Function at 0x5269a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x5c]
cmp eax, dword [ecx + 8]
jbe 0x5290ca
sub esp, 0xdc
mov eax, dword [esp + 0xe8]
test eax, eax
jne 0x526b31
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x526a3b
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x8c74c0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9a991e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6610
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
je 0x526af4
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
add esp, 0xdc
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00522ff0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x526b25
mov dword [edx + 0x50], ecx
jmp 0x526ad7
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456fe0
jmp 0x526ad7
mov eax, dword [esp + 0xe4]
cmp byte [eax], 0x6e
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 8], ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
mov byte [esp + 0xc], al
xchg ebp, eax
call fcn.005236e0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
test ebx, ebx
jne 0x52901d
test ecx, ecx
je 0x527044
mov edx, dword [esp + 0xe4]
movzx ebx, byte [edx]
cmp bl, 0x22
je 0x526ea7
movzx eax, byte [esp + 0xfc]
test al, al
jne 0x526d47
cmp bl, 0x66
jne 0x526d19
mov eax, 4
lea ecx, [0x982630]
mov dword [esp + 0x44], eax
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0xf0]
mov dword [esp], edx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 8], edx
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x93d5c0]
mov dword [esp], ebp
call fcn.0040ae10
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x44]
mov dword [edi + 4], eax
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x526d08
mov ecx, dword [esp + 0x88]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x526cec
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
je 0x526ca9
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
add esp, 0xdc
ret
mov dword [esp], eax
lea ecx, [0xa4d7c0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00522ff0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x526ce0
mov dword [edx + 0x50], ecx
jmp 0x526c8c
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456fe0
jmp 0x526c8c
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456fe0
mov edi, edx
jmp 0x526c70
mov eax, dword [esp + 0x88]
call fcn.00456fe0
jmp 0x526c51
cmp bl, 0x6e
jne 0x526d2e
mov eax, 4
lea ecx, [0x98286c]
jmp 0x526bd0
cmp bl, 0x74
je 0x526bc5
mov eax, 6
lea ecx, [0x984177]
jmp 0x526bd0
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x526db3
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x8c74c0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9a991e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6610
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
je 0x526e6c
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
add esp, 0xdc
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00522ff0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x526e9d
mov dword [edx + 0x50], eax
jmp 0x526e4f
lea edi, [edx + 0x50]
call fcn.00456fe0
jmp 0x526e4f
mov dword [esp + 0x8c], eax
mov dword [esp + 0x48], ecx
mov dword [esp], edx
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xec]
mov dword [esp + 8], ecx
call fcn.005298d0
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
test al, al
jne 0x527008
movzx eax, byte [esp + 0xfc]
test al, al
je 0x5290b1
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x526f65
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x8c74c0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9a991e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6610
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], ecx
add esp, 0xdc
ret
mov eax, dword [esp + 0x48]
mov eax, dword [eax + 0x10]
mov ebp, dword [esp + 0x8c]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], ecx
add esp, 0xdc
ret
mov dword [esp + 0x70], ebp
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa0], edi
mov eax, dword [esp + 0xe4]
movzx ecx, byte [eax]
cmp cl, 0x66
ja 0x528e24
cmp cl, 0x22
je 0x52865d
cmp cl, 0x66
jne 0x52770c
movzx edx, byte [esp + 0xfc]
test dl, dl
je 0x527700
mov ebx, dword [esp + 0xe8]
cmp ebx, 4
je 0x5276e1
mov dword [esp + 0x7c], eax
mov eax, 1
mov byte [esp + 0x2f], al
mov eax, dword [esp + 0x7c]
movzx esi, byte [esp + 0x2f]
xchg esi, eax
test al, al
xchg esi, eax
je 0x5270cf
cmp ebx, 5
je 0x5276c5
mov esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x527584
cmp cl, 0x74
sete cl
nop
mov esi, ebp
and ebp, 0x1f
cmp ebp, 1
je 0x527564
cmp ebp, 0x14
je 0x527360
test dl, dl
je 0x527249
mov dword [esp], edi
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x527153
