Function at 0x503390
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9aee30]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x74]
cmp eax, dword [ecx + 8]
jbe 0x50445a
sub esp, 0xf4
nop
mov ebx, dword [esp + 0x104]
mov ebp, dword [esp + 0x108]
jmp 0x5033c0
dec ebp
test ebp, ebp
jle 0x5033cc
mov esi, dword [ebx + ebp*4 - 4]
test esi, esi
je 0x5033bf
mov edx, dword [esp + 0x10c]
cmp edx, ebp
jb 0x504452
nop
mov esi, dword [esp + 0x110]
mov edi, dword [esp + 0x114]
jmp 0x5033ed
dec edi
test edi, edi
jle 0x5033f9
mov eax, dword [esi + edi*4 - 4]
test eax, eax
je 0x5033ec
mov eax, esi
mov esi, dword [esp + 0x118]
cmp esi, edi
jb 0x504449
test ebp, ebp
je 0x503604
cmp edi, 0x64
jl 0x5035c0
mov ecx, ebp
sub ebp, edi
test ebp, ebp
jl 0x5035b9
mov esi, dword [esp + 0x128]
mov ebx, dword [esp + 0x11c]
cmp esi, ebx
jbe 0x504440
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x84], edi
mov dword [esp + 0x78], ebp
mov esi, dword [esp + 0x124]
mov eax, dword [esi + ebx*4]
shr edi, 1
mov dword [esp + 0xa8], edi
test eax, eax
je 0x503539
mov edx, dword [eax + 8]
lea ecx, [edi + 1]
cmp edx, ecx
jl 0x503481
jb 0x50443b
mov eax, dword [eax]
jmp 0x503512
test edi, edi
jne 0x5034cc
lea eax, [0x693140]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004507f0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0x124]
mov edi, dword [esp + 0xa8]
mov edx, 1
mov ecx, 1
jmp 0x503512
mov dword [esp + 0x54], ecx
lea eax, [0x693140]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [edi + 5]
mov dword [esp + 0x48], edx
mov dword [esp + 8], edx
call fcn.004507f0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0x124]
mov edi, dword [esp + 0xa8]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x54]
mov ebx, dword [esi + ebx*4]
mov dword [ebx + 4], ecx
mov dword [ebx + 8], edx
mov ecx, dword [0x9aef70]
test ecx, ecx
je 0x503535
mov ecx, edi
call fcn.0046c8a0
mov dword [edi], eax
mov edx, dword [ebx]
mov dword [edi + 4], edx
mov edi, ecx
mov dword [ebx], eax
jmp 0x503598
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.004fc5b0
mov eax, dword [0x9aef70]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x503566
mov ebx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x124]
jmp 0x503582
call fcn.0046c8a0
mov dword [edi], ecx
mov ebx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x124]
mov esi, dword [ebp + ebx*4]
mov dword [edi + 4], esi
mov dword [ebp + ebx*4], ecx
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0x124]
mov edi, dword [esp + 0xa8]
mov ebx, dword [esp + 0x120]
mov eax, dword [esp + 0x110]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x10c]
jmp 0x5036c4
add esp, 0xf4
ret
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x100]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], esi
call fcn.00502d50
add esp, 0xf4
ret
nop
mov eax, dword [esp + 0xfc]
test eax, eax
je 0x503626
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
shl eax, 2
mov dword [esp + 4], eax
call fcn.0046d050
add esp, 0xf4
ret
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x100]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 0x18], ebx
call fcn.004fad70
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x10c]
mov ebp, dword [esp + 0xa8]
mov esi, dword [esp + 0x104]
mov edi, dword [esp + 0x124]
mov eax, ecx
mov ecx, edx
mov edx, ebx
mov ebx, dword [esp + 0x120]
mov esi, edi
mov edi, ebp
mov ebp, dword [esp + 0xc4]
cmp ebp, edi
jle 0x503ae0
sub ebp, edi
mov ebx, dword [esp + 0xc8]
cmp ebx, ebp
jb 0x504432
mov dword [esp + 0xc4], ebp
sub edx, ebp
mov dword [esp + 0x5c], edx
neg edx
shl ebp, 2
