Function at 0x502c60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x586a10
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x220
push ebx
push ebp
push esi
mov esi, ecx
push edi
xor ebp, ebp
lea ebx, [esi + 0x44]
mov dword [esp + 0x14], 6
or edi, 0xffffffff
push 0x8c
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], ebp
je 0x502cb6
mov ecx, eax
call fcn.00544ab0
jmp 0x502cb8
xor eax, eax
push 0x8c
mov dword [esp + 0x23c], edi
mov dword [ebx - 0x18], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 1
je 0x502ceb
mov ecx, eax
call fcn.00544ab0
jmp 0x502ced
xor eax, eax
push 0xd0
mov dword [esp + 0x23c], edi
mov dword [ebx], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 2
je 0x502d1f
mov ecx, eax
call fcn.004936f0
jmp 0x502d21
xor eax, eax
push 0xd0
mov dword [esp + 0x23c], edi
mov dword [ebx + 0x18], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 3
je 0x502d54
mov ecx, eax
call fcn.004936f0
jmp 0x502d56
xor eax, eax
push 0xd0
mov dword [esp + 0x23c], edi
mov dword [ebx + 0x30], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 4
je 0x502d89
mov ecx, eax
call fcn.004936f0
jmp 0x502d8b
xor eax, eax
mov dword [ebx + 0x48], eax
mov eax, dword [esp + 0x14]
add ebx, 4
dec eax
mov dword [esp + 0x238], edi
mov dword [esp + 0x14], eax
jne 0x502c91
push 0x48
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 5
je 0x502dcd
mov ecx, eax
call fcn.004a6b80
jmp 0x502dcf
xor eax, eax
push 0x88
mov dword [esp + 0x23c], edi
mov dword [esi + 0xa4], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 6
je 0x502e05
mov ecx, eax
call fcn.004936f0
jmp 0x502e07
xor eax, eax
push 0x88
mov dword [esp + 0x23c], edi
mov dword [esi + 0xa8], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 7
je 0x502e3d
mov ecx, eax
call fcn.004936f0
jmp 0x502e3f
xor eax, eax
push 0x3c
mov dword [esp + 0x23c], edi
mov dword [esi + 0xac], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 8
je 0x502e72
mov ecx, eax
call fcn.00496a40
jmp 0x502e74
xor eax, eax
push 0x3c
mov dword [esp + 0x23c], edi
mov dword [esi + 0xd8], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 9
je 0x502ea7
mov ecx, eax
call fcn.00496a40
jmp 0x502ea9
xor eax, eax
push 0x3c
mov dword [esp + 0x23c], edi
mov dword [esi + 0xdc], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 0xa
je 0x502edc
mov ecx, eax
call fcn.00496a40
jmp 0x502ede
xor eax, eax
push 0x3c
mov dword [esp + 0x23c], edi
mov dword [esi + 0xe0], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 0xb
je 0x502f11
mov ecx, eax
call fcn.00496a40
jmp 0x502f13
xor eax, eax
push 0x3c
mov dword [esp + 0x23c], edi
mov dword [esi + 0xe4], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 0xc
je 0x502f46
mov ecx, eax
call fcn.00496a40
jmp 0x502f48
xor eax, eax
push 0x3c
mov dword [esp + 0x23c], edi
