Function at 0x541f30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x95eda0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x74]
cmp eax, dword [ecx + 8]
jbe 0x542fd2
sub esp, 0xf4
nop
mov ebx, dword [esp + 0x104]
mov ebp, dword [esp + 0x108]
jmp 0x541f60
dec ebp
test ebp, ebp
jle 0x541f6c
mov esi, dword [ebx + ebp*4 - 4]
test esi, esi
je 0x541f5f
mov edx, dword [esp + 0x10c]
cmp edx, ebp
jb 0x542fca
nop
mov esi, dword [esp + 0x110]
mov edi, dword [esp + 0x114]
jmp 0x541f8d
dec edi
test edi, edi
jle 0x541f99
mov eax, dword [esi + edi*4 - 4]
test eax, eax
je 0x541f8c
mov eax, esi
mov esi, dword [esp + 0x118]
cmp esi, edi
jb 0x542fc1
test ebp, ebp
je 0x5421b6
cmp edi, 0x64
jl 0x542172
mov ecx, ebp
sub ebp, edi
test ebp, ebp
jl 0x54216b
mov esi, dword [esp + 0x128]
mov ebx, dword [esp + 0x11c]
cmp esi, ebx
jbe 0x542fb8
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x9c], edi
mov dword [esp + 0x90], ebp
mov esi, dword [esp + 0x124]
mov eax, dword [esi + ebx*4]
shr edi, 1
mov dword [esp + 0xa8], edi
test eax, eax
je 0x5420e8
mov edx, dword [eax + 8]
lea ecx, [edi + 1]
cmp edx, ecx
jl 0x542024
jb 0x542fb3
mov eax, dword [eax]
jmp 0x5420c1
test edi, edi
jne 0x542072
lea eax, [0x6a7ea0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0046c600
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x90]
mov esi, dword [esp + 0x124]
mov edi, dword [esp + 0xa8]
mov edx, 1
mov ecx, 1
jmp 0x5420c1
mov dword [esp + 0x8c], ecx
lea eax, [0x6a7ea0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [edi + 5]
mov dword [esp + 0x48], edx
mov dword [esp + 8], edx
call fcn.0046c600
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x90]
mov esi, dword [esp + 0x124]
mov edi, dword [esp + 0xa8]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esi + ebx*4]
mov dword [ebx + 4], ecx
mov dword [ebx + 8], edx
mov ecx, dword [0x95f020]
test ecx, ecx
je 0x5420e4
mov ecx, edi
call fcn.004717d0
mov dword [edi], eax
mov edx, dword [ebx]
mov dword [edi + 4], edx
mov edi, ecx
mov dword [ebx], eax
jmp 0x54214a
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.0053b210
mov eax, dword [0x95f020]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x542115
mov ebx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x124]
jmp 0x542131
call fcn.004717d0
mov dword [edi], ecx
mov ebx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x124]
mov esi, dword [ebp + ebx*4]
mov dword [edi + 4], esi
mov dword [ebp + ebx*4], ecx
mov ebp, dword [esp + 0x90]
mov esi, dword [esp + 0x124]
mov edi, dword [esp + 0xa8]
mov ebx, dword [esp + 0x120]
mov eax, dword [esp + 0x110]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x10c]
jmp 0x542278
add esp, 0xf4
ret
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x100]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], esi
call fcn.005418f0
add esp, 0xf4
ret
mov eax, dword [esp + 0xfc]
test eax, eax
je 0x5421d7
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
shl eax, 2
mov dword [esp + 4], eax
call fcn.00471f80
add esp, 0xf4
ret
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x100]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0xe8]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 0x18], ebx
call fcn.005399e0
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x10c]
mov ebp, dword [esp + 0xa8]
mov esi, dword [esp + 0x104]
mov edi, dword [esp + 0x124]
mov eax, ecx
mov ecx, edx
mov edx, ebx
mov ebx, dword [esp + 0x120]
mov esi, edi
mov edi, ebp
mov ebp, dword [esp + 0xc4]
cmp ebp, edi
jle 0x542695
sub ebp, edi
mov ebx, dword [esp + 0xc8]
cmp ebx, ebp
