Function at 0x5c1910
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x200]
cmp eax, dword [ecx + 8]
jbe 0x5c3504
sub esp, 0x280
lea eax, [0x978ac0]
mov dword [esp], eax
call fcn.0040ae10
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x284]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
mov dword [edi + 4], edx
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x5c34e3
mov dword [edi], ebx
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
mov ebx, dword [eax + 0xc]
mov dword [edi + 0x10], edx
mov dword [edi + 0x14], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x5c34ca
mov dword [edi + 0xc], ebx
mov ecx, dword [eax + 0xc8]
mov edx, dword [eax + 0xc4]
mov ebx, dword [eax + 0xc0]
mov dword [edi + 0x1c], edx
mov dword [edi + 0x20], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x5c34b1
mov dword [edi + 0x18], ebx
mov ecx, dword [eax + 0xbc]
mov edx, dword [eax + 0xb8]
mov ebx, dword [eax + 0xb4]
mov dword [edi + 0x28], edx
mov dword [edi + 0x2c], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x5c3498
mov dword [edi + 0x24], ebx
mov dword [esp + 0x78], edi
mov ecx, dword [eax + 0x68]
mov edx, dword [eax + 0x6c]
mov ebx, dword [eax + 0x70]
mov dword [edi + 0x34], edx
mov dword [edi + 0x38], ebx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c3483
mov dword [edi + 0x30], ecx
mov ecx, dword [eax + 0x174]
mov edx, dword [eax + 0x170]
mov ebx, dword [eax + 0x168]
mov ebp, dword [eax + 0x16c]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.00548cf0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x40], ecx
mov dword [ebx + 0x44], eax
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x5c3474
mov dword [ebx + 0x3c], edx
mov eax, dword [esp + 0x284]
lea esi, [eax + 0x20]
lea edi, [esp + 0x1b8]
call fcn.00457748
mov edi, esp
lea esi, [esp + 0x1b8]
call fcn.00457748
call fcn.005be7a0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 0x48], eax
mov eax, dword [esp + 0x284]
mov edx, dword [eax + 0xd4]
mov ebx, dword [eax + 0xd0]
mov ebp, dword [eax + 0xcc]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.005becf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 0x4c], eax
mov dword [esp], eax
mov eax, dword [esp + 0x284]
lea edx, [eax + 0xc0]
mov dword [esp + 4], edx
call fcn.005c0410
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x78]
mov dword [ebp + 0x50], eax
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x5c3465
mov dword [ebp + 0x54], edx
test ebx, ebx
jne 0x5c3445
mov ecx, dword [esp + 0x284]
mov edx, dword [ecx + 0x18]
inc edx
mov dword [ebp + 0x58], edx
mov edx, dword [0xdd7ec0]
mov eax, dword [ecx + 0x1c]
test edx, edx
jne 0x5c3438
mov dword [ebp + 0x5c], eax
lea eax, [0x900ac0]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [esp + 0xd4], eax
lea ecx, [0x900ac0]
mov dword [esp], ecx
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x284]
mov edx, dword [ecx + 0xb8]
mov ebx, dword [ecx + 0xbc]
mov ebp, dword [ecx + 0xb4]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
lea edx, [0x8fa200]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0054d370
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x5c3418
test edx, edx
jne 0x5c33d1
mov eax, dword [esp + 0x284]
mov ecx, dword [eax + 0x6c]
mov edx, dword [eax + 0x70]
mov ebx, dword [eax + 0x68]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
lea ecx, [0x8fa200]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0054d370
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x5c33b1
