Function at 0x577590
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5db9b1
mov eax, dword fs:[0]
push eax
sub esp, 0x8c
mov eax, dword [0x6396a8]
xor eax, esp
mov dword [esp + 0x88], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6396a8]
xor eax, esp
push eax
lea eax, [esp + 0xa0]
mov dword fs:[0], eax
mov eax, dword [esp + 0xb0]
push 1
mov esi, ecx
xor ebx, ebx
push eax
mov dword [esp + 0x84], esi
mov dword [esp + 0x1c], ebx
call fcn.00588120
mov dword [esi], vtable.DoubleCoat.2.0
mov dword [esi + 0x88], vtable.DoubleCoat.1.0
mov dword [esi + method.DoubleCoat.virtual_0], vtable.DoubleCoat.0
mov dword [esp + 0xa8], ebx
mov dword [esi + 0x2d4], ebx
mov dword [esi + 0x2d8], ebx
mov dword [esi + 0x2dc], ebx
mov dword [esi + 0x2e0], ebx
mov dword [esi + 0x2e8], ebx
mov dword [esi + 0x2ec], ebx
mov dword [esi + 0x2f0], ebx
mov dword [esi + 0x2f4], ebx
mov dword [esi + 0x308], ebx
mov dword [esi + 0x30c], ebx
lea ecx, [esi + 0x31c]
mov byte [esp + 0xa8], 2
mov dword [esi + 0x314], ebx
mov dword [esi + 0x318], ebx
call fcn.0040b740
lea ecx, [esi + 0x408]
mov byte [esp + 0xa8], 3
call fcn.0040b740
lea ecx, [esi + 0x4f4]
mov byte [esp + 0xa8], 4
call fcn.00468d20
lea ecx, [esi + 0x538]
call fcn.00468d20
push 6
mov edi, 0xf
push str.bowl_x
lea ecx, [esp + 0x20]
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
call fcn.0043df40
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0xac], 5
call fcn.00560e70
mov ebp, 0x10
cmp dword [esp + 0x30], ebp
mov dword [esp + 0x5c], eax
mov byte [esp + 0xa8], 4
jb 0x5776ef
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.005b28f2
add esp, 4
push 6
push str.bowl_y
lea ecx, [esp + 0x20]
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
call fcn.0043df40
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0xac], 6
call fcn.00560e70
cmp dword [esp + 0x30], ebp
mov dword [esp + 0x54], eax
mov byte [esp + 0xa8], 4
jb 0x57773e
mov eax, dword [esp + 0x1c]
push eax
call fcn.005b28f2
add esp, 4
push 0xe0
call fcn.005b2b20
mov ebp, eax
add esp, 4
mov dword [esp + 0x50], ebp
cmp ebp, ebx
mov byte [esp + 0xa8], 7
je 0x5777aa
push 4
push str.bowl
lea ecx, [esp + 0x20]
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
call fcn.0043df40
push ebx
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
mov byte [esp + 0xb0], 8
mov dword [esp + 0x1c], 1
call fcn.00569920
mov edx, dword [esp + 0x58]
push eax
mov eax, dword [esp + 0x64]
push edx
push eax
mov ecx, ebp
call fcn.00558a70
jmp 0x5777ac
xor eax, eax
push eax
mov ecx, esi
mov dword [esp + 0xac], 9
call fcn.00585fc0
test byte [esp + 0x14], 1
mov dword [esp + 0xa8], 4
je 0x5777ea
and dword [esp + 0x14], 0xfffffffe
cmp dword [esp + 0x30], 0x10
jb 0x5777ea
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.005b28f2
add esp, 4
push 0x280
call fcn.005b2b20
mov ebp, eax
add esp, 4
mov dword [esp + 0x50], ebp
cmp ebp, ebx
mov byte [esp + 0xa8], 0xa
je 0x5778ba
push 3
push 0x5f5300
lea ecx, [esp + 0x20]
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
call fcn.0043df40
or dword [esp + 0x14], 2
cmp dword [esi + 0x218], ebx
mov byte [esp + 0xa8], 0xb
jne 0x577843
call fcn.005b2af7
mov edx, dword [esi + 0x218]
mov eax, dword [esi + 0x21c]
