Function at 0x59cf70
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov edx, dword [esp + 4]
movzx eax, dx
cmp eax, 0xc13
jg 0x59dd81
je 0x59dd71
cmp eax, 0x51d
jg 0x59d643
je 0x59d635
cmp eax, 0x21e
jg 0x59d310
je 0x59d302
cmp eax, 0x205
jg 0x59d19d
je 0x59d18f
cmp eax, 0x10b
jg 0x59d0cf
je 0x59d0c1
cmp eax, 0x105
jg 0x59d064
je 0x59d056
cmp eax, 0x102
jg 0x59d02c
je 0x59d01e
sub eax, 2
je 0x59d013
sub eax, 2
je 0x59d005
sub eax, 0xfd
jne case.default.0x59eb6b
mov eax, dword [esp + 8]
push eax
call fcn.0058d860
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058d830
add esp, 4
ret
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x10]
mov eax, dword [esp + 8]
push eax
call fcn.0058db20
add esp, 4
ret
sub eax, 0x103
je 0x59d048
dec eax
jne case.default.0x59eb6b
mov ecx, dword [esp + 8]
push ecx
call fcn.0058db90
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058db50
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058dbd0
add esp, 4
ret
sub eax, 0x106
cmp eax, 4
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59ec88]
mov ecx, dword [esp + 8]
push ecx
call fcn.0058dd30
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058e020
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058e0e0
add esp, 4
ret
call fcn.004015a0
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x38]
mov eax, dword [esp + 8]
push eax
call fcn.00591d70
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00591dd0
add esp, 4
ret
sub eax, 0x10d
cmp eax, 0xf7
ja case.default.0x59eb6b
movzx eax, byte [eax + 0x59ecd0]
jmp dword [eax*4 + 0x59ec9c]
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x3c]
mov eax, dword [esp + 8]
push eax
call fcn.0058e160
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058e190
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058e120
add esp, 4
ret
mov ecx, dword [0x224a328]
mov eax, dword [ecx]
jmp dword [eax + 0x4c]
mov ecx, dword [esp + 8]
push ecx
call fcn.0058e1e0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058e240
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058e280
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058e330
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058e510
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00591e30
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00594cd0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058eb30
add esp, 4
ret
sub eax, 0x206
cmp eax, 0x17
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59edc8]
mov eax, dword [esp + 8]
push eax
call fcn.0058eca0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058ed20
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058eda0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058ee30
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058eea0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058eed0
add esp, 4
ret
mov ecx, dword [0x224a328]
mov eax, dword [ecx]
jmp dword [eax + 0x94]
mov ecx, dword [esp + 8]
push ecx
call fcn.0058ef30
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058ef60
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058efe0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058f030
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058f080
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00595630
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00595680
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00595740
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00595bf0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00595c40
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00595c70
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00595cc0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00595d20
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00595d70
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00595dc0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00596100
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00597a30
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00595cf0
add esp, 4
ret
cmp eax, 0x230
jg 0x59d3b4
je 0x59d3a6
sub eax, 0x220
cmp eax, 8
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59ee28]
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x10c]
mov eax, dword [esp + 8]
push eax
call fcn.0058fc50
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00596150
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005961e0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00596210
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00596260
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00596290
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00596950
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058e210
add esp, 4
ret
cmp eax, 0x401
jg 0x59d434
je 0x59d426
sub eax, 0x301
cmp eax, 6
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59ee4c]
mov edx, dword [esp + 8]
push edx
call fcn.0058e360
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058f0d0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058f150
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058f200
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058f260
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058f2d0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058f320
