Function at 0x525497
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x62967e
mov eax, dword fs:[0]
push eax
sub esp, 0x2b0
mov eax, dword [0x67e034]
xor eax, esp
mov dword [esp + 0x2a8], eax
push ebx
push esi
push edi
mov eax, dword [0x67e034]
xor eax, esp
push eax
lea eax, [esp + 0x2c0]
mov dword fs:[0], eax
mov dword [esp + 0x44], ecx
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov dword [esp + 0x48], esi
mov dword [esp + 0x40], edi
mov dword [esp + 0x38], ebx
test esi, esi
je 0x52561f
test edi, edi
je 0x52561f
test ebx, ebx
je 0x52561f
cmp dword [ebp + 0x14], 0
jg 0x525527
mov eax, dword [edi]
push 0xffffffffffffffff
push ecx
push ecx
mov ecx, edi
fldz
fst dword [esp + 4]
fstp dword [esp]
call dword [eax + 0x74]
jmp 0x525621
cmp dword [ebp + 0x14], 0x3ff
jl 0x52553a
mov eax, dword [ebx]
push 0xffffffffffffffff
push ecx
push ecx
mov ecx, ebx
jmp 0x525516
mov ecx, esi
call fcn.00460e55
mov eax, dword [eax + 0xa4]
cmp eax, 2
jb 0x525fb3
push 4
push ecx
mov ecx, esi
call fcn.00460e55
add esp, 4
call fcn.004d0180
test al, al
je 0x525fb3
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
call dword [eax + 0x14]
cmp dword [eax], 1
jne 0x525fb3
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
call dword [eax + 0x14]
cmp dword [eax + 4], 1
jne 0x525fb3
test byte [0xfd1448], 1
jne 0x5255ba
or dword [0xfd1448], 1
mov esi, 0xfd0a80
call fcn.004c5c33
push 0x62a794
call fcn.005a7da6
pop ecx
lea ecx, [esp + 0x1d4]
call fcn.00492b8b
cmp dword [ebp + 0x14], 0x200
jge 0x525ac8
and dword [esp + 0x2c8], 0
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
mov eax, dword [eax + 4]
push 0
push 1
push 0x15
mov esi, 0x100
push esi
push eax
lea ecx, [esp + 0x1e8]
mov dword [esp + 0x4c], eax
call fcn.00492d02
test al, al
jne 0x525647
or dword [esp + 0x2c8], 0xffffffff
lea ecx, [esp + 0x1d4]
call fcn.00492c86
xor al, al
mov ecx, dword [esp + 0x2c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2a8]
xor ecx, esp
call fcn.005a7b0e
mov esp, ebp
pop ebp
ret 0x10
lea ecx, [esp + 0x1dc]
call fcn.004937d2
test al, al
je 0x52560b
lea ecx, [esp + 0x1dc]
call fcn.00493913
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x14]
imul eax, eax, 0x64
cdq
and edx, 0x1ff
add eax, edx
mov ebx, eax
sar ebx, 9
mov dword [esp + 0x30], esi
push ebx
mov edx, 0xfd0a80
call fcn.004c5d71
xor esi, esi
cmp dword [esp + 0x38], esi
mov dword [esp + 0x28], eax
jle 0x525709
mov eax, ebx
cdq
sub eax, edx
mov dword [esp + 0x24], eax
sar dword [esp + 0x24], 1
push dword [esp + 0x24]
mov edx, 0xfd0a80
call fcn.004c5d71
add eax, dword [esp + 0x24]
jne 0x5256c5
mov eax, dword [esp + 0x18]
mov dword [eax + esi*4], 0x80808080
inc esi
jmp 0x525703
mov dword [esp + 0x14], eax
neg dword [esp + 0x14]
jmp 0x5256fd
cmp esi, dword [esp + 0x38]
jge 0x525709
cmp dword [esp + 0x28], 0
jle 0x5256e2
dec dword [esp + 0x28]
jmp 0x5256fc
