Function at 0x5254d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x8c8600]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x7c]
cmp eax, dword [ecx + 8]
jbe 0x526920
sub esp, 0xfc
mov dword [esp + 0x118], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
movzx eax, word [esp + 0x108]
test ax, 4
je 0x525557
mov dword [esp + 0x6c], 0xfffffffd
lea ecx, [esp + 0x6c]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x64], 1
jmp 0x525575
test ax, 8
je 0x525575
mov dword [esp + 0x68], 0xfffffffd
lea ecx, [esp + 0x68]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x64], 1
mov ecx, dword [esp + 0x110]
test ecx, ecx
jne 0x525589
xor edx, edx
xor ebx, ebx
jmp 0x5265f1
lea eax, [0x6e5400]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.004726e0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xe4], eax
xor ecx, ecx
jmp 0x5255bc
mov edx, dword [esp + 0x50]
lea ecx, [edx + 1]
mov eax, dword [esp + 0xe4]
mov edx, dword [esp + 0x110]
cmp edx, ecx
jle 0x5265e5
mov dword [esp + 0x50], ecx
mov ebx, dword [esp + 0x10c]
lea ebp, [ebx + ecx*8]
mov esi, dword [ebp]
mov dword [esp + 0x48], esi
sub edx, ecx
dec edx
shl edx, 4
add edx, eax
mov dword [esp + 0xe0], edx
mov ebp, dword [ebp + 4]
mov dword [esp + 0x7c], ebp
mov dword [esp], edx
call fcn.00524230
mov eax, dword [esp + 0x48]
test eax, eax
je 0x52658a
mov ecx, dword [eax + 8]
cmp ecx, 0x8cac3de9
ja 0x525d9f
cmp ecx, 0x49163278
ja 0x525993
cmp ecx, 0x3e2307d4
ja 0x5257c0
cmp ecx, 0x2e74d42b
ja 0x525708
cmp ecx, 0x778cdb8
jne 0x5256ab
lea ecx, [0x6c0080]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00524350
mov eax, dword [esp + 8]
mov word [esp], 8
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x2e74d42b
jne 0x526907
lea ecx, [0x6b0be0]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4014
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x338a7ec0
jne 0x525761
lea ecx, [0x6b0ba0]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4013
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x3e2307d4
jne 0x526907
lea ecx, [0x6c0140]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
movsx eax, word [eax]
mov word [esp], 2
mov dword [esp + 4], eax
sar eax, 0x1f
mov dword [esp + 8], eax
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x3fd4d6d6
ja 0x525882
cmp ecx, 0x3f51d632
jne 0x525825
lea ecx, [0x6ea740]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x400c
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x3fd4d6d6
jne 0x526907
lea ecx, [0x6f6420]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 9
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x4072c7d5
jne 0x5258db
lea ecx, [0x6b0da0]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4004
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x43daea34
jne 0x525936
lea ecx, [0x6c00c0]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
movsx eax, byte [eax]
mov word [esp], 0x10
mov dword [esp + 4], eax
sar eax, 0x1f
mov dword [esp + 8], eax
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x49163278
jne 0x526907
lea ecx, [0x6b0c20]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4015
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x6bed3cfa
ja 0x525b16
cmp ecx, 0x62de383d
ja 0x525a5d
cmp ecx, 0x5051f1be
jne 0x525a00
lea ecx, [0x7010c0]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.004d9d20
mov word [esp], 0xe
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x62de383d
jne 0x526907
lea ecx, [0x6b0b60]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4003
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x64fd0d3c
jne 0x525ab8
lea ecx, [0x6c0300]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
mov word [esp], 0x13
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x6bed3cfa
jne 0x526907
lea ecx, [0x6c01c0]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
mov word [esp], 3
mov dword [esp + 4], eax
sar eax, 0x1f
mov dword [esp + 8], eax
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x6e78e923
ja 0x525bd8
cmp ecx, 0x6d448d5d
jne 0x525b7b
lea ecx, [0x6b0de0]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4005
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x6e78e923
jne 0x526907
lea ecx, [0x6b0ca0]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4013
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x81044065
jne 0x525c9f
lea ecx, [0x6b61a0]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.005282e0
mov eax, dword [esp + 0xc]
mov word [esp], 0x2011
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
lea eax, [0x6ca6a0]
mov dword [esp], eax
call fcn.0040dea0
mov eax, dword [esp + 4]
lea ecx, [0x526970]
mov dword [eax], ecx
