Function at 0x5414d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x144]
cmp eax, dword [ecx + 8]
jbe 0x542514
sub esp, 0x1c4
mov eax, dword [esp + 0x1d8]
lea ecx, [eax + 0xf]
sar ecx, 0x1f
shr ecx, 0x1c
lea ecx, [ecx + eax + 0xf]
sar ecx, 4
mov edx, dword [esp + 0x1dc]
lea ebx, [edx + 7]
sar ebx, 0x1f
shr ebx, 0x1d
lea ebx, [ebx + edx + 7]
sar ebx, 3
mov ebp, ecx
imul ecx, ebx
cmp ecx, 0x80
jg 0x541a43
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x3c], ebx
mov ecx, dword [esp + 0x1c8]
mov esi, dword [ecx + 0x1b8]
mov edi, esi
and esi, 0x7f
lea ebx, [esi - 0x80]
neg ebx
mov ebp, dword [ecx + 0x1bc]
mov eax, dword [ecx + 0x1b4]
test ebx, ebx
jl 0x54250e
sub edi, esi
add edi, 0x80
cmp ebp, edi
jae 0x5415ab
mov dword [esp + 0x68], esi
mov dword [esp + 0x2c], ebx
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
lea eax, [0x6b5a40]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x2c]
mov esi, dword [esp + 0x68]
mov dword [esp + 0xcc], eax
mov dword [esp + 0x68], ebp
mov dword [esp + 0x64], edi
lea ecx, [edi + esi]
lea ecx, [ecx + ecx*8]
lea ecx, [eax + ecx*4 - 0x1200]
mov dword [esp], ecx
lea ecx, [ebx + ebx*8]
shl ecx, 2
mov dword [esp + 4], ecx
call fcn.00466510
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x1c8]
mov dword [ecx + 0x1b8], eax
mov edx, dword [esp + 0x68]
mov dword [ecx + 0x1bc], edx
mov ebx, dword [0x1eaa9f0]
test ebx, ebx
jne 0x54160d
mov ebx, dword [esp + 0xcc]
mov dword [ecx + 0x1b4], ebx
jmp 0x541627
lea edi, [ecx + 0x1b4]
mov ebx, eax
mov eax, dword [esp + 0xcc]
call fcn.00465d80
mov ebp, eax
mov eax, ebx
mov ebx, ebp
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004098b0
mov eax, dword [esp + 0xc]
lea ecx, [0x68f600]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004cc170
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c8]
cmp dword [ebx + 0x2d8], ecx
jge 0x5416ef
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x9c], eax
lea edx, [ebx + 0x2d8]
movzx ebp, byte [ebx + 0x38c]
mov esi, dword [ebx]
mov edi, dword [ebx + 4]
mov dword [esp], edx
xchg ebp, eax
mov byte [esp + 4], al
xchg ebp, eax
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov byte [esp + 0x10], 0x20
lea edx, [ecx + ecx*4]
lea edx, [ecx + edx*2]
mov eax, 0xcccccccd
mov ebp, edx
imul edx
add edx, ebp
sar edx, 3
sar ebp, 0x1f
sub edx, ebp
mov dword [esp + 0x14], edx
call fcn.005437c0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
test ecx, ecx
jne 0x541a2e
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x1c8]
nop
mov ebp, dword [ebx + 0x2dc]
mov esi, dword [ebx + 0x2e0]
test ebp, ebp
je 0x5424f5
mov ebx, dword [ebp + 0x18]
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call ebx
mov dword [esp + 0x4c], 0
mov eax, dword [esp + 0x1c8]
mov ecx, dword [eax + 0x1c0]
lea ecx, [ecx + ecx*2]
shl ecx, 2
nop
mov edx, dword [esp + 0x4c]
add ecx, 3
and ecx, 0xfffffffc
add ecx, edx
mov dword [esp + 0x60], ecx
mov dword [esp + 0x4c], ecx
mov ebx, dword [eax + 0x1c0]
add ebx, 0x7f
and ebx, 0xffffff80
shl ebx, 3
nop
add ebx, 3
and ebx, 0xfffffffc