cmp eax, dword [edx + 4]
jne 0x577859
call fcn.005b2af7
mov ecx, dword [esi + 0x21c]
lea edx, [esp + 0x18]
add ecx, 8
push edx
call fcn.004790c0
push eax
lea eax, [esp + 0x38]
push str.dip_
push eax
call fcn.00441e70
add esp, 0xc
or dword [esp + 0x14], 4
push eax
mov ecx, 0x63e65c
mov dword [esp + 0xac], 0xc
call fcn.00520690
fld1
mov eax, dword [eax]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x5c]
push ebx
push ebx
sub esp, 8
fstp qword [esp]
push eax
push ecx
push edx
mov ecx, ebp
call fcn.00557ba0
jmp 0x5778bc
xor eax, eax
push eax
mov ecx, esi
mov dword [esp + 0xac], 0xe
mov dword [esi + 0x2fc], eax
call fcn.00585fc0
test byte [esp + 0x14], 4
je 0x577901
and dword [esp + 0x14], 0xfffffffb
cmp dword [esp + 0x4c], 0x10
jb 0x5778f5
mov eax, dword [esp + 0x38]
push eax
call fcn.005b28f2
add esp, 4
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
test byte [esp + 0x14], 2
mov dword [esp + 0xa8], 4
je 0x57792c
and dword [esp + 0x14], 0xfffffffd
cmp dword [esp + 0x30], 0x10
jb 0x57792c
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.005b28f2
add esp, 4
push 9
push str.center_dy
lea ecx, [esp + 0x3c]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.0043df40
push 9
push str.center_dx
lea ecx, [esp + 0x20]
mov byte [esp + 0xb0], 0xf
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
call fcn.0043df40
lea edx, [esp + 0x34]
push edx
mov ecx, esi
mov byte [esp + 0xac], 0x10
call fcn.00560e70
mov ebp, eax
add ebp, dword [esp + 0x54]
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.00560e70
add eax, dword [esp + 0x5c]
mov dword [esi + 0x30c], ebp
mov ebp, 0x10
cmp dword [esp + 0x30], ebp
mov dword [esi + 0x308], eax
jb 0x5779ba
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.005b28f2
add esp, 4
cmp dword [esp + 0x4c], ebp
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x1c], bl
mov byte [esp + 0xa8], 4
jb 0x5779e1
mov edx, dword [esp + 0x38]
push edx
call fcn.005b28f2
add esp, 4
push 7
push str.start_y
lea ecx, [esp + 0x3c]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.0043df40
push 7
push str.start_x
lea ecx, [esp + 0x20]
mov byte [esp + 0xb0], 0x11
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
call fcn.0043df40
lea eax, [esp + 0x34]
push eax
mov ecx, esi
mov byte [esp + 0xac], 0x12
call fcn.00560e70
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0x60], eax
call fcn.00560e70
cmp dword [esp + 0x30], ebp
mov dword [esp + 0x6c], eax
jb 0x577a5c
mov edx, dword [esp + 0x1c]
push edx
call fcn.005b28f2
add esp, 4
cmp dword [esp + 0x4c], ebp
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x1c], bl
mov byte [esp + 0xa8], 4
jb 0x577a83
mov eax, dword [esp + 0x38]
push eax
call fcn.005b28f2
add esp, 4
push 6
push str.coat_y
lea ecx, [esp + 0x3c]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.0043df40
push 6
push str.coat_x
lea ecx, [esp + 0x20]
mov byte [esp + 0xb0], 0x13
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
call fcn.0043df40
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
mov byte [esp + 0xac], 0x14
call fcn.00560e70
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0x5c], eax
call fcn.00560e70
cmp dword [esp + 0x30], ebp
