Function at 0x5ff870
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xe0]
cmp eax, dword [ecx + 8]
jbe 0x6006d2
sub esp, 0x160
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], 0
mov dword [esp + 0x174], 0
mov edx, dword [0x821e80]
mov eax, dword [edx]
call eax
lea eax, [0x63ae40]
mov dword [esp], eax
call fcn.0040b470
mov eax, dword [esp + 4]
lea ecx, [0x6082f0]
mov dword [eax], ecx
mov ecx, dword [0x84f450]
test ecx, ecx
jne 0x5ff8ee
mov ecx, dword [esp + 0x164]
mov dword [eax + 4], ecx
jmp 0x5ff908
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x164]
call fcn.0045f3a0
mov eax, ecx
mov ecx, dword [esp + 0x164]
mov edx, dword [ecx + 8]
mov ebx, dword [esp + 0x168]
mov ebp, dword [ebx + 0xc]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.005f8460
movzx eax, byte [esp + 0xc]
test al, al
je 0x60000a
mov eax, dword [esp + 0x164]
lea ecx, [eax + 0x7c]
mov dword [esp + 0xd4], ecx
mov dword [esp], ecx
call fcn.00470550
mov eax, dword [esp + 0x164]
inc dword [eax + 0x84]
mov ecx, dword [eax + 0x9c]
mov dword [esp + 0xb0], ecx
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
call fcn.004708f0
mov edx, dword [esp + 0xb0]
test edx, edx
je 0x5ff9cf
mov eax, dword [esp + 0x168]
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x5ff9c5
call fcn.0040bf40
mov eax, dword [0x84f450]
mov ecx, dword [esp]
test eax, eax
jne 0x5ff9ab
mov eax, dword [esp + 0x168]
mov dword [eax + 4], ecx
jmp 0x5ff9be
mov ebx, dword [esp + 0x168]
lea edi, [ebx + 4]
mov eax, ecx
call fcn.0045f3a0
mov eax, ebx
mov edx, dword [esp + 0xb0]
mov ecx, dword [edx]
mov ebx, dword [eax + 4]
mov dword [esp], ebx
call ecx
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 8]
movzx ecx, byte [ecx + 0x69]
test cl, cl
je 0x5ff9e5
xor ecx, ecx
jmp 0x5ffa56
mov eax, dword [esp + 0x168]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x1c]
mov dword [esp], ecx
lea ecx, [0x665813]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xf
call fcn.005b0040
mov eax, dword [esp + 0x10]
test eax, eax
je 0x5ffa1e
mov eax, dword [esp + 0x164]
xor ecx, ecx
jmp 0x5ffa56
mov eax, dword [esp + 0x168]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x1c]
mov dword [esp], ecx
lea ecx, [0x662b14]
mov dword [esp + 4], ecx
mov dword [esp + 8], 5
call fcn.005b0040
mov eax, dword [esp + 0x10]
test eax, eax
sete al
mov ecx, eax
mov eax, dword [esp + 0x164]
test cl, cl
je 0x5ffb86
mov ecx, dword [esp + 0x168]
mov edx, dword [ecx]
mov ebx, dword [edx]
cmp dword [edx + 4], 4
jne 0x5ffa7b
cmp dword [ebx], 0x44414548
je 0x5ffb8d
nop
mov edx, dword [ecx + 4]
test edx, edx
jne 0x5ffab6
call fcn.0040bf40
mov eax, dword [0x84f450]
mov ecx, dword [esp]
test eax, eax
jne 0x5ffaa1
mov eax, dword [esp + 0x168]
mov dword [eax + 4], ecx
jmp 0x5ffab4
mov edx, dword [esp + 0x168]
lea edi, [edx + 4]
mov eax, ecx
call fcn.0045f3a0
mov eax, edx
mov ecx, eax
nop
mov eax, dword [ecx + 4]
mov dword [esp + 0x98], eax
lea edx, [0x665813]
mov dword [esp], edx
mov dword [esp + 4], 0xf
call fcn.005b14f0
mov eax, dword [esp + 8]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x30], ecx
lea edx, [0x630260]
mov dword [esp], edx
call fcn.0040b470
mov eax, dword [esp + 4]
mov dword [esp + 0xcc], eax
mov dword [eax + 4], 4
lea ecx, [0x662974]
mov dword [eax], ecx
lea ecx, [0x652480]
mov dword [esp], ecx
mov edx, dword [esp + 0x98]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xd0]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 0xc], edx
call fcn.0040ffe0
mov edi, dword [esp + 0x10]
mov dword [edi + 4], 1
mov dword [edi + 8], 1
mov eax, dword [0x84f450]
test eax, eax
jne 0x5ffb65
mov eax, dword [esp + 0xcc]
mov dword [edi], eax
jmp 0x5ffb71
mov eax, dword [esp + 0xcc]
call fcn.0045f3a0
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
mov edx, 1
jmp 0x5ffb8f
mov ecx, dword [esp + 0x168]
xor edx, edx
mov byte [esp + 0x22], dl
