Function at 0x591fd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x5ee78b
mov eax, dword fs:[0]
push eax
sub esp, 0x468
mov eax, dword [0x638190]
xor eax, esp
mov dword [esp + 0x430], eax
push ebx
push esi
push edi
mov eax, dword [0x638190]
xor eax, esp
push eax
lea eax, [esp + 0x478]
mov dword fs:[0], eax
mov ecx, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x118], ecx
mov ecx, esi
mov dword [esp + 0x114], eax
call fcn.00527e90
mov ebx, eax
mov dword [esp + 0xb8], ebx
test ebx, ebx
je 0x5939b4
call fcn.004fa700
add eax, eax
lea ecx, [esp + 0x2bc]
mov dword [esp + 0x28], eax
call fcn.0051a7e0
xor ecx, ecx
lea edi, [ebx + ebx*2]
mov eax, edi
mov edx, 0x10
mul edx
seto cl
mov dword [esp + 0x480], 0
neg ecx
or ecx, eax
xor eax, eax
add ecx, 4
setb al
neg eax
or eax, ecx
push eax
call sub.MSVCR90.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
mov dword [esp + 0xd0], eax
mov byte [esp + 0x480], 1
test eax, eax
je 0x5920c4
push fcn.00440ab0
push fcn.004e79a0
push edi
mov dword [eax], edi
add eax, 4
push 0x10
push eax
mov dword [esp + 0x6c], eax
call fcn.005c3e4c
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x2c], ecx
jmp 0x5920cc
mov dword [esp + 0x2c], 0
mov edx, dword [esi + 0x10]
mov eax, 0x800
test word [edx + 2], ax
mov byte [esp + 0x480], 0
mov eax, edx
je 0x5920f4
mov ecx, dword [eax + 4]
mov dword [esp + 0x30], ecx
mov edx, dword [eax + 8]
mov dword [esp + 0x34], edx
jmp 0x592122
mov ecx, dword [eax + 0x14]
cmp ebx, 3
je 0x592109
mov dword [esp + 0x30], ecx
mov edx, dword [eax + 0x18]
mov dword [esp + 0x34], edx
jmp 0x592122
mov edx, dword [eax + 0x24]
add ecx, edx
sar ecx, 1
mov dword [esp + 0x30], ecx
mov ecx, dword [eax + 0x18]
mov eax, dword [eax + 0x28]
add ecx, eax
sar ecx, 1
mov dword [esp + 0x34], ecx
lea eax, [esp + 0x30]
push eax
mov ecx, esi
call fcn.0052ad30
mov eax, dword [esi + 0x10]
mov esi, dword [esi + 0xc]
mov dword [esp + 0x110], eax
mov ecx, ebx
shl ecx, 4
mov edx, dword [ecx + eax - 0xc]
lea eax, [ecx + eax - 0x10]
mov dword [esp + 0x30], edx
mov eax, dword [eax + 8]
mov dword [esp + 0x34], eax
lea eax, [esi + 1]
sar eax, 1
lea ecx, [esp + 0x41c]
mov dword [esp + 0xd0], esi
mov dword [esp + 0x58], eax
call fcn.004f1250
lea ecx, [esp + 0x340]
mov byte [esp + 0x480], 2
call fcn.004f1250
fld qword [0x601fa8]
fst qword [esp + 0xc4]
xor edi, edi
fst qword [esp + 0xbc]
mov byte [esp + 0x480], 3
fst qword [esp + 0x104]
mov dword [esp + 0x68], edi
fst qword [esp + 0xfc]
fst qword [esp + 0xe4]
fstp qword [esp + 0xdc]
test ebx, ebx
jle 0x59395f
lea esp, [esp]
mov esi, dword [esp + 0x68]
shl esi, 4
add esi, dword [esp + 0x110]
mov ecx, 0x800
test word [esi + 2], cx
je 0x5929ff
mov edx, dword [esi + 4]
mov dword [esp + 0x6c], edx
mov ebx, dword [esi + 8]
mov dword [esp + 0x70], ebx
test byte [esi + 2], 0x80
je 0x5925b6
mov eax, ecx
test word [esi + 0x12], ax
je 0x592219
mov eax, dword [esi + 0x14]
mov dword [esp + 0x38], eax
mov ecx, dword [esi + 0x18]
jmp 0x592223
mov eax, dword [esi + 0x24]
mov dword [esp + 0x38], eax
mov ecx, dword [esi + 0x28]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x188], ecx
mov ecx, dword [esp + 0x30]
push 0
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x160], ecx
lea ecx, [esp + 0x188]
push ecx
mov dword [esp + 0x174], edx
mov dword [esp + 0x168], eax
mov eax, dword [esi + 0xc]
lea edx, [esp + 0x164]
push edx
push eax
lea eax, [esp + 0x17c]
push eax
lea ecx, [esp + 0x2fc]
mov dword [esp + 0x184], ebx
call fcn.00587620
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x480], 4