sar edx, 0x1f
and ebp, edx
mov edx, edi
mov edi, dword [esp + 0x11c]
mov esi, dword [esi + edi*4]
mov edi, dword [esi + 4]
mov dword [esp + 0x64], edi
mov edi, dword [esp + 0xc4]
sub ebx, edi
mov dword [esp + 0x58], ebx
mov edi, dword [esp + 0x104]
add ebp, edi
mov dword [esp + 0xd4], ebp
mov edi, dword [esi]
mov dword [esp + 0xdc], edi
mov esi, dword [esi + 8]
mov dword [esp + 0x6c], esi
nop
mov ebx, dword [esp + 0x64]
test ebx, ebx
je 0x503770
mov dword [esp], edi
shl ebx, 2
mov dword [esp + 4], ebx
call fcn.0046d050
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0xdc]
lea eax, [edx + ecx]
mov esi, dword [esp + 0x5c]
cmp esi, eax
jb 0x504429
lea ebx, [edx - 1]
cmp ebx, eax
ja 0x504420
mov dword [esp + 0xa4], ebx
sub esi, edx
inc esi
mov dword [esp + 0xc0], esi
shl ebx, 2
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, ebx
add esi, ebp
mov ebp, dword [esp + 0xa4]
cmp ecx, ebp
jb 0x504419
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xf0], esi
mov dword [esp], edi
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
mov ebp, dword [esp + 0x6c]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
lea esi, [ecx + 1]
mov dword [esp + 0x10], esi
mov esi, dword [esp + 0xc0]
mov dword [esp + 0x14], esi
sub ecx, edx
mov esi, dword [esp + 0x118]
sub esi, edx
inc esi
mov dword [esp + 0xb8], esi
inc ecx
mov dword [esp + 0xb4], ecx
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, ebx
mov ebx, dword [esp + 0x110]
add esi, ebx
mov dword [esp + 0xec], esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x11c]
inc ecx
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x120]
mov dword [esp + 0x28], ecx
mov esi, dword [esp + 0x124]
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x128]
mov dword [esp + 0x30], esi
mov esi, dword [esp + 0x12c]
mov dword [esp + 0x34], esi
call fcn.00503390
nop
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x64]
jmp 0x504176
mov edx, dword [esp + 0x6c]
cmp ecx, edx
ja 0x504414
mov dword [esp + 0x80], ecx
mov ebx, dword [esp + 0x120]
mov ebp, dword [ebx + 8]
mov esi, dword [esp + 0x84]
lea edi, [esi + esi*2]
cmp ebp, edi
jl 0x5038ca
jb 0x50440b
mov ebx, dword [ebx]
mov dword [esp + 0x44], ebp
mov ebp, ebx
mov ebx, dword [esp + 0x120]
jmp 0x503944
cmp edi, 1
jne 0x5038f8
mov dword [esp + 0xb0], 0
mov edi, 1
lea ebp, [esp + 0xb0]
mov ebp, 1
mov dword [esp + 0x44], ebp
lea ebp, [esp + 0xb0]
jmp 0x503944
mov dword [esp + 0x50], edi
lea eax, [0x693140]
mov dword [esp], eax
mov dword [esp + 4], edi
lea ecx, [esi + esi*2 + 4]
mov dword [esp + 0x44], ecx
mov dword [esp + 8], ecx
call fcn.004507f0
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x6c]
mov esi, dword [esp + 0x84]
mov edi, dword [esp + 0x50]
mov ebp, ebx
mov ebx, dword [esp + 0x120]
nop
test edi, edi
je 0x503980
mov dword [esp + 0x3c], edi
mov dword [esp + 0xd0], ebp
mov dword [esp], ebp
shl edi, 2
mov dword [esp + 4], edi
call fcn.0046d050
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x6c]
mov ebp, dword [esp + 0xd0]
mov edi, dword [esp + 0x3c]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x110]
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 0xa4]
mov dword [esp + 0x1c], ebp
mov esi, dword [esp + 0x118]
mov dword [esp + 0x20], esi
call fcn.004fae80
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe8], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x9c], edx
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xd4]
xor esi, esi
jmp 0x504211
mov esi, ebx
jmp 0x504370
mov edi, dword [esp + 0x5c]
cmp ebx, edi
ja 0x5043a9
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], edi
