Function at 0x526270
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x2b8]
cmp eax, dword [ecx + 8]
jbe 0x528ced
sub esp, 0x338
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov ecx, dword [esp + 0x340]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x344]
mov dword [esp + 8], edx
call fcn.00483910
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x34c]
mov edi, dword [esp + 0x354]
cmp esi, edi
jne 0x526384
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x358]
call fcn.0045fb14
call fcn.00528d00
movzx eax, byte [esp + 0x24]
test al, al
je 0x526326
xor eax, eax
xor ecx, ecx
jmp 0x526361
lea eax, [0x6671bb]
mov dword [esp + 0x1dc], eax
mov dword [esp + 0x1e0], 0x12
mov eax, dword [esp + 0x1dc]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, eax
lea eax, [0x6cf8f0]
mov edx, dword [esp + 0x354]
mov dword [esp + 0x370], edx
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], ecx
add esp, 0x338
ret
mov dword [esp + 0x120], eax
mov dword [esp + 0xe8], ecx
mov dword [esp + 0x11c], ebp
mov dword [esp + 0xe4], ebx
mov dword [esp + 0x68], edx
mov eax, dword [edx + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x14
je 0x5263b7
xor eax, eax
jmp 0x5263d3
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x6c]
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
sete al
test al, al
je 0x526b3e
mov eax, dword [esp + 0x348]
mov dword [esp], eax
mov ecx, dword [esp + 0x34c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x350]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x354]
mov dword [esp + 0xc], ebx
call fcn.00525810
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
movzx ebp, byte [esp + 0x1c]
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x120], edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], ecx
xchg ebp, eax
mov byte [esp + 0xc0], al
xchg ebp, eax
test esi, esi
jne 0x526b1b
mov dword [esp + 0x54], eax
mov dword [esp + 0xa8], esi
lea esi, [ecx + eax]
cmp eax, esi
jg 0x526ac2
mov dword [esp + 0xa4], ebx
mov ebx, dword [esp + 0x34c]
cmp ebx, esi
jl 0x526ac2
mov dword [esp + 0xa0], esi
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x526ab2
mov ebx, dword [esp + 0xa4]
test ebx, ebx
jne 0x526ab2
mov ebx, dword [esp + 0x350]
cmp ebx, esi
jb 0x528ce3
cmp eax, esi
ja 0x528cdc
mov dword [esp + 0x58], ecx
sub ebx, eax
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and ebx, eax
mov dword [esp + 0xa4], ebx
mov eax, esi
mov esi, dword [esp + 0x348]
add ebx, esi
cmp edx, 0x12
jg 0x526834
cmp edx, 4
jle 0x52662f
cmp edx, 6
je 0x5265c7
cmp edx, 0xc
je 0x52650d
cmp edx, 0x12
jne 0x52690e
xor edx, edx
jmp 0x528c24
mov dword [esp + 0xe0], ebx
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00465d00
movzx eax, byte [esp + 0xc]
test al, al
je 0x52655a
mov dword [esp], 0
mov eax, dword [esp + 0xe0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
jmp 0x526587
lea eax, [0x63c100]
mov dword [esp], eax
call fcn.0040b470
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x66b17e]
mov dword [eax], ecx
xor ecx, ecx
lea edx, [0x6cf47c]
mov ebx, eax
xor eax, eax
mov dword [esp + 0x100], ebx
mov dword [esp + 0x84], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408e30
mov eax, dword [esp + 8]
lea ecx, [0x634440]
mov edx, dword [esp + 0x84]
mov ebx, eax
mov edi, dword [esp + 0x100]
mov eax, dword [esp + 0xa0]
jmp 0x528b6b
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00524b20
mov eax, dword [esp + 0x18]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x120], ecx
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.00408eb0
mov eax, dword [esp + 0xc]
lea ecx, [0x640120]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x120]
mov eax, dword [esp + 0xa0]
jmp 0x528b6b
cmp edx, 2
je 0x5267d4
cmp edx, 3
jne 0x52678e
test ecx, ecx
je 0x5266e4
mov edx, dword [esp + 0xa4]
movzx edx, byte [edx + esi]
movzx esi, dl
cmp esi, 7
jg 0x52667c
cmp ecx, 1
jne 0x526665
test esi, esi
jne 0x52667c
movzx edi, byte [ecx + ebx - 1]
mov ecx, edx
mov eax, 1
shl eax, cl
dec eax
xchg edi, ebx
test al, bl
xchg edi, ebx
je 0x5266bf
lea eax, [0x66efaf]
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1b8], 0x22
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00408e30
mov eax, dword [esp + 8]
xor esi, esi
xor edx, edx
xor ecx, ecx
lea ebx, [0x6cf8f0]
xor ebp, ebp
jmp 0x526725
mov ecx, dword [esp + 0x58]
dec ecx
mov edx, ecx
shl ecx, 3
sub ecx, esi
dec ebp
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 1
add ebx, ebp
mov ebp, ebx
xor eax, eax
xor ebx, ebx
jmp 0x526725
lea eax, [0x669367]
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x1c0], 0x16
mov eax, dword [esp + 0x1bc]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.00408e30
mov eax, dword [esp + 8]
xor esi, esi
xor edx, edx
xor ecx, ecx
lea ebx, [0x6cf8f0]
xor ebp, ebp
mov dword [esp + 0xfc], eax
mov dword [esp + 0x80], ebx
mov dword [esp + 0x1ec], ebp
mov dword [esp + 0x1f0], edx
mov dword [esp + 0x1f4], esi
mov dword [esp + 0x1f8], ecx
lea ecx, [0x64cfc0]
mov dword [esp], ecx
lea edx, [esp + 0x1ec]
mov dword [esp + 4], edx
call fcn.00408be0
mov eax, dword [esp + 8]
lea ecx, [0x64cfc0]
mov edx, dword [esp + 0x80]
