Function at 0x6018a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov eax, esp
sub eax, 0xfb0
jb 0x602af1
cmp eax, dword [ecx + 8]
jbe 0x602af1
sub esp, 0x1030
lea eax, [0x7347e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x1044]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1020], eax
lea ecx, [0x7347e0]
mov dword [esp], ecx
mov edx, dword [esp + 0x1044]
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x101c], eax
lea ecx, [0x749380]
mov dword [esp], ecx
mov edx, dword [esp + 0x1044]
lea ebx, [edx + 0x3f]
shl ebx, 4
shr ebx, 6
mov dword [esp + 0x88], ebx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1018], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x90], ecx
lea edx, [0x7347e0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.004426a0
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1024], ecx
mov dword [esp + 0x1028], eax
mov dword [esp + 0x102c], eax
nop
mov eax, dword [esp + 0x1044]
cmp eax, 0x40
jb 0x6019a7
mov eax, 0x40
mov dword [esp + 0x58], eax
lea ecx, [0x749380]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1014], eax
lea ecx, [0x74cb00]
mov dword [esp], ecx
mov dword [esp + 4], 0x801
mov dword [esp + 8], 0x801
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1010], eax
lea edi, [esp + 0xf4]
xor eax, eax
call fcn.00456d20
lea edi, [esp + 0x1f4]
call fcn.00456d20
lea edi, [esp + 0x2f4]
call fcn.00456d20
lea edi, [esp + 0x3f4]
call fcn.00456d20
mov ecx, dword [esp + 0x101c]
mov edx, dword [esp + 0x1044]
xor ebx, ebx
jmp 0x601a41
mov dword [ecx + ebx*4], 0
inc ebx
cmp edx, ebx
jle 0x601a4c
ja 0x601a39
jmp 0x602ae7
mov ebx, dword [esp + 0x104c]
mov ebp, dword [esp + 0x1048]
mov esi, dword [esp + 0x1040]
xor edi, edi
xor eax, eax
mov dword [esp + 0x60], eax
xor eax, eax
jmp 0x601a88
mov edi, dword [esp + 0x1048]
mov edi, edx
mov dword [esp + 0x60], ebp
mov edx, dword [esp + 0x1044]
mov ebp, dword [esp + 0x1048]
cmp esi, edi
jbe 0x601ae2
mov ebp, dword [esp + 0x60]
cmp edx, ebp
jbe 0x602acf
inc dword [ecx + ebp*4]
lea edx, [edi + 1]
cmp esi, edx
je 0x601ad2
cmp ebx, edi
jbe 0x602ac6
mov esi, dword [esp + 0x1048]
movzx ebp, byte [esi + edi]
cmp ebx, edx
jbe 0x602abd
lea esi, [edi + esi + 1]
xchg ebp, eax
cmp byte [esi], al
xchg ebp, eax
je 0x601ad5
mov ebp, dword [esp + 0x60]
mov esi, dword [esp + 0x1040]
inc ebp
jmp 0x601a6d
mov esi, dword [esp + 0x1040]
mov ebp, dword [esp + 0x60]
jmp 0x601a6d
mov ebx, dword [esp + 0x60]
cmp edx, ebx
jne 0x602aa5
mov ebp, dword [esp + 0x1034]
mov esi, dword [esp + 0x1038]
mov ebx, dword [esp + 0x1014]
mov edi, dword [esp + 0x58]
xor eax, eax
mov dword [esp + 0xb8], eax
xor eax, eax
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0xac], eax
mov dword [esp + 0xec], ecx
xor ecx, ecx
mov dword [esp + 0x64], ecx
xor ecx, ecx
mov dword [esp + 0xa4], ecx
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x1018]
mov dword [esp + 0x1000], ecx
xor eax, eax
mov ecx, dword [esp + 0xec]
jmp 0x601ba6
mov eax, dword [esp + 0xb8]
add eax, 0x40
mov ebp, dword [esp + 0x1044]
