eax
mov eax, dword [0x98d0b8]
test eax, eax
jne 0x611600
mov eax, dword [esp + 0x150]
jmp 0x611617
call fcn.00471ac0
mov eax, dword [esp + 0x150]
mov dword [edi], eax
mov edx, dword [ecx + 0xe0]
mov dword [edi + 4], edx
mov dword [ecx + 0xe0], eax
jmp 0x611693
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x61165b
mov ecx, dword [esp + 0x150]
mov edx, dword [esp + 0x174]
jmp 0x61167c
call fcn.00471ad0
mov ecx, dword [esp + 0x150]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov ecx, edx
mov eax, dword [ecx + 0xdc]
mov ecx, dword [ecx + 0xe0]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
rol cx, 8
movzx ecx, cx
mov dword [esp + 0x90], ecx
cmp si, 0x304
jne 0x6116d6
cmp ecx, 0x4100
jg 0x6116e2
jmp 0x611906
cmp ecx, 0x4800
jle 0x611906
mov dword [esp], eax
mov byte [esp + 4], 0x16
call fcn.00613d60
mov dword [esp + 0x158], 0
mov dword [esp + 0x15c], 0
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.00409f20
mov eax, dword [esp + 4]
lea ecx, [0x6e08a0]
mov dword [esp + 0x158], ecx
mov dword [esp + 0x15c], eax
lea eax, [0x73dce7]
mov dword [esp], eax
mov dword [esp + 4], 0x28
lea eax, [esp + 0x158]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004d54a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x30], ecx
lea edi, [esp + 0xe0]
mov edx, eax
xor eax, eax
call fcn.00471d4a
mov dword [esp + 0xe0], edx
mov eax, dword [esp + 0x30]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x190]
mov edx, dword [eax + 0x198]
cmp ecx, edx
jb 0x613635
mov ebx, dword [eax + 0x18c]
mov ebp, dword [eax + 0x194]
sub ecx, edx
sub ebp, edx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and edx, ebp
add edx, ebx
cmp ecx, 5
jl 0x6117cd
mov ecx, 5
lea ebx, [esp + 0xe8]
cmp ebx, edx
je 0x6117e8
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00472440
lea eax, [0x704b00]
mov dword [esp], eax
lea eax, [esp + 0xe0]
mov dword [esp + 4], eax
call fcn.00409df0
mov eax, dword [0x7a4724]
mov ecx, dword [esp + 8]
mov dword [esp + 0x150], ecx
lea edx, [0x961078]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00409f80
mov eax, dword [esp + 8]
test eax, eax
jne 0x611871
lea eax, [0x7a4720]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0xdc], eax
mov eax, dword [0x98d0b8]
test eax, eax
jne 0x611852
mov eax, dword [esp + 0x150]
jmp 0x611869
call fcn.00471ac0
mov eax, dword [esp + 0x150]
mov dword [edi], eax
mov edx, dword [ecx + 0xe0]
mov dword [edi + 4], edx
mov dword [ecx + 0xe0], eax
jmp 0x6118e5
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x6118ad
mov ecx, dword [esp + 0x150]
mov edx, dword [esp + 0x174]
jmp 0x6118ce
call fcn.00471ad0
mov ecx, dword [esp + 0x150]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov ecx, edx
mov eax, dword [ecx + 0xdc]
mov ecx, dword [ecx + 0xe0]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
mov edx, dword [eax]
mov ebx, dword [eax + 4]
test edx, edx
je 0x611944
mov dword [esp + 0x154], ebx
mov eax, dword [edx + 4]
lea ecx, [0x961088]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00409f80
mov edx, dword [esp + 8]
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x90]
mov ebx, dword [esp + 0x154]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
add ecx, 5
mov dword [esp + 0x8c], ecx
mov dword [esp + 0xc], ecx
call fcn.00613960
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
test eax, eax
je 0x611ac6
mov dword [esp + 0xd8], ecx
mov dword [esp + 0x74], eax
je 0x6119a5
mov ecx, dword [eax + 4]
lea edx, [0x961098]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0x74]
jmp 0x6119a7
mov edx, eax
test eax, eax
jne 0x6119b2
mov eax, 1
jmp 0x6119cd
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 4]
xor eax, 1
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0x74]
test al, al
je 0x611aaf
nop
test edx, edx
