Function at 0x4380b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x53173c
mov eax, dword fs:[0]
push eax
sub esp, 0xa90
mov eax, dword [0x5801d4]
xor eax, esp
mov dword [esp + 0xa8c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5801d4]
xor eax, esp
push eax
lea eax, [esp + 0xaa4]
mov dword fs:[0], eax
mov eax, dword [esp + 0xab4]
xor edi, edi
mov ebp, ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], edi
mov byte [esp + 0x3c], 0
mov dword [esp + 0x44], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x28], edi
push ebp
push 0x14
lea ecx, [esp + 0x30]
mov dword [esp + 0xab4], edi
call fcn.00436a50
push 0x10
call fcn.004d76f8
mov ecx, dword [0x5b25e4]
add esp, 4
mov esi, eax
push esi
push 0x10
push ecx
call dword [0x53d044]
push 0x10
push esi
lea ecx, [esp + 0x30]
call fcn.00435980
push esi
call fcn.004d7727
add esp, 4
mov byte [esp + 0xdc], 0
xor ebx, ebx
mov eax, dword [ebx*4 + 0x5b25ec]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x438176
lea edi, [esp + 0xdc]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x438187
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
cmp ebx, 1
rep movsb byte es:[edi], byte [esi]
jge 0x4381c2
lea edi, [esp + 0xdc]
dec edi
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4381b0
mov dx, word [0x54701c]
mov word [edi], dx
inc ebx
cmp ebx, 2
jl 0x43816d
lea eax, [esp + 0xdc]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4381d2
sub eax, edx
mov ebx, eax
push 4
mov dword [esp + 0x50], ebx
call fcn.004d76f8
mov cl, byte [esp + 0x53]
mov dl, byte [esp + 0x52]
mov byte [eax], cl
mov byte [eax + 1], dl
mov byte [eax + 2], bh
mov byte [eax + 3], bl
mov ecx, dword [eax]
push eax
mov dword [esp + 0x28], ecx
call fcn.004d7727
mov esi, dword [esp + 0x38]
lea edi, [esi + 4]
add esp, 8
cmp dword [esp + 0x34], edi
jge 0x43825c
lea eax, [esi + 0x104]
push eax
mov dword [esp + 0x38], eax
call fcn.004d76f8
cmp dword [esp + 0x4c], 0
je 0x438255
mov edx, dword [esp + 0x4c]
push esi
push edx
push eax
mov dword [esp + 0x28], eax
call fcn.00517e10
mov eax, dword [esp + 0x58]
push eax
call fcn.004d7727
mov ecx, dword [esp + 0x2c]
add esp, 0x14
mov dword [esp + 0x48], ecx
jmp 0x43825c
add esp, 4
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x48]
push ebx
lea ecx, [esp + 0xe0]
push ecx
lea ecx, [esp + 0x30]
mov dword [eax + esi], edx
mov dword [esp + 0x38], edi
call fcn.00435980
push 4
call fcn.004d76f8
mov byte [eax], 0
mov byte [eax + 1], 0
mov byte [eax + 2], 0
mov byte [eax + 3], 0xf
mov edx, dword [eax]
push eax
mov dword [esp + 0x20], edx
call fcn.004d7727
mov edi, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
lea eax, [edi + 4]
add esp, 8
cmp ebx, eax
mov dword [esp + 0x14], eax
jge 0x4382f6
lea ebx, [edi + 0x104]
push ebx
mov dword [esp + 0x38], ebx
call fcn.004d76f8
cmp dword [esp + 0x4c], 0
mov esi, eax
je 0x4382ed
mov eax, dword [esp + 0x4c]
push edi
push eax
push esi
call fcn.00517e10
mov ecx, dword [esp + 0x58]
push ecx
call fcn.004d7727
add esp, 0x14
mov dword [esp + 0x48], esi
jmp 0x4382fa
add esp, 4
mov dword [esp + 0x48], esi
jmp 0x4382fa
mov esi, dword [esp + 0x48]
mov edx, dword [esp + 0x18]
mov dword [esi + edi], edx
mov edi, dword [esp + 0x14]
lea eax, [edi + 0xf]
cmp ebx, eax
mov dword [esp + 0x30], edi
mov dword [esp + 0x20], eax
jge 0x43834c
lea ebx, [edi + 0x10f]
push ebx
mov dword [esp + 0x38], ebx
call fcn.004d76f8
test esi, esi
je 0x438343
push edi
push esi
push eax
mov dword [esp + 0x28], eax
call fcn.00517e10
push esi
call fcn.004d7727
mov esi, dword [esp + 0x2c]
add esp, 0x14
jmp 0x438348
add esp, 4
mov esi, eax
mov dword [esp + 0x48], esi
mov eax, dword [0x54700c]
mov dword [esi + edi], eax
mov ecx, dword [0x547010]
mov dword [esi + edi + 4], ecx
mov edx, dword [0x547014]
mov dword [esi + edi + 8], edx
mov ax, word [0x547018]
mov word [esi + edi + 0xc], ax
mov cl, byte [0x54701a]
mov byte [esi + edi + 0xe], cl
mov eax, dword [ebp + 0x10e8]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x30], edi
mov dword [esp + 0x4c], eax
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x438392
sub eax, ecx
push 4
mov dword [esp + 0x20], eax
call fcn.004d76f8
