Function at 0x5aa410
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x82b814]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x234]
cmp eax, dword [ecx + 8]
jbe 0x5ab9ad
sub esp, 0x2b4
lea eax, [0x65a200]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [esp + 0x150], eax
mov ecx, dword [esp + 0x2b8]
mov dword [esp + 0x10c], ecx
mov ecx, dword [esp + 0x2bc]
mov dword [esp + 0x110], ecx
mov ecx, dword [esp + 0x2c0]
mov dword [esp + 0x114], ecx
lea ecx, [esp + 0x10c]
mov dword [esp], ecx
mov dword [esp + 4], ecx
mov byte [esp + 8], 0x30
call fcn.00556a60
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab511
mov eax, dword [esp + 0x110]
mov ecx, dword [esp + 0x114]
mov edx, dword [esp + 0x10c]
mov ebx, dword [esp + 0x150]
mov dword [ebx + 4], eax
mov dword [ebx + 8], ecx
mov eax, dword [0x82b968]
test eax, eax
je 0x5aa4d1
call fcn.0046b940
mov dword [edi], edx
mov eax, dword [ebx]
mov dword [edi + 4], eax
mov dword [ebx], edx
lea eax, [esp + 0x10c]
mov dword [esp], eax
mov dword [esp + 4], eax
mov byte [esp + 8], 0x30
call fcn.005569f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab4ca
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
lea eax, [esp + 0x10c]
mov dword [esp], eax
lea eax, [esp + 0x60]
mov dword [esp + 4], eax
mov byte [esp + 8], 0x30
call fcn.00556a60
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab483
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0x150]
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], ecx
mov eax, dword [0x82b968]
test eax, eax
je 0x5aa569
call fcn.0046b940
mov dword [edi], edx
mov eax, dword [ebx + 0xc]
mov dword [edi + 4], eax
mov dword [ebx + 0xc], edx
lea eax, [esp + 0x60]
mov dword [esp], eax
mov dword [esp + 4], eax
mov byte [esp + 8], 0x30
call fcn.005569f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab43c
lea eax, [esp + 0x60]
mov dword [esp], eax
lea eax, [0x6265c0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x150]
lea ecx, [eax + 0x58]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 0xa0
lea ecx, [0x630c20]
mov dword [esp + 0x10], ecx
lea ecx, [0x6b8b60]
mov dword [esp + 0x14], ecx
call fcn.00556bd0
movzx eax, byte [esp + 0x18]
test al, al
je 0x5ab3f5
mov eax, dword [esp + 0x150]
mov ecx, dword [eax + 0x58]
test ecx, ecx
jl 0x5ab3ae
inc ecx
mov dword [eax + 0x58], ecx
cmp ecx, 3
jg 0x5ab367
lea eax, [0x63f7e0]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [esp + 0xb0], eax
lea ecx, [esp + 0x60]
mov dword [esp], ecx
lea ecx, [0x65f580]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00555550
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab320
mov eax, dword [0x82b968]
test eax, eax
jne 0x5aa651
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0x150]
jmp 0x5aa66c
call fcn.0046b940
mov eax, dword [esp + 0xb0]
mov dword [edi], eax
mov ecx, dword [esp + 0x150]
mov edx, dword [ecx + 0x5c]
mov dword [edi + 4], edx
mov dword [ecx + 0x5c], eax
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
lea eax, [esp + 0x60]
mov dword [esp], eax
lea eax, [esp + 0xa4]
mov dword [esp + 4], eax
mov byte [esp + 8], 0x30
call fcn.005569f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab2d9
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
lea eax, [esp + 0x10c]
mov dword [esp], eax
lea eax, [esp + 0xf0]
mov dword [esp + 4], eax
mov byte [esp + 8], 0x30
call fcn.005569f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab292
mov eax, dword [esp + 0xf4]
cmp dword [esp + 0xa8], eax
jne 0x5aa73d
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xa4]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00403230
movzx eax, byte [esp + 0xc]
test al, al
jne 0x5aa784
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x41
lea ecx, [0x671cc6]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea edi, [esp + 0x284]
xor eax, eax
call fcn.0046bba4
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0xac]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.005a4ea0
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x40]
lea edi, [esp + 0x284]
lea esi, [esp + 0xc]
call fcn.0046c048
mov ecx, dword [esp + 0x50]
test ecx, ecx
jne 0x5ab272
lea edi, [esp]
lea esi, [esp + 0x284]
call fcn.0046c048
call fcn.005b2d10
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x150]
mov dword [ecx + 0x48], eax
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
lea eax, [esp + 0x60]
mov dword [esp], eax
lea eax, [esp + 0x100]
mov dword [esp + 4], eax
