Function at 0x533e10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x2bc]
cmp eax, dword [ecx + 8]
jbe 0x536770
sub esp, 0x33c
mov eax, dword [esp + 0x348]
test eax, eax
je 0x533e54
test eax, 0x200
jne 0x533e54
lea ecx, [0x6d4be4]
mov edx, dword [esp + 0x340]
jmp 0x533e85
mov ecx, dword [esp + 0x340]
mov dword [esp], ecx
mov edx, dword [esp + 0x344]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004813e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x348]
mov ebx, dword [esp + 0x350]
mov ebp, dword [esp + 0x358]
cmp ebx, ebp
jne 0x533f36
mov ecx, dword [esp + 0x340]
mov dword [esp], ecx
mov ecx, dword [esp + 0x344]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x35c]
call fcn.0045f594
call fcn.00536780
movzx eax, byte [esp + 0x24]
test al, al
je 0x533ed8
xor eax, eax
xor ecx, ecx
jmp 0x533f13
lea eax, [0x677302]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], 0x12
mov eax, dword [esp + 0x1b8]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.00408970
mov eax, dword [esp + 8]
mov ecx, eax
lea eax, [0x6d3418]
mov edx, dword [esp + 0x358]
mov dword [esp + 0x374], edx
mov dword [esp + 0x378], eax
mov dword [esp + 0x37c], ecx
add esp, 0x33c
ret
mov dword [esp + 0xa8], edx
mov dword [esp + 0x44], ecx
mov eax, dword [ecx + 0x50]
mov dword [esp], edx
call eax
cmp dword [esp + 4], 0x14
je 0x533f54
xor eax, eax
jmp 0x533f70
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x6c]
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
sete al
test al, al
je 0x5346b8
mov eax, dword [esp + 0x34c]
mov dword [esp], eax
mov ecx, dword [esp + 0x350]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x354]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x358]
mov dword [esp + 0xc], ebx
call fcn.005333a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x24]
mov dword [esp + 0xfc], edx
mov ebx, dword [esp + 0x18]
movzx ebp, byte [esp + 0x1c]
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
test ecx, ecx
jne 0x534695
mov dword [esp + 0x4c], eax
mov dword [esp + 0xfc], edx
lea edx, [ebx + eax]
cmp eax, edx
jg 0x53463c
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x350]
cmp ebx, edx
jl 0x53463c
mov dword [esp + 0x94], edx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x53462c
test esi, esi
jne 0x53461c
mov ebx, dword [esp + 0x354]
sub ebx, eax
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and ebx, eax
mov esi, dword [esp + 0x34c]
mov eax, edx
lea edx, [ebx + esi]
cmp edi, 0x12
jg 0x53438e
cmp edi, 4
jle 0x534190
cmp edi, 6
je 0x534124
cmp edi, 0xc
je 0x53406c
cmp edi, 0x12
jne 0x534474
mov ecx, dword [esp + 0x54]
xor ebx, ebx
jmp 0x5366b8
mov dword [esp + 0xcc], edx
mov dword [esp], edx
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.0046a0d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x5340bd
mov dword [esp], 0
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
call fcn.0044afd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
jmp 0x5340ea
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x67ab54]
mov dword [eax], ecx
xor ecx, ecx
lea edx, [0x6d2f90]
mov ebx, eax
xor eax, eax
mov dword [esp + 0xe4], ebx
mov dword [esp + 0x78], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408970
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0xe4]
lea ebx, [0x63eda0]
mov ebp, eax
mov eax, dword [esp + 0x94]
jmp 0x536602
mov dword [esp], edx
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.00532840
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x90], ebx
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0xfc], ebp
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004089f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0xfc]
lea ebx, [0x64c060]
mov ebp, eax
mov eax, dword [esp + 0x94]
jmp 0x536602
cmp edi, 2
je 0x53432a
cmp edi, 3
jne 0x5342e0
mov edi, dword [esp + 0x54]
test edi, edi
je 0x53423c
movzx ecx, byte [ebx + esi]
movzx ebx, cl
cmp ebx, 7
jg 0x5341d8
cmp edi, 1
jne 0x5341c3
test ebx, ebx
jne 0x5341d8
movzx esi, byte [edi + edx - 1]
mov eax, 1
shl eax, cl
dec eax
xchg esi, ebx
test al, bl
xchg esi, ebx
je 0x53421b
lea eax, [0x67e62a]
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], 0x22
mov eax, dword [esp + 0x190]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00408970
mov eax, dword [esp + 8]
xor ebp, ebp
xor esi, esi
xor ecx, ecx
lea edx, [0x6d3418]
xor ebx, ebx
jmp 0x53427d
lea ecx, [edi - 1]
mov esi, ecx
shl ecx, 3
sub ecx, ebx
lea ebx, [ebp - 1]
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
add edx, ebx
mov ebx, edx
xor eax, eax
xor edx, edx
jmp 0x53427d
lea eax, [0x6791c4]
mov dword [esp + 0x198], eax
mov dword [esp + 0x19c], 0x16
mov eax, dword [esp + 0x198]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.00408970
mov eax, dword [esp + 8]
xor ebp, ebp
xor esi, esi
xor ecx, ecx
lea edx, [0x6d3418]
xor ebx, ebx
mov dword [esp + 0xe0], eax
mov dword [esp + 0x74], edx
mov dword [esp + 0x1c8], ebx
mov dword [esp + 0x1cc], esi
mov dword [esp + 0x1d0], ebp
mov dword [esp + 0x1d4], ecx
lea ecx, [0x65a700]
mov dword [esp], ecx
lea ebx, [esp + 0x1c8]
mov dword [esp + 4], ebx
call fcn.00408750
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0xe0]
lea ebx, [0x65a700]
mov ebp, eax
mov eax, dword [esp + 0x94]
jmp 0x536602
cmp edi, 4
jne 0x534474