mov cl, byte [esp + 0x22]
mov dl, byte [esp + 0x23]
mov byte [eax + 1], cl
mov ecx, dword [esp + 0x20]
mov byte [eax], dl
mov byte [eax + 2], ch
mov byte [eax + 3], cl
mov edx, dword [eax]
push eax
mov dword [esp + 0x20], edx
call fcn.004d7727
lea eax, [edi + 4]
add esp, 8
cmp ebx, eax
mov dword [esp + 0x14], eax
jge 0x43840b
lea eax, [edi + 0x104]
push eax
mov dword [esp + 0x38], eax
call fcn.004d76f8
test esi, esi
je 0x438402
push edi
mov ebx, eax
push esi
push ebx
call fcn.00517e10
push esi
call fcn.004d7727
add esp, 0x14
mov esi, ebx
jmp 0x438407
add esp, 4
mov esi, eax
mov dword [esp + 0x48], esi
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov dword [esi + edi], eax
mov eax, dword [esp + 0x4c]
push edx
mov dword [esp + 0x34], ecx
push eax
lea ecx, [esp + 0x30]
call fcn.00435980
mov eax, dword [ebp + 0x10e8]
mov dword [esp + 0x4c], eax
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x438440
sub eax, ecx
mov ebx, eax
push 4
mov dword [esp + 0x18], ebx
call fcn.004d76f8
mov cl, byte [esp + 0x1b]
mov dl, byte [esp + 0x1a]
mov byte [eax], cl
mov byte [eax + 1], dl
mov byte [eax + 2], bh
mov byte [eax + 3], bl
mov ecx, dword [eax]
push eax
mov dword [esp + 0x28], ecx
call fcn.004d7727
mov esi, dword [esp + 0x38]
lea edi, [esi + 4]
add esp, 8
cmp dword [esp + 0x34], edi
jge 0x4384ca
lea eax, [esi + 0x104]
push eax
mov dword [esp + 0x38], eax
call fcn.004d76f8
cmp dword [esp + 0x4c], 0
je 0x4384c3
mov edx, dword [esp + 0x4c]
push esi
push edx
push eax
mov dword [esp + 0x28], eax
call fcn.00517e10
mov eax, dword [esp + 0x58]
push eax
call fcn.004d7727
mov ecx, dword [esp + 0x2c]
add esp, 0x14
mov dword [esp + 0x48], ecx
jmp 0x4384ca
add esp, 4
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x48]
push ebx
push ecx
lea ecx, [esp + 0x30]
mov dword [eax + esi], edx
mov dword [esp + 0x38], edi
call fcn.00435980
mov eax, dword [ebp + 0x10fc]
mov dword [esp + 0x4c], eax
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4384f5
sub eax, ecx
mov ebx, eax
push 4
mov dword [esp + 0x18], ebx
call fcn.004d76f8
mov dl, byte [esp + 0x1b]
mov cl, byte [esp + 0x1a]
mov byte [eax], dl
mov byte [eax + 1], cl
mov byte [eax + 2], bh
mov byte [eax + 3], bl
mov edx, dword [eax]
push eax
mov dword [esp + 0x28], edx
call fcn.004d7727
mov esi, dword [esp + 0x38]
lea edi, [esi + 4]
add esp, 8
cmp dword [esp + 0x34], edi
jge 0x43857b
lea eax, [esi + 0x104]
push eax
mov dword [esp + 0x38], eax
call fcn.004d76f8
cmp dword [esp + 0x4c], 0
je 0x438574
mov ecx, dword [esp + 0x4c]
push esi
push ecx
push eax
mov dword [esp + 0x28], eax
call fcn.00517e10
mov edx, dword [esp + 0x58]
push edx
call fcn.004d7727
mov eax, dword [esp + 0x2c]
add esp, 0x14
jmp 0x438577
add esp, 4
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x4c]
push ebx
mov dword [edx + esi], ecx
push eax
lea ecx, [esp + 0x30]
mov dword [esp + 0x38], edi
call fcn.00435980
mov eax, dword [ebp + 0x10fc]
mov dword [esp + 0x4c], eax
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4385a6
sub eax, ecx
mov ebx, eax
push 4
mov dword [esp + 0x18], ebx
call fcn.004d76f8
mov cl, byte [esp + 0x1b]
mov dl, byte [esp + 0x1a]
mov byte [eax], cl
mov byte [eax + 1], dl
mov byte [eax + 2], bh
mov byte [eax + 3], bl
mov ecx, dword [eax]
push eax
mov dword [esp + 0x28], ecx
call fcn.004d7727
mov esi, dword [esp + 0x38]
lea edi, [esi + 4]
add esp, 8
cmp dword [esp + 0x34], edi
jge 0x438630
lea eax, [esi + 0x104]
push eax
mov dword [esp + 0x38], eax
call fcn.004d76f8
cmp dword [esp + 0x4c], 0
je 0x438629
mov edx, dword [esp + 0x4c]
push esi
push edx
push eax
mov dword [esp + 0x28], eax
call fcn.00517e10
mov eax, dword [esp + 0x58]
push eax
call fcn.004d7727
mov ecx, dword [esp + 0x2c]
add esp, 0x14
mov dword [esp + 0x48], ecx
jmp 0x438630
add esp, 4
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x48]
push ebx
push ecx
lea ecx, [esp + 0x30]
mov dword [eax + esi], edx
mov dword [esp + 0x38], edi
call fcn.00435980
push 4
call fcn.004d76f8
mov byte [eax], 0
mov byte [eax + 1], 0
mov byte [eax + 2], 0
mov byte [eax + 3], 4
mov edx, dword [eax]
push eax
mov dword [esp + 0x20], edx
call fcn.004d7727