mov byte [esp + 8], 0x30
call fcn.00556a60
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab22b
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x100]
mov ebx, dword [esp + 0x150]
mov dword [ebx + 0x34], eax
mov dword [ebx + 0x38], ecx
mov eax, dword [0x82b968]
test eax, eax
je 0x5aa884
call fcn.0046b940
mov dword [edi], edx
mov eax, dword [ebx + 0x30]
mov dword [edi + 4], eax
mov dword [ebx + 0x30], edx
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x104]
mov edx, dword [esp + 0x108]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.005a4940
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x5ab207
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x150]
lea edx, [ecx + 0x60]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0056ad60
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
lea eax, [esp + 0x60]
mov dword [esp], eax
lea eax, [esp + 0x54]
mov dword [esp + 4], eax
mov byte [esp + 8], 0x30
call fcn.005569f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab1c0
lea edi, [esp + 0x270]
xor eax, eax
call fcn.0046bbab
lea edi, [esp + 0x25c]
call fcn.0046bbab
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x5c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.005a51c0
mov ecx, dword [esp + 0x150]
lea edx, [ecx + 0x158]
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x50], ebx
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x14c], ebp
lea edi, [esp + 0x270]
lea esi, [esp + 0xc]
call fcn.0046c08e
lea edi, [esp + 0x25c]
lea esi, [esp + 0x20]
call fcn.0046c08e
lea edi, [esp + 0x170]
lea esi, [esp + 0x270]
call fcn.0046c08e
lea edi, [esp + 0x15c]
lea esi, [esp + 0x25c]
call fcn.0046c08e
mov ecx, dword [0x82b968]
test ecx, ecx
je 0x5aa9ec
mov dword [esp + 0x158], edx
lea eax, [0x65d7c0]
mov dword [esp], eax
mov dword [esp + 4], edx
lea ecx, [esp + 0x170]
mov dword [esp + 8], ecx
call fcn.00412430
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x14c]
mov edi, edx
lea esi, [esp + 0x170]
call fcn.0046c08e
mov eax, dword [0x82b968]
mov ecx, dword [esp + 0x150]
lea edi, [ecx + 0x16c]
test eax, eax
je 0x5aaa4e
mov dword [esp + 0x158], edi
lea eax, [0x65d7c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x15c]
mov dword [esp + 8], eax
call fcn.00412430
mov ecx, dword [esp + 0x150]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x14c]
mov edi, dword [esp + 0x158]
lea esi, [esp + 0x15c]
call fcn.0046c08e
test ebx, ebx
jne 0x5ab1a0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
lea eax, [esp + 0x60]
mov dword [esp], eax
lea eax, [esp + 0x6c]
mov dword [esp + 4], eax
mov byte [esp + 8], 0x30
call fcn.00556a60
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab159
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x150]
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], ecx
mov eax, dword [0x82b968]
test eax, eax
je 0x5aaad0
call fcn.0046b940
mov dword [edi], edx
mov eax, dword [ebx + 0x24]
mov dword [edi + 4], eax
mov dword [ebx + 0x24], edx
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.005a4940
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x5ab135
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x150]
lea edx, [ecx + 0xdc]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0056ad60
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
lea eax, [esp + 0x60]
mov dword [esp], eax
lea eax, [esp + 0x78]
mov dword [esp + 4], eax
mov byte [esp + 8], 0x30
call fcn.00556a60
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab0ee
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x150]
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], ecx
mov eax, dword [0x82b968]
test eax, eax
je 0x5aab8c
call fcn.0046b940
mov dword [edi], edx
mov eax, dword [ebx + 0x18]
mov dword [edi + 4], eax
mov dword [ebx + 0x18], edx
lea eax, [esp + 0x78]
mov dword [esp], eax
mov dword [esp + 4], eax
mov byte [esp + 8], 0x30
call fcn.005569f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab0a7
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
lea eax, [esp + 0x78]
mov dword [esp], eax
lea eax, [esp + 0xb4]
mov dword [esp + 4], eax
mov byte [esp + 8], 0x30
call fcn.005569f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab060
lea edi, [esp + 0x284]
xor eax, eax
call fcn.0046bba4
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0xbc]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.005a4ea0
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x40]
