Function at 0x5ad940
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xac]
cmp eax, dword [ecx + 8]
jbe 0x5afccd
sub esp, 0x12c
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx]
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx + 8]
test edx, edx
jne 0x5afad2
lea edi, [esp + 0xd4]
xor eax, eax
call fcn.0045f0b5
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0x44]
test edx, edx
je 0x5adb59
nop
mov word [esp + 0x46], 0
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x5ad9b9
lea ebx, [esp + 0xd4]
jmp 0x5adb06
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x5afcb4
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x5ada15
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x5ada7f
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x5ada86
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x5adb06
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x5adae8
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x46]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
lea eax, [0x5b2900]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0xb8]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [ecx + 0x48]
test dl, dl
je 0x5adcf7
nop
mov word [esp + 0x44], 0
mov byte [esp + 0x45], 5
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x5adb89
lea ebx, [esp + 0xd4]
jmp 0x5adccf
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x5afc9c
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x5adbe5
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x5adc48
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x5adc4f
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
lea ebx, [esp + 0xd4]
jmp 0x5adccf
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x5adcb1
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x44]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [0x68c978]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0x50]
test edx, edx
je 0x5adec6
nop
mov word [esp + 0x42], 0
mov byte [esp + 0x43], 0xa
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x5add26
lea ebx, [esp + 0xd4]
jmp 0x5ade73
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x5afc84
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x5add82
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x5addec
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x5addf3
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x5ade73
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x5ade55
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x42]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
lea eax, [0x5b2690]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0xb0]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0x5c]
test edx, edx
je 0x5ae095
nop
mov word [esp + 0x40], 0
mov byte [esp + 0x41], 0xb
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x5adef5
lea ebx, [esp + 0xd4]
jmp 0x5ae042
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x5afc6c
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x5adf51
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x5adfbb
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x5adfc2
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x5ae042
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x5ae024
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x40]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
lea eax, [0x5b2460]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0xa8]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [ecx + 0x64]
test dl, dl
je 0x5ae265
nop
mov word [esp + 0x3e], 0
mov byte [esp + 0x3f], 0x23
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x5ae0c5
lea ebx, [esp + 0xd4]
jmp 0x5ae212
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x5afc54
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x5ae121
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x5ae18b
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x5ae192
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x5ae212
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x5ae1f4
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x3e]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
lea eax, [0x5b22a0]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0x78]
test edx, edx
je 0x5ae434
nop