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x8c74c0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9a991e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6610
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
je 0x52720c
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
add esp, 0xdc
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00522ff0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x52723d
mov dword [edx + 0x50], ecx
jmp 0x5271ef
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456fe0
jmp 0x5271ef
mov dword [esp], edi
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00487dd0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x93d5c0]
mov dword [esp], ebp
call fcn.0040ae10
mov edi, dword [esp + 4]
mov dword [edi + 4], 4
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x527350
lea ecx, [0x982630]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x527334
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x5271ef
mov dword [esp], eax
lea ecx, [0xa4d7c0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00522ff0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x527325
mov dword [edx + 0x50], ecx
jmp 0x5271ef
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456fe0
jmp 0x5271ef
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456fe0
mov edi, edx
jmp 0x5272cb
lea eax, [0x982630]
call fcn.00456fe0
jmp 0x5272b0
mov byte [esp + 0x2e], cl
mov dword [esp], edi
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00485a50
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x527442
movzx ecx, byte [esp + 0x2e]
movzx ecx, cl
lea edx, [0xd895e0]
lea eax, [edx + ecx]
nop
movzx ecx, byte [0xdc3668]
test cl, cl
je 0x52743a
lea ecx, [0x8e6280]
mov dword [0xdc366c], ecx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x52742d
mov dword [0xdc3670], eax
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0xac]
test ecx, ecx
je 0x527425
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x5273f2
or edx, 0x80
mov ebx, dword [esp + 0xa0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004867f0
jmp 0x5271ef
xor eax, eax
xor ecx, ecx
xor edx, edx
jmp 0x5273f2
lea edi, [0xdc3670]
call fcn.00456fe0
jmp 0x5273c4
lea ecx, [0x8e6280]
jmp 0x5273c4
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00487dd0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x93d5c0]
mov dword [esp], ebp
call fcn.0040ae10
mov edi, dword [esp + 4]
mov dword [edi + 4], 4
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x527554
lea ecx, [0x982630]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x527538
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x5271ef
mov dword [esp], eax
lea ecx, [0xa4d7c0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00522ff0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x527529
mov dword [edx + 0x50], ecx
jmp 0x5271ef
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456fe0
jmp 0x5271ef
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456fe0
mov edi, edx
jmp 0x5274cf
lea eax, [0x982630]
call fcn.00456fe0
jmp 0x5274b4
mov dword [esp], edi
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
mov byte [esp + 0xc], cl
call fcn.00486900
jmp 0x5271ef
mov dword [esp], edi
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.00487dd0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x5275e2
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x8c74c0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9a991e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6610
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
jne 0x5271ef
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00522ff0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x5276b6
mov dword [edx + 0x50], ecx
jmp 0x5271ef
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456fe0
jmp 0x5271ef
cmp dword [eax], 0x736c6166
jne 0x5270c0
cmp byte [eax + 4], 0x65
xchg esi, ebx
setne bl
xchg esi, ebx
jmp 0x5270c5
cmp dword [eax], 0x65757274
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0x2f], al
xchg esi, eax
mov esi, dword [esp + 0xa4]
jmp 0x5270ac
mov ebx, dword [esp + 0xe8]
jmp 0x5270cf
cmp cl, 0x2d
je 0x527835
cmp cl, 0x30
jae 0x528652
mov ecx, 1
test cl, cl
je 0x527835
movzx ecx, byte [esp + 0xfc]
test cl, cl
je 0x52907c
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x527792
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x8c74c0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9a991e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6610
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xdc
ret
mov dword [esp], 0
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xe8]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0xec]