test edx, edx
jne 0x5c336a
mov eax, dword [esp + 0x78]
lea ecx, [eax + 0x60]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd4]
mov dword [esp + 4], ecx
call fcn.00574410
mov eax, dword [esp + 0x78]
lea ecx, [eax + 0xdc]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd0]
mov dword [esp + 4], ecx
call fcn.00574410
mov eax, dword [esp + 0x78]
lea edi, [eax + 0x158]
mov ecx, dword [0xdd7ec0]
mov edx, dword [esp + 0x284]
lea esi, [edx + 0x74]
lea ebx, [eax + 0x16c]
lea ebp, [edx + 0x88]
test ecx, ecx
jne 0x5c3312
call fcn.0045778e
mov edi, ebx
mov esi, ebp
call fcn.0045778e
mov ecx, dword [edx + 0x130]
mov edx, dword [edx + 0x12c]
test ecx, ecx
jle 0x5c1e4f
mov dword [esp + 0x70], ecx
lea ebx, [esp + 4]
mov dword [esp + 0xcc], ebx
xor ebp, ebp
jmp 0x5c1cc3
lea ebx, [edi + 0x1c]
mov edx, ebx
mov ebp, ecx
mov ecx, dword [esp + 0x70]
mov ebx, esi
mov dword [esp + 0xc8], edx
mov dword [esp + 0x6c], ebp
lea edi, [esp + 0xf4]
mov esi, edx
call fcn.0045777a
lea edi, [esp + 0xd8]
lea esi, [esp + 0xf4]
call fcn.0045777a
mov ecx, dword [eax + 0x18c]
mov esi, ebx
mov ebx, dword [eax + 0x184]
mov edi, edx
mov edx, dword [eax + 0x188]
lea ebp, [edx + 1]
cmp ebp, ecx
ja 0x5c32a6
lea ecx, [edx + 1]
mov dword [eax + 0x188], ecx
imul ecx, edx, 0x1c
add ecx, ebx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c3272
mov edx, edi
mov edi, ecx
mov ebx, esi
lea esi, [esp + 0xd8]
call fcn.0045777a
mov ecx, dword [esp + 0xdc]
mov ebp, dword [esp + 0xd8]
mov esi, ebx
mov ebx, dword [esp + 0xe0]
cmp ecx, 4
jne 0x5c2e37
cmp dword [ebp], 2
jne 0x5c2e37
cmp dword [ebp + 4], 5
jne 0x5c2e37
cmp dword [ebp + 8], 0x1d
jne 0x5c2e37
mov ecx, dword [ebp + 0xc]
cmp ecx, 0x13
jg 0x5c2503
cmp ecx, 0xf
jg 0x5c21d1
cmp ecx, 0xe
je 0x5c20a3
cmp ecx, 0xf
je 0x5c1f09
mov ecx, 1
movzx ebx, byte [esp + 0xe4]
test bl, bl
je 0x5c1f02
test cl, cl
je 0x5c1f02
mov ecx, dword [eax + 0x1a0]
mov dword [esp + 0x68], ecx
mov ebx, dword [eax + 0x19c]
lea ebp, [ecx + 1]
mov edi, edx
mov edx, dword [eax + 0x1a4]
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0xc4], ecx
cmp ebp, edx
ja 0x5c1e8b
mov edx, dword [esp + 0x68]
lea ebp, [edx + 1]
mov dword [eax + 0x1a0], ebp
lea edx, [edx + edx*2]
mov ebp, dword [esp + 0x60]
mov dword [ebx + edx*4 + 4], ebp
mov ebp, dword [esp + 0x64]
mov dword [ebx + edx*4 + 8], ebp
mov ebp, dword [0xdd7ec0]
lea ecx, [ebx + edx*4]
test ebp, ebp
jne 0x5c1e73
mov ecx, dword [esp + 0xc4]
mov dword [ebx + edx*4], ecx
mov ecx, dword [esp + 0x6c]
inc ecx
mov edx, dword [esp + 0x70]
cmp ecx, edx
jl 0x5c1cb6
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], 0
mov dword [esp + 0x290], 0
add esp, 0x280
ret
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, dword [esp + 0xc4]
call fcn.00456fe0
mov eax, ebx
mov edi, edx
jmp 0x5c1e3e
lea eax, [0x913e40]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x68]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.00440660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x1a4], edx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c1ef5
mov dword [ebx + 0x19c], eax
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0xc8]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0xc4]
jmp 0x5c1e0b
lea edi, [ebx + 0x19c]
call fcn.00456fe0
jmp 0x5c1ed3
mov edi, edx
jmp 0x5c1e3e
lea eax, [0x93be40]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x90f1c0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0054d370
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x5c2083
test edx, edx
