Function at 0x5af120
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xd8]
cmp eax, dword [ecx + 8]
jbe 0x5b0543
sub esp, 0x158
mov eax, dword [esp + 0x15c]
mov ecx, dword [eax]
mov dword [esp + 0xd0], ecx
mov dword [esp], ecx
call fcn.005a98b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 4]
mov esi, dword [esp + 8]
test eax, eax
jne 0x5b04a0
lea eax, [0x669dc0]
cmp ebp, eax
je 0x5af18a
mov ebx, 0
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xa4], esi
mov dword [esp + 0xec], ebp
jne 0x5b03db
mov ecx, dword [ebx + 0x10]
test ecx, ecx
je 0x5b03db
mov dword [esp], ebx
call fcn.005c4c90
mov eax, dword [esp + 0x15c]
lea ecx, [eax + 0x18]
mov dword [esp + 0xe8], ecx
mov dword [esp], ecx
call fcn.005cc230
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.005a98b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 8]
mov esi, dword [esp + 4]
mov edi, dword [esp + 8]
test eax, eax
jne 0x5b03c6
lea edx, [0x669f40]
cmp ebx, edx
je 0x5af213
mov ebp, 0
jne 0x5af308
mov eax, dword [esp + 0x15c]
mov ecx, dword [eax + 0xc]
movzx ecx, byte [ecx + 0x2b]
test cl, cl
je 0x5af2b8
mov dword [esp + 0xc0], ebp
mov dword [esp], ebp
call fcn.005c6b60
mov eax, dword [esp + 0xe8]
mov dword [esp], eax
call fcn.005cc230
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
mov ebx, dword [esp + 0xd0]
mov dword [ebx + 0x38], edx
mov dword [ebx + 0x3c], eax
mov eax, dword [0x894e10]
test eax, eax
jne 0x5af279
mov dword [ebx + 0x34], ecx
jmp 0x5af283
lea edi, [ebx + 0x34]
mov eax, ecx
call fcn.0045f830
mov dword [esp], ebx
call fcn.005a98b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 8]
test eax, eax
je 0x5af30c
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
add esp, 0x158
ret
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov byte [esp + 4], 0xa
call fcn.005a8ba0
lea eax, [0x667e60]
mov dword [esp], eax
call fcn.0040b400
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x32
lea ecx, [0x6a3a90]
mov dword [eax], ecx
lea ecx, [0x703160]
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], eax
add esp, 0x158
ret
mov ebx, esi
mov ebp, edi
mov dword [esp + 0xa4], ebp
mov dword [esp + 0x7c], ebx
mov edx, dword [esp + 0xd0]
mov esi, dword [edx + 0x2c]
test esi, esi
je 0x5af3c8
mov ecx, dword [edx + 0x50]
mov esi, dword [edx + 0x4c]
test ecx, ecx
jbe 0x5b053b
mov esi, dword [esi]
mov edi, dword [esi + 4]
mov esi, dword [esi]
mov ebp, dword [esp + 0xcc]
mov ecx, dword [ebp + 0x10]
mov ebp, dword [ebp + 0xc]
test ecx, ecx
jbe 0x5b0534
mov ecx, dword [ebp]
cmp dword [ebp + 4], edi
jne 0x5af37f
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004025b0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x5af400
mov edx, dword [esp + 0xd0]
mov dword [esp], edx
mov byte [esp + 4], 0x2a
call fcn.005a8ba0
lea eax, [0x667e60]
mov dword [esp], eax
call fcn.0040b400
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x33
lea ecx, [0x6a3cf0]
mov dword [eax], ecx
lea ecx, [0x703160]
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], eax
add esp, 0x158
ret
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.005b1940
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test eax, eax
jne 0x5b03b1
mov eax, dword [esp + 0x15c]
mov ecx, dword [eax + 0x14]
mov edx, dword [ecx + 0x10]
mov ecx, dword [edx]
mov ebx, dword [esp + 0xd0]
movzx ebp, word [ebx + 0x24]
mov word [esp], bp
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov ebx, dword [esp + 0x7c]
lea ebp, [0x66a3c0]
cmp ebx, ebp
jne 0x5af43f
mov edx, dword [esp + 0xa4]
jmp 0x5af444
mov edx, 0
mov dword [esp + 0xac], ecx
mov dword [esp + 0x80], eax
jne 0x5af65d
mov dword [esp + 0x94], edx
mov ebx, dword [edx]
mov ebp, dword [edx + 4]
mov esi, dword [edx + 8]
test ebx, ebx
jne 0x5af549
mov eax, dword [edx + 0x10]
mov dword [esp + 0x8c], eax
lea ecx, [0x65f440]
mov dword [esp], ecx
lea ebx, [eax + 4]
mov dword [esp + 0x60], ebx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.004483c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x60]
test ecx, ecx
jbe 0x5b052d
mov byte [eax], 0xc
cmp ecx, 1
jbe 0x5b0523
mov edx, dword [esp + 0x8c]
mov ebx, edx
sar edx, 0x10
mov byte [eax + 1], dl
cmp ecx, 2
jbe 0x5b0519
mov edx, ebx
sar ebx, 8
mov byte [eax + 2], bl
cmp ecx, 3
jbe 0x5b050f
mov byte [eax + 3], dl
