Function at 0x61ce00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x120]
cmp eax, dword [ecx + 8]
jbe 0x61f7d2
sub esp, 0x1a0
mov eax, dword [esp + 0x1ac]
test eax, eax
jne 0x61cfab
mov ecx, dword [esp + 0x1bc]
test ecx, ecx
je 0x61ce54
test ecx, 0x200
jne 0x61ce54
lea eax, [0x8470c4]
mov ecx, dword [esp + 0x1b4]
jmp 0x61ce7a
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.00409680
mov eax, dword [esp + 0xc]
lea ecx, [0x74ac80]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x61cef9
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x144]
mov dword [esp + 0x19c], eax
lea eax, [0x7d7cbf]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x61cf8e
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61cf86
mov dword [edx + 0x40], eax
jmp 0x61cf8e
lea edi, [edx + 0x40]
call fcn.004643b0
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
add esp, 0x1a0
ret
mov eax, dword [esp + 0x1a8]
cmp byte [eax], 0x6e
sete cl
mov edx, dword [esp + 0x1b4]
mov dword [esp], edx
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x1bc]
mov dword [esp + 8], ebp
mov byte [esp + 0xc], cl
call fcn.00619d90
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
test ebx, ebx
jne 0x61f73e
test esi, esi
je 0x61d4fa
mov eax, dword [esp + 0x1a8]
movzx ecx, byte [eax]
cmp cl, 0x22
je 0x61d33d
movzx edx, byte [esp + 0x1c0]
test dl, dl
je 0x61d1a9
mov ecx, dword [esp + 0x1bc]
test ecx, ecx
je 0x61d052
test ecx, 0x200
jne 0x61d052
lea eax, [0x8470c4]
mov ecx, dword [esp + 0x1b4]
jmp 0x61d078
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.00409680
mov eax, dword [esp + 0xc]
lea ecx, [0x74ac80]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x78]
test eax, eax
je 0x61d0f7
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 0x19c], eax
lea eax, [0x7d7cbf]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x61d18c
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61d184
mov dword [edx + 0x40], eax
jmp 0x61d18c
lea edi, [edx + 0x40]
call fcn.004643b0
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
add esp, 0x1a0
ret
cmp cl, 0x66
je 0x61d1c5
cmp cl, 0x6e
jne 0x61d1c0
lea eax, [0x7b5dad]
mov ecx, 4
jmp 0x61d1dd
cmp cl, 0x74
jne 0x61d1d2
lea eax, [0x7b5c55]
mov ecx, 4
jmp 0x61d1dd
lea eax, [0x7b6cb9]
mov ecx, 6
mov dword [esp + 0x148], eax
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x1bc]
test edx, edx
je 0x61d20d
test edx, 0x200
jne 0x61d20d
mov edx, dword [esp + 0x1b4]
lea ebx, [0x8470c4]
jmp 0x61d237
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ebx, eax
mov dword [esp + 0x13c], edx
mov dword [esp + 0x74], ebx
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0xd4], ecx
lea ebp, [0x78cd80]
mov dword [esp], ebp
call fcn.0040bcc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x84]
mov dword [edi + 4], eax
mov eax, dword [0xaab020]
test eax, eax
jne 0x61d284
mov ecx, dword [esp + 0x148]
mov dword [edi], ecx
jmp 0x61d290
mov eax, dword [esp + 0x148]
call fcn.004643b0
mov ecx, dword [esp + 0x74]
mov dword [edi + 8], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61d2ad
mov eax, dword [esp + 0x13c]
mov dword [edi + 0xc], eax
jmp 0x61d2c2
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0x13c]
mov edx, edi
mov edi, ecx
call fcn.004643b0
mov edi, edx
mov eax, dword [esp + 0xd4]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x61d320
mov dword [esp], eax
lea ecx, [0x8440d4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61d318
mov dword [edx + 0x40], eax
jmp 0x61d320
lea edi, [edx + 0x40]
call fcn.004643b0
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
add esp, 0x1a0
ret
mov dword [esp + 0x88], esi
mov dword [esp + 0x14c], edi
mov dword [esp], eax
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.0061ff90
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test al, al
jne 0x61d4bb
movzx eax, byte [esp + 0x1c0]
test al, al
je 0x61f7b9
mov eax, dword [esp + 0x1bc]
test eax, eax
je 0x61d3b3
test eax, 0x200
jne 0x61d3b3
lea eax, [0x8470c4]