mov edx, dword [esp + 0x18]
lea ecx, [eax - 0x80]
and ecx, 0xff
shl ecx, 8
or ecx, 0x80800080
mov dword [edx + esi*4], ecx
inc esi
dec eax
cmp eax, dword [esp + 0x14]
jge 0x5256cf
cmp esi, dword [esp + 0x38]
jl 0x5256a3
lea ecx, [esp + 0x1dc]
call fcn.0049395d
add dword [esp + 0x18], eax
dec dword [esp + 0x30]
jne 0x52567f
lea ecx, [esp + 0x1dc]
call fcn.00493864
mov eax, dword [edi]
lea ecx, [esp + 0x38]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
fild dword [eax]
mov eax, dword [edi]
lea ecx, [esp + 0x30]
push ecx
fstp qword [esp + 0x20]
mov ecx, edi
call dword [eax + 0x24]
fild dword [eax]
mov eax, dword [edi]
lea ecx, [esp + 0x38]
fdivr qword [esp + 0x1c]
push ecx
mov ecx, edi
fstp dword [esp + 0x1c]
call dword [eax + 0x1c]
fild dword [eax + 4]
mov eax, dword [edi]
lea ecx, [esp + 0x30]
push ecx
mov ecx, edi
fstp qword [esp + 0x20]
call dword [eax + 0x24]
fild dword [eax + 4]
lea eax, [esp + 0x38]
push eax
fdivr qword [esp + 0x20]
lea ecx, [esp + 0x1e0]
fstp dword [esp + 0x18]
call fcn.004936c2
fild dword [eax]
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x1e0]
fstp qword [esp + 0x20]
call fcn.004936f9
fild dword [eax]
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
fdivr qword [esp + 0x20]
mov ecx, edi
fstp dword [esp + 0x34]
call dword [eax + 0x1c]
fild dword [eax]
fmul qword [0x658148]
fstp dword [esp + 0x24]
fldz
fld st(0)
fld1
fsub st(1), st(0)
fxch st(1)
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fst dword [esp + 0xf4]
fst dword [esp + 0xf8]
fldz
fst dword [esp + 0xfc]
fst dword [esp + 0x100]
fld dword [esp + 0x14]
fstp dword [esp + 0x104]
fld dword [esp + 0x30]
fstp dword [esp + 0x108]
fst dword [esp + 0x10c]
fxch st(1)
fst dword [esp + 0x110]
fxch st(3)
faddp st(2)
fxch st(1)
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fst dword [esp + 0x114]
fst dword [esp + 0x12c]
fxch st(1)
fst dword [esp + 0x118]
fst dword [esp + 0x11c]
lea eax, [esp + 0xac]
fst dword [esp + 0x120]
fst dword [esp + 0x124]
fst dword [esp + 0x128]
fst dword [esp + 0x134]
fxch st(2)
fstp dword [esp + 0x130]
fld dword [esp + 0x18]
fstp dword [esp + 0x138]
fld dword [esp + 0x14]
fstp dword [esp + 0x13c]
fld dword [esp + 0x30]
fstp dword [esp + 0x140]
fld dword [esp + 0x24]
fstp dword [esp + 0x144]
fst dword [esp + 0x148]
fstp dword [esp + 0x14c]
fst dword [esp + 0x150]
fld dword [esp + 0x18]
fstp dword [esp + 0x154]
fst dword [esp + 0x158]
fstp dword [esp + 0x15c]
fld dword [esp + 0x24]
fstp dword [esp + 0x160]
call fcn.004d374c
push 0
push 1
push 4
push 0x202
push 0x1c
xor ebx, ebx
mov byte [esp + 0x2dc], 1
call fcn.004d3803
lea ecx, [esp + 0xac]
test al, al
jne 0x52591b
mov byte [esp + 0x2c8], bl
call fcn.004d37b8
jmp 0x52560b
call fcn.004d38eb
test al, al
jne 0x525934
mov byte [esp + 0x2c8], bl
lea ecx, [esp + 0xac]
jmp 0x525911
mov edi, dword [esp + 0xd4]
push 0x1c