mov ebx, eax
mov edi, dword [esp + 0xfc]
mov eax, dword [esp + 0xa0]
jmp 0x528b6b
cmp edx, 4
jne 0x52690e
mov dword [esp + 0x118], edi
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00408eb0
mov eax, dword [esp + 0xc]
lea ecx, [0x62d820]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x118]
mov eax, dword [esp + 0xa0]
jmp 0x528b6b
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00524270
mov eax, dword [esp + 0x14]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x120], ecx
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
mov dword [esp + 4], edx
mov dword [esp], ebx
call fcn.00408d80
mov eax, dword [esp + 8]
lea ecx, [0x633cc0]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x120]
mov eax, dword [esp + 0xa0]
jmp 0x528b6b
cmp edx, 0x16
jg 0x5268fb
cmp edx, 0x13
je 0x52689b
cmp edx, 0x14
je 0x526857
cmp edx, 0x16
jne 0x52690e
xor edx, edx
jmp 0x528b77
mov dword [esp], 0
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408e30
mov eax, dword [esp + 8]
lea ecx, [0x634440]
xor edx, edx
mov ebx, eax
xor edi, edi
mov eax, dword [esp + 0xa0]
jmp 0x528b6b
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00525510
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa8], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x120], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408e30
mov eax, dword [esp + 8]
lea ecx, [0x634440]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x120]
mov eax, dword [esp + 0xa0]
jmp 0x528b6b
cmp edx, 0x17
je 0x526a18
cmp edx, 0x18
je 0x52697e
cmp edx, 0x1e
je 0x52691e
xor ecx, ecx
mov edx, dword [esp + 0xa8]
xor ebx, ebx
jmp 0x528b6b
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00525620
mov eax, dword [esp + 0x14]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x120], ecx
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00408e30
mov eax, dword [esp + 8]
lea ecx, [0x634440]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x120]
mov eax, dword [esp + 0xa0]
jmp 0x528b6b
lea edi, [esp + 0x224]
xor eax, eax
call fcn.0045f63b
mov dword [esp], ebx
mov ecx, dword [esp + 0x58]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.005252d0
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x120], edx
lea edi, [esp + 0x224]
lea esi, [esp + 0xc]
call fcn.0045fb1e
lea edi, [esp + 0x1fc]
lea esi, [esp + 0x224]
call fcn.0045fb1e
lea ecx, [0x65fe80]
mov dword [esp], ecx
lea ecx, [esp + 0x1fc]
mov dword [esp + 4], ecx
call fcn.00408be0
mov eax, dword [esp + 8]
lea ecx, [0x65fe80]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x120]
mov eax, dword [esp + 0xa0]
jmp 0x528b6b
lea edi, [esp + 0x224]
xor eax, eax
call fcn.0045f63b
mov dword [esp], ebx
mov ecx, dword [esp + 0x58]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00524f80
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x120], edx
lea edi, [esp + 0x224]
lea esi, [esp + 0xc]
call fcn.0045fb1e
lea edi, [esp + 0x210]
lea esi, [esp + 0x224]
call fcn.0045fb1e
lea ecx, [0x65fe80]
mov dword [esp], ecx
lea ecx, [esp + 0x210]
mov dword [esp + 4], ecx
call fcn.00408be0
mov eax, dword [esp + 8]
lea ecx, [0x65fe80]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x120]
mov eax, dword [esp + 0xa0]
jmp 0x528b6b
mov eax, dword [esp + 0xa8]
xor ecx, ecx
xor edx, edx
jmp 0x528a5e
lea eax, [0x665544]
mov dword [esp + 0x1d4], eax
mov dword [esp + 0x1d8], 0xe
mov eax, dword [esp + 0x1d4]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cf8f0]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edi
add esp, 0x338
ret
mov eax, dword [esp + 0x348]
mov dword [esp], eax
mov ecx, dword [esp + 0x34c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x350]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x354]
mov dword [esp + 0xc], ebx
call fcn.00525810
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x118], edx
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x18]
movzx esi, byte [esp + 0x1c]
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xb4], edi
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], ebp
xchg esi, eax
mov byte [esp + 0xc0], al
xchg esi, eax
test ecx, ecx
jne 0x5283d7
mov dword [esp + 0xa4], eax
movzx eax, byte [esp + 0x359]
test al, al
je 0x526f69
movzx eax, byte [esp + 0x35a]
test al, al
je 0x526be6
mov eax, 1
jmp 0x526beb
mov eax, 2
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x114], ebx
mov ecx, dword [esp + 0x34c]
mov ebx, dword [esp + 0xa4]
cmp ecx, ebx
je 0x526f0d
cmp eax, edi
jne 0x526e5c
mov eax, dword [esp + 0x360]
cmp dword [eax], edx
jne 0x526e5c
test ebp, ebp
je 0x526c34
xchg esi, eax
test al, al
xchg esi, eax
je 0x526e5c
mov eax, dword [0x826dac]
mov ecx, dword [esp + 0x11c]
cmp dword [0x826da8], ecx
jne 0x526cd5
mov dword [esp + 0xa0], edi
mov dword [esp + 0x9c], edx
xchg esi, eax
mov byte [esp + 0x43], al
xchg esi, eax
mov dword [esp + 0x98], ebp
mov dword [esp], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00403430
movzx eax, byte [esp + 0xc]
test al, al
je 0x526cbc
mov ebp, dword [esp + 0x98]
mov ecx, dword [esp + 0x9c]
mov ebx, dword [esp + 0xa0]
mov eax, dword [esp + 0xa4]
mov edx, dword [esp + 0xa8]
movzx esi, byte [esp + 0x43]