jb 0x542faa
mov dword [esp + 0xc4], ebp
sub edx, ebp
mov dword [esp + 0x58], edx
neg edx
shl ebp, 2
sar edx, 0x1f
and ebp, edx
mov edx, edi
mov edi, dword [esp + 0x11c]
mov esi, dword [esi + edi*4]
mov edi, dword [esi + 4]
mov dword [esp + 0x78], edi
mov edi, dword [esp + 0xc4]
sub ebx, edi
mov dword [esp + 0x54], ebx
mov edi, dword [esp + 0x104]
add ebp, edi
mov dword [esp + 0xd8], ebp
mov edi, dword [esi]
mov dword [esp + 0xe8], edi
mov esi, dword [esi + 8]
mov dword [esp + 0x80], esi
mov ebx, dword [esp + 0x78]
test ebx, ebx
je 0x542329
mov dword [esp], edi
shl ebx, 2
mov dword [esp + 4], ebx
call fcn.00471f80
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0xe8]
lea eax, [edx + ecx]
mov esi, dword [esp + 0x58]
cmp esi, eax
jb 0x542fa1
lea ebx, [edx - 1]
cmp ebx, eax
ja 0x542f98
mov dword [esp + 0x60], ebx
sub esi, edx
inc esi
mov dword [esp + 0xc0], esi
shl ebx, 2
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, ebx
add esi, ebp
mov ebp, dword [esp + 0x60]
cmp ecx, ebp
jb 0x542f91
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xf0], esi
mov dword [esp], edi
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov ebp, dword [esp + 0x80]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
lea esi, [ecx + 1]
mov dword [esp + 0x10], esi
mov esi, dword [esp + 0xc0]
mov dword [esp + 0x14], esi
sub ecx, edx
mov esi, dword [esp + 0x118]
sub esi, edx
inc esi
mov dword [esp + 0xb8], esi
inc ecx
mov dword [esp + 0xb4], ecx
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, ebx
mov ebx, dword [esp + 0x110]
add esi, ebx
mov dword [esp + 0xec], esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x11c]
inc ecx
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x120]
mov dword [esp + 0x28], ecx
mov esi, dword [esp + 0x124]
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x128]
mov dword [esp + 0x30], esi
mov esi, dword [esp + 0x12c]
mov dword [esp + 0x34], esi
call fcn.00541f30
nop
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0x78]
jmp 0x542d10
mov edx, dword [esp + 0x80]
cmp ecx, edx
ja 0x542f8c
mov dword [esp + 0x98], ecx
mov ebx, dword [esp + 0x120]
mov ebp, dword [ebx + 8]
mov esi, dword [esp + 0x9c]
lea edi, [esi + esi*2]
cmp ebp, edi
jl 0x542486
jb 0x542f83
mov ebx, dword [ebx]
mov dword [esp + 0x44], ebp
mov ebp, ebx
mov ebx, dword [esp + 0x120]
jmp 0x542509
cmp edi, 1
jne 0x5424b4
mov dword [esp + 0xb0], 0
mov edi, 1
lea ebp, [esp + 0xb0]
mov ebp, 1
mov dword [esp + 0x44], ebp
lea ebp, [esp + 0xb0]
jmp 0x542509
mov dword [esp + 0x88], edi
lea eax, [0x6a7ea0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea ecx, [esi + esi*2 + 4]
mov dword [esp + 0x44], ecx
mov dword [esp + 8], ecx
call fcn.0046c600
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x80]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x88]
mov ebp, ebx
mov ebx, dword [esp + 0x120]
test edi, edi
je 0x542547
mov dword [esp + 0x3c], edi
mov dword [esp + 0xd0], ebp
mov dword [esp], ebp
shl edi, 2
mov dword [esp + 4], edi
call fcn.00471f80
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0xd0]
mov edi, dword [esp + 0x3c]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x110]
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 0x60]
mov dword [esp + 0x1c], ebp
mov esi, dword [esp + 0x118]
mov dword [esp + 0x20], esi
call fcn.00539af0
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0xd8]
xor esi, esi
jmp 0x542da5
mov esi, ebx
jmp 0x542eee
mov edi, dword [esp + 0x58]
cmp ebx, edi
ja 0x542f27
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], edi
call fcn.00538a40