jne 0x5c203c
mov edx, dword [esp + 0xc0]
xor eax, eax
xor ecx, ecx
jmp 0x5c1f93
inc eax
mov edx, esi
mov ecx, ebx
cmp eax, 9
jge 0x5c201d
mov ebx, dword [edx + 4]
mov ebp, dword [edx]
mov esi, edx
mov edx, dword [edx + 0xc]
test eax, eax
jge 0x5c1fcc
xor edx, edx
test edx, edx
je 0x5c1fc6
cmp eax, 0x20
sbb edx, edx
mov ebx, ecx
mov ecx, eax
mov ebp, 1
shl ebp, cl
and ebp, edx
or ebx, ebp
jmp 0x5c1f8e
mov ebx, ecx
mov ecx, eax
jmp 0x5c1f8e
cmp eax, edx
jge 0x5c1faa
mov dword [esp + 0x4c], eax
mov edx, eax
sar eax, 0x1f
shr eax, 0x1d
add eax, edx
sar eax, 3
mov edi, eax
shl eax, 3
sub edx, eax
cmp edi, ebx
jae 0x5c34fa
lea ebx, [edx - 7]
neg ebx
cmp ebx, 8
mov eax, ebx
sbb ebx, ebx
movzx ebp, byte [ebp + edi]
mov edx, ecx
mov ecx, eax
xchg ebp, eax
shr al, cl
xchg ebp, eax
and ebp, ebx
xchg ebp, eax
movzx ebx, al
xchg ebp, eax
and ebx, 1
mov eax, dword [esp + 0x4c]
mov ecx, edx
mov edx, ebx
jmp 0x5c1fac
mov eax, dword [esp + 0x78]
mov dword [eax + 0x180], ecx
mov edx, dword [esp + 0xc8]
mov esi, dword [esp + 0xcc]
xor ecx, ecx
jmp 0x5c1da8
lea eax, [0x909320]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x28
lea ecx, [0x99e565]
mov dword [eax], ecx
mov dword [esp + 0x288], 0
lea ecx, [0xa4d860]
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
lea eax, [0x8c74c0]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x8af680]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0054d370
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x2c]
test eax, eax
jne 0x5c21b1
test ecx, ecx
jne 0x5c216a
mov ecx, dword [esp + 0xbc]
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 0x1d0], ebx
mov dword [ecx + 0x1d4], edx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c215d
mov dword [ecx + 0x1cc], eax
mov eax, ecx
mov edx, dword [esp + 0xc8]
mov esi, dword [esp + 0xcc]
xor ecx, ecx
jmp 0x5c1da8
lea edi, [ecx + 0x1cc]
call fcn.00456fe0
jmp 0x5c2146
lea eax, [0x909320]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x26
lea ecx, [0x99d3fa]
mov dword [eax], ecx
mov dword [esp + 0x288], 0
lea ecx, [0xa4d860]
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], edx
add esp, 0x280
ret
cmp ecx, 0x11
je 0x5c2306
cmp ecx, 0x13
jne 0x5c1da3
lea eax, [0x917320]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x8b0ac0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0054d370
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
test edx, edx
jne 0x5c22e6
test ecx, ecx
jne 0x5c229f
mov eax, dword [esp + 0x78]
mov byte [eax + 0x1c0], 1
mov ebx, dword [esp + 0xb8]
movzx ebp, byte [ebx]
xchg ebp, ebx
mov byte [eax + 0x1c1], bl
xchg ebp, ebx
mov ebx, dword [ebx + 4]
mov dword [eax + 0x1c4], ebx
test ebx, ebx
sete bl
mov byte [eax + 0x1c8], bl
mov edx, dword [esp + 0xc8]
mov esi, dword [esp + 0xcc]
xor ecx, ecx
jmp 0x5c1da8
lea eax, [0x909320]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x30
lea ecx, [0x9a3032]
mov dword [eax], ecx
mov dword [esp + 0x288], 0
lea ecx, [0xa4d860]
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], edx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.005c1180
mov eax, dword [esp + 0x40]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x68], edx
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x64], ebx
mov ebp, dword [esp + 0x30]
mov dword [esp + 0xb4], ebp
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x60], esi
mov edi, dword [esp + 0x28]
mov dword [esp + 0x5c], edi
mov eax, dword [esp + 0x24]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0x20]
