Function at 0x535f10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x70]
cmp eax, dword [ecx + 8]
jbe 0x536c9d
sub esp, 0xf0
mov eax, dword [esp + 0xf4]
mov ecx, dword [eax + 0x14]
test ecx, ecx
jne 0x53601a
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0xfc]
lea edx, [ecx + eax]
mov dword [esp + 0xa4], edx
mov ebx, dword [esp + 0x100]
cmp edx, ebx
ja 0x535fda
mov ebp, dword [esp + 0xf8]
mov dword [esp + 0xec], ebp
mov dword [esp + 0xa0], ebx
add ecx, ebp
mov dword [esp], ecx
mov ecx, dword [esp + 0x104]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044d890
mov eax, dword [esp + 0xec]
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
add esp, 0xf0
ret
lea eax, [0x640f20]
mov dword [esp], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00438ea0
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0xfc]
jmp 0x535f6c
mov dword [esp], eax
call fcn.00535130
mov eax, dword [esp + 4]
test eax, eax
jle 0x536be5
mov dword [esp + 0x6c], eax
nop
mov ecx, dword [esp + 0xfc]
lea edx, [ecx + eax]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x100]
cmp ebx, edx
jl 0x536b75
test edx, edx
jl 0x536c96
mov ebp, dword [esp + 0xf8]
cmp ecx, edx
ja 0x536c8f
mov dword [esp + 0x84], ebx
mov dword [esp + 0xd0], ebp
mov eax, dword [esp + 0xf4]
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x14]
lea ebx, [0x652940]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004078d0
movzx eax, byte [esp + 0x14]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0xfc]
mov ebx, ecx
sub ecx, edx
mov dword [esp + 0x9c], ecx
mov ebp, ecx
neg ecx
sar ecx, 0x1f
and edx, ecx
mov ecx, dword [esp + 0xd0]
add edx, ecx
mov dword [esp + 0xe4], edx
test al, al
je 0x536b33
nop
mov eax, dword [esp + 0x110]
mov dword [esp], eax
mov eax, dword [esp + 0x114]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], eax
call fcn.004776a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
test ecx, ecx
jne 0x536afd
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xe4]
mov dword [esp + 0x88], eax
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebp
mov dword [esp + 0xc0], esi
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x78], edx
mov edi, dword [esp + 0xf4]
mov ebp, dword [edi + 0x20]
mov esi, dword [edi + 0x1c]
test esi, esi
je 0x536af2
cmp eax, 5
jb 0x536c88
mov edx, dword [esi + 0x10]
mov dword [esp], ebp
lea ebx, [edi + 0x24]
mov dword [esp + 4], ebx
mov dword [esp + 8], 8
mov dword [esp + 0xc], 8
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 5
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0x104]
mov dword [esp + 0x1c], ebx
mov ebp, dword [esp + 0x108]
mov dword [esp + 0x20], ebp
mov esi, dword [esp + 0x10c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0xf4]
mov ebp, dword [ebx + 0x18]
mov esi, dword [ebx + 0x14]
test esi, esi
je 0x536c6e
mov dword [esp + 0xd8], ebp
mov dword [esp + 0x8c], esi
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], eax
mov dword [esp + 0xc4], edx
lea eax, [0x6495a0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.004078d0
movzx eax, byte [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test al, al
je 0x53649c
mov dword [esp + 0xdc], ecx
mov dword [esp + 0x90], edx
nop
mov eax, dword [esp + 0x70]
mov ebx, dword [esp + 0x108]
lea ebp, [ebx + eax]
mov dword [esp + 0x64], ebp
mov esi, dword [esp + 0x78]
lea edi, [esi + ebp]
mov dword [esp + 0x4c], edi
mov eax, dword [esp + 0x88]
cmp eax, edi
jl 0x536416
test edi, edi
jl 0x536c67
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xb0]
cmp esi, edi
ja 0x536c60
mov dword [esp + 0x80], eax
sub eax, esi
mov dword [esp + 0x50], eax
neg eax
sar eax, 0x1f
and esi, eax
mov eax, dword [esp + 0xcc]
add esi, eax
mov eax, dword [esp + 0x50]
cmp ebx, eax
ja 0x536c59
mov dword [esp + 0xbc], esi
mov ebp, dword [edx + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov edi, dword [esp + 0x104]
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ebx
mov edi, dword [esp + 0x10c]
mov dword [esp + 0x18], edi
call ebp
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x64]
cmp eax, ecx
ja 0x536c52
mov ecx, dword [esp + 0x90]
mov ecx, dword [ecx + 0x10]
mov edx, dword [esp + 0xdc]
mov dword [esp], edx
mov edx, dword [esp + 0x50]
sub edx, eax
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
mov edx, dword [esp + 0xbc]
add eax, edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov edx, dword [esp + 0xc4]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x18], eax
call ecx
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0xcc]
cmp ecx, 3
jbe 0x536c0c
lea ebx, [ecx - 5]