mov eax, dword [esp + 0x18]
test eax, eax
jg 0x542f0f
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x58]
cmp ecx, edx
ja 0x542f0a
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0xe0]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ecx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x20], ebx
call fcn.00543020
mov eax, dword [esp + 0x24]
test eax, eax
jbe 0x5421de
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x54]
cmp edx, ecx
ja 0x542f03
mov ebx, dword [esp + 0x58]
sub ebx, edx
sub ecx, edx
mov ebp, ebx
neg ebx
shl edx, 2
sar ebx, 0x1f
and ebx, edx
mov edx, dword [esp + 0xd8]
add edx, ebx
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], eax
call fcn.00543090
jmp 0x5421de
mov ebp, dword [esp + 0x11c]
mov esi, dword [esi + ebp*4]
mov ebx, dword [esi + 4]
mov dword [esp + 0x74], ebx
mov ebp, dword [esi + 8]
mov dword [esp + 0x7c], ebp
mov esi, dword [esi]
mov dword [esp + 0xe4], esi
test ebx, ebx
je 0x5426ed
mov dword [esp], esi
shl ebx, 2
mov dword [esp + 4], ebx
call fcn.00471f80
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x10c]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xa8]
lea eax, [edi - 1]
mov ebp, dword [esp + 0xc8]
cmp ebp, eax
jb 0x542d08
mov dword [esp + 0x5c], eax
sub edx, edi
sub ebp, edi
inc edx
mov dword [esp + 0x50], edx
shl eax, 2
neg edx
sar edx, 0x1f
and edx, eax
mov edi, dword [esp + 0x104]
add edx, edi
inc ebp
mov dword [esp + 0x4c], ebp
jmp 0x54272e
dec ebp
mov edi, dword [esp + 0x104]
test ebp, ebp
jle 0x542741
mov edi, dword [edx + ebp*4 - 4]
test edi, edi
je 0x542726
mov edi, dword [esp + 0x104]
mov edi, dword [esp + 0x50]
cmp ebp, edi
ja 0x542cff
mov edi, dword [esp + 0x5c]
cmp ecx, edi
jb 0x542cf8
mov dword [esp + 0xc4], eax
mov dword [esp + 0xd4], edx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov edi, dword [esp + 0x7c]
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x50]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x118]
mov edx, dword [esp + 0xa8]
sub ebp, edx
sub ecx, edx
inc ebp
mov dword [esp + 0xc0], ebp
inc ecx
mov dword [esp + 0xbc], ecx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, eax
mov eax, dword [esp + 0x110]
add ebp, eax
mov dword [esp + 0xf0], ebp
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x11c]
inc edx
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x120]
mov dword [esp + 0x28], edx
mov ecx, dword [esp + 0x124]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x12c]
mov dword [esp + 0x34], ecx
call fcn.00541f30
nop
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x74]
jmp 0x542822
dec ecx
test ecx, ecx
jle 0x54282e
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x542821
mov edx, dword [esp + 0x7c]
cmp ecx, edx
ja 0x542cf3
mov dword [esp + 0x94], ecx
mov ebx, dword [esp + 0x120]
mov ebp, dword [ebx + 8]
mov esi, dword [esp + 0x9c]
lea edi, [esi + esi*2]
cmp ebp, edi
jl 0x542863
jb 0x542cea
mov ebx, dword [ebx]
jmp 0x5428cc
cmp edi, 1
jne 0x542886
mov dword [esp + 0xac], 0
mov edi, 1
lea ebx, [esp + 0xac]
mov ebp, 1
jmp 0x5428cc
mov dword [esp + 0x84], edi
lea eax, [0x6a7ea0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esi + esi*2 + 4]
mov dword [esp + 0x40], eax
mov dword [esp + 8], eax
call fcn.0046c600
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x7c]
mov edi, dword [esp + 0x84]
mov ebp, dword [esp + 0x40]
test edi, edi
je 0x54290f
mov dword [esp + 0x38], edi
mov dword [esp + 0xcc], ebx
mov dword [esp + 0x40], ebp
mov dword [esp], ebx
shl edi, 2
mov dword [esp + 4], edi
call fcn.00471f80
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0x40]