mov ebx, dword [esp + 0x38]
mov edi, dword [esp + 0x3c]
lea eax, [ebx + 4]
add esp, 8
cmp edi, eax
mov dword [esp + 0x14], eax
jge 0x4386c7
lea edi, [ebx + 0x104]
push edi
mov dword [esp + 0x38], edi
call fcn.004d76f8
cmp dword [esp + 0x4c], 0
mov esi, eax
je 0x4386be
mov eax, dword [esp + 0x4c]
push ebx
push eax
push esi
call fcn.00517e10
mov ecx, dword [esp + 0x58]
push ecx
call fcn.004d7727
add esp, 0x14
mov dword [esp + 0x48], esi
jmp 0x4386cb
add esp, 4
mov dword [esp + 0x48], esi
jmp 0x4386cb
mov esi, dword [esp + 0x48]
mov edx, dword [esp + 0x18]
mov dword [esi + ebx], edx
mov ebx, dword [esp + 0x14]
lea eax, [ebx + 4]
cmp edi, eax
mov dword [esp + 0x30], ebx
mov dword [esp + 0x14], eax
jge 0x43871d
lea edi, [ebx + 0x104]
push edi
mov dword [esp + 0x38], edi
call fcn.004d76f8
test esi, esi
je 0x438714
push ebx
push esi
push eax
mov dword [esp + 0x28], eax
call fcn.00517e10
push esi
call fcn.004d7727
mov esi, dword [esp + 0x2c]
add esp, 0x14
jmp 0x438719
add esp, 4
mov esi, eax
mov dword [esp + 0x48], esi
mov eax, dword [0x547004]
mov dword [esi + ebx], eax
mov ebx, dword [esp + 0x14]
push 4
mov dword [esp + 0x34], ebx
call fcn.004d76f8
mov byte [eax], 0
mov byte [eax + 1], 0
mov byte [eax + 2], 0
mov byte [eax + 3], 4
mov ecx, dword [eax]
push eax
mov dword [esp + 0x28], ecx
call fcn.004d7727
lea eax, [ebx + 4]
add esp, 8
cmp edi, eax
mov dword [esp + 0x14], eax
jge 0x438795
lea edi, [ebx + 0x104]
push edi
mov dword [esp + 0x38], edi
call fcn.004d76f8
test esi, esi
je 0x43878c
push ebx
push esi
push eax
mov dword [esp + 0x28], eax
call fcn.00517e10
push esi
call fcn.004d7727
mov esi, dword [esp + 0x2c]
add esp, 0x14
jmp 0x438791
add esp, 4
mov esi, eax
mov dword [esp + 0x48], esi
mov edx, dword [esp + 0x20]
mov dword [esi + ebx], edx
mov ebx, dword [esp + 0x14]
lea eax, [ebx + 4]
cmp edi, eax
mov dword [esp + 0x30], ebx
mov dword [esp + 0x14], eax
jge 0x4387e7
lea edi, [ebx + 0x104]
push edi
mov dword [esp + 0x38], edi
call fcn.004d76f8
test esi, esi
je 0x4387de
push ebx
push esi
push eax
mov dword [esp + 0x28], eax
call fcn.00517e10
push esi
call fcn.004d7727
mov esi, dword [esp + 0x2c]
add esp, 0x14
jmp 0x4387e3
add esp, 4
mov esi, eax
mov dword [esp + 0x48], esi
mov eax, dword [0x547004]
mov dword [esi + ebx], eax
mov ebx, dword [esp + 0x14]
push 4
mov dword [esp + 0x34], ebx
call fcn.004d76f8
mov byte [eax], 0
mov byte [eax + 1], 0
mov byte [eax + 2], 0
mov byte [eax + 3], 0
mov ecx, dword [eax]
push eax
mov dword [esp + 0x28], ecx
call fcn.004d7727
lea eax, [ebx + 4]
add esp, 8
cmp edi, eax
mov dword [esp + 0x14], eax
jge 0x43885f
lea edi, [ebx + 0x104]
push edi
mov dword [esp + 0x38], edi
call fcn.004d76f8
test esi, esi
je 0x438856
push ebx
push esi
push eax
mov dword [esp + 0x28], eax
call fcn.00517e10
push esi
call fcn.004d7727
mov esi, dword [esp + 0x2c]
add esp, 0x14
jmp 0x43885b
add esp, 4
mov esi, eax
mov dword [esp + 0x48], esi
mov edx, dword [esp + 0x20]
mov dword [esi + ebx], edx
mov ebx, dword [esp + 0x14]
cmp edi, ebx
mov dword [esp + 0x30], ebx
jge 0x4388aa
lea edi, [ebx + 0x100]
push edi
mov dword [esp + 0x38], edi
call fcn.004d76f8
test esi, esi
je 0x4388a1
push ebx
push esi
push eax
mov dword [esp + 0x28], eax
call fcn.00517e10
push esi
call fcn.004d7727
mov esi, dword [esp + 0x2c]
add esp, 0x14
jmp 0x4388a6
add esp, 4
mov esi, eax
mov dword [esp + 0x48], esi
push 0
lea eax, [esi + ebx]
push 0x54164b
push eax
call fcn.00517e10
push 4
call fcn.004d76f8
mov byte [eax], 0
mov byte [eax + 1], 0
mov byte [eax + 2], 0
mov byte [eax + 3], 0
mov ecx, dword [eax]
push eax
mov dword [esp + 0x34], ecx
call fcn.004d7727
lea eax, [ebx + 4]
add esp, 0x14
cmp edi, eax
mov dword [esp + 0x14], eax
jge 0x438922
lea edi, [ebx + 0x104]
push edi
mov dword [esp + 0x38], edi
call fcn.004d76f8
test esi, esi
je 0x438919
push ebx
push esi
push eax
mov dword [esp + 0x28], eax
call fcn.00517e10
push esi
call fcn.004d7727
mov esi, dword [esp + 0x2c]
add esp, 0x14
jmp 0x43891e
add esp, 4
mov esi, eax
mov dword [esp + 0x48], esi
mov edx, dword [esp + 0x20]
mov dword [esi + ebx], edx
mov ebx, dword [esp + 0x14]
cmp edi, ebx
mov dword [esp + 0x30], ebx
