Function at 0x601900
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov eax, esp
sub eax, 0xfb0
jb 0x602b1e
cmp eax, dword [ecx + 8]
jbe 0x602b1e
sub esp, 0x1030
lea eax, [0x734760]
mov dword [esp], eax
mov ecx, dword [esp + 0x1044]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1020], eax
lea ecx, [0x734760]
mov dword [esp], ecx
mov edx, dword [esp + 0x1044]
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x101c], eax
lea ecx, [0x747640]
mov dword [esp], ecx
mov edx, dword [esp + 0x1044]
lea ebx, [edx + 0x3f]
shl ebx, 4
shr ebx, 6
mov dword [esp + 0x90], ebx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1018], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 0xb0], ecx
lea edx, [0x734760]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.004426a0
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1024], ecx
mov dword [esp + 0x1028], eax
mov dword [esp + 0x102c], eax
nop
mov eax, dword [esp + 0x1044]
cmp eax, 0x40
jb 0x601a07
mov eax, 0x40
mov dword [esp + 0x58], eax
lea ecx, [0x747640]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1014], eax
lea ecx, [0x74b1e0]
mov dword [esp], ecx
mov dword [esp + 4], 0x801
mov dword [esp + 8], 0x801
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1010], eax
lea edi, [esp + 0x3f4]
xor eax, eax
call fcn.00456d20
lea edi, [esp + 0x1f4]
call fcn.00456d20
lea edi, [esp + 0xf4]
call fcn.00456d20
lea edi, [esp + 0x2f4]
call fcn.00456d20
mov ecx, dword [esp + 0x101c]
mov edx, dword [esp + 0x1044]
xor ebx, ebx
jmp 0x601aa1
mov dword [ecx + ebx*4], 0
inc ebx
cmp edx, ebx
jle 0x601aac
ja 0x601a99
jmp 0x602b14
mov ebx, dword [esp + 0x104c]
mov ebp, dword [esp + 0x1048]
mov esi, dword [esp + 0x1040]
xor edi, edi
xor eax, eax
mov dword [esp + 0x7c], eax
xor eax, eax
jmp 0x601ae8
mov edi, dword [esp + 0x1048]
mov edi, edx
mov dword [esp + 0x7c], ebp
mov edx, dword [esp + 0x1044]
mov ebp, dword [esp + 0x1048]
cmp esi, edi
jbe 0x601b42
mov ebp, dword [esp + 0x7c]
cmp edx, ebp
jbe 0x602afc
inc dword [ecx + ebp*4]
lea edx, [edi + 1]
cmp esi, edx
je 0x601b32
cmp ebx, edi
jbe 0x602af3
mov esi, dword [esp + 0x1048]
movzx ebp, byte [esi + edi]
cmp ebx, edx
jbe 0x602aea
lea esi, [edi + esi + 1]
xchg ebp, eax
cmp byte [esi], al
xchg ebp, eax
je 0x601b35
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0x1040]
inc ebp
jmp 0x601acd
mov esi, dword [esp + 0x1040]
mov ebp, dword [esp + 0x7c]
jmp 0x601acd
mov ebx, dword [esp + 0x7c]
cmp edx, ebx
jne 0x602ad2
mov ebp, dword [esp + 0x1034]
mov esi, dword [esp + 0x1038]
mov ebx, dword [esp + 0x1014]
mov edi, dword [esp + 0x58]
xor eax, eax
mov dword [esp + 0x68], eax
xor eax, eax
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x84], eax
mov dword [esp + 0xec], ecx
xor ecx, ecx
mov dword [esp + 0x70], ecx
xor ecx, ecx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x1018]
mov dword [esp + 0x1004], ecx
xor eax, eax
mov ecx, dword [esp + 0xec]
jmp 0x601bf7
mov eax, dword [esp + 0x68]
add eax, 0x40
mov ebp, dword [esp + 0x1044]
mov ebx, dword [esp + 0x1014]