mov dword [esp + 0x64], eax
jb 0x577afe
mov eax, dword [esp + 0x1c]
push eax
call fcn.005b28f2
add esp, 4
cmp dword [esp + 0x4c], ebp
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x1c], bl
mov byte [esp + 0xa8], 4
jb 0x577b25
mov ecx, dword [esp + 0x38]
push ecx
call fcn.005b28f2
add esp, 4
push 5
push str.end_y
lea ecx, [esp + 0x3c]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.0043df40
push 5
push str.end_x
lea ecx, [esp + 0x20]
mov byte [esp + 0xb0], 0x15
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
call fcn.0043df40
lea edx, [esp + 0x34]
push edx
mov ecx, esi
mov byte [esp + 0xac], 0x16
call fcn.00560e70
mov dword [esp + 0x50], eax
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.00560e70
cmp dword [esp + 0x30], ebp
mov dword [esp + 0x74], eax
jb 0x577ba0
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.005b28f2
add esp, 4
cmp dword [esp + 0x4c], ebp
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x1c], bl
mov byte [esp + 0xa8], 4
jb 0x577bc7
mov edx, dword [esp + 0x38]
push edx
call fcn.005b28f2
add esp, 4
push 5
push str.sheet
lea ecx, [esp + 0x20]
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
call fcn.0043df40
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0xac], 0x17
call fcn.00569920
cmp dword [esp + 0x30], ebp
mov dword [esp + 0x54], eax
mov byte [esp + 0xa8], 4
jb 0x577c16
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.005b28f2
add esp, 4
push 0xe0
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.005b2b20
add esp, 4
mov dword [esp + 0x60], eax
cmp eax, ebx
mov ebp, dword [esp + 0x54]
mov byte [esp + 0xa8], 0x18
je 0x577c58
mov edx, dword [esp + 0x5c]
mov ecx, dword [esp + 0x6c]
push ebx
push ebp
push edx
push ecx
mov ecx, eax
call fcn.00558a70
jmp 0x577c5a
xor eax, eax
push eax
mov ecx, esi
mov byte [esp + 0xac], 4
call fcn.00585fc0
push 0xe0
call fcn.005b2b20
add esp, 4
mov dword [esp + 0x60], eax
cmp eax, ebx
mov byte [esp + 0xa8], 0x19
je 0x577c9c
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0x64]
push ebx
push ebp
push edx
push ecx
mov ecx, eax
call fcn.00558a70
jmp 0x577c9e
xor eax, eax
push eax
mov ecx, esi
mov byte [esp + 0xac], 4
mov dword [esi + 0x300], eax
call fcn.00585fc0
push 0xe0
call fcn.005b2b20
add esp, 4
mov dword [esp + 0x60], eax
cmp eax, ebx
mov byte [esp + 0xa8], 0x1a
je 0x577ce6
mov edx, dword [esp + 0x50]
mov ecx, dword [esp + 0x74]
push ebx
push ebp
push edx
push ecx
mov ecx, eax
call fcn.00558a70
jmp 0x577ce8
xor eax, eax
push eax
mov ecx, esi
mov byte [esp + 0xac], 4
mov dword [esi + 0x304], eax
call fcn.00585fc0
push 0xe0
call fcn.005b2b20
mov ebp, eax
add esp, 4
mov dword [esp + 0x60], ebp
cmp ebp, ebx
mov byte [esp + 0xa8], 0x1b
je 0x577dc5
push 4
push str.coat
lea ecx, [esp + 0x3c]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.0043df40
or dword [esp + 0x14], 8
cmp dword [esi + 0x218], ebx
mov byte [esp + 0xa8], 0x1c
jne 0x577d57
call fcn.005b2af7
mov edx, dword [esi + 0x218]
mov eax, dword [esi + 0x21c]
cmp eax, dword [edx + 4]
jne 0x577d6d
call fcn.005b2af7
mov ecx, dword [esi + 0x21c]
lea edx, [esp + 0x34]
add ecx, 8
push edx
call fcn.004790c0
push eax
lea eax, [esp + 0x1c]
push str.coat_
push eax
