Function at 0x536d10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x84]
cmp eax, dword [ecx + 8]
jbe 0x538156
sub esp, 0x104
mov eax, dword [esp + 0x108]
mov ecx, dword [eax + 0xb8]
mov edx, dword [eax + 0xbc]
test ecx, ecx
jne 0x5380d4
nop
lea ecx, [eax + 0xc]
mov dword [esp], ecx
call fcn.00450ac0
mov eax, dword [esp + 0x108]
mov ecx, dword [eax + 0x178]
mov edx, dword [eax + 0x180]
cmp edx, ecx
setae bl
mov ebp, dword [eax + 0x184]
mov esi, ecx
sar ecx, 0x1f
cmp ebp, ecx
sete cl
xchg ebp, ebx
setg bl
xchg ebp, ebx
nop
and ecx, ebx
or ebp, ecx
mov ecx, dword [esp + 4]
cmp ecx, 1
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x5380cb
xor edx, edx
lea ebx, [eax + 0xbc]
mov dword [esp + 0x70], ebx
test edx, edx
jne 0x53804a
mov dword [esp + 0x44], ecx
lea edi, [eax + 0x174]
mov dword [esp + 0x50], edi
nop
mov edx, dword [0x8a6100]
test edx, edx
jne 0x53802c
mov edx, eax
xor eax, eax
call fcn.0044d18a
mov dword [edx + 0x188], 0xffffffff
mov eax, dword [edx + 4]
mov ecx, dword [edx]
lea ebx, [0x649ea0]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00407610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x108]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 5
call fcn.005383e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x536f47
cmp dword [0x894ba8], ecx
je 0x536f17
xor edx, edx
test dl, dl
je 0x536f0b
nop
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0x164]
cmp dword [edx + 0x16c], ebx
jne 0x536e6d
mov eax, dword [0x894b84]
mov ecx, dword [0x894b80]
mov dword [esp + 0x48], eax
mov dword [esp + 0x2c], ecx
lea edx, [0x653e40]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00407770
movzx eax, byte [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test al, al
jne 0x536ef9
mov eax, 1
test al, al
je 0x536eef
nop
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x536ee0
mov eax, dword [esp + 0x48]
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
mov eax, dword [esp + 0x48]
call fcn.0044d090
jmp 0x536ecb
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x2c]
jmp 0x536ecb
mov eax, dword [edx + 0x14]
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 4]
xor eax, 1
jmp 0x536ea1
mov edx, dword [esp + 0x108]
jmp 0x536e6d
mov dword [esp + 0x5c], eax
mov dword [esp + 0x38], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [0x894bac]
mov dword [esp + 8], edx
call fcn.00402f30
movzx edx, byte [esp + 0xc]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x38]
jmp 0x536e43
nop
mov ecx, dword [esp + 0x108]
mov edx, dword [ecx + 0x16c]
mov ebx, dword [ecx + 0x168]
mov ebp, dword [ecx + 0x160]
cmp dword [ecx + 0x164], edx
jb 0x53814f
sub ebx, edx
mov eax, ebx
neg ebx
sar ebx, 0x1f
and edx, ebx
cmp eax, 5
jb 0x538148
movzx ebx, byte [ebp + edx]
mov eax, ecx
mov ecx, dword [esp + 0x44]
cmp ecx, 1
jne 0x537f14
mov esi, ecx
movzx ecx, byte [ebp + edx + 1]
shl ecx, 8
mov edi, ebx
movzx ebx, byte [ebp + edx + 2]
or ecx, ebx
movzx ebx, byte [ebp + edx + 3]
shl ebx, 8
movzx edx, byte [ebp + edx + 4]
or ebx, edx
movzx edx, byte [eax + 0x22]
test dl, dl
je 0x536fd9
movzx ebp, word [eax + 0x20]
cmp bp, 0x304
je 0x537f0d
cmp cx, bp
jne 0x537d4e
test dl, dl
je 0x537c0e
mov dword [esp + 0x34], ebx
cmp word [eax + 0x20], 0x304
jne 0x53716f
cmp ebx, 0x4100
jle 0x53716f
mov dword [esp], eax
mov byte [esp + 4], 0x16
call fcn.00538680
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00407360
mov eax, dword [esp + 4]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
lea ecx, [0x640260]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], eax
lea eax, [0x691699]
mov dword [esp], eax
mov dword [esp + 4], 0x28
lea eax, [esp + 0x74]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.0049f310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x54], ecx
lea edi, [esp + 0xa4]
mov edx, eax
xor eax, eax
call fcn.0044d18a
nop
mov eax, dword [esp + 0x54]
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], edx
nop
mov eax, dword [esp + 0x108]