mov ebp, dword [esp + 0x1034]
mov esi, dword [esp + 0x1038]
mov edi, dword [esp + 0x58]
mov dword [esp + 0x68], eax
mov dword [esp + 0x70], ecx
mov dword [esp + 0x5c], edx
xor eax, eax
mov ecx, dword [esp + 0x101c]
mov edx, dword [esp + 0x1044]
mov ebp, dword [esp + 0x68]
cmp edx, ebp
jbe 0x601d8d
sub edx, ebp
cmp edx, 0x40
jb 0x601c0f
mov edx, 0x40
mov dword [esp + 0x54], edx
xor eax, eax
mov dword [esp + 0xac], eax
xor eax, eax
jmp 0x602600
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], edi
lea eax, [esp + 0x3f4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0x40
mov dword [esp + 0x14], 0x40
lea ecx, [esp + 0xf4]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], 0x40
mov dword [esp + 0x20], 0x40
lea ebp, [esp + 0x1f4]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], 0x40
mov dword [esp + 0x2c], 0x40
mov esi, dword [esp + 0x1010]
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], 0x801
mov dword [esp + 0x38], 0x801
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], 0x40
mov dword [esp + 0x48], 0x800
call fcn.0060f110
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x70]
lea edx, [ecx + eax]
mov ebx, dword [esp + 0x84]
cmp ebx, edx
jae 0x601ce5
test ebx, ebx
jne 0x601cdc
mov ebp, edx
jmp 0x602977
mov ebp, edx
mov edx, ebx
jmp 0x602977
mov ebp, dword [esp + 0x6c]
mov esi, dword [esp + 0x1004]
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x1004], esi
mov dword [esp + 0x84], ebx
mov edi, ebx
mov ebx, dword [esp + 0xb0]
cmp ebx, edx
jae 0x601d33
test ebx, ebx
jne 0x601d1a
mov ebx, edx
jmp 0x60288b
mov dword [esp + 0xe4], eax
mov eax, ebx
mov ebx, edx
mov edx, eax
mov eax, dword [esp + 0xe4]
jmp 0x60288b
mov edx, dword [esp + 0x1014]
mov ebx, dword [esp + 0x58]
mov dword [esp + 0xdc], eax
xor eax, eax
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xdc]
jmp 0x6026ef
mov ebp, dword [esp + 0x54]
mov dword [esp + 0xd4], eax
xor eax, eax
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xd4]
jmp 0x6027d2
mov edx, dword [esp + 0x5c]
add edx, eax
cmp ecx, edx
je 0x601bb4
jmp 0x602813
mov ebx, dword [esp + 0x5c]
mov ebp, ebx
shl ebx, 6
mov edi, ebp
shr ebp, 1
imul ebp, edi
cmp ebx, ebp
jb 0x601da3
mov ebx, ebp
mov dword [esp + 0xb8], ebx
lea ebp, [ebx + 1]
cmp ebp, 0x801
ja 0x601dca
mov ebp, 0x801
mov eax, dword [esp + 0x1010]
mov dword [esp + 0x1000], eax
jmp 0x601dfd
mov dword [esp + 0xc8], ebp
lea eax, [0x74b1e0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebp
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov edi, dword [esp + 0x5c]
mov ebp, dword [esp + 0xc8]
mov dword [esp + 0x1000], eax
mov dword [esp + 0x64], ebp
lea eax, [0x734760]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edi
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
xor edx, edx
jmp 0x601e27
mov dword [eax + edx*4], edx
inc edx
cmp edx, ecx
jb 0x601e23
mov dword [esp + 0x1018], eax
mov edx, dword [esp + 0x1024]
mov ebx, dword [esp + 0x1028]
mov ebp, dword [esp + 0x102c]
mov esi, dword [esp + 0x1004]
mov dword [esp], esi
mov edi, dword [esp + 0x6c]