mov edi, dword [esp + 0x38]
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x110]
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x1c], ebp
mov esi, dword [esp + 0x118]
mov dword [esp + 0x20], esi
call fcn.00539af0
mov eax, dword [esp + 0x24]
mov dword [esp + 0xdc], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x64], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x6c], edx
mov ebx, dword [esp + 0x104]
mov ebp, dword [esp + 0xc8]
xor esi, esi
jmp 0x54299d
mov edi, dword [esp + 0xa0]
lea esi, [edi + 1]
mov ebx, dword [esp + 0x104]
mov ebp, dword [esp + 0xc8]
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x6c]
cmp esi, 2
jge 0x542b18
mov edi, ebp
jmp 0x542cc7
mov edi, dword [esp + 0xc8]
mov edi, dword [esp + 0x10c]
cmp edi, ebp
jb 0x542ce1
mov dword [esp + 0xa0], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edi
call fcn.00538a40
mov eax, dword [esp + 0x18]
test eax, eax
jle 0x542976
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov ecx, dword [esp + 0x94]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
call fcn.00543090
mov edx, dword [esp + 0x6c]
mov ecx, dword [esp + 0x5c]
cmp edx, ecx
jb 0x542cdc
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x110]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ecx
mov ebp, dword [esp + 0x118]
mov dword [esp + 0x20], ebp
call fcn.00543020
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x5c]
cmp eax, ecx
jle 0x542acb
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0xa8]
sub edx, ebx
sub eax, ebx
inc edx
mov edi, edx
neg edx
sar edx, 0x1f
mov ebx, dword [esp + 0xc4]
and edx, ebx
mov ebx, dword [esp + 0xdc]
add edx, ebx
mov dword [esp], edx
inc eax
mov dword [esp + 4], eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ecx
call fcn.00543090
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x50]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0xf0]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0xbc]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0xc0]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 0
call fcn.005399e0
jmp 0x542976
mov esi, ebp
jmp 0x542b1d
dec ebp
test ebp, ebp
jle 0x542b29
mov edi, dword [ebx + ebp*4 - 4]
test edi, edi
je 0x542b1c
mov edi, dword [esp + 0x10c]
cmp edi, ebp
jb 0x542cb6
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edi
call fcn.00538a40
mov eax, dword [esp + 0x18]
test eax, eax
jg 0x542c9e
mov edx, dword [esp + 0x10c]
mov ecx, dword [esp + 0x64]
cmp edx, ecx
jb 0x542c99
mov eax, dword [esp + 0x104]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ecx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x20], ebx
call fcn.00543020
mov eax, dword [esp + 0x24]
test eax, eax
jbe 0x542c0c
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0x64]
cmp ecx, edx
jb 0x542c92
mov ebx, dword [esp + 0x10c]
sub ebx, edx
sub ecx, edx
mov ebp, ebx
neg ebx
shl edx, 2
sar ebx, 0x1f
and ebx, edx
mov edx, dword [esp + 0x104]
add edx, ebx
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], eax
call fcn.00543090
mov eax, dword [esp + 0x1c]
test eax, eax
ja 0x542c7a
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x94]
jmp 0x542c21
dec ecx
test ecx, ecx
jle 0x542c2d
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x542c20
mov edx, dword [esp + 0x7c]
cmp ecx, edx
ja 0x542c75
mov ebx, dword [esp + 0xf8]
mov dword [esp], ebx
mov ebx, dword [esp + 0xfc]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 0
call fcn.005399e0
add esp, 0xf4
ret
call fcn.00471880
lea eax, [0x6a7120]
mov dword [esp], eax
lea eax, [0x762a38]