add ebx, ecx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x4c], ebx
mov ebp, dword [esp + 0x1dc]
mov esi, dword [esp + 0x1d8]
mov edi, ebp
imul ebp, esi
shl ebp, 0xa
nop
add ebp, 3
and ebp, 0xfffffffc
add ebp, ebx
mov dword [esp + 0x58], ebp
mov dword [esp + 0x4c], ebp
mov ebx, dword [eax + 0x1c4]
imul ebx, ebx, 0x34
nop
add ebx, 3
and ebx, 0xfffffffc
add ebx, ebp
mov dword [esp + 0x54], ebx
mov dword [esp + 0x4c], ebx
mov ebp, dword [eax + 0x1c0]
shl ebp, 5
nop
add ebp, 3
and ebp, 0xfffffffc
add ebp, ebx
mov dword [esp + 0x4c], ebp
mov ebx, dword [eax + 0x1c8]
lea ebx, [ebx + ebx*2]
shl ebx, 3
nop
add ebx, 3
and ebx, 0xfffffffc
add ebx, ebp
mov dword [esp + 0x4c], ebx
mov ebx, edi
lea edi, [esp + 0x70]
xor eax, eax
call fcn.00465fe6
mov ecx, dword [esp + 0x1c8]
mov edi, dword [ecx + 0x1c0]
mov dword [esp + 0x70], edi
mov edi, dword [ecx + 0x1c4]
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], esi
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], edx
mov edx, dword [esp + 0x60]
mov dword [esp + 0x84], edx
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x88], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x8c], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], ebp
mov edi, dword [ecx + 0x3a4]
lea esi, [esp + 0x70]
call fcn.0046649c
mov ecx, dword [esp + 0x1c8]
mov ebp, dword [ecx + 0x1b8]
lea esi, [ebp + 0x7f]
sar esi, 0x1f
shr esi, 0x19
lea ebp, [ebp + esi + 0x7f]
sar ebp, 7
mov dword [esp + 0x38], ebp
imul esi, ebp, 0x7c
mov dword [esp + 0x68], esi
lea edi, [esi + 4]
mov dword [esp + 0x48], edi
cmp dword [ecx + 0x2e8], edi
jge 0x5418f0
lea edx, [ecx + 0x2e8]
movzx ebx, byte [ecx + 0x38c]
mov esi, dword [ecx]
mov edi, dword [ecx + 4]
mov dword [esp], edx
mov byte [esp + 4], bl
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov byte [esp + 0x10], 0x60
imul edx, ebp, 0x554
lea ebx, [edx + 0x2c]
mov eax, 0xcccccccd
mov esi, edx
imul ebx
lea edx, [esi + edx + 0x2c]
sar ebx, 0x1f
sar edx, 3
sub edx, ebx
mov dword [esp + 0x14], edx
call fcn.005437c0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
test ecx, ecx
jne 0x541a19
mov ecx, dword [esp + 0x1c8]
mov eax, dword [ecx + 0x3a4]
lea edx, [0x686000]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.004cc010
mov eax, dword [esp + 8]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0x1c8]
lea ebx, [edx + 0x2c8]
movzx ebp, byte [edx + 0x38c]
mov esi, dword [edx]
mov edi, dword [edx + 4]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x40], ecx
mov dword [esp], ebx
xchg ebp, eax
mov byte [esp + 4], al
xchg ebp, eax
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov byte [esp + 0x10], 0x20
mov dword [esp + 0x14], ecx
call fcn.005437c0
nop
mov eax, dword [esp + 0x1c8]
mov ecx, dword [eax + 0x2cc]
mov edx, dword [eax + 0x2d0]
test ecx, ecx
je 0x5424dc
mov eax, dword [ecx + 0x18]
mov dword [esp], edx
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x4c]
lea ecx, [eax + 8]
mov edx, dword [esp + 0x1c8]
cmp dword [edx + 0x2f8], ecx
jge 0x541b11
lea ecx, [edx + 0x2f8]
movzx ebx, byte [edx + 0x38c]
mov ebp, dword [edx]
mov esi, dword [edx + 4]