je 0x611a02
mov eax, dword [edx + 4]
lea ecx, [0x9610a8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xd8]
mov edx, eax
mov eax, dword [esp + 0x74]
jmp 0x611a04
mov eax, edx
test edx, edx
jne 0x611a37
mov edx, dword [esp + 0x174]
mov dword [edx + 0xdc], eax
mov ebx, dword [0x98d0b8]
test ebx, ebx
je 0x611a2f
call fcn.00471ac0
mov dword [edi], ecx
mov ebx, dword [edx + 0xe0]
mov dword [edi + 4], ebx
mov dword [edx + 0xe0], ecx
jmp 0x611ab1
mov dword [esp + 0x154], edx
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x611a73
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0x174]
jmp 0x611a94
call fcn.00471ad0
mov ecx, dword [esp + 0xd8]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ebx, [0x7a4a60]
mov dword [edx + 0xdc], ebx
mov dword [edx + 0xe0], eax
mov eax, dword [esp + 0x74]
jmp 0x611ab1
mov eax, edx
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
nop
mov ebx, dword [esp + 0x174]
mov byte [ebx + 0x19c], 0
mov ebp, dword [ebx + 0x190]
mov eax, dword [ebx + 0x198]
sub ebp, eax
nop
mov esi, dword [esp + 0x8c]
cmp ebp, esi
jl 0x611af1
mov ebp, esi
lea ecx, [ebp + eax]
mov edx, dword [ebx + 0x194]
cmp edx, ecx
jb 0x613630
cmp eax, ecx
ja 0x61362b
sub edx, eax
mov esi, edx
neg edx
sar edx, 0x1f
and eax, edx
mov edx, dword [ebx + 0x18c]
mov dword [ebx + 0x198], ecx
add eax, edx
test ebp, ebp
jle 0x611b2f
mov byte [ebx + 0x19c], 0xff
lea ecx, [ebx + 0xd4]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.0060f5a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
test eax, eax
je 0x611c8c
lea ecx, [0x7a4a40]
cmp eax, ecx
jne 0x61360f
mov eax, dword [esp + 0x24]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x174]
mov dword [esp], ecx
mov byte [esp + 4], al
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xd4], ecx
test eax, eax
je 0x611bc2
mov dword [esp + 0x70], eax
mov ecx, dword [eax + 4]
lea edx, [0x9610b8]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0x70]
jmp 0x611bc4
mov edx, eax
test eax, eax
jne 0x611bf7
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x611bef
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x611c6b
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x611c33
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0x174]
jmp 0x611c54
call fcn.00471ad0
mov ecx, dword [esp + 0xd4]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
mov ebx, dword [esp + 0x14]
cmp ebx, 0x4000
jg 0x6130c4
mov ebp, dword [esp + 0x174]
mov esi, dword [ebp + 0xe8]
movzx eax, byte [esp + 0x1c]
test esi, esi
jne 0x611cbb
cmp al, 0x17
je 0x612fb0
cmp al, 0x15
je 0x611cd3
cmp al, 0x14
je 0x611cd3
test ebx, ebx
je 0x611cd3
mov dword [ebp + 0x1ec], 0
movzx esi, word [ebp + 0x28]
cmp si, 0x304
jne 0x611e17
cmp al, 0x16
je 0x612b37
mov edi, dword [ebp + 0x1bc]
sub edi, dword [ebp + 0x1c4]
test edi, edi
jg 0x611d03
cmp al, 0x15
jmp 0x611e1a
mov dword [esp], ebp
mov byte [esp + 4], 0xa
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
test eax, eax
je 0x611d4d
mov dword [esp + 0x64], eax
mov ecx, dword [eax + 4]
lea edx, [0x9610e8]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0x64]
jmp 0x611d4f
mov edx, eax
test eax, eax
jne 0x611d82
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x611d7a
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x611df6
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x611dbe
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0x174]
jmp 0x611ddf
call fcn.00471ad0
mov ecx, dword [esp + 0xc8]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
cmp al, 0x15
ja 0x612b2e
cmp al, 0x14
jne 0x6123eb
cmp ebx, 1
jne 0x611e37
cmp byte [ecx], 1
je 0x611f4b
mov dword [esp], ebp
mov byte [esp + 4], 0x32
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb0], ecx
test eax, eax
je 0x611e81
mov dword [esp + 0x4c], eax
