Function at 0x5740e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9aee30]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x2c8]
cmp eax, dword [ecx + 8]
jbe 0x576a8c
sub esp, 0x348
mov eax, dword [esp + 0x34c]
mov dword [esp], eax
mov ecx, dword [esp + 0x350]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x354]
mov dword [esp + 8], edx
call fcn.00494f80
mov eax, dword [esp + 0x35c]
mov ecx, dword [esp + 0x364]
cmp eax, ecx
jne 0x5741de
mov eax, dword [esp + 0x34c]
mov dword [esp], eax
mov eax, dword [esp + 0x350]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x354]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x368]
call fcn.0046d004
call fcn.00576aa0
movzx eax, byte [esp + 0x24]
test al, al
je 0x574180
xor eax, eax
xor ecx, ecx
jmp 0x5741bb
lea eax, [0x6d4f8c]
mov dword [esp + 0x2a0], eax
mov dword [esp + 0x2a4], 0x12
mov eax, dword [esp + 0x2a0]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.0040ab30
mov eax, dword [esp + 8]
mov ecx, eax
lea eax, [0x749a90]
mov edx, dword [esp + 0x364]
mov dword [esp + 0x380], edx
mov dword [esp + 0x384], eax
mov dword [esp + 0x388], ecx
add esp, 0x348
ret
mov eax, dword [esp + 0xc]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x170], ecx
mov edx, dword [eax + 0x50]
mov dword [esp], ecx
call edx
cmp dword [esp + 4], 0x14
je 0x574204
xor eax, eax
jmp 0x574220
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x6c]
mov edx, dword [esp + 0x170]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
sete al
test al, al
je 0x57491c
mov eax, dword [esp + 0x358]
mov dword [esp], eax
mov ecx, dword [esp + 0x35c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x360]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x364]
mov dword [esp + 0xc], ebx
call fcn.00573690
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
test eax, eax
jne 0x574900
mov dword [esp + 0x7c], ecx
mov ebx, dword [esp + 0x18]
lea ebp, [ebx + ecx]
cmp ecx, ebp
jg 0x5748a7
mov esi, dword [esp + 0x35c]
cmp esi, ebp
jl 0x5748a7
mov dword [esp + 0xb0], ebp
movzx esi, byte [esp + 0x1c]
xchg esi, eax
test al, al
xchg esi, eax
jne 0x57489e
mov esi, dword [esp + 0x10]
test esi, esi
jne 0x574895
mov esi, dword [esp + 0x360]
cmp esi, ebp
jb 0x576a82
cmp ecx, ebp
ja 0x576a79
mov edi, dword [esp + 0x14]
sub esi, ecx
mov dword [esp + 0x5c], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, ecx
mov ebp, dword [esp + 0x358]
lea ecx, [ebp + esi]
mov dword [esp + 0x124], ecx
cmp edi, 0x12
jg 0x57462a
cmp edi, 4
jle 0x574432
cmp edi, 6
je 0x5743cd
cmp edi, 0xc
je 0x57431e
cmp edi, 0x12
jne 0x5746fb
xor eax, eax
jmp 0x5769d0
mov dword [esp + 0x54], ebx
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
call fcn.0047b500
movzx eax, byte [esp + 0xc]
test al, al
je 0x57436c
mov dword [esp], 0
mov eax, dword [esp + 0x124]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
call fcn.00454610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
jmp 0x57439a
nop
lea eax, [0x69de40]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x6d98f6]
mov dword [eax], ecx
xor ecx, ecx
lea edx, [0x74924c]
mov ebx, eax
xor eax, eax
mov dword [esp + 0x68], edx
mov dword [esp + 0x130], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov ebx, eax
mov edx, dword [esp + 0x130]
mov eax, dword [esp + 0x68]
jmp 0x576924
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
call fcn.00572a20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xac], ebx
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x1a4], ebp
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0040abb0
mov eax, dword [esp + 0xc]
lea ecx, [0x6a3100]
mov ebx, eax
mov edx, dword [esp + 0x1a4]
mov eax, dword [esp + 0xac]
jmp 0x576924
cmp edi, 2
je 0x5745cd
cmp edi, 3
jne 0x574583
test ebx, ebx
je 0x5744e6
movzx eax, byte [ebp + esi]
movzx edx, al
cmp edx, 7
jg 0x57447d
cmp ebx, 1
jne 0x574462
test edx, edx
jne 0x57447d
movzx ebp, byte [ebx + ecx - 1]
mov esi, ecx
mov ecx, eax
mov edi, 1
shl edi, cl
lea eax, [edi - 1]
xchg ebp, ebx
test al, bl
xchg ebp, ebx
je 0x5744c0
lea eax, [0x6dda54]
mov dword [esp + 0x278], eax
mov dword [esp + 0x27c], 0x22
mov eax, dword [esp + 0x278]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.0040ab30
mov eax, dword [esp + 8]
xor ecx, ecx
xor ebx, ebx
xor edi, edi
xor edx, edx
lea ebp, [0x749a90]
jmp 0x574527
lea ecx, [ebx - 1]
mov ebx, ecx
shl ecx, 3
mov ebp, dword [esp + 0x5c]
dec ebp
mov edi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 1
sub ecx, edx
lea edx, [esi + ebp]
xor ebp, ebp
xor eax, eax
jmp 0x574527
lea eax, [0x6d7336]
mov dword [esp + 0x280], eax
mov dword [esp + 0x284], 0x16
mov eax, dword [esp + 0x280]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.0040ab30
mov eax, dword [esp + 8]
xor ecx, ecx
xor ebx, ebx
xor edi, edi
xor edx, edx
lea ebp, [0x749a90]
mov dword [esp + 0x64], ebp
mov dword [esp + 0x12c], eax
mov dword [esp + 0x338], edx
mov dword [esp + 0x33c], ebx
mov dword [esp + 0x340], edi
mov dword [esp + 0x344], ecx
lea ecx, [0x6b3560]
mov dword [esp], ecx
lea edx, [esp + 0x338]
mov dword [esp + 4], edx
call fcn.0040a900
mov eax, dword [esp + 8]
lea ecx, [0x6b3560]
mov ebx, eax
mov edx, dword [esp + 0x12c]
mov eax, dword [esp + 0x64]
jmp 0x576924
cmp edi, 4
jne 0x5746fb
mov dword [esp + 0x1a4], edx
mov dword [esp + 0xac], eax
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
call fcn.0040abb0
mov eax, dword [esp + 0xc]
lea ecx, [0x68a540]
mov ebx, eax
mov edx, dword [esp + 0x1a4]
mov eax, dword [esp + 0xac]
jmp 0x576924
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
call fcn.00572020
