Function at 0x5b1167
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x6758c0
mov eax, dword fs:[0]
push eax
sub esp, 0x2b0
mov eax, dword [0x6d35d0]
xor eax, esp
mov dword [esp + 0x2a8], eax
push ebx
push esi
push edi
mov eax, dword [0x6d35d0]
xor eax, esp
push eax
lea eax, [esp + 0x2c0]
mov dword fs:[0], eax
mov dword [esp + 0x44], ecx
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov dword [esp + 0x48], esi
mov dword [esp + 0x40], edi
mov dword [esp + 0x38], ebx
test esi, esi
je 0x5b12ef
test edi, edi
je 0x5b12ef
test ebx, ebx
je 0x5b12ef
cmp dword [ebp + 0x14], 0
jg 0x5b11f7
mov eax, dword [edi]
push 0xffffffffffffffff
push ecx
push ecx
mov ecx, edi
fldz
fst dword [esp + 4]
fstp dword [esp]
call dword [eax + 0x74]
jmp 0x5b12f1
cmp dword [ebp + 0x14], 0x3ff
jl 0x5b120a
mov eax, dword [ebx]
push 0xffffffffffffffff
push ecx
push ecx
mov ecx, ebx
jmp 0x5b11e6
mov ecx, esi
call fcn.00472726
mov eax, dword [eax + 0xa4]
cmp eax, 2
jb 0x5b1c83
push 4
push ecx
mov ecx, esi
call fcn.00472726
add esp, 4
call fcn.004f9f8e
test al, al
je 0x5b1c83
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
call dword [eax + 0x14]
cmp dword [eax], 1
jne 0x5b1c83
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
call dword [eax + 0x14]
cmp dword [eax + 4], 1
jne 0x5b1c83
test byte [0x1024140], 1
jne 0x5b128a
or dword [0x1024140], 1
mov esi, 0x1023778
call fcn.0049b413
push 0x676d4e
call fcn.0062d063
pop ecx
lea ecx, [esp + 0x1d4]
call fcn.004b6dc1
cmp dword [ebp + 0x14], 0x200
jge 0x5b1798
and dword [esp + 0x2c8], 0
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
mov eax, dword [eax + 4]
push 0
push 1
push 0x15
mov esi, 0x100
push esi
push eax
lea ecx, [esp + 0x1e8]
mov dword [esp + 0x4c], eax
call fcn.004b6f38
test al, al
jne 0x5b1317
or dword [esp + 0x2c8], 0xffffffff
lea ecx, [esp + 0x1d4]
call fcn.004b6ebc
xor al, al
mov ecx, dword [esp + 0x2c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2a8]
xor ecx, esp
call fcn.0062c8b8
mov esp, ebp
pop ebp
ret 0x10
lea ecx, [esp + 0x1dc]
call fcn.004b7de4
test al, al
je 0x5b12db
lea ecx, [esp + 0x1dc]
call fcn.004b7f25
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x14]
imul eax, eax, 0x64
cdq
and edx, 0x1ff
add eax, edx
mov ebx, eax
sar ebx, 9
mov dword [esp + 0x30], esi
push ebx
mov edx, 0x1023778
call fcn.0049b551
xor esi, esi
cmp dword [esp + 0x38], esi
mov dword [esp + 0x28], eax
jle 0x5b13d9
mov eax, ebx
cdq
sub eax, edx
mov dword [esp + 0x24], eax
sar dword [esp + 0x24], 1
push dword [esp + 0x24]
mov edx, 0x1023778
call fcn.0049b551
add eax, dword [esp + 0x24]
jne 0x5b1395
mov eax, dword [esp + 0x18]
mov dword [eax + esi*4], 0x80808080
inc esi
jmp 0x5b13d3
mov dword [esp + 0x14], eax
neg dword [esp + 0x14]
jmp 0x5b13cd
cmp esi, dword [esp + 0x38]
jge 0x5b13d9
cmp dword [esp + 0x28], 0
jle 0x5b13b2
dec dword [esp + 0x28]
jmp 0x5b13cc