call fcn.004f9dd0
mov eax, dword [esp + 0x18]
test eax, eax
jg 0x504391
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x5c]
cmp ecx, edx
ja 0x50438c
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0xe8]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ecx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 0x20], ebx
call fcn.005044b0
mov eax, dword [esp + 0x24]
test eax, eax
jbe 0x50362d
mov edx, dword [esp + 0x94]
mov ecx, dword [esp + 0x58]
cmp edx, ecx
ja 0x504385
mov ebx, dword [esp + 0x5c]
sub ebx, edx
sub ecx, edx
mov ebp, ebx
neg ebx
shl edx, 2
sar ebx, 0x1f
and ebx, edx
mov edx, dword [esp + 0xd4]
add edx, ebx
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], eax
call fcn.00504520
jmp 0x50362d
mov ebp, dword [esp + 0x11c]
mov esi, dword [esi + ebp*4]
mov ebx, dword [esi + 4]
mov dword [esp + 0x60], ebx
mov ebp, dword [esi + 8]
mov dword [esp + 0x68], ebp
mov esi, dword [esi]
mov dword [esp + 0xd8], esi
nop
test ebx, ebx
je 0x503b39
mov dword [esp], esi
shl ebx, 2
mov dword [esp + 4], ebx
call fcn.0046d050
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x10c]
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x68]
mov esi, dword [esp + 0xd8]
mov edi, dword [esp + 0xa8]
lea eax, [edi - 1]
mov ebp, dword [esp + 0xc8]
cmp ebp, eax
jb 0x50416e
mov dword [esp + 0xa0], eax
sub edx, edi
sub ebp, edi
inc edx
mov dword [esp + 0x74], edx
shl eax, 2
neg edx
sar edx, 0x1f
and edx, eax
mov edi, dword [esp + 0x104]
add edx, edi
inc ebp
mov dword [esp + 0x70], ebp
jmp 0x503b7d
dec ebp
mov edi, dword [esp + 0x104]
test ebp, ebp
jle 0x503b90
mov edi, dword [edx + ebp*4 - 4]
test edi, edi
je 0x503b75
mov edi, dword [esp + 0x104]
mov edi, dword [esp + 0x74]
cmp ebp, edi
ja 0x504165
mov edi, dword [esp + 0xa0]
cmp ecx, edi
jb 0x50415e
mov dword [esp + 0xc4], eax
mov dword [esp + 0xe0], edx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov edi, dword [esp + 0x68]
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x74]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x118]
mov edx, dword [esp + 0xa8]
sub ebp, edx
sub ecx, edx
inc ebp
mov dword [esp + 0xc0], ebp
inc ecx
mov dword [esp + 0xbc], ecx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, eax
mov eax, dword [esp + 0x110]
add ebp, eax
mov dword [esp + 0xf0], ebp
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x11c]
inc edx
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x120]
mov dword [esp + 0x28], edx
mov ecx, dword [esp + 0x124]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x12c]
mov dword [esp + 0x34], ecx
call fcn.00503390
nop
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x60]
jmp 0x503c74
dec ecx
test ecx, ecx
jle 0x503c80
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x503c73
mov edx, dword [esp + 0x68]
cmp ecx, edx
ja 0x504159
mov dword [esp + 0x7c], ecx
mov ebx, dword [esp + 0x120]
mov ebp, dword [ebx + 8]
mov esi, dword [esp + 0x84]
lea edi, [esi + esi*2]
cmp ebp, edi
jl 0x503cb2
jb 0x504150
mov ebx, dword [ebx]
jmp 0x503d12
cmp edi, 1
jne 0x503cd5
mov dword [esp + 0xac], 0
mov edi, 1
lea ebx, [esp + 0xac]
mov ebp, 1
jmp 0x503d12
mov dword [esp + 0x4c], edi
lea eax, [0x693140]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esi + esi*2 + 4]
mov dword [esp + 0x40], eax
mov dword [esp + 8], eax
call fcn.004507f0
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x68]
mov edi, dword [esp + 0x4c]
mov ebp, dword [esp + 0x40]
nop
test edi, edi
je 0x503d53
mov dword [esp + 0x38], edi
mov dword [esp + 0xcc], ebx
mov dword [esp + 0x40], ebp
mov dword [esp], ebx
shl edi, 2
mov dword [esp + 4], edi
