Function at 0x52e240
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x12c]
cmp eax, dword [ecx + 8]
jbe 0x52f89d
sub esp, 0x1ac
lea eax, [0x609b20]
mov dword [esp], eax
call fcn.0040b8d0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x1b0]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x52f877
mov dword [edi], ecx
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 0x10]
mov ebx, dword [eax + 0x14]
mov dword [edi + 0x10], edx
mov dword [edi + 0x14], ebx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x52f85e
mov dword [edi + 0xc], ecx
mov ecx, dword [eax + 0xc0]
mov edx, dword [eax + 0xc4]
mov ebx, dword [eax + 0xc8]
mov dword [edi + 0x1c], edx
mov dword [edi + 0x20], ebx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x52f845
mov dword [edi + 0x18], ecx
mov ecx, dword [eax + 0xb4]
mov edx, dword [eax + 0xb8]
mov ebx, dword [eax + 0xbc]
mov dword [edi + 0x28], edx
mov dword [edi + 0x2c], ebx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x52f82c
mov dword [edi + 0x24], ecx
mov dword [esp + 0x6c], edi
mov ecx, dword [eax + 0x68]
mov edx, dword [eax + 0x6c]
mov ebx, dword [eax + 0x70]
mov dword [edi + 0x34], edx
mov dword [edi + 0x38], ebx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x52f817
mov dword [edi + 0x30], ecx
mov ecx, dword [eax + 0x168]
mov edx, dword [eax + 0x16c]
mov ebx, dword [eax + 0x170]
mov ebp, dword [eax + 0x174]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
call fcn.004e2360
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0x40], ecx
mov dword [ebx + 0x44], edx
mov ecx, dword [0x7a0970]
test ecx, ecx
jne 0x52f80a
mov dword [ebx + 0x3c], eax
mov eax, dword [esp + 0x1b0]
lea esi, [eax + 0x20]
lea edi, [esp + 0x130]
call fcn.0045e548
lea edi, [esp]
lea esi, [esp + 0x130]
call fcn.0045e548
call fcn.0052bbc0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x6c]
mov dword [ecx + 0x48], eax
mov eax, dword [esp + 0x1b0]
mov edx, dword [eax + 0xcc]
mov ebx, dword [eax + 0xd0]
mov ebp, dword [eax + 0xd4]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.0052c050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x6c]
mov dword [ecx + 0x4c], eax
mov dword [esp], eax
mov eax, dword [esp + 0x1b0]
lea edx, [eax + 0xc0]
mov dword [esp + 4], edx
call fcn.0052cd80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov esi, ebp
mov ebp, dword [esp + 0x6c]
mov dword [ebp + 0x50], ecx
mov ecx, dword [0x7a0970]
test ecx, ecx
jne 0x52f7fd
mov dword [ebp + 0x54], eax
test edx, edx
jne 0x52f7dd
mov ecx, dword [esp + 0x1b0]
mov edx, dword [ecx + 0x18]
inc edx
mov dword [ebp + 0x58], edx
mov edx, dword [0x7a0970]
mov eax, dword [ecx + 0x1c]
test edx, edx
jne 0x52f7d0
mov dword [ebp + 0x5c], eax
lea eax, [0x5e16a0]
mov dword [esp], eax
call fcn.0040b8d0
mov eax, dword [esp + 4]
mov dword [esp + 0xbc], eax
lea ecx, [0x5e16a0]
mov dword [esp], ecx
call fcn.0040b8d0
mov eax, dword [esp + 4]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0x1b0]
mov edx, dword [ecx + 0xb4]
mov ebx, dword [ecx + 0xb8]
mov ebp, dword [ecx + 0xbc]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
lea edx, [0x5df5a0]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.004e65f0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x20]
test eax, eax
jne 0x52f7b0
test ebx, ebx
jne 0x52f769
mov eax, dword [esp + 0x1b0]
mov ecx, dword [eax + 0x68]
mov edx, dword [eax + 0x6c]
mov ebx, dword [eax + 0x70]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