mov ecx, dword [eax + 4]
lea edx, [0x961168]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x4c]
jmp 0x611e83
mov edx, eax
test eax, eax
jne 0x611eb6
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x611eae
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x611f2a
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x611ef2
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x174]
jmp 0x611f13
call fcn.00471ad0
mov ecx, dword [esp + 0xb0]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
mov eax, dword [ebp + 0x1bc]
sub eax, dword [ebp + 0x1c4]
test eax, eax
jg 0x6122d7
cmp si, 0x304
je 0x6122a6
movzx eax, byte [esp + 0x178]
test al, al
je 0x612192
mov eax, dword [ebp + 0x110]
test eax, eax
je 0x612052
cmp word [ebp + 0xe4], 0x304
je 0x612052
mov ecx, dword [ebp + 0x114]
mov dword [ebp + 0xe8], eax
mov eax, dword [0x98d0b8]
test eax, eax
je 0x611fbd
call fcn.00471ac0
mov dword [edi], ecx
mov eax, dword [ebp + 0xec]
mov dword [edi + 4], eax
mov dword [ebp + 0xec], ecx
mov eax, dword [ebp + 0x118]
mov ecx, dword [ebp + 0x11c]
mov dword [ebp + 0xf0], eax
mov eax, dword [0x98d0b8]
test eax, eax
je 0x612001
call fcn.00471ae0
mov dword [edi], ecx
mov eax, dword [ebp + 0xf4]
mov dword [edi + 4], eax
mov eax, dword [ebp + 0x114]
mov dword [edi + 8], eax
mov eax, dword [ebp + 0x11c]
mov dword [edi + 0xc], eax
mov dword [ebp + 0xf4], ecx
mov dword [ebp + 0x110], 0
mov dword [ebp + 0x114], 0
mov dword [ebp + 0x118], 0
mov dword [ebp + 0x11c], 0
lea eax, [ebp + 0xf8]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.00472270
mov ebp, dword [esp + 0x174]
xor ecx, ecx
xor eax, eax
jmp 0x612066
mov eax, 0x50
lea ecx, [0x93e1e0]
lea eax, [ecx + eax*8]
lea ecx, [0x7a4a40]
test ecx, ecx
je 0x612d40
lea edx, [0x7a4a40]
cmp ecx, edx
jne 0x6135f3
movzx eax, byte [eax]
mov dword [esp], ebp
mov byte [esp + 4], al
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa4], ecx
test eax, eax
je 0x6120c8
mov dword [esp + 0x40], eax
mov ecx, dword [eax + 4]
lea edx, [0x961198]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x40]
jmp 0x6120ca
mov edx, eax
test eax, eax
jne 0x6120fd
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x6120f5
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x612171
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x612139
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x174]
jmp 0x61215a
call fcn.00471ad0
mov ecx, dword [esp + 0xa4]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
mov dword [esp], ebp
mov byte [esp + 4], 0xa
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa8], ecx
test eax, eax
je 0x6121dc
mov dword [esp + 0x44], eax
mov ecx, dword [eax + 4]
lea edx, [0x961188]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x44]
jmp 0x6121de
mov edx, eax
test eax, eax
jne 0x612211
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x612209
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x612285
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x61224d
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x174]
jmp 0x61226e
call fcn.00471ad0
mov ecx, dword [esp + 0xa8]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
mov dword [esp], ebp
movzx eax, byte [esp + 0x178]
mov byte [esp + 4], al
call fcn.00613670
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
mov dword [esp], ebp
mov byte [esp + 4], 0xa
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xac], ecx
test eax, eax
je 0x612321
mov dword [esp + 0x48], eax
mov ecx, dword [eax + 4]
lea edx, [0x961178]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x48]
jmp 0x612323
mov edx, eax
test eax, eax
jne 0x612356
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x61234e
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x6123ca
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x612392