mov ebp, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x78]
mov dword [edi + 0x200], edx
mov dword [edi + 0x204], ebx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c24ed
mov dword [edi + 0x1fc], eax
mov dword [edi + 0x20c], ebp
mov dword [edi + 0x210], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x5c24d3
mov dword [edi + 0x208], esi
mov ecx, dword [esp + 0x5c]
mov dword [edi + 0x218], ecx
mov ecx, dword [esp + 0x60]
mov dword [edi + 0x21c], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x5c24b4
mov ecx, dword [esp + 0xb0]
mov dword [edi + 0x214], ecx
mov ecx, dword [esp + 0x64]
mov dword [edi + 0x224], ecx
mov edx, dword [esp + 0x68]
mov dword [edi + 0x228], edx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c2495
mov edx, dword [esp + 0xb4]
mov dword [edi + 0x220], edx
mov edx, dword [esp + 0x54]
test edx, edx
jne 0x5c2471
mov edx, dword [edi + 0x200]
test edx, edx
jne 0x5c246d
mov edx, dword [edi + 0x20c]
test edx, edx
jne 0x5c246d
mov edx, dword [edi + 0x218]
test edx, edx
jne 0x5c246d
test ecx, ecx
jne 0x5c246d
mov eax, 1
mov edx, dword [esp + 0xc8]
mov esi, dword [esp + 0xcc]
mov ecx, eax
mov eax, edi
jmp 0x5c1da8
xor eax, eax
jmp 0x5c2456
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], edx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x290], eax
add esp, 0x280
ret
lea edx, [edi + 0x220]
mov eax, edi
mov edi, edx
mov ebx, eax
mov eax, dword [esp + 0xb4]
call fcn.00456fe0
mov edi, ebx
jmp 0x5c2427
lea ecx, [edi + 0x214]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb0]
call fcn.00456fe0
mov edi, edx
jmp 0x5c23fc
lea ecx, [edi + 0x208]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, esi
call fcn.00456fe0
mov edi, edx
jmp 0x5c23cd
lea edx, [edi + 0x1fc]
mov ebx, edi
mov edi, edx
call fcn.00456fe0
mov edi, ebx
jmp 0x5c23ad
cmp ecx, 0x1f
jg 0x5c2842
cmp ecx, 0x1e
je 0x5c27e2
cmp ecx, 0x1f
jne 0x5c1da3
lea eax, [0x8c2f40]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x8aef40]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0054d370
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x5c27c2
test edx, edx
jne 0x5c277b
mov ecx, dword [esp + 0xac]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
test edx, edx
jle 0x5c25fd
mov dword [esp + 0x68], edx
xor eax, eax
jmp 0x5c25bc
mov ebx, dword [esp + 0xa8]
add ebx, 0x4c
mov eax, ecx
mov ecx, ebx
mov dword [esp + 0xa8], ecx
lea edi, [esp + 0x234]
mov esi, ecx
call fcn.00457702
lea edi, [esp + 0x1e8]
lea esi, [esp + 0x234]
call fcn.00457702
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x1ec]
test ebx, ebx
jne 0x5c2616
lea ecx, [eax + 1]
cmp ecx, edx
jl 0x5c25ae
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0xc8]
mov esi, dword [esp + 0xcc]
xor ecx, ecx
jmp 0x5c1da8
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], ebx
xor ebp, ebp
jmp 0x5c2632
mov ebp, dword [esp + 0xa4]
add ebp, 0x24
mov esi, ecx
mov ecx, ebp
mov ebp, esi
mov dword [esp + 0xa4], ecx
lea edi, [esp + 0x134]
mov esi, ecx
call fcn.00457766
lea edi, [esp + 0x110]
lea esi, [esp + 0x134]
call fcn.00457766
cmp dword [esp + 0x114], 6
je 0x5c266d
lea ecx, [ebp + 1]
cmp ecx, ebx
jl 0x5c2622
jmp 0x5c25f6
mov dword [esp + 0x5c], ebp
mov dword [esp], 0
mov eax, dword [esp + 0x124]
mov ecx, dword [esp + 0x120]
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00443a80
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x298]
mov edx, dword [eax + 0x294]
mov ebx, dword [eax + 0x290]
lea ebp, [edx + 1]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