mov edi, dword [esp + 0x114]
jmp 0x526f8a
mov eax, dword [esp + 0x98]
test eax, eax
mov ecx, dword [esp + 0x11c]
mov ebx, dword [esp + 0xa4]
jmp 0x526cd7
test ebp, ebp
jg 0x526dc2
mov eax, dword [0x826d94]
cmp dword [0x826d90], ecx
jne 0x526d0b
mov dword [esp], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00403430
movzx eax, byte [esp + 0xc]
test al, al
jne 0x526d67
lea eax, [0x672876]
mov dword [esp + 0x1a4], eax
mov dword [esp + 0x1a8], 0x2d
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cf8dc]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.00483250
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x114]
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov eax, dword [esp + 0x348]
mov dword [esp], eax
mov ecx, dword [esp + 0x34c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x350]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.00525810
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x18]
movzx esi, byte [esp + 0x1c]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x118], edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], ebp
xchg esi, eax
mov byte [esp + 0xc0], al
xchg esi, eax
test edx, edx
je 0x526f8a
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edi
add esp, 0x338
ret
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x358]
call fcn.0045fb14
call fcn.00528d00
movzx eax, byte [esp + 0x24]
test al, al
je 0x526eb1
mov eax, dword [esp + 0x354]
mov ecx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x114]
jmp 0x526ef1
lea eax, [0x670145]
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], 0x25
mov eax, dword [esp + 0x19c]
mov dword [esp], eax
mov dword [esp + 4], 0x25
call fcn.00408e30
mov ebx, dword [esp + 8]
mov eax, dword [esp + 0xa4]
lea ecx, [0x6cf8dc]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
lea eax, [0x66a925]
mov dword [esp + 0x1ac], eax
mov dword [esp + 0x1b0], 0x19
mov eax, dword [esp + 0x1ac]
mov dword [esp], eax
mov dword [esp + 4], 0x19
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cf8dc]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov eax, dword [esp + 0xa4]
mov eax, ecx
mov ecx, edx
mov edx, eax
mov eax, dword [esp + 0xa4]
mov eax, ebx
mov ebx, edi
mov edi, eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x118], edi
mov dword [esp + 0xa8], edx
xchg esi, eax
mov byte [esp + 0x41], al
xchg esi, eax
mov dword [esp + 0x48], ebp
mov dword [esp + 0x44], ecx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], eax
mov edx, dword [esp + 0x120]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
call fcn.00529640
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp + 8]
movzx edx, byte [esp + 0x11]
movzx ebx, byte [esp + 0x10]
test dl, dl
je 0x528316
cmp eax, 0x13
jne 0x52703c
mov ebp, dword [esp + 0x4c]
test ebp, ebp
jne 0x527027
mov edx, ebx
mov ebx, dword [esp + 0x44]
cmp ebx, 0x14
jg 0x52700c
cmp ebx, 0xc
je 0x52701b
cmp ebx, 0x12
je 0x52701b
cmp ebx, 0x14
je 0x52701b
jmp 0x52701f
cmp ebx, 0x16
je 0x52701b
cmp ebx, 0x1b
je 0x52701b
cmp ebx, 0x1e
jne 0x52701f
mov eax, ebx
jmp 0x527048
mov ebx, eax
mov eax, dword [esp + 0x44]
jmp 0x527048
mov edx, ebx
mov ebx, dword [esp + 0x364]
test ebx, ebx
jne 0x527036
mov ebx, eax
mov eax, dword [esp + 0x44]
jmp 0x527048
mov edx, ebx
mov ebp, dword [esp + 0x4c]
mov ebx, eax
mov eax, dword [esp + 0x44]
cmp ebx, 0x17
jne 0x52705b
cmp eax, 0x18
jne 0x52705b
test ebp, ebp
jne 0x52705b
mov ebx, 0x18
mov esi, ebp
movzx ebp, byte [esp + 0x36c]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x527070
mov ebx, 0x11
mov byte [esp + 0x42], cl
movzx ebp, byte [esp + 0x359]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x5270b9
mov edi, ebx
mov ebx, dword [esp + 0x360]
test ebx, ebx
je 0x5270b3
mov ebx, dword [ebx]
xchg ebp, eax
test al, al
xchg ebp, eax
mov dword [esp + 0xac], eax
mov eax, 2
mov dword [esp + 0x70], eax
mov ecx, 0
mov eax, dword [esp + 0xac]
jmp 0x5270c6
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, edi
mov edi, ebx
mov ebx, 0
mov dword [esp + 0x70], ebx
mov ebx, edi
jne 0x527107
mov dword [esp + 0x6c], ebx
movzx ebx, byte [esp + 0x35a]
test bl, bl
je 0x5270ff
mov ebx, dword [esp + 0x360]
test ebx, ebx
je 0x5270f5
mov ebx, dword [ebx]
xchg ebp, eax
test al, al
xchg ebp, eax
mov ecx, 1
mov ebp, 0
jmp 0x52710d
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, dword [esp + 0x6c]
jmp 0x527107
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, dword [esp + 0x6c]
mov ebp, ecx
mov ecx, dword [esp + 0x70]
jne 0x527148
mov dword [esp + 0x94], ebx
movzx ebx, byte [esp + 0x35b]
test bl, bl
je 0x527141
mov ebx, dword [esp + 0x360]
test ebx, ebx
je 0x527138
mov ebx, dword [ebx]
xor ebp, ebp
mov ecx, 3
jmp 0x527148
mov ebx, dword [esp + 0x94]
jmp 0x527148
mov ebx, dword [esp + 0x94]
mov dword [esp + 0x6c], ebx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x527162
cmp ecx, esi
jne 0x5280e7
cmp ebx, eax
jne 0x5280e7
movzx ebp, byte [esp + 0x42]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x527174
movzx ebp, byte [esp + 0x41]
jmp 0x527183
movzx ebp, byte [esp + 0x41]
xchg ebp, eax
cmp al, dl
xchg ebp, eax
jne 0x5280e7
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x50]
