Function at 0x52039c
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x47
push 0
push 0
dec ecx
jne 0x5203a5
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.004052c8
mov eax, dword [ebp - 0xc]
call fcn.004052c8
lea eax, [ebp + 8]
call fcn.00405b34
xor eax, eax
push ebp
push 0x521fee
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
add eax, 0x88
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov eax, dword [0x587abc]
mov eax, dword [eax]
call fcn.004859c0
mov eax, dword [0x587abc]
mov eax, dword [eax]
call fcn.004859c0
mov eax, dword [ebp - 4]
imul eax, dword [eax + 0x40], 0x1c
mov edx, dword [0x587c70]
mov edx, dword [edx]
cmp dword [edx + eax*8 + 0x68], 0
je 0x52043d
mov eax, dword [ebp - 4]
mov dword [eax + 0xf8], 0xffffffff
mov dword [ebp - 0x10], 0xffffff9b
jmp 0x521e8c
mov eax, dword [ebp + 8]
call fcn.0049d79c
test al, al
je 0x5204a2
lea eax, [ebp - 0x124]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov eax, dword [ebp - 0x124]
call fcn.0049d910
mov ecx, 3
mov edx, 0x522014
mov eax, dword [ebp - 4]
call fcn.00522e84
mov eax, dword [ebp - 4]
imul eax, dword [eax + 0x40], 0x1c
mov edx, dword [0x587c70]
mov edx, dword [edx]
lea eax, [edx + eax*8 + 0x3c]
mov edx, 0x522030
call fcn.00405560
mov dword [ebp - 0x10], 0xffffff9c
jmp 0x521e8c
mov eax, dword [ebp - 4]
imul ebx, dword [eax + 0x40], 0x1c
mov eax, dword [0x587c70]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8 + 0xc]
mov edx, 0x52203c
call fcn.004058a0
jne 0x5204d8
mov eax, dword [0x587c70]
mov eax, dword [eax]
lea eax, [eax + ebx*8 + 0x80]
mov edx, 0x52204c
call fcn.00405560
lea eax, [ebp - 0x128]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov eax, dword [ebp - 0x128]
call fcn.0049d79c
test al, al
je 0x520dde
mov eax, dword [ebp - 4]
imul eax, dword [eax + 0x40], 0x1c
mov edx, dword [0x587c70]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 0x80]
lea edx, [ebp - 0x12c]
call fcn.00409f18
mov eax, dword [ebp - 0x12c]
mov edx, 0x52204c
call fcn.004058a0
jne 0x5205e5
lea eax, [ebp - 0x130]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov eax, dword [ebp - 0x130]
call fcn.0049d910
xor eax, eax
push ebp
push 0x52059b
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xffff
lea eax, [ebp - 0x134]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov ecx, dword [ebp - 0x134]
mov dl, 1
mov eax, dword [0x48a7a8]
call fcn.0048b78c
mov dword [ebp - 0x14], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x520e86
mov ecx, 3
mov edx, 0x522054
mov eax, dword [ebp - 4]
call fcn.00522e84
xor eax, eax
push ebp
push 0x520d76
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x52067c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
imul ebx, dword [eax + 0x40], 0x1c
mov eax, dword [0x587c70]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8 + 0xc]
mov edx, 0x52207c
call fcn.004058a0
je 0x52064b
mov eax, dword [0x587c70]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8 + 0xc0]
mov edx, 0x52208c
call fcn.00405224
jne 0x520658
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0051ff9c
jmp 0x520672
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0051f230
test eax, eax
jne 0x520672
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0051ee18
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x520686
mov eax, dword [0x587abc]
mov eax, dword [eax]
call fcn.004859c0
mov eax, dword [0x587abc]
