Function at 0xae74c4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [ebp + 8]
push ebx
mov ebx, ecx
push esi
push edi
test eax, eax
je 0xae8ea1
mov esi, dword [eax + 0x18]
test esi, esi
je 0xae8ea1
mov eax, dword [esi]
mov eax, dword [eax + 0x10]
cmp eax, 0x3e8
jl 0xae8ea1
xor edi, edi
cmp eax, 0xa8c
jg 0xae8144
je 0xae80af
cmp eax, 0x708
jg 0xae7a90
je 0xae79ed
cmp eax, 0x578
jg 0xae7851
je 0xae77b5
cmp eax, 0x4b0
jg 0xae7705
je 0xae7672
sub eax, 0x3e8
je 0xae75cd
sub eax, 0x64
jne 0xae8e97
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push edi
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b0b194
jmp 0xae8e5d
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b5ac24
jmp 0xae8e5d
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b19ba4
jmp 0xae8e5d
cmp eax, 0x514
jne 0xae8e97
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b33794
jmp 0xae8e5d
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x44]
cmp dword [eax + 0x10], edi
setne al
movzx eax, al
push eax
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b26474
jmp 0xae8e5d
sub eax, 0x5dc
je 0xae7966
sub eax, 0x64
je 0xae78e5
sub eax, 0x64
jne 0xae8e97
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b10fe4
jmp 0xae8e5d
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00ad00d4
jmp 0xae8e5d
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b11944
jmp 0xae8e5d
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b3d114
jmp 0xae8e5d
cmp eax, 0x8fc
jg 0xae7dac
je 0xae7d11
cmp eax, 0x834
jg 0xae7c7f
je 0xae7bf6
sub eax, 0x76c
je 0xae7b4f
sub eax, 0x64
jne 0xae8e97
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b2adb4
jmp 0xae8e5d
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b24424
jmp 0xae8e5d
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00ad8144
jmp 0xae8e5d
cmp eax, 0x898
jne 0xae8e97
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b298b4
jmp 0xae8e5d
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b386a4
jmp 0xae8e5d
sub eax, 0x960
je 0xae800c
sub eax, 0x64
je 0xae7f09
sub eax, 0x64
jne 0xae8e97
mov eax, dword [esi + 0xb0]
push dword [eax + 0x10]
mov eax, dword [esi + 0xac]
push dword [eax + 0x10]
mov eax, dword [esi + 0xa8]
push dword [eax + 0x10]
mov eax, dword [esi + 0xa4]
push dword [eax + 0x10]
mov eax, dword [esi + 0xa0]
push dword [eax + 0x10]
mov eax, dword [esi + 0x9c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x98]
push dword [eax + 0x10]
mov eax, dword [esi + 0x94]
push dword [eax + 0x10]
mov eax, dword [esi + 0x90]
push dword [eax + 0x10]
mov eax, dword [esi + 0x8c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x88]
push dword [eax + 0x10]
mov eax, dword [esi + 0x84]
push dword [eax + 0x10]
mov eax, dword [esi + 0x80]
push dword [eax + 0x10]
mov eax, dword [esi + 0x7c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x78]
push dword [eax + 0x10]
mov eax, dword [esi + 0x74]
push dword [eax + 0x10]
mov eax, dword [esi + 0x70]
push dword [eax + 0x10]
mov eax, dword [esi + 0x6c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x68]
push dword [eax + 0x10]
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00adcf84
jmp 0xae8e5d
mov eax, dword [esi + 0x94]
push dword [eax + 0x10]
mov eax, dword [esi + 0x90]
push dword [eax + 0x10]
mov eax, dword [esi + 0x8c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x88]
push dword [eax + 0x10]
mov eax, dword [esi + 0x84]
push dword [eax + 0x10]
mov eax, dword [esi + 0x80]
push dword [eax + 0x10]
mov eax, dword [esi + 0x7c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x78]
push dword [eax + 0x10]
mov eax, dword [esi + 0x74]
push dword [eax + 0x10]
mov eax, dword [esi + 0x70]
push dword [eax + 0x10]
mov eax, dword [esi + 0x6c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x68]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00af37d4
jmp 0xae8e5d
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x54]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b30a04
jmp 0xae8e5d