mov dword [esi + 0xe8], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 0xd
je 0x502f7b
mov ecx, eax
call fcn.00496a40
jmp 0x502f7d
xor eax, eax
push 0x3c
mov dword [esp + 0x23c], edi
mov dword [esi + 0xec], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 0xe
je 0x502fb0
mov ecx, eax
call fcn.00496a40
jmp 0x502fb2
xor eax, eax
push 0x3c
mov dword [esp + 0x23c], edi
mov dword [esi + 0xf0], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 0xf
je 0x502fe5
mov ecx, eax
call fcn.00496a40
jmp 0x502fe7
xor eax, eax
push 0x4c3c
mov dword [esp + 0x23c], edi
mov dword [esi + 0xf4], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 0x10
je 0x50301d
mov ecx, eax
call fcn.0049d550
jmp 0x50301f
xor eax, eax
push 0x98
mov dword [esp + 0x23c], edi
mov dword [esi + 0x1a0], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 0x11
je 0x503055
mov ecx, eax
call fcn.004936f0
jmp 0x503057
xor eax, eax
push 0x98
mov dword [esp + 0x23c], edi
mov dword [esi + 0x1a4], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 0x12
je 0x50308d
mov ecx, eax
call fcn.004936f0
jmp 0x50308f
xor eax, eax
push 0x98
mov dword [esp + 0x23c], edi
mov dword [esi + 0x1a8], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebp
mov dword [esp + 0x238], 0x13
je 0x5030c5
mov ecx, eax
call fcn.004936f0
jmp 0x5030c7
xor eax, eax
mov dword [esp + 0x238], edi
mov dword [esi + 0x30c], eax
lea ebx, [esi + 0x1ac]
mov ebp, 6
push 0x98
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x238], 0x14
je 0x503108
mov ecx, eax
call fcn.004936f0
jmp 0x50310a
xor eax, eax
mov dword [ebx], eax
add ebx, 4
dec ebp
mov dword [esp + 0x238], edi
jne 0x5030df
lea eax, [esp + 0x130]
push 0x80
lea ecx, [esi + 0x104]
push eax
mov ebx, 8
mov ebp, 0x112
push ecx
mov ecx, 0x620cd0
mov dword [esp + 0x13c], 0xbf800000
mov dword [esp + 0x140], 0x3f800000
mov dword [esp + 0x144], 0
mov dword [esp + 0x148], 0
mov dword [esp + 0x14c], 0
mov dword [esp + 0x150], 0xbf800000
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0x3f400000
mov dword [esp + 0x15c], 0x3f800000
mov dword [esp + 0x160], 0x3f800000
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], 0xbf800000
mov dword [esp + 0x174], 0x3f800000
mov dword [esp + 0x178], 0x3f400000
mov dword [esp + 0x17c], 0xbf800000
mov dword [esp + 0x180], 0xbf800000
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0xbf800000
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0x3f800000
mov dword [esp + 0x19c], 0x3f800000
mov dword [esp + 0x1a0], 0xbf800000
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b0], 0xbf800000
mov dword [esp + 0x1b4], 0x3f800000
mov dword [esp + 0x1b8], 0x3f800000
mov dword [0x620cf8], ebx
mov dword [0x620cfc], ebp
mov dword [0x620d00], 0
call fcn.0040d040
lea edx, [esp + 0x28]
push 0x48
lea eax, [esi + 0x108]
push edx
push eax