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x174]
jmp 0x6123b3
call fcn.00471ad0
mov ecx, dword [esp + 0xac]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
cmp al, 0x15
jne 0x612e9c
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x612a1a
cmp ebx, 2
jne 0x612906
movzx eax, byte [ecx + 1]
test al, al
jne 0x61251f
mov eax, dword [0x95fd30]
mov ecx, dword [0x95fd34]
mov dword [esp + 0xb8], ecx
test eax, eax
je 0x61245c
mov dword [esp + 0x54], eax
mov ecx, dword [eax + 4]
lea edx, [0x961128]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0x174]
jmp 0x61245e
mov edx, eax
test eax, eax
jne 0x61248a
mov dword [ebp + 0xdc], edx
mov eax, dword [0x98d0b8]
test eax, eax
je 0x612482
call fcn.00471ac0
mov dword [edi], ecx
mov eax, dword [ebp + 0xe0]
mov dword [edi + 4], eax
mov dword [ebp + 0xe0], ecx
jmp 0x6124fe
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x6124c6
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x174]
jmp 0x6124e7
call fcn.00471ad0
mov ecx, dword [esp + 0xb8]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov ebp, edx
mov eax, dword [ebp + 0xdc]
mov ecx, dword [ebp + 0xe0]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
mov byte [esp + 0x2b], al
cmp si, 0x304
je 0x6127c7
movzx ecx, byte [ecx]
cmp cl, 1
je 0x612796
cmp cl, 2
jne 0x612682
lea eax, [0x706400]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [esp + 0x14c], eax
mov dword [eax + 4], 0xc
lea ecx, [0x72e00b]
mov dword [eax], ecx
lea ecx, [0x7a4a40]
mov dword [eax + 0x20], ecx
movzx ecx, byte [esp + 0x2b]
movzx ecx, cl
lea edx, [0x93e1e0]
lea ecx, [edx + ecx*8]
mov dword [eax + 0x24], ecx
mov ecx, dword [0x7a4474]
lea edx, [0x961148]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
test eax, eax
jne 0x6125ed
lea eax, [0x7a4470]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0xdc], eax
mov eax, dword [0x98d0b8]
test eax, eax
jne 0x6125ce
mov eax, dword [esp + 0x14c]
jmp 0x6125e5
call fcn.00471ac0
mov eax, dword [esp + 0x14c]
mov dword [edi], eax
mov edx, dword [ecx + 0xe0]
mov dword [edi + 4], edx
mov dword [ecx + 0xe0], eax
jmp 0x612661
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x612629
mov ecx, dword [esp + 0x14c]
mov edx, dword [esp + 0x174]
jmp 0x61264a
call fcn.00471ad0
mov ecx, dword [esp + 0x14c]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov ecx, edx
mov eax, dword [ecx + 0xdc]
mov ecx, dword [ecx + 0xe0]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
mov dword [esp], ebp
mov byte [esp + 4], 0xa
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb4], ecx
test eax, eax
je 0x6126cc
mov dword [esp + 0x50], eax
mov ecx, dword [eax + 4]
lea edx, [0x961158]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x50]
jmp 0x6126ce
mov edx, eax
test eax, eax
jne 0x612701
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x6126f9
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x612775
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x61273d
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x174]
jmp 0x61275e
call fcn.00471ad0
mov ecx, dword [esp + 0xb4]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
mov dword [esp], ebp
movzx eax, byte [esp + 0x178]
mov byte [esp + 4], al
call fcn.00613670
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
lea eax, [0x706400]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [esp + 0x14c], eax
mov dword [eax + 4], 0xc
lea ecx, [0x72e00b]
mov dword [eax], ecx
lea ecx, [0x7a4a40]
mov dword [eax + 0x20], ecx
movzx ecx, byte [esp + 0x2b]
movzx ecx, cl
lea edx, [0x93e1e0]
lea ecx, [edx + ecx*8]
mov dword [eax + 0x24], ecx
mov ecx, dword [0x7a4474]
lea edx, [0x961138]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
test eax, eax
jne 0x612871
