Function at 0x505ae0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x158]
cmp eax, dword [ecx + 8]
jbe 0x506c65
sub esp, 0x1d8
mov eax, 0
mov dword [esp + 0x1d4], eax
mov byte [esp + 0x27], 0
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
lea eax, [0x506e60]
mov dword [esp + 0xf0], eax
lea eax, [esp + 0xe8]
mov dword [esp + 0xf4], eax
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
lea eax, [0x506e20]
mov dword [esp + 0x100], eax
lea eax, [esp + 0xf0]
mov dword [esp + 0x104], eax
lea eax, [esp + 0x34]
mov dword [esp + 0x108], eax
lea eax, [esp + 0x100]
mov dword [esp + 0x1d4], eax
mov byte [esp + 0x27], 1
call fcn.005058e0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], ecx
test edx, edx
jne 0x505f5c
call fcn.00507420
mov eax, dword [esp]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x4c], edx
call fcn.004efab0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp]
test eax, eax
je 0x505c1c
xor edx, edx
xor ebx, ebx
jmp 0x505c26
mov ebx, dword [edx + 0x10]
mov edx, dword [edx + 0x14]
xor eax, eax
xor ecx, ecx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0x2c], edx
test eax, eax
je 0x505c7d
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
je 0x505c50
mov eax, dword [eax + 4]
mov dword [esp + 0xf8], eax
mov dword [esp + 0xfc], ecx
lea eax, [esp + 0xf8]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004be9a0
call fcn.00507600
mov eax, dword [esp]
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x64], ecx
call fcn.004f0aa0
mov eax, dword [esp]
mov dword [esp + 0xe0], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0xcc]
mov dword [esp], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], edx
call fcn.004d5210
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x5c], ecx
lea edi, [esp + 0x19c]
mov edx, eax
xor eax, eax
call fcn.00464772
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0x19c], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x1a0], ecx
lea ecx, str.______._0456:_CMSUZ__n___hms____P__________n____._C_c0s2553:_____CcCfCoCsLlLmLoLtLuMcMeMnNdNlNoPcPdPePfPiPoPsScSkSmSoYiZlZpZs____n_n__t____:____ni_idipmsnnss_us01_n__G__M__P___n____________m_n_:_0001030405060708091011121314_01_02_03_04_05_06_08_09_11_12...125625::1:____ADTASTAUXBSTCATCDTCETCONCSTDltEATEDTEETEOFESTGMTHDTHSTHanIDTISTJSTKSTLaoMD4MD5MDTMSKMSTMayMroNDTNSTNULNaNNkoPCPDTPKTPRNPSTStdTTLUTCVaiWAT__:_nadxaesavxcgocmddirdnsendfinfmaftpgc_gp_in_intip4ip6mapnilobjpcptrsetsshtcpudpss____r_t_n_at__fp_is__lr:_of__on__pc_sp:_sp_____mInf_Inf.bat.cmd.com.exe3125:_p::_0ACDTACSTAEDTAESTAKDTAKSTAWSTAhomCESTCOM1COM2COM3COM4COM5COM6COM7COM8COM9ChamDashEESTGOGCJulyJuneLEAFLPT1LPT2LPT3LPT4LPT5LPT6LPT7LPT8LPT9LisuMiaoModiNZDTNZSTNameNewaSASTStatThaiType_n_tm_____nallgallpavx2basebindbitsbmi1bmi2boolcallcas1cas2cas3cas4cas5cas6chandeaddialermsfileftpsfunchttpicmpidleigmpint8itabkindmdnsopenpathpipepop3quitreadrootsbrksmtpsse3tcp4tcp6trueudp4uintunix_..._n_MB___and__got_max_ms___ptr__tab_top_s:_d033004300530054506300845103012451345__fp:_09301562578125::_96_nil_AdlamAprilBamumBatakBuhidClassDograErrorGreekKhmerLatinLimbuLocalLstatMarchNushuOghamOriyaOsageRunicSHA_1STermTakriTamilTypeA____arraychdirchmodclosedeferfalsefaultfilesgFreegcinggscanhchanhostshttpsimap2imap3imapsinit_int16int32int64mheapmkdirntohspanicpop3sscav_schedsleepslicesse41sse42ssse3sudogsweeptraceuint8usagewrite_B_____Value_addr_alloc_base__code_ctxt:_curg_free__goid__jobs_list_m__p_max__min__next_p__m_prev_span__util_...