cmp ebp, ecx
ja 0x5c2707
lea ecx, [edx + 1]
mov dword [eax + 0x294], ecx
lea ecx, [ebx + edx*8 + 4]
mov dword [ecx], esi
lea ecx, [ebx + edx*8]
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c26f6
mov dword [ecx], edi
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x5c]
jmp 0x5c2664
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.00456fe0
mov eax, ebx
jmp 0x5c26e1
mov dword [esp + 0x58], esi
mov dword [esp + 0xa0], edi
lea eax, [0x8eba40]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00440660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x298], edx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c276e
mov dword [ebx + 0x290], eax
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0xa0]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x78]
jmp 0x5c26c3
lea edi, [ebx + 0x290]
call fcn.00456fe0
jmp 0x5c2756
lea eax, [0x909320]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x9a5d19]
mov dword [eax], ecx
mov dword [esp + 0x288], 0
lea ecx, [0xa4d860]
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp], eax
mov edi, esi
lea esi, [esp + 0xd8]
call fcn.0045777a
call fcn.005c1330
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
movzx edx, byte [esp + 0x20]
test ecx, ecx
jne 0x5c2822
mov eax, dword [esp + 0x78]
mov esi, dword [esp + 0xcc]
mov ecx, edx
mov edx, dword [esp + 0xc8]
jmp 0x5c1da8
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
cmp ecx, 0x20
je 0x5c2c50
cmp ecx, 0x23
je 0x5c2b22
cmp ecx, 0x25
jne 0x5c1da3
lea eax, [0x8c30c0]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x8aefc0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0054d370
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x2c]
test eax, eax
jne 0x5c2b02
test ecx, ecx
jne 0x5c2abb
mov ecx, dword [esp + 0x9c]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
test edx, edx
jg 0x5c28fe
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0xc8]
mov esi, dword [esp + 0xcc]
xor ecx, ecx
jmp 0x5c1da8
mov dword [esp + 0x68], edx
xor eax, eax
jmp 0x5c2914
mov ebx, dword [esp + 0x98]
add ebx, 0xc
mov eax, ecx
mov ecx, ebx
mov dword [esp + 0x98], ecx
mov dword [esp + 0x64], eax
mov edx, dword [ecx + 8]
mov dword [esp + 0x48], edx
mov ebx, dword [ecx + 4]
mov dword [esp + 0x44], ebx
mov ebp, dword [ecx]
mov dword [esp + 0x74], ebp
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.005bf310
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp + 0x10]
test cl, cl
je 0x5c29f6
mov ecx, dword [esp + 0x78]
mov edx, dword [ecx + 0x1a8]
mov ebx, dword [ecx + 0x1b0]
mov ebp, dword [ecx + 0x1ac]
mov esi, ecx
lea ecx, [ebp + 1]
cmp ecx, ebx
ja 0x5c2995
lea ecx, [ebp + 1]
mov dword [esi + 0x1ac], ecx
mov dword [edx + ebp*4], eax
mov ecx, dword [esp + 0x64]
inc ecx
mov edx, dword [esp + 0x68]
cmp ecx, edx
jl 0x5c2906
jmp 0x5c28e5
mov dword [esp + 0x50], eax
lea eax, [0x8e6500]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00440660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x1b0], edx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c29e9
mov dword [ebx + 0x1a8], eax
mov esi, ebx
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x50]
jmp 0x5c2973
lea edi, [ebx + 0x1a8]
call fcn.00456fe0
jmp 0x5c29dd
mov ecx, dword [esp + 0x78]
mov edx, dword [ecx + 0x1bc]
mov ebx, dword [ecx + 0x1b8]
mov ebp, dword [ecx + 0x1b4]
mov eax, ecx
lea ecx, [ebx + 1]
cmp ecx, edx
ja 0x5c2a5d
lea ecx, [ebx + 1]
mov dword [eax + 0x1b8], ecx
lea ecx, [ebx + ebx*2]
mov edx, dword [esp + 0x44]