mov eax, dword [eax]
call fcn.004859c0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x140], 0
je 0x520cb9
xor eax, eax
push ebp
push 0x520970
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x20]
call fcn.00404e08
push 2
lea eax, [ebp - 0x13c]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov ecx, dword [ebp - 0x13c]
mov dl, 1
mov eax, dword [0x48a7a8]
call fcn.0048b78c
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0x520707
cmp eax, 0x3e8
jbe 0x5208c7
jmp 0x52070d
jle 0x5208c7
lea eax, [ebp - 0x120]
mov edx, pe_nt_image_headers32
call fcn.004085ec
push 0
push 0
mov eax, dword [ebp - 0x14]
call fcn.0041ecbc
lea edx, [ebp - 0x120]
mov ecx, 3
mov eax, dword [ebp - 0x14]
call fcn.0041eec8
lea eax, [ebp - 0x140]
lea edx, [ebp - 0x120]
mov ecx, pe_nt_image_headers32
call fcn.00405088
mov eax, dword [ebp - 0x140]
lea edx, [ebp - 0x18]
call fcn.00409ec8
lea eax, [ebp - 0x1c]
mov edx, 0x522098
call fcn.00404ea0
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
call fcn.00405224
jne 0x520787
lea eax, [ebp - 0x20]
mov edx, 0x5220a4
call fcn.00404ea0
lea eax, [ebp - 0x120]
mov edx, pe_nt_image_headers32
call fcn.004085ec
push 0
push 4
mov eax, dword [ebp - 0x14]
call fcn.0041ecbc
lea edx, [ebp - 0x120]
mov ecx, 0x10
mov eax, dword [ebp - 0x14]
call fcn.0041eec8
lea eax, [ebp - 0x144]
lea edx, [ebp - 0x120]
mov ecx, pe_nt_image_headers32
call fcn.00405088
mov eax, dword [ebp - 0x144]
lea edx, [ebp - 0x18]
call fcn.00409ec8
lea eax, [ebp - 0x1c]
mov edx, 0x5220b4
call fcn.00404ea0
mov eax, dword [ebp - 0x18]
mov edx, 0x5220b4
call fcn.00405224
je 0x5208ba
mov eax, dword [ebp - 0x18]
mov edx, 0x5220c8
call fcn.00405224
je 0x5208ba
mov eax, dword [ebp - 0x18]
mov edx, 0x5220dc
call fcn.00405224
je 0x5208ba
mov eax, dword [ebp - 0x18]
mov edx, 0x5220f0
call fcn.00405224
je 0x5208ba
mov eax, dword [ebp - 0x18]
mov edx, 0x522104
call fcn.00405224
je 0x5208ba
mov eax, dword [ebp - 0x18]
mov edx, 0x522118
call fcn.00405224
je 0x5208ba
mov eax, dword [ebp - 0x18]
mov edx, 0x52212c
call fcn.00405224
je 0x5208ba
mov eax, dword [ebp - 0x18]
mov edx, 0x522140
call fcn.00405224
je 0x5208ba
mov eax, dword [ebp - 0x18]
mov edx, 0x522154
call fcn.00405224
je 0x5208ba
mov eax, dword [ebp - 0x18]
mov edx, 0x522164
call fcn.00405224
je 0x5208ba
mov eax, dword [ebp - 0x18]
mov edx, 0x522174
call fcn.00405224
je 0x5208ba
mov eax, dword [ebp - 0x18]
mov edx, 0x522188
call fcn.00405224
je 0x5208ba
mov eax, dword [ebp - 0x18]
mov edx, 0x52219c
call fcn.00405224
jne 0x5208c7
lea eax, [ebp - 0x20]
mov edx, 0x5221ac
call fcn.00404ea0
cmp dword [ebp - 0x14], 0
je 0x5208d5
mov eax, dword [ebp - 0x14]
call fcn.00403f7c
lea edx, [ebp - 0x148]
mov eax, dword [ebp - 0x20]
call fcn.00409ec8
cmp dword [ebp - 0x148], 0
jne 0x520939
lea eax, [ebp - 0x14c]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov eax, dword [ebp - 0x14c]
call fcn.0049d910
push 0xffff
lea eax, [ebp - 0x150]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov ecx, dword [ebp - 0x150]
mov dl, 1
mov eax, dword [0x48a7a8]
call fcn.0048b78c
mov dword [ebp - 0x14], eax
jmp 0x520963
push 2
lea eax, [ebp - 0x154]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov ecx, dword [ebp - 0x154]
mov dl, 1
mov eax, dword [0x48a7a8]
call fcn.0048b78c
mov dword [ebp - 0x14], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x520d69