lea ecx, [0x5df5a0]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.004e65f0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x20]
test eax, eax
jne 0x52f749
test ebx, ebx
jne 0x52f702
mov eax, dword [esp + 0x6c]
lea ecx, [eax + 0x60]
mov dword [esp], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 4], ecx
call fcn.00506e70
mov eax, dword [esp + 0x6c]
lea ecx, [eax + 0xdc]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 4], ecx
call fcn.00506e70
mov eax, dword [esp + 0x6c]
lea edi, [eax + 0x158]
mov ecx, dword [0x7a0970]
mov edx, dword [esp + 0x1b0]
lea esi, [edx + 0x74]
lea ebx, [eax + 0x16c]
lea ebp, [edx + 0x88]
test ecx, ecx
jne 0x52f6aa
call fcn.0045e58e
mov edi, ebx
mov esi, ebp
call fcn.0045e58e
mov ecx, dword [edx + 0x130]
mov edx, dword [edx + 0x12c]
test ecx, ecx
jle 0x52e75b
mov dword [esp + 0x68], ecx
xor ebx, ebx
jmp 0x52e5f5
lea ebp, [esi + 0x1c]
mov edx, ebp
mov ebx, ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x64], ebx
mov dword [esp + 0xb4], edx
lea edi, [esp + 0xc0]
mov esi, edx
call fcn.0045e57a
mov ecx, dword [eax + 0x188]
lea ebp, [ecx + 1]
mov esi, edx
mov edx, dword [eax + 0x184]
mov edi, ebx
mov ebx, dword [eax + 0x18c]
cmp ebp, ebx
ja 0x52f645
lea ebx, [ecx + 1]
mov dword [eax + 0x188], ebx
mov ebx, dword [0x7a0970]
imul ecx, ecx, 0x1c
add ecx, edx
test ebx, ebx
jne 0x52f614
mov edx, edi
mov edi, ecx
mov ebx, esi
lea esi, [esp + 0xc0]
call fcn.0045e57a
mov ebp, dword [esp + 0xc0]
mov ecx, dword [esp + 0xc4]
cmp ecx, 4
jne 0x52f1ee
cmp dword [ebp], 2
jne 0x52f1ee
cmp dword [ebp + 4], 5
jne 0x52f1ee
cmp dword [ebp + 8], 0x1d
jne 0x52f1ee
mov ecx, dword [ebp + 0xc]
cmp ecx, 0x13
jg 0x52ebe6
cmp ecx, 0xf
jg 0x52e934
cmp ecx, 0xe
je 0x52e88c
cmp ecx, 0xf
je 0x52e815
mov ecx, 1
movzx ebp, byte [esp + 0xcc]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x52e80c
test cl, cl
je 0x52e80c
mov ecx, dword [eax + 0x1a0]
mov dword [esp + 0x60], ecx
lea ebp, [ecx + 1]
mov esi, ebx
mov ebx, dword [eax + 0x19c]
mov edi, edx
mov edx, dword [eax + 0x1a4]
mov ecx, dword [esp + 0xc0]
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0xc8]
cmp ebp, edx
ja 0x52e797
mov edx, dword [esp + 0x60]
lea ebp, [edx + 1]
mov dword [eax + 0x1a0], ebp
lea edx, [edx + edx*2]
mov ebp, dword [esp + 0x5c]
mov dword [ebx + edx*4 + 4], ebp
mov dword [ebx + edx*4 + 8], ecx
mov ecx, dword [0x7a0970]
lea ebp, [ebx + edx*4]
test ecx, ecx
jne 0x52e77f
mov ecx, dword [esp + 0xb0]
mov dword [ebx + edx*4], ecx
lea ecx, [edi + 1]
mov edx, dword [esp + 0x68]
cmp edx, ecx
jg 0x52e5ea
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1bc], 0
add esp, 0x1ac
ret
mov ecx, edi
mov edi, ebp
mov edx, eax
mov eax, dword [esp + 0xb0]
call fcn.0045de10
mov eax, edx
mov edi, ecx
jmp 0x52e74c
mov dword [esp + 0x58], ecx
lea eax, [0x5e8580]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x60]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.00445150
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0x1a4], edx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x52e7ff
mov dword [ebx + 0x19c], eax
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0x64]
mov ebx, eax
mov edx, ecx
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x58]
jmp 0x52e71d
lea edi, [ebx + 0x19c]
call fcn.0045de10
jmp 0x52e7e3
mov esi, ebx
mov edi, edx
jmp 0x52e74c
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0052f8b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x6c]
