Function at 0x5209f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x10]
cmp eax, dword [ecx + 8]
jbe 0x521b9c
sub esp, 0x90
mov eax, 0
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x94]
mov dword [esp], eax
call fcn.0051dd40
mov eax, dword [esp + 4]
mov ecx, dword [eax + 8]
test ecx, ecx
jne 0x521b73
mov ecx, dword [eax + 4]
mov edx, dword [eax]
test ecx, ecx
je 0x521b1b
mov dword [esp + 0x34], eax
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], edx
mov ebx, dword [esp + 0xa0]
mov ebp, ebx
and ebx, 0x1f
cmp ebx, 0xb
ja 0x5210c8
cmp ebx, 5
ja 0x520f27
cmp ebx, 1
jne 0x520dc1
cmp ecx, 1
je 0x520cb7
cmp ecx, 4
jge 0x520bd6
jne 0x520adc
mov ebx, dword [edx]
cmp ebx, 0x65757254
jne 0x520ad9
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov byte [esp + 0xc], 1
call fcn.004a2170
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
add esp, 0x90
ret
cmp ecx, 4
jne 0x520ae8
mov ecx, dword [edx]
cmp ecx, 0x65757274
je 0x520a99
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.004a3100
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x520b15
mov eax, dword [eax + 4]
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ecx
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
lea eax, [0x80a3e0]
mov dword [esp], eax
call fcn.00407520
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x94]
mov dword [esp], eax
lea eax, [0x89d982]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xe
lea eax, [esp + 0x80]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 2
call fcn.0051c670
mov eax, dword [esp + 0x18]
lea ecx, [0x9218f0]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], eax
add esp, 0x90
ret
je 0x520c5e
cmp ecx, 5
jne 0x520c37
mov ebx, dword [edx]
cmp ebx, 0x736c6146
jne 0x520c59
movzx ebx, byte [edx + 4]
cmp bl, 0x65
jne 0x520c34
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov byte [esp + 0xc], 0
call fcn.004a2170
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
add esp, 0x90
ret
cmp ecx, 5
jne 0x520ae8
mov ecx, dword [edx]
cmp ecx, 0x736c6166
jne 0x520ae8
movzx ecx, byte [edx + 4]
cmp cl, 0x65
je 0x520bf4
jmp 0x520ae8
cmp ecx, 5
jmp 0x520c37
mov dword [esp], edx
mov dword [esp + 4], ecx
lea eax, [0x89758f]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.004020a0
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x520c9f
mov ecx, dword [esp + 0x2c]
cmp ecx, 4
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov ebp, dword [esp + 0xa0]
jmp 0x520a8d
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov ebp, dword [esp + 0xa0]
jmp 0x520bdc
mov dword [esp], edx
mov dword [esp + 4], ecx
lea eax, [0x8969ff]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004020a0
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x520da9
mov eax, dword [esp + 0x2c]
cmp eax, 1
je 0x520d33
jne 0x520d2d
mov ecx, dword [esp + 0x30]
movzx edx, byte [ecx]
cmp dl, 0x66
jne 0x520d04
mov ebp, dword [esp + 0xa0]
jmp 0x520bf4
cmp eax, 1
jne 0x520d1d
movzx eax, byte [ecx]
cmp al, 0x74
jne 0x520d1d
mov ebp, dword [esp + 0xa0]
jmp 0x520a99
mov eax, dword [esp + 0x34]
mov ebp, dword [esp + 0xa0]
jmp 0x520ae8
mov ecx, dword [esp + 0x30]
jmp 0x520d07
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x8969d3]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
call fcn.004020a0
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x520d9d
mov eax, dword [esp + 0x2c]
cmp eax, 1
jne 0x520d97
mov ecx, dword [esp + 0x30]
movzx edx, byte [ecx]
cmp dl, 0x30
jne 0x520d7e
mov ebp, dword [esp + 0xa0]
jmp 0x520bf4
cmp eax, 1
jne 0x520d1d
movzx eax, byte [ecx]
cmp al, 0x31
jne 0x520d1d
mov ebp, dword [esp + 0xa0]
jmp 0x520a99
mov ecx, dword [esp + 0x30]
jmp 0x520d81
mov eax, dword [esp + 0x2c]
cmp eax, 1
jmp 0x520cea
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov ebp, dword [esp + 0xa0]
jmp 0x520a84
cmp ebx, 5
jne 0x520ae8
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0x20
call fcn.00453bc0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test edx, edx
je 0x520edd
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x30]
mov eax, dword [eax + 0x2c]
test ecx, ecx
jne 0x520e17
mov ebp, dword [esp + 0xa0]
jmp 0x520ae8
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
lea eax, [0x80f760]
mov dword [esp], eax
mov eax, dword [0xc5bac4]
mov dword [esp + 4], eax
call fcn.0040ea60
mov eax, dword [esp + 0x10]
movzx ecx, byte [esp + 0x14]
mov eax, dword [eax]
test cl, cl
jne 0x520e52
mov ebp, dword [esp + 0xa0]
jmp 0x520ae8
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx + 4]
mov ebx, dword [ecx]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
lea edx, [0x80f620]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040ea60
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
movzx ecx, byte [esp + 0x14]
test cl, cl
jne 0x520e90
mov ebp, dword [esp + 0xa0]
jmp 0x520ae8
mov ecx, dword [esp + 0x98]
mov dword [esp], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
call fcn.004a24e0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
add esp, 0x90
ret
mov edx, dword [esp + 0x98]
mov dword [esp], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004a24e0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
add esp, 0x90
ret
cmp ebx, 6
je 0x521046
cmp ebx, 0xa
je 0x520fc4
cmp ebx, 0xb
jne 0x520ae8
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0x40