mov dword [esp + 4], edi
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebp
mov edx, dword [esp + 0x1020]
mov dword [esp + 0x18], edx
mov ebx, dword [esp + 0x1044]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], ecx
mov ebp, dword [esp + 0x1000]
mov dword [esp + 0x30], ebp
mov ebp, dword [esp + 0x64]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], 0x100
mov ebp, dword [esp + 0xb8]
mov dword [esp + 0x48], ebp
call fcn.0060f110
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x60], eax
mov dword [esp + 0x1024], 0
mov dword [esp + 0x1028], 0
mov dword [esp + 0x102c], 0
lea ecx, [0x734760]
mov dword [esp], ecx
mov edx, dword [esp + 0x5c]
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
xor edx, edx
jmp 0x601f19
mov dword [eax + edx*4], ebx
inc edx
cmp edx, ecx
jae 0x601f2a
mov ebx, dword [0x6730a4]
jb 0x601f15
jmp 0x6025a3
mov dword [esp + 0x1014], eax
mov ebx, dword [esp + 0x1044]
mov ebp, dword [esp + 0x101c]
mov esi, dword [esp + 0x1034]
mov edx, dword [esp + 0x1038]
xor edi, edi
xor edi, edi
mov dword [esp + 0x88], edi
xor edi, edi
mov dword [esp + 0xb4], edi
xor edi, edi
jmp 0x601f95
mov esi, dword [esp + 0x68]
inc esi
mov eax, ebp
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x1038]
mov ebp, dword [esp + 0x101c]
mov edi, esi
mov dword [esp + 0xb4], ebx
mov ebx, dword [esp + 0x1044]
mov esi, dword [esp + 0x1034]
cmp ebx, edi
jbe 0x6020d0
mov dword [esp + 0x68], edi
lea edi, [esp + 0x4f4]
mov ecx, 0x2c3
mov eax, 0
rep stosd dword es:[edi], eax
lea edi, [esp + 0x4f4]
mov ecx, 0x2c0
rep stosd dword es:[edi], eax
mov dword [esp + 0xff4], 0
movsd xmm0, qword [0x7c9be4]
movsd qword [esp + 0xff8], xmm0
mov ecx, dword [esp + 0x68]
mov edi, dword [esp + 0x88]
mov eax, 0
mov dword [esp + 0xa8], eax
mov eax, 0
jmp 0x60247a
test ecx, ecx
jne 0x60200e
mov ebx, dword [esp + 0x1020]
mov ebp, dword [ebx]
jmp 0x602019
mov ebx, dword [esp + 0x1020]
mov ebp, dword [ebx + ecx*4 - 4]
mov esi, dword [esp + 0x6c]
cmp ebp, esi
jae 0x60257c
mov dword [esp + 0x80], ebp
mov dword [esp + 0x88], edi
lea eax, [esp + 0x4f4]
mov dword [esp], eax
imul ecx, ebp, 0xb0c
mov edx, dword [esp + 0x1004]
add ecx, edx
mov dword [esp + 4], ecx
call fcn.0060f970
movsd xmm0, qword [esp + 8]
mov eax, dword [esp + 0x1018]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x1004]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0x80]
xor edi, edi
jmp 0x6024ca
mov edi, ebx
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x1020]
mov dword [ebp + ebx*4], esi
mov ebp, dword [esp + 0x5c]
cmp esi, ebp
jae 0x602561
mov ebp, dword [esp + 0x1014]
mov ebx, dword [ebp + esi*4]
cmp dword [0x6730a4], ebx
jne 0x6020c4
mov ebx, dword [esp + 0xb4]
mov dword [ebp + esi*4], ebx
inc ebx
jmp 0x601f65
mov ebx, dword [esp + 0xb4]
jmp 0x601f65
mov esi, dword [esp + 0x1054]
mov edi, dword [esi + 0x20]
cmp ebx, edi
jbe 0x6020f2
test edi, edi
jne 0x6020e9
mov edx, ebx
jmp 0x602355
mov edx, ebx
mov ebx, edi
jmp 0x602355
mov edi, dword [esi + 0x24]
cmp ebx, edi
jbe 0x60210d
test edi, edi
jne 0x602104
mov edx, ebx