mov ebx, dword [ecx]
mov ebp, dword [ebx + 0x14]
cmp ebp, 1
jg 0x5ffba5
jne 0x5ffc03
cmp dword [ebx + 0x18], 1
jl 0x5ffc03
mov ebp, dword [ebx + 0x20]
test ebp, ebp
je 0x5ffc03
mov dword [esp], ebx
call fcn.005ec5a0
movzx eax, byte [esp + 4]
test al, al
jne 0x5ffbd2
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
movzx edx, byte [esp + 0x22]
jmp 0x5ffc03
lea eax, [0x62e780]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00404540
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x168]
movzx edx, byte [esp + 0x22]
mov ebx, eax
mov eax, dword [esp + 0x164]
jmp 0x5ffc05
xor ebx, ebx
mov dword [esp + 0xc0], ebx
mov ebp, dword [eax + 8]
movzx ebp, byte [ebp + 0x68]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x5ffc1d
xor ebp, ebp
jmp 0x5ffc86
mov eax, dword [ecx]
mov dword [esp], eax
call fcn.005ec630
movzx eax, byte [esp + 4]
test al, al
je 0x5ffc4e
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
movzx edx, byte [esp + 0x22]
mov ebx, dword [esp + 0xc0]
xor ebp, ebp
jmp 0x5ffc86
mov eax, dword [esp + 0x168]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x1c]
mov dword [esp], ecx
call fcn.005ecfc0
movzx eax, byte [esp + 4]
xor eax, 1
mov ecx, dword [esp + 0x168]
movzx edx, byte [esp + 0x22]
mov ebx, dword [esp + 0xc0]
mov ebp, eax
mov eax, dword [esp + 0x164]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x5ffd86
nop
mov ebp, dword [ecx + 4]
test ebp, ebp
jne 0x5ffccb
call fcn.0040bf40
mov eax, dword [0x84f450]
mov ecx, dword [esp]
test eax, eax
jne 0x5ffcb6
mov eax, dword [esp + 0x168]
mov dword [eax + 4], ecx
jmp 0x5ffcc9
mov edx, dword [esp + 0x168]
lea edi, [edx + 4]
mov eax, ecx
call fcn.0045f3a0
mov eax, edx
mov ecx, eax
nop
mov eax, dword [ecx + 4]
mov dword [esp + 0x94], eax
lea edx, [0x663bc3]
mov dword [esp], edx
mov dword [esp + 4], 0xa
call fcn.005b14f0
mov eax, dword [esp + 8]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x30], ecx
lea edx, [0x630260]
mov dword [esp], edx
call fcn.0040b470
mov eax, dword [esp + 4]
mov dword [esp + 0xc8], eax
mov dword [eax + 4], 5
lea ecx, [0x662b55]
mov dword [eax], ecx
lea ecx, [0x652480]
mov dword [esp], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xd0]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xc], ecx
call fcn.0040ffe0
mov edi, dword [esp + 0x10]
mov dword [edi + 4], 1
mov dword [edi + 8], 1
mov eax, dword [0x84f450]
test eax, eax
jne 0x5ffd7a
mov eax, dword [esp + 0xc8]
mov dword [edi], eax
jmp 0x5ffd86
mov eax, dword [esp + 0xc8]
call fcn.0045f3a0
lea eax, [0x62e780]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00404540
mov eax, dword [esp + 8]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
lea ecx, [0x600770]
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xdc], eax
lea ecx, [esp + 0xd8]
mov dword [esp + 0x7c], ecx
lea ecx, [esp + 0x70]
mov dword [esp], ecx
call fcn.004331d0
test eax, eax
jne 0x5ffffe
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
lea eax, [0x600720]
mov dword [esp + 0x108], eax
lea eax, [esp + 0x170]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 0x110], eax
mov ecx, dword [esp + 0x168]
mov dword [esp + 0x114], ecx
lea edx, [esp + 0x108]
mov dword [esp + 0x58], edx
lea edx, [esp + 0x4c]
mov dword [esp], edx
call fcn.004331d0
test eax, eax
jne 0x5ffff2
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 0x3c]
mov dword [esp + 0x24], ecx
mov edx, dword [eax + 0x40]
mov dword [esp + 0x28], edx
lea ebx, [0x62e500]
mov dword [esp], ebx
mov dword [esp + 4], 1
call fcn.00404540
mov eax, dword [esp + 8]
mov dword [esp + 0x9c], eax
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov ecx, dword [esp + 0x168]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], eax
mov edx, dword [esp + 0xc0]
mov dword [esp + 0x104], edx
mov ebx, dword [esp + 0x164]
mov ebp, dword [ebx + 0x48]
mov dword [esp], ebp
lea ebp, [esp + 0xfc]
