Function at 0x5df5e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x428]
cmp eax, dword [ecx + 8]
jbe 0x5e1d9a
sub esp, 0x4a8
mov eax, dword [esp + 0x4b8]
mov dword [esp], eax
mov ecx, dword [esp + 0x4bc]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x4c0]
mov dword [esp + 8], edx
call fcn.004bae60
mov eax, dword [esp + 0xc]
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x14c], ecx
mov edx, dword [eax + 0x4c]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
cmp eax, 0x18
je 0x5df770
cmp eax, 0x14
je 0x5df770
mov eax, dword [esp + 0xac]
mov eax, dword [eax + 0x4c]
mov ecx, dword [esp + 0x14c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0xec], eax
mov dword [esp + 0x1bc], 0
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
mov ecx, dword [esp + 0x4b0]
mov dword [esp], ecx
mov ecx, dword [esp + 0x4b4]
mov dword [esp + 4], ecx
call fcn.00408e00
mov eax, dword [esp + 8]
lea ecx, [0x606f80]
mov dword [esp + 0x1bc], ecx
mov dword [esp + 0x1c0], eax
mov eax, dword [esp + 0xec]
mov dword [esp], eax
call fcn.00408cf0
mov eax, dword [esp + 4]
lea ecx, [0x6091e0]
mov dword [esp + 0x1c4], ecx
mov dword [esp + 0x1c8], eax
lea eax, [0x63e2d7]
mov dword [esp], eax
mov dword [esp + 4], 0x30
lea eax, [esp + 0x1bc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0250
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x4d0], eax
mov dword [esp + 0x4d4], ecx
add esp, 0x4a8
ret
lea edi, [esp + 0x204]
xor eax, eax
call fcn.0045eb79
lea edi, [esp + 0x43c]
call fcn.0045eb65
lea ecx, [esp + 0x43c]
mov dword [esp + 0x210], ecx
call fcn.0044bbb0
mov ecx, dword [esp]
mov dword [esp + 0x20c], ecx
lea edi, [esp + 0x1e8]
xor eax, eax
call fcn.0045eb79
lea edi, [esp + 0x3f0]
call fcn.0045eb6d
lea ecx, [esp + 0x3f0]
mov dword [esp + 0x1f4], ecx
call fcn.0044bbb0
mov ecx, dword [esp]
mov dword [esp + 0x1f0], ecx
mov ecx, dword [esp + 0x4b8]
mov dword [esp], ecx
mov edx, dword [esp + 0x4bc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x4c0]
mov dword [esp + 8], ebx
call fcn.004b9540
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test ecx, ecx
je 0x5df81d
mov dword [esp + 0xe8], ecx
xor eax, eax
jmp 0x5e1c9c
lea edi, [esp + 0x1cc]
xor eax, eax
call fcn.0045eb79
lea edi, [esp + 0x3a4]
call fcn.0045eb6d
lea ecx, [esp + 0x3a4]
mov dword [esp + 0x1d8], ecx
call fcn.0044bbb0
mov ecx, dword [esp]
mov dword [esp + 0x1d4], ecx
lea ecx, [0x606f80]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.004475c0
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x194], ecx
lea edi, [esp + 0x2e8]
xor eax, eax
call fcn.0045eb71
mov ecx, dword [esp + 0x4cc]
mov dword [esp + 0x2f0], ecx
mov ecx, dword [esp + 0x4c4]
mov dword [esp + 0x2e8], ecx
mov ecx, dword [esp + 0x4c8]
mov dword [esp + 0x2ec], ecx
lea ecx, [esp + 0x2e8]
mov edx, 1
mov ebx, 5
xor ebp, ebp
lea esi, [esp + 0x3c]
xor edi, edi
xor eax, eax
mov dword [esp + 0x11c], eax
xor eax, eax
mov dword [esp + 0xa8], eax
xor eax, eax
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x194]
mov dword [esp + 0x148], eax
xor eax, eax
jmp 0x5df921
xor eax, eax
mov ecx, dword [esp + 0x114]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x16c]
mov edi, dword [esp + 0x98]
mov dword [esp + 0x94], ebp
test edx, edx
je 0x5df9cd
mov dword [esp + 0x70], ebx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x114], ecx
mov dword [esp + 0x98], edi
mov dword [esp + 0x140], esi
mov eax, dword [ecx + 4]
mov dword [esp + 0x194], eax
mov edx, dword [ecx + 8]
mov dword [esp + 0xe4], edx
mov ebx, dword [ecx]
mov dword [esp + 0x190], ebx
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004bae60
mov eax, dword [esp + 0x70]
dec eax
mov ecx, eax
neg eax
sar eax, 0x1f
and eax, 0xc
mov edx, dword [esp + 0x114]
add eax, edx
mov edx, dword [esp + 0x6c]
dec edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x74], ebx
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x118], ebp
xor esi, esi
mov edi, dword [esp + 0x98]
mov edi, dword [esp + 0x140]
mov dword [esp + 0x16c], edi
mov edi, dword [esp + 0x98]
jmp 0x5e1473
test ebp, ebp
je 0x5df9ed
xor ecx, ecx
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0xa8]
mov edi, dword [esp + 0x148]
jmp 0x5e0c27
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x148]
mov ebp, dword [esp + 0x11c]
test ebp, ebp
je 0x5dfa73
mov esi, dword [esp + 0x1e8]
test esi, esi
jle 0x5dfa73
mov dword [esp + 0xe0], edx
mov dword [esp + 0xdc], ecx
mov dword [esp + 0x18c], ebx
call fcn.0040bf10
mov eax, dword [esp]
mov dword [esp + 0x120], eax
lea edi, [esp + 0x220]
xor eax, eax
call fcn.0045eb74
lea ecx, [0x607cc0]
mov dword [esp], ecx
lea edx, [esp + 0x1e8]
mov dword [esp + 4], edx
lea edx, [esp + 0x220]
mov dword [esp + 8], edx
call fcn.0040d0a0
jmp 0x5e085a
lea ebp, [esp + 0x1e8]
mov dword [esp + 0x150], ebp
mov esi, dword [esp + 0x4ac]
mov edi, esi
mov esi, dword [esi]
movzx esi, byte [esi + 8]
xchg esi, eax
test al, al
xchg esi, eax
je 0x5dfb40
test ebp, ebp
je 0x5dfaa3
mov esi, dword [ebp]
jmp 0x5dfaa5
xor esi, esi
test esi, esi
jle 0x5dfb40
mov dword [esp + 0xd8], edx
mov dword [esp + 0xd4], ecx
mov dword [esp + 0x188], ebx
test ebp, ebp
je 0x5dfacb
mov esi, dword [ebp]
jmp 0x5dfacd
xor esi, esi
mov dword [esp + 0x84], esi
lea eax, [0x606f80]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], esi
call fcn.004475c0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x194], eax
lea edi, [esp + 0x220]
xor eax, eax
call fcn.0045eb74