lea esi, [ebp + ebx]
cmp ebp, esi
jg 0x52808e
mov ebx, dword [esp + 0x34c]
cmp ebx, esi
jl 0x52808e
mov ebx, dword [esp + 0x350]
cmp ebx, esi
jb 0x528a55
cmp ebp, esi
ja 0x528a4c
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa0], edi
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov ecx, dword [esp + 0x340]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x344]
mov dword [esp + 8], edx
call fcn.00480e70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.00482280
mov eax, dword [esp + 0x350]
mov ecx, dword [esp + 0x50]
mov edx, eax
sub eax, ecx
mov ebx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x348]
lea ebp, [eax + ecx]
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov dword [esp + 0xd8], edi
mov edi, dword [esp + 0x14]
mov dword [esp + 0xd4], edi
mov edi, dword [esp + 0x14]
mov dword [esp + 0xd0], edi
mov edi, dword [esp + 0x14]
mov dword [esp + 0xcc], edi
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
test esi, esi
je 0x52787c
mov edx, dword [esi + 8]
cmp edx, 0x4c618499
ja 0x52751f
cmp edx, 0x1c87085b
jne 0x527302
lea eax, [0x6283a0]
cmp edi, eax
jne 0x527875
mov dword [esp], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.005244e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
jne 0x5272df
mov ecx, dword [esp + 0xc8]
mov dword [ecx], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], edx
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
cmp edx, 0x26ca392d
jne 0x52749a
lea ecx, [0x660e60]
cmp edi, ecx
jne 0x527875
mov ecx, dword [esp + 0xa0]
cmp ecx, 0x17
jne 0x5273e3
lea edi, [esp + 0x224]
xor eax, eax
call fcn.0045f63b
mov dword [esp], ebp
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00524f80
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x120], ecx
mov edx, dword [esp + 0x24]
lea edi, [esp + 0x224]
lea esi, [esp + 0xc]
call fcn.0045fb1e
mov edi, dword [esp + 0xcc]
test byte [edi], al
mov ecx, dword [0x84e4b0]
test ecx, ecx
jne 0x52738e
lea esi, [esp + 0x224]
call fcn.0045fb1e
jmp 0x5273b9
mov dword [esp + 0x118], edx
lea eax, [0x65fe80]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x224]
mov dword [esp + 8], eax
call fcn.00410a60
mov edx, dword [esp + 0x118]
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edx
add esp, 0x338
ret
lea edi, [esp + 0x224]
xor eax, eax
call fcn.0045f63b
mov dword [esp], ebp
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.005252d0
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x120], ecx
mov edx, dword [esp + 0x24]
lea edi, [esp + 0x224]
lea esi, [esp + 0xc]
call fcn.0045fb1e
mov edi, dword [esp + 0xcc]
test byte [edi], al
mov ecx, dword [0x84e4b0]
test ecx, ecx
jne 0x527445
lea esi, [esp + 0x224]
call fcn.0045fb1e
jmp 0x527470
mov dword [esp + 0x118], edx
lea eax, [0x65fe80]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x224]
mov dword [esp + 8], eax
call fcn.00410a60
mov edx, dword [esp + 0x118]
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edx
add esp, 0x338
ret
cmp edx, 0x4c618499
jne 0x527875
lea eax, [0x63e5c0]
cmp edi, eax
jne 0x527875
mov dword [esp], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00524b20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0xd4]
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0x84e4b0]
test ecx, ecx
jne 0x5274f7
mov dword [edi], eax
jmp 0x5274fc
call fcn.0045f3a0
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], ebx
mov dword [esp + 0x378], ebp
add esp, 0x338
ret
cmp edx, 0x7418f6b4
ja 0x5275fd
cmp edx, 0x4d10f6f9
jne 0x527575
lea ecx, [0x6283e0]
cmp edi, ecx
jne 0x527875
mov byte [eax], 1
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x378], eax
add esp, 0x338
ret
cmp edx, 0x7418f6b4
jne 0x527875
lea eax, [0x627160]
cmp edi, eax
jne 0x527875
mov dword [esp + 0xc4], ecx
mov dword [esp], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00524690
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
jne 0x5275da
mov edi, dword [esp + 0xc4]
test byte [edi], al
mov ecx, dword [0x84e4b0]
test ecx, ecx
jne 0x5275d5
mov dword [edi], eax
jmp 0x5275da
call fcn.0045f3a0
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], edx
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
cmp edx, 0x8faab972
jne 0x527722
lea edx, [0x628460]
cmp edi, edx
jne 0x527875
mov eax, dword [esp + 0x354]
mov ecx, dword [esp + 0xa4]
cmp eax, ecx
ja 0x528a47
lea edi, [esp + 0x250]
mov edx, eax
xor eax, eax
call fcn.0045f637
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x250], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x254], ecx
movzx ecx, byte [esp + 0x41]
mov byte [esp + 0x258], cl
mov dword [esp + 0x25c], ebp
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], ebx
mov ecx, dword [esp + 0x350]
sub ecx, edx
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, edx
mov ebp, dword [esp + 0x348]
add ecx, ebp
mov dword [esp + 0x268], ecx
mov ecx, dword [esp + 0xa4]
mov ebp, ecx
sub ecx, edx
mov dword [esp + 0x26c], ecx
mov dword [esp + 0x270], ebx
mov edi, dword [esp + 0xd8]
test byte [edi], al
mov ecx, dword [0x84e4b0]
test ecx, ecx
jne 0x5276d4
lea esi, [esp + 0x250]
call fcn.0045faf6
jmp 0x5276f8