mov dword [esp + 0x90], ecx
mov dword [esp], edx
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.004089f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0xfc]
lea ebx, [0x6378a0]
mov ebp, eax
mov eax, dword [esp + 0x94]
jmp 0x536602
mov dword [esp], edx
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.00531f90
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x90], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xfc], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004088f0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0xfc]
lea ebx, [0x63e6a0]
mov ebp, eax
mov eax, dword [esp + 0x94]
jmp 0x536602
cmp edi, 0x16
jg 0x534461
cmp edi, 0x13
je 0x5343fd
cmp edi, 0x14
je 0x5343b5
cmp edi, 0x16
jne 0x534474
mov ecx, dword [esp + 0x54]
xor ebx, ebx
jmp 0x536611
mov dword [esp], 0
mov dword [esp + 4], edx
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
call fcn.0044afd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408970
mov eax, dword [esp + 8]
xor ecx, ecx
xor edx, edx
lea ebx, [0x63eda0]
mov ebp, eax
mov eax, dword [esp + 0x94]
jmp 0x536602
mov dword [esp], edx
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.005330e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x90], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xfc], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408970
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0xfc]
lea ebx, [0x63eda0]
mov ebp, eax
mov eax, dword [esp + 0x94]
jmp 0x536602
cmp edi, 0x17
je 0x534582
cmp edi, 0x18
je 0x5344e8
cmp edi, 0x1e
je 0x534484
mov edx, dword [esp + 0xfc]
xor ebx, ebx
xor ebp, ebp
jmp 0x536602
mov dword [esp], edx
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.005331f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x90], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xfc], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408970
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0xfc]
lea ebx, [0x63eda0]
mov ebp, eax
mov eax, dword [esp + 0x94]
jmp 0x536602
lea edi, [esp + 0x228]
xor eax, eax
call fcn.0045f0bb
mov dword [esp], edx
mov ecx, dword [esp + 0x54]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00532ef0
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0xfc], edx
lea edi, [esp + 0x228]
lea esi, [esp + 0xc]
call fcn.0045f59e
lea edi, [esp + 0x200]
lea esi, [esp + 0x228]
call fcn.0045f59e
lea ecx, [0x670840]
mov dword [esp], ecx
lea ecx, [esp + 0x200]
mov dword [esp + 4], ecx
call fcn.00408750
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0xfc]
lea ebx, [0x670840]
mov ebp, eax
mov eax, dword [esp + 0x94]
jmp 0x536602
lea edi, [esp + 0x228]
xor eax, eax
call fcn.0045f0bb
mov dword [esp], edx
mov ecx, dword [esp + 0x54]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00532c10
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0xfc], edx
lea edi, [esp + 0x228]
lea esi, [esp + 0xc]
call fcn.0045f59e
lea edi, [esp + 0x214]
lea esi, [esp + 0x228]
call fcn.0045f59e
lea ecx, [0x670840]
mov dword [esp], ecx
lea ecx, [esp + 0x214]
mov dword [esp + 4], ecx
call fcn.00408750
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0xfc]
lea ebx, [0x670840]
mov ebp, eax
mov eax, dword [esp + 0x94]
jmp 0x536602
mov eax, dword [esp + 0xfc]
xor ebx, ebx
xor ebp, ebp
jmp 0x5364f7
mov eax, dword [esp + 0xfc]
xor ebx, ebx
xor ebp, ebp
jmp 0x5364f7
lea eax, [0x6759e6]
mov dword [esp + 0x1b0], eax
mov dword [esp + 0x1b4], 0xe
mov eax, dword [esp + 0x1b0]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00408970
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x374], ecx
lea ecx, [0x6d3418]
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x378], eax
mov dword [esp + 0x37c], edx
add esp, 0x33c
ret
mov eax, dword [esp + 0x34c]
mov dword [esp], eax
mov ecx, dword [esp + 0x350]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x354]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x358]
mov dword [esp + 0xc], ebx
call fcn.005333a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
movzx edx, byte [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x24]
mov dword [esp + 0xfc], edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebp
mov byte [esp + 0xa4], dl
test esi, esi
jne 0x535ea4
movzx ecx, byte [esp + 0x35d]
test cl, cl
je 0x534aaf
movzx ecx, byte [esp + 0x35e]
test cl, cl
je 0x534757
mov ecx, 1
jmp 0x53475c
mov ecx, 2
mov dword [esp + 0x94], eax
mov ebx, dword [esp + 0x350]
cmp ebx, eax
je 0x534a53
mov dword [esp + 0xf8], edi
mov dword [esp + 0x90], esi
cmp dword [esp + 0x98], ecx
jne 0x5349a2
mov ecx, dword [esp + 0x364]
mov ebp, dword [esp + 0x9c]
cmp dword [ecx], ebp
jne 0x5349a2
mov ecx, dword [esp + 0xa0]
test ecx, ecx
je 0x5347b6
test dl, dl
je 0x5349a2
mov ecx, dword [0xe72e5c]
mov edx, dword [esp + 0x44]
cmp dword [0xe72e58], edx
jne 0x53481b
mov dword [esp], edx
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00403670
movzx eax, byte [esp + 0xc]
test al, al
je 0x534802
mov eax, dword [esp + 0x94]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0xf8]
jmp 0x534aaf
mov eax, dword [esp + 0x94]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x350]
mov edi, dword [esp + 0xf8]
mov ecx, dword [esp + 0xa0]
test ecx, ecx
jg 0x53490f
mov ecx, dword [0xe72e44]
cmp dword [0xe72e40], edx
