Function at 0x5aebb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x5e951e
mov eax, dword fs:[0]
push eax
sub esp, 0x128
push ebx
push esi
push edi
mov eax, dword [0x72d630]
xor eax, esp
push eax
lea eax, [esp + 0x138]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x4c], ebx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
mov esi, dword [ebp + 0x14]
mov edi, dword [ebp + 0x18]
mov eax, dword [ebx + 0x14]
sub esi, dword [ebp + 0xc]
sub edi, dword [ebp + 0x10]
mov dword [esp + 0x64], ecx
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0x38], esi
mov dword [esp + 0x40], edi
test ecx, ecx
je 0x5af689
test esi, esi
jle 0x5af689
test edi, edi
jle 0x5af689
cmp ecx, 1
jne 0x5aec7e
test ecx, ecx
jle 0x5aec34
mov edx, dword [eax + 0x18]
mov ecx, dword [edx]
jmp 0x5aec36
xor ecx, ecx
call fcn.005ae290
mov esi, dword [esp + 0x64]
mov edi, dword [sym.imp.GDI32.dll_SetBkColor]
push eax
push esi
call edi
push 0
push 0
push 0
mov ebx, eax
lea eax, [ebp + 0xc]
push eax
push 2
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_ExtTextOutW]
push ebx
push esi
call edi
mov ecx, dword [esp + 0x138]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
fldz
sub esp, 0x10
fst qword [esp + 8]
lea ecx, [esp + 0xb4]
fstp qword [esp]
call fcn.005ae0d0
mov ecx, dword [0x7413f0]
push ecx
mov ecx, ebx
mov dword [esp + 0x144], 0
call fcn.005ac5a0
test eax, eax
je 0x5aecce
mov edx, dword [0x7413f0]
push edx
mov ecx, ebx
call fcn.005ac5a0
push eax
lea ecx, [esp + 0xa8]
call fcn.005ae100
fld1
sub esp, 0x10
fst qword [esp + 8]
lea ecx, [esp + 0x8c]
fstp qword [esp]
call fcn.005ae0d0
mov eax, dword [0x7413f4]
push eax
mov ecx, ebx
mov byte [esp + 0x144], 1
call fcn.005ac5a0
test eax, eax
je 0x5aed1a
mov ecx, dword [0x7413f4]
push ecx
mov ecx, ebx
call fcn.005ac5a0
push eax
lea ecx, [esp + 0x80]
call fcn.005ae100
fild dword [esp + 0x38]
fst qword [esp + 0x2c]
fld qword [esp + 0xbc]
fmul st(1)
fst qword [esp + 0xbc]
fild dword [esp + 0x40]
fst qword [esp + 0x24]
fld qword [esp + 0xc4]
fmul st(1)
fst qword [esp + 0xc4]
fxch st(3)
fmul qword [esp + 0x94]
fst qword [esp + 0x94]
fxch st(1)
fmul qword [esp + 0x9c]
fst qword [esp + 0x9c]
fucomp st(3)
fnstsw ax
fstp st(2)
test ah, 0x44
jp 0x5aed7c
mov ecx, 1
jmp 0x5aed7e
xor ecx, ecx
fucompp
mov dword [esp + 0x48], ecx
fnstsw ax
test ah, 0x44
jp 0x5aed92
mov eax, 1
jmp 0x5aed94
xor eax, eax
mov dword [esp + 0x3c], eax
test ecx, ecx
je 0x5aeda4
test eax, eax
jne 0x5af661
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x2c]
mov ecx, dword [eax + 0x30]
mov dword [esp + 0x6c], edx
mov edx, dword [eax + 0x34]
mov eax, dword [eax + 0x38]
mov dword [esp + 0x70], ecx
