Function at 0x5ad0e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x7220c0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x68
push ebx
push ebp
mov ebp, dword [esp + 0x80]
push esi
mov esi, ecx
mov ecx, dword [ebp + 0x9c8]
push edi
movzx edi, byte [ecx + 0x96c]
push edi
mov dword [esp + 0x58], esi
mov dword [esp + 0x74], edi
call fcn.004d2b50
mov dword [esp + 0x34], eax
mov al, byte [esi + 0x89]
xor ecx, ecx
xor ebx, ebx
test al, al
mov dword [esp + 0x88], ecx
jbe 0x5ad1bb
lea ecx, [ecx]
cmp bl, al
jb 0x5ad149
or cl, 0xff
jmp 0x5ad156
movzx ecx, bl
lea ecx, [ecx + ecx*4]
mov cl, byte [esi + ecx*8 + 0xa7]
mov edx, dword [0x7a3a28]
movzx ecx, cl
imul ecx, ecx, 0x1a0
add ecx, dword [edx + 0xac]
cmp bl, al
jb 0x5ad173
xor al, al
jmp 0x5ad18a
movzx eax, bl
lea eax, [eax + eax*4]
movzx edx, byte [esi + eax*8 + 0xa8]
test edx, edx
setl al
dec al
and eax, edx
movzx edx, al
push edx
call fcn.005be770
mov ecx, dword [esp + 0x88]
movsx eax, al
add ecx, eax
mov al, byte [esi + 0x89]
mov dword [esp + 0x88], ecx
movzx ecx, al
inc ebx
cmp ebx, ecx
jl 0x5ad140
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x34]
mov byte [edx + 0xf8], cl
add ecx, 0xa
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x8c]
xor ebx, ebx
xor eax, eax
cmp ecx, ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x88], eax
jne 0x5ad249
mov ecx, dword [esi + 0x24]
call fcn.0063e7f0
mov cl, byte [esi + 0xff]
mov al, byte [esi + 0xfe]
mov bl, byte [esi + 0xf5]
mov dl, byte [esi + 0xf9]
sub al, cl
mov cl, byte [esi + 0xf8]
add al, bl
movsx ebx, al
mov al, byte [esi + 0xf6]
sub cl, dl
add cl, al
mov al, byte [esi + 0xfc]
movsx edx, cl
mov cl, byte [esi + 0xf7]
mov dword [esp + 0x88], edx
sub al, byte [esi + 0xfd]
add al, cl
movsx ecx, al
mov eax, dword [esp + 0x88]
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x20]
add edx, eax
add edx, ebx
add ecx, edx
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x34]
mov byte [ecx + 0xf5], al
mov byte [ecx + 0xf9], bl
mov eax, dword [0x8327e4]
test eax, eax
je 0x5ad436
mov ecx, dword [ebp + 0x9c8]
push edi
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x64]
call fcn.005e5b00
lea ecx, [esp + 0x68]
mov dword [esp + 0x80], 0
call fcn.005b3190
test ebx, ebx
mov byte [esp + 0x80], 1
je 0x5ad320
push ebx
lea eax, [esp + 0x6c]
push str.___d__Natural_AC_
push eax
call fcn.005e5680
add esp, 0xc
lea ecx, [esp + 0x68]
push ecx
lea edx, [esp + 0x5c]
push edx
lea ecx, [esp + 0x68]
call fcn.005e5d10
mov ecx, dword [ebp + 0x9c8]
push eax
push edi
mov byte [esp + 0x88], 2
call fcn.004d2b50
mov ecx, eax
add ecx, 0x78
call fcn.005e5c50
lea ecx, [esp + 0x58]
mov byte [esp + 0x80], 1
call fcn.005e5c20
mov ecx, dword [ebp + 0x9c8]
push edi
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x64]
call fcn.005e5c50
mov eax, dword [esp + 0x88]
test eax, eax
je 0x5ad39a
push eax
lea eax, [esp + 0x6c]
push str.___d__Armor_AC_
push eax
call fcn.005e5680
add esp, 0xc
lea ecx, [esp + 0x68]
push ecx
lea edx, [esp + 0x5c]
push edx
lea ecx, [esp + 0x68]
call fcn.005e5d10
mov ecx, dword [ebp + 0x9c8]
push eax
push edi
mov byte [esp + 0x88], 3
call fcn.004d2b50
mov ecx, eax
add ecx, 0x78
call fcn.005e5c50
lea ecx, [esp + 0x58]
mov byte [esp + 0x80], 1
