Function at 0x619ec0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x98cddc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x544]
cmp eax, dword [ecx + 8]
jbe 0x61bb5c
sub esp, 0x5c4
mov eax, dword [esp + 0x5c8]
mov ecx, dword [eax + 0x2c]
mov edx, dword [ecx + 0x44]
test edx, edx
jne 0x619f57
movzx edx, byte [ecx + 0x50]
test dl, dl
jne 0x619f57
lea eax, [0x6ec1a0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x50
lea ecx, [0x745244]
mov dword [eax], ecx
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
lea ecx, [0x7a4344]
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5dc], eax
add esp, 0x5c4
ret
mov edx, dword [ecx + 0x38]
mov ebx, dword [ecx + 0x34]
xor ebp, ebp
xor esi, esi
jmp 0x619f68
inc ebp
lea esi, [esi + edi + 1]
cmp ebp, edx
jge 0x619fdb
lea edi, [ebx + ebp*8]
mov edi, dword [edi + 4]
test edi, edi
je 0x619f7e
cmp edi, 0xff
jle 0x619f63
lea eax, [0x6ec1a0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1d
lea ecx, [0x7388cd]
mov dword [eax], ecx
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
lea ecx, [0x7a4344]
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5dc], eax
add esp, 0x5c4
ret
cmp esi, 0xffff
jg 0x61a416
mov dword [esp + 0x5a0], ecx
mov dword [esp], ecx
mov byte [esp + 4], 1
call fcn.0060e380
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x10]
test eax, eax
je 0x61a3b9
mov dword [esp + 0x50c], eax
mov dword [esp + 0x510], edx
mov dword [esp + 0x570], ecx
mov eax, dword [esp + 0x5a0]
mov dword [esp], eax
mov byte [esp + 4], 1
call fcn.0060e380
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x61a044
xor eax, eax
jmp 0x61a04b
mov eax, dword [esp + 8]
movzx eax, word [eax]
mov word [esp + 0x4de], ax
lea ecx, [0x6e06e0]
mov dword [esp], ecx
mov dword [esp + 4], 0x20
mov dword [esp + 8], 0x20
call fcn.0046ca20
mov eax, dword [esp + 0x5a0]
mov ecx, dword [eax + 0x40]
mov edx, dword [eax + 0x44]
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x5b8], ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.006221e0
mov eax, dword [esp + 8]
mov dword [esp + 0x5b4], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x54c], ecx
mov edx, dword [esp + 0x5a0]
mov dword [esp], edx
movzx ebx, word [esp + 0x4de]
mov word [esp + 4], bx
call fcn.0060e5c0
mov eax, dword [esp + 8]
mov dword [esp + 0x5b0], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x548], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x544], edx
lea ebx, [0x71b100]
mov dword [esp], ebx
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [esp + 0x58c], eax
movzx ecx, word [esp + 0x4de]
mov word [eax + 0xc], cx
lea edx, [0x6daea0]
mov dword [esp], edx
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x58c]
mov dword [ecx + 0x38], 1
mov dword [ecx + 0x3c], 1
mov edx, dword [0x98d0b8]
test edx, edx
jne 0x61a147
mov edx, dword [esp + 0x5b8]
jmp 0x61a164
call fcn.00471ae0
mov dword [edi], eax
mov edx, dword [ecx + 0x34]
mov dword [edi + 4], edx
mov edx, dword [esp + 0x5b8]
mov dword [edi + 8], edx
mov ebx, dword [ecx + 0x10]
mov dword [edi + 0xc], ebx
mov dword [ecx + 0x34], eax
mov dword [ecx + 0x14], 0x20
mov dword [ecx + 0x18], 0x20
mov dword [ecx + 0x10], edx
mov byte [ecx + 0x9c], 1
mov byte [ecx + 0x48], 1
mov byte [ecx + 0xac], 1
mov eax, dword [esp + 0x54c]
mov dword [ecx + 0x44], eax
mov eax, dword [0x98d0b8]
test eax, eax
jne 0x61a1ae
mov eax, dword [esp + 0x5b4]
mov edx, dword [esp + 0x5b0]
jmp 0x61a1d2
call fcn.00471ae0
mov eax, dword [esp + 0x5b4]
mov dword [edi], eax
mov edx, dword [ecx + 0x40]
mov dword [edi + 4], edx
mov edx, dword [esp + 0x5b0]
mov dword [edi + 8], edx
mov ebx, dword [ecx + 0x4c]
mov dword [edi + 0xc], ebx
mov dword [ecx + 0x40], eax
mov eax, dword [esp + 0x548]
mov dword [ecx + 0x50], eax
mov eax, dword [esp + 0x544]
mov dword [ecx + 0x54], eax
mov dword [ecx + 0x4c], edx
lea eax, [0x6daea0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x58c]
mov dword [ecx + 0x5c], 1
