Function at 0x522110
Capabilities:
Encode data using xor
Encrypt data using speck

Disassembly:
sub esp, 0x30
cmp dword [esp + 0x48], 0
mov ecx, dword [esp + 0x44]
push ebx
push ebp
mov ebp, dword [esp + 0x3c]
mov ebx, 1
push esi
push edi
mov edi, dword [esp + 0x48]
lea esi, [ebp + 8]
mov edx, dword [edi]
mov dword [esp + 0x24], edx
je 0x522148
mov ecx, dword [esp + 0x58]
mov eax, dword [ebp + 0x108]
mov dword [ecx], eax
mov ecx, dword [esp + 0x54]
cmp dword [ebp + 0x5c], 0
jge 0x522158
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x30
ret
mov eax, dword [esp + 0x50]
mov eax, dword [eax]
test eax, eax
je 0x522181
test ecx, ecx
je 0x52216b
cmp dword [ecx], 0
jne 0x522181
sub edx, dword [edi]
push edx
push 0xffffffffffffffec
push ebp
call fcn.00527740
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret
xor edx, edx
test eax, eax
mov eax, dword [ebp + 0x30]
cmovne edx, ecx
mov dword [esp + 0x20], edx
test eax, eax
jne 0x5221df
mov ecx, dword [esp + 0x4c]
mov eax, dword [edi]
mov ecx, dword [ecx]
mov dword [esi + 8], ecx
test eax, eax
jne 0x5221b6
lea eax, [esi + 0x10]
mov dword [eax], ecx
mov dword [esp + 0x10], eax
lea eax, [esi + 0xc]
mov dword [esp + 0x14], eax
mov dword [eax], ecx
jmp case.default.0x522326
lea edi, [esi + 0x10]
lea edx, [ecx + eax]
mov dword [esp + 0x10], edi
lea edi, [esi + 0xc]
mov dword [esi + 0x10], edx
inc eax
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x48]
cmp eax, 0x1c
jbe 0x522221
mov eax, dword [esp + 0x14]
lea ecx, [edx - 0x1b]
mov dword [eax], ecx
jmp case.default.0x522326
lea ecx, [ebp + 0x28]
mov ebx, 2
lea edi, [esi + 0x10]
mov dword [esi + 8], ecx
lea edx, [ecx + eax]
mov dword [esp + 0x10], edi
lea edi, [esi + 0xc]
mov dword [esi + 0x10], edx
inc eax
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x48]
cmp eax, 0x1c
jbe 0x522213
mov eax, dword [esp + 0x14]
lea ecx, [edx - 0x1b]
mov dword [eax], ecx
jmp case.default.0x522326
lea eax, [esi + 0xc]
mov dword [esp + 0x14], eax
lea eax, [esi + 0x10]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
mov dword [eax], ecx
jmp case.default.0x522326
mov ebx, 2
nop
mov edi, dword [esp + 0x48]
cmp ebx, 1
je 0x52231a
cmp ebx, 2
jne 0x5230ad
cmp dword [ebp + 0x64], 0
je 0x52226b
push 1
push dword [esp + 0x5c]
push dword [esp + 0x28]
push dword [esp + 0x5c]
push ebp
call fcn.00527910
add esp, 0x14
test eax, eax
js 0x52307f
mov ecx, dword [ebp + 0x30]
mov eax, dword [esi + 8]
test ecx, ecx
je 0x523083
mov edx, dword [esp + 0x10]
cmp eax, dword [edx]
jne 0x5222c5
mov ecx, dword [esp + 0x4c]
mov ebx, 1
mov dword [ebp + 0x30], 0
mov eax, dword [edi]
mov ecx, dword [ecx]
mov dword [esi + 8], ecx
test eax, eax
jne 0x5222a6
mov eax, dword [esp + 0x14]
mov dword [edx], ecx
mov dword [eax], ecx
jmp 0x52231a
mov ebp, dword [esp + 0x10]
lea edx, [ecx + eax]
inc eax
mov dword [ebp], edx
mov ebp, dword [esp + 0x44]
cmp eax, 0x1c