lea ecx, [esp + 0x6c]
mov dword [esp + 0x74], edx
push ecx
lea edx, [esp + 0x54]
push edx
mov dword [esp + 0x80], eax
call dword [sym.imp.USER32.dll_CopyRect]
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
test eax, eax
je 0x5aedf3
push 1
push 1
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.USER32.dll_InflateRect]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
neg eax
neg ecx
push eax
push ecx
lea ecx, [esp + 0x58]
push ecx
call dword [sym.imp.USER32.dll_OffsetRect]
xor eax, eax
lea edx, [esp + 0xcc]
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
push edx
lea eax, [esp + 0x54]
push eax
mov ecx, eax
push ecx
mov dword [esp + 0xe0], esi
mov dword [esp + 0xe4], edi
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x5af661
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x38]
lea edx, [esp + 0x60]
push edx
push eax
push ecx
push 0
call fcn.005487f0
mov edx, dword [ebx + 0x14]
mov esi, dword [edx + 0x1c]
mov dword [esp + 0x78], eax
xor ecx, ecx
mov eax, esi
mov edx, 0x20
mul edx
seto cl
mov dword [esp + 0x44], esi
neg ecx
or ecx, eax
push ecx
call sub.mfc90u.dll_new__
add esp, 0x14
xor edi, edi
mov dword [esp + 0x44], eax
test esi, esi
jle 0x5aeee7
mov esi, eax
inc esi
jmp 0x5aee98
mov ebx, dword [esp + 0x4c]
mov eax, dword [ebx + 0x14]
test edi, edi
jl 0x5aeeaf
cmp edi, dword [eax + 0x1c]
jge 0x5aeeaf
mov eax, dword [eax + 0x18]
mov ebx, dword [eax + edi*4]
lea eax, [eax + edi*4]
jmp 0x5aeeb1
xor ebx, ebx
mov ecx, ebx
call fcn.005ae290
mov ecx, eax
shr ecx, 8
mov byte [esi + 1], al
mov byte [esi], cl
shr eax, 0x10
mov ecx, ebx
mov byte [esi - 1], al
mov byte [esi + 2], 0
call fcn.005ae2b0
fstp qword [esi + 7]
mov dword [esi + 0x17], edi
inc edi
add esi, 0x20
cmp edi, dword [esp + 0x34]
jl 0x5aee94
mov esi, dword [esp + 0x34]
mov edi, dword [esp + 0x44]
push 0x5ae450
push 0x20
mov edx, esi
shl edx, 5
push esi
push edi
lea ebx, [edx + edi - 0x20]
call dword [sym.imp.MSVCR90.dll_qsort]
lea ecx, [edi + 0x20]
add esp, 0x10
mov dword [esp + 0x4c], ecx
cmp ecx, ebx
ja 0x5aef72
mov eax, ebx
sub eax, ecx
add eax, 0x20
cdq
and edx, 0x1f
add eax, edx
sar eax, 5
cmp eax, 4
jl 0x5aef5e
lea eax, [ebx - 0x60]
lea esp, [esp]
fld qword [ecx + 8]
sub ecx, 0xffffff80
cmp ecx, eax
fsub qword [ecx - 0x98]
fstp qword [ecx - 0x70]
fld qword [ecx - 0x58]
fsub qword [ecx - 0x78]
fstp qword [ecx - 0x50]
fld qword [ecx - 0x38]
fsub qword [ecx - 0x58]
fstp qword [ecx - 0x30]
fld qword [ecx - 0x18]
fsub qword [ecx - 0x38]
fstp qword [ecx - 0x10]
jle 0x5aef30
cmp ecx, ebx
ja 0x5aef72
fld qword [ecx + 8]
add ecx, 0x20
fsub qword [ecx - 0x38]
fstp qword [ecx - 0x10]
cmp ecx, ebx
