Function at 0x511e20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x3c]
cmp eax, dword [ecx + 8]
jbe 0x512d84
sub esp, 0xbc
mov eax, dword [esp + 0xc0]
test eax, eax
je 0x512d56
movzx ecx, byte [eax]
cmp cl, 0x10
ja 0x5122b2
cmp cl, 0xd
jne 0x512170
mov ecx, dword [eax + 8]
mov dword [esp + 0x48], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x8c], edx
mov ebx, eax
xor ebp, ebp
jmp 0x511e96
mov esi, dword [esp + 0x38]
lea ebp, [esi + 1]
mov edx, dword [esp + 0x8c]
mov ebx, dword [esp + 0xc0]
mov eax, ecx
mov ecx, dword [esp + 0x48]
cmp ebp, ecx
jge 0x512162
mov dword [esp + 0x38], ebp
mov dword [esp + 0x74], eax
mov eax, dword [edx + ebp*4]
mov dword [esp + 0x68], eax
mov dword [esp], eax
call fcn.00511e20
mov eax, dword [esp + 4]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0xc0]
cmp ecx, edx
jne 0x511ed8
mov ebx, dword [esp + 0x68]
cmp eax, ebx
jne 0x511fc5
cmp ecx, edx
je 0x511e7b
mov dword [esp + 0x88], ecx
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
lea edi, [ecx + 4]
mov dword [esp + 0x84], edi
lea edi, [ebp + 1]
cmp edi, esi
jg 0x511f37
lea esi, [ebp + 1]
mov dword [ecx + 8], esi
lea esi, [ebx + ebp*4]
mov edi, dword [0xa08230]
test edi, edi
jne 0x511f18
mov dword [ebx + ebp*4], eax
jmp 0x511e7b
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040f250
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0xc0]
jmp 0x511e7b
lea eax, [0x780800]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
call fcn.00439c80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x88]
mov dword [ebx + 0xc], edx
mov edx, dword [0xa08230]
test edx, edx
jne 0x511f93
mov dword [ebx + 4], eax
mov edx, dword [esp + 0xc0]
mov ebp, ecx
mov ebx, eax
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x88]
jmp 0x511efd
mov dword [esp + 0x80], eax
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x44]
mov ebx, dword [esp + 0x88]
jmp 0x511f78
lea eax, [0x78ab00]
mov dword [esp], eax
call fcn.0040e9e0
mov edi, dword [esp + 4]
mov dword [esp + 0x74], edi
mov eax, dword [0xa08230]
test eax, eax
jne 0x512140
mov esi, dword [esp + 0xc0]
call fcn.0044de3a
mov eax, dword [esp + 0x74]
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov ecx, dword [0xa08230]
lea edx, [eax + 0x14]
test ecx, ecx
jne 0x512127
mov dword [eax + 0x14], 0
mov ecx, dword [esp + 0xc0]
mov edx, dword [ecx + 0xc]
mov ebx, dword [ecx + 4]
mov ebp, dword [esp + 0x38]
cmp ebp, edx
ja 0x512d7d
lea esi, [eax + 0x10]
cmp ebp, 1
ja 0x5120cf
mov edi, 1
cmp ebp, edi
ja 0x512d7d
mov dword [esp + 0x40], edi
mov dword [esp + 0x7c], esi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edi
lea eax, [0x780800]
mov dword [esp], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], edx
call fcn.0040f5b0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x74]
mov dword [ecx + 8], eax
mov edx, dword [esp + 0x40]
mov dword [ecx + 0xc], edx
mov edx, dword [0xa08230]
lea ebx, [ecx + 4]
test edx, edx
jne 0x5120b5
mov edx, dword [esp + 0x7c]
mov dword [ecx + 4], edx
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0xc0]
jmp 0x511ed8
mov dword [esp], ebx
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x74]
jmp 0x5120a5
mov dword [esp + 0x40], edx
mov dword [esp + 0xb8], ebx
lea eax, [0x780800]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], ebp
call fcn.00439c80
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0x38]
jmp 0x512049
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.0040f250