mov edx, dword [esp + 0x18]
lea ecx, [eax - 0x80]
and ecx, 0xff
shl ecx, 8
or ecx, 0x80800080
mov dword [edx + esi*4], ecx
inc esi
dec eax
cmp eax, dword [esp + 0x14]
jge 0x5b139f
cmp esi, dword [esp + 0x38]
jl 0x5b1373
lea ecx, [esp + 0x1dc]
call fcn.004b7f6f
add dword [esp + 0x18], eax
dec dword [esp + 0x30]
jne 0x5b134f
lea ecx, [esp + 0x1dc]
call fcn.004b7e76
mov eax, dword [edi]
lea ecx, [esp + 0x38]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
fild dword [eax]
mov eax, dword [edi]
lea ecx, [esp + 0x30]
push ecx
fstp qword [esp + 0x20]
mov ecx, edi
call dword [eax + 0x24]
fild dword [eax]
mov eax, dword [edi]
lea ecx, [esp + 0x38]
fdivr qword [esp + 0x1c]
push ecx
mov ecx, edi
fstp dword [esp + 0x1c]
call dword [eax + 0x1c]
fild dword [eax + 4]
mov eax, dword [edi]
lea ecx, [esp + 0x30]
push ecx
mov ecx, edi
fstp qword [esp + 0x20]
call dword [eax + 0x24]
fild dword [eax + 4]
lea eax, [esp + 0x38]
push eax
fdivr qword [esp + 0x20]
lea ecx, [esp + 0x1e0]
fstp dword [esp + 0x18]
call fcn.004b7cd4
fild dword [eax]
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x1e0]
fstp qword [esp + 0x20]
call fcn.004b7d0b
fild dword [eax]
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
fdivr qword [esp + 0x20]
mov ecx, edi
fstp dword [esp + 0x34]
call dword [eax + 0x1c]
fild dword [eax]
fmul qword [0x6a2640]
fstp dword [esp + 0x24]
fldz
fld st(0)
fld1
fsub st(1), st(0)
fxch st(1)
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fst dword [esp + 0xf4]
fst dword [esp + 0xf8]
fldz
fst dword [esp + 0xfc]
fst dword [esp + 0x100]
fld dword [esp + 0x14]
fstp dword [esp + 0x104]
fld dword [esp + 0x30]
fstp dword [esp + 0x108]
fst dword [esp + 0x10c]
fxch st(1)
fst dword [esp + 0x110]
fxch st(3)
faddp st(2)
fxch st(1)
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fst dword [esp + 0x114]
fst dword [esp + 0x12c]
fxch st(1)
fst dword [esp + 0x118]
fst dword [esp + 0x11c]
lea eax, [esp + 0xac]
fst dword [esp + 0x120]
fst dword [esp + 0x124]
fst dword [esp + 0x128]
fst dword [esp + 0x134]
fxch st(2)
fstp dword [esp + 0x130]
fld dword [esp + 0x18]
fstp dword [esp + 0x138]
fld dword [esp + 0x14]
fstp dword [esp + 0x13c]
fld dword [esp + 0x30]
fstp dword [esp + 0x140]
fld dword [esp + 0x24]
fstp dword [esp + 0x144]
fst dword [esp + 0x148]
fstp dword [esp + 0x14c]
fst dword [esp + 0x150]
fld dword [esp + 0x18]
fstp dword [esp + 0x154]
fst dword [esp + 0x158]
fstp dword [esp + 0x15c]
fld dword [esp + 0x24]
fstp dword [esp + 0x160]
call fcn.004fe11a
push 0
push 1
push 4
push 0x202
push 0x1c
xor ebx, ebx
mov byte [esp + 0x2dc], 1
call fcn.004fe1d1
lea ecx, [esp + 0xac]
test al, al
jne 0x5b15eb
mov byte [esp + 0x2c8], bl
call fcn.004fe186
jmp 0x5b12db
call fcn.004fe2b9
test al, al
jne 0x5b1604
mov byte [esp + 0x2c8], bl
lea ecx, [esp + 0xac]
jmp 0x5b15e1
mov edi, dword [esp + 0xd4]
push 0x1c