mov ebx, edx
neg edx
sar edx, 0x1f
and edx, 4
add edx, eax
mov edi, dword [esp + 0x94]
mov ebp, dword [edi + 0xc]
mov esi, dword [edi + 0x10]
cmp esi, ebx
jl 0x5af4fd
mov esi, ebx
cmp ebp, edx
je 0x5af52a
mov dword [esp + 0xe4], eax
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004601c0
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x94]
mov dword [edi + 4], ecx
mov dword [edi + 8], ecx
mov edx, dword [0x894e10]
test edx, edx
jne 0x5af53e
mov dword [edi], eax
jmp 0x5af543
call fcn.0045f830
mov esi, ecx
mov ebp, esi
mov ebx, eax
mov eax, dword [esp + 0xe8]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.005cc230
mov eax, dword [esp + 0xd0]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0x15c]
mov ebx, dword [edx + 0x10]
mov ebp, dword [edx + 0xc]
mov esi, dword [eax + 0x50]
mov edi, dword [eax + 0x4c]
test esi, esi
jbe 0x5b0506
mov eax, dword [esp + 0x80]
mov edx, dword [eax + 0x1c]
mov esi, dword [edi]
mov edi, dword [esp + 0xac]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x14], ecx
call edx
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x5af618
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.005a98b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 8]
test eax, eax
jne 0x5af603
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0xac]
jmp 0x5af664
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
add esp, 0x158
ret
mov dword [esp + 0xbc], edx
mov dword [esp + 0xec], ecx
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov byte [esp + 4], 0xa
call fcn.005a8ba0
mov eax, dword [esp + 0xec]
mov dword [esp + 0x160], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x164], eax
add esp, 0x158
ret
mov ebp, dword [esp + 0xa4]
lea edx, [0x669e80]
cmp ebx, edx
jne 0x5af672
mov esi, ebp
jmp 0x5af679
mov esi, ebp
mov ebp, 0
mov dword [esp + 0x7c], ebx
mov dword [esp + 0xc8], ebp
je 0x5af698
mov edi, ebx
xor ebx, ebx
mov dword [esp + 0xc4], ebx
mov ebx, edi
jmp 0x5af765
mov dword [esp], ebp
call fcn.005c7820
mov eax, dword [esp + 0xe8]
mov dword [esp], eax
call fcn.005cc230
mov eax, dword [esp + 0x15c]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov ebx, dword [esp + 0xd0]
movzx ebp, word [ebx + 0x24]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov word [esp + 8], bp
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xc], ecx
call fcn.005b1fc0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.005b23e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
test ecx, ecx
jne 0x5b036c
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.005a98b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 8]
test eax, eax
jne 0x5b0357
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0xac]
lea edx, [0x669e80]
mov edi, dword [esp + 0x7c]
mov esi, ebp
mov ebp, dword [esp + 0xc8]
mov dword [esp + 0xa4], esi
lea ebp, [0x66a300]
cmp ebx, ebp
je 0x5af77b
mov esi, 0
jne 0x5b028a
lea eax, [0x65f440]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 4
call fcn.004483c0
mov eax, dword [esp + 0xc]
mov byte [eax], 0xe
mov ecx, dword [esp + 0xe8]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], 4
call fcn.005cc230
mov eax, dword [esp + 0x7c]
lea ecx, [0x669e80]
cmp eax, ecx
jne 0x5af88c
lea eax, [0x66d340]
mov dword [esp], eax
call fcn.0040b400
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xc4]
mov edx, dword [ecx]
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx + 8]
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], ebp
mov ebx, dword [0x894e10]
test ebx, ebx
jne 0x5af811
mov dword [eax + 0xc], edx
jmp 0x5af81f
lea edi, [eax + 0xc]
mov ebx, eax
mov eax, edx
call fcn.0045f830
mov eax, ebx
mov dword [esp + 0xcc], eax
mov dword [esp], eax
call fcn.005c4c90
mov eax, dword [esp + 0xe8]
mov dword [esp], eax
call fcn.005cc230
mov eax, dword [esp + 0xcc]
mov dword [esp], eax
call fcn.005c4c90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0xd0]
mov dword [esp], ebx
mov byte [esp + 4], 0x16
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.005a9780
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x5b0275
mov edx, dword [esp + 0xd0]
mov ebx, dword [edx + 0x28]
mov ebp, dword [esp + 0x15c]
mov esi, dword [ebp + 0x10]
mov ecx, dword [edx + 0x50]
mov edi, dword [edx + 0x4c]
test ecx, ecx
jbe 0x5b04ff