call fcn.00441e70
add esp, 0xc
or dword [esp + 0x14], 0x10
push eax
mov ecx, 0x63e65c
mov dword [esp + 0xac], 0x1d
call fcn.00520690
mov eax, dword [eax]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x64]
push ebx
push eax
push ecx
push edx
mov ecx, ebp
call fcn.00558a70
jmp 0x577dc7
xor eax, eax
push eax
mov ecx, esi
mov dword [esp + 0xac], 0x1f
call fcn.00585fc0
test byte [esp + 0x14], 0x10
je 0x577e06
and dword [esp + 0x14], 0xffffffef
cmp dword [esp + 0x30], 0x10
jb 0x577dfa
mov eax, dword [esp + 0x1c]
push eax
call fcn.005b28f2
add esp, 4
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x1c], bl
test byte [esp + 0x14], 8
mov dword [esp + 0xa8], 4
je 0x577e2c
cmp dword [esp + 0x4c], 0x10
jb 0x577e2c
mov ecx, dword [esp + 0x38]
push ecx
call fcn.005b28f2
add esp, 4
push 2
push 0x5f1104
lea ecx, [esp + 0x3c]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.0043df40
lea edx, [esp + 0x34]
push edx
mov ecx, esi
mov byte [esp + 0xac], 0x20
call fcn.00560da0
mov ebp, eax
add ebp, dword [esp + 0x6c]
cmp dword [esp + 0x4c], 0x10
mov byte [esp + 0xa8], 4
jb 0x577e7e
mov eax, dword [esp + 0x38]
push eax
call fcn.005b28f2
add esp, 4
push 2
push 0x5f1108
lea ecx, [esp + 0x3c]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.0043df40
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
mov byte [esp + 0xac], 0x21
call fcn.00560da0
add eax, dword [esp + 0x5c]
cmp dword [esp + 0x4c], 0x10
mov dword [esp + 0x54], eax
mov byte [esp + 0xa8], 4
jb 0x577ed2
mov edx, dword [esp + 0x38]
push edx
call fcn.005b28f2
add esp, 4
push 7
push 0x5f5290
lea ecx, [esp + 0x3c]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.0043df40
lea eax, [esp + 0x34]
push eax
mov ecx, esi
mov byte [esp + 0xac], 0x22
call fcn.00560da0
cmp dword [esp + 0x4c], 0x10
mov dword [esp + 0x14], eax
mov byte [esp + 0xa8], 4
jb 0x577f22
mov ecx, dword [esp + 0x38]
push ecx
call fcn.005b28f2
add esp, 4
push 5
push str.count
lea ecx, [esp + 0x3c]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.0043df40
lea edx, [esp + 0x34]
push edx
mov ecx, esi
mov byte [esp + 0xac], 0x23
call fcn.00560da0
cmp dword [esp + 0x4c], 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0xa8], 4
jb 0x577f72
mov eax, dword [esp + 0x38]
push eax
call fcn.005b28f2
add esp, 4
push 4
push str.food
lea ecx, [esp + 0x20]
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
call fcn.0043df40
cmp dword [esi + 0x218], ebx
mov byte [esp + 0xa8], 0x24
jne 0x577fa3
call fcn.005b2af7
mov ecx, dword [esi + 0x218]
mov edx, dword [esi + 0x21c]
cmp edx, dword [ecx + 4]
jne 0x577fb9
call fcn.005b2af7
mov ecx, dword [esi + 0x21c]
lea eax, [esp + 0x18]
add ecx, 8
push eax
call fcn.004790c0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x8c]
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
call fcn.0043b440
cmp dword [esp + 0x30], 0x10
mov byte [esp + 0xa8], 0x26
jb 0x57800d
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.005b28f2
add esp, 4
mov edx, dword [esp + 0x58]
push edx
push 1
mov ecx, esi
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
call fcn.005875e0
mov ecx, dword [esp + 0x58]
cmp ecx, ebx
jle 0x5780e7
mov eax, dword [esp + 0x54]