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b47294
jmp 0xae8e5d
cmp eax, 0xe10
jg 0xae87fb
je 0xae8792
cmp eax, 0xc80
jg 0xae84e3
je 0xae8434
cmp eax, 0xbb8
jg 0xae8370
je 0xae82d3
sub eax, 0xaf0
je 0xae823e
sub eax, 0x64
jne 0xae8e97
mov eax, dword [esi + 0x6c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x68]
push dword [eax + 0x10]
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b0e784
jmp 0xae8e5d
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b12de4
jmp 0xae8e5d
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x44]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b40004
jmp 0xae8e5d
cmp eax, 0xc1c
jne 0xae8e97
mov eax, dword [esi + 0x70]
push dword [eax + 0x10]
mov eax, dword [esi + 0x6c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x68]
push dword [eax + 0x10]
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b4e104
jmp 0xae8e5d
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x48]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x44]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x40]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b570a4
jmp 0xae8e5d
sub eax, 0xce4
je 0xae869a
sub eax, 0x64
je 0xae85f3
sub eax, 0x64
jne 0xae8e97
mov eax, dword [esi + 0x8c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x88]
push dword [eax + 0x10]
mov eax, dword [esi + 0x84]
push dword [eax + 0x10]
mov eax, dword [esi + 0x80]
push dword [eax + 0x10]
mov eax, dword [esi + 0x7c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x78]
push dword [eax + 0x10]
mov eax, dword [esi + 0x74]
push dword [eax + 0x10]
mov eax, dword [esi + 0x70]
push dword [eax + 0x10]
mov eax, dword [esi + 0x6c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x68]
push dword [eax + 0x10]
mov eax, dword [esi + 0x64]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x60]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b2c3c4
jmp 0xae8e5d
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00ad9064
jmp 0xae8e5d
mov eax, dword [esi + 0x90]
push dword [eax + 0x10]
mov eax, dword [esi + 0x8c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x88]
push dword [eax + 0x10]
mov eax, dword [esi + 0x84]
push dword [eax + 0x10]
mov eax, dword [esi + 0x80]
push dword [eax + 0x10]
mov eax, dword [esi + 0x7c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x78]
push dword [eax + 0x10]
mov eax, dword [esi + 0x74]
push dword [eax + 0x10]
mov eax, dword [esi + 0x70]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x6c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x68]
push dword [eax + 0x10]
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00ad0da4
jmp 0xae8e5d
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b045f4
jmp 0xae8e5d
cmp eax, 0x1004
jg 0xae8baf
je 0xae8aa5
cmp eax, 0xf3c
jg 0xae89f9
je 0xae8983
sub eax, 0xe74
je 0xae88e6
sub eax, 0x64
jne 0xae8e97
mov eax, dword [esi + 0x6c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x68]
push dword [eax + 0x10]
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x54]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00ac4774
jmp 0xae8e5d
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b5ed54
jmp 0xae8e5d
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
cmp dword [eax + 0x10], edi
setne al
movzx eax, al
push eax
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b5fe94
jmp 0xae8e5d
cmp eax, 0xfa0
jne 0xae8e97
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
push dword [eax + 0x10]
mov eax, dword [esi + 0x54]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00b27764
jmp 0xae8e5d
mov eax, dword [esi + 0x98]
push dword [eax + 0x10]
mov eax, dword [esi + 0x94]
push dword [eax + 0x10]
mov eax, dword [esi + 0x90]
push dword [eax + 0x10]
mov eax, dword [esi + 0x8c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x88]
push dword [eax + 0x10]
mov eax, dword [esi + 0x84]
push dword [eax + 0x10]
mov eax, dword [esi + 0x80]
push dword [eax + 0x10]