jge 0x43896d
lea edi, [ebx + 0x100]
push edi
mov dword [esp + 0x38], edi
call fcn.004d76f8
test esi, esi
je 0x438964
push ebx
push esi
push eax
mov dword [esp + 0x28], eax
call fcn.00517e10
push esi
call fcn.004d7727
mov esi, dword [esp + 0x2c]
add esp, 0x14
jmp 0x438969
add esp, 4
mov esi, eax
mov dword [esp + 0x48], esi
push 0
lea eax, [esi + ebx]
push 0x54164b
push eax
call fcn.00517e10
lea eax, [ebx + 1]
add esp, 0xc
cmp edi, eax
mov dword [esp + 0x20], eax
jge 0x4389c3
lea edi, [ebx + 0x101]
push edi
mov dword [esp + 0x38], edi
call fcn.004d76f8
test esi, esi
je 0x4389ba
push ebx
push esi
push eax
mov dword [esp + 0x28], eax
call fcn.00517e10
push esi
call fcn.004d7727
mov esi, dword [esp + 0x2c]
add esp, 0x14
jmp 0x4389bf
add esp, 4
mov esi, eax
mov dword [esp + 0x48], esi
xor al, al
mov byte [esi + ebx], al
mov ebx, dword [esp + 0x20]
push 4
mov dword [esp + 0x34], ebx
call fcn.004d76f8
mov byte [eax], 0
mov byte [eax + 1], 0
mov byte [eax + 2], 0
mov byte [eax + 3], 0
mov ecx, dword [eax]
push eax
mov dword [esp + 0x20], ecx
call fcn.004d7727
lea eax, [ebx + 4]
add esp, 8
cmp edi, eax
mov dword [esp + 0x14], eax
jge 0x438a34
lea eax, [ebx + 0x104]
push eax
mov dword [esp + 0x38], eax
call fcn.004d76f8
test esi, esi
je 0x438a2b
push ebx
mov edi, eax
push esi
push edi
call fcn.00517e10
push esi
call fcn.004d7727
add esp, 0x14
mov esi, edi
jmp 0x438a30
add esp, 4
mov esi, eax
mov dword [esp + 0x48], esi
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x14]
mov dword [esi + ebx], edx
mov ebx, dword [0x5a9d20]
push 4
mov dword [esp + 0x34], edi
lea ebx, [ebx + 0x5a9d28]
call fcn.004d76f8
movzx ecx, byte [esp + 0x37]
movzx edx, byte [esp + 0x36]
mov byte [eax], cl
movzx ecx, byte [esp + 0x35]
mov byte [eax + 1], dl
movzx edx, byte [esp + 0x34]
mov byte [eax + 2], cl
mov byte [eax + 3], dl
mov ecx, dword [eax]
push eax
mov dword [esp + 0x20], ecx
call fcn.004d7727
mov edx, dword [esp + 0x20]
push edi
mov dword [ebx], edx
push esi
add ebx, 4
push ebx
call fcn.00517e10
mov eax, dword [0x5a9d20]
mov edx, dword [0x5b25e4]
add esp, 0x14
lea ecx, [eax + edi + 4]
lea eax, [ebp + 0x1240]
push eax
push ebp
lea esi, [ebp + 0x10fc]
push esi
lea edi, [ebp + 0x10e8]
push edi
mov dword [0x5a9d20], ecx
push edx
lea ecx, [esp + 0x3c]
call fcn.00435b30
test eax, eax
jne 0x438b01
mov eax, dword [esp + 0x48]
push eax
mov dword [esp + 0xab0], 0xffffffff
call fcn.004d7727
mov ecx, dword [esp + 0x44]
push ecx
call fcn.004d7727
mov edx, dword [esp + 0x4c]
push edx
call fcn.004d7727
add esp, 0xc
xor eax, eax
jmp 0x4399e7
cmp dword [esp + 0xab8], 0
jne 0x438b57
lea eax, [ebp + 0x123c]
push eax
push ebp
push esi
mov esi, dword [esp + 0x30]
push edi
mov ecx, esi
call fcn.00436ac0
test eax, eax
jne 0x438b5b
mov ecx, dword [esp + 0x48]
push ecx
mov dword [esp + 0xab0], 0xffffffff
call fcn.004d7727
mov edx, dword [esp + 0x44]
push edx
call fcn.004d7727
mov eax, dword [esp + 0x4c]
push eax
call fcn.004d7727
add esp, 0xc
xor eax, eax
jmp 0x4399e7
mov esi, dword [esp + 0x24]
mov ebx, dword [esi + 8]
mov ecx, dword [esi + 0x20]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], ecx
test ebx, ebx
jle 0x438bc6
mov edi, dword [0x5a9d20]
push 4
lea edi, [edi + 0x5a9d28]
call fcn.004d76f8
mov dl, byte [esp + 0x2b]
mov cl, byte [esp + 0x2a]
mov byte [eax], dl
mov byte [eax + 1], cl
mov byte [eax + 2], bh
mov byte [eax + 3], bl
mov edx, dword [eax]
push eax
mov dword [esp + 0x20], edx
call fcn.004d7727
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
push ebx
mov dword [edi], eax
push ecx
add edi, 4
push edi
call fcn.00517e10
mov edx, dword [0x5a9d20]
lea eax, [edx + ebx + 4]
add esp, 0x14
mov dword [0x5a9d20], eax
mov eax, dword [esi + 0x10]
mov edx, dword [esi + 8]
cmp eax, edx
jge 0x438bdf
mov ecx, dword [esi + 0x20]
mov cl, byte [eax + ecx]
inc eax
mov dword [esi + 0x10], eax
cmp cl, 0x14
je 0x438c26
cmp dword [ebp + 0x6c], 0
jne 0x438bf3
push 0xffffffffffffffff
push 0x10
push 0x549f
call fcn.004e411e
mov edx, dword [esp + 0x48]
push edx
mov dword [esp + 0xab0], 0xffffffff
call fcn.004d7727
mov eax, dword [esp + 0x44]
push eax
call fcn.004d7727