lea eax, [ebp - 0x17c]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov eax, dword [ebp - 0x17c]
call fcn.0049d910
xor eax, eax
push ebp
push 0x520d1c
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xffff
lea eax, [ebp - 0x180]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov ecx, dword [ebp - 0x180]
mov dl, 1
mov eax, dword [0x48a7a8]
call fcn.0048b78c
mov dword [ebp - 0x14], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x520d69
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x520e86
lea eax, [ebp - 0x190]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov eax, dword [ebp - 0x190]
call fcn.0049d910
xor eax, eax
push ebp
push 0x520e41
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xffff
lea eax, [ebp - 0x194]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov ecx, dword [ebp - 0x194]
mov dl, 1
mov eax, dword [0x48a7a8]
call fcn.0048b78c
mov dword [ebp - 0x14], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x520e86
xor eax, eax
push ebp
push 0x520eac
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp - 0x14], 0
je 0x520ea2
mov eax, dword [ebp - 0x14]
call fcn.00403f7c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x520eb6
push 0x22
lea eax, [ebp - 0x19c]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov ecx, dword [ebp - 0x19c]
mov dl, 1
mov eax, dword [0x48a7a8]
call fcn.0048b78c
mov edx, dword [ebp - 4]
mov dword [edx + 0x44], eax
xor ecx, ecx
mov dl, 1
mov eax, dword [0x436930]
call fcn.00437694
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x58], ebx
mov eax, ebx
mov edx, 0x3e8
call fcn.0043782c
mov eax, dword [ebp - 4]
push eax
push 0x51ebc8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x58]
call fcn.0043783c
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xb0], edx
mov eax, dword [ebp - 4]
mov dword [eax + 0xb8], 0xfffffff6
mov dword [eax + 0xbc], 0xffffffff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x58]
mov dl, 1
call fcn.0043781c
mov eax, dword [ebp - 4]
mov dword [eax + 0xac], 0xffffffff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x98], eax
mov dword [ecx + 0x9c], edx
mov eax, dword [ebp - 4]
cmp dword [eax + 0x9c], 0xffffffff
jne 0x520f9a
cmp dword [eax + 0x98], 0xffffffff
jne 0x520f9a
mov eax, dword [ebp - 4]
mov dword [eax + 0x98], 0
mov dword [eax + 0x9c], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x90], 0xffffffff
mov dword [eax + 0x94], 0xffffffff
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x9c]
mov eax, dword [eax + 0x98]
add eax, 1
adc edx, 0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x68], eax
mov dword [ecx + 0x6c], edx
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x68]
mov dword [eax + 0x128], ecx
mov ecx, dword [edx + 0x6c]
mov dword [eax + 0x12c], ecx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xa8], edx
mov eax, dword [ebp - 4]
add eax, 0x7c
mov edx, dword [ebp - 8]
call fcn.00404e5c
mov eax, dword [ebp - 4]
push eax
push 0x5126b8
mov eax, dword [ebp - 4]
call fcn.00425210
xor edx, edx
push ebp
push 0x521c91
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x41a5ac]
call fcn.00403f4c
mov edx, dword [ebp - 4]
mov dword [edx + 0x4c], eax
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4f492c]
call fcn.004f5b58
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x150], ebx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
mov dword [ebx + 0x188], eax
mov eax, dword [ebp - 4]