call fcn.005e5c20
mov ecx, dword [ebp + 0x9c8]
push edi
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x64]
call fcn.005e5c50
mov eax, dword [esp + 0x40]
test eax, eax
je 0x5ad411
push eax
lea eax, [esp + 0x6c]
push str.___d__Shield_AC_
push eax
call fcn.005e5680
add esp, 0xc
lea ecx, [esp + 0x68]
push ecx
lea edx, [esp + 0x5c]
push edx
lea ecx, [esp + 0x68]
call fcn.005e5d10
mov ecx, dword [ebp + 0x9c8]
push eax
push edi
mov byte [esp + 0x88], 4
call fcn.004d2b50
mov ecx, eax
add ecx, 0x78
call fcn.005e5c50
lea ecx, [esp + 0x58]
mov byte [esp + 0x80], 1
call fcn.005e5c20
mov ecx, dword [ebp + 0x9c8]
push edi
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x64]
call fcn.005e5c50
lea ecx, [esp + 0x68]
mov byte [esp + 0x80], 0
call fcn.005e5c20
lea ecx, [esp + 0x60]
mov dword [esp + 0x80], 0xffffffff
call fcn.005e5c20
mov ecx, dword [esi + 0x24]
mov eax, dword [ecx]
xor ebx, ebx
mov dword [esp + 0x88], ebx
call dword [eax + 0x10]
push eax
mov ecx, ebp
call fcn.00501950
test eax, eax
mov ecx, dword [esi + 0x24]
jne 0x5ad509
mov eax, dword [ebp + 4]
push eax
call fcn.00517a20
test eax, eax
je 0x5ad58d
test byte [eax + 4], 1
je 0x5ad58d
movsx ecx, byte [esi + 0x101]
movsx eax, byte [esi + 0x100]
sub eax, ecx
cmp eax, 0xa
jle 0x5ad48f
mov eax, 0xa
movsx edx, al
push 1
mov ecx, esi
mov dword [esp + 0x8c], edx
call fcn.005a5330
movsx ebx, al
mov eax, dword [0x8327e4]
test eax, eax
je 0x5ad58d
mov ecx, dword [ebp + 0x9c8]
push edi
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x64]
call fcn.005e5b00
lea ecx, [esp + 0x68]
mov dword [esp + 0x80], 5
call fcn.005b3190
lea ecx, [esp + 0x68]
mov byte [esp + 0x80], 5
call fcn.005e5c20
lea ecx, [esp + 0x60]
mov dword [esp + 0x80], 0xffffffff
call fcn.005e5c20
jmp 0x5ad58d
mov dword [esp + 0x44], 0
call fcn.005b4880
test eax, eax
jne 0x5ad557
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0xa2c]
push 2
mov ecx, eax
call fcn.005a4c20
test eax, eax
mov dword [esp + 0x48], eax
je 0x5ad557
mov ecx, eax
call fcn.00553cc0
test eax, eax
jle 0x5ad557
mov ecx, dword [esp + 0x48]
call fcn.005b4790
movzx eax, byte [eax + 0xad]
test eax, eax
mov dword [esp + 0x44], eax
jge 0x5ad563
mov ecx, dword [esi + 0x24]
call fcn.005b4880
test eax, eax
je 0x5ad576
movsx eax, byte [esi + 0xec]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
jl 0x5ad57d
mov eax, ecx
jmp 0x5ad57d
movsx eax, byte [esi + 0xec]
test al, al
jge 0x5ad58d
push 1
mov ecx, esi
call fcn.005a5330
movsx ebx, al
mov ecx, dword [esi + 0x24]
call fcn.005b4880
test eax, eax
je 0x5ad5ac
movsx ecx, byte [esi + 0xec]
xor eax, eax
test ecx, ecx
setge al
dec eax
and eax, ecx
jmp 0x5ad5b3
movsx eax, byte [esi + 0xec]
mov edx, dword [esp + 0x20]
movsx ecx, al
mov eax, dword [esp + 0x88]
add eax, ebx
add edx, eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x20], edx
mov dl, byte [esp + 0x88]
mov byte [eax + 0xfa], dl
mov byte [eax + 0xf6], bl
mov byte [eax + 0xf7], cl
mov ecx, dword [0x8327e4]
xor eax, eax
cmp ecx, eax
je 0x5ad73f
mov ecx, dword [ebp + 0x9c8]
push edi
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x64]
call fcn.005e5b00
lea ecx, [esp + 0x68]
mov dword [esp + 0x80], 8
call fcn.005b3190
test ebx, ebx