mov dword [esp + 0xc], edx
call fcn.00443a80
mov eax, dword [esp + 0x14]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x94], ecx
nop
mov edx, dword [esp + 0x70]
mov ebx, edx
and edx, 0x1f
cmp edx, 0xc
ja 0x528128
lea ebp, [edx - 2]
cmp ebp, 4
jbe 0x527e99
lea ebp, [edx - 7]
cmp ebp, 5
jbe 0x527c2b
cmp edx, 0x18
je 0x527bc8
xor edx, edx
test dl, dl
jne 0x527add
movzx eax, byte [esp + 0xfc]
test al, al
je 0x5279c4
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x527921
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x8c74c0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9a991e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6610
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xdc
ret
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x93d5c0]
mov dword [esp], ebp
call fcn.0040ae10
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x527acd
lea ecx, [0x984177]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x527ab4
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x5271ef
mov dword [esp], eax
lea ecx, [0xa4d7c0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00522ff0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x527aa7
mov dword [edx + 0x50], eax
jmp 0x5271ef
lea edi, [edx + 0x50]
call fcn.00456fe0
jmp 0x5271ef
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456fe0
mov edi, edx
jmp 0x527a4d
lea eax, [0x984177]
call fcn.00456fe0
jmp 0x527a32
mov edx, dword [esp + 0xa0]
mov dword [esp], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.004875d0
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
call fcn.00522e10
movzx eax, byte [esp + 8]
test al, al
jne 0x5271ef
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xec]
mov dword [esp + 8], eax
call fcn.00408720
mov eax, dword [esp + 0xc]
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0
lea ecx, [0x8c74c0]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], eax
lea eax, [0x9a8685]
mov dword [esp], eax
mov dword [esp + 4], 0x40
lea eax, [esp + 0xc4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c6610
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xdc
ret
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
cmp dword [0xdc1d18], ecx
je 0x527c0e
xor eax, eax
mov ecx, dword [esp + 0x94]
mov ebx, dword [esp + 0x70]
mov edx, eax
mov eax, dword [esp + 0x4c]
jmp 0x5278a4
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [0xdc1d1c]
mov dword [esp + 8], eax
call fcn.00402f30
movzx eax, byte [esp + 0xc]
jmp 0x527bf8
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.00466110
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test eax, eax
je 0x527daf
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x93d5c0]
mov dword [esp], ebp
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [esp + 0x9c], eax
mov dword [esp], 0
lea ecx, [0x98527e]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x94]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.00443900
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x9c]
mov dword [edi + 4], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x527da5
mov dword [edi], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x527d8c
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x5271ef
mov dword [esp], eax
lea ecx, [0xa4d7c0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00522ff0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x527d7f
mov dword [edx + 0x50], eax
jmp 0x5271ef
lea edi, [edx + 0x50]
call fcn.00456fe0
jmp 0x5271ef
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456fe0
mov edi, edx
jmp 0x527d25
call fcn.00456fe0
jmp 0x527d0a
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0xa0]
mov ebx, dword [eax]
shl ebx, 3
add ebx, 0xffffffc0
neg ebx
lea ebp, [ebx - 0x20]
mov dword [esp + 0x6c], ebp
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
cmp ebp, 0x20
sbb edi, edi
mov dword [esp + 0x68], edi
cmp ebx, 0x20
sbb eax, eax
mov dword [esp + 0x64], eax
cmp esi, 0x20
sbb eax, eax
mov dword [esp + 0x60], eax
mov ecx, ebp
mov eax, dword [esp + 0x38]
shr eax, cl
mov ecx, ebx
shl edx, cl
and eax, edi
mov ecx, esi
mov edi, dword [esp + 0x38]
shl edi, cl
mov esi, dword [esp + 0x60]
and edi, esi
mov esi, dword [esp + 0x64]
and edx, esi
or edx, eax
or edx, edi
mov ecx, ebx
mov edi, edx
shr edx, cl
and edx, esi
mov eax, dword [esp + 0x3c]
cmp edx, eax
setne dl
mov ecx, ebp
mov ebp, edi
shl edi, cl
mov ecx, ebx
mov eax, dword [esp + 0x38]
shl eax, cl
and eax, esi
shr eax, cl
and eax, esi
mov ebx, dword [esp + 0x68]
and edi, ebx
or eax, edi
mov ecx, dword [esp + 0x6c]
shr ebp, cl
mov ebx, dword [esp + 0x60]
and ebp, ebx
or eax, ebp
mov ebx, dword [esp + 0x38]
cmp eax, ebx
setne al