mov ecx, dword [eax + 0x168]
mov edx, dword [eax + 0x160]
mov ebx, dword [eax + 0x16c]
mov ebp, dword [eax + 0x164]
cmp ebx, ebp
ja 0x53812c
sub ebp, ebx
sub ecx, ebx
neg ecx
sar ecx, 0x1f
and ebx, ecx
lea ecx, [edx + ebx]
cmp ebp, 5
jge 0x537165
lea edx, [esp + 0xac]
cmp edx, ecx
je 0x5370ed
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0044d890
lea edi, [esp + 0xec]
lea esi, [esp + 0xa4]
call fcn.0044d664
lea eax, [0x6e5f80]
mov dword [esp], eax
lea eax, [esp + 0xec]
mov dword [esp + 4], eax
call fcn.004075a0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
nop
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], eax
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x537154
mov dword [edx + 0xbc], ecx
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], ecx
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
mov edx, eax
mov eax, ecx
call fcn.0044d090
mov eax, edx
jmp 0x53713f
mov ebp, 5
jmp 0x5370d2
cmp ebx, 0x4800
jg 0x536ffb
mov ecx, dword [eax + 4]
mov edx, dword [eax]
lea ebx, [0x649ea0]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00407610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x108]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x34]
add eax, 5
mov dword [esp + 0x40], eax
mov dword [esp + 0xc], eax
call fcn.005383e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
test ecx, ecx
jne 0x537b70
nop
mov eax, dword [esp + 0x108]
mov byte [eax + 0x170], 0
nop
mov ecx, dword [eax + 0x16c]
mov edx, dword [eax + 0x164]
sub edx, ecx
mov ebx, dword [eax + 0x168]
mov ebp, dword [eax + 0x160]
mov esi, dword [esp + 0x40]
cmp esi, edx
jle 0x537b69
lea esi, [edx + ecx]
test esi, esi
jl 0x538125
cmp ecx, esi
ja 0x538125
cmp esi, ebx
ja 0x538125
mov dword [eax + 0x16c], esi
sub ebx, ecx
mov esi, ebx
neg ebx
sar ebx, 0x1f
and ecx, ebx
add ecx, ebp
test edx, edx
jle 0x537243
mov byte [eax + 0x170], 0xff
lea ebx, [eax + 0xb0]
mov dword [esp + 0x6c], ebx
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
call fcn.00535390
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x10]
movzx esi, byte [esp + 0x1c]
test eax, eax
je 0x5372e8
lea ecx, [0x6e5fa0]
cmp eax, ecx
jne 0x538107
movzx eax, byte [ebx]
mov ecx, dword [esp + 0x108]
mov dword [esp], ecx
mov byte [esp + 4], al
call fcn.00538680
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x5372dd
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x5372c8
cmp edx, 0x4000
jg 0x537b0f
mov ebx, dword [esp + 0x108]
mov eax, ecx
mov ecx, dword [ebx + 0xc4]
test ecx, ecx
je 0x537ab1
xchg esi, eax
cmp al, 0x15
xchg esi, eax
je 0x537327
xchg esi, eax
cmp al, 0x14
xchg esi, eax
je 0x537327
test edx, edx
jle 0x537327
mov dword [ebx + 0x1cc], 0
movzx ecx, word [ebx + 0x20]
cmp cx, 0x304
jne 0x537aa5
xchg esi, eax
cmp al, 0x16
xchg esi, eax
je 0x537a99
nop
mov edi, ecx
mov ecx, dword [ebx + 0x190]
sub ecx, dword [ebx + 0x198]
test ecx, ecx
jg 0x537a46
xchg esi, eax
cmp al, 0x15
xchg esi, eax
ja 0x5378a0
xchg esi, eax
cmp al, 0x14
xchg esi, eax
jne 0x537578
cmp edx, 1
je 0x5373c6
mov dword [esp], ebx
mov byte [esp + 4], 0x32
call fcn.00538680
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x5373bb
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x5373a6
cmp byte [ebp], 1
jne 0x537373
nop
mov eax, dword [ebx + 0x190]
sub eax, dword [ebx + 0x198]
test eax, eax
jg 0x537525
cmp di, 0x304
je 0x5374f4
movzx eax, byte [esp + 0x10c]
test al, al
je 0x5374a1
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
call fcn.00534eb0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x537484
lea edx, [0x6e5fa0]
cmp ecx, edx
jne 0x5380e9
movzx eax, byte [eax]
mov ecx, dword [esp + 0x108]
mov dword [esp], ecx
mov byte [esp + 4], al
call fcn.00538680
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], eax
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x537473
mov dword [edx + 0xbc], ecx
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], ecx
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