jbe 0x5222bd
lea ecx, [edx - 0x1b]
mov eax, dword [esp + 0x14]
mov dword [eax], ecx
jmp 0x52231a
cmp dword [edi], 0
je 0x523066
mov eax, dword [esp + 0x4c]
lea edi, [ebp + 0x28]
mov ebx, 1
mov eax, dword [eax]
mov al, byte [eax]
mov byte [ecx + ebp + 0x28], al
mov eax, edi
add dword [ebp + 0x30], ebx
mov edx, dword [ebp + 0x30]
mov dword [esi + 8], edi
mov esi, dword [esp + 0x10]
lea ecx, [edi + edx]
cmovne eax, ecx
add ecx, 0xffffffe5
mov dword [esi], eax
lea eax, [edx + 1]
cmp eax, 0x1c
lea esi, [ebp + 8]
mov eax, dword [esp + 0x14]
cmovbe ecx, edi
mov edi, dword [esp + 0x48]
mov dword [eax], ecx
mov eax, dword [esp + 0x4c]
inc dword [eax]
dec dword [edi]
mov eax, dword [ebp]
cmp eax, 0x1a
ja case.default.0x522326
jmp dword [eax*4 + 0x52314c]
push esi
call fcn.00527b40
add esp, 4
test eax, eax
jne 0x522342
lea ebx, [eax + 2]
jmp case.default.0x522326
mov ebx, dword [ebp + 0x24c]
mov eax, ebx
and eax, 0xffffffdf
mov dword [ebp + 0x24c], eax
mov edx, dword [esi]
mov ecx, edx
and ecx, dword [0x59ce0c]
mov eax, dword [esi + 4]
dec eax
shr edx, 1
mov dword [esi + 4], eax
mov dword [esi], edx
test ecx, ecx
jne 0x522383
mov ecx, dword [ebp + 0x24c]
and ecx, 0xfffff43f
or ecx, 0x400
jmp 0x522427
mov ecx, edx
add eax, 0xfffffffd
and ecx, dword [0x59ce14]
shr edx, 3
mov dword [esi + 4], eax
mov dword [esi], edx
test ecx, ecx
je 0x5223b2
mov eax, dword [ebp + 0x24c]
add ecx, 0x11
shl ecx, 6
xor ecx, eax
and ecx, 0xfc0
xor ecx, eax
jmp 0x522427
mov ecx, edx
add eax, 0xfffffffd
and ecx, dword [0x59ce14]
shr edx, 3
mov dword [esi + 4], eax
mov dword [esi], edx
cmp ecx, 1
jne 0x5223fd
test bl, 0x20
je 0x5223e4
mov ecx, edx
dec eax
and ecx, dword [0x59ce0c]
shr edx, 1
mov dword [esi + 4], eax
mov dword [esi], edx
cmp ecx, 1
jne 0x5223ee
mov ebx, 0xfffffff3
jmp case.default.0x522326
or dword [ebp + 0x24c], 0x20
mov ecx, dword [ebp + 0x24c]
jmp 0x52242d
mov eax, dword [ebp + 0x24c]
test ecx, ecx
je 0x522419
add ecx, 8
shl ecx, 6
xor ecx, eax
and ecx, 0xfc0
xor ecx, eax
jmp 0x522427
mov ecx, eax
and ecx, 0xfffff47f
or ecx, 0x440
mov dword [ebp + 0x24c], ecx
and cl, 0x20
mov ebx, 1
movzx eax, cl
neg eax
sbb eax, eax
add eax, 2
mov dword [ebp], eax
jmp case.default.0x522326
mov edi, dword [esi + 4]
cmp edi, 6
jae 0x52247a
mov eax, dword [esp + 0x10]
mov ebx, dword [eax]
mov edx, dword [esi + 8]
cmp edx, ebx
je 0x522229
movzx eax, byte [edx]
mov ecx, edi
shl eax, cl
add edi, 8
or dword [esi], eax
lea eax, [edx + 1]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
cmp edi, 6
jb 0x522455
mov ecx, dword [esi]
lea eax, [edi - 6]
mov edx, ecx
shr ecx, 6
and edx, dword [0x59ce20]
mov dword [esi], ecx
mov ecx, edx
shl ecx, 6
and edx, 0x3f
mov dword [esi + 4], eax
sub edx, 0xa
mov eax, dword [ebp + 0x24c]
xor ecx, eax
and ecx, 0xfc0
xor ecx, eax
mov dword [ebp + 0x24c], ecx
cmp edx, 0x14
ja 0x5224fb
mov edi, dword [esp + 0x48]
