Function at 0x5718d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x200]
cmp eax, dword [ecx + 8]
jbe 0x5735b3
sub esp, 0x280
lea eax, [0x80c800]
mov dword [esp], eax
call fcn.00409f80
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x284]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
mov dword [edi + 4], edx
mov dword [edi + 8], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x573595
mov dword [edi], ebx
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
mov ebx, dword [eax + 0xc]
mov dword [edi + 0x10], edx
mov dword [edi + 0x14], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x57357c
mov dword [edi + 0xc], ebx
mov ecx, dword [eax + 0xc8]
mov edx, dword [eax + 0xc4]
mov ebx, dword [eax + 0xc0]
mov dword [edi + 0x1c], edx
mov dword [edi + 0x20], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x573563
mov dword [edi + 0x18], ebx
mov ecx, dword [eax + 0xbc]
mov edx, dword [eax + 0xb4]
mov ebx, dword [eax + 0xb8]
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x57354a
mov dword [edi + 0x24], edx
mov dword [esp + 0x78], edi
mov ecx, dword [eax + 0x70]
mov edx, dword [eax + 0x68]
mov ebx, dword [eax + 0x6c]
mov dword [edi + 0x34], ebx
mov dword [edi + 0x38], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x573535
mov dword [edi + 0x30], edx
mov ecx, dword [eax + 0x174]
mov edx, dword [eax + 0x16c]
mov ebx, dword [eax + 0x170]
mov ebp, dword [eax + 0x168]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.00538040
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x40], ecx
mov dword [ebx + 0x44], eax
mov eax, dword [0xb91180]
test eax, eax
jne 0x573526
mov dword [ebx + 0x3c], edx
mov eax, dword [esp + 0x284]
lea esi, [eax + 0x20]
lea edi, [esp + 0x1b8]
call fcn.0044f668
mov edi, esp
lea esi, [esp + 0x1b8]
call fcn.0044f668
call fcn.0056e910
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 0x48], eax
mov eax, dword [esp + 0x284]
mov edx, dword [eax + 0xd4]
mov ebx, dword [eax + 0xd0]
mov ebp, dword [eax + 0xcc]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.0056edf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 0x4c], eax
mov dword [esp], eax
mov eax, dword [esp + 0x284]
lea edx, [eax + 0xc0]
mov dword [esp + 4], edx
call fcn.00570370
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x78]
mov dword [ebp + 0x50], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x573519
mov dword [ebp + 0x54], eax
test edx, edx
jne 0x5734f9
mov ecx, dword [esp + 0x284]
mov edx, dword [ecx + 0x18]
inc edx
mov dword [ebp + 0x58], edx
mov edx, dword [0xb91180]
mov eax, dword [ecx + 0x1c]
test edx, edx
jne 0x5734ec
mov dword [ebp + 0x5c], eax
lea eax, [0x7bbfa0]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0xd4], eax
lea ecx, [0x7bbfa0]
mov dword [esp], ecx
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0xd0], eax
nop
mov ecx, dword [esp + 0x284]
mov edx, dword [ecx + 0xb8]
mov ebx, dword [ecx + 0xb4]
mov ebp, dword [ecx + 0xbc]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
lea edx, [0x7b71c0]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0053cda0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x5734cc
test edx, edx
je 0x571bd7
nop
lea eax, [0x7c34e0]
mov dword [esp], eax
call fcn.00409f80
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x27
mov eax, dword [0xb91180]
test eax, eax
jne 0x571bca
lea eax, [0x827117]
mov dword [edi], eax
mov dword [esp + 0x288], 0
lea eax, [0x8b3870]
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], edi
add esp, 0x280
ret
lea eax, [0x827117]
call fcn.0044f0d0
jmp 0x571ba4
nop
mov eax, dword [esp + 0x284]
mov ecx, dword [eax + 0x70]
mov edx, dword [eax + 0x6c]
mov ebx, dword [eax + 0x68]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x7b71c0]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0053cda0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x5734ac