mov edx, eax
mov eax, ecx
call fcn.0044d090
mov eax, edx
jmp 0x53745e
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
add esp, 0x104
ret
mov dword [esp], ebx
mov byte [esp + 4], 0xa
call fcn.00538680
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x5374e9
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x5374d4
mov dword [esp], ebx
movzx eax, byte [esp + 0x10c]
mov byte [esp + 4], al
call fcn.00538160
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov dword [esp], ebx
mov byte [esp + 4], 0xa
call fcn.00538680
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x53756d
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x537558
xchg esi, eax
cmp al, 0x15
xchg esi, eax
jne 0x53784d
cmp edx, 2
jne 0x5377fa
movzx ecx, byte [ebp + 1]
test cl, cl
jne 0x5375d7
mov eax, dword [0x894b84]
nop
mov ecx, dword [0x894b80]
mov dword [ebx + 0xb8], ecx
mov edx, dword [0x8a6100]
test edx, edx
jne 0x5375cc
mov dword [ebx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x5375b7
mov byte [esp + 0x29], cl
cmp di, 0x304
je 0x53773d
movzx eax, byte [ebp]
cmp al, 1
je 0x53770c
cmp al, 2
jne 0x5376b9
lea eax, [0x664ca0]
mov dword [esp], eax
call fcn.00409a20
mov eax, dword [esp + 4]
mov dword [eax + 4], 0xc
mov ecx, dword [0x8a6100]
test ecx, ecx
jne 0x5376a5
lea ecx, [0x686724]
mov dword [eax], ecx
lea ecx, [0x6e5fa0]
mov dword [eax + 0x20], ecx
mov ecx, dword [0x8a6100]
movzx edx, byte [esp + 0x29]
movzx edx, dl
lea ebx, [0x869f00]
add edx, ebx
test ecx, ecx
jne 0x537695
mov dword [eax + 0x24], edx
nop
lea ecx, [0x6e5ae0]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x53768a
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x537675
lea edi, [eax + 0x24]
mov ecx, eax
mov eax, edx
call fcn.0044d090
mov eax, ecx
jmp 0x537651
mov edi, eax
lea eax, [0x686724]
call fcn.0044d090
mov eax, edi
jmp 0x53762b
mov dword [esp], ebx
mov byte [esp + 4], 0xa
call fcn.00538680
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x537701
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x5376ec
mov dword [esp], ebx
movzx eax, byte [esp + 0x10c]
mov byte [esp + 4], al
call fcn.00538160
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
lea eax, [0x664ca0]
mov dword [esp], eax
call fcn.00409a20
mov eax, dword [esp + 4]
mov dword [eax + 4], 0xc
mov ecx, dword [0x8a6100]
test ecx, ecx
jne 0x5377e6
lea ecx, [0x686724]
mov dword [eax], ecx
lea ecx, [0x6e5fa0]
mov dword [eax + 0x20], ecx
mov ecx, dword [0x8a6100]
movzx edx, byte [esp + 0x29]
movzx edx, dl
lea ebx, [0x869f00]
add edx, ebx
test ecx, ecx
jne 0x5377d6
mov dword [eax + 0x24], edx
nop
lea ecx, [0x6e5ae0]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x5377cb
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x5377b6
lea edi, [eax + 0x24]
mov ecx, eax
mov eax, edx
call fcn.0044d090
mov eax, ecx
jmp 0x537792
mov edi, eax
lea eax, [0x686724]
call fcn.0044d090
mov eax, edi
jmp 0x53776c
mov dword [esp], ebx
mov byte [esp + 4], 0xa
call fcn.00538680
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x537842
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x53782d
mov dword [esp], ebx
mov byte [esp + 4], 0xa
call fcn.00538680
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x537895
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x537880
xchg esi, eax
cmp al, 0x16
xchg esi, eax
jne 0x53792d
test edx, edx
jne 0x537902
mov dword [esp], ebx
mov byte [esp + 4], 0xa
call fcn.00538680
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x5378f7
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x5378e2
movzx ecx, byte [esp + 0x10c]
test cl, cl
jne 0x5378af
lea ecx, [ebx + 0x18c]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.004cdcf0
jmp 0x537484
xchg esi, eax
cmp al, 0x17
xchg esi, eax
jne 0x53784d
mov ecx, dword [esp + 0x44]
cmp ecx, 1
jne 0x53794d
movzx ecx, byte [esp + 0x10c]
test cl, cl
je 0x5379a0
mov dword [esp], ebx
mov byte [esp + 4], 0xa
call fcn.00538680