imul eax, dword [eax + 0x40], 0x1c
mov edx, dword [0x587c70]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 0x80]
lea edx, [ebp - 0x1a0]
call fcn.00409f18
mov eax, dword [ebp - 0x1a0]
mov edx, 0x52204c
call fcn.004058a0
jne 0x5210b1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0x170
call fcn.00404e08
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0x174
call fcn.00404e08
jmp 0x521110
mov eax, dword [ebp - 4]
cmp dword [eax + 0x9c], 0
jne 0x5210c8
cmp dword [eax + 0x98], 0
jbe 0x521110
jmp 0x5210ca
jle 0x521110
mov eax, dword [ebp - 4]
push dword [eax + 0x9c]
push dword [eax + 0x98]
lea eax, [ebp - 0x1a4]
call fcn.0040a504
mov edx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0x170
call fcn.00404e5c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0x174
call fcn.00404e08
mov eax, dword [ebp - 4]
imul eax, dword [eax + 0x40], 0x1c
mov edx, dword [0x587c70]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 0xc]
mov edx, 0x52203c
call fcn.004058a0
jne 0x52115f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0x170
mov edx, 0x5221bc
call fcn.00404e5c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0x174
mov edx, 0x5221c8
call fcn.00404e5c
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x150]
mov eax, dword [ebp - 4]
mov dword [ebx + 0x2d4], eax
mov dword [ebx + 0x2d0], 0x51422c
mov eax, dword [ebp - 4]
mov dword [ebx + 0x2e4], eax
mov dword [ebx + 0x2e0], 0x5139d0
mov eax, dword [ebp - 4]
mov dword [ebx + 0x2dc], eax
mov dword [ebx + 0x2d8], 0x513cbc
mov eax, dword [ebp - 4]
mov dword [ebx + 0x2c4], eax
mov dword [ebx + 0x2c0], 0x5141a0
mov eax, dword [ebp - 4]
mov dword [ebx + 0x334], eax
mov dword [ebx + 0x330], 0x513cc0
lea eax, [ebx + 0x114]
mov edx, 0x5221d4
call fcn.00404e5c
lea edx, [ebp - 0x1a8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x13c]
call fcn.00409ec8
cmp dword [ebp - 0x1a8], 0
je 0x521210
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0x17c
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x13c]
call fcn.00404e5c
lea edx, [ebp - 0x1ac]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xec]
call fcn.00409ec8
cmp dword [ebp - 0x1ac], 0
jne 0x521247
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0x110
mov edx, 0x5221e0
call fcn.00404e5c
jmp 0x521263
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0x110
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xec]
call fcn.00404e5c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0xfc
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xe8]
call fcn.00404e5c
mov eax, dword [0x587a70]
mov eax, dword [eax]
mov edx, 0x522220
call fcn.004058a0
jne 0x52137e
lea edx, [ebp - 0x1b0]
mov eax, dword [0x587b70]
mov eax, dword [eax]
call fcn.00409f18
mov eax, dword [ebp - 0x1b0]
xor edx, edx
call fcn.004058a0
je 0x52137e
lea edx, [ebp - 0x1b4]
mov eax, dword [0x58774c]
mov eax, dword [eax]
call fcn.00409f18
mov eax, dword [ebp - 0x1b4]
xor edx, edx
call fcn.004058a0
je 0x52137e
mov eax, dword [0x587a70]
mov eax, dword [eax]
mov edx, 0x522220
call fcn.004058a0
jne 0x52137e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0x90
mov edx, dword [0x587b70]
mov edx, dword [edx]
call fcn.004050a0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0x94
mov edx, dword [0x58774c]
mov edx, dword [edx]
call fcn.004050a0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0xa8
mov edx, dword [0x5878e8]