mov dword [esp + 4], ebp
call fcn.00404710
lea eax, [0x62e700]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00404540
mov eax, dword [esp + 8]
mov dword [esp + 0xa8], eax
lea edi, [esp + 0x118]
xor eax, eax
call fcn.0045f63a
mov ecx, dword [esp + 0x168]
mov edx, dword [ecx]
mov dword [esp + 0x118], edx
mov edx, dword [ecx + 0xc]
mov dword [esp + 0x11c], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 0x120], edx
movzx ebx, byte [esp + 0x22]
mov byte [esp + 0x124], bl
mov ebx, dword [esp + 0xc0]
mov dword [esp + 0x128], ebx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x12c], ebx
mov ebx, dword [esp + 0x164]
mov ebp, dword [ebx + 0x44]
mov dword [esp], ebp
lea ebp, [esp + 0x118]
mov dword [esp + 4], ebp
call fcn.00404710
mov eax, dword [esp + 0x168]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x70]
mov dword [esp + 0xc4], edx
mov ebx, dword [ecx + 0x78]
mov ecx, dword [ecx + 0x7c]
test ebx, ebx
jne 0x5fffcf
nop
mov ecx, dword [0x826f1c]
lea ebx, [0x6d0660]
mov eax, dword [ebx + 0x14]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x164]
mov edx, dword [ecx + 0x4c]
xor ebx, ebx
xor ebp, ebp
mov esi, dword [esp + 0xc4]
jmp 0x600059
call fcn.004337c0
add esp, 0x160
ret
call fcn.004337c0
add esp, 0x160
ret
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.005f6ca0
mov dword [esp + 0x16c], 0
mov eax, dword [0x827fc0]
mov ecx, dword [0x827fc4]
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
call fcn.004337c0
add esp, 0x160
ret
mov esi, ecx
mov edi, edx
mov edx, eax
mov eax, edi
mov byte [esp + 0x23], bl
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc4], esi
mov dword [esp + 0xa4], ebp
mov dword [esp + 0xac], edx
mov ecx, dword [0x821e94]
mov edi, dword [ecx]
mov edx, ecx
call edi
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
lea edi, [esp + 0x130]
xor eax, eax
call fcn.0045f634
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x158], ecx
lea ebx, [esp + 0xe8]
mov dword [esp + 0x15c], ebx
mov ebx, dword [esp + 0xac]
mov dword [esp + 0x150], ebx
mov ebp, dword [esp + 0xa4]
mov dword [esp + 0x148], ebp
mov esi, dword [esp + 0xa8]
mov dword [esp + 0x140], esi
lea edi, [esp + 0xf0]
mov dword [esp + 0x144], edi
mov edi, dword [esp + 0xc4]
mov dword [esp + 0x138], edi
mov esi, dword [esp + 0xbc]
mov dword [esp + 0x130], esi
lea ecx, [esp + 0x130]
mov dword [esp], ecx
lea ecx, [esp + 0x34]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 6
mov byte [esp + 0x14], 1
call fcn.004451f0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x600350
cmp eax, 1
je 0x6002fb
cmp eax, 2
je 0x600581
cmp eax, 3
je 0x60052d
cmp eax, 4
je 0x600298
cmp eax, 5
jne 0x6006d1
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0xec]
test eax, eax
jne 0x6003d0
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 8]
mov ebx, dword [ecx + 0x84]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setg bl
xchg esi, ebx
mov ecx, dword [ecx + 0x80]
test ecx, ecx
xchg edi, ebx
seta bl
xchg edi, ebx
and ebp, edi
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
jne 0x6001ff
mov ebp, dword [esp + 0xa4]
jmp 0x600279
mov dword [esp + 4], ebx
mov dword [esp], ecx
call fcn.004a0390
mov eax, dword [esp + 8]
mov dword [esp + 0xa0], eax
lea ecx, [0x63b500]
mov dword [esp], ecx
call fcn.0040b470
mov eax, dword [esp + 4]
lea ecx, [0x6006e0]
mov dword [eax], ecx
mov edx, dword [0x84f450]
test edx, edx
jne 0x600246
mov edx, dword [esp + 0xa0]
mov dword [eax + 4], edx
jmp 0x600259
lea edi, [eax + 4]
mov edx, eax
mov eax, dword [esp + 0xa0]
call fcn.0045f3a0
mov eax, edx
mov dword [esp], eax
call fcn.004330f0
test eax, eax
jne 0x6003c4
mov eax, dword [esp + 0xa0]
mov ebp, dword [eax]
mov eax, dword [esp + 0x164]
mov eax, dword [esp + 0xac]
movzx ebx, byte [esp + 0x23]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xbc]
jmp 0x600051
movzx eax, byte [esp + 0x23]