mov ecx, dword [esp + 0x1b4]
jmp 0x61d3d9
mov ecx, dword [esp + 0x1b4]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1b8]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x138], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.00409680
mov eax, dword [esp + 0xc]
lea ecx, [0x74ac80]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x70]
test eax, eax
je 0x61d458
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 0x19c], eax
lea eax, [0x7d7cbf]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
mov eax, dword [esp + 0x88]
mov eax, dword [eax + 0x10]
mov ebp, dword [esp + 0x14c]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
mov dword [esp + 0xb0], ecx
mov dword [esp + 0x16c], edx
mov dword [esp + 0x168], eax
mov ebx, dword [esp + 0x1a8]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x66
xchg ebp, eax
ja 0x61ded4
xchg ebp, eax
cmp al, 0x22
xchg ebp, eax
je 0x61d53b
xchg ebp, eax
cmp al, 0x66
xchg ebp, eax
je 0x61e0f9
jmp 0x61e74c
mov dword [esp], ebx
mov eax, dword [esp + 0x1ac]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x1b0]
mov dword [esp + 8], ecx
call fcn.0061ff90
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test cl, cl
je 0x61dd9b
mov dword [esp + 0xac], edx
mov dword [esp + 0x154], eax
nop
nop
mov ecx, dword [esp + 0xb0]
mov ebp, ecx
and ecx, 0x1f
cmp ecx, 0x14
je 0x61db74
cmp ecx, 0x17
jne 0x61d87b
mov dword [esp + 0x90], ebx
test ebp, 0x200
jne 0x61d5be
lea ecx, [0x8470c4]
mov esi, dword [esp + 0x168]
jmp 0x61d5e8
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov esi, ecx
mov ecx, eax
mov eax, dword [ecx + 0x28]
mov dword [esp], esi
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x61d725
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x61d628
mov ecx, dword [esp + 0x168]
lea eax, [0x8470c4]
jmp 0x61d64e
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x50], eax
mov dword [esp + 0x118], ecx
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x78cd80]
mov dword [esp], ebp
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x7b6d8b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61d6a8
mov ecx, dword [esp + 0x118]
mov dword [eax + 0xc], ecx
jmp 0x61d6bb
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x118]
call fcn.004643b0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x61f721
mov dword [esp], ecx
lea edx, [0x8440d4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61d718
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
mov eax, dword [0xa82d08]
cmp dword [eax + 0x140], 0xffffffff
jne 0x61d750
mov eax, dword [esp + 0xac]
lea ecx, [eax + eax*2]
mov edx, ecx
shl ecx, 1
sar ecx, 0x1f
shr ecx, 0x1d
lea ecx, [ecx + edx*2]
sar ecx, 3
jmp 0x61d75d
mov eax, dword [esp + 0xac]
shr eax, 2
lea ecx, [eax + eax*2]
mov dword [esp + 0x80], ecx
lea eax, [0x758ec0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044b030
mov eax, dword [esp + 0xc]
mov dword [esp + 0x164], eax
mov ecx, dword [0xa82d08]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x154]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 0x18], edx
call fcn.0053e3d0
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
test ebx, ebx
je 0x61d82f
nop
mov ecx, dword [esp + 0x1a4]
mov ebx, dword [ecx + 0x3c]
test ebx, ebx
jne 0x61f721
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61d822
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
mov edx, dword [esp + 0x80]
cmp edx, ecx
jb 0x61f7b4
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004c3690
jmp 0x61f721
cmp ecx, 0x18
jne 0x61da5c
test ebp, 0x200
jne 0x61d89b
lea ecx, [0x8470c4]
mov ebx, dword [esp + 0x168]
jmp 0x61d8da
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xac]
mov ebp, dword [esp + 0xb0]
mov ebx, ecx
mov ecx, eax
mov eax, dword [esp + 0x154]
mov esi, dword [0xa83fac]
cmp dword [0xa83fa8], ecx
je 0x61d8ef
xor ecx, ecx
jmp 0x61d979
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
call fcn.00403870
movzx eax, byte [esp + 0xc]
test al, al
jne 0x61d921
mov eax, dword [esp + 0x154]