jne 0x534858
mov dword [esp], edx
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00403670
movzx eax, byte [esp + 0xc]
test al, al
jne 0x5348b4
lea eax, [0x682343]
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], 0x2d
mov eax, dword [esp + 0x180]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00408970
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x374], ecx
lea ecx, [0x6d3404]
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
mov eax, dword [esp + 0x340]
mov dword [esp], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x348]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.00480cc0
mov eax, dword [esp + 0x94]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x378], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
mov ecx, dword [esp + 0x34c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov edx, dword [esp + 0x354]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.005333a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
movzx ebp, byte [esp + 0x1c]
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x24]
mov dword [esp + 0xfc], edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], ebx
xchg ebp, eax
mov byte [esp + 0xa4], al
xchg ebp, eax
test esi, esi
je 0x534aaf
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x378], eax
mov dword [esp + 0x37c], edi
add esp, 0x33c
ret
mov eax, dword [esp + 0x340]
mov dword [esp], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x348]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x35c]
call fcn.0045f594
call fcn.00536780
movzx eax, byte [esp + 0x24]
test al, al
je 0x5349f7
mov eax, dword [esp + 0x358]
mov ecx, dword [esp + 0x90]
mov edi, dword [esp + 0xf8]
jmp 0x534a37
lea eax, [0x67f8bf]
mov dword [esp + 0x178], eax
mov dword [esp + 0x17c], 0x25
mov eax, dword [esp + 0x178]
mov dword [esp], eax
mov dword [esp + 4], 0x25
call fcn.00408970
mov edi, dword [esp + 8]
mov eax, dword [esp + 0x94]
lea ecx, [0x6d3404]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], edi
add esp, 0x33c
ret
lea eax, [0x67a44f]
mov dword [esp + 0x188], eax
mov dword [esp + 0x18c], 0x19
mov eax, dword [esp + 0x188]
mov dword [esp], eax
mov dword [esp + 4], 0x19
call fcn.00408970
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x374], ecx
lea ecx, [0x6d3404]
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
mov dword [esp + 0xfc], edi
mov dword [esp + 0x90], esi
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x44]
mov dword [esp], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp + 4], edx
call fcn.005370a0
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x11]
movzx ebx, byte [esp + 0x10]
test dl, dl
je 0x535de6
cmp ecx, 0x13
jne 0x534b46
mov ecx, dword [esp + 0x98]
test ecx, ecx
jne 0x534b36
mov ecx, dword [esp + 0x9c]
cmp ecx, 0x14
jg 0x534b20
cmp ecx, 0xc
je 0x534b46
cmp ecx, 0x12
je 0x534b46
cmp ecx, 0x14
je 0x534b46
jmp 0x534b2f
cmp ecx, 0x16
je 0x534b46
cmp ecx, 0x1b
je 0x534b46
cmp ecx, 0x1e
je 0x534b46
mov ecx, 0x13
jmp 0x534b46
mov ecx, dword [esp + 0x368]
test ecx, ecx
jne 0x534b46
mov ecx, 0x13
cmp ecx, 0x17
jne 0x534b65
cmp dword [esp + 0x9c], 0x18
jne 0x534b65
mov edx, dword [esp + 0x98]
test edx, edx
jne 0x534b65
mov ecx, 0x18
movzx edx, byte [esp + 0x370]
test dl, dl
je 0x534b76
mov ecx, 0x11
movzx edx, byte [esp + 0x35d]
test dl, dl
je 0x534b8d
mov ebp, eax
mov esi, ecx
mov edi, 0
jmp 0x534bba
mov ebp, dword [esp + 0x364]
test ebp, ebp
je 0x534baf
mov ebp, dword [ebp]
test dl, dl
mov esi, ecx
mov edi, 2
mov ecx, ebp
mov ebp, eax
mov eax, 0
jmp 0x534bba
test dl, dl
mov ebp, eax
mov esi, ecx
mov edi, 0
jne 0x534bfc
mov byte [esp + 0x43], bl
movzx ebx, byte [esp + 0x35e]
test bl, bl
je 0x534bf5
mov ebx, dword [esp + 0x364]
test ebx, ebx
je 0x534bec
mov ecx, dword [ebx]
test dl, dl
movzx ebx, byte [esp + 0x43]
mov eax, 0
mov edi, 1
jmp 0x534bfc
test dl, dl
movzx ebx, byte [esp + 0x43]
jmp 0x534bfc
test dl, dl
movzx ebx, byte [esp + 0x43]
jne 0x534c1e
movzx edx, byte [esp + 0x35f]
test dl, dl
je 0x534c1e
mov edx, dword [esp + 0x364]
test edx, edx
je 0x534c1e
mov ecx, dword [edx]
xor eax, eax
mov edi, 3
mov dword [esp + 0x64], ecx
test al, al
jne 0x534c40
cmp dword [esp + 0x98], edi
jne 0x535bf7
cmp dword [esp + 0x9c], ecx
jne 0x535bf7
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x534c53
cmp byte [esp + 0xa4], bl
jne 0x535bf7
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x48]
lea edx, [ecx + eax]
cmp ecx, edx
jg 0x535b9e
mov ebx, dword [esp + 0x350]
cmp ebx, edx
jl 0x535b9e
mov dword [esp + 0x94], esi
mov dword [esp + 0x50], eax
mov dword [esp + 0x8c], edx
mov eax, dword [esp + 0x340]
mov dword [esp], eax
mov ecx, dword [esp + 0x344]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x348]
mov dword [esp + 8], edx
call fcn.0047e7e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.0047fcb0
mov eax, dword [esp + 0x354]
mov ecx, dword [esp + 0x48]
sub eax, ecx
mov ebx, eax
neg eax
sar eax, 0x1f
and ecx, eax
mov eax, dword [esp + 0x34c]
lea ebp, [ecx + eax]
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov dword [esp + 0xc4], edi
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xbc], edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xb8], edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xb4], edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xb0], edx