mov dword [ecx + 0x60], 1
mov edx, dword [0x98d0b8]
test edx, edx
je 0x61a22a
call fcn.00471ac0
mov dword [edi], eax
mov edx, dword [ecx + 0x58]
mov dword [edi + 4], edx
mov dword [ecx + 0x58], eax
mov byte [ecx + 0x8c], 1
mov eax, dword [esp + 0x5a0]
mov edx, dword [eax + 0x38]
mov ebx, dword [eax + 0x3c]
mov ebp, dword [eax + 0x34]
mov dword [ecx + 0xa4], edx
mov dword [ecx + 0xa8], ebx
mov edx, dword [0x98d0b8]
test edx, edx
jne 0x61a263
mov edx, dword [esp + 0x570]
jmp 0x61a286
call fcn.00471ae0
mov dword [edi], ebp
mov edx, dword [ecx + 0xa0]
mov dword [edi + 4], edx
mov edx, dword [esp + 0x570]
mov dword [edi + 8], edx
mov ebx, dword [ecx + 0xb0]
mov dword [edi + 0xc], ebx
mov dword [ecx + 0xa0], ebp
mov ebx, dword [esp + 0x50c]
mov dword [ecx + 0xb4], ebx
mov ebx, dword [esp + 0x510]
mov dword [ecx + 0xb8], ebx
mov dword [ecx + 0xb0], edx
cmp word [ecx + 0xc], 0x303
jbe 0x61a2ba
mov word [ecx + 0xc], 0x303
mov edx, dword [esp + 0x5c8]
mov ebx, dword [edx + 0x30]
test ebx, ebx
jle 0x61a302
mov dword [ecx + 0x94], 0xc
mov dword [ecx + 0x98], 0xc
mov ebx, dword [0x98d0b8]
lea ebp, [edx + 0xb1]
test ebx, ebx
je 0x61a2fc
call fcn.00471ac0
mov dword [edi], ebp
mov ebx, dword [ecx + 0x90]
mov dword [edi + 4], ebx
mov dword [ecx + 0x90], ebp
movzx ebx, byte [0x98cca5]
mov ebp, dword [0x960ee8]
mov esi, dword [0x960eec]
test bl, bl
jne 0x61a325
mov ebp, dword [0x960ef8]
mov esi, dword [0x960efc]
mov dword [esp + 0x518], esi
mov dword [esp + 0x578], ebp
mov dword [esp], eax
call fcn.0060e320
mov eax, dword [esp + 8]
mov dword [esp + 0x524], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x59c], ecx
lea edx, [0x6e0760]
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.0046ca20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x58c]
mov dword [ecx + 0x2c], 0
mov edx, dword [esp + 0x524]
mov dword [ecx + 0x30], edx
mov ebx, dword [0x98d0b8]
test ebx, ebx
je 0x61a39a
call fcn.00471ac0
mov dword [edi], eax
mov ebx, dword [ecx + 0x28]
mov dword [edi + 4], ebx
mov dword [ecx + 0x28], eax
mov eax, dword [esp + 0x518]
mov ebx, dword [esp + 0x578]
mov ebp, dword [esp + 0x59c]
xor esi, esi
jmp 0x61a484
lea eax, [0x6ec1a0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x3c
lea ecx, [0x7433b1]
mov dword [eax], ecx
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
lea ecx, [0x7a4344]
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5dc], eax
add esp, 0x5c4
ret
lea eax, [0x6ec1a0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x20
lea ecx, [0x73a0f1]
mov dword [eax], ecx
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
lea ecx, [0x7a4344]
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5dc], eax
add esp, 0x5c4
ret
inc esi
mov ebx, dword [esp + 0x578]
mov edi, dword [esp + 0x59c]
mov ebp, edi
cmp eax, esi
jle 0x61a5b2
movzx edi, word [ebx + esi*2]
mov word [esp + 0x4e0], di
mov dword [esp + 0x530], eax
xor eax, eax
mov dword [esp + 0x54c], eax
mov eax, dword [esp + 0x530]
jmp 0x61bae8
mov ebx, dword [0x960ed8]
mov ebp, dword [0x960edc]
mov word [esp + 0x528], ax
xor eax, eax
mov dword [esp + 0x54c], eax
movzx eax, word [esp + 0x528]
jmp 0x61bb1f
xor ebx, ebx
test ebx, ebx
je 0x61a5a5
movzx ebp, word [esp + 0x4de]
cmp bp, 0x303
jae 0x61a506
mov ebx, dword [ebx + 0x14]
test ebx, 4
jne 0x61a473
mov ebx, dword [ecx + 0x30]
mov ebp, dword [ecx + 0x2c]
inc ebp
mov edx, dword [ecx + 0x28]
cmp ebx, ebp
jae 0x61a589
mov dword [esp + 0x54c], esi
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6e0760]
mov dword [esp + 0x10], eax
call fcn.0046cad0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x58c]
mov dword [ebx + 0x30], eax
mov eax, dword [0x98d0b8]
test eax, eax
je 0x61a56a
call fcn.00471ac0
mov dword [edi], ecx
mov eax, dword [ebx + 0x28]
mov dword [edi + 4], eax
mov dword [ebx + 0x28], ecx
mov eax, dword [esp + 0x518]
mov esi, dword [esp + 0x54c]
movzx edi, word [esp + 0x4e0]
mov ebp, edx
mov edx, ecx
mov ecx, ebx
mov dword [ecx + 0x2c], ebp