mov edx, dword [esp + 0xac]
mov ebp, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x61d979
lea eax, [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
call fcn.0044eeb0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00622fc0
movzx eax, byte [esp + 8]
xor eax, 1
mov edx, dword [esp + 0xac]
mov ebp, dword [esp + 0xb0]
mov ecx, eax
mov eax, dword [esp + 0x154]
test cl, cl
jne 0x61d9bb
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0044eeb0
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
call fcn.004c4140
jmp 0x61f721
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x1ac]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1b0]
mov dword [esp + 8], eax
call fcn.00409680
mov eax, dword [esp + 0xc]
lea ecx, [0x74ac80]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x18c], eax
lea eax, [0x7d6f04]
mov dword [esp], eax
mov dword [esp + 4], 0x40
lea eax, [esp + 0x188]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
test ebp, ebp
je 0x61da77
test ebp, 0x200
jne 0x61da77
mov ecx, dword [esp + 0x168]
lea eax, [0x8470c4]
jmp 0x61da9d
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x54], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x78cd80]
mov dword [esp], ebp
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x7b6d8b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61daf7
mov ecx, dword [esp + 0x11c]
mov dword [eax + 0xc], ecx
jmp 0x61db0a
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x11c]
call fcn.004643b0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x61f721
mov dword [esp], ecx
lea edx, [0x8440d4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61db67
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004c31d0
mov eax, dword [esp + 0xc]
test eax, eax
je 0x61dcb8
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x61dbbb
mov ecx, dword [esp + 0x168]
lea eax, [0x8470c4]
jmp 0x61dbe1
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x114], ecx
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x78cd80]
mov dword [esp], ebp
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x7b6d8b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 8], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61dc3b
mov ecx, dword [esp + 0x114]
mov dword [eax + 0xc], ecx
jmp 0x61dc4e
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x114]
call fcn.004643b0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x61f721
mov dword [esp], ecx
lea edx, [0x8440d4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61dcab
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
mov dword [esp], 0
mov eax, dword [esp + 0x154]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0044eeb0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409600
mov eax, dword [esp + 8]
nop
movzx ecx, byte [0xa851a8]
test cl, cl
je 0x61dd29
lea ecx, [0x758c80]
mov dword [0xa851ac], ecx
mov edx, dword [0xaab020]
test edx, edx
jne 0x61dd1c
mov dword [0xa851b0], eax
jmp 0x61dd2f
lea edi, [0xa851b0]
call fcn.004643b0
jmp 0x61dd2f
lea ecx, [0x758c80]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x17c], eax
mov ecx, dword [esp + 0x178]
test ecx, ecx
je 0x61dd5f
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x61dd65
or edx, 0x80
jmp 0x61dd65
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004c34c0
jmp 0x61f721
movzx eax, byte [esp + 0x1c0]
test al, al
je 0x61f79c
mov eax, dword [esp + 0xb0]
test eax, eax
je 0x61ddcc
test eax, 0x200
jne 0x61ddcc
lea eax, [0x8470c4]
mov ecx, dword [esp + 0x168]
jmp 0x61ddf2
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x120], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.00409680
mov eax, dword [esp + 0xc]
lea ecx, [0x74ac80]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x58]
test eax, eax
je 0x61de71
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x19c], eax
lea eax, [0x7d7cbf]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
xchg ebp, eax
cmp al, 0x6e
xchg ebp, eax
jne 0x61e0ee
