Function at 0x534c00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x98d270]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x388]
cmp eax, dword [ecx + 8]
jbe 0x535ccf
sub esp, 0x408
lea edi, [esp + 0x284]
xor eax, eax
call fcn.00468c27
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x29c], ecx
mov ecx, dword [esp + 0x410]
mov dword [esp + 0x2a0], ecx
lea edi, [esp + 0x39c]
call fcn.00468c15
call fcn.00452ef0
lea edi, [esp + 0x124]
xor eax, eax
call fcn.00468c29
lea edi, [esp + 0x330]
call fcn.00468c15
lea ecx, [esp + 0x330]
mov dword [esp + 0x130], ecx
call fcn.00452ef0
mov ecx, dword [esp]
mov dword [esp + 0x12c], ecx
lea edi, [esp + 0x108]
xor eax, eax
call fcn.00468c29
lea edi, [esp + 0x2dc]
call fcn.00468c1b
lea ecx, [esp + 0x2dc]
mov dword [esp + 0x114], ecx
call fcn.00452ef0
mov ecx, dword [esp]
mov dword [esp + 0x110], ecx
mov eax, 1
lea ecx, [esp + 0x284]
mov edx, 1
xor ebx, ebx
lea ebp, [esp + 0x3c]
lea esi, [esp + 0x124]
xor edi, edi
xor eax, eax
mov dword [esp + 0x74], eax
xor eax, eax
mov dword [esp + 0x70], eax
mov eax, 1
jmp 0x534d29
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0xa8]
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], ebp
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xc4]
mov dword [esp + 0xd4], edi
test eax, eax
je 0x534daa
mov dword [esp + 0x7c], ebx
mov dword [esp + 0xd8], ebp
mov dword [esp + 0xa8], edx
mov dword [esp + 0x78], eax
mov dword [esp + 0xfc], ecx
mov dword [esp + 0xdc], esi
call fcn.0040cf50
mov eax, dword [esp]
mov dword [esp + 0xc4], eax
mov ecx, dword [esp + 0xfc]
mov edx, ecx
xor ebx, ebx
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x74]
mov edi, dword [esp + 0xd4]
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x58], ebp
xor ebp, ebp
mov dword [esp + 0x54], ebp
mov esi, dword [esp + 0xd8]
mov dword [esp + 0xc8], esi
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x74]
jmp 0x535494
mov dword [esp], edi
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x74]
mov dword [esp + 8], ecx
call fcn.00409db0
mov eax, dword [esp + 0xc]
lea ecx, [0x7752e4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00491d60
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0xd4]
mov ebx, eax
mov ebp, edx
xor esi, esi
xor edi, edi
jmp 0x534e16
mov esi, dword [esp + 0x70]
mov edi, dword [esp + 0xd4]
mov ebx, edx
mov esi, dword [esp + 0x9c]
mov edx, eax
mov edi, ecx
mov ecx, dword [esp + 0x70]
mov eax, ebp
mov ebp, dword [esp + 0xd4]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xa4], edi
mov dword [esp + 0xfc], edx
cmp esi, ecx
jge 0x5351dc
jae 0x53544d
mov dword [esp + 0x68], esi
lea edx, [esi + esi*8]
mov dword [esp + 0xa0], edx
lea edx, [ebp + edx*4]
lea edi, [esp + 0x188]
mov esi, edx
call fcn.004690e6
mov ecx, dword [esp + 0x188]
mov dword [esp + 0xcc], ecx
mov edx, dword [esp + 0x18c]
mov dword [esp + 0x5c], edx
mov esi, dword [esp + 0x68]
mov edi, dword [esp + 0x70]
mov dword [esp + 0xb4], eax
mov eax, 1
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xb4]
jmp 0x535317
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0xd4]
mov eax, dword [esp + 0xa8]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x70]
cmp ebx, 1
jne 0x534fa9
mov ecx, dword [esp + 0xa4]
inc ecx
cmp eax, ecx
jb 0x534ed7
mov edx, dword [esp + 0xfc]
jmp 0x534f1e
mov edx, dword [esp + 0xfc]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6eb540]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x70]
mov dword [esp + 0x48], ecx
mov ebx, dword [0x98d4e0]
lea ebp, [ecx + ecx*8]
lea ebp, [edx + ebp*4 - 0x24]
test ebx, ebx
je 0x534f83
mov dword [esp + 0xbc], edx
mov dword [esp + 0x4c], eax
mov dword [esp + 0xfc], ebp
lea eax, [0x6eb540]