or eax, edx
test al, al
jne 0x527c5b
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10], eax
call fcn.004873b0
jmp 0x5271ef
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.00466920
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test eax, eax
je 0x52801d
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x93d5c0]
mov dword [esp], ebp
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [esp + 0x9c], eax
mov dword [esp], 0
lea ecx, [0x98527e]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x94]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.00443900
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x9c]
mov dword [edi + 4], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x528013
mov dword [edi], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x527ffa
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x5271ef
mov dword [esp], eax
lea ecx, [0xa4d7c0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00522ff0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x527fed
mov dword [edx + 0x50], eax
jmp 0x5271ef
lea edi, [edx + 0x50]
call fcn.00456fe0
jmp 0x5271ef
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456fe0
mov edi, edx
jmp 0x527f93
call fcn.00456fe0
jmp 0x527f78
mov dword [esp + 0x34], ecx
mov dword [esp + 0x40], edx
mov eax, dword [esp + 0xa0]
mov ebx, dword [eax]
shl ebx, 3
add ebx, 0xffffffc0
neg ebx
mov ebp, ebx
shr ebx, 5
cmp ebx, 1
sbb ebx, ebx
mov dword [esp + 0x6c], ebx
cmp ebp, 0x20
sbb esi, esi
mov dword [esp + 0x68], esi
sbb edi, edi
mov dword [esp + 0x78], edi
lea eax, [ebp - 0x20]
mov dword [esp + 0x64], eax
cmp eax, 0x20
sbb edi, edi
neg eax
cmp eax, 0x20
sbb ebx, ebx
mov dword [esp + 0x60], ebx
mov ecx, dword [esp + 0x64]
mov esi, dword [esp + 0x34]
shl esi, cl
mov ecx, eax
mov ebx, dword [esp + 0x34]
shr ebx, cl
mov ecx, ebp
shl edx, cl
and esi, edi
mov ebp, dword [esp + 0x60]
and ebx, ebp
mov ebp, dword [esp + 0x68]
and edx, ebp
or edx, ebx
or edx, esi
mov ebx, ecx
mov ecx, eax
mov esi, edx
shl edx, cl
xchg edi, ebx
not ebx
xchg edi, ebx
mov eax, dword [esp + 0x64]
or edi, eax
mov ecx, ebx
mov eax, dword [esp + 0x34]
shl eax, cl
and eax, ebp
shr eax, cl
mov ecx, edi
mov edi, esi
sar esi, cl
and eax, ebp
mov ebp, dword [esp + 0x60]
and edx, ebp
or eax, edx
mov edx, dword [esp + 0x6c]
xor edx, 0xffffffff
and edx, esi
or edx, eax
mov eax, dword [esp + 0x34]
cmp edx, eax
setne dl
mov ecx, dword [esp + 0x78]
not ecx
or ecx, ebx
sar edi, cl
mov ebx, dword [esp + 0x40]
cmp edi, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x527ec9
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
call fcn.00486e10
jmp 0x5271ef
lea ebp, [edx - 0xd]
cmp ebp, 1
jbe 0x5283e1
cmp edx, 0x14
jne 0x527899
mov edx, dword [esp + 0xe0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.005267d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xc]
test edx, edx
je 0x5281bc
nop
mov ecx, dword [esp + 0xe0]
mov ebx, dword [ecx + 0x4c]
test ebx, ebx
jne 0x5271ef
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00522ff0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x5281af
mov dword [edx + 0x50], eax
jmp 0x5271ef
lea edi, [edx + 0x50]
call fcn.00456fe0
jmp 0x5271ef
mov dword [esp + 0x84], ecx
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x70]
mov dword [esp + 8], edx
call fcn.00485a50
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x5282bf
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x5282b7
nop
movzx edx, byte [0xdc3668]
test dl, dl
je 0x5282ab
mov dword [0xdc366c], ecx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x528297
mov eax, dword [esp + 0x84]
mov dword [0xdc3670], eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0xbc]
test ecx, ecx
je 0x52828f
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x52825c
or edx, 0x80
mov ebx, dword [esp + 0xa0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004867f0
jmp 0x5271ef
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x52825c
lea edi, [0xdc3670]
mov eax, dword [esp + 0x84]
call fcn.00456fe0
jmp 0x52822e
mov eax, dword [esp + 0x84]
jmp 0x52822e
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x52825c
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x93d5c0]
mov dword [esp], ebp
call fcn.0040ae10
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x5283d1
lea ecx, [0x984177]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x5283b5
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x5271ef
mov dword [esp], eax
lea ecx, [0xa4d7c0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00522ff0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x5283a6
mov dword [edx + 0x50], ecx
jmp 0x5271ef
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456fe0