__n__i____not___val_.local.onion390625__chanAnswerArabicAugustBrahmiCarianChakmaCommonCopticFormatFridayGetACPGothicHangulHatranHebrewHyphenKaithiKhojkiLengthLepchaLycianLydianMondayRejangSCHED_StringSundaySyriacTai_LeTangutTeluguThaanaTypeMXTypeNSUTC12UTC13UTC_02UTC_08UTC_09UTC_11WanchoYezidi__bytechan__domainefenceexec:_gopherhangupheaderinternipnetkilledlistennetdnsobjectpopcntrdtscpremovereturnselectsendtosocketstringstructsweep_sysmontelnettimersuint16uint32uint64__scan___scan__MB_in__Value__allocs_dying_locks_m__g0_nmsys_pad1__pad2__snil_n_text__zombie__CPU____goid__j0__19531259765625:_type_::1_128AvestanBengaliBrailleChanDirCopySidCypriotDeseretElbasanElymaicFreeSidGODEBUGGranthaHanunooIO_waitJanuaryKannadaMUI_DltMUI_StdMakasarMandaicMarchenMultaniMyanmarOS_NameOctoberOsmanyaPATHEXTRadicalSHA_224SHA_256SHA_384SHA_512SharadaShavianSiddhamSinhalaSleepExSogdianSoyomboSwapperTagalogTibetanTirhutaTuesdayTypeALLTypeOPTTypePTRTypeSOATypeSRVTypeTXTTypeWKSUNKNOWNWSARecvWSASend_ttypes__tvalueabortedanswersconnectconsolecpuproffloat32float64forcegcgatewaygctracehead__invalidlookup_minpc_nil_keypacer:_panic:_readdirrunningsendDirsignal_syscalluintptrunknownwaitingwindowswsarecvwsasend_bytes___etypes__is_not__maxpc__mcount_minLC__minutes_nalloc_newval_nfreed_pointer_stack__status___Month_48828125AcceptExArmenianBalineseBopomofoBugineseCancelIoCherokeeClassANYCyrillicDecemberDuployanEqualSidEthiopicExtenderFebruaryFullPathGeorgianGoStringGujaratiGurmukhiHiraganaJavaneseKatakanaKayah_LiLinear_ALinear_BMD5SHA1MahajaniNovemberOl_ChikiPhags_PaQuestionReadFileSHA3_224SHA3_256SHA3_384SHA3_512SaturdaySetEventTagbanwaTai_ThamTai_VietThursdayTifinaghTypeAAAATypeAXFRUgariticWSAIoctl_::1_:53_signal__tstack_address_cgocheckcontinuecs______deadlockdnsqueryeax_____ebp_____ebx_____ecx_____edi_____edx_____eflags__eip_____esi_____esp_____fc00::_7fs______gs______invalid_no_anodepollDescreadfromrecvfromreflect.runnableruntime.rwmutexRrwmutexWscavengeshutdowntraceBuftriggerunixgramunknown_wsaioctl__forced__B_exp.___B_work___blocked_in_use__n_lockedg_lockedm_m__curg_marked___method:__ms_cpu___not_in___runtime_s.limit_s.state_threads_unmarked_wbuf1.n_wbuf2.n___EXTRA__MISSING__unknown___newval__oldval__size____tail___07:00:002001::_322002::_162441406253ffe::_16:_statusAuthorityBassa_VahBhaiksukiBigEndianClassINETCuneiformDiacriticFindCloseHex_DigitInheritedInterfaceKhudawadiLocalFreeMalayalamMongolianMoveFileWNabataeanPalmyreneRemoveAllSamaritanSeptembe
mov dword [esp + 0x1a4], ecx
mov dword [esp + 0x1a8], 1
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0x1ac], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x1b0], ecx
lea ecx, [0x5374e3]
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x1b8], 2
mov dword [esp + 0x1bc], edx
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x1c0], edx
mov dword [esp + 0x1c4], ecx
mov dword [esp + 0x1c8], 2
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x1cc], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x1d0], ecx
lea ecx, [esp + 0x88]
mov dword [esp], ecx
lea ecx, [esp + 0x19c]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov dword [esp + 0xc], 7
call fcn.004511b0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x44], ecx
call fcn.004a1ec0
lea edi, [esp + 0x148]
lea esi, [esp]
call fcn.00464c5e
lea edi, [esp + 0x134]
lea esi, [esp + 0x148]
call fcn.00464c5e
nop
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x138]
test ecx, 0x80000000
je 0x505e1a
shl ecx, 1
mov edx, eax
shr eax, 0x1f
or eax, ecx
shl edx, 1
shl eax, 1
shr edx, 0x1f
or edx, eax
add edx, 0xd7b17f80
jmp 0x505e21
mov edx, dword [esp + 0x13c]
add edx, 0x886e0900
mov dword [esp + 0x28], edx
mov dword [esp], 0
mov eax, dword [esp + 0xc8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