call fcn.00453390
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test edx, edx
je 0x520f7a
mov ebp, dword [esp + 0xa0]
jmp 0x520ae8
mov edx, dword [esp + 0x98]
mov dword [esp], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004a28d0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
add esp, 0x90
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0x20
call fcn.00453390
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test edx, edx
je 0x520ffc
mov ebp, dword [esp + 0xa0]
jmp 0x520ae8
mov edx, dword [esp + 0x98]
mov dword [esp], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004a28d0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
add esp, 0x90
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0x40
call fcn.00453bc0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test edx, edx
je 0x52107e
mov ebp, dword [esp + 0xa0]
jmp 0x520ae8
mov edx, dword [esp + 0x98]
mov dword [esp], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004a24e0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
add esp, 0x90
ret
cmp ebx, 0x16
ja 0x521347
lea esi, [ebx - 0xd]
cmp esi, 1
ja 0x521240
cmp ecx, 1
jl 0x521237
lea ebx, [ecx - 1]
cmp ebx, ecx
ja 0x521b8e
mov esi, ecx
sub ecx, ebx
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ebx, ecx
lea ecx, [edx + ebx]
cmp edi, 1
je 0x521204
xor ecx, ecx
test cl, cl
je 0x5211ed
mov ecx, dword [eax]
mov ebx, dword [eax + 4]
cmp ebx, 4
je 0x5211f4
cmp ebx, 3
je 0x5211d2
lea ecx, [esi - 1]
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov edx, dword [esp + 0x9c]
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
call fcn.004a3100
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00452f70
mov eax, dword [esp + 0x14]
test eax, eax
je 0x521190
mov ebp, dword [esp + 0xa0]
jmp 0x520ae8
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 8], eax
call fcn.004a2420
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
add esp, 0x90
ret
movzx ebx, word [ecx]
cmp bx, 0x6e69
jne 0x52112b
movzx ecx, byte [ecx + 2]
cmp cl, 0x66
jne 0x52112b
mov ecx, esi
jmp 0x52112e
mov edi, dword [ecx]
cmp edi, 0x666e692d
jne 0x521122
jmp 0x5211ed
mov dword [esp], ecx
lea eax, [0x8969f9]
mov dword [esp + 4], eax
mov dword [esp + 8], edi
call fcn.004021f0
movzx ecx, byte [esp + 0xc]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0x2c]
jmp 0x52110c
mov esi, ecx
xor ecx, ecx
jmp 0x52110c
cmp ebx, 0x16
jne 0x520ae8
mov eax, dword [esp + 0x94]
mov byte [eax + 9], 1
mov ecx, dword [esp + 0x98]
mov dword [esp], ecx
mov edx, dword [esp + 0x9c]
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
call fcn.004a3100
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004a4240
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0x98]
mov dword [esp], ebx
mov ebp, dword [esp + 0x9c]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xa0]
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
call fcn.004a2090
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 8], eax
call fcn.0049fcc0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x10], eax
call fcn.005209f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], eax
add esp, 0x90
ret
cmp ebx, 0x17
je 0x5214bd
cmp ebx, 0x18
jne 0x5213b0
movzx ecx, byte [edx]
cmp cl, 0x22
jne 0x5213a6
mov ecx, dword [eax + 0x18]
mov eax, dword [eax + 0x14]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.004a2a50
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
add esp, 0x90
ret
cmp cl, 0x27
je 0x52135d
jmp 0x520ae8
cmp ebx, 0x19
jne 0x520ae8
cmp ecx, 1
jne 0x521421
movzx ebx, byte [edx]
cmp bl, 0x3c
jne 0x52141e
lea eax, [0x8969db]
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 1
call fcn.0051e570
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], eax
add esp, 0x90
ret
cmp ecx, 1
jne 0x521433
movzx ecx, byte [edx]
cmp cl, 0x7b
jne 0x521433
lea eax, [0x896a02]
jmp 0x5213cc
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov dword [esp + 4], eax
lea eax, [0x80a3e0]
mov dword [esp], eax
call fcn.00407520
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
mov eax, dword [esp + 0x94]
mov dword [esp], eax
lea eax, [0x8a7307]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1d
lea eax, [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0051c670
mov eax, dword [esp + 0x18]
lea ecx, [0x9218f0]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], eax
add esp, 0x90
ret
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov ecx, dword [esp + 0x9c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004a3100
mov eax, dword [esp + 0xc]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], ecx
mov edx, dword [eax + 0x28]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
cmp eax, 8
jne 0x5216cb
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
test edx, edx
jbe 0x521b95
movzx ecx, byte [ecx]
cmp cl, 0x22
je 0x521532
cmp cl, 0x27
jne 0x521641
mov ecx, dword [eax + 0x18]
mov eax, dword [eax + 0x14]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp], 0
call fcn.0043c0a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x74], edx
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], eax
lea eax, [0x7e9560]
mov dword [esp], eax
lea eax, [esp + 0x74]
mov dword [esp + 4], eax
call fcn.004075a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
test ecx, ecx
je 0x521639
movzx edx, byte [0xc5cc40]