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xac], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x1a4], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040aa90
mov eax, dword [esp + 8]
lea ecx, [0x692b80]
mov ebx, eax
mov edx, dword [esp + 0x1a4]
mov eax, dword [esp + 0xac]
jmp 0x576924
cmp edi, 0x16
jg 0x5746e8
cmp edi, 0x13
je 0x57468b
cmp edi, 0x14
je 0x57464d
cmp edi, 0x16
jne 0x5746fb
xor eax, eax
jmp 0x576931
nop
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00454610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov ebx, eax
xor edx, edx
xor eax, eax
jmp 0x576924
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
call fcn.00573350
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xac], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x1a4], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov ebx, eax
mov edx, dword [esp + 0x1a4]
mov eax, dword [esp + 0xac]
jmp 0x576924
cmp edi, 0x17
je 0x5747fb
cmp edi, 0x18
je 0x574761
cmp edi, 0x1e
je 0x574704
xor ecx, ecx
xor ebx, ebx
jmp 0x576924
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
call fcn.00573460
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xac], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x1a4], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov ebx, eax
mov edx, dword [esp + 0x1a4]
mov eax, dword [esp + 0xac]
jmp 0x576924
lea edi, [esp + 0x324]
xor eax, eax
call fcn.0046cb2b
mov ecx, dword [esp + 0x124]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 8], ecx
call fcn.00573160
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x1a4], edx
lea edi, [esp + 0x324]
lea esi, [esp + 0xc]
call fcn.0046d00e
lea edi, [esp + 0x230]
lea esi, [esp + 0x324]
call fcn.0046d00e
lea ecx, [0x6cce60]
mov dword [esp], ecx
lea ecx, [esp + 0x230]
mov dword [esp + 4], ecx
call fcn.0040a900
mov eax, dword [esp + 8]
lea ecx, [0x6cce60]
mov ebx, eax
mov edx, dword [esp + 0x1a4]
mov eax, dword [esp + 0xac]
jmp 0x576924
lea edi, [esp + 0x324]
xor eax, eax
call fcn.0046cb2b
mov ecx, dword [esp + 0x124]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 8], ecx
call fcn.00572e80
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x1a4], edx
lea edi, [esp + 0x324]
lea esi, [esp + 0xc]
call fcn.0046d00e
lea edi, [esp + 0x254]
lea esi, [esp + 0x324]
call fcn.0046d00e
lea ecx, [0x6cce60]
mov dword [esp], ecx
lea ecx, [esp + 0x254]
mov dword [esp + 4], ecx
call fcn.0040a900
mov eax, dword [esp + 8]
lea ecx, [0x6cce60]
mov ebx, eax
mov edx, dword [esp + 0x1a4]
mov eax, dword [esp + 0xac]
jmp 0x576924
xor ecx, ecx
xor ebx, ebx
jmp 0x576848
xor ecx, ecx
xor ebx, ebx
jmp 0x576848
lea eax, [0x6d3335]
mov dword [esp + 0x298], eax
mov dword [esp + 0x29c], 0xe
mov eax, dword [esp + 0x298]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.0040ab30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x380], ecx
lea ecx, [0x749a90]
mov dword [esp + 0x384], ecx
mov dword [esp + 0x388], eax
add esp, 0x348
ret
mov dword [esp + 0x380], ecx
mov dword [esp + 0x384], eax
mov dword [esp + 0x388], edx
add esp, 0x348
ret
mov eax, dword [esp + 0x358]
mov dword [esp], eax
mov ecx, dword [esp + 0x35c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x360]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x364]
mov dword [esp + 0xc], ebx
call fcn.00573690
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
test eax, eax
jne 0x5761e4
mov dword [esp + 0xac], eax
movzx ebx, byte [esp + 0x369]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x18]
movzx edi, byte [esp + 0x1c]
mov eax, dword [esp + 0x14]
test bl, bl
je 0x574ce2
movzx ebx, byte [esp + 0x36a]
test bl, bl
je 0x57499b
mov ebx, 1
jmp 0x5749a0
mov ebx, 2
mov dword [esp + 0xb0], ecx
mov dword [esp + 0x1a4], edx
mov edx, dword [esp + 0x35c]
cmp edx, ecx
je 0x574c86
cmp ebx, ebp
jne 0x574bd5
mov ebx, dword [esp + 0x370]
cmp dword [ebx], eax
jne 0x574bd5
test esi, esi
je 0x5749e2
xchg edi, eax
test al, al
xchg edi, eax
je 0x574bd5
mov ebx, dword [esp + 0x74]
cmp dword [0x96f190], ebx
jne 0x574a84
mov dword [esp + 0xa8], esi
xchg edi, eax
mov byte [esp + 0x43], al
xchg edi, eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa0], ebp
mov eax, dword [0x96f194]
mov dword [esp], ebx
mov ecx, dword [esp + 0x170]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00404cd0
movzx eax, byte [esp + 0xc]
test al, al
je 0x574a67
mov esi, dword [esp + 0xa8]
mov ebx, dword [esp + 0xa4]
mov ebp, dword [esp + 0xa0]
mov ecx, dword [esp + 0xb0]
mov eax, dword [esp + 0xac]
movzx edi, byte [esp + 0x43]
mov edx, dword [esp + 0x1a4]
jmp 0x574ceb
mov eax, dword [esp + 0xa8]
test eax, eax
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x35c]
mov ebx, dword [esp + 0x74]
jmp 0x574a86
test esi, esi
jg 0x574b71
cmp dword [0x96f180], ebx
jne 0x574aba
mov eax, dword [0x96f184]
mov dword [esp], ebx
mov ecx, dword [esp + 0x170]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00404cd0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x574b16
lea eax, [0x6e1b73]
mov dword [esp + 0x268], eax
mov dword [esp + 0x26c], 0x2d
mov eax, dword [esp + 0x268]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.0040ab30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x380], ecx
lea ecx, [0x749bf8]
mov dword [esp + 0x384], ecx
mov dword [esp + 0x388], eax
add esp, 0x348
ret
mov eax, dword [esp + 0x34c]
mov dword [esp], eax
mov eax, dword [esp + 0x350]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x354]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.00494660