mov dword [ebp], 2
mov ecx, dword [ebp + 0x24c]
mov eax, 1
shr ecx, 6
and ecx, 0x3f
shl eax, cl
sub eax, 0x10
push 0x3030
push dword [ebp + 0x24]
mov dword [ebp + 0x38], eax
mov eax, dword [ebp + 0x1c]
call eax
add esp, 8
mov dword [ebp + 0xac], eax
test eax, eax
jne 0x522505
lea ebx, [eax - 0x1e]
jmp case.default.0x522326
mov ebx, 0xfffffff3
jmp 0x522230
add eax, 0x1da0
mov dword [ebp], 3
mov dword [ebp + 0xb0], eax
push ebp
call fcn.005286d0
add esp, 4
mov dword [ebp], 4
push esi
push ebp
call fcn.00524030
mov ebx, eax
add esp, 8
cmp ebx, 1
jne 0x52223d
test byte [ebp + 0x24c], 6
lea edi, [ebp + 0x24c]
je 0x5225af
mov edx, dword [esi + 4]
mov ecx, edx
mov dword [esp + 0x28], 0
and ecx, 7
je 0x522585
mov ebp, dword [ecx*4 + 0x59ce08]
sub edx, ecx
mov eax, dword [esi]
and ebp, eax
mov dword [esp + 0x28], ebp
mov ebp, dword [esp + 0x44]
shr eax, cl
mov dword [esi], eax
mov dword [esi + 4], edx
lea eax, [ebp + 0x24c]
mov dword [esp + 0x2c], eax
jmp 0x522589
mov dword [esp + 0x2c], edi
cmp edx, 0x20
jae 0x52259e
mov edi, dword [esp + 0x2c]
mov eax, 1
mov ecx, edx
shl eax, cl
dec eax
and dword [esi], eax
cmp dword [esp + 0x28], 0
je 0x5225af
mov ebx, 0xfffffff2
jmp 0x522230
test byte [edi], 4
je 0x5225e0
mov eax, dword [ebp + 0x220]
mov edi, dword [esp + 0x48]
mov dword [ebp], 0xc
test eax, eax
je case.default.0x522326
push dword [ebp + 0x60]
push dword [ebp + 0x228]
call eax
add esp, 8
jmp case.default.0x522326
cmp dword [ebp + 0x60], 0
jne 0x5225f2
mov dword [ebp], 0xe
jmp 0x522230
push ebp
call fcn.00522020
add esp, 4
test byte [edi], 2
mov edi, dword [esp + 0x48]
je case.0x522326.17
mov dword [ebp], 0xb
jmp case.default.0x522326
mov dword [ebp + 4], 0
lea eax, [ebp + 0x34c]
mov dword [ebp + 0x290], 0
mov dword [ebp + 0x328], eax
mov dword [ebp + 0x28c], 0
mov dword [ebp + 0x284], 0
mov dword [ebp + 0x288], 0
mov dword [ebp], 0x12
mov eax, dword [ebp + 4]
cmp eax, 3
jl 0x522666
mov dword [ebp], 5
jmp case.default.0x522326
lea eax, [eax*4 + 0xcc]
add eax, ebp
push eax
push esi
push ebp
call fcn.005245d0
mov ebx, eax
add esp, 0xc
cmp ebx, 1
jne 0x52223d
mov eax, dword [ebp + 4]
inc dword [ebp + eax*4 + 0xcc]
mov eax, dword [ebp + 4]
cmp dword [ebp + eax*4 + 0xcc], 2
jae 0x5226a5
inc eax
mov dword [ebp + 4], eax
jmp case.default.0x522326
mov dword [ebp], 0x13
mov eax, dword [ebp + 4]
push ebp
push 0
mov ecx, dword [ebp + eax*4 + 0xcc]
imul eax, eax, 0x9e0
add ecx, 2
add eax, dword [ebp + 0xac]
push eax
push ecx
push ecx
call fcn.005256b0
mov ebx, eax
add esp, 0x14
cmp ebx, 1
jne 0x52223d
mov dword [ebp], 0x14
imul eax, dword [ebp + 4], 0x630
push ebp
push 0
add eax, dword [ebp + 0xb0]
push eax
push 0x1a
push 0x1a
call fcn.005256b0
mov ebx, eax
add esp, 0x14
cmp ebx, 1
jne 0x52223d
mov dword [ebp], 0x15
mov eax, dword [ebp + 4]
imul ecx, eax, 0x630
lea eax, [eax*4 + 0xbc]
add eax, ebp
add ecx, dword [ebp + 0xb0]