mov edx, dword [esp + 0x14]
test esi, esi
je 0x535341
mov dword [esp + 0xac], edx
mov edx, dword [esi + 8]
cmp edx, 0xb0201730
ja 0x5350e0
cmp edx, 0x423e791d
jne 0x534e9d
lea edx, [0x64a260]
cmp edi, edx
jne 0x535341
mov edx, dword [esp + 0x50]
test edx, edx
je 0x534e10
movzx ecx, byte [ecx + eax]
movzx esi, cl
cmp esi, 7
jg 0x534dae
cmp edx, 1
jne 0x534d97
test esi, esi
jne 0x534dae
mov eax, ebp
movzx ebp, byte [edx + ebp - 1]
mov edi, ebx
mov ebx, 1
shl ebx, cl
dec ebx
xchg ebp, eax
test bl, al
xchg ebp, eax
je 0x534df1
lea eax, [0x67e62a]
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], 0x22
mov eax, dword [esp + 0x150]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00408970
mov eax, dword [esp + 8]
xor ebx, ebx
xor edx, edx
xor ebp, ebp
xor ecx, ecx
lea esi, [0x6d3418]
jmp 0x534e51
lea ecx, [edx - 1]
mov edx, ecx
shl ecx, 3
sub ecx, esi
lea ebx, [edi - 1]
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
add ebx, eax
xor esi, esi
xor eax, eax
jmp 0x534e51
lea eax, [0x6791c4]
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], 0x16
mov eax, dword [esp + 0x158]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.00408970
mov eax, dword [esp + 8]
xor ebx, ebx
xor edx, edx
xor ebp, ebp
xor ecx, ecx
lea esi, [0x6d3418]
mov edi, dword [esp + 0xbc]
mov dword [edi + 4], edx
mov dword [edi + 8], ebp
mov dword [edi + 0xc], ecx
mov ecx, dword [0xe996c0]
test ecx, ecx
jne 0x534e6f
mov dword [edi], ebx
jmp 0x534e7a
mov ecx, eax
mov eax, ebx
call fcn.0045efc0
mov eax, ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], esi
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
cmp edx, 0x8ed6f7a2
jne 0x53505b
lea edx, [0x671680]
cmp edi, edx
jne 0x535341
mov ecx, dword [esp + 0x94]
cmp ecx, 0x17
jne 0x534f91
lea edi, [esp + 0x228]
xor eax, eax
call fcn.0045f0bb
mov dword [esp], ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00532c10
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xfc], ecx
mov edx, dword [esp + 0x24]
lea edi, [esp + 0x228]
lea esi, [esp + 0xc]
call fcn.0045f59e
lea edi, [esp + 0x1ec]
lea esi, [esp + 0x228]
call fcn.0045f59e
mov edi, dword [esp + 0xb8]
test byte [edi], al
mov ecx, dword [0xe996c0]
test ecx, ecx
jne 0x534f3c
lea esi, [esp + 0x1ec]
call fcn.0045f59e
jmp 0x534f67
mov dword [esp + 0xf8], edx
lea eax, [0x670840]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x1ec]
mov dword [esp + 8], eax
call fcn.00410400
mov edx, dword [esp + 0xf8]
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x378], eax
mov dword [esp + 0x37c], edx
add esp, 0x33c
ret
lea edi, [esp + 0x228]
xor eax, eax
call fcn.0045f0bb
mov dword [esp], ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00532ef0
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xfc], ecx
mov edx, dword [esp + 0x24]
lea edi, [esp + 0x228]
lea esi, [esp + 0xc]
call fcn.0045f59e
lea edi, [esp + 0x1d8]
lea esi, [esp + 0x228]
call fcn.0045f59e
mov edi, dword [esp + 0xb8]
test byte [edi], al
mov ecx, dword [0xe996c0]
test ecx, ecx
jne 0x535006
lea esi, [esp + 0x1d8]
call fcn.0045f59e
jmp 0x535031
mov dword [esp + 0xf8], edx
lea eax, [0x670840]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x1d8]
mov dword [esp + 8], eax
call fcn.00410400
mov edx, dword [esp + 0xf8]
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x378], eax
mov dword [esp + 0x37c], edx
add esp, 0x33c
ret
cmp edx, 0xb0201730
jne 0x535341
lea edx, [0x64a2c0]
cmp edi, edx
jne 0x535341
mov dword [esp], ebp
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00532840
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0xc0]
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0xe996c0]
test ecx, ecx
jne 0x5350b8
mov dword [edi], eax
jmp 0x5350bd
call fcn.0045efc0
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], ebx
mov dword [esp + 0x37c], ebp
add esp, 0x33c
ret
cmp edx, 0xc34a524e
ja 0x53528a
cmp edx, 0xba8d6a2a
jne 0x535209
lea edx, [0x631ce0]
cmp edi, edx
jne 0x535341
lea edi, [esp + 0x254]
xor eax, eax
call fcn.0045f0b7
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x254], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x258], ecx
movzx ecx, byte [esp + 0xa4]
mov byte [esp + 0x25c], cl
mov dword [esp + 0x260], ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x264], ecx
mov dword [esp + 0x268], ebx
mov ecx, dword [esp + 0x354]
mov edx, dword [esp + 0x358]
sub ecx, edx
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, edx
mov ebp, dword [esp + 0x34c]
add ecx, ebp
mov dword [esp + 0x26c], ecx
mov ecx, dword [esp + 0x8c]
mov ebp, ecx
sub ecx, edx
mov dword [esp + 0x270], ecx
mov dword [esp + 0x274], ebx
mov edi, dword [esp + 0xc4]
test byte [edi], al
mov ecx, dword [0xe996c0]
test ecx, ecx
jne 0x5351bb
lea esi, [esp + 0x254]
call fcn.0045f576
jmp 0x5351df
lea eax, [0x65b200]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x254]
mov dword [esp + 8], eax
call fcn.00410400
mov ebp, dword [esp + 0x8c]
mov dword [esp + 0x374], ebp
mov eax, dword [esp + 0x90]
mov dword [esp + 0x378], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
cmp edx, 0xc34a524e
jne 0x535341
lea edx, [0x630920]
cmp edi, edx
jne 0x535341
mov dword [esp], ebp