jmp 0x602259
mov edx, ebx
mov ebx, edi
jmp 0x602259
mov edx, dword [esp + 0x1020]
xor edi, edi
xor edi, edi
mov dword [esp + 0x94], edi
xor edi, edi
mov dword [esp + 0x78], edi
xor edi, edi
xchg edi, eax
mov byte [esp + 0x53], al
xchg edi, eax
xor edi, edi
jmp 0x602165
mov edi, dword [esp + 0x1020]
mov edx, edi
mov edi, dword [esp + 0xc8]
mov dword [esp + 0x94], esi
mov dword [esp + 0x78], ebp
mov byte [esp + 0x53], bl
mov ebx, dword [esp + 0x1044]
mov ebp, dword [esp + 0x101c]
mov esi, dword [esp + 0x1054]
cmp ebx, edi
jbe 0x602217
mov esi, dword [esp + 0x94]
add esi, dword [ebp + edi*4]
lea ebp, [edi + 1]
mov dword [esp + 0xc8], ebp
cmp ebx, ebp
je 0x6021a6
mov ebx, dword [edx + edi*4]
jbe 0x602249
lea ebp, [edx + edi*4 + 4]
cmp dword [ebp], ebx
je 0x602202
mov ebx, dword [esp + 0x1044]
mov ebp, dword [esp + 0xc8]
mov edi, dword [edx + edi*4]
cmp ecx, edi
jbe 0x602242
mov dword [esp + 0xc4], esi
mov edi, dword [eax + edi*4]
mov edx, dword [esp + 0x1054]
mov ebx, dword [edx + 0xc]
mov ebp, dword [edx + 8]
mov esi, dword [esp + 0x78]
cmp esi, ebx
jae 0x602239
xchg edi, eax
mov byte [ebp + esi], al
xchg edi, eax
mov ebx, dword [edx + 0x18]
mov ebp, dword [edx + 0x14]
cmp esi, ebx
jae 0x602230
mov ebx, dword [esp + 0xc4]
mov dword [ebp + esi*4], ebx
movzx ebx, byte [esp + 0x53]
xchg edi, eax
cmp bl, al
xchg edi, eax
ja 0x6021f8
mov ebx, edi
lea ebp, [esi + 1]
xor esi, esi
jmp 0x602131
mov edx, dword [esp + 0x1054]
mov ebp, dword [esp + 0x78]
movzx ebx, byte [esp + 0x53]
jmp 0x602131
mov eax, dword [esp + 0x78]
mov dword [esi + 4], eax
movzx eax, byte [esp + 0x53]
movzx eax, al
inc eax
mov dword [esi], eax
add esp, 0x1030
ret
mov eax, esi
mov ecx, ebx
call fcn.00456b50
mov eax, esi
mov ecx, ebx
call fcn.00456b50
mov eax, edi
call fcn.00456b50
mov eax, ebp
mov ecx, dword [esp + 0x1044]
call fcn.00456b50
shl ebx, 1
cmp edx, ebx
ja 0x602257
mov edi, dword [esi + 0x1c]
cmp ebx, edi
jg 0x602272
ja 0x60234a
mov dword [esi + 0x18], ebx
jmp 0x602337
mov dword [esp + 0x9c], ebx
lea eax, [0x734760]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1054]
mov edx, dword [ecx + 0x24]
test edx, edx
je 0x6022f1
mov ebx, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x1c]
cmp ebp, edx
jb 0x602341
mov ebp, dword [esp + 0x9c]
cmp ebp, edx
jg 0x6022bc
mov edx, ebp
cmp ebx, eax
je 0x6022f8
mov dword [esp + 0x1018], eax
mov dword [esp], eax
mov dword [esp + 4], ebx
shl edx, 2
mov dword [esp + 8], edx
call fcn.00457450
mov eax, dword [esp + 0x1018]
mov ecx, dword [esp + 0x1054]
mov ebp, dword [esp + 0x9c]
jmp 0x6022f8
mov ebp, dword [esp + 0x9c]
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x1c], ebp
mov edx, dword [0x900e70]
test edx, edx
jne 0x60230d
mov dword [ecx + 0x14], eax
jmp 0x602315
lea edi, [ecx + 0x14]
call fcn.00456ac0
mov eax, dword [esp + 0x1014]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x1044]
mov ebx, ebp
mov ebp, dword [esp + 0x101c]
mov esi, dword [esp + 0x1054]
mov dword [esi + 0x24], ebx
mov ebx, edx
jmp 0x60210d
mov ecx, edx
mov edx, ebp