mov ebx, dword [esp + 0x1014]
mov ebp, dword [esp + 0x1034]
mov esi, dword [esp + 0x1038]
mov edi, dword [esp + 0x58]
mov dword [esp + 0xb8], eax
mov dword [esp + 0x64], ecx
mov dword [esp + 0xa4], edx
xor eax, eax
mov ecx, dword [esp + 0x101c]
mov edx, dword [esp + 0x1044]
mov ebp, dword [esp + 0xb8]
cmp edx, ebp
jbe 0x601d45
sub edx, ebp
cmp edx, 0x40
jb 0x601bc1
mov edx, 0x40
mov dword [esp + 0x54], edx
xor eax, eax
mov dword [esp + 0xb4], eax
xor eax, eax
jmp 0x6025c6
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], edi
lea eax, [esp + 0xf4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0x40
mov dword [esp + 0x14], 0x40
lea ecx, [esp + 0x2f4]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], 0x40
mov dword [esp + 0x20], 0x40
lea ebp, [esp + 0x1f4]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], 0x40
mov dword [esp + 0x2c], 0x40
mov esi, dword [esp + 0x1010]
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], 0x801
mov dword [esp + 0x38], 0x801
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], 0x40
mov dword [esp + 0x48], 0x800
call fcn.0060f140
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x64]
lea edx, [ecx + eax]
mov ebx, dword [esp + 0xac]
cmp ebx, edx
jae 0x601c9a
test ebx, ebx
jne 0x601c91
mov ebp, edx
jmp 0x60293d
mov ebp, edx
mov edx, ebx
jmp 0x60293d
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0x1000]
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x1000], esi
mov dword [esp + 0xac], ebx
mov edi, ebx
mov ebx, dword [esp + 0x90]
cmp ebx, edx
jae 0x601ce8
test ebx, ebx
jne 0x601ccf
mov ebx, edx
jmp 0x60285a
mov dword [esp + 0xe4], eax
mov eax, ebx
mov ebx, edx
mov edx, eax
mov eax, dword [esp + 0xe4]
jmp 0x60285a
mov edx, dword [esp + 0x1014]
mov ebx, dword [esp + 0x58]
mov dword [esp + 0xdc], eax
xor eax, eax
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xdc]
jmp 0x6026b5
mov ebp, dword [esp + 0x54]
mov dword [esp + 0xd4], eax
xor eax, eax
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xd4]
jmp 0x60279b
mov edx, dword [esp + 0xa4]
add edx, eax
cmp ecx, edx
je 0x601b5a
jmp 0x6027e2
mov ebx, dword [esp + 0xa4]
mov ebp, ebx
shl ebx, 6
mov edi, ebp
shr ebp, 1
imul ebp, edi
cmp ebx, ebp
jb 0x601d5e
mov ebx, ebp
mov dword [esp + 0x98], ebx
lea ebp, [ebx + 1]
cmp ebp, 0x801
ja 0x601d85
mov ebp, 0x801
mov eax, dword [esp + 0x1010]
mov dword [esp + 0x1008], eax
jmp 0x601dbb
mov dword [esp + 0xc8], ebp
lea eax, [0x74cb00]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebp
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov edi, dword [esp + 0xa4]
mov ebp, dword [esp + 0xc8]
mov dword [esp + 0x1008], eax
mov dword [esp + 0xa0], ebp
lea eax, [0x7347e0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edi
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xa4]
xor edx, edx
jmp 0x601deb
mov dword [eax + edx*4], edx
inc edx
cmp edx, ecx
jb 0x601de7
mov dword [esp + 0x1018], eax
mov edx, dword [esp + 0x1024]
mov ebx, dword [esp + 0x1028]
mov ebp, dword [esp + 0x102c]
mov esi, dword [esp + 0x1000]