add esp, 4
ret
cmp eax, 0x451
jg 0x59d4a6
je 0x59d498
sub eax, 0x402
cmp eax, 4
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59ee68]
mov eax, dword [esp + 8]
push eax
call fcn.0058f3e0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058f410
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058f460
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00591e70
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00591fb0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058f490
add esp, 4
ret
sub eax, 0x501
cmp eax, 0x1b
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59ee7c]
mov eax, dword [esp + 8]
push eax
call fcn.0058f4f0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058f640
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058f6d0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058f760
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058f7c0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058f830
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058f980
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058fa30
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058fbc0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058fcd0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058fd30
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058fd80
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058fde0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058fe10
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058fea0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058ff10
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00590030
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00590120
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005901e0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00590280
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00590300
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00590370
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00590430
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00590520
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005905e0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00590680
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00591a30
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00591fe0
add esp, 4
ret
cmp eax, 0x551
jg 0x59d703
je 0x59d6f5
sub eax, 0x51e
cmp eax, 9
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59eeec]
mov ecx, dword [esp + 8]
push ecx
call fcn.0058fac0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058fb50
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058f880
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00590700
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00592030
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00595090
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005950f0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005957c0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005962e0
add esp, 4
ret
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x628]
mov eax, dword [esp + 8]
push eax
call fcn.00592090
add esp, 4
ret
cmp eax, 0xa09
jg 0x59da62
je 0x59da54
cmp eax, 0x801
jg 0x59d8c7
je 0x59d8b9
cmp eax, 0x609
jg 0x59d7fc
je 0x59d7ee
sub eax, 0x554
cmp eax, 0xb4
ja case.default.0x59eb6b
movzx ecx, byte [eax + 0x59ef44]
jmp dword [ecx*4 + 0x59ef14]
mov edx, dword [esp + 8]
push edx
call fcn.0058f5b0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058f610
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058ffd0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00590b50
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00590bd0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00590c00
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00590c70
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00590ca0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00590d30
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00590d90
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00590df0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00591a90
add esp, 4
ret
cmp eax, 0x701
jg 0x59d87c
je 0x59d86e
sub eax, 0x60b
cmp eax, 5
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59effc]
mov edx, dword [esp + 8]
push edx
call fcn.00590750
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005907a0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00590870
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00590970
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00590a30
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00590ad0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00590e80
add esp, 4
ret
sub eax, 0x702
je 0x59d8ab
dec eax
je 0x59d89d
sub eax, 0xe
jne case.default.0x59eb6b
mov eax, dword [esp + 8]
push eax
call fcn.00591030
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00590f90
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00590ef0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00591690
add esp, 4
ret
cmp eax, 0x901
jg 0x59d979
je 0x59d96b
sub eax, 0x802
cmp eax, 0xb
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f014]
mov ecx, dword [esp + 8]