call fcn.004517e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x120], edx
lea edi, [esp + 0x174]
xor eax, eax
call fcn.00464776
mov ecx, dword [0x6526dc]
mov dword [esp], ecx
call fcn.00408fa0
mov eax, dword [esp + 4]
lea ecx, [0x51eca0]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.00408fa0
mov eax, dword [esp + 4]
lea ecx, [0x51eca0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
lea eax, [0x51ec60]
mov dword [esp + 0x184], eax
lea ecx, [0x56e21c]
mov dword [esp + 0x188], ecx
mov ecx, dword [esp + 0x44]
mov word [esp], cx
call fcn.00408f30
mov eax, dword [esp + 4]
lea ecx, [0x51ec60]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00409130
mov eax, dword [esp + 0xc]
lea ecx, [0x51aba0]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x198], eax
lea eax, [0x527bc0]
mov dword [esp], eax
call fcn.0040b6d0
mov eax, dword [esp + 4]
mov dword [esp + 0xd4], eax
xor ecx, ecx
jmp 0x505f81
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0x1d4]
mov eax, dword [edx]
call eax
add esp, 0x1d8
ret
mov edx, dword [esp + 0x64]
lea ecx, [edx + 1]
mov eax, dword [esp + 0xd4]
cmp ecx, 5
jge 0x506084
mov dword [esp + 0x64], ecx
lea edx, [esp + ecx*8 + 0x174]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
lea ebp, [0x56e5a4]
mov dword [esp], ebp
mov dword [esp + 4], eax
lea esi, [0x56eca8]
mov dword [esp + 8], esi
lea edi, [0x6527d8]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], edx
call fcn.00482520
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
test eax, eax
je 0x505f73
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
lea edx, [0x51eb60]
mov dword [esp + 0x124], edx
lea ebx, [0x56e2cc]
mov dword [esp + 0x128], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004090b0
mov eax, dword [esp + 8]
lea ecx, [0x51eb60]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], eax
lea eax, [esp + 0x124]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 2
call fcn.004be910
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0x1d4]
mov eax, dword [edx]
call eax
add esp, 0x1d8
ret
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov ebx, dword [eax + 8]
mov eax, dword [eax + 0xc]
cmp ecx, eax
jb 0x506c53
sub ebx, eax
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and ebx, eax
add edx, ebx
mov dword [esp + 0x118], edx
sub ecx, eax
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x120], ebp
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00508aa0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x54], edx
nop
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.005089c0
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0xd0]
mov dword [esp], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0050cd70
mov eax, dword [esp + 0xe8]
mov ecx, dword [0x62c764]
mov edx, dword [0x62c768]
mov ebx, dword [0x62c760]
mov ebp, dword [esp + 0xec]
mov eax, dword [eax + 0x18]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test ecx, ecx
jne 0x506178
test eax, eax
jg 0x506228
mov eax, dword [ecx + 0x10]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
lea edx, [0x51eb60]
mov dword [esp + 0x124], edx
lea ebx, [0x56e2d4]
mov dword [esp + 0x128], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004090b0
mov eax, dword [esp + 8]
lea ecx, [0x51eb60]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], eax
lea eax, [esp + 0x124]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 2
call fcn.004be910
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0x1d4]
mov eax, dword [edx]
call eax
add esp, 0x1d8
ret
mov ebx, dword [0x62c768]
mov ebp, dword [0x62c760]
cmp ebx, 1
jb 0x506c47
mov dword [esp + 0x38], eax