mov word [edx + ebp*2 - 2], di
mov edx, dword [esp + 0x524]
movzx ebp, word [esp + 0x4de]
jmp 0x61a473
movzx ebp, word [esp + 0x4de]
jmp 0x61a473
mov eax, dword [esp + 0x5a0]
mov edx, dword [eax]
test edx, edx
je 0x61a5c4
mov ebx, dword [eax + 4]
jmp 0x61a5d0
mov edx, dword [0x96ccd0]
mov ebx, dword [0x96ccd4]
mov eax, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x10]
mov esi, dword [ecx + 0x18]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
call fcn.0047d7d0
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x61b69b
mov edx, dword [esp + 0x5c8]
mov ebx, dword [edx + 0x10]
test ebx, ebx
jne 0x61a6c0
lea eax, [0x6e06e0]
mov dword [esp], eax
mov dword [esp + 4], 0x20
mov dword [esp + 8], 0x20
call fcn.0046ca20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x58c]
mov dword [ecx + 0x20], 0x20
mov dword [ecx + 0x24], 0x20
mov edx, dword [0x98d0b8]
test edx, edx
je 0x61a661
call fcn.00471ac0
mov dword [edi], eax
mov edx, dword [ecx + 0x1c]
mov dword [edi + 4], edx
mov dword [ecx + 0x1c], eax
mov eax, dword [esp + 0x5a0]
mov edx, dword [eax]
test edx, edx
je 0x61a676
mov ebx, dword [eax + 4]
jmp 0x61a682
mov edx, dword [0x96ccd0]
mov ebx, dword [0x96ccd4]
mov eax, dword [ecx + 0x1c]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x20
mov dword [esp + 0x10], 0x20
mov dword [esp + 0x14], 0x20
call fcn.0047d7d0
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x61b5d0
mov edx, dword [esp + 0x5c8]
movzx ebx, word [esp + 0x4de]
cmp bx, 0x303
jb 0x61a710
mov ebp, dword [0x960f2c]
mov esi, dword [0x960f30]
mov edi, dword [0x960f28]
mov eax, ebx
mov ebx, dword [esp + 0x58c]
mov dword [ebx + 0x78], ebp
mov dword [ebx + 0x7c], esi
mov ebp, dword [0x98d0b8]
test ebp, ebp
je 0x61a70b
mov ecx, edi
call fcn.00471ac0
mov dword [edi], ecx
mov ebp, dword [ebx + 0x74]
mov dword [edi + 4], ebp
mov edi, ecx
mov dword [ebx + 0x74], edi
jmp 0x61a719
mov eax, ebx
mov ebx, dword [esp + 0x58c]
mov ebp, dword [0x96cef0]
test ebp, ebp
je 0x61a74f
mov esi, dword [0x96cef4]
mov edi, dword [0x96cef8]
mov dword [ebx + 0x78], esi
mov dword [ebx + 0x7c], edi
mov esi, dword [0x98d0b8]
test esi, esi
je 0x61a74c
call fcn.00471ac0
mov dword [edi], ebp
mov esi, dword [ebx + 0x74]
mov dword [edi + 4], esi
mov dword [ebx + 0x74], ebp
mov ebp, dword [ebx + 0xb4]
test ebp, ebp
jbe 0x61bac7
mov ecx, dword [ebx + 0xb0]
cmp word [ecx], 0x304
jne 0x61b1dc
cmp ebp, 1
jne 0x61a79c
mov dword [ebx + 0x2c], 0
mov dword [ebx + 0x30], 0
mov ecx, dword [0x98d0b8]
test ecx, ecx
je 0x61a795
mov ecx, dword [ebx + 0x28]
call fcn.00471ab0
mov dword [edi], ecx
mov dword [ebx + 0x28], 0
movzx ecx, byte [0x98cca5]
test cl, cl
je 0x61a87e
mov ecx, dword [0x9619dc]
mov ebp, dword [ebx + 0x30]
mov esi, dword [ebx + 0x2c]
add esi, ecx
mov edi, dword [ebx + 0x28]
cmp ebp, esi
jb 0x61a7c4
mov ecx, esi
jmp 0x61a7fc
mov dword [esp + 0x540], esi
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
lea eax, [0x6e0760]
mov dword [esp + 0x10], eax
call fcn.0046cad0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0x540]
mov dword [esp + 0x54c], ebp
mov dword [esp + 0x548], esi
mov dword [esp + 0x5ac], edi
mov eax, dword [0x9619dc]
sub ecx, eax
mov edx, dword [0x9619d8]
lea ecx, [edi + ecx*2]
mov dword [esp], ecx
mov dword [esp + 4], edx
shl eax, 1
mov dword [esp + 8], eax
call fcn.00472440
mov eax, dword [esp + 0x548]
mov ecx, dword [esp + 0x58c]
mov dword [ecx + 0x2c], eax
mov eax, dword [esp + 0x54c]
mov dword [ecx + 0x30], eax
mov eax, dword [0x98d0b8]
test eax, eax
jne 0x61a862
mov eax, dword [esp + 0x5ac]
jmp 0x61a876
call fcn.00471ac0
mov eax, dword [esp + 0x5ac]
mov dword [edi], eax
mov edx, dword [ecx + 0x28]
mov dword [edi + 4], edx
mov dword [ecx + 0x28], eax
jmp 0x61a94c
mov ecx, dword [0x9619ec]
mov ebp, dword [ebx + 0x30]
mov esi, dword [ebx + 0x2c]
add esi, ecx
mov edi, dword [ebx + 0x28]
cmp ebp, esi
jb 0x61a897
mov ecx, esi
jmp 0x61a8cf
mov dword [esp + 0x540], esi