call fcn.0046d050
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0x40]
mov edi, dword [esp + 0x38]
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x110]
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 0xa0]
mov dword [esp + 0x1c], ebp
mov esi, dword [esp + 0x118]
mov dword [esp + 0x20], esi
call fcn.004fae80
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x98], edx
mov ebx, dword [esp + 0x104]
mov ebp, dword [esp + 0xc8]
xor esi, esi
jmp 0x503df0
mov edi, dword [esp + 0x88]
lea esi, [edi + 1]
mov ebx, dword [esp + 0x104]
mov ebp, dword [esp + 0xc8]
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x98]
cmp esi, 2
jge 0x503f77
mov edi, ebp
jmp 0x50412d
mov edi, dword [esp + 0xc8]
mov edi, dword [esp + 0x10c]
cmp edi, ebp
jb 0x504147
mov dword [esp + 0x88], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edi
call fcn.004f9dd0
mov eax, dword [esp + 0x18]
test eax, eax
jle 0x503dc3
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
call fcn.00504520
mov edx, dword [esp + 0x98]
mov ecx, dword [esp + 0xa0]
cmp edx, ecx
jb 0x504142
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x110]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ecx
mov ebp, dword [esp + 0x118]
mov dword [esp + 0x20], ebp
call fcn.005044b0
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0xa0]
cmp eax, ecx
jle 0x503f2a
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0xa8]
sub edx, ebx
sub eax, ebx
inc edx
mov edi, edx
neg edx
sar edx, 0x1f
mov ebx, dword [esp + 0xc4]
and edx, ebx
mov ebx, dword [esp + 0xe4]
add edx, ebx
mov dword [esp], edx
inc eax
mov dword [esp + 4], eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ecx
call fcn.00504520
mov eax, dword [esp + 0xe0]
mov dword [esp], eax
mov ecx, dword [esp + 0x70]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x74]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0xf0]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0xbc]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0xc0]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 0
call fcn.004fad70
jmp 0x503dc3
mov esi, ebp
jmp 0x503f7c
dec ebp
test ebp, ebp
jle 0x503f88
mov edi, dword [ebx + ebp*4 - 4]
test edi, edi
je 0x503f7b
mov edi, dword [esp + 0x10c]
cmp edi, ebp
jb 0x50411c
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edi
call fcn.004f9dd0
mov eax, dword [esp + 0x18]
test eax, eax
jg 0x504104
mov edx, dword [esp + 0x10c]
mov ecx, dword [esp + 0x90]
cmp edx, ecx
jb 0x5040ff
mov eax, dword [esp + 0x104]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0xe4]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ecx
mov ebx, dword [esp + 0x98]
mov dword [esp + 0x20], ebx
call fcn.005044b0
mov eax, dword [esp + 0x24]
test eax, eax
jbe 0x504074
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0x90]
cmp ecx, edx
jb 0x5040f8
mov ebx, dword [esp + 0x10c]
sub ebx, edx
sub ecx, edx
mov ebp, ebx
neg ebx
shl edx, 2
sar ebx, 0x1f
and ebx, edx
mov edx, dword [esp + 0x104]
add edx, ebx
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], eax
call fcn.00504520
mov eax, dword [esp + 0x1c]
test eax, eax
ja 0x5040e0
nop
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x7c]
jmp 0x504087
dec ecx
test ecx, ecx
jle 0x504093
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x504086
mov edx, dword [esp + 0x68]
cmp ecx, edx
ja 0x5040db
mov ebx, dword [esp + 0xf8]
mov dword [esp], ebx
mov ebx, dword [esp + 0xfc]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 0
call fcn.004fad70
add esp, 0xf4
ret
call fcn.0046c950
lea eax, [0x6929c0]
mov dword [esp], eax
lea eax, [0x748df8]