lea ecx, [0x607cc0]
mov dword [esp], ecx
mov edx, dword [esp + 0x150]
mov dword [esp + 4], edx
lea ebx, [esp + 0x220]
mov dword [esp + 8], ebx
call fcn.0040d0a0
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x84]
xor edx, edx
jmp 0x5e0454
mov esi, dword [edi]
movzx esi, byte [esi + 9]
xchg esi, eax
test al, al
xchg esi, eax
je 0x5dfbe7
mov esi, dword [esp + 0x1cc]
test esi, esi
jle 0x5dfbe7
mov dword [esp + 0xd0], edx
mov dword [esp + 0xcc], ecx
mov dword [esp + 0x80], esi
mov dword [esp + 0x184], ebx
lea eax, [0x606f80]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], esi
call fcn.004475c0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x194], eax
lea edi, [esp + 0x220]
xor eax, eax
call fcn.0045eb74
lea ecx, [0x607cc0]
mov dword [esp], ecx
lea edx, [esp + 0x1cc]
mov dword [esp + 4], edx
lea ebx, [esp + 0x220]
mov dword [esp + 8], ebx
call fcn.0040d0a0
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x80]
xor edx, edx
jmp 0x5e003c
test ecx, ecx
jne 0x5dfc34
mov ecx, dword [edi]
mov ecx, dword [ecx + 0x10]
test ecx, ecx
je 0x5dfcab
lea edi, [esp + 0x220]
call fcn.0045eb74
lea ecx, [0x607cc0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
lea edx, [esp + 0x220]
mov dword [esp + 8], edx
call fcn.0040d0a0
mov ecx, dword [esp + 0x4ac]
mov edx, dword [esp + 0x4b4]
jmp 0x5dfcee
mov dword [esp + 0xa8], edx
mov dword [esp + 0x148], ebx
mov dword [esp + 0xa4], ecx
lea eax, [0x60d4e0]
mov dword [esp], eax
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0xa4]
mov dword [edi + 4], eax
mov eax, dword [esp + 0xa8]
mov dword [edi + 8], eax
mov eax, dword [0x7e77b0]
test eax, eax
jne 0x5dfc84
mov eax, dword [esp + 0x148]
mov dword [edi], eax
jmp 0x5dfc90
mov eax, dword [esp + 0x148]
call fcn.0045e950
lea eax, [0x68b8d4]
mov dword [esp + 0x4d0], eax
mov dword [esp + 0x4d4], edi
add esp, 0x4a8
ret
mov dword [esp + 0x4d0], 0
mov dword [esp + 0x4d4], 0
add esp, 0x4a8
ret
lea eax, [esp + 0x220]
mov dword [esp], eax
call fcn.0040d300
mov eax, dword [esp + 0x4ac]
mov ecx, dword [esp + 0x4b4]
mov ecx, eax
mov edx, dword [esp + 0x4b4]
mov ebx, dword [esp + 0x220]
test ebx, ebx
je 0x5dfe38
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
lea esi, [0x606f80]
cmp ebp, esi
jne 0x5e0005
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
test edx, edx
je 0x5dfd6a
mov dword [esp], 0
mov eax, dword [esp + 0x4b0]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
lea ecx, [0x62dc6b]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], ebx
call fcn.0044acd0
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
mov ecx, dword [esp + 0x4ac]
mov edx, dword [esp + 0x4b4]
lea esi, [0x606f80]
mov dword [esp + 0x138], ebp
mov dword [esp + 0x8c], ebx
mov eax, ecx
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x10]
mov edi, edx
mov edx, dword [ecx + 0x10]
mov esi, dword [ecx + 0xc]
mov ebp, dword [ecx + 0x14]
lea ebx, [edx + 1]
cmp ebp, ebx
jae 0x5dfdf7
mov dword [esp + 0x180], ecx
lea eax, [0x606f80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00447740
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x180]
mov dword [ebx + 0x14], edx
mov edx, dword [0x7e77b0]
test edx, edx
jne 0x5dfddb
mov dword [ebx + 0xc], eax
jmp 0x5dfde3
lea edi, [ebx + 0xc]
call fcn.0045e950
mov edi, dword [esp + 0x4b4]
mov edx, ecx
mov esi, eax
mov eax, dword [esp + 0x4ac]
mov ecx, ebx
lea ebx, [edx + 1]
mov dword [ecx + 0x10], ebx
lea ecx, [esi + edx*8 + 4]
mov ebx, dword [esp + 0x8c]
mov dword [ecx], ebx
mov ecx, dword [0x7e77b0]
lea edx, [esi + edx*8]
test ecx, ecx
jne 0x5dfe25
mov ecx, dword [esp + 0x138]
mov dword [edx], ecx
jmp 0x5dfcc8
mov edi, edx
mov eax, dword [esp + 0x138]
call fcn.0045e950
jmp 0x5dfcc8
lea edi, [esp + 0x220]
xor eax, eax
call fcn.0045eb74
lea ecx, [0x607cc0]
mov dword [esp], ecx
lea ecx, [esp + 0x1cc]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x220]
mov dword [esp + 8], ecx
call fcn.0040d0a0
mov ecx, dword [esp + 0x4ac]
mov edx, dword [esp + 0x4b4]
jmp 0x5dfea0
lea eax, [esp + 0x220]
mov dword [esp], eax
call fcn.0040d300
mov eax, dword [esp + 0x4ac]
mov ecx, dword [esp + 0x4b4]
mov ecx, eax
mov edx, dword [esp + 0x4b4]
mov ebx, dword [esp + 0x220]
test ebx, ebx
je 0x5dffea
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
lea esi, [0x606f80]
cmp ebp, esi
jne 0x5dffef
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
test edx, edx
je 0x5dff1c
mov dword [esp], 0
mov eax, dword [esp + 0x4b0]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
lea ecx, [0x62dc6b]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], ebx
call fcn.0044acd0
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
mov ecx, dword [esp + 0x4ac]
mov edx, dword [esp + 0x4b4]
lea esi, [0x606f80]
mov dword [esp + 0x134], ebp
mov dword [esp + 0x88], ebx
mov eax, ecx
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x10]
mov edi, edx
mov edx, dword [ecx + 0x1c]
mov esi, dword [ecx + 0x18]
mov ebp, dword [ecx + 0x20]
lea ebx, [edx + 1]
cmp ebp, ebx
jae 0x5dffa9
mov dword [esp + 0x180], ecx
lea eax, [0x606f80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00447740
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x180]
mov dword [ebx + 0x20], edx
mov edx, dword [0x7e77b0]
test edx, edx
jne 0x5dff8d
mov dword [ebx + 0x18], eax
jmp 0x5dff95
lea edi, [ebx + 0x18]
call fcn.0045e950
mov edi, dword [esp + 0x4b4]
mov edx, ecx
mov esi, eax
mov eax, dword [esp + 0x4ac]
mov ecx, ebx
lea ebx, [edx + 1]