mov dword [esp], esi
mov edi, dword [esp + 0x7c]
mov dword [esp + 4], edi
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebp
mov edx, dword [esp + 0x1020]
mov dword [esp + 0x18], edx
mov ebx, dword [esp + 0x1044]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], ecx
mov ebp, dword [esp + 0x1008]
mov dword [esp + 0x30], ebp
mov ebp, dword [esp + 0xa0]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], 0x100
mov ebp, dword [esp + 0x98]
mov dword [esp + 0x48], ebp
call fcn.0060f140
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x80], eax
mov dword [esp + 0x1024], 0
mov dword [esp + 0x1028], 0
mov dword [esp + 0x102c], 0
lea ecx, [0x7347e0]
mov dword [esp], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xa4]
xor edx, edx
jmp 0x601ee9
mov dword [eax + edx*4], ebx
inc edx
cmp edx, ecx
jae 0x601efa
mov ebx, dword [0x673100]
jb 0x601ee5
jmp 0x602566
mov dword [esp + 0x1014], eax
mov ebx, dword [esp + 0x1044]
mov ebp, dword [esp + 0x101c]
mov esi, dword [esp + 0x1034]
mov edx, dword [esp + 0x1038]
xor edi, edi
xor edi, edi
mov dword [esp + 0x84], edi
xor edi, edi
mov dword [esp + 0x68], edi
xor edi, edi
jmp 0x601f65
mov esi, dword [esp + 0xb8]
inc esi
mov eax, ebp
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x1038]
mov ebp, dword [esp + 0x101c]
mov edi, esi
mov dword [esp + 0x68], ebx
mov ebx, dword [esp + 0x1044]
mov esi, dword [esp + 0x1034]
cmp ebx, edi
jbe 0x6020a6
mov dword [esp + 0xb8], edi
lea edi, [esp + 0x4f4]
mov ecx, 0x2c3
mov eax, 0
rep stosd dword es:[edi], eax
lea edi, [esp + 0x4f4]
mov ecx, 0x2c0
rep stosd dword es:[edi], eax
mov dword [esp + 0xff4], 0
movsd xmm0, qword [0x7c9e6c]
movsd qword [esp + 0xff8], xmm0
mov ecx, dword [esp + 0xb8]
mov edi, dword [esp + 0x84]
mov eax, 0
mov dword [esp + 0xb0], eax
mov eax, 0
jmp 0x60243e
test ecx, ecx
jne 0x601fe4
mov ebx, dword [esp + 0x1020]
mov ebp, dword [ebx]
jmp 0x601fef
mov ebx, dword [esp + 0x1020]
mov ebp, dword [ebx + ecx*4 - 4]
mov esi, dword [esp + 0x7c]
cmp ebp, esi
jae 0x60253f
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x84], edi
lea eax, [esp + 0x4f4]
mov dword [esp], eax
imul ecx, ebp, 0xb0c
mov edx, dword [esp + 0x1000]
add ecx, edx
mov dword [esp + 4], ecx
call fcn.0060f9a0
movsd xmm0, qword [esp + 8]
mov eax, dword [esp + 0x1018]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x1000]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0xa4]
mov esi, dword [esp + 0x6c]
xor edi, edi
jmp 0x602497
mov edi, ebx
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0x1020]
mov dword [ebp + ebx*4], esi
mov ebp, dword [esp + 0xa4]
cmp esi, ebp
jae 0x602524
mov ebp, dword [esp + 0x1014]
mov ebx, dword [ebp + esi*4]
cmp dword [0x673100], ebx
jne 0x60209d
mov ebx, dword [esp + 0x68]
mov dword [ebp + esi*4], ebx
inc ebx
jmp 0x601f32
mov ebx, dword [esp + 0x68]
jmp 0x601f32
mov esi, dword [esp + 0x1054]
mov edi, dword [esi + 0x20]
cmp ebx, edi
jbe 0x6020c8
test edi, edi
jne 0x6020bf
mov edx, ebx
jmp 0x602322
mov edx, ebx
mov ebx, edi
jmp 0x602322
mov edi, dword [esi + 0x24]