lea eax, [0x64d8c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x250]
mov dword [esp + 8], eax
call fcn.00410a60
mov ebp, dword [esp + 0xa4]
mov dword [esp + 0x370], ebp
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x378], eax
add esp, 0x338
ret
cmp edx, 0xeb2625b9
jne 0x527875
lea edx, [0x63e560]
cmp edi, edx
jne 0x527875
mov edx, dword [esp + 0x48]
test edx, edx
je 0x5277e8
mov esi, dword [esp + 0x348]
mov eax, ebx
mov ebx, dword [esp + 0x9c]
movzx ecx, byte [ebx + esi]
movzx ebx, cl
cmp ebx, 7
jg 0x527786
cmp edx, 1
jne 0x52776d
test ebx, ebx
jne 0x527786
movzx esi, byte [edx + ebp - 1]
mov edi, ebp
mov ebp, 1
shl ebp, cl
dec ebp
xchg esi, eax
xchg ebp, ebx
test bl, al
xchg ebp, ebx
xchg esi, eax
je 0x5277c9
lea eax, [0x66efaf]
mov dword [esp + 0x174], eax
mov dword [esp + 0x178], 0x22
mov eax, dword [esp + 0x174]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00408e30
mov eax, dword [esp + 8]
xor ebx, ebx
xor ebp, ebp
xor edx, edx
xor ecx, ecx
lea esi, [0x6cf8f0]
jmp 0x527829
lea ecx, [edx - 1]
mov edx, ecx
shl ecx, 3
sub ecx, ebx
lea ebx, [eax - 1]
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
add ebx, edi
xor esi, esi
xor eax, eax
jmp 0x527829
lea eax, [0x669367]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], 0x16
mov eax, dword [esp + 0x17c]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.00408e30
mov eax, dword [esp + 8]
xor ebx, ebx
xor ebp, ebp
xor edx, edx
xor ecx, ecx
lea esi, [0x6cf8f0]
mov edi, dword [esp + 0xd0]
mov dword [edi + 4], edx
mov dword [edi + 8], ebp
mov dword [edi + 0xc], ecx
mov ecx, dword [0x84e4b0]
test ecx, ecx
jne 0x527847
mov dword [edi], ebx
jmp 0x527852
mov ecx, eax
mov eax, ebx
call fcn.0045f3a0
mov eax, ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x370], ecx
mov dword [esp + 0x374], esi
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov edx, dword [esp + 0x350]
mov dword [esp + 0x98], ebx
mov dword [esp + 0xdc], ebp
nop
mov eax, dword [esp + 0x344]
mov ecx, eax
and eax, 0x1f
cmp eax, 6
jbe 0x527d55
cmp eax, 0x17
je 0x527ae2
cmp eax, 0x18
jne 0x527ad2
mov eax, dword [esp + 0xa0]
cmp eax, 0x13
jg 0x527988
cmp eax, 0xc
je 0x527909
cmp eax, 0x12
jne 0x5278d7
mov eax, dword [esp + 0x48]
xor edx, edx
jmp 0x5289c4
cmp eax, 0x13
jne 0x5279dd
mov dword [esp], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00525510
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
jmp 0x5288da
mov dword [esp], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00465d00
movzx eax, byte [esp + 0xc]
test al, al
je 0x527956
mov dword [esp], 0
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
jmp 0x5288da
lea eax, [0x63c100]
mov dword [esp], eax
call fcn.0040b470
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x66b17e]
mov dword [eax], ecx
xor ecx, ecx
lea edx, [0x6cf47c]
mov ebx, eax
xor eax, eax
jmp 0x5288da
cmp eax, 0x16
jg 0x5279cb
cmp eax, 0x14
je 0x5279a2
cmp eax, 0x16
jne 0x5279dd
mov eax, dword [esp + 0x48]
xor edx, edx
jmp 0x52894b
mov dword [esp], 0
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
jmp 0x5288da
cmp eax, 0x1b
je 0x527aa9
cmp eax, 0x1e
je 0x527a80
mov dword [esp + 0x1e4], 0
mov dword [esp + 0x1e8], 0
mov dword [esp], eax
call fcn.00408d20
mov eax, dword [esp + 4]
lea ecx, [0x633c00]
mov dword [esp + 0x1e4], ecx
mov dword [esp + 0x1e8], eax
lea eax, [0x67071f]
mov dword [esp], eax
mov dword [esp + 4], 0x26
lea eax, [esp + 0x1e4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004b51d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
mov ecx, dword [esp + 0x144]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408e30
mov ebx, dword [esp + 8]
lea edx, [0x6cf8f0]
xor ecx, ecx
xor eax, eax
jmp 0x5288da
mov dword [esp], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00525620
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
jmp 0x5288da
mov dword [esp], 0
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
jmp 0x5288da
cmp eax, 0x19
jne 0x527fd9
xor eax, eax
jmp 0x528401
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x527c6e
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call fcn.00484050
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x33c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x340]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x344]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00483140
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
call fcn.00408eb0
mov eax, dword [esp + 0xc]
nop
movzx ecx, byte [0x827438]
test cl, cl
je 0x527bd0
lea ecx, [0x62d820]
mov dword [0x82743c], ecx
mov edx, dword [0x84e4b0]
test edx, edx
jne 0x527bc3
mov dword [0x827440], eax
jmp 0x527bd6
lea edi, [0x827440]
call fcn.0045f3a0
jmp 0x527bd6
lea ecx, [0x62d820]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], eax
mov ecx, dword [esp + 0x124]
test ecx, ecx
je 0x527c06
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x527c0c
or edx, 0x80
jmp 0x527c0c
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x33c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x340]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x344]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00483d30