mov dword [ecx + 0x1c], ebx
lea ecx, [esi + edx*8 + 4]
mov ebx, dword [esp + 0x88]
mov dword [ecx], ebx
mov ecx, dword [0x7e77b0]
lea edx, [esi + edx*8]
test ecx, ecx
jne 0x5dffd7
mov ecx, dword [esp + 0x134]
mov dword [edx], ecx
jmp 0x5dfe7a
mov edi, edx
mov eax, dword [esp + 0x134]
call fcn.0045e950
jmp 0x5dfe7a
jmp 0x5dfcab
mov dword [esp], ebp
mov dword [esp + 4], esi
lea eax, [0x6068c0]
mov dword [esp + 8], eax
call fcn.00408a50
mov dword [esp], ebp
mov dword [esp + 4], esi
lea eax, [0x6068c0]
mov dword [esp + 8], eax
call fcn.00408a50
lea eax, [esp + 0x220]
mov dword [esp], eax
call fcn.0040d300
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x78]
mov dword [esp + 0x78], edx
mov ebx, dword [esp + 0x220]
test ebx, ebx
je 0x5e00f7
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
lea esi, [0x606f80]
cmp ebp, esi
jne 0x5e041d
lea ebp, [edx + 1]
mov esi, dword [ebx]
mov ebx, dword [ebx + 4]
cmp ecx, ebp
jae 0x5e00bd
mov dword [esp + 0xe8], ebx
mov dword [esp + 0x17c], esi
lea ebx, [0x606f80]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00447740
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebp, [ecx + 1]
mov ebx, dword [esp + 0xe8]
mov esi, dword [esp + 0x17c]
mov ecx, edx
mov edx, dword [esp + 0x78]
mov dword [esp + 0x12c], eax
mov dword [esp + 0x78], ebp
mov dword [esp + 0x80], ecx
lea ecx, [eax + edx*8 + 4]
mov dword [ecx], ebx
mov ecx, dword [0x7e77b0]
lea edx, [eax + edx*8]
test ecx, ecx
jne 0x5e00e9
mov dword [edx], esi
jmp 0x5e001b
mov edi, edx
mov eax, esi
call fcn.0045e950
jmp 0x5e001b
mov dword [esp + 0x178], eax
mov dword [esp + 0xc8], ecx
nop
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00408e80
mov eax, dword [esp + 0xc]
lea ecx, [0x68c098]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00488b60
mov eax, dword [esp + 0x178]
mov dword [esp], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 8], eax
lea eax, [0x62dca3]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0049ef60
mov eax, dword [esp + 0x14]
mov dword [esp + 0x17c], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0x1bc], 0
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
mov edx, dword [esp + 0x4b0]
mov dword [esp], edx
mov ebx, dword [esp + 0x4b4]
mov dword [esp + 4], ebx
call fcn.00408e00
mov eax, dword [esp + 8]
lea ecx, [0x606f80]
mov dword [esp + 0x1bc], ecx
mov dword [esp + 0x1c0], eax
mov eax, dword [esp + 0x17c]
mov dword [esp], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
call fcn.00408e00
mov eax, dword [esp + 8]
lea ecx, [0x606f80]
mov dword [esp + 0x1c4], ecx
mov dword [esp + 0x1c8], eax
lea eax, [0x6361e7]
mov dword [esp], eax
mov dword [esp + 4], 0x19
lea eax, [esp + 0x1bc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0250
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
test eax, eax
je 0x5e0350
cmp dword [eax + 8], 0xe1bf9e84
jne 0x5e034a
lea esi, [0x68b8d4]
cmp ecx, esi
jne 0x5e0350
mov ebx, dword [edx + 4]
mov eax, dword [esp + 0xcc]
lea ecx, [ebx + eax]
mov dword [esp + 0x44], ecx
mov edx, dword [edx]
mov ebp, dword [esp + 0xd0]
cmp ebp, ecx
jb 0x5e0295
mov edi, dword [esp + 0x184]
jmp 0x5e02f3
mov dword [esp + 0xe8], ebx
mov dword [esp + 0x18c], edx
lea edx, [0x606f80]
mov dword [esp], edx
mov ebx, dword [esp + 0x184]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.00447740
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x44]
lea esi, [0x68b8d4]
mov ebp, edx
mov edi, ebx
mov edx, dword [esp + 0x18c]
mov ebx, dword [esp + 0xe8]
cmp eax, ecx
ja 0x5e0418
mov dword [esp + 0x58], ebp
mov dword [esp + 0xf8], edi
lea ecx, [0x606f80]
mov dword [esp], ecx
sub ebp, eax
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl eax, 3
sar ebp, 0x1f
and eax, ebp
add eax, edi
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.00410020
mov edi, dword [esp + 0x44]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0xf8]
jmp 0x5e03fd
lea esi, [0x68b8d4]
mov eax, dword [ebx + 0x10]
mov dword [esp], ebp
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xcc]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0xd0]
cmp ebp, ebx
jb 0x5e037e
mov esi, dword [esp + 0x184]
jmp 0x5e03d9
mov dword [esp + 0x17c], eax
mov dword [esp + 0xe8], ecx
lea eax, [0x606f80]
mov dword [esp], eax
mov ecx, dword [esp + 0x184]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00447740
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
inc eax
mov ecx, dword [esp + 0xe8]
mov esi, ebx
mov ebx, eax
mov ebp, edx
mov eax, dword [esp + 0x17c]
mov edx, dword [esp + 0xcc]
mov edi, ebx
lea ebx, [esi + edx*8 + 4]
mov dword [ebx], ecx
mov ecx, dword [0x7e77b0]
lea edx, [esi + edx*8]
test ecx, ecx
jne 0x5e03f2
mov dword [edx], eax
jmp 0x5e03fd
mov ecx, edi
mov edi, edx
call fcn.0045e950
mov edi, ecx
xor eax, eax
mov ecx, edi
mov ebx, esi
mov edx, ebp
mov ebp, dword [esp + 0x150]
mov edi, dword [esp + 0x4ac]
jmp 0x5dfbe7
call fcn.0045ea30
mov dword [esp], ebp
mov dword [esp + 4], esi
lea eax, [0x6068c0]
mov dword [esp + 8], eax
call fcn.00408a50
lea eax, [esp + 0x220]
mov dword [esp], eax
call fcn.0040d300
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x7c], edx
mov ebx, dword [esp + 0x220]
test ebx, ebx
je 0x5e050f
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
lea esi, [0x606f80]
cmp ebp, esi
jne 0x5e0835
lea ebp, [edx + 1]
mov esi, dword [ebx]
mov ebx, dword [ebx + 4]
cmp ecx, ebp
jae 0x5e04d5
mov dword [esp + 0x17c], esi
mov dword [esp + 0xe8], ebx