cmp ebx, edi
jbe 0x6020e3
test edi, edi
jne 0x6020da
mov edx, ebx
jmp 0x60222f
mov edx, ebx
mov ebx, edi
jmp 0x60222f
mov edx, dword [esp + 0x1020]
xor edi, edi
xor edi, edi
mov dword [esp + 0x9c], edi
xor edi, edi
mov dword [esp + 0x5c], edi
xor edi, edi
xchg edi, eax
mov byte [esp + 0x53], al
xchg edi, eax
xor edi, edi
jmp 0x60213b
mov edi, dword [esp + 0x1020]
mov edx, edi
mov edi, dword [esp + 0xc8]
mov dword [esp + 0x9c], esi
mov dword [esp + 0x5c], ebp
mov byte [esp + 0x53], bl
mov ebx, dword [esp + 0x1044]
mov ebp, dword [esp + 0x101c]
mov esi, dword [esp + 0x1054]
cmp ebx, edi
jbe 0x6021ed
mov esi, dword [esp + 0x9c]
add esi, dword [ebp + edi*4]
lea ebp, [edi + 1]
mov dword [esp + 0xc8], ebp
cmp ebx, ebp
je 0x60217c
mov ebx, dword [edx + edi*4]
jbe 0x60221f
lea ebp, [edx + edi*4 + 4]
cmp dword [ebp], ebx
je 0x6021d8
mov ebx, dword [esp + 0x1044]
mov ebp, dword [esp + 0xc8]
mov edi, dword [edx + edi*4]
cmp ecx, edi
jbe 0x602218
mov dword [esp + 0xc4], esi
mov edi, dword [eax + edi*4]
mov edx, dword [esp + 0x1054]
mov ebx, dword [edx + 0xc]
mov ebp, dword [edx + 8]
mov esi, dword [esp + 0x5c]
cmp esi, ebx
jae 0x60220f
xchg edi, eax
mov byte [ebp + esi], al
xchg edi, eax
mov ebx, dword [edx + 0x18]
mov ebp, dword [edx + 0x14]
cmp esi, ebx
jae 0x602206
mov ebx, dword [esp + 0xc4]
mov dword [ebp + esi*4], ebx
movzx ebx, byte [esp + 0x53]
xchg edi, eax
cmp bl, al
xchg edi, eax
ja 0x6021ce
mov ebx, edi
lea ebp, [esi + 1]
xor esi, esi
jmp 0x602107
mov edx, dword [esp + 0x1054]
mov ebp, dword [esp + 0x5c]
movzx ebx, byte [esp + 0x53]
jmp 0x602107
mov eax, dword [esp + 0x5c]
mov dword [esi + 4], eax
movzx eax, byte [esp + 0x53]
movzx eax, al
inc eax
mov dword [esi], eax
add esp, 0x1030
ret
mov eax, esi
mov ecx, ebx
call fcn.00456b50
mov eax, esi
mov ecx, ebx
call fcn.00456b50
mov eax, edi
call fcn.00456b50
mov eax, ebp
mov ecx, dword [esp + 0x1044]
call fcn.00456b50
shl ebx, 1
cmp edx, ebx
ja 0x60222d
mov edi, dword [esi + 0x1c]
cmp ebx, edi
jg 0x602248
ja 0x602317
mov dword [esi + 0x18], ebx
jmp 0x602304
mov dword [esp + 0x70], ebx
lea eax, [0x7347e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1054]
mov edx, dword [ecx + 0x24]
test edx, edx
je 0x6022be
mov ebx, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x1c]
cmp ebp, edx
jb 0x60230e
mov ebp, dword [esp + 0x70]
cmp ebp, edx
jg 0x60228c
mov edx, ebp
cmp ebx, eax
je 0x6022c2
mov dword [esp + 0x1018], eax
mov dword [esp], eax
mov dword [esp + 4], ebx
shl edx, 2
mov dword [esp + 8], edx
call fcn.00457450
mov eax, dword [esp + 0x1018]
mov ecx, dword [esp + 0x1054]
mov ebp, dword [esp + 0x70]
jmp 0x6022c2
mov ebp, dword [esp + 0x70]
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x1c], ebp
mov edx, dword [0x901e80]
test edx, edx
jne 0x6022d7
mov dword [ecx + 0x14], eax
jmp 0x6022df
lea edi, [ecx + 0x14]
call fcn.00456ac0
mov eax, dword [esp + 0x1014]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x1044]
mov ebx, ebp
mov ebp, dword [esp + 0x101c]
mov esi, dword [esp + 0x1054]
mov dword [esi + 0x24], ebx