lea eax, [0x7a4470]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0xdc], eax
mov eax, dword [0x98d0b8]
test eax, eax
jne 0x612852
mov eax, dword [esp + 0x14c]
jmp 0x612869
call fcn.00471ac0
mov eax, dword [esp + 0x14c]
mov dword [edi], eax
mov edx, dword [ecx + 0xe0]
mov dword [edi + 4], edx
mov dword [ecx + 0xe0], eax
jmp 0x6128e5
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x6128ad
mov ecx, dword [esp + 0x14c]
mov edx, dword [esp + 0x174]
jmp 0x6128ce
call fcn.00471ad0
mov ecx, dword [esp + 0x14c]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov ecx, edx
mov eax, dword [ecx + 0xdc]
mov ecx, dword [ecx + 0xe0]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
mov dword [esp], ebp
mov byte [esp + 4], 0xa
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xbc], ecx
test eax, eax
je 0x612950
mov dword [esp + 0x58], eax
mov ecx, dword [eax + 4]
lea edx, [0x961118]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0x58]
jmp 0x612952
mov edx, eax
test eax, eax
jne 0x612985
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x61297d
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x6129f9
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x6129c1
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0x174]
jmp 0x6129e2
call fcn.00471ad0
mov ecx, dword [esp + 0xbc]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
mov dword [esp], ebp
mov byte [esp + 4], 0xa
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc0], ecx
test eax, eax
je 0x612a64
mov dword [esp + 0x5c], eax
mov ecx, dword [eax + 4]
lea edx, [0x961108]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x5c]
jmp 0x612a66
mov edx, eax
test eax, eax
jne 0x612a99
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x612a91
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x612b0d
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x612ad5
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x174]
jmp 0x612af6
call fcn.00471ad0
mov ecx, dword [esp + 0xc0]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
cmp al, 0x16
jne 0x612c7e
test ebx, ebx
je 0x612b4b
movzx eax, byte [esp + 0x178]
test al, al
je 0x612c5f
mov dword [esp], ebp
mov byte [esp + 4], 0xa
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x9c], ecx
test eax, eax
je 0x612b95
mov dword [esp + 0x38], eax
mov ecx, dword [eax + 4]
lea edx, [0x9611b8]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x38]
jmp 0x612b97
mov edx, eax
test eax, eax
jne 0x612bca
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x612bc2
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x612c3e
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x612c06
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x174]
jmp 0x612c27
call fcn.00471ad0
mov ecx, dword [esp + 0x9c]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
lea eax, [ebp + 0x1b8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call fcn.00484520
jmp 0x612d40
cmp al, 0x17
jne 0x612e9c
mov esi, dword [esp + 0x94]
test esi, esi
je 0x612d88
movzx esi, byte [esp + 0x178]
xchg esi, eax
test al, al
xchg esi, eax
jne 0x612d88
test ebx, ebx
je 0x612d5d
mov dword [esp + 0x140], ecx
mov esi, dword [0x98d0b8]
nop
test esi, esi
je 0x612d0f
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], ebx
call fcn.00471ac0
mov dword [edi], ecx
mov eax, dword [ebp + 0x1a0]
mov dword [edi + 4], eax
lea eax, [0x6f9860]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
call fcn.0040eb70
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x174]
mov edi, dword [esp + 0x98]
xor eax, eax
call fcn.00471d4a
mov ecx, dword [esp + 0x140]
mov dword [ebp + 0x1a0], ecx
mov dword [ebp + 0x1a4], ebx
mov dword [ebp + 0x1a8], edx
mov dword [ebp + 0x1b4], 0xffffffff
mov dword [esp + 0x17c], 0
mov dword [esp + 0x180], 0
add esp, 0x170
ret