mov ecx, dword [esp + 0x4c]
push ecx
call fcn.004d7727
add esp, 0xc
xor eax, eax
jmp 0x4399e7
xor edi, edi
cmp eax, edx
mov dword [0x5b25e0], edi
jge 0x438c38
add eax, 0x10
mov dword [esi + 0x10], eax
lea edx, [esp + 0x14]
push edx
mov ecx, esi
call fcn.00435cc0
mov ebx, eax
jmp 0x438c50
mov eax, dword [esp + 0x14]
mov ecx, dword [edi*4 + 0x5b25ec]
push eax
push ebx
push ecx
call fcn.00434390
add esp, 0xc
test eax, eax
jne 0x438c72
inc edi
cmp edi, 2
jl 0x438c50
jmp 0x438c7f
mov edx, dword [edi*4 + 0x5b25ec]
mov dword [0x5b25e0], edx
mov eax, dword [esi + 0x10]
xor edi, edi
cmp eax, dword [esi + 8]
jl 0x438c8d
xor ebx, ebx
jmp 0x438cce
mov ecx, dword [esi + 0x20]
mov ebx, dword [eax + ecx]
push 4
mov dword [esp + 0x18], ebx
call fcn.004d76f8
mov dl, byte [esp + 0x1b]
mov cl, byte [esp + 0x1a]
mov byte [eax], dl
mov byte [eax + 1], cl
mov byte [eax + 2], bh
mov byte [eax + 3], bl
mov edi, dword [eax]
push eax
call fcn.004d7727
mov eax, dword [esi + 0x10]
lea ecx, [eax + 4]
mov eax, dword [esi + 0x20]
add eax, ecx
add esp, 8
add ecx, edi
mov dword [esi + 0x10], ecx
mov ebx, eax
call fcn.004e3232
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x438ce8
push 0x80004005
call fcn.00401f30
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
xor eax, eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], 0x546d4c
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x54], 0x546dd0
push edi
push ebx
push 0x546d4c
mov byte [esp + 0xab8], 3
mov dword [esp + 0x24], eax
call fcn.00434390
push edi
push ebx
push 0x546dd0
mov dword [esp + 0x3c], eax
call fcn.00434390
add esp, 0x18
cmp dword [esp + 0x24], 0
jne 0x438e78
test eax, eax
jne 0x438e7a
mov edx, dword [ebp + 0x60]
push 0x3e7
lea ecx, [esp + 0x2d4]
push ecx
push edi
neg edx
push ebx
sbb edx, edx
push eax
and edx, 0xfde9
push edx
call dword [0x53d280]
lea edx, [esp + 0x2d0]
xor ecx, ecx
push edx
mov word [esp + eax*2 + 0x2d4], cx
lea eax, [esp + 0x20]
push 0x54a0
push eax
call fcn.00402fc0
add esp, 0xc
cmp dword [ebp + 0x6c], 0
jne 0x438dfc
push 0
push 0x10
lea ecx, [esp + 0x2d8]
push ecx
call fcn.004e40d0
push 0
mov byte [esp + 0xab0], 2
call fcn.004d7727
push 0
call fcn.004d7727
push 0
call fcn.004d7727
push 0
mov byte [esp + 0xabc], 1
call fcn.004d7727
push 0
call fcn.004d7727
push 0
call fcn.004d7727
push 0
call fcn.004d7727
push 0
call fcn.004d7727
add esp, 0x20
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0xaac], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x438b24
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x438b24
test eax, eax
jle 0x438e8b
cmp dword [esp + 0x24], 0
jne 0x438e8b
mov dword [esp + 0x18], 1
mov eax, dword [esi + 0x10]
xor edi, edi
cmp eax, dword [esi + 8]
mov dword [esp + 0x14], edi
jl 0x438e9d
xor ebx, ebx
jmp 0x438ee2
mov ecx, dword [esi + 0x20]
mov ebx, dword [eax + ecx]
push 4
mov dword [esp + 0x18], ebx
call fcn.004d76f8
mov dl, byte [esp + 0x1b]
mov cl, byte [esp + 0x1a]
mov byte [eax], dl
mov byte [eax + 1], cl
mov byte [eax + 2], bh
mov byte [eax + 3], bl
mov edi, dword [eax]
push eax
mov dword [esp + 0x1c], edi
call fcn.004d7727
mov eax, dword [esi + 0x10]
lea ecx, [eax + 4]
mov eax, dword [esi + 0x20]
add eax, ecx
add esp, 8
add ecx, edi
mov dword [esi + 0x10], ecx
mov ebx, eax
mov edx, dword [ebp + 0x10e8]
push edi
push ebx
push edx
call fcn.00434390
add esp, 0xc
test eax, eax
jne 0x438fc7
mov ecx, dword [ebp + 0x60]
push 0x3e7
lea eax, [esp + 0x2d4]
push eax
push edi
neg ecx
push ebx
sbb ecx, ecx
push 0
and ecx, 0xfde9
push ecx
call dword [0x53d280]
xor edx, edx
mov word [esp + eax*2 + 0x2d0], dx
lea eax, [esp + 0x2d0]
push eax
lea ecx, [esp + 0x20]
push 0x54a1
push ecx
call fcn.00402fc0
add esp, 0xc
cmp dword [ebp + 0x6c], 0
jne 0x438f5b
push 0
push 0x10
lea edx, [esp + 0x2d8]
push edx
call fcn.004e40d0
push 0
mov byte [esp + 0xab0], 2
call fcn.004d7727
push 0
call fcn.004d7727
push 0
call fcn.004d7727
push 0
mov byte [esp + 0xabc], 1
call fcn.004d7727
push 0
call fcn.004d7727
push 0
call fcn.004d7727
push 0
call fcn.004d7727
push 0
call fcn.004d7727
add esp, 0x20
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0xaac], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x438e63