lea ebx, [0x606f80]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00447740
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebp, [ecx + 1]
mov ebx, dword [esp + 0xe8]
mov esi, dword [esp + 0x17c]
mov ecx, edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x130], eax
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x84], ecx
lea ecx, [eax + edx*8 + 4]
mov dword [ecx], ebx
mov ecx, dword [0x7e77b0]
lea edx, [eax + edx*8]
test ecx, ecx
jne 0x5e0501
mov dword [edx], esi
jmp 0x5e0433
mov edi, edx
mov eax, esi
call fcn.0045e950
jmp 0x5e0433
mov dword [esp + 0x174], eax
mov dword [esp + 0xc4], ecx
nop
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00408e80
mov eax, dword [esp + 0xc]
lea ecx, [0x68c098]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00488b60
mov eax, dword [esp + 0x174]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 8], eax
lea eax, [0x62dca3]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0049ef60
mov eax, dword [esp + 0x14]
mov dword [esp + 0x17c], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0x1bc], 0
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
mov edx, dword [esp + 0x4b0]
mov dword [esp], edx
mov ebx, dword [esp + 0x4b4]
mov dword [esp + 4], ebx
call fcn.00408e00
mov eax, dword [esp + 8]
lea ecx, [0x606f80]
mov dword [esp + 0x1bc], ecx
mov dword [esp + 0x1c0], eax
mov eax, dword [esp + 0x17c]
mov dword [esp], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
call fcn.00408e00
mov eax, dword [esp + 8]
lea ecx, [0x606f80]
mov dword [esp + 0x1c4], ecx
mov dword [esp + 0x1c8], eax
lea eax, [0x6361ce]
mov dword [esp], eax
mov dword [esp + 4], 0x19
lea eax, [esp + 0x1bc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0250
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
test eax, eax
je 0x5e0768
cmp dword [eax + 8], 0xe1bf9e84
jne 0x5e0762
lea esi, [0x68b8d4]
cmp ecx, esi
jne 0x5e0768
mov ebx, dword [edx + 4]
mov eax, dword [esp + 0xd4]
lea ecx, [ebx + eax]
mov dword [esp + 0x48], ecx
mov edx, dword [edx]
mov ebp, dword [esp + 0xd8]
cmp ebp, ecx
jb 0x5e06ad
mov edi, dword [esp + 0x188]
jmp 0x5e070b
mov dword [esp + 0x18c], edx
mov dword [esp + 0xe8], ebx
lea edx, [0x606f80]
mov dword [esp], edx
mov ebx, dword [esp + 0x188]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.00447740
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x48]
lea esi, [0x68b8d4]
mov ebp, edx
mov edi, ebx
mov edx, dword [esp + 0x18c]
mov ebx, dword [esp + 0xe8]
cmp eax, ecx
ja 0x5e0830
mov dword [esp + 0x5c], ebp
mov dword [esp + 0xfc], edi
lea ecx, [0x606f80]
mov dword [esp], ecx
sub ebp, eax
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl eax, 3
sar ebp, 0x1f
and eax, ebp
add eax, edi
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.00410020
mov edi, dword [esp + 0x48]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xfc]
jmp 0x5e0815
lea esi, [0x68b8d4]
mov eax, dword [ebx + 0x10]
mov dword [esp], ebp
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xd4]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0xd8]
cmp ebp, ebx
jb 0x5e0796
mov esi, dword [esp + 0x188]
jmp 0x5e07f1
mov dword [esp + 0x17c], eax
mov dword [esp + 0xe8], ecx
lea eax, [0x606f80]
mov dword [esp], eax
mov ecx, dword [esp + 0x188]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00447740
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
inc eax
mov ecx, dword [esp + 0xe8]
mov esi, ebx
mov ebx, eax
mov ebp, edx
mov eax, dword [esp + 0x17c]
mov edx, dword [esp + 0xd4]
mov edi, ebx
lea ebx, [esi + edx*8 + 4]
mov dword [ebx], ecx
mov ecx, dword [0x7e77b0]
lea edx, [esi + edx*8]
test ecx, ecx
jne 0x5e080a
mov dword [edx], eax
jmp 0x5e0815
mov ecx, edi
mov edi, edx
call fcn.0045e950
mov edi, ecx
xor eax, eax
mov ecx, edi
mov edx, ebp
mov ebx, esi
mov ebp, dword [esp + 0x150]
mov edi, dword [esp + 0x4ac]
jmp 0x5dfb40
call fcn.0045ea30
mov dword [esp], ebp
mov dword [esp + 4], esi
lea eax, [0x6068c0]
mov dword [esp + 8], eax
call fcn.00408a50
lea eax, [esp + 0x220]
mov dword [esp], eax
call fcn.0040d300
mov ecx, dword [esp + 0x220]
test ecx, ecx
je 0x5e09c8
mov edx, dword [ecx]
mov eax, dword [ecx + 4]
mov dword [esp + 0x1a8], edx
mov dword [esp + 0x1ac], eax
test edx, edx
je 0x5e08e7
nop
movzx ecx, byte [0x7c0510]
test cl, cl
je 0x5e08af
mov dword [0x7c0514], edx
mov ecx, dword [0x7e77b0]
test ecx, ecx
jne 0x5e08a4
mov dword [0x7c0518], eax
jmp 0x5e08af
lea edi, [0x7c0518]
call fcn.0045e950
mov dword [esp + 0x198], edx
mov dword [esp + 0x19c], eax
mov ecx, dword [esp + 0x198]
test ecx, ecx
je 0x5e08df
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x5e08ed
or edx, 0x80
jmp 0x5e08ed
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x5e08ed
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x4b8]
mov dword [esp], ebx
mov ebp, dword [esp + 0x4bc]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x4c0]
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004b92e0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x1b0], eax
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x1b8], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.004b8b90
mov eax, dword [esp + 0x14]
mov dword [esp + 0x13c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x17c], ecx
lea edx, [0x607c80]
mov dword [esp], edx
mov ebx, dword [esp + 0x120]
mov dword [esp + 4], ebx
lea ebp, [esp + 0x1a8]
mov dword [esp + 8], ebp
call fcn.0040c830