mov dword [esp], ebp
xchg esi, eax
mov byte [esp + 4], al
xchg esi, eax
call fcn.00613670
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
mov dword [esp], ebp
mov byte [esp + 4], 0xa
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa0], ecx
test eax, eax
je 0x612dd2
mov dword [esp + 0x3c], eax
mov ecx, dword [eax + 4]
lea edx, [0x9611a8]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x3c]
jmp 0x612dd4
mov edx, eax
test eax, eax
jne 0x612e07
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x612dff
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x612e7b
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x612e43
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x174]
jmp 0x612e64
call fcn.00471ad0
mov ecx, dword [esp + 0xa0]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
mov dword [esp], ebp
mov byte [esp + 4], 0xa
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc4], ecx
test eax, eax
je 0x612ee6
mov dword [esp + 0x60], eax
mov ecx, dword [eax + 4]
lea edx, [0x9610f8]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0x60]
jmp 0x612ee8
mov edx, eax
test eax, eax
jne 0x612f1b
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x612f13
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x612f8f
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x612f57
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0x174]
jmp 0x612f78
call fcn.00471ad0
mov ecx, dword [esp + 0xc4]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
mov dword [esp], ebp
mov byte [esp + 4], 0xa
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xcc], ecx
test eax, eax
je 0x612ffa
mov dword [esp + 0x68], eax
mov ecx, dword [eax + 4]
lea edx, [0x9610d8]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0x68]
jmp 0x612ffc
mov edx, eax
test eax, eax
jne 0x61302f
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x613027
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x6130a3
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x61306b
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0x174]
jmp 0x61308c
call fcn.00471ad0
mov ecx, dword [esp + 0xcc]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
mov eax, dword [esp + 0x174]
mov dword [esp], eax
mov byte [esp + 4], 0x16
call fcn.00613d60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xd0], ecx
test eax, eax
je 0x613115
mov dword [esp + 0x6c], eax
mov ecx, dword [eax + 4]
lea edx, [0x9610c8]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0x6c]
jmp 0x613117
mov edx, eax
test eax, eax
jne 0x61314a
mov eax, dword [esp + 0x174]
mov dword [eax + 0xdc], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x613142
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0xe0]
mov dword [edi + 4], edx
mov dword [eax + 0xe0], ecx
jmp 0x6131be
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x613186
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0x174]
jmp 0x6131a7
call fcn.00471ad0
mov ecx, dword [esp + 0xd0]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov eax, edx
mov ecx, dword [eax + 0xdc]
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
mov dword [esp], ebx
mov byte [esp + 4], 0x46
call fcn.00613d60
lea edi, [esp + 0x128]
xor eax, eax
call fcn.00471d4a
lea eax, [0x73c153]
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], 0x24
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x190]
mov edx, dword [eax + 0x198]
cmp ecx, edx
jb 0x6135ec
mov ebx, dword [eax + 0x18c]
mov ebp, dword [eax + 0x194]
sub ecx, edx
sub ebp, edx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and edx, ebp
add edx, ebx
cmp ecx, 5
jl 0x613254
mov ecx, 5
lea ebx, [esp + 0x130]
cmp ebx, edx
je 0x61326f
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00472440
lea eax, [0x704b00]
mov dword [esp], eax
lea eax, [esp + 0x128]