pop ecx
lea esi, [esp + 0xf4]
rep movsd dword es:[edi], dword [esi]
lea esi, [esp + 0xac]
call fcn.004fe2fa
mov ebx, dword [esp + 0x48]
push 1
push 1
xor edi, edi
mov ecx, ebx
call fcn.00470965
inc edi
push edi
push edi
mov ecx, ebx
call fcn.00470965
mov esi, dword [esp + 0x40]
mov eax, dword [esi]
push 0
push 0
mov ecx, esi
call dword [eax + 0x28]
test eax, eax
je 0x5b1656
lea ecx, [eax + 8]
jmp 0x5b1658
xor ecx, ecx
push 0
mov edi, ebx
call fcn.00470889
push 1
lea ecx, [esp + 0x1e0]
call fcn.00470889
mov eax, dword [esp + 0x44]
mov edi, dword [eax + 0x10]
mov ecx, ebx
call fcn.0046f7a6
mov eax, dword [esp + 0x44]
mov edi, dword [eax + 0x40]
mov ecx, ebx
call fcn.00471159
lea edi, [esp + 0xac]
mov ecx, ebx
call fcn.0046f8e7
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call dword [eax + 0x1c]
fild dword [eax + 4]
fld1
mov eax, dword [esi]
fdivrp st(1)
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
fmul qword [0x6a1600]
fstp dword [esp + 0x44]
fld dword [esp + 0x44]
fst dword [esp + 0x50]
fst dword [esp + 0x54]
fst dword [esp + 0x58]
fstp dword [esp + 0x5c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x60]
fld dword [esp + 0x18]
fstp dword [esp + 0x64]
fldz
fst dword [esp + 0x68]
fst dword [esp + 0x6c]
fst dword [esp + 0x70]
fst dword [esp + 0x74]
fst dword [esp + 0x78]
fstp dword [esp + 0x7c]
call dword [eax + 0x1c]
fld dword [esp + 0x18]
fidiv dword [eax]
lea ecx, [esp + 0x38]
mov eax, dword [esi]
push ecx
mov ecx, esi
fstp dword [esp + 0x80]
fld dword [esp + 0x18]
fstp qword [esp + 0x20]
call dword [eax + 0x1c]
fild dword [eax + 4]
push 4
lea eax, [esp + 0x50]
push eax
fdivr qword [esp + 0x24]
mov ecx, ebx
fstp dword [esp + 0x88]
fldz
fst dword [esp + 0x8c]
fstp dword [esp + 0x90]
call fcn.004711f8
push 6
pop ecx
push 5
pop edi
mov edx, ebx
call fcn.004702b8
mov ecx, ebx
call fcn.004715da
xor edi, edi
mov ecx, ebx
call fcn.0046f7a6
mov ecx, ebx
call fcn.00471159
mov ecx, ebx
call fcn.0046f8e7
push edi
xor ecx, ecx
mov edi, ebx
call fcn.00470889
push 1
xor ecx, ecx
call fcn.00470889
mov byte [esp + 0x2c8], 0
jmp 0x5b1c5c
lea ecx, [esp + 0x1c]
mov dword [esp + 0x2c8], 2
mov eax, dword [ebx]
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
mov eax, dword [eax + 4]
push 0
push 1
push 0x15
mov esi, 0x100
push esi
push eax
lea ecx, [esp + 0x1e8]
mov dword [esp + 0x30], eax
call fcn.004b6f38
test al, al
je 0x5b12db
lea ecx, [esp + 0x1dc]
call fcn.004b7de4
test al, al
je 0x5b12db
lea ecx, [esp + 0x1dc]
call fcn.004b7f25
mov dword [esp + 0x24], eax
mov eax, 0x200
sub eax, dword [ebp + 0x14]
mov dword [esp + 0x30], esi
imul eax, eax, 0x64
cdq
and edx, 0x1ff
add eax, edx
mov edi, eax
sar edi, 9
add edi, 0x64
push edi
mov edx, 0x1023778
call fcn.0049b551
xor esi, esi
cmp dword [esp + 0x1c], esi
mov dword [esp + 0x28], eax
jle 0x5b18a5
mov eax, edi
cdq
sub eax, edx