mov eax, dword [esp + 0x74]
jmp 0x51201f
lea eax, [0x78ab00]
mov dword [esp], eax
mov dword [esp + 4], edi
mov eax, dword [esp + 0xc0]
mov dword [esp + 8], eax
call fcn.0040f360
jmp 0x511ff5
mov dword [esp + 0xc4], eax
add esp, 0xbc
ret
add ecx, 0xfffffff2
cmp cl, 2
ja 0x5122a4
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
test ecx, ecx
jbe 0x512d76
mov eax, dword [edx]
mov dword [esp], eax
call fcn.00511e20
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xc0]
movzx edx, byte [ecx]
movzx ebx, word [ecx + 2]
movzx ebp, byte [eax]
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x5121be
mov dword [esp + 0xc4], eax
add esp, 0xbc
ret
xchg ebp, eax
cmp al, dl
xchg ebp, eax
jne 0x51229d
mov ebp, ebx
and ebx, 0x20
movzx esi, word [eax + 2]
and esi, 0x20
cmp si, bx
je 0x5121b0
mov ebx, dword [ecx + 4]
mov esi, dword [ecx + 8]
test esi, esi
jbe 0x512d6f
mov ebx, dword [ebx]
cmp eax, ebx
jne 0x5121f1
mov eax, ecx
jmp 0x5121b0
mov dword [esp + 0x54], eax
mov word [esp + 0x2e], bp
mov byte [esp + 0x23], dl
lea eax, [0x78ab00]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0x88], eax
movzx ecx, byte [esp + 0x23]
mov byte [eax], cl
movzx ecx, word [esp + 0x2e]
mov word [eax + 2], cx
mov ecx, dword [0xa08230]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x512276
mov ecx, dword [esp + 0x54]
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0xa08230]
lea ebx, [eax + 4]
test ecx, ecx
jne 0x51225e
mov dword [eax + 4], edx
jmp 0x5121b0
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.0040f250
mov eax, dword [esp + 0x88]
jmp 0x5121b0
mov dword [esp + 0xb4], edx
mov dword [esp], edx
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0xb4]
jmp 0x51223b
mov ebp, ebx
jmp 0x5121d9
mov dword [esp + 0xc4], eax
add esp, 0xbc
ret
cmp cl, 0x11
jne 0x512d45
mov ecx, dword [eax + 0x28]
test ecx, ecx
jne 0x5122cd
mov ecx, dword [eax + 0x2c]
test ecx, ecx
je 0x512d22
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
test ecx, ecx
jbe 0x512d68
mov eax, dword [edx]
mov dword [esp], eax
call fcn.00511e20
mov eax, dword [esp + 4]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0xc0]
mov edx, dword [ecx + 0x2c]
cmp edx, 0xffffffff
jne 0x51278d
mov edx, dword [ecx + 0x28]
test edx, edx
je 0x5126cb
cmp edx, 1
je 0x512609
lea eax, [0x78ab00]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0x78], eax
mov byte [eax], 0x12
mov dword [eax + 8], 0
mov dword [eax + 0xc], 1
mov ecx, dword [0xa08230]
lea edx, [eax + 4]
mov dword [esp + 0xb0], edx
lea ebx, [eax + 0x10]
test ecx, ecx
jne 0x5125ed
mov dword [eax + 4], ebx
xor ecx, ecx
jmp 0x512365
inc ecx
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0xc0]
mov ebp, dword [ebx + 0x28]
dec ebp
cmp ecx, ebp
jge 0x512452
mov dword [esp + 0x30], ecx
mov ebp, dword [eax + 0xc]
mov esi, dword [eax + 8]
mov edi, dword [eax + 4]
lea edx, [esi + 1]
cmp edx, ebp
jg 0x5123cd
lea edx, [esi + 1]
mov dword [eax + 8], edx
lea edx, [edi + esi*4]
mov ebp, dword [0xa08230]
test ebp, ebp
jne 0x5123a8
mov edx, dword [esp + 0x50]
mov dword [edi + esi*4], edx
jmp 0x51235d
mov dword [esp], edx
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0xc0]
jmp 0x51235d
lea eax, [0x780800]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00439c80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0xc], edx
mov edx, dword [0xa08230]
test edx, edx
jne 0x512423
mov dword [ebx + 4], eax
mov ebx, dword [esp + 0xc0]
mov esi, ecx
mov edi, eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x30]