call fcn.00456b90
mov ecx, ebx
mov edx, edi
call fcn.00456b90
shl ebx, 1
cmp edx, ebx
ja 0x602353
mov edi, dword [esi + 0x10]
cmp ebx, edi
jg 0x60236e
ja 0x602443
mov dword [esi + 0xc], ebx
jmp 0x602430
mov dword [esp + 0xa0], ebx
lea eax, [0x7347e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1054]
mov edx, dword [ecx + 0x20]
test edx, edx
je 0x6023ea
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 0x10]
cmp ebp, edx
jb 0x60243a
mov ebp, dword [esp + 0xa0]
cmp ebp, edx
jg 0x6023b8
mov edx, ebp
cmp ebx, eax
je 0x6023f1
mov dword [esp + 0x1018], eax
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.00457450
mov eax, dword [esp + 0x1018]
mov ecx, dword [esp + 0x1054]
mov ebp, dword [esp + 0xa0]
jmp 0x6023f1
mov ebp, dword [esp + 0xa0]
mov dword [ecx + 0xc], ebp
mov dword [ecx + 0x10], ebp
mov ebx, dword [0x900e70]
test ebx, ebx
jne 0x602406
mov dword [ecx + 8], eax
jmp 0x60240e
lea edi, [ecx + 8]
call fcn.00456ac0
mov eax, dword [esp + 0x1014]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x1044]
mov ebx, ebp
mov ebp, dword [esp + 0x101c]
mov esi, dword [esp + 0x1054]
mov dword [esi + 0x20], ebx
mov ebx, edx
jmp 0x6020f2
mov ecx, edx
mov edx, ebp
call fcn.00456b90
mov ecx, ebx
mov edx, edi
call fcn.00456b90
inc dword [esp + ebp*4 + 0x4f4]
inc dword [esp + 0xff4]
inc ebx
inc edi
mov ebp, dword [esp + 0x1044]
cmp ebp, ecx
mov ebp, dword [esp + 0x101c]
mov dword [esp + 0xa8], ebx
mov ebx, dword [esp + 0x1044]
jbe 0x60259a
lea ebp, [ebp + ecx*4]
mov ebx, dword [esp + 0xa8]
cmp dword [ebp], ebx
jbe 0x601fff
cmp edx, edi
jbe 0x602591
nop
movzx ebp, word [esi + edi*2]
cmp ebp, 0x2c0
jb 0x60244c
jmp 0x602585
lea edi, [ebx + 1]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x1004]
mov ebx, dword [esp + 0x6c]
mov eax, dword [esp + 0x5c]
mov eax, ebp
mov ebp, dword [esp + 0x5c]
cmp edi, ecx
jae 0x602083
cmp edi, ebp
jae 0x602573
mov ebp, dword [eax + edi*4]
cmp ebx, ebp
jbe 0x60256a
mov dword [esp + 0xa8], edi
movsd qword [esp + 0xcc], xmm0
mov dword [esp + 0x80], esi
lea eax, [esp + 0x4f4]
mov dword [esp], eax
imul ecx, ebp, 0xb0c
add ecx, edx
mov dword [esp + 4], ecx
call fcn.0060f970
movsd xmm0, qword [esp + 8]
movsd xmm1, qword [esp + 0xcc]
ucomisd xmm1, xmm0
jbe 0x602543
mov ebx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x1018]
mov esi, dword [ebp + ebx*4]
jmp 0x6024ae
mov ebx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x1018]
movsd xmm0, xmm1
mov esi, dword [esp + 0x80]
jmp 0x6024ae
mov eax, esi
mov ecx, ebp
call fcn.00456b50
mov eax, ebp
mov ecx, ebx
call fcn.00456b50
mov eax, edi
mov ecx, ebp
call fcn.00456b50
mov eax, ebp
mov ecx, esi
call fcn.00456b50
mov eax, ebp
mov ecx, 0x2c0
call fcn.00456b50
mov eax, edi
mov ecx, edx
call fcn.00456b50
mov eax, ecx
mov ecx, ebx
call fcn.00456b50
mov eax, edx
call fcn.00456b50
mov dword [esp + eax*4 + 0x1f4], eax
mov dword [esp + eax*4 + 0xf4], eax
mov dword [esp + eax*4 + 0x3f4], 1
inc eax
mov ebp, dword [esp + 0x68]
mov edx, dword [esp + 0x1044]
mov ebx, dword [esp + 0x101c]
mov esi, dword [esp + 0x1034]