mov ecx, 0x620cd0
mov dword [esp + 0x34], 0xbf800000
mov dword [esp + 0x38], 0x3f800000
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0x3f800000
mov dword [esp + 0x50], 0x3f800000
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], edi
mov dword [esp + 0x5c], 0x3f800000
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0xbf800000
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], edi
mov dword [esp + 0x74], 0x3f000000
mov dword [esp + 0x78], 0x3f800000
call fcn.0040d040
mov dword [esp + 0xd0], 0xbf800000
mov dword [esp + 0xd4], 0x3f800000
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], edi
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0x3f800000
mov dword [esp + 0xec], 0x3f800000
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], edi
mov dword [esp + 0xf8], 0x3f800000
mov dword [esp + 0xfc], 0
lea ecx, [esp + 0xd0]
mov dword [0x620cf8], ebx
push 0x60
lea edx, [esi + 0x2b4]
mov ebx, 0x142
push ecx
push edx
mov ecx, 0x620cd0
mov dword [esp + 0x10c], 0xbf800000
mov dword [esp + 0x110], 0xbf800000
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], edi
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0x3f800000
mov dword [esp + 0x124], 0x3f800000
mov dword [esp + 0x128], 0xbf800000
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], edi
mov dword [esp + 0x134], 0x3f800000
mov dword [esp + 0x138], 0x3f800000
mov dword [0x620cfc], ebx
mov dword [0x620d00], 0
call fcn.0040d040
lea eax, [esp + 0x70]
push 0x60
lea ecx, [esi + 0x320]
mov dword [esp + 0x80], edi
mov dword [esp + 0x98], edi
mov dword [esp + 0xb0], edi
mov dword [esp + 0xc8], edi
mov dword [0x620cfc], ebx
push eax
mov edi, 8
xor ebx, ebx
push ecx
mov ecx, 0x620cd0
mov dword [esp + 0x7c], 0xbf800000
mov dword [esp + 0x80], 0x3f800000
mov dword [esp + 0x84], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0x3f800000
mov dword [esp + 0x98], 0x3f800000
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa4], 0x3f800000
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0xbf800000
mov dword [esp + 0xb0], 0xbf800000
mov dword [esp + 0xb4], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0x3f800000
mov dword [esp + 0xc4], 0x3f800000
mov dword [esp + 0xc8], 0xbf800000
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd4], 0x3f800000
mov dword [esp + 0xd8], 0x3f800000
mov dword [0x620cf8], edi
mov dword [0x620d00], ebx
call fcn.0040d040
mov dword [esp + 0x1b0], 0xbf800000
mov dword [esp + 0x1b4], 0x3f800000
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
mov dword [esp + 0x1c4], 0xbf800000
mov dword [esp + 0x1c8], ebx
mov dword [esp + 0x1cc], ebx
mov dword [esp + 0x1d0], 0x3f800000
mov dword [esp + 0x1d4], 0x3f800000
mov dword [esp + 0x1d8], ebx
mov dword [esp + 0x1dc], ebx
mov dword [esp + 0x1e0], ebx
mov dword [esp + 0x1e4], 0xbf800000