call fcn.00587a30
test eax, eax
je 0x5923f5
lea ecx, [esp + 0x314]
call fcn.004f1250
lea ecx, [esp + 0x314]
push ecx
lea ecx, [esp + 0x2ec]
mov byte [esp + 0x484], 5
call fcn.00588ba0
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.004fa9f0
fcomp qword [0x5f3dc8]
add esp, 0xc
fnstsw ax
test ah, 5
jp 0x5922f9
mov edx, dword [esp + 0x330]
sub edx, dword [esp + 0x28]
push edx
jmp 0x592307
mov eax, dword [esp + 0x330]
mov ecx, dword [esp + 0x28]
add eax, ecx
push eax
lea ecx, [esp + 0x318]
call fcn.004f3df0
mov edx, 0x400
test word [esi + 2], dx
je 0x5923ab
mov ecx, dword [esp + 0x2c]
mov eax, edi
shl eax, 4
lea esi, [eax + ecx]
lea edx, [esp + 0x318]
push edx
mov ecx, esi
call fcn.0056fa20
push 1
mov ecx, esi
call fcn.0056fd80
mov ebx, dword [esp + 0x58]
sub ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
inc edi
mov eax, edi
shl eax, 4
mov dword [esi + 0xc], ebx
lea esi, [eax + ecx]
lea edx, [esp + 0x320]
push edx
mov ecx, esi
call fcn.0056fa20
push 1
mov ecx, esi
call fcn.0056fd80
lea ecx, [esp + 0x314]
inc edi
mov dword [esi + 0xc], ebx
mov byte [esp + 0x480], 4
call fcn.004f1b60
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x480], 3
call fcn.00587670
inc dword [esp + 0x68]
jmp 0x593932
mov ecx, edi
shl ecx, 4
add ecx, dword [esp + 0x2c]
lea eax, [esp + 0x314]
push eax
call fcn.0056fa50
lea ecx, [esp + 0x314]
add edi, 3
mov byte [esp + 0x480], 4
call fcn.004f1b60
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x480], 3
call fcn.00587670
inc dword [esp + 0x68]
jmp 0x593932
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x28]
cmp eax, ecx
jge 0x592584
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x1f8]
call fcn.005c0190
fld qword [esp + 0x1f4]
fstp qword [esp + 0xbc]
lea edx, [esp + 0x30]
fld qword [esp + 0x1fc]
push edx
lea ecx, [esp + 0x218]
fstp qword [esp + 0xc8]
call fcn.005c0190
fld qword [esp + 0x214]
fstp qword [esp + 0xfc]
lea eax, [esp + 0x38]
fld qword [esp + 0x21c]
push eax
lea ecx, [esp + 0x248]
fstp qword [esp + 0x108]
call fcn.005c0190
fld qword [esp + 0x244]
fstp qword [esp + 0xdc]
sub esp, 8
fld qword [esp + 0x254]
lea ecx, [esp + 0xf4]
fstp qword [esp + 0xec]
lea edx, [esp + 0x134]
fild dword [esp + 0x30]
lea eax, [esp + 0x104]
fst qword [esp + 0x64]
fstp qword [esp]
push ecx
push edx
push eax
lea ecx, [esp + 0xd0]
push ecx
call fcn.005c57b0
fld qword [esp + 0x74]
add esp, 0x10
fstp qword [esp]
lea edx, [esp + 0x124]
push edx
lea eax, [esp + 0xf8]
push eax
lea ecx, [esp + 0xec]
push ecx
lea edx, [esp + 0xd0]
push edx
call fcn.005c57b0
lea eax, [esp + 0x134]
push eax
lea ecx, [esp + 0x148]
push ecx
lea edx, [esp + 0xdc]
push edx
lea eax, [esp + 0x290]
push eax
call fcn.005c5830
add esp, 0x28
push eax
lea ecx, [esp + 0xf0]
call fcn.005c58d0
fldz
fld qword [esp + 0xf4]
fcom st(1)
fnstsw ax
fld qword [0x5f3df0]
test ah, 1
jne 0x59253f
fadd st(1), st(0)
jmp 0x592541
fsub st(1), st(0)
fld qword [esp + 0xec]
fcom st(3)
fnstsw ax
fstp st(3)
test ah, 1
jne 0x592557
faddp st(2)
jmp 0x592559
fsubp st(2)
fxch st(1)
call fcn.005c3ce0
mov dword [esp + 0x17c], eax
call fcn.005c3ce0
lea ecx, [esp + 0x17c]
push ecx
mov ecx, esi
mov dword [esp + 0x184], eax
call fcn.0056fa20
jmp 0x592589
sub eax, ecx
mov dword [esi + 0xc], eax
mov ecx, edi
shl ecx, 4
add ecx, dword [esp + 0x2c]
push esi
inc edi
call fcn.004f7030
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x480], 3
call fcn.00587670
inc dword [esp + 0x68]
jmp 0x593932
mov edx, ecx
test word [esi + 0x12], dx
je 0x5925ce
mov eax, dword [esi + 0x14]