mov byte [esp + 0x80], 9
je 0x5ad69e
push ebx
lea eax, [esp + 0x6c]
push str.___d__Dex_Mod_
push eax
call fcn.005e5680
add esp, 0xc
lea ecx, [esp + 0x68]
push ecx
lea edx, [esp + 0x5c]
push edx
lea ecx, [esp + 0x68]
call fcn.005e5d10
mov ecx, dword [ebp + 0x9c8]
push eax
push edi
mov byte [esp + 0x88], 0xa
call fcn.004d2b50
mov ecx, eax
add ecx, 0x78
call fcn.005e5c50
lea ecx, [esp + 0x58]
mov byte [esp + 0x80], 9
call fcn.005e5c20
mov ecx, dword [ebp + 0x9c8]
push edi
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x64]
call fcn.005e5c50
mov eax, dword [esp + 0x88]
test eax, eax
je 0x5ad718
push eax
lea eax, [esp + 0x6c]
push str.___d__Dodge_Mod_
push eax
call fcn.005e5680
add esp, 0xc
lea ecx, [esp + 0x68]
push ecx
lea edx, [esp + 0x5c]
push edx
lea ecx, [esp + 0x68]
call fcn.005e5d10
mov ecx, dword [ebp + 0x9c8]
push eax
push edi
mov byte [esp + 0x88], 0xb
call fcn.004d2b50
mov ecx, eax
add ecx, 0x78
call fcn.005e5c50
lea ecx, [esp + 0x58]
mov byte [esp + 0x80], 9
call fcn.005e5c20
mov ecx, dword [ebp + 0x9c8]
push edi
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x64]
call fcn.005e5c50
lea ecx, [esp + 0x68]
mov byte [esp + 0x80], 8
call fcn.005e5c20
lea ecx, [esp + 0x60]
mov dword [esp + 0x80], 0xffffffff
call fcn.005e5c20
xor eax, eax
movsx ecx, byte [esi + 0xf8]
movsx edx, byte [esi + 0xfc]
mov dword [esp + 0x40], ecx
movsx ecx, byte [esi + 0xfa]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0xa74]
mov dword [esp + 0x30], ecx
mov cx, word [eax + 0x17e]
xor ebx, ebx
cmp cx, 0x28
mov dword [esp + 0x10], ebx
mov dword [esp + 0x24], edx
jg 0x5ad78d
mov cl, 3
jmp 0x5ad796
cmp cx, 0x3c
setge cl
inc cl
movzx eax, word [eax + 0xdc]
movzx edx, cl
mov ecx, ebp
mov dword [esp + 0x60], edx
mov dword [esp + 0x58], eax
call fcn.004ed5e0
mov esi, dword [esi + 0x24]
mov dword [esp + 0x4c], eax
mov eax, dword [esi + 0x128]
test eax, eax
mov dword [esp + 0x14], esi
jle 0x5ada5a
mov ecx, dword [esp + 0x54]
movzx ecx, word [ecx + 0x12e]
cmp ecx, eax
mov dword [esp + 0x88], ecx
jge 0x5ada5a
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x124]
mov ecx, dword [esp + 0x88]
mov esi, dword [eax + ecx*4]
mov ax, word [esi + 8]
mov ecx, dword [0x74673c]
movzx edx, ax
cmp edx, ecx
je 0x5ad818
mov ecx, dword [0x746740]
movzx eax, ax
cmp eax, ecx
jne 0x5ada5a
push 0
mov ecx, esi
call fcn.00503690
push 1
mov ecx, esi
mov dword [esp + 0x6c], eax
call fcn.00503690
push 2
mov ecx, esi
mov dword [esp + 0x4c], eax
call fcn.00503690
push 4
mov ecx, esi
mov edi, eax
call fcn.00503690
push 5
mov ecx, esi
mov ebx, eax
call fcn.00503690
push 6
mov ecx, esi
mov dword [esp + 0x48], eax
call fcn.00503690
mov ecx, dword [0x7a3a28]
mov al, byte [ecx + 0xaa]
mov esi, dword [esp + 0x44]
movzx edx, al
cmp edi, edx
mov edx, dword [0x74688c]
jne 0x5ad887
test ebx, ebx
jne 0x5ad887
cmp esi, edx
je 0x5ada35
movzx eax, al
cmp edi, eax
je 0x5ad898
cmp edi, dword [esp + 0x58]
je 0x5ad898
xor edi, edi
jmp 0x5ad89d
mov edi, 1
test ebx, ebx
je 0x5ad8ab
cmp ebx, dword [esp + 0x60]
je 0x5ad8ab
xor ecx, ecx
jmp 0x5ad8b0
mov ecx, 1
cmp esi, edx
je 0x5ad8e2
cmp esi, dword [0x746850]
mov eax, dword [esp + 0x4c]
jne 0x5ad8c4
test eax, eax
je 0x5ad8e2
cmp esi, dword [0x746854]
jne 0x5ad8d1