jmp 0x5271ef
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456fe0
mov edi, edx
jmp 0x52834c
lea eax, [0x984177]
call fcn.00456fe0
jmp 0x528331
mov dword [esp + 0x5c], edx
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00487dd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00465b80
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x52859a
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x93d5c0]
mov dword [esp], ebp
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [esp + 0x9c], eax
mov dword [esp], 0
lea ecx, [0x98527e]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x94]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.00443900
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x9c]
mov dword [edi + 4], eax
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x52858e
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x528575
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x5271ef
mov dword [esp], eax
lea ecx, [0xa4d7c0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00522ff0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x528568
mov dword [edx + 0x50], eax
jmp 0x5271ef
lea edi, [edx + 0x50]
call fcn.00456fe0
jmp 0x5271ef
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456fe0
mov edi, edx
jmp 0x52850e
mov eax, ecx
call fcn.00456fe0
jmp 0x5284f3
mov eax, dword [esp + 0x5c]
cmp eax, 0xd
jne 0x528609
nop
xorps xmm1, xmm1
ucomisd xmm1, xmm0
jbe 0x5285b9
movsd xmm1, qword [0xa44618]
pxor xmm0, xmm1
movsd xmm1, qword [0xa44600]
ucomisd xmm0, xmm1
jbe 0x528605
movsd xmm1, qword [0xa44608]
ucomisd xmm1, xmm0
setae al
test al, al
jne 0x528444
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00486d30
jmp 0x5271ef
xor eax, eax
jmp 0x5285d6
cmp eax, 0xe
jne 0x528612
xor eax, eax
jmp 0x5285d6
lea eax, [0x91b940]
mov dword [esp], eax
call fcn.0040ae10
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x1b
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x528642
lea eax, [0x994c6b]
mov dword [edi], eax
jmp 0x529063
lea eax, [0x994c6b]
call fcn.00456fe0
jmp 0x529063
cmp cl, 0x39
seta cl
jmp 0x527723
mov dword [esp], eax
mov ecx, dword [esp + 0xe8]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.005298d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x18]
mov ebx, dword [esp + 0x10]
test dl, dl
je 0x528d08
mov dword [esp + 0x54], eax
mov dword [esp + 0x90], ecx
mov dword [esp + 0x50], ebx
nop
mov edx, dword [esp + 0x70]
mov ebp, edx
and edx, 0x1f
cmp edx, 0x14
je 0x528ad8
cmp edx, 0x17
je 0x52882c
cmp edx, 0x18
jne 0x528713
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00443a80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xa0]
mov dword [esp], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.004875d0
jmp 0x5271ef
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x93d5c0]
mov dword [esp], ebp
call fcn.0040ae10
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x52881c
lea ecx, [0x984435]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x528803
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x5271ef
mov dword [esp], eax
lea ecx, [0xa4d7c0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00522ff0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x5287f6
mov dword [edx + 0x50], eax
jmp 0x5271ef
lea edi, [edx + 0x50]
call fcn.00456fe0
jmp 0x5271ef
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456fe0
mov edi, edx
jmp 0x52879c
lea eax, [0x984435]
call fcn.00456fe0
jmp 0x528781
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00487dd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x5289b6
mov eax, dword [0xdc0f48]
cmp dword [eax + 0x140], 0xffffffff
jne 0x5289a7
mov eax, dword [esp + 0x50]
lea ecx, [eax + eax*2]
mov edx, ecx
shl ecx, 1
sar ecx, 0x1f
shr ecx, 0x1d
lea ecx, [ecx + edx*2]
sar ecx, 3
mov dword [esp + 0x58], ecx
lea eax, [0x8ebd00]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.00440500
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [0xdc0f48]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x58]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x90]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x18], edx
call fcn.00521d10
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
test edx, edx
je 0x528961
nop
mov ecx, dword [esp + 0xe0]
mov ebx, dword [ecx + 0x4c]
test ebx, ebx
jne 0x5271ef
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00522ff0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x528954
mov dword [edx + 0x50], eax
jmp 0x5271ef
lea edi, [edx + 0x50]
call fcn.00456fe0
jmp 0x5271ef
mov edx, dword [esp + 0x58]
cmp ecx, edx
ja 0x529094
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004869d0
jmp 0x5271ef