movzx ebp, byte [esp + 0x1c0]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x61e05f
mov ebp, dword [esp + 0x1ac]
cmp ebp, 4
jne 0x61df09
cmp dword [ebx], 0x6c6c756e
je 0x61e05f
test ecx, ecx
je 0x61df1d
test ecx, 0x200
jne 0x61df1d
lea ecx, [0x8470c4]
jmp 0x61df49
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1a8]
mov ebp, dword [esp + 0x1ac]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp + 0x134], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.00409680
mov eax, dword [esp + 0xc]
lea ecx, [0x74ac80]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x61dfbc
mov ecx, dword [eax + 4]
jmp 0x61dfbe
mov ecx, eax
mov dword [esp + 0x198], ecx
mov eax, dword [esp + 0x134]
mov dword [esp + 0x19c], eax
lea eax, [0x7d7cbf]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x61f721
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61e052
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
nop
mov ebx, ecx
and ecx, 0x1f
add ecx, 0xffffffec
nop
cmp ecx, 3
ja 0x61f721
test ebx, 0x200
jne 0x61e082
lea ecx, [0x8470c4]
jmp 0x61e0a0
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004c4f40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004c34c0
jmp 0x61f721
xchg ebp, eax
cmp al, 0x74
xchg ebp, eax
jne 0x61e74c
movzx esi, byte [esp + 0x1c0]
xchg esi, eax
test al, al
xchg esi, eax
je 0x61e290
mov edi, dword [esp + 0x1ac]
cmp edi, 4
jne 0x61e123
cmp dword [ebx], 0x65757274
je 0x61e297
cmp edi, 5
jne 0x61e13a
cmp dword [ebx], 0x736c6166
jne 0x61e13a
cmp byte [ebx + 4], 0x65
je 0x61e297
test ecx, ecx
je 0x61e14e
test ecx, 0x200
jne 0x61e14e
lea ecx, [0x8470c4]
jmp 0x61e17a
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1a8]
mov edi, dword [esp + 0x1ac]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp + 0x130], eax
mov dword [esp + 0x68], ecx
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov dword [esp], ebx
mov dword [esp + 4], edi
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.00409680
mov eax, dword [esp + 0xc]
lea ecx, [0x74ac80]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x68]
test eax, eax
je 0x61e1ed
mov ecx, dword [eax + 4]
jmp 0x61e1ef
mov ecx, eax
mov dword [esp + 0x198], ecx
mov eax, dword [esp + 0x130]
mov dword [esp + 0x19c], eax
lea eax, [0x7d7cbf]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x61f721
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61e283
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
mov edi, dword [esp + 0x1ac]
xchg ebp, eax
cmp al, 0x74
xchg ebp, eax
xchg ebp, ebx
sete bl
xchg ebp, ebx
nop
nop
and ecx, 0x1f
cmp ecx, 1
je 0x61e72a
cmp ecx, 0x14
je 0x61e52d
xchg esi, eax
test al, al
xchg esi, eax
je 0x61e421
mov ecx, dword [esp + 0xb0]
test ecx, ecx
je 0x61e2df
test ecx, 0x200
jne 0x61e2df
lea ecx, [0x8470c4]
jmp 0x61e30b
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1a8]
mov edi, dword [esp + 0x1ac]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp + 0x12c], eax
mov dword [esp + 0x64], ecx
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov dword [esp], ebx
mov dword [esp + 4], edi
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.00409680
mov eax, dword [esp + 0xc]
lea ecx, [0x74ac80]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x64]
test eax, eax
je 0x61e37e
mov ecx, dword [eax + 4]
jmp 0x61e380
mov ecx, eax
mov dword [esp + 0x198], ecx
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x19c], eax
lea eax, [0x7d7cbf]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x61f721
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61e414
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
mov ecx, dword [esp + 0xb0]
test ecx, ecx
je 0x61e43e
test ecx, 0x200
jne 0x61e43e
mov ecx, eax
lea eax, [0x8470c4]
jmp 0x61e456
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov dword [esp + 0x128], ecx
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x78cd80]
mov dword [esp], ebp
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x7b5c55]