mov edx, dword [0x8c88d8]
test edx, edx
jne 0x525c79
mov edx, dword [esp + 0xe0]
jmp 0x525c87
call fcn.004772e0
mov edx, dword [esp + 0xe0]
mov dword [edi], edx
mov dword [eax + 4], edx
mov dword [esp], eax
call fcn.0043a900
test eax, eax
jne 0x5265cd
jmp 0x5255ae
cmp ecx, 0x889ce7f8
jne 0x525cf8
lea ecx, [0x6b0b20]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4012
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x8cac3de9
jne 0x526907
lea ecx, [0x6ff700]
cmp eax, ecx
jne 0x526907
lea edi, [esp + 0xe8]
mov esi, dword [esp + 0x7c]
call fcn.004778be
lea edi, [esp]
lea esi, [esp + 0xe8]
call fcn.004778be
lea eax, [0x707d7d]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0x13
call fcn.004b0870
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00524350
mov eax, dword [esp + 8]
mov word [esp], 8
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0xc3230e0b
ja 0x5261c5
cmp ecx, 0x93592d94
ja 0x525f9e
cmp ecx, 0x8ed6f7a2
ja 0x525ed8
cmp ecx, 0x8d826c95
jne 0x525e2a
lea ecx, [0x6c0400]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
movss xmm0, dword [eax]
movss dword [esp + 0x40], xmm0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov word [esp], 4
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x8ed6f7a2
jne 0x526907
lea ecx, [0x7008a0]
cmp eax, ecx
jne 0x526907
mov esi, dword [esp + 0x7c]
test byte [esi], al
lea edi, [esp + 0xe8]
call fcn.004778be
lea edi, [esp]
lea esi, [esp + 0xe8]
call fcn.004778be
lea eax, [0x707d7d]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0x13
call fcn.004b0870
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ecx
lea eax, [esp + 0x80]
mov word [esp], 0x4008
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x8fc52ddb
jne 0x525f33
lea ecx, [0x6c0280]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
mov word [esp], 0x15
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x93592d94
jne 0x526907
lea ecx, [0x6c0440]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
movsd xmm0, qword [eax]
movsd qword [esp + 0x38], xmm0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov word [esp], 5
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x99d6dd43
ja 0x526064
cmp ecx, 0x95738979
jne 0x526006
lea ecx, [0x6c0100]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
movzx eax, byte [eax]
mov word [esp], 0x10
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0x99d6dd43
jne 0x526907
lea ecx, [0x6c0240]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov word [esp], 0x14
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0xb00b9f48
jne 0x52610f
lea ecx, [0x6c0480]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
movzx eax, byte [eax]
test al, al
je 0x5260cc
mov word [esp], 0xb
mov dword [esp + 4], 0xffff
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
mov word [esp], 0xb
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0xba585d67
jne 0x526168
lea ecx, [0x6b0c60]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4003
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0xc3230e0b
jne 0x526907
lea ecx, [0x6b0ae0]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4002
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0xd9632893
ja 0x52634d
cmp ecx, 0xd1d67d89
ja 0x526294
cmp ecx, 0xcb735792
jne 0x526237
lea ecx, [0x6c02c0]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
mov word [esp], 3
mov dword [esp + 4], eax
sar eax, 0x1f
mov dword [esp + 8], eax
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0xd1d67d89
jne 0x526907
lea ecx, [0x6b4f80]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4009
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0xd6631a7c
jne 0x5262ed
lea ecx, [0x6b0a60]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4010
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0xd9632893
jne 0x526907
lea ecx, [0x6c0180]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
movzx eax, word [eax]
mov word [esp], 0x12
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0xe8fe0eb5
ja 0x526479
cmp ecx, 0xe47f76c1
jne 0x5263b2
lea ecx, [0x6b0a20]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4008
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0xe8fe0eb5
jne 0x526907
lea ecx, [0x6b6460]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00528390
mov eax, dword [esp + 0xc]
mov word [esp], 0x2008
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
lea eax, [0x6ca6a0]
mov dword [esp], eax
call fcn.0040dea0
mov eax, dword [esp + 4]
lea ecx, [0x526930]
mov dword [eax], ecx
mov edx, dword [0x8c88d8]
test edx, edx
jne 0x526453
mov edx, dword [esp + 0xe0]
jmp 0x526461
call fcn.004772e0
mov edx, dword [esp + 0xe0]
mov dword [edi], edx
mov dword [eax + 4], edx
mov dword [esp], eax
call fcn.0043a900
test eax, eax
jne 0x5265d9
jmp 0x5255ae
cmp ecx, 0xe927f9e3
jne 0x5264d4
lea ecx, [0x6c0200]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
mov word [esp], 0x13
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0xf3b50de0
jne 0x52652d
lea ecx, [0x6b0aa0]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x4010
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
cmp ecx, 0xfcd60fce
jne 0x526907
lea ecx, [0x6b0e20]
cmp eax, ecx
jne 0x526907
mov eax, dword [esp + 0x7c]
mov word [esp], 0x400b
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
mov word [esp], 1
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00528730
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc]
call fcn.004778c8
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe8]
call fcn.004778c8
jmp 0x5255ae
call fcn.0043af70
add esp, 0xfc
ret
call fcn.0043af70
add esp, 0xfc
ret
mov ecx, eax
mov dword [esp + 0x58], ecx
mov dword [esp + 0x60], edx
mov ebx, eax
mov dword [esp + 0x44], edx
mov dword [esp + 0x78], ebx
lea eax, [0x6e5400]
mov dword [esp], eax
call fcn.0040dea0
mov eax, dword [esp + 4]
mov dword [esp + 0x118], eax
lea edi, [esp + 0x88]
xor eax, eax
call fcn.004773d1
mov eax, dword [esp + 0x118]
mov dword [esp], eax
call fcn.00524230
mov eax, dword [esp + 0x100]
mov dword [esp + 0xd4], eax
mov ecx, dword [0x8a6394]
mov dword [esp + 0xd0], ecx
movzx ecx, word [esp + 0x108]
movsx ecx, cx
mov dword [esp + 0x74], ecx
lea edx, [esp + 0x58]
mov dword [esp + 0xcc], edx
mov edx, dword [esp + 0x118]
mov dword [esp + 0xc8], edx
lea edx, [esp + 0x88]
mov dword [esp + 0xc4], edx
mov dword [esp], eax
call fcn.00525030
mov eax, dword [esp + 4]
mov dword [esp + 0xdc], eax
call fcn.00524550
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0x18]
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp]
mov ebp, dword [esp + 0xcc]
mov esi, dword [esp + 0xc8]
mov edi, dword [esp + 0xc4]
mov dword [esp], eax
mov dword [esp + 4], 9
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x104]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x74]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], 0
call fcn.00474360
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x52679e
mov dword [esp + 0x54], eax
lea eax, [esp + 0x88]
mov dword [esp], eax
call fcn.00526f00
lea eax, [esp + 0x88]
mov dword [esp], eax
call fcn.00527050
lea eax, [0x6f49e0]
mov dword [esp], eax
lea eax, [esp + 0x88]
mov dword [esp + 4], eax
call fcn.0040b2d0
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0x54]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
lea eax, [0x7347a0]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
call fcn.005245e0
mov eax, dword [esp + 0x14]
lea ecx, [0x734360]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x110]
xor ebx, ebx
jmp 0x5267c2
add eax, 0x10
inc ebx
mov ebp, dword [esp + 0x44]
mov ecx, ebp
mov edx, dword [esp + 0x110]
cmp ebx, ecx
jge 0x5268e5
mov dword [esp + 0x4c], ebx
mov dword [esp + 0xe4], eax
lea edi, [esp + 0xe8]
mov esi, eax
call fcn.004778c8
mov ecx, edx
sub edx, ebx
cmp word [esp + 0xe8], 8
jne 0x52683c
mov ebp, dword [esp + 0xf0]
mov esi, dword [esp + 0xf4]
test ebp, ebp
xchg edi, ebx
setne bl
xchg edi, ebx
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
je 0x52683c
mov dword [esp + 0x70], edx
mov dword [esp], ebp
call fcn.00524450
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0x4c]
cmp word [esp + 0xe8], 0x4008
jne 0x5267b1
mov ebp, dword [esp + 0xf0]
mov esi, dword [esp + 0xf4]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
test ebp, ebp
xchg edi, ebx
setne bl
xchg edi, ebx
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
je 0x5267b1
mov eax, dword [esp + 0x10c]
lea ecx, [eax + edx*8 - 8]
mov dword [esp + 0xd8], ecx
mov edx, dword [ebp]
mov dword [esp], edx
call fcn.005284f0
mov eax, dword [esp + 0xd8]
mov ecx, dword [eax]
lea edx, [0x6b0a20]
cmp ecx, edx
jne 0x5268f1
mov eax, dword [eax + 4]
mov ecx, dword [esp + 8]
mov ebx, dword [esp + 4]
mov dword [eax + 4], ecx
mov ecx, dword [0x8c88d8]
test ecx, ecx
je 0x5268cc
call fcn.004772f0
mov dword [edi], ebx
mov ecx, dword [eax]
mov dword [edi + 4], ecx
mov dword [eax], ebx
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x110]
mov ebx, dword [esp + 0x4c]
jmp 0x5267b1
call fcn.0043af70
add esp, 0xfc
ret
mov dword [esp], ecx
mov dword [esp + 4], edx
lea eax, [0x6c1300]
mov dword [esp + 8], eax
call fcn.0040b180
lea eax, [0x6c0080]
mov dword [esp], eax
lea eax, [0x733cc8]
mov dword [esp + 4], eax
call fcn.00470a40
nop
call fcn.00475ee0
jmp fcn.005254d0