mov dword [esp], ecx
mov byte [esp + 4], bl
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov byte [esp + 0x10], 0x60
add eax, 0x400008
mov dword [esp + 0x14], eax
call fcn.005437c0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test eax, eax
je 0x541a0d
mov dword [esp + 0x1e4], ecx
mov dword [esp + 0x1e8], edx
add esp, 0x1c4
ret
mov edx, dword [esp + 0x1c8]
jmp 0x541b11
mov dword [esp + 0x1e4], edx
mov dword [esp + 0x1e8], ebx
add esp, 0x1c4
ret
mov dword [esp + 0x1e4], edx
mov dword [esp + 0x1e8], ebx
add esp, 0x1c4
ret
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
shl eax, 5
mov dword [esp], eax
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x69b600]
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x1dc]
shl eax, 5
mov dword [esp], eax
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x69b600]
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xe4], eax
lea eax, [0x6fb367]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
lea eax, [esp + 0xd8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cde70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1e4], eax
mov dword [esp + 0x1e8], ecx
add esp, 0x1c4
ret
mov edx, dword [esp + 0x1c8]
mov eax, dword [edx + 0x3a0]
mov ecx, dword [esp + 0x4c]
mov dword [eax], ecx
mov dword [eax + 4], 0
mov eax, dword [edx + 0x3a0]
lea ecx, [0x686540]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004cc010
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c8]
mov ebp, dword [ebx + 0x2fc]
mov esi, dword [ebx + 0x300]
test ebp, ebp
je 0x5424c3
mov ebx, dword [ebp + 0x18]
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call ebx
nop
mov eax, dword [esp + 0x1c8]
mov ecx, dword [eax + 0x39c]
mov edx, dword [eax + 0x394]
mov ebx, dword [eax + 0x398]
mov ebp, dword [esp + 0x48]
cmp ecx, ebp
jge 0x541c48
mov esi, dword [esp + 0x68]
lea ebx, [esi + ebx + 4]
cmp ecx, ebx
jae 0x541bdb
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
lea eax, [0x69be80]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x48]
mov esi, dword [esp + 0x68]
mov dword [esp + 0x64], ebx
mov dword [esp + 0xc8], edx
mov dword [esp + 0x50], ecx
sub ebx, esi
lea ebx, [ebx + edx - 4]
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.00466510
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x1c8]
mov dword [ecx + 0x398], eax
mov eax, dword [esp + 0x50]
mov dword [ecx + 0x39c], eax
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x541c30
mov eax, dword [esp + 0xc8]
mov dword [ecx + 0x394], eax
jmp 0x541c42
lea edi, [ecx + 0x394]
mov eax, dword [esp + 0xc8]
call fcn.00465d80
mov eax, ecx
mov ebp, dword [esp + 0x48]
mov edx, dword [eax + 0x39c]
mov ebx, dword [eax + 0x394]
cmp edx, ebp
jb 0x5424bc
nop
mov ecx, dword [eax + 0x2ec]
mov esi, dword [eax + 0x2f0]
test ecx, ecx
je 0x5424a3
mov eax, dword [ecx + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
call eax
mov eax, dword [esp + 0x1c8]
movzx ecx, byte [eax + 0x38c]
test cl, cl
jne 0x54248a
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ecx, dword [ecx + 0x10]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0x1c8]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ecx, dword [ecx + 0x1c]