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x537995
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x537980
test edx, edx
je 0x537a1d
mov dword [esp + 0x40], eax
nop
mov ecx, dword [0x8a6100]
test ecx, ecx
jne 0x5379e3
mov edi, dword [esp + 0x50]
xor eax, eax
call fcn.0044d18a
mov dword [ebx + 0x174], ebp
mov dword [ebx + 0x178], edx
mov eax, dword [esp + 0x40]
mov dword [ebx + 0x17c], eax
mov dword [ebx + 0x188], 0xffffffff
jmp 0x537484
mov dword [esp + 0x3c], edx
mov dword [esp + 0x64], ebp
lea eax, [0x65b380]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0040f980
mov ebx, dword [esp + 0x108]
lea edi, [ebx + 0x174]
mov eax, dword [esp + 0x64]
call fcn.0044d090
mov edx, dword [esp + 0x3c]
jmp 0x5379c4
mov dword [esp], ebx
mov byte [esp + 4], cl
call fcn.00538160
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov dword [esp], ebx
mov byte [esp + 4], 0xa
call fcn.00538680
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x537a8e
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x537a79
xchg esi, eax
cmp al, 0x15
xchg esi, eax
mov edi, ecx
jmp 0x53735d
xchg esi, eax
cmp al, 0x15
xchg esi, eax
mov edi, ecx
jmp 0x53735d
xchg esi, eax
cmp al, 0x17
xchg esi, eax
jne 0x53730b
mov dword [esp], ebx
mov byte [esp + 4], 0xa
call fcn.00538680
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x537b04
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x537aef
mov eax, dword [esp + 0x108]
mov dword [esp], eax
mov byte [esp + 4], 0x16
call fcn.00538680
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x537b5e
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x537b49
mov edx, esi
jmp 0x53720a
mov dword [esp + 0x4c], eax
mov dword [esp + 0x30], ecx
lea edx, [0x653e40]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00407770
mov eax, dword [esp + 0x10]
movzx ecx, byte [esp + 0x14]
mov edx, dword [esp + 0xc]
test cl, cl
jne 0x537bfc
mov eax, 1
test al, al
je 0x537bf2
nop
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x537be3
mov eax, dword [esp + 0x4c]
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
mov eax, dword [esp + 0x4c]
call fcn.0044d090
jmp 0x537bce
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x30]
jmp 0x537bce
mov ecx, dword [edx + 0x14]
mov dword [esp], eax
call ecx
movzx eax, byte [esp + 4]
xor eax, 1
jmp 0x537ba4
xchg edi, eax
cmp al, 0x15
xchg edi, eax
je 0x537d3e
xchg edi, eax
cmp al, 0x16
xchg edi, eax
je 0x537d3e
mov ecx, dword [eax + 4]
mov dword [esp + 0x60], ecx
mov edx, dword [eax]
lea edi, [esp + 0xbc]
mov ebx, eax
xor eax, eax
call fcn.0044d18a
nop
lea ecx, [0x693613]
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], 0x2f
mov dword [esp + 0xcc], edx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0xd0], ecx
nop
mov ecx, dword [ebx + 0x16c]
mov edx, dword [ebx + 0x168]
mov ebp, dword [ebx + 0x164]
mov eax, ebx
mov ebx, dword [ebx + 0x160]
cmp ecx, ebp
ja 0x538133
sub ebp, ecx
sub edx, ecx
neg edx
sar edx, 0x1f
and ecx, edx
add ecx, ebx
cmp ebp, 5
jge 0x537d34
lea edx, [esp + 0xc4]
cmp edx, ecx
je 0x537cbc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0044d890
lea edi, [esp + 0xec]
lea esi, [esp + 0xbc]
call fcn.0044d664
lea eax, [0x6e5f80]
mov dword [esp], eax
lea eax, [esp + 0xec]
mov dword [esp + 4], eax
call fcn.004075a0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
nop
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], eax
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x537d23
mov dword [edx + 0xbc], ecx
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], ecx
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
mov edx, eax
mov eax, ecx
call fcn.0044d090
mov eax, edx
jmp 0x537d0e
mov ebp, 5
jmp 0x537ca1
cmp cx, 0x1000
jae 0x537c24
jmp 0x536fdf
mov word [esp + 0x2a], cx
mov dword [esp], eax
mov byte [esp + 4], 0x46
call fcn.00538680
movzx eax, word [esp + 0x2a]
mov word [esp], ax
call fcn.00407300
mov eax, dword [esp + 4]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x108]