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
lea eax, [0x6e0760]
mov dword [esp + 0x10], eax
call fcn.0046cad0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0x540]
mov dword [esp + 0x54c], ebp
mov dword [esp + 0x548], esi
mov dword [esp + 0x5ac], edi
mov eax, dword [0x9619ec]
sub ecx, eax
mov edx, dword [0x9619e8]
lea ecx, [edi + ecx*2]
mov dword [esp], ecx
mov dword [esp + 4], edx
shl eax, 1
mov dword [esp + 8], eax
call fcn.00472440
mov eax, dword [esp + 0x548]
mov ecx, dword [esp + 0x58c]
mov dword [ecx + 0x2c], eax
mov eax, dword [esp + 0x54c]
mov dword [ecx + 0x30], eax
mov eax, dword [0x98d0b8]
test eax, eax
jne 0x61a935
mov eax, dword [esp + 0x5ac]
jmp 0x61a949
call fcn.00471ac0
mov eax, dword [esp + 0x5ac]
mov dword [edi], eax
mov edx, dword [ecx + 0x28]
mov dword [edi + 4], edx
mov dword [ecx + 0x28], eax
mov eax, dword [esp + 0x5a0]
mov dword [esp], eax
movzx ecx, word [esp + 0x4de]
mov word [esp + 4], cx
call fcn.0060e5c0
mov eax, dword [esp + 0xc]
test eax, eax
jbe 0x61babe
mov eax, dword [esp + 8]
movzx eax, word [eax]
mov word [esp + 0x4e4], ax
lea ecx, [0x6fd360]
mov dword [esp], ecx
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [esp + 0x57c], eax
movzx ecx, word [esp + 0x4e4]
mov word [eax], cx
cmp cx, 0x6399
jne 0x61af2c
mov ecx, dword [esp + 0x5a0]
mov edx, dword [ecx]
test edx, edx
je 0x61a9c4
mov ebx, dword [ecx + 4]
jmp 0x61a9d0
mov edx, dword [0x96ccd0]
mov ebx, dword [0x96ccd4]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov word [esp + 8], 0x1d
call fcn.0063f8c0
mov eax, dword [0x98d0b8]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
test eax, eax
jne 0x61aa02
mov eax, dword [esp + 0x57c]
jmp 0x61aa16
call fcn.00471ac0
mov dword [edi], edx
mov eax, dword [esp + 0x57c]
mov ebp, dword [eax + 4]
mov dword [edi + 4], ebp
mov dword [eax + 4], edx
test ecx, ecx
jne 0x61aef6
lea eax, [0x6e06e0]
mov dword [esp], eax
mov dword [esp + 4], 0x40
mov dword [esp + 8], 0x40
call fcn.0046ca20
mov eax, dword [esp + 0x5a0]
mov ecx, dword [eax]
test ecx, ecx
je 0x61aa51
mov eax, dword [eax + 4]
jmp 0x61aa5d
mov ecx, dword [0x96ccd0]
mov eax, dword [0x96ccd4]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x5b8], edx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 0x40
mov dword [esp + 0x14], 0x40
call fcn.0047d7d0
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x61aebc
lea eax, [0x6fdf60]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [esp], eax
mov eax, dword [esp + 0x5b8]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], 0x40
call fcn.006081a0
mov eax, dword [0x98d0b8]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
test eax, eax
jne 0x61aaf0
mov eax, dword [esp + 0x57c]
jmp 0x61ab04
call fcn.00471ac0
mov dword [edi], edx
mov eax, dword [esp + 0x57c]
mov ebp, dword [eax + 8]
mov dword [edi + 4], ebp
mov dword [eax + 8], edx
test ecx, ecx
jne 0x61ae86
mov ecx, dword [eax + 4]
mov dword [esp + 0x584], ecx
lea edx, [0x61be70]
mov dword [esp + 0x5bc], edx
mov dword [esp + 0x5c0], ecx
test byte [ecx], al
lea edx, [ecx + 0x1c]
mov dword [esp], edx
lea edx, [esp + 0x5bc]
mov dword [esp + 4], edx
call fcn.0047bea0
mov eax, dword [esp + 0x584]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x564], eax
lea ecx, [0x6defc0]
mov dword [esp], ecx
call fcn.0040bc10
mov eax, dword [esp + 0x564]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 4]
mov eax, dword [eax + 8]
cmp ecx, 0x85
ja 0x61ab86
mov ebx, ecx
mov ebp, 0x85
jmp 0x61abd2
mov dword [esp + 0x53c], ecx
mov dword [esp + 0x5b4], eax
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x85
mov dword [esp + 0xc], ecx
lea eax, [0x6e06e0]
mov dword [esp + 0x10], eax
call fcn.0046cad0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x53c]
mov ebp, eax
mov eax, dword [esp + 0x5b4]
mov dword [esp + 0x500], ebp
mov dword [esp + 0x4f4], ecx
mov dword [esp + 0x558], edx
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00472440
