Function at 0x542660
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x58384b
mov eax, dword fs:[0]
push eax
sub esp, 0x170
mov eax, dword [0x61c948]
xor eax, esp
mov dword [esp + 0x168], eax
push ebx
push esi
push edi
mov eax, dword [0x61c948]
xor eax, esp
push eax
lea eax, [esp + 0x180]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [edi + 0x328]
xor esi, esi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x18], esi
call fcn.00543fa0
mov dword [esp + 0x50], eax
jmp 0x5426c2
xor esi, esi
push esi
lea ecx, [edi + 0x98]
call fcn.0044c4f0
test eax, eax
jne 0x5433eb
lea ecx, [edi + 0x2f0]
mov dword [esp + 0x20], esi
mov dword [esp + 0x5c], esi
mov dword [esp + 0x60], esi
call fcn.00539940
cmp eax, esi
mov dword [esp + 0x14], eax
je 0x5433eb
lea eax, [esp + 0x14]
push eax
lea ecx, [edi + 0x2f0]
call fcn.0053e280
mov esi, eax
mov ecx, dword [esi]
push ecx
mov ecx, dword [esp + 0x54]
call fcn.00543af0
mov ebx, eax
mov ecx, ebx
call fcn.005436f0
push eax
mov ecx, edi
call fcn.004c3470
cmp dword [eax + 0x18], 0
je 0x5427e5
mov ecx, ebx
call fcn.0054b050
test eax, eax
mov dword [esp + 0x44], eax
fild dword [esp + 0x44]
jge 0x54274b
fadd qword [0x5a2320]
mov eax, dword [esi + 0x14]
fdivr qword [0x5edbf0]
mov edx, dword [esi + 0x10]
mov ecx, eax
and eax, 0x7fffffff
and ecx, 0x80000000
mov dword [esp + 0xfc], edx
mov dword [esp + 0x100], eax
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xf4], 0
fild qword [esp + 0xfc]
fild qword [esp + 0xf4]
fchs
faddp st(1)
fmulp st(1)
call fcn.00472696
mov ecx, ebx
mov edi, eax
mov dword [esp + 0xb0], edx
call fcn.00543720
cmp dword [esi + 8], eax
jae 0x5427e1
cmp dword [esp + 0x20], 0
je 0x5427ce
mov eax, dword [esp + 0xb0]
cmp eax, dword [esp + 0x60]
jg 0x5427e1
jl 0x5427ce
cmp edi, dword [esp + 0x5c]
jae 0x5427e1
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x20], esi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x60], ecx
mov edi, dword [esp + 0x2c]
cmp dword [esp + 0x14], 0
jne 0x5426f9
mov esi, dword [esp + 0x20]
test esi, esi
je 0x5433eb
mov edx, dword [esi]
mov ecx, dword [esp + 0x50]
push edx
call fcn.00543af0
mov ebx, eax
mov ecx, ebx
call fcn.005436f0
push eax
mov ecx, edi
call fcn.004c3470
lea ecx, [esp + 0x104]
mov dword [esp + 0x14], eax
call fcn.00543420
lea ecx, [esp + 0x64]
mov dword [esp + 0x188], 0
call fcn.00544140
mov eax, dword [esp + 0x14]
test eax, eax
mov byte [esp + 0x188], 1
je 0x543361
cmp dword [eax + 0x18], 0
je 0x543361
mov edx, dword [esi + 8]
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x108]
push ecx
push edx
mov ecx, ebx
call fcn.00543780
test eax, eax
jne 0x543361
push 0x40
call fcn.0044ff38
add esp, 4
test eax, eax
je 0x542894
mov ecx, eax
call fcn.004aa990
mov esi, eax
jmp 0x542896
xor esi, esi
mov dword [esp + 0x44], esi
mov ecx, ebx
mov byte [esp + 0x188], 2
call fcn.005436f0
mov dword [esi + 8], eax