pop ecx
lea esi, [esp + 0xf4]
rep movsd dword es:[edi], dword [esi]
lea esi, [esp + 0xac]
call fcn.004d392c
mov ebx, dword [esp + 0x48]
push 1
push 1
xor edi, edi
mov ecx, ebx
call fcn.0045f12f
inc edi
push edi
push edi
mov ecx, ebx
call fcn.0045f12f
mov esi, dword [esp + 0x40]
mov eax, dword [esi]
push 0
push 0
mov ecx, esi
call dword [eax + 0x28]
test eax, eax
je 0x525986
lea ecx, [eax + 8]
jmp 0x525988
xor ecx, ecx
push 0
mov edi, ebx
call fcn.0045f053
push 1
lea ecx, [esp + 0x1e0]
call fcn.0045f053
mov eax, dword [esp + 0x44]
mov edi, dword [eax + 0x10]
mov ecx, ebx
call fcn.0045df70
mov eax, dword [esp + 0x44]
mov edi, dword [eax + 0x40]
mov ecx, ebx
call fcn.0045f923
lea edi, [esp + 0xac]
mov ecx, ebx
call fcn.0045e0b1
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call dword [eax + 0x1c]
fild dword [eax + 4]
fld1
mov eax, dword [esi]
fdivrp st(1)
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
fmul qword [0x657618]
fstp dword [esp + 0x44]
fld dword [esp + 0x44]
fst dword [esp + 0x50]
fst dword [esp + 0x54]
fst dword [esp + 0x58]
fstp dword [esp + 0x5c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x60]
fld dword [esp + 0x18]
fstp dword [esp + 0x64]
fldz
fst dword [esp + 0x68]
fst dword [esp + 0x6c]
fst dword [esp + 0x70]
fst dword [esp + 0x74]
fst dword [esp + 0x78]
fstp dword [esp + 0x7c]
call dword [eax + 0x1c]
fld dword [esp + 0x18]
fidiv dword [eax]
lea ecx, [esp + 0x38]
mov eax, dword [esi]
push ecx
mov ecx, esi
fstp dword [esp + 0x80]
fld dword [esp + 0x18]
fstp qword [esp + 0x20]
call dword [eax + 0x1c]
fild dword [eax + 4]
push 4
lea eax, [esp + 0x50]
push eax
fdivr qword [esp + 0x24]
mov ecx, ebx
fstp dword [esp + 0x88]
fldz
fst dword [esp + 0x8c]
fstp dword [esp + 0x90]
call fcn.0045f9c2
push 6
pop ecx
push 5
pop edi
mov edx, ebx
call fcn.0045ea82
mov ecx, ebx
call fcn.0045fda4
xor edi, edi
mov ecx, ebx
call fcn.0045df70
mov ecx, ebx
call fcn.0045f923
mov ecx, ebx
call fcn.0045e0b1
push edi
xor ecx, ecx
mov edi, ebx
call fcn.0045f053
push 1
xor ecx, ecx
call fcn.0045f053
mov byte [esp + 0x2c8], 0
jmp 0x525f8c
lea ecx, [esp + 0x1c]
mov dword [esp + 0x2c8], 2
mov eax, dword [ebx]
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
mov eax, dword [eax + 4]
push 0
push 1
push 0x15
mov esi, 0x100
push esi
push eax
lea ecx, [esp + 0x1e8]
mov dword [esp + 0x30], eax
call fcn.00492d02
test al, al
je 0x52560b
lea ecx, [esp + 0x1dc]
call fcn.004937d2
test al, al
je 0x52560b
lea ecx, [esp + 0x1dc]
call fcn.00493913
mov dword [esp + 0x24], eax
mov eax, 0x200
sub eax, dword [ebp + 0x14]
mov dword [esp + 0x30], esi
imul eax, eax, 0x64
cdq
and edx, 0x1ff
add eax, edx
mov edi, eax
sar edi, 9
add edi, 0x64
push edi
mov edx, 0xfd0a80
call fcn.004c5d71
xor esi, esi
cmp dword [esp + 0x1c], esi
mov dword [esp + 0x28], eax
jle 0x525bd5
mov eax, edi
cdq
sub eax, edx