jmp 0x51238c
mov dword [esp + 0xac], eax
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x78]
jmp 0x51240b
movzx ecx, word [ebx + 2]
mov ebx, dword [esp + 0x50]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x512530
mov ecx, dword [eax + 0xc]
mov ebp, dword [eax + 8]
mov esi, dword [eax + 4]
lea edi, [ebp + 1]
cmp edi, ecx
jg 0x5124ae
lea ecx, [ebp + 1]
mov dword [eax + 8], ecx
mov ecx, dword [0xa08230]
lea edx, [esi + ebp*4]
test ecx, ecx
jne 0x51249c
mov dword [esi + ebp*4], ebx
mov dword [esp + 0xc4], eax
add esp, 0xbc
ret
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.0040f250
mov eax, dword [esp + 0x78]
jmp 0x51248e
mov dword [esp + 0x60], ebx
lea eax, [0x780800]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edi
call fcn.00439c80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0xc], edx
mov edx, dword [0xa08230]
test edx, edx
jne 0x512501
mov dword [ebx + 4], eax
mov ebx, dword [esp + 0x60]
mov ebp, ecx
mov esi, eax
mov eax, dword [esp + 0x78]
jmp 0x512478
mov dword [esp + 0xa8], eax
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x44]
mov ebx, dword [esp + 0x78]
jmp 0x5124f0
mov word [esp + 0x2a], cx
xchg ebp, eax
cmp al, 0xf
xchg ebp, eax
jne 0x51254f
and ecx, 0x20
movzx esi, word [ebx + 2]
and esi, 0x20
cmp si, cx
je 0x512468
lea eax, [0x78ab00]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0x60], eax
mov byte [eax], 0xf
movzx ecx, word [esp + 0x2a]
mov word [eax + 2], cx
mov ecx, dword [0xa08230]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x5125c9
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0xa08230]
lea ebx, [eax + 4]
test ecx, ecx
jne 0x5125b7
mov dword [eax + 4], edx
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0x60]
jmp 0x512468
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.0040f250
mov eax, dword [esp + 0x60]
jmp 0x5125a3
mov dword [esp + 0xb4], edx
mov dword [esp], edx
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0xb4]
jmp 0x512585
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.0040f250
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0xb0]
jmp 0x512359
movzx ecx, word [ecx + 2]
movzx edx, byte [eax]
cmp dl, 2
jne 0x512623
mov dword [esp + 0xc4], eax
add esp, 0xbc
ret
mov word [esp + 0x28], cx
cmp dl, 0xf
jne 0x51263c
and ecx, 0x20
movzx ebx, word [eax + 2]
and ebx, 0x20
cmp bx, cx
je 0x512615
lea eax, [0x78ab00]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0x5c], eax
mov byte [eax], 0xf
movzx ecx, word [esp + 0x28]
mov word [eax + 2], cx
mov ecx, dword [0xa08230]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x5126a7
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0xa08230]
lea ebx, [eax + 4]
test ecx, ecx
jne 0x512692
mov dword [eax + 4], edx
jmp 0x512615
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.0040f250
mov eax, dword [esp + 0x5c]
jmp 0x512615
mov dword [esp + 0xb4], edx
mov dword [esp], edx
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0xb4]
jmp 0x512672
movzx ecx, word [ecx + 2]
movzx edx, byte [eax]
cmp dl, 2
jne 0x5126e5
mov dword [esp + 0xc4], eax
add esp, 0xbc
ret
mov word [esp + 0x24], cx
cmp dl, 0xe
jne 0x5126fe
and ecx, 0x20
movzx ebx, word [eax + 2]
and ebx, 0x20
cmp bx, cx
je 0x5126d7
lea eax, [0x78ab00]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0x58], eax
mov byte [eax], 0xe
movzx ecx, word [esp + 0x24]
mov word [eax + 2], cx
mov ecx, dword [0xa08230]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x512769