mov dword [ebp + ecx*4 + 4], edx
mov edx, dword [esp + 0x48]
mov dword [ebp + ecx*4 + 8], edx
mov edx, dword [0xdd7ec0]
lea edi, [ebp + ecx*4]
test edx, edx
jne 0x5c2a4e
mov edx, dword [esp + 0x74]
mov dword [ebp + ecx*4], edx
mov esi, eax
jmp 0x5c297f
mov ecx, eax
mov eax, dword [esp + 0x74]
call fcn.00456fe0
mov eax, ecx
jmp 0x5c2a47
lea eax, [0x913e40]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00440660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x1bc], edx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c2aae
mov dword [ebx + 0x1b4], eax
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x78]
jmp 0x5c2a15
lea edi, [ebx + 0x1b4]
call fcn.00456fe0
jmp 0x5c2aa1
lea eax, [0x909320]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x30
lea ecx, [0x9a3062]
mov dword [eax], ecx
mov dword [esp + 0x288], 0
lea ecx, [0xa4d860]
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], edx
add esp, 0x280
ret
lea eax, [0x909080]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0xf0]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
lea ecx, [0x8b0a40]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0054d370
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x5c2c30
test edx, edx
jne 0x5c2be9
mov ecx, dword [esp + 0x94]
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 0x1dc], ebx
mov dword [ecx + 0x1e0], edx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c2bdc
mov dword [ecx + 0x1d8], eax
mov eax, ecx
mov edx, dword [esp + 0xc8]
mov esi, dword [esp + 0xcc]
xor ecx, ecx
jmp 0x5c1da8
lea edi, [ecx + 0x1d8]
call fcn.00456fe0
jmp 0x5c2bc5
lea eax, [0x909320]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x30
lea ecx, [0x9a3092]
mov dword [eax], ecx
mov dword [esp + 0x288], 0
lea ecx, [0xa4d860]
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
lea eax, [0x8c2fc0]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x8aef80]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0054d370
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x5c2e17
test edx, edx
jne 0x5c2dd0
mov eax, dword [esp + 0x90]
mov ecx, dword [eax + 4]
mov dword [esp + 0x68], ecx
lea edx, [0x913e40]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.00440500
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x78]
mov dword [edx + 0x2a0], ecx
mov dword [edx + 0x2a4], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x5c2dc0
mov dword [edx + 0x29c], eax
mov ebx, dword [esp + 0x90]
mov ebp, dword [ebx + 4]
mov ebx, dword [ebx]
test ebp, ebp
jle 0x5c2d8f
xor eax, eax
jmp 0x5c2d3b
lea ebx, [edi + 0xc]
mov eax, dword [esp + 0x78]
mov ebp, ecx
mov eax, edx
mov edx, dword [esp + 0x78]
mov ecx, ebp
mov ebp, dword [ebx + 8]
mov esi, ebp
mov ebp, dword [ebx + 4]
mov edi, ebx
mov ebx, dword [ebx]
mov dword [esp + 0xc4], ebx
mov ebx, dword [edx + 0x2a0]
mov edx, dword [edx + 0x29c]
cmp eax, ebx
jae 0x5c34f3
lea ebx, [eax + eax*2]
mov dword [edx + ebx*4 + 4], ebp
mov dword [edx + ebx*4 + 8], esi
lea ebp, [edx + ebx*4]
mov esi, ebp
mov ebp, dword [0xdd7ec0]
test ebp, ebp
jne 0x5c2da8
mov ebp, dword [esp + 0xc4]
mov dword [edx + ebx*4], ebp
lea edx, [eax + 1]
cmp edx, ecx
jl 0x5c2d2c
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0xc8]
mov esi, dword [esp + 0xcc]
xor ecx, ecx
jmp 0x5c1da8
mov edx, edi
mov edi, esi
mov ebx, eax
mov eax, dword [esp + 0xc4]
call fcn.00456fe0
mov eax, ebx
mov edi, edx
jmp 0x5c2d88
lea edi, [edx + 0x29c]
call fcn.00456fe0
jmp 0x5c2d18