mov word [esp + 0x3c], 0
mov byte [esp + 0x3d], 0xd
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x5ae294
lea ebx, [esp + 0xd4]
jmp 0x5ae3e1
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x5afc3c
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x5ae2f0
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x5ae35a
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x5ae361
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x5ae3e1
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x5ae3c3
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x3c]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
lea eax, [0x5b2030]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x98]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0x84]
test edx, edx
je 0x5ae606
nop
mov word [esp + 0x3a], 0
mov byte [esp + 0x3b], 0x32
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x5ae466
lea ebx, [esp + 0xd4]
jmp 0x5ae5b3
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x5afc24
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x5ae4c2
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x5ae52c
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x5ae533
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x5ae5b3
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x5ae595
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x3a]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
lea eax, [0x5b1dc0]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x90]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [ecx + 0x8c]
test dl, dl
je 0x5ae7db
nop
mov word [esp + 0x38], 0
mov word [esp + 0x38], 0x1ff
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x5ae63b
lea ebx, [esp + 0xd4]
jmp 0x5ae788
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x5afc0c
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x5ae697
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x5ae701
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x5ae708
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x5ae788
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x5ae76a
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x38]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
lea eax, [0x5b1b90]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x88]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0xa0]
test edx, edx
je 0x5ae9ad
nop
mov word [esp + 0x36], 0
mov byte [esp + 0x37], 0x10
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x5ae80d
lea ebx, [esp + 0xd4]
jmp 0x5ae95a
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x5afbf4
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x5ae869
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x5ae8d3
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x5ae8da
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x5ae95a
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x5ae93c
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x36]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
lea eax, [0x5b1890]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x80]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [ecx + 0xa8]
test dl, dl
je 0x5aec7f
nop
mov word [esp + 0x34], 0
mov byte [esp + 0x35], 0x12
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x5ae9db
mov edi, ecx
jmp 0x5aeb1e
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x5afbdc
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x5aea37
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x5aea9c
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x5aeaa3
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov edi, dword [esp + 0x130]
jmp 0x5aeb1e
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov ebx, dword [esp + 0xdc]
cmp esi, ebp
jae 0x5aeafe
mov dword [esp + 0x50], edx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
mov edi, ecx
movzx ecx, word [esp + 0x34]
mov word [ebx + edx], cx
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], ebx
nop
mov word [esp + 0x32], 0
mov ecx, dword [esp + 0xd4]
test ecx, ecx
jne 0x5aec81
mov ecx, dword [esp + 0xec]
test ecx, ecx
jne 0x5afbc4
mov ecx, dword [esp + 0xe0]
add ecx, 2
cmp ecx, 2
jge 0x5aeb91
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov edi, dword [esp + 0x130]