mov dword [esp + 0x18], eax
sar dword [esp + 0x18], 1
push dword [esp + 0x18]
mov edx, 0x1023778
call fcn.0049b551
add eax, dword [esp + 0x18]
jne 0x5b1861
mov eax, dword [esp + 0x24]
mov dword [eax + esi*4], 0x80808080
inc esi
jmp 0x5b189f
mov dword [esp + 0x14], eax
neg dword [esp + 0x14]
jmp 0x5b1899
cmp esi, dword [esp + 0x1c]
jge 0x5b18a5
cmp dword [esp + 0x28], 0
jle 0x5b187e
dec dword [esp + 0x28]
jmp 0x5b1898
mov edx, dword [esp + 0x24]
lea ecx, [eax - 0x80]
and ecx, 0xff
shl ecx, 8
or ecx, 0x80800080
mov dword [edx + esi*4], ecx
inc esi
dec eax
cmp eax, dword [esp + 0x14]
jge 0x5b186b
cmp esi, dword [esp + 0x1c]
jl 0x5b183f
lea ecx, [esp + 0x1dc]
call fcn.004b7f6f
add dword [esp + 0x24], eax
dec dword [esp + 0x30]
jne 0x5b181b
lea ecx, [esp + 0x1dc]
call fcn.004b7e76
mov eax, dword [ebx]
lea ecx, [esp + 0x30]
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
fild dword [eax]
mov eax, dword [ebx]
lea ecx, [esp + 0x28]
push ecx
fstp qword [esp + 0x20]
mov ecx, ebx
call dword [eax + 0x24]
fild dword [eax]
mov eax, dword [ebx]
lea ecx, [esp + 0x30]
fdivr qword [esp + 0x1c]
push ecx
mov ecx, ebx
fstp dword [esp + 0x1c]
call dword [eax + 0x1c]
fild dword [eax + 4]
mov eax, dword [ebx]
lea ecx, [esp + 0x28]
push ecx
mov ecx, ebx
fstp qword [esp + 0x20]
call dword [eax + 0x24]
fild dword [eax + 4]
lea eax, [esp + 0x30]
push eax
fdivr qword [esp + 0x20]
lea ecx, [esp + 0x1e0]
fstp dword [esp + 0x18]
call fcn.004b7cd4
fild dword [eax]
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x1e0]
fstp qword [esp + 0x20]
call fcn.004b7d0b
fild dword [eax]
mov eax, dword [ebx]
lea ecx, [esp + 0x1c]
push ecx
fdivr qword [esp + 0x20]
mov ecx, ebx
fstp dword [esp + 0x34]
call dword [eax + 0x1c]
fild dword [eax]
fmul qword [0x6a2640]
fstp dword [esp + 0x24]
fldz
fld st(0)
fld1
fsub st(1), st(0)
fxch st(1)
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fst dword [esp + 0xf4]
fst dword [esp + 0xf8]
fldz
fst dword [esp + 0xfc]
fst dword [esp + 0x100]
fld dword [esp + 0x14]
fstp dword [esp + 0x104]
fld dword [esp + 0x30]
fstp dword [esp + 0x108]
fst dword [esp + 0x10c]
fxch st(1)
fst dword [esp + 0x110]
fxch st(3)
faddp st(2)
fxch st(1)
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fst dword [esp + 0x114]
fst dword [esp + 0x12c]
fxch st(1)
fst dword [esp + 0x118]
fst dword [esp + 0x11c]
lea eax, [esp + 0xac]
fst dword [esp + 0x120]
fst dword [esp + 0x124]
fst dword [esp + 0x128]
fst dword [esp + 0x134]
fxch st(2)
fstp dword [esp + 0x130]
fld dword [esp + 0x18]
fstp dword [esp + 0x138]
fld dword [esp + 0x14]
fstp dword [esp + 0x13c]
fld dword [esp + 0x30]
fstp dword [esp + 0x140]
fld dword [esp + 0x24]
fstp dword [esp + 0x144]
fst dword [esp + 0x148]
fstp dword [esp + 0x14c]
fst dword [esp + 0x150]
fld dword [esp + 0x18]
fstp dword [esp + 0x154]
fst dword [esp + 0x158]
fstp dword [esp + 0x15c]