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 8], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61e4b0
mov ecx, dword [esp + 0x128]
mov dword [eax + 0xc], ecx
jmp 0x61e4c3
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x128]
call fcn.004643b0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x61f721
mov dword [esp], ecx
lea edx, [0x8440d4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61e520
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
xchg ebp, eax
mov byte [esp + 0x2e], al
xchg ebp, eax
mov dword [esp], eax
mov dword [esp + 4], edx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 8], ecx
call fcn.004c31d0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x61e610
movzx ecx, byte [esp + 0x2e]
movzx ecx, cl
lea edx, [0xa5c900]
lea eax, [edx + ecx*8]
nop
movzx ecx, byte [0xa851a8]
test cl, cl
je 0x61e59e
lea ecx, [0x756480]
mov dword [0xa851ac], ecx
mov edx, dword [0xaab020]
test edx, edx
jne 0x61e591
mov dword [0xa851b0], eax
jmp 0x61e5a4
lea edi, [0xa851b0]
call fcn.004643b0
jmp 0x61e5a4
lea ecx, [0x756480]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x184], eax
mov ecx, dword [esp + 0x180]
test ecx, ecx
je 0x61e5d4
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x61e5da
or edx, 0x80
jmp 0x61e5da
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004c34c0
jmp 0x61f721
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x61e62d
mov ecx, dword [esp + 0x168]
lea eax, [0x8470c4]
jmp 0x61e653
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x5c], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x78cd80]
mov dword [esp], ebp
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x7b5c55]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61e6ad
mov ecx, dword [esp + 0x124]
mov dword [eax + 0xc], ecx
jmp 0x61e6c0
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x124]
call fcn.004643b0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x61f721
mov dword [esp], ecx
lea edx, [0x8440d4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61e71d
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
mov dword [esp], eax
mov dword [esp + 4], edx
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
xchg ebp, eax
mov byte [esp + 0xc], al
xchg ebp, eax
call fcn.004c35d0
jmp 0x61f721
xchg ebp, eax
cmp al, 0x2d
xchg ebp, eax
je 0x61e88f
add ebp, 0xffffffd0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
jbe 0x61e88f
movzx ebp, byte [esp + 0x1c0]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x61f784
test ecx, ecx
je 0x61e78b
test ecx, 0x200
jne 0x61e78b
lea ecx, [0x8470c4]
jmp 0x61e7b0
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1a8]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp + 0x110], eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov dword [esp], ebx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.00409680
mov eax, dword [esp + 0xc]
lea ecx, [0x74ac80]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x48]
test eax, eax
je 0x61e82a
mov ecx, dword [eax + 4]
jmp 0x61e82c
mov ecx, eax
mov dword [esp + 0x198], ecx
mov eax, dword [esp + 0x110]
mov dword [esp + 0x19c], eax
lea eax, [0x7d7cbf]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
mov dword [esp], 0
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x1ac]
mov dword [esp + 8], eax
call fcn.0044eeb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x150], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x8c], ecx
nop
mov edx, dword [esp + 0xb0]
mov ebx, edx
and edx, 0x1f
cmp edx, 0xc
ja 0x61eec8
lea ebp, [edx - 2]
cmp ebp, 4
jbe 0x61ebaf
cmp edx, 7
jb 0x61f149
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.004a9e30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
test edx, edx
jne 0x61ea10
mov dword [esp + 0xa4], eax
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x168]
mov ebx, dword [edx]
shl ebx, 3
add ebx, 0xffffffc0
neg ebx
lea ebp, [ebx - 0x20]
mov dword [esp + 0xd0], ebp
cmp ebp, 0x20
sbb esi, esi
mov dword [esp + 0xcc], esi
cmp ebx, 0x20
sbb edi, edi
xchg ebp, ebx
