Function at 0x501510
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xb4]
cmp eax, dword [ecx + 8]
jbe 0x502834
sub esp, 0x134
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov ecx, dword [esp + 0x13c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x140]
mov dword [esp + 8], edx
call fcn.0048a780
mov eax, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x94], ecx
cmp dword [0x7cccd8], eax
je 0x502744
cmp dword [0x7cccf8], eax
je 0x5025ee
cmp dword [0x7cccc8], eax
je 0x50250c
cmp dword [0x7ccce0], eax
je 0x50241a
cmp dword [0x7cccc0], eax
je 0x50237c
nop
mov eax, dword [esp + 0x140]
mov ecx, eax
and eax, 0x1f
cmp eax, 6
ja 0x501755
cmp eax, 1
je 0x5016c0
cmp eax, 2
jb 0x501675
cmp eax, 3
ja 0x501639
cmp eax, 2
jne 0x501628
mov eax, dword [esp + 0x13c]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00409ed0
mov eax, dword [esp + 8]
lea ecx, [0x6cccb0]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
mov edx, dword [esp + 0x13c]
movsx eax, byte [edx]
mov ecx, eax
sar eax, 0x1f
jmp 0x5015e7
cmp eax, 4
jne 0x50164f
mov edx, dword [esp + 0x13c]
movsx eax, word [edx]
mov ecx, eax
sar eax, 0x1f
jmp 0x5015e7
cmp eax, 5
jne 0x501664
mov edx, dword [esp + 0x13c]
mov eax, dword [edx]
mov ecx, eax
sar eax, 0x1f
jmp 0x5015e7
mov edx, dword [esp + 0x13c]
mov ecx, dword [edx]
mov eax, dword [edx + 4]
jmp 0x5015e7
lea eax, [0x67cfbf]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00409f80
mov eax, dword [esp + 8]
mov dword [esp + 0x15c], 0
mov dword [esp + 0x160], 0
lea ecx, [0x6cb4d0]
mov dword [esp + 0x164], ecx
mov dword [esp + 0x168], eax
add esp, 0x134
ret
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004881e0
movzx eax, byte [esp + 0xc]
test al, al
je 0x50171e
mov eax, dword [0x61c320]
mov ecx, dword [0x61c324]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
mov eax, dword [0x61c318]
mov ecx, dword [0x61c31c]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
lea edx, [esp + 0xc]
mov dword [esp + 0x90], edx
cmp eax, 0x17
je 0x501fdf
cmp eax, 0x18
jne 0x501926
mov eax, dword [esp + 0x150]
cmp eax, 0x12
je 0x5018c1
cmp eax, 0x13
je 0x50185c
cmp eax, 0x16
jne 0x5017f5
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048a690
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.005005e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
mov dword [esp + 0x168], ebx
add esp, 0x134
ret
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048a690
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409f80
mov eax, dword [esp + 8]
lea ecx, [0x6ccd30]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048a690
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.005004d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
mov dword [esp + 0x168], ebx
add esp, 0x134
ret
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048a690
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.005006a0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
mov dword [esp + 0x168], ebx
add esp, 0x134
ret
cmp eax, 0x19
jne 0x501675
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov edx, dword [esp + 0x13c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0048a780
lea eax, [esp + 8]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x78], edx
xor ebx, ebx
jmp 0x50197b
mov eax, dword [esp + 0x60]
lea ebx, [eax + 1]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x78]
mov dword [esp + 0x60], ebx
mov eax, dword [ecx + 0x64]
mov dword [esp], edx
call eax
mov eax, dword [esp + 0x60]
cmp dword [esp + 4], eax
jle 0x501a0e
mov ecx, dword [esp + 0x44]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0x78]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x100]
mov esi, dword [esp + 0x8c]
call fcn.0045d04e
mov eax, dword [esp + 0x10c]
test eax, eax
je 0x50196c
lea eax, [0x684dde]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.00409f80
mov eax, dword [esp + 8]
mov dword [esp + 0x15c], 0
mov dword [esp + 0x160], 0
lea ecx, [0x6cb4d0]
mov dword [esp + 0x164], ecx
mov dword [esp + 0x168], eax