mov eax, dword [esp + 0x80]
mov eax, dword [eax + 0x10]
mov ecx, dword [edi]
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x20]
mov esi, dword [esp + 0x20]
mov edi, dword [esp + 0x24]
test ebp, ebp
jne 0x5b0230
mov dword [esp + 0x74], edx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x78], ebx
test eax, eax
je 0x5afb60
mov dword [esp + 0xa8], eax
mov ebp, dword [eax]
mov esi, dword [eax + 4]
mov edi, dword [eax + 8]
test ebp, ebp
jne 0x5af9fe
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x8c], ecx
lea edx, [0x65f440]
mov dword [esp], edx
lea ebx, [ecx + 4]
mov dword [esp + 0x5c], ebx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.004483c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jbe 0x5b04f8
mov byte [eax], 0x10
cmp ecx, 1
jbe 0x5b04ee
mov edx, dword [esp + 0x8c]
mov ebx, edx
sar edx, 0x10
mov byte [eax + 1], dl
cmp ecx, 2
jbe 0x5b04e4
mov edx, ebx
sar ebx, 8
mov byte [eax + 2], bl
cmp ecx, 3
jbe 0x5b04da
mov byte [eax + 3], dl
mov ebx, edx
neg edx
sar edx, 0x1f
and edx, 4
add edx, eax
mov edi, dword [esp + 0xa8]
mov ebp, dword [edi + 0xc]
mov esi, dword [edi + 0x10]
cmp esi, ebx
jl 0x5af9b2
mov esi, ebx
cmp ebp, edx
je 0x5af9df
mov dword [esp + 0xe0], eax
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004601c0
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0x5c]
mov edi, dword [esp + 0xa8]
mov dword [edi + 4], ecx
mov dword [edi + 8], ecx
mov edx, dword [0x894e10]
test edx, edx
jne 0x5af9f3
mov dword [edi], eax
jmp 0x5af9f8
call fcn.0045f830
mov edi, ecx
mov esi, edi
mov ebp, eax
mov eax, dword [esp + 0xe8]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
call fcn.005cc230
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
test ecx, ecx
jne 0x5afb0a
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x8c], ecx
lea edx, [0x65f440]
mov dword [esp], edx
lea edx, [ecx + 4]
mov dword [esp + 0x58], edx
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.004483c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x58]
test ecx, ecx
jbe 0x5b04d3
mov byte [eax], 0x10
cmp ecx, 1
jbe 0x5b04c9
mov edx, dword [esp + 0x8c]
mov ebx, edx
sar edx, 0x10
mov byte [eax + 1], dl
cmp ecx, 2
jbe 0x5b04bf
mov edx, ebx
sar ebx, 8
mov byte [eax + 2], bl
cmp ecx, 3
jbe 0x5b04b5
mov byte [eax + 3], dl
mov ebx, edx
neg edx
sar edx, 0x1f
and edx, 4
add edx, eax
mov edi, dword [esp + 0xa8]
mov ebp, dword [edi + 0xc]
mov esi, dword [edi + 0x10]
cmp esi, ebx
jl 0x5afabe
mov esi, ebx
cmp ebp, edx
je 0x5afaeb
mov dword [esp + 0xdc], eax
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004601c0
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x58]
mov edi, dword [esp + 0xa8]
mov dword [edi + 4], ecx
mov dword [edi + 8], ecx
mov edx, dword [0x894e10]
test edx, edx
jne 0x5afaff
mov dword [edi], eax
jmp 0x5afb04
call fcn.0045f830
mov ebx, ecx
mov edx, ebx
mov ecx, eax
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov byte [esp + 4], 0x16
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.005a9780
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x5afb4b
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x78]
jmp 0x5afb60
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
add esp, 0x158
ret
mov ebp, dword [esp + 0xc4]
test ebp, ebp
je 0x5b0002
mov esi, dword [ebp + 4]
test esi, esi
je 0x5b0002
lea edi, [esp + 0x108]
xor eax, eax
call fcn.0045fac9
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
lea ebx, [0x668b60]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004090f0
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
test ecx, ecx
je 0x5aff6f
mov dword [esp + 0x84], ecx
mov dword [esp + 0xb0], edx
mov eax, dword [esp + 0xd0]
movzx ebx, word [eax + 0x24]
cmp bx, 0x303
jb 0x5afccc
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x1c]
mov edx, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
mov word [esp], bx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.005a16c0
movzx eax, word [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
test ecx, ecx
jne 0x5afc87
mov word [esp + 0x56], ax
mov word [esp], ax
call fcn.005a0dc0
movzx eax, byte [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
test edx, edx
jne 0x5afc56
mov byte [esp + 0x114], 1
movzx edx, word [esp + 0x56]
mov word [esp + 0x116], dx