mov dword [ebp + 0x180], eax
test ecx, ecx
jne 0x52e86c
mov eax, ebp
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xb4]
xor ecx, ecx
jmp 0x52e6be
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x1b8], edx
mov dword [esp + 0x1bc], ebx
add esp, 0x1ac
ret
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0052fec0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x6c]
mov dword [edi + 0x1d0], ecx
mov dword [edi + 0x1d4], edx
mov ecx, dword [0x7a0970]
test ecx, ecx
jne 0x52e921
mov dword [edi + 0x1cc], eax
test ebx, ebx
jne 0x52e901
mov eax, edi
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xb4]
xor ecx, ecx
jmp 0x52e6be
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x1b8], ebp
mov dword [esp + 0x1bc], esi
add esp, 0x1ac
ret
lea ecx, [edi + 0x1cc]
mov edx, edi
mov edi, ecx
call fcn.0045de10
mov edi, edx
jmp 0x52e8e9
cmp ecx, 0x11
je 0x52e9e6
cmp ecx, 0x13
jne 0x52e6b9
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0052fa50
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x6c]
mov byte [esi + 0x1c1], al
mov dword [esi + 0x1c4], ecx
test edx, edx
jne 0x52e9c6
mov byte [esi + 0x1c0], 1
mov ebp, dword [esi + 0x1c4]
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
mov byte [esi + 0x1c8], al
xchg ebp, eax
mov eax, esi
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xb4]
xor ecx, ecx
jmp 0x52e6be
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1bc], ebp
add esp, 0x1ac
ret
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0052dac0
mov eax, dword [esp + 0x34]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x24]
mov dword [esp + 0xac], ebx
mov ebp, dword [esp + 0x30]
mov dword [esp + 0xa8], ebp
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x4c], ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0xa4], ebx
mov ebx, dword [esp + 0x40]
mov dword [esp + 0x80], ebx
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0x200], esi
mov dword [ebx + 0x204], edi
mov esi, dword [0x7a0970]
test esi, esi
jne 0x52ebd0
mov dword [ebx + 0x1fc], ecx
mov dword [ebx + 0x20c], ebp
mov dword [ebx + 0x210], eax
mov ecx, dword [0x7a0970]
test ecx, ecx
jne 0x52ebbe
mov dword [ebx + 0x208], edx
mov ecx, dword [esp + 0x5c]
mov dword [ebx + 0x218], ecx
mov ecx, dword [esp + 0x58]
mov dword [ebx + 0x21c], ecx
mov ecx, dword [0x7a0970]
test ecx, ecx
jne 0x52eba7
mov ecx, dword [esp + 0xac]
mov dword [ebx + 0x214], ecx
mov ecx, dword [esp + 0x60]
mov dword [ebx + 0x224], ecx
mov edx, dword [esp + 0x54]
mov dword [ebx + 0x228], edx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x52eb90
mov edx, dword [esp + 0xa8]
mov dword [ebx + 0x220], edx
mov edx, dword [esp + 0x4c]
test edx, edx
jne 0x52eb62
mov edx, dword [ebx + 0x200]
test edx, edx
jne 0x52eb5e
mov edx, dword [ebx + 0x20c]
test edx, edx
jne 0x52eb5e
mov edx, dword [ebx + 0x218]
test edx, edx
jne 0x52eb5e
test ecx, ecx
jne 0x52eb5e
mov eax, 1
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xb4]
mov ecx, eax
mov eax, dword [esp + 0x6c]
jmp 0x52e6be
xor eax, eax
jmp 0x52eb48
mov dword [esp + 0x1b4], 0
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x1b8], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x1bc], eax
add esp, 0x1ac
ret
lea edi, [ebx + 0x220]
mov eax, dword [esp + 0xa8]
call fcn.0045de10
jmp 0x52eb19
lea edi, [ebx + 0x214]
mov eax, dword [esp + 0xac]
call fcn.0045de10
jmp 0x52eaea
lea edi, [ebx + 0x208]
mov eax, edx
call fcn.0045de10
jmp 0x52eabb