mov dword [esp + 0x1e8], 0x3f800000
mov dword [esp + 0x1ec], ebx
mov dword [esp + 0x1f0], 0xbf800000
mov dword [esp + 0x1f4], 0xbf800000
mov dword [esp + 0x1f8], ebx
mov dword [esp + 0x1fc], ebx
mov dword [esp + 0x200], ebx
mov dword [esp + 0x204], 0xbf800000
lea edx, [esp + 0x1b0]
push 0x80
lea eax, [esi + 0x34c]
push edx
push eax
mov ecx, 0x620cd0
mov dword [esp + 0x214], ebx
mov dword [esp + 0x218], 0x3f800000
mov dword [esp + 0x21c], 0x3f800000
mov dword [esp + 0x220], 0xbf800000
mov dword [esp + 0x224], ebx
mov dword [esp + 0x228], ebx
mov dword [esp + 0x22c], ebx
mov dword [esp + 0x230], 0xbf800000
mov dword [esp + 0x234], 0x3f800000
mov dword [esp + 0x238], 0x3f800000
mov dword [0x620cf8], edi
mov dword [0x620cfc], ebp
mov dword [0x620d00], ebx
call fcn.0040d040
mov eax, 0x3f800000
mov dl, 0x77
mov dword [esi + 0x10c], eax
mov dword [esi + 0x110], eax
mov dword [esi + 0x114], eax
mov dword [esi + 0x118], eax
mov dword [esi + 0x11c], eax
mov dword [esi + 0x120], eax
mov dword [esi + 0x124], eax
mov dword [esi + 0x128], eax
mov dword [esi + 0x12c], eax
mov dword [esi + 0x130], eax
mov dword [esi + 0x134], eax
mov dword [esi + 0x138], eax
mov dword [esi + 0x13c], ebx
mov dword [esi + 0x140], ebx
mov dword [esi + 0x144], ebx
mov dword [esi + 0x148], ebx
mov dword [esi + 0x14c], 0x42480000
xor eax, eax
mov cl, 0x7c
test eax, eax
mov byte [esi + eax + 0x150], al
jne 0x503785
mov byte [esi + 0x39c], dl
mov byte [esi + 0x3d0], dl
jmp 0x50379c
cmp eax, 1
jne 0x5039c0
mov byte [esi + 0x39d], 0x75
mov byte [eax + esi + 0x3d0], cl
inc eax
cmp eax, 0x34
jl 0x50376c
lea ecx, [esi + 0x1c4]
lea edi, [esi + 0x1c8]
push ecx
mov ecx, edi
mov byte [esi], 0
call fcn.0048edb0
push 0xc3340000
mov ecx, edi
call fcn.0048edd0
lea edi, [esi + 8]
mov eax, esi
mov ecx, esi
sub eax, edi
sub ecx, edi
lea edx, [esi + 0x23c]
add eax, 2
add ecx, 0xe
mov dword [esp + 0x14], edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], ecx
mov edx, esi
mov eax, esi
mov ecx, esi
sub edx, edi
sub eax, edi
sub ecx, edi
xor ebx, ebx
add edx, 0x18
add eax, 0x1e
add ecx, 0x24
mov byte [esi + 1], 0
lea ebp, [esi + 0x1dc]
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
push ebp
mov byte [edx + edi], 0xff
mov edx, dword [esp + 0x20]
mov byte [edi], 4
mov byte [eax + edi], 0
mov eax, dword [esp + 0x14]
mov byte [ecx + edi], 0
mov ecx, dword [esp + 0x18]
mov byte [edx + edi], bl
mov byte [eax + edi], bl
add ecx, 0xffffffb8
mov dword [ebp - 0x58], 0
call fcn.0048edb0
mov edx, dword [esp + 0x14]
push 0
lea ecx, [edx - 0x48]
call fcn.0048edd0
mov ecx, dword [esp + 0x14]
lea eax, [ebp + 0x48]
push eax
call fcn.0048edb0
mov ecx, dword [esp + 0x14]
push 0
call fcn.0048edd0
mov ecx, dword [esp + 0x14]
inc ebx
add ebp, 4
inc edi
add ecx, 8
cmp ebx, 6
mov dword [esp + 0x14], ecx
