Function at 0x528e10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6cfe90]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x488]
cmp eax, dword [ecx + 8]
jbe 0x52a051
sub esp, 0x508
lea edi, [esp + 0x478]
xor eax, eax
call fcn.00464ca3
mov ecx, dword [esp + 0x50c]
mov dword [esp + 0x4a0], ecx
mov ecx, dword [esp + 0x510]
mov dword [esp + 0x4a4], ecx
lea edi, [esp + 0x40c]
call fcn.00464c95
call fcn.00447f30
lea edi, [esp + 0x3f0]
xor eax, eax
call fcn.00464ca9
lea edi, [esp + 0x384]
call fcn.00464c95
lea ecx, [esp + 0x384]
mov dword [esp + 0x3fc], ecx
call fcn.00447f30
mov ecx, dword [esp]
mov dword [esp + 0x3f8], ecx
lea edi, [esp + 0x368]
xor eax, eax
call fcn.00464ca9
lea edi, [esp + 0x314]
call fcn.00464c9b
lea ecx, [esp + 0x314]
mov dword [esp + 0x374], ecx
call fcn.00447f30
mov ecx, dword [esp]
mov dword [esp + 0x370], ecx
mov eax, 1
lea ecx, [esp + 0x478]
mov edx, 1
xor ebx, ebx
lea ebp, [esp + 0x84]
lea esi, [esp + 0x3f0]
xor edi, edi
xor eax, eax
mov dword [esp + 0x74], eax
xor eax, eax
mov dword [esp + 0x70], eax
mov eax, 1
jmp 0x528f39
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x18c]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], esi
mov ebp, dword [esp + 0x4d0]
mov esi, dword [esp + 0x188]
mov dword [esp + 0x1d0], edi
test eax, eax
je 0x528fbf
mov dword [esp + 0x30c], ebp
mov dword [esp + 0x7c], edx
mov dword [esp + 0x78], eax
mov dword [esp + 0x4d0], ecx
mov dword [esp + 0xac], ebx
mov dword [esp + 0x310], esi
call fcn.0040d4a0
mov eax, dword [esp]
mov dword [esp + 0x188], eax
mov ecx, dword [esp + 0x4d0]
mov edx, ecx
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x70]
mov edi, dword [esp + 0x1d0]
mov ebx, dword [esp + 0xac]
mov dword [esp + 0x54], ebx
xor ebx, ebx
mov dword [esp + 0x50], ebx
mov ebp, dword [esp + 0x30c]
mov dword [esp + 0x18c], ebp
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x74]
jmp 0x5295f0
mov dword [esp], edi
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x74]
mov dword [esp + 8], ecx
call fcn.0040a380
mov eax, dword [esp + 0xc]
lea ecx, [0x5b67e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0048e9d0
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x1d0]
mov ebx, eax
mov ebp, edx
xor esi, esi
xor edi, edi
jmp 0x52902b
mov esi, dword [esp + 0x70]
mov edi, dword [esp + 0x1d0]
mov ebx, edx
mov esi, dword [esp + 0xa0]
mov edx, eax
mov edi, ecx
mov ecx, dword [esp + 0x70]
mov eax, ebp
mov ebp, dword [esp + 0x1d0]
mov dword [esp + 0xac], eax
mov dword [esp + 0xa8], edi
mov dword [esp + 0x4d0], edx
cmp esi, ecx
jge 0x5293e2
jae 0x5295aa
mov dword [esp + 0x64], esi
imul edx, esi, 0x34
mov dword [esp + 0xa4], edx
add edx, ebp
lea edi, [esp + 0x1d4]
mov esi, edx
call fcn.0046513e
mov ecx, dword [esp + 0x1d4]
mov dword [esp + 0x190], ecx
mov edx, dword [esp + 0x1d8]
mov dword [esp + 0x58], edx
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x70]
mov dword [esp + 0x8c], eax
mov eax, 1
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x8c]
jmp 0x52946d
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x1d0]
mov eax, dword [esp + 0xac]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x70]
cmp ebx, 1
jne 0x5291bc
mov ecx, dword [esp + 0xa8]
inc ecx
cmp eax, ecx
jb 0x5290ea
mov edx, dword [esp + 0x4d0]
jmp 0x529131
mov edx, dword [esp + 0x4d0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x56dda0]
mov dword [esp + 0x10], eax
call fcn.0044b670
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebp, dword [esp + 0x1d0]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x70]
