Function at 0x520ad0
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb8
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
call fcn.00409cf8
xor eax, eax
push ebp
push 0x521a42
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 5], 0
imul eax, dword [ebp - 0x18], 0x25
mov dword [ebp - 0x10], eax
mov eax, dword [0x53493c]
add eax, 0xef
mov dword [0x5348f4], eax
mov eax, dword [0x534894]
mov dword [0x53490c], eax
imul eax, dword [0x5348cc], 0xba
mov dword [0x53496c], eax
xor eax, eax
push ebp
push 0x52197f
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 9
jge 0x520bdf
inc dword [ebp - 0x1c]
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x521a60
call fcn.0040ade8
cmp eax, 0xe1
jge 0x520b79
mov eax, dword [ebp - 0x14]
add eax, 4
mov dword [ebp - 0x48], eax
fild dword [ebp - 0x48]
call fcn.00407638
mov dword [ebp - 0x10], eax
jmp 0x520b86
mov eax, dword [0x5349b4]
add eax, 0x7e
mov dword [0x53490c], eax
mov eax, dword [0x5348e4]
mov dword [0x5349b4], eax
mov eax, dword [0x534a48]
mov dword [0x5349d0], eax
mov eax, dword [0x5349e0]
call fcn.004071f4
mov dword [0x5349e0], eax
mov eax, dword [0x5349d0]
cmp eax, dword [0x5349e0]
jge 0x520bc5
mov eax, dword [0x53492c]
sub eax, 0x11
mov dword [0x534864], eax
jmp 0x520bd5
fild dword [0x5348c4]
call fcn.00407638
mov dword [0x5348bc], eax
cmp dword [ebp - 0x1c], 9
jl 0x520b47
mov eax, dword [0x5349e0]
imul eax, dword [0x534964]
mov dword [0x534964], eax
mov eax, dword [0x53495c]
add eax, 4
mov dword [0x5349d0], eax
mov eax, dword [0x534a00]
imul dword [0x5348ac]
mov dword [0x534a18], eax
push 0x20
mov eax, dword [ebp - 4]
call fcn.0040a608
push eax
call dword [0x534860]
push 0
push 0x80
push 3
push 0
push 3
push 0xc0000000
mov eax, dword [ebp - 4]
call fcn.0040a608
push eax
call dword [0x534a34]
mov dword [ebp - 0x20], eax
call sub.kernel32.dll_GetLastError_2
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x18]
cmp eax, edx
jge 0x520cac
mov eax, dword [0x5349e0]
call fcn.004071f4
mov dword [0x5349e0], eax
mov eax, dword [0x5349d0]
mov dword [0x5349f8], eax
mov eax, dword [0x5349e0]
cmp eax, dword [0x5349f8]
jge 0x520c9a
xor eax, eax
mov dword [ebp - 0x1c], eax
mov eax, dword [0x5349bc]
mov dword [0x53485c], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jne 0x520c85
jmp 0x520cac
mov edx, 0x53498c
lea eax, [ebp - 0x14]
call fcn.0051b9d4
mov dword [0x5348a4], eax
mov eax, dword [ebp - 0x10]
sub eax, 0x80
mov dword [ebp - 0x14], eax
mov eax, dword [0x534a50]
add eax, 0x91
mov dword [ebp - 0x48], eax
fild dword [ebp - 0x48]
call fcn.0040762c
mov dword [0x534944], eax
mov eax, dword [0x534894]
imul dword [0x53498c]
mov dword [0x5349ac], eax
mov eax, dword [0x5348d4]
add eax, 0x8e
mov dword [0x5349f8], eax
mov eax, dword [0x53497c]
add eax, 4
mov dword [ebp - 0x48], eax
fild dword [ebp - 0x48]
call fcn.00407638
mov dword [0x534a40], eax
imul eax, dword [ebp - 0x18], 0xef
mov dword [ebp - 0x14], eax
mov eax, dword [0x5348b4]
mov dword [0x5348fc], eax
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [0x5348ac]
add eax, 0x20
mov dword [0x53496c], eax
mov eax, dword [0x5348ec]
add eax, 0x1e
mov dword [0x5349c4], eax
mov eax, dword [0x534944]
add eax, 0x1c
mov dword [0x534a18], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xe
jne 0x520d21
mov eax, dword [0x5349f8]
mov dword [0x53485c], eax
mov eax, dword [0x5348fc]
cmp eax, dword [0x53485c]