mov dword [esp + 4], eax
call fcn.0046aeb0
mov eax, edx
call fcn.004718a0
call fcn.00471880
lea eax, [0x6a7120]
mov dword [esp], eax
lea eax, [0x762a38]
mov dword [esp + 4], eax
call fcn.0046aeb0
mov ecx, ebp
mov edx, edi
call fcn.00471880
dec ebp
mov edi, dword [esp + 0xc8]
test ebp, ebp
jle 0x5429b4
mov edi, dword [ebx + ebp*4 - 4]
test edi, edi
je 0x542cbf
jmp 0x5429ad
call fcn.00471880
mov ecx, ebp
mov edx, edi
call fcn.00471880
mov ecx, edi
mov edx, ebp
call fcn.00471880
call fcn.00471880
mov eax, edi
call fcn.004718a0
mov ecx, ebp
mov edx, edi
call fcn.00471880
mov ecx, ebp
call fcn.004718a0
dec ecx
test ecx, ecx
jle 0x54243e
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x542d0f
jmp 0x54243e
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa8]
sub edx, ecx
inc edx
mov dword [esp + 4], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 8], edx
mov ebp, dword [esp + 0xec]
mov dword [esp + 0xc], ebp
mov esi, dword [esp + 0xb4]
mov dword [esp + 0x10], esi
mov edi, dword [esp + 0xb8]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], 0
call fcn.005399e0
mov eax, dword [esp + 0xa4]
lea esi, [eax + 1]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xd8]
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0xd8]
cmp esi, 2
jge 0x5425b2
mov dword [esp + 0xa4], esi
mov edi, ebx
jmp 0x542f38
mov esi, dword [esp + 0xa4]
mov esi, dword [esp + 0x58]
cmp ebx, esi
ja 0x542f7a
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], esi
call fcn.00538a40
mov eax, dword [esp + 0x18]
test eax, eax
jle 0x542f4d
mov eax, dword [esp + 0xe8]
mov dword [esp], eax
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x80]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
call fcn.00543090
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x60]
cmp edx, ecx
jb 0x542f75
mov eax, dword [esp + 0xe0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x110]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ecx
mov ebp, dword [esp + 0x118]
mov dword [esp + 0x20], ebp
call fcn.00543020
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x60]
cmp eax, ecx
jle 0x542edf
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0xa8]
sub edx, ebx
sub eax, ebx
inc edx
mov edi, edx
neg edx
sar edx, 0x1f
mov ebp, dword [esp + 0xbc]
and edx, ebp
mov ebp, dword [esp + 0xe0]
add edx, ebp
mov dword [esp], edx
inc eax
mov dword [esp + 4], eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ecx
call fcn.00543090
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x54]
cmp edx, ecx
jae 0x542d25
jmp 0x542f6c
dec ebx
test ebx, ebx
jle 0x5425b9
mov edi, dword [ebp + ebx*4 - 4]
test edi, edi
je 0x542eed
jmp 0x5425b9
mov eax, edx
call fcn.004718a0
call fcn.00471880
lea eax, [0x6a7120]
mov dword [esp], eax
lea eax, [0x762a38]
mov dword [esp + 4], eax
call fcn.0046aeb0
mov ecx, ebx
mov edx, edi
call fcn.00471880
dec ebx
mov esi, dword [esp + 0xa4]
test ebx, ebx
jle 0x542dc3
mov esi, dword [ebp + ebx*4 - 4]
test esi, esi
je 0x542f30
jmp 0x542dbc
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0xd8]
jmp 0x5425b2
mov eax, ecx
mov ecx, edx
call fcn.004718a0
call fcn.00471880
mov ecx, ebx
mov edx, esi
call fcn.00471880
mov ecx, edi
mov edx, ebp
call fcn.00471880
call fcn.00471880
mov eax, ebp
call fcn.004718a0
mov ecx, eax
mov eax, ebx
call fcn.004718a0
mov ecx, eax
mov edx, esi
call fcn.00471880
mov eax, ebp
mov ecx, ebx
call fcn.004718a0
call fcn.00471880
mov eax, ebx
mov ecx, esi
call fcn.00471840
mov ecx, edi
mov edx, esi
call fcn.00471880
mov ecx, ebp
call fcn.00471880
nop
call fcn.004703c0
jmp fcn.00541f30