mov dword [esp], edx
mov dword [esp + 4], 2
mov edx, dword [esp + 0x1d0]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x1d4]
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x1c8]
mov ecx, dword [eax + 0x33c]
mov edx, dword [eax + 0x340]
mov ebx, dword [esp + 0x1cc]
test ebx, ebx
je 0x541cfd
mov ecx, dword [ebx]
mov edx, dword [ebx + 4]
mov ebx, dword [eax]
mov ebp, dword [eax + 4]
mov ebx, dword [ebx + 0x1c]
mov dword [esp], ebp
mov dword [esp + 4], 3
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x1c8]
mov dword [esp], eax
call fcn.005431b0
nop
mov eax, dword [esp + 0x1c8]
movzx ecx, byte [eax + 0x38c]
test cl, cl
je 0x541d83
mov ecx, dword [eax + 0x390]
mov dword [esp + 0xb8], ecx
lea edi, [esp + 0xe8]
xor eax, eax
call fcn.00465fea
mov byte [esp + 0xe8], 1
mov ecx, dword [esp + 0xb8]
mov ecx, dword [ecx + 8]
mov dword [esp], ecx
lea ecx, [esp + 0xe8]
mov dword [esp + 4], ecx
call fcn.00404e10
mov eax, dword [esp + 0x1c8]
lea esi, [eax + 0x204]
lea edi, [esp + 0x1a8]
call fcn.004664ba
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0x1a8]
call fcn.004664ba
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], 1
mov dword [esp + 0x28], 1
call fcn.00542520
nop
mov eax, dword [esp + 0x1c8]
movzx ecx, byte [eax + 0x38c]
test cl, cl
je 0x541e1b
mov ecx, dword [eax + 0x390]
mov dword [esp + 0xb4], ecx
lea edi, [esp + 0xe8]
lea esi, [0x785fe8]
call fcn.004664c4
mov ecx, dword [esp + 0xb4]
mov ecx, dword [ecx + 8]
mov dword [esp], ecx
lea ecx, [esp + 0xe8]
mov dword [esp + 4], ecx
call fcn.00404e10
mov eax, dword [esp + 0x1c8]
lea esi, [eax + 0x220]
lea edi, [esp + 0x18c]
call fcn.004664ba
mov ecx, dword [eax + 0x1c0]
mov dword [esp + 0x64], ecx
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0x18c]
call fcn.004664ba
mov ecx, dword [esp + 0x64]
lea edx, [ecx + 0x7f]
sar edx, 0x1f
shr edx, 0x19
lea ecx, [ecx + edx + 0x7f]
sar ecx, 7
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], 1
mov dword [esp + 0x28], 1
call fcn.00542520
nop
mov eax, dword [esp + 0x1c8]
movzx ecx, byte [eax + 0x38c]
test cl, cl
je 0x541ecd
mov ecx, dword [eax + 0x390]
mov dword [esp + 0xb0], ecx
lea edi, [esp + 0xe8]
lea esi, [0x785fe8]
call fcn.004664c4
mov ecx, dword [esp + 0xb0]
mov ecx, dword [ecx + 8]
mov dword [esp], ecx
lea ecx, [esp + 0xe8]
mov dword [esp + 4], ecx
call fcn.00404e10
mov eax, dword [esp + 0x1c8]
lea esi, [eax + 0x23c]
lea edi, [esp + 0x170]
call fcn.004664ba
mov ecx, dword [eax + 0x1c4]
mov dword [esp + 0x64], ecx
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0x170]
call fcn.004664ba
mov ecx, dword [esp + 0x64]
lea edx, [ecx + 0x1f]
sar edx, 0x1f
shr edx, 0x1b
lea ecx, [edx + ecx + 0x1f]
sar ecx, 5
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], 1
mov dword [esp + 0x28], 1
call fcn.00542520
nop
mov eax, dword [esp + 0x1c8]
movzx ecx, byte [eax + 0x38c]
test cl, cl
je 0x541f7f
mov ecx, dword [eax + 0x390]
mov dword [esp + 0xac], ecx
lea edi, [esp + 0xe8]
lea esi, [0x785fe8]
call fcn.004664c4
mov ecx, dword [esp + 0xac]
mov ecx, dword [ecx + 8]
mov dword [esp], ecx
lea ecx, [esp + 0xe8]
mov dword [esp + 4], ecx
call fcn.00404e10
mov eax, dword [esp + 0x1c8]
lea esi, [eax + 0x258]
lea edi, [esp + 0x154]
call fcn.004664ba
mov ecx, dword [eax + 0x1c0]
mov dword [esp + 0x64], ecx
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0x154]
call fcn.004664ba
mov ecx, dword [esp + 0x64]
lea edx, [ecx + 0x7f]
sar edx, 0x1f
shr edx, 0x19
lea ecx, [ecx + edx + 0x7f]
sar ecx, 7
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], 1
mov dword [esp + 0x28], 1
call fcn.00542520
mov eax, dword [esp + 0x1c8]
lea esi, [eax + 0x274]
lea edi, [esp + 0x138]
call fcn.004664ba
mov ecx, dword [eax + 0x1c0]
mov dword [esp + 0x64], ecx
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0x138]
call fcn.004664ba
mov ecx, dword [esp + 0x64]
lea edx, [ecx + 0x7f]
sar edx, 0x1f
shr edx, 0x19
lea ecx, [ecx + edx + 0x7f]
sar ecx, 7
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], 1
mov dword [esp + 0x28], 1
call fcn.00542520
nop
mov eax, dword [esp + 0x1c8]
movzx ecx, byte [eax + 0x38c]
test cl, cl
je 0x542094
mov ecx, dword [eax + 0x390]
mov dword [esp + 0xa8], ecx
lea edi, [esp + 0xe8]
lea esi, [0x785fe8]
call fcn.004664c4
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 8]
mov dword [esp], ecx
lea ecx, [esp + 0xe8]
mov dword [esp + 4], ecx
call fcn.00404e10
mov eax, dword [esp + 0x1c8]
lea esi, [eax + 0x290]
lea edi, [esp + 0x11c]
call fcn.004664ba
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0x11c]
call fcn.004664ba
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], 1
call fcn.00542520
nop
mov eax, dword [esp + 0x1c8]
movzx ecx, byte [eax + 0x38c]
test cl, cl
je 0x54212c
mov ecx, dword [eax + 0x390]
mov dword [esp + 0xa4], ecx
lea edi, [esp + 0xe8]
lea esi, [0x785fe8]
call fcn.004664c4
mov ecx, dword [esp + 0xa4]
mov ecx, dword [ecx + 8]
mov dword [esp], ecx
lea ecx, [esp + 0xe8]
mov dword [esp + 4], ecx
call fcn.00404e10
mov eax, dword [esp + 0x1c8]
lea esi, [eax + 0x2ac]
lea edi, [esp + 0x100]
call fcn.004664ba
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0x100]
call fcn.004664ba
mov ecx, dword [esp + 0x1d8]
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0x1dc]
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], 1
call fcn.00542520
nop
mov eax, dword [esp + 0x1c8]
movzx ecx, byte [eax + 0x38c]
test cl, cl
je 0x5421ca
mov ecx, dword [eax + 0x390]
mov dword [esp + 0xa0], ecx
lea edi, [esp + 0xe8]
lea esi, [0x785fe8]
call fcn.004664c4
mov ecx, dword [esp + 0xa0]
mov ecx, dword [ecx + 8]
mov dword [esp], ecx
lea ecx, [esp + 0xe8]
mov dword [esp + 4], ecx
call fcn.00404e10
mov eax, dword [esp + 0x1c8]
movzx ecx, byte [eax + 0x38c]
test cl, cl
je 0x54222d
mov ecx, dword [eax + 0x390]
mov dword [esp + 0xbc], ecx
lea edi, [esp + 0xe8]
lea esi, [0x786000]
call fcn.004664c4
mov ecx, dword [esp + 0xbc]
mov edx, dword [ecx + 8]
mov dword [esp], edx
lea edx, [esp + 0xe8]
mov dword [esp + 4], edx
call fcn.00404e10
mov eax, dword [esp + 0xbc]
mov eax, dword [eax + 0xc]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00405860