lea eax, [0x909320]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x34
lea ecx, [0x9a4d9b]
mov dword [eax], ecx
mov dword [esp + 0x288], 0
lea ecx, [0xa4d860]
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov eax, dword [0xdb9b00]
mov ecx, dword [0xdb9af8]
mov edx, dword [0xdb9afc]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
call fcn.00548e20
movzx eax, byte [esp + 0x18]
test al, al
jne 0x5c2e8c
mov eax, 1
mov edx, dword [esp + 0xc8]
mov esi, dword [esp + 0xcc]
mov ecx, eax
mov eax, dword [esp + 0x78]
jmp 0x5c1da8
lea eax, [0x8c2f00]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0xf0]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
lea ecx, [0x8aef00]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0054d370
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x5c3252
test edx, edx
jne 0x5c320b
mov ecx, dword [esp + 0x8c]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
test edx, edx
jle 0x5c2f63
mov dword [esp + 0x68], edx
xor eax, eax
jmp 0x5c2f2a
mov ebx, dword [esp + 0x88]
add ebx, 0x30
mov eax, ecx
mov ecx, ebx
mov dword [esp + 0x88], ecx
lea edi, [esp + 0x188]
mov esi, ecx
call fcn.00457748
lea edi, [esp + 0x158]
lea esi, [esp + 0x188]
call fcn.00457748
cmp dword [esp + 0x168], 6
je 0x5c2f6a
lea ecx, [eax + 1]
cmp ecx, edx
jl 0x5c2f1c
xor eax, eax
jmp 0x5c2e73
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x160]
mov ecx, dword [esp + 0x15c]
mov edx, dword [esp + 0x158]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [0xdb9ae8]
mov ecx, dword [0xdb9af0]
mov edx, dword [0xdb9aec]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.00548e20
movzx eax, byte [esp + 0x18]
test al, al
je 0x5c30c0
mov dword [esp], 0
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x174]
mov edx, dword [esp + 0x170]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00443a80
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x1ec]
mov edx, dword [eax + 0x1e8]
mov ebx, dword [eax + 0x1e4]
lea ebp, [edx + 1]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
cmp ebp, ecx
ja 0x5c304c
lea ecx, [edx + 1]
mov dword [eax + 0x1e8], ecx
lea ecx, [ebx + edx*8 + 4]
mov dword [ecx], esi
mov ecx, dword [0xdd7ec0]
lea edx, [ebx + edx*8]
test ecx, ecx
jne 0x5c303b
mov dword [edx], edi
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x68]
jmp 0x5c2f5c
mov ecx, edi
mov edi, edx
mov ebx, eax
mov eax, ecx
call fcn.00456fe0
mov eax, ebx
jmp 0x5c302e
mov dword [esp + 0x60], esi
mov dword [esp + 0xa0], edi
lea eax, [0x8eba40]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00440660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x1ec], edx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c30b3
mov dword [ebx + 0x1e4], eax
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0xa0]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x78]
jmp 0x5c3010
lea edi, [ebx + 0x1e4]
call fcn.00456fe0
jmp 0x5c309b
mov eax, dword [esp + 0x15c]
mov ecx, dword [esp + 0x158]
mov edx, dword [esp + 0x160]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov eax, dword [0xdb9adc]
mov ecx, dword [0xdb9ad8]
mov edx, dword [0xdb9ae0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00548e20
movzx eax, byte [esp + 0x18]
test al, al
jne 0x5c3115
mov eax, dword [esp + 0x78]
jmp 0x5c302e
mov dword [esp], 0
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x178]
mov edx, dword [esp + 0x170]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00443a80
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x1f4]
mov edx, dword [eax + 0x1f0]