mov edi, dword [esp + 0x1038]
mov ecx, ebx
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x1014]
mov esi, edi
mov edi, dword [esp + 0x58]
mov dword [esp + 0xac], eax
xor eax, eax
mov esi, dword [esp + 0xac]
cmp esi, edx
jae 0x601c23
cmp esi, edi
jae 0x602ac9
imul edx, esi, 0xb0c
mov dword [esp + 0xc0], edx
lea ebp, [ebx + edx]
mov edi, ebp
mov ecx, 0x2c0
rep stosd dword es:[edi], eax
mov dword [ebx + edx + 0xb00], 0
movsd xmm0, qword [0x7c9be4]
movsd qword [ebx + edx + 0xb04], xmm0
mov ecx, ebp
lea ebp, [edx + ebx]
mov dword [esp + 0x1008], ebp
mov edi, edx
lea edx, [ebx + edx + 0xb00]
xor eax, eax
mov dword [esp + 0x8c], eax
xor eax, eax
jmp 0x602a4d
mov eax, dword [esp + 0x1008]
mov dword [esp], eax
call fcn.005ffb50
movsd xmm0, qword [esp + 4]
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0x1014]
movsd qword [ecx + eax + 0xb04], xmm0
mov eax, dword [esp + 0xac]
cmp eax, 0x40
jb 0x6025aa
jmp 0x602aa1
mov dword [esp + ebx*4 + 0x2f4], edi
lea ecx, [edi + 1]
inc edx
mov ebp, dword [esp + 0x6c]
mov ebx, dword [esp + 0x1004]
mov edi, dword [esp + 0x1014]
mov ebx, esi
mov esi, dword [esp + 0x1004]
mov edi, dword [esp + 0x84]
mov dword [esp + 0xac], ecx
mov ecx, edx
mov edx, dword [esp + 0x1014]
mov ebp, dword [esp + 0xac]
cmp ebp, eax
jae 0x601d5a
cmp ebp, 0x40
jae 0x60287d
mov ebp, dword [esp + ebp*4 + 0x1f4]
cmp ebx, ebp
jbe 0x602874
imul ebp, ebp, 0xb0c
add ebp, edx
mov edx, dword [esp + 0x6c]
cmp edx, ecx
jbe 0x60286b
mov dword [esp + 0x98], ecx
imul edx, ecx, 0xb0c
add edx, esi
mov edi, edx
mov esi, ebp
mov ecx, 0x2c3
rep movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0xac]
mov ebp, dword [esp + edx*4 + 0x1f4]
cmp ebp, 0x40
jae 0x60285f
mov ecx, dword [esp + 0x1028]
mov esi, ebx
mov ebx, dword [esp + 0x1024]
mov ebp, dword [esp + ebp*4 + 0x3f4]
mov edi, edx
mov edx, dword [esp + 0x98]
cmp edx, ecx
jae 0x602858
mov dword [ebx + edx*4], ebp
mov ebx, dword [esp + edi*4 + 0x1f4]
cmp ebx, 0x40
jb 0x6026b2
jmp 0x60284c
mov edi, dword [esp + 0x1020]
mov dword [edi + esi*4], ebx
inc edx
mov ebx, dword [esp + 0x54]
mov esi, dword [esp + 0x5c]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0x1004]
mov edi, dword [esp + 0x84]
mov dword [esp + 0xac], edx
mov edx, dword [esp + 0x1014]
mov edx, dword [esp + 0xac]
cmp edx, ebp
jae 0x601d7a
mov ebx, dword [esp + 0x68]
lea esi, [edx + ebx]
cmp edx, 0x40
jae 0x602840
mov ebx, dword [esp + edx*4 + 0xf4]
cmp ebx, 0x40
jae 0x602834
mov ebx, dword [esp + ebx*4 + 0x2f4]
mov ebp, dword [esp + 0x5c]
add ebx, ebp
mov ebp, dword [esp + 0x1044]
cmp ebp, esi
ja 0x60279b
jmp 0x60282b
lea eax, [0x7345e0]
mov dword [esp], eax
lea eax, [0x7c9cbc]
mov dword [esp + 4], eax
call fcn.00430590
mov eax, esi
mov ecx, ebp
call fcn.00456b50
mov eax, ebx
mov ecx, 0x40
call fcn.00456b50
mov eax, edx
mov ecx, 0x40
call fcn.00456b50
mov eax, ebx
mov ecx, 0x40
call fcn.00456b50
mov eax, edx
call fcn.00456b50
mov eax, ebp
mov ecx, 0x40
call fcn.00456b50
mov eax, ecx
mov ecx, edx
call fcn.00456b50
mov eax, ebp
mov ecx, ebx
call fcn.00456b50