jbe 0x5aef62
fld qword [esp + 0x24]
sub esp, 0x10
fld qword [0x6e2390]
lea ecx, [esp + 0xec]
fmul st(1), st(0)
fxch st(1)
fstp qword [esp + 8]
fmul qword [esp + 0x3c]
fstp qword [esp]
call fcn.005ae0d0
fld qword [esp + 0xbc]
fsub qword [esp + 0x94]
mov byte [esp + 0x140], 2
fld1
mov eax, 2
fld st(0)
test al, 1
je 0x5aefbf
fmul st(2)
shr eax, 1
je 0x5aefc9
fld st(2)
fmulp st(3)
jmp 0x5aefb9
fstp st(2)
mov eax, 2
fld qword [esp + 0xc4]
fsub qword [esp + 0x9c]
test al, 1
je 0x5aefe4
fmul st(1), st(0)
shr eax, 1
je 0x5aefec
fmul st(0), st(0)
jmp 0x5aefde
fstp st(0)
faddp st(1)
call sub.MSVCR90.dll__CIsqrt
fld qword [esp + 0x94]
cmp dword [esp + 0x3c], 0
fld qword [esp + 0xbc]
fsub st(1), st(0)
fxch st(1)
fdiv st(2)
fld qword [esp + 0x9c]
fld st(0)
fld qword [esp + 0xc4]
fsub st(1), st(0)
fxch st(1)
fdivrp st(5)
fld qword [esp + 0xfc]
fmul st(5)
fld qword [esp + 0xf4]
fld st(0)
fmul st(5)
faddp st(2)
fsubrp st(1)
fld st(5)
fmulp st(2)
fld st(3)
fmulp st(5)
fxch st(1)
faddp st(4)
fadd st(3), st(0)
fld st(4)
fmulp st(2)
fld st(2)
fmul qword [esp + 0x94]
faddp st(2)
fadd st(1), st(0)
fxch st(1)
fsub st(3)
fld1
fld st(0)
fdivrp st(2)
fld st(1)
fmulp st(4)
fld st(1)
fmulp st(6)
fxch st(5)
fst qword [esp + 0x6c]
fxch st(2)
fsubrp st(4)
fmulp st(3)
je 0x5af225
mov ecx, dword [esp + 0x40]
fstp st(1)
mov esi, dword [esp + 0x60]
mov eax, ecx
sub eax, dword [esp + 0x5c]
mov edx, eax
imul edx, dword [esp + 0x38]
lea edx, [esi + edx*4]
mov esi, eax
mov eax, ecx
sub eax, dword [esp + 0x54]
mov dword [esp + 0x3c], edx
cmp esi, eax
jge 0x5af108
fldz
mov edx, dword [esp + 0x44]
sub ecx, esi
mov dword [esp + 0x34], ecx
fild dword [esp + 0x34]
xor edi, edi
mov dword [esp + 0x48], edi
fmul st(2)
fadd st(3)
fcom qword [edx + 8]
fnstsw ax
test ah, 0x41
jp 0x5af10f
mov edi, dword [edx]
fstp st(0)
cmp dword [esp + 0x38], 0
jle 0x5af0f5
mov edx, dword [esp + 0x38]
mov ecx, edx
mov eax, edi
mov edi, dword [esp + 0x3c]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x3c]
lea edx, [ecx + edx*4]
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x40]
sub eax, dword [esp + 0x54]
dec dword [esp + 0x34]
inc esi
cmp esi, eax
jl 0x5af0b5
fstp st(2)
fstp st(1)
jmp 0x5af5d1
fcom qword [ebx + 8]
fnstsw ax
test ah, 1
jne 0x5af11d
mov edi, dword [ebx]
jmp 0x5af0cf
mov ecx, dword [esp + 0x4c]
cmp ecx, ebx
ja 0x5af0cf
fcom qword [ecx + 8]
fnstsw ax
test ah, 5
jp 0x5af13b
fld st(1)
fcomp qword [ecx + 0x10]
fnstsw ax
test ah, 0x44
jp 0x5af144
add ecx, 0x20
cmp ecx, ebx
jbe 0x5af125
jmp 0x5af0cf
fsubr qword [ecx + 8]
movzx eax, byte [ecx - 0x1e]
mov dword [esp + 0x2c], eax
movzx eax, byte [ecx + 2]
fdiv qword [ecx + 0x10]