mov dword [esp], eax
mov dword [esp + 4], ebp
lea eax, [esp + 0x188]
mov dword [esp + 8], eax
call fcn.00411600
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x70]
mov edi, ebp
lea esi, [esp + 0x188]
call fcn.004690e6
mov ebx, dword [esp + 0x9c]
mov ebp, eax
mov ecx, dword [esp + 0x48]
mov eax, edx
mov edx, dword [esp + 0x74]
jmp 0x534df1
mov edx, dword [esp + 0x74]
cmp edx, esi
jb 0x53543d
mov ebx, dword [esp + 0x68]
cmp ebx, esi
ja 0x535434
mov ecx, dword [esp + 0xa0]
shl ecx, 2
mov dword [esp + 0xa0], ecx
lea edi, [esp + 0x140]
xor eax, eax
call fcn.00468c27
mov ecx, edx
sub ecx, ebx
neg ecx
sar ecx, 0x1f
mov ebx, dword [esp + 0xa0]
and ebx, ecx
lea ecx, [ebp + ebx]
mov edi, ecx
mov ecx, dword [esp + 0x80]
test ecx, ecx
jbe 0x53542b
mov dword [esp + 0xf8], edi
mov ebx, dword [ebp + ebx + 0x10]
xor eax, eax
mov dword [esp + 0x64], eax
mov eax, 0xffffffff
mov dword [esp + 0x40], eax
xor eax, eax
jmp 0x5353ba
lea edi, [esp + 0x140]
call fcn.00468c27
mov ebx, dword [esp + 0x9c]
xor ecx, ecx
jmp 0x5350ba
mov esi, dword [esp + 0x9c]
mov ecx, ebp
mov ebx, dword [esp + 0x40]
test ebx, ebx
jl 0x53507c
cmp ecx, ebx
jbe 0x535424
lea ecx, [ebx + ebx*8]
mov ebx, dword [esp + 0xf8]
lea ecx, [ebx + ecx*4]
lea edi, [esp + 0x140]
mov ebx, esi
mov esi, ecx
call fcn.004690e6
mov ecx, 1
jmp 0x5350ba
cmp ecx, 1
jle 0x535093
lea edi, [esp + 0x140]
call fcn.00468c27
mov ebx, esi
xor ecx, ecx
jmp 0x5350ba
test ecx, ecx
jbe 0x53541b
lea edi, [esp + 0x140]
mov esi, dword [esp + 0xf8]
call fcn.004690e6
mov ebx, dword [esp + 0x9c]
mov ecx, 1
mov byte [esp + 0x3f], cl
lea edi, [esp + 0x1f4]
lea esi, [esp + 0x140]
call fcn.004690e6
movzx ecx, byte [esp + 0x3f]
test cl, cl
je 0x5351c2
mov ecx, dword [esp + 0xa4]
inc ecx
mov ebp, dword [esp + 0xa8]
cmp ebp, ecx
jb 0x5350fa
mov esi, dword [esp + 0xfc]
jmp 0x53513e
mov eax, dword [esp + 0xfc]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6eb540]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x9c]
mov esi, edx
mov ebp, eax
mov edx, dword [esp + 0x74]
mov dword [esp + 0x48], ecx
mov edi, dword [0x98d4e0]
lea eax, [ecx + ecx*8]
lea eax, [esi + eax*4 - 0x24]
test edi, edi
je 0x5351a9
mov dword [esp + 0xf0], esi
mov dword [esp + 0x98], ebp
mov dword [esp + 0xfc], eax
lea ecx, [0x6eb540]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea ecx, [esp + 0x1f4]
mov dword [esp + 8], ecx
call fcn.00411600
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x98]
mov esi, dword [esp + 0xf0]
mov edi, eax
mov eax, esi
lea esi, [esp + 0x1f4]
call fcn.004690e6
mov ecx, dword [esp + 0x48]
jmp 0x534df1
mov ebp, dword [esp + 0xa8]
mov ecx, dword [esp + 0xa4]
mov eax, dword [esp + 0xfc]
jmp 0x534df1
mov ecx, dword [esp + 0x420]
cmp ecx, 7
jne 0x5352cb
mov ecx, dword [esp + 0x41c]
cmp dword [ecx], 0x61666564
jne 0x535246
cmp word [ecx + 4], 0x6c75
jne 0x535246
cmp byte [ecx + 6], 0x74
jne 0x535246
mov dword [esp], edx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
call fcn.00409db0
mov eax, dword [esp + 0xc]
lea ecx, [0x775300]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00491d60
mov eax, dword [esp + 0xa8]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0xa4]
jmp 0x5352af
cmp dword [ecx], 0x37636672
jne 0x535299
cmp word [ecx + 4], 0x3430
jne 0x535299
cmp byte [ecx + 6], 0x39
jne 0x535299
mov dword [esp], edx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
call fcn.00409db0
mov eax, dword [esp + 0xc]
lea ecx, [0x77531c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00491d60
mov eax, dword [esp + 0xa8]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0xa4]
jmp 0x5352af
cmp dword [ecx], 0x69727473
jne 0x5352cb
cmp word [ecx + 4], 0x676e
jne 0x5352cb
cmp byte [ecx + 6], 0x73