sub eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x50]
add edx, eax
mov dword [esp + 0x68], edx
mov dword [esp + 0x50], ecx
push 0x1e0
call fcn.005b2b20
add esp, 4
mov dword [esp + 0x60], eax
cmp eax, ebx
mov byte [esp + 0xa8], 0x27
je 0x57807f
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x80]
push ecx
push edx
push ebp
mov ecx, eax
call fcn.005a6670
mov edi, eax
jmp 0x578081
xor edi, edi
push edi
mov ecx, esi
mov byte [esp + 0xac], 0x26
mov dword [esp + 0x5c], edi
call fcn.00585f70
lea eax, [esp + 0x58]
push eax
lea ecx, [esi + 0x2d0]
call fcn.00577510
mov edx, dword [edi]
mov eax, dword [edx + 0x94]
push 1
mov ecx, edi
call eax
mov ecx, dword [esp + 0x74]
mov eax, ebp
sub eax, dword [esp + 0x6c]
lea edx, [esp + 0x64]
add eax, ecx
push edx
lea ecx, [esi + 0x2e4]
mov dword [esp + 0x68], eax
call fcn.00556cd0
add ebp, dword [esp + 0x14]
sub dword [esp + 0x50], 1
jne 0x578049
mov edi, 0xf
mov ecx, esi
call fcn.00576fb0
push 2
push 0x5f1108
lea ecx, [esp + 0x3c]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.0043df40
mov ecx, dword [esi + 0x300]
mov eax, dword [ecx + 0x38]
cdq
sub eax, edx
mov edi, eax
mov eax, dword [esi + 0x2f8]
mov eax, dword [eax + 0x38]
lea eax, [eax + eax*2]
cdq
sar edi, 1
add edi, dword [ecx + 0x30]
sub eax, edx
lea ecx, [esp + 0x34]
mov ebp, eax
push ecx
mov ecx, esi
mov byte [esp + 0xac], 0x28
sar ebp, 1
call fcn.00560da0
mov edx, dword [esi + 0x300]
mov ecx, eax
add ecx, dword [edx + 0x34]
mov eax, dword [esi + 0x2f8]
mov eax, dword [eax + 0x38]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x50], eax
mov eax, ebp
cdq
sub eax, edx
mov edx, dword [esp + 0x50]
sar eax, 1
neg eax
sub eax, edx
add eax, edi
mov ebp, 0x10
cmp dword [esp + 0x4c], ebp
mov dword [esi + 0x314], eax
mov dword [esi + 0x318], ecx
mov byte [esp + 0xa8], 0x26
jb 0x57819e
mov ecx, dword [esp + 0x38]
push ecx
call fcn.005b28f2
add esp, 4
push ebp
push str.directionalarrow
lea ecx, [esp + 0x3c]
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.0043df40
mov ecx, dword [esi + 0x300]
mov eax, dword [ecx + 0x3c]
cdq
sub eax, edx
mov edi, eax
mov eax, dword [ecx + 0x38]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ecx + 0x30]
sar edi, 1
add edi, dword [ecx + 0x34]
mov ecx, dword [esi + 0x30c]
add ecx, edi
mov edi, dword [esi + 0x308]
add edi, eax
lea edx, [esp + 0x34]
push edx
lea eax, [esi + 0x538]
push eax
lea eax, [esi + 0x408]
push eax
mov eax, ecx
cdq
sub eax, edx
mov ecx, eax
mov eax, edi
cdq
push ebx
sub eax, edx
sub esp, 8
mov ebx, esp
sar ecx, 1
sar eax, 1
mov dword [ebx], eax
mov dword [ebx + 4], ecx
mov ecx, dword [esi + 0x308]
mov dword [esp + 0x78], esp
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov edx, dword [esi + 0x30c]
mov byte [esp + 0xc8], 0x29
mov dword [esp + 0x80], esp
mov dword [eax + 4], edx
call fcn.005ac9c0
add esp, 0x20
cmp dword [esp + 0x4c], ebp
jb 0x57825d
mov eax, dword [esp + 0x38]
push eax
call fcn.005b28f2
add esp, 4
cmp dword [esp + 0x98], ebp
jb 0x578276
mov ecx, dword [esp + 0x84]
push ecx
call fcn.005b28f2
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0xa0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x88]
xor ecx, esp
call fcn.005b2f9b
add esp, 0x98
ret 4