cmp eax, 1
je 0x5ad8e2
cmp esi, dword [0x746858]
jne 0x5ad8de
cmp eax, 2
je 0x5ad8e2
xor eax, eax
jmp 0x5ad8e7
mov eax, 1
test edi, edi
je 0x5ada35
test ecx, ecx
je 0x5ada35
test eax, eax
je 0x5ada35
mov ebx, dword [esp + 0x68]
cmp ebx, dword [0x7468b0]
jne 0x5ad945
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x124]
mov eax, dword [esp + 0x88]
mov ecx, dword [edx + eax*4]
movzx eax, word [ecx + 8]
mov edx, dword [0x74673c]
mov ecx, dword [esp + 0x10]
cmp eax, edx
mov eax, dword [esp + 0x48]
jne 0x5ad93d
add ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x5ad94f
sub ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x5ad94f
mov eax, dword [esp + 0x48]
mov edx, dword [0x74673c]
cmp ebx, dword [0x7468b4]
jne 0x5ad981
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx + 0x124]
mov esi, dword [esp + 0x88]
mov ecx, dword [ecx + esi*4]
movzx ecx, word [ecx + 8]
cmp ecx, edx
mov ecx, dword [esp + 0x1c]
jne 0x5ad97b
add ecx, eax
jmp 0x5ad97d
sub ecx, eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx + 0x124]
mov esi, dword [esp + 0x88]
mov ecx, dword [ecx + esi*4]
mov di, word [ecx + 8]
movzx ecx, di
cmp ecx, edx
mov ecx, dword [esp + 0x8c]
jne 0x5ad9bf
test ecx, ecx
jne 0x5ad9d5
cmp ebx, dword [0x7468b8]
jne 0x5ad9d5
cmp eax, dword [esp + 0x40]
jle 0x5ad9d5
mov dword [esp + 0x40], eax
jmp 0x5ad9d5
test ecx, ecx
jne 0x5ad9d5
cmp ebx, dword [0x7468b8]
jne 0x5ad9d5
cmp eax, dword [esp + 0x38]
jle 0x5ad9d5
mov dword [esp + 0x38], eax
movzx esi, di
cmp esi, edx
mov esi, dword [0x7468bc]
jne 0x5ad9f6
test ecx, ecx
jne 0x5ada08
cmp ebx, esi
jne 0x5ada08
cmp eax, dword [esp + 0x24]
jle 0x5ada08
mov dword [esp + 0x24], eax
jmp 0x5ada08
test ecx, ecx
jne 0x5ada08
cmp ebx, esi
jne 0x5ada08
cmp eax, dword [esp + 0x3c]
jle 0x5ada08
mov dword [esp + 0x3c], eax
movzx edi, di
cmp edi, edx
jne 0x5ada23
cmp ebx, dword [0x7468c0]
jne 0x5ada35
cmp eax, dword [esp + 0x30]
jle 0x5ada35
mov dword [esp + 0x30], eax
jmp 0x5ada35
test ecx, ecx
jne 0x5ada35
cmp ebx, esi
jne 0x5ada35
cmp eax, dword [esp + 0x2c]
jle 0x5ada35
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x14]
mov ecx, dword [edx + 0x128]
mov ebx, dword [esp + 0x10]
inc eax
cmp eax, ecx
mov dword [esp + 0x88], eax
jl 0x5ad7e2
mov eax, dword [0x8327e4]
test eax, eax
je 0x5add2a
mov esi, dword [esp + 0x70]
mov ecx, dword [ebp + 0x9c8]
push esi
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x18]
call fcn.005e5b00
lea ecx, [esp + 0x4c]
mov dword [esp + 0x80], 0xc
call fcn.005b3190
test ebx, ebx
mov byte [esp + 0x80], 0xd
je 0x5adb13
push ebx
lea eax, [esp + 0x50]
push str.___d__Effect_AC_Dodge_Bonus_
push eax
call fcn.005e5680
add esp, 0xc
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x74]
push edx
lea ecx, [esp + 0x1c]
call fcn.005e5d10
mov ecx, dword [ebp + 0x9c8]
push eax
push esi
mov byte [esp + 0x88], 0xe
call fcn.004d2b50
mov ecx, eax
add ecx, 0x78
call fcn.005e5c50
lea ecx, [esp + 0x70]
mov byte [esp + 0x80], 0xd
call fcn.005e5c20
mov ecx, dword [ebp + 0x9c8]
push esi
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x18]
call fcn.005e5c50
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x5adb8a
push eax
lea eax, [esp + 0x50]
push str.___d__Effect_AC_Natural_Bonus_