jne 0x5352cb
mov dword [esp + 0x424], edx
mov dword [esp + 0x428], edi
mov dword [esp + 0x42c], eax
add esp, 0x408
ret
lea eax, [0x6bd160]
mov dword [esp], eax
lea eax, [0x773980]
mov dword [esp + 4], eax
call fcn.004385d0
mov eax, dword [esp + 0x80]
inc eax
mov ecx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0x68]
mov edi, dword [esp + 0x70]
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xa8]
mov ebx, dword [esp + 0x80]
add esi, ebx
mov dword [esp + 0x9c], esi
cmp edi, esi
jle 0x534eb9
jbe 0x535444
lea eax, [esi + esi*8]
lea eax, [ebp + eax*4]
lea edi, [esp + 0x164]
mov esi, eax
call fcn.004690e6
mov ecx, dword [esp + 0x168]
cmp ecx, edx
jne 0x534ea7
mov eax, dword [esp + 0x164]
mov dword [esp], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00403500
movzx eax, byte [esp + 0xc]
test al, al
jne 0x5352e3
jmp 0x534e99
mov esi, dword [esp + 0xf4]
lea edi, [esi + 0x24]
inc ebx
mov esi, dword [esp + 0x80]
mov esi, dword [esp + 0x9c]
mov dword [esp + 0x64], ebx
mov dword [esp + 0x40], ebp
mov ebx, ecx
mov ebp, dword [esp + 0xd4]
mov ecx, dword [esp + 0x80]
mov ebp, dword [esp + 0x64]
cmp ebp, ecx
jge 0x535048
mov dword [esp + 0xf4], edi
lea edi, [esp + 0x1ac]
mov esi, dword [esp + 0xf4]
call fcn.004690e6
cmp dword [esp + 0x1bc], ebx
jg 0x53503f
movzx ecx, byte [esp + 0x1cc]
test cl, cl
je 0x53540e
mov ecx, ebx
mov ebx, dword [esp + 0x40]
test ebx, ebx
jge 0x535028
mov ebx, ebp
jmp 0x535389
mov ecx, ebx
mov ebx, ebp
mov ebp, dword [esp + 0x40]
jmp 0x535389
xor eax, eax
mov ecx, eax
call fcn.00468a00
mov eax, ebx
call fcn.00468a00
xor eax, eax
mov ecx, eax
call fcn.00468a00
mov eax, ebx
mov ecx, esi
call fcn.00468a60
mov ecx, esi
call fcn.00468a40
mov eax, esi
mov ecx, edi
call fcn.00468a00
mov eax, esi
call fcn.00468a00
mov edi, eax
mov eax, dword [esp + 0xf4]
add eax, 0x24
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0xa4]
inc eax
mov dword [esp + 0x58], ebx
mov dword [esp + 0x54], ebp
mov dword [esp + 0xc8], esi
mov ebx, eax
mov ebp, ecx
mov esi, edi
mov edi, edx
mov edx, dword [esp + 0xfc]
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x78]
cmp ebx, eax
jge 0x534cfd
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xf8], edi
mov dword [esp + 0xa0], ebp
mov dword [esp + 0x9c], esi
mov dword [esp + 0xf4], ecx
lea edi, [esp + 0x1d0]
mov esi, ecx
call fcn.004690e6
lea eax, [0x6c1860]
mov dword [esp], eax
lea ecx, [esp + 0x108]
mov dword [esp + 4], ecx
lea edx, [esp + 0x1e8]
mov dword [esp + 8], edx
call fcn.0040d340
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x535529
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0xf8]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0xc8]
jmp 0x535454
lea eax, [0x6c1860]
mov dword [esp], eax
lea ecx, [esp + 0x108]
mov dword [esp + 4], ecx
lea edx, [esp + 0x1e8]
mov dword [esp + 8], edx
call fcn.0040d890
mov eax, dword [esp + 0xc]
mov byte [eax], 1
xor eax, eax
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0xf8]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0xc8]
mov edi, dword [esp + 0x54]
jmp 0x5355b6
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0xc8]
jmp 0x535454
mov edi, dword [esp + 0x6c]
inc edi
mov dword [esp + 0xac], eax
mov eax, edi
mov edi, ebx
mov ebx, dword [esp + 0xac]
mov dword [esp + 0xd4], edx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x58], ebp
mov dword [esp + 0x54], edi
mov dword [esp + 0xc8], esi
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], ebx
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x1ec]
mov ecx, dword [ecx + 0x64]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0x6c]
cmp dword [esp + 4], eax
jle 0x53557c