jle 0x520d85
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a01c
fild dword [0x534984]
call fcn.0040762c
mov dword [0x5348bc], eax
jmp 0x520d95
mov eax, dword [0x53490c]
imul dword [0x53488c]
mov dword [0x53492c], eax
mov eax, 0xae
sub eax, dword [0x534904]
mov dword [0x534984], eax
mov eax, dword [0x534964]
sub eax, 0xad
mov dword [0x5349e8], eax
cmp dword [ebp - 0x20], 0xffffffff
je 0x521845
cmp dword [ebp - 0x3c], 0
jne 0x521845
mov eax, 0x4704
call fcn.00406df4
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x10]
add eax, 0xa
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a01c
mov eax, dword [0x534984]
mov dword [0x53494c], eax
mov eax, dword [0x534964]
add eax, 0x13
cmp eax, dword [0x534934]
jge 0x520e23
mov eax, dword [0x53492c]
add eax, dword [0x53488c]
mov dword [0x5349d0], eax
mov eax, dword [0x534974]
sub eax, dword [0x534a00]
mov dword [0x534a28], eax
mov eax, dword [0x53496c]
add eax, 6
mov dword [ebp - 0x48], eax
fild dword [ebp - 0x48]
call fcn.0040762c
mov dword [0x53487c], eax
mov eax, dword [ebp - 0xc]
mov edx, 0x521a9c
call fcn.0040aba0
jne 0x520e5a
mov eax, dword [0x5348b4]
sub eax, dword [0x53497c]
mov dword [0x5348e4], eax
xor eax, eax
push ebp
push 0x521774
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jne 0x520e94
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xa
jge 0x520ece
inc dword [ebp - 0x1c]
fild dword [ebp - 0x18]
call fcn.0040762c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x1c], 0xa
jl 0x520e7e
jmp 0x520ece
imul eax, dword [0x5348f4], 0x8e
mov dword [0x5349e0], eax
mov eax, dword [0x53494c]
sub eax, 0x8c
mov dword [0x534a38], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [0x53488c]
mov edx, dword [ebp - 0x14]
mov eax, dword [0x53495c]
call fcn.005184a8
call fcn.00520438
mov eax, dword [0x5348dc]
add eax, 0xbb
mov dword [0x5348ec], eax
mov eax, dword [0x534934]
sub eax, 0xba
mov dword [0x534944], eax
mov eax, dword [0x534974]
call fcn.004071f4
mov dword [0x534974], eax
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x20]
push eax
call dword [0x5349d4]
test eax, eax
je 0x5214d7
mov eax, dword [0x534964]
push eax
mov eax, dword [0x5349e8]
push eax
mov eax, dword [0x534974]
push eax
mov ecx, dword [0x534a50]
mov edx, dword [0x534a50]
mov eax, dword [0x53487c]
call fcn.0051c414
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x18]
push eax
push 0x5349e8
push 0x534a48
mov ecx, 0x5348f4
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x10]
call fcn.005160a8
mov dword [0x534964], eax
fild dword [ebp - 0x18]
call fcn.00407638
mov dword [ebp - 0x14], eax
mov eax, 0xe2
sub eax, dword [0x534a00]
mov dword [0x53495c], eax
mov eax, dword [0x5349d8]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
call fcn.005184a8
mov ecx, 0x53486c
lea edx, [ebp - 0x1c]
mov eax, 0x53486c
call fcn.005174b4
jmp 0x5214bf
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov eax, dword [0x5348bc]
mov dword [0x5348fc], eax
mov eax, dword [0x5348fc]
add eax, 0xa4
mov dword [ebp - 0x48], eax
fild dword [ebp - 0x48]
call fcn.0040762c
mov dword [0x53495c], eax
mov eax, dword [0x5348f4]
sub eax, 9
mov dword [0x5349c4], eax
mov eax, dword [0x5349e0]
call fcn.004071f4
mov dword [0x5349e0], eax
mov eax, dword [0x5349b4]
mov dword [0x534a08], eax
mov eax, dword [0x5349e0]
cmp eax, dword [0x534a08]
jge 0x521032
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x52101c