jl 0x503815
mov byte [esi + 8], 0
xor ebx, ebx
lea ecx, [esi + 0x1d0]
mov byte [esi + 0xc], 0
lea edi, [esi + 0x1d4]
mov dword [esi + 0x14], ebx
push ecx
mov byte [esi + 0x19c], bl
mov ecx, edi
mov byte [esi + 0x19d], 1
call fcn.0048edb0
push ebx
mov ecx, edi
call fcn.0048edd0
lea edi, [esi + 0x270]
lea edx, [esi + 0x26c]
push edx
mov ecx, edi
call fcn.0048edb0
push ebx
mov ecx, edi
call fcn.0048edd0
mov byte [esi + 0x2a8], bl
mov byte [esi + 0x2a9], bl
mov dword [esi + 0x2ac], ebx
mov byte [esi + 0x2b0], bl
mov byte [esi + 0x310], 1
lea edi, [esi + 0x44]
mov ebx, 6
mov ecx, dword [edi - 0x18]
call fcn.00544ad0
mov ecx, dword [edi]
call fcn.00544ad0
mov ecx, dword [edi + 0x18]
call fcn.00543e90
mov ecx, dword [edi + 0x30]
call fcn.00543e90
mov ecx, dword [edi + 0x48]
call fcn.00543e90
add edi, 4
dec ebx
jne 0x503906
mov ecx, dword [esi + 0xa4]
call fcn.00405d90
mov ecx, dword [esi + 0xa8]
call fcn.004a7850
mov ecx, dword [esi + 0xac]
call fcn.004a7850
mov ecx, dword [esi + 0xd8]
call fcn.00496a50
mov ecx, dword [esi + 0xdc]
call fcn.00496a50
mov ecx, dword [esi + 0xe0]
call fcn.00496a50
mov ecx, dword [esi + 0xe4]
call fcn.00496a50
mov ecx, dword [esi + 0xe8]
call fcn.00496a50
mov ecx, dword [esi + 0xec]
call fcn.00496a50
mov ecx, dword [esi + 0xf0]
call fcn.00496a50
mov ecx, dword [esi + 0xf4]
call fcn.00496a50
xor ebx, ebx
lea ebp, [esi + 0x3d0]
lea edi, [esi + 0x44]
cmp ebx, 4
jge 0x5039e2
push 0x30
jmp 0x5039e4
cmp eax, 0xa
jge 0x5039d6
mov bl, al
add bl, 0x6b
mov byte [eax + esi + 0x39c], bl
jmp 0x503795
mov byte [eax + esi + 0x39c], cl
jmp 0x503795
push 0x31
mov ecx, dword [edi - 0x18]
call fcn.00546550
mov ecx, dword [edi - 0x18]
push 0x65ea3c
push 0x40b00000
push 0x40b00000
call fcn.00544b60
mov ecx, dword [edi - 0x18]
push 0
call fcn.005464a0
cmp ebx, 4
jge 0x503a16
push 0x30
jmp 0x503a18
push 0x31
mov ecx, dword [edi]
call fcn.00546550
mov ecx, dword [edi]
push ebp
push 0x40b00000
push 0x40b00000
call fcn.00544b60
mov ecx, dword [edi]
push 0
call fcn.005464a0
mov ecx, dword [edi + 0x18]
push 0
call fcn.00544930
mov ecx, dword [edi + 0x18]
push 0x31
push 0x65ea3c
call fcn.005449c0
cmp ebx, 4
jge 0x503a5c
push 0x30
jmp 0x503a5e
push 0x31
mov ecx, dword [edi + 0x18]
call fcn.005449b0
mov ecx, dword [edi + 0x30]
push 0
call fcn.00544930
mov ecx, dword [edi + 0x30]
lea eax, [esi + 0x39c]
push 0x31
push eax
call fcn.005449c0
cmp ebx, 4
jge 0x503a8a
push 0x30
jmp 0x503a8c
push 0x31
mov ecx, dword [edi + 0x30]
call fcn.005449b0
mov ecx, dword [edi + 0x30]
call fcn.00544990
mov ecx, dword [edi + 0x48]
push 0
call fcn.00544930
mov ecx, dword [edi + 0x48]
push 0x31
push ebp
call fcn.005449c0
cmp ebx, 4
jge 0x503aba
push 0x30
jmp 0x503abc
push 0x31
mov ecx, dword [edi + 0x48]
call fcn.005449b0
mov ecx, dword [edi + 0x48]
call fcn.00544990
inc ebx