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x1ec]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0x2a8]
lea esi, [esp + 8]
call fcn.004690be
mov eax, dword [esp + 0x2b4]
test eax, eax
je 0x53565c
movzx eax, byte [esp + 0x2d8]
test al, al
jne 0x53565c
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0xc8]
jmp 0x53559f
mov eax, dword [esp + 0x2c0]
mov ecx, dword [esp + 0x2c4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x414]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x418]
mov dword [esp + 0xc], ecx
call fcn.004a6060
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp eax, 1
jne 0x5356c1
cmp byte [ecx], 0x2d
jne 0x5356c1
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0xc8]
jmp 0x53559f
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00536370
mov eax, dword [esp + 8]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0xc0], edx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x50], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00536530
movzx eax, byte [esp + 8]
test al, al
je 0x535715
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0xd0]
jmp 0x535719
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x60], eax
mov dword [esp + 0xd0], ecx
mov edx, dword [esp + 0x1e0]
lea ebx, [0x6bd2e0]
mov dword [esp], ebx
inc edx
mov dword [esp + 0x44], edx
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.0044e050
mov eax, dword [esp + 0x1e0]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
jl 0x535757
mov eax, ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0xec], edx
mov ebx, dword [esp + 0x1dc]
cmp ebx, edx
je 0x53578b
mov dword [esp], edx
mov dword [esp + 4], ebx
shl eax, 2
mov dword [esp + 8], eax
call fcn.00469320
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0xec]
mov eax, dword [esp + 0x1e0]
cmp eax, ecx
jae 0x535cc9
mov ecx, dword [esp + 0x6c]
mov dword [edx + eax*4], ecx
mov eax, dword [esp + 0x2b8]
mov ebx, dword [esp + 0x2bc]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], ebx
mov eax, dword [eax + 0x60]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
test eax, eax
jne 0x535816
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x104]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x16
jne 0x535816
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x104]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], ecx
mov eax, dword [esp + 0x60]
test eax, eax
je 0x535825
mov ecx, 1
jmp 0x53585c
movzx ecx, byte [esp + 0x2d8]
test cl, cl
jne 0x535838
mov ecx, 1
jmp 0x53585c
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x104]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
mov ecx, eax
mov eax, dword [esp + 0x60]
test cl, cl
je 0x535b37
test eax, eax
je 0x535871
mov ecx, dword [esp + 0xd0]
jmp 0x535893
mov eax, dword [esp + 0x2a8]
mov ecx, dword [esp + 0x2ac]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00535ce0
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0x94], eax
mov edx, dword [esp + 0xc0]
mov dword [esp], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 4], edx
lea edx, [0x70c26c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 9
call fcn.00536430
mov eax, dword [esp + 0x60]
test eax, eax
setne al
mov ecx, dword [esp + 0x70]
inc ecx
mov dword [esp + 0x90], ecx
movzx edx, byte [esp + 0x10]
lea edi, [esp + 0x260]
mov ebx, eax
xor eax, eax
call fcn.00468c27
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0x260], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x264], ecx
mov ecx, dword [esp + 0xec]
mov dword [esp + 0x26c], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x270], ecx
mov dword [esp + 0x274], ecx
mov ecx, dword [esp + 0x2b8]
mov ebp, dword [esp + 0x2bc]
mov dword [esp + 0x278], ecx
mov dword [esp + 0x27c], ebp