mov eax, dword [esp + 0x120]
mov edi, dword [esp + 0x11c]
mov ecx, ebx
mov dword [esp + 0x130], eax
call fcn.0054b050
test eax, eax
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
jge 0x5428da
fadd qword [0x5a2320]
mov eax, dword [esp + 0x130]
fdivr qword [0x5edbf0]
mov ecx, eax
and eax, 0x7fffffff
and ecx, 0x80000000
mov dword [esp + 0xd8], eax
mov dword [esp + 0xd4], edi
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xe4], 0
fild qword [esp + 0xd4]
fild qword [esp + 0xe4]
fchs
faddp st(1)
fmulp st(1)
call fcn.00472696
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], edx
mov ecx, dword [esp + 0x128]
mov edi, dword [esp + 0x124]
mov dword [esp + 0x148], ecx
mov ecx, ebx
call fcn.0054b050
test eax, eax
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
jge 0x542961
fadd qword [0x5a2320]
mov eax, dword [esp + 0x148]
fdivr qword [0x5d6fc0]
mov ecx, eax
and eax, 0x7fffffff
and ecx, 0x80000000
mov dword [esp + 0xd0], eax
mov dword [esp + 0xcc], edi
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xec], 0
fild qword [esp + 0xcc]
fild qword [esp + 0xec]
fchs
faddp st(1)
fmulp st(1)
call fcn.00472696
mov ecx, dword [esi + 0x18]
sub ecx, eax
mov eax, dword [esi + 0x1c]
push 0
sbb eax, edx
mov dword [esi + 0x20], ecx
mov dword [esi + 0x24], eax
push 0x642394
mov dword [esi + 0x10], 1
mov ecx, dword [ebx + 4]
mov edx, dword [ecx + 0x1c]
mov eax, dword [edx + 0x14]
push 0x64237c
push 0
add ecx, 0x1c
push 0
push str.mdia_minf_stbl_stss
call eax
push eax
call fcn.004740f9
mov edi, eax
xor eax, eax
add esp, 0x14
cmp edi, eax
je 0x542a44
cmp dword [edi + 0x24], eax
jbe 0x542a44
mov dword [esi + 0x10], eax
cmp dword [edi + 0x24], eax
mov dword [esp + 0x18], eax
jbe 0x542a44
mov ecx, dword [esp + 0x18]
push ecx
lea ecx, [edi + 0x1c]
call fcn.0053dee0
mov edx, dword [eax]
mov ecx, dword [esp + 0x20]
sub edx, 1
cmp edx, dword [ecx + 8]
jne 0x542a32
mov dword [esi + 0x10], 1
mov eax, dword [esp + 0x18]
add eax, 1
cmp eax, dword [edi + 0x24]
mov dword [esp + 0x18], eax
jb 0x542a10
jmp 0x542a48
mov ecx, dword [esp + 0x20]
mov eax, dword [ebx + 0xc]
cmp eax, 1
mov edx, dword [esp + 0x74]
jne 0x542c6e
cmp edx, 1
jne 0x542c6e
mov eax, dword [esi + 0x18]
mov dword [esi + 0x20], eax
mov edx, dword [esi + 0x1c]
mov eax, dword [esp + 0x14]
mov dword [esi + 0x24], edx
mov eax, dword [eax + 0x78]
movzx eax, word [eax + 0xc]
cmp ax, 1
mov dword [esp + 0x18], 0x12c
jbe 0x542a9d
mov edi, dword [ecx + 8]
movzx edx, ax
mov dword [esp + 0x18], edx
mov eax, edi
xor edx, edx
div dword [esp + 0x18]
sub edi, edx
mov dword [ecx + 8], edi
lea eax, [esp + 0x64]
push eax
mov eax, dword [ecx + 8]
lea edx, [esp + 0x108]
push edx
push eax
mov ecx, ebx
mov dword [esp + 0x20], 1
call fcn.00543780
test eax, eax
jne 0x543333
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x6c]
xor edi, edi
test eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x40], ecx
jbe 0x542af7
mov edx, dword [esp + 0x40]
mov eax, dword [esi + 0x30]
lea ecx, [esi + 0x28]
add edx, edi
push edx
push eax
call fcn.00539730
add edi, 1
cmp edi, dword [esp + 0x24]
jb 0x542adb
cmp dword [esp + 0x14], 0
je 0x542b96
mov eax, dword [esp + 0x120]
mov edi, dword [esp + 0x11c]
mov ecx, ebx
mov dword [esp + 0x138], eax
call fcn.0054b050
test eax, eax
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
jge 0x542b30
fadd qword [0x5a2320]
mov eax, dword [esp + 0x138]
fdivr qword [0x5edbf0]
mov ecx, eax
mov dword [esp + 0xdc], edi
and eax, 0x7fffffff
and ecx, 0x80000000
xor edi, edi
mov dword [esp + 0xe0], eax
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xbc], edi
fild qword [esp + 0xdc]
fild qword [esp + 0xbc]
fchs
faddp st(1)
fmulp st(1)
call fcn.00472696
mov dword [esi + 0x24], edx
mov dword [esi + 0x20], eax
mov ecx, eax
mov dword [esi + 0x18], ecx
mov edx, dword [esi + 0x24]
mov dword [esi + 0x1c], edx
mov dword [esp + 0x14], edi
mov eax, dword [esp + 0x128]
mov edi, dword [esp + 0x124]
mov ecx, ebx
mov dword [esp + 0x140], eax
call fcn.0054b050
test eax, eax
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
jge 0x542bc4
fadd qword [0x5a2320]
mov eax, dword [esp + 0x140]
fdivr qword [0x5edbf0]
mov ecx, eax
and eax, 0x7fffffff
and ecx, 0x80000000
mov dword [esp + 0xc8], eax
mov dword [esp + 0xc4], edi
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xb4], 0
fild qword [esp + 0xc4]
fild qword [esp + 0xb4]
fchs
faddp st(1)
fmulp st(1)
call fcn.00472696
add dword [esi + 0x20], eax
mov ecx, dword [esp + 0x20]
adc dword [esi + 0x24], edx
mov eax, dword [ecx + 8]
mov ecx, ebx
lea edi, [eax + 1]
call fcn.00543720
cmp edi, eax
jae 0x543333
mov edx, dword [esp + 0x18]
cmp dword [esi + 0x30], edx
jge 0x543333
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x108]
mov dword [eax + 8], edi
push edx
mov eax, edi
push eax
mov ecx, ebx
call fcn.00543780
test eax, eax
je 0x542ac5
jmp 0x543333
cmp eax, 3
jne 0x543326
lea ecx, [esp + 0x3c]
call fcn.00416770
lea ecx, [esp + 0x38]
call fcn.00416770
mov eax, dword [esp + 0x74]
cmp eax, 2
mov edi, dword [esp + 0x6c]
mov byte [esp + 0x188], 4
mov dword [esp + 0x18], edi
mov dword [esp + 0x40], eax
jbe 0x5431e4
movzx cx, byte [edi + 1]
mov ch, byte [edi]
add eax, 0xfffffffe
movzx ecx, cx
movzx edi, cx
cmp edi, eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x1c], edi
ja 0x5431e4
lea ecx, [esp + 0x28]
call fcn.00416770
cmp word [esp + 0x24], 2
mov ecx, dword [esp + 0x18]
mov byte [esp + 0x188], 5
jb 0x542da6
cmp byte [ecx + 2], 0xfe
lea eax, [ecx + 2]
jne 0x542da6
cmp byte [ecx + 3], 0xff
jne 0x542da6
shr edi, 1
push edi
push eax
lea ecx, [esp + 0x3c]
call fcn.00458a0f
mov eax, dword [esp + 0x34]
xor edi, edi
cmp dword [eax - 0xc], edi
mov byte [esp + 0x188], 6
jle 0x542d64
push edi
lea ecx, [esp + 0x38]