fld st(4)
fsub st(1)
fild dword [esp + 0x2c]
mov dword [esp + 0x2c], eax
fmul st(2)
fild dword [esp + 0x2c]
fnstcw word [esp + 0x2c]
movzx eax, word [esp + 0x2c]
fmul st(2)
or eax, 0xc00
mov dword [esp + 0x24], eax
faddp st(1)
fldcw word [esp + 0x24]
fistp dword [esp + 0x24]
movzx eax, byte [esp + 0x24]
mov byte [esp + 0x4a], al
movzx eax, byte [ecx - 0x1f]
fldcw word [esp + 0x2c]
mov dword [esp + 0x24], eax
movzx eax, byte [ecx + 1]
fild dword [esp + 0x24]
fnstcw word [esp + 0x2c]
mov dword [esp + 0x24], eax
fmul st(2)
fild dword [esp + 0x24]
movzx eax, word [esp + 0x2c]
or eax, 0xc00
mov dword [esp + 0x24], eax
fmul st(2)
faddp st(1)
fldcw word [esp + 0x24]
fistp dword [esp + 0x24]
movzx eax, byte [esp + 0x24]
mov byte [esp + 0x49], al
movzx eax, byte [ecx]
fldcw word [esp + 0x2c]
movzx ecx, byte [ecx - 0x20]
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
fnstcw word [esp + 0x2c]
mov dword [esp + 0x24], ecx
fmulp st(1)
fild dword [esp + 0x24]
movzx eax, word [esp + 0x2c]
or eax, 0xc00
mov dword [esp + 0x24], eax
fmulp st(2)
faddp st(1)
fldcw word [esp + 0x24]
fistp dword [esp + 0x24]
movzx eax, byte [esp + 0x24]
mov byte [esp + 0x48], al
mov edi, dword [esp + 0x48]
fldcw word [esp + 0x2c]
jmp 0x5af0d1
cmp dword [esp + 0x48], 0
je 0x5af402
mov eax, dword [esp + 0x50]
fmul qword [esp + 0x24]
cmp eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x60]
faddp st(2)
lea edx, [ecx + eax*4]
mov esi, eax
mov dword [esp + 0x34], eax
jge 0x5af277
fldz
fild dword [esp + 0x34]
fmul st(2)
fadd st(3)
fcom qword [edi + 8]
fnstsw ax
test ah, 0x41
jp 0x5af2a3
mov eax, dword [edi]
mov dword [edx], eax
fstp st(0)
inc esi
add edx, 4
cmp esi, dword [esp + 0x58]
mov dword [esp + 0x34], esi
jl 0x5af24f
fstp st(2)
mov eax, dword [esp + 0x40]
fstp st(1)
mov ecx, dword [esp + 0x38]
fstp st(1)
sub ecx, dword [esp + 0x58]
fstp st(0)
sub eax, dword [esp + 0x5c]
lea esi, [edx + ecx*4]
cmp eax, 1
jge 0x5af3b7
mov edi, 1
jmp 0x5af3c7
fcom qword [ebx + 8]
fnstsw ax
test ah, 1
jne 0x5af2b3
mov ecx, dword [ebx]
mov dword [edx], ecx
jmp 0x5af265
mov ecx, dword [esp + 0x4c]
cmp ecx, ebx
ja 0x5af265
fcom qword [ecx + 8]
fnstsw ax
test ah, 5
jp 0x5af2d1
fld st(1)
fcomp qword [ecx + 0x10]
fnstsw ax
test ah, 0x44
jp 0x5af2da
add ecx, 0x20
cmp ecx, ebx
jbe 0x5af2bb
jmp 0x5af265
fsubr qword [ecx + 8]
movzx eax, byte [ecx - 0x1e]
mov dword [esp + 0x24], eax
fnstcw word [esp + 0x2c]
fdiv qword [ecx + 0x10]
movzx eax, byte [ecx + 2]
mov edi, dword [esp + 0x44]
fld st(4)
fsub st(1)
fild dword [esp + 0x24]
mov dword [esp + 0x24], eax
movzx eax, word [esp + 0x2c]
or eax, 0xc00
fmul st(2)
fild dword [esp + 0x24]
mov dword [esp + 0x24], eax