mov ebp, ebx
sar ebx, 8
mov byte [edx + 3], bl
cmp ecx, 4
jbe 0x536c05
mov dword [esp + 0x100], eax
mov dword [esp + 0xfc], ecx
mov dword [esp + 0xf8], edx
xchg ebp, eax
mov byte [edx + 4], al
xchg ebp, eax
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
call fcn.005350c0
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
add esp, 0xf0
ret
lea eax, [0x640f20]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edi
call fcn.00438de0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x78]
cmp ecx, edx
jle 0x536496
mov ebx, edx
mov dword [esp + 0xe8], eax
mov ebp, dword [esp + 0xc8]
cmp ebp, eax
je 0x536460
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call fcn.0044d890
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x108]
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x78]
mov edi, dword [esp + 0x4c]
mov eax, dword [esp + 0xe8]
mov dword [esp + 0xcc], eax
mov eax, edi
jmp 0x5362a9
mov ebx, edx
mov edx, ecx
jmp 0x53643e
lea eax, [0x65e640]
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xd8]
mov dword [esp + 8], ecx
call fcn.004078d0
movzx eax, byte [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
test al, al
jne 0x536772
lea eax, [0x652940]
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 8], eax
call fcn.004078d0
movzx eax, byte [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test al, al
je 0x536c6e
mov dword [esp + 0xe0], ecx
mov dword [esp + 0x94], edx
mov eax, dword [edx + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x108]
lea ebx, [edx + ecx]
test eax, eax
je 0x536c2f
mov dword [esp + 0x7c], ebx
mov ebp, eax
mov eax, ebx
mov esi, edx
cmp ebp, 0xffffffff
je 0x536552
cdq
idiv ebp
jmp 0x536554
xor edx, edx
sub ebp, edx
mov dword [esp + 0x58], ebp
nop
lea edx, [ebx + ebp]
mov dword [esp + 0x68], edx
mov edi, dword [esp + 0x78]
mov eax, ebp
lea ebp, [edx + edi]
mov dword [esp + 0x48], ebp
mov ebx, dword [esp + 0x88]
cmp ebx, ebp
jl 0x5366f2
test ebp, ebp
jl 0x536c28
cmp edi, ebp
ja 0x536c21
mov dword [esp + 0x88], ebx
sub ebx, edi
mov dword [esp + 0x54], ebx
neg ebx
sar ebx, 0x1f
and edi, ebx
mov ebx, dword [esp + 0xc8]
add edi, ebx
cmp edx, esi
jle 0x5366eb
mov dword [esp + 0xb8], edi
mov ebx, dword [esp + 0x104]
cmp ebx, edi
je 0x5365d5
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
call fcn.0044d890
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
ja 0x536c1a
mov edx, dword [esp + 0x54]
mov ebx, edx
sub edx, eax
neg edx
sar edx, 0x1f
and edx, eax
mov ebp, dword [esp + 0xb8]
add edx, ebp
mov esi, ecx
sub ecx, eax
mov eax, dword [esp + 0x70]
cmp ecx, eax
jle 0x5366e4
mov ecx, dword [esp + 0xc4]
cmp ecx, edx
je 0x53662b
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044d890
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0x7c]
jmp 0x53664b
lea ebp, [ecx - 1]
xchg ebp, ecx
mov byte [eax + ebx], cl
xchg ebp, ecx
inc ebx
cmp ebx, edx
jge 0x536656
jb 0x536640
jmp 0x536c13
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jg 0x5366a7
mov ecx, dword [esp + 0x94]
mov ecx, dword [ecx + 0x14]
mov ebx, dword [esp + 0xe0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], ebx
call ecx
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0xc8]
jmp 0x536389
mov eax, dword [esp + 0x94]
mov edx, dword [eax + 0x18]
mov ebx, dword [esp + 0xe0]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0xc], ecx
call edx
mov eax, dword [esp + 0xb8]
mov edx, dword [esp + 0x68]
jmp 0x53665e
mov eax, ecx
jmp 0x536610
mov esi, edx
jmp 0x5365b3
lea eax, [0x640f20]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebp
call fcn.00438de0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x78]
cmp ecx, edx
jle 0x53676c
mov ebx, edx
mov dword [esp + 0xe8], eax
mov ebp, dword [esp + 0xc8]
cmp ebp, eax
je 0x53673c
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call fcn.0044d890
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x68]
mov ebp, dword [esp + 0x48]
mov esi, dword [esp + 0x108]
mov edi, dword [esp + 0x78]
mov ebx, dword [esp + 0xe8]
mov dword [esp + 0xc8], ebx
mov ebx, ebp
jmp 0x536586
mov ebx, edx
mov edx, ecx
jmp 0x53671a
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x536ad7
mov eax, dword [esp + 0xf4]
lea ebx, [eax + 0x24]
mov ebp, 8
mov esi, 8
mov dword [esp + 0x98], ecx
mov dword [esp + 0xc0], ebx
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x60], esi
mov dword [esp + 0xd4], edx
cmp word [eax + 0x10], 0x304
jne 0x5369f3
mov edi, dword [esp + 0x78]
mov eax, dword [esp + 0x108]
lea esi, [eax + edi]
mov dword [esp + 0xfc], esi
mov ebp, dword [esp + 0x88]
cmp esi, ebp
ja 0x5369af