mov ebx, edx
jmp 0x6020e3
mov ecx, edx
mov edx, ebp
call fcn.00456b90
mov ecx, ebx
mov edx, edi
call fcn.00456b90
shl ebx, 1
cmp edx, ebx
ja 0x602320
mov edi, dword [esi + 0x10]
cmp ebx, edi
jg 0x60233b
ja 0x602407
mov dword [esi + 0xc], ebx
jmp 0x6023f4
mov dword [esp + 0x74], ebx
lea eax, [0x734860]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1054]
mov edx, dword [ecx + 0x20]
test edx, edx
je 0x6023ae
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 0x10]
cmp ebp, edx
jb 0x6023fe
mov ebp, dword [esp + 0x74]
cmp ebp, edx
jg 0x60237f
mov edx, ebp
cmp ebx, eax
je 0x6023b2
mov dword [esp + 0x1018], eax
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.00457450
mov eax, dword [esp + 0x1018]
mov ecx, dword [esp + 0x1054]
mov ebp, dword [esp + 0x74]
jmp 0x6023b2
mov ebp, dword [esp + 0x74]
mov dword [ecx + 0xc], ebp
mov dword [ecx + 0x10], ebp
mov ebx, dword [0x901e80]
test ebx, ebx
jne 0x6023c7
mov dword [ecx + 8], eax
jmp 0x6023cf
lea edi, [ecx + 8]
call fcn.00456ac0
mov eax, dword [esp + 0x1014]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x1044]
mov ebx, ebp
mov ebp, dword [esp + 0x101c]
mov esi, dword [esp + 0x1054]
mov dword [esi + 0x20], ebx
mov ebx, edx
jmp 0x6020c8
mov ecx, edx
mov edx, ebp
call fcn.00456b90
mov ecx, ebx
mov edx, edi
call fcn.00456b90
inc dword [esp + ebp*4 + 0x4f4]
inc dword [esp + 0xff4]
inc ebx
inc edi
mov ebp, dword [esp + 0x1044]
cmp ebp, ecx
mov ebp, dword [esp + 0x101c]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x1044]
jbe 0x60255d
lea ebp, [ebp + ecx*4]
mov ebx, dword [esp + 0xb0]
cmp dword [ebp], ebx
jbe 0x601fd5
cmp edx, edi
jbe 0x602554
nop
movzx ebp, word [esi + edi*2]
cmp ebp, 0x2c0
jb 0x602410
jmp 0x602548
lea edi, [ebx + 1]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x1000]
mov ebx, dword [esp + 0x7c]
mov eax, dword [esp + 0xa4]
mov eax, ebp
mov ebp, dword [esp + 0xa4]
cmp edi, ecx
jae 0x602059
cmp edi, ebp
jae 0x602536
mov ebp, dword [eax + edi*4]
cmp ebx, ebp
jbe 0x60252d
mov dword [esp + 0xb0], edi
movsd qword [esp + 0xcc], xmm0
mov dword [esp + 0x6c], esi
lea eax, [esp + 0x4f4]
mov dword [esp], eax
imul ecx, ebp, 0xb0c
add ecx, edx
mov dword [esp + 4], ecx
call fcn.0060f9a0
movsd xmm0, qword [esp + 8]
movsd xmm1, qword [esp + 0xcc]
ucomisd xmm1, xmm0
jbe 0x602509
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x1018]
mov esi, dword [ebp + ebx*4]
jmp 0x602472
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x1018]
movsd xmm0, xmm1
mov esi, dword [esp + 0x6c]
jmp 0x602472
mov eax, esi
mov ecx, ebp
call fcn.00456b50
mov eax, ebp
mov ecx, ebx
call fcn.00456b50
mov eax, edi
mov ecx, ebp
call fcn.00456b50
mov eax, ebp
mov ecx, esi
call fcn.00456b50
mov eax, ebp
mov ecx, 0x2c0
call fcn.00456b50
mov eax, edi
mov ecx, edx
call fcn.00456b50
mov eax, ecx
mov ecx, ebx
call fcn.00456b50
mov eax, edx
call fcn.00456b50
mov dword [esp + eax*4 + 0x1f4], eax
mov dword [esp + eax*4 + 0x2f4], eax
mov dword [esp + eax*4 + 0xf4], 1
inc eax
mov ebp, dword [esp + 0xb8]
mov edx, dword [esp + 0x1044]