neg ebx
xchg ebp, ebx
cmp ebp, 0x20
sbb edx, edx
mov dword [esp + 0xc8], edx
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0x98]
shl edx, cl
and edx, esi
mov ecx, ebx
shl eax, cl
and eax, edi
mov ecx, ebp
mov esi, dword [esp + 0x98]
shr esi, cl
mov ebp, dword [esp + 0xc8]
and esi, ebp
or esi, eax
or esi, edx
mov dword [esp + 0xc8], esi
mov eax, ecx
mov ecx, ebx
mov edx, dword [esp + 0x98]
shl edx, cl
and edx, edi
mov ecx, dword [esp + 0xd0]
shr esi, cl
mov ecx, edi
mov edi, dword [esp + 0xcc]
and esi, edi
mov dword [esp + 0xd0], esi
mov edi, ecx
mov ecx, eax
mov esi, dword [esp + 0xc8]
mov eax, esi
shl esi, cl
mov ecx, ebx
shr edx, cl
and esi, ebp
and edx, edi
or edx, esi
mov ebp, dword [esp + 0xd0]
or edx, ebp
mov ebp, dword [esp + 0x98]
cmp ebp, edx
setne dl
shr eax, cl
and eax, edi
mov ebx, dword [esp + 0xa4]
cmp ebx, eax
setne al
or eax, edx
test al, al
je 0x61eb7d
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x61ea2d
mov ecx, dword [esp + 0x168]
lea eax, [0x8470c4]
jmp 0x61ea53
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x78cd80]
mov dword [esp], ebp
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x160], eax
mov dword [esp], 0
lea ecx, [0x7b736e]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x150]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.0044ec00
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x160]
mov dword [edi + 4], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61eadc
mov dword [edi], eax
jmp 0x61eae1
call fcn.004643b0
mov ecx, dword [esp + 0x34]
mov dword [edi + 8], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61eafe
mov eax, dword [esp + 0xfc]
mov dword [edi + 0xc], eax
jmp 0x61eb13
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0xfc]
mov edx, edi
mov edi, ecx
call fcn.004643b0
mov edi, edx
mov eax, dword [esp + 0xd4]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x61f721
mov dword [esp], eax
lea ecx, [0x8440d4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61eb70
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], ebp
call fcn.004c4040
jmp 0x61f721
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.004aa8d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
test edx, edx
jne 0x61ed22
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa8], eax
mov edx, dword [esp + 0x168]
mov ebp, dword [edx]
shl ebp, 3
add ebp, 0xffffffc0
xchg ebp, ebx
neg ebx
xchg ebp, ebx
mov dword [esp + 0xc4], ebp
cmp ebp, 0x20
sbb esi, esi
mov dword [esp + 0xd0], esi
lea edi, [ebp - 0x20]
mov dword [esp + 0xcc], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
mov dword [esp + 0xc8], edi
cmp edi, 0x20
sbb eax, eax
mov dword [esp + 0xc0], eax
mov edx, dword [esp + 0xcc]
cmp edx, 0x20
sbb edx, edx
mov dword [esp + 0xbc], edx
shr ebp, 5
cmp ebp, 1
sbb ebp, ebp
mov dword [esp + 0xb8], ebp
mov ebp, dword [esp + 0xc4]
cmp ebp, 0x20
sbb edx, edx
mov ecx, ebp
shl ebx, cl
and ebx, esi
mov ecx, edi
mov esi, dword [esp + 0x9c]
shr esi, cl
and esi, eax
mov ecx, dword [esp + 0xcc]
mov eax, dword [esp + 0x9c]
shl eax, cl
mov edi, dword [esp + 0xbc]
and eax, edi
or esi, ebx
or esi, eax
not edx
or edx, ebp
mov eax, ecx
mov ecx, edx
mov ebx, esi
sar esi, cl
mov edx, dword [esp + 0xa0]
cmp edx, esi
setne dl
mov byte [esp + 0x2f], dl
mov ecx, ebp
mov esi, dword [esp + 0x9c]
shl esi, cl
mov edx, dword [esp + 0xd0]
and esi, edx
xchg edi, ebx
not ebx
xchg edi, ebx
or edi, eax
mov ecx, edi
mov eax, ebx
sar ebx, cl
mov ecx, dword [esp + 0xc8]
shl eax, cl
mov ecx, ebp
shr esi, cl
and esi, edx
mov edx, dword [esp + 0xc0]
and eax, edx
or esi, eax
mov eax, dword [esp + 0xb8]
xor eax, 0xffffffff
and eax, ebx
or eax, esi
mov edx, dword [esp + 0x9c]
cmp edx, eax
setne al
movzx ebx, byte [esp + 0x2f]
or eax, ebx
test al, al
je 0x61ee8f
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x61ed3f
mov ecx, dword [esp + 0x168]
lea eax, [0x8470c4]
jmp 0x61ed65
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], eax
mov dword [esp + 0x100], ecx