push ecx
call fcn.005917b0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005918a0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00591170
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005911e0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00591330
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00591490
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005915f0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00596e80
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00596f00
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00591b50
add esp, 4
ret
cmp eax, 0xa01
jg 0x59d9eb
je 0x59d9dd
sub eax, 0x902
cmp eax, 5
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f044]
mov edx, dword [esp + 8]
push edx
call fcn.00591af0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00591bb0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00591c00
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00591ce0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00591d40
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00592c90
add esp, 4
ret
sub eax, 0xa03
cmp eax, 5
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f05c]
mov edx, dword [esp + 8]
push edx
call fcn.00592cc0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00592d10
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00592d40
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00596fd0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00592de0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00592e30
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00597040
add esp, 4
ret
cmp eax, 0xb18
jg 0x59dc0b
je 0x59dbfd
cmp eax, 0xb0c
jg 0x59db5c
je 0x59db4e
cmp eax, 0xb05
jg 0x59daf1
je 0x59dae3
sub eax, 0xa0a
cmp eax, 0xfa
ja case.default.0x59eb6b
movzx eax, byte [eax + 0x59f08c]
jmp dword [eax*4 + 0x59f074]
mov ecx, dword [esp + 8]
push ecx
call fcn.00592480
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00592620
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005926a0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00592d90
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005927e0
add esp, 4
ret
sub eax, 0xb06
cmp eax, 5
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f188]
mov eax, dword [esp + 8]
push eax
call fcn.00592810
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00592840
add esp, 4
ret
mov edx, dword [esp + 8]
push 0
push edx
call fcn.00592bd0
add esp, 8
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058d5c0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00596740
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005965f0
add esp, 4
ret
sub eax, 0xb0d
cmp eax, 0xa
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f1a0]
mov eax, dword [esp + 8]
push eax
call fcn.00592650
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00596380
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00596400
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.0058d6f0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00596430
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00596460
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00596490
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00596500
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00596530
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005965c0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058d710
add esp, 4
ret
sub eax, 0xb19
cmp eax, 0xf9
ja case.default.0x59eb6b
movzx eax, byte [eax + 0x59f224]
jmp dword [eax*4 + 0x59f1cc]
mov ecx, dword [esp + 8]
push 0
push ecx
call fcn.00592870
add esp, 8
ret
mov edx, dword [esp + 8]
push 0
push edx
call fcn.005928d0
add esp, 8
ret
mov eax, dword [esp + 8]
push 0
push eax
call fcn.00592930
add esp, 8
ret
mov ecx, dword [esp + 8]
push 0
push ecx
call fcn.005929a0
add esp, 8
ret
mov edx, dword [esp + 8]
push 0
push edx
call fcn.00592a00
add esp, 8
ret
mov eax, dword [esp + 8]
push 0
push eax
call fcn.00592a60
add esp, 8
ret
mov ecx, dword [esp + 8]
push 0
push ecx
call fcn.00592a90
add esp, 8
ret
mov edx, dword [esp + 8]
push 0
push edx
call fcn.00592b10
add esp, 8
ret
mov eax, dword [esp + 8]
push 0
push eax
call fcn.00592b80
add esp, 8
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0059cf10
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00592c30
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00596560
add esp, 4
ret
mov ecx, dword [esp + 8]
push 1
push ecx
call fcn.00592870
add esp, 8
ret
mov edx, dword [esp + 8]
push 1
push edx
call fcn.005928d0
add esp, 8
ret
mov eax, dword [esp + 8]
push 1
push eax
call fcn.00592930
add esp, 8
ret
mov ecx, dword [esp + 8]
push 1
push ecx
call fcn.005929a0
add esp, 8
ret
mov edx, dword [esp + 8]
push 1
push edx
call fcn.00592a00
add esp, 8
ret
mov eax, dword [esp + 8]
push 1
push eax
call fcn.00592a60
add esp, 8
ret
mov ecx, dword [esp + 8]
push 1
push ecx
call fcn.00592a90
add esp, 8
ret
mov edx, dword [esp + 8]
push 1
push edx
call fcn.00592b10
add esp, 8
ret
mov eax, dword [esp + 8]
push eax
call fcn.00596590
add esp, 4
ret
mov ecx, dword [esp + 8]
push 1
push ecx
call fcn.00592b80
add esp, 8
ret
cmp eax, 0x2404
jg 0x59e4ba
je 0x59e4ac
cmp eax, 0xe06
jg 0x59e0e2