test edx, edx
jne 0x57344d
mov eax, dword [esp + 0x78]
lea ecx, [eax + 0x60]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd4]
mov dword [esp + 4], ecx
call fcn.005584b0
mov eax, dword [esp + 0x78]
lea ecx, [eax + 0xdc]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd0]
mov dword [esp + 4], ecx
call fcn.005584b0
mov eax, dword [esp + 0x284]
lea esi, [eax + 0x74]
mov ecx, dword [esp + 0x78]
lea edi, [ecx + 0x158]
mov edx, dword [0xb91180]
lea ebx, [eax + 0x88]
lea ebp, [ecx + 0x16c]
test edx, edx
jne 0x5733f9
call fcn.0044f6ae
mov edi, ebp
mov esi, ebx
call fcn.0044f6ae
mov ecx, dword [eax + 0x12c]
mov edx, dword [eax + 0x130]
test edx, edx
jle 0x571e88
mov dword [esp + 0x70], edx
lea ebx, [esp + 4]
mov dword [esp + 0xcc], ebx
mov ebp, dword [esp + 0x78]
xor eax, eax
jmp 0x571cf5
mov eax, dword [esp + 0xc8]
add eax, 0x1c
mov edx, dword [esp + 0x78]
mov edx, edi
mov ebx, esi
mov ebp, dword [esp + 0x78]
mov ebx, ecx
mov ecx, eax
mov eax, ebx
mov ebx, esi
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x6c], eax
lea edi, [esp + 0xf4]
mov esi, ecx
call fcn.0044f69a
lea edi, [esp + 0xd8]
lea esi, [esp + 0xf4]
call fcn.0044f69a
mov ecx, dword [ebp + 0x18c]
mov esi, ebx
mov ebx, dword [ebp + 0x184]
mov edi, edx
mov edx, dword [ebp + 0x188]
lea ebp, [edx + 1]
cmp ebp, ecx
ja 0x573390
lea ecx, [edx + 1]
mov ebp, dword [esp + 0x78]
mov dword [ebp + 0x188], ecx
imul ecx, edx, 0x1c
add ecx, ebx
mov edx, dword [0xb91180]
test edx, edx
jne 0x57335b
mov edx, edi
mov edi, ecx
mov ebx, esi
lea esi, [esp + 0xd8]
call fcn.0044f69a
mov ecx, dword [esp + 0xd8]
mov esi, ebx
mov ebx, dword [esp + 0xdc]
mov edi, edx
mov edx, dword [esp + 0xe0]
cmp ebx, 4
jne 0x572f06
cmp dword [ecx], 2
jne 0x572f06
cmp dword [ecx + 4], 5
jne 0x572f06
cmp dword [ecx + 8], 0x1d
jne 0x572f06
mov ecx, dword [ecx + 0xc]
cmp ecx, 0x13
jg 0x57256d
cmp ecx, 0xf
jg 0x57223c
cmp ecx, 0xe
je 0x5720f4
cmp ecx, 0xf
je 0x571f3f
mov ecx, 1
movzx edx, byte [esp + 0xe4]
test dl, dl
je 0x571e7d
test cl, cl
je 0x571e7d
mov ecx, dword [ebp + 0x19c]
mov dword [esp + 0xc4], ecx
mov edx, dword [ebp + 0x1a0]
lea ebx, [edx + 1]
mov ebp, dword [ebp + 0x1a4]
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0xc0], ecx
cmp ebx, ebp
ja 0x571ec8
mov ebx, dword [esp + 0xc4]
lea ebp, [edx + 1]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 0x1a0], ebp
lea edx, [edx + edx*2]
mov ebp, dword [esp + 0x64]
mov dword [ebx + edx*4 + 4], ebp
mov ebp, dword [esp + 0x68]
mov dword [ebx + edx*4 + 8], ebp
mov ebp, dword [0xb91180]
lea ecx, [ebx + edx*4]
test ebp, ebp
jne 0x571eb0
mov ecx, dword [esp + 0xc0]
mov dword [ebx + edx*4], ecx
lea ecx, [eax + 1]
cmp ecx, edi
jl 0x571cd7
mov eax, dword [esp + 0x78]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], 0
mov dword [esp + 0x290], 0
add esp, 0x280
ret
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, dword [esp + 0xc0]
call fcn.0044f0d0
mov eax, ebx
mov edi, edx
jmp 0x571e7d
lea eax, [0x7cac00]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x1a4], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x571f32
mov dword [ebx + 0x19c], eax
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x70]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0xc0]
jmp 0x571e46
lea edi, [ebx + 0x19c]
call fcn.0044f0d0
jmp 0x571f13
lea eax, [0x7e6480]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0xbc], eax
nop
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x7c7aa0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0053cda0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x5720d4
test edx, edx
jne 0x572075
mov edx, dword [esp + 0xbc]
xor eax, eax
xor ecx, ecx
jmp 0x571fca
inc eax
mov edx, esi
mov ecx, ebx