cmp dword [ebp + 0x244], 0
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x28], eax
jne 0x5227e8
mov edi, dword [esi + 4]
cmp edi, 0xf
jae 0x522775
nop dword [eax]
mov eax, dword [esp + 0x10]
mov edx, dword [esi + 8]
cmp edx, dword [eax]
je 0x5227c7
movzx eax, byte [edx]
mov ecx, edi
shl eax, cl
add edi, 8
or dword [esi], eax
lea eax, [edx + 1]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
cmp edi, 0xf
jb 0x522750
mov ecx, dword [0x59ce44]
and ecx, dword [esi]
mov edx, dword [esp + 0x2c]
movzx eax, cl
lea edx, [edx + eax*4]
mov al, byte [edx]
cmp al, 8
jbe 0x5227b7
shr dword [esi], 8
add edi, 0xfffffff8
movzx eax, al
shr ecx, 8
mov dword [esi + 4], edi
mov dword [esp + 0x30], ecx
mov ecx, dword [eax*4 + 0x59cde8]
movzx eax, word [edx + 2]
and ecx, dword [esp + 0x30]
add ecx, eax
mov al, byte [edx + ecx*4]
lea edx, [edx + ecx*4]
movzx ecx, al
sub edi, ecx
shr dword [esi], cl
mov dword [esi + 4], edi
movzx eax, word [edx + 2]
jmp 0x5227ee
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x18]
push eax
push esi
push edx
call fcn.00526740
add esp, 0xc
test eax, eax
je 0x522229
mov eax, dword [esp + 0x18]
jmp 0x5227f2
mov eax, dword [ebp + 0xc8]
mov dword [esp + 0x18], eax
movzx edi, byte [eax*4 + 0x5b15c2]
movzx eax, word [eax*4 + 0x5b15c0]
mov ecx, dword [esi + 4]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], eax
cmp ecx, edi
jae 0x52283b
mov eax, dword [esp + 0x10]
mov edi, dword [eax]
mov edx, dword [esi + 8]
cmp edx, edi
je 0x522874
movzx eax, byte [edx]
shl eax, cl
add ecx, 8
or dword [esi], eax
lea eax, [edx + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
cmp ecx, dword [esp + 0x2c]
jb 0x522817
mov edi, dword [esp + 0x2c]
mov eax, dword [edi*4 + 0x59ce08]
sub ecx, edi
mov edx, dword [esi]
and eax, edx
add eax, dword [esp + 0x30]
mov dword [esi + 4], ecx
mov ecx, edi
shr edx, cl
mov ecx, dword [esp + 0x28]
mov dword [esi], edx
mov dword [ecx], eax
inc dword [ebp + 4]
mov dword [ebp + 0x244], 0
mov dword [ebp], 0x12
jmp 0x522230
mov eax, dword [esp + 0x18]
mov dword [ebp + 0xc8], eax
mov dword [ebp + 0x244], 1
jmp 0x522229
push ebp
push dword [esp + 0x5c]
push dword [esp + 0x28]
push dword [esp + 0x5c]
call fcn.00523350
add esp, 0x10
mov ebx, eax
cmp ebx, 1
jne 0x52223d
mov dword [ebp], 0xe
jmp case.default.0x522326
push ebp
call fcn.005277a0
add esp, 4
jmp 0x5228a2
mov edi, dword [esi + 4]
cmp edi, 6
jae 0x5228f7
mov eax, dword [esp + 0x10]
mov ebx, dword [eax]
mov edx, dword [esi + 8]
cmp edx, ebx
je 0x522229
movzx eax, byte [edx]
mov ecx, edi
shl eax, cl
add edi, 8
or dword [esi], eax
lea eax, [edx + 1]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
cmp edi, 6
jb 0x5228d2
mov ecx, dword [esi]
lea eax, [edi - 6]
mov edx, ecx
shr ecx, 6
and edx, dword [0x59ce20]
mov dword [esi], ecx
mov ecx, edx
mov dword [esi + 4], eax
and ecx, dword [0x59ce10]
mov eax, dword [ebp + 0x1c]