mov eax, dword [ebp - 0x40]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xe9
jle 0x52103c
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a01c
jmp 0x52103c
mov eax, dword [0x53488c]
mov dword [0x5348e4], eax
cmp dword [ebp - 0x2c], 0
jne 0x521051
cmp dword [ebp - 0x30], 0x4704
jae 0x521162
jmp 0x521057
jge 0x521162
xor eax, eax
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a01c
mov eax, dword [0x534874]
call fcn.004071f4
mov dword [0x534874], eax
jmp 0x521081
mov eax, dword [0x5348a4]
mov dword [0x5348bc], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x18]
cmp eax, 0xcd
jge 0x5210a1
mov eax, dword [ebp - 0x18]
add eax, 4
mov dword [ebp - 0x14], eax
mov eax, dword [0x53495c]
call fcn.004071f4
mov dword [0x53495c], eax
fild dword [0x534984]
call fcn.0040762c
mov dword [0x5349bc], eax
imul eax, dword [0x5349e0], 0x26
mov dword [0x534a08], eax
push 0
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x20]
push eax
call dword [0x534990]
imul eax, dword [ebp - 0x10], 0x2b
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a01c
mov eax, 0xec
sub eax, dword [0x534864]
mov dword [0x534964], eax
mov eax, dword [0x5349b4]
mov dword [0x53497c], eax
mov eax, dword [0x53498c]
call fcn.004071f4
mov dword [0x53498c], eax
mov eax, dword [0x53498c]
cmp eax, dword [0x53497c]
jge 0x52113c
mov eax, dword [0x534a50]
sub eax, dword [0x5348cc]
mov dword [0x534a38], eax
mov eax, 0x87
sub eax, dword [0x534a48]
cmp eax, 0x4a
jge 0x52123a
mov eax, dword [0x53488c]
add eax, 0x17
mov dword [0x5348cc], eax
jmp 0x52123a
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xe
jge 0x52119e
inc dword [ebp - 0x1c]
lea eax, [ebp - 0xc]
mov edx, 0x521ac4
call fcn.0040a01c
fild dword [ebp - 0x18]
call fcn.00407638
mov dword [ebp - 0x10], eax
mov eax, dword [0x53489c]
shl eax, 2
lea eax, [eax + eax*2]
mov dword [0x5348f4], eax
cmp dword [ebp - 0x1c], 0xe
jl 0x52116d
mov eax, dword [0x5349e8]
add eax, 0x3d
mov dword [0x53497c], eax
mov eax, 0x3b
sub eax, dword [0x534a38]
mov dword [0x5349e0], eax
mov eax, dword [0x53487c]
add eax, 0x39
mov dword [0x534a38], eax
mov eax, dword [0x5348bc]
sub eax, 0x38
mov dword [0x53487c], eax
imul eax, dword [0x5348fc], 0x36
mov dword [0x5348c4], eax
push 0
lea eax, [ebp - 0x38]
push eax
push 0x4704
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x20]
push eax
call dword [0x534990]
mov eax, dword [ebp - 0x10]
add eax, 0x65
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0xc]
mov edx, 0x521b08
call fcn.0040a01c
mov eax, dword [0x534984]
imul dword [0x53486c]
mov dword [0x534a38], eax
mov eax, dword [0x5348d4]
mov dword [0x53485c], eax
fild dword [0x53492c]
call fcn.0040762c
mov dword [0x53489c], eax
imul eax, dword [ebp - 0x14], 0xb7
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a01c
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xd
jge 0x521273
inc dword [ebp - 0x10]
mov eax, 0x8a
sub eax, dword [0x534a00]
mov dword [0x53485c], eax
cmp dword [ebp - 0x10], 0xd
jl 0x52125a
mov eax, dword [0x534a50]
mov dword [0x53489c], eax
lea eax, [ebp - 0xc]
mov edx, 0x521b44
call fcn.0040a01c
mov eax, dword [0x5349e8]
sub eax, dword [0x5349d8]
mov dword [0x5348fc], eax
cmp dword [ebp - 0x38], 0
ja 0x521438
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x521315
inc dword [ebp - 0x1c]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a01c