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x17c]
mov dword [eax], ecx
mov ecx, dword [0x7e77b0]
test ecx, ecx
jne 0x5e09b4
mov ecx, dword [esp + 0x13c]
mov dword [eax + 4], ecx
jmp 0x5e084b
lea edi, [eax + 4]
mov eax, dword [esp + 0x13c]
call fcn.0045e950
jmp 0x5e084b
mov eax, dword [esp + 0x11c]
mov ecx, dword [eax + 0x38]
mov edx, dword [eax + 0x3c]
mov eax, dword [eax + 0x34]
mov ebx, dword [esp + 0x4ac]
mov dword [esp], ebx
mov ebp, dword [esp + 0x4b0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x4b4]
mov dword [esp + 8], esi
lea edi, [0x607c80]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x120]
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
call fcn.005db000
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x24]
test eax, eax
je 0x5e0bee
test ecx, ecx
je 0x5e0b3f
cmp dword [ecx + 8], 0xe1bf9e84
jne 0x5e0b39
lea esi, [0x68b8d4]
cmp edx, esi
jne 0x5e0b3f
mov edx, dword [ebx + 4]
mov eax, dword [esp + 0xdc]
lea ecx, [edx + eax]
mov dword [esp + 0x4c], ecx
mov ebx, dword [ebx]
mov ebp, dword [esp + 0xe0]
cmp ebp, ecx
jb 0x5e0a84
mov edi, dword [esp + 0x18c]
jmp 0x5e0ae2
mov dword [esp + 0xe8], edx
mov dword [esp + 0x170], ebx
lea edx, [0x606f80]
mov dword [esp], edx
mov ebx, dword [esp + 0x18c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.00447740
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x4c]
lea esi, [0x68b8d4]
mov ebp, edx
mov edi, ebx
mov edx, dword [esp + 0xe8]
mov ebx, dword [esp + 0x170]
cmp eax, ecx
ja 0x5e0c12
mov dword [esp + 0x60], ebp
mov dword [esp + 0x100], edi
lea ecx, [0x606f80]
mov dword [esp], ecx
sub ebp, eax
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl eax, 3
sar ebp, 0x1f
and eax, ebp
add eax, edi
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00410020
mov ebp, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov esi, dword [esp + 0x100]
jmp 0x5e0c03
lea esi, [0x68b8d4]
mov eax, dword [eax + 0x10]
mov dword [esp], ebp
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xdc]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0xe0]
cmp ebp, ebx
jb 0x5e0b6d
mov esi, dword [esp + 0x18c]
jmp 0x5e0bc8
mov dword [esp + 0x17c], eax
mov dword [esp + 0xe8], ecx
lea eax, [0x606f80]
mov dword [esp], eax
mov ecx, dword [esp + 0x18c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00447740
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
inc eax
mov ecx, dword [esp + 0xe8]
mov esi, ebx
mov ebx, eax
mov ebp, edx
mov eax, dword [esp + 0x17c]
mov edx, dword [esp + 0xdc]
mov edi, ebx
lea ebx, [esi + edx*8 + 4]
mov dword [ebx], ecx
mov ecx, dword [0x7e77b0]
lea edx, [esi + edx*8]
test ecx, ecx
jne 0x5e0be1
mov dword [edx], eax
jmp 0x5e0c03
mov ecx, edi
mov edi, edx
call fcn.0045e950
mov edi, ecx
jmp 0x5e0c03
mov edi, dword [esp + 0xdc]
mov ebp, dword [esp + 0xe0]
mov esi, dword [esp + 0x18c]
xor eax, eax
mov ecx, edi
mov edx, ebp
mov ebx, esi
xor ebp, ebp
jmp 0x5dfa7a
call fcn.0045ea30
mov eax, dword [esp + 0x16c]
add eax, 0x40
mov edx, esi
mov ebx, ebp
mov esi, eax
mov dword [esp + 0xe8], ecx
mov dword [esp + 0x16c], esi
mov dword [esp + 0xa8], ebx
mov dword [esp + 0x148], edi
mov dword [esp + 0xa4], edx
lea edi, [esp + 0x324]
call fcn.0045eff0
lea edi, [esp + 0x2b4]
lea esi, [esp + 0x324]
call fcn.0045f00e
mov ecx, dword [esp + 0x4ac]
mov ebp, dword [ecx]
mov ecx, dword [esp + 0x360]
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0x358]
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x35c]
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x2b4]
mov dword [esp + 0x144], eax
mov edx, dword [esp + 0x2b8]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 0x2cc]
mov ecx, dword [esp + 0x2d0]
mov eax, dword [ebp + 0x20]
mov ebp, dword [ebp + 0x1c]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
call fcn.004b27d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x62dc69]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 2
call fcn.0049ed40
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
test ecx, ecx
jbe 0x5e142e
mov ecx, dword [eax + 4]
mov eax, dword [eax]
test ecx, ecx
jne 0x5e0d3d
mov ecx, dword [esp + 0xa0]
mov eax, dword [esp + 0x144]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x144], eax
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408e00
mov eax, dword [esp + 8]
nop
movzx ecx, byte [0x7c0510]
test cl, cl
je 0x5e0d92
lea ecx, [0x606f80]
mov dword [0x7c0514], ecx
mov edx, dword [0x7e77b0]
test edx, edx
jne 0x5e0d85
mov dword [0x7c0518], eax
jmp 0x5e0d98
lea edi, [0x7c0518]
call fcn.0045e950
jmp 0x5e0d98
lea ecx, [0x606f80]
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x1a4], eax
mov edx, dword [esp + 0x1a0]
test edx, edx
je 0x5e0dca
nop
movzx ebx, byte [edx + 0xf]
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x5e0dd0
or ebx, 0x80
jmp 0x5e0dd0
xor ebx, ebx
xor edx, edx
xor eax, eax
mov dword [esp + 0xf0], edx
mov dword [esp + 0x40], ebx
mov dword [esp + 0xf4], eax
mov ecx, dword [esp + 0x4b8]
mov dword [esp], ecx
mov ebp, dword [esp + 0x4bc]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x4c0]
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
call fcn.004b92e0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test edx, edx
je 0x5e0e3a
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0xf0]
mov esi, dword [esp + 0xf4]
jmp 0x5e0f1e
mov dword [esp + 0xc0], edx
mov dword [esp + 0x168], ecx
mov dword [esp + 0x164], eax
lea edi, [esp + 0x250]
xor eax, eax
call fcn.0045eb74