mov dword [esp + 0x118], ebp
mov dword [esp + 0x11c], 1
mov dword [esp + 0x120], ebx
mov dword [esp], ebp
mov dword [esp + 4], 1
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], ebx
call fcn.005089c0
mov eax, dword [0x62c760]
mov ecx, dword [0x62c768]
cmp ecx, 1
jb 0x506c3b
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], 1
mov dword [esp + 0x120], ecx
movzx eax, byte [eax]
mov dword [esp + 0x34], eax
mov edx, dword [0x62c768]
mov eax, dword [0x62c760]
mov ecx, dword [esp + 0x38]
cmp edx, ecx
jb 0x506c36
dec edx
mov ebx, edx
neg edx
sar edx, 0x1f
and edx, 1
add eax, edx
mov dword [esp + 0x118], eax
lea edx, [ecx - 1]
mov dword [esp + 0x11c], edx
mov dword [esp + 0x120], ebx
mov ebx, dword [0x62c760]
mov ebp, dword [0x62c764]
cmp ebp, edx
jg 0x506302
mov edx, ebp
cmp ebx, eax
je 0x50631a
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00464e70
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
test eax, eax
jg 0x50650d
lea eax, [0x51b280]
mov dword [esp], eax
mov dword [esp + 4], pe_nt_image_headers32
call fcn.004046d0
mov eax, dword [esp + 8]
mov dword [esp + 0xac], eax
lea ecx, [0x51b280]
mov dword [esp], ecx
mov dword [esp + 4], pe_nt_image_headers32
call fcn.004046d0
mov eax, dword [esp + 8]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0xec]
mov dword [esp + 0xe4], ecx
mov edx, dword [esp + 0xe8]
mov dword [esp + 0x58], edx
lea ebx, [0x523fa0]
mov dword [esp], ebx
call fcn.0040b6d0
mov eax, dword [esp + 4]
lea ecx, [0x506dd0]
mov dword [eax], ecx
mov ecx, dword [0x652970]
test ecx, ecx
jne 0x5063b1
mov ecx, dword [esp + 0xac]
mov dword [eax + 4], ecx
jmp 0x5063cb
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0xac]
call fcn.00464560
mov eax, ecx
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x58]
mov dword [eax + 8], edx
mov edx, dword [0x652970]
test edx, edx
jne 0x5063e8
mov edx, dword [esp + 0xe4]
mov dword [eax + 0xc], edx
jmp 0x5063fb
lea edi, [eax + 0xc]
mov edx, eax
mov eax, dword [esp + 0xe4]
call fcn.00464560
mov eax, edx
mov dword [esp], eax
call fcn.00442560
mov eax, dword [0x62c760]
mov dword [esp + 0xdc], eax
mov ecx, dword [esp + 0xec]
mov dword [esp + 0xe0], ecx
mov edx, dword [esp + 0xe8]
mov dword [esp + 0x58], edx
mov ebx, dword [0x62c764]
mov dword [esp + 0x64], ebx
mov ebp, dword [0x62c768]
mov dword [esp + 0x60], ebp
lea esi, [0x529780]
mov dword [esp], esi
call fcn.0040b6d0
mov eax, dword [esp + 4]
lea ecx, [0x506d60]
mov dword [eax], ecx
mov ecx, dword [esp + 0x58]
mov dword [eax + 4], ecx
mov ecx, dword [0x652970]
test ecx, ecx
jne 0x50647e
mov ecx, dword [esp + 0xe0]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xbc]
mov dword [eax + 0xc], ecx
jmp 0x5064a7
lea edi, [eax + 8]
mov ecx, eax
mov eax, dword [esp + 0xe0]
call fcn.00464560
lea edi, [ecx + 0xc]
mov eax, dword [esp + 0xbc]
call fcn.00464560
mov eax, ecx
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0x64]
mov dword [eax + 0x14], edx
mov edx, dword [esp + 0x60]
mov dword [eax + 0x18], edx
mov edx, dword [0x652970]
test edx, edx
jne 0x5064cb
mov edx, dword [esp + 0xdc]
mov dword [eax + 0x10], edx
jmp 0x5064de
lea edi, [eax + 0x10]
mov edx, eax
mov eax, dword [esp + 0xdc]
call fcn.00464560
mov eax, edx
mov ecx, dword [esp + 0x38]
dec ecx
mov dword [eax + 0x1c], ecx
mov dword [esp], eax
call fcn.00442560
lea eax, [0x51b240]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004046d0
mov eax, dword [esp + 8]
jmp 0x50658f
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00408fa0
mov eax, dword [esp + 4]
lea ecx, [0x51e3e0]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], eax
lea eax, [0x542b3d]