mov dword [esp + 0x18], eax
sar dword [esp + 0x18], 1
push dword [esp + 0x18]
mov edx, 0xfd0a80
call fcn.004c5d71
add eax, dword [esp + 0x18]
jne 0x525b91
mov eax, dword [esp + 0x24]
mov dword [eax + esi*4], 0x80808080
inc esi
jmp 0x525bcf
mov dword [esp + 0x14], eax
neg dword [esp + 0x14]
jmp 0x525bc9
cmp esi, dword [esp + 0x1c]
jge 0x525bd5
cmp dword [esp + 0x28], 0
jle 0x525bae
dec dword [esp + 0x28]
jmp 0x525bc8
mov edx, dword [esp + 0x24]
lea ecx, [eax - 0x80]
and ecx, 0xff
shl ecx, 8
or ecx, 0x80800080
mov dword [edx + esi*4], ecx
inc esi
dec eax
cmp eax, dword [esp + 0x14]
jge 0x525b9b
cmp esi, dword [esp + 0x1c]
jl 0x525b6f
lea ecx, [esp + 0x1dc]
call fcn.0049395d
add dword [esp + 0x24], eax
dec dword [esp + 0x30]
jne 0x525b4b
lea ecx, [esp + 0x1dc]
call fcn.00493864
mov eax, dword [ebx]
lea ecx, [esp + 0x30]
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
fild dword [eax]
mov eax, dword [ebx]
lea ecx, [esp + 0x28]
push ecx
fstp qword [esp + 0x20]
mov ecx, ebx
call dword [eax + 0x24]
fild dword [eax]
mov eax, dword [ebx]
lea ecx, [esp + 0x30]
fdivr qword [esp + 0x1c]
push ecx
mov ecx, ebx
fstp dword [esp + 0x1c]
call dword [eax + 0x1c]
fild dword [eax + 4]
mov eax, dword [ebx]
lea ecx, [esp + 0x28]
push ecx
mov ecx, ebx
fstp qword [esp + 0x20]
call dword [eax + 0x24]
fild dword [eax + 4]
lea eax, [esp + 0x30]
push eax
fdivr qword [esp + 0x20]
lea ecx, [esp + 0x1e0]
fstp dword [esp + 0x18]
call fcn.004936c2
fild dword [eax]
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x1e0]
fstp qword [esp + 0x20]
call fcn.004936f9
fild dword [eax]
mov eax, dword [ebx]
lea ecx, [esp + 0x1c]
push ecx
fdivr qword [esp + 0x20]
mov ecx, ebx
fstp dword [esp + 0x34]
call dword [eax + 0x1c]
fild dword [eax]
fmul qword [0x658148]
fstp dword [esp + 0x24]
fldz
fld st(0)
fld1
fsub st(1), st(0)
fxch st(1)
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fst dword [esp + 0xf4]
fst dword [esp + 0xf8]
fldz
fst dword [esp + 0xfc]
fst dword [esp + 0x100]
fld dword [esp + 0x14]
fstp dword [esp + 0x104]
fld dword [esp + 0x30]
fstp dword [esp + 0x108]
fst dword [esp + 0x10c]
fxch st(1)
fst dword [esp + 0x110]
fxch st(3)
faddp st(2)
fxch st(1)
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fst dword [esp + 0x114]
fst dword [esp + 0x12c]
fxch st(1)
fst dword [esp + 0x118]
fst dword [esp + 0x11c]
lea eax, [esp + 0xac]
fst dword [esp + 0x120]
fst dword [esp + 0x124]
fst dword [esp + 0x128]
fst dword [esp + 0x134]
fxch st(2)
fstp dword [esp + 0x130]
fld dword [esp + 0x18]
fstp dword [esp + 0x138]
fld dword [esp + 0x14]
fstp dword [esp + 0x13c]
fld dword [esp + 0x30]
fstp dword [esp + 0x140]
fld dword [esp + 0x24]
fstp dword [esp + 0x144]
fst dword [esp + 0x148]
fstp dword [esp + 0x14c]
fst dword [esp + 0x150]
fld dword [esp + 0x18]
fstp dword [esp + 0x154]
fst dword [esp + 0x158]
fstp dword [esp + 0x15c]