mov eax, dword [0x53486c]
mov dword [0x534874], eax
mov eax, dword [0x5349bc]
mov dword [0x534894], eax
mov eax, dword [0x534894]
cmp eax, dword [0x534874]
jle 0x5212f6
mov eax, dword [ebp - 0x18]
add eax, 0x4a
mov dword [ebp - 0x14], eax
mov eax, dword [0x53490c]
call fcn.004071f4
mov dword [0x53490c], eax
mov eax, dword [0x53497c]
call fcn.004071f4
mov dword [0x53497c], eax
mov eax, dword [0x5348dc]
mov dword [0x5349d8], eax
cmp dword [ebp - 0x1c], 3
jl 0x5212af
mov eax, dword [0x534a40]
add eax, dword [0x53494c]
mov dword [0x53485c], eax
lea eax, [ebp - 0xc]
mov edx, 0x521b7c
call fcn.0040a01c
mov eax, dword [0x5349d0]
add eax, 0xda
mov dword [0x5348bc], eax
mov eax, 0xe0
sub eax, dword [ebp - 0x1c]
cmp eax, 0xd
jge 0x52135b
mov eax, dword [0x5348b4]
add eax, 0x71
mov dword [0x53494c], eax
fild dword [0x534864]
call fcn.0040762c
mov dword [0x5349c4], eax
jmp 0x5214d7
mov eax, dword [0x5349d0]
add eax, dword [0x53489c]
cmp eax, dword [0x53489c]
jle 0x521473
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xf
jge 0x521469
inc dword [ebp - 0x1c]
mov eax, dword [0x534a48]
mov dword [0x534874], eax
cmp dword [ebp - 0x1c], 0xf
jl 0x521456
mov eax, dword [0x5348d4]
mov dword [0x5348a4], eax
mov eax, dword [ebp - 0x18]
sub eax, 0x54
mov dword [ebp - 0x14], eax
mov eax, dword [0x53490c]
add eax, 0x7a
mov dword [0x53495c], eax
mov eax, dword [0x53496c]
add eax, 0x79
mov dword [0x5349b4], eax
mov eax, dword [0x5349bc]
add eax, 0x77
mov dword [0x534a00], eax
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
push edx
push eax
mov eax, dword [ebp - 0x38]
xor edx, edx
sub dword [esp], eax
sbb dword [esp + 4], edx
pop eax
pop edx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0
jne 0x5214d1
cmp dword [ebp - 0x30], 0
ja 0x520fa5
jmp 0x5214d7
jg 0x520fa5
imul eax, dword [ebp - 0x18], 0xc3
mov dword [ebp - 0x14], eax
mov eax, dword [0x5348dc]
mov dword [0x53493c], eax
imul eax, dword [0x534934], 0x6f
mov dword [0x534984], eax
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a01c
mov eax, dword [0x534a40]
mov dword [0x5349c4], eax
mov eax, dword [0x5349d8]
call fcn.004071f4
mov dword [0x5349d8], eax
mov eax, dword [0x5349d8]
cmp eax, dword [0x5349c4]
jge 0x52153a
mov eax, dword [0x53496c]
imul dword [0x53490c]
mov dword [0x534a48], eax
jmp 0x521549
mov eax, dword [0x5348fc]
add eax, 0x9c
mov dword [0x5348ac], eax
mov eax, dword [0x5348a4]
add eax, dword [0x5348e4]
cmp eax, dword [0x5348e4]
jne 0x521569
mov eax, dword [0x534a08]
add eax, 0x33
mov dword [0x53493c], eax
cmp dword [ebp - 0x2c], 0
jne 0x52157b
cmp dword [ebp - 0x30], 0
ja 0x52166d
jmp 0x521581
jg 0x52166d
mov eax, dword [0x53486c]
call fcn.004071f4
mov dword [0x53486c], eax
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x521bcc
call fcn.0040ade8
cmp eax, 0xbe
je 0x5215d1
mov eax, dword [ebp - 0x1c]
imul dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov eax, 0xc3
sub eax, dword [0x534a30]
mov dword [0x5348fc], eax
mov eax, dword [0x534874]
sub eax, 0xc1
mov dword [0x53495c], eax
mov eax, dword [0x534a18]
imul dword [0x534a18]
mov dword [0x5349d8], eax
mov eax, dword [0x534864]
add eax, 4
mov dword [ebp - 0x48], eax
fild dword [ebp - 0x48]
call fcn.00407638
mov dword [0x534a30], eax
mov eax, dword [0x5349b4]
mov dword [0x534a50], eax
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0040abd8
mov byte [ebp - 5], 1
mov eax, dword [ebp - 0x10]
add eax, 4
mov dword [ebp - 0x14], eax
mov eax, dword [0x5348cc]
add eax, dword [0x534884]
mov dword [0x53497c], eax
fild dword [0x53490c]
call fcn.0040762c
mov dword [0x5349d8], eax
mov eax, dword [0x53496c]
add eax, dword [0x53494c]
mov dword [0x534a38], eax
mov eax, dword [0x5349c4]
sub eax, dword [0x5348bc]
mov dword [0x53487c], eax
mov eax, dword [0x5348fc]
mov dword [0x534894], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x52177e
imul eax, dword [ebp - 0x1c], 0x5d
mov dword [ebp - 0x18], eax
mov eax, dword [0x53493c]
mov dword [0x5349ac], eax
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jge 0x5216af
inc dword [ebp - 0x14]
mov eax, dword [0x5349e0]
imul dword [0x534894]
mov dword [0x534a50], eax
cmp dword [ebp - 0x14], 0
jl 0x521696
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0040abd8
mov eax, dword [0x5349a4]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
je 0x5216db
mov eax, dword [ebp - 0x44]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 7
jne 0x5216f2
imul eax, dword [0x5349d0], 0xa4
mov dword [0x5348f4], eax
jmp 0x5216fc
mov eax, dword [0x53486c]
mov dword [0x534944], eax
mov eax, dword [0x5348f4]
mov dword [0x53497c], eax
mov eax, dword [ebp - 0x34]
call fcn.00406e28
mov ecx, 1
mov edx, dword [0x534a20]
mov eax, 0x521c00
call fcn.0040ade8
cmp eax, 0x30
jge 0x521737
mov eax, dword [0x53487c]
call fcn.004071f4
mov dword [0x53487c], eax
mov eax, dword [0x53493c]
mov dword [0x53489c], eax
mov eax, dword [ebp - 0x14]
sub eax, 0xb1
mov dword [ebp - 0x10], eax
mov eax, dword [0x5348d4]
add eax, 0x67
mov dword [0x5348f4], eax
mov eax, dword [0x53492c]
add eax, 4
mov dword [0x53495c], eax
mov eax, dword [0x53496c]
sub eax, 0x63
mov dword [0x5349b4], eax
ret
xor eax, eax
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 6
jne 0x52184a
mov ecx, 1
mov edx, dword [0x534954]
mov eax, 0x521c74
call fcn.0040ade8
cmp eax, 0xda
je 0x521884
mov eax, dword [ebp - 0x18]
sub eax, 0xc3
mov dword [ebp - 0x14], eax
mov eax, dword [0x53487c]
mov dword [0x53495c], eax
mov eax, 0x4d
sub eax, dword [0x5348e4]
cmp eax, 0x73
jge 0x5218c9
mov eax, dword [0x5349c4]
add eax, 0xdd
mov dword [0x5349e8], eax
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0040abd8
mov eax, dword [0x5349bc]
mov edx, eax
shl eax, 6
add eax, edx
mov dword [0x534a50], eax
jmp 0x5218f4
call fcn.004eb8cc
mov eax, dword [0x534894]
call fcn.004071f4
mov dword [0x534894], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x10]
lea eax, [ebp - 0x14]
call fcn.004f8500
mov dword [0x534984], eax
mov eax, dword [0x5348e4]
add eax, dword [0x5348ac]
cmp eax, dword [0x5348ac]
jle 0x521919
fild dword [0x534a48]
call fcn.00407638
mov dword [0x53493c], eax
jmp 0x52194a
mov eax, dword [0x5349e0]
sub eax, 0x6d
mov dword [0x5349bc], eax
mov eax, dword [0x53492c]
mov dword [0x5349d8], eax
mov eax, dword [0x5349d8]
cmp eax, dword [0x53495c]
jge 0x52194a
mov eax, dword [0x53487c]
add eax, 0x6a
mov dword [0x53485c], eax
mov eax, dword [0x5349bc]
mov dword [0x5348cc], eax
mov eax, dword [0x534a08]
add eax, 4
mov dword [0x53490c], eax
push 2
mov eax, dword [ebp - 4]
call fcn.0040a608
push eax
call dword [0x534860]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x521a24
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x521a49
lea eax, [ebp - 0xc]
call fcn.00409bf4
lea eax, [ebp - 4]
call fcn.00409c3c
ret