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0xa08230]
lea ebx, [eax + 4]
test ecx, ecx
jne 0x512754
mov dword [eax + 4], edx
jmp 0x5126d7
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.0040f250
mov eax, dword [esp + 0x58]
jmp 0x5126d7
mov dword [esp + 0xb4], edx
mov dword [esp], edx
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0xb4]
jmp 0x512734
mov ebx, dword [ecx + 0x28]
cmp ebx, 1
jne 0x51279e
cmp edx, 1
je 0x512d14
test ebx, ebx
jg 0x512bac
xor edx, edx
mov ebx, dword [ecx + 0x2c]
mov ebp, dword [ecx + 0x28]
cmp ebx, ebp
jle 0x512a05
mov dword [esp + 0x6c], edx
movzx ebx, word [ecx + 2]
movzx ebp, byte [eax]
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x512adb
mov ebx, eax
mov ebp, dword [ecx + 0x28]
inc ebp
jmp 0x5127e3
mov esi, dword [esp + 0x34]
inc esi
mov ecx, eax
mov edx, dword [esp + 0x6c]
mov eax, ebp
mov ebp, esi
mov dword [esp + 0x64], eax
mov esi, dword [ecx + 0x2c]
cmp ebp, esi
jge 0x5129d4
mov dword [esp + 0x34], ebp
lea eax, [0x78ab00]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0x4c], eax
mov byte [eax], 0x12
lea ecx, [0x780800]
mov dword [esp], ecx
lea edx, [eax + 0x10]
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 2
call fcn.00439c80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [0xa08230]
lea ebp, [eax + 4]
test ebx, ebx
jne 0x51297f
mov ebx, dword [esp + 0x50]
mov dword [eax], ebx
mov ebp, dword [esp + 0x64]
mov dword [eax + 4], ebp
add ecx, 2
mov ebp, dword [esp + 0x4c]
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], edx
mov ecx, dword [0xa08230]
lea edx, [ebp + 4]
test ecx, ecx
jne 0x512966
mov dword [ebp + 4], eax
mov eax, dword [esp + 0xc0]
movzx ecx, word [eax + 2]
movzx edx, byte [ebp]
cmp dl, 2
je 0x5127d4
mov word [esp + 0x26], cx
cmp dl, 0x10
jne 0x5128bc
and ecx, 0x20
movzx esi, word [ebp + 2]
and esi, 0x20
cmp si, cx
je 0x5127d4
lea eax, [0x78ab00]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0x88], eax
mov byte [eax], 0x10
movzx ecx, word [esp + 0x26]
mov word [eax + 2], cx
mov ecx, dword [0xa08230]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x51293f
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0xa08230]
lea ebx, [eax + 4]
test ecx, ecx
jne 0x51292a
mov dword [eax + 4], edx
mov eax, dword [esp + 0xc0]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x88]
jmp 0x5127d4
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.0040f250
mov eax, dword [esp + 0x88]
jmp 0x512913
mov dword [esp + 0xb4], edx
mov dword [esp], edx
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0xb4]
jmp 0x5128f5
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040f250
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x4c]
jmp 0x512887
mov dword [esp + 0xa4], eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x44], edx
mov dword [esp + 0xa0], ebp
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
call fcn.0040f250
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x50]
jmp 0x512866
test edx, edx
je 0x512acd
mov ecx, dword [edx + 8]
mov ebx, dword [edx + 4]
mov ebp, dword [edx + 0xc]
lea esi, [edx + 4]
lea edi, [ecx + 1]
cmp edi, ebp
jg 0x512a4c
lea ebp, [ecx + 1]
mov dword [edx + 8], ebp
mov ebp, dword [0xa08230]
lea esi, [ebx + ecx*4]
test ebp, ebp
jne 0x512a3a
mov dword [ebx + ecx*4], eax
test edx, edx
je 0x512a17
mov dword [esp + 0xc4], edx
add esp, 0xbc
ret
lea eax, [0x78ab00]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov byte [eax], 1
mov dword [esp + 0xc4], eax