fld dword [esp + 0x24]
fstp dword [esp + 0x160]
call fcn.004fe11a
push 0
push 1
push 4
push 0x202
push 0x1c
xor ebx, ebx
mov byte [esp + 0x2dc], 3
call fcn.004fe1d1
lea ecx, [esp + 0xac]
test al, al
jne 0x5b1ab3
mov byte [esp + 0x2c8], 2
jmp 0x5b15e1
call fcn.004fe2b9
test al, al
jne 0x5b1ac9
mov byte [esp + 0x2c8], 2
jmp 0x5b15fb
mov edi, dword [esp + 0xd4]
push 0x1c
pop ecx
lea esi, [esp + 0xf4]
rep movsd dword es:[edi], dword [esi]
lea esi, [esp + 0xac]
call fcn.004fe2fa
mov esi, dword [esp + 0x48]
xor ebx, ebx
inc ebx
push ebx
push ebx
xor edi, edi
mov ecx, esi
call fcn.00470965
push ebx
push ebx
mov edi, ebx
mov ecx, esi
call fcn.00470965
mov ebx, dword [esp + 0x38]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
call dword [eax + 0x28]
test eax, eax
je 0x5b1b1d
lea ecx, [eax + 8]
jmp 0x5b1b1f
xor ecx, ecx
push 0
mov edi, esi
call fcn.00470889
push 1
lea ecx, [esp + 0x1e0]
call fcn.00470889
mov eax, dword [esp + 0x44]
mov edi, dword [eax + 0x10]
mov ecx, esi
call fcn.0046f7a6
mov eax, dword [esp + 0x44]
mov edi, dword [eax + 0x40]
mov ecx, esi
call fcn.00471159
lea edi, [esp + 0xac]
mov ecx, esi
call fcn.0046f8e7
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx]
lea edx, [esp + 0x1c]
push edx
call dword [eax + 0x1c]
fild dword [eax + 4]
fld1
mov eax, dword [ebx]
fdivrp st(1)
lea ecx, [esp + 0x1c]
push ecx
mov ecx, ebx
fmul qword [0x6a1600]
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fst dword [esp + 0x50]
fst dword [esp + 0x54]
fst dword [esp + 0x58]
fstp dword [esp + 0x5c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x60]
fld dword [esp + 0x18]
fstp dword [esp + 0x64]
fldz
fst dword [esp + 0x68]
fst dword [esp + 0x6c]
fst dword [esp + 0x70]
fst dword [esp + 0x74]
fst dword [esp + 0x78]
fstp dword [esp + 0x7c]
call dword [eax + 0x1c]
fld dword [esp + 0x18]
fidiv dword [eax]
lea ecx, [esp + 0x38]
mov eax, dword [ebx]
push ecx
mov ecx, ebx
fstp dword [esp + 0x80]
fld dword [esp + 0x18]
fstp qword [esp + 0x20]
call dword [eax + 0x1c]
fild dword [eax + 4]
push 4
lea eax, [esp + 0x50]
push eax
fdivr qword [esp + 0x24]
mov ecx, esi
fstp dword [esp + 0x88]
fldz
fst dword [esp + 0x8c]
fstp dword [esp + 0x90]
call fcn.004711f8
push 6
pop ecx
push 5
pop edi
mov edx, esi
call fcn.004702b8
mov ecx, esi
call fcn.004715da
xor edi, edi
mov ecx, esi
call fcn.0046f7a6
mov ecx, esi
call fcn.00471159
mov ecx, esi
call fcn.0046f8e7
push edi
xor ecx, ecx
mov edi, esi
call fcn.00470889
push 1
xor ecx, ecx
call fcn.00470889
mov byte [esp + 0x2c8], 2
lea ecx, [esp + 0xac]
call fcn.004fe186
or dword [esp + 0x2c8], 0xffffffff
lea ecx, [esp + 0x1d4]
call fcn.004b6ebc
mov al, 1
jmp 0x5b12f1
lea eax, [esp + 0x8c]
push eax
call fcn.004dd3fe
lea ecx, [esp + 0xf4]
mov dword [esp + 0x2c8], 4
call fcn.004b6dc1
cmp dword [ebp + 0x14], 0x200
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c8], 5