mov edx, dword [edx]
call fcn.004050a0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0xac
mov edx, dword [0x587ba4]
mov edx, dword [edx]
call fcn.004050a0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0x104
mov edx, dword [0x5877c8]
mov edx, dword [edx]
call fcn.004050a0
lea edx, [ebp - 0x1b8]
mov eax, dword [ebp - 8]
call fcn.00409ec8
mov edx, dword [ebp - 0x1b8]
mov eax, 0x522234
call fcn.0040541c
test eax, eax
jle 0x5213de
mov al, byte [0x522238]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea edx, [ebp - 0x1c0]
mov eax, dword [ebp - 8]
call fcn.00409ec8
mov eax, dword [ebp - 0x1c0]
mov ecx, 0x522244
mov edx, 0x522234
call fcn.0040feec
mov edx, dword [ebp - 0x1bc]
lea eax, [ebp - 8]
call fcn.00404ea0
lea edx, [ebp - 0x1c4]
mov eax, dword [ebp - 0xc]
call fcn.00409ec8
mov edx, dword [ebp - 0x1c4]
mov eax, 0x522234
call fcn.0040541c
test eax, eax
jle 0x52143e
mov al, byte [0x522238]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea edx, [ebp - 0x1cc]
mov eax, dword [ebp - 0xc]
call fcn.00409ec8
mov eax, dword [ebp - 0x1cc]
mov ecx, 0x522244
mov edx, 0x522234
call fcn.0040feec
mov edx, dword [ebp - 0x1c8]
lea eax, [ebp - 0xc]
call fcn.00404ea0
lea edx, [ebp - 0x1d0]
mov eax, dword [ebp - 0xc]
call fcn.00409ec8
cmp dword [ebp - 0x1d0], 0
jne 0x52146d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0xec
mov edx, dword [ebp - 8]
call fcn.00404e5c
jmp 0x521483
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
add eax, 0xec
mov edx, dword [ebp - 0xc]
call fcn.00404e5c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
call fcn.004fc77c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov eax, dword [eax + 0x12c]
mov edx, dword [ebp - 4]
mov dword [edx + 0xe0], eax
xor edx, edx
push ebp
push 0x52158d
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
cmp dword [eax + 0x114], 3
jge 0x521567
lea edx, [ebp - 0x1d4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov eax, dword [eax + 0x184]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x1d4]
mov eax, 0x522250
call fcn.0040541c
test eax, eax
jg 0x521567
lea edx, [ebp - 0x1d8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov eax, dword [eax + 0x184]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x1d8]
mov eax, 0x522260
call fcn.0040541c
test eax, eax
jg 0x521567
lea edx, [ebp - 0x1dc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov eax, dword [eax + 0x184]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x1dc]
mov eax, 0x522278
call fcn.0040541c
test eax, eax
jg 0x521567
mov eax, dword [ebp - 4]
mov dword [eax + 0xa8], 0xffffffff
mov eax, dword [ebp - 4]
inc dword [eax + 0x114]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x58]
test eax, eax
je 0x521578
xor edx, edx
call fcn.0043781c
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xb0], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5215a4
mov eax, dword [ebp - 4]
cmp dword [eax + 0xa8], 0
jne 0x5215bc
mov eax, dword [ebp - 4]
cmp dword [eax + 0xac], 0
je 0x5215e8
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xb0], edx
mov eax, dword [ebp - 4]
call fcn.0051ed0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x98]
mov dword [ebp - 0x10], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x521e8c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
test eax, eax
je 0x5218fd
mov eax, dword [eax + 0x12c]
mov edx, dword [ebp - 4]