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.00435cc0
mov ebx, dword [esp + 0x14]
mov edx, dword [ebp + 0x10e8]
mov edi, eax
push ebx
push edi
push edx
call fcn.00434390
add esp, 0xc
test eax, eax
jne 0x439088
mov ecx, dword [ebp + 0x60]
push 0x3e7
lea eax, [esp + 0x2d4]
push eax
push ebx
neg ecx
push edi
sbb ecx, ecx
push 0
and ecx, 0xfde9
push ecx
call dword [0x53d280]
xor edx, edx
mov word [esp + eax*2 + 0x2d0], dx
lea eax, [esp + 0x2d0]
push eax
lea ecx, [esp + 0x20]
push 0x54a1
push ecx
call fcn.00402fc0
add esp, 0xc
cmp dword [ebp + 0x6c], 0
jne 0x439052
push 0
push 0x10
lea edx, [esp + 0x2d8]
push edx
call fcn.004e40d0
push 0
mov byte [esp + 0xab0], 2
call fcn.004d7727
push 0
call fcn.004d7727
push 0
call fcn.004d7727
add esp, 0xc
lea ecx, [esp + 0x70]
mov byte [esp + 0xaac], 1
call fcn.00434920
jmp 0x438fa6
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.00435cc0
mov edx, dword [esp + 0x14]
push edx
push eax
mov eax, dword [ebp + 0x10fc]
lea edi, [ebp + 0x10fc]
push eax
call fcn.00434390
add esp, 0xc
test eax, eax
jne 0x4390c6
cmp dword [ebp + 0x6c], eax
jne 0x4390c6
push 0xffffffffffffffff
push 0x30
push 0x54a2
call fcn.004e411e
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.00435cc0
mov edx, dword [esp + 0x14]
push edx
push eax
mov eax, dword [edi]
push eax
call fcn.00434390
add esp, 0xc
test eax, eax
jne 0x4390fa
cmp dword [ebp + 0x6c], eax
jne 0x4390fa
push 0xffffffffffffffff
push 0x30
push 0x54a2
call fcn.004e411e
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.00435cc0
mov edx, dword [esp + 0x14]
push edx
push eax
push 0x547004
call fcn.00434390
add esp, 0xc
test eax, eax
jne 0x439130
cmp dword [ebp + 0x6c], eax
jne 0x439130
push 0xffffffffffffffff
push 0x30
push 0x54a3
call fcn.004e411e
lea eax, [esp + 0x14]
push eax
mov ecx, esi
call fcn.00435cc0
mov ecx, dword [esp + 0x14]
push ecx
push eax
push 0x547004
call fcn.00434390
add esp, 0xc
test eax, eax
jne 0x439166
cmp dword [ebp + 0x6c], eax
jne 0x439166
push 0xffffffffffffffff
push 0x30
push 0x54a3
call fcn.004e411e
mov edx, dword [0x5b25e0]
mov dword [esp + 0x20], 0
cmp edx, dword [0x57c96c]
jne 0x43932b
push ebp
push 0x1e
lea ecx, [esp + 0x30]
mov dword [esp + 0x28], 0x400
call fcn.00436a50
push 4
call fcn.004d76f8
mov byte [eax], 0
mov byte [eax + 1], 0
mov byte [eax + 2], 4
mov byte [eax + 3], 0
mov ecx, dword [eax]
push eax
mov dword [esp + 0x2c], ecx
call fcn.004d7727
add esp, 8
push 4
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x30]
call fcn.00435980
lea eax, [ebp + 0x1240]
push eax
mov eax, dword [0x5b25e4]
push ebp
push edi
lea ebx, [ebp + 0x10e8]
push ebx
push eax
lea ecx, [esp + 0x3c]
call fcn.00435b30
test eax, eax
je 0x439052
lea ecx, [ebp + 0x123c]
push ecx
push ebp
push edi
push ebx
mov ecx, esi
call fcn.00436ac0
test eax, eax
jne 0x43922c
lea ecx, [esp + 0x54]
mov byte [esp + 0xaac], 2
call fcn.00436a00
lea ecx, [esp + 0x70]
mov byte [esp + 0xaac], 1
call fcn.00434920
jmp 0x438e47
mov eax, dword [esi + 0x10]
cmp eax, dword [esi + 8]
jge 0x439243
mov ecx, dword [esi + 0x20]
mov cl, byte [eax + ecx]
inc eax
mov dword [esi + 0x10], eax
cmp cl, 0x1f
je 0x4392bc
cmp dword [ebp + 0x6c], 0
jne 0x439257
push 0xffffffffffffffff
push 0x10
push 0x54a4
call fcn.004e411e
lea ecx, [esp + 0x54]
mov byte [esp + 0xaac], 2
call fcn.00436a00
lea ecx, [esp + 0x70]
mov byte [esp + 0xaac], 1
call fcn.00434920
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0xaac], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4392a1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x28]
mov dword [esp + 0xaac], 0xffffffff
call fcn.00436950
xor eax, eax
jmp 0x4399e7
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x28]
push edx
mov ecx, esi
mov ebx, 0x20
mov dword [esp + 0x1c], 0x21
call fcn.00436de0
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0x50]
push ecx
mov ecx, esi
call fcn.00436de0
mov edx, dword [esp + 0x9c]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
push edx
mov edx, dword [esp + 0x28]
push eax
push ecx
lea edi, [ebp + 0x1208]
push edx
mov ecx, edi
call fcn.00435500
mov eax, dword [esp + 0x24]