movzx ecx, byte [esp + 0xe8]
test cl, cl
je 0x5aebf6
mov ecx, dword [esp + 0xe0]
add ecx, 2
lea edx, [esp + 0xd4]
cmp dword [edx + 0x10], ecx
jge 0x5aebfd
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov edi, dword [esp + 0x130]
jmp 0x5aec81
lea edx, [esp + 0xd4]
mov ecx, dword [esp + 0xe0]
lea ebx, [ecx + 2]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xdc]
cmp ebp, ebx
jae 0x5aec5f
mov dword [esp + 0x50], ecx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x50]
lea edx, [esp + 0xd4]
mov edi, dword [esp + 0x130]
movzx edx, word [esp + 0x32]
mov word [esi + ecx], dx
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xdc], esi
jmp 0x5aec81
mov edi, ecx
mov ecx, dword [edi + 0xb0]
test ecx, ecx
je 0x5aee44
nop
mov word [esp + 0x30], 0
mov byte [esp + 0x31], 0x2b
mov ecx, dword [esp + 0xd4]
test ecx, ecx
je 0x5aecb3
lea edx, [esp + 0xd4]
jmp 0x5aee00
mov ecx, dword [esp + 0xec]
test ecx, ecx
jne 0x5afbac
mov ecx, dword [esp + 0xe0]
add ecx, 2
cmp ecx, 2
jge 0x5aed0f
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov edi, dword [esp + 0x130]
movzx ecx, byte [esp + 0xe8]
test cl, cl
je 0x5aed79
mov ecx, dword [esp + 0xe0]
add ecx, 2
lea edx, [esp + 0xd4]
cmp dword [edx + 0x10], ecx
jge 0x5aed80
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
lea edx, [esp + 0xd4]
mov edi, dword [esp + 0x130]
jmp 0x5aee00
lea edx, [esp + 0xd4]
mov ecx, dword [esp + 0xe0]
lea ebx, [ecx + 2]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xdc]
cmp ebp, ebx
jae 0x5aede2
mov dword [esp + 0x50], ecx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x50]
lea edx, [esp + 0xd4]
mov edi, dword [esp + 0x130]
movzx eax, word [esp + 0x30]
mov word [esi + ecx], ax
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xdc], esi
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
lea eax, [0x5b1620]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], edi
mov dword [esp], edx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x78]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov edi, dword [esp + 0x130]
mov ecx, dword [edi + 0xbc]
test ecx, ecx
je 0x5af007
nop
mov word [esp + 0x2e], 0
mov byte [esp + 0x2f], 0x2c
mov ecx, dword [esp + 0xd4]
test ecx, ecx
je 0x5aee76
lea edx, [esp + 0xd4]
jmp 0x5aefc3
mov ecx, dword [esp + 0xec]
test ecx, ecx
jne 0x5afb94
mov ecx, dword [esp + 0xe0]
add ecx, 2
cmp ecx, 2
jge 0x5aeed2
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov edi, dword [esp + 0x130]
movzx ecx, byte [esp + 0xe8]
test cl, cl
je 0x5aef3c
mov ecx, dword [esp + 0xe0]
add ecx, 2
lea edx, [esp + 0xd4]
cmp dword [edx + 0x10], ecx
jge 0x5aef43
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
lea edx, [esp + 0xd4]
mov edi, dword [esp + 0x130]
jmp 0x5aefc3
lea edx, [esp + 0xd4]
mov ecx, dword [esp + 0xe0]
lea ebx, [ecx + 2]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xdc]
cmp ebp, ebx
jae 0x5aefa5
mov dword [esp + 0x50], ecx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x50]
lea edx, [esp + 0xd4]
mov edi, dword [esp + 0x130]
movzx eax, word [esp + 0x2e]
mov word [esi + ecx], ax
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xdc], esi
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
lea eax, [0x5b13f0]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], edi
mov dword [esp], edx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x70]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov edi, dword [esp + 0x130]
mov ecx, dword [edi + 0xc8]
test ecx, ecx
je 0x5af1ca
nop
mov word [esp + 0x2c], 0
mov byte [esp + 0x2d], 0x33
mov ecx, dword [esp + 0xd4]
test ecx, ecx
je 0x5af039
lea edx, [esp + 0xd4]
jmp 0x5af186
mov ecx, dword [esp + 0xec]
test ecx, ecx
jne 0x5afb7c
mov ecx, dword [esp + 0xe0]
add ecx, 2
cmp ecx, 2
jge 0x5af095
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov edi, dword [esp + 0x130]
movzx ecx, byte [esp + 0xe8]
test cl, cl
je 0x5af0ff
mov ecx, dword [esp + 0xe0]
add ecx, 2
lea edx, [esp + 0xd4]
cmp dword [edx + 0x10], ecx
jge 0x5af106
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
lea edx, [esp + 0xd4]
mov edi, dword [esp + 0x130]
jmp 0x5af186
lea edx, [esp + 0xd4]
mov ecx, dword [esp + 0xe0]
lea ebx, [ecx + 2]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xdc]
cmp ebp, ebx
jae 0x5af168