jmp 0x5afd05
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov byte [esp + 4], 0x50
call fcn.005a8ba0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], ecx
add esp, 0x158
ret
mov dword [esp + 0xec], edx
mov dword [esp + 0xb8], ebx
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov byte [esp + 4], 0x2f
call fcn.005a8ba0
mov eax, dword [esp + 0xec]
mov dword [esp + 0x160], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x164], eax
add esp, 0x158
ret
mov eax, dword [ecx + 0x10]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.005a1000
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test edx, edx
jne 0x5aff2a
mov byte [esp + 0x55], al
mov dword [esp + 0x70], ecx
lea edi, [esp + 0x124]
mov esi, dword [esp + 0xe8]
call fcn.0045ff5e
mov ecx, dword [esp + 0x15c]
mov edx, dword [ecx + 0x4c]
mov ebx, dword [ecx + 0x50]
mov ebp, dword [ecx + 0x54]
lea edi, [esp]
lea esi, [esp + 0x124]
call fcn.0045ff5e
mov byte [esp + 0x34], al
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebp
call fcn.005cc6f0
mov eax, dword [esp + 0x48]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x6c], edx
mov ebx, dword [esp + 0x70]
mov dword [esp], ebx
call fcn.00408cb0
mov eax, dword [esp + 4]
movzx ecx, byte [esp + 0x55]
cmp cl, 0xe2
je 0x5afd99
lea ecx, [0x7034e4]
jmp 0x5afdbe
lea eax, [0x66d1c0]
mov dword [esp], eax
call fcn.0040b400
mov eax, dword [esp + 4]
mov dword [eax], 0xffffffff
mov ecx, dword [esp + 0x70]
mov dword [eax + 4], ecx
lea ecx, [0x703084]
mov edx, dword [esp + 0xd0]
mov ebx, dword [edx + 0x28]
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
test ebp, ebp
jne 0x5afddd
mov ebp, dword [0x86d498]
mov ebx, dword [0x86d49c]
mov edx, dword [esp + 0x84]
mov edx, dword [edx + 0x14]
mov esi, dword [esp + 0xb0]
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call edx
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x120], edx
mov dword [esp + 0x118], eax
test ebx, ebx
jne 0x5afee5
lea eax, [esp + 0x108]
mov dword [esp], eax
call fcn.005c80f0
mov eax, dword [esp + 0xe8]
mov dword [esp], eax
call fcn.005cc230
lea eax, [esp + 0x108]
mov dword [esp], eax
call fcn.005c80f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0xd0]
mov dword [esp], ebx
mov byte [esp + 4], 0x16
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.005a9780
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x5afed0
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x78]
jmp 0x5b0002
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
add esp, 0x158
ret
mov dword [esp + 0xbc], esi
mov dword [esp + 0xec], ebp
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov byte [esp + 4], 0x50
call fcn.005a8ba0
mov eax, dword [esp + 0xec]
mov dword [esp + 0x160], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x164], eax
add esp, 0x158
ret
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xec], ebx
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov byte [esp + 4], 0x2f
call fcn.005a8ba0
mov eax, dword [esp + 0xec]
mov dword [esp + 0x160], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x164], eax
add esp, 0x158
ret
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov byte [esp + 4], 0x50
call fcn.005a8ba0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xf4], eax
lea eax, [0x6a6499]
mov dword [esp], eax
mov dword [esp + 4], 0x4f
lea eax, [esp + 0xf0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c0c20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], ecx
add esp, 0x158
ret
mov eax, dword [esp + 0x15c]
mov ebp, dword [eax + 0x10]
mov esi, dword [eax + 0xc]
mov edi, dword [esp + 0xd0]
movzx edi, word [edi + 0x24]
mov eax, dword [eax + 0x14]
mov ebx, dword [ebp + 0x10]
mov dword [esp + 0xd8], ebx
mov ebx, dword [ebp + 0x14]
mov ebp, dword [ebp + 0x18]
mov dword [esp + 0x8c], ebp
mov ebp, dword [esi + 0x10]
mov dword [esp + 0xd4], ebp
mov ebp, dword [esi + 0x14]
mov esi, dword [esi + 0x18]
mov word [esp], di
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x78]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebx
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], esi
call fcn.005cb9d0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x15c]
mov dword [ebx + 0x50], ecx
mov dword [ebx + 0x54], edx
mov ebp, dword [0x894e10]
test ebp, ebp