mov dword [esp + 0x44], ecx
mov ebx, dword [0x6cff38]
imul ebp, ecx, 0x34
lea ebp, [edx + ebp - 0x34]
test ebx, ebx
je 0x529196
mov dword [esp + 0x180], edx
mov dword [esp + 0x48], eax
mov dword [esp + 0x4d0], ebp
lea eax, [0x56dda0]
mov dword [esp], eax
mov dword [esp + 4], ebp
lea eax, [esp + 0x1d4]
mov dword [esp + 8], eax
call fcn.004113a0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x180]
mov ebp, dword [esp + 0x4d0]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x70]
mov edi, ebp
lea esi, [esp + 0x1d4]
call fcn.0046513e
mov ebx, dword [esp + 0xa0]
mov ebp, eax
mov ecx, dword [esp + 0x44]
mov eax, edx
mov edx, dword [esp + 0x74]
jmp 0x529006
mov edx, dword [esp + 0x74]
cmp edx, esi
jb 0x52959a
mov ebx, dword [esp + 0x64]
cmp ebx, esi
ja 0x529591
lea edi, [esp + 0xb0]
xor eax, eax
call fcn.00464ca3
mov ecx, edx
sub ecx, ebx
neg ecx
sar ecx, 0x1f
mov ebx, dword [esp + 0xa4]
and ebx, ecx
lea ecx, [ebx + ebp]
mov edi, ecx
mov ecx, dword [esp + 0x80]
test ecx, ecx
jbe 0x529588
mov dword [esp + 0x4cc], edi
mov ebx, dword [ebp + ebx + 0x20]
xor eax, eax
mov dword [esp + 0x40], eax
mov eax, 0xffffffff
mov dword [esp + 0xa4], eax
xor eax, eax
jmp 0x529511
lea edi, [esp + 0xb0]
call fcn.00464ca3
mov ebx, dword [esp + 0xa0]
xor ecx, ecx
jmp 0x5292c0
mov esi, dword [esp + 0xa0]
mov ecx, ebp
mov ebx, dword [esp + 0xa4]
test ebx, ebx
jl 0x529282
cmp ecx, ebx
jbe 0x529581
imul ecx, ebx, 0x34
mov ebx, dword [esp + 0x4cc]
add ecx, ebx
lea edi, [esp + 0xb0]
mov ebx, esi
mov esi, ecx
call fcn.0046513e
mov ecx, 1
jmp 0x5292c0
cmp ecx, 1
jle 0x529299
lea edi, [esp + 0xb0]
call fcn.00464ca3
mov ebx, esi
xor ecx, ecx
jmp 0x5292c0
test ecx, ecx
jbe 0x529578
lea edi, [esp + 0xb0]
mov esi, dword [esp + 0x4cc]
call fcn.0046513e
mov ebx, dword [esp + 0xa0]
mov ecx, 1
mov byte [esp + 0x3c], cl
lea edi, [esp + 0x2d8]
lea esi, [esp + 0xb0]
call fcn.0046513e
movzx ecx, byte [esp + 0x3c]
test cl, cl
je 0x5293c8
mov ecx, dword [esp + 0xa8]
inc ecx
mov ebp, dword [esp + 0xac]
cmp ebp, ecx
jb 0x529300
mov esi, dword [esp + 0x4d0]
jmp 0x529344
mov eax, dword [esp + 0x4d0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x56dda0]
mov dword [esp + 0x10], eax
call fcn.0044b670
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0xa0]
mov esi, edx
mov ebp, eax
mov edx, dword [esp + 0x74]
mov dword [esp + 0x44], ecx
mov edi, dword [0x6cff38]
imul eax, ecx, 0x34
lea eax, [esi + eax - 0x34]
test edi, edi
je 0x5293af
mov dword [esp + 0x4c4], esi
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x4d0], eax
lea ecx, [0x56dda0]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea ecx, [esp + 0x2d8]
mov dword [esp + 8], ecx
call fcn.004113a0
mov eax, dword [esp + 0x4d0]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0x4c4]
mov edi, eax
mov eax, esi
lea esi, [esp + 0x2d8]
call fcn.0046513e
mov ecx, dword [esp + 0x44]
jmp 0x529006
mov ebp, dword [esp + 0xac]
mov ecx, dword [esp + 0xa8]
mov eax, dword [esp + 0x4d0]
jmp 0x529006
mov dword [esp], edx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
call fcn.0040a380
mov eax, dword [esp + 0xc]
lea ecx, [0x5b67fc]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0048e9d0
mov eax, dword [esp + 0x4d0]
mov dword [esp + 0x514], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x518], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x51c], eax
add esp, 0x508
ret
mov eax, dword [esp + 0x80]
inc eax
mov ecx, dword [esp + 0x190]
mov ebp, dword [esp + 0x1d0]