mov dword [esp + 0x38], eax
mov ecx, dword [esi + 0x18]
mov dword [esp + 0x3c], ecx
jmp 0x5925dc
mov edx, dword [esi + 0x24]
mov dword [esp + 0x38], edx
mov eax, dword [esi + 0x28]
mov dword [esp + 0x3c], eax
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x238]
call fcn.005c0190
fld qword [esp + 0x234]
fstp qword [esp + 0xbc]
lea edx, [esp + 0x30]
fld qword [esp + 0x23c]
push edx
lea ecx, [esp + 0x208]
fstp qword [esp + 0xc8]
call fcn.005c0190
fld qword [esp + 0x204]
fstp qword [esp + 0xfc]
lea eax, [esp + 0x38]
fld qword [esp + 0x20c]
push eax
lea ecx, [esp + 0x228]
fstp qword [esp + 0x108]
call fcn.005c0190
fld qword [esp + 0x224]
fstp qword [esp + 0xdc]
sub esp, 8
fld qword [esp + 0x234]
lea ecx, [esp + 0xf4]
fstp qword [esp + 0xec]
lea edx, [esp + 0x134]
fild dword [esp + 0x30]
lea eax, [esp + 0x104]
fst qword [esp + 0x64]
fstp qword [esp]
push ecx
push edx
push eax
lea ecx, [esp + 0xd0]
push ecx
call fcn.005c57b0
fld qword [esp + 0x74]
add esp, 0x10
fstp qword [esp]
lea edx, [esp + 0x124]
push edx
lea eax, [esp + 0xf8]
push eax
lea ecx, [esp + 0xec]
push ecx
lea edx, [esp + 0xd0]
push edx
call fcn.005c57b0
lea eax, [esp + 0xf4]
push eax
lea ecx, [esp + 0xd8]
push ecx
lea edx, [esp + 0x11c]
push edx
call fcn.004faa40
fst qword [esp + 0x98]
fldz
add esp, 0x24
fucompp
fnstsw ax
test ah, 0x44
jp 0x59289e
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x190], ecx
lea ecx, [esp + 0x18c]
mov dword [esp + 0x19c], edx
push ecx
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x74]
lea edx, [esp + 0x1a0]
push edx
lea ecx, [esp + 0x31c]
mov dword [esp + 0x1a8], eax
call fcn.004f8540
mov eax, dword [esp + 0x28]
push eax
lea ecx, [esp + 0x258]
push ecx
lea ecx, [esp + 0x31c]
mov byte [esp + 0x488], 6
call fcn.004f8dc0
push eax
lea ecx, [esp + 0x260]
call fcn.005c0190
fld qword [esp + 0x5c]
sub esp, 8
fstp qword [esp]
lea edx, [esp + 0x124]
push edx
lea eax, [esp + 0x138]
push eax
lea ecx, [esp + 0xec]
push ecx
lea edx, [esp + 0x270]
push edx
call fcn.005c57b0
fldz
fld qword [esp + 0x14c]
add esp, 0x18
fcom st(1)
fnstsw ax
fld qword [0x5f3df0]
test ah, 1
jne 0x5927bf
fadd st(1), st(0)
jmp 0x5927c1
fsub st(1), st(0)
fld qword [esp + 0x12c]
fcom st(3)
fnstsw ax
fstp st(3)
test ah, 1
jne 0x5927d7
faddp st(2)
jmp 0x5927d9
fsubp st(2)
fxch st(1)
call fcn.005c3ce0
mov dword [esp + 0x1ac], eax
call fcn.005c3ce0
mov dword [esp + 0x1b0], eax
lea eax, [esp + 0x1ac]
push eax
mov ecx, esi
call fcn.0056fa20
mov ebx, dword [esp + 0x2c]
mov ecx, edi
shl ecx, 4
add ecx, ebx
push esi
inc edi
call fcn.004f7030
fldz
fld qword [esp + 0x124]
fcom st(1)
fnstsw ax
fld qword [0x5f3df0]
test ah, 1
jne 0x592830
fadd st(1), st(0)
jmp 0x592832
fsub st(1), st(0)
fld qword [esp + 0x11c]
fcom st(3)
fnstsw ax
fstp st(3)
test ah, 1
jne 0x592848
faddp st(2)
jmp 0x59284a
fsubp st(2)
fxch st(1)
call fcn.005c3ce0
mov dword [esp + 0x1bc], eax
call fcn.005c3ce0
lea ecx, [esp + 0x1bc]
push ecx
mov ecx, esi
mov dword [esp + 0x1c4], eax
call fcn.0056fa20
mov ecx, edi
shl ecx, 4
add ecx, ebx
push esi
inc edi
call fcn.004f7030
lea ecx, [esp + 0x314]
mov byte [esp + 0x480], 3
call fcn.004f85b0
inc dword [esp + 0x68]
jmp 0x593932
lea edx, [esp + 0x11c]
push edx
lea eax, [esp + 0x130]
push eax
lea ecx, [esp + 0xc4]
push ecx
lea edx, [esp + 0x288]
push edx
call fcn.005c5830
add esp, 0x10
push eax
lea ecx, [esp + 0xf0]
call fcn.005c58d0
fldz
fld qword [esp + 0xf4]
fcom st(1)
fnstsw ax
fld qword [0x5f3df0]
test ah, 1
jne 0x5928ef
fadd st(1), st(0)
jmp 0x5928f1
fsub st(1), st(0)