shr edx, 2
shl edx, cl
mov dword [ebp + 0xf0], ecx
mov dword [ebp + 0xf4], edx
push dword [ebp + 0xcc]
push dword [ebp + 0x24]
call eax
add esp, 8
mov dword [ebp + 0x258], eax
test eax, eax
jne 0x522948
lea ebx, [eax - 0x15]
jmp 0x522230
mov dword [ebp + 4], 0
mov dword [ebp], 6
mov eax, dword [ebp + 4]
mov dword [esp + 0x1c], eax
cmp eax, dword [ebp + 0xcc]
jge 0x5229c4
mov edi, dword [esi + 4]
cmp edi, 2
jae 0x522995
mov ebx, dword [esi + 0x10]
mov edx, dword [esi + 8]
cmp edx, ebx
je 0x522aff
movzx eax, byte [edx]
mov ecx, edi
shl eax, cl
add edi, 8
or dword [esi], eax
lea eax, [edx + 1]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
cmp edi, 2
jb 0x522970
mov ecx, dword [esi]
lea eax, [edi - 2]
mov edx, ecx
shr ecx, 2
and edx, dword [0x59ce10]
mov dword [esi], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esi + 4], eax
mov eax, dword [ebp + 0x258]
mov byte [ecx + eax], dl
inc ecx
mov dword [esp + 0x1c], ecx
cmp ecx, dword [ebp + 0xcc]
jl 0x522965
mov dword [ebp], 0x16
push ebp
lea edi, [ebp + 0x254]
push edi
lea eax, [ebp + 0x250]
push eax
mov eax, dword [ebp + 0xcc]
shl eax, 6
push eax
call fcn.005236f0
mov ebx, eax
add esp, 0x10
cmp ebx, 1
jne 0x522230
xorps xmm0, xmm0
xor ebx, ebx
movups xmmword [ebp + 0x264], xmm0
mov dword [esp + 0x1c], ebx
movups xmmword [ebp + 0x274], xmm0
cmp dword [ebp + 0xcc], ebx
jbe 0x522ab0
nop word [eax + eax]
mov eax, dword [edi]
mov ecx, ebx
shl ecx, 6
xor esi, esi
mov bl, byte [eax + ecx]
lea edi, [ecx + 2]
add edi, eax
lea ebp, [esi + 0x10]
movzx edx, byte [edi - 2]
lea edi, [edi + 4]
movzx ecx, byte [edi - 5]
movzx eax, bl
xor edx, eax
movzx eax, bl
xor ecx, eax
movzx eax, bl
or edx, ecx
movzx ecx, byte [edi - 3]
xor ecx, eax
movzx eax, byte [edi - 4]
or edx, ecx
movzx ecx, bl
xor ecx, eax
or edx, ecx
or esi, edx
sub ebp, 1
jne 0x522a34
mov ebp, dword [esp + 0x44]
mov ebx, dword [esp + 0x1c]
test esi, esi
jne 0x522a96
mov eax, ebx
mov ecx, ebx
shr eax, 5
and ecx, 0x1f
lea edx, [eax*4]
mov eax, dword [edx + ebp + 0x264]
bts eax, ecx
mov dword [edx + ebp + 0x264], eax
inc ebx
lea edi, [ebp + 0x254]
mov dword [esp + 0x1c], ebx
cmp ebx, dword [ebp + 0xcc]
jb 0x522a20
lea esi, [ebp + 8]
mov dword [ebp], 0x17
mov ecx, dword [ebp + 0xf0]
mov eax, 0x18
mov ebx, dword [ebp + 0xf4]
lea ecx, [ecx + 1]
shl eax, cl
lea edi, [ebx + 0x10]
add edi, eax
test byte [ebp + 0x24c], 0x20
mov dword [esp + 0x2c], edi
mov dword [esp + 0x1c], edi
je 0x522b6f
mov ecx, dword [ebp + 0xf0]
cmp ebx, 0x7ffffffc
jb 0x522b0b
mov dword [esp + 0x1c], listen
jmp 0x522b5e
mov eax, dword [esp + 0x1c]
mov dword [ebp + 4], eax
jmp 0x522229
mov edx, 0x7ffffffc
mov edi, 1
sub edx, ebx
shl edi, cl
shr edx, cl
xor eax, eax
add edx, 4
dec edi
mov ecx, edx
shr ecx, 1
je 0x522b2c
inc eax
shr ecx, 1
jne 0x522b27
lea ecx, [eax - 1]
shr edx, cl
lea eax, [eax*2 - 4]
mov ecx, dword [ebp + 0xf0]
and edx, 1