je 0x59e0d4
cmp eax, 0xd19
jg 0x59df66
je 0x59df58
cmp eax, 0xd0c
jg 0x59de9b
je 0x59de8d
sub eax, 0xc14
cmp eax, 0xf7
ja case.default.0x59eb6b
movzx eax, byte [eax + 0x59f354]
jmp dword [eax*4 + 0x59f320]
mov ecx, dword [esp + 8]
push ecx
call fcn.005945c0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00594620
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005946b0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005946e0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00594710
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00594740
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00594790
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005947c0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00594830
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00594860
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005948b0
add esp, 4
ret
mov eax, dword [esp + 8]
push 1
push eax
call fcn.00592bd0
add esp, 8
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00594940
add esp, 4
ret
sub eax, 0xd0d
cmp eax, 0xb
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f44c]
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x3e0]
mov ecx, dword [0x224a328]
mov eax, dword [ecx]
jmp dword [eax + 0x3e4]
mov ecx, dword [esp + 8]
push ecx
call fcn.00594990
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005949f0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00594a30
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00594ac0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00594b20
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00594b80
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00594bd0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00594c00
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00594c60
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00594ca0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00594a60
add esp, 4
ret
sub eax, 0xd20
cmp eax, 0xe5
ja case.default.0x59eb6b
movzx eax, byte [eax + 0x59f4e0]
jmp dword [eax*4 + 0x59f47c]
mov ecx, dword [esp + 8]
push ecx
call fcn.00592f50
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00592ff0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00593020
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005930a0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005930d0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00597250
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00597380
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005974a0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005945c0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005975c0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00597640
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005976d0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005977d0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005976a0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00597720
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00597780
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00597830
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00597870
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005978c0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005978f0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00597940
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005979b0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00597a80
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00597a00
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00593140
add esp, 4
ret
cmp eax, 0x2207
jg 0x59e306
je 0x59e2f8
cmp eax, 0x110b
jg 0x59e20c
je 0x59e1fe
cmp eax, 0x1105
jg 0x59e1a3
je 0x59e195
cmp eax, 0x1102
jg 0x59e16b
je 0x59e15d
sub eax, 0xf01
je 0x59e14f
dec eax
je 0x59e141
sub eax, 0x1ff
jne case.default.0x59eb6b
mov edx, dword [esp + 8]
push edx
call fcn.005931b0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00592f20
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00592e80
add esp, 4
ret
jmp loc.02262380
sub eax, 0x1103
je 0x59e187
dec eax
jne case.default.0x59eb6b
mov eax, dword [esp + 8]
push eax
call fcn.00593360
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005932d0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005933f0
add esp, 4
ret
sub eax, 0x1106
cmp eax, 4
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f5c8]
mov eax, dword [esp + 8]
push eax
call fcn.00593470
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005934a0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00593510
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005935a0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00593640
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00593690
add esp, 4
ret
cmp eax, 0x2201
jg 0x59e29d
je 0x59e28f
cmp eax, 0x2102
jg 0x59e265
je 0x59e257
sub eax, 0x1111
je 0x59e249
dec eax
je 0x59e9a1
sub eax, 0xfef
jne case.default.0x59eb6b
mov eax, dword [esp + 8]
push eax
call fcn.00594d20
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00593700
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00594d80
add esp, 4
ret
sub eax, 0x2103
je 0x59e281
dec eax
jne case.default.0x59eb6b