mov dword [edx + 0xe0], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov eax, dword [eax + 0x12c]
cmp eax, 0xc8
je 0x521625
cmp eax, 0xce
jne 0x521684
mov eax, dword [ebp - 4]
imul eax, dword [eax + 0x40], 0x1c
mov edx, dword [0x587c70]
mov edx, dword [edx]
cmp dword [edx + eax*8 + 0x68], 0
jne 0x521673
mov eax, dword [ebp - 4]
cmp dword [eax + 0xa8], 0
jne 0x521673
lea edx, [ebp - 0x1e0]
mov eax, dword [0x587698]
mov eax, dword [eax]
call fcn.00409ec8
cmp dword [ebp - 0x1e0], 0
jne 0x521673
mov eax, dword [ebp - 4]
push eax
push 0x51348c
mov eax, dword [ebp - 4]
call fcn.00425210
mov eax, dword [0x587abc]
mov eax, dword [eax]
call fcn.004859c0
jmp 0x5218fd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
cmp dword [eax + 0x12c], 0x195
jne 0x5216f3
mov eax, dword [ebp - 4]
imul eax, dword [eax + 0x40], 0x1c
mov edx, dword [0x587c70]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 0xc]
mov edx, 0x522280
call fcn.004058a0
je 0x5216d7
mov eax, dword [ebp - 4]
imul eax, dword [eax + 0x40], 0x1c
mov edx, dword [0x587c70]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 0xc]
mov edx, 0x52228c
call fcn.004058a0
jne 0x5216f3
mov dword [ebp - 0x10], 0xfffffe6b
mov eax, dword [ebp - 4]
call fcn.0051ed0c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x521e8c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
cmp dword [eax + 0x12c], 0x1a0
jne 0x52188d
lea eax, [ebp - 0x1e8]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov eax, dword [ebp - 0x1e8]
lea ecx, [ebp - 0x1e4]
mov edx, 0x522298
call fcn.0049d5dc
mov eax, dword [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1ec]
mov ecx, 0x522008
mov edx, dword [ebp + 8]
call fcn.004057f0
mov eax, dword [ebp - 0x1ec]
pop edx
call fcn.0049d8ec
mov eax, dword [0x587abc]
mov eax, dword [eax]
call fcn.004859c0
lea edx, [ebp - 0x1f4]
mov eax, dword [ebp + 8]
call fcn.0049d6a4
mov edx, dword [ebp - 0x1f4]
lea eax, [ebp - 0x1f0]
call fcn.004050a0
mov eax, dword [ebp - 0x1f0]
mov edx, dword [0x587ce4]
mov edx, dword [edx]
call fcn.0040541c
dec eax
jle 0x5217da
lea ecx, [ebp - 0x1f8]
mov edx, 0x5222a0
mov eax, dword [ebp + 8]
call fcn.0049d5dc
mov edx, dword [ebp - 0x1f8]
mov eax, dword [ebp + 8]
call fcn.0049d8ec
mov eax, dword [ebp - 4]
imul eax, dword [eax + 0x40], 0x1c
mov edx, dword [0x587c70]
mov edx, dword [edx]
lea eax, [edx + eax*8 + 0x2c]
mov edx, 0x5220a4
call fcn.00404e5c
lea edx, [ebp - 0x200]
mov eax, dword [ebp + 8]
call fcn.0049d6a4
mov edx, dword [ebp - 0x200]
lea eax, [ebp - 0x1fc]
call fcn.004050a0
mov eax, dword [ebp - 0x1fc]
mov edx, dword [0x58785c]
mov edx, dword [edx]
call fcn.0040541c
dec eax
jle 0x52184d
lea ecx, [ebp - 0x204]
mov edx, 0x5222b0
mov eax, dword [ebp + 8]
call fcn.0049d5dc
mov edx, dword [ebp - 0x204]
mov eax, dword [ebp + 8]
call fcn.0049d8ec
mov eax, dword [ebp - 4]
imul eax, dword [eax + 0x40], 0x1c
mov edx, dword [0x587c70]
mov edx, dword [edx]
lea eax, [edx + eax*8 + 0x2c]
mov edx, 0x5221ac
call fcn.00404e5c
mov eax, dword [0x587abc]
mov eax, dword [eax]
call fcn.004859c0
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x68]
mov dword [eax + 0x90], ecx
mov ecx, dword [edx + 0x6c]
mov dword [eax + 0x94], ecx
mov dword [ebp - 0x10], 0xffffff9c
mov eax, dword [ebp - 4]
call fcn.0051ed0c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x521e8c
mov eax, dword [ebp - 4]
cmp dword [eax + 0xf8], 0
jne 0x5218d1