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.005323b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
jne 0x535267
mov edi, dword [esp + 0xac]
test byte [edi], al
mov ecx, dword [0xe996c0]
test ecx, ecx
jne 0x535262
mov dword [edi], eax
jmp 0x535267
call fcn.0045efc0
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edx
mov dword [esp + 0x37c], ebx
add esp, 0x33c
ret
cmp edx, 0xf13fb4fb
jne 0x5352f4
lea edx, [0x631c20]
cmp edi, edx
jne 0x535341
mov dword [esp], ebp
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00532200
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
jne 0x5352d1
mov ecx, dword [esp + 0xb4]
mov dword [ecx], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edx
mov dword [esp + 0x37c], ebx
add esp, 0x33c
ret
cmp edx, 0xfb797281
jne 0x535341
lea edx, [0x631c60]
cmp edi, edx
jne 0x535341
mov eax, dword [esp + 0xb0]
mov byte [eax], 1
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x378], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
mov dword [esp + 0x88], ebx
mov dword [esp + 0xc8], ebp
nop
mov edx, dword [esp + 0x348]
mov esi, edx
and edx, 0x1f
cmp edx, 6
jbe 0x535839
cmp edx, 0x17
je 0x5355cc
cmp edx, 0x18
jne 0x5355b9
mov eax, dword [esp + 0x94]
cmp eax, 0x13
jg 0x535459
cmp eax, 0xc
je 0x5353da
cmp eax, 0x12
jne 0x53539c
mov eax, dword [esp + 0x50]
xor ecx, ecx
jmp 0x536476
cmp eax, 0x13
jne 0x5354b2
mov dword [esp], ebp
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.005330e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, edx
mov edx, eax
mov eax, ebp
mov esi, ebx
mov ebx, ecx
mov ecx, esi
jmp 0x53638c
mov dword [esp], ebp
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0046a0d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x535427
mov dword [esp], 0
mov eax, dword [esp + 0xc8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
call fcn.0044afd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
jmp 0x53638c
lea eax, [0x647880]
mov dword [esp], eax
call fcn.0040af90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x67ab54]
mov dword [eax], ecx
xor ecx, ecx
lea edx, [0x6d2f90]
mov ebx, eax
xor eax, eax
jmp 0x53638c
cmp eax, 0x16
jg 0x5354a0
cmp eax, 0x14
je 0x535473
cmp eax, 0x16
jne 0x5354b2
mov eax, dword [esp + 0x50]
xor ecx, ecx
jmp 0x5363fd
mov dword [esp], 0
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
call fcn.0044afd0
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ecx, ebx
mov eax, edx
xor edx, edx
xor ebx, ebx
jmp 0x53638c
cmp eax, 0x1b
je 0x53558c
cmp eax, 0x1e
je 0x535557
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
mov dword [esp], eax
call fcn.00408890
mov eax, dword [esp + 4]
lea ecx, [0x63e5e0]
mov dword [esp + 0x1c0], ecx
mov dword [esp + 0x1c4], eax
lea eax, [0x67ff08]
mov dword [esp], eax
mov dword [esp + 4], 0x26
lea eax, [esp + 0x1c0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004b5130
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x120], ecx
mov dword [esp + 0x124], eax
mov ecx, dword [esp + 0x120]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408970
mov ecx, dword [esp + 8]
lea edx, [0x6d3418]
mov ebx, ecx
xor ecx, ecx
xor eax, eax
jmp 0x53638c
mov dword [esp], ebp
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.005331f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, edx
mov edx, eax
mov eax, ebp
mov esi, ebx
mov ebx, ecx
mov ecx, esi
jmp 0x53638c
mov dword [esp], 0
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
call fcn.0044afd0
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ecx, ebx
mov eax, edx
xor edx, edx
xor ebx, ebx
jmp 0x53638c
cmp edx, 0x19
jne 0x5355c5
xor ecx, ecx
jmp 0x535ece
test esi, esi
jmp 0x535ad0
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x535755
mov eax, dword [esp + 0x44]
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call fcn.00481b30
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x340]
mov dword [esp], ebx
mov ebp, dword [esp + 0x344]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x348]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00480bb0
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
call fcn.004089f0
mov eax, dword [esp + 0xc]
nop
movzx ecx, byte [0xe734e0]
test cl, cl
je 0x5356b7
lea ecx, [0x6378a0]
mov dword [0xe734e4], ecx
mov edx, dword [0xe996c0]
test edx, edx
jne 0x5356aa
mov dword [0xe734e8], eax
jmp 0x5356bd
lea edi, [0xe734e8]
call fcn.0045efc0
jmp 0x5356bd
lea ecx, [0x6378a0]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
mov ecx, dword [esp + 0x100]
test ecx, ecx
je 0x5356ed
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x5356f3
or edx, 0x80
jmp 0x5356f3
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x340]
mov dword [esp], ebx
mov ebx, dword [esp + 0x344]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x348]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00481800
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x378], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc8]
mov dword [esp], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x88]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.005339b0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
test ebx, ebx
jne 0x535816
mov dword [esp + 0xfc], ebp
mov dword [esp + 0xd0], esi
mov ebx, dword [esp + 0x340]
mov dword [esp], ebx