mov dword [esp], eax
mov dword [esp + 4], 0x31
lea eax, [esp + 0xf8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004be870
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0x1d4]
mov eax, dword [edx]
call eax
add esp, 0x1d8
ret
mov dword [esp + 0xc0], eax
mov dword [esp + 0x118], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov dword [esp + 4], 6
mov dword [esp], 0xfc23ac00
call fcn.0049fb60
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov dword [esp + 0xd8], eax
lea edi, [esp + 0x15c]
xor eax, eax
call fcn.0046477a
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x16c], ecx
lea edx, [esp + 0x118]
mov dword [esp + 0x170], edx
mov edx, dword [esp + 0xd8]
mov dword [esp + 0x164], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 0x15c], edx
lea edx, [esp + 0x15c]
mov dword [esp], edx
lea edx, [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov byte [esp + 0x14], 1
call fcn.004486b0
mov eax, dword [esp + 0x18]
movzx ecx, byte [esp + 0x1c]
test eax, eax
je 0x506c1f
cmp eax, 1
je 0x506b14
mov eax, dword [esp + 0x11c]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x120]
test cl, cl
je 0x506c08
mov dword [esp + 0x3c], eax
mov dword [esp + 0xc4], ebx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
lea ecx, [0x51eb60]
mov dword [esp + 0x124], ecx
lea edx, [0x56e2dc]
mov dword [esp + 0x128], edx
mov dword [esp], eax
call fcn.00408fa0
mov eax, dword [esp + 4]
lea ecx, [0x51e3e0]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], eax
lea eax, [esp + 0x124]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 2
call fcn.004be910
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 8], edx
call fcn.0050cec0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x72], eax
mov eax, dword [esp + 0xe]
mov ecx, dword [esp + 0x12]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ecx
mov eax, dword [esp + 0x72]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x6a], eax
mov dword [esp + 0x6e], ecx
movzx eax, byte [esp + 0x6a]
test al, al
jne 0x506783
movzx eax, word [esp + 0x6c]
test ax, ax
je 0x506bf1
movzx eax, word [esp + 0x68]
movzx ecx, word [esp + 0x6c]
mov edx, eax
shl eax, 0x10
sub eax, edx
add eax, ecx
mov dword [esp + 0x30], eax
mov dword [esp], eax
call fcn.00507b70
mov eax, dword [esp + 4]
test eax, eax
jne 0x506abb
movzx eax, byte [esp + 0x6a]
cmp al, 2
ja 0x506982
cmp al, 1
je 0x5068a8
cmp al, 2
jne 0x506af5
movzx eax, word [esp + 0x6c]
movzx ecx, word [esp + 0x68]
mov edx, dword [esp + 0x30]
mov dword [esp], edx
mov word [esp + 4], ax
mov byte [esp + 6], 2
mov word [esp + 8], cx
call fcn.00507c90
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb4], eax
lea ecx, [0x524060]
mov dword [esp], ecx
call fcn.0040b6d0
mov eax, dword [esp + 4]
lea ecx, [0x506cc0]
mov dword [eax], ecx
mov edx, dword [0x652970]
test edx, edx
jne 0x506838
mov edx, dword [esp + 0xb4]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0xac]
mov dword [eax + 8], ebx
jmp 0x50685a
lea edi, [eax + 4]
mov edx, eax
mov eax, dword [esp + 0xb4]
call fcn.00464560
lea edi, [edx + 8]
mov eax, dword [esp + 0xac]
call fcn.00464560
mov eax, edx
mov dword [esp], eax
call fcn.00442560
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0xb4]
mov eax, dword [eax + 0xc]
mov dword [esp], eax
lea eax, [esp + 0x10c]
mov dword [esp + 4], eax
call fcn.004048a0
jmp 0x506af5
movzx eax, word [esp + 0x6c]
movzx ecx, word [esp + 0x68]
mov edx, dword [esp + 0x30]
mov dword [esp], edx
mov word [esp + 4], ax
mov byte [esp + 6], 1
mov word [esp + 8], cx
call fcn.00507c90
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb8], eax
lea ecx, [0x524000]