mov eax, dword [esi + 0x7c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x78]
push dword [eax + 0x10]
mov eax, dword [esi + 0x74]
push dword [eax + 0x10]
mov eax, dword [esi + 0x70]
push dword [eax + 0x10]
mov eax, dword [esi + 0x6c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x68]
push dword [eax + 0x10]
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00accf74
jmp 0xae8e5d
sub eax, 0x1068
je 0xae8d6a
sub eax, 0x64
je 0xae8c37
sub eax, 0x64
jne 0xae8e97
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00af1854
jmp 0xae8e5d
mov eax, dword [esi + 0xa4]
push dword [eax + 0x10]
mov eax, dword [esi + 0xa0]
push dword [eax + 0x10]
mov eax, dword [esi + 0x9c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x98]
push dword [eax + 0x10]
mov eax, dword [esi + 0x94]
cmp dword [eax + 0x10], edi
setne al
movzx eax, al
push eax
mov eax, dword [esi + 0x90]
push dword [eax + 0x10]
mov eax, dword [esi + 0x8c]
cmp dword [eax + 0x10], edi
setne al
movzx eax, al
push eax
mov eax, dword [esi + 0x88]
push dword [eax + 0x10]
mov eax, dword [esi + 0x84]
push dword [eax + 0x10]
mov eax, dword [esi + 0x80]
push dword [eax + 0x10]
mov eax, dword [esi + 0x7c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x78]
push dword [eax + 0x10]
mov eax, dword [esi + 0x74]
push dword [eax + 0x10]
mov eax, dword [esi + 0x70]
push dword [eax + 0x10]
mov eax, dword [esi + 0x6c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x68]
push dword [eax + 0x10]
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00ad53c4
jmp 0xae8e5d
mov eax, dword [esi + 0x90]
push dword [eax + 0x10]
mov eax, dword [esi + 0x8c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x88]
push dword [eax + 0x10]
mov eax, dword [esi + 0x84]
push dword [eax + 0x10]
mov eax, dword [esi + 0x80]
push dword [eax + 0x10]
mov eax, dword [esi + 0x7c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x78]
push dword [eax + 0x10]
mov eax, dword [esi + 0x74]
push dword [eax + 0x10]
mov eax, dword [esi + 0x70]
push dword [eax + 0x10]
mov eax, dword [esi + 0x6c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x68]
push dword [eax + 0x10]
mov eax, dword [esi + 0x64]
push dword [eax + 0x10]
mov eax, dword [esi + 0x60]
push dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x58]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x54]
push dword [eax + 0x10]
mov eax, dword [esi + 0x50]
push dword [eax + 0x10]
mov eax, dword [esi + 0x4c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x48]
push dword [eax + 0x10]
mov eax, dword [esi + 0x44]
push dword [eax + 0x10]
mov eax, dword [esi + 0x40]
push dword [eax + 0x10]
mov eax, dword [esi + 0x3c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x38]
push dword [eax + 0x10]
mov eax, dword [esi + 0x34]
push dword [eax + 0x10]
mov eax, dword [esi + 0x30]
push dword [eax + 0x10]
mov eax, dword [esi + 0x2c]
push dword [eax + 0x10]
mov eax, dword [esi + 0x28]
push dword [eax + 0x10]
mov eax, dword [esi + 0x24]
push dword [eax + 0x10]
mov eax, dword [esi + 0x20]
push dword [eax + 0x10]
mov eax, dword [esi + 0x1c]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x18]
movzx eax, byte [eax + 0x10]
push eax
mov eax, dword [esi + 0x14]
push 0
push dword [ebp + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 0x10]
push dword [eax + 0x10]
mov eax, dword [esi + 0xc]
push dword [eax + 0x10]
mov eax, dword [esi + 8]
push dword [eax + 0x10]
push edx
push ebx
call fcn.00aeb564
mov edi, eax
test edi, edi
je 0xae8e97
test ebx, ebx
je 0xae8e97
cmp dword [ebx + 0x24], 0x514
jne 0xae8e97
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x18]
mov eax, dword [ecx + 4]
mov edx, dword [eax + 0x10]
test edx, edx
je 0xae8e97
mov eax, dword [ecx + 0xc]
push dword [eax + 0x10]
mov eax, dword [ecx + 8]
push dword [eax + 0x10]
lea eax, [edx - 1]
push edi
push eax
push ebx
call fcn.00b354d4
mov eax, edi
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 8
pop edi
pop esi
xor eax, eax
pop ebx
pop ecx
pop ebp
ret 8