add esp, 0x134
ret
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x64]
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
je 0x501f8e
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov dword [esp + 4], 0
call ecx
lea edi, [esp + 0x100]
mov esi, dword [esp + 0x8c]
call fcn.0045d04e
mov eax, dword [esp + 0x110]
mov ecx, dword [esp + 0x114]
cmp dword [0x7ccce8], eax
je 0x501e25
xor eax, eax
mov ecx, dword [esp + 0x4c]
sub ecx, eax
test ecx, ecx
je 0x501dd4
mov dword [esp + 0x48], eax
lea edx, [esp + 8]
mov dword [esp + 0x88], edx
cmp ecx, 1
je 0x501ca7
mov dword [esp + 0x50], ecx
lea eax, [0x64e320]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.00444130
mov eax, dword [esp + 0xc]
mov dword [esp + 0x84], eax
xor ecx, ecx
jmp 0x501ac9
lea ecx, [esi + 1]
mov eax, ebx
mov edx, dword [esp + 0x50]
cmp edx, ecx
jle 0x501c62
mov dword [esp + 0x64], ecx
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov edx, dword [esp + 0x13c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x140]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x48]
lea esi, [ecx + ebp]
mov dword [esp + 0x6c], esi
mov dword [esp + 0xc], esi
call fcn.00488c00
mov eax, dword [esp + 0x10]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x68], edx
mov ebx, dword [esp + 0x44]
mov ebp, dword [ebx + 0x2c]
mov esi, dword [esp + 0x78]
mov dword [esp], esi
mov edi, dword [esp + 0x6c]
mov dword [esp + 4], edi
call ebp
lea edi, [esp + 0x100]
mov esi, dword [esp + 0x8c]
call fcn.0045d04e
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x11c]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x679cdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.00483440
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004fe5f0
lea edi, [esp + 0xe8]
mov esi, dword [esp + 0x88]
call fcn.0045d094
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
mov edi, dword [esp + 0x90]
lea esi, [esp + 0xe8]
call fcn.0045d094
call fcn.00502840
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x64]
cmp ebp, esi
jbe 0x5027cd
mov edi, ebx
mov ebx, dword [esp + 0x84]
lea ebp, [ebx + esi*8]
mov dword [ebp], edx
mov edx, dword [0x7e34e0]
lea ebp, [ebx + esi*8 + 4]
test edx, edx
jne 0x501c4b
mov dword [ebp], ecx
test eax, eax
je 0x501ac4
mov dword [esp + 0x15c], 0
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], edi
add esp, 0x134
ret
mov dword [esp + 0x70], eax
mov edx, edi
mov edi, ebp
mov eax, ecx
call fcn.0045c920
mov eax, dword [esp + 0x70]
mov edi, edx
jmp 0x501c18
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.0040a000
mov eax, dword [esp + 0xc]
lea ecx, [0x6cccd0]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
mov ecx, dword [esp + 0x138]
mov dword [esp], ecx
mov ecx, dword [esp + 0x13c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x140]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00488c00
mov eax, dword [esp + 0x10]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x68], edx
mov ebx, dword [esp + 0x44]
mov ebx, dword [ebx + 0x2c]
mov ebp, dword [esp + 0x78]
mov dword [esp], ebp
mov ebp, dword [esp + 0x48]
mov dword [esp + 4], ebp
call ebx
lea edi, [esp + 0x100]
mov esi, dword [esp + 0x8c]
call fcn.0045d04e
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x11c]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x679cdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.00483440
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004fe5f0
lea edi, [esp + 0xe8]
mov esi, dword [esp + 0x88]
call fcn.0045d094
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
mov edi, dword [esp + 0x90]
lea esi, [esp + 0xe8]
call fcn.0045d094
call fcn.00502840
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
mov dword [esp + 0x168], ebx
add esp, 0x134
ret
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.0040a000
mov eax, dword [esp + 0xc]
lea ecx, [0x6ccc90]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [0x7cccec]
mov dword [esp + 8], eax
call fcn.00404120
movzx eax, byte [esp + 0xc]
test al, al
je 0x501a73