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x380], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x384], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp + 0x388], eax
add esp, 0x348
ret
mov eax, dword [esp + 0x358]
mov dword [esp], eax
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x360]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.00573690
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
test eax, eax
jne 0x574bb9
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
movzx edi, byte [esp + 0x1c]
jmp 0x574ceb
mov dword [esp + 0x380], ecx
mov dword [esp + 0x384], eax
mov dword [esp + 0x388], edx
add esp, 0x348
ret
mov eax, dword [esp + 0x34c]
mov dword [esp], eax
mov eax, dword [esp + 0x350]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x354]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x368]
call fcn.0046d004
call fcn.00576aa0
movzx eax, byte [esp + 0x24]
test al, al
je 0x574c2a
mov eax, dword [esp + 0x364]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x1a4]
jmp 0x574c6a
lea eax, [0x6def8f]
mov dword [esp + 0x24c], eax
mov dword [esp + 0x250], 0x25
mov eax, dword [esp + 0x24c]
mov dword [esp], eax
mov dword [esp + 4], 0x25
call fcn.0040ab30
mov edx, dword [esp + 8]
mov eax, dword [esp + 0xb0]
lea ecx, [0x749bf8]
mov dword [esp + 0x380], eax
mov dword [esp + 0x384], ecx
mov dword [esp + 0x388], edx
add esp, 0x348
ret
lea eax, [0x6d8fa0]
mov dword [esp + 0x270], eax
mov dword [esp + 0x274], 0x19
mov eax, dword [esp + 0x270]
mov dword [esp], eax
mov dword [esp + 4], 0x19
call fcn.0040ab30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x380], ecx
lea ecx, [0x749bf8]
mov dword [esp + 0x384], ecx
mov dword [esp + 0x388], eax
add esp, 0x348
ret
mov ebx, eax
mov eax, dword [esp + 0xac]
xchg edi, eax
mov byte [esp + 0x42], al
xchg edi, eax
mov dword [esp + 0x98], esi
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x78], ecx
mov dword [esp + 0xac], eax
mov dword [esp + 0x1a4], edx
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov edx, dword [esp + 0x170]
mov dword [esp + 4], edx
call fcn.00577370
movzx eax, byte [esp + 0x11]
test al, al
je 0x57612a
mov ebx, dword [esp + 0xc]
cmp ebx, 0x13
jne 0x574da2
mov ebx, dword [esp + 0x94]
test ebx, ebx
jne 0x574d89
mov ebp, dword [esp + 0x90]
cmp ebp, 0x14
jg 0x574d6d
cmp ebp, 0xc
je 0x574d7c
cmp ebp, 0x12
je 0x574d7c
cmp ebp, 0x14
je 0x574d7c
jmp 0x574d80
cmp ebp, 0x16
je 0x574d7c
cmp ebp, 0x1b
je 0x574d7c
cmp ebp, 0x1e
jne 0x574d80
mov eax, ebp
jmp 0x574db2
mov eax, ebp
mov ebp, 0x13
jmp 0x574db2
mov ebp, dword [esp + 0x374]
test ebp, ebp
jne 0x574d99
mov ebp, 0x13
mov eax, dword [esp + 0x90]
jmp 0x574db2
mov eax, dword [esp + 0x90]
mov ebp, ebx
mov ebx, dword [esp + 0x94]
cmp ebp, 0x17
jne 0x574dc5
cmp eax, 0x18
jne 0x574dc5
test ebx, ebx
jne 0x574dc5
mov ebp, 0x18
movzx ecx, byte [esp + 0x37c]
test cl, cl
je 0x574dd6
mov ebp, 0x11
movzx ecx, byte [esp + 0x369]
movzx edx, byte [esp + 8]
test cl, cl
je 0x574dfb
mov esi, ebp
mov edi, edx
mov edx, 0
mov dword [esp + 0x84], edx
mov edx, edi
jmp 0x574e3e
mov esi, dword [esp + 0x370]
test esi, esi
je 0x574e2a
mov esi, dword [esi]
test cl, cl
mov edi, edx
mov edx, 2
mov dword [esp + 0x84], edx
mov edx, 0
mov edx, esi
mov esi, ebp
mov ebp, edx
mov edx, 0
jmp 0x574e3e
test cl, cl
mov esi, ebp
mov edi, edx
mov edx, 0
mov dword [esp + 0x84], edx
mov edx, edi
mov dword [esp + 0xb0], esi
je 0x574e50
mov ecx, dword [esp + 0x84]
jmp 0x574ea2
movzx esi, byte [esp + 0x36a]
xchg esi, eax
test al, al
xchg esi, eax
je 0x574e92
mov esi, dword [esp + 0x370]
test esi, esi
je 0x574e80
mov ebp, dword [esi]
test cl, cl
mov esi, dword [esp + 0xb0]
mov ecx, 1
mov edx, 0
jmp 0x574ea2
test cl, cl
mov esi, dword [esp + 0xb0]
mov ecx, dword [esp + 0x84]
jmp 0x574ea2
test cl, cl
mov esi, dword [esp + 0xb0]
mov ecx, dword [esp + 0x84]
jne 0x574edf
movzx esi, byte [esp + 0x36b]
xchg esi, eax
test al, al
xchg esi, eax
je 0x574ed8
mov esi, dword [esp + 0x370]
test esi, esi
je 0x574ecf
mov ebp, dword [esi]
mov esi, dword [esp + 0xb0]
xor edx, edx
mov ecx, 3
jmp 0x574edf
mov esi, dword [esp + 0xb0]
jmp 0x574edf
mov esi, dword [esp + 0xb0]
mov dword [esp + 0x80], ebp
test dl, dl
jne 0x574efa
cmp ecx, ebx
jne 0x575f02
cmp ebp, eax
jne 0x575f02
xchg edi, eax
test al, al
xchg edi, eax
je 0x574f07
movzx ebp, byte [esp + 0x42]
jmp 0x574f1b
movzx ecx, byte [esp + 0x10]
movzx ebp, byte [esp + 0x42]
xchg ebp, eax
cmp al, cl
xchg ebp, eax
jne 0x575f02
mov edi, dword [esp + 0x98]
mov ebp, dword [esp + 0x78]
lea edx, [ebp + edi]
cmp ebp, edx
jg 0x575ea9
mov ebx, dword [esp + 0x35c]
cmp ebx, edx
jl 0x575ea9
mov ebx, dword [esp + 0x360]
cmp ebx, edx
jb 0x57683f
cmp ebp, edx
ja 0x576836
mov dword [esp + 0xa8], edx
mov eax, dword [esp + 0x34c]
mov dword [esp], eax
mov ecx, dword [esp + 0x350]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x354]
mov dword [esp + 8], edx
call fcn.004922a0
mov eax, dword [esp + 0x360]
mov ecx, dword [esp + 0x78]
sub eax, ecx
mov dword [esp + 0x58], eax
neg eax
sar eax, 0x1f
and eax, ecx
mov dword [esp + 0xa4], eax
mov ecx, dword [esp + 0xc]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x358]
add eax, edi
mov dword [esp + 0x120], eax
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov byte [esp + 0xc], 1
call fcn.004937e0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x57567e
mov edx, dword [eax + 8]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xf8], ebx
cmp edx, 0x60e8ee6c
ja 0x5753de
cmp edx, 0xfff7857
jne 0x57508a
lea ecx, [0x68bd00]
cmp eax, ecx
jne 0x57567e
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
call fcn.00572400