movzx edx, word [ecx + 0x20]
mov word [esp], dx
call fcn.00407300
mov eax, dword [esp + 4]
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
lea ecx, [0x640e60]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0x68]
mov dword [esp + 0x80], edx
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], eax
lea eax, [0x695a75]
mov dword [esp], eax
mov dword [esp + 4], 0x39
lea eax, [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.0049f310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x58], ecx
lea edi, [esp + 0x8c]
mov edx, eax
xor eax, eax
call fcn.0044d18a
nop
mov eax, dword [esp + 0x58]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], edx
nop
mov eax, dword [esp + 0x108]
mov ecx, dword [eax + 0x168]
mov edx, dword [eax + 0x164]
mov ebx, dword [eax + 0x160]
mov ebp, dword [eax + 0x16c]
cmp ebp, edx
ja 0x53813a
sub edx, ebp
sub ecx, ebp
neg ecx
sar ecx, 0x1f
and ebp, ecx
lea ecx, [ebx + ebp]
cmp edx, 5
jge 0x537f03
lea ebx, [esp + 0x94]
cmp ebx, ecx
je 0x537e91
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0044d890
lea edi, [esp + 0xec]
lea esi, [esp + 0x8c]
call fcn.0044d664
lea eax, [0x6e5f80]
mov dword [esp], eax
lea eax, [esp + 0xec]
mov dword [esp + 4], eax
call fcn.004075a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
nop
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x537ef8
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x537ee3
mov edx, 5
jmp 0x537e76
test dl, dl
jmp 0x536fd9
cmp bl, 0x80
jne 0x536f95
mov dword [esp], eax
mov byte [esp + 4], 0x46
call fcn.00538680
lea edi, [esp + 0xd4]
xor eax, eax
call fcn.0044d18a
nop
lea eax, [0x69045e]
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], 0x24
nop
mov eax, dword [esp + 0x108]
mov ecx, dword [eax + 0x16c]
mov edx, dword [eax + 0x168]
mov ebx, dword [eax + 0x160]
mov ebp, dword [eax + 0x164]
cmp ecx, ebp
ja 0x538141
sub ebp, ecx
sub edx, ecx
neg edx
sar edx, 0x1f
and ecx, edx
add ecx, ebx
cmp ebp, 5
jge 0x538022
lea edx, [esp + 0xdc]
cmp edx, ecx
je 0x537faa
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0044d890
lea edi, [esp + 0xec]
lea esi, [esp + 0xd4]
call fcn.0044d664
lea eax, [0x6e5f80]
mov dword [esp], eax
lea eax, [esp + 0xec]
mov dword [esp + 4], eax
call fcn.004075a0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
nop
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], eax
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x538011
mov dword [edx + 0xbc], ecx
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], ecx
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
mov edx, eax
mov eax, ecx
call fcn.0044d090
mov eax, edx
jmp 0x537ffc
mov ebp, 5
jmp 0x537f8f
lea eax, [0x65b380]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0040f980
mov edx, dword [esp + 0x108]
jmp 0x536dd9
nop
lea eax, [0x64cca0]
mov dword [esp], eax
call fcn.00409a20
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x4b
mov ecx, dword [0x8a6100]
test ecx, ecx
jne 0x5380ba
lea ecx, [0x696bf9]
mov dword [eax], ecx
nop
lea ecx, [0x6e5880]
mov edx, dword [esp + 0x108]
mov dword [edx + 0xb8], ecx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x5380af
mov dword [edx + 0xbc], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0x104
ret
mov edi, dword [esp + 0x70]
call fcn.0044d090
jmp 0x53809a
mov edi, eax
lea eax, [0x696bf9]
call fcn.0044d090
mov eax, edi
jmp 0x538076
sub esi, edx
mov edx, esi
jmp 0x536da1
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], edx
add esp, 0x104
ret
mov dword [esp], ecx
lea eax, [0x64dd00]
mov dword [esp + 4], eax
lea eax, [0x649900]
mov dword [esp + 8], eax
call fcn.004071b0
ud2
mov dword [esp], eax
lea eax, [0x64dd00]
mov dword [esp + 4], eax
lea eax, [0x649900]
mov dword [esp + 8], eax
call fcn.004071b0
ud2
call fcn.00427250
ud2
call fcn.00427250
ud2
call fcn.00427250
ud2
call fcn.00427250
ud2
call fcn.00427250
ud2
call fcn.00427250
ud2
call fcn.00427250
ud2
call fcn.0044b940
jmp fcn.00536d10