fld dword [esp + 0x24]
fstp dword [esp + 0x160]
call fcn.004d374c
push 0
push 1
push 4
push 0x202
push 0x1c
xor ebx, ebx
mov byte [esp + 0x2dc], 3
call fcn.004d3803
lea ecx, [esp + 0xac]
test al, al
jne 0x525de3
mov byte [esp + 0x2c8], 2
jmp 0x525911
call fcn.004d38eb
test al, al
jne 0x525df9
mov byte [esp + 0x2c8], 2
jmp 0x52592b
mov edi, dword [esp + 0xd4]
push 0x1c
pop ecx
lea esi, [esp + 0xf4]
rep movsd dword es:[edi], dword [esi]
lea esi, [esp + 0xac]
call fcn.004d392c
mov esi, dword [esp + 0x48]
xor ebx, ebx
inc ebx
push ebx
push ebx
xor edi, edi
mov ecx, esi
call fcn.0045f12f
push ebx
push ebx
mov edi, ebx
mov ecx, esi
call fcn.0045f12f
mov ebx, dword [esp + 0x38]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
call dword [eax + 0x28]
test eax, eax
je 0x525e4d
lea ecx, [eax + 8]
jmp 0x525e4f
xor ecx, ecx
push 0
mov edi, esi
call fcn.0045f053
push 1
lea ecx, [esp + 0x1e0]
call fcn.0045f053
mov eax, dword [esp + 0x44]
mov edi, dword [eax + 0x10]
mov ecx, esi
call fcn.0045df70
mov eax, dword [esp + 0x44]
mov edi, dword [eax + 0x40]
mov ecx, esi
call fcn.0045f923
lea edi, [esp + 0xac]
mov ecx, esi
call fcn.0045e0b1
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx]
lea edx, [esp + 0x1c]
push edx
call dword [eax + 0x1c]
fild dword [eax + 4]
fld1
mov eax, dword [ebx]
fdivrp st(1)
lea ecx, [esp + 0x1c]
push ecx
mov ecx, ebx
fmul qword [0x657618]
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fst dword [esp + 0x50]
fst dword [esp + 0x54]
fst dword [esp + 0x58]
fstp dword [esp + 0x5c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x60]
fld dword [esp + 0x18]
fstp dword [esp + 0x64]
fldz
fst dword [esp + 0x68]
fst dword [esp + 0x6c]
fst dword [esp + 0x70]
fst dword [esp + 0x74]
fst dword [esp + 0x78]
fstp dword [esp + 0x7c]
call dword [eax + 0x1c]
fld dword [esp + 0x18]
fidiv dword [eax]
lea ecx, [esp + 0x38]
mov eax, dword [ebx]
push ecx
mov ecx, ebx
fstp dword [esp + 0x80]
fld dword [esp + 0x18]
fstp qword [esp + 0x20]
call dword [eax + 0x1c]
fild dword [eax + 4]
push 4
lea eax, [esp + 0x50]
push eax
fdivr qword [esp + 0x24]
mov ecx, esi
fstp dword [esp + 0x88]
fldz
fst dword [esp + 0x8c]
fstp dword [esp + 0x90]
call fcn.0045f9c2
push 6
pop ecx
push 5
pop edi
mov edx, esi
call fcn.0045ea82
mov ecx, esi
call fcn.0045fda4
xor edi, edi
mov ecx, esi
call fcn.0045df70
mov ecx, esi
call fcn.0045f923
mov ecx, esi
call fcn.0045e0b1
push edi
xor ecx, ecx
mov edi, esi
call fcn.0045f053
push 1
xor ecx, ecx
call fcn.0045f053
mov byte [esp + 0x2c8], 2
lea ecx, [esp + 0xac]
call fcn.004d37b8
or dword [esp + 0x2c8], 0xffffffff
lea ecx, [esp + 0x1d4]
call fcn.00492c86
mov al, 1
jmp 0x525621
lea eax, [esp + 0x8c]
push eax
call fcn.0046bb85
lea ecx, [esp + 0xf4]
mov dword [esp + 0x2c8], 4
call fcn.00492b8b
cmp dword [ebp + 0x14], 0x200
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c8], 5