add esp, 0xbc
ret
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040f250
mov edx, dword [esp + 0x6c]
jmp 0x512a05
mov dword [esp + 0x9c], esi
lea eax, [0x780800]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edi
call fcn.00439c80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0xc], edx
mov edx, dword [0xa08230]
test edx, edx
jne 0x512a9e
mov dword [ebx + 4], eax
mov edx, ebx
mov ebx, eax
mov eax, dword [esp + 0x64]
jmp 0x5129ef
mov dword [esp + 0x98], eax
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x40]
mov ebx, dword [esp + 0x6c]
jmp 0x512a91
mov dword [esp + 0xc4], eax
add esp, 0xbc
ret
mov word [esp + 0x2c], bx
xchg ebp, eax
cmp al, 0x10
xchg ebp, eax
jne 0x512afd
and ebx, 0x20
movzx esi, word [eax + 2]
and esi, 0x20
cmp si, bx
jne 0x512afd
mov ebx, eax
jmp 0x5127ce
lea eax, [0x78ab00]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0x88], eax
mov byte [eax], 0x10
movzx ecx, word [esp + 0x2c]
mov word [eax + 2], cx
mov ecx, dword [0xa08230]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x512b81
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ebx, dword [0xa08230]
lea ebp, [eax + 4]
test ebx, ebx
jne 0x512b68
mov dword [eax + 4], edx
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x50]
jmp 0x5127ce
mov dword [esp], ebp
mov dword [esp + 4], edx
call fcn.0040f250
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x50]
jmp 0x512b54
mov dword [esp + 0xb4], edx
mov dword [esp], edx
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0xb4]
jmp 0x512b36
lea eax, [0x78ab00]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0x6c], eax
mov byte [eax], 0x12
mov dword [eax + 8], 0
mov dword [eax + 0xc], 1
mov ecx, dword [0xa08230]
lea edx, [eax + 4]
mov dword [esp + 0x94], edx
lea ebx, [eax + 0x10]
test ecx, ecx
jne 0x512cf8
mov dword [eax + 4], ebx
xor ecx, ecx
jmp 0x512bfd
inc ecx
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0xc0]
mov ebp, dword [ebx + 0x28]
cmp ecx, ebp
jge 0x512ce9
mov dword [esp + 0x3c], ecx
mov ebp, dword [eax + 0xc]
mov esi, dword [eax + 8]
mov edi, dword [eax + 4]
lea edx, [esi + 1]
cmp edx, ebp
jg 0x512c64
lea edx, [esi + 1]
mov dword [eax + 8], edx
mov edx, dword [0xa08230]
lea ebp, [edi + esi*4]
test edx, edx
jne 0x512c3f
mov edx, dword [esp + 0x50]
mov dword [edi + esi*4], edx
jmp 0x512bf5
mov dword [esp], ebp
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0xc0]
jmp 0x512bf5
lea eax, [0x780800]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00439c80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0xc], edx
mov edx, dword [0xa08230]
test edx, edx
jne 0x512cba
mov dword [ebx + 4], eax
mov ebx, dword [esp + 0xc0]
mov esi, ecx
mov edi, eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x3c]
jmp 0x512c23
mov dword [esp + 0x90], eax
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x6c]
jmp 0x512ca2
mov eax, dword [esp + 0x50]
mov ecx, ebx
mov edx, dword [esp + 0x6c]
jmp 0x5127a8
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.0040f250
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x94]
jmp 0x512bf1
mov dword [esp + 0xc4], eax
add esp, 0xbc
ret
lea eax, [0x78ab00]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov byte [eax], 2
mov dword [esp + 0xc4], eax
add esp, 0xbc
ret
add ecx, 0xffffffee
cmp cl, 1
jbe 0x511e64
jmp 0x5122a4
mov dword [esp + 0xc4], 0
add esp, 0xbc
ret
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.004269c0
ud2
call fcn.0044be50
jmp fcn.00511e20