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xe8]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xdc]
mov dword [esp], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x98]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x120]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00525e20
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
test ebx, ebx
jne 0x527d32
mov dword [esp + 0x120], ebp
mov dword [esp + 0xec], esi
mov ebx, dword [esp + 0x33c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x340]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x344]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00483140
mov ebp, dword [esp + 0x120]
mov esi, dword [esp + 0xec]
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], ebp
mov dword [esp + 0x378], esi
add esp, 0x338
ret
cmp eax, 1
jne 0x527e82
mov eax, dword [esp + 0x48]
cmp eax, 1
jne 0x527de1
mov eax, dword [esp + 0x348]
mov edx, dword [esp + 0x9c]
movzx eax, byte [edx + eax]
test al, al
jne 0x527d88
xor eax, eax
xor edx, edx
xor ebx, ebx
jmp 0x527e23
cmp al, 0xff
jne 0x527d9b
mov eax, 1
xor edx, edx
xor ebx, ebx
jmp 0x527e23
lea eax, [0x665bba]
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], 0xf
mov eax, dword [esp + 0x164]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x344]
lea edx, [0x6cf8f0]
mov ebx, eax
xor eax, eax
jmp 0x527e23
lea eax, [0x665bba]
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], 0xf
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00408e30
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 0x344]
lea edx, [0x6cf8f0]
xor eax, eax
test edx, edx
jne 0x527e5f
mov dword [esp + 0xf8], ebx
mov dword [esp + 0x7c], edx
mov edx, dword [esp + 0x33c]
mov dword [esp], edx
mov edx, dword [esp + 0x340]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov byte [esp + 0xc], al
call fcn.00483250
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0xf8]
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], edx
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
cmp eax, 2
je 0x527e90
cmp eax, 5
jb 0x527fd9
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov edx, dword [esp + 0x340]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00483910
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x7c]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 4
jne 0x527f49
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
call fcn.005244e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test ecx, ecx
jne 0x527fb6
mov dword [esp + 0xf4], edx
mov dword [esp + 0x78], ecx
mov ecx, dword [esp + 0x33c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x340]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x344]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.00483310
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0xf4]
jmp 0x527fb6
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
call fcn.00524270
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
test eax, eax
jne 0x527fb2
mov dword [esp + 0xf0], ecx
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 8], eax
call fcn.00483310
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0xf0]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], edx
add esp, 0x338
ret
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00483910
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x665122]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xd
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044b990
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], eax
mov ecx, dword [esp + 0x13c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cf8dc]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
lea eax, [0x665544]
mov dword [esp + 0x184], eax
mov dword [esp + 0x188], 0xe
mov eax, dword [esp + 0x184]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cf8f0]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x358]
call fcn.0045fb14
call fcn.00528d00
movzx eax, byte [esp + 0x24]
test al, al
je 0x52813f
mov eax, dword [esp + 0x354]
mov ecx, dword [esp + 0xa8]
mov edi, dword [esp + 0x118]
jmp 0x5282fa
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0xbc], eax
movzx eax, byte [esp + 0x41]
mov byte [esp + 0xc0], al
lea edi, [esp + 0x238]
lea esi, [esp + 0x358]
call fcn.0045fb14
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0x60]
mov ecx, dword [esp + 0xe8]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0x120], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0xa4], ecx
lea edi, [esp + 0x274]
xor eax, eax
call fcn.0045f636
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
call fcn.00408d20
mov eax, dword [esp + 4]
lea ecx, [0x633c00]
mov dword [esp + 0x274], ecx
mov dword [esp + 0x278], eax
lea eax, [0x64a560]
mov dword [esp], eax
lea edx, [esp + 0xb4]
mov dword [esp + 4], edx
call fcn.00408c40
mov eax, dword [esp + 8]
lea ecx, [0x64a560]
mov dword [esp + 0x27c], ecx
mov dword [esp + 0x280], eax
lea eax, [0x654f20]
mov dword [esp], eax
lea ecx, [esp + 0x238]
mov dword [esp + 4], ecx
call fcn.00408be0
mov eax, dword [esp + 8]
lea ecx, [0x654f20]
mov dword [esp + 0x284], ecx
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
call fcn.00408e30