lea edi, [ebx + 0x1fc]
mov esi, eax
mov eax, ecx
call fcn.0045de10
mov eax, esi
jmp 0x52ea9b
cmp ecx, 0x1f
jg 0x52eef0
cmp ecx, 0x1e
je 0x52ee8d
cmp ecx, 0x1f
jne 0x52e6b9
lea eax, [0x5d22e0]
mov dword [esp], eax
call fcn.0040b8d0
mov eax, dword [esp + 4]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xd8]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
lea ecx, [0x5cae60]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.004e65f0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x20]
test eax, eax
jne 0x52ee6d
test ebx, ebx
jne 0x52ee26
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
test edx, edx
jle 0x52ecd1
mov dword [esp + 0x60], edx
xor eax, eax
jmp 0x52eca3
mov ebx, dword [esp + 0x9c]
add ebx, 0x4c
mov eax, ecx
mov ecx, ebx
mov dword [esp + 0x9c], ecx
lea edi, [esp + 0x160]
mov esi, ecx
call fcn.0045e502
mov ecx, dword [esp + 0x164]
mov ebx, dword [esp + 0x160]
test ecx, ecx
jne 0x52ece7
lea ecx, [eax + 1]
cmp edx, ecx
jg 0x52ec95
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xb4]
xor ecx, ecx
jmp 0x52e6be
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], ecx
xor ebp, ebp
jmp 0x52ecfc
add ebx, 0x24
mov ebp, ecx
mov ecx, dword [esp + 0x58]
lea edi, [esp + 0xdc]
mov esi, ebx
call fcn.0045e566
cmp dword [esp + 0xe0], 6
je 0x52ed21
lea ecx, [ebp + 1]
mov ebp, dword [esp + 0x58]
cmp ecx, ebp
jl 0x52ecf3
jmp 0x52ecca
mov dword [esp + 0x54], ebp
mov dword [esp + 0x98], ebx
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0xec]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00448630
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax + 0x294]
mov edx, dword [esp + 0xc]
mov ebx, dword [eax + 0x298]
mov ebp, dword [esp + 0x10]
lea esi, [ecx + 1]
mov edi, dword [eax + 0x290]
cmp ebx, esi
jb 0x52edb6
lea ebx, [ecx + 1]
mov dword [eax + 0x294], ebx
lea ebx, [edi + ecx*8 + 4]
mov dword [ebx], ebp
mov ebx, dword [0x7a0970]
lea edi, [edi + ecx*8]
test ebx, ebx
jne 0x52eda9
mov dword [edi], edx
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0x98]
mov ebp, dword [esp + 0x54]
jmp 0x52ed14
mov ecx, eax
mov eax, edx
call fcn.0045de10
mov eax, ecx
jmp 0x52ed91
mov dword [esp + 0xa4], edx
mov dword [esp + 0x50], ebp
lea eax, [0x5db180]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.00445150
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0x298], edx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x52ee19
mov dword [ebx + 0x290], eax
mov edx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x50]
mov edi, eax
mov eax, ebx
jmp 0x52ed73
lea edi, [ebx + 0x290]
call fcn.0045de10
jmp 0x52ee05
lea eax, [0x5e46a0]
mov dword [esp], eax
call fcn.0040b8d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x61ee00]
mov dword [eax], ecx
mov dword [esp + 0x1b4], 0
lea ecx, [0x65e99c]
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x1bc], eax
add esp, 0x1ac
ret
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x1bc], edx
add esp, 0x1ac
ret
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0xc0]
call fcn.0045e57a
call fcn.0052dc70
movzx eax, byte [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
test ecx, ecx
jne 0x52eed0
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xb4]
mov ecx, eax
mov eax, dword [esp + 0x6c]
jmp 0x52e6be
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x1b8], edx
mov dword [esp + 0x1bc], ebx
add esp, 0x1ac
ret
cmp ecx, 0x20
je 0x52f146
cmp ecx, 0x23
je 0x52f017
cmp ecx, 0x25