push ecx
jge 0x526116
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x1c]
push dword [eax + 4]
mov ecx, edi
push dword [eax]
mov eax, dword [edi]
call dword [eax + 0xc]
lea ecx, [esp + 0x94]
call fcn.0046bc23
test al, al
jne 0x526041
lea ecx, [esp + 0xf4]
mov byte [esp + 0x2c8], 4
call fcn.00492c86
or dword [esp + 0x2c8], 0xffffffff
lea ecx, [esp + 0x8c]
call fcn.0046bbe3
jmp 0x52561f
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
push 0
mov esi, eax
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax + 0xc]
push eax
push dword [esi + 4]
lea ecx, [esp + 0x104]
push dword [esi]
call fcn.00492d02
test al, al
je 0x526014
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
xor esi, esi
xor ebx, ebx
call dword [eax + 0x1c]
push dword [eax + 4]
push dword [eax]
xor eax, eax
push ebx
push esi
push eax
push eax
lea eax, [esp + 0xa8]
push eax
mov esi, edi
call fcn.004cfaf0
add esp, 0x1c
test al, al
je 0x526014
lea ecx, [esp + 0xfc]
call fcn.004983c0
test al, al
je 0x526014
xor eax, eax
xor edx, edx
push edx
lea edi, [esp + 0x3c]
stosb byte es:[edi], al
mov eax, dword [ebp + 0x14]
cdq
xor ecx, ecx
push ecx
sub eax, edx
sar eax, 1
mov ecx, 0x400
sub ecx, eax
push ecx
push dword [esp + 0x44]
lea eax, [esp + 0x10c]
push eax
lea eax, [esp + 0xa4]
call fcn.00526292
test al, al
je 0x526014
fldz
push 0xffffffffffffffff
push ecx
push ecx
fst dword [esp + 4]
lea ecx, [esp + 0x100]
fstp dword [esp]
call fcn.004943bd
mov bl, al
jmp 0x5261ff
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x1c]
push dword [eax + 4]
mov ecx, ebx
push dword [eax]
mov eax, dword [ebx]
call dword [eax + 0xc]
lea ecx, [esp + 0x94]
call fcn.0046bc23
test al, al
je 0x526014
mov eax, dword [ebx]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
push 0
mov esi, eax
mov eax, dword [ebx]
push 1
mov ecx, ebx
call dword [eax + 0xc]
push eax
push dword [esi + 4]
lea ecx, [esp + 0x104]
push dword [esi]
call fcn.00492d02
test al, al
je 0x526014
mov eax, dword [ebx]
lea ecx, [esp + 0x38]
push ecx
xor edi, edi
mov ecx, ebx
xor esi, esi
mov dword [esp + 0x24], edi
call dword [eax + 0x1c]
push dword [eax + 4]
push dword [eax]
xor eax, eax
push edi
push esi
push edi
push eax
lea eax, [esp + 0xa8]
push eax
mov esi, ebx
call fcn.004cfaf0
add esp, 0x1c
test al, al
je 0x526014
lea ecx, [esp + 0xfc]
call fcn.004983c0
test al, al
je 0x526014
xor eax, eax
lea edi, [esp + 0x38]
stosb byte es:[edi], al
mov eax, dword [ebp + 0x14]
add eax, 0xfffffe00
xor edx, edx
push edx
cdq
sub eax, edx
sar eax, 1
xor ecx, ecx
push ecx
add eax, 0x300
push eax
push dword [esp + 0x44]
lea eax, [esp + 0x10c]
push eax
lea eax, [esp + 0xa4]
call fcn.00526292
test al, al
jne 0x5260f6
xor bl, bl
lea ecx, [esp + 0xf4]
mov byte [esp + 0x2c8], 4
call fcn.00492c86
or dword [esp + 0x2c8], 0xffffffff
lea ecx, [esp + 0x8c]
call fcn.0046bbe3
mov al, bl
jmp 0x525621