mov eax, dword [ebp - 4]
cmp dword [eax + 0xa8], 0
jne 0x5218d1
lea edx, [ebp - 0x208]
mov eax, dword [0x587698]
mov eax, dword [eax]
call fcn.00409ec8
cmp dword [ebp - 0x208], 0
jne 0x5218d1
mov eax, dword [ebp - 4]
push eax
push 0x51348c
mov eax, dword [ebp - 4]
call fcn.00425210
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xb0], edx
mov eax, dword [ebp - 4]
call fcn.0051ed0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x98]
mov dword [ebp - 0x10], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x521e8c
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x94]
mov eax, dword [eax + 0x90]
mov ecx, dword [ebp - 4]
sub eax, dword [ecx + 0x68]
sbb edx, dword [ecx + 0x6c]
test edx, edx
jge 0x521920
neg eax
adc edx, 0
neg edx
cmp edx, 0
jne 0x521930
cmp eax, 0xa
jae 0x521bb8
jmp 0x521936
jge 0x521bb8
xor eax, eax
push ebp
push 0x521b88
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x5219b6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x44]
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov eax, ebx
call fcn.0041ecbc
push 0
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
call fcn.0041ecbc
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x4c]
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
mov ecx, eax
mov edx, dword [ebx + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
call fcn.0041f410
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5219bd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
call fcn.00403f7c
ret
xor eax, eax
push ebp
push 0x521c2a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x44]
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov eax, ebx
call fcn.0041ecbc
push 0
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
call fcn.0041ecbc
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x4c]
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
mov ecx, eax
mov edx, dword [ebx + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
call fcn.0041f410
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x521c31
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
call fcn.00403f7c
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x521ff8
lea eax, [ebp - 0x23c]
mov edx, 3
call fcn.0040553c
lea eax, [ebp - 0x230]
call fcn.00404e08
lea eax, [ebp - 0x22c]
mov edx, 2
call fcn.0040553c
lea eax, [ebp - 0x224]
call fcn.00404e08
lea eax, [ebp - 0x220]
mov edx, 2
call fcn.0040553c
lea eax, [ebp - 0x218]
call fcn.00404e08
lea eax, [ebp - 0x214]
mov edx, 3
call fcn.0040553c
lea eax, [ebp - 0x208]
call fcn.00404e08
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.0040553c
lea eax, [ebp - 0x1fc]
call fcn.00404e08
lea eax, [ebp - 0x1f8]
mov edx, 2
call fcn.0040553c
lea eax, [ebp - 0x1f0]
call fcn.00404e08
lea eax, [ebp - 0x1ec]
mov edx, 3
call fcn.0040553c
lea eax, [ebp - 0x1e0]
mov edx, 0xb
call fcn.00404e2c
lea eax, [ebp - 0x1b4]
mov edx, 2
call fcn.0040553c
lea eax, [ebp - 0x1ac]
mov edx, 3
call fcn.00404e2c
lea eax, [ebp - 0x1a0]
mov edx, 0xf
call fcn.0040553c
lea eax, [ebp - 0x164]
mov edx, 3
call fcn.00404e2c
lea eax, [ebp - 0x158]
mov edx, 4
call fcn.0040553c
lea eax, [ebp - 0x148]
mov edx, 3
call fcn.00404e2c
lea eax, [ebp - 0x13c]
mov edx, 7
call fcn.0040553c
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.00404e2c
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00404e2c
lea eax, [ebp + 8]
call fcn.00405524
ret