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
test eax, eax
jne 0x575067
mov edx, dword [esp + 0xf8]
test byte [edx], al
mov ebx, dword [0x9aef70]
mov ebp, dword [esp + 0xc]
test ebx, ebx
je 0x575065
call fcn.0046c8a0
mov dword [edi], ebp
mov ebx, dword [edx]
mov dword [edi + 4], ebx
mov dword [edx], ebp
mov edx, dword [esp + 0xa8]
mov dword [esp + 0x380], edx
mov dword [esp + 0x384], eax
mov dword [esp + 0x388], ecx
add esp, 0x348
ret
cmp edx, 0x24e1a6bd
jne 0x57526e
lea ecx, [0x6ce020]
cmp eax, ecx
jne 0x57567e
mov ecx, dword [esp + 0xb0]
cmp ecx, 0x17
jne 0x575191
lea edi, [esp + 0x324]
xor eax, eax
call fcn.0046cb2b
mov ecx, dword [esp + 0x120]
mov dword [esp], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x58]
mov dword [esp + 8], ecx
call fcn.00572e80
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0x24]
lea edi, [esp + 0x324]
lea esi, [esp + 0xc]
call fcn.0046d00e
lea edi, [esp + 0x188]
lea esi, [esp + 0x324]
call fcn.0046d00e
mov edi, dword [esp + 0xf8]
test byte [edi], al
mov ecx, dword [0x9aef70]
test ecx, ecx
je 0x57515b
mov dword [esp + 0x1a4], edx
lea eax, [0x6cce60]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x188]
mov dword [esp + 8], eax
call fcn.00412800
mov edx, dword [esp + 0x1a4]
mov edi, dword [esp + 0xf8]
lea esi, [esp + 0x188]
call fcn.0046d00e
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x380], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x384], eax
mov dword [esp + 0x388], edx
add esp, 0x348
ret
lea edi, [esp + 0x324]
xor eax, eax
call fcn.0046cb2b
mov ecx, dword [esp + 0x120]
mov dword [esp], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x58]
mov dword [esp + 8], ecx
call fcn.00573160
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0x24]
lea edi, [esp + 0x324]
lea esi, [esp + 0xc]
call fcn.0046d00e
lea edi, [esp + 0x174]
lea esi, [esp + 0x324]
call fcn.0046d00e
mov edi, dword [esp + 0xf8]
test byte [edi], al
mov ecx, dword [0x9aef70]
test ecx, ecx
je 0x575238
mov dword [esp + 0x1a4], edx
lea eax, [0x6cce60]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x174]
mov dword [esp + 8], eax
call fcn.00412800
mov edx, dword [esp + 0x1a4]
mov edi, dword [esp + 0xf8]
lea esi, [esp + 0x174]
call fcn.0046d00e
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x380], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x384], eax
mov dword [esp + 0x388], edx
add esp, 0x348
ret
cmp edx, 0x60e8ee6c
jne 0x57567e
lea edx, [0x6a3160]
cmp eax, edx
jne 0x57567e
mov eax, dword [esp + 0x98]
test eax, eax
je 0x57534c
mov edx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x358]
movzx ecx, byte [ebp + edx]
movzx edx, cl
cmp edx, 7
jg 0x5752d9
cmp eax, 1
jne 0x5752bb
test edx, edx
jne 0x5752d9
mov ebp, dword [esp + 0x120]
movzx esi, byte [eax + ebp - 1]
mov edi, 1
shl edi, cl
dec edi
xchg esi, eax
xchg edi, ebx
test bl, al
xchg edi, ebx
xchg esi, eax
je 0x575325
lea eax, [0x6dda54]
mov dword [esp + 0x1ec], eax
mov dword [esp + 0x1f0], 0x22
mov eax, dword [esp + 0x1ec]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.0040ab30
mov eax, dword [esp + 8]
mov ebx, dword [esp + 0xf8]
xor ecx, ecx
xor esi, esi
xor edx, edx
lea ebp, [0x749a90]
mov edi, eax
xor eax, eax
jmp 0x575396
lea ecx, [eax - 1]
mov esi, ecx
shl ecx, 3
mov edi, dword [esp + 0x58]
dec edi
mov eax, edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, 1
sub ecx, edx
lea edx, [ebp + edi]
xor ebp, ebp
xor edi, edi
jmp 0x575396
lea eax, [0x6d7336]
mov dword [esp + 0x1f4], eax
mov dword [esp + 0x1f8], 0x16
mov eax, dword [esp + 0x1f4]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.0040ab30
mov eax, dword [esp + 8]
mov ebx, dword [esp + 0xf8]
xor ecx, ecx
xor esi, esi
xor edx, edx
lea ebp, [0x749a90]
mov edi, eax
xor eax, eax
mov dword [ebx + 4], esi
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], ecx
mov eax, dword [0x9aef70]
test eax, eax
je 0x5753b9
mov eax, edi
call fcn.0046c8a0
mov dword [edi], edx
mov ecx, dword [ebx]
mov dword [edi + 4], ecx
mov edi, eax
mov dword [ebx], edx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x380], eax
mov dword [esp + 0x384], ebp
mov dword [esp + 0x388], edi
add esp, 0x348
ret
cmp edx, 0x75d2e54a
ja 0x5754f6
cmp edx, 0x6e41c0a8
jne 0x57545e
lea ecx, [0x688680]
cmp eax, ecx
jne 0x57567e
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
call fcn.00572260
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
test eax, eax
jne 0x57543b
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0xf8]
mov dword [ebx], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 0x380], edx
mov dword [esp + 0x384], eax
mov dword [esp + 0x388], ecx
add esp, 0x348
ret
cmp edx, 0x75d2e54a
jne 0x57567e
lea ecx, [0x6a30a0]
cmp eax, ecx
jne 0x57567e
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
call fcn.00572a20
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0xf8]
mov dword [esi + 4], eax
mov dword [esi + 8], ecx
mov eax, dword [0x9aef70]
test eax, eax
je 0x5754d1
call fcn.0046c8a0
mov dword [edi], edx
mov eax, dword [esi]
mov dword [edi + 4], eax
mov dword [esi], edx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x380], eax
mov dword [esp + 0x384], ebx
mov dword [esp + 0x388], ebp
add esp, 0x348
ret
cmp edx, 0xa16a554f
jne 0x575540
lea ecx, [0x688780]
cmp eax, ecx
jne 0x57567e
mov byte [ebx], 1
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x380], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x384], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp + 0x388], eax
add esp, 0x348
ret
cmp edx, 0xf4f32a18
jne 0x57567e
lea edx, [0x6886c0]
cmp eax, edx
jne 0x57567e