jne 0x52e6b9
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0052fb60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x20]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x48], edi
mov edi, dword [esp + 0x24]
mov dword [esp + 0xa4], edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0x7c], edi
mov edi, dword [esp + 0x6c]
mov dword [edi + 0x1ac], edx
mov dword [edi + 0x1b0], ebx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x52f001
mov dword [edi + 0x1a8], eax
mov dword [edi + 0x1b8], ebp
mov dword [edi + 0x1bc], esi
mov edx, dword [0x7a0970]
test edx, edx
jne 0x52efea
mov dword [edi + 0x1b4], ecx
mov ecx, dword [esp + 0x48]
test ecx, ecx
jne 0x52efbf
mov eax, edi
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xb4]
xor ecx, ecx
jmp 0x52e6be
mov dword [esp + 0x1b4], 0
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x1b8], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x1bc], eax
add esp, 0x1ac
ret
lea edx, [edi + 0x1b4]
mov eax, edi
mov edi, edx
mov ebx, eax
mov eax, ecx
call fcn.0045de10
mov edi, ebx
jmp 0x52efa3
lea edx, [edi + 0x1a8]
mov ebx, edi
mov edi, edx
call fcn.0045de10
mov edi, ebx
jmp 0x52ef87
lea eax, [0x5e4580]
mov dword [esp], eax
call fcn.0040b8d0
mov eax, dword [esp + 4]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xd8]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
lea ecx, [0x5cbd60]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.004e65f0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x20]
test eax, eax
jne 0x52f126
test ebx, ebx
jne 0x52f0df
mov ecx, dword [esp + 0x94]
mov eax, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0x1dc], edx
mov dword [ebx + 0x1e0], ecx
mov ecx, dword [0x7a0970]
test ecx, ecx
jne 0x52f0d2
mov dword [ebx + 0x1d8], eax
mov eax, ebx
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xb4]
xor ecx, ecx
jmp 0x52e6be
lea edi, [ebx + 0x1d8]
call fcn.0045de10
jmp 0x52f0be
lea eax, [0x5e46a0]
mov dword [esp], eax
call fcn.0040b8d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x30
lea ecx, [0x61dbbd]
mov dword [eax], ecx
mov dword [esp + 0x1b4], 0
lea ecx, [0x65e99c]
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x1bc], eax
add esp, 0x1ac
ret
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x1bc], edx
add esp, 0x1ac
ret
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0052fff0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x6c]
mov dword [edi + 0x2a0], ecx
mov dword [edi + 0x2a4], edx
mov ecx, dword [0x7a0970]
test ecx, ecx
jne 0x52f1db
mov dword [edi + 0x29c], eax
test ebx, ebx
jne 0x52f1bb
mov eax, edi
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xb4]
xor ecx, ecx
jmp 0x52e6be
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x1b8], ebp
mov dword [esp + 0x1bc], esi
add esp, 0x1ac
ret
lea ecx, [edi + 0x29c]
mov edx, edi
mov edi, ecx
call fcn.0045de10
mov edi, edx
jmp 0x52f1a3
mov esi, ebx
mov ebx, dword [0x77d580]
mov edi, edx
lea edx, [0x77d580]
cmp dword [edx + 4], ecx
je 0x52f211
mov ecx, 1
mov edx, edi
mov ebx, esi
jmp 0x52e6be
mov dword [esp + 0x70], ebx
mov dword [esp + 0xb0], ebp
xor edx, edx
mov dword [esp + 0x44], edx
lea edx, [0x77d580]
jmp 0x52f240
inc edx
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0xb0]
mov dword [esp + 0x44], edx
lea edx, [0x77d580]
mov edx, dword [esp + 0x44]
cmp edx, ecx
jge 0x52f262
jae 0x52f895
lea ebp, [ebp + edx*4]
mov ebx, dword [ebx + edx*4]
cmp dword [ebp], ebx
je 0x52f22a
lea edx, [0x77d580]