or edx, eax
jne 0x522b4e
lea edx, [ebx + 0x10]
mov dword [esp + 0x1c], edx
jmp 0x522b5e
lea eax, [edx - 1]
shl eax, cl
or eax, edi
add eax, 0x11
add eax, ebx
mov dword [esp + 0x1c], eax
inc ecx
mov eax, 0x3e
shl eax, cl
add eax, 0x10
add eax, ebx
mov dword [esp + 0x2c], eax
push ebp
lea eax, [ebp + 0xfc]
push eax
mov eax, dword [ebp + 0xd4]
lea ecx, [ebp + 0xf8]
push ecx
shl eax, 2
push eax
call fcn.005236f0
mov edi, dword [esp + 0x58]
mov ebx, eax
add esp, 0x10
cmp ebx, 1
jne 0x52223d
push dword [ebp + 0x250]
lea eax, [ebp + 0x7c]
push 0x100
push 0x100
push eax
push ebp
call fcn.00528300
push dword [ebp + 0xd0]
lea ecx, [ebp + 0x8c]
mov edi, eax
push 0x2c0
push 0x2c0
push ecx
push ebp
call fcn.00528300
push dword [ebp + 0xf8]
lea ecx, [ebp + 0x9c]
mov ebx, eax
push dword [esp + 0x48]
and ebx, edi
push dword [esp + 0x5c]
push ecx
push ebp
call fcn.00528300
and eax, ebx
add esp, 0x3c
test al, 1
je 0x523112
mov edi, dword [esp + 0x48]
mov dword [ebp + 4], 0
mov dword [ebp], 0x18
mov eax, dword [ebp + 4]
sub eax, 0
je 0x522c3a
sub eax, 1
je 0x522c33
sub eax, 1
jne 0x523130
mov edx, 0x9c
jmp 0x522c3f
mov edx, 0x8c
jmp 0x522c3f
mov edx, 0x7c
cmp dword [ebp + 0x284], 1
lea ecx, [ebp + 0x980]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x2c], ecx
je 0x522c72
mov eax, dword [edx + ebp + 4]
mov dword [ebp + 0x984], eax
mov dword [ecx], 0
mov dword [ebp + 0x284], 1
jmp 0x522c76
mov dword [esp + 0x2c], ecx
movzx eax, word [edx + ebp + 0xc]
cmp dword [ecx], eax
jge 0x522cdd
nop
push ebp
lea eax, [esp + 0x38]
push eax
push dword [ebp + 0x984]
movzx eax, word [edx + ebp + 0xa]
push eax
movzx eax, word [edx + ebp + 8]
push eax
call fcn.005256b0
mov ebx, eax
add esp, 0x14
cmp ebx, 1
jne 0x522230
mov ebx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ebp + 0x984]
mov edx, dword [ebx]
mov ecx, dword [ecx + ebp]
mov dword [ecx + edx*4], eax
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x1c]
inc dword [ebx]
shl eax, 2
add dword [ebp + 0x984], eax
movzx eax, word [edx + ebp + 0xc]
cmp dword [ebx], eax
jl 0x522c80
mov edi, dword [esp + 0x48]
mov ebx, 1
mov dword [ebp + 0x284], 0
inc dword [ebp + 4]
cmp dword [ebp + 4], 3
jl case.default.0x522326
mov dword [ebp], 0x19
mov edi, dword [ebp + 0xdc]
mov edx, edi
mov eax, edi
shl edx, 6
add edx, dword [ebp + 0x254]
mov ecx, edi
shr eax, 5
and ecx, 0x1f
mov dword [ebp + 0x74], edx
push ebp
mov eax, dword [ebp + eax*4 + 0x264]
shr eax, cl
and eax, 1
mov dword [ebp + 0xb4], eax
movzx ecx, byte [edx]
mov eax, dword [ebp + 0x7c]
mov eax, dword [eax + ecx*4]
mov dword [ebp + 0x100], eax
mov eax, dword [ebp + 0x258]
movzx eax, byte [eax + edi]
and eax, 3
shl eax, 9
add eax, 0x5b1628
mov dword [ebp + 0x70], eax
mov eax, dword [ebp + 0xfc]
mov dword [ebp + 0x78], eax
mov eax, dword [ebp + 0x8c]
mov eax, dword [eax]
mov dword [ebp + 0x6c], eax
call fcn.00523200
add esp, 4