mov eax, dword [esp + 0x364]
mov ecx, dword [esp + 0xa8]
cmp eax, ecx
ja 0x576831
mov edx, dword [esp + 0x360]
sub edx, eax
mov ebp, ecx
sub ecx, eax
mov dword [esp + 0xb0], ecx
mov esi, edx
neg edx
sar edx, 0x1f
and eax, edx
mov edx, dword [esp + 0x358]
add edx, eax
lea edi, [esp + 0x1fc]
xor eax, eax
call fcn.0046cb27
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x1fc], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x200], ecx
movzx ecx, byte [esp + 0x42]
mov byte [esp + 0x204], cl
mov ecx, dword [esp + 0x120]
mov dword [esp + 0x208], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x20c], ecx
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x210], ecx
mov dword [esp + 0x214], edx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x218], ecx
mov dword [esp + 0x21c], esi
test byte [ebx], al
mov ecx, dword [0x9aef70]
test ecx, ecx
je 0x575646
lea eax, [0x6b4d60]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea eax, [esp + 0x1fc]
mov dword [esp + 8], eax
call fcn.00412800
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xa8]
mov edi, ebx
lea esi, [esp + 0x1fc]
call fcn.0046cfe6
mov dword [esp + 0x380], ebp
mov eax, dword [esp + 0xac]
mov dword [esp + 0x384], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp + 0x388], eax
add esp, 0x348
ret
mov eax, dword [esp + 0x354]
mov ecx, eax
and eax, 0x1f
nop
nop
cmp eax, 6
jbe 0x575b7b
cmp eax, 0x17
je 0x57593d
cmp eax, 0x18
jne 0x57592d
mov eax, dword [esp + 0xb0]
cmp eax, 0x13
jg 0x5757ad
cmp eax, 0xc
je 0x57571c
cmp eax, 0x12
jne 0x5756d6
mov eax, dword [esp + 0x98]
mov edx, dword [esp + 0x120]
xor ebx, ebx
jmp 0x5767ac
cmp eax, 0x13
jne 0x575818
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
call fcn.00573350
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov ebp, edx
mov edx, ecx
mov ecx, ebp
jmp 0x5766c1
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x58]
mov dword [esp + 8], edx
call fcn.0047b500
movzx eax, byte [esp + 0xc]
test al, al
je 0x57577a
mov dword [esp], 0
mov eax, dword [esp + 0x120]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
call fcn.00454610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
jmp 0x5766c1
nop
lea eax, [0x69de40]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x6d98f6]
mov dword [eax], ecx
xor ecx, ecx
lea edx, [0x74924c]
mov ebx, eax
xor eax, eax
jmp 0x5766c1
cmp eax, 0x16
jg 0x575806
cmp eax, 0x14
je 0x5757d1
cmp eax, 0x16
jne 0x575818
mov eax, dword [esp + 0x98]
mov edx, dword [esp + 0x120]
xor ebx, ebx
jmp 0x576732
mov dword [esp], 0
mov eax, dword [esp + 0x120]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
call fcn.00454610
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ecx, edx
xor ebx, ebx
xor edx, edx
jmp 0x5766c1
cmp eax, 0x1b
je 0x5758f8
cmp eax, 0x1e
je 0x5758bb
mov dword [esp + 0x31c], 0
mov dword [esp + 0x320], 0
mov dword [esp], eax
call fcn.0040aa30
mov eax, dword [esp + 4]
lea ecx, [0x692c00]
mov dword [esp + 0x31c], ecx
mov dword [esp + 0x320], eax
lea eax, [0x6df5a4]
mov dword [esp], eax
mov dword [esp + 4], 0x26
lea eax, [esp + 0x31c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c7a30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1b0], eax
mov dword [esp + 0x1b4], ecx
mov eax, dword [esp + 0x1b0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ab30
mov ebx, dword [esp + 8]
lea edx, [0x749a90]
xor ecx, ecx
xor eax, eax
jmp 0x5766c1
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
call fcn.00573460
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov ebp, edx
mov edx, ecx
mov ecx, ebp
jmp 0x5766c1
mov dword [esp], 0
mov eax, dword [esp + 0x120]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
call fcn.00454610
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ecx, edx
xor ebx, ebx
xor edx, edx
jmp 0x5766c1
cmp eax, 0x19
jne 0x575df4
xor eax, eax
jmp 0x57620a
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0x170]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x575aa1
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x170]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call fcn.004959b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x34c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x350]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x354]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00494540
mov eax, dword [esp + 0x120]
mov dword [esp + 0x1c8], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x1cc], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x1d0], eax
lea eax, [0x68a540]
mov dword [esp + 0xfc], eax
lea eax, [esp + 0x1c8]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0xfc]
test eax, eax
je 0x575a39
movzx ecx, byte [eax + 0xf]
nop
mov edx, ecx
and ecx, 0x1f
test dl, 0x20
jne 0x575a30
or ecx, 0x80
mov edx, dword [esp + 0x100]
jmp 0x575a3f
xor ecx, ecx
xor eax, eax
xor edx, edx
mov ebx, dword [esp + 0x34c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x350]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x354]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.00495600
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x380], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x384], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp + 0x388], eax
add esp, 0x348
ret
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0x170]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x120]
mov dword [esp], edx
mov edx, dword [esp + 0x98]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x74]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x170]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00573c80