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x70]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xac]
mov ebx, dword [esp + 0x80]
add esi, ebx
mov dword [esp + 0xa0], esi
cmp edi, esi
jle 0x5290cc
jbe 0x5295a1
imul eax, esi, 0x34
add eax, ebp
lea edi, [esp + 0x19c]
mov esi, eax
call fcn.0046513e
mov ecx, dword [esp + 0x1a0]
cmp ecx, edx
jne 0x5290ba
mov eax, dword [esp + 0x19c]
mov dword [esp], eax
mov eax, dword [esp + 0x190]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004030e0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x529439
jmp 0x5290ac
mov esi, dword [esp + 0x4c8]
lea edi, [esi + 0x34]
inc ebx
mov esi, dword [esp + 0x80]
mov esi, dword [esp + 0xa0]
mov dword [esp + 0x40], ebx
mov dword [esp + 0xa4], ebp
mov ebx, ecx
mov ebp, dword [esp + 0x1d0]
mov ecx, dword [esp + 0x80]
mov ebp, dword [esp + 0x40]
cmp ebp, ecx
jge 0x52924c
mov dword [esp + 0x4c8], edi
lea edi, [esp + 0x208]
mov esi, dword [esp + 0x4c8]
call fcn.0046513e
cmp dword [esp + 0x228], ebx
jg 0x529243
movzx ecx, byte [esp + 0x220]
test cl, cl
je 0x529568
mov ecx, ebx
mov ebx, dword [esp + 0xa4]
test ebx, ebx
jge 0x52922c
mov ebx, ebp
jmp 0x5294dd
mov ecx, ebx
mov ebx, ebp
mov ebp, dword [esp + 0xa4]
jmp 0x5294dd
xor eax, eax
mov ecx, eax
call fcn.00464b30
mov eax, ebx
call fcn.00464b30
xor eax, eax
mov ecx, eax
call fcn.00464b30
mov eax, ebx
mov ecx, esi
call fcn.00464b90
mov ecx, esi
call fcn.00464b70
mov eax, esi
mov ecx, edi
call fcn.00464b30
mov eax, esi
call fcn.00464b30
mov dword [esp + 0x74], eax
mov edi, dword [esp + 0x4c8]
add edi, 0x34
mov eax, dword [esp + 0xac]
dec eax
mov dword [esp + 0x54], ebx
mov dword [esp + 0x50], ebp
mov dword [esp + 0x18c], esi
mov ebx, eax
mov ebp, dword [esp + 0x74]
mov esi, ecx
mov eax, dword [esp + 0x188]
mov ecx, edi
mov edi, edx
mov edx, dword [esp + 0x4d0]
test ebx, ebx
jle 0x528f10
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xa4], esi
mov dword [esp + 0x4cc], edi
mov dword [esp + 0x4c8], ecx
lea edi, [esp + 0x2a4]
mov esi, ecx
call fcn.0046513e
lea eax, [0x558da0]
mov dword [esp], eax
lea ecx, [esp + 0x368]
mov dword [esp + 4], ecx
lea edx, [esp + 0x2cc]
mov dword [esp + 8], edx
call fcn.0040d870
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x529681
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x4cc]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x18c]
jmp 0x5295b1
lea eax, [0x558da0]
mov dword [esp], eax
lea ecx, [esp + 0x368]
mov dword [esp + 4], ecx
lea edx, [esp + 0x2cc]
mov dword [esp + 8], edx
call fcn.0040de00
mov eax, dword [esp + 0xc]
mov byte [eax], 1
xor eax, eax
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x4cc]
mov ebx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0x18c]
mov edi, dword [esp + 0x50]
jmp 0x529712
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x1d0]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x18c]
jmp 0x5295b1
mov edi, dword [esp + 0x68]
inc edi
mov dword [esp + 0x84], eax
mov eax, edi
mov edi, ecx
mov ecx, edx
mov edx, esi
mov esi, dword [esp + 0x84]
mov dword [esp + 0x68], eax
mov dword [esp + 0x54], ebp
mov dword [esp + 0x50], edi
mov dword [esp + 0x18c], esi
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x1d0], edx
mov ecx, dword [esp + 0x2cc]
mov edx, dword [esp + 0x2d0]
mov ecx, dword [ecx + 0x64]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0x68]
cmp dword [esp + 4], eax
jle 0x5296d4
mov ecx, dword [esp + 0x2cc]
mov edx, dword [esp + 0x2d0]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0x14c]
lea esi, [esp + 8]
call fcn.0046513e
mov eax, dword [esp + 0x158]
test eax, eax
je 0x5297ac
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x70]
mov esi, dword [esp + 0x1d0]
mov ebp, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x18c]
jmp 0x5296f7
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x57bccb]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.00482f20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp eax, 1
jne 0x52980d
cmp byte [ecx], 0x2d
jne 0x52980d
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x70]
mov esi, dword [esp + 0x1d0]
mov ebp, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x18c]
jmp 0x5296f7
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0052a5b0
mov eax, dword [esp + 8]
mov dword [esp + 0x194], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x184], edx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x4c], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0052a200
movzx eax, byte [esp + 8]
test al, al
je 0x529861
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x194]
jmp 0x529865
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x194], ecx
mov edx, dword [esp + 0x2c4]
lea ebx, [0x557720]
mov dword [esp], ebx
inc edx
mov dword [esp + 0x60], edx
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.0044b5b0
mov eax, dword [esp + 0x2c4]
mov ecx, dword [esp + 0x60]
cmp eax, ecx
jl 0x5298a3
mov eax, ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x4c0], edx
mov ebx, dword [esp + 0x2c0]
cmp ebx, edx
je 0x5298d7
mov dword [esp], edx
mov dword [esp + 4], ebx
shl eax, 2
mov dword [esp + 8], eax
call fcn.004653a0
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x4c0]
mov eax, dword [esp + 0x2c4]
cmp eax, ecx
jae 0x52a04b
mov ecx, dword [esp + 0x68]
mov dword [edx + eax*4], ecx
mov eax, dword [esp + 0x15c]
mov dword [esp + 0x6c], eax
mov ebx, dword [esp + 0x160]
mov dword [esp + 0x198], ebx
mov ebp, dword [eax + 0x60]
mov dword [esp], ebx
call ebp
mov eax, dword [esp + 8]
test eax, eax
je 0x529923
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0x198]
jmp 0x529965
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0x198]
mov dword [esp], edx
call ecx
cmp dword [esp + 4], 0x16
je 0x52994a
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0x198]
jmp 0x529965
mov eax, dword [esp + 0x6c]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0x198]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ebx, dword [esp + 8]
mov dword [esp + 0x198], ebx
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x52997f
mov edx, 1
jmp 0x5299b3
movzx edx, byte [esp + 0x17c]
test dl, dl
jne 0x529992
mov edx, 1
jmp 0x5299b3
mov ecx, dword [eax + 0x50]
mov dword [esp], ebx
call ecx
cmp dword [esp + 4], 0x19
setne al
mov ecx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x198]
mov edx, eax
mov eax, dword [esp + 0x6c]
test dl, dl
je 0x529b2c
test ecx, ecx
jne 0x5299cf
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x150]
jmp 0x5299d8
mov ebp, ecx
mov edx, dword [esp + 0x194]
mov dword [esp + 0xa0], ebp
mov dword [esp + 0x194], edx
mov eax, dword [esp + 0x184]
mov dword [esp], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
lea ebx, [0x57c9aa]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 9
call fcn.0052a670
mov eax, dword [esp + 0x5c]
test eax, eax
setne al
mov byte [esp + 0x3f], al
movzx ecx, byte [esp + 0x10]
mov byte [esp + 0x3e], cl
mov edx, dword [esp + 0x184]
mov dword [esp], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 4], edx
lea edx, [0x57c09a]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
call fcn.0052a670
movzx eax, byte [esp + 0x10]
mov byte [esp + 0x3d], al
lea edi, [esp + 0x270]
xor eax, eax
call fcn.00464ca3
mov ecx, dword [esp + 0x194]
mov dword [esp + 0x270], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x274], ecx
movzx ecx, byte [esp + 0x3f]
mov byte [esp + 0x288], cl
mov ecx, dword [esp + 0x4c0]
mov dword [esp + 0x28c], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x290], ecx
mov dword [esp + 0x294], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x298], ecx
mov ecx, dword [esp + 0x198]
mov dword [esp + 0x29c], ecx
movzx ecx, byte [esp + 0x3e]
mov byte [esp + 0x2a0], cl
movzx ecx, byte [esp + 0x3d]
mov byte [esp + 0x2a1], cl
mov ecx, dword [esp + 0x270]
mov edx, dword [esp + 0x274]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0044f4b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x278], eax
mov dword [esp + 0x27c], ecx
mov dword [esp + 0x280], edx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
jmp 0x529de3
mov dword [esp + 0x4ac], eax
mov dword [esp + 0x4b0], ebx
lea ecx, [0x558de0]
mov dword [esp], ecx
mov edx, dword [esp + 0x188]
mov dword [esp + 4], edx
lea ebp, [esp + 0x4ac]
mov dword [esp + 8], ebp
call fcn.0040de00
mov eax, dword [esp + 0xc]
inc dword [eax]
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x4ac], eax
mov ecx, dword [esp + 0x198]
mov dword [esp + 0x4b0], ecx
lea edx, [0x558de0]
mov dword [esp], edx
mov ebx, dword [esp + 0x188]
mov dword [esp + 4], ebx
lea ebp, [esp + 0x4ac]
mov dword [esp + 8], ebp
call fcn.0040d870
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
je 0x529bbe
mov ebp, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x18c]
jmp 0x529d8d
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax + 0x60]
mov edx, dword [esp + 0x198]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa0], ecx
lea edi, [esp + 0x23c]
mov edx, eax
xor eax, eax
call fcn.00464ca3
mov dword [esp + 0x23c], edx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x240], ecx
mov ebx, dword [esp + 0x4c0]
mov dword [esp + 0x258], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x25c], ebx
mov dword [esp + 0x260], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x264], ebx
mov ebx, dword [esp + 0x198]
mov dword [esp + 0x268], ebx
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0044f4b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x244], eax
mov dword [esp + 0x248], ecx
mov dword [esp + 0x24c], edx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
jmp 0x529da2
lea eax, [0x58b0e4]
jmp 0x529ca6
test bl, bl
je 0x529c92
lea eax, [0x58b0f0]
jmp 0x529ca6
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x529ca0
lea eax, [0x58b0ec]
jmp 0x529ca6
lea eax, [0x58b0f4]
mov ecx, dword [esp + 0x50]
inc ecx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x250], eax
lea edi, [esp + 0xe4]
lea esi, [esp + 0x23c]
call fcn.0046513e
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xa0]
cmp eax, ecx
jb 0x529ce6
mov esi, dword [esp + 0x18c]
mov ebp, eax
jmp 0x529d1b
mov edx, dword [esp + 0x18c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x56dda0]
mov dword [esp + 0x10], eax
call fcn.0044b670
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x50], ecx
mov eax, dword [0x6cff38]
imul edx, ecx, 0x34
lea edi, [edx + esi - 0x34]
test eax, eax
je 0x529d7b
mov dword [esp + 0x4bc], esi
mov dword [esp + 0x98], ebp
mov dword [esp + 0x4b8], edi
lea eax, [0x56dda0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xe4]
mov dword [esp + 8], eax
call fcn.004113a0
mov ecx, dword [esp + 0x50]