call fcn.00408120
shr ax, 8
push edi
lea ecx, [esp + 0x38]
mov word [esp + 0x9c], ax
call fcn.00408120
xor edx, edx
mov dh, al
lea ecx, [esp + 0x34]
or edx, dword [esp + 0x98]
push edx
push edi
call fcn.0042aae0
mov eax, dword [esp + 0x34]
add edi, 1
cmp edi, dword [eax - 0xc]
jl 0x542d22
push eax
lea eax, [esp + 0x88]
push eax
call fcn.00560a70
add esp, 8
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 7
call fcn.0040c690
lea ecx, [esp + 0x84]
call fcn.004b29a0
lea ecx, [esp + 0x34]
mov byte [esp + 0x188], 5
call fcn.004b29a0
jmp 0x542ddd
add ecx, 2
push edi
push ecx
lea ecx, [esp + 0x98]
call fcn.004589c4
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 8
call fcn.0040c690
lea ecx, [esp + 0x90]
mov byte [esp + 0x188], 5
call fcn.004b29a0
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x34]
call fcn.0040c5d0
mov edx, dword [esp + 0x14]
add edx, 0x44
push 0x5ebd98
push edx
mov byte [esp + 0x190], 9
call fcn.00409f40
add esp, 8
test eax, eax
je 0x543194
mov eax, dword [esp + 0x110]
push eax
mov ecx, ebx
call fcn.00543760
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x80]
push str.0_0_Text__0000_0000_0000_0000__
push edx
mov edi, eax
call fcn.0040c4f0
add esp, 0xc
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 0xa
call fcn.0040c690
lea ecx, [esp + 0x7c]
mov byte [esp + 0x188], 9
call fcn.004b29a0
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x3c]
call fcn.0040c690
mov eax, dword [ebx + 4]
xor edx, edx
push edx
push 0x642564
push 0x64237c
push edx
lea ecx, [eax + 0x1c]
mov eax, dword [ecx]
push edx
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], edx
mov edx, dword [eax + 0x10]
push 0x746b6864
call edx
push eax
call fcn.004740f9
add esp, 0x14
test eax, eax
je 0x542ee1
lea ecx, [esp + 0x80]
push ecx
lea edx, [esp + 0x98]
push edx
mov ecx, eax
call fcn.0053deb0
fld dword [esp + 0x80]
call fcn.00472660
fld dword [esp + 0x94]
mov dword [esp + 0x24], eax
call fcn.00472660
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x58], eax
push 0
push 0x642538
push 0x64263c
push 0
push edi
call fcn.004740f9
add esp, 0x14
test eax, eax
je 0x543194
mov edi, dword [eax + 8]
push 0
push 0x642514
push 0x6424f4
push 0
push edi
call fcn.004740f9
add esp, 0x14
test eax, eax
jne 0x543194
push eax
push 0x6424d0
push 0x6424f4
push eax
push edi
call fcn.004740f9
add esp, 0x14
test eax, eax
mov dword [esp + 0x24], eax
je 0x543194
push 0x5919d0
lea ecx, [esp + 0x4c]
lea edi, [eax + 0x38]
call fcn.0040a190
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx + 0x1c]
mov eax, dword [edx + 0x10]
push 0
push 0x642688
push 0x64237c
push 0
add ecx, 0x1c
push 0
push 0x66746162
mov byte [esp + 0x1a0], 0xb
call eax
push eax
call fcn.004740f9
add esp, 0x14
test eax, eax
je 0x543001
mov dword [esp + 0x164], 0xf
mov dword [esp + 0x160], 0
mov byte [esp + 0x150], 0
movzx edx, word [edi + 0x18]