test eax, eax
jne 0x522d84
lea ebx, [eax - 0x1b]
jmp 0x522230
mov ecx, dword [ebp + 0xf4]
lea eax, [ebp + 0x284]
mov ebx, dword [ebp + 0xf0]
mov edx, 1
mov dword [esp + 0x1c], ecx
movzx ecx, word [ebp + 0xa6]
mov dword [esp + 0x30], ecx
mov ecx, ebx
mov dword [esp + 0x3c], ebx
mov ebx, 1
shl edx, cl
xor ecx, ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], edx
lea edi, [ebx + 0xf]
mov dword [esp + 0x2c], ecx
cmp dword [esp + 0x1c], ecx
jbe 0x522e08
mov ebp, 0xfffffff1
lea ecx, [eax + 0x10]
lea edx, [eax + 0x260]
sub ebp, eax
mov eax, dword [esp + 0x1c]
mov esi, eax
lea edi, [eax + 0x10]
mov byte [ecx], 0
lea eax, [ecx + ebp]
mov dword [edx], eax
lea edx, [edx + 4]
lea ecx, [ecx + 1]
sub esi, ebx
jne 0x522de7
mov ebp, dword [esp + 0x44]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
lea esi, [ebp + 8]
cmp edi, dword [esp + 0x30]
jae 0x522e69
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0x1c]
lea eax, [ecx + 2]
mov ecx, ebx
inc esi
shl eax, cl
mov ecx, dword [esp + 0x3c]
sub eax, 4
shl eax, cl
xor ecx, ecx
add esi, eax
test edx, edx
je 0x522e4f
lea edx, [ebp + 0x220]
lea edx, [edx + edi*4]
lea eax, [esi + ecx]
mov byte [edi + ebp], bl
inc ecx
mov dword [edx], eax
inc edi
lea edx, [edx + 4]
cmp ecx, dword [esp + 0x28]
jb 0x522e38
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
add ebx, ecx
xor ecx, 1
mov dword [esp + 0x2c], ecx
cmp edi, dword [esp + 0x30]
jb 0x522e12
mov ebp, dword [esp + 0x44]
lea esi, [ebp + 8]
mov edi, dword [esp + 0x48]
mov dword [ebp], 7
push ebp
call fcn.005248f0
mov ebx, eax
add esp, 4
cmp ebx, 2
jne case.default.0x522326
push ebp
call fcn.005267d0
add esp, 4
mov ebx, eax
jmp case.default.0x522326
push 0
push dword [esp + 0x5c]
push dword [esp + 0x28]
push dword [esp + 0x5c]
push ebp
call fcn.00527910
mov ebx, eax
add esp, 0x14
cmp ebx, 1
jne 0x52223d
push ebp
call fcn.005278e0
mov ecx, dword [ebp + 0x24c]
mov eax, ebx
shr ecx, 6
add esp, 4
and ecx, 0x3f
shl eax, cl
cmp dword [ebp + 0x40], eax
jne 0x522ede
mov eax, dword [ebp + 0x38]
mov dword [ebp + 0x3c], eax
mov eax, dword [ebp]
cmp eax, 0xf
jne 0x522f2c
mov ecx, dword [ebp + 0x260]
test ecx, ecx
je 0x522f13
mov eax, dword [ecx + 0x10]
cmp eax, dword [ecx + 0x14]
je 0x522f13
push dword [ebp + 0x34]
push ebp
call fcn.00523290
add dword [ebp + 0x34], eax
add esp, 8
mov eax, dword [ebp + 0x34]
cmp eax, dword [ebp + 0x40]
jge case.default.0x522326
cmp dword [ebp + 0x60], 0
mov eax, 0xe
mov ecx, 7
cmovne eax, ecx
mov dword [ebp], eax
jmp case.default.0x522326
cmp eax, 0x10
jne 0x522f3e
mov eax, 0xa
mov dword [ebp], eax
jmp case.default.0x522326
cmp dword [ebp + 4], 0
jne 0x522f5d
cmp dword [ebp + 0x60], 0
mov eax, 0xe
mov ecx, 9
cmovne eax, ecx
mov dword [ebp], eax
jmp case.default.0x522326
mov eax, 8
mov dword [ebp], eax
jmp case.default.0x522326
cmp dword [ebp + 0x60], 0
jge 0x522f7a
mov ebx, 0xfffffff6