mov eax, dword [esp + 0x50]
shr eax, 2
lea ecx, [eax + eax*2]
jmp 0x52889f
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x93d5c0]
mov dword [esp], ebp
call fcn.0040ae10
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x528ac8
lea ecx, [0x984435]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x528aac
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x5271ef
mov dword [esp], eax
lea ecx, [0xa4d7c0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00522ff0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x528a9d
mov dword [edx + 0x50], ecx
jmp 0x5271ef
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456fe0
jmp 0x5271ef
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456fe0
mov edi, edx
jmp 0x528a43
lea eax, [0x984435]
call fcn.00456fe0
jmp 0x528a28
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00485a50
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x528beb
mov dword [esp], 0
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xc], eax
call fcn.00443a80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004086a0
mov eax, dword [esp + 8]
nop
movzx ecx, byte [0xdc3668]
test cl, cl
je 0x528be3
lea ecx, [0x8eba40]
mov dword [0xdc366c], ecx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x528bd6
mov dword [0xdc3670], eax
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xb4]
test ecx, ecx
je 0x528bce
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x528b9b
or edx, 0x80
mov ebx, dword [esp + 0xa0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004867f0
jmp 0x5271ef
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x528b9b
lea edi, [0xdc3670]
call fcn.00456fe0
jmp 0x528b6d
lea ecx, [0x8eba40]
jmp 0x528b6d
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x93d5c0]
mov dword [esp], ebp
call fcn.0040ae10
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x528cf8
lea ecx, [0x984435]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x528cdf
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x5271ef
mov dword [esp], eax
lea ecx, [0xa4d7c0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00522ff0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x528cd2
mov dword [edx + 0x50], eax
jmp 0x5271ef
lea edi, [edx + 0x50]
call fcn.00456fe0
jmp 0x5271ef
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456fe0
mov edi, edx
jmp 0x528c78
lea eax, [0x984435]
call fcn.00456fe0
jmp 0x528c5d
movzx eax, byte [esp + 0xfc]
test al, al
je 0x529099
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x528d81
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x8c74c0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9a991e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6610
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xdc
ret
cmp cl, 0x6e
jne 0x52900f
movzx ecx, byte [esp + 0xfc]
test cl, cl
je 0x528e52
mov ecx, dword [esp + 0xe8]
cmp ecx, 4
je 0x529001
mov edx, 1
test dl, dl
jne 0x528ec7
mov eax, ebp
and ebp, 0x1f
lea ecx, [ebp - 0x14]
nop
cmp ecx, 3
ja 0x5271ef
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], eax
call fcn.00487dd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00488c30
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xa0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.004867f0
jmp 0x5271ef
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.00487dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x528f1e
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x8c74c0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9a991e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6610
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
jne 0x5271ef
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00522ff0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x528ff2
mov dword [edx + 0x50], ecx
jmp 0x5271ef
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456fe0
jmp 0x5271ef
cmp dword [eax], 0x6c6c756e
setne dl
jmp 0x528e4e
cmp cl, 0x74
je 0x52707b
jmp 0x52770c
mov eax, dword [ebx + 0x10]
mov dword [esp], edx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe8]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xec]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xdc
ret
mov eax, dword [esp + 0x5c]
mov dword [edi + 8], eax
lea eax, [0x8ff3c0]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0042cff0
lea eax, [0x8eba40]
mov dword [esp], eax
lea eax, [0xa44e80]
mov dword [esp + 4], eax
call fcn.0042cff0
call fcn.004570a0
lea eax, [0x8eba40]
mov dword [esp], eax
lea eax, [0xa44e78]
mov dword [esp + 4], eax
call fcn.0042cff0
lea eax, [0x8eba40]
mov dword [esp], eax
lea eax, [0xa44e70]
mov dword [esp + 4], eax
call fcn.0042cff0
nop
call fcn.004557a0
jmp fcn.005269a0