mov eax, dword [esp + 0x57c]
mov ecx, dword [eax + 8]
lea edi, [esp + 0x34]
mov edx, ecx
mov ecx, 0x128
mov ebx, eax
xor eax, eax
rep stosd dword es:[edi], eax
test byte [edx], al
lea eax, [edx + 0x480]
lea ecx, [esp + 0x34]
cmp ecx, eax
je 0x61ac41
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x4a0
call fcn.00472440
lea ecx, [esp + 0x34]
mov ebx, dword [esp + 0x57c]
mov eax, dword [esp + 0x4f4]
lea edx, [eax + 0x4a0]
mov ebp, dword [esp + 0x500]
cmp ebp, edx
jb 0x61ac62
mov esi, dword [esp + 0x558]
jmp 0x61aca6
mov eax, dword [esp + 0x558]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 0x4a0
lea eax, [0x6e06e0]
mov dword [esp + 0x10], eax
call fcn.0046cad0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ecx, [esp + 0x34]
mov esi, edx
mov edx, eax
mov eax, dword [esp + 0x4f4]
mov dword [esp + 0x54c], ebp
mov dword [esp + 0x548], edx
mov dword [esp + 0x5b4], esi
add eax, esi
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x4a0
call fcn.00472440
mov eax, dword [esp + 0x57c]
mov ecx, dword [eax + 4]
mov dword [esp + 0x580], ecx
lea edx, [0x61bcf0]
mov dword [esp + 0x5bc], edx
mov dword [esp + 0x5c0], ecx
test byte [ecx], al
lea edx, [ecx + 0x1c]
mov dword [esp], edx
lea edx, [esp + 0x5bc]
mov dword [esp + 4], edx
call fcn.0047bea0
mov eax, dword [esp + 0x580]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x560], eax
lea ecx, [0x6defc0]
mov dword [esp], ecx
call fcn.0040bc10
mov eax, dword [esp + 0x560]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 4]
mov eax, dword [eax + 8]
cmp ecx, 0x85
ja 0x61ad4f
mov ebx, ecx
mov ebp, 0x85
jmp 0x61ad9b
mov dword [esp + 0x538], ecx
mov dword [esp + 0x5a8], eax
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x85
mov dword [esp + 0xc], ecx
lea eax, [0x6e06e0]
mov dword [esp + 0x10], eax
call fcn.0046cad0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x538]
mov ebp, eax
mov eax, dword [esp + 0x5a8]
mov dword [esp + 0x4fc], ebp
mov dword [esp + 0x4f0], ecx
mov dword [esp + 0x554], edx
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00472440
lea eax, [0x6df140]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov word [eax], 0x6399
mov ecx, dword [esp + 0x548]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x54c]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x61adfe
mov ecx, dword [esp + 0x5b4]
jmp 0x61ae0c
call fcn.00471ab0
mov ecx, dword [esp + 0x5b4]
mov dword [edi], ecx
mov dword [eax + 4], ecx
mov word [eax + 0x10], 0x1d
mov ecx, dword [esp + 0x4f0]
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0x4fc]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x61ae43
mov ecx, dword [esp + 0x554]
mov edx, dword [esp + 0x58c]
jmp 0x61ae64
call fcn.00471ad0
mov ecx, dword [esp + 0x554]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x58c]
mov ebx, dword [edx + 0xc8]
mov dword [edi + 8], ebx
mov dword [eax + 0x14], ecx
mov dword [edx + 0xcc], 2
mov dword [edx + 0xd0], 2
mov dword [edx + 0xc8], eax
jmp 0x61b12f
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5dc], ebx
add esp, 0x5c4
ret
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
mov dword [esp + 0x5d8], eax
mov dword [esp + 0x5dc], ecx
add esp, 0x5c4
ret
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5dc], ebx
add esp, 0x5c4
ret
nop
cmp cx, 0x18
ja 0x61af44
cmp cx, 0x17
je 0x61af54
cmp cx, 0x18
je 0x61af54
jmp 0x61b17f
cmp cx, 0x19
je 0x61af54
cmp cx, 0x1d
jne 0x61b17f
mov edx, dword [esp + 0x5a0]
mov ebx, dword [edx]
test ebx, ebx
je 0x61af66
mov edx, dword [edx + 4]
jmp 0x61af72
mov ebx, dword [0x96ccd0]
mov edx, dword [0x96ccd4]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov word [esp + 8], cx
call fcn.0063f8c0
mov eax, dword [0x98d0b8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test eax, eax
jne 0x61afa2
mov eax, dword [esp + 0x57c]
jmp 0x61afb6
call fcn.00471ac0
mov dword [edi], ecx
mov eax, dword [esp + 0x57c]
mov ebp, dword [eax + 4]
mov dword [edi + 4], ebp