mov eax, dword [esp + 8]
lea ecx, [0x634440]
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00408d20
mov eax, dword [esp + 4]
lea ecx, [0x633c00]
mov dword [esp + 0x294], ecx
mov dword [esp + 0x298], eax
lea eax, [0x670caf]
mov dword [esp], eax
mov dword [esp + 4], 0x27
lea eax, [esp + 0x274]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 5
mov dword [esp + 0x10], 5
call fcn.004b51d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
mov ecx, dword [esp + 0x18c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408e30
mov edi, dword [esp + 8]
mov eax, dword [esp + 0x50]
lea ecx, [0x6cf8dc]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], edi
add esp, 0x338
ret
mov dword [esp + 0x1e4], 0
mov dword [esp + 0x1e8], 0
mov eax, dword [esp + 0x11c]
test eax, eax
je 0x52833c
mov ebp, dword [eax + 4]
jmp 0x52833e
mov ebp, eax
mov dword [esp + 0x1e4], ebp
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x1e8], eax
lea eax, [0x667afa]
mov dword [esp], eax
mov dword [esp + 4], 0x13
lea eax, [esp + 0x1e4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004b51d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x198], eax
mov ecx, dword [esp + 0x194]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cf8dc]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
mov ecx, dword [esp + 0x64]
lea eax, [ecx + 1]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx + 0x64]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 0x64]
cmp dword [esp + 4], eax
jle 0x5284c7
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x304]
lea esi, [esp + 8]
call fcn.0045face
lea edi, [esp + 0x2d0]
lea esi, [esp + 0x304]
call fcn.0045face
mov eax, dword [esp + 0x2dc]
test eax, eax
je 0x5283fa
lea eax, [0x66ea2c]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], 0x21
mov eax, dword [esp + 0x15c]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cf8dc]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x64]
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
jg 0x5284e6
xor eax, eax
jmp 0x528546
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
mov dword [esp + 4], 0
call ecx
lea edi, [esp + 0x304]
lea esi, [esp + 8]
call fcn.0045face
mov eax, dword [esp + 0x314]
mov ecx, dword [esp + 0x318]
mov edx, dword [0x826da4]
cmp dword [0x826da0], eax
je 0x528531
xor eax, eax
jmp 0x528546
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00403430
movzx eax, byte [esp + 0xc]
test al, al
je 0x528695
mov eax, dword [esp + 0x354]
mov ecx, dword [esp + 0xa4]
cmp eax, ecx
ja 0x5288d5
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov ecx, dword [esp + 0x340]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x344]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.00481fe0
mov eax, dword [esp + 0x350]
mov ecx, dword [esp + 0x354]
sub eax, ecx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x348]
add eax, ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x110], ebx
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x10c], ebp
mov esi, dword [esp + 0x18]
mov dword [esp + 0x90], esi
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
sub eax, ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00408eb0
mov eax, dword [esp + 0xc]
nop
movzx ecx, byte [0x827438]
test cl, cl
je 0x528628
lea ecx, [0x634900]
mov dword [0x82743c], ecx
mov edx, dword [0x84e4b0]
test edx, edx
jne 0x52861b
mov dword [0x827440], eax
jmp 0x52862e
lea edi, [0x827440]
call fcn.0045f3a0
jmp 0x52862e
lea ecx, [0x634900]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], eax
mov ecx, dword [esp + 0x12c]
test ecx, ecx
je 0x52865e
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x528664
or edx, 0x80
jmp 0x528664
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x110]
mov dword [esp], ebx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x90]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00483140
xor eax, eax
xor ecx, ecx
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x118]
jmp 0x5286b4
mov ebp, dword [esp + 0x60]
inc ebp
mov edx, ecx
mov ecx, eax
mov eax, ebp
mov dword [esp + 0x120], ebx
mov dword [esp + 0xa8], edx
mov dword [esp + 0x60], eax
mov dword [esp + 0x5c], ecx
mov ebp, dword [esp + 0x68]
mov esi, dword [ebp + 0x64]
mov edi, dword [esp + 0xe8]
mov dword [esp], edi
call esi
mov eax, dword [esp + 0x60]
cmp dword [esp + 4], eax
jle 0x5288a4
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x29c]
lea esi, [esp + 8]
call fcn.0045face
mov eax, dword [esp + 0x60]
test eax, eax
jne 0x528757
mov ecx, dword [esp + 0x2ac]
mov edx, dword [esp + 0x2b0]
mov ebx, dword [0x826da4]
cmp dword [0x826da0], ecx
je 0x52873a
xor ecx, ecx
jmp 0x528759
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.00403430
movzx eax, byte [esp + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x60]
jmp 0x528759
xor ecx, ecx
test cl, cl
je 0x528774
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x120]
jmp 0x5286a9
mov ecx, dword [esp + 0x33c]
mov dword [esp], ecx
mov edx, dword [esp + 0x340]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x344]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00481fe0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x110], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x90], edx