lea edi, [esp + 0x284]
lea esi, [esp + 0xc]
call fcn.0046c048
lea edi, [esp + 0xc0]
lea esi, [esp + 0x284]
call fcn.0046c048
mov ecx, dword [esp + 0x50]
test ecx, ecx
jne 0x5ab040
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xc8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.005b30d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x150]
mov dword [ecx + 0x4c], eax
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
lea eax, [esp + 0x78]
mov dword [esp], eax
lea eax, [esp + 0x84]
mov dword [esp + 4], eax
call fcn.005568d0
movzx eax, byte [esp + 8]
test al, al
je 0x5aaff9
mov ecx, dword [esp + 0x150]
mov edx, dword [ecx + 0x4c]
test edx, edx
je 0x5aada6
lea edi, [esp + 0x1f4]
xor eax, eax
call fcn.0046bb9d
lea edi, [esp + 0x200]
lea esi, [esp + 0xc0]
call fcn.0046c048
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x90]
mov dword [esp + 0x234], edx
mov dword [esp + 0x238], ebx
mov dword [esp + 0x23c], ebp
mov dword [esp + 0x230], ecx
lea ecx, [esp + 0x1f4]
mov dword [esp], ecx
call fcn.005a54e0
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0x10]
mov eax, ebp
mov ebp, dword [esp + 0x150]
mov dword [ebp + 0x50], ecx
mov ecx, dword [0x82b968]
test ecx, ecx
je 0x5aad99
call fcn.0046b940
mov dword [edi], ebx
mov ecx, dword [ebp + 0x54]
mov dword [edi + 4], ecx
mov dword [ebp + 0x54], ebx
test edx, edx
jne 0x5aafd9
mov ecx, ebp
cmp dword [ecx + 0x58], 1
jle 0x5ab868
lea eax, [esp + 0x60]
mov dword [esp], eax
mov byte [esp + 4], 0x81
call fcn.00556b50
movzx eax, byte [esp + 8]
test al, al
je 0x5aaf92
lea eax, [esp + 0x60]
mov dword [esp], eax
mov byte [esp + 4], 0x82
call fcn.00556b50
movzx eax, byte [esp + 8]
test al, al
je 0x5aaf4b
mov eax, dword [esp + 0x150]
cmp dword [eax + 0x58], 3
jne 0x5ab868
mov dword [esp + 0x118], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov byte [esp + 0x47], 0
lea eax, [esp + 0x60]
mov dword [esp], eax
lea eax, [esp + 0x118]
mov dword [esp + 4], eax
lea eax, [esp + 0x47]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 0xa3
call fcn.00556ad0
movzx eax, byte [esp + 0x10]
test al, al
je 0x5aaf04
movzx ecx, byte [esp + 0x47]
test cl, cl
je 0x5ab861
lea edi, [esp + 0x1d8]
xor eax, eax
call fcn.0046bba9
lea edi, [esp + 0x184]
call fcn.0046bb9b
lea ecx, [esp + 0x184]
mov dword [esp + 0x1e4], ecx
call fcn.0044b300
mov ecx, dword [esp]
mov dword [esp + 0x1e0], ecx
lea ecx, [esp + 0x118]
mov dword [esp], ecx
mov dword [esp + 4], ecx
mov byte [esp + 8], 0x30
call fcn.005569f0
movzx ecx, byte [esp + 0xc]
test cl, cl
jne 0x5ab564
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x66735a]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x66735a]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1f
lea ecx, [0x669625]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1e
lea ecx, [0x668ef5]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
mov dword [esp + 0x2c4], 0
mov dword [esp + 0x2c8], edx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x20
lea ecx, [0x669bfd]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
mov dword [esp + 0x2c4], 0
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], edx
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x2f
lea ecx, [0x66f129]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x14
lea ecx, [0x664a46]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x14
lea ecx, [0x664a46]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x2c4], 0
mov dword [esp + 0x2c8], eax
mov dword [esp + 0x2cc], ecx
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x16
lea ecx, [0x6656ca]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
mov dword [esp + 0x2c4], 0
mov dword [esp + 0x2c8], ebx
mov dword [esp + 0x2cc], ebp
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x18
lea ecx, [0x6666aa]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x2c4], 0
mov dword [esp + 0x2c8], eax
mov dword [esp + 0x2cc], ecx
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x16
lea ecx, [0x6656ca]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
mov dword [esp + 0x2c4], 0
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], edx
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x24
lea ecx, [0x66b592]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x2e
lea ecx, [0x66ec1a]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1d
lea ecx, [0x66885f]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x665089]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x17