push ecx
jge 0x5b1de6
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x1c]
push dword [eax + 4]
mov ecx, edi
push dword [eax]
mov eax, dword [edi]
call dword [eax + 0xc]
lea ecx, [esp + 0x94]
call fcn.004dd49c
test al, al
jne 0x5b1d11
lea ecx, [esp + 0xf4]
mov byte [esp + 0x2c8], 4
call fcn.004b6ebc
or dword [esp + 0x2c8], 0xffffffff
lea ecx, [esp + 0x8c]
call fcn.004dd45c
jmp 0x5b12ef
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
push 0
mov esi, eax
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax + 0xc]
push eax
push dword [esi + 4]
lea ecx, [esp + 0x104]
push dword [esi]
call fcn.004b6f38
test al, al
je 0x5b1ce4
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
xor esi, esi
xor ebx, ebx
call dword [eax + 0x1c]
push dword [eax + 4]
push dword [eax]
xor eax, eax
push ebx
push esi
push eax
push eax
lea eax, [esp + 0xa8]
push eax
mov esi, edi
call fcn.004f98f8
add esp, 0x1c
test al, al
je 0x5b1ce4
lea ecx, [esp + 0xfc]
call fcn.004bc9de
test al, al
je 0x5b1ce4
xor eax, eax
xor edx, edx
push edx
lea edi, [esp + 0x3c]
stosb byte es:[edi], al
mov eax, dword [ebp + 0x14]
cdq
xor ecx, ecx
push ecx
sub eax, edx
sar eax, 1
mov ecx, 0x400
sub ecx, eax
push ecx
push dword [esp + 0x44]
lea eax, [esp + 0x10c]
push eax
lea eax, [esp + 0xa4]
call fcn.00541aae
test al, al
je 0x5b1ce4
fldz
push 0xffffffffffffffff
push ecx
push ecx
fst dword [esp + 4]
lea ecx, [esp + 0x100]
fstp dword [esp]
call fcn.004b89cf
mov bl, al
jmp 0x5b1ecf
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x1c]
push dword [eax + 4]
mov ecx, ebx
push dword [eax]
mov eax, dword [ebx]
call dword [eax + 0xc]
lea ecx, [esp + 0x94]
call fcn.004dd49c
test al, al
je 0x5b1ce4
mov eax, dword [ebx]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
push 0
mov esi, eax
mov eax, dword [ebx]
push 1
mov ecx, ebx
call dword [eax + 0xc]
push eax
push dword [esi + 4]
lea ecx, [esp + 0x104]
push dword [esi]
call fcn.004b6f38
test al, al
je 0x5b1ce4
mov eax, dword [ebx]
lea ecx, [esp + 0x38]
push ecx
xor edi, edi
mov ecx, ebx
xor esi, esi
mov dword [esp + 0x24], edi
call dword [eax + 0x1c]
push dword [eax + 4]
push dword [eax]
xor eax, eax
push edi
push esi
push edi
push eax
lea eax, [esp + 0xa8]
push eax
mov esi, ebx
call fcn.004f98f8
add esp, 0x1c
test al, al
je 0x5b1ce4
lea ecx, [esp + 0xfc]
call fcn.004bc9de
test al, al
je 0x5b1ce4
xor eax, eax
lea edi, [esp + 0x38]
stosb byte es:[edi], al
mov eax, dword [ebp + 0x14]
add eax, 0xfffffe00
xor edx, edx
push edx
cdq
sub eax, edx
sar eax, 1
xor ecx, ecx
push ecx
add eax, 0x300
push eax
push dword [esp + 0x44]
lea eax, [esp + 0x10c]
push eax
lea eax, [esp + 0xa4]
call fcn.00541aae
test al, al
jne 0x5b1dc6
xor bl, bl
lea ecx, [esp + 0xf4]
mov byte [esp + 0x2c8], 4
call fcn.004b6ebc
or dword [esp + 0x2c8], 0xffffffff
lea ecx, [esp + 0x8c]
call fcn.004dd45c
mov al, bl
jmp 0x5b12f1