lea ecx, [esp + 0x14c]
push ecx
push edx
mov ecx, eax
mov byte [esp + 0x190], 0xc
call fcn.0053ef10
test eax, eax
jne 0x542fed
cmp dword [esp + 0x164], 0x10
mov eax, dword [esp + 0x150]
jae 0x542fe3
lea eax, [esp + 0x150]
push eax
lea ecx, [esp + 0x4c]
call fcn.0040a570
lea ecx, [esp + 0x14c]
mov byte [esp + 0x188], 0xb
call fcn.004ac460
mov ecx, dword [esi + 0x20]
sub ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x24]
sbb edx, dword [esi + 0x1c]
lea eax, [esp + 0x9c]
push eax
push 0
push 0x2710
push edx
push ecx
call fcn.004735c0
mov ecx, dword [esp + 0x58]
push eax
mov eax, dword [esp + 0x60]
push eax
mov eax, dword [esp + 0x38]
mov edx, dword [eax + 0x324]
mov eax, dword [eax + 0x320]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x58]
sub eax, ecx
sub eax, 2
push eax
lea eax, [ecx + edx + 2]
push ecx
lea edx, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
mov dword [esp + 0x40], eax
call fcn.0040a640
push edi
push ecx
mov ecx, dword [esp + 0x50]
mov eax, esp
mov dword [esp + 0x68], esp
push ecx
push eax
mov byte [esp + 0x1b8], 0xd
call fcn.00560980
mov ecx, dword [esp + 0x4c]
lea edx, [esp + 0x7c]
add esp, 8
push edx
mov byte [esp + 0x1b4], 0xb
call fcn.0053ef70
mov eax, dword [esp + 0x78]
push eax
lea ecx, [esp + 0xa8]
push ecx
mov byte [esp + 0x1bc], 0xe
call fcn.00560a70
add esp, 0x34
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 0xf
call fcn.0040c690
lea ecx, [esp + 0x78]
mov byte [esp + 0x188], 0xe
call fcn.004b29a0
cmp byte [edi + 0xb], 0
je 0x54317a
mov ecx, dword [esp + 0xa0]
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x8c], ecx
neg ecx
mov dword [esp + 0x88], eax
push ecx
neg eax
push eax
lea edx, [esp + 0xa4]
push edx
call dword [sym.imp.USER32.dll_OffsetRect]
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0xa0]
push eax
push ecx
push eax
mov eax, dword [esp + 0xb0]
push eax
push edx
push eax
movzx eax, byte [edi + 0xb]
push edx
movzx edx, byte [edi + 8]
push ecx
mov ecx, 0xff
sub ecx, eax
movzx eax, byte [edi + 9]
push ecx
movzx ecx, byte [edi + 0xa]
push edx
mov edx, dword [esp + 0xb4]
push eax
mov eax, dword [esp + 0xb4]
push ecx
push edx
push eax
lea ecx, [esp + 0x74]
push str.0__1_Text__0_0_0_0___an7pos__d__d_1c_02x_02x_02x1a_02x_bord0_shad0p1m__d__d_l__d__d_l__d__d_l__d__d_p0
push ecx
call fcn.00418640
add esp, 0x40
lea ecx, [esp + 0x4c]
call fcn.004b29a0
lea ecx, [esp + 0x48]
mov byte [esp + 0x188], 9
call fcn.004b29a0
push 0x5e8688
push 0x5d6f20
lea ecx, [esp + 0x38]
call fcn.0053ec00
push 0x5d6f1c
push 0x5d6f18
lea ecx, [esp + 0x38]
call fcn.0053ec00
mov eax, dword [esp + 0x30]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.004aaa10
lea ecx, [esp + 0x30]
call fcn.004b29a0
lea ecx, [esp + 0x28]
mov byte [esp + 0x188], 4
call fcn.004b29a0
mov edx, dword [esp + 0x3c]
cmp dword [edx - 0xc], 0
je 0x543278
push 0x40
call fcn.0044ff38