mov byte [esp + 0x280], bl
mov byte [esp + 0x281], dl
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x90]
cmp ecx, edx
jb 0x535978
mov ecx, edx
mov edx, dword [esp + 0xd4]
mov eax, dword [esp + 0x74]
jmp 0x5359ad
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6eb540]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xd4], edx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], eax
mov ebx, dword [0x98d4e0]
lea ebp, [ecx + ecx*8]
lea edi, [edx + ebp*4 - 0x24]
mov dword [esp + 0xe8], edi
test ebx, ebx
je 0x5359f8
lea eax, [0x6eb540]
mov dword [esp], eax
mov dword [esp + 4], edi
lea ecx, [esp + 0x260]
mov dword [esp + 8], ecx
call fcn.00411600
mov edi, dword [esp + 0xe8]
lea esi, [esp + 0x260]
call fcn.004690e6
lea eax, [0x6c18a0]
mov dword [esp], eax
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
lea edx, [esp + 0x1e8]
mov dword [esp + 8], edx
call fcn.0040d340
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
jle 0x535b14
mov ecx, dword [esp + 0x70]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x535cc4
lea edi, [esp + 0x23c]
mov esi, dword [esp + 0xe8]
call fcn.004690e6
mov eax, dword [esp + 0x70]
inc eax
mov ecx, dword [esp + 0x74]
cmp ecx, eax
jb 0x535a6d
mov edx, dword [esp + 0xd4]
jmp 0x535aa2
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6eb540]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x74], ecx
mov ebx, dword [0x98d4e0]
lea ebp, [eax + eax*8]
lea edi, [edx + ebp*4 - 0x24]
test ebx, ebx
je 0x535b02
mov dword [esp + 0xe4], edx
mov dword [esp + 0x8c], eax
mov dword [esp + 0xe8], edi
lea eax, [0x6eb540]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x23c]
mov dword [esp + 8], eax
call fcn.00411600
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0xe4]
mov edi, dword [esp + 0xe8]
lea esi, [esp + 0x23c]
call fcn.004690e6
mov ecx, dword [esp + 0x74]
jmp 0x535b23
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0xc8]
jmp 0x53559f
lea eax, [0x6c18a0]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
lea edx, [esp + 0x100]
mov dword [esp + 8], edx
call fcn.0040d890
mov eax, dword [esp + 0xc]
inc dword [eax]
lea eax, [0x6c18a0]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
lea edx, [esp + 0x100]
mov dword [esp + 8], edx
call fcn.0040d340
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
jne 0x535c9d
lea edi, [esp + 0x218]
xor eax, eax
call fcn.00468c27
mov ecx, dword [esp + 0x54]
inc ecx
mov edx, dword [esp + 0xec]
mov dword [esp + 0x224], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x228], edx
mov dword [esp + 0x22c], edx
mov edx, dword [esp + 0x100]
mov ebx, dword [esp + 0x104]
mov dword [esp + 0x230], edx
mov dword [esp + 0x234], ebx
mov edx, dword [esp + 0x58]
cmp edx, ecx
jb 0x535bf4
mov esi, dword [esp + 0xc8]
mov ebp, edx
jmp 0x535c29
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x6eb540]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x54], ecx
mov eax, dword [0x98d4e0]
lea edx, [ecx + ecx*8]
lea edi, [esi + edx*4 - 0x24]
test eax, eax
je 0x535c89
mov dword [esp + 0xe0], esi
mov dword [esp + 0x88], ebp
mov dword [esp + 0xe8], edi
lea eax, [0x6eb540]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x218]
mov dword [esp + 8], eax
call fcn.00411600
mov ecx, dword [esp + 0x54]
mov ebp, dword [esp + 0x88]
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0xe8]
mov eax, esi
lea esi, [esp + 0x218]
call fcn.004690e6
mov ecx, dword [esp + 0x54]
jmp 0x535cac
mov ecx, dword [esp + 0x54]
mov ebp, dword [esp + 0x58]
mov eax, dword [esp + 0xc8]
mov edx, dword [esp + 0xd4]
mov ebx, ecx
mov esi, eax
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
jmp 0x53559f
call fcn.00468a00
call fcn.00468a00
nop
call fcn.00467590
jmp fcn.00534c00