mov dword [esp + 0x50], ecx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x50]
lea edx, [esp + 0xd4]
mov edi, dword [esp + 0x130]
movzx eax, word [esp + 0x2c]
mov word [esi + ecx], ax
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xdc], esi
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
lea eax, [0x5b0f60]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], edi
mov dword [esp], edx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x68]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov edi, dword [esp + 0x130]
movzx ecx, byte [edi + 0xd0]
test cl, cl
je 0x5af49c
nop
mov word [esp + 0x2a], 0
mov byte [esp + 0x2b], 0x2a
mov ecx, dword [esp + 0xd4]
test ecx, ecx
jne 0x5af33d
mov ecx, dword [esp + 0xec]
test ecx, ecx
jne 0x5afb64
mov ecx, dword [esp + 0xe0]
add ecx, 2
cmp ecx, 2
jge 0x5af251
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov edi, dword [esp + 0x130]
movzx ecx, byte [esp + 0xe8]
test cl, cl
je 0x5af2b6
mov ecx, dword [esp + 0xe0]
add ecx, 2
lea edx, [esp + 0xd4]
cmp dword [edx + 0x10], ecx
jge 0x5af2bd
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov edi, dword [esp + 0x130]
jmp 0x5af33d
lea edx, [esp + 0xd4]
mov ecx, dword [esp + 0xe0]
lea ebx, [ecx + 2]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xdc]
cmp ebp, ebx
jae 0x5af31f
mov dword [esp + 0x50], ecx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x50]
lea edx, [esp + 0xd4]
mov edi, dword [esp + 0x130]
movzx edx, word [esp + 0x2a]
mov word [esi + ecx], dx
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xdc], esi
nop
mov word [esp + 0x28], 0
mov ecx, dword [esp + 0xd4]
test ecx, ecx
jne 0x5af49c
mov ecx, dword [esp + 0xec]
test ecx, ecx
jne 0x5afb4c
mov ecx, dword [esp + 0xe0]
add ecx, 2
cmp ecx, 2
jge 0x5af3b0
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov edi, dword [esp + 0x130]
movzx ecx, byte [esp + 0xe8]
test cl, cl
je 0x5af415
mov ecx, dword [esp + 0xe0]
add ecx, 2
lea edx, [esp + 0xd4]
cmp dword [edx + 0x10], ecx
jge 0x5af41c
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov edi, dword [esp + 0x130]
jmp 0x5af49c
lea edx, [esp + 0xd4]
mov ecx, dword [esp + 0xe0]
lea ebx, [ecx + 2]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xdc]
cmp ebp, ebx
jae 0x5af47e
mov dword [esp + 0x50], ecx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x50]
lea edx, [esp + 0xd4]
mov edi, dword [esp + 0x130]
movzx edx, word [esp + 0x28]
mov word [esi + ecx], dx
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xdc], esi
mov ecx, dword [edi + 0xd8]
test ecx, ecx
je 0x5af65f
nop
mov word [esp + 0x26], 0
mov byte [esp + 0x27], 0x2d
mov ecx, dword [esp + 0xd4]
test ecx, ecx
je 0x5af4ce
lea edx, [esp + 0xd4]
jmp 0x5af61b
mov ecx, dword [esp + 0xec]
test ecx, ecx
jne 0x5afb34
mov ecx, dword [esp + 0xe0]
add ecx, 2
cmp ecx, 2
jge 0x5af52a
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov edi, dword [esp + 0x130]
movzx ecx, byte [esp + 0xe8]
test cl, cl
je 0x5af594
mov ecx, dword [esp + 0xe0]
add ecx, 2
lea edx, [esp + 0xd4]
cmp dword [edx + 0x10], ecx
jge 0x5af59b
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
lea edx, [esp + 0xd4]
mov edi, dword [esp + 0x130]
jmp 0x5af61b
lea edx, [esp + 0xd4]
mov ecx, dword [esp + 0xe0]
lea ebx, [ecx + 2]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xdc]
cmp ebp, ebx
jae 0x5af5fd
mov dword [esp + 0x50], ecx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x50]
lea edx, [esp + 0xd4]
mov edi, dword [esp + 0x130]
movzx eax, word [esp + 0x26]
mov word [esi + ecx], ax
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xdc], esi
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
lea eax, [0x5b0d30]
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], edi
mov dword [esp], edx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x60]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov edi, dword [esp + 0x130]
mov ecx, dword [edi + 0xe4]
test ecx, ecx
je 0x5af822
nop
mov word [esp + 0x24], 0
mov byte [esp + 0x25], 0x29
mov ecx, dword [esp + 0xd4]
test ecx, ecx
je 0x5af691
lea edx, [esp + 0xd4]
jmp 0x5af7de
mov ecx, dword [esp + 0xec]
test ecx, ecx
jne 0x5afb1c
mov ecx, dword [esp + 0xe0]
add ecx, 2
cmp ecx, 2
jge 0x5af6ed
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x67b2d0]
mov dword [eax], ecx