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x100], ebp
mov ecx, dword [esp + 0xf8]
lea edx, [ecx + edi]
mov dword [esp], edx
mov edx, dword [esp + 0x104]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0044d890
mov eax, dword [esp + 0xfc]
test eax, eax
jbe 0x536c4b
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x108]
lea ecx, [edx + ecx + 1]
mov ebx, dword [esp + 0xf8]
movzx ebp, byte [ebx]
mov esi, dword [esp + 0x100]
cmp ecx, esi
ja 0x536964
xchg ebp, ecx
mov byte [ebx + eax], cl
xchg ebp, ecx
test ecx, ecx
jbe 0x536c44
mov dword [esp + 0xf8], ebx
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], esi
mov byte [ebx], 0x17
mov eax, dword [esp + 0x98]
mov ecx, dword [eax + 0x18]
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x108]
lea eax, [ecx + eax + 1]
mov ecx, dword [esp + 0xfc]
cmp ecx, 3
jbe 0x536c3d
mov edx, eax
sar eax, 8
mov ebx, dword [esp + 0xf8]
mov byte [ebx + 3], al
cmp ecx, 4
jbe 0x536c36
mov byte [ebx + 4], dl
mov eax, dword [esp + 0x98]
mov eax, dword [eax + 0x1c]
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], 5
mov edx, dword [esp + 0x100]
mov dword [esp + 0xc], edx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x60]
mov dword [esp + 0x18], ebp
lea ebp, [edx - 5]
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 5
add ebp, ebx
mov dword [esp + 0x1c], ebp
add ecx, 0xfffffffb
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], 5
mov dword [esp + 0x30], edx
call eax
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x3c]
mov ebx, eax
mov eax, edx
mov edx, ecx
mov ecx, ebx
jmp 0x536389
xchg ebp, eax
mov byte [esp + 0x43], al
xchg ebp, eax
lea edx, [0x640f20]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.00438ea0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0xfc]
mov edx, dword [esp + 0x108]
movzx ebp, byte [esp + 0x43]
jmp 0x53685a
lea eax, [0x640f20]
mov dword [esp], eax
mov ecx, dword [esp + 0xc8]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00438ea0
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x78]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x108]
jmp 0x5367fb
mov edi, dword [eax + 0x28]
mov esi, dword [eax + 0x24]
mov dword [eax + 0x2c], esi
mov dword [eax + 0x30], edi
mov esi, dword [esp + 0x78]
cmp esi, 5
jge 0x536acb
mov edi, esi
add eax, 0x34
mov ebp, dword [esp + 0xc8]
cmp ebp, eax
je 0x536a2c
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0044d890
mov eax, dword [esp + 0x98]
mov eax, dword [eax + 0x1c]
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xc8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xc0]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x108]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0xf4]
lea edx, [ecx + 0x2c]
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], 0xd
mov dword [esp + 0x30], 0xd
call eax
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x3c]
jmp 0x536957
mov edi, esi
mov esi, 5
jmp 0x536a0e
mov eax, dword [esp + 0xf4]
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0x60]
jmp 0x536792
xor ecx, ecx
xor eax, eax
xor edx, edx
jmp 0x5361ed
mov dword [esp + 0x118], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], eax
add esp, 0xf0
ret
mov eax, dword [esp + 0x6c]
cmp eax, 0x10
jge 0x5360d7
cmp eax, 8
jle 0x536b71
mov esi, 8
mov edi, dword [esp + 0xf4]
add edi, 0x24
cmp edi, edx
je 0x536116
mov dword [esp], edx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.0044d890
jmp 0x536116
mov esi, eax
jmp 0x536b4a
lea eax, [0x640f20]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.00438de0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0xfc]
cmp ecx, edx
jle 0x536bdf
mov ebx, edx
mov dword [esp + 0xe8], eax
mov ebp, dword [esp + 0xf8]
cmp eax, ebp
je 0x536bc2
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call fcn.0044d890
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x44]
mov ebx, edx
mov ebp, dword [esp + 0xe8]
jmp 0x53605f
mov ebx, edx
mov edx, ecx
jmp 0x536ba0
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
xor ebx, ebx
xor ebp, ebp
xor esi, esi
jmp 0x53613a
call fcn.00427150
ud2
call fcn.00427150
ud2
call fcn.00427150
ud2
call fcn.00427250
ud2
call fcn.00427250
ud2
call fcn.00427250
ud2
call fcn.00427350
ud2
call fcn.00427150
ud2
call fcn.00427150
ud2
call fcn.00427150
ud2
call fcn.00427150
ud2
call fcn.00427250
ud2
call fcn.00427250
ud2
call fcn.00427250
ud2
call fcn.00427250
ud2
lea eax, [0x640d20]
mov dword [esp], eax
lea eax, [0x6e12f8]
mov dword [esp + 4], eax
call fcn.00427f10
ud2
call fcn.00427250
ud2
call fcn.00427250
ud2
call fcn.00427250
ud2
call fcn.0044b940
jmp fcn.00535f10