cmp eax, 9
jge 0x572055
nop
mov ebx, dword [edx + 4]
mov ebp, dword [edx]
mov esi, edx
mov edx, dword [edx + 0xc]
test eax, eax
jge 0x572004
xor edx, edx
test edx, edx
je 0x571ffe
cmp eax, 0x20
sbb edx, edx
mov ebx, ecx
mov ecx, eax
mov ebp, 1
shl ebp, cl
and ebp, edx
or ebx, ebp
jmp 0x571fc5
mov ebx, ecx
mov ecx, eax
jmp 0x571fc5
cmp eax, edx
jge 0x571fe2
mov dword [esp + 0x4c], eax
mov edx, eax
sar eax, 0x1f
shr eax, 0x1d
mov edi, ebp
lea ebp, [edx + eax]
sar ebp, 3
mov eax, ebp
shl ebp, 3
sub edx, ebp
cmp eax, ebx
jae 0x5735ac
lea ebx, [edx - 7]
neg ebx
cmp ebx, 8
sbb ebp, ebp
mov edx, ebp
movzx ebp, byte [edi + eax]
mov eax, ecx
mov ecx, ebx
xchg ebp, eax
shr al, cl
xchg ebp, eax
and ebp, edx
xchg ebp, eax
movzx edx, al
xchg ebp, eax
and edx, 1
mov ecx, eax
mov eax, dword [esp + 0x4c]
jmp 0x571fe4
mov ebp, dword [esp + 0x78]
mov dword [ebp + 0x180], ecx
mov eax, dword [esp + 0x6c]
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x70]
xor ecx, ecx
jmp 0x571ddf
nop
lea eax, [0x7c34e0]
mov dword [esp], eax
call fcn.00409f80
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x28
mov eax, dword [0xb91180]
test eax, eax
jne 0x5720c7
lea eax, [0x827984]
mov dword [edi], eax
mov dword [esp + 0x288], 0
lea eax, [0x8b3870]
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], edi
add esp, 0x280
ret
lea eax, [0x827984]
call fcn.0044f0d0
jmp 0x5720a1
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
lea eax, [0x7924c0]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0xb8], eax
nop
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x77f0a0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0053cda0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x57221c
test edx, edx
jne 0x5721bd
mov ecx, dword [esp + 0xb8]
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 0x1d0], ebx
mov dword [ecx + 0x1d4], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x5721b0
mov dword [ecx + 0x1cc], eax
mov eax, dword [esp + 0x6c]
mov ebp, ecx
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x70]
xor ecx, ecx
jmp 0x571ddf
lea edi, [ecx + 0x1cc]
call fcn.0044f0d0
jmp 0x572198
nop
lea eax, [0x7c34e0]
mov dword [esp], eax
call fcn.00409f80
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x26
mov eax, dword [0xb91180]
test eax, eax
jne 0x57220f
lea eax, [0x826ad9]
mov dword [edi], eax
mov dword [esp + 0x288], 0
lea eax, [0x8b3870]
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], edi
add esp, 0x280
ret
lea eax, [0x826ad9]
call fcn.0044f0d0
jmp 0x5721e9
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
cmp ecx, 0x11
je 0x572387
cmp ecx, 0x13
jne 0x571dda
lea eax, [0x7cd6c0]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0xb4], eax
nop
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x7803a0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0053cda0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
test edx, edx
jne 0x572367
test ecx, ecx
jne 0x572308
mov ebp, dword [esp + 0x78]
mov byte [ebp + 0x1c0], 1
mov edx, dword [esp + 0xb4]
movzx ebx, byte [edx]
mov byte [ebp + 0x1c1], bl
mov edx, dword [edx + 4]
mov dword [ebp + 0x1c4], edx
test edx, edx
sete dl
mov byte [ebp + 0x1c8], dl
mov eax, dword [esp + 0x6c]
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x70]
xor ecx, ecx
jmp 0x571ddf
nop
lea eax, [0x7c34e0]
mov dword [esp], eax
call fcn.00409f80
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x30
mov eax, dword [0xb91180]
test eax, eax
jne 0x57235a
lea eax, [0x82b029]
mov dword [edi], eax
mov dword [esp + 0x288], 0
lea eax, [0x8b3870]
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], edi
add esp, 0x280
ret
lea eax, [0x82b029]
call fcn.0044f0d0
jmp 0x572334
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], edx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0xf0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.005710b0