jmp 0x52f203
lea eax, [0x5d22a0]
mov dword [esp], eax
call fcn.0040b8d0
mov eax, dword [esp + 4]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xd8]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
lea ecx, [0x5cae20]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.004e65f0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x20]
test eax, eax
jne 0x52f5f4
test ebx, ebx
jne 0x52f5ad
mov ecx, dword [esp + 0x90]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
test edx, edx
jle 0x52f32a
mov dword [esp + 0x60], edx
xor eax, eax
jmp 0x52f304
mov ebx, dword [esp + 0x8c]
add ebx, 0x30
mov eax, ecx
mov ecx, ebx
mov dword [esp + 0x8c], ecx
lea edi, [esp + 0x100]
mov esi, ecx
call fcn.0045e548
cmp dword [esp + 0x110], 6
je 0x52f346
lea ecx, [eax + 1]
cmp ecx, edx
jl 0x52f2f6
mov eax, dword [esp + 0x6c]
lea edx, [0x77d580]
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0x64]
xor ecx, ecx
jmp 0x52f208
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x104]
mov ebx, dword [esp + 0x100]
mov ebp, dword [0x77d570]
cmp dword [0x77d574], ecx
je 0x52f491
mov ebp, dword [0x77d560]
cmp dword [0x77d564], ecx
jne 0x52f323
mov dword [esp + 0x74], ebp
xor esi, esi
jmp 0x52f387
inc esi
mov ebp, dword [esp + 0x74]
mov edx, edi
cmp esi, ecx
jge 0x52f3a2
jae 0x52f887
mov edi, edx
lea edx, [ebx + esi*4]
mov ebp, dword [ebp + esi*4]
cmp dword [edx], ebp
je 0x52f380
mov edx, edi
jmp 0x52f323
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x11c]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00448630
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax + 0x1f4]
mov edx, dword [esp + 0xc]
mov ebx, dword [eax + 0x1f8]
mov ebp, dword [esp + 0x10]
lea esi, [ecx + 1]
mov edi, dword [eax + 0x1f0]
cmp ebx, esi
jb 0x52f421
lea ebx, [ecx + 1]
mov dword [eax + 0x1f4], ebx
lea ebx, [edi + ecx*8 + 4]
mov dword [ebx], ebp
mov ebx, dword [0x7a0970]
lea edi, [edi + ecx*8]
test ebx, ebx
jne 0x52f414
mov dword [edi], edx
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x60]
jmp 0x52f323
mov ecx, eax
mov eax, edx
call fcn.0045de10
mov eax, ecx
jmp 0x52f407
mov dword [esp + 0xa4], edx
mov dword [esp + 0x58], ebp
lea eax, [0x5db180]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.00445150
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0x1f8], edx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x52f484
mov dword [ebx + 0x1f0], eax
mov edx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x58]
mov edi, eax
mov eax, ebx
jmp 0x52f3e9
lea edi, [ebx + 0x1f0]
call fcn.0045de10
jmp 0x52f470
mov dword [esp + 0x78], ebp
xor esi, esi
jmp 0x52f4a0
inc esi
mov ebp, dword [esp + 0x78]
mov edx, edi
cmp esi, ecx
jge 0x52f4be
jae 0x52f88e
mov edi, edx
lea edx, [ebx + esi*4]
mov ebp, dword [ebp + esi*4]
cmp dword [edx], ebp
je 0x52f499
mov edx, edi
jmp 0x52f36a
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x11c]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00448630
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax + 0x1e8]
mov edx, dword [esp + 0xc]
mov ebx, dword [eax + 0x1ec]
mov ebp, dword [esp + 0x10]
lea esi, [ecx + 1]
mov edi, dword [eax + 0x1e4]
cmp esi, ebx
ja 0x52f53d
lea ebx, [ecx + 1]
mov dword [eax + 0x1e8], ebx
lea ebx, [edi + ecx*8 + 4]
mov dword [ebx], ebp
mov ebx, dword [0x7a0970]
lea edi, [edi + ecx*8]
test ebx, ebx
jne 0x52f530
mov dword [edi], edx
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x60]
jmp 0x52f323
mov ecx, eax