mov dword [eax + 4], ecx
test edx, edx
jne 0x61b149
mov dword [esp + 0x5a4], ecx
lea eax, [0x61bb70]
mov dword [esp + 0x5bc], eax
mov dword [esp + 0x5c0], ecx
test byte [ecx], al
lea eax, [ecx + 0x1c]
mov dword [esp], eax
lea eax, [esp + 0x5bc]
mov dword [esp + 4], eax
call fcn.0047bea0
mov eax, dword [esp + 0x5a4]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x55c], eax
lea ecx, [0x6defc0]
mov dword [esp], ecx
call fcn.0040bc10
mov eax, dword [esp + 0x55c]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 4]
mov eax, dword [eax + 8]
cmp ecx, 0x85
ja 0x61b035
mov ebx, ecx
mov ebp, 0x85
jmp 0x61b081
mov dword [esp + 0x53c], ecx
mov dword [esp + 0x5b4], eax
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x85
mov dword [esp + 0xc], ecx
lea eax, [0x6e06e0]
mov dword [esp + 0x10], eax
call fcn.0046cad0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x53c]
mov ebp, eax
mov eax, dword [esp + 0x5b4]
mov dword [esp + 0x4f8], ebp
mov dword [esp + 0x4ec], ecx
mov dword [esp + 0x550], edx
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00472440
lea eax, [0x6df080]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
movzx ecx, word [esp + 0x4e4]
mov word [eax], cx
mov ecx, dword [esp + 0x4ec]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x4f8]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x61b0f1
mov ecx, dword [esp + 0x550]
mov edx, dword [esp + 0x58c]
jmp 0x61b112
call fcn.00471ad0
mov ecx, dword [esp + 0x550]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0x58c]
mov ebx, dword [edx + 0xc8]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
mov dword [edx + 0xcc], 1
mov dword [edx + 0xd0], 1
mov dword [edx + 0xc8], eax
mov edx, dword [esp + 0x5c8]
mov ebx, dword [esp + 0x58c]
mov eax, dword [esp + 0x57c]
jmp 0x61b1de
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
mov dword [esp + 0x5d8], edx
mov dword [esp + 0x5dc], ebx
add esp, 0x5c4
ret
lea eax, [0x6ec1a0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x30
lea ecx, [0x740a8b]
mov dword [eax], ecx
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
lea ecx, [0x7a4344]
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5dc], eax
add esp, 0x5c4
ret
xor eax, eax
mov dword [esp + 0x57c], eax
mov ecx, dword [edx + 0x10]
test ecx, ecx
je 0x61b25b
mov dword [esp], edx
call fcn.00641d00
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x61b596
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
test eax, eax
jne 0x61b21a
xor edx, edx
xor ecx, ecx
lea eax, [0x98cc80]
mov ebx, dword [esp + 0x58c]
mov dword [ebx + 0x100], ecx
mov dword [ebx + 0x104], edx
mov ecx, dword [0x98d0b8]
test ecx, ecx
je 0x61b247
call fcn.00471ac0
mov dword [edi], eax
mov ecx, dword [ebx + 0xfc]
mov dword [edi + 4], ecx
mov dword [ebx + 0xfc], eax
mov eax, dword [esp + 0x57c]
mov edx, dword [esp + 0x5c8]
mov ecx, dword [edx + 0x2c]
mov edx, dword [ecx + 0xb4]
test edx, edx
je 0x61b58f
movzx ebp, word [ecx + 0x94]
test bp, bp
je 0x61b2dc
cmp bp, 0x304
jae 0x61b2dc
lea eax, [0x6ec1a0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x56
lea ecx, [0x7458be]
mov dword [eax], ecx
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
lea ecx, [0x7a4344]
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5dc], eax
add esp, 0x5c4
ret
movzx ebp, word [ecx + 0x96]
test bp, bp
je 0x61b34c
cmp bp, 0x303
ja 0x61b34c
lea eax, [0x6ec1a0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x56
lea ecx, [0x745914]
mov dword [eax], ecx
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
lea ecx, [0x7a4344]
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5dc], eax
add esp, 0x5c4
ret
mov eax, dword [ecx + 0xb8]
mov ecx, dword [ecx + 0xbc]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.006180d0
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x61b555
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00618dd0
mov eax, dword [esp + 0xc]
test eax, eax
je 0x61b4f8
mov dword [esp + 0x594], eax