mov eax, dword [esp + 8]
push eax
call fcn.00594e30
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00594dd0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00595140
add esp, 4
ret
sub eax, 0x2202
cmp eax, 4
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f5dc]
mov eax, dword [esp + 8]
push eax
call fcn.0058d6c0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00595220
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00595250
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005952b0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005952e0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00595350
add esp, 4
ret
cmp eax, 0x2301
jg 0x59e398
je 0x59e38a
sub eax, 0x2208
cmp eax, 6
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f5f0]
mov eax, dword [esp + 8]
push eax
call fcn.005953a0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00595440
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00595490
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005954c0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00595530
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00595560
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00595590
add esp, 4
ret
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x4a0]
cmp eax, 0x2401
jg 0x59e482
je 0x59e474
sub eax, 0x2302
cmp eax, 0xc
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f60c]
mov ecx, dword [0x224a328]
mov eax, dword [ecx]
jmp dword [eax + 0x4a4]
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x4a8]
mov ecx, dword [0x224a328]
mov eax, dword [ecx]
jmp dword [eax + 0x4ac]
mov ecx, dword [esp + 8]
push ecx
call fcn.00595840
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005958b0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005958e0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00595930
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00595990
add esp, 4
ret
mov ecx, dword [0x224a328]
mov eax, dword [ecx]
jmp dword [eax + 0x4c4]
mov ecx, dword [esp + 8]
push ecx
call fcn.005959e0
add esp, 4
ret
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x4cc]
mov eax, dword [esp + 8]
push eax
call fcn.00595a40
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00595ba0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00595e10
add esp, 4
ret
sub eax, 0x2402
je 0x59e49e
dec eax
jne case.default.0x59eb6b
mov eax, dword [esp + 8]
push eax
call fcn.00595eb0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00595e60
add esp, 4
ret
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x4f8]
cmp eax, 0x2501
jg 0x59e56c
je 0x59e55e
sub eax, 0x2405
cmp eax, 8
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f640]
mov eax, dword [esp + 8]
push eax
call fcn.00595f00
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00595f30
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00596f50
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00596fa0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00592d40
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00596fd0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00597040
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00592de0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00592e30
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00595f80
add esp, 4
ret
cmp eax, 0x2601
jg 0x59e5de
je 0x59e5d0
sub eax, 0x2502
cmp eax, 4
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f664]
mov ecx, dword [esp + 8]
push ecx
call fcn.00595fd0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00596020
add esp, 4
ret
mov ecx, dword [0x224a328]
mov eax, dword [ecx]
jmp dword [eax + 0x510]
mov ecx, dword [esp + 8]
push ecx
call fcn.00596080
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005960b0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005970e0
add esp, 4
ret
cmp eax, 0x2701
jg 0x59e670
je 0x59e662
sub eax, 0x2602
cmp eax, 7
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f678]
mov ecx, dword [esp + 8]
push ecx
call fcn.00596aa0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00596b30
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00596b90
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00596c30
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00596d10
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00597160
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00597220
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00597b10
add esp, 4
ret
cmp eax, 0xf10a
jg 0x59e9af
je 0x59e9a1
cmp eax, 0xa201
jg 0x59e83b
je 0x59e82d
cmp eax, 0x3107
jg 0x59e76f
je 0x59e761
cmp eax, 0x3102
jg 0x59e714
je 0x59e706
cmp eax, 0x2704
jg 0x59e6ed
je 0x59e6df
sub eax, 0x2702
je 0x59e6d1
dec eax
jne case.default.0x59eb6b
mov eax, dword [esp + 8]
push eax
call fcn.00597d40
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00597c40
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00597ae0
add esp, 4
ret
cmp eax, 0x3101
jne case.default.0x59eb6b
mov eax, dword [esp + 8]
push eax
call fcn.00594e90
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00594ec0
add esp, 4
ret
sub eax, 0x3103
cmp eax, 3
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f698]
mov edx, dword [esp + 8]
push edx
call fcn.00594f20