fld qword [esp + 0xec]
fcom st(3)
fnstsw ax
fstp st(3)
test ah, 1
jne 0x592907
faddp st(2)
jmp 0x592909
fsubp st(2)
fxch st(1)
call fcn.005c3ce0
mov dword [esp + 0x144], eax
call fcn.005c3ce0
mov dword [esp + 0x148], eax
lea eax, [esp + 0x144]
push eax
mov ecx, esi
call fcn.0056fa20
mov ebx, dword [esp + 0x58]
cmp ebx, dword [esp + 0x28]
jl 0x5929e6
fldz
fcomp qword [esp + 0x74]
fnstsw ax
test ah, 0x41
jne 0x5929e6
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x1ec], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x1f0], edx
mov edx, dword [esp + 0x6c]
push 0
mov dword [esp + 0x1ac], ecx
lea ecx, [esp + 0x1f0]
push ecx
mov dword [esp + 0x1ac], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x154], edx
lea edx, [esp + 0x1ac]
push edx
mov dword [esp + 0x15c], eax
push ebx
lea eax, [esp + 0x15c]
push eax
lea ecx, [esp + 0x2fc]
call fcn.00587620
push 1
mov ecx, esi
mov byte [esp + 0x484], 7
call fcn.0056fd80
sub ebx, dword [esp + 0x28]
lea ecx, [esp + 0x2e8]
mov dword [esi + 0xc], ebx
mov byte [esp + 0x480], 3
call fcn.00587670
mov ecx, edi
shl ecx, 4
add ecx, dword [esp + 0x2c]
push esi
inc edi
call fcn.004f7030
inc dword [esp + 0x68]
jmp 0x593932
lea ecx, [esp + 0x2bc]
push ecx
mov ecx, esi
call fcn.0056fca0
lea edx, [esp + 0x2bc]
push edx
lea ecx, [esp + 0x344]
call fcn.004f2e40
mov eax, dword [esp + 0x2dc]
mov edx, dword [esp + 0x360]
mov ebx, dword [esp + 0xd0]
and eax, 0xfffffff9
movzx eax, ax
xor ecx, ecx
test ax, ax
sete cl
and edx, 4
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x2c8]
mov dword [esp + 0x2e0], ebx
mov dword [esp + 0x2e4], ebx
mov dword [esp + 0xd4], eax
or cx, dx
mov word [esp + 0x360], cx
mov ecx, dword [esp + 0x2cc]
mov edx, 0x800
mov dword [esp + 0xd8], ecx
test word [esi + 0x32], dx
je 0x592a9c
mov eax, dword [esi + 0x34]
mov dword [esp + 0x38], eax
mov ecx, dword [esi + 0x38]
mov dword [esp + 0x3c], ecx
jmp 0x592aaa
mov edx, dword [esi + 0x44]
mov dword [esp + 0x38], edx
mov eax, dword [esi + 0x48]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
push 0
push ebx
mov dword [esp + 0x1d4], ecx
lea eax, [esp + 0x2c8]
push eax
lea ecx, [esp + 0x1d8]
push ecx
lea ecx, [esp + 0xac]
mov dword [esp + 0x1e0], edx
call fcn.00589230
lea ecx, [esp + 0x80]
mov byte [esp + 0x480], 8
call fcn.00589210
lea ecx, [esp + 0x290]
mov byte [esp + 0x480], 9
mov dword [esp + 0x94], ebx
call fcn.0051a7e0
push fcn.004f1b60
push fcn.004f1250
push 2
push 0x24
lea edx, [esp + 0x3bc]
push edx
mov byte [esp + 0x494], 0xa
mov dword [esp + 0x2c8], ebx
mov dword [esp + 0x2cc], ebx
mov esi, 1
call fcn.005c3e4c
push fcn.004f1b60
push fcn.004f1250
push 2
push 0x24
lea eax, [esp + 0x374]
push eax
mov byte [esp + 0x494], 0xb
call fcn.005c3e4c
mov byte [esp + 0x480], 0xc
test ebx, ebx
jne 0x592db3
mov ecx, dword [esp + 0x28]
lea edx, [ecx + ecx]
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0xa0]
mov dword [esp + 0xb4], edx
call fcn.0058b120
mov eax, dword [esp + 0xb0]
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x2e0], eax
mov dword [esp + 0x2e4], eax
test si, si
jne 0x592bf9
lea ecx, [esp + 0x3ac]
push ecx
lea ecx, [esp + 0x2c0]
call fcn.00522330
mov edx, dword [esp + 0x2b8]
mov eax, dword [esp + 0x2b4]
push edx
push eax
lea ecx, [esp + 0x3b4]
push ecx
lea ecx, [esp + 0x2f4]
call fcn.0051a800
mov byte [esp + 0x480], 0xd
jmp 0x592c39
lea edx, [esp + 0x364]
push edx
lea ecx, [esp + 0x2c0]
call fcn.00522b60
mov eax, dword [esp + 0x2b8]
mov ecx, dword [esp + 0x2b4]
push eax
push ecx
lea edx, [esp + 0x36c]
push edx
lea ecx, [esp + 0x2f4]