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x34]
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0x30]
mov dword [esp + 0xb0], ebx
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0x60], ebp
mov esi, dword [esp + 0x28]
mov dword [esp + 0x5c], esi
mov edi, dword [esp + 0x24]
mov dword [esp + 0xac], edi
mov eax, dword [esp + 0x20]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x40]
mov dword [esp + 0x7c], esi
mov esi, dword [esp + 0x78]
mov dword [esi + 0x200], edi
mov dword [esi + 0x204], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x572557
mov dword [esi + 0x1fc], ebp
mov dword [esi + 0x20c], ebx
mov dword [esi + 0x210], eax
mov edx, dword [0xb91180]
test edx, edx
jne 0x572545
mov dword [esi + 0x208], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esi + 0x218], ecx
mov ecx, dword [esp + 0x60]
mov dword [esi + 0x21c], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x57252e
mov ecx, dword [esp + 0xac]
mov dword [esi + 0x214], ecx
mov ecx, dword [esp + 0x64]
mov dword [esi + 0x224], ecx
mov edx, dword [esp + 0x68]
mov dword [esi + 0x228], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x572517
mov edx, dword [esp + 0xb0]
mov dword [esi + 0x220], edx
mov edx, dword [esp + 0x54]
test edx, edx
jne 0x5724f3
mov edx, dword [esi + 0x200]
test edx, edx
jne 0x5724ef
mov edx, dword [esi + 0x20c]
test edx, edx
jne 0x5724ef
mov edx, dword [esi + 0x218]
test edx, edx
jne 0x5724ef
test ecx, ecx
jne 0x5724ef
mov eax, 1
mov ebp, esi
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x70]
mov ecx, eax
mov eax, dword [esp + 0x6c]
jmp 0x571ddf
xor eax, eax
jmp 0x5724d7
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], edx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x290], eax
add esp, 0x280
ret
lea edi, [esi + 0x220]
mov eax, dword [esp + 0xb0]
call fcn.0044f0d0
jmp 0x5724a8
lea edi, [esi + 0x214]
mov eax, dword [esp + 0xac]
call fcn.0044f0d0
jmp 0x57247d
lea edi, [esi + 0x208]
mov eax, ecx
call fcn.0044f0d0
jmp 0x57244e
lea edi, [esi + 0x1fc]
mov edx, eax
mov eax, ebp
call fcn.0044f0d0
mov eax, edx
jmp 0x57242e
cmp ecx, 0x1f
jg 0x5728c7
cmp ecx, 0x1e
je 0x572866
cmp ecx, 0x1f
jne 0x571dda
lea eax, [0x78f6c0]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0xa8], eax
nop
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x77eba0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0053cda0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x572846
test edx, edx
jne 0x5727e7
mov ecx, dword [esp + 0xa8]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
test edx, edx
jle 0x572668
mov dword [esp + 0x68], edx
xor eax, eax
jmp 0x572627
mov ebx, dword [esp + 0xa4]
add ebx, 0x4c
mov eax, ecx
mov ecx, ebx
mov dword [esp + 0xa4], ecx
lea edi, [esp + 0x234]
mov esi, ecx
call fcn.0044f622
lea edi, [esp + 0x1e8]
lea esi, [esp + 0x234]
call fcn.0044f622
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x1ec]
test ebx, ebx
jne 0x572682
lea ecx, [eax + 1]
cmp ecx, edx
jl 0x572619
mov eax, dword [esp + 0x6c]
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x70]
xor ecx, ecx
jmp 0x571ddf
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], ebx
xor ebp, ebp
jmp 0x57269e
mov ebp, dword [esp + 0xa0]
add ebp, 0x24
mov esi, ecx
mov ecx, ebp
mov ebp, esi
mov dword [esp + 0xa0], ecx
lea edi, [esp + 0x134]
mov esi, ecx
call fcn.0044f686
lea edi, [esp + 0x110]
lea esi, [esp + 0x134]
call fcn.0044f686
cmp dword [esp + 0x114], 6
je 0x5726d9
lea ecx, [ebp + 1]
cmp ecx, ebx
jl 0x57268e
jmp 0x572661
mov dword [esp + 0x5c], ebp
mov dword [esp], 0
mov eax, dword [esp + 0x124]
mov ecx, dword [esp + 0x120]
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0043dd50
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x290]