lea ecx, [0x607f80]
mov dword [esp], ecx
lea edx, [esp + 0x204]
mov dword [esp + 4], edx
lea ebx, [esp + 0x250]
mov dword [esp + 8], ebx
call fcn.0040d0a0
jmp 0x5e1349
mov eax, dword [esp + 0x4b8]
mov dword [esp], eax
mov ecx, dword [esp + 0x4bc]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x4c0]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x160]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x15c]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0xbc]
mov dword [esp + 0x14], esi
call fcn.004b92e0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x160]
mov esi, dword [esp + 0x15c]
jmp 0x5e0f16
mov edx, dword [esp + 0xc0]
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0xf0]
mov esi, dword [esp + 0xf4]
test edx, edx
je 0x5e12ad
mov edi, edx
mov edx, dword [esp + 0xe4]
test edx, edx
je 0x5e1416
and edx, 0x160
cmp edx, 0x100
je 0x5e0f57
mov ebp, dword [esp + 0xa8]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x148]
jmp 0x5e131e
mov dword [esp + 0xbc], edi
mov dword [esp + 0x128], ecx
mov dword [esp + 0x124], eax
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov byte [esp + 0xc], 1
call fcn.004b8b90
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
lea eax, [0x607cc0]
mov dword [esp], eax
lea ecx, [esp + 0x1e8]
mov dword [esp + 4], ecx
lea edx, [esp + 0x1a8]
mov dword [esp + 8], edx
call fcn.0040cd10
mov eax, dword [esp + 0x4b4]
test eax, eax
jne 0x5e0fe4
mov ecx, dword [esp + 0xa0]
mov eax, dword [esp + 0x144]
jmp 0x5e102f
mov dword [esp], 0
mov ecx, dword [esp + 0x4b0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
lea edx, [0x62dc6b]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 1
mov ebx, dword [esp + 0x144]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0x18], ebx
call fcn.0044acd0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x144], eax
mov edx, dword [esp + 0x124]
mov dword [esp], edx
mov edx, dword [esp + 0x128]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xbc]
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.004b8b90
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
mov edx, dword [esp + 0x4ac]
mov dword [esp], edx
mov ebx, dword [esp + 0x144]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xa0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x190]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x194]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x1c], eax
call fcn.005d7020
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x24]
test eax, eax
jne 0x5e10fd
mov ebp, dword [esp + 0xa8]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x148]
jmp 0x5e131e
test ecx, ecx
je 0x5e1200
cmp dword [ecx + 8], 0xe1bf9e84
jne 0x5e11fa
lea esi, [0x68b8d4]
cmp edx, esi
jne 0x5e1200
mov edx, dword [ebx + 4]
mov eax, dword [esp + 0xa4]
lea ecx, [edx + eax]
mov dword [esp + 0x50], ecx
mov ebx, dword [ebx]
mov ebp, dword [esp + 0xa8]
cmp ebp, ecx
jb 0x5e1147
mov edi, dword [esp + 0x148]
jmp 0x5e11a3
mov dword [esp + 0xb8], edx
mov dword [esp + 0x170], ebx
lea edx, [0x606f80]
mov dword [esp], edx
mov ebx, dword [esp + 0x148]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.00447740
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0xb8]
lea esi, [0x68b8d4]
mov ebp, ebx
mov ebx, dword [esp + 0x170]
cmp eax, ecx
ja 0x5e1411
mov dword [esp + 0x64], ebp
mov dword [esp + 0x104], edi
lea ecx, [0x606f80]
mov dword [esp], ecx
sub ebp, eax
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl eax, 3
sar ebp, 0x1f
and eax, ebp
add eax, edi
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00410020
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x104]
jmp 0x5e131e
lea esi, [0x68b8d4]
mov eax, dword [eax + 0x10]
mov dword [esp], ebp
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xa4]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0xa8]
cmp ebp, ebx
jb 0x5e122e
mov edi, dword [esp + 0x148]
jmp 0x5e1287
mov dword [esp + 0x17c], eax
mov dword [esp + 0xb8], ecx
lea eax, [0x606f80]
mov dword [esp], eax
mov ecx, dword [esp + 0x148]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00447740
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
inc eax
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xa4]
mov ebp, ebx
mov ebx, eax
mov eax, dword [esp + 0x17c]
mov esi, ebx
lea ebx, [edi + edx*8 + 4]
mov dword [ebx], ecx
mov ecx, dword [0x7e77b0]
lea edx, [edi + edx*8]
test ecx, ecx
jne 0x5e12a0
mov dword [edx], eax
jmp 0x5e131e
mov ecx, edi
mov edi, edx
call fcn.0045e950
mov edi, ecx
jmp 0x5e131e
mov eax, dword [esp + 0x144]
mov dword [esp], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 4], eax
call fcn.00408e00
mov eax, dword [esp + 8]
lea ecx, [0x606f80]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], eax
lea eax, [0x607cc0]
mov dword [esp], eax
lea edx, [esp + 0x1cc]
mov dword [esp + 4], edx
lea ebx, [esp + 0x1a8]
mov dword [esp + 8], ebx
call fcn.0040c830
mov eax, dword [esp + 0xc]
test byte [eax], al
mov ebp, dword [esp + 0xa8]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x148]
mov ecx, dword [esp + 0xe8]
inc ecx
mov edx, dword [esp + 0x94]
cmp edx, ecx
jg 0x5e0c17
jmp 0x5e1404
lea eax, [esp + 0x250]
mov dword [esp], eax
call fcn.0040d300
mov ecx, dword [esp + 0x250]
test ecx, ecx
je 0x5e0eef
mov eax, dword [ecx]
mov dword [esp + 0x160], eax
mov edx, dword [ecx + 4]
mov dword [esp + 0x15c], edx
mov ecx, dword [ecx + 8]
mov dword [esp + 0xbc], ecx
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 1