mov dword [esp + 4], eax
call fcn.00409df0
mov eax, dword [0x7a4724]
mov ecx, dword [esp + 8]
mov dword [esp + 0x150], ecx
lea edx, [0x961048]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00409f80
mov eax, dword [esp + 8]
test eax, eax
jne 0x6132f8
lea eax, [0x7a4720]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0xdc], eax
mov eax, dword [0x98d0b8]
test eax, eax
jne 0x6132d9
mov eax, dword [esp + 0x150]
jmp 0x6132f0
call fcn.00471ac0
mov eax, dword [esp + 0x150]
mov dword [edi], eax
mov edx, dword [ecx + 0xe0]
mov dword [edi + 4], edx
mov dword [ecx + 0xe0], eax
jmp 0x61336c
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x613334
mov ecx, dword [esp + 0x150]
mov edx, dword [esp + 0x174]
jmp 0x613355
call fcn.00471ad0
mov ecx, dword [esp + 0x150]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov ecx, edx
mov eax, dword [ecx + 0xdc]
mov ecx, dword [ecx + 0xe0]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
lea eax, [0x6ec1a0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [esp + 0x148], eax
mov dword [eax + 4], 0x41
lea ecx, [0x743eb1]
mov dword [eax], ecx
mov ecx, dword [0x7a4348]
lea edx, [0x961008]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
test eax, eax
jne 0x61341a
lea eax, [0x7a4344]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0xdc], eax
mov eax, dword [0x98d0b8]
test eax, eax
jne 0x6133fb
mov eax, dword [esp + 0x148]
jmp 0x613412
call fcn.00471ac0
mov eax, dword [esp + 0x148]
mov dword [edi], eax
mov edx, dword [ecx + 0xe0]
mov dword [edi + 4], edx
mov dword [ecx + 0xe0], eax
jmp 0x61348e
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x613456
mov ecx, dword [esp + 0x148]
mov edx, dword [esp + 0x174]
jmp 0x613477
call fcn.00471ad0
mov ecx, dword [esp + 0x148]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov ecx, edx
mov eax, dword [ecx + 0xdc]
mov ecx, dword [ecx + 0xe0]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
lea eax, [0x6ec1a0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [esp + 0x148], eax
mov dword [eax + 4], 0x4b
lea ecx, [0x744db8]
mov dword [eax], ecx
mov ecx, dword [0x7a4348]
lea edx, [0x960ff8]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
test eax, eax
jne 0x61353c
lea eax, [0x7a4344]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0xdc], eax
mov eax, dword [0x98d0b8]
test eax, eax
jne 0x61351d
mov eax, dword [esp + 0x148]
jmp 0x613534
call fcn.00471ac0
mov eax, dword [esp + 0x148]
mov dword [edi], eax
mov edx, dword [ecx + 0xe0]
mov dword [edi + 4], edx
mov dword [ecx + 0xe0], eax
jmp 0x6135b0
mov dword [esp + 0x154], eax
lea eax, [0x6ed2e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x154]
mov dword [eax], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x613578
mov ecx, dword [esp + 0x148]
mov edx, dword [esp + 0x174]
jmp 0x613599
call fcn.00471ad0
mov ecx, dword [esp + 0x148]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0xe0]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
lea ecx, [0x7a4a60]
mov dword [edx + 0xdc], ecx
mov dword [edx + 0xe0], eax
mov ecx, edx
mov eax, dword [ecx + 0xdc]
mov ecx, dword [ecx + 0xe0]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
add esp, 0x170
ret
mov eax, dword [eax + 0xe0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x170
ret
mov eax, edx
call fcn.00471b90
mov eax, dword [0x7a4a44]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x6eabc0]
mov dword [esp + 8], eax
call fcn.00409ce0
mov ecx, dword [0x7a4a44]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x6eabc0]
mov dword [esp + 8], eax
call fcn.00409ce0
call fcn.00471b90
call fcn.00471b70
mov eax, edx
call fcn.00471b90
call fcn.00471b90
mov eax, edx
call fcn.00471b90
mov ecx, 5
call fcn.00471b70
call fcn.00471b90
nop
call fcn.004706b0
jmp fcn.00610ea0