test al, al
jne 0x6004c2
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 8]
mov edx, dword [esp + 0x168]
mov ebx, dword [edx + 0xc]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.005f8460
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6004c2
xor eax, eax
movzx ebx, byte [esp + 0x23]
mov ebp, dword [esp + 0xa4]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xbc]
jmp 0x600051
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 8]
mov edx, dword [0x827fc0]
mov ebx, dword [0x827fc4]
mov ebp, dword [esp + 0x168]
mov esi, dword [ebp + 0xc]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.005f6770
movzx ebx, byte [esp + 0x10]
mov eax, dword [esp + 0xac]
mov ebp, dword [esp + 0xa4]
xor ecx, ecx
mov edx, dword [esp + 0xbc]
jmp 0x600051
mov eax, dword [esp + 0x168]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x78]
mov ecx, dword [ecx + 0x7c]
test edx, edx
jne 0x600370
nop
mov ecx, dword [0x826f1c]
lea edx, [0x6d0660]
mov eax, dword [edx + 0x18]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 8]
mov edx, dword [esp + 0x168]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 4]
mov esi, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.005f6770
movzx ebx, byte [esp + 0x10]
mov eax, dword [esp + 0xac]
mov ebp, dword [esp + 0xa4]
xor ecx, ecx
xor edx, edx
jmp 0x600051
call fcn.004337c0
add esp, 0x160
ret
mov dword [esp + 0x2c], eax
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
je 0x6003f1
mov edx, dword [eax + 4]
jmp 0x6003f3
mov edx, eax
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xe0], edx
mov dword [esp + 0xe4], ecx
lea eax, [0x665da4]
mov dword [esp], eax
mov dword [esp + 4], 0xf
lea eax, [esp + 0xe0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004b25f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x164]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00600800
mov eax, dword [esp + 0x164]
mov dword [esp], eax
mov eax, dword [esp + 0x168]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x14], eax
call fcn.005fd4a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
call fcn.004337c0
add esp, 0x160
ret
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 0x88]
mov edx, dword [eax + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x168]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.005fd4a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
call fcn.004337c0
add esp, 0x160
ret
mov eax, dword [0x8222e8]
mov ecx, dword [0x8222ec]
mov edx, dword [esp + 0x164]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00600800
mov eax, dword [0x8222e8]
mov ecx, dword [0x8222ec]
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
call fcn.004337c0
add esp, 0x160
ret
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov edx, dword [esp + 0xf8]
test eax, eax
setne bl
test ecx, ecx
xchg ebp, ebx
setne bl
xchg ebp, ebx
xor ebx, 1
xor ebp, 1
xchg ebp, eax
cmp al, bl
xchg ebp, eax
je 0x600640
test ecx, ecx
je 0x600617
mov eax, dword [esp + 0x164]
mov dword [esp], eax
mov eax, dword [esp + 0x168]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.005fd4a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
call fcn.004337c0
add esp, 0x160
ret
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], 0
mov dword [esp + 0x174], 0
call fcn.004337c0
add esp, 0x160
ret
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
lea eax, [0x633180]
mov dword [esp + 0xe0], eax
movzx eax, bl
lea ecx, [0x803280]
lea eax, [ecx + eax*8]
mov dword [esp + 0xe4], eax
lea eax, [0x675937]
mov dword [esp], eax
mov dword [esp + 4], 0x3f
lea eax, [esp + 0xe0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004b50a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408e30
mov eax, dword [esp + 8]
lea ecx, [0x634440]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434270
nop
call fcn.0045df90
jmp fcn.005ff870