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00594fa0
add esp, 4
ret
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x438]
mov eax, dword [esp + 8]
push eax
call fcn.00594fd0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00595000
add esp, 4
ret
cmp eax, 0xa102
jg 0x59e7e0
je 0x59e7d2
cmp eax, 0x3110
jg 0x59e7b9
je 0x59e7ab
sub eax, 0x3108
je 0x59e79d
dec eax
jne case.default.0x59eb6b
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x448]
mov eax, dword [esp + 8]
push eax
call fcn.00595060
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058d690
add esp, 4
ret
cmp eax, 0xa101
jne case.default.0x59eb6b
mov edx, dword [esp + 8]
push edx
call fcn.00592120
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005921b0
add esp, 4
ret
sub eax, 0xa104
cmp eax, 4
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f6a8]
mov ecx, dword [esp + 8]
push ecx
call fcn.005922a0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005922d0
add esp, 4
ret
mov ecx, dword [0x224a328]
mov eax, dword [ecx]
jmp dword [eax + 0x238]
mov ecx, dword [esp + 8]
push ecx
call fcn.00592380
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00592220
add esp, 4
ret
cmp eax, 0xb106
jg 0x59e91c
je 0x59e90e
cmp eax, 0xb101
jg 0x59e8c1
je 0x59e8b3
cmp eax, 0xa302
jg 0x59e89a
je 0x59e88c
cmp eax, 0xa202
je 0x59e87e
cmp eax, 0xa301
jne case.default.0x59eb6b
mov eax, dword [esp + 8]
push eax
call fcn.00592420
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005923d0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058d790
add esp, 4
ret
cmp eax, 0xa303
jne case.default.0x59eb6b
mov eax, dword [esp + 8]
push eax
call fcn.0058d7e0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005969b0
add esp, 4
ret
sub eax, 0xb102
cmp eax, 3
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f6bc]
mov edx, dword [esp + 8]
push edx
call fcn.00596a40
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00596d70
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00596dc0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00596df0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00596e20
add esp, 4
ret
sub eax, 0xf101
cmp eax, 8
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f6cc]
mov ecx, dword [esp + 8]
push ecx
call fcn.00593790
add esp, 4
ret
jmp loc.02262370
mov eax, dword [esp + 8]
push eax
call fcn.005938b0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00593940
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005939d0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00593a50
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.0058d5f0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.0058d640
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00596310
add esp, 4
ret
cmp eax, 0xf904
jg 0x59eb4c
je 0x59eb3e
cmp eax, 0xf802
jg 0x59eab0
je 0x59eaa2
cmp eax, 0xf602
jg 0x59ea44
je 0x59ea36
cmp eax, 0xf501
jg 0x59ea1d
je 0x59ea0f
sub eax, 0xf201
je 0x59ea01
sub eax, 3
jne case.default.0x59eb6b
mov ecx, dword [esp + 8]
push ecx
call fcn.00593b80
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00593ab0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00593bb0
add esp, 4
ret
cmp eax, 0xf601
jne case.default.0x59eb6b
mov ecx, dword [esp + 8]
push ecx
call fcn.00594500
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00594530
add esp, 4
ret
cmp eax, 0xf709
jg 0x59ea89
je 0x59ea7b
cmp eax, 0xf603
je 0x59ea6d
cmp eax, 0xf701
jne case.default.0x59eb6b
mov eax, dword [esp + 8]
push eax
call fcn.00594480
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00594560
add esp, 4
ret
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x398]
cmp eax, 0xf70a
jne case.default.0x59eb6b
mov eax, dword [esp + 8]
push eax
call fcn.005944d0
add esp, 4
ret
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x374]
sub eax, 0xf803
cmp eax, 0xfe
ja case.default.0x59eb6b
movzx eax, byte [eax + 0x59f714]
jmp dword [eax*4 + 0x59f6f0]
mov ecx, dword [esp + 8]
push ecx
call fcn.00593e30
add esp, 4
ret
mov ecx, dword [0x224a328]
mov edx, dword [ecx]
jmp dword [edx + 0x378]
mov ecx, dword [0x224a328]
mov eax, dword [ecx]
jmp dword [eax + 0x37c]
mov ecx, dword [esp + 8]
push ecx
call fcn.00594390
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005943c0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.005943f0
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.00594420
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00594450
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00593fd0
add esp, 4
ret
cmp eax, 0xfa07
jg 0x59ebf0
je 0x59ebe2
sub eax, 0xf905
cmp eax, 7
ja case.default.0x59eb6b
jmp dword [eax*4 + 0x59f814]
mov ecx, dword [esp + 8]
push ecx
call fcn.00594050
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.005940d0
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00594150
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005941b0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00594210
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00594270
add esp, 4
ret
mov ecx, dword [esp + 8]
push ecx
call fcn.005942d0
add esp, 4
ret
mov edx, dword [esp + 8]
push edx
call fcn.00594330
add esp, 4
ret
mov eax, dword [esp + 8]
push eax
call fcn.00593be0
add esp, 4
ret
jmp loc.02261004