mov edx, dword [eax + 0x298]
mov ebx, dword [eax + 0x294]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
cmp ebp, edx
ja 0x572773
lea edx, [ebx + 1]
mov dword [eax + 0x294], edx
lea edx, [ecx + ebx*8 + 4]
mov dword [edx], esi
mov edx, dword [0xb91180]
lea ecx, [ecx + ebx*8]
test edx, edx
jne 0x572762
mov dword [ecx], edi
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x5c]
jmp 0x5726d0
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.0044f0d0
mov eax, ebx
jmp 0x57274d
mov dword [esp + 0x58], esi
mov dword [esp + 0x9c], edi
lea eax, [0x7abe80]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x298], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x5727da
mov dword [ebx + 0x290], eax
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0x9c]
mov ebx, ecx
mov ecx, eax
mov eax, dword [esp + 0x78]
jmp 0x57272f
lea edi, [ebx + 0x290]
call fcn.0044f0d0
jmp 0x5727c2
nop
lea eax, [0x7c34e0]
mov dword [esp], eax
call fcn.00409f80
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x36
mov eax, dword [0xb91180]
test eax, eax
jne 0x572839
lea eax, [0x82d243]
mov dword [edi], eax
mov dword [esp + 0x288], 0
lea eax, [0x8b3870]
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], edi
add esp, 0x280
ret
lea eax, [0x82d243]
call fcn.0044f0d0
jmp 0x572813
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp], ebp
mov edi, esi
lea esi, [esp + 0xd8]
call fcn.0044f69a
call fcn.00571260
movzx eax, byte [esp + 0x20]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
test edx, edx
jne 0x5728a7
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x70]
mov ecx, eax
mov eax, dword [esp + 0x6c]
jmp 0x571ddf
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], edx
mov dword [esp + 0x290], ecx
add esp, 0x280
ret
cmp ecx, 0x20
je 0x572d09
cmp ecx, 0x23
je 0x572bc1
cmp ecx, 0x25
jne 0x571dda
lea eax, [0x78f840]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0x98], eax
nop
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x77ec20]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0053cda0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x572ba1
test edx, edx
jne 0x572b42
mov ecx, dword [esp + 0x98]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
test edx, edx
jg 0x572985
mov eax, dword [esp + 0x6c]
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x70]
xor ecx, ecx
jmp 0x571ddf
mov dword [esp + 0x68], edx
xor eax, eax
jmp 0x57299b
mov ebx, dword [esp + 0xc4]
add ebx, 0xc
mov eax, ecx
mov ecx, ebx
mov dword [esp + 0xc4], ecx
mov dword [esp + 0x64], eax
mov edx, dword [ecx + 8]
mov dword [esp + 0x48], edx
mov ebx, dword [ecx + 4]
mov dword [esp + 0x44], ebx
mov ebp, dword [ecx]
mov dword [esp + 0x74], ebp
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.0056f3b0
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp + 0x10]
test cl, cl
je 0x572a7d
mov ecx, dword [esp + 0x78]
mov edx, dword [ecx + 0x1ac]
mov ebx, dword [ecx + 0x1a8]
mov ebp, dword [ecx + 0x1b0]
mov esi, ecx
lea ecx, [edx + 1]
cmp ecx, ebp
ja 0x572a1c
lea ecx, [edx + 1]
mov dword [esi + 0x1ac], ecx
mov dword [ebx + edx*4], eax
mov ecx, dword [esp + 0x64]
inc ecx
mov edx, dword [esp + 0x68]
cmp ecx, edx
jl 0x57298d
jmp 0x57296b
mov dword [esp + 0x50], eax
lea eax, [0x7a7c00]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x1b0], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x572a70
mov dword [ebx + 0x1a8], eax
mov esi, ebx
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x50]
jmp 0x5729fa
lea edi, [ebx + 0x1a8]
call fcn.0044f0d0
jmp 0x572a64
mov ecx, dword [esp + 0x78]
mov edx, dword [ecx + 0x1bc]
mov ebx, dword [ecx + 0x1b8]
mov ebp, dword [ecx + 0x1b4]
mov eax, ecx
lea ecx, [ebx + 1]
cmp ecx, edx
ja 0x572ae4
lea ecx, [ebx + 1]
mov dword [eax + 0x1b8], ecx