lea eax, [0x70e880]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [0x98d0b8]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x61b3c8
mov eax, dword [esp + 0x594]
jmp 0x61b3d6
call fcn.00471ab0
mov eax, dword [esp + 0x594]
mov dword [edi], eax
mov dword [esp + 0x598], ecx
mov dword [ecx], eax
lea eax, [0x6daea0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov byte [eax], 1
mov ecx, dword [esp + 0x58c]
mov dword [ecx + 0x10c], 1
mov dword [ecx + 0x110], 1
mov edx, dword [0x98d0b8]
test edx, edx
je 0x61b42f
call fcn.00471ad0
mov dword [edi], eax
mov edx, dword [ecx + 0x108]
mov dword [edi + 4], edx
mov edx, dword [ecx + 0x58]
mov dword [edi + 8], edx
mov dword [ecx + 0x108], eax
mov dword [ecx + 0x5c], 0
mov dword [ecx + 0x60], 0
mov dword [ecx + 0x58], 0
mov byte [ecx + 0x64], 0
mov byte [ecx + 0x8c], 0
mov byte [ecx + 0x9c], 0
mov eax, dword [esp + 0x598]
mov edx, dword [eax]
movzx ebx, word [edx + 0x12]
mov ebp, dword [edx + 0x14]
mov esi, dword [edx + 0x18]
mov edx, dword [edx + 0x1c]
mov word [esp], bx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
call fcn.00602750
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x61b4be
mov dword [esp + 0x590], ecx
mov eax, dword [esp + 0x598]
mov edx, dword [eax]
mov ebx, dword [edx + 0x20]
mov dword [esp + 0x574], ebx
mov edx, dword [edx + 0x24]
mov dword [esp + 0x514], edx
xor ebp, ebp
jmp 0x61b7be
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
mov dword [esp + 0x5d8], eax
mov dword [esp + 0x5dc], ecx
add esp, 0x5c4
ret
lea eax, [0x6ec1a0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x3d
lea ecx, [0x743596]
mov dword [eax], ecx
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
lea ecx, [0x7a4344]
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5dc], eax
add esp, 0x5c4
ret
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
mov dword [esp + 0x5d8], eax
mov dword [esp + 0x5dc], ecx
add esp, 0x5c4
ret
xor ecx, ecx
jmp 0x61b766
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
mov dword [esp + 0x5d8], eax
mov dword [esp + 0x5dc], ecx
add esp, 0x5c4
ret
mov eax, dword [eax + 0xc]
mov ecx, dword [esp + 0x20]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x73756c]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x1b
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00450aa0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x504], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x568], ecx
lea edx, [0x6ec1a0]
mov dword [esp], edx
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x504]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x61b64f
mov ecx, dword [esp + 0x568]
jmp 0x61b65d
call fcn.00471ab0
mov ecx, dword [esp + 0x568]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
lea ecx, [0x7a4344]
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5dc], eax
add esp, 0x5c4
ret
mov eax, dword [eax + 0xc]
mov ecx, dword [esp + 0x20]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x73756c]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x1b
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00450aa0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x508], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x56c], ecx
lea edx, [0x6ec1a0]
mov dword [esp], edx
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x508]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x61b71a
mov ecx, dword [esp + 0x56c]
jmp 0x61b728
call fcn.00471ab0
mov ecx, dword [esp + 0x56c]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
lea ecx, [0x7a4344]
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5dc], eax
add esp, 0x5c4
ret
mov dword [esp + 0x5cc], ebx
mov dword [esp + 0x5d0], eax
mov dword [esp + 0x5d4], ecx
mov dword [esp + 0x5d8], 0
mov dword [esp + 0x5dc], 0
add esp, 0x5c4
ret
mov esi, dword [esp + 0x54c]
lea ebp, [esi + 1]
mov eax, dword [esp + 0x598]
mov ecx, dword [esp + 0x590]
mov edx, dword [esp + 0x514]
mov ebx, dword [esp + 0x574]