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x78cd80]
mov dword [esp], ebp
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x160], eax
mov dword [esp], 0
lea ecx, [0x7b736e]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x150]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.0044ec00
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x160]
mov dword [edi + 4], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61edee
mov dword [edi], eax
jmp 0x61edf3
call fcn.004643b0
mov ecx, dword [esp + 0x38]
mov dword [edi + 8], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61ee10
mov eax, dword [esp + 0x100]
mov dword [edi + 0xc], eax
jmp 0x61ee25
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0x100]
mov edx, edi
mov edi, ecx
call fcn.004643b0
mov edi, edx
mov eax, dword [esp + 0xd4]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x61f721
mov dword [esp], eax
lea ecx, [0x8440d4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61ee82
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
call fcn.004c3a60
jmp 0x61f721
cmp edx, 0xe
ja 0x61f140
mov dword [esp + 0xb4], edx
test ebx, 0x200
jne 0x61eeef
lea ebp, [0x8470c4]
mov esi, dword [esp + 0x168]
jmp 0x61ef19
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebp, eax
mov esi, ecx
mov eax, dword [ebp + 0x18]
mov dword [esp], esi
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x150]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004a9690
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x61ef5f
mov eax, dword [esp + 0xb0]
test eax, 0x200
jmp 0x61efb5
mov eax, dword [esp + 0xb4]
cmp eax, 0xd
jne 0x61f116
nop
xorps xmm1, xmm1
ucomisd xmm1, xmm0
jbe 0x61ef85
movsd xmm1, qword [0x843354]
pxor xmm0, xmm1
movsd xmm1, qword [0x84333c]
ucomisd xmm0, xmm1
jbe 0x61f116
movsd xmm1, qword [0x843344]
ucomisd xmm1, xmm0
jb 0x61f116
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x61efc6
mov ecx, dword [esp + 0x168]
lea eax, [0x8470c4]
jmp 0x61efec
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0x30], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x78cd80]
mov dword [esp], ebp
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x160], eax
mov dword [esp], 0
lea ecx, [0x7b736e]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x150]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.0044ec00
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x160]
mov dword [edi + 4], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61f075
mov dword [edi], eax
jmp 0x61f07a
call fcn.004643b0
mov ecx, dword [esp + 0x30]
mov dword [edi + 8], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61f097
mov eax, dword [esp + 0xf8]
mov dword [edi + 0xc], eax
jmp 0x61f0ac
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0xf8]
mov edx, edi
mov edi, ecx
call fcn.004643b0
mov edi, edx
mov eax, dword [esp + 0xd4]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x61f721
mov dword [esp], eax
lea ecx, [0x8440d4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61f109
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
call fcn.004c39a0
jmp 0x61f721
cmp edx, 0x14
je 0x61f468
cmp edx, 0x18
jne 0x61f1e8
test ebx, 0x200
jne 0x61f169
lea edx, [0x8470c4]
mov ebp, dword [esp + 0x168]
jmp 0x61f1a8
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0xb0]
mov edx, eax
mov ebp, ecx
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x8c]
mov esi, dword [0xa83fac]
cmp dword [0xa83fa8], edx
je 0x61f1ba
xor edx, edx
jmp 0x61f1ea
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00403870
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0xb0]
mov edx, eax
mov eax, dword [esp + 0x150]
jmp 0x61f1ea
xor edx, edx
test dl, dl
jne 0x61f43d
movzx eax, byte [esp + 0x1c0]
test al, al
je 0x61f325
test ebx, ebx
je 0x61f21d
test ebx, 0x200
jne 0x61f21d
lea eax, [0x8470c4]
mov ecx, dword [esp + 0x168]
jmp 0x61f243
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x10c], ecx
mov dword [esp + 0x44], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.00409680