lea ecx, [ebx + ebx*2]
mov edx, dword [esp + 0x44]
mov dword [ebp + ecx*4 + 4], edx
mov edx, dword [esp + 0x48]
mov dword [ebp + ecx*4 + 8], edx
mov edx, dword [0xb91180]
lea edi, [ebp + ecx*4]
test edx, edx
jne 0x572ad5
mov edx, dword [esp + 0x74]
mov dword [ebp + ecx*4], edx
mov esi, eax
jmp 0x572a06
mov ecx, eax
mov eax, dword [esp + 0x74]
call fcn.0044f0d0
mov eax, ecx
jmp 0x572ace
lea eax, [0x7cac00]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x1bc], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x572b35
mov dword [ebx + 0x1b4], eax
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x78]
jmp 0x572a9c
lea edi, [ebx + 0x1b4]
call fcn.0044f0d0
jmp 0x572b28
nop
lea eax, [0x7c34e0]
mov dword [esp], eax
call fcn.00409f80
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x30
mov eax, dword [0xb91180]
test eax, eax
jne 0x572b94
lea eax, [0x82b059]
mov dword [edi], eax
mov dword [esp + 0x288], 0
lea eax, [0x8b3870]
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], edi
add esp, 0x280
ret
lea eax, [0x82b059]
call fcn.0044f0d0
jmp 0x572b6e
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
lea eax, [0x7c3360]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0x94], eax
nop
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x780320]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0053cda0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
test edx, edx
jne 0x572ce9
test ecx, ecx
jne 0x572c8a
mov ecx, dword [esp + 0x94]
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 0x1dc], ebx
mov dword [ecx + 0x1e0], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x572c7d
mov dword [ecx + 0x1d8], eax
mov eax, dword [esp + 0x6c]
mov ebp, ecx
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x70]
xor ecx, ecx
jmp 0x571ddf
lea edi, [ecx + 0x1d8]
call fcn.0044f0d0
jmp 0x572c65
nop
lea eax, [0x7c34e0]
mov dword [esp], eax
call fcn.00409f80
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x30
mov eax, dword [0xb91180]
test eax, eax
jne 0x572cdc
lea eax, [0x82b089]
mov dword [edi], eax
mov dword [esp + 0x288], 0
lea eax, [0x8b3870]
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], edi
add esp, 0x280
ret
lea eax, [0x82b089]
call fcn.0044f0d0
jmp 0x572cb6
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], edx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
lea eax, [0x78f740]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0x90], eax
nop
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x77ebe0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0053cda0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
test edx, edx
jne 0x572ee6
test ecx, ecx
jne 0x572e87
mov eax, dword [esp + 0x90]
mov ecx, dword [eax + 4]
mov dword [esp + 0x68], ecx
lea edx, [0x7cac00]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0043a890
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x78]
mov dword [edx + 0x2a0], ecx
mov dword [edx + 0x2a4], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x572e77
mov dword [edx + 0x29c], eax
mov ecx, dword [esp + 0x90]
mov ebx, dword [ecx + 4]
mov ecx, dword [ecx]
test ebx, ebx
jle 0x572e45
xor eax, eax
jmp 0x572df5
lea ebp, [edi + 0xc]
mov eax, dword [esp + 0x78]
mov edx, eax
mov ebx, esi
mov eax, ecx
mov ecx, ebp
mov ebp, dword [ecx]
mov dword [esp + 0xc0], ebp
mov esi, ebx
mov ebx, dword [ecx + 8]
mov edi, ecx
mov ecx, dword [ecx + 4]
mov ebp, dword [edx + 0x29c]
cmp dword [edx + 0x2a0], eax
jbe 0x5735a5
lea edx, [eax + eax*2]
mov dword [ebp + edx*4 + 4], ecx
mov dword [ebp + edx*4 + 8], ebx
mov ecx, dword [0xb91180]
lea ebx, [ebp + edx*4]
test ecx, ecx
jne 0x572e5f
mov ecx, dword [esp + 0xc0]
mov dword [ebp + edx*4], ecx
lea ecx, [eax + 1]
cmp ecx, esi
jl 0x572de6
mov eax, dword [esp + 0x6c]
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x70]