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov ecx, dword [esp + 0x13c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x140]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.00488c00
mov eax, dword [esp + 0x10]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x68], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00489040
mov eax, dword [esp + 0xc]
test eax, eax
jg 0x501eb5
mov eax, 1
jmp 0x501a75
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
call fcn.00488290
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x40], edx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.004faca0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x501f64
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0040a000
mov eax, dword [esp + 0xc]
lea ecx, [0x6ccc90]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
mov ecx, dword [esp + 0x3c]
cmp ecx, eax
jb 0x5027d6
mov ebx, dword [esp + 0x40]
sub ebx, eax
sub ecx, eax
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and eax, ebx
mov ebx, dword [esp + 0x74]
lea edx, [ebx + eax]
mov eax, ecx
mov ecx, ebp
jmp 0x501f1f
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.0040a000
mov eax, dword [esp + 0xc]
lea ecx, [0x6ccc90]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov edx, dword [esp + 0x13c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0048a780
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x502306
lea edi, [esp + 0xd0]
xor eax, eax
call fcn.0045cbba
mov ecx, dword [esp + 0x138]
mov dword [esp], ecx
mov edx, dword [esp + 0x13c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x140]
mov dword [esp + 8], ebx
call fcn.00489040
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x5022b5
cmp ecx, 1
je 0x502226
mov dword [esp + 0x54], ecx
lea eax, [0x64e320]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.00444130
mov eax, dword [esp + 0xc]
mov dword [esp + 0x84], eax
xor ecx, ecx
jmp 0x50209e
lea ecx, [esi + 1]
mov eax, ebx
mov edx, dword [esp + 0x54]
cmp edx, ecx
jle 0x502190
mov dword [esp + 0x5c], ecx
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov edx, dword [esp + 0x13c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x140]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.00488d00
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov edi, dword [esp + 0x90]
lea esi, [esp + 0xd0]
call fcn.0045d094
call fcn.00502840
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0x5c]
cmp ebp, esi
jbe 0x5027c4
mov edi, ebx
mov ebx, dword [esp + 0x84]
lea ebp, [ebx + esi*8]
mov dword [ebp], edx
mov edx, dword [0x7e34e0]
lea ebp, [ebx + esi*8 + 4]
test edx, edx
jne 0x502179
mov dword [ebp], ecx
test eax, eax
je 0x502099
mov dword [esp + 0x15c], 0
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], edi
add esp, 0x134
ret
mov dword [esp + 0x70], eax
mov edx, edi
mov edi, ebp
mov eax, ecx
call fcn.0045c920
mov eax, dword [esp + 0x70]
mov edi, edx
jmp 0x502146
movzx ecx, byte [esp + 0x158]
test cl, cl
je 0x5021e1
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.0040a000
mov eax, dword [esp + 0xc]
lea ecx, [0x6ccd10]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.0040a000
mov eax, dword [esp + 0xc]
lea ecx, [0x6cccd0]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.00488d00
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov edi, dword [esp + 0x90]
lea esi, [esp + 0xd0]
call fcn.0045d094
call fcn.00502840
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
mov dword [esp + 0x168], ebx
add esp, 0x134
ret
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.0040a000
mov eax, dword [esp + 0xc]
lea ecx, [0x6ccc90]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 8], eax
call fcn.00488290
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0040a000
mov eax, dword [esp + 0xc]
lea ecx, [0x6ccc90]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [0x7cccc4]
mov dword [esp + 8], eax
call fcn.00404120
movzx eax, byte [esp + 0xc]
test al, al
je 0x5015a7