mov ebx, dword [esp + 0x2b4]
mov ebp, dword [esp + 0x2b8]
mov dword [esp], ebx
mov dword [esp + 4], ebp
lea ebx, [0x662917]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 4
call fcn.0047e5c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00529180
lea edi, [esp + 0x238]
lea esi, [esp + 8]
call fcn.0045fb14
mov eax, dword [esp + 0x110]
mov dword [esp], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x98]
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 0x18], ebx
lea edi, [esp + 0x1c]
lea esi, [esp + 0x238]
call fcn.0045fb14
call fcn.00526270
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
test ecx, ecx
je 0x5286a9
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], edx
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x378], eax
add esp, 0x338
ret
call fcn.0045f480
test edx, edx
jne 0x528927
mov dword [esp + 0x120], ebx
mov dword [esp + 0xa8], edx
mov edx, dword [esp + 0x33c]
mov dword [esp], edx
mov edx, dword [esp + 0x340]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x344]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00483500
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x120]
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], edx
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
inc edx
cmp edx, eax
jge 0x528996
lea ebx, [edx + ebp]
cmp byte [ebx], 0x80
jb 0x52894a
lea eax, [0x66f954]
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], 0x24
mov eax, dword [esp + 0x14c]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.00408e30
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x6cf8f0]
xor ebx, ebx
jmp 0x5289b8
mov dword [esp], 0
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov ebp, eax
mov eax, ebx
mov ebx, ebp
jmp 0x5288da
inc edx
cmp edx, eax
jge 0x528a1a
movzx ebx, byte [edx + ebp]
lea esi, [ebx - 0x30]
xchg esi, eax
cmp al, 9
xchg esi, eax
jbe 0x5289c3
cmp bl, 0x20
je 0x5289c3
lea eax, [0x670ed6]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], 0x28
mov eax, dword [esp + 0x154]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.00408e30
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x6cf8f0]
xor ebx, ebx
jmp 0x528a3c
mov dword [esp], 0
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov ebp, eax
mov eax, ebx
mov ebx, ebp
jmp 0x5288da
call fcn.0045f480
mov eax, ebp
mov ecx, esi
call fcn.0045f480
mov ecx, esi
mov edx, ebx
call fcn.0045f460
test eax, eax
jne 0x528b4f
test ecx, ecx
je 0x528b33
nop
movzx ebx, byte [0x827438]
test bl, bl
je 0x528aa7
mov dword [0x82743c], ecx
mov ebx, dword [0x84e4b0]
test ebx, ebx
jne 0x528a92
mov dword [0x827440], edx
jmp 0x528aa7
mov ebx, edi
lea edi, [0x827440]
mov ebp, eax
mov eax, edx
call fcn.0045f3a0
mov eax, ebp
mov edi, ebx
mov dword [esp + 0xa8], eax
mov dword [esp + 0x120], edi
mov dword [esp + 0x134], ecx
mov dword [esp + 0x138], edx
mov ecx, dword [esp + 0x134]
test ecx, ecx
je 0x528ae7
nop
movzx ebx, byte [ecx + 0xf]
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x528aed
or ebx, 0x80
jmp 0x528aed
xor ebx, ebx
xor ecx, ecx
xor edx, edx
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.00483140
mov eax, dword [esp + 0xa8]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x120]
mov dword [esp + 0x370], esi
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edi
add esp, 0x338
ret
mov dword [esp + 0x370], esi
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edi
add esp, 0x338
ret
mov esi, eax
mov eax, edx
mov edx, ebx
jmp 0x528a5e
inc edx
cmp edx, ecx
jge 0x528bc3
lea ebp, [edx + ebx]
cmp byte [ebp], 0x80
jb 0x528b76
lea eax, [0x66f954]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], 0x24
mov eax, dword [esp + 0x1c4]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.00408e30
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x6cf8f0]
xor ebx, ebx
jmp 0x528be5
mov dword [esp], 0
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov dword [esp + 0x104], eax
mov dword [esp + 0x88], edx
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00408e30
mov ebx, dword [esp + 8]
mov eax, dword [esp + 0xa0]
lea ecx, [0x634440]
mov edx, dword [esp + 0x88]
mov edi, dword [esp + 0x104]
jmp 0x528b6b
inc edx
cmp edx, ecx
jge 0x528c7c
movzx ebp, byte [edx + ebx]
lea esi, [ebp - 0x30]
xchg esi, eax
cmp al, 9
xchg esi, eax
jbe 0x528c23
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x528c23
lea eax, [0x670ed6]
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], 0x28
mov eax, dword [esp + 0x1cc]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.00408e30
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x6cf8f0]
xor ebx, ebx
jmp 0x528c9e
mov dword [esp], 0
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov dword [esp + 0x108], eax
mov dword [esp + 0x8c], edx
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00408e30
mov ebx, dword [esp + 8]
mov eax, dword [esp + 0xa0]
lea ecx, [0x634440]
mov edx, dword [esp + 0x8c]
mov edi, dword [esp + 0x108]
jmp 0x528b6b
mov ecx, esi
call fcn.0045f480
mov ecx, esi
mov edx, ebx
call fcn.0045f460
nop
call fcn.0045df90
jmp fcn.00526270