call fcn.0051a800
mov byte [esp + 0x480], 0xe
push eax
lea ecx, [esp + 0x294]
call fcn.0051ed40
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x480], 0xc
call fcn.0051a830
lea eax, [esp + 0xa8]
push eax
lea ecx, [esp + 0xa4]
push ecx
call fcn.004fa8a0
add esp, 8
test eax, eax
jne 0x59313c
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x298]
call fcn.004f4aa0
test eax, eax
je 0x592d28
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x90]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], edx
cmp eax, 2
jne 0x592cf9
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.00501010
fstp qword [esp + 0x7c]
lea edx, [esp + 0x58]
push edx
lea eax, [esp + 0x54]
push eax
call fcn.00501010
fcomp qword [esp + 0x84]
add esp, 0x10
fnstsw ax
test ah, 5
jp 0x592cf9
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], edx
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x1dc]
mov dword [esp + 0x1e0], ecx
push edx
lea ecx, [esp + 0x294]
mov dword [esp + 0x1e0], eax
call fcn.004f42e0
jmp 0x59313c
cmp dword [esp + 0xb8], 3
je 0x59313c
mov eax, dword [esp + 0x294]
cmp eax, dword [esp + 0x8c]
jne 0x592d5a
mov ecx, dword [esp + 0x298]
cmp ecx, dword [esp + 0x90]
je 0x59313c
push 0
lea edx, [esp + 0x298]
push edx
lea eax, [esp + 0x2c8]
push eax
lea ecx, [esp + 0x98]
push ecx
lea ecx, [esp + 0x2f8]
call fcn.004f16b0
mov ecx, edi
shl ecx, 4
add ecx, dword [esp + 0x2c]
push eax
mov byte [esp + 0x484], 0xf
call fcn.0056fa50
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x480], 0xc
call fcn.004f1b60
add edi, 3
jmp 0x59313c
cmp dword [esp + 0x2d8], ebx
jle 0x5932cc
lea edx, [esp + 0x80]
push edx
lea ecx, [esp + 0xa0]
call fcn.0058b120
cmp word [esp + 0x5c], 0
jne 0x592e1e
lea eax, [esp + 0x3ac]
push eax
lea ecx, [esp + 0x2c0]
call fcn.00522330
mov ecx, dword [esp + 0x2b8]
mov edx, dword [esp + 0x2b4]
push ecx
push edx
lea eax, [esp + 0x3b4]
push eax
lea ecx, [esp + 0x2f4]
call fcn.0051a800
mov byte [esp + 0x480], 0x10
jmp 0x592e5e
lea ecx, [esp + 0x364]
push ecx
lea ecx, [esp + 0x2c0]
call fcn.00522b60
mov edx, dword [esp + 0x2b8]
mov eax, dword [esp + 0x2b4]
push edx
push eax
lea ecx, [esp + 0x36c]
push ecx
lea ecx, [esp + 0x2f4]
call fcn.0051a800
mov byte [esp + 0x480], 0x11
push eax
lea ecx, [esp + 0x294]
call fcn.0051ed40
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x480], 0xc
call fcn.0051a830
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x298]
call fcn.004f4aa0
test eax, eax
je 0x593124
cmp eax, 1
jne 0x592ee3
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0x344]
call fcn.004f5c60
test eax, eax
je 0x592ec1
xor esi, esi
jmp 0x59308c
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x164], edx
mov dword [esp + 0x168], eax
lea ecx, [esp + 0x164]
jmp 0x592f71
cmp eax, 2
jne 0x592f7e
mov edx, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x40]
mov dword [esp + 0x50], edx
push ecx
lea edx, [esp + 0x54]
push edx
mov dword [esp + 0x5c], eax
call fcn.00501010
fstp qword [esp + 0x7c]
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x5c]
push ecx
call fcn.00501010
fcomp qword [esp + 0x84]
add esp, 0x10
fnstsw ax
test ah, 0x41
jne 0x592f54
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x1e4], edx
mov dword [esp + 0x1e8], eax
lea ecx, [esp + 0x1e4]
jmp 0x592f71
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x174], edx
mov dword [esp + 0x178], eax
lea ecx, [esp + 0x174]
push ecx
lea ecx, [esp + 0x294]
call fcn.004f42e0
cmp word [esp + 0x5c], 0
lea ecx, [esp + 0x290]
jne 0x592fc8
lea edx, [esp + 0x364]
push edx
call fcn.00522b60
mov eax, dword [esp + 0x2e4]
mov ecx, dword [esp + 0x2e0]
push eax
push ecx
lea edx, [esp + 0x36c]
push edx
lea ecx, [esp + 0x2f4]
call fcn.0051a800
mov byte [esp + 0x480], 0x12
jmp 0x593001
lea eax, [esp + 0x3ac]
push eax
call fcn.00522330
mov ecx, dword [esp + 0x2e4]
mov edx, dword [esp + 0x2e0]
push ecx
push edx
lea eax, [esp + 0x3b4]
push eax
lea ecx, [esp + 0x2f4]
call fcn.0051a800
mov byte [esp + 0x480], 0x13
push eax
lea ecx, [esp + 0x2c0]
call fcn.0051ed40
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x480], 0xc
call fcn.0051a830
lea ecx, [esp + 0x294]
push ecx
lea edx, [esp + 0x88]
push edx
call fcn.004fa8a0
add esp, 8
test eax, eax
je 0x59305c
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
jmp 0x59308c
mov edx, dword [esp + 0x294]
mov eax, dword [esp + 0x298]
lea ecx, [esp + 0x9c]
push ecx
lea ecx, [esp + 0x84]
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], eax
call fcn.0058af70
lea edx, [esp + 0x2c0]
push edx
lea eax, [esp + 0xac]
push eax
call fcn.004fa8a0
add esp, 8
test eax, eax
jne 0x593120
mov ecx, dword [esp + 0x58]
push 1
push ecx
lea edx, [esp + 0x2c8]
push edx
lea eax, [esp + 0x2a0]
push eax
lea ecx, [esp + 0xb8]
push ecx
lea ecx, [esp + 0x328]
call fcn.004f1a50
mov edx, dword [esp + 0x330]
sub edx, dword [esp + 0x28]
lea ecx, [esp + 0x314]
push edx
mov byte [esp + 0x484], 0x14
call fcn.004f3df0
mov ecx, edi
shl ecx, 4
add ecx, dword [esp + 0x2c]
lea eax, [esp + 0x314]
push eax
call fcn.0056fa50
lea ecx, [esp + 0x314]
add edi, 3
mov byte [esp + 0x480], 0xc
call fcn.004f1b60
test esi, esi
je 0x593138
lea eax, [esp + 0x2c0]
push eax
lea ecx, [esp + 0x344]
call fcn.004f42e0
mov esi, dword [esp + 0x5c]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0xd4]
push 0
mov dword [esp + 0x1b8], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0x1bc], edx
push ebx
lea edx, [esp + 0x1bc]
mov dword [esp + 0x144], eax
push edx
lea eax, [esp + 0x148]
mov dword [esp + 0x14c], ecx
push eax
lea ecx, [esp + 0x324]
call fcn.00589230
push eax
lea ecx, [esp + 0xa0]
mov byte [esp + 0x484], 0x15
call fcn.0058bfb0
lea ecx, [esp + 0x314]
mov byte [esp + 0x480], 0xc
call fcn.005892c0
mov dword [esp + 0x5c], 0
test ebx, ebx
jne 0x593395
mov ecx, dword [esp + 0x28]
lea edx, [ecx + ecx]
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0xa0]
mov dword [esp + 0xb4], edx
call fcn.0058b120
lea ecx, [esp + 0xa8]
push ecx
lea edx, [esp + 0xa4]
push edx
call fcn.004fa8a0
add esp, 8
mov esi, eax
lea eax, [esp + 0x40]
neg esi
push eax
lea ecx, [esp + 0x84]
sbb esi, esi
push ecx
lea ecx, [esp + 0x298]
neg esi
call fcn.004f4aa0
test eax, eax
je 0x5932f9
mov edx, dword [esp + 0x8c]
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], ecx
cmp eax, 2
jne 0x593287
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x54]
push eax
call fcn.00501010
fstp qword [esp + 0x7c]
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x5c]
push edx
call fcn.00501010
fcomp qword [esp + 0x84]
add esp, 0x10
fnstsw ax
test ah, 5
jp 0x593287
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x1d4]
push ecx
lea ecx, [esp + 0x294]
mov dword [esp + 0x1d8], edx
mov dword [esp + 0x1dc], eax
call fcn.004f4410
mov ecx, edi
shl ecx, 4
add ecx, dword [esp + 0x2c]
lea edx, [esp + 0x290]
push edx
call fcn.0056fac0
jmp 0x59387e
lea ecx, [esp + 0x80]
push ecx
lea ecx, [esp + 0xa0]
call fcn.0058b120
lea edx, [esp + 0x2bc]
push edx
lea ecx, [esp + 0x294]
call fcn.0051ed40
jmp 0x593124
mov ecx, edi
shl ecx, 4
add ecx, dword [esp + 0x2c]
lea eax, [esp + 0x290]
push eax
call fcn.0056fac0
cmp dword [esp + 0xb8], 3
je 0x59387e
test esi, esi
jne 0x59387e
mov ecx, dword [esp + 0x84]
cmp ecx, dword [esp + 0x29c]
jne 0x593349
mov edx, dword [esp + 0x88]
cmp edx, dword [esp + 0x2a0]
je 0x59387e
push 0
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x2d0]
push ecx
lea edx, [esp + 0x2a8]
push edx
lea ecx, [esp + 0x2f8]
add edi, 3
call fcn.004f16b0
mov ecx, edi
shl ecx, 4
add ecx, dword [esp + 0x2c]
push eax
mov byte [esp + 0x484], 0x16
call fcn.0056fa50
lea ecx, [esp + 0x2e8]
jmp 0x593871
cmp dword [esp + 0x2d8], ebx
jle 0x5937f7
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0xa0]
call fcn.0058b120
test si, si
jne 0x5933fd
lea ecx, [esp + 0x3ac]
push ecx
lea ecx, [esp + 0x2c0]
call fcn.00522330
mov edx, dword [esp + 0x2b8]
mov eax, dword [esp + 0x2b4]
push edx
push eax
lea ecx, [esp + 0x3b4]
push ecx
lea ecx, [esp + 0x2f4]
call fcn.0051a800
mov byte [esp + 0x480], 0x17
jmp 0x59343d
lea edx, [esp + 0x364]
push edx
lea ecx, [esp + 0x2c0]
call fcn.00522b60
mov eax, dword [esp + 0x2b8]
mov ecx, dword [esp + 0x2b4]
push eax
push ecx
lea edx, [esp + 0x36c]
push edx
lea ecx, [esp + 0x2f4]
call fcn.0051a800
mov byte [esp + 0x480], 0x18
push eax
lea ecx, [esp + 0x294]
call fcn.0051ed40
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x480], 0xc
call fcn.0051a830
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x298]
call fcn.004f4aa0
test eax, eax
je 0x593776
cmp eax, 1
jne 0x5934bf
lea edx, [esp + 0x40]
push edx
lea ecx, [esp + 0x344]
call fcn.004f5c60
test eax, eax
jne 0x59366c
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], ecx
lea edx, [esp + 0x194]
jmp 0x59354d
cmp eax, 2
jne 0x59366c
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x90]
lea edx, [esp + 0x40]
mov dword [esp + 0x50], eax
push edx
lea eax, [esp + 0x54]
push eax
mov dword [esp + 0x5c], ecx
call fcn.00501010
fstp qword [esp + 0x7c]
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x5c]
push edx
call fcn.00501010
fcomp qword [esp + 0x84]
add esp, 0x10
fnstsw ax
test ah, 0x41
jne 0x593530
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
lea edx, [esp + 0x1c4]
jmp 0x59354d
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ecx
lea edx, [esp + 0x154]
push edx
lea ecx, [esp + 0x294]
call fcn.004f4410
test si, si
jne 0x5935a1
lea eax, [esp + 0x364]
push eax
lea ecx, [esp + 0x294]
call fcn.00522b60
mov ecx, dword [esp + 0x2e4]
mov edx, dword [esp + 0x2e0]
push ecx
push edx
lea eax, [esp + 0x36c]
push eax
lea ecx, [esp + 0x320]
call fcn.0051a800
mov byte [esp + 0x480], 0x19
jmp 0x5935e1
lea ecx, [esp + 0x3ac]
push ecx
lea ecx, [esp + 0x294]
call fcn.00522330
mov edx, dword [esp + 0x2e4]
mov eax, dword [esp + 0x2e0]
push edx
push eax
lea ecx, [esp + 0x3b4]
push ecx
lea ecx, [esp + 0x320]
call fcn.0051a800
mov byte [esp + 0x480], 0x1a
push eax
lea ecx, [esp + 0x2c0]
call fcn.0051ed40
lea ecx, [esp + 0x314]
mov byte [esp + 0x480], 0xc
call fcn.0051a830
lea edx, [esp + 0x29c]
push edx
lea eax, [esp + 0x90]
push eax
call fcn.004fa8a0
add esp, 8
test eax, eax
je 0x59363c
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xac]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], edx
jmp 0x59366c
mov ecx, dword [esp + 0x2a0]
mov eax, dword [esp + 0x29c]
lea edx, [esp + 0x9c]
mov dword [esp + 0x88], ecx
push edx
lea ecx, [esp + 0x84]
mov dword [esp + 0x88], eax
call fcn.0058af70
lea eax, [esp + 0x2bc]
push eax
lea ecx, [esp + 0x2ec]
call fcn.004f3d50
mov ebx, dword [esp + 0x28]
mov byte [esp + 0x480], 0x1b
test si, si
jne 0x59369d
mov ecx, dword [esp + 0x2d8]
add ecx, ebx
push ecx
jmp 0x5936a7
mov edx, dword [esp + 0x2d8]
sub edx, ebx
push edx
lea ecx, [esp + 0x2ec]
call fcn.004f3df0
mov esi, dword [esp + 0x2c]
mov ecx, edi
lea eax, [esp + 0x2e8]
shl ecx, 4
push eax
add ecx, esi
call fcn.0056fa50
lea ecx, [esp + 0xa0]
push ecx
lea edx, [esp + 0x2cc]
push edx
add edi, 3
call fcn.004fa8a0
add esp, 8
test eax, eax
jne 0x593767
mov eax, dword [esp + 0x58]
push 1
push eax
lea ecx, [esp + 0xa8]
push ecx
lea edx, [esp + 0x2a8]
push edx
lea eax, [esp + 0x2d8]
push eax
lea ecx, [esp + 0x328]
call fcn.004f1a50
mov ecx, dword [esp + 0x330]
sub ecx, ebx
push ecx
lea ecx, [esp + 0x318]
mov byte [esp + 0x484], 0x1c
call fcn.004f3df0
mov ecx, edi
lea edx, [esp + 0x314]
shl ecx, 4
push edx
add ecx, esi
call fcn.0056fa50
lea ecx, [esp + 0x314]
mov byte [esp + 0x480], 0x1b
call fcn.004f1b60
lea ecx, [esp + 0x2e8]
jmp 0x593871
sub edi, 3
lea ecx, [esp + 0x2e8]
jmp 0x593871
lea eax, [esp + 0x2bc]
push eax
lea ecx, [esp + 0x2ec]
call fcn.004f3d50
test si, si
mov esi, dword [esp + 0x28]
mov byte [esp + 0x480], 0x1d
jne 0x5937a7
mov ecx, dword [esp + 0x2d8]
add ecx, esi
push ecx
jmp 0x5937b1
mov edx, dword [esp + 0x2d8]
sub edx, esi
push edx
lea ecx, [esp + 0x2ec]
call fcn.004f3df0
mov ecx, edi
shl ecx, 4
add ecx, dword [esp + 0x2c]
lea eax, [esp + 0x2e8]
push eax
call fcn.0056fa50
push 1
push esi
lea ecx, [esp + 0xa4]
call fcn.004f86c0
test eax, eax
je 0x5937ee
mov dword [esp + 0x5c], 1
lea ecx, [esp + 0x2e8]
jmp 0x593871
lea ecx, [esp + 0x80]
push ecx
lea ecx, [esp + 0xa0]
call fcn.0058b120
lea edx, [esp + 0x2bc]
push edx
lea ecx, [esp + 0x3fc]
call fcn.004f3d50
mov byte [esp + 0x480], 0x1e
test si, si
jne 0x59383c
mov eax, dword [esp + 0x2d8]
mov ecx, dword [esp + 0x28]
add eax, ecx
push eax
jmp 0x593848
mov edx, dword [esp + 0x2d8]
sub edx, dword [esp + 0x28]
push edx
lea ecx, [esp + 0x3fc]
call fcn.004f3df0
mov ecx, edi
shl ecx, 4
add ecx, dword [esp + 0x2c]
lea eax, [esp + 0x3f8]
push eax
call fcn.0056fa50
lea ecx, [esp + 0x3f8]
mov byte [esp + 0x480], 0xc
call fcn.004f1b60
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
add dword [esp + 0x68], 3
add edi, 3
cmp dword [esp + 0x5c], 0
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], edx
je 0x5938ba
mov ecx, edi
shl ecx, 4
add ecx, dword [esp + 0x2c]
lea eax, [esp + 0xa0]
push eax
inc edi
call fcn.0056fa20
push fcn.004f1b60
push 2
push 0x24
lea ecx, [esp + 0x370]
push ecx
mov byte [esp + 0x490], 0xb
call fcn.005c3de9
push fcn.004f1b60
push 2
push 0x24
lea edx, [esp + 0x3b8]
push edx
mov byte [esp + 0x490], 0xa
call fcn.005c3de9
lea ecx, [esp + 0x290]
mov byte [esp + 0x480], 9
call fcn.0051a830
lea ecx, [esp + 0x80]
mov byte [esp + 0x480], 8
call fcn.005892c0
lea ecx, [esp + 0x9c]
mov byte [esp + 0x480], 3
call fcn.005892c0
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x30], eax
jne 0x593946
cmp dword [esp + 0x34], ecx
je 0x59394e
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x68]
cmp eax, dword [esp + 0xb8]
jl 0x5921d0
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x114]
mov eax, dword [esp + 0x118]
mov dword [edx], ecx
lea ecx, [esp + 0x340]
mov dword [eax], edi
mov byte [esp + 0x480], 2
call fcn.004f1b60
lea ecx, [esp + 0x41c]
mov byte [esp + 0x480], 0
call fcn.004f1b60
lea ecx, [esp + 0x2bc]
mov dword [esp + 0x480], 0xffffffff
call fcn.0051a830
mov ecx, dword [esp + 0x478]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x430]
xor ecx, esp
call fcn.005c3bb6
mov esp, ebp
pop ebp
ret