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.00488eb0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
lea edx, [0x678aa0]
cmp eax, edx
jne 0x5027db
mov dword [esp], ecx
call fcn.004ff940
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
mov dword [esp + 0x168], ebx
add esp, 0x134
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov edx, dword [0x7ccce4]
mov dword [esp + 8], edx
call fcn.00404120
movzx eax, byte [esp + 0xc]
test al, al
jne 0x502449
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x94]
jmp 0x50159b
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.00488eb0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
lea edx, [0x651200]
cmp edx, ecx
jne 0x5027f1
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
cmp edx, 2
jge 0x5024dd
lea eax, [0x6814df]
mov dword [esp], eax
mov dword [esp + 4], 0x19
call fcn.00409f80
mov eax, dword [esp + 8]
lea ecx, [0x6cb4d0]
xor edx, edx
xor ebx, ebx
mov dword [esp + 0x15c], edx
mov dword [esp + 0x160], ebx
mov dword [esp + 0x164], ecx
mov dword [esp + 0x168], eax
add esp, 0x134
ret
mov ebx, dword [ecx]
cmp ebx, 2
jg 0x502496
jge 0x5024ec
cmp dword [ecx + 4], 0x28
jge 0x502496
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0040a000
mov ebx, dword [esp + 0xc]
xor ecx, ecx
lea edx, [0x6cccf0]
xor eax, eax
jmp 0x5024ba
mov dword [esp], eax
mov dword [esp + 4], ecx
mov edx, dword [0x7ccccc]
mov dword [esp + 8], edx
call fcn.00404120
movzx eax, byte [esp + 0xc]
test al, al
jne 0x50253b
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x94]
jmp 0x50158f
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.00488eb0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
lea edx, [0x660520]
cmp edx, ecx
jne 0x502807
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], eax
lea eax, [0x6ccc50]
mov dword [esp], eax
lea eax, [esp + 0x98]
mov dword [esp + 4], eax
call fcn.0040a0f0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov edx, dword [0x7cccfc]
mov dword [esp + 8], edx
call fcn.00404120
movzx eax, byte [esp + 0xc]
test al, al
jne 0x50261d
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x94]
jmp 0x501583
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.00488eb0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x58], eax
mov esi, dword [esp + 0x14]
lea edi, [esp + 0xbc]
xor eax, eax
call fcn.0045cbbb
lea eax, [0x677480]
mov ecx, dword [esp + 0x58]
cmp eax, ecx
jne 0x50281d
lea edi, [esp + 0xbc]
call fcn.0045d09e
lea edi, [esp + 0xa8]
lea esi, [esp + 0xbc]
call fcn.0045d09e
cmp dword [esp + 0x154], 0x18
jne 0x5026e2
mov edi, esp
lea esi, [esp + 0xa8]
call fcn.0045d09e
call fcn.00500990
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
mov dword [esp + 0x168], ebx
add esp, 0x134
ret
mov edi, esp
lea esi, [esp + 0xa8]
call fcn.0045d09e
call fcn.00500850
movzx eax, byte [esp + 0x14]
test al, al
jne 0x50269c
mov edi, esp
lea esi, [esp + 0xa8]
call fcn.0045d09e
call fcn.005008b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
mov dword [esp + 0x164], edx
mov dword [esp + 0x168], ebx
add esp, 0x134
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov edx, dword [0x7cccdc]
mov dword [esp + 8], edx
call fcn.00404120
movzx eax, byte [esp + 0xc]
test al, al
jne 0x502773
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x94]
jmp 0x501577
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.0040a000
mov eax, dword [esp + 0xc]
lea ecx, [0x6ccc90]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
add esp, 0x134
ret
mov eax, esi
mov ecx, ebp
call fcn.0045c9a0
mov eax, esi
mov ecx, ebp
call fcn.0045c9a0
call fcn.0045ca00
mov dword [esp], eax
mov dword [esp + 4], edx
lea eax, [0x642f00]
mov dword [esp + 8], eax
call fcn.00409c30
mov dword [esp], ecx
mov dword [esp + 4], edx
lea eax, [0x642f00]
mov dword [esp + 8], eax
call fcn.00409c30
mov dword [esp], ecx
mov dword [esp + 4], edx
lea eax, [0x642f00]
mov dword [esp + 8], eax
call fcn.00409c30
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x642f00]
mov dword [esp + 8], eax
call fcn.00409c30
nop
call fcn.0045b380
jmp fcn.00501510