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
test eax, eax
jne 0x575b58
mov dword [esp + 0x114], ecx
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x34c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x350]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x354]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00494540
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x114]
mov edx, dword [esp + 0xa8]
mov dword [esp + 0x380], edx
mov dword [esp + 0x384], eax
mov dword [esp + 0x388], ecx
add esp, 0x348
ret
cmp eax, 1
jne 0x575cab
mov eax, dword [esp + 0x98]
cmp eax, 1
jne 0x575c0a
mov eax, dword [esp + 0xa4]
mov edx, dword [esp + 0x358]
movzx eax, byte [edx + eax]
test al, al
jne 0x575bb1
xor eax, eax
xor edx, edx
xor ebx, ebx
jmp 0x575c4c
cmp al, 0xff
jne 0x575bc4
mov eax, 1
xor edx, edx
xor ebx, ebx
jmp 0x575c4c
lea eax, [0x6d39b5]
mov dword [esp + 0x1dc], eax
mov dword [esp + 0x1e0], 0xf
mov eax, dword [esp + 0x1dc]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.0040ab30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x354]
lea edx, [0x749a90]
mov ebx, eax
xor eax, eax
jmp 0x575c4c
lea eax, [0x6d39b5]
mov dword [esp + 0x1e4], eax
mov dword [esp + 0x1e8], 0xf
mov eax, dword [esp + 0x1e4]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.0040ab30
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 0x354]
lea edx, [0x749a90]
xor eax, eax
test edx, edx
jne 0x575c88
mov dword [esp + 0x60], edx
mov dword [esp + 0x128], ebx
mov edx, dword [esp + 0x34c]
mov dword [esp], edx
mov edx, dword [esp + 0x350]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov byte [esp + 0xc], al
call fcn.00494660
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0x128]
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x380], eax
mov dword [esp + 0x384], edx
mov dword [esp + 0x388], ebx
add esp, 0x348
ret
cmp eax, 2
je 0x575cb9
cmp eax, 5
jb 0x575df4
mov eax, dword [esp + 0x34c]
mov dword [esp], eax
mov edx, dword [esp + 0x350]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00494f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x7c]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 4
jne 0x575d68
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
call fcn.00572260
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
test eax, eax
jne 0x575dd1
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x34c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x350]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x354]
mov dword [esp + 8], ecx
sar eax, 0x1f
mov dword [esp + 0x10], eax
call fcn.00494a80
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x11c]
jmp 0x575dd1
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
call fcn.00572020
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
test eax, eax
jne 0x575dd1
mov dword [esp + 0x118], ecx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x34c]
mov dword [esp], eax
mov eax, dword [esp + 0x350]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x354]
mov dword [esp + 8], eax
call fcn.00494a80
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x118]
mov edx, dword [esp + 0xa8]
mov dword [esp + 0x380], edx
mov dword [esp + 0x384], eax
mov dword [esp + 0x388], ecx
add esp, 0x348
ret
mov eax, dword [esp + 0x34c]
mov dword [esp], eax
mov eax, dword [esp + 0x350]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00494f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6d2ca6]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xd
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00454370
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ab30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x380], ecx
lea ecx, [0x749bf8]
mov dword [esp + 0x384], ecx
mov dword [esp + 0x388], eax
add esp, 0x348
ret
lea eax, [0x6d3335]
mov dword [esp + 0x220], eax
mov dword [esp + 0x224], 0xe
mov eax, dword [esp + 0x220]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.0040ab30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x380], ecx
lea ecx, [0x749a90]
mov dword [esp + 0x384], ecx
mov dword [esp + 0x388], eax
add esp, 0x348
ret
mov eax, dword [esp + 0x34c]
mov dword [esp], eax
mov eax, dword [esp + 0x350]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x354]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x368]
call fcn.0046d004
call fcn.00576aa0
movzx eax, byte [esp + 0x24]
test al, al
je 0x575f5a
mov eax, dword [esp + 0x364]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x1a4]
jmp 0x57610e
mov eax, dword [esp + 0x74]
mov eax, dword [eax + 0x60]
mov ecx, dword [esp + 0x170]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0x1a4], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0xb0], ecx
lea edi, [esp + 0x2f4]
xor eax, eax
call fcn.0046cb26
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.0040aa30
mov eax, dword [esp + 4]
lea ecx, [0x692c00]
mov dword [esp + 0x2f4], ecx
mov dword [esp + 0x2f8], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0xbc], eax
movzx eax, byte [esp + 0x42]
mov byte [esp + 0xc0], al
lea eax, [0x6b0ea0]
mov dword [esp], eax
lea edx, [esp + 0xb4]
mov dword [esp + 4], edx
call fcn.0040a960
mov eax, dword [esp + 8]
lea ecx, [0x6b0ea0]
mov dword [esp + 0x2fc], ecx
mov dword [esp + 0x300], eax
lea eax, [0x6bd1a0]
mov dword [esp], eax
lea ecx, [esp + 0x368]
mov dword [esp + 4], ecx
call fcn.0040a900
mov eax, dword [esp + 8]
lea ecx, [0x6bd1a0]
mov dword [esp + 0x304], ecx
mov dword [esp + 0x308], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov dword [esp + 0x30c], ecx