fmul st(2)
faddp st(1)
fldcw word [esp + 0x24]
fistp dword [esp + 0x24]
movzx eax, byte [esp + 0x24]
mov byte [edx + 2], al
movzx eax, byte [ecx - 0x1f]
fldcw word [esp + 0x2c]
mov dword [esp + 0x24], eax
movzx eax, byte [ecx + 1]
fild dword [esp + 0x24]
fnstcw word [esp + 0x2c]
mov dword [esp + 0x24], eax
fmul st(2)
fild dword [esp + 0x24]
movzx eax, word [esp + 0x2c]
or eax, 0xc00
mov dword [esp + 0x24], eax
fmul st(2)
faddp st(1)
fldcw word [esp + 0x24]
fistp dword [esp + 0x24]
movzx eax, byte [esp + 0x24]
mov byte [edx + 1], al
movzx eax, byte [ecx]
fldcw word [esp + 0x2c]
movzx ecx, byte [ecx - 0x20]
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
fnstcw word [esp + 0x2c]
mov dword [esp + 0x24], ecx
fmulp st(1)
fild dword [esp + 0x24]
movzx eax, word [esp + 0x2c]
or eax, 0xc00
mov dword [esp + 0x24], eax
fmulp st(2)
faddp st(1)
fldcw word [esp + 0x24]
fistp dword [esp + 0x24]
movzx eax, byte [esp + 0x24]
mov byte [edx], al
fldcw word [esp + 0x2c]
jmp 0x5af267
mov edi, eax
cmp edi, 1
jle 0x5af3c7
dec eax
imul eax, dword [esp + 0x38]
lea esi, [esi + eax*4]
mov edx, dword [esp + 0x40]
sub edx, dword [esp + 0x54]
cmp edi, edx
jge 0x5af5d5
mov ebx, dword [esp + 0x38]
add ebx, ebx
add ebx, ebx
mov eax, dword [esp + 0x60]
push ebx
push eax
push esi
call sub.MSVCR90.dll_memcpy
mov ecx, dword [esp + 0x4c]
sub ecx, dword [esp + 0x60]
inc edi
add esp, 0xc
add esi, ebx
cmp edi, ecx
jl 0x5af3df
jmp 0x5af5d5
mov ecx, dword [esp + 0x40]
mov esi, dword [esp + 0x60]
mov eax, ecx
sub eax, dword [esp + 0x5c]
mov edx, eax
imul edx, dword [esp + 0x38]
mov edi, eax
mov eax, ecx
sub eax, dword [esp + 0x54]
lea edx, [esi + edx*4]
cmp edi, eax
jge 0x5af5cd
mov eax, dword [esp + 0x50]
fldz
sub ecx, edi
mov dword [esp + 0x34], ecx
cmp eax, dword [esp + 0x58]
lea edx, [edx + eax*4]
mov esi, eax
mov dword [esp + 0x3c], eax
jge 0x5af5ab
fild dword [esp + 0x34]
fmul st(2)
fild dword [esp + 0x3c]
mov ecx, dword [esp + 0x44]
fmul st(4)
fadd st(1)
fadd st(5)
fcom qword [ecx + 8]
fnstsw ax
test ah, 0x41
jp 0x5af472
mov ecx, dword [ecx]
fstp st(0)
mov dword [edx], ecx
jmp 0x5af593
fcom qword [ebx + 8]
fnstsw ax
test ah, 1
jne 0x5af487
mov eax, dword [ebx]
fstp st(0)
mov dword [edx], eax
jmp 0x5af593
mov ecx, dword [esp + 0x4c]
cmp ecx, ebx
ja 0x5af4ac
fcom qword [ecx + 8]
fnstsw ax
test ah, 5
jp 0x5af4a5
fld st(2)
fcomp qword [ecx + 0x10]
fnstsw ax
test ah, 0x44
jp 0x5af4b3
add ecx, 0x20
cmp ecx, ebx
jbe 0x5af48f
fstp st(0)
jmp 0x5af593
fstp st(2)
movzx eax, byte [ecx - 0x1e]
fstp st(2)
mov dword [esp + 0x24], eax
fsubr qword [ecx + 8]
movzx eax, byte [ecx + 2]
fnstcw word [esp + 0x2c]