push eax
call fcn.004d7727
mov ecx, dword [esp + 0x50]
push ecx
call fcn.004d7727
add esp, 8
jmp 0x439356
push 1
push 0x57c960
push 0x80
lea edi, [ebp + 0x1208]
push 0x57c8e0
mov ecx, edi
mov ebx, 0x1e
mov dword [esp + 0x24], 0x1f
call fcn.00435500
mov ecx, edi
call fcn.004355a0
test eax, eax
jne 0x4393aa
cmp dword [ebp + 0x6c], eax
jne 0x439374
push 0xffffffffffffffff
push 0x10
push 0x54a6
call fcn.004e411e
push 0
mov byte [esp + 0xab0], 2
call fcn.004d7727
push 0
call fcn.004d7727
push 0
call fcn.004d7727
add esp, 0xc
lea ecx, [esp + 0x70]
mov byte [esp + 0xaac], 1
call fcn.00434920
jmp 0x438e47
push ebp
push ebx
lea ecx, [esp + 0x30]
call fcn.00436a50
mov ecx, dword [ebp + 0x1224]
mov edx, dword [ebp + 0x1210]
push ecx
push edx
lea ecx, [esp + 0x30]
call fcn.00435ab0
lea eax, [ebp + 0x1240]
push eax
push ebp
lea eax, [ebp + 0x10fc]
push eax
lea eax, [ebp + 0x10e8]
push eax
mov eax, dword [0x5b25e4]
push eax
lea ecx, [esp + 0x3c]
call fcn.00435b30
test eax, eax
jne 0x43941c
lea ecx, [esp + 0x54]
mov byte [esp + 0xaac], 2
call fcn.00436a00
lea ecx, [esp + 0x70]
mov byte [esp + 0xaac], 1
call fcn.00434920
jmp 0x438fa6
lea ecx, [ebp + 0x123c]
push ecx
push ebp
lea eax, [ebp + 0x10fc]
push eax
lea eax, [ebp + 0x10e8]
push eax
mov ecx, esi
call fcn.00436ac0
test eax, eax
je 0x439205
mov eax, dword [esi + 0x10]
cmp eax, dword [esi + 8]
jl 0x43944d
xor cl, cl
jmp 0x439457
mov ecx, dword [esi + 0x20]
mov cl, byte [eax + ecx]
inc eax
mov dword [esi + 0x10], eax
movzx edx, cl
cmp edx, dword [esp + 0x14]
je 0x4394a4
cmp dword [ebp + 0x6c], 0
jne 0x439474
push 0xffffffffffffffff
push 0x10
push 0x54a7
call fcn.004e411e
lea ecx, [esp + 0x54]
mov byte [esp + 0xaac], 2
call fcn.00436a00
lea ecx, [esp + 0x70]
mov byte [esp + 0xaac], 1
call fcn.00434920
lea ecx, [esp + 0x1c]
call fcn.00402910
jmp 0x4392a1
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
call fcn.00435cc0
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x28]
push edx
mov ecx, esi
mov ebx, eax
call fcn.00436de0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x24]
push eax
push ecx
mov ecx, edi
call fcn.00435560
mov edx, dword [esp + 0x24]
push edx
call fcn.004d7727
add esp, 4
mov ecx, edi
call fcn.004357d0
test eax, eax
jne 0x4394ff
cmp dword [ebp + 0x6c], eax
jne 0x439474
push 0xffffffffffffffff
push 0x10
push 0x54a5
jmp 0x43946f
lea eax, [esp + 0x24]
push eax
mov ecx, esi
call fcn.00435cc0
mov ecx, dword [esp + 0x4c]
mov edx, dword [0x5a9d20]
push ecx
mov dword [esp + 0x18], eax
lea eax, [edx + 0x5a9d28]
push ebx
push eax
call fcn.004342a0
mov ecx, dword [0x5b25e0]
add dword [0x5a9d20], eax
add esp, 0xc
cmp ecx, dword [0x57c96c]
jne 0x4395a9
mov edx, dword [esp + 0x20]
mov eax, dword [0x5a9d20]
push edx
lea ecx, [eax + 0x5a9d28]
push ecx
call fcn.00434260
mov ecx, dword [0x5a9d20]
mov edx, dword [ebp + 0x121c]
add ecx, eax
mov eax, dword [edi]
push edx
mov dword [0x5a9d20], ecx
push eax
lea ecx, [ecx + 0x5a9d28]
push ecx
call fcn.004342f0
mov ecx, dword [0x5a9d20]
mov edx, dword [ebp + 0x1220]
add ecx, eax
mov eax, dword [ebp + 0x120c]
push edx
mov dword [0x5a9d20], ecx
push eax
lea ecx, [ecx + 0x5a9d28]
push ecx
call fcn.004342f0
add esp, 0x20
add dword [0x5a9d20], eax
mov edx, dword [ebp + 0x1224]
mov eax, dword [ebp + 0x1210]
mov ecx, dword [0x5a9d20]
push edx
push eax
lea edx, [ecx + 0x5a9d28]
push edx
call fcn.004342f0
mov ecx, dword [0x5a9d20]
mov edx, dword [ebp + 0x1214]
add ecx, eax
mov eax, dword [ebp + 0x1228]
push eax
push edx
lea eax, [ecx + 0x5a9d28]
push eax
mov dword [0x5a9d20], ecx
call fcn.004342f0
mov ecx, dword [0x5a9d20]
mov edx, dword [ebp + 0x122c]
add ecx, eax
mov eax, dword [ebp + 0x1218]
push edx
mov dword [0x5a9d20], ecx
push eax
lea ecx, [ecx + 0x5a9d28]
push ecx
call fcn.004342f0
mov ecx, dword [0x5a9d20]
add esp, 0x24
push 0x14
add ecx, eax
lea edx, [esp + 0xa4]
push edx
push ecx
push 0x5a9d28
mov dword [0x5a9d20], ecx
push 0x8004
mov ecx, 0x5b25e4
call fcn.004344a0
cmp dword [esp + 0x18], 0
mov dword [0x5a9d20], 0
je 0x4396f4
mov eax, dword [esp + 0x4c]
push eax
push ebx
lea ecx, [esp + 0x5c]
call fcn.00435040