lea ecx, [0x6d2f90]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], eax
xor eax, eax
mov edi, dword [esp + 0x130]
movzx ecx, byte [esp + 0xe8]
test cl, cl
je 0x5af757
mov ecx, dword [esp + 0xe0]
add ecx, 2
lea edx, [esp + 0xd4]
cmp dword [edx + 0x10], ecx
jge 0x5af75e
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea edx, [0x6d2f90]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
lea edx, [esp + 0xd4]
mov edi, dword [esp + 0x130]
jmp 0x5af7de
lea edx, [esp + 0xd4]
mov ecx, dword [esp + 0xe0]
lea ebx, [ecx + 2]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xdc]
cmp ebp, ebx
jae 0x5af7c0
mov dword [esp + 0x50], ecx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x50]
lea edx, [esp + 0xd4]
mov edi, dword [esp + 0x130]
movzx eax, word [esp + 0x24]
mov word [esi + ecx], ax
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xdc], esi
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
lea eax, [0x5b0760]
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], edi
mov dword [esp], edx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x58]
mov dword [esp + 0xc], eax
call fcn.0053f0d0
xor eax, eax
mov edi, dword [esp + 0x130]
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
test ecx, ecx
je 0x5af83c
xor ebx, ebx
xor ebp, ebp
xor esi, esi
jmp 0x5af873
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xf0]
sub ebp, esi
mov ecx, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, esi
add ebp, dword [esp + 0xdc]
sub ebx, esi
mov esi, ebp
xor edx, edx
mov ebp, ebx
mov ebx, ecx
xor ecx, ecx
test ecx, ecx
jne 0x5afa9c
lea edi, [esp + 0x100]
call fcn.0045f0b5
nop
mov ecx, dword [esp + 0x118]
mov byte [esp + 0x23], 0
mov byte [esp + 0x23], 1
test ecx, ecx
jne 0x5afb04
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x54], esi
movzx ecx, byte [esp + 0x114]
test cl, cl
je 0x5af90d
mov ecx, dword [esp + 0x10c]
inc ecx
lea edx, [esp + 0x100]
cmp dword [edx + 0x10], ecx
jge 0x5af914
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x684290]
mov dword [eax], ecx
lea ecx, [0x6d2f90]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
xor eax, eax
mov edi, dword [esp + 0x4c]
jmp 0x5af992
lea edx, [esp + 0x100]
mov ecx, dword [esp + 0x10c]
lea edx, [ecx + 1]
mov edi, ebx
mov ebx, dword [esp + 0x110]
mov ebp, dword [esp + 0x108]
cmp ebx, edx
jae 0x5af972
mov dword [esp + 0x50], ecx
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x4c]
movzx esi, byte [esp + 0x23]
xchg esi, eax
mov byte [ebp + ecx], al
xchg esi, eax
mov dword [esp + 0x10c], edx
mov dword [esp + 0x110], ebx
mov dword [esp + 0x108], ebp
lea edi, [esp + 0xc0]
call fcn.0045f0bb
lea ecx, [0x5afce0]
mov dword [esp + 0xc0], ecx
mov ecx, dword [esp + 0x130]
mov dword [esp + 0xc4], ecx
mov edx, dword [esp + 0x54]
mov dword [esp + 0xc8], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0xcc], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xd0], edx
lea edx, [esp + 0x100]
mov dword [esp], edx
mov dword [esp + 4], 3
mov byte [esp + 8], 0
lea edx, [esp + 0xc0]
mov dword [esp + 0xc], edx
call fcn.0053f0d0
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x104]
test ecx, ecx
je 0x5afa1b
xor ebp, ebp
xor eax, eax
xor ebx, ebx
jmp 0x5afa4c
mov ebx, dword [esp + 0x10c]
mov ebp, dword [esp + 0x110]
mov esi, dword [esp + 0x11c]
sub ebp, esi
mov eax, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, esi
add ebp, dword [esp + 0x108]
sub ebx, esi
xor ecx, ecx
xor edx, edx
mov edi, dword [esp + 0x130]
mov dword [edi + 4], ebx
mov dword [edi + 8], eax
mov esi, dword [0xe996c0]
test esi, esi
jne 0x5afa67
mov dword [edi], ebp
jmp 0x5afa72
mov esi, eax
mov eax, ebp
call fcn.0045efc0
mov eax, esi
mov dword [esp + 0x134], ebp
mov dword [esp + 0x138], ebx
mov dword [esp + 0x13c], eax
mov dword [esp + 0x140], ecx
mov dword [esp + 0x144], edx
add esp, 0x12c
ret
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], ecx
mov dword [esp + 0x144], edx
add esp, 0x12c
ret
mov dword [esp + 0x134], edx
mov dword [esp + 0x138], ebx
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x140], 0
mov dword [esp + 0x144], 0
add esp, 0x12c
ret
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
lea eax, [0x63eda0]
mov dword [esp], eax
lea eax, [0x6d28e8]
mov dword [esp + 4], eax
call fcn.00433470
nop
call fcn.0045dbb0
jmp fcn.005ad940