mov ebx, dword [eax + 0x1f8]
lea ebp, [ecx + 1]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
cmp ebp, ebx
ja 0x5c319b
lea ebx, [ecx + 1]
mov dword [eax + 0x1f4], ebx
lea ebx, [edx + ecx*8 + 4]
mov dword [ebx], esi
mov ebx, dword [0xdd7ec0]
lea ecx, [edx + ecx*8]
test ebx, ebx
jne 0x5c3187
mov dword [ecx], edi
jmp 0x5c310c
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.00456fe0
mov eax, ebx
jmp 0x5c310c
mov dword [esp + 0x60], esi
mov dword [esp + 0xa0], edi
lea eax, [0x8eba40]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00440660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x1f8], edx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c31fe
mov dword [ebx + 0x1f0], eax
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0xa0]
mov edx, eax
mov eax, ebx
jmp 0x5c3167
lea edi, [ebx + 0x1f0]
call fcn.00456fe0
jmp 0x5c31ea
lea eax, [0x909320]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x35
lea ecx, [0x9a5366]
mov dword [eax], ecx
mov dword [esp + 0x288], 0
lea ecx, [0xa4d860]
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
lea eax, [0x92ace0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0xd8]
mov dword [esp + 8], eax
call fcn.00410ec0
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0xcc]
jmp 0x5c1d3e
lea eax, [0x92ace0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00440660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x18c], edx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x5c3305
mov dword [ebx + 0x184], eax
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0xc8]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x78]
jmp 0x5c1d10
lea edi, [ebx + 0x184]
call fcn.00456fe0
jmp 0x5c32ea
mov dword [esp + 0x84], ebp
mov dword [esp + 0x80], ebx
lea eax, [0x97c960]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.00410ec0
lea eax, [0x97c960]
mov dword [esp], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 8], eax
call fcn.00410ec0
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x284]
jmp 0x5c1c8f
lea eax, [0x909320]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x27
lea ecx, [0x99dc7f]
mov dword [eax], ecx
mov dword [esp + 0x288], 0
lea ecx, [0xa4d860]
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
lea eax, [0x909320]
mov dword [esp], eax
call fcn.0040ae10
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x27
lea ecx, [0x99dc7f]
mov dword [eax], ecx
mov dword [esp + 0x288], 0
lea ecx, [0xa4d860]
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], ecx
add esp, 0x280
ret
lea edi, [ebp + 0x5c]
call fcn.00456fe0
jmp 0x5c1b26
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ebx
mov dword [esp + 0x290], ecx
add esp, 0x280
ret
lea edi, [ebp + 0x54]
mov eax, edx
call fcn.00456fe0
jmp 0x5c1afc
lea edi, [ebx + 0x3c]
mov eax, edx
call fcn.00456fe0
jmp 0x5c1a53
lea edx, [edi + 0x30]
mov edi, edx
mov ebp, eax
mov eax, ecx
call fcn.00456fe0
mov eax, ebp
jmp 0x5c1a00
lea ecx, [edi + 0x24]
mov edx, edi
mov edi, ecx
mov ebp, eax
mov eax, ebx
call fcn.00456fe0
mov eax, ebp
mov edi, edx
jmp 0x5c19dc
lea ecx, [edi + 0x18]
mov edx, edi
mov edi, ecx
mov ebp, eax
mov eax, ebx
call fcn.00456fe0
mov eax, ebp
mov edi, edx
jmp 0x5c19b3
lea ecx, [edi + 0xc]
mov edx, edi
mov edi, ecx
mov ebp, eax
mov eax, ebx
call fcn.00456fe0
mov eax, ebp
mov edi, edx
jmp 0x5c198a
mov ecx, eax
mov eax, ebx
call fcn.00456fe0
mov eax, ecx
jmp 0x5c196a
mov ecx, ebx
call fcn.00457060
mov eax, edi
mov ecx, ebx
call fcn.00457060
nop
call fcn.004557a0
jmp fcn.005c1910