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x14]
push 0x14
lea ecx, [esp + 0xa4]
push ecx
push edx
push eax
lea ecx, [esp + 0x64]
call fcn.004352d0
test eax, eax
je 0x439740
lea ecx, [esp + 0x54]
call fcn.004350f0
lea ecx, [esp + 0x54]
mov edi, eax
call fcn.004351a0
mov ebx, eax
mov eax, dword [ebp + 0x48]
test eax, eax
jge 0x4396b4
mov eax, 0x16
mov edx, dword [ebp + 0x2c]
push ebx
push edi
push eax
push edx
mov ecx, ebp
call fcn.00437c80
push ebx
mov dword [esp + 0x54], eax
call fcn.004d7727
push edi
call fcn.004d7727
add esp, 8
cmp dword [esp + 0x50], 0
jne 0x439758
cmp dword [ebp + 0x6c], 0
jne 0x439474
push 0xffffffffffffffff
push 0x40
push 0x4e2d
jmp 0x43946f
mov ecx, dword [esp + 0x4c]
push ecx
push ebx
lea ecx, [esp + 0x78]
call fcn.00434a00
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push 0x14
lea edx, [esp + 0xa4]
push edx
push eax
push ecx
lea ecx, [esp + 0x80]
call fcn.00434d30
test eax, eax
je 0x439740
lea ecx, [esp + 0x70]
call fcn.00434ac0
lea ecx, [esp + 0x70]
mov edi, eax
call fcn.00434c00
jmp 0x4396a6
cmp dword [ebp + 0x6c], 0
jne 0x439474
push 0xffffffffffffffff
push 0x10
push 0x54a8
jmp 0x43946f
push ebp
push 0x15
lea ecx, [esp + 0x30]
call fcn.00436a50
lea eax, [esp + 0x28]
push eax
mov ecx, ebp
call fcn.004368c0
test eax, eax
je 0x439474
push esi
mov ecx, ebp
call fcn.004371a0
test eax, eax
je 0x439474
mov ecx, esi
call fcn.00435d80
cmp al, 0x15
je 0x4397ab
cmp dword [ebp + 0x6c], 0
jne 0x439474
push 0xffffffffffffffff
push 0x10
push 0x54a9
jmp 0x43946f
cmp dword [ebp + 0x1238], 0
jne 0x4397f5
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0xa4]
mov eax, dword [esp + 0xa8]
mov dword [ebp + 0x125c], ecx
mov ecx, dword [esp + 0xac]
mov dword [ebp + 0x1260], edx
mov edx, dword [esp + 0xb0]
mov dword [ebp + 0x1264], eax
mov dword [ebp + 0x1268], ecx
mov dword [ebp + 0x126c], edx
mov edx, dword [ebp + 0x122c]
lea eax, [esp + 0xb4]
push eax
mov eax, dword [ebp + 0x1218]
push 0x43
lea esi, [ebp + 0x125c]
push esi
lea ecx, [esp + 0xac]
push ecx
push edx
push eax
mov ecx, ebp
call fcn.00436770
push 1
lea ecx, [esp + 0xb8]
push ecx
lea edi, [ebp + 0x10e8]
mov ecx, edi
call fcn.00434520
test eax, eax
je 0x439474
mov ecx, dword [ebp + 0x122c]
lea edx, [esp + 0xb4]
push edx
mov edx, dword [ebp + 0x1218]
push 0x44
push esi
lea eax, [esp + 0xac]
push eax
push ecx
push edx
mov ecx, ebp
call fcn.00436770
push 0
lea eax, [esp + 0xb8]
push eax
mov ecx, edi
call fcn.00434520
test eax, eax
je 0x439474
mov eax, dword [ebp + 0x122c]
lea ecx, [esp + 0xb4]
push ecx
mov ecx, dword [ebp + 0x1218]
push 0x41
push esi
lea edx, [esp + 0xac]
push edx
push eax
push ecx
mov ecx, ebp
call fcn.00436770
mov eax, dword [edi + 0xc]
test eax, eax
je 0x439474
mov ebx, dword [0x53d030]
push 0
lea edx, [esp + 0xb8]
push edx
push 1
push eax
call ebx
test eax, eax
je 0x439474
mov edx, dword [ebp + 0x122c]
lea eax, [esp + 0xb4]
push eax
mov eax, dword [ebp + 0x1218]
push 0x42
push esi
lea ecx, [esp + 0xac]
push ecx
push edx
push eax
mov ecx, ebp
call fcn.00436770
mov eax, dword [edi + 0x10]
test eax, eax
je 0x439474
push 0
lea ecx, [esp + 0xb8]
push ecx
push 1
push eax
call ebx
test eax, eax
je 0x439474
mov ecx, dword [ebp + 0x122c]
lea edx, [esp + 0xb4]
push edx
mov edx, dword [ebp + 0x1218]
push 0x45
push esi
lea eax, [esp + 0xac]
push eax
push ecx
push edx
mov ecx, ebp
call fcn.00436770
push 0
push 1
lea eax, [esp + 0xbc]
lea edi, [ebp + 0x10fc]
push eax
mov ecx, edi
call fcn.00434870
mov eax, dword [ebp + 0x122c]
lea ecx, [esp + 0xb4]
push ecx
mov ecx, dword [ebp + 0x1218]
push 0x46
push esi
lea edx, [esp + 0xac]
push edx
push eax
push ecx
mov ecx, ebp
call fcn.00436770
push 0
push 0
lea edx, [esp + 0xbc]
push edx
mov ecx, edi
call fcn.00434870
lea ecx, [esp + 0x54]
mov dword [ebp + 0x1238], 1
mov byte [esp + 0xaac], 2
call fcn.00436a00
lea ecx, [esp + 0x70]
mov byte [esp + 0xaac], 1
call fcn.00434920
lea ecx, [esp + 0x1c]
call fcn.00402910
lea ecx, [esp + 0x28]
mov dword [esp + 0xaac], 0xffffffff
call fcn.00436950
mov eax, 1
mov ecx, dword [esp + 0xaa4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xa8c]
xor ecx, esp
call fcn.0051767d
add esp, 0xa9c
ret 8