mov eax, edx
call fcn.0045de10
mov eax, ecx
jmp 0x52f523
mov dword [esp + 0xa4], edx
mov dword [esp + 0x58], ebp
lea eax, [0x5db180]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.00445150
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0x1ec], edx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x52f5a0
mov dword [ebx + 0x1e4], eax
mov edx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x58]
mov edi, eax
mov eax, ebx
jmp 0x52f505
lea edi, [ebx + 0x1e4]
call fcn.0045de10
jmp 0x52f58c
lea eax, [0x5e46a0]
mov dword [esp], eax
call fcn.0040b8d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x35
lea ecx, [0x61e9ff]
mov dword [eax], ecx
mov dword [esp + 0x1b4], 0
lea ecx, [0x65e99c]
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x1bc], eax
add esp, 0x1ac
ret
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x1bc], edx
add esp, 0x1ac
ret
lea eax, [0x5f09c0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0xc0]
mov dword [esp + 8], eax
call fcn.004106a0
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xb4]
jmp 0x52e65d
lea eax, [0x5f09c0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00445150
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0x18c], edx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x52f69d
mov dword [ebx + 0x184], eax
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0x64]
mov edx, eax
mov eax, ebx
jmp 0x52e62f
lea edi, [ebx + 0x184]
call fcn.0045de10
jmp 0x52f689
mov dword [esp + 0x88], ebp
mov dword [esp + 0x84], ebx
lea eax, [0x60c6c0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.004106a0
lea eax, [0x60c6c0]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
call fcn.004106a0
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x1b0]
jmp 0x52e5ce
lea eax, [0x5e46a0]
mov dword [esp], eax
call fcn.0040b8d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x26
lea ecx, [0x61b10f]
mov dword [eax], ecx
mov dword [esp + 0x1b4], 0
lea ecx, [0x65e99c]
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x1bc], eax
add esp, 0x1ac
ret
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x1bc], edx
add esp, 0x1ac
ret
lea eax, [0x5e46a0]
mov dword [esp], eax
call fcn.0040b8d0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x27
lea ecx, [0x61b503]
mov dword [eax], ecx
mov dword [esp + 0x1b4], 0
lea ecx, [0x65e99c]
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x1bc], eax
add esp, 0x1ac
ret
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x1bc], edx
add esp, 0x1ac
ret
lea edi, [ebp + 0x5c]
call fcn.0045de10
jmp 0x52e45d
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1bc], esi
add esp, 0x1ac
ret
lea edi, [ebp + 0x54]
call fcn.0045de10
jmp 0x52e433
lea edi, [ebx + 0x3c]
call fcn.0045de10
jmp 0x52e383
lea edx, [edi + 0x30]
mov edi, edx
mov ebp, eax
mov eax, ecx
call fcn.0045de10
mov eax, ebp
jmp 0x52e330
lea edx, [edi + 0x24]
mov ebx, edi
mov edi, edx
mov ebp, eax
mov eax, ecx
call fcn.0045de10
mov eax, ebp
mov edi, ebx
jmp 0x52e30c
lea edx, [edi + 0x18]
mov ebx, edi
mov edi, edx
mov ebp, eax
mov eax, ecx
call fcn.0045de10
mov eax, ebp
mov edi, ebx
jmp 0x52e2e3
lea edx, [edi + 0xc]
mov ebx, edi
mov edi, edx
mov ebp, eax
mov eax, ecx
call fcn.0045de10
mov eax, ebp
mov edi, ebx
jmp 0x52e2ba
mov edx, eax
mov eax, ecx
call fcn.0045de10
mov eax, edx
jmp 0x52e29a
mov eax, esi
call fcn.0045de90
mov eax, esi
call fcn.0045de90
mov eax, edx
call fcn.0045de90
nop
call fcn.0045c8b0
jmp fcn.0052e240