add edi, 4
cmp ebx, 6
jl 0x5039b7
mov ecx, dword [esi + 0x5c]
push 0x1f
call fcn.005448f0
mov ecx, dword [esi + 0x60]
push 0x24
call fcn.005448f0
mov ecx, dword [esi + 0x64]
push 0x29
call fcn.005448f0
mov ecx, dword [esi + 0x68]
push 0x2b
call fcn.005448f0
mov ecx, dword [esi + 0x6c]
push 0x30
call fcn.005448f0
mov ecx, dword [esi + 0x70]
push 0x30
call fcn.005448f0
mov ecx, dword [esi + 0x2c]
push 0x1f
call fcn.005464b0
mov ecx, dword [esi + 0x30]
push 0x24
call fcn.005464b0
mov ecx, dword [esi + 0x34]
push 0x29
call fcn.005464b0
mov ecx, dword [esi + 0x38]
push 0x2b
call fcn.005464b0
mov ecx, dword [esi + 0x3c]
push 0x30
call fcn.005464b0
mov ecx, dword [esi + 0x40]
push 0x30
call fcn.005464b0
mov ecx, dword [esi + 0xa8]
push 0
call fcn.004a7820
mov ecx, dword [esi + 0xac]
push 1
call fcn.004a7820
mov ecx, dword [esi + 0xa4]
push 4
call fcn.004a7820
mov ecx, dword [esi + 0xd8]
push 5
push 0x22
push 0x16
call fcn.00496af0
mov ecx, dword [esi + 0xdc]
push 5
push 0xffffffffffffffde
push 0x16
call fcn.00496af0
mov ecx, dword [esi + 0xe0]
push 5
push 0x22
push 0xffffffffffffffea
call fcn.00496af0
mov ecx, dword [esi + 0xe4]
push 5
push 0xffffffffffffffde
push 0xffffffffffffffea
call fcn.00496af0
mov ecx, dword [esi + 0xe8]
push 5
push 0x22
push 0x12
call fcn.00496af0
mov ecx, dword [esi + 0xec]
push 5
push 0xffffffffffffffde
push 0x12
call fcn.00496af0
mov ecx, dword [esi + 0xf0]
push 5
push 0x22
push 0xffffffffffffffee
call fcn.00496af0
push 5
mov ecx, dword [esi + 0xf4]
push 0xffffffffffffffde
push 0xffffffffffffffee
call fcn.00496af0
mov ecx, dword [esi + 0x1a0]
call fcn.0049d610
mov ecx, dword [esi + 0x1a0]
push 8
call fcn.0049d990
mov ecx, dword [esi + 0x1a0]
push str.Menuplate_texRiWp_1vs1
push 0
call fcn.0049e4e0
mov ecx, dword [esi + 0x1a0]
push str.Menuplate_texRiWp_2vs2
push 1
call fcn.0049e4e0
mov ecx, dword [esi + 0x1a0]
push str.Menuplate_texRiWp_2vs2tm
push 2
call fcn.0049e4e0
mov ecx, dword [esi + 0x1a0]
push str.Menuplate_texRiWp_t_t_match
push 3
call fcn.0049e4e0
mov ecx, dword [esi + 0x1a0]
push str.Menuplate_texRiWp_fatal_4way
push 4
call fcn.0049e4e0
mov ecx, dword [esi + 0x1a0]
push str.Menuplate_texRiWp_battle_royal
push 5
call fcn.0049e4e0
mov ecx, dword [esi + 0x1a0]
push str.Menuplate_texRiWp_h_match_1vs2
push 6
call fcn.0049e4e0
mov ecx, dword [esi + 0x1a0]
push str.Menuplate_texRiWp_h_match_1vs3
push 7
call fcn.0049e4e0
mov ecx, dword [esi + 0x1a4]
call fcn.004977a0
mov ecx, dword [esi + 0x1a4]
push 0xe
call fcn.004977c0
mov ecx, dword [esi + 0x1a4]
push 0xc0b80000
push 0x40a00000
call fcn.00553b80
mov ecx, dword [esi + 0x1a8]
call fcn.004977a0
mov ecx, dword [esi + 0x1a8]
push 0xc
call fcn.004977c0
mov ecx, dword [esi + 0x1a8]
push 0xc0b80000
push 0
call fcn.00553b80
lea edi, [esi + 0x1ac]
mov ebx, 6
mov ecx, dword [edi]