mov ebx, dword [esp + 0x101c]
mov esi, dword [esp + 0x1034]
mov edi, dword [esp + 0x1038]
mov ecx, ebx
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x1014]
mov esi, edi
mov edi, dword [esp + 0x58]
mov dword [esp + 0xb4], eax
xor eax, eax
mov esi, dword [esp + 0xb4]
cmp esi, edx
jae 0x601bd5
cmp esi, edi
jae 0x602a9c
imul edx, esi, 0xb0c
mov dword [esp + 0xc0], edx
lea ebp, [ebx + edx]
mov edi, ebp
mov ecx, 0x2c0
rep stosd dword es:[edi], eax
mov dword [ebx + edx + 0xb00], 0
movsd xmm0, qword [0x7c9e6c]
movsd qword [ebx + edx + 0xb04], xmm0
mov ecx, ebp
lea ebp, [edx + ebx]
mov dword [esp + 0x1004], ebp
mov edi, edx
lea edx, [ebx + edx + 0xb00]
xor eax, eax
mov dword [esp + 0x8c], eax
xor eax, eax
jmp 0x602a19
mov eax, dword [esp + 0x1004]
mov dword [esp], eax
call fcn.005ffaf0
movsd xmm0, qword [esp + 4]
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0x1014]
movsd qword [ecx + eax + 0xb04], xmm0
mov eax, dword [esp + 0xb4]
cmp eax, 0x40
jb 0x60256d
jmp 0x602a74
mov dword [esp + ebx*4 + 0x3f4], edi
lea ecx, [edi + 1]
inc edx
mov ebp, dword [esp + 0x7c]
mov ebx, dword [esp + 0x1000]
mov edi, dword [esp + 0x1014]
mov ebx, esi
mov esi, dword [esp + 0x1000]
mov edi, dword [esp + 0xac]
mov dword [esp + 0xb4], ecx
mov ecx, edx
mov edx, dword [esp + 0x1014]
mov ebp, dword [esp + 0xb4]
cmp ebp, eax
jae 0x601d0f
cmp ebp, 0x40
jae 0x60284c
mov ebp, dword [esp + ebp*4 + 0x1f4]
cmp ebx, ebp
jbe 0x602843
imul ebp, ebp, 0xb0c
add ebp, edx
mov edx, dword [esp + 0x7c]
cmp edx, ecx
jbe 0x60283a
mov dword [esp + 0xa8], ecx
imul edx, ecx, 0xb0c
add edx, esi
mov edi, edx
mov esi, ebp
mov ecx, 0x2c3
rep movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + edx*4 + 0x1f4]
cmp ebp, 0x40
jae 0x60282e
mov ecx, dword [esp + 0x1028]
mov esi, ebx
mov ebx, dword [esp + 0x1024]
mov ebp, dword [esp + ebp*4 + 0xf4]
mov edi, edx
mov edx, dword [esp + 0xa8]
cmp edx, ecx
jae 0x602827
mov dword [ebx + edx*4], ebp
mov ebx, dword [esp + edi*4 + 0x1f4]
cmp ebx, 0x40
jb 0x602678
jmp 0x60281b
mov edi, dword [esp + 0x1020]
mov dword [edi + esi*4], ebx
inc edx
mov ebx, dword [esp + 0x54]
mov esi, dword [esp + 0xa4]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0x1000]
mov edi, dword [esp + 0xac]
mov dword [esp + 0xb4], edx
mov edx, dword [esp + 0x1014]
mov edx, dword [esp + 0xb4]
cmp edx, ebp
jae 0x601d2f
mov ebx, dword [esp + 0xb8]
lea esi, [edx + ebx]
cmp edx, 0x40
jae 0x60280f
mov ebx, dword [esp + edx*4 + 0x2f4]
cmp ebx, 0x40
jae 0x602803
mov ebx, dword [esp + ebx*4 + 0x3f4]
mov ebp, dword [esp + 0xa4]
add ebx, ebp
mov ebp, dword [esp + 0x1044]
cmp ebp, esi
ja 0x602761
jmp 0x6027fa
lea eax, [0x7346e0]
mov dword [esp], eax
lea eax, [0x7ca28c]
mov dword [esp + 4], eax
call fcn.00430590
mov eax, esi
mov ecx, ebp
call fcn.00456b50
mov eax, ebx
mov ecx, 0x40
call fcn.00456b50
mov eax, edx
mov ecx, 0x40
call fcn.00456b50
mov eax, ebx
mov ecx, 0x40
call fcn.00456b50
mov eax, edx
call fcn.00456b50
mov eax, ebp
mov ecx, 0x40
call fcn.00456b50
mov eax, ecx
mov ecx, edx
call fcn.00456b50
mov eax, ebp