jmp 0x54223a
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ecx, dword [ecx + 0x50]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0x1c8]
mov ecx, dword [eax + 0x3a0]
lea edx, [0x686540]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004cc010
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c8]
mov ebp, dword [ebx + 0x2fc]
mov esi, dword [ebx + 0x300]
test ebp, ebp
je 0x542471
mov ebx, dword [ebp + 0x10]
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
je 0x5422ee
mov eax, dword [0x1e8492c]
cmp dword [0x1e84928], ecx
jne 0x542382
mov dword [esp + 0x98], ebp
mov dword [esp + 0xc4], ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00403940
movzx eax, byte [esp + 0xc]
test al, al
jne 0x541b0a
jmp 0x542374
mov ecx, dword [esp + 0x1c8]
mov edx, dword [ecx + 0x3a0]
mov edx, dword [edx + 4]
test edx, edx
je 0x542430
cmp edx, 1
jne 0x5423ac
lea edx, [ecx + 0x2f8]
mov ebx, dword [ecx + 0x2f8]
movzx ebp, byte [ecx + 0x38c]
mov esi, dword [ecx]
mov edi, dword [ecx + 4]
mov dword [esp], edx
xchg ebp, eax
mov byte [esp + 4], al
xchg ebp, eax
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov byte [esp + 0x10], 0x60
mov edx, ebx
shl ebx, 4
sub ebx, edx
mov eax, 0xcccccccd
imul ebx
add edx, ebx
sar edx, 3
sar ebx, 0x1f
sub edx, ebx
mov dword [esp + 0x14], edx
call fcn.005437c0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
test ecx, ecx
je 0x541b0a
jmp 0x542397
mov ebx, dword [esp + 0xc4]
mov ebp, dword [esp + 0x98]
mov dword [esp + 0x1e4], ebx
mov dword [esp + 0x1e8], ebp
add esp, 0x1c4
ret
mov dword [esp + 0x1e4], edx
mov dword [esp + 0x1e8], ebx
add esp, 0x1c4
ret
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp], edx
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x69be00]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], eax
lea eax, [0x700655]
mov dword [esp], eax
mov dword [esp + 4], 0x2c
lea eax, [esp + 0xd0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cde70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1e4], eax
mov dword [esp + 0x1e8], ecx
add esp, 0x1c4
ret
movzx eax, byte [ecx + 0x38c]
test al, al
jne 0x542458
mov dword [esp + 0x1e4], 0
mov dword [esp + 0x1e8], 0
add esp, 0x1c4
ret
nop
lea eax, [0x69bcc0]
mov dword [esp], eax
lea eax, [0x78480c]
mov dword [esp + 4], eax
call fcn.00436d20
nop
lea eax, [0x69bcc0]
mov dword [esp], eax
lea eax, [0x78480c]
mov dword [esp + 4], eax
call fcn.00436d20
nop
lea eax, [0x69bcc0]
mov dword [esp], eax
lea eax, [0x78480c]
mov dword [esp + 4], eax
call fcn.00436d20
nop
lea eax, [0x69bcc0]
mov dword [esp], eax
lea eax, [0x78480c]
mov dword [esp + 4], eax
call fcn.00436d20
mov ecx, ebp
call fcn.00465e40
nop
lea eax, [0x69bcc0]
mov dword [esp], eax
lea eax, [0x78480c]
mov dword [esp + 4], eax
call fcn.00436d20
nop
lea eax, [0x69bcc0]
mov dword [esp], eax
lea eax, [0x78480c]
mov dword [esp + 4], eax
call fcn.00436d20
nop
lea eax, [0x69bcc0]
mov dword [esp], eax
lea eax, [0x78480c]
mov dword [esp + 4], eax
call fcn.00436d20
call fcn.0044bb50
nop
call fcn.004649b0
jmp fcn.005414d0