mov eax, dword [esp + 0xc]
lea ecx, [0x74ac80]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x44]
test eax, eax
je 0x61f2c2
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x19c], eax
lea eax, [0x7d7cbf]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
test ebx, ebx
je 0x61f340
test ebx, 0x200
jne 0x61f340
mov ecx, dword [esp + 0x168]
lea eax, [0x8470c4]
jmp 0x61f366
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x108], ecx
mov dword [esp + 0x40], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x78cd80]
mov dword [esp], ebp
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x7b6cb9]
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61f3c0
mov ecx, dword [esp + 0x108]
mov dword [eax + 0xc], ecx
jmp 0x61f3d3
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x108]
call fcn.004643b0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x61f721
mov dword [esp], ecx
lea edx, [0x8440d4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61f430
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
mov edx, dword [esp + 0x168]
mov dword [esp], edx
mov edx, dword [esp + 0x16c]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004c4140
jmp 0x61f721
mov edx, dword [esp + 0x1a4]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0061cc30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
test edx, edx
je 0x61f4ef
nop
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x61f721
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61f4e2
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
mov dword [esp + 0x94], ebx
mov dword [esp + 0x158], esi
mov dword [esp + 0x15c], ebp
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 8], edx
call fcn.004c31d0
mov eax, dword [esp + 0xc]
test eax, eax
je 0x61f64f
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x61f552
mov ecx, dword [esp + 0x168]
lea eax, [0x8470c4]
jmp 0x61f578
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x104], ecx
mov dword [esp + 0x3c], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x78cd80]
mov dword [esp], ebp
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x7b6cb9]
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 8], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61f5d2
mov ecx, dword [esp + 0x104]
mov dword [eax + 0xc], ecx
jmp 0x61f5e5
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x104]
call fcn.004643b0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x61f721
mov dword [esp], ecx
lea edx, [0x8440d4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.006196c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x61f642
mov dword [edx + 0x40], eax
jmp 0x61f721
lea edi, [edx + 0x40]
call fcn.004643b0
jmp 0x61f721
mov ecx, dword [esp + 0x94]
test ecx, ecx
je 0x61f6ea
nop
movzx ecx, byte [0xa851a8]
test cl, cl
je 0x61f6a4
mov ecx, dword [esp + 0x15c]
mov dword [0xa851ac], ecx
mov edx, dword [0xaab020]
test edx, edx
jne 0x61f690
mov eax, dword [esp + 0x158]
mov dword [0xa851b0], eax
jmp 0x61f6b2
lea edi, [0xa851b0]
mov eax, dword [esp + 0x158]
call fcn.004643b0
jmp 0x61f6b2
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0x15c]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x174], eax
mov ecx, dword [esp + 0x170]
test ecx, ecx
je 0x61f6e2
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x61f6f0
or edx, 0x80
jmp 0x61f6f0
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x61f6f0
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004c34c0
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
add esp, 0x1a0
ret
mov eax, dword [ebx + 0x10]
mov dword [esp], ebp
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1b0]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x8435d4]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x8435d4]
mov dword [esp + 4], eax
call fcn.00436340
call fcn.00464470
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x8435d4]
mov dword [esp + 4], eax
call fcn.00436340
nop
call fcn.00462fa0
jmp fcn.0061ce00