mov ecx, ebx
call fcn.00456b50
mov eax, ebp
mov ecx, 0x40
call fcn.00456b50
shl edx, 1
cmp edx, ebx
jb 0x602858
mov ebx, dword [esp + 0x102c]
cmp edx, ebx
jg 0x60287b
ja 0x602932
mov dword [esp + 0x1028], edx
jmp 0x602921
mov dword [esp + 0x78], edx
lea eax, [0x7347e0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x90]
test ecx, ecx
je 0x6028eb
mov ebx, dword [esp + 0x1024]
mov edx, dword [esp + 0x102c]
cmp edx, ecx
jb 0x60292d
mov edx, dword [esp + 0x78]
cmp edx, ecx
jg 0x6028c0
mov ecx, edx
cmp ebx, eax
je 0x6028ef
mov dword [esp + 0x1018], eax
mov dword [esp], eax
mov dword [esp + 4], ebx
shl ecx, 2
mov dword [esp + 8], ecx
call fcn.00457450
mov eax, dword [esp + 0x1018]
mov edx, dword [esp + 0x78]
jmp 0x6028ef
mov edx, dword [esp + 0x78]
mov dword [esp + 0x1028], edx
mov dword [esp + 0x102c], edx
mov dword [esp + 0x1024], eax
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0x1000]
mov edi, dword [esp + 0xac]
mov dword [esp + 0x90], edx
jmp 0x601ce8
call fcn.00456b90
mov ecx, edx
mov edx, ebx
call fcn.00456b90
shl edx, 1
cmp edx, ebp
jb 0x60293b
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xbc], edx
lea eax, [0x749380]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xac]
test ecx, ecx
je 0x6029c1
mov edx, dword [esp + 0x7c]
cmp edx, ecx
jb 0x6029e3
mov ebx, dword [esp + 0xbc]
cmp ebx, ecx
jg 0x602989
mov ecx, ebx
mov ebp, dword [esp + 0x1000]
cmp ebp, eax
je 0x6029c8
mov dword [esp + 0x100c], eax
mov dword [esp], eax
mov dword [esp + 4], ebp
imul ecx, ecx, 0xb0c
mov dword [esp + 8], ecx
call fcn.00457450
mov eax, dword [esp + 0x100c]
mov ebx, dword [esp + 0xbc]
jmp 0x6029c8
mov ebx, dword [esp + 0xbc]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xc8]
mov ebp, ebx
mov esi, eax
mov eax, dword [esp + 0x94]
jmp 0x601ca5
call fcn.00456b90
inc dword [ecx + edi*4]
inc dword [edx]
inc ebp
inc ebx
mov edi, dword [esp + 0xb8]
mov edi, dword [esp + 0xc0]
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x84], ebx
mov ebx, dword [esp + 0x1014]
mov ebp, dword [esp + 0x1004]
mov ebx, dword [esp + 0xb8]
lea edi, [ebx + esi]
mov ebp, dword [esp + 0x1044]
cmp ebp, edi
jbe 0x602a93
mov ebp, dword [esp + 0x101c]
lea edi, [ebp + edi*4]
mov ebp, dword [esp + 0x8c]
cmp dword [edi], ebp
jbe 0x602637
mov edi, dword [esp + 0x1038]
mov ebx, dword [esp + 0x84]
cmp edi, ebx
jbe 0x602a8a
nop
mov edi, dword [esp + 0x1034]
movzx edi, word [edi + ebx*2]
cmp edi, 0x2c0
jb 0x6029e8
jmp 0x602a7e
mov ecx, 0x40
call fcn.00456b50
mov eax, edi
mov ecx, 0x2c0
call fcn.00456b50
mov eax, ebx
mov ecx, edi
call fcn.00456b50
mov eax, edi
mov ecx, ebp
call fcn.00456b50
mov eax, esi
mov ecx, edi
call fcn.00456b50
lea eax, [0x7346e0]
mov dword [esp], eax
lea eax, [0x7ca28c]
mov dword [esp + 4], eax
call fcn.00430590
mov eax, edx
mov ecx, ebx
call fcn.00456b50
mov eax, edi
mov ecx, ebx
call fcn.00456b50
lea eax, [0x7346e0]
mov dword [esp], eax
lea eax, [0x7ca28c]
mov dword [esp + 4], eax
call fcn.00430590
mov eax, ebx
mov ecx, edx
call fcn.00456b40
nop
call fcn.00455690
jmp fcn.006018a0