mov ebx, dword [esp + 0x344]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x348]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00480bb0
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xd0]
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], ebp
mov dword [esp + 0x37c], esi
add esp, 0x33c
ret
cmp edx, 1
jne 0x535958
mov edx, dword [esp + 0x50]
cmp edx, 1
jne 0x5358b7
movzx eax, byte [ecx + eax]
test al, al
jne 0x53585e
xor eax, eax
xor ecx, ecx
xor edx, edx
jmp 0x5358f9
cmp al, 0xff
jne 0x535871
xor eax, eax
mov ecx, 1
xor edx, edx
jmp 0x5358f9
lea eax, [0x675fa6]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], 0xf
mov eax, dword [esp + 0x140]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00408970
mov eax, dword [esp + 8]
mov esi, dword [esp + 0x348]
xor ecx, ecx
mov edx, eax
lea eax, [0x6d3418]
jmp 0x5358f9
lea eax, [0x675fa6]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], 0xf
mov eax, dword [esp + 0x148]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00408970
mov edx, dword [esp + 8]
mov esi, dword [esp + 0x348]
lea eax, [0x6d3418]
xor ecx, ecx
test eax, eax
jne 0x535935
mov dword [esp + 0xdc], edx
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x340]
mov dword [esp], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
mov byte [esp + 0xc], cl
call fcn.00480cc0
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0xdc]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
mov dword [esp + 0x37c], edx
add esp, 0x33c
ret
cmp edx, 2
jne 0x535961
test esi, esi
jmp 0x53596c
cmp edx, 5
jb 0x535ace
test esi, esi
je 0x535985
test esi, 0x200
jne 0x535985
lea eax, [0x6d4be4]
mov ecx, dword [esp + 0x340]
jmp 0x5359ab
mov eax, dword [esp + 0x340]
mov dword [esp], eax
mov ecx, dword [esp + 0x344]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
call fcn.004813e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x7c]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 4
jne 0x535a3e
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
call fcn.00532200
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test ecx, ecx
jne 0x535aab
mov dword [esp + 0xd8], edx
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0x340]
mov dword [esp], ecx
mov ecx, dword [esp + 0x344]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x348]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.00480d80
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0xd8]
jmp 0x535aab
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
call fcn.00531f90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
test eax, eax
jne 0x535aa7
mov dword [esp + 0xd4], ecx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x340]
mov dword [esp], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x348]
mov dword [esp + 8], eax
call fcn.00480d80
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0xd4]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], edx
add esp, 0x33c
ret
test esi, esi
je 0x535ae9
test esi, 0x200
jne 0x535ae9
lea eax, [0x6d4be4]
mov ecx, dword [esp + 0x340]
jmp 0x535b0f
mov eax, dword [esp + 0x340]
mov dword [esp], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.004813e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6756b2]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xd
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044ad20
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x118], ecx
mov dword [esp + 0x11c], eax
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408970
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x374], ecx
lea ecx, [0x6d3404]
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
lea eax, [0x6759e6]
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 0xe
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00408970
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x374], ecx
lea ecx, [0x6d3418]
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
mov eax, dword [esp + 0x340]
mov dword [esp], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x348]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x35c]
call fcn.0045f594
call fcn.00536780
movzx eax, byte [esp + 0x24]
test al, al
je 0x535c4f
mov eax, dword [esp + 0x358]
mov ecx, dword [esp + 0x90]
mov edi, dword [esp + 0xfc]
jmp 0x535dca
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 0x60]
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0xfc], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x94], ecx
lea edi, [esp + 0x278]
xor eax, eax
call fcn.0045f0b6
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.00408890
mov eax, dword [esp + 4]
lea ecx, [0x63e5e0]
mov dword [esp + 0x278], ecx
mov dword [esp + 0x27c], eax
lea eax, [0x657740]
mov dword [esp], eax
lea edx, [esp + 0x98]
mov dword [esp + 4], edx
call fcn.004087b0
mov eax, dword [esp + 8]
lea ecx, [0x657740]
mov dword [esp + 0x280], ecx
mov dword [esp + 0x284], eax
lea eax, [0x663200]
mov dword [esp], eax
lea ecx, [esp + 0x35c]
mov dword [esp + 4], ecx
call fcn.00408750
mov eax, dword [esp + 8]
lea ecx, [0x663200]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0xfc]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
call fcn.00408970
mov eax, dword [esp + 8]
lea ecx, [0x63eda0]
mov dword [esp + 0x290], ecx
mov dword [esp + 0x294], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.00408890
mov eax, dword [esp + 4]
lea ecx, [0x63e5e0]
mov dword [esp + 0x298], ecx
mov dword [esp + 0x29c], eax
lea eax, [0x68057e]
mov dword [esp], eax
mov dword [esp + 4], 0x27
lea eax, [esp + 0x278]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 5
mov dword [esp + 0x10], 5
call fcn.004b5130
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408970
mov edi, dword [esp + 8]
mov eax, dword [esp + 0x48]
lea ecx, [0x6d3404]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], edi
add esp, 0x33c
ret
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
mov eax, dword [esp + 0x44]
test eax, eax
je 0x535e09
mov ecx, dword [eax + 4]
jmp 0x535e0b
mov ecx, eax
mov dword [esp + 0x1c0], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x1c4], eax
lea eax, [0x677c18]
mov dword [esp], eax
mov dword [esp + 4], 0x13
lea eax, [esp + 0x1c0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004b5130
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x174], eax
mov ecx, dword [esp + 0x170]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408970
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x374], ecx
lea ecx, [0x6d3404]
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x378], eax
mov dword [esp + 0x37c], edi
add esp, 0x33c
ret
mov eax, dword [esp + 0x60]
lea ecx, [eax + 1]
mov dword [esp + 0x60], ecx
mov eax, dword [esp + 0x44]
mov edx, dword [eax + 0x64]
mov ebx, dword [esp + 0xa8]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 0x60]
cmp dword [esp + 4], eax
jle 0x535f94
mov ecx, dword [esp + 0x44]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0xa8]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x308]
lea esi, [esp + 8]
call fcn.0045f54e
lea edi, [esp + 0x2d4]
lea esi, [esp + 0x308]
call fcn.0045f54e
mov eax, dword [esp + 0x2e0]
test eax, eax
je 0x535ec7
lea eax, [0x67e0c9]
mov dword [esp + 0x138], eax
mov dword [esp + 0x13c], 0x21
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.00408970
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x374], ecx
lea ecx, [0x6d3404]
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x64]
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
jg 0x535fb3
xor eax, eax
jmp 0x536013
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
mov dword [esp + 4], 0
call ecx
lea edi, [esp + 0x308]
lea esi, [esp + 8]
call fcn.0045f54e
mov eax, dword [esp + 0x318]
mov ecx, dword [esp + 0x31c]
mov edx, dword [0xe72e54]
cmp dword [0xe72e50], eax
je 0x535ffe
xor eax, eax
jmp 0x536013
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00403670
movzx eax, byte [esp + 0xc]
test al, al
je 0x53614c
mov eax, dword [esp + 0x340]
mov dword [esp], eax
mov ecx, dword [esp + 0x344]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x348]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0047fa10
mov eax, dword [esp + 0x354]
mov ecx, dword [esp + 0x358]
sub eax, ecx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x34c]
add eax, ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xf4], ebx
mov ebp, dword [esp + 0x14]
mov dword [esp + 0xf0], ebp
mov esi, dword [esp + 0x18]
mov dword [esp + 0x84], esi
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
sub eax, ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004089f0
mov eax, dword [esp + 0xc]
nop
movzx ecx, byte [0xe734e0]
test cl, cl
je 0x5360df
lea ecx, [0x63f300]
mov dword [0xe734e4], ecx
mov edx, dword [0xe996c0]
test edx, edx
jne 0x5360d2
mov dword [0xe734e8], eax
jmp 0x5360e5
lea edi, [0xe734e8]
call fcn.0045efc0
jmp 0x5360e5
lea ecx, [0x63f300]
mov dword [esp + 0x108], ecx
mov dword [esp + 0x10c], eax
mov ecx, dword [esp + 0x108]
test ecx, ecx
je 0x536115
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x53611b
or edx, 0x80
jmp 0x53611b
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov ebx, dword [esp + 0xf0]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00480bb0
xor eax, eax
xor ecx, ecx
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0xfc]
jmp 0x53616b
mov ebp, dword [esp + 0x5c]
inc ebp
mov edx, ecx
mov ecx, eax
mov eax, ebp
mov dword [esp + 0xfc], ebx
mov dword [esp + 0x90], edx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], ecx
mov ebp, dword [esp + 0x44]
mov esi, dword [ebp + 0x64]
mov edi, dword [esp + 0xa8]
mov dword [esp], edi
call esi
mov eax, dword [esp + 0x5c]
cmp dword [esp + 4], eax
jle 0x53635b
mov ecx, dword [esp + 0x44]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0xa8]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x2a0]
lea esi, [esp + 8]
call fcn.0045f54e
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x53620e
mov ecx, dword [esp + 0x2b0]
mov edx, dword [esp + 0x2b4]
mov ebx, dword [0xe72e54]
cmp dword [0xe72e50], ecx
je 0x5361f1
xor ecx, ecx
jmp 0x536210
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.00403670
movzx eax, byte [esp + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x5c]
jmp 0x536210
xor ecx, ecx
test cl, cl
je 0x53622b
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x90]
mov ebx, dword [esp + 0xfc]
jmp 0x536160
mov ecx, dword [esp + 0x340]
mov dword [esp], ecx
mov edx, dword [esp + 0x344]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x348]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0047fa10
mov eax, dword [esp + 0x10]
mov dword [esp + 0xf4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xf0], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0x2b8]
mov ebp, dword [esp + 0x2bc]
mov dword [esp], ebx
mov dword [esp + 4], ebp
lea ebx, [0x672f9a]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 4
call fcn.0047bfa0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00536bf0
lea edi, [esp + 0x23c]
lea esi, [esp + 8]
call fcn.0045f594
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
mov eax, dword [esp + 0xf0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x88]
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x18], ebx
lea edi, [esp + 0x1c]
lea esi, [esp + 0x23c]
call fcn.0045f594
call fcn.00533e10
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
test ecx, ecx
je 0x536160
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edx
mov dword [esp + 0x37c], ebx
add esp, 0x33c
ret
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x378], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
test edx, edx
jne 0x5363d9
mov dword [esp + 0xfc], ebx
mov dword [esp + 0x90], edx
mov edx, dword [esp + 0x340]
mov dword [esp], edx
mov edx, dword [esp + 0x344]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x348]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00480f70
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0xfc]
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edx
mov dword [esp + 0x37c], ebx
add esp, 0x33c
ret
inc ecx
cmp ecx, eax
jge 0x536448
lea edx, [ecx + ebp]
cmp byte [edx], 0x80
jb 0x5363fc
lea eax, [0x67eff4]
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], 0x24
mov eax, dword [esp + 0x128]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.00408970
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x6d3418]
xor ebx, ebx
jmp 0x53646a
mov dword [esp], 0
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0044afd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov ebp, ebx
mov ebx, eax
mov eax, ebp
jmp 0x53638c
inc ecx
cmp ecx, eax
jge 0x5364ca
movzx edx, byte [ecx + ebp]
lea ebx, [edx - 0x30]
cmp bl, 9
jbe 0x536475
cmp dl, 0x20
je 0x536475
lea eax, [0x6807a5]
mov dword [esp + 0x130], eax
mov dword [esp + 0x134], 0x28
mov eax, dword [esp + 0x130]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.00408970
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x6d3418]
xor ebx, ebx
jmp 0x5364ec
mov dword [esp], 0
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0044afd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov ebp, ebx
mov ebx, eax
mov eax, ebp
jmp 0x53638c
test ecx, ecx
jne 0x5365e6
test ebx, ebx
je 0x5365ca
nop
movzx esi, byte [0xe734e0]
xchg esi, eax
test al, al
xchg esi, eax
je 0x53653e
mov dword [0xe734e4], ebx
mov esi, dword [0xe996c0]
test esi, esi
jne 0x53652d
mov dword [0xe734e8], ebp
jmp 0x53653e
lea edi, [0xe734e8]
mov esi, eax
mov eax, ebp
call fcn.0045efc0
mov eax, esi
mov dword [esp + 0xfc], eax
mov dword [esp + 0x90], ecx
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], ebp
mov ebx, dword [esp + 0x110]
test ebx, ebx
je 0x53657e
nop
movzx esi, byte [ebx + 0xf]
mov edi, esi
and esi, 0x1f
xchg edi, eax
test al, 0x20
xchg edi, eax
jne 0x536584
or esi, 0x80
jmp 0x536584
xor esi, esi
xor ebx, ebx
xor ebp, ebp
mov eax, dword [esp + 0x340]
mov dword [esp], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x348]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
call fcn.00480bb0
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
mov dword [esp + 0x374], edx
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
mov dword [esp + 0x374], edx
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], eax
add esp, 0x33c
ret
mov eax, edx
mov edx, dword [esp + 0x94]
jmp 0x5364f7
inc ebx
cmp ebx, ecx
jge 0x53665d
lea ebp, [ebx + edx]
cmp byte [ebp], 0x80
jb 0x536610
lea eax, [0x67eff4]
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x1a4], 0x24
mov eax, dword [esp + 0x1a0]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.00408970
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x6d3418]
xor ebx, ebx
jmp 0x53667f
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0044afd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov dword [esp + 0xe8], eax
mov dword [esp + 0x7c], edx
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00408970
mov ebp, dword [esp + 8]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0xe8]
lea ebx, [0x63eda0]
jmp 0x536602
inc ebx
cmp ebx, ecx
jge 0x536710
movzx ebp, byte [ebx + edx]
lea esi, [ebp - 0x30]
xchg esi, eax
cmp al, 9
xchg esi, eax
jbe 0x5366b7
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x5366b7
lea eax, [0x6807a5]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], 0x28
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.00408970
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x6d3418]
xor ebx, ebx
jmp 0x536732
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0044afd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov dword [esp + 0x80], edx
mov dword [esp + 0xec], eax
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00408970
mov ebp, dword [esp + 8]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0xec]
lea ebx, [0x63eda0]
jmp 0x536602
call fcn.0045dbb0
jmp fcn.00533e10