call fcn.004b8b90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], edx
lea edx, [0x606f80]
cmp ecx, edx
jne 0x5e13b5
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x5e13bf
mov eax, 0
mov ecx, 0
jne 0x5e133a
mov ebx, dword [esp + 0x4ac]
mov ebp, dword [ebx]
mov edx, dword [ebp + 0x28]
mov ebp, dword [edx]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x144]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], ecx
call ebp
movzx eax, byte [esp + 0x10]
test al, al
je 0x5e133a
jmp 0x5e0e86
xor eax, eax
mov ecx, esi
mov edx, ebp
mov ebx, edi
jmp 0x5dfa02
call fcn.0045ea30
lea eax, [0x606f80]
mov dword [esp], eax
lea eax, [0x68b298]
mov dword [esp + 4], eax
call fcn.004337b0
xor eax, eax
call fcn.0045e9d0
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x90]
inc eax
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x148], esi
mov esi, eax
mov ecx, ebp
mov eax, dword [esp + 0x114]
mov edi, edx
mov ebp, dword [esp + 0x118]
mov edx, ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x98], edi
mov dword [esp + 0x90], esi
mov dword [esp + 0x70], ecx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x114], eax
mov eax, dword [ebx + 0x64]
mov dword [esp], ebp
call eax
mov eax, dword [esp + 0x90]
cmp dword [esp + 4], eax
jle 0x5df8fb
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x280]
lea esi, [esp + 8]
call fcn.0045f00e
mov eax, dword [esp + 0x190]
mov dword [esp], eax
mov ecx, dword [esp + 0x194]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x90]
mov dword [esp + 0xc], ebx
call fcn.004b88f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
nop
mov ebx, eax
and eax, 0x1f
cmp eax, 0x16
jne 0x5e15b4
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x15c], edx
mov dword [esp + 0x160], ecx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004b8740
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x1b4], edx
mov dword [esp + 0x1b8], eax
nop
and eax, 0x1f
cmp eax, 0x19
je 0x5e1581
mov ecx, dword [esp + 0x160]
mov edx, dword [esp + 0x15c]
mov ebx, dword [esp + 0xbc]
jmp 0x5e15b4
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 8], eax
call fcn.004b8740
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov ebx, eax
mov dword [esp + 0x9c], ebx
mov dword [esp + 0x110], edx
mov dword [esp + 0x10c], ecx
mov eax, dword [esp + 0x4ac]
mov ebp, dword [eax]
movzx esi, byte [ebp + 0xc]
xchg esi, eax
test al, al
xchg esi, eax
je 0x5e15f1
nop
mov esi, ebx
and ebx, 0x1f
cmp ebx, 0x19
jne 0x5e15f3
movzx ebx, byte [esp + 0x2b0]
jmp 0x5e15f5
mov esi, ebx
xor ebx, ebx
mov byte [esp + 0x3f], bl
mov eax, dword [esp + 0x298]
mov ecx, dword [esp + 0x29c]
mov edx, dword [ebp + 0x1c]
mov ebp, dword [ebp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
call fcn.004b27d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x62dc69]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0xffffffff
call fcn.0049ed40
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
cmp ecx, 1
jb 0x5e1c88
lea ebx, [eax - 1]
neg ebx
sar ebx, 0x1f
and ebx, 8
add edx, ebx
dec ecx
xor eax, eax
jmp 0x5e1c39
mov eax, 1
xor ecx, ecx
jmp 0x5e169d
movzx eax, byte [esp + 0x3f]
mov ecx, 1
jmp 0x5e169d
movzx eax, byte [esp + 0x3f]
xor ecx, ecx
test al, al
je 0x5e1a1b
nop
mov ecx, dword [esp + 0x9c]
mov edx, ecx
and ecx, 0x1f
cmp ecx, 0x19
jne 0x5e177b
mov ecx, dword [esp + 0x6c]
lea ebx, [ecx + 1]
mov ebp, dword [esp + 0x70]
cmp ebp, ebx
jb 0x5e16d3
mov eax, dword [esp + 0x114]
jmp 0x5e1714
lea eax, [0x62d6c0]
mov dword [esp], eax
mov edx, dword [esp + 0x114]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00447740
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x6c]
mov ebp, edx
mov edx, dword [esp + 0x9c]
lea ecx, [ecx + ecx*2]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [0x7e77b0]
lea edi, [eax + ecx*4]
lea esi, [eax + ecx*4 + 4]
test edx, edx
jne 0x5e1743
mov edx, dword [esp + 0x10c]
mov dword [eax + ecx*4], edx
mov edx, dword [esp + 0x110]
mov dword [eax + ecx*4 + 4], edx
jmp 0x5e1761
mov ecx, eax
mov eax, dword [esp + 0x10c]
call fcn.0045e950
mov edi, esi
mov eax, dword [esp + 0x110]
call fcn.0045e950
mov eax, ecx
mov ecx, dword [esp + 0xa8]
mov edi, dword [esp + 0xa4]
mov esi, dword [esp + 0x148]
jmp 0x5e1a0f
mov dword [esp + 0xbc], ecx
mov dword [esp + 0x1bc], 0
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
mov eax, dword [esp + 0x280]
mov ecx, dword [esp + 0x284]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408e00
mov eax, dword [esp + 8]
lea ecx, [0x606f80]
mov dword [esp + 0x1bc], ecx
mov dword [esp + 0x1c0], eax
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
call fcn.00408cf0
mov eax, dword [esp + 4]
lea ecx, [0x6091e0]
mov dword [esp + 0x1c4], ecx
mov dword [esp + 0x1c8], eax
lea eax, [0x63ad06]
mov dword [esp], eax
mov dword [esp + 4], 0x23
lea edx, [esp + 0x1bc]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0250
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
test eax, eax
je 0x5e1951
cmp dword [eax + 8], 0xe1bf9e84
jne 0x5e194b
lea esi, [0x68b8d4]
cmp ecx, esi
jne 0x5e1951
mov ebx, dword [edx + 4]
mov eax, dword [esp + 0xa4]
lea ecx, [ebx + eax]
mov dword [esp + 0x54], ecx
mov edx, dword [edx]
mov ebp, dword [esp + 0xa8]
cmp ebp, ecx
jb 0x5e1896
mov edi, dword [esp + 0x148]
jmp 0x5e18f4
mov dword [esp + 0x170], edx
mov dword [esp + 0xe8], ebx
lea edx, [0x606f80]
mov dword [esp], edx