mov dword [esp + 0x310], eax
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.0040aa30
mov eax, dword [esp + 4]
lea ecx, [0x692c00]
mov dword [esp + 0x314], ecx
mov dword [esp + 0x318], eax
lea eax, [0x6dfaf7]
mov dword [esp], eax
mov dword [esp + 4], 0x27
lea eax, [esp + 0x2f4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 5
mov dword [esp + 0x10], 5
call fcn.004c7a30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x228], eax
mov dword [esp + 0x22c], ecx
mov eax, dword [esp + 0x228]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ab30
mov edx, dword [esp + 8]
mov eax, dword [esp + 0x78]
lea ecx, [0x749bf8]
mov dword [esp + 0x380], eax
mov dword [esp + 0x384], ecx
mov dword [esp + 0x388], edx
add esp, 0x348
ret
mov dword [esp + 0x31c], 0
mov dword [esp + 0x320], 0
mov eax, dword [esp + 0x74]
test eax, eax
je 0x57614b
mov eax, dword [eax + 4]
mov dword [esp + 0x31c], eax
mov eax, dword [esp + 0x170]
mov dword [esp + 0x320], eax
lea eax, [0x6d59b6]
mov dword [esp], eax
mov dword [esp + 4], 0x13
lea eax, [esp + 0x31c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c7a30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x244], eax
mov dword [esp + 0x248], ecx
mov eax, dword [esp + 0x244]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ab30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x380], ecx
lea ecx, [0x749bf8]
mov dword [esp + 0x384], ecx
mov dword [esp + 0x388], eax
add esp, 0x348
ret
mov dword [esp + 0x380], ecx
mov dword [esp + 0x384], eax
mov dword [esp + 0x388], edx
add esp, 0x348
ret
mov ecx, dword [esp + 0x8c]
lea eax, [ecx + 1]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x64]
mov ebx, dword [esp + 0x170]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 0x8c]
cmp dword [esp + 4], eax
jle 0x5762d6
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0x170]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x2c0]
lea esi, [esp + 8]
call fcn.0046cfbe
lea edi, [esp + 0xc4]
lea esi, [esp + 0x2c0]
call fcn.0046cfbe
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x576200
lea eax, [0x6dd3f5]
mov dword [esp + 0x1d4], eax
mov dword [esp + 0x1d8], 0x21
mov eax, dword [esp + 0x1d4]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.0040ab30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x380], ecx
lea ecx, [0x749bf8]
mov dword [esp + 0x384], ecx
mov dword [esp + 0x388], eax
add esp, 0x348
ret
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x64]
mov edx, dword [esp + 0x170]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
jg 0x5762f5
xor eax, eax
jmp 0x576355
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0x170]
mov dword [esp], edx
mov dword [esp + 4], 0
call ecx
lea edi, [esp + 0x2c0]
lea esi, [esp + 8]
call fcn.0046cfbe
mov eax, dword [esp + 0x2d0]
cmp dword [0x96f198], eax
je 0x576333
xor eax, eax
jmp 0x576355
mov ecx, dword [esp + 0x2d4]
mov edx, dword [0x96f19c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00404cd0
movzx eax, byte [esp + 0xc]
test al, al
je 0x57646e
mov eax, dword [esp + 0x364]
mov ecx, dword [esp + 0xa8]
cmp eax, ecx
ja 0x5766bc
mov eax, dword [esp + 0x34c]
mov dword [esp], eax
mov ecx, dword [esp + 0x350]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x354]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.00493540
mov eax, dword [esp + 0x360]
mov ecx, dword [esp + 0x364]
sub eax, ecx
mov edx, dword [esp + 0xa8]
sub edx, ecx
mov ebp, eax
neg eax
sar eax, 0x1f
and ecx, eax
mov eax, dword [esp + 0x358]
add eax, ecx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x1a0], ecx
mov esi, dword [esp + 0x14]
mov dword [esp + 0x19c], esi
mov edi, dword [esp + 0x18]
mov dword [esp + 0x9c], edi
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
call fcn.0040abb0
mov eax, dword [esp + 0xc]
nop
lea ecx, [0x694360]
mov dword [esp + 0x104], ecx
mov dword [esp + 0x108], eax
mov ecx, dword [esp + 0x104]
test ecx, ecx
je 0x576437
movzx edx, byte [ecx + 0xf]
nop
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x57643d
or edx, 0x80
jmp 0x57643d
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x1a0]
mov dword [esp], ebx
mov ebx, dword [esp + 0x19c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00494540
xor eax, eax
xor ecx, ecx
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0x1a4]
jmp 0x576492
mov esi, dword [esp + 0x88]
inc esi
mov edx, eax
mov ebx, ecx
mov eax, esi
mov ecx, ebp
mov dword [esp + 0x88], eax
mov dword [esp + 0x50], ecx
mov dword [esp + 0xac], edx
mov dword [esp + 0x1a4], ebx
mov ebp, dword [esp + 0x74]
mov esi, dword [ebp + 0x64]
mov edi, dword [esp + 0x170]
mov dword [esp], edi
call esi
mov eax, dword [esp + 0x88]
cmp dword [esp + 4], eax
jle 0x57668b
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0x170]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x13c]
lea esi, [esp + 8]
call fcn.0046cfbe
mov eax, dword [esp + 0x88]
test eax, eax
jne 0x576541
mov ecx, dword [esp + 0x14c]
cmp dword [0x96f198], ecx
je 0x576514
xor ecx, ecx
jmp 0x576543
mov eax, dword [esp + 0x150]
mov edx, dword [0x96f19c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00404cd0
movzx eax, byte [esp + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x88]
jmp 0x576543
xor ecx, ecx
test cl, cl
je 0x57655e
mov ebp, dword [esp + 0x50]
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0x1a4]
jmp 0x576482
mov ecx, dword [esp + 0x34c]
mov dword [esp], ecx
mov edx, dword [esp + 0x350]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x354]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00493540