jmp case.default.0x522326
push ebp
call fcn.00528450
add esp, 4
test byte [ebp + 0x24c], 1
jne 0x522f98
mov dword [ebp], 3
jmp case.default.0x522326
mov edi, dword [esi + 4]
mov edx, 0
mov ecx, edi
and ecx, 7
je 0x522fbb
mov edx, dword [ecx*4 + 0x59ce08]
sub edi, ecx
mov eax, dword [esi]
and edx, eax
shr eax, cl
mov dword [esi + 4], edi
mov dword [esi], eax
cmp edi, 0x20
jae 0x522fcc
mov eax, 1
mov ecx, edi
shl eax, cl
dec eax
and dword [esi], eax
test edx, edx
je 0x522fda
mov ebx, 0xfffffff1
jmp 0x522230
cmp dword [ebp + 0x30], 0
jne 0x523033
mov eax, dword [esi + 8]
mov ecx, edi
shr ecx, 3
sub eax, ecx
test ecx, ecx
lea edx, [ecx*8]
mov ecx, dword [esi + 8]
cmovne ecx, eax
sub edi, edx
mov dword [esp + 0x2c], ecx
mov dword [esi + 8], ecx
mov dword [esi + 4], edi
cmp edi, 0x20
jae 0x52301a
mov ecx, edi
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x2c]
dec eax
and dword [esi], eax
mov eax, dword [esp + 0x10]
mov edi, dword [esp + 0x48]
mov eax, dword [eax]
sub eax, ecx
mov ecx, dword [esp + 0x4c]
mov dword [edi], eax
mov eax, dword [esi + 8]
mov dword [ecx], eax
jmp 0x523037
mov edi, dword [esp + 0x48]
mov dword [ebp], 0x1a
cmp dword [ebp + 0x64], 0
je 0x523066
push 1
push dword [esp + 0x5c]
push dword [esp + 0x28]
push dword [esp + 0x5c]
push ebp
call fcn.00527910
mov ebx, eax
add esp, 0x14
cmp ebx, 1
jne 0x52223d
mov ecx, dword [esp + 0x24]
sub ecx, dword [edi]
push ecx
push ebx
push ebp
call fcn.00527740
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret
mov ebx, eax
jmp 0x523066
mov edx, dword [esp + 0x4c]
mov dword [edx], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
sub eax, dword [esi + 8]
mov dword [edi], eax
je 0x523066
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov al, byte [eax]
mov byte [ecx + ebp + 0x28], al
inc dword [ebp + 0x30]
inc dword [edx]
add dword [edi], 0xffffffff
jne 0x523096
jmp 0x523066
cmp dword [ebp + 0x30], 0
je 0x5230bc
mov dword [ebp + 0x30], 0
jmp 0x523066
mov edi, dword [esi + 4]
mov ecx, edi
mov eax, dword [esi + 8]
shr ecx, 3
sub eax, ecx
test ecx, ecx
lea edx, [ecx*8]
mov ecx, dword [esi + 8]
cmovne ecx, eax
sub edi, edx
mov dword [esp + 0x44], ecx
mov dword [esi + 8], ecx
mov dword [esi + 4], edi
cmp edi, 0x20
jae 0x5230f9
mov ecx, edi
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x44]
dec eax
and dword [esi], eax
mov eax, dword [esi + 0x10]
mov edi, dword [esp + 0x48]
sub eax, ecx
mov ecx, dword [esp + 0x4c]
mov dword [edi], eax
mov eax, dword [esi + 8]
mov dword [ecx], eax
jmp 0x523066
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x24]
sub ecx, dword [eax]
push ecx
push 0xffffffffffffffea
push ebp
call fcn.00527740
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret
mov ecx, dword [esp + 0x24]
sub ecx, dword [edi]
push ecx
push 0xffffffffffffffe1
push ebp
call fcn.00527740
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret