Function at 0x529fe0
Capabilities:
Authenticate hmac
Encode data using base64
Encode data using xor
Encrypt data using speck
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x15c
mov eax, dword [esp + 0x170]
mov dword [esp + 0x134], ecx
mov esi, dword [ecx]
mov dword [esp + 0xbc], 0
mov dword [esp + 0x13c], edx
mov ebp, dword [edx]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov edi, esi
and edi, 0x800
sete byte [esp + 0x53]
mov edx, edi
shr edx, 0xb
mov dword [esp + 0x9c], edx
mov edx, esi
shr edx, 9
and edx, 1
mov dword [esp + 0xd4], edx
xor edx, 1
mov dword [esp + 0xf4], edx
mov dword [esp + 0x1c], esi
and esi, 1
mov dword [esp + 0xb4], esi
mov ebx, dword [esp + 0x194]
xor edx, edx
test ebx, ebx
setne dl
lea esi, [esp + 0xbc]
cmove esi, ebx
mov dword [esp + 0x138], esi
or edx, 2
mov dword [esp + 0xf0], edx
mov edx, dword [esp + 0x190]
lea esi, [edx + 0x88]
mov dword [esp + 0xb8], esi
lea edx, [edx + 0x64]
mov dword [esp + 0xc0], edx
mov dword [esp + 0x28], 0xfffffffe
mov dword [esp + 0x3c], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xd8], ebp
mov dword [esp + 0xdc], 0
mov dword [esp + 0x44], 0xfffffffe
mov dword [esp + 0x4c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x18], 0xfffffffe
mov dword [esp + 0x14], 0xfffffffe
mov dword [esp + 0x20], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x60], edi
jmp 0x52a150
add ecx, 0xe
mov dword [esp + 4], eax
mov dword [esp + 0x64], ecx
jmp 0x52a150
mov eax, str._b__w_
jmp 0x52a130
movzx eax, word [eax]
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x52a169
test ax, ax
jne 0x52a169
mov dword [esp + 4], ecx
movzx eax, word [ecx]
xor ecx, ecx
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x190]
mov edx, ecx
test ebx, ebx
je 0x52a200
mov ecx, dword [edx + 0x10]
mov edx, dword [edx + 0x3c]
lea esi, [ecx + edx*2 - 0xc8]
cmp ebp, esi
ja 0x52f3b4
mov edx, ebp
mov edi, dword [esp + 0xc4]
cmp edx, edi
cmovb edx, edi
mov ecx, dword [ebx]
mov esi, 0x7fffffeb
sub esi, ecx
mov ebp, edx
sub edx, edi
sar edx, 1
cmp esi, edx
jl 0x52f447
add ecx, edx
mov dword [ebx], ecx
mov edi, dword [esp + 0xc]
test edi, edi
je 0x52a220
mov ecx, edi
sub ecx, dword [esp + 0xd8]
jbe 0x52a22f
mov edx, ebp
sub edx, edi
je 0x52a1ea
mov esi, dword [esp + 0xd8]
nop dword [eax]
movzx ebx, byte [edi]
inc edi
mov byte [esi], bl
inc esi
dec edx
jne 0x52a1e0
sub ebp, ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0xc], ecx
jmp 0x52a22f
mov ecx, dword [edx + 0x3c]
add ecx, ecx
add ecx, dword [edx + 0x10]
cmp dword [edx + 0x20], ecx
jbe 0x52a23d
jmp 0x52f3d4
mov dword [esp + 0xc], 0
mov ebp, dword [esp + 0xd8]
mov dword [esp + 0xc4], ebp
mov ebx, dword [esp + 0x194]
movzx ecx, ax
test cx, cx
je 0x52a27c
cmp ecx, 0x5c
jne 0x52a25b
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
cmp edx, 0x45
je 0x52a784
cmp dword [esp + 0x2c], 0
jne 0x52a5a9
cmp ecx, 0x5c
jne 0x52a27c
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
cmp edx, 0x51
je 0x52a798
test byte [esp + 0x1c], 8
je 0x52a3fb
cmp ecx, 0xff
ja 0x52a3fb
mov esi, dword [esp + 4]
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0xc]
lea eax, [esi + 2]
nop word cs:[eax + eax]
test byte [edx + ecx], 1
je 0x52a2d0
mov dword [esp + 4], eax
movzx ecx, word [eax]
add eax, 2
cmp ecx, 0x100
jb 0x52a2b0
jmp 0x52a3f0
cmp ecx, 0x23
jne 0x52a3f0
mov dword [esp + 4], eax
mov cx, word [eax]
test cx, cx
je 0x52a4c3
mov dword [esp + 8], ebp
mov ebx, dword [esp + 0x60]
nop word cs:[eax + eax]
mov edx, dword [esp + 0x190]
mov edi, dword [edx + 0x1c]
mov edx, dword [edx + 0x84]
test edx, edx
je 0x52a350
cmp eax, edi
jae 0x52a3b0
sub esp, 0xc
push dword [esp + 0xa8]
push dword [esp + 0xc8]
push edi
push edx
push eax
call fcn.00541090
add esp, 0x20
test eax, eax
jne 0x52a597
mov edi, dword [esp + 4]
jmp 0x52a3b2
mov edx, dword [esp + 0xb8]
mov edx, dword [edx]
lea ebx, [edx + edx]
sub edi, ebx
cmp eax, edi
jbe 0x52a36a
mov edi, eax
mov ebx, dword [esp + 0x60]
jmp 0x52a3b2
mov edi, dword [esp + 0x190]
cmp cx, word [edi + 0x8c]
mov ebx, dword [esp + 0x60]
jne 0x52a3b0
cmp edx, 1
je 0x52a7ac
movzx ecx, word [eax + 2]
mov edi, dword [esp + 0x190]
cmp cx, word [edi + 0x8e]
mov edi, eax
jne 0x52a3b2
jmp 0x52a7b1
mov edi, eax
lea eax, [edi + 2]
test ebx, ebx
mov dword [esp + 4], eax
je 0x52a3d9
movzx ecx, word [eax]
mov edx, ecx
and edx, 0xfc00
cmp edx, 0xdc00
jne 0x52a3dc
add edi, 4
mov dword [esp + 4], edi
mov eax, edi
mov cx, word [eax]
test cx, cx
jne 0x52a300
jmp 0x52a7b8
add eax, 0xfffffffe
cmp eax, esi
ja 0x52a150
xor eax, eax
cmp ecx, 0x3e
jg 0x52a4d5
lea edx, [ecx - 0x2a]
cmp edx, 2
jb 0x52a533
cmp ecx, 0x28
jne 0x52a961
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
cmp edx, 0x3f
jne 0x52a435
movzx edx, word [eax + 4]
cmp edx, 0x23
je 0x52ba52
xor eax, eax
cmp dword [esp + 0x64], 0
jne 0x52a96c
cmp dword [esp + 0x90], 0
je 0x52a96c
test al, al
jne 0x52a96c
mov edx, dword [esp + 0xdc]
test edx, edx
lea edx, [edx - 1]
mov dword [esp + 0xdc], edx
mov edx, 0
cmovg edx, dword [esp + 0x90]
jg 0x52a778
test ebx, ebx
jne 0x52a778
mov edx, dword [esp + 4]
mov esi, dword [esp + 0x190]
sub edx, dword [esi + 0x18]
shr edx, 1
mov esi, ebp
mov ebp, ebx
mov ebx, esi
mov edi, dword [esp + 0x90]
movzx esi, word [edi + 4]
sub edx, esi
mov word [edi + 6], dx
mov edx, ebx
mov ebx, ebp
mov ebp, edx
mov dword [esp + 0x90], 0
jmp 0x52a96c
mov ecx, 0x23
cmp eax, esi
ja 0x52a150
jmp 0x52a3fb
cmp ecx, 0x3f
je 0x52a533
cmp ecx, 0x7b
jne 0x52a961
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
add edx, 0xffffffd0
movzx esi, dx
xor edx, edx
cmp esi, 9
ja 0x52a95c
add eax, 6
nop
movzx edx, word [eax - 2]
lea esi, [edx - 0x30]
movzx esi, si
add eax, 2
cmp esi, 0xa
jb 0x52a500
movzx esi, dx
cmp esi, 0x2c
je 0x52a91d
mov edx, 1
cmp esi, 0x7d
je 0x52a95c
xor edx, edx
jmp 0x52a95c
mov al, 1
cmp ecx, 0x7c
ja case.0x52a53e.1
jmp dword [ecx*4 + 0x52f798]
mov eax, dword [esp + 4]
add eax, 2
sub esp, 4
push 6
push 0xa5d3cc
push eax
call fcn.00541350
add esp, 0x10
test eax, eax
mov ecx, dword [esp + 4]
je 0x52a13d
add ecx, 2
sub esp, 4
push 6
push str._:_:__
push ecx
call fcn.00541350
add esp, 0x10
test eax, eax
jne 0x52aa01
mov eax, str._b___w_
mov ecx, dword [esp + 4]
jmp 0x52a130
mov eax, dword [esp + 0xb8]
mov edx, dword [eax]
mov eax, dword [esp + 4]
jmp 0x52a7b1
test ebx, ebx
jne 0x52a5d8
cmp dword [esp + 0x90], 0
je 0x52a5d8
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x190]
sub eax, dword [edx + 0x18]
shr eax, 1
mov esi, dword [esp + 0x90]
movzx edx, word [esi + 4]
sub eax, edx
mov word [esi + 6], ax
mov dword [esp + 0x90], 0
mov eax, dword [esp + 0x1c]
test ah, 0x40
je case.0x52a53e.1
mov eax, dword [esp + 4]
mov dword [ebp], 0xff0076
mov edx, dword [esp + 0x190]
sub eax, dword [edx + 0x18]
shr eax, 1
mov word [ebp + 4], ax
mov word [ebp + 6], 0
mov dword [esp + 0x90], ebp
lea ebp, [ebp + 8]
cmp dword [esp + 0x60], 0
mov word [esp + 0x124], cx
mov eax, 1
je 0x52a66a
and ecx, 0xfc00
cmp ecx, 0xd800
jne 0x52a66a
mov ecx, dword [esp + 4]
movzx edx, word [ecx + 2]
mov esi, edx
and esi, 0xfc00
mov eax, 1
cmp esi, 0xdc00
jne 0x52a66a
add ecx, 2
mov dword [esp + 4], ecx
mov word [esp + 0x126], dx
mov eax, 2
mov ecx, dword [esp + 0x190]
mov edx, ecx
mov ecx, dword [edx + 0x20]
sub ecx, dword [edx + 0x10]
sar ecx, 1
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x1c]
and ecx, 1
sete dl
or dl, byte [esp + 0x53]
jne 0x52a73d
movzx edx, word [esp + 0x124]
mov esi, edx
and esi, 0xfc00
cmp esi, 0xd800
jne 0x52a6c9
shl edx, 0xa
and edx, 0xffc00
movzx esi, word [esp + 0x126]
and esi, 0x3ff
lea edx, [edx + esi + 0x10000]
mov esi, edx
sar esi, 0x1f
shr esi, 0x19
add esi, edx
mov edi, esi
and edi, 0x7fffff80
sar esi, 7
movzx esi, byte [esi + 0xa60c94]
shl esi, 7
sub edx, edi
add edx, esi
movzx edx, word [edx + edx + 0xa62e94]
movzx edx, byte [edx*8 + 0xa5f617]
test dx, dx
mov ebx, dword [esp + 0x194]
je 0x52a73d
mov dword [ebp], 0x90010
mov word [ebp + 4], dx
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 6]
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
mov esi, dword [esp + 0x28]
cmove esi, ecx
mov dword [esp + 0x28], esi
cmove edx, ecx
mov dword [esp + 0x14], edx
jmp 0x52e18d
add ecx, 0x1d
mov word [ebp], cx
lea ecx, [ebp + 2]
test eax, eax
je 0x52a7d5
mov edx, eax
lea esi, [esp + 0x124]
mov edi, ecx
nop word [eax + eax]
movzx ebx, word [esi]
mov word [edi], bx
add edi, 2
add esi, 2
dec edx
jne 0x52a760
lea edx, [ebp + eax*2]
lea ecx, [ecx + eax*2]
jmp 0x52a7d7
mov dword [esp + 0x90], edx
jmp 0x52a96c
add eax, 2
mov dword [esp + 4], eax
mov dword [esp + 0x2c], 0
jmp 0x52e18d
add eax, 2
mov dword [esp + 4], eax
mov dword [esp + 0x2c], 1
jmp 0x52e18d
mov edx, 1
lea eax, [eax + edx*2]
mov dword [esp + 4], eax
mov ecx, 0x23
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 8]
cmp eax, esi
ja 0x52a150
jmp 0x52a3fb
mov edx, ebp
movzx esi, word [esp + 0x124]
cmp esi, 0xd
je 0x52a7ec
movzx edi, si
cmp edi, 0xa
jne 0x52a7f7
mov ebx, dword [esp + 0xc0]
or byte [ebx + 1], 8
cmp eax, 1
sete bh
cmp dword [esp + 0xb4], 0
sete bl
or bl, bh
cmp dword [esp + 0x14], 0xfffffffe
jne 0x52a85b
test bl, bl
je 0x52a8b1
cmp eax, 1
mov ebx, dword [esp + 0x194]
jne 0x52a9ba
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x14], eax
mov dword [esp + 0x34], esi
jmp 0x52e18d
test bl, bl
je 0x52a8eb
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
movzx eax, word [edx]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x190]
mov edx, dword [edx + 0x68]
or edx, dword [esp + 0xb4]
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov dword [esp + 0x18], edx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x194]
jmp 0x52e18d
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x14], 0xffffffff
mov ebx, dword [esp + 0x194]
jmp 0x52e18d
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov ebx, dword [esp + 0x194]
jmp 0x52e18d
movzx esi, word [eax - 2]
mov edx, 1
cmp esi, 0x7d
je 0x52a95c
add esi, 0xffffffd0
movzx esi, si
xor edx, edx
cmp esi, 9
ja 0x52a95c
nop dword [eax + eax]
movzx edx, word [eax]
lea esi, [edx - 0x30]
movzx esi, si
add eax, 2
cmp esi, 0xa
jb 0x52a940
movzx eax, dx
xor edx, edx
cmp eax, 0x7d
sete dl
test edx, edx
setne al
cmp dword [esp + 0x64], 0
je 0x52a442
mov edx, dword [esp + 0x1c]
test dh, 0x40
sete dl
cmp dword [esp + 0x64], 0
jne 0x52a9ac
or dl, al
jne 0x52a9ac
mov edx, dword [esp + 4]
mov dword [ebp], 0xff0076
mov esi, dword [esp + 0x190]
sub edx, dword [esi + 0x18]
shr edx, 1
mov word [ebp + 4], dx
mov word [ebp + 6], 0
mov dword [esp + 0x90], ebp
lea ebp, [ebp + 8]
cmp ecx, 0x7c
jbe switch.0x0052a53e
jmp case.0x52a53e.1
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
movzx eax, word [edx]
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0x68]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], esi
mov dword [esp + 0x28], 0xffffffff
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x14], eax
jmp 0x52e18d
mov eax, ebp
mov ebp, dword [esp + 0x190]
mov edi, eax
mov eax, dword [ebp + 0x20]
sub eax, dword [ebp + 0x10]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
movzx eax, word [ecx + 2]
mov edx, eax
add edx, 0xffffffd2
movzx esi, dx
cmp esi, 0xf
ja 0x52aa9f
mov esi, 0x9001
bt esi, edx
jae 0x52aa9f
lea edx, [ecx + 4]
jmp 0x52aa43
add edx, 2
mov ebx, edi
movsx esi, word [edx]
movzx edi, si
cmp esi, 0x5b
jg 0x52aa60
cmp edi, 0x5b
jne 0x52aa7e
cmp word [edx + 2], ax
mov edi, ebx
jne 0x52aa85
jmp 0x52aa9f
cmp edi, 0x5c
jne 0x52aa98
movzx edi, word [edx + 2]
and edi, 0xfffe
cmp edi, 0x5c
mov edi, ebx
jne 0x52aa85
add edx, 2
add edx, 2
jmp 0x52aa43
test si, si
mov edi, ebx
je 0x52aa9f
cmp si, ax
jne 0x52aa40
movzx esi, word [edx + 2]
cmp esi, 0x5d
jne 0x52aa40
jmp 0x52f46e
cmp edi, 0x5d
mov edi, ebx
jne 0x52aa85
sar dword [esp + 0x3c], 1
xor ebp, ebp
mov dword [esp + 8], edi
jmp 0x52aab8
mov ax, word [edx + 2]
mov ecx, edx
mov ebp, esi
lea edx, [ecx + 2]
mov dword [esp + 4], edx
movzx ebx, ax
cmp ebx, 0x5c
jne 0x52aae0
movzx eax, word [ecx + 4]
add ecx, 4
cmp eax, 0x45
jne 0x52ab00
mov dword [esp + 4], ecx
mov edx, ecx
mov esi, ebp
jmp 0x52aab0
test ebp, ebp
jne 0x52ab26
mov esi, 1
movzx ecx, ax
cmp ecx, 0x5e
je 0x52aab0
jmp 0x52ab26
sub esp, 4
push 3
push 0xa5d402
push ecx
call fcn.00541350
add esp, 0x10
test eax, eax
jne 0x52ab70
mov edx, dword [esp + 4]
add edx, 6
mov dword [esp + 4], edx
mov esi, ebp
jmp 0x52aab0
cmp ebx, 0x5d
jne 0x52abcb
mov eax, dword [esp + 0x190]
test byte [eax + 0x63], 2
je 0x52ab75
test ebp, ebp
mov ax, 0xd
mov cx, 0x9d
cmove ax, cx
mov word [edi], ax
mov dword [esp + 0xc], edi
lea ebp, [edi + 2]
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x28], edx
jmp 0x52a89d
mov ebx, 0x5c
lea edi, [edi + 6]
mov dword [esp + 0x38], edi
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov ecx, dword [esp + 0x64]
jmp 0x52ac28
lea edi, [edi + 6]
mov dword [esp + 0x38], edi
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
test ax, ax
mov ecx, dword [esp + 0x64]
je 0x52bd95
mov eax, dword [esp + 0x1c]
mov edx, eax
and edx, 1
mov dword [esp + 0x8c], edx
and eax, 0x800
cmp eax, 1
sbb eax, eax
or eax, 0x10ffff
mov dword [esp + 0x48], eax
mov dword [esp + 0x24], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0x54], 0
xor edx, edx
mov dword [esp + 0x58], edi
mov dword [esp + 0x30], ebp
jmp 0x52b560
movzx eax, word [edx - 6]
cmp eax, 0x51
jne 0x52acee
lea eax, [edx - 4]
mov dword [esp + 4], eax
movzx esi, word [edx - 4]
cmp esi, 0x5c
jne 0x52acf5
movzx eax, word [edx - 2]
cmp eax, 0x45
jne 0x52ad10
mov dword [esp + 4], edx
movzx esi, word [edx]
add edx, 8
cmp esi, 0x5c
je 0x52ac7d
add edx, 0xfffffff8
mov dword [esp + 0x2c], 0
jmp 0x52ad00
mov dl, byte [esp + 0x5c]
jmp 0x52ad27
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1f
mov ecx, 6
mov ebx, dword [esp + 0x194]
xor esi, esi
mov eax, dword [esp + 0x10]
cmp ecx, 0x12
jne 0x52b30c
jmp 0x52b314
add edx, 0xfffffff8
xor ecx, ecx
jmp 0x52ad18
add edx, 0xfffffffc
mov dword [esp + 0x2c], 1
mov eax, edx
test si, si
jne 0x52b95f
jmp 0x52b97e
add edx, 0xfffffffc
mov ecx, 1
mov eax, edx
mov dword [esp + 0x2c], ecx
test ecx, ecx
setne dl
mov si, 0x5c
movzx esi, si
cmp dword [esp + 0x60], 0
mov dword [esp + 0x104], esi
je 0x52ad7b
mov ecx, esi
and ecx, 0xfc00
mov edi, ebp
cmp ecx, 0xd800
jne 0x52ad7d
shl esi, 0xa
and esi, 0xffc00
movzx ecx, word [eax + 2]
add eax, 2
and ecx, 0x3ff
lea esi, [esi + ecx + 0x10000]
mov dword [esp + 0x104], esi
mov dword [esp + 4], eax
test dl, dl
je 0x52ad85
jmp 0x52b2dc
mov edi, ebp
test dl, dl
jne 0x52b2dc
cmp esi, 0x5b
je 0x52adfb
cmp esi, 0x5c
jne 0x52b2dc
lea ecx, [esp + 4]
lea edx, [esp + 0x104]
push 1
push dword [esp + 0x20]
mov eax, dword [esp + 0x198]
push dword [eax + 0x40]
mov eax, dword [esp + 0x180]
mov esi, eax
push esi
call fcn.005302d0
add esp, 0x10
mov ecx, 6
cmp dword [esi], 0
jne 0x52b2f6
cmp eax, 5
mov ebp, edi
mov esi, dword [esp + 0x2c]
je 0x52b2ab
test eax, eax
jne 0x52b2c6
mov edi, ebp
mov esi, dword [esp + 0x104]
cmp esi, ebx
jb 0x52b2e4
jmp 0x52b060
mov ebp, edi
movzx ecx, word [eax + 2]
mov esi, 0x5b
lea edx, [ecx - 0x2e]
movzx edi, dx
cmp edi, 0xf
ja 0x52b2da
mov edi, 0x9001
bt edi, edx
mov edi, ebp
jae 0x52b2dc
add eax, 4
jmp 0x52ae2d
add eax, 2
movsx edx, word [eax]
mov esi, 0x5b
movzx edi, dx
cmp edx, 0x5b
jg 0x52ae4f
cmp edi, 0x5b
jne 0x52ae6d
cmp word [eax + 2], cx
mov edi, ebp
jne 0x52ae84
jmp 0x52b053
cmp edi, 0x5c
jne 0x52ae79
movzx esi, word [eax + 2]
and esi, 0xfffe
cmp esi, 0x5c
mov edi, ebp
jne 0x52ae84
add eax, 2
add eax, 2
jmp 0x52ae2d
test dx, dx
mov edi, ebp
jne 0x52ae84
jmp 0x52b2dc
cmp edi, 0x5d
mov edi, ebp
je 0x52b2dc
cmp dx, cx
jne 0x52ae2a
movzx edx, word [eax + 2]
cmp edx, 0x5d
jne 0x52ae2a
mov eax, dword [esp + 0x174]
mov dword [eax], 0x53
jmp 0x52b2f1
test ebx, ebx
js 0x52b858
cmp ebx, 3
mov edi, ebx
mov eax, 0
cmovl edi, eax
cmp dword [esp + 0x8c], 0
cmove edi, ebx
test dword [esp + 0x1c], 0x20000000
jne 0x52b31d
shl edi, 2
mov eax, dword [edi + edi*2 + 0xa5d478]
mov ebp, dword [esp + 0xa8]
mov ecx, dword [ebp + eax + 0x1c]
mov dword [esp + 0x120], ecx
mov ecx, dword [ebp + eax + 0x18]
mov dword [esp + 0x11c], ecx
mov ecx, dword [ebp + eax + 0x14]
mov dword [esp + 0x118], ecx
mov ecx, dword [ebp + eax + 0x10]
mov dword [esp + 0x114], ecx
mov ecx, dword [ebp + eax + 0xc]
mov dword [esp + 0x110], ecx
mov ecx, dword [ebp + eax + 8]
mov dword [esp + 0x10c], ecx
mov ecx, dword [ebp + eax]
mov eax, dword [ebp + eax + 4]
mov dword [esp + 0x108], eax
mov dword [esp + 0x104], ecx
mov ecx, dword [edi + edi*2 + 0xa5d47c]
mov eax, dword [edi + edi*2 + 0xa5d480]
test ecx, ecx
js 0x52af7d
add ebp, ecx
xor ecx, ecx
test eax, eax
js 0x52af69
movzx edx, byte [ebp + ecx]
or byte [esp + ecx + 0x104], dl
inc ecx
cmp ecx, 0x20
jne 0x52af55
jmp 0x52af7d
movzx edx, byte [ebp + ecx]
not dl
and byte [esp + ecx + 0x104], dl
inc ecx
cmp ecx, 0x20
jne 0x52af69
mov edx, dword [esp + 0x98]
mov ecx, eax
neg ecx
cmovl ecx, eax
cmp ecx, 1
mov ebx, dword [esp + 0x194]
je 0x52b3e1
cmp ecx, 2
mov ebp, dword [esp + 8]
jne 0x52b3f3
mov al, 0x7f
mov ecx, 0xb
jmp 0x52b3ec
mov esi, edx
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
sub esp, 4
lea ecx, [esp + 8]
lea edx, [esp + 0x108]
push dword [esp + 0x178]
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xd8]
push eax
call fcn.00530de0
add esp, 0x10
test eax, eax
je 0x52b389
xor ecx, ecx
cmp ebx, 0x10
sete cl
xor eax, eax
cmp dword [esp + 0x104], ecx
sete al
add eax, 3
mov ecx, dword [esp + 0x38]
mov word [ecx], ax
movzx eax, word [esp + 0xcc]
mov word [ecx + 2], ax
movzx eax, word [esp + 0xc8]
lea edx, [ecx + 6]
mov dword [esp + 0x38], edx
mov word [ecx + 4], ax
mov ecx, 0x12
mov dword [esp + 0xac], 1
jmp 0x52b394
mov esi, 0x5b
cmp esi, ebx
jb 0x52b2e4
mov ebp, edi
je 0x52b982
cmp esi, 0xd
je 0x52b072
cmp esi, 0xa
jne 0x52b07d
mov eax, dword [esp + 0xc0]
or byte [eax + 1], 8
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push esi
push ebx
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.00531380
add esp, 0x10
add dword [esp + 0x24], eax
mov ecx, 0x12
mov eax, 2
mov esi, dword [esp + 0x2c]
jmp 0x52b300
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0x40]
not dl
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x52b0b5
jmp 0x52b129
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0x40]
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x52b0ce
jmp 0x52b14b
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx]
not dl
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x52b0e5
jmp 0x52b129
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx]
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x52b0fd
jmp 0x52b14b
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0xa0]
not dl
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x52b113
mov dword [esp + 0x54], 1
jmp 0x52b14b
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0xa0]
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x52b137
mov dword [esp + 0x10], edi
mov eax, ebx
mov dword [esp + 0x24], eax
jmp case.0x52b72d.25
test byte [esp + 0x1c], 0x40
jne 0x52f68a
mov eax, dword [esp + 4]
movzx ebx, word [eax]
jmp case.0x52b72d.5
mov dword [esp + 0x10], edi
mov esi, dword [0xa5eab8]
test esi, esi
je 0x52b444
lea eax, [esi - 1]
lea ecx, [esp + 0x6c]
mov edi, edx
lea edx, [esp + 0x38]
push eax
push 0
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.00531380
mov edx, edi
add esp, 0x10
cmp esi, 0xffffffff
mov ecx, ebp
jne 0x52b448
jmp 0x52b248
mov eax, dword [0xa5eab8]
cmp eax, 0xffffffff
je 0x52b3ad
mov dword [esp + 0x2c], edx
mov esi, 0xa5eab8
mov ebx, dword [esp + 0x1c]
mov ecx, eax
inc ecx
cmp ecx, dword [esi + 4]
lea esi, [esi + 4]
je 0x52b1d5
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push dword [esi - 4]
push eax
push dword [esp + 0x198]
push ebx
call fcn.00531380
add esp, 0x10
mov eax, dword [esi]
cmp eax, 0xffffffff
jne 0x52b1d3
jmp 0x52b298
mov dword [esp + 0x10], edi
mov esi, dword [0xa5eb08]
test esi, esi
je 0x52b495
lea eax, [esi - 1]
lea ecx, [esp + 0x6c]
mov edi, edx
lea edx, [esp + 0x38]
push eax
push 0
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.00531380
mov edx, edi
add esp, 0x10
cmp esi, 0xffffffff
mov ecx, ebp
jne 0x52b499
xor esi, esi
jmp 0x52b3b3
mov eax, dword [0xa5eb08]
cmp eax, 0xffffffff
je 0x52b3ad
mov dword [esp + 0x2c], edx
mov esi, 0xa5eb08
mov ebx, dword [esp + 0x1c]
mov ecx, eax
inc ecx
cmp ecx, dword [esi + 4]
lea esi, [esi + 4]
je 0x52b26c
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push dword [esi - 4]
push eax
push dword [esp + 0x198]
push ebx
call fcn.00531380
add esp, 0x10
mov eax, dword [esi]
cmp eax, 0xffffffff
jne 0x52b26a
mov dword [esp + 0x10], edi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
xor esi, esi
jmp case.0x52b72d.25
mov edi, ebp
mov dword [esp + 0x104], 8
mov esi, 8
cmp esi, ebx
jb 0x52b2e4
jmp 0x52b060
mov eax, dword [esp + 0x174]
mov dword [eax], 0x53
mov ecx, 6
jmp 0x52b2fc
mov edi, ebp
cmp esi, ebx
jae 0x52b060
mov eax, dword [esp + 0x174]
mov dword [eax], 8
mov ecx, 6
mov ebp, edi
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x194]
cmp ecx, 0x12
je 0x52b314
test ecx, ecx
jne 0x52c781
mov dword [esp + 0x10], eax
jmp case.0x52b72d.25
mov ecx, dword [esp + 0x68]
test ecx, ecx
mov eax, 0xe
cmove eax, ecx
add eax, edi
mov ecx, 0x62bd8af
bt ecx, eax
jb 0x52b3be
lea eax, [edi - 8]
cmp eax, 2
ja 0x52b4f3
add eax, 0xb
mov edx, dword [esp + 0x68]
add edx, 3
mov ecx, dword [esp + 0x38]
mov word [ecx], dx
mov word [ecx + 2], ax
lea eax, [ecx + 6]
mov dword [esp + 0x38], eax
mov word [ecx + 4], 0
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov ecx, 0x12
mov dword [esp + 0xac], 1
jmp 0x52b86a
mov ecx, 6
mov eax, esi
mov dword [esp + 0x24], eax
mov ebx, dword [esp + 0x194]
xor esi, esi
mov eax, edi
cmp ecx, 0x12
jne 0x52b30c
jmp 0x52b314
xor esi, esi
mov dword [esp + 0x10], edi
mov eax, edx
mov dword [esp + 0x24], eax
jmp case.0x52b72d.25
mov eax, dword [eax*4 + 0xa5d408]
add eax, 0xfffffffe
mov dword [esp + 4], eax
mov ecx, 0x12
mov eax, dword [esp + 0x98]
mov dword [esp + 0x64], eax
jmp 0x52b86a
mov al, 0xc3
mov ecx, 1
mov ebp, dword [esp + 8]
and byte [esp + ecx + 0x104], al
cmp dword [esp + 0x68], 0
je 0x52b412
xor eax, eax
movzx ecx, byte [esp + eax + 0x104]
not cl
or byte [esp + eax + 0x6c], cl
inc eax
cmp eax, 0x20
jne 0x52b3fc
jmp 0x52b426
xor eax, eax
movzx ecx, byte [esp + eax + 0x104]
or byte [esp + eax + 0x6c], cl
inc eax
cmp eax, 0x20
jne 0x52b414
mov dword [esp + 4], edx
mov ecx, 0x12
mov dword [esp + 0x10], 2
mov dword [esp + 0x24], 1
jmp 0x52acda
xor esi, esi
mov ecx, ebp
mov dword [esp + 0x2c], edx
mov ebx, 0xa5eabc
jmp 0x52b458
add ebx, 4
mov esi, eax
mov eax, dword [ebx]
inc esi
cmp eax, esi
je 0x52b453
mov ebp, ecx
cmp eax, 0xffffffff
mov edi, dword [esp + 0x48]
je 0x52b46d
dec eax
mov edi, eax
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push edi
push esi
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.00531380
add esp, 0x10
mov eax, dword [ebx]
cmp eax, 0xffffffff
mov ecx, ebp
jne 0x52b453
jmp 0x52b4e4
xor esi, esi
mov ecx, ebp
mov dword [esp + 0x2c], edx
mov ebx, 0xa5eb0c
jmp 0x52b4a9
add ebx, 4
mov esi, eax
mov eax, dword [ebx]
inc esi
cmp eax, esi
je 0x52b4a4
mov ebp, ecx
cmp eax, 0xffffffff
mov edi, dword [esp + 0x48]
je 0x52b4be
dec eax
mov edi, eax
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push edi
push esi
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.00531380
add esp, 0x10
mov eax, dword [ebx]
cmp eax, 0xffffffff
mov ecx, ebp
jne 0x52b4a4
xor esi, esi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
jmp case.0x52b72d.25
cmp dword [esp + 0x68], 0
je 0x52aed2
cmp dword [esp + 0xc], 0
jne 0x52b512
movzx eax, word [esi + 4]
cmp eax, 0x5d
je 0x52aed2
mov eax, dword [esp + 0x38]
lea ecx, [eax + 2]
mov dword [esp + 0x38], ecx
mov word [eax], 2
sub esp, 8
push ecx
push pe_nt_image_headers32
call fcn.00541210
add esp, 0x10
add eax, eax
add eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
sub esp, 8
push eax
push 0x10ffff
call fcn.00541210
add esp, 0x10
add eax, eax
add dword [esp + 0x38], eax
jmp 0x52aed2
mov dword [esp + 0x64], ecx
cmp dword [esp + 0x60], 0
je 0x52b5b1
mov eax, ebx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x52b5b1
mov eax, dword [esp + 4]
movzx ebx, word [eax]
mov ecx, ebx
and ecx, 0xfc00
cmp ecx, 0xd800
jne 0x52b5b1
shl ebx, 0xa
and ebx, 0xffc00
movzx ecx, word [eax + 2]
add eax, 2
and ecx, 0x3ff
lea ebx, [ebx + ecx + 0x10000]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
cmp eax, edi
mov ecx, 1
cmova edx, ecx
cmp dword [esp + 0x194], 0
je 0x52b5dc
sub eax, edi
jbe 0x52b5dc
sar eax, 1
mov ecx, dword [esp + 0x194]
add dword [ecx], eax
mov dword [esp + 0x38], edi
cmp dword [esp + 0x2c], 0
mov dword [esp + 0xc], edx
je 0x52b618
mov ebp, dword [esp + 8]
cmp ebx, 0x5c
jne case.0x52b72d.5
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov ebx, 0x5c
cmp ecx, 0x45
jne case.0x52b72d.5
add eax, 2
mov dword [esp + 4], eax
xor esi, esi
jmp case.0x52b72d.25
mov ebp, dword [esp + 8]
cmp ebx, 0x5c
je 0x52b6eb
cmp ebx, 0x5b
jne case.0x52b72d.5
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov ebx, 0x5b
lea edx, [ecx - 0x2e]
movzx esi, dx
cmp esi, 0xf
ja case.0x52b72d.5
mov esi, 0x9001
bt esi, edx
jae case.0x52b72d.5
lea esi, [eax + 4]
mov dword [esp + 0x5c], esi
jmp 0x52b673
add esi, 2
movsx edx, word [esi]
mov ebx, 0x5b
movzx edi, dx
cmp edx, 0x5b
jg 0x52b6a0
cmp edi, 0x5b
jne 0x52b6bd
cmp word [esi + 2], cx
mov ebp, dword [esp + 8]
jne 0x52b6ca
jmp 0x52b87a
cmp edi, 0x5c
jne 0x52b6dd
movzx edi, word [esi + 2]
and edi, 0xfffe
cmp edi, 0x5c
mov ebp, dword [esp + 8]
jne 0x52b6ca
add esi, 2
jmp 0x52b670
test dx, dx
mov ebp, dword [esp + 8]
je case.0x52b72d.5
cmp dx, cx
jne 0x52b670
movzx edx, word [esi + 2]
cmp edx, 0x5d
jne 0x52b670
jmp 0x52b7bc
cmp edi, 0x5d
mov ebp, dword [esp + 8]
jne 0x52b6ca
jmp case.0x52b72d.5
lea ecx, [esp + 4]
lea edx, [esp + 0xe0]
push 1
push dword [esp + 0x20]
mov eax, dword [esp + 0x198]
push dword [eax + 0x40]
mov eax, dword [esp + 0x180]
mov esi, eax
push esi
call fcn.005302d0
add esp, 0x10
cmp dword [esi], 0
jne 0x52f454
cmp eax, 0x1a
ja case.0x52b72d.1
xor esi, esi
mov ebx, 8
jmp dword [eax*4 + 0x52fe48]
mov ebx, dword [esp + 0xe0]
jmp case.0x52b72d.5
mov ebx, eax
lea ecx, [eax - 6]
cmp ecx, 0x1c
mov esi, dword [esp + 0x10]
ja case.0x52b764.12
mov eax, dword [esp + 0x190]
mov eax, dword [eax + 8]
mov edx, dword [esp + 0x24]
inc edx
lea edi, [esi + 2]
jmp dword [ecx*4 + 0x52feb4]
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov eax, dword [ebx*4 + 0xa5d4ac]
add eax, 0xfffffffe
mov dword [esp + 4], eax
xor esi, esi
mov dword [esp + 0x10], edi
jmp case.0x52b72d.25
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov esi, 1
cmp ecx, 0x5c
jne case.0x52b72d.25
movzx ecx, word [eax + 4]
mov esi, 1
cmp ecx, 0x45
jne case.0x52b72d.25
add eax, 4
jmp 0x52b60d
movzx ecx, cx
cmp ecx, 0x3a
jne 0x52acc1
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 8]
mov dword [esp + 0xa8], ecx
mov ebp, dword [esp + 0x5c]
mov dword [esp + 4], ebp
movzx ecx, word [ebp]
xor edx, edx
cmp ecx, 0x5e
jne 0x52b802
add eax, 6
mov dword [esp + 4], eax
mov edx, 1
mov ebp, eax
mov dword [esp + 0x54], 1
mov dword [esp + 0x68], edx
lea eax, [esi + 2]
mov dword [esp + 0x98], eax
mov eax, esi
sub eax, ebp
sar eax, 1
mov edx, str.alpha
xor ebx, ebx
mov dword [esp + 0x5c], eax
movzx edi, byte [ebx + 0xa5d6a3]
cmp eax, edi
jne 0x52b84e
sub esp, 4
push eax
push edx
push ebp
mov dword [esp + 0x3c], edx
call fcn.00541350
mov edx, dword [esp + 0x3c]
add esp, 0x10
test eax, eax
mov eax, dword [esp + 0x5c]
je 0x52aea4
lea edx, [edx + edi + 1]
inc ebx
cmp ebx, 0xe
jne 0x52b821
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1e
mov ecx, 6
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 8]
jmp 0x52acda
mov ebx, 0x5b
mov ecx, dword [esp + 4]
movzx eax, word [ecx + 2]
cmp eax, 0x5c
jne 0x52b8d2
mov edx, ecx
add edx, 4
nop word cs:[eax + eax]
mov esi, edx
movzx eax, word [esi]
cmp eax, 0x45
jne 0x52b8df
mov dword [esp + 4], esi
movzx eax, word [esi + 2]
lea edx, [esi + 4]
mov dword [esp + 0x2c], 0
cmp eax, 0x5c
mov ecx, esi
je 0x52b8a0
add edx, 0xfffffffc
xor edi, edi
mov ecx, esi
cmp ebx, 0xd
jne 0x52b8f1
jmp 0x52b8f6
mov edi, dword [esp + 0x2c]
mov edx, ecx
cmp ebx, 0xd
jne 0x52b8f1
jmp 0x52b8f6
add esi, 0xfffffffc
mov ax, 0x5c
mov edi, dword [esp + 0x2c]
mov edx, esi
cmp ebx, 0xd
je 0x52b8f6
cmp ebx, 0xa
jne 0x52b901
mov esi, dword [esp + 0xc0]
or byte [esi + 1], 8
mov esi, edi
test esi, esi
jne 0x52b986
movzx eax, ax
xor esi, esi
cmp eax, 0x2d
jne 0x52b986
lea eax, [edx + 4]
mov dword [esp + 4], eax
movzx esi, word [edx + 4]
cmp esi, 0x5c
jne 0x52b952
lea eax, [edx + 8]
add edx, 0xc
nop word [eax + eax]
movzx esi, word [eax - 2]
cmp esi, 0x45
jne 0x52ac7d
mov dword [esp + 4], eax
movzx esi, word [eax]
add eax, 4
add edx, 4
cmp esi, 0x5c
je 0x52b930
add eax, 0xfffffffc
mov dword [esp + 0x2c], 0
test si, si
je 0x52b97e
mov edx, dword [esp + 0x2c]
test edx, edx
setne byte [esp + 0x5c]
movzx edi, si
cmp edi, 0x5d
jne 0x52acbb
test edx, edx
jne 0x52acbb
mov dword [esp + 4], ecx
mov esi, dword [esp + 0x2c]
xor eax, eax
mov ecx, dword [esp + 0x10]
cmp ecx, 2
setl al
add ecx, eax
mov dword [esp + 0x10], ecx
cmp ecx, 1
jne 0x52b9b9
mov eax, esi
or eax, dword [esp + 0xac]
jne 0x52b9b9
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
cmp ecx, 0x5d
je 0x52bfca
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push ebx
push ebx
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.00531380
add esp, 0x10
add dword [esp + 0x24], eax
mov eax, dword [esp + 4]
lea ecx, [eax + 2]
mov dword [esp + 4], ecx
movzx ebx, word [eax + 2]
test ebx, ebx
je 0x52b9ff
mov ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0xc]
jmp 0x52ba2c
mov ecx, dword [esp + 0x64]
test ecx, ecx
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0xc]
je 0x52bdbb
lea eax, [ecx + 2]
mov dword [esp + 4], eax
movzx ebx, word [ecx + 2]
xor ecx, ecx
test ebx, ebx
je 0x52bdbd
test esi, esi
mov dword [esp + 0x2c], esi
jne 0x52b560
cmp ebx, 0x5d
mov dword [esp + 0x2c], esi
jne 0x52b560
mov dword [esp + 0x2c], 0
jmp 0x52bdc9
add eax, 4
movzx ecx, word [eax + 2]
add eax, 2
test cx, cx
sete dl
cmp ecx, 0x29
setne dh
xor dh, dl
jne 0x52ba55
test cx, cx
mov dword [esp + 4], eax
jne 0x52e18d
jmp 0x52f4f7
mov eax, dword [esp + 0x1c]
shr eax, 1
and eax, 1
add eax, 0x19
mov word [ebp], ax
jmp 0x52c125
mov ecx, dword [esp + 4]
lea eax, [ecx + 2]
mov dword [esp + 4], eax
movzx eax, word [ecx + 2]
cmp eax, 0x2a
jne 0x52c05c
mov dword [esp + 8], ebp
movzx eax, word [ecx + 4]
cmp eax, 0x3a
mov ebp, dword [esp + 0x190]
je 0x52c1a9
movzx edx, ax
cmp edx, 0xff
ja 0x52badb
mov edx, dword [ebp + 0xc]
test byte [edx + eax], 2
jne 0x52c1a9
mov eax, dword [ebp + 0x20]
sub eax, dword [ebp + 0x10]
sar eax, 1
mov dword [esp + 0x3c], eax
mov ebx, dword [esp + 0x1c]
test bh, 0x10
je 0x52c3f0
jmp 0x52c415
mov dword [esp + 8], ebp
mov esi, 0xffffffff
jmp 0x52bb64
mov dword [esp + 8], ebp
mov esi, 0xffffffff
mov edi, 1
jmp 0x52bb66
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
cmove ecx, eax
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x20]
sub edx, dword [eax + 0x10]
sar edx, 1
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x1c]
shr eax, 2
and eax, 1
or eax, 0xc
mov word [ebp], ax
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 2]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x28], ecx
jmp 0x52c3a3
mov dword [esp + 8], ebp
mov esi, 1
xor edi, edi
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x52f4d3
test edi, edi
mov eax, dword [esp + 0x18]
cmove eax, dword [esp + 0x44]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x14]
cmove eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x20]
cmove eax, dword [esp + 0x40]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x34]
cmove eax, dword [esp + 0x4c]
mov dword [esp + 0x34], eax
cmp esi, edi
setne byte [esp + 0xac]
test bl, 8
mov dword [esp + 0xa0], ecx
mov ebp, dword [esp + 4]
mov dword [esp + 0x10], edi
je 0x52bbe8
movzx eax, word [ebp + 2]
add ebp, 2
cmp eax, 0xff
mov ebx, dword [esp + 0x194]
jbe 0x52ca2e
jmp 0x52cb2b
mov ebx, dword [esp + 0x194]
jmp 0x52cb3a
mov dword [esp + 8], ebp
lea ecx, [esp + 4]
lea edx, [esp + 0xe0]
push 0
push dword [esp + 0x20]
mov eax, dword [esp + 0x198]
push dword [eax + 0x40]
mov eax, dword [esp + 0x180]
mov esi, eax
push esi
call fcn.005302d0
add esp, 0x10
cmp dword [esi], 0
jne 0x52f454
test eax, eax
je 0x52c135
lea ebp, [eax - 6]
cmp ebp, 0x11
mov edi, eax
mov edx, dword [esp + 0x14]
mov esi, edx
mov ecx, 0xffffffff
cmovb esi, ecx
cmp edx, 0xfffffffe
cmovne esi, edx
mov edx, edi
mov dword [esp + 0x28], esi
cmp edx, 0x1c
mov ebx, dword [esp + 0x194]
je 0x52c5b3
mov eax, ebp
cmp edx, 0x1b
mov ebp, dword [esp + 8]
jne 0x52c606
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x20]
sub ecx, dword [eax + 0x10]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 4]
lea eax, [ecx + 2]
mov dword [esp + 4], eax
movzx edx, word [ecx + 2]
cmp edx, 0x3c
mov esi, 0x27
mov edx, 0x3e
cmove esi, edx
mov dword [esp + 0x30], esi
movzx edx, word [ecx + 4]
cmp edx, 0x2b
je 0x52bccb
movzx esi, dx
cmp esi, 0x2d
je 0x52bccb
add edx, 0xffffffd0
movzx edx, dx
cmp edx, 9
ja 0x52daee
lea edx, [ecx + 4]
add ecx, 6
movzx esi, word [ecx]
lea edi, [esi - 0x30]
movzx edi, di
add ecx, 2
cmp edi, 0xa
jb 0x52bcd1
cmp dword [esp + 0x30], esi
jne 0x52c90e
mov dword [esp + 4], edx
mov ecx, 0xa3
mov eax, edx
jmp 0x52c920
mov cx, 0x5d
mov eax, dword [esp + 0x190]
test byte [eax + 0x63], 2
je 0x52bd83
jmp 0x52f534
test byte [esp + 0x1c], 2
jne 0x52c101
mov word [ebp], 0x1b
jmp 0x52c125
mov cx, 0x7b
test al, al
je 0x52bd83
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov edx, ecx
add edx, 0xffffffd0
movzx edx, dx
cmp edx, 9
ja 0x52c3c0
add eax, 4
xor edi, edi
mov ebx, dword [esp + 0x1c]
movzx ecx, cx
lea edx, [edi + edi*4]
lea edi, [ecx + edx*2 - 0x30]
cmp edi, 0xffff
jg 0x52f4bf
movzx ecx, word [eax]
mov edx, ecx
add edx, 0xffffffd0
movzx edx, dx
add eax, 2
cmp edx, 9
jbe 0x52bd52
add eax, 0xfffffffe
jmp 0x52c3c9
mov word [esp + 0x124], cx
mov eax, 1
jmp 0x52a66a
mov dword [esp + 0x24], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0x54], 0
xor edx, edx
test ebx, ebx
jne 0x52bdc9
jmp 0x52f4e5
xor ecx, ecx
mov dword [esp + 0x2c], esi
test ebx, ebx
je 0x52f4e5
mov dword [esp + 0x64], ecx
mov eax, dword [esp + 0x38]
mov ebx, edx
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0x14], edx
test ebx, ebx
jne 0x52bdee
cmp eax, edi
jbe 0x52be12
mov ecx, dword [esp + 0x1c]
and ecx, 0x20000000
cmp dword [esp + 0x54], 0
je 0x52bf58
mov edx, dword [esp + 0xac]
or edx, ecx
jne 0x52bf58
mov ebx, dword [esp + 0x194]
test ebx, ebx
je 0x52be46
sub eax, edi
sar eax, 1
add dword [ebx], eax
xor eax, eax
cmp ebp, dword [esp + 0x54]
sete al
mov ecx, 0x6f
sub ecx, eax
mov eax, dword [esp + 8]
mov word [eax], cx
mov dword [esp + 0xc], eax
lea ebp, [eax + 0x22]
jmp 0x52c39b
xor eax, eax
cmp ebp, dword [esp + 0x54]
sete al
mov ecx, 0x6f
sub ecx, eax
mov esi, dword [esp + 8]
lea eax, [esi + 2]
mov word [esi], cx
test ebp, ebp
je 0x52bf0c
not byte [esp + 0x6c]
not byte [esp + 0x6d]
not byte [esp + 0x6e]
not byte [esp + 0x6f]
not byte [esp + 0x70]
not byte [esp + 0x71]
not byte [esp + 0x72]
not byte [esp + 0x73]
not byte [esp + 0x74]
not byte [esp + 0x75]
not byte [esp + 0x76]
not byte [esp + 0x77]
not byte [esp + 0x78]
not byte [esp + 0x79]
not byte [esp + 0x7a]
not byte [esp + 0x7b]
not byte [esp + 0x7c]
not byte [esp + 0x7d]
not byte [esp + 0x7e]
not byte [esp + 0x7f]
not byte [esp + 0x80]
not byte [esp + 0x81]
not byte [esp + 0x82]
not byte [esp + 0x83]
not byte [esp + 0x84]
not byte [esp + 0x85]
not byte [esp + 0x86]
not byte [esp + 0x87]
not byte [esp + 0x88]
not byte [esp + 0x89]
not byte [esp + 0x8a]
not byte [esp + 0x8b]
mov ecx, dword [esp + 0x88]
mov dword [eax + 0x1c], ecx
mov ecx, dword [esp + 0x84]
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x7c]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [esp + 0xc], esi
lea ebp, [esi + 0x22]
jmp 0x52c39b
test ecx, ecx
mov edx, dword [esp + 0x60]
jne 0x52c20d
test ebp, ebp
mov esi, dword [esp + 8]
jne 0x52c228
cmp dword [esp + 0x54], 0
je 0x52c228
lea ecx, [eax + 2]
test edx, edx
mov dword [esp + 0x38], ecx
mov word [eax], 2
je 0x52c213
sub esp, 8
push ecx
push pe_nt_image_headers32
call fcn.00541210
add esp, 0x10
add eax, eax
add eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
sub esp, 8
push eax
push 0x10ffff
call fcn.00541210
add esp, 0x10
add eax, eax
add eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
jmp 0x52c228
add eax, 2
mov dword [esp + 4], eax
cmp dword [esp + 0x30], 0
je 0x52c1d9
mov edi, esi
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov esi, dword [esp + 0x8c]
test esi, esi
sete al
or al, byte [esp + 0x53]
jne 0x52c16f
mov eax, ebx
sar eax, 0x1f
shr eax, 0x19
add eax, ebx
mov ecx, eax
and ecx, 0x7fffff80
sar eax, 7
movzx eax, byte [eax + 0xa60c94]
shl eax, 7
mov edx, ebx
sub edx, ecx
add edx, eax
movzx eax, word [edx + edx + 0xa62e94]
movzx eax, byte [eax*8 + 0xa5f617]
test ax, ax
je 0x52c16f
mov dword [ebp], 0x9000f
mov word [ebp + 4], ax
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 6]
jmp 0x52c6fa
mov edx, dword [esp + 0x190]
mov esi, dword [edx + 0x20]
sub esi, dword [edx + 0x10]
sar esi, 1
mov dword [esp + 0x3c], esi
movzx eax, ax
cmp eax, 0x3f
mov ebx, dword [esp + 0x1c]
jne 0x52c3e0
lea eax, [ecx + 4]
mov dword [esp + 4], eax
movzx esi, word [ecx + 4]
lea edx, [esi - 0x21]
movzx edx, dx
cmp edx, 0x5b
ja case.0x52c0b3.1
mov dword [esp + 0x10], 1
mov dword [esp + 0x30], 0x29
mov dword [esp + 0x58], 0x27
xor edi, edi
jmp dword [edx*4 + 0x52f98c]
mov ebx, ebp
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx eax, word [ecx + 6]
cmp eax, 0x29
jne 0x52c0ed
movzx eax, word [ecx + 8]
lea edx, [eax - 0x2a]
movzx edx, dx
cmp edx, 0x15
ja 0x52ee14
mov esi, 0x200003
bt esi, edx
jae 0x52ee14
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
mov edi, 0x7e
jmp 0x52ebfe
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
mov edx, dword [esp + 0x28]
cmove edx, eax
mov dword [esp + 0x28], edx
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov word [ebp], 0x1c
add ebp, 2
mov dword [esp + 0xc], 0
jmp 0x52e18d
cmp dword [esp + 0x60], 0
mov eax, dword [esp + 0xe0]
je 0x52c6d9
cmp eax, 0xffff
jbe 0x52c6d9
sub esp, 8
lea ecx, [esp + 0x12c]
push ecx
push eax
call fcn.00541210
add esp, 0x10
mov ebp, dword [esp + 8]
jmp 0x52a66a
add esi, 0x1f
cmp dword [esp + 0x60], 0
mov word [ebp], si
je 0x52c6ef
cmp ebx, 0x10000
jb 0x52c6ef
lea esi, [ebp + 2]
sub esp, 8
push esi
push ebx
call fcn.00541210
add esp, 0x10
mov dword [esp + 0xc], ebp
lea ebp, [esi + eax*2]
jmp 0x52c6fa
lea esi, [ecx + 4]
mov dword [esp + 4], esi
mov edx, dword [ebp + 0xc]
add ecx, 6
movzx edi, ax
test byte [edx + edi], 2
je 0x52c703
mov dword [esp + 4], ecx
movzx eax, word [ecx]
add ecx, 2
cmp eax, 0x100
jb 0x52c1b6
jmp case.0x52c758.2
cmp dword [esp + 0x60], 0
mov dword [esp + 0x2c], esi
je 0x52c796
cmp ebx, 0x10000
jb 0x52c796
sub esp, 8
lea eax, [esp + 0x12c]
push eax
push ebx
call fcn.00541210
add esp, 0x10
jmp 0x52c7a3
mov esi, dword [esp + 8]
jmp 0x52c228
mov word [eax + 2], pe_nt_image_headers32
lea ecx, [eax + 6]
mov dword [esp + 0x38], ecx
mov word [eax + 4], 0xffff
mov eax, ecx
xor ebx, ebx
test ebp, ebp
setne bl
lea ecx, [eax + 2]
mov dword [esp + 0x38], ecx
mov word [eax], 0
mov word [esi], 0x70
mov edx, ebx
or edx, 4
cmp dword [esp + 0xac], 0
cmove dx, bx
mov word [esi + 4], dx
cmp dword [esp + 0x24], 0
jle 0x52c384
lea eax, [esi + 6]
or edx, 2
mov word [esi + 4], dx
sub ecx, eax
mov ebx, dword [esp + 0x194]
je 0x52c281
movzx edx, byte [esi + ecx + 5]
mov byte [esi + ecx + 0x25], dl
dec ecx
jne 0x52c275
test ebp, ebp
je 0x52c33b
cmp dword [esp + 0xac], 0
jne 0x52c33b
not byte [esp + 0x6c]
not byte [esp + 0x6d]
not byte [esp + 0x6e]
not byte [esp + 0x6f]
not byte [esp + 0x70]
not byte [esp + 0x71]
not byte [esp + 0x72]
not byte [esp + 0x73]
not byte [esp + 0x74]
not byte [esp + 0x75]
not byte [esp + 0x76]
not byte [esp + 0x77]
not byte [esp + 0x78]
not byte [esp + 0x79]
not byte [esp + 0x7a]
not byte [esp + 0x7b]
not byte [esp + 0x7c]
not byte [esp + 0x7d]
not byte [esp + 0x7e]
not byte [esp + 0x7f]
not byte [esp + 0x80]
not byte [esp + 0x81]
not byte [esp + 0x82]
not byte [esp + 0x83]
not byte [esp + 0x84]
not byte [esp + 0x85]
not byte [esp + 0x86]
not byte [esp + 0x87]
not byte [esp + 0x88]
not byte [esp + 0x89]
not byte [esp + 0x8a]
not byte [esp + 0x8b]
mov ecx, dword [esp + 0x88]
mov dword [eax + 0x1c], ecx
mov ecx, dword [esp + 0x84]
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x7c]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
add ecx, 0x20
jmp 0x52c38b
mov ebx, dword [esp + 0x194]
mov eax, ecx
sub eax, esi
shr eax, 1
mov word [esi + 2], ax
mov dword [esp + 0xc], esi
mov ebp, ecx
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
jmp 0x52e18d
add eax, 2
xor edi, edi
mov ebx, dword [esp + 0x1c]
mov dword [esp + 8], ebp
movzx ecx, cx
cmp ecx, 0x7d
jne 0x52c6bd
mov esi, edi
jmp 0x52c8f5
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x190]
test bh, 0x10
jne 0x52c415
mov eax, dword [ebp + 0x40]
inc eax
mov dword [ebp + 0x40], eax
mov ecx, dword [esp + 8]
mov word [ecx + 4], ax
mov edi, 0x85
mov dword [esp + 0x10], 0
mov esi, 1
mov ecx, ebx
jmp 0x52c426
mov edi, 0x83
xor esi, esi
mov ecx, ebx
mov dword [esp + 0x10], 0
mov eax, dword [ebp + 0x58]
lea edx, [eax + 1]
mov dword [ebp + 0x58], edx
cmp eax, 0xfa
jge 0x52f558
mov edx, edi
cmp edi, 0x80
mov dword [esp + 0x30], esi
ja 0x52c46d
cmp dword [ebp + 0x80], 0
je 0x52c46d
mov eax, ebp
mov dword [eax + 0x80], 0
mov ebx, eax
mov dword [esp + 0xc], 0
mov eax, dword [esp + 8]
jmp 0x52c485
mov edi, ebp
mov eax, dword [edi + 0x20]
sub eax, dword [edi + 0x10]
sar eax, 1
mov dword [esp + 0x3c], eax
mov ebx, edi
mov eax, dword [esp + 8]
mov dword [esp + 0xc], eax
mov edi, edx
mov word [eax], di
mov dword [esp + 0xa0], eax
mov esi, dword [ebx + 0x40]
mov eax, dword [ebx + 0x68]
mov dword [esp + 0x58], eax
mov dword [esp + 0xbc], 0
lea eax, [edi - 0x7f]
xor edx, edx
cmp eax, 2
setb dl
mov ebp, edx
xor eax, eax
cmp edi, 0x87
sete al
add eax, dword [esp + 0x18c]
sub esp, 0xc
lea edx, [esp + 0xac]
push dword [esp + 0x144]
push ebx
push dword [esp + 0x19c]
lea ebx, [esp + 0xe8]
push ebx
lea ebx, [esp + 0x104]
push ebx
lea ebx, [esp + 0x104]
push ebx
lea ebx, [esp + 0x124]
push ebx
push eax
push dword [esp + 0x5c]
push dword [esp + 0x40]
push ebp
push dword [esp + 0x1ac]
lea eax, [esp + 0x40]
push eax
call fcn.00528810
add esp, 0x40
test eax, eax
je 0x52f454
mov eax, dword [esp + 0x190]
dec dword [eax + 0x58]
cmp edi, 0x81
mov ebp, dword [esp + 8]
jne 0x52c54c
mov eax, dword [esp + 0x190]
cmp dword [eax + 0x40], esi
ja 0x52c54c
mov word [ebp], 0x82
cmp edi, 0x80
mov ebx, dword [esp + 0x194]
ja 0x52c565
mov eax, dword [esp + 0x190]
dec dword [eax + 0x5c]
test ebx, ebx
jne 0x52c7e5
cmp edi, 0x87
jne 0x52c7e5
mov eax, 0xffffffff
mov ecx, ebp
movzx edx, word [ecx + 2]
movzx esi, word [ecx + edx*2]
lea ecx, [ecx + edx*2]
inc eax
cmp esi, 0x78
jne 0x52c580
movzx ecx, word [ebp + 4]
cmp ecx, 0x91
jne 0x52c7b8
mov edi, 0x91
test eax, eax
jle 0x52c7e5
jmp 0x52f61e
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
cmp ecx, 0x27
mov ebp, dword [esp + 8]
je 0x52c5d5
movzx edx, cx
cmp edx, 0x3c
je 0x52c5d5
cmp edx, 0x7b
jne 0x52f5b2
add eax, 2
mov dword [esp + 4], eax
movzx ecx, cx
cmp ecx, 0x27
mov edx, 0x7d
cmove edx, ecx
cmp ecx, 0x3c
mov ecx, 0x3e
cmove edx, ecx
mov dword [esp + 0x30], edx
mov dword [esp + 0x10], 0
jmp 0x52db12
test edx, edx
js 0x52d7d4
lea ecx, [edx - 0xf]
cmp ecx, 1
ja 0x52d83c
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
sub esp, 4
lea ecx, [esp + 8]
lea edx, [esp + 0x108]
push dword [esp + 0x178]
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xd8]
push eax
call fcn.00530de0
add esp, 0x10
test eax, eax
je 0x52de83
xor eax, eax
cmp edi, 0x10
sete al
mov ecx, dword [esp + 0x190]
mov edx, dword [ecx + 0x20]
sub edx, dword [ecx + 0x10]
sar edx, 1
mov dword [esp + 0x3c], edx
xor ecx, ecx
cmp dword [esp + 0x104], eax
sete cl
mov eax, 0x10
sub eax, ecx
mov word [ebp], ax
movzx eax, word [esp + 0xcc]
mov word [ebp + 2], ax
movzx eax, word [esp + 0xc8]
mov word [ebp + 4], ax
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 6]
xor ecx, ecx
jmp 0x52de88
lea edx, [eax + 2]
movzx ecx, word [eax + 2]
mov esi, 0xffffffff
cmp ecx, 0x7d
jne 0x52c89d
mov eax, edx
jmp 0x52c8f5
mov word [esp + 0x124], ax
mov eax, 1
mov ebp, dword [esp + 8]
jmp 0x52a66a
mov word [ebp + 2], bx
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 4]
mov dword [esp + 0x2c], edi
jmp 0x52a8f1
xor ebx, ebx
cmp edi, 0x3a
mov edi, 0
jne 0x52c73c
mov ebx, ecx
jmp 0x52c716
add ebx, 2
mov ax, word [ebx]
test ax, ax
je 0x52c726
movzx edx, ax
cmp edx, 0x29
jne 0x52c713
mov dword [esp + 4], ebx
sub ebx, ecx
sar ebx, 1
cmp ebx, 0x10000
mov edi, ecx
jae 0x52f69c
movzx eax, ax
cmp eax, 0x29
jne case.0x52c758.2
add ecx, 0xfffffffe
sub ecx, esi
sar ecx, 1
cmp ecx, 6
ja case.0x52c758.2
jmp dword [ecx*4 + 0x52fcdc]
sub esp, 4
push 0
push 0xa5d5af
push esi
call fcn.00541350
add esp, 0x10
xor ecx, ecx
test eax, eax
je 0x52ead1
jmp case.0x52c758.2
mov dword [esp + 0xc], ebp
mov dword [esp + 0x2c], esi
test ecx, ecx
jne 0x52deb4
jmp 0x52e18d
mov word [esp + 0x124], bx
mov eax, 1
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], ecx
jmp 0x52a66a
cmp eax, 2
jge 0x52f630
mov edi, 0x87
test eax, eax
jne 0x52c7e5
mov dword [esp + 0xd0], 0xffffffff
mov dword [esp + 0xe4], 0xffffffff
mov edi, 0x87
mov eax, dword [esp + 4]
movzx eax, word [eax]
cmp eax, 0x29
jne 0x52f56a
test ebx, ebx
je 0x52c82d
mov eax, dword [ebx]
mov edx, 0x7fffffeb
sub edx, eax
mov ecx, dword [esp + 0xbc]
add ecx, 0xfffffffc
cmp edx, ecx
jl 0x52f447
add ecx, eax
mov dword [ebx], ecx
mov dword [ebp + 2], 0x780002
mov word [ebp + 6], 2
add ebp, 8
jmp 0x52e18d
mov ebp, dword [esp + 0xa0]
cmp edi, 0x91
je 0x52e18d
cmp edi, 0x81
jl 0x52d9f5
cmp dword [esp + 0x14], 0xfffffffe
mov ecx, dword [esp + 0xe4]
jne 0x52df37
mov eax, ecx
shr eax, 0x1f
xor eax, 1
mov dword [esp + 0xb0], eax
cmp ecx, 0xfffffffe
mov dword [esp + 0x14], 0xffffffff
mov eax, 0xffffffff
cmovg eax, ecx
mov dword [esp + 8], eax
test ecx, ecx
mov ecx, dword [esp + 0x100]
mov eax, dword [esp + 0x34]
cmovs ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x52df85
mov dword [esp + 0x10], edi
lea esi, [ecx - 0x30]
movzx esi, si
xor edi, edi
cmp esi, 9
ja 0x52c8e3
add eax, 4
xor esi, esi
lea edx, [esi + esi*4]
movzx ecx, cx
lea esi, [ecx + edx*2 - 0x30]
cmp esi, 0xffff
jg 0x52f4bf
movzx ecx, word [eax]
mov edx, ecx
add edx, 0xffffffd0
movzx edx, dx
add eax, 2
cmp edx, 9
jbe 0x52c8b3
add eax, 0xfffffffe
mov edx, eax
mov edi, esi
cmp edi, dword [esp + 0x10]
mov esi, edi
jl 0x52f6ae
mov eax, edx
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x174]
cmp dword [ecx], 0
mov dword [esp + 4], eax
je 0x52bb6a
jmp 0x52f454
mov ecx, dword [esp + 0x174]
mov dword [ecx], 0x39
mov ecx, 6
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 8]
cmp cl, 0x86
je 0x52db07
sar dword [esp + 0x3c], 1
cmp cl, 0xa3
jne 0x52d82b
mov si, word [eax]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x14], ecx
movzx ecx, si
cmp ecx, 0x2b
jne 0x52c98b
lea edx, [eax + 2]
mov dword [esp + 4], edx
movzx esi, word [eax + 2]
mov eax, esi
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 0xa
mov eax, edx
jb 0x52c9aa
jmp 0x52f654
cmp ecx, 0x2d
jne 0x52c9aa
movzx esi, word [eax + 2]
lea edx, [esi - 0x30]
movzx edx, dx
cmp edx, 9
ja case.0x52c0b3.1
add eax, 2
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
lea edx, [esi - 0x30]
movzx edx, dx
cmp edx, 9
ja 0x52d791
add eax, 2
xor edx, edx
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
cmp edx, 0xccccccc
jge 0x52f509
lea edx, [edx + edx*4]
mov dword [esp + 4], eax
movzx esi, si
lea edi, [esi + edx*2 - 0x30]
movzx esi, word [eax]
mov edx, esi
add edx, 0xffffffd0
movzx edx, dx
add eax, 2
cmp edx, 0xa
mov edx, edi
jb 0x52c9d0
jmp 0x52d7a1
mov eax, dword [esp + 0xb8]
mov eax, dword [eax]
jmp 0x52ca18
xor eax, eax
jmp 0x52ca2e
mov eax, 1
lea ecx, [ebp + eax*2]
movzx eax, word [ebp + eax*2]
cmp eax, 0x100
mov ebp, ecx
jae 0x52cb2d
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0xc]
add ebp, 2
movzx eax, ax
test byte [ecx + eax], 1
je 0x52ca57
movzx eax, word [ebp]
add ebp, 2
cmp eax, 0x100
jb 0x52ca3b
jmp 0x52cb28
cmp eax, 0x23
jne 0x52cb28
movzx ecx, word [ebp]
xor eax, eax
test cx, cx
je 0x52ca2e
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x1c]
mov eax, dword [eax + 0x84]
test eax, eax
je 0x52caa8
cmp ebp, edx
jae 0x52caf3
sub esp, 0xc
push dword [esp + 0xa8]
push dword [esp + 0xc8]
push edx
push eax
push ebp
call fcn.00541090
add esp, 0x20
test eax, eax
je 0x52caf3
jmp 0x52ca04
mov eax, dword [esp + 0xb8]
mov eax, dword [eax]
mov edi, ebp
mov ebp, esi
lea esi, [eax + eax]
sub edx, esi
mov esi, ebp
mov ebp, edi
cmp ebp, edx
ja 0x52caf3
mov edx, dword [esp + 0x190]
cmp cx, word [edx + 0x8c]
jne 0x52caf3
cmp eax, 1
je 0x52ca13
movzx ecx, word [ebp + 2]
mov edx, dword [esp + 0x190]
cmp cx, word [edx + 0x8e]
je 0x52ca18
lea eax, [ebp + 2]
cmp dword [esp + 0x60], 0
je 0x52cb0f
movzx ecx, word [ebp + 2]
and ecx, 0xfc00
cmp ecx, 0xdc00
je 0x52cb13
mov ebp, eax
jmp 0x52cb16
add ebp, 4
movzx ecx, word [ebp]
test cx, cx
jne 0x52ca6b
jmp 0x52ca0f
add ebp, 0xfffffffe
mov ecx, ebp
add ecx, 0xfffffffe
mov dword [esp + 4], ecx
mov ebp, ecx
mov ecx, dword [esp + 0xc]
movzx eax, word [ebp + 2]
cmp eax, 0x28
jne 0x52cb96
movzx eax, word [ebp + 4]
xor edx, edx
cmp eax, 0x3f
mov edi, dword [esp + 0xd4]
jne 0x52cbc9
movzx eax, word [ebp + 6]
xor edx, edx
cmp eax, 0x23
mov edi, dword [esp + 0xd4]
jne 0x52cbc9
add ebp, 6
movzx eax, word [ebp + 2]
add ebp, 2
test ax, ax
sete cl
cmp eax, 0x29
setne dl
xor dl, cl
jne 0x52cb6a
test ax, ax
mov dword [esp + 4], ebp
je 0x52f4f7
mov ax, word [ebp + 2]
mov ecx, dword [esp + 0xc]
add ebp, 2
movzx eax, ax
cmp eax, 0x3f
je 0x52cbbc
xor edx, edx
cmp eax, 0x2b
mov edi, dword [esp + 0xd4]
jne 0x52cbc9
mov dword [esp + 4], ebp
xor edi, edi
mov edx, 1
jmp 0x52cbc9
mov dword [esp + 4], ebp
xor edx, edx
mov edi, dword [esp + 0xf4]
movzx eax, word [ecx]
cmp eax, 0x75
mov dword [esp + 0x24], edx
jne 0x52cc51
add dword [esp + 8], 8
test ebx, ebx
mov eax, dword [ecx]
mov dword [ecx + 4], eax
mov dword [ecx], 0x40081
mov dword [ecx + 8], 0x40078
mov dword [esp + 0xbc], 6
mov ebp, ecx
jne 0x52cccb
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x10]
mov eax, dword [eax + 0x20]
add ecx, 2
cmp eax, ecx
jb 0x52cccb
lea edx, [ebp + 2]
movzx ecx, word [eax - 2]
mov dword [esp + 0x98], esi
mov esi, dword [esp + 0x190]
sub edx, dword [esi + 0x14]
mov esi, dword [esp + 0x98]
sar edx, 1
cmp edx, ecx
mov edx, dword [esp + 0x24]
jne 0x52cccb
add ecx, 2
mov word [eax - 2], cx
mov ax, word [ebp]
mov ebp, dword [esp + 0x60]
lea ecx, [eax - 0x1d]
movzx ecx, cx
cmp ecx, 3
ja 0x52cd66
lea ecx, [eax - 0x1e]
movzx edx, cx
mov dword [esp + 0x54], 0
cmp edx, 2
ja 0x52cc82
lea ecx, [edx + edx*2]
lea ecx, [edx + ecx*4 + 0xd]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 8]
movzx ecx, word [edx - 2]
test ebp, ebp
je 0x52cf0d
mov edx, ecx
and edx, 0xfc00
movzx edx, dx
cmp edx, 0xdc00
jne 0x52cf0d
mov eax, dword [esp + 8]
mov eax, dword [eax - 4]
mov dword [esp + 0x150], eax
mov eax, dword [esp + 0xc]
mov ax, word [eax]
mov dword [esp + 0x48], 0x10000002
jmp 0x52cf3d
mov eax, dword [esp + 8]
sub eax, ebp
mov dword [esp + 0x54], eax
sar eax, 1
mov dword [esp + 0x48], eax
mov ecx, ebp
mov eax, dword [esp + 0x10]
test eax, eax
je 0x52cdd2
cmp eax, 2
jl 0x52ce61
test ebx, ebx
je 0x52d496
mov eax, dword [esp + 0x10]
lea ecx, [eax - 1]
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x14c], ecx
fild dword [esp + 0x14c]
mov dword [esp + 0x148], eax
fimul dword [esp + 0x148]
fld qword [0xa5d340]
fxch st(1)
fucompi st(1)
fstp st(0)
ja 0x52f447
imul eax, ecx
mov ecx, dword [ebx]
mov edx, 0x7fffffeb
sub edx, ecx
cmp edx, eax
jl 0x52f447
add ecx, eax
mov dword [ebx], ecx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x24]
jmp 0x52ce6c
movzx ecx, ax
mov dword [esp + 0x54], 0x34
mov dword [esp + 0x48], ecx
cmp ecx, 0x16
jbe 0x52cf41
lea ecx, [eax - 0x6e]
movzx ecx, cx
cmp ecx, 6
ja 0x52d42a
test esi, esi
mov eax, dword [esp + 0xc]
je 0x52cfab
cmp dword [esp + 0x10], 0
jne 0x52d802
cmp esi, 0xffffffff
jne 0x52d802
add edi, 0x62
mov eax, dword [esp + 8]
mov word [eax], di
add eax, 2
mov dword [esp + 8], eax
mov ebp, dword [esp + 0x190]
test edx, edx
jne 0x52e05e
jmp 0x52e161
cmp esi, 1
mov eax, dword [esp + 8]
mov word [eax], 0
jg 0x52d281
sub esp, 4
mov edx, 1
mov ecx, dword [esp + 0x10]
push dword [esp + 0x40]
push dword [esp + 0x198]
push dword [esp + 0xa8]
call fcn.0052ff30
mov ecx, dword [esp + 0x1c]
add esp, 0x10
cmp dword [esp + 0x54], 0
je 0x52ce31
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xc]
movzx ecx, byte [ecx + eax - 1]
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 1], cl
mov ecx, dword [esp + 0xc]
dec eax
jne 0x52ce19
add dword [esp + 8], 2
test esi, esi
je 0x52d70b
lea eax, [edi + 0x92]
mov word [ecx], ax
mov dword [esp + 0xa8], ecx
lea ebp, [ecx + 2]
mov dword [esp + 0x5c], 0
dec esi
mov ecx, ebp
jmp 0x52d2f9
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x5c], 0
test esi, esi
mov eax, 0
cmovg eax, dword [esp + 0x10]
sub esi, eax
mov dword [esp + 0xa8], 0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x58], eax
test esi, esi
js 0x52d310
test ebx, ebx
je 0x52cfbb
test esi, esi
je 0x52cfbb
mov eax, dword [esp + 0xbc]
add eax, 5
mov dword [esp + 0x140], esi
fild dword [esp + 0x140]
mov dword [esp + 0x144], eax
fimul dword [esp + 0x144]
fld qword [0xa5d340]
fxch st(1)
fucompi st(1)
fstp st(0)
ja 0x52f447
imul eax, esi
add eax, 0xfffffffc
mov ecx, dword [ebx]
mov edx, 0x7fffffeb
sub edx, ecx
cmp edx, eax
jl 0x52f447
add ecx, eax
mov dword [ebx], ecx
jmp 0x52d22b
mov dword [esp + 0x48], ecx
cmp dword [esp + 0x10], 2
jl 0x52cf3d
movzx edx, ax
cmp edx, 0x1e
ja 0x52cf3d
mov edx, dword [esp + 0x190]
mov edx, dword [edx + 0x68]
or edx, dword [esp + 0xb4]
mov dword [esp + 0x30], edx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x24]
add eax, 0xfffffff1
movzx eax, ax
mov ecx, 0xffffffff
cmp eax, 1
mov eax, 0xffffffff
ja 0x52cf62
mov eax, dword [esp + 0xc]
movzx ecx, word [eax + 2]
movzx eax, word [eax + 4]
test esi, esi
je 0x52cfa7
mov dword [esp + 0x20], eax
add edi, dword [esp + 0x54]
mov eax, dword [esp + 0x10]
cmp eax, 1
mov dword [esp + 0x18], ecx
je 0x52d356
test eax, eax
mov ebp, eax
jne 0x52d370
cmp esi, 1
je 0x52d757
cmp esi, 0xffffffff
mov eax, dword [esp + 0xc]
jne 0x52d76b
add edi, 0x21
jmp 0x52d75e
mov eax, dword [esp + 0xc]
mov dword [esp + 8], eax
mov ebp, dword [esp + 0x190]
jmp 0x52e161
test esi, esi
jle 0x52d22b
add edi, 0x92
mov dword [esp + 0x68], edi
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x10], eax
mov edi, esi
mov eax, esi
mov dword [esp + 0xc], ecx
mov ebx, dword [esp + 8]
mov esi, dword [esp + 0x10]
sub esi, edx
sar esi, 1
mov dword [esp + 0xa8], esi
dec eax
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x68]
mov word [ebx], ax
mov dword [esp + 0x98], edi
je 0x52d040
lea eax, [ebx + 4]
mov word [ebx + 2], 0x83
mov ecx, eax
mov edx, dword [esp + 0x5c]
sub ecx, edx
shr ecx, 1
test edx, edx
mov edx, 0
cmovne dx, cx
mov ecx, dword [esp + 0xc]
mov word [ebx + 4], dx
add ebx, 6
mov dword [esp + 0x5c], eax
jmp 0x52d043
add ebx, 2
sub esp, 4
push dword [esp + 0x58]
push ecx
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x10]
mov edi, dword [eax + 0x20]
mov ecx, dword [eax + 0x3c]
mov dword [esp + 0x18], edx
lea eax, [edx + ecx*2]
mov ebp, dword [esp + 0x8c]
mov edx, ebp
mov esi, dword [esp + 0xa8]
sub edx, esi
mov dword [esp + 0x20], edx
lea eax, [eax + edx*2 - 0xc8]
mov dword [esp + 0x10], edi
cmp edi, eax
jbe 0x52d174
mov ebp, dword [esp + 0x60]
mov dword [esp + 8], ebx
lea esi, [ecx + ecx]
cmp esi, 0x32001
jl 0x52d0ac
mov esi, 0x32000
cmp ecx, 0x31fff
mov eax, 0x48
jg 0x52f4a5
mov edx, esi
sub edx, ecx
cmp edx, 0x64
jl 0x52f4a5
lea eax, [esi + esi]
sub esp, 0xc
push eax
call dword [0xa5d328]
add esp, 0x10
test eax, eax
je 0x52f4a0
mov edi, dword [esp + 0x190]
mov ecx, dword [edi + 0x3c]
add ecx, ecx
sub esp, 4
push ecx
push dword [edi + 0x10]
push eax
mov dword [esp + 0x28], eax
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x28]
add esp, 0x10
mov eax, dword [edi + 0x10]
mov ebx, dword [edi + 0x20]
sub ebx, eax
add ebx, edx
mov dword [edi + 0x20], ebx
cmp dword [edi + 0x3c], 0x801
jl 0x52d130
sub esp, 0xc
push eax
call dword [0xa5d32c]
mov edx, dword [esp + 0x28]
add esp, 0x10
mov ebx, dword [edi + 0x20]
mov dword [edi + 0x10], edx
mov dword [edi + 0x3c], esi
mov eax, dword [esp + 0x174]
mov dword [eax], 0
mov ecx, dword [edi + 0x3c]
lea eax, [edx + ecx*2]
mov edx, dword [esp + 0x20]
lea eax, [eax + edx*2 - 0xc8]
cmp ebx, eax
mov eax, ebx
mov ebx, dword [esp + 8]
ja 0x52d09c
mov dword [esp + 0x10], eax
mov ebp, dword [esp + 0x8c]
mov esi, dword [esp + 0xa8]
cmp ebp, esi
mov edx, ebp
mov ecx, esi
jge 0x52d1fa
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x98]
mov esi, edx
mov eax, dword [esp + 0x18]
lea ecx, [eax + ecx*2]
xor edx, edx
cmp dword [esp + 0xec], 0
setne dl
mov edi, edx
lea edx, [eax + esi*2]
lea ebx, [eax + esi*2 + 2]
cmp ebx, ecx
cmovbe ebx, ecx
neg eax
add esi, esi
sub eax, esi
mov esi, dword [esp + 0x48]
lea esi, [esi + edi*2 + 1]
lea edi, [ebx + eax - 1]
shr edi, 1
mov eax, dword [esp + 0x10]
movzx ebx, word [edx]
add ebx, esi
mov word [eax], bx
add eax, 2
add edx, 2
cmp edx, ecx
jb 0x52d1c3
mov ecx, dword [esp + 0x10]
lea ecx, [ecx + edi*2 + 2]
mov eax, dword [esp + 0x190]
mov dword [esp + 0x10], ecx
mov dword [eax + 0x20], ecx
mov edx, ebp
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 0xa8]
jmp 0x52d201
mov edx, dword [esp + 0x98]
mov eax, dword [esp + 0x48]
lea ebx, [ebx + eax*2]
cmp edx, 1
mov eax, dword [esp + 0xec]
mov edi, eax
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x18]
jg 0x52cfea
jmp 0x52d22f
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x52d473
mov eax, ecx
mov edi, ebx
mov ebp, dword [esp + 0x190]
mov ebx, ecx
mov ecx, edi
sub ecx, ebx
shr ecx, 1
inc ecx
movzx edx, word [ebx]
lea esi, [edx + edx]
sub eax, esi
test edx, edx
mov word [edi], 0x78
mov word [edi + 2], cx
lea edi, [edi + 4]
mov word [ebx], cx
cmove eax, edx
test eax, eax
mov ebx, eax
jne 0x52d248
mov dword [esp + 8], edi
mov ebx, dword [esp + 0x194]
jmp 0x52d485
sub esp, 4
mov edx, 3
mov ecx, dword [esp + 0x10]
push dword [esp + 0x40]
push dword [esp + 0x198]
push dword [esp + 0xa8]
call fcn.0052ff30
mov ecx, dword [esp + 0x1c]
add esp, 0x10
cmp dword [esp + 0x54], 0
je 0x52d2ce
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xc]
movzx ecx, byte [ecx + eax - 1]
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 5], cl
mov ecx, dword [esp + 0xc]
dec eax
jne 0x52d2b6
lea eax, [edi + 0x92]
mov word [ecx], ax
lea eax, [ecx + 4]
mov dword [esp + 0x5c], eax
mov dword [ecx + 2], 0x83
lea ecx, [ecx + 6]
add dword [esp + 8], 6
mov dword [esp + 0xa8], 0
dec esi
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x8c], eax
mov edx, dword [esp + 0x24]
test esi, esi
jns 0x52cea5
mov dword [esp + 0x68], edi
mov ecx, dword [esp + 8]
lea edi, [ecx - 4]
movzx eax, word [ecx - 2]
add eax, eax
mov dword [esp + 0xc], edi
sub edi, eax
mov dword [esp + 0x18], eax
neg eax
movzx esi, word [ecx + eax - 4]
cmp esi, 0x81
jne 0x52d3be
test edx, edx
mov ebp, dword [esp + 0x190]
mov ecx, dword [esp + 0x10]
jne 0x52d3df
jmp 0x52d6d6
cmp esi, 1
je 0x52d9c3
cmp esi, 0xffffffff
jne 0x52d773
add edi, 0x23
jmp 0x52d75a
mov ecx, dword [esp + 0x54]
add ecx, 0x29
mov eax, dword [esp + 0xc]
mov word [eax], cx
mov ecx, eax
mov word [ecx + 2], bp
mov eax, ebp
lea ebp, [ecx + 4]
test esi, esi
js 0x52d71c
sub esi, eax
je 0x52dfea
test dword [esp + 0x48], 0x10000000
sete al
or al, byte [esp + 0x53]
je 0x52da5e
mov eax, dword [esp + 0x48]
mov word [ecx + 4], ax
add ecx, 6
jmp 0x52da91
test edx, edx
mov ebp, dword [esp + 0x190]
mov ecx, dword [esp + 0x10]
je 0x52d6c4
movzx eax, si
cmp eax, 0x82
jne 0x52d6c4
mov word [edi], 0x83
mov si, 0x83
test ebx, ebx
jne 0x52d885
mov ebx, edi
sub esp, 4
mov ecx, ebx
mov edx, dword [esp + 0x10]
push 0
push ebp
push dword [esp + 0xa8]
call fcn.00529a20
add esp, 0x10
test eax, eax
jne 0x52d870
movzx eax, word [ebx + 2]
movzx ecx, word [ebx + eax*2]
lea ebx, [ebx + eax*2]
cmp ecx, 0x77
je 0x52d3f2
jmp 0x52d876
lea ecx, [eax - 0x7d]
movzx ecx, cx
cmp ecx, 0xa
ja 0x52d6f1
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0xc]
sub edx, ecx
mov dword [esp + 0x54], edx
sar edx, 1
mov dword [esp + 0x48], edx
movzx eax, ax
cmp eax, 0x87
jne 0x52d9ad
movzx eax, word [ecx + 4]
cmp eax, 0x91
mov edx, dword [esp + 0x24]
jne 0x52ccdd
jmp 0x52d9c3
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 0x190]
mov edx, dword [esp + 0x24]
test edx, edx
jne 0x52e05e
jmp 0x52e161
mov dword [esp + 0x68], edi
cmp dword [esp + 0xb0], 0
setne al
mov edx, dword [esp + 0x30]
test edx, edx
sets cl
and cl, al
cmovne edx, dword [esp + 0x14]
mov dword [esp + 0x30], edx
test cl, cl
mov eax, dword [esp + 0x58]
cmovne eax, dword [esp + 0x34]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x18], ecx
mov eax, dword [eax + 0x20]
mov dword [esp + 0x5c], 1
mov dword [esp + 0x98], esi
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
sub eax, dword [esp + 0x18]
mov ebp, eax
sar ebp, 1
sub esp, 4
push dword [esp + 0x58]
push ecx
mov dword [esp + 0x14], edx
push edx
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov eax, dword [esp + 0x190]
mov ecx, eax
mov edx, dword [ecx + 0x10]
mov eax, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x3c]
mov dword [esp + 0x18], edx
lea edx, [edx + ecx*2]
mov edi, esi
sub edi, ebp
mov dword [esp + 0x20], edi
lea edx, [edx + edi*2 - 0xc8]
cmp eax, edx
jbe 0x52d60f
mov dword [esp + 0x8c], esi
lea edi, [ecx + ecx]
cmp edi, 0x32001
jl 0x52d558
mov edi, 0x32000
cmp ecx, 0x31fff
mov eax, 0x48
jg 0x52f4a5
mov edx, edi
sub edx, ecx
cmp edx, 0x64
jl 0x52f4a5
lea eax, [edi + edi]
sub esp, 0xc
push eax
call dword [0xa5d328]
add esp, 0x10
test eax, eax
je 0x52f4a0
mov esi, dword [esp + 0x190]
mov ecx, dword [esi + 0x3c]
add ecx, ecx
sub esp, 4
push ecx
push dword [esi + 0x10]
push eax
mov dword [esp + 0x28], eax
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x28]
add esp, 0x10
mov ecx, dword [esi + 0x10]
mov eax, dword [esi + 0x20]
sub eax, ecx
add eax, edx
mov dword [esi + 0x20], eax
cmp dword [esi + 0x3c], 0x801
jl 0x52d5dc
sub esp, 0xc
push ecx
call dword [0xa5d32c]
mov edx, dword [esp + 0x28]
add esp, 0x10
mov eax, dword [esi + 0x20]
mov dword [esi + 0x10], edx
mov dword [esi + 0x3c], edi
mov ecx, dword [esp + 0x174]
mov dword [ecx], 0
mov ecx, dword [esi + 0x3c]
lea edx, [edx + ecx*2]
mov esi, dword [esp + 0x20]
lea edx, [edx + esi*2 - 0xc8]
cmp eax, edx
ja 0x52d548
mov esi, dword [esp + 0x8c]
cmp esi, ebp
mov ecx, ebp
jge 0x52d66f
mov ebp, ecx
mov edi, dword [esp + 0x18]
lea ecx, [edi + ecx*2]
mov ebx, esi
lea edx, [edi + ebx*2]
lea esi, [edi + ebx*2 + 2]
cmp esi, ecx
cmovbe esi, ecx
neg edi
add ebx, ebx
sub edi, ebx
lea esi, [esi + edi - 1]
shr esi, 1
mov dword [esp + 0x20], esi
mov edi, eax
mov esi, dword [esp + 0x48]
movzx ebx, word [edx]
add ebx, esi
mov word [edi], bx
add edi, 2
add edx, 2
cmp edx, ecx
jb 0x52d642
mov ecx, dword [esp + 0x20]
lea eax, [eax + ecx*2 + 2]
mov ecx, dword [esp + 0x190]
mov dword [ecx + 0x20], eax
mov ebx, dword [esp + 0x194]
jmp 0x52d671
mov ebp, ecx
mov edx, dword [esp + 8]
mov edi, dword [esp + 0x5c]
mov ecx, dword [esp + 0x48]
lea edx, [edx + ecx*2]
inc edi
mov dword [esp + 0x5c], edi
cmp edi, dword [esp + 0x10]
mov esi, ebp
mov ecx, dword [esp + 0xc]
jl 0x52d4f4
mov dword [esp + 0x8c], ebp
mov dword [esp + 8], edx
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0x24]
mov edi, dword [esp + 0x68]
mov esi, dword [esp + 0x98]
jmp 0x52ce6c
lea eax, [esi - 0x81]
movzx eax, ax
cmp eax, 1
ja 0x52d3e8
mov eax, dword [esp + 0x68]
add eax, 0x79
mov ecx, dword [esp + 0xc]
mov word [ecx], ax
test edx, edx
jne 0x52e05e
jmp 0x52e161
movzx eax, ax
cmp eax, 0x9d
mov ebp, dword [esp + 0x190]
je 0x52e161
jmp 0x52f642
mov word [ecx], 0xa1
mov ebp, dword [esp + 0x190]
jmp 0x52e161
mov esi, dword [esp + 0x48]
test esi, 0x10000000
sete al
or al, byte [esp + 0x53]
je 0x52d9cf
mov word [ecx + 4], si
mov eax, dword [esp + 0x18]
test eax, eax
js 0x52dfdb
mov word [ecx + 6], ax
mov eax, dword [esp + 0x20]
mov word [ecx + 8], ax
add ecx, 0xa
jmp 0x52dfde
add edi, 0x25
mov eax, dword [esp + 0xc]
mov word [eax], di
add eax, 2
mov ecx, eax
jmp 0x52dfec
add edi, 0x27
mov word [eax], di
jmp 0x52d783
add edi, 0x27
mov eax, dword [esp + 8]
mov word [eax], di
add esi, 0xffff
mov word [eax + 2], si
add eax, 4
mov ecx, eax
jmp 0x52dfec
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
xor edx, edx
movzx eax, si
cmp dword [esp + 0x30], eax
jne 0x52f60c
cmp ecx, 0x2d
jne 0x52d994
test edx, edx
je 0x52f678
mov eax, dword [ebp + 0x40]
sub eax, edx
inc eax
test eax, eax
mov edx, eax
jg 0x52e1d3
jmp 0x52f5c4
neg edx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov esi, edx
mov edx, dword [esp + 0x28]
mov eax, edx
mov ebp, dword [esp + 0x190]
jmp 0x52e315
mov eax, edi
mov edi, dword [esp + 8]
cmp dword [esp + 0x10], 1
mov ebp, dword [esp + 0x190]
jne 0x52dacc
cmp esi, 0xffffffff
jne 0x52dacc
add eax, 0x64
jmp 0x52dae3
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
jmp 0x52de98
cmp edx, 5
ja 0x52e66d
mov ecx, 0x32
bt ecx, edx
jae 0x52e66d
mov ecx, dword [esp + 0x190]
cmp dword [ecx + 0x48], 0
jne 0x52e697
mov dword [ecx + 0x48], 1
jmp 0x52e697
add esi, 5
mov word [edi], si
mov ebx, dword [esp + 0x194]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
movzx eax, si
cmp eax, 0x87
jne 0x52d8a9
movzx eax, word [edi + 2]
movzx eax, word [edi + eax*2]
mov si, 0x87
cmp eax, 0x77
je 0x52d8a9
mov word [edi], 0x8c
mov si, 0x8c
test edx, edx
je 0x52d956
movzx eax, si
cmp eax, 0x8c
je 0x52d8c6
cmp eax, 0x87
jne 0x52d969
mov dword [esp + 0xc], edi
mov edi, dword [esp + 8]
mov esi, edi
sub esi, dword [esp + 0xc]
shr esi, 1
mov word [edi], 0
sub esp, 4
mov edx, 2
mov ecx, dword [esp + 0x10]
push dword [esp + 0x40]
push ebp
push dword [esp + 0xa8]
call fcn.0052ff30
add esp, 0x10
mov eax, edi
mov edi, dword [esp + 0xc]
sub eax, edi
je 0x52d919
mov ecx, dword [esp + 8]
sub ecx, dword [esp + 0x18]
dec ecx
movzx edx, byte [ecx + eax - 4]
mov byte [ecx + eax], dl
dec eax
jne 0x52d90e
add esi, 2
movzx eax, word [edi]
cmp eax, 0x87
mov ax, 0x89
mov cx, 0x84
cmove ax, cx
mov word [edi], ax
mov eax, dword [esp + 8]
mov word [eax + 4], 0x7b
mov word [eax + 6], si
add eax, 8
mov dword [esp + 8], eax
mov word [edi + 2], si
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
jmp 0x52d976
mov eax, dword [esp + 0x68]
add eax, 0x79
mov ecx, dword [esp + 0xc]
mov word [ecx], ax
jmp 0x52e161
inc esi
mov word [edi], si
mov eax, dword [esp + 0xc]
mov word [eax], 0x7b
mov eax, dword [esp + 0xa8]
test eax, eax
je 0x52d986
mov word [eax], 0x94
cmp ecx, 2
jge 0x52e056
jmp 0x52e161
cmp ecx, 0x2b
jne 0x52e1d3
test edx, edx
je 0x52f678
add edx, dword [ebp + 0x40]
jmp 0x52e1d3
cmp eax, 0x80
ja 0x52e7ae
cmp dword [esp + 0x10], 0
jle 0x52e7a5
mov ebp, dword [esp + 0x190]
jmp 0x52e161
lea esi, [esi + esi]
and esi, 0xe
sub esp, 4
push esi
lea eax, [esp + 0x158]
push eax
push ebp
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x34]
add esp, 0x10
add ebp, esi
jmp 0x52dfe0
cmp edi, 0x7d
sete al
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xe4]
or edx, ecx
setns dl
and dl, al
mov esi, dword [esp + 0x18]
cmove ecx, esi
test dl, dl
mov eax, dword [esp + 0xe8]
mov ebx, dword [esp + 0x20]
cmove eax, ebx
mov dword [esp + 0xb0], 0
mov edx, dword [esp + 0x14]
mov dword [esp + 0x28], edx
mov dword [esp + 0x44], esi
mov edx, dword [esp + 0x34]
mov dword [esp + 0x4c], edx
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], eax
jmp 0x52e18d
mov dword [esp + 0x68], edi
mov edi, esi
mov eax, dword [esp + 0x48]
lea esi, [eax + eax]
and esi, 0xe
sub esp, 4
push esi
lea eax, [esp + 0x158]
push eax
push ebp
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x34]
mov ecx, esi
mov esi, edi
mov edi, dword [esp + 0x78]
add esp, 0x10
add ecx, ebp
mov eax, dword [esp + 0x18]
test eax, eax
js 0x52daa7
mov word [ecx], ax
mov eax, dword [esp + 0x20]
mov word [ecx + 2], ax
add ecx, 4
cmp esi, 1
jne 0x52daba
add edi, 0x25
mov word [ecx], di
add ecx, 2
jmp 0x52dfec
add edi, 0x27
mov word [ecx], di
mov word [ecx + 2], si
add ecx, 4
jmp 0x52dfec
cmp dword [esp + 0x10], 0
jne 0x52e63b
cmp esi, 1
jne 0x52e63b
add eax, 0x66
mov word [edi], ax
add edi, 2
jmp 0x52e65c
mov dword [esp + 0xa4], 1
mov ecx, 0x86
cmp cl, 0x86
jne 0x52c934
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x14], ecx
mov dword [esp + 8], ebp
lea edi, [eax + 2]
mov dword [esp + 4], edi
movzx ecx, word [eax + 2]
lea edx, [ecx - 0x30]
movzx edx, dx
cmp edx, 9
jbe 0x52f592
movzx edx, cx
cmp edx, 0xff
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
mov edx, ebx
ja 0x52db95
mov ebx, edx
mov edx, dword [ebp + 0xc]
add eax, 4
movzx esi, cx
test byte [edx + esi], 0x10
je 0x52db8e
mov dword [esp + 4], eax
movzx ecx, word [eax]
add eax, 2
cmp ecx, 0x100
jb 0x52db73
add eax, 0xfffffffe
mov edx, ebx
jmp 0x52db97
mov eax, edi
sub eax, edi
mov ebx, eax
sar ebx, 1
test edx, edx
mov edx, dword [esp + 0x10]
mov esi, ebx
mov dword [esp + 0xc], esi
je 0x52dc6b
test ebx, ebx
je 0x52f5e8
cmp cx, word [esp + 0x30]
jne 0x52f5d6
cmp eax, 0x41
jge 0x52f5fa
test edx, edx
jne 0x52dbd2
inc dword [ebp + 0x54]
mov edx, dword [esp + 0x194]
mov eax, dword [edx]
lea ecx, [eax + 9]
mov dword [edx], ecx
cmp dword [ebp + 0x7c], 0
je 0x52dbeb
add eax, 0x11
mov dword [edx], eax
mov eax, dword [ebp + 0x30]
test eax, eax
mov ecx, dword [esp + 0xc]
jle 0x52dcb6
mov esi, dword [ebp + 0x28]
xor ebx, ebx
xor edx, edx
cmp ecx, dword [esi + 4]
jne 0x52dc5b
sub esp, 4
push ecx
push dword [esi]
push edi
mov ebp, edi
mov edi, edx
call fcn.00541300
mov ecx, dword [esp + 0x1c]
mov edx, edi
mov edi, ebp
mov ebp, dword [esp + 0x1a0]
add esp, 0x10
test eax, eax
jne 0x52dc5b
cmp dword [esp + 0x10], 0
mov edx, dword [esi + 8]
jne 0x52e6f2
mov eax, dword [ebp + 0x24]
test eax, eax
je 0x52dc5b
movzx ecx, word [eax + 4]
cmp edx, ecx
je 0x52dc51
mov eax, dword [eax]
test eax, eax
jne 0x52dc41
jmp 0x52dc57
mov word [eax + 6], 1
mov ecx, dword [esp + 0xc]
inc ebx
add esi, 0xc
mov eax, dword [ebp + 0x30]
cmp ebx, eax
jl 0x52dc01
jmp 0x52e1b9
mov esi, dword [ebp + 0x2c]
mov eax, dword [ebp + 0x30]
xor ebx, ebx
test eax, eax
jle 0x52e1a0
lea eax, [esi + 2]
sub esp, 4
push dword [esp + 0x10]
push eax
push edi
call fcn.00541300
add esp, 0x10
test eax, eax
jne 0x52dca3
mov eax, dword [esp + 0xc]
cmp word [esi + eax*2 + 2], 0
je 0x52e19d
mov eax, dword [ebp + 0x30]
mov ecx, dword [ebp + 0x34]
lea esi, [esi + ecx*2]
inc ebx
cmp ebx, eax
jl 0x52dc7b
jmp 0x52e1a0
xor edx, edx
xor ebx, ebx
jmp 0x52e1b9
mov dword [esp + 8], ebp
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
lea ecx, [esp + 0xfc]
jmp 0x52dcf2
or dword [edi], esi
jmp 0x52dcf2
add edx, 2
mov eax, edx
lea ecx, [esp + 0xf8]
mov edx, eax
movzx esi, word [edx]
cmp esi, 0x29
je 0x52decf
movzx eax, si
cmp eax, 0x3a
je 0x52decf
lea eax, [edx + 2]
mov dword [esp + 4], eax
lea esi, [esi - 0x2d]
movzx ebx, si
cmp ebx, 0x4b
ja case.0x52dd29.1
mov esi, 1
mov edi, ecx
jmp dword [ebx*4 + 0x52fbac]
or byte [ecx + 2], 8
mov esi, 0x400
mov edi, dword [esp + 0xc0]
jmp case.0x52dd29.60
mov esi, 0x200
mov edi, ecx
or dword [edi], esi
jmp 0x52dcf2
mov esi, 0x40
mov edi, ecx
or dword [edi], esi
jmp 0x52dcf2
mov esi, 2
mov edi, ecx
or dword [edi], esi
jmp 0x52dcf2
mov esi, 4
mov edi, ecx
or dword [edi], esi
jmp 0x52dcf2
mov esi, 8
mov edi, ecx
or dword [edi], esi
jmp 0x52dcf2
sub esp, 4
push 1
push 0xa5d5c3
push esi
call fcn.00541350
add esp, 0x10
mov ecx, 4
test eax, eax
je 0x52ead1
jmp case.0x52c758.2
sub esp, 4
push 4
push str.MARK
push esi
call fcn.00541350
add esp, 0x10
test eax, eax
je 0x52e725
sub esp, 4
push 4
push str.FAIL
push esi
call fcn.00541350
add esp, 0x10
test eax, eax
je 0x52e9e4
sub esp, 4
push 4
push str.SKIP
push esi
call fcn.00541350
add esp, 0x10
test eax, eax
je 0x52eac5
sub esp, 4
push 4
push str.THEN
push esi
call fcn.00541350
add esp, 0x10
mov ecx, 8
test eax, eax
mov ebp, dword [esp + 0x190]
je 0x52ead1
jmp case.0x52c758.2
sub esp, 4
push 5
push str.PRUNE
push esi
call fcn.00541350
add esp, 0x10
mov ecx, 6
test eax, eax
je 0x52ead1
jmp case.0x52c758.2
sub esp, 4
push 6
push str.ACCEPT
push esi
call fcn.00541350
add esp, 0x10
test eax, eax
je 0x52e72f
sub esp, 4
push 6
push str.COMMIT
push esi
call fcn.00541350
add esp, 0x10
mov ecx, 3
test eax, eax
je 0x52ead1
jmp case.0x52c758.2
mov ecx, 6
test ecx, ecx
mov eax, dword [esp + 0x34]
je 0x52dec2
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
test ecx, ecx
je 0x52e18d
cmp ecx, 4
je 0x52e18d
jmp 0x52f5a4
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
jmp 0x52e6d9
mov eax, dword [esp + 0xfc]
or eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xf8]
not ecx
and ecx, eax
movzx eax, si
cmp eax, 0x29
jne 0x52e712
mov eax, ecx
shr eax, 9
and eax, 1
mov dword [esp + 0xd4], eax
xor eax, 1
mov dword [esp + 0xf4], eax
mov eax, ecx
and eax, 1
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x134]
mov dword [eax], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x1c], ecx
mov ebx, dword [esp + 0x194]
jmp 0x52e189
mov dword [esp + 0xb0], 0
test ecx, ecx
js 0x52df75
mov eax, dword [esp + 0xd0]
test eax, eax
jns 0x52df75
mov eax, dword [esp + 0x100]
mov dword [esp + 0xe8], eax
or ecx, dword [esp + 0x58]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xb0], 0
mov eax, dword [esp + 0x14]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0xd0]
test edx, edx
mov ebx, dword [esp + 0x18]
cmovs edx, ebx
mov esi, dword [esp + 0xe8]
mov ecx, dword [esp + 0x20]
cmovs esi, ecx
mov edi, dword [esp + 0x14]
mov dword [esp + 0x28], edi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x18], edx
mov eax, dword [esp + 8]
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], esi
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov ebx, dword [esp + 0x194]
jmp 0x52e18d
add ecx, 6
mov ebp, ecx
add edi, 0x21
mov word [ebp], di
add ebp, 2
mov ecx, ebp
mov ebp, dword [esp + 0x190]
mov edi, dword [esp + 0x48]
test edi, 0x10000000
sete al
or al, byte [esp + 0x53]
je 0x52e012
mov word [ecx], di
add ecx, 2
mov dword [esp + 8], ecx
jmp 0x52e038
add edi, edi
and edi, 0xe
sub esp, 4
push edi
lea eax, [esp + 0x158]
push eax
mov esi, ecx
push esi
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x34]
add esp, 0x10
add esi, edi
mov dword [esp + 8], esi
mov ecx, dword [esp + 0x18]
test ecx, ecx
js 0x52e056
mov eax, dword [esp + 8]
mov word [eax], cx
mov ecx, dword [esp + 0x20]
mov word [eax + 2], cx
add eax, 4
mov dword [esp + 8], eax
test edx, edx
je 0x52e161
mov ebx, dword [esp + 0xa0]
movzx eax, word [ebx]
lea ecx, [eax - 0x1d]
movzx ecx, cx
cmp ecx, 0x53
ja case.0x52e073.4
jmp dword [ecx*4 + 0x52fcf8]
cmp dword [esp + 0x60], 0
movzx eax, byte [eax + 0xa5ea14]
lea ebx, [ebx + eax*2]
mov dword [esp + 0xa0], ebx
je case.0x52e073.4
movzx eax, word [ebx - 2]
and eax, 0xfc00
cmp eax, 0xd800
jne case.0x52e073.4
add ebx, 2
jmp 0x52e0d1
add ebx, 0x22
jmp 0x52e0d1
movzx eax, byte [0xa5ea71]
movzx ecx, word [ebx + 4]
add ecx, 0xfffffff1
movzx ecx, cx
xor edx, edx
cmp ecx, 2
setb dl
lea eax, [eax + edx*2]
jmp 0x52e0ce
movzx eax, word [ebx + 2]
lea ebx, [ebx + eax*2]
mov dword [esp + 0xa0], ebx
mov esi, dword [esp + 8]
sub esi, ebx
test esi, esi
jle 0x52e15a
movzx eax, word [ebx]
cmp eax, 0x75
ja 0x52e0fb
movzx eax, byte [eax + 0xa5d538]
test ax, ax
je 0x52e0fb
mov word [ebx], ax
jmp 0x52e15a
mov edi, esi
shr edi, 1
mov eax, dword [esp + 8]
mov word [eax], 0
sub esp, 4
mov edx, 2
mov ecx, ebx
push dword [esp + 0x40]
push ebp
push dword [esp + 0xa8]
call fcn.0052ff30
add esp, 0x10
movzx eax, byte [ebx + esi - 1]
mov byte [ebx + esi + 3], al
dec esi
jne 0x52e126
add edi, 2
mov eax, dword [esp + 0xa0]
mov word [eax], 0x81
mov ecx, dword [esp + 8]
mov word [ecx + 4], 0x78
mov word [ecx + 6], di
add ecx, 8
mov dword [esp + 8], ecx
mov word [eax + 2], di
mov ebx, dword [esp + 0x194]
xor eax, eax
mov cl, byte [esp + 0xac]
mov al, cl
add eax, eax
or dword [ebp + 0x68], eax
mov dword [esp + 0xc], 0
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x20], eax
mov ebp, dword [esp + 8]
mov eax, dword [esp + 4]
add eax, 2
mov dword [esp + 4], eax
jmp 0x52a150
mov eax, dword [ebp + 0x30]
mov dword [esp + 0x94], esi
cmp ebx, eax
jge 0x52f5c4
mov ecx, dword [esp + 0x94]
movzx edx, word [ecx]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x52e2e5
mov dword [esp + 0xa4], ecx
mov ebx, dword [esp + 0x194]
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x3c], eax
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov esi, ebx
test ebx, ebx
je 0x52e23d
mov ebx, ecx
mov edx, dword [esp + 8]
sub ebx, ecx
mov eax, dword [esp + 0x3c]
sub eax, edi
sar eax, 1
mov dword [esp + 0x3c], eax
mov word [edx], 0x75
shr ebx, 1
mov word [edx + 2], bx
mov dword [esp + 0xc], edx
lea ebp, [edx + 4]
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0xb0], 0
mov dword [esp + 0x14], edx
mov dword [esp + 0x28], edx
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov ebx, esi
jmp 0x52e18d
mov eax, dword [esp + 8]
mov word [eax], 0
test edx, edx
mov ebx, ecx
mov dword [esp + 0xc], edi
je 0x52e272
sub esp, 4
push edx
push dword [esp + 0xa4]
push ecx
mov edi, edx
mov ebx, ecx
call fcn.00526f80
mov ecx, ebx
mov edx, edi
mov edi, dword [esp + 0x1c]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x52e3b7
cmp dword [esp + 0x18c], 0
jg 0x52e1e8
movzx eax, word [ebx + 2]
test ax, ax
jne 0x52e1e8
mov dword [esp + 0x28], ecx
cmp dword [esp + 0x188], 0
je 0x52f546
mov esi, dword [esp + 0x188]
mov ecx, dword [esi + 4]
cmp ecx, ebx
jb 0x52f546
sub esp, 4
mov edx, dword [esp + 0xc]
push 0
push ebp
push dword [esp + 0xa8]
call fcn.00529a20
add esp, 0x10
test eax, eax
je 0x52e77f
mov esi, dword [esi]
test esi, esi
jne 0x52e2ae
jmp 0x52f546
mov dword [esp + 0x10], edx
mov dword [esp + 0xa4], 0
cmp dword [esp + 0x194], 0
je 0x52e3e5
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x194]
mov esi, dword [esp + 0x10]
cmp eax, 0xfffffffe
mov ecx, eax
mov eax, 0xffffffff
cmove edx, eax
mov dword [esp + 0x28], edx
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov eax, dword [ebp + 0x20]
sub eax, dword [ebp + 0x10]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x1c]
and eax, 1
add eax, 0x71
mov ecx, dword [esp + 8]
mov word [ecx], ax
mov edx, esi
mov word [ecx + 2], dx
mov eax, 1
mov ecx, edx
shl eax, cl
cmp edx, 0x20
mov ecx, 1
cmovge eax, ecx
or dword [ebp + 0x50], eax
cmp edx, dword [ebp + 0x4c]
jle 0x52e36d
mov dword [ebp + 0x4c], edx
sar dword [esp + 0x3c], 1
mov eax, dword [esp + 8]
lea eax, [eax + 4]
mov ecx, dword [ebp + 0x24]
test ecx, ecx
je 0x52e397
mov edi, dword [esp + 8]
mov esi, edx
movzx edx, word [ecx + 4]
cmp esi, edx
mov edx, esi
je 0x52e3a6
mov ecx, dword [ecx]
test ecx, ecx
jne 0x52e383
jmp 0x52e3ac
mov ecx, dword [esp + 8]
mov dword [esp + 0xc], ecx
mov ebp, eax
jmp 0x52e18d
mov word [ecx + 6], 1
mov dword [esp + 0xc], edi
mov ebp, eax
jmp 0x52e18d
mov dword [esp + 0x28], ecx
cmp edx, dword [ebp + 0x44]
jg 0x52f5c4
mov ecx, dword [ebp + 0x3c]
lea eax, [edi + ecx*2 - 0xc8]
cmp eax, dword [esp + 0x3c]
jbe 0x52e563
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x3c]
jmp 0x52e615
cmp dword [ebp + 0x78], 0
je 0x52e702
lea ecx, [ebx + 1]
mov dword [esp + 0xa4], 0
cmp ecx, eax
jge 0x52e799
mov ecx, dword [esp + 0x94]
lea eax, [ecx + 2]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x34]
lea edi, [ecx + eax*2]
mov esi, 1
lea eax, [edi + 2]
sub esp, 8
push eax
push dword [esp + 0x18]
call fcn.00541260
add esp, 0x10
test eax, eax
jne 0x52e445
mov eax, dword [ebp + 0x34]
lea edi, [edi + eax*2]
lea eax, [ebx + esi + 1]
inc esi
cmp eax, dword [ebp + 0x30]
jl 0x52e41e
mov dword [esp + 0xc], edi
mov dword [esp + 0xa4], 0
cmp esi, 2
jl 0x52ea93
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x20]
sub edx, dword [eax + 0x10]
mov eax, dword [esp + 0x1c]
and eax, 1
add eax, 0x73
mov ecx, dword [esp + 8]
mov word [ecx], ax
sar edx, 1
mov dword [esp + 0x3c], edx
mov word [ecx + 2], bx
mov word [ecx + 4], si
lea eax, [ecx + 6]
mov dword [esp + 0x30], eax
mov dword [esp + 0xa4], 0
mov eax, dword [esp + 0xc]
cmp dword [esp + 0x94], eax
jae 0x52e54b
mov ebp, dword [esp + 0x190]
mov edx, dword [ebp + 0x24]
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x10], eax
mov esi, dword [ebp + 0x50]
mov eax, dword [ebp + 0x4c]
mov ecx, dword [esp + 0x94]
mov ebp, ecx
movzx ecx, word [ecx]
mov ebx, 1
shl ebx, cl
cmp ecx, 0x20
mov edi, 1
cmovae ebx, edi
cmp eax, ecx
jge 0x52e504
mov eax, dword [esp + 0x190]
mov dword [eax + 0x4c], ecx
mov eax, ecx
test edx, edx
je 0x52e51e
mov edi, edx
cmp word [edi + 4], cx
je 0x52e518
mov edi, dword [edi]
test edi, edi
jne 0x52e50a
jmp 0x52e51e
mov word [edi + 6], 1
or esi, ebx
mov ecx, ebp
mov edi, dword [esp + 0x10]
lea ecx, [ecx + edi*2]
cmp ecx, dword [esp + 0xc]
jb 0x52e4dd
mov dword [esp + 0x94], ecx
mov eax, dword [esp + 0x190]
mov dword [eax + 0x50], esi
mov dword [esp + 0xa4], 0
mov eax, dword [esp + 8]
mov dword [esp + 0xc], eax
mov ebp, dword [esp + 0x30]
mov ebx, dword [esp + 0x194]
jmp 0x52e18d
mov dword [esp + 0x10], edx
lea esi, [ecx + ecx]
cmp esi, 0x32001
mov eax, 0x32000
cmovge esi, eax
cmp ecx, 0x31fff
mov eax, 0x48
jg 0x52f4a5
mov edx, esi
sub edx, ecx
cmp edx, 0x64
jl 0x52f4a5
lea eax, [esi + esi]
sub esp, 0xc
push eax
call dword [0xa5d328]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x52f4a0
mov ebp, dword [esp + 0x190]
mov eax, dword [ebp + 0x3c]
add eax, eax
sub esp, 4
push eax
push dword [ebp + 0x10]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0x20]
sub eax, ecx
add eax, ebx
mov dword [ebp + 0x20], eax
cmp dword [ebp + 0x3c], 0x801
jl 0x52e5f2
sub esp, 0xc
push ecx
call dword [0xa5d32c]
add esp, 0x10
mov eax, dword [ebp + 0x20]
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0x3c], esi
mov ecx, dword [esp + 0x174]
mov dword [ecx], 0
mov ecx, dword [ebp + 0x14]
mov edi, dword [esp + 0x194]
mov esi, edi
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x28]
lea ebx, [edi + edx*2]
mov edi, dword [esp + 8]
lea edx, [edi + 2]
sub edx, ecx
shr edx, 1
mov word [eax], dx
add eax, 2
mov dword [ebp + 0x20], eax
mov edx, edi
mov edi, dword [esp + 0xc]
jmp 0x52e1ec
add eax, 0x68
cmp esi, 0xffffffff
mov word [edi], ax
mov eax, dword [esp + 0x10]
mov word [edi + 2], ax
mov eax, 0
cmovne ax, si
mov word [edi + 4], ax
add edi, 6
mov dword [esp + 8], edi
test edx, edx
jne 0x52e05e
jmp 0x52e161
lea ecx, [edx - 0x1d]
cmp ecx, 5
mov ecx, dword [esp + 0x190]
ja 0x52e697
mov eax, dword [esp + 4]
add eax, 2
mov dword [esp + 0x64], eax
mov eax, dword [edx*4 + 0xa5d4ac]
add eax, 0xfffffffe
mov dword [esp + 4], eax
jmp 0x52e6cd
cmp eax, 0x11
mov eax, 0
cmovb eax, ebp
mov dword [esp + 0xc], eax
mov eax, dword [ecx + 0x20]
sub eax, dword [ecx + 0x10]
sar eax, 1
mov dword [esp + 0x3c], eax
mov eax, edx
xor eax, 0xe
or eax, dword [esp + 0x9c]
mov ax, 0xd
cmove dx, ax
mov word [ebp], dx
add ebp, 2
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
jmp 0x52e18d
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa4], eax
jmp 0x52e1cc
mov dword [esp + 0xa4], 0
jmp 0x52e302
add edx, 2
mov dword [esp + 4], edx
mov edi, 0x83
xor esi, esi
jmp 0x52e8bc
mov ecx, 1
jmp 0x52ead1
test ebx, ebx
jne 0x52f666
mov eax, dword [esp + 0x190]
mov dword [eax + 0x6c], 1
mov eax, dword [eax + 0x24]
mov ebx, dword [esp + 0x194]
test eax, eax
je 0x52eb9f
mov esi, dword [esp + 8]
test ebx, ebx
je 0x52e764
add dword [ebx], 3
jmp 0x52e774
mov word [esi], 0xa0
movzx ecx, word [eax + 4]
mov word [esi + 2], cx
add esi, 4
mov eax, dword [eax]
test eax, eax
jne 0x52e75b
jmp 0x52eba3
mov edi, dword [esp + 0x194]
mov esi, edi
mov edx, dword [esp + 8]
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x28]
jmp 0x52e1ec
mov ebx, dword [esp + 0x194]
jmp 0x52eaa1
xor eax, eax
test esi, esi
setne al
mov esi, eax
mov edx, dword [esp + 0x24]
jmp 0x52ccdd
mov dword [esp + 8], ebp
movzx edx, word [ecx + 6]
cmp edx, 0x3f
jne 0x52e7f6
movzx edx, word [ecx + 8]
cmp edx, 0x43
jne 0x52e7f6
lea edx, [ecx + 0xa]
movzx esi, word [edx]
lea edi, [esi - 0x30]
movzx edi, di
add edx, 2
cmp edi, 0xa
jb 0x52e7d0
movzx esi, si
cmp esi, 0x29
cmove eax, edx
movzx edx, word [eax]
cmp edx, 0x28
jne 0x52f732
movzx edx, word [eax + 2]
cmp edx, 0x3f
jne 0x52e9ee
movzx edx, word [eax + 4]
cmp edx, 0x21
je 0x52e832
movzx edx, dx
cmp edx, 0x3d
je 0x52e832
cmp edx, 0x3c
jne 0x52e9ee
movzx eax, word [eax + 6]
cmp eax, 0x3d
je 0x52e832
movzx eax, ax
cmp eax, 0x21
jne 0x52e9ee
mov ebp, dword [esp + 0x190]
mov dword [ebp + 0x80], 1
mov edi, 0x87
xor esi, esi
mov ecx, dword [esp + 0x1c]
jmp 0x52c41e
mov ebx, ebp
movzx edx, word [ecx + 6]
cmp edx, 0x21
je 0x52ebe8
movzx esi, dx
cmp esi, 0x3d
jne 0x52ec15
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
add ecx, 8
mov dword [esp + 4], ecx
mov edi, 0x7f
jmp 0x52ebfe
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
add ecx, 6
mov dword [esp + 4], ecx
mov edi, 0x7d
jmp 0x52c41a
mov dword [esp + 8], ebp
add ecx, 6
mov dword [esp + 4], ecx
mov edi, 0x81
xor esi, esi
mov ecx, ebx
mov dword [esp + 0x10], 0
mov ebp, dword [esp + 0x190]
jmp 0x52c426
mov ebx, ebp
mov word [ebp], 0x76
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx edx, word [ecx + 6]
mov ecx, edx
add ecx, 0xffffffd0
movzx esi, cx
xor ecx, ecx
cmp esi, 9
ja 0x52e916
xor ecx, ecx
lea ecx, [ecx + ecx*4]
movzx edx, dx
lea ecx, [edx + ecx*2 - 0x30]
movzx edx, word [eax + 2]
add eax, 2
mov esi, edx
add esi, 0xffffffd0
movzx esi, si
cmp esi, 0xa
jb 0x52e8f4
mov dword [esp + 4], eax
lea ebp, [ebx + 2]
movzx edx, dx
cmp edx, 0x29
jne 0x52eaae
cmp ecx, 0x100
jl 0x52edb5
mov eax, dword [esp + 0x174]
mov dword [eax], 0x26
mov eax, 6
jmp 0x52edd7
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx ecx, word [ecx + 6]
mov edx, ecx
add edx, 0xffffffc3
movzx edx, dx
cmp edx, 2
jae 0x52ebd3
movzx ecx, cx
xor edx, edx
cmp ecx, 0x3e
sete dl
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], 0x29
jmp case.0x52c0b3.5
mov dword [esp + 8], ebp
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx eax, word [ecx + 6]
xor edx, edx
cmp eax, 0x29
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
je 0x52e1d3
jmp 0x52f60c
mov eax, dword [esp + 0x190]
mov dword [eax + 0x7c], 1
mov edi, 1
mov dword [esp + 0x10], edi
mov dword [esp + 8], ebp
add ecx, 6
mov dword [esp + 4], ecx
mov edi, 0x83
xor esi, esi
mov ecx, ebx
mov ebp, dword [esp + 0x190]
jmp 0x52c426
mov ecx, 5
jmp 0x52eaca
lea ebx, [ecx + 6]
mov eax, dword [esp + 8]
mov word [eax + 4], 0x8d
mov dword [esp + 4], ebx
movzx eax, word [ebx]
mov edx, eax
add edx, 0xffffffd9
movzx edx, dx
cmp edx, 0x2b
ja case.0x52ea13.1
jmp dword [edx*4 + 0x52fafc]
movzx eax, ax
mov dword [esp + 0x58], eax
lea ebx, [ecx + 8]
mov dword [esp + 4], ebx
mov ax, word [ecx + 8]
lea ecx, [eax - 0x30]
movzx ecx, cx
cmp ecx, 9
ja 0x52ef4c
add ebx, 2
xor ecx, ecx
cmp ecx, 0xccccccc
jge 0x52f6de
movzx eax, ax
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*2 - 0x30]
mov dword [esp + 4], ebx
movzx eax, word [ebx]
mov edx, eax
add edx, 0xffffffd0
movzx edx, dx
add ebx, 2
cmp edx, 0xa
jb 0x52ea40
add ebx, 0xfffffffe
mov dl, 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x30], 2
mov dword [esp + 0xc], 0xffffffff
mov esi, ebx
xor ebx, ebx
jmp 0x52f094
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 0x190]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
jmp 0x52e311
mov eax, dword [esp + 0x174]
mov dword [eax], 0x27
mov eax, 6
jmp 0x52edd7
mov ecx, 7
mov ebp, dword [esp + 0x190]
lea eax, [ecx + ecx*2]
test ebx, ebx
je 0x52eb0c
mov edx, edi
add ecx, 0xfffffffe
cmp ecx, 3
jbe 0x52f666
mov edi, dword [esp + 0x194]
test edi, edi
mov eax, dword [eax*4 + 0xa5d5e4]
mov esi, dword [esp + 8]
mov word [esi], ax
je 0x52eb30
add dword [edi], ebx
mov word [esi + 2], 0
add esi, 4
jmp 0x52eb54
cmp ecx, 1
jbe 0x52f6cc
movzx eax, word [eax*4 + 0xa5d5e0]
mov esi, dword [esp + 8]
mov word [esi], ax
add esi, 2
mov ebx, dword [esp + 0x194]
jmp 0x52eb61
mov dword [esp + 0xc], eax
lea eax, [esi + 4]
mov word [esi + 2], bx
lea ecx, [ebx + ebx]
sub esp, 4
push ecx
push edx
push eax
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x1c]
add esp, 0x10
lea esi, [esi + ebx*2 + 4]
mov ebx, edi
movzx eax, ax
mov word [esi], 0
add esi, 2
lea ecx, [eax - 0x96]
movzx ecx, cx
cmp ecx, 4
jae 0x52eb78
mov dword [ebp + 0x70], 1
jmp 0x52eb90
add eax, 0xffffff66
movzx eax, ax
cmp eax, 1
ja 0x52eb90
mov eax, dword [esp + 0xc0]
or byte [eax + 1], 0x10
mov dword [esp + 0xc], 0
mov ebp, esi
jmp 0x52e18d
mov esi, dword [esp + 8]
xor eax, eax
mov ebp, dword [esp + 0x190]
cmp dword [ebp + 0x5c], 0
setg al
or eax, 0x9e
mov word [esi], ax
add esi, 2
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0x14], edx
jmp 0x52eb61
mov dword [esp + 0x58], 0x3e
movzx ecx, cx
cmp ecx, 0x3c
je case.0x52c0b3.6
jmp 0x52f70e
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
add ecx, 8
mov dword [esp + 4], ecx
mov edi, 0x80
xor esi, esi
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x10], 0
mov dword [esp + 8], ebx
jmp 0x52c426
cmp edx, 0xff
mov ebp, ebx
ja 0x52f75a
mov esi, dword [esp + 0x190]
mov esi, dword [esi + 0xc]
mov dword [esp + 0x58], 0x3e
test byte [esi + edx], 0x10
je 0x52f75a
mov edi, dword [esp + 0x58]
mov dword [esp + 8], ebp
lea ecx, [eax + 2]
mov dword [esp + 0x10], ecx
mov dword [esp + 4], ecx
movzx ecx, word [eax + 2]
lea edx, [ecx - 0x30]
movzx edx, dx
cmp edx, 9
jbe 0x52f592
movzx edx, cx
cmp edx, 0xff
ja 0x52ecaa
mov edx, dword [esp + 0x190]
mov edx, dword [edx + 0xc]
add eax, 4
movzx esi, cx
test byte [edx + esi], 0x10
je 0x52ec98
mov dword [esp + 4], eax
movzx ecx, word [eax]
add eax, 2
cmp ecx, 0x100
jb 0x52ec7d
add eax, 0xfffffffe
cmp dword [esp + 0x194], 0
jne 0x52ecbc
jmp 0x52ef37
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x194], 0
je 0x52ef37
movzx ecx, cx
cmp edi, ecx
jne 0x52f5d6
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0x30]
cmp ecx, 0x2710
jge 0x52f720
sub eax, dword [esp + 0x10]
mov edi, eax
sar edi, 1
mov edx, dword [esp + 0x190]
mov esi, edx
mov edx, dword [esi + 0x40]
mov dword [esp + 0xc], edx
mov ebp, edi
lea edx, [edi + 2]
cmp edx, dword [esi + 0x34]
jle 0x52ed12
mov esi, dword [esp + 0x190]
mov dword [esi + 0x34], edx
cmp eax, 0x41
jge 0x52f5fa
inc dword [esp + 0xc]
test ecx, ecx
jle 0x52ed8a
mov edi, dword [esp + 0x190]
mov esi, dword [edi + 0x28]
add esi, 8
xor ebx, ebx
jmp 0x52ed55
mov eax, dword [esp + 0xc]
cmp dword [esi], eax
je 0x52f195
test dword [esp + 0x1c], 0x80000
je 0x52f6fc
mov edi, dword [esp + 0x190]
mov dword [edi + 0x78], 1
jmp 0x52ed7d
cmp ebp, dword [esi - 4]
jne 0x52ed71
sub esp, 4
push ebp
push dword [esi - 8]
push dword [esp + 0x1c]
call fcn.00541300
add esp, 0x10
test eax, eax
je 0x52ed2b
mov eax, dword [esp + 0xc]
cmp dword [esi], eax
je 0x52f6ba
inc ebx
mov ecx, dword [edi + 0x30]
add esi, 0xc
cmp ebx, ecx
jl 0x52ed55
jmp 0x52ed8c
xor ebx, ebx
cmp ebx, ecx
jl 0x52ef37
mov eax, dword [esp + 0x190]
mov esi, dword [eax + 0x38]
cmp ecx, esi
jge 0x52eea5
mov eax, dword [esp + 0x190]
mov ebx, dword [eax + 0x28]
jmp 0x52ef16
mov edx, ebx
mov word [edx + 2], cx
mov ecx, dword [esp + 0x190]
sub eax, dword [ecx + 0x18]
shr eax, 1
inc eax
mov word [edx + 4], ax
mov word [edx + 6], 0
lea ebp, [edx + 8]
xor eax, eax
test eax, eax
mov ecx, eax
mov edx, 4
cmove ecx, edx
mov edx, dword [esp + 0xc]
cmove edx, eax
mov dword [esp + 0xc], edx
mov dword [esp + 0xdc], 1
mov dword [esp + 0x90], ebx
mov ebx, dword [esp + 0x194]
test ecx, ecx
jne 0x52deb4
jmp 0x52e18d
movzx eax, ax
cmp eax, 0x7b
jne 0x52ee86
movzx eax, word [ecx + 0xa]
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 9
ja 0x52ee86
add ecx, 0xe
movzx eax, word [ecx - 2]
lea edx, [eax - 0x30]
movzx edx, dx
add ecx, 2
cmp edx, 0xa
jb 0x52ee2e
movzx eax, ax
cmp eax, 0x7d
je 0x52c0ed
cmp eax, 0x2c
jne 0x52ee86
movzx eax, word [ecx - 2]
cmp eax, 0x7d
je 0x52c0ed
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 9
ja 0x52ee86
movzx eax, word [ecx]
lea edx, [eax - 0x30]
movzx edx, dx
add ecx, 2
cmp edx, 0xa
jb 0x52ee69
movzx eax, ax
cmp eax, 0x7d
je 0x52c0ed
mov ebp, ebx
mov word [ebp], 0x9d
add ebp, 2
mov dword [esp + 0xc], 0
mov ebx, dword [esp + 0x194]
jmp 0x52e18d
lea eax, [esi*8]
lea eax, [eax + eax*2]
sub esp, 0xc
push eax
call dword [0xa5d328]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x52f773
add esi, esi
mov eax, dword [esp + 0x190]
mov edi, eax
mov eax, dword [edi + 0x38]
shl eax, 2
lea eax, [eax + eax*2]
sub esp, 4
push eax
push dword [edi + 0x28]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0x10
cmp dword [edi + 0x38], 0x15
jl 0x52ef06
sub esp, 0xc
mov eax, dword [esp + 0x19c]
push dword [eax + 0x28]
call dword [0xa5d32c]
add esp, 0x10
mov eax, dword [esp + 0x190]
mov dword [eax + 0x28], ebx
mov dword [eax + 0x38], esi
mov ecx, dword [eax + 0x30]
lea eax, [ecx + ecx*2]
mov edx, dword [esp + 0x10]
mov dword [ebx + eax*4], edx
mov dword [ebx + eax*4 + 4], ebp
mov edx, dword [esp + 0xc]
mov dword [ebx + eax*4 + 8], edx
inc ecx
mov eax, dword [esp + 0x190]
mov dword [eax + 0x30], ecx
add dword [esp + 4], 2
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x190]
jmp 0x52c3f0
mov dl, 1
xor ecx, ecx
mov dword [esp + 0x30], 2
mov dword [esp + 0xc], 0xffffffff
mov esi, ebx
mov ebx, 0
mov dword [esp + 0x10], 0
jmp 0x52f094
add ecx, 8
mov dword [esp + 4], ecx
mov dword [esp + 0x10], 0x27
jmp 0x52efdd
lea ecx, [eax - 0x30]
movzx ecx, cx
mov dword [esp + 0x58], 0
cmp ecx, 9
mov dword [esp + 0x10], 0
jbe 0x52ea2c
jmp 0x52efe2
add ecx, 8
mov dword [esp + 4], ecx
mov dword [esp + 0x10], 0x3e
jmp 0x52efdd
movzx eax, word [ecx + 8]
cmp eax, 0x26
jne 0x52f184
add ecx, 0xa
mov dword [esp + 4], ecx
mov eax, dword [esp + 8]
mov word [eax + 4], 0x8f
mov dword [esp + 0x10], 0xffffffff
mov ebx, ecx
mov ax, word [ebx]
lea ecx, [eax - 0x30]
movzx ecx, cx
cmp ecx, 9
jbe 0x52f592
movzx ecx, ax
cmp ecx, 0xff
ja 0x52f732
movzx eax, ax
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0xc]
test byte [ecx + eax], 0x10
je 0x52f732
lea esi, [ebx + 2]
mov dword [esp + 4], esi
movzx eax, word [ebx + 2]
cmp eax, 0xff
ja 0x52f049
lea esi, [ebx + 4]
movzx edx, ax
test byte [ecx + edx], 0x10
je 0x52f046
mov dword [esp + 4], esi
movzx eax, word [esi]
add esi, 2
cmp eax, 0xff
jbe 0x52f02c
add esi, 0xfffffffe
mov ecx, esi
sub ecx, ebx
sar ecx, 1
mov dword [esp + 0xc], ecx
cmp dword [esp + 0x10], 0
jle 0x52f07d
lea edx, [esi + 2]
mov dword [esp + 4], edx
cmp ax, word [esp + 0x10]
jne 0x52f744
mov ax, word [edx]
mov dword [esp + 0x58], 0xffffffff
xor ecx, ecx
mov esi, edx
jmp 0x52f087
mov dword [esp + 0x58], 0xffffffff
xor ecx, ecx
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x30], edx
xor edx, edx
lea edi, [esi + 2]
mov dword [esp + 4], edi
movzx eax, ax
cmp eax, 0x29
jne 0x52f744
cmp dword [esp + 0x194], 0
je 0x52f0d2
mov edi, 0x87
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x190]
mov esi, dword [esp + 0x30]
jmp 0x52c426
test dl, dl
je 0x52f114
test ecx, ecx
jle 0x52f785
cmp dword [esp + 0x58], 0
je 0x52f1be
cmp dword [esp + 0x58], 0x2d
jne 0x52f1ac
mov eax, 1
sub eax, ecx
mov ecx, dword [esp + 0x190]
add eax, dword [ecx + 0x40]
mov ecx, eax
test ecx, ecx
jg 0x52f1be
jmp 0x52f5c4
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x2c]
mov dword [esp + 0x94], ecx
mov eax, dword [eax + 0x30]
xor esi, esi
test eax, eax
jle 0x52f214
mov edi, dword [esp + 0x94]
lea eax, [edi + 2]
sub esp, 4
push dword [esp + 0x10]
push eax
push ebx
call fcn.00541300
add esp, 0x10
test eax, eax
jne 0x52f161
mov eax, dword [esp + 0xc]
cmp word [edi + eax*2 + 2], 0
je 0x52f20a
mov eax, dword [esp + 0x190]
mov ecx, eax
mov eax, dword [ecx + 0x30]
mov ecx, dword [ecx + 0x34]
lea edi, [edi + ecx*2]
mov dword [esp + 0x94], edi
inc esi
cmp esi, eax
jl 0x52f132
jmp 0x52f214
mov dword [esp + 0x10], 0
mov ax, 0x52
jmp 0x52f000
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x30]
cmp ebx, ecx
jge 0x52ed94
jmp 0x52ef37
mov eax, dword [esp + 0x190]
add ecx, dword [eax + 0x40]
test ecx, ecx
jle 0x52f5c4
mov eax, dword [esp + 0x190]
cmp ecx, dword [eax + 0x44]
jg 0x52f5c4
mov eax, dword [esp + 8]
mov word [eax + 6], cx
mov eax, dword [esp + 0x190]
cmp ecx, dword [eax + 0x4c]
jle 0x52f0b1
mov ebp, dword [esp + 0x190]
mov dword [ebp + 0x4c], ecx
mov edi, 0x87
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x30]
jmp 0x52c426
mov eax, dword [esp + 0x190]
mov eax, dword [eax + 0x30]
cmp esi, eax
jge 0x52f2d4
mov ecx, dword [esp + 0x94]
movzx ecx, word [ecx]
mov word [esp + 0x10], cx
movzx ecx, cx
mov edx, dword [esp + 0x190]
cmp dword [edx + 0x4c], ecx
jge 0x52f244
mov edx, dword [esp + 0x190]
mov dword [edx + 0x4c], ecx
lea ecx, [esi + 1]
cmp ecx, eax
jge 0x52f335
mov ebp, 1
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0x34]
lea edi, [eax + ecx*2 + 2]
lea eax, [eax + ecx*2]
mov dword [esp + 0x94], eax
sub esp, 4
push dword [esp + 0x10]
push edi
push ebx
call fcn.00541300
add esp, 0x10
test eax, eax
jne 0x52f2a4
mov eax, dword [esp + 0xc]
cmp word [edi + eax*2], 0
jne 0x52f2a4
lea eax, [esi + ebp + 1]
inc ebp
mov ecx, dword [esp + 0x190]
cmp eax, dword [ecx + 0x30]
jl 0x52f254
cmp ebp, 2
jl 0x52f335
mov eax, dword [esp + 8]
mov word [eax + 6], si
mov word [eax + 8], bp
mov esi, dword [esp + 0x30]
inc esi
inc word [eax + 4]
mov edi, 0x87
mov dword [esp + 0x10], 0
jmp 0x52f389
cmp dword [esp + 0x10], 0
jne 0x52f5c4
movzx eax, word [ebx]
cmp eax, 0x52
jne 0x52f347
cmp dword [esp + 0xc], 2
jl 0x52f399
xor eax, eax
mov ecx, 1
movzx edx, word [ebx + ecx*2]
lea esi, [edx - 0x30]
movzx esi, si
cmp esi, 0xa
jae 0x52f5c4
cmp eax, 0xccccccc
jge 0x52f522
lea eax, [eax + eax*4]
lea eax, [edx + eax*2 - 0x30]
inc ecx
cmp ecx, dword [esp + 0xc]
jl 0x52f2f9
test eax, eax
mov ecx, dword [esp + 8]
mov word [ecx + 4], 0x8f
jne 0x52f3a7
jmp 0x52f3a3
mov eax, dword [esp + 8]
movzx ecx, word [esp + 0x10]
mov word [eax + 6], cx
jmp 0x52f0b1
cmp dword [esp + 0xc], 6
jne 0x52f5c4
sub esp, 4
push 6
push str.DEFINE
push ebx
call fcn.00541350
add esp, 0x10
test eax, eax
jne 0x52f5c4
mov eax, dword [esp + 8]
mov word [eax + 4], 0x91
mov edi, 0x87
mov dword [esp + 0x10], 0
mov esi, 1
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x190]
jmp 0x52c426
mov eax, dword [esp + 8]
mov word [eax + 4], 0x8f
mov ax, 0xffff
mov ecx, dword [esp + 8]
mov word [ecx + 6], ax
jmp 0x52f0b1
lea eax, [ecx + edx*2]
cmp ebp, eax
mov eax, 0x57
mov ecx, 0x34
cmovb ecx, eax
mov eax, dword [esp + 0x174]
mov dword [eax], ecx
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x34
jmp 0x52f454
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x34]
mov dword [eax], ecx
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x14]
mov dword [eax], ecx
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0x20]
mov dword [eax], ecx
mov eax, dword [esp + 0x184]
mov ecx, dword [esp + 0x18]
mov dword [eax], ecx
mov eax, dword [esp + 0x13c]
mov dword [eax], ebp
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x170]
mov dword [ecx], eax
test ebx, ebx
je 0x52f48a
mov eax, dword [ebx]
mov ecx, 0x7fffffeb
sub ecx, eax
sub ebp, dword [esp + 0xc4]
sar ebp, 1
cmp ecx, ebp
jge 0x52f486
mov eax, dword [esp + 0x174]
mov dword [eax], 0x14
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x170]
mov dword [ecx], eax
xor eax, eax
add esp, 0x15c
pop esi
pop edi
pop ebx
pop ebp
ret
movzx eax, ax
cmp eax, 0x3a
mov eax, 0xd
mov ecx, 0x1f
cmove ecx, eax
jmp 0x52f3c6
add eax, ebp
mov dword [ebx], eax
mov eax, 1
jmp 0x52f463
mov eax, dword [esp + 0x174]
mov dword [eax], 0x47
jmp 0x52f454
mov eax, 0x15
mov ecx, dword [esp + 0x174]
mov dword [ecx], eax
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3c
jmp 0x52f454
mov ecx, 5
mov edx, dword [esp + 0x174]
mov dword [edx], ecx
mov dword [esp + 4], eax
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 9
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 6
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x12
jmp 0x52f454
add eax, 0xfffffffe
movzx ecx, word [eax + 2]
add eax, 2
add ecx, 0xffffffd0
movzx ecx, cx
cmp ecx, 0xa
jb 0x52f50c
mov dword [esp + 4], eax
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3d
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x40
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x28
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x52
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0xe
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0xc
mov dword [esp + 4], edx
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x54
jmp 0x52f454
cmp ecx, 6
je 0x52f454
jmp 0x52f463
mov eax, dword [esp + 0x174]
mov dword [eax], 0x45
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0xf
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x2a
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3e
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x30
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1d
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x36
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1b
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0xb
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3f
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3b
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3a
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 7
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x4b
jmp 0x52f454
mov ecx, 4
mov eax, edx
jmp 0x52f4c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x41
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x42
jmp 0x52f454
add ebx, 0xfffffffe
movzx eax, word [ebx + 2]
add ebx, 2
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 0xa
jb 0x52f6e1
mov dword [esp + 4], ebx
jmp 0x52f522
mov eax, dword [esp + 0x174]
mov dword [eax], 0x2b
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x29
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x31
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1c
jmp 0x52f454
mov dword [esp + 4], esi
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1a
jmp 0x52f454
add ecx, 6
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x174]
mov dword [eax], 0x18
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x15
jmp 0x52f454
mov eax, dword [esp + 0x174]
mov dword [eax], 0x23
jmp 0x52f454