test dl, dl
je 0x5215af
mov dword [0xc5cc44], ecx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x521629
mov dword [0xc5cc48], eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x521621
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x5215d3
or edx, 0x80
mov ebx, dword [esp + 0x98]
mov dword [esp], ebx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xa0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004a2090
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
add esp, 0x90
ret
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x5215d3
lea edi, [0xc5cc48]
call fcn.0044c860
jmp 0x5215af
xor ecx, ecx
xor edx, edx
xor eax, eax
jmp 0x5215d3
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 4], eax
lea eax, [0x80a3e0]
mov dword [esp], eax
call fcn.00407520
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x94]
mov dword [esp], eax
lea eax, [0x89ffd9]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x12
lea eax, [esp + 0x54]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0051c670
mov eax, dword [esp + 0x18]
lea ecx, [0x9218f0]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], eax
add esp, 0x90
ret
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
cmp eax, 1
jne 0x521984
movzx eax, byte [ecx]
cmp al, 0x5b
jne 0x521984
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0x38]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004a4240
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0049fcc0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov ecx, dword [esp + 0x9c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
lea ebx, [esp + 0x68]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.004a3770
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x98]
mov dword [esp], ebx
mov ebp, dword [esp + 0x9c]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xa0]
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.004a2090
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov ecx, dword [esp + 0x9c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
call fcn.004a0b90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x98]
mov dword [esp], ecx
mov edx, dword [esp + 0x9c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xa0]
mov dword [esp + 8], ebx
dec eax
mov dword [esp + 0xc], eax
call fcn.004a0480
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x10], eax
call fcn.005209f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
test eax, eax
jne 0x52196f
mov eax, dword [esp + 0x94]
mov dword [esp], eax
call fcn.0051dd40
mov eax, dword [esp + 4]
mov ecx, dword [eax + 8]
test ecx, ecx
jne 0x521954
mov ecx, dword [eax + 4]
mov edx, dword [eax]
cmp ecx, 1
jne 0x52189f
movzx ebx, byte [edx]
cmp bl, 0x5d
je 0x521937
cmp ecx, 1
jne 0x5218ad
movzx ecx, byte [edx]
cmp cl, 0x2c
je 0x5216e9
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov dword [esp + 4], eax
lea eax, [0x80a3e0]
mov dword [esp], eax
call fcn.00407520
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
mov eax, dword [esp + 0x94]
mov dword [esp], eax
lea eax, [0x8a646e]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1c
lea eax, [esp + 0x4c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0051c670
mov eax, dword [esp + 0x18]
lea ecx, [0x9218f0]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], eax
add esp, 0x90
ret
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
add esp, 0x90
ret
lea eax, [0x9218f0]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
add esp, 0x90
ret
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
add esp, 0x90
ret
mov eax, dword [esp + 0x94]
mov byte [eax + 9], 1
mov ecx, dword [esp + 0x28]
mov ecx, dword [ecx + 0x28]
mov edx, dword [esp + 0x38]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004a4240
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0049fcc0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x5c], edx
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov ecx, dword [esp + 0x9c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
lea ebx, [esp + 0x5c]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.004a3770
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x98]
mov dword [esp], ebx
mov ebp, dword [esp + 0x9c]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xa0]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.004a2090
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov ecx, dword [esp + 0x9c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
call fcn.004a0b90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x98]
mov dword [esp], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 8], ecx
dec eax
mov dword [esp + 0xc], eax
call fcn.004a0480
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x10], eax
call fcn.005209f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], eax
add esp, 0x90
ret
mov eax, dword [esp + 0x94]
mov dword [esp], eax
lea eax, [0x89db88]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xe
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.0051c670
mov eax, dword [esp + 0x18]
lea ecx, [0x9218f0]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], eax
add esp, 0x90
ret
lea eax, [0x9218f0]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
add esp, 0x90
ret
call fcn.00426870
ud2
call fcn.00426770
ud2
call fcn.0044b100
jmp fcn.005209f0