jne 0x5b00b6
mov dword [ebx + 0x4c], eax
jmp 0x5b00be
lea edi, [ebx + 0x4c]
call fcn.0045f830
mov ebp, dword [ebx + 0x10]
mov esi, dword [esp + 0xd0]
mov edi, dword [esi + 0x28]
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp + 0x14]
mov ebp, dword [ebp + 0x18]
mov dword [esp], edi
lea edi, [0x69351a]
mov dword [esp + 4], edi
mov dword [esp + 8], 0xd
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
call fcn.005a3870
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
test eax, eax
jne 0x5b0162
nop
mov ecx, dword [esp + 0x15c]
mov dword [ecx + 0x3c], 0
mov dword [ecx + 0x40], 0
mov edx, dword [0x894e10]
test edx, edx
jne 0x5b013b
mov dword [ecx + 0x38], 0
jmp 0x5b0145
lea edi, [ecx + 0x38]
xor eax, eax
call fcn.0045f830
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
add esp, 0x158
ret
mov dword [esp + 0x88], eax
mov dword [esp + 0xb4], ecx
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov byte [esp + 4], 0x50
call fcn.005a8ba0
mov eax, dword [esp + 0x88]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0xb4]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x69dc1a]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x21
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044b970
mov eax, dword [esp + 0x14]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x64], ecx
lea edx, [0x667e60]
mov dword [esp], edx
call fcn.0040b400
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x64]
mov dword [edi + 4], eax
mov eax, dword [0x894e10]
test eax, eax
jne 0x5b0209
mov eax, dword [esp + 0x90]
mov dword [edi], eax
jmp 0x5b0215
mov eax, dword [esp + 0x90]
call fcn.0045f830
lea eax, [0x703160]
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], edi
add esp, 0x158
ret
mov dword [esp + 0xbc], edi
mov dword [esp + 0xec], esi
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov byte [esp + 4], 0x50
call fcn.005a8ba0
mov eax, dword [esp + 0xec]
mov dword [esp + 0x160], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x164], eax
add esp, 0x158
ret
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
add esp, 0x158
ret
mov dword [esp + 0x9c], esi
mov dword [esp + 0x7c], ebx
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov byte [esp + 4], 0xa
call fcn.005a8ba0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xfc], eax
lea eax, [0x66a300]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x104], eax
lea eax, [0x6a6076]
mov dword [esp], eax
mov dword [esp + 4], 0x49
lea eax, [esp + 0xf8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0c20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], ecx
add esp, 0x158
ret
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
add esp, 0x158
ret
mov dword [esp + 0xec], edx
mov dword [esp + 0xbc], ebx
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov byte [esp + 4], 0x50
call fcn.005a8ba0
mov eax, dword [esp + 0xec]
mov dword [esp + 0x160], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x164], eax
add esp, 0x158
ret
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
add esp, 0x158
ret
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
add esp, 0x158
ret
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov byte [esp + 4], 0xa
call fcn.005a8ba0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov eax, dword [esp + 0xec]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xfc], eax
lea eax, [0x669dc0]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x104], eax
lea eax, [0x6a6076]
mov dword [esp], eax
mov dword [esp + 4], 0x49
lea eax, [esp + 0xf8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0c20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], ecx
add esp, 0x158
ret
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
add esp, 0x158
ret
mov eax, 3
call fcn.0045f8b0
mov eax, 2
call fcn.0045f8b0
mov eax, 1
call fcn.0045f8b0
xor eax, eax
call fcn.0045f8b0
mov eax, 3
call fcn.0045f8b0
mov eax, 2
call fcn.0045f8b0
mov eax, 1
call fcn.0045f8b0
xor eax, eax
call fcn.0045f8b0
xor eax, eax
call fcn.0045f8b0
xor eax, eax
mov ecx, esi
call fcn.0045f8b0
mov eax, 3
call fcn.0045f8b0
mov eax, 2
call fcn.0045f8b0
mov eax, 1
call fcn.0045f8b0
xor eax, eax
call fcn.0045f8b0
xor eax, eax
call fcn.0045f8b0
xor eax, eax
call fcn.0045f8b0
nop
call fcn.0045e420
jmp fcn.005af120