push eax
call fcn.005e5680
add esp, 0xc
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x74]
push edx
lea ecx, [esp + 0x1c]
call fcn.005e5d10
mov ecx, dword [ebp + 0x9c8]
push eax
push esi
mov byte [esp + 0x88], 0xf
call fcn.004d2b50
mov ecx, eax
add ecx, 0x78
call fcn.005e5c50
lea ecx, [esp + 0x70]
mov byte [esp + 0x80], 0xd
call fcn.005e5c20
mov ecx, dword [ebp + 0x9c8]
push esi
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x18]
call fcn.005e5c50
mov eax, dword [esp + 0x40]
test eax, eax
je 0x5adc07
mov ecx, dword [esp + 0x38]
add ecx, eax
push ecx
lea edx, [esp + 0x50]
push str.___d__Effect_AC_Armor_Bonus_
push edx
call fcn.005e5680
add esp, 0xc
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x74]
push ecx
lea ecx, [esp + 0x1c]
call fcn.005e5d10
mov ecx, dword [ebp + 0x9c8]
push eax
push esi
mov byte [esp + 0x88], 0x10
call fcn.004d2b50
mov ecx, eax
add ecx, 0x78
call fcn.005e5c50
lea ecx, [esp + 0x70]
mov byte [esp + 0x80], 0xd
call fcn.005e5c20
mov ecx, dword [ebp + 0x9c8]
push esi
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x18]
call fcn.005e5c50
mov edi, dword [esp + 0x24]
test edi, edi
je 0x5adc84
mov edx, dword [esp + 0x3c]
add edx, edi
push edx
lea eax, [esp + 0x50]
push str.___d__Effect_AC_Shield_Bonus_
push eax
call fcn.005e5680
add esp, 0xc
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x74]
push edx
lea ecx, [esp + 0x1c]
call fcn.005e5d10
mov ecx, dword [ebp + 0x9c8]
push eax
push esi
mov byte [esp + 0x88], 0x11
call fcn.004d2b50
mov ecx, eax
add ecx, 0x78
call fcn.005e5c50
lea ecx, [esp + 0x70]
mov byte [esp + 0x80], 0xd
call fcn.005e5c20
mov ecx, dword [ebp + 0x9c8]
push esi
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x18]
call fcn.005e5c50
mov eax, dword [esp + 0x30]
test eax, eax
je 0x5add03
mov ecx, dword [esp + 0x2c]
add ecx, eax
push ecx
lea edx, [esp + 0x50]
push str.___d__Effect_AC_Deflection_Bonus_
push edx
call fcn.005e5680
add esp, 0xc
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x1c]
call fcn.005e5d10
mov ecx, dword [ebp + 0x9c8]
push eax
push esi
mov byte [esp + 0x88], 0x12
call fcn.004d2b50
mov ecx, eax
add ecx, 0x78
call fcn.005e5c50
lea ecx, [esp + 0x24]
mov byte [esp + 0x80], 0xd
call fcn.005e5c20
mov ebp, dword [ebp + 0x9c8]
push esi
mov ecx, ebp
call fcn.004d2b50
add eax, 0x78
push eax
lea ecx, [esp + 0x18]
call fcn.005e5c50
lea ecx, [esp + 0x4c]
mov byte [esp + 0x80], 0xc
call fcn.005e5c20
lea ecx, [esp + 0x14]
mov dword [esp + 0x80], 0xffffffff
call fcn.005e5c20
jmp 0x5add2e
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x20]
lea edx, [eax + ecx]
add edx, ebx
add bl, cl
mov cl, byte [ebp + 0xfa]
add bl, al
mov eax, dword [esp + 0x8c]
add cl, bl
add esi, edx
test eax, eax
mov byte [ebp + 0xfa], cl
je 0x5add76
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
add ecx, eax
add ecx, edi
add ecx, edx
add esi, ecx
mov edi, dword [esp + 0x54]
mov ecx, edi
call fcn.005a9f50
movsx eax, al
mov byte [ebp + 0xfb], al
mov ecx, dword [edi + 0x24]
add esi, eax
call fcn.005b4880
test eax, eax
je 0x5adda2
sub esi, 4
mov byte [ebp + 0xfc], 0xfc
mov ecx, dword [esp + 0x78]
pop edi
mov ax, si
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x74
ret 8