mov ebp, dword [esp + 0x98]
mov esi, dword [esp + 0x4bc]
mov edi, dword [esp + 0x4b8]
mov eax, esi
lea esi, [esp + 0xe4]
call fcn.0046513e
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x70]
mov esi, dword [esp + 0x1d0]
jmp 0x5296f7
inc edx
cmp edx, ecx
jge 0x529c86
movzx esi, byte [edx + eax]
xchg esi, eax
cmp al, 0x80
xchg esi, eax
jae 0x529c7e
and esi, 0xffffffdf
lea edi, [esi - 0x41]
xchg edi, eax
cmp al, 0x19
xchg edi, eax
jbe 0x529dcd
mov ebp, 1
jmp 0x529da1
xchg esi, eax
cmp al, 0x4b
xchg esi, eax
je 0x529ddb
xchg esi, eax
cmp al, 0x53
xchg esi, eax
jne 0x529da1
mov ebx, 1
jmp 0x529da1
inc edx
cmp edx, ecx
jge 0x529e23
movzx esi, byte [edx + eax]
xchg esi, eax
cmp al, 0x80
xchg esi, eax
jae 0x529e1b
and esi, 0xffffffdf
lea edi, [esi - 0x41]
xchg edi, eax
cmp al, 0x19
xchg edi, eax
jbe 0x529e06
mov ebp, 1
jmp 0x529de2
xchg esi, eax
cmp al, 0x4b
xchg esi, eax
je 0x529e14
xchg esi, eax
cmp al, 0x53
xchg esi, eax
jne 0x529de2
mov ebx, 1
jmp 0x529de2
lea eax, [0x58b0e4]
jmp 0x529e43
test bl, bl
je 0x529e2f
lea eax, [0x58b0f0]
jmp 0x529e43
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x529e3d
lea eax, [0x58b0ec]
jmp 0x529e43
lea eax, [0x58b0f4]
mov ecx, dword [esp + 0x70]
inc ecx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x284], eax
lea edi, [esp + 0x118]
lea esi, [esp + 0x270]
call fcn.0046513e
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0xa0]
cmp eax, ecx
jb 0x529e81
mov edx, dword [esp + 0x1d0]
jmp 0x529eb6
mov edx, dword [esp + 0x1d0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x56dda0]
mov dword [esp + 0x10], eax
call fcn.0044b670
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x1d0], edx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], eax
mov ebx, dword [0x6cff38]
imul ebp, ecx, 0x34
lea edi, [edx + ebp - 0x34]
mov dword [esp + 0x4b8], edi
test ebx, ebx
je 0x529f01
lea eax, [0x56dda0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea ecx, [esp + 0x118]
mov dword [esp + 8], ecx
call fcn.004113a0
mov edi, dword [esp + 0x4b8]
lea esi, [esp + 0x118]
call fcn.0046513e
lea eax, [0x558de0]
mov dword [esp], eax
mov ecx, dword [esp + 0x310]
mov dword [esp + 4], ecx
lea edx, [esp + 0x2cc]
mov dword [esp + 8], edx
call fcn.0040d870
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
jle 0x52a01d
mov ecx, dword [esp + 0x70]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x52a046
lea edi, [esp + 0x4d4]
mov esi, dword [esp + 0x4b8]
call fcn.0046513e
mov eax, dword [esp + 0x70]
inc eax
mov ecx, dword [esp + 0x74]
cmp ecx, eax
jb 0x529f76
mov edx, dword [esp + 0x1d0]
jmp 0x529fab
mov edx, dword [esp + 0x1d0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x56dda0]
mov dword [esp + 0x10], eax
call fcn.0044b670
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x74], ecx
mov ebx, dword [0x6cff38]
imul ebp, eax, 0x34
lea edi, [ebp + edx - 0x34]
test ebx, ebx
je 0x52a00b
mov dword [esp + 0x4b4], edx
mov dword [esp + 0x94], eax
mov dword [esp + 0x4b8], edi
lea eax, [0x56dda0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x4d4]
mov dword [esp + 8], eax
call fcn.004113a0
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x4b4]
mov edi, dword [esp + 0x4b8]
lea esi, [esp + 0x4d4]
call fcn.0046513e
mov ecx, dword [esp + 0x74]
jmp 0x52a02c
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x1d0]
mov ebx, eax
mov esi, edx
mov ebp, dword [esp + 0x54]
mov eax, dword [esp + 0x18c]
mov edx, ecx
mov ecx, dword [esp + 0x50]
jmp 0x5296f7
call fcn.00464b30
call fcn.00464b30
nop
call fcn.004636b0
jmp fcn.00528e10