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1a0], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x19c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x9c], edx
mov ebx, dword [esp + 0x154]
mov ebp, dword [esp + 0x158]
mov dword [esp], ebx
mov dword [esp + 4], ebp
lea ebx, [0x6d01e4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 4
call fcn.0048f5e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00576eb0
lea edi, [esp + 0x2a8]
lea esi, [esp + 8]
call fcn.0046d004
mov eax, dword [esp + 0x1a0]
mov dword [esp], eax
mov eax, dword [esp + 0x19c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x50]
mov dword [esp + 0x18], ebx
lea edi, [esp + 0x1c]
lea esi, [esp + 0x2a8]
call fcn.0046d004
call fcn.005740e0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
test eax, eax
jne 0x576668
mov ebp, dword [esp + 0x34]
jmp 0x576482
mov edx, dword [esp + 0xa8]
mov dword [esp + 0x380], edx
mov dword [esp + 0x384], eax
mov dword [esp + 0x388], ecx
add esp, 0x348
ret
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x380], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x384], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp + 0x388], eax
add esp, 0x348
ret
call fcn.0046c970
test edx, edx
jne 0x57670e
mov dword [esp + 0xac], edx
mov dword [esp + 0x1a4], ebx
mov edx, dword [esp + 0x34c]
mov dword [esp], edx
mov edx, dword [esp + 0x350]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x354]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00494d50
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0x1a4]
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x380], eax
mov dword [esp + 0x384], edx
mov dword [esp + 0x388], ebx
add esp, 0x348
ret
inc ebx
cmp ebx, eax
jge 0x57677e
lea ebp, [ebx + edx]
cmp byte [ebp], 0x80
jb 0x576731
lea eax, [0x6de80d]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], 0x24
mov eax, dword [esp + 0x1b8]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.0040ab30
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x749a90]
xor ebx, ebx
jmp 0x5767a0
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00454610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov ebp, ebx
mov ebx, eax
mov eax, ebp
jmp 0x5766c1
inc ebx
cmp ebx, eax
jge 0x576804
movzx ebp, byte [ebx + edx]
lea esi, [ebp - 0x30]
xchg esi, eax
cmp al, 9
xchg esi, eax
jbe 0x5767ab
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x5767ab
lea eax, [0x6e01d5]
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], 0x28
mov eax, dword [esp + 0x1c0]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.0040ab30
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x749a90]
xor ebx, ebx
jmp 0x576826
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00454610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov ebp, ebx
mov ebx, eax
mov eax, ebp
jmp 0x5766c1
call fcn.0046c970
mov eax, ebp
mov ecx, edx
call fcn.0046c970
mov ecx, edx
mov edx, ebx
call fcn.0046c950
test eax, eax
jne 0x576908
test ecx, ecx
je 0x5768ec
mov dword [esp + 0x1a4], edx
mov dword [esp + 0xac], eax
nop
mov dword [esp + 0x10c], ecx
mov dword [esp + 0x110], ebx
mov ecx, dword [esp + 0x10c]
test ecx, ecx
je 0x5768a0
movzx ebx, byte [ecx + 0xf]
nop
mov esi, ebx
and ebx, 0x1f
xchg esi, eax
test al, 0x20
xchg esi, eax
jne 0x576897
or ebx, 0x80
mov esi, dword [esp + 0x110]
jmp 0x5768a6
xor ebx, ebx
xor ecx, ecx
xor esi, esi
mov eax, dword [esp + 0x34c]
mov dword [esp], eax
mov eax, dword [esp + 0x350]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x354]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebx
call fcn.00494540
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0x1a4]
mov ebp, dword [esp + 0xb0]
mov dword [esp + 0x380], ebp
mov dword [esp + 0x384], eax
mov dword [esp + 0x388], edx
add esp, 0x348
ret
mov dword [esp + 0x380], ebp
mov dword [esp + 0x384], eax
mov dword [esp + 0x388], edx
add esp, 0x348
ret
mov ebp, dword [esp + 0xb0]
jmp 0x576848
inc eax
cmp eax, ebx
jge 0x57697c
lea edx, [eax + ecx]
cmp byte [edx], 0x80
jb 0x576930
lea eax, [0x6de80d]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], 0x24
mov eax, dword [esp + 0x288]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.0040ab30
mov eax, dword [esp + 8]
xor ecx, ecx
xor edx, edx
lea ebx, [0x749a90]
jmp 0x57699e
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00454610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
xor ebx, ebx
xor eax, eax
mov dword [esp + 0x134], eax
mov dword [esp + 0x6c], ebx
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0040ab30
mov ebx, dword [esp + 8]
lea ecx, [0x6929c0]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x134]
jmp 0x576924
inc eax
cmp eax, ebx
jge 0x576a26
movzx edx, byte [eax + ecx]
lea ebp, [edx - 0x30]
xchg ebp, eax
cmp al, 9
xchg ebp, eax
jbe 0x5769cf
cmp dl, 0x20
je 0x5769cf
lea eax, [0x6e01d5]
mov dword [esp + 0x290], eax
mov dword [esp + 0x294], 0x28
mov eax, dword [esp + 0x290]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.0040ab30
mov eax, dword [esp + 8]
xor ecx, ecx
xor edx, edx
lea ebx, [0x749a90]
jmp 0x576a48
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00454610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
xor ebx, ebx
xor eax, eax
mov dword [esp + 0x138], eax
mov dword [esp + 0x70], ebx
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0040ab30
mov ebx, dword [esp + 8]
lea ecx, [0x6929c0]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x138]
jmp 0x576924
mov eax, ecx
mov ecx, ebp
call fcn.0046c970
mov ecx, ebp
mov edx, esi
call fcn.0046c950
nop
call fcn.0046b490
jmp fcn.005740e0