xor ecx, ecx
jmp 0x571ddf
mov ecx, edi
mov edi, ebx
mov edx, eax
mov eax, dword [esp + 0xc0]
call fcn.0044f0d0
mov eax, edx
mov edi, ecx
jmp 0x572e3e
lea edi, [edx + 0x29c]
call fcn.0044f0d0
jmp 0x572dd2
nop
lea eax, [0x7c34e0]
mov dword [esp], eax
call fcn.00409f80
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x34
mov eax, dword [0xb91180]
test eax, eax
jne 0x572ed9
lea eax, [0x82c5ea]
mov dword [edi], eax
mov dword [esp + 0x288], 0
lea eax, [0x8b3870]
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], edi
add esp, 0x280
ret
lea eax, [0x82c5ea]
call fcn.0044f0d0
jmp 0x572eb3
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], edx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov eax, dword [0xb771b0]
mov ecx, dword [0xb771b4]
mov edx, dword [0xb771b8]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00538160
movzx eax, byte [esp + 0x18]
test al, al
jne 0x572f5c
mov eax, 1
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x70]
mov ecx, eax
mov eax, dword [esp + 0x6c]
jmp 0x571ddf
lea eax, [0x78f680]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
nop
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x77eb60]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0053cda0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x57333b
test edx, edx
jne 0x5732dc
mov ecx, dword [esp + 0x8c]
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
test ecx, ecx
jle 0x57302a
mov dword [esp + 0x68], ecx
xor eax, eax
jmp 0x572ff4
add edx, 0x30
mov eax, ecx
mov ecx, ebx
lea edi, [esp + 0x188]
mov esi, edx
call fcn.0044f668
lea edi, [esp + 0x158]
lea esi, [esp + 0x188]
call fcn.0044f668
cmp dword [esp + 0x168], 6
je 0x573031
lea ecx, [eax + 1]
mov ebx, dword [esp + 0x68]
cmp ecx, ebx
jl 0x572fed
xor eax, eax
jmp 0x572f42
mov dword [esp + 0x88], edx
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x160]
mov ecx, dword [esp + 0x15c]
mov edx, dword [esp + 0x158]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [0xb771a4]
mov ecx, dword [str.VirtualProtect]
mov edx, dword [0xb771a8]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00538160
movzx eax, byte [esp + 0x18]
test al, al
je 0x573191
mov dword [esp], 0
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x174]
mov edx, dword [esp + 0x170]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0043dd50
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x1ec]
mov edx, dword [eax + 0x1e8]
mov ebx, dword [eax + 0x1e4]
lea ebp, [edx + 1]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
cmp ebp, ecx
ja 0x57311d
lea ecx, [edx + 1]
mov dword [eax + 0x1e8], ecx
lea ecx, [ebx + edx*8 + 4]
mov dword [ecx], esi
mov ecx, dword [0xb91180]
lea edx, [ebx + edx*8]
test ecx, ecx
jne 0x57310c
mov dword [edx], edi
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x88]
jmp 0x57301f
mov ecx, edi
mov edi, edx
mov ebx, eax
mov eax, ecx
call fcn.0044f0d0
mov eax, ebx
jmp 0x5730fc
mov dword [esp + 0x60], esi
mov dword [esp + 0x9c], edi
lea eax, [0x7abe80]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x1ec], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x573184
mov dword [ebx + 0x1e4], eax
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x9c]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x78]
jmp 0x5730de
lea edi, [ebx + 0x1e4]
call fcn.0044f0d0
jmp 0x57316c
mov eax, dword [esp + 0x160]
mov ecx, dword [esp + 0x15c]
mov edx, dword [esp + 0x158]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [0xb77194]
mov ecx, dword [0xb77198]
mov edx, dword [0xb77190]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
call fcn.00538160
movzx eax, byte [esp + 0x18]
test al, al
jne 0x5731e6
mov eax, dword [esp + 0x78]
jmp 0x5730fc
mov dword [esp], 0
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x174]