mov dword [esp + 4], eax
call fcn.00439660
mov eax, edx
call fcn.0046c970
call fcn.0046c950
lea eax, [0x6929c0]
mov dword [esp], eax
lea eax, [0x748df8]
mov dword [esp + 4], eax
call fcn.00439660
mov ecx, ebp
mov edx, edi
call fcn.0046c950
dec ebp
mov edi, dword [esp + 0xc8]
test ebp, ebp
jle 0x503e07
mov edi, dword [ebx + ebp*4 - 4]
test edi, edi
je 0x504125
jmp 0x503e00
call fcn.0046c950
mov ecx, ebp
mov edx, edi
call fcn.0046c950
mov ecx, edi
mov edx, ebp
call fcn.0046c950
call fcn.0046c950
mov eax, edi
call fcn.0046c970
mov ecx, ebp
mov edx, edi
call fcn.0046c950
mov ecx, ebp
call fcn.0046c970
dec ecx
test ecx, ecx
jle 0x503888
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x504175
jmp 0x503888
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa8]
sub edx, ecx
inc edx
mov dword [esp + 4], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 8], edx
mov ebp, dword [esp + 0xec]
mov dword [esp + 0xc], ebp
mov esi, dword [esp + 0xb4]
mov dword [esp + 0x10], esi
mov edi, dword [esp + 0xb8]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], 0
call fcn.004fad70
mov eax, dword [esp + 0x8c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0xd4]
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xd4]
cmp esi, 2
jge 0x5039f4
mov dword [esp + 0x8c], esi
nop
mov edi, ebx
jmp 0x5043ba
mov esi, dword [esp + 0x8c]
mov esi, dword [esp + 0x5c]
cmp ebx, esi
ja 0x504402
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], esi
call fcn.004f9dd0
mov eax, dword [esp + 0x18]
test eax, eax
jle 0x5043cf
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov ecx, dword [esp + 0x80]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x6c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
call fcn.00504520
mov edx, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa4]
cmp edx, ecx
jb 0x5043fd
mov eax, dword [esp + 0xe8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x110]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ecx
mov ebp, dword [esp + 0x118]
mov dword [esp + 0x20], ebp
call fcn.005044b0
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0xa4]
cmp eax, ecx
jle 0x50435e
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0xa8]
sub edx, ebx
sub eax, ebx
inc edx
mov edi, edx
neg edx
sar edx, 0x1f
mov ebp, dword [esp + 0xbc]
and edx, ebp
mov ebp, dword [esp + 0xe8]
add edx, ebp
mov dword [esp], edx
inc eax
mov dword [esp + 4], eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ecx
call fcn.00504520
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x58]
cmp edx, ecx
jae 0x50418b
jmp 0x5043f4
dec ebx
test ebx, ebx
jle 0x5039fb
mov edi, dword [ebp + ebx*4 - 4]
test edi, edi
je 0x50436f
jmp 0x5039fb
mov eax, edx
call fcn.0046c970
call fcn.0046c950
lea eax, [0x6929c0]
mov dword [esp], eax
lea eax, [0x748df8]
mov dword [esp + 4], eax
call fcn.00439660
mov ecx, ebx
mov edx, edi
call fcn.0046c950
dec ebx
mov esi, dword [esp + 0x8c]
test ebx, ebx
jle 0x504230
mov esi, dword [ebp + ebx*4 - 4]
test esi, esi
je 0x5043b2
jmp 0x504229
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xd4]
jmp 0x5039f4
mov eax, ecx
mov ecx, edx
call fcn.0046c970
call fcn.0046c950
mov ecx, ebx
mov edx, esi
call fcn.0046c950
mov ecx, edi
mov edx, ebp
call fcn.0046c950
call fcn.0046c950
mov eax, ebp
call fcn.0046c970
mov ecx, eax
mov eax, ebx
call fcn.0046c970
mov ecx, eax
mov edx, esi
call fcn.0046c950
mov eax, ebp
mov ecx, ebx
call fcn.0046c970
call fcn.0046c950
mov eax, ebx
mov ecx, esi
call fcn.0046c910
mov ecx, edi
mov edx, esi
call fcn.0046c950
mov ecx, ebp
call fcn.0046c950
nop
call fcn.0046b490
jmp fcn.00503390