mov ebx, dword [esp + 0x148]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.00447740
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x170]
mov ebx, dword [esp + 0xe8]
lea esi, [0x68b8d4]
mov ebp, ecx
mov edi, eax
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x54]
cmp eax, ecx
ja 0x5e1c83
mov dword [esp + 0x68], ebp
mov dword [esp + 0x108], edi
lea ecx, [0x606f80]
mov dword [esp], ecx
sub ebp, eax
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl eax, 3
sar ebp, 0x1f
and eax, ebp
add eax, edi
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.00410020
mov ebp, dword [esp + 0x68]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x108]
jmp 0x5e19fe
lea esi, [0x68b8d4]
mov eax, dword [ebx + 0x10]
mov dword [esp], ebp
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xa4]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0xa8]
cmp ebp, ebx
jb 0x5e197f
mov esi, dword [esp + 0x148]
jmp 0x5e19da
mov dword [esp + 0x17c], eax
mov dword [esp + 0xe8], ecx
lea eax, [0x606f80]
mov dword [esp], eax
mov ecx, dword [esp + 0x148]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00447740
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0xe8]
mov esi, eax
mov ebp, edx
mov eax, dword [esp + 0x17c]
mov edx, dword [esp + 0xa4]
mov edi, ebx
lea ebx, [esi + edx*8 + 4]
mov dword [ebx], ecx
mov ecx, dword [0x7e77b0]
lea edx, [esi + edx*8]
test ecx, ecx
jne 0x5e19f3
mov dword [edx], eax
jmp 0x5e19fe
mov ecx, edi
mov edi, edx
call fcn.0045e950
mov edi, ecx
mov ebx, dword [esp + 0x6c]
mov eax, dword [esp + 0x114]
mov ecx, ebp
mov ebp, dword [esp + 0x70]
mov edx, dword [esp + 0x98]
jmp 0x5e1435
test cl, cl
jne 0x5e1b3f
lea edi, [esp + 0x364]
xor eax, eax
call fcn.0045eb70
lea edi, [esp + 0x364]
lea esi, [esp + 0x280]
call fcn.0045f00e
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0x398], ecx
mov ecx, dword [esp + 0x110]
mov dword [esp + 0x39c], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x3a0], ecx
mov ecx, dword [esp + 0x94]
lea edx, [ecx + 1]
mov ebx, dword [esp + 0x98]
cmp ebx, edx
jb 0x5e1a8c
mov ebp, dword [esp + 0x16c]
jmp 0x5e1acd
lea eax, [0x6109c0]
mov dword [esp], eax
mov ebp, dword [esp + 0x16c]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00447740
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
lea edx, [ecx + 1]
mov ecx, dword [esp + 0x94]
mov ebp, eax
mov ebx, edi
xor eax, eax
mov eax, dword [0x7e77b0]
shl ecx, 6
lea edi, [ebp + ecx]
test eax, eax
jne 0x5e1aec
lea esi, [esp + 0x364]
call fcn.0045eff0
jmp 0x5e1b33
mov dword [esp + 0x158], ebp
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb4], ebx
lea eax, [0x6109c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x364]
mov dword [esp + 8], eax
call fcn.0040ff10
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x158]
mov eax, dword [esp + 0x11c]
jmp 0x5e1bf8
lea eax, [0x6109c0]
mov dword [esp], eax
call fcn.0040b440
mov edi, dword [esp + 4]
mov dword [esp + 0x11c], edi
mov eax, dword [0x7e77b0]
test eax, eax
jne 0x5e1b70
lea esi, [esp + 0x280]
call fcn.0045f00e
jmp 0x5e1b8d
lea eax, [0x620580]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x280]
mov dword [esp + 8], eax
call fcn.0040ff10
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x11c]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x7e77b0]
test ecx, ecx
jne 0x5e1bbe
mov eax, dword [esp + 0x10c]
mov dword [edx + 0x34], eax
mov eax, dword [esp + 0x110]
mov dword [edx + 0x38], eax
jmp 0x5e1bdc
lea edi, [edx + 0x34]
mov eax, dword [esp + 0x10c]
call fcn.0045e950
lea edi, [edx + 0x38]
mov eax, dword [esp + 0x110]
call fcn.0045e950
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x98]
mov ebp, dword [esp + 0x16c]
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x94], edx
mov dword [esp + 0x16c], ebp
mov dword [esp + 0x11c], eax
mov ecx, dword [esp + 0xa8]
mov edi, dword [esp + 0xa4]
mov esi, dword [esp + 0x148]
mov ebp, dword [esp + 0x70]
mov eax, dword [esp + 0x114]
mov edx, ebx
mov ebx, dword [esp + 0x6c]
jmp 0x5e1435
inc eax
cmp eax, ecx
jge 0x5e1696
lea ebx, [edx + eax*8]
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
cmp ebx, 6
jne 0x5e1c38
cmp dword [ebp], 0x61757173
jne 0x5e1c68
cmp word [ebp + 4], 0x6873
je 0x5e1681
cmp ebx, 6
jmp 0x5e1c6b
cmp ebx, 6
jne 0x5e1c38
cmp dword [ebp], 0x616d6572
jne 0x5e1c38
cmp word [ebp + 4], 0x6e69
jne 0x5e1c38
jmp 0x5e168a
call fcn.0045ea30
mov eax, 1
call fcn.0045ea30
mov ebx, dword [esp + 0x154]
lea edx, [ebx + 0xc]
mov dword [esp + 0xb0], eax
mov dword [esp + 0x154], edx
mov ecx, dword [edx + 4]
mov dword [esp + 0x194], ecx
mov ebx, dword [edx + 8]
mov dword [esp + 0xe4], ebx
mov ebp, dword [edx]
mov dword [esp + 0x190], ebp
mov dword [esp + 0x1b0], ebp
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x1b8], ebx
lea esi, [0x607f80]
mov dword [esp], esi
lea edi, [esp + 0x204]
mov dword [esp + 4], edi
lea edi, [esp + 0x1b0]
mov dword [esp + 8], edi
call fcn.0040c830
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0x190]
mov dword [esp], eax
mov eax, dword [esp + 0x194]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.004b8b90
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
lea eax, [0x607cc0]
mov dword [esp], eax
lea ecx, [esp + 0x1e8]
mov dword [esp + 4], ecx
lea edx, [esp + 0x1a8]
mov dword [esp + 8], edx
call fcn.0040c830
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0xb0]
inc eax
mov ecx, dword [esp + 0xe8]
cmp ecx, eax
jg 0x5e1c92
jmp 0x5df81d
call fcn.0045d540
jmp fcn.005df5e0