call fcn.004977a0
mov ecx, dword [edi]
push 0xe
call fcn.004977c0
add edi, 4
dec ebx
jne 0x503d0a
mov ecx, dword [esi + 0x30c]
call fcn.004977a0
mov ecx, dword [esi + 0x30c]
push 0
call fcn.004977c0
mov ecx, dword [esi + 0x30c]
push 0
push 0
call fcn.00553b80
push 0
push str.Menu_
push str.Menuupleft_win.fml
mov ecx, 0x63b370
call fcn.00418500
push 0
push str.Menu_
push str.Menulowleft_win.fml
mov ecx, 0x63b370
mov dword [esi + 0xb0], eax
call fcn.00418500
push 0
push str.Menu_
push str.Menuupright_win.fml
mov ecx, 0x63b370
mov dword [esi + 0xb4], eax
call fcn.00418500
push 0
push str.Menu_
push str.Menulowright_win.fml
mov ecx, 0x63b370
mov dword [esi + 0xb8], eax
call fcn.00418500
push 0
push str.Menu_
push str.Menu_n_window_for_t2.fml
mov ecx, 0x63b370
mov dword [esi + 0xbc], eax
call fcn.00418500
push 2
push str.Menu_
push str.MenuLight_mselect.fml
mov ecx, 0x63b370
mov dword [esi + 0xc0], eax
call fcn.00418500
push 2
push str.Menu_
push str.Menulight3.fml
mov ecx, 0x63b370
mov dword [esi + 0xc4], eax
call fcn.00418500
push 2
push str.Menu_
push str.MenuLight_mselect_b.fml
mov ecx, 0x63b370
mov dword [esi + 0xc8], eax
call fcn.00418500
push 2
push str.Menu_
push str.Menulight3_black.fml
mov ecx, 0x63b370
mov dword [esi + 0xcc], eax
call fcn.00418500
push 0
push str.Menu_
push str.MenuVS_letter.fml
mov ecx, 0x63b370
mov dword [esi + 0xd0], eax
call fcn.00418500
push 0
push str.Menulight
mov ecx, 0x655f38
mov dword [esi + 0xd4], eax
call fcn.0040fee0
push 0
push str.Menulight2
mov ecx, 0x655f38
mov dword [esi + 0xf8], eax
call fcn.0040fee0
push 0
mov dword [esi + 0xfc], eax
push str.Menu_stump
mov ecx, 0x655f38
call fcn.0040fee0
push 0
push str.Menucursor1
mov ecx, 0x655f38
mov dword [esi + 0x100], eax
call fcn.0040fee0
push 0
push str.Menucursor2
mov ecx, 0x655f38
mov dword [esi + 0x2b8], eax
call fcn.0040fee0
push 0
push str.Menucursor3
mov ecx, 0x655f38
mov dword [esi + 0x2bc], eax
call fcn.0040fee0
push 0
push str.Menucolorbar_p0
mov ecx, 0x655f38
mov dword [esi + 0x2c0], eax
call fcn.0040fee0
push 0
push str.Menucolorbar_p1
mov ecx, 0x655f38
mov dword [esi + 0x2ec], eax
call fcn.0040fee0
push 0
push str.Menucolorbar_p2
mov ecx, 0x655f38
mov dword [esi + 0x2f0], eax
call fcn.0040fee0
push 0
push str.Menucolorbar_p3
mov ecx, 0x655f38
mov dword [esi + 0x2f4], eax
call fcn.0040fee0
push 0
push str.Menucolorbar_p4
mov ecx, 0x655f38
mov dword [esi + 0x2f8], eax
call fcn.0040fee0
push 0
push str.Menucolorbar_p5
mov ecx, 0x655f38
mov dword [esi + 0x2fc], eax
call fcn.0040fee0
push 0
push str.Menucolorbar_p6
mov ecx, 0x655f38
mov dword [esi + 0x300], eax
call fcn.0040fee0
push 0
push str.Menucolorbar_p7
mov ecx, 0x655f38
mov dword [esi + 0x304], eax
call fcn.0040fee0
push 0x10
push str.Menu_titleExhibition
mov ecx, 0x655f38