add esp, 4
test eax, eax
je 0x54320b
mov ecx, eax
call fcn.004aa990
mov edi, eax
jmp 0x54320d
xor edi, edi
mov dword [esp + 0x14], edi
mov eax, dword [esi + 8]
mov dword [edi + 8], eax
mov ecx, dword [esi + 0x18]
mov dword [edi + 0x18], ecx
mov edx, dword [esi + 0x1c]
mov dword [edi + 0x1c], edx
mov eax, dword [esi + 0x20]
mov dword [edi + 0x20], eax
mov ecx, dword [esi + 0x24]
mov eax, dword [esp + 0x3c]
mov dword [edi + 0x24], ecx
mov edx, dword [esi + 0x10]
mov dword [edi + 0x10], edx
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, edi
mov byte [esp + 0x190], 0x10
call fcn.004aaa10
push ecx
mov ecx, dword [esp + 0x30]
mov eax, esp
mov dword [esp + 0x20], esp
mov dword [esp + 0x18], 0
mov dword [eax], edi
call fcn.004c4c10
lea ecx, [esp + 0x14]
mov byte [esp + 0x188], 4
call fcn.005145d0
mov eax, dword [esp + 0x38]
cmp dword [eax - 0xc], 0
je 0x54330a
push 0x40
call fcn.0044ff38
add esp, 4
test eax, eax
je 0x54329f
mov ecx, eax
call fcn.004aa990
mov edi, eax
jmp 0x5432a1
xor edi, edi
mov dword [esp + 0x14], edi
mov ecx, dword [esi + 8]
xor ecx, 0x80402010
mov dword [edi + 8], ecx
mov edx, dword [esi + 0x18]
mov dword [edi + 0x18], edx
mov eax, dword [esi + 0x1c]
mov dword [edi + 0x1c], eax
mov ecx, dword [esi + 0x20]
mov dword [edi + 0x20], ecx
mov edx, dword [esi + 0x24]
mov dword [edi + 0x24], edx
mov eax, dword [esi + 0x10]
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0x38]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, edi
mov byte [esp + 0x190], 0x11
call fcn.004aaa10
push ecx
mov ecx, dword [esp + 0x30]
mov eax, esp
mov dword [esp + 0x20], esp
mov dword [esp + 0x18], 0
mov dword [eax], edi
call fcn.004c4c10
lea ecx, [esp + 0x14]
call fcn.005145d0
lea ecx, [esp + 0x38]
call fcn.004b29a0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x188], 2
call fcn.004b29a0
jmp 0x543333
mov ecx, dword [esp + 0x6c]
push edx
push ecx
mov ecx, esi
call fcn.004aaa10
push ecx
mov ecx, dword [esp + 0x30]
mov eax, esp
mov dword [esp + 0x48], esp
mov dword [esp + 0x48], 0
mov dword [eax], esi
call fcn.004c4c10
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x20]
mov dword [esp + 0x18], eax
mov byte [esp + 0x188], 1
lea ecx, [esp + 0x14c]
call fcn.00543420
add dword [esi + 8], 1
mov eax, dword [esi + 8]
lea edx, [esp + 0x14c]
push edx
push eax
mov ecx, ebx
mov byte [esp + 0x190], 0x12
call fcn.00543740
test eax, eax
jne 0x5433a4
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ecx
lea ecx, [esp + 0x14c]
mov byte [esp + 0x188], 1
call fcn.00543440
lea ecx, [esp + 0x64]
mov byte [esp + 0x188], 0
call fcn.005441c0
lea ecx, [esp + 0x104]
mov dword [esp + 0x188], 0xffffffff
call fcn.00543440
cmp dword [esp + 0x18], 0
jge 0x5426c0
mov al, 1
mov ecx, dword [esp + 0x180]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x168]
xor ecx, esp
call fcn.004721e8
mov esp, ebp
pop ebp
ret