fdiv qword [ecx + 0x10]
fld st(4)
fsub st(1)
fild dword [esp + 0x24]
mov dword [esp + 0x24], eax
movzx eax, word [esp + 0x2c]
or eax, 0xc00
fmul st(2)
fild dword [esp + 0x24]
mov dword [esp + 0x24], eax
fmul st(2)
faddp st(1)
fldcw word [esp + 0x24]
fistp dword [esp + 0x24]
movzx eax, byte [esp + 0x24]
mov byte [edx + 2], al
movzx eax, byte [ecx - 0x1f]
fldcw word [esp + 0x2c]
mov dword [esp + 0x24], eax
movzx eax, byte [ecx + 1]
fild dword [esp + 0x24]
fnstcw word [esp + 0x2c]
mov dword [esp + 0x24], eax
fmul st(2)
fild dword [esp + 0x24]
movzx eax, word [esp + 0x2c]
or eax, 0xc00
mov dword [esp + 0x24], eax
fmul st(2)
faddp st(1)
fldcw word [esp + 0x24]
fistp dword [esp + 0x24]
movzx eax, byte [esp + 0x24]
mov byte [edx + 1], al
movzx eax, byte [ecx]
fldcw word [esp + 0x2c]
movzx ecx, byte [ecx - 0x20]
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
fnstcw word [esp + 0x2c]
mov dword [esp + 0x24], ecx
fmulp st(1)
fild dword [esp + 0x24]
movzx eax, word [esp + 0x2c]
or eax, 0xc00
mov dword [esp + 0x24], eax
fmulp st(2)
faddp st(1)
fldcw word [esp + 0x24]
fistp dword [esp + 0x24]
movzx eax, byte [esp + 0x24]
mov byte [edx], al
fldcw word [esp + 0x2c]
fldz
fld qword [esp + 0x6c]
fxch st(2)
inc esi
add edx, 4
cmp esi, dword [esp + 0x58]
mov dword [esp + 0x3c], esi
jl 0x5af44f
mov eax, dword [esp + 0x50]
fstp st(0)
mov ecx, dword [esp + 0x38]
sub ecx, dword [esp + 0x58]
dec dword [esp + 0x34]
lea edx, [edx + ecx*4]
mov ecx, dword [esp + 0x40]
sub ecx, dword [esp + 0x54]
inc edi
cmp edi, ecx
jl 0x5af436
fstp st(0)
fstp st(2)
fstp st(2)
fstp st(1)
fstp st(0)
mov edx, dword [esp + 0x64]
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
mov esi, eax
mov eax, dword [esp + 0x68]
push eax
push esi
call edi
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x5c]
push 0xcc0020
mov ebx, eax
mov eax, dword [esp + 0x58]
push eax
push ecx
sub edx, eax
push esi
push edx
mov edx, dword [esp + 0x6c]
sub edx, ecx
push edx
mov edx, dword [ebp + 0x10]
add edx, eax
mov eax, dword [ebp + 0xc]
push edx
add eax, ecx
mov ecx, dword [esp + 0x80]
push eax
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
push ebx
push esi
call edi
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov edx, dword [esp + 0x68]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [esp + 0x44]
push eax
call sub.mfc90u.dll_delete__
add esp, 4
lea ecx, [esp + 0xdc]
mov byte [esp + 0x140], 1
call fcn.005ab5f0
lea ecx, [esp + 0x7c]
mov byte [esp + 0x140], 0
call fcn.005ab5f0
lea ecx, [esp + 0xa4]
mov dword [esp + 0x140], 0xffffffff
call fcn.005ab5f0
mov ecx, dword [esp + 0x138]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14