mov dword [esi + 0x308], eax
call fcn.0040fee0
push 0x10
push str.Menu_title_t_ssselect
mov ecx, 0x655f38
mov dword [esi + 0x314], eax
call fcn.0040fee0
push 0x10
push str.Menu_title_t_m_select
mov ecx, 0x655f38
mov dword [esi + 0x318], eax
call fcn.0040fee0
push 0
push str.Menu_superster_pictures_superstars_3
mov ecx, 0x655f38
mov dword [esi + 0x31c], eax
call fcn.0040fee0
push 0
mov dword [esi + 0x344], eax
push str.Menu_superster_pictures_superstars_2
mov ecx, 0x655f38
call fcn.0040fee0
mov dword [esi + 0x348], eax
lea edi, [esi + 0x2c4]
mov ebx, 0xa
or ebp, 0xffffffff
push 0x3c
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x238], 0x15
je 0x504048
mov ecx, eax
call fcn.00496a40
jmp 0x50404a
xor eax, eax
mov ecx, eax
mov dword [esp + 0x238], ebp
mov dword [edi], eax
call fcn.00496a50
mov ecx, dword [edi]
push 0
push 0x3f800000
push 0x41e00000
call fcn.00496b20
add edi, 4
dec ebx
jne 0x504022
lea edi, [esi + 0x324]
lea ebx, [esi + 0x32c]
mov byte [esi + 0x325], 3
mov byte [esi + 0x326], 2
mov byte [edi], 0
mov byte [esi + 0x327], 1
mov byte [esi + 0x328], 1
mov byte [esi + 0x329], 1
mov byte [esi + 0x32a], 1
mov byte [esi + 0x32b], 0
mov byte [ebx], 0
mov byte [esi + 0x32d], 3
mov byte [esi + 0x32e], 2
mov byte [esi + 0x32f], 1
mov byte [esi + 0x330], 1
mov byte [esi + 0x331], 1
mov byte [esi + 0x332], 1
push 0x1b0
mov byte [esi + 0x333], 0
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x238], 0x16
je 0x504110
mov ecx, eax
call fcn.004a8b50
jmp 0x504112
xor eax, eax
mov ecx, eax
mov dword [esp + 0x238], ebp
mov dword [esi + 0x334], eax
call fcn.004a8b60
mov ecx, dword [esi + 0x334]
push ebx
call fcn.004a8e10
mov ecx, dword [esi + 0x334]
push edi
call fcn.004a9980
push 0x94
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x238], 0x17
je 0x504167
mov ecx, eax
call fcn.0048ee50
jmp 0x504169
xor eax, eax
mov ecx, eax
mov dword [esp + 0x238], ebp
mov dword [esi + 0x338], eax
call fcn.0048ee60
mov eax, 0x4040404
lea edi, [esi + 0x354]
mov dword [esi + 0x33c], eax
lea ebp, [esi + 0x288]
mov word [esi + 0x340], ax
mov eax, 0xfffffcac
sub eax, esi
lea ebx, [esi + 0x278]
mov dword [esp + 0x10], eax
mov byte [edi - 4], 6
mov byte [edi], 6
push ebx
mov ecx, ebp
mov dword [ebx + 0xe0], 0
call fcn.0048edb0
push 0
mov ecx, ebp
call fcn.0048edd0
mov ecx, dword [esp + 0x10]
add ebx, 4
add ebp, 8
inc edi
lea edx, [edi + ecx]
cmp edx, 4
jl 0x5041ac
mov edx, 0xfffffc94
lea eax, [esi + 0x36c]
sub edx, esi
lea ecx, [esi + 0x380]
xor edi, edi
mov byte [eax - 4], 6
mov byte [eax], 6
mov dword [ecx - 0x10], edi
mov dword [ecx], edi
add ecx, 4
inc eax
lea ebx, [edx + eax]
cmp ebx, 4
jl 0x5041f6
mov ecx, dword [esp + 0x230]
mov byte [esi + 0xb86a], 0
mov byte [esi + 0xb97e], 0
mov byte [esi + 0xb97f], 0
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x22c
ret