mov eax, ebp
mov ecx, 0x40
call fcn.00456b50
shl edx, 1
cmp edx, ebx
jb 0x602889
mov ebx, dword [esp + 0x102c]
cmp edx, ebx
jg 0x6028ac
ja 0x60296c
mov dword [esp + 0x1028], edx
jmp 0x60295b
mov dword [esp + 0xa4], edx
lea eax, [0x734760]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb0]
test ecx, ecx
je 0x602925
mov ebx, dword [esp + 0x1024]
mov edx, dword [esp + 0x102c]
cmp edx, ecx
jb 0x602967
mov edx, dword [esp + 0xa4]
cmp edx, ecx
jg 0x6028f7
mov ecx, edx
cmp ebx, eax
je 0x60292c
mov dword [esp + 0x1018], eax
mov dword [esp], eax
mov dword [esp + 4], ebx
shl ecx, 2
mov dword [esp + 8], ecx
call fcn.00457450
mov eax, dword [esp + 0x1018]
mov edx, dword [esp + 0xa4]
jmp 0x60292c
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x1028], edx
mov dword [esp + 0x102c], edx
mov dword [esp + 0x1024], eax
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov ebp, dword [esp + 0x6c]
mov esi, dword [esp + 0x1004]
mov edi, dword [esp + 0x84]
mov dword [esp + 0xb0], edx
jmp 0x601d33
call fcn.00456b90
mov ecx, edx
mov edx, ebx
call fcn.00456b90
shl edx, 1
cmp edx, ebp
jb 0x602975
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xbc], edx
lea eax, [0x747640]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x6029fb
mov edx, dword [esp + 0x6c]
cmp edx, ecx
jb 0x602a1a
mov ebx, dword [esp + 0xbc]
cmp ebx, ecx
jg 0x6029c3
mov ecx, ebx
mov ebp, dword [esp + 0x1004]
cmp ebp, eax
je 0x602a02
mov dword [esp + 0x100c], eax
mov dword [esp], eax
mov dword [esp + 4], ebp
imul ecx, ecx, 0xb0c
mov dword [esp + 8], ecx
call fcn.00457450
mov eax, dword [esp + 0x100c]
mov ebx, dword [esp + 0xbc]
jmp 0x602a02
mov ebx, dword [esp + 0xbc]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0xc8]
mov ebp, ebx
mov esi, eax
mov eax, dword [esp + 0x74]
jmp 0x601cf0
call fcn.00456b90
inc dword [ecx + edi*4]
inc dword [edx]
inc ebp
inc ebx
mov edi, dword [esp + 0x68]
mov edi, dword [esp + 0xc0]
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x88], ebx
mov ebx, dword [esp + 0x1014]
mov ebp, dword [esp + 0x1008]
mov ebx, dword [esp + 0x68]
lea edi, [ebx + esi]
mov ebp, dword [esp + 0x1044]
cmp ebp, edi
jbe 0x602ac0
mov ebp, dword [esp + 0x101c]
lea edi, [ebp + edi*4]
mov ebp, dword [esp + 0x8c]
cmp dword [edi], ebp
jbe 0x602671
mov edi, dword [esp + 0x1038]
mov ebx, dword [esp + 0x88]
cmp edi, ebx
jbe 0x602ab7
nop
mov edi, dword [esp + 0x1034]
movzx edi, word [edi + ebx*2]
cmp edi, 0x2c0
jb 0x602a1f
jmp 0x602aab
mov ecx, 0x40
call fcn.00456b50
mov eax, edi
mov ecx, 0x2c0
call fcn.00456b50
mov eax, ebx
mov ecx, edi
call fcn.00456b50
mov eax, edi
mov ecx, ebp
call fcn.00456b50
mov eax, esi
mov ecx, edi
call fcn.00456b50
lea eax, [0x7345e0]
mov dword [esp], eax
lea eax, [0x7c9cbc]
mov dword [esp + 4], eax
call fcn.00430590
mov eax, edx
mov ecx, ebx
call fcn.00456b50
mov eax, edi
mov ecx, ebx
call fcn.00456b50
lea eax, [0x7345e0]
mov dword [esp], eax
lea eax, [0x7c9cbc]
mov dword [esp + 4], eax
call fcn.00430590
mov eax, ebx
mov ecx, edx
call fcn.00456b40
nop
call fcn.00455690
jmp fcn.00601900