cmp ebp, edx
jge 0x61b875
mov dword [esp + 0x54c], ebp
lea eax, [ebx + ebp*4]
movzx ecx, word [eax + 2]
mov word [esp + 0x4e8], cx
movzx eax, word [eax]
mov word [esp + 0x4e6], ax
mov word [esp + 0x4ea], cx
mov edx, dword [0x96cb5c]
lea esi, [0x6e4400]
mov dword [esp], esi
mov dword [esp + 4], edx
lea edx, [esp + 0x4ea]
mov dword [esp + 8], edx
call fcn.00467350
movzx eax, byte [esp + 0x10]
test al, al
je 0x61b798
movzx eax, word [esp + 0x4e6]
mov word [esp + 0x4ea], ax
mov ecx, dword [0x96cb60]
lea edx, [0x6e4380]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x4ea]
mov dword [esp + 8], ecx
call fcn.00467350
movzx eax, byte [esp + 0x10]
test al, al
je 0x61b798
xor ecx, ecx
movzx edx, word [esp + 0x4e8]
movzx ebx, word [esp + 0x4e6]
xor eax, eax
jmp 0x61b8a1
nop
lea eax, [0x6ec1a0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x30
lea ecx, [0x740a5b]
mov dword [eax], ecx
lea ecx, [0x7a4344]
xor edx, edx
xor ebx, ebx
test ecx, ecx
jne 0x61ba88
mov word [esp + 0x4e2], dx
mov word [esp + 0x4dc], bx
mov eax, dword [esp + 0x598]
mov word [eax + 0x20], bx
mov word [eax + 0x22], dx
mov dword [esp + 0x4d4], 0x20736c74
mov dword [esp + 0x4d8], 0x686365
mov ecx, dword [eax]
mov ebp, dword [ecx + 4]
lea esi, [ebp + 8]
mov ecx, dword [ecx]
cmp esi, 8
ja 0x61b909
lea edi, [esp + 0x4d4]
mov edi, 8
mov dword [esp + 0x520], edi
lea edi, [esp + 0x4d4]
jmp 0x61b963
mov dword [esp + 0x54c], ebp
mov dword [esp + 0x5b4], ecx
lea eax, [esp + 0x4d4]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
lea eax, [0x6e06e0]
mov dword [esp + 0x10], eax
call fcn.0046cad0
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x54c]
mov edi, eax
mov dword [esp + 0x520], ecx
mov ecx, dword [esp + 0x5b4]
mov dword [esp + 0x588], edi
mov dword [esp + 0x51c], esi
lea eax, [edi + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00472440
mov eax, dword [esp + 0x598]
mov ecx, dword [eax]
movzx ecx, word [ecx + 0x12]
mov word [esp], cx
movzx ecx, word [esp + 0x4dc]
mov word [esp + 2], cx
movzx ecx, word [esp + 0x4e2]
mov word [esp + 4], cx
lea ecx, [0x6fe060]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x590]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x588]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x51c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x520]
mov dword [esp + 0x18], ecx
call fcn.006018a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x598]
mov dword [edi + 0xc], eax
mov dword [edi + 0x10], ecx
mov eax, dword [0x98d0b8]
test eax, eax
je 0x61ba33
mov eax, edi
call fcn.00471ae0
mov dword [edi], ebx
mov ecx, dword [eax + 8]
mov dword [edi + 4], ecx
mov dword [edi + 8], ebp
mov ecx, dword [eax + 4]
mov dword [edi + 0xc], ecx
mov edi, eax
mov dword [edi + 8], ebx
mov dword [edi + 4], ebp
test edx, edx
jne 0x61ba52
mov eax, dword [esp + 0x57c]
mov ebx, dword [esp + 0x58c]
mov ecx, edi
jmp 0x61b766
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
mov dword [esp + 0x5d8], edx
mov dword [esp + 0x5dc], esi
add esp, 0x5c4
ret
mov dword [esp + 0x5cc], 0
mov dword [esp + 0x5d0], 0
mov dword [esp + 0x5d4], 0
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5dc], eax
add esp, 0x5c4
ret
xor eax, eax
mov ecx, eax
call fcn.00471b30
xor eax, eax
mov ecx, eax
call fcn.00471b30
lea eax, [ebx + 1]
mov ebx, dword [esp + 0x578]
mov dword [esp + 0x54c], eax
mov eax, dword [esp + 0x518]
mov ebx, dword [esp + 0x54c]
cmp ebx, edx
jge 0x61a4de
movzx eax, word [ebp + ebx*2]
cmp ax, di
jne 0x61bad0
jmp 0x61a4b4
lea edx, [edi + 1]
movzx edi, word [esp + 0x4e0]
mov dword [esp + 0x54c], edx
mov edx, dword [esp + 0x524]
mov edi, dword [esp + 0x54c]
cmp edi, ebp
jge 0x61bb3d
mov edx, dword [ebx + edi*4]
cmp word [edx], ax
jne 0x61bb06
mov eax, edx
mov edx, dword [esp + 0x524]
jmp 0x61bb3f
xor eax, eax
mov ebp, dword [esp + 0x59c]
movzx edi, word [esp + 0x4e0]
mov ebx, eax
mov eax, dword [esp + 0x518]
jmp 0x61a4e0
call fcn.004706b0
jmp fcn.00619ec0