mov dword [esp], ecx
call fcn.0040b6d0
mov eax, dword [esp + 4]
lea ecx, [0x506d10]
mov dword [eax], ecx
mov edx, dword [0x652970]
test edx, edx
jne 0x506912
mov edx, dword [esp + 0xb8]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0xac]
mov dword [eax + 8], ebx
jmp 0x506934
lea edi, [eax + 4]
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00464560
lea edi, [edx + 8]
mov eax, dword [esp + 0xac]
call fcn.00464560
mov eax, edx
mov dword [esp], eax
call fcn.00442560
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0xb8]
mov eax, dword [eax + 0xc]
mov dword [esp], eax
lea eax, [esp + 0x10c]
mov dword [esp + 4], eax
call fcn.004048a0
jmp 0x506af5
cmp al, 3
je 0x5069e4
cmp al, 0xff
jne 0x506af5
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
lea eax, [0x51eb60]
mov dword [esp + 0xf8], eax
lea ecx, [0x56e2e4]
mov dword [esp + 0xfc], ecx
lea edx, [esp + 0xf8]
mov dword [esp], edx
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004be910
jmp 0x506af5
movzx eax, word [esp + 0x6c]
movzx ecx, word [esp + 0x68]
mov edx, dword [esp + 0x30]
mov dword [esp], edx
mov word [esp + 4], ax
mov byte [esp + 6], 3
mov word [esp + 8], cx
call fcn.00507c90
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb0], eax
lea ecx, [0x5240c0]
mov dword [esp], ecx
call fcn.0040b6d0
mov eax, dword [esp + 4]
lea ecx, [0x506c70]
mov dword [eax], ecx
mov edx, dword [0x652970]
test edx, edx
jne 0x506a4e
mov edx, dword [esp + 0xb0]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0xac]
mov dword [eax + 8], ebx
jmp 0x506a70
lea edi, [eax + 4]
mov edx, eax
mov eax, dword [esp + 0xb0]
call fcn.00464560
lea edi, [edx + 8]
mov eax, dword [esp + 0xac]
call fcn.00464560
mov eax, edx
mov dword [esp], eax
call fcn.00442560
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0xb0]
mov eax, dword [eax + 0xc]
mov dword [esp], eax
lea eax, [esp + 0x10c]
mov dword [esp + 4], eax
call fcn.004048a0
jmp 0x506af5
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x10c], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x110], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x114], ecx
mov eax, dword [eax + 0xc]
mov dword [esp], eax
lea eax, [esp + 0x10c]
mov dword [esp + 4], eax
call fcn.004048a0
lea eax, [0x51b240]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004046d0
mov eax, dword [esp + 8]
jmp 0x50658f
mov word [esp], 0
mov byte [esp + 2], 0xff
mov word [esp + 4], 0
mov byte [esp + 6], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00507e20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x10c], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], edx
mov eax, dword [esp + 0xac]
mov dword [esp], eax
lea ecx, [esp + 0x10c]
mov dword [esp + 4], ecx
call fcn.004048a0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
lea eax, [0x51eb60]
mov dword [esp + 0xf8], eax
lea ecx, [0x56e2ec]
mov dword [esp + 0xfc], ecx
lea edx, [esp + 0xf8]
mov dword [esp], edx
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004be910
mov dword [esp + 4], 1
mov dword [esp], 0x2a05f200
call fcn.0049fb60
mov eax, dword [esp + 8]
mov eax, dword [eax]
jmp 0x50658f
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0x1d4]
mov eax, dword [edx]
call eax
add esp, 0x1d8
ret
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0x1d4]
mov eax, dword [edx]
call eax
add esp, 0x1d8
ret
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0x1d4]
mov eax, dword [edx]
call eax
add esp, 0x1d8
ret
call fcn.00464630
mov ecx, 1
xor edx, edx
call fcn.00464620
mov ecx, 1
xor edx, edx
call fcn.00464620
call fcn.00464640
nop
call fcn.00436460
add esp, 0x1d8
ret
call fcn.00463190
jmp fcn.00505ae0