mov edx, dword [esp + 0x170]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0043dd50
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x1f4]
mov edx, dword [eax + 0x1f0]
mov ebx, dword [eax + 0x1f8]
lea ebp, [ecx + 1]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
cmp ebp, ebx
ja 0x57326c
lea ebx, [ecx + 1]
mov dword [eax + 0x1f4], ebx
lea ebx, [edx + ecx*8 + 4]
mov dword [ebx], esi
lea ecx, [edx + ecx*8]
mov edx, dword [0xb91180]
test edx, edx
jne 0x573258
mov dword [ecx], edi
jmp 0x5731dd
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.0044f0d0
mov eax, ebx
jmp 0x5731dd
mov dword [esp + 0x60], esi
mov dword [esp + 0x9c], edi
lea eax, [0x7abe80]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x1f8], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x5732cf
mov dword [ebx + 0x1f0], eax
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x9c]
mov edx, eax
mov eax, ebx
jmp 0x573238
lea edi, [ebx + 0x1f0]
call fcn.0044f0d0
jmp 0x5732bb
nop
lea eax, [0x7c34e0]
mov dword [esp], eax
call fcn.00409f80
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x35
mov eax, dword [0xb91180]
test eax, eax
jne 0x57332e
lea eax, [0x82caac]
mov dword [edi], eax
mov dword [esp + 0x288], 0
lea eax, [0x8b3870]
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], edi
add esp, 0x280
ret
lea eax, [0x82caac]
call fcn.0044f0d0
jmp 0x573308
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
lea eax, [0x7daae0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0xd8]
mov dword [esp + 8], eax
call fcn.004101b0
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0x78]
jmp 0x571d74
lea eax, [0x7daae0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x18c], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x5733ec
mov dword [ebx + 0x184], eax
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x70]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x6c]
jmp 0x571d42
lea edi, [ebx + 0x184]
call fcn.0044f0d0
jmp 0x5733d4
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], ebp
lea eax, [0x8101a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.004101b0
lea eax, [0x8101a0]
mov dword [esp], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 8], eax
call fcn.004101b0
mov eax, dword [esp + 0x284]
jmp 0x571cac
nop
lea eax, [0x7c34e0]
mov dword [esp], eax
call fcn.00409f80
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x27
mov eax, dword [0xb91180]
test eax, eax
jne 0x57349f
lea eax, [0x827117]
mov dword [edi], eax
mov dword [esp + 0x288], 0
lea eax, [0x8b3870]
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], edi
add esp, 0x280
ret
lea eax, [0x827117]
call fcn.0044f0d0
jmp 0x573479
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
add esp, 0x280
ret
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], eax
mov dword [esp + 0x290], ecx
add esp, 0x280
ret
lea edi, [ebp + 0x5c]
call fcn.0044f0d0
jmp 0x571ae6
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], edx
mov dword [esp + 0x290], ebx
add esp, 0x280
ret
lea edi, [ebp + 0x54]
call fcn.0044f0d0
jmp 0x571abc
lea edi, [ebx + 0x3c]
mov eax, edx
call fcn.0044f0d0
jmp 0x571a13
lea ecx, [edi + 0x30]
mov edi, ecx
mov ebp, eax
mov eax, edx
call fcn.0044f0d0
mov eax, ebp
jmp 0x5719c0
lea ecx, [edi + 0x24]
mov ebx, edi
mov edi, ecx
mov ebp, eax
mov eax, edx
call fcn.0044f0d0
mov eax, ebp
mov edi, ebx
jmp 0x57199c
lea ecx, [edi + 0x18]
mov edx, edi
mov edi, ecx
mov ebp, eax
mov eax, ebx
call fcn.0044f0d0
mov eax, ebp
mov edi, edx
jmp 0x571973
lea ecx, [edi + 0xc]
mov edx, edi
mov edi, ecx
mov ebp, eax
mov eax, ebx
call fcn.0044f0d0
mov eax, ebp
mov edi, edx
jmp 0x57194a
mov ecx, eax
mov eax, ebx
call fcn.0044f0d0
mov eax, ecx
jmp 0x57192a
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.0044d880
jmp fcn.005718d0