lea ecx, [0x665e36]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x17
lea ecx, [0x665e36]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1f
lea ecx, [0x669606]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1f
lea ecx, [0x669606]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x667a61]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x667a61]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
lea esi, [esp + 0x130]
call fcn.0046c07a
mov eax, dword [esp + 0x11c]
test eax, eax
je 0x5ab846
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
lea eax, [esp + 0x118]
mov dword [esp], eax
lea eax, [esp + 0x124]
mov dword [esp + 4], eax
mov byte [esp + 8], 0x30
call fcn.005569f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ab7ff
lea edi, [esp + 0x240]
xor eax, eax
call fcn.0046bba9
mov ecx, dword [esp + 0x124]
mov edx, dword [esp + 0x128]
mov ebx, dword [esp + 0x12c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.005a5320
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x2c]
lea edi, [esp + 0x240]
lea esi, [esp + 0xc]
call fcn.0046c07a
lea edi, [esp + 0x130]
lea esi, [esp + 0x240]
call fcn.0046c07a
mov ecx, dword [esp + 0x4c]
test ecx, ecx
jne 0x5ab7df
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
mov edx, dword [esp + 0x138]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0054aaf0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xfc], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x48], ecx
lea edx, [0x632a00]
mov dword [esp], edx
lea ebx, [esp + 0x1d8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.004112f0
mov eax, dword [esp + 0x10]
movzx eax, byte [eax]
test al, al
jne 0x5ab798
lea eax, [0x632a00]
mov dword [esp], eax
lea ecx, [esp + 0x1d8]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0xc], edx
call fcn.00411980
mov eax, dword [esp + 0x10]
mov byte [eax], 1
mov eax, dword [esp + 0x150]
mov ecx, dword [eax + 0x18c]
mov edx, dword [eax + 0x188]
inc edx
mov ebx, dword [eax + 0x184]
cmp ecx, edx
jae 0x5ab746
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x644920]
mov dword [esp + 0x10], eax
call fcn.00450140
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x150]
mov dword [ebx + 0x18c], eax
mov eax, dword [0x82b968]
test eax, eax
je 0x5ab73c
call fcn.0046b940
mov dword [edi], ecx
mov eax, dword [ebx + 0x184]
mov dword [edi + 4], eax
mov dword [ebx + 0x184], ecx
mov eax, ebx
mov ebx, ecx
mov dword [eax + 0x188], edx
mov ecx, dword [0x82b968]
imul edx, edx, 0x1c
lea edi, [edx + ebx - 0x1c]
test ecx, ecx
je 0x5ab558
mov dword [esp + 0x154], edi
lea eax, [0x644920]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x130]
mov dword [esp + 8], eax
call fcn.00412430
mov eax, dword [esp + 0x150]
mov edi, dword [esp + 0x154]
jmp 0x5ab558
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x2f
lea ecx, [0x66f158]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
mov dword [esp + 0x2c4], 0
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], edx
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x19
lea ecx, [0x666c1d]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
mov eax, dword [esp + 0x150]
mov dword [esp], eax
call fcn.005a8910
mov eax, dword [esp + 4]
test eax, eax
jne 0x5ab989
mov eax, dword [esp + 0x150]
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
lea eax, [esp + 0x10c]
mov dword [esp], eax
lea eax, [esp + 0x94]
mov dword [esp + 4], eax
call fcn.005568d0
movzx eax, byte [esp + 8]
test al, al
je 0x5ab942
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0xa0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.0054a9d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x150]
mov dword [ebx + 0x40], eax
mov dword [ebx + 0x44], ecx
mov eax, dword [0x82b968]
test eax, eax
je 0x5ab91b
call fcn.0046b940
mov dword [edi], edx
mov eax, dword [ebx + 0x3c]
mov dword [edi + 4], eax
mov dword [ebx + 0x3c], edx
mov dword [esp + 0x2c4], ebx
mov dword [esp + 0x2c8], 0
mov dword [esp + 0x2cc], 0
add esp, 0x2b4
ret
lea eax, [0x639500]
mov dword [esp], eax
call fcn.0040d2d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x19
lea ecx, [0x666c36]
mov dword [eax], ecx
mov dword [esp + 0x2c4], 0
lea ecx, [0x6b96cc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
add esp, 0x2b4
ret
mov ecx, dword [esp + 8]
mov dword [esp + 0x2c4], 0
mov dword [esp + 0x2c8], eax
mov dword [esp + 0x2cc], ecx
add esp, 0x2b4
ret
call fcn.0046a530
jmp fcn.005aa410