Function at 0x526140
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x2b8]
cmp eax, dword [ecx + 8]
jbe 0x528bbd
sub esp, 0x338
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov ecx, dword [esp + 0x340]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x344]
mov dword [esp + 8], edx
call fcn.00483910
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x34c]
mov edi, dword [esp + 0x354]
cmp esi, edi
jne 0x526254
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x358]
call fcn.0045fb14
call fcn.00528bd0
movzx eax, byte [esp + 0x24]
test al, al
je 0x5261f6
xor eax, eax
xor ecx, ecx
jmp 0x526231
lea eax, [0x6671e9]
mov dword [esp + 0x1dc], eax
mov dword [esp + 0x1e0], 0x12
mov eax, dword [esp + 0x1dc]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, eax
lea eax, [0x6cfa98]
mov edx, dword [esp + 0x354]
mov dword [esp + 0x370], edx
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], ecx
add esp, 0x338
ret
mov dword [esp + 0x120], eax
mov dword [esp + 0xe8], ecx
mov dword [esp + 0x11c], ebp
mov dword [esp + 0xe4], ebx
mov dword [esp + 0x68], edx
mov eax, dword [edx + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x14
je 0x526287
xor eax, eax
jmp 0x5262a3
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x6c]
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
sete al
test al, al
je 0x526a0e
mov eax, dword [esp + 0x348]
mov dword [esp], eax
mov ecx, dword [esp + 0x34c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x350]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x354]
mov dword [esp + 0xc], ebx
call fcn.005256e0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
movzx ebp, byte [esp + 0x1c]
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x120], edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], ecx
xchg ebp, eax
mov byte [esp + 0xc0], al
xchg ebp, eax
test esi, esi
jne 0x5269eb
mov dword [esp + 0x54], eax
mov dword [esp + 0xa8], esi
lea esi, [ecx + eax]
cmp eax, esi
jg 0x526992
mov dword [esp + 0xa4], ebx
mov ebx, dword [esp + 0x34c]
cmp ebx, esi
jl 0x526992
mov dword [esp + 0xa0], esi
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x526982
mov ebx, dword [esp + 0xa4]
test ebx, ebx
jne 0x526982
mov ebx, dword [esp + 0x350]
cmp ebx, esi
jb 0x528bb3
cmp eax, esi
ja 0x528bac
mov dword [esp + 0x58], ecx
sub ebx, eax
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and ebx, eax
mov dword [esp + 0xa4], ebx
mov eax, esi
mov esi, dword [esp + 0x348]
add ebx, esi
cmp edx, 0x12
jg 0x526704
cmp edx, 4
jle 0x5264ff
cmp edx, 6
je 0x526497
cmp edx, 0xc
je 0x5263dd
cmp edx, 0x12
jne 0x5267de
xor edx, edx
jmp 0x528af4
mov dword [esp + 0xe0], ebx
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00465d00
movzx eax, byte [esp + 0xc]
test al, al
je 0x52642a
mov dword [esp], 0
mov eax, dword [esp + 0xe0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
jmp 0x526457
lea eax, [0x63c100]
mov dword [esp], eax
call fcn.0040b470
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x66b1ac]
mov dword [eax], ecx
xor ecx, ecx
lea edx, [0x6cf624]
mov ebx, eax
xor eax, eax
mov dword [esp + 0x100], ebx
mov dword [esp + 0x84], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408e30
mov eax, dword [esp + 8]
lea ecx, [0x634440]
mov edx, dword [esp + 0x84]
mov ebx, eax
mov edi, dword [esp + 0x100]
mov eax, dword [esp + 0xa0]
jmp 0x528a3b
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.005249f0
mov eax, dword [esp + 0x18]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x120], ecx
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.00408eb0
mov eax, dword [esp + 0xc]
lea ecx, [0x640120]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x120]
mov eax, dword [esp + 0xa0]
jmp 0x528a3b
cmp edx, 2
je 0x5266a4
cmp edx, 3
jne 0x52665e
test ecx, ecx
je 0x5265b4
mov edx, dword [esp + 0xa4]
movzx edx, byte [edx + esi]
movzx esi, dl
cmp esi, 7
jg 0x52654c
cmp ecx, 1
jne 0x526535
test esi, esi
jne 0x52654c
movzx edi, byte [ecx + ebx - 1]
mov ecx, edx
mov eax, 1
shl eax, cl
dec eax
xchg edi, ebx
test al, bl
xchg edi, ebx
je 0x52658f
lea eax, [0x66efdd]
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1b8], 0x22
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00408e30
mov eax, dword [esp + 8]
xor esi, esi
xor edx, edx
xor ecx, ecx
lea ebx, [0x6cfa98]
xor ebp, ebp
jmp 0x5265f5
mov ecx, dword [esp + 0x58]
dec ecx
mov edx, ecx
shl ecx, 3
sub ecx, esi
dec ebp
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 1
add ebx, ebp
mov ebp, ebx
xor eax, eax
xor ebx, ebx
jmp 0x5265f5
lea eax, [0x669395]
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x1c0], 0x16
mov eax, dword [esp + 0x1bc]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.00408e30
mov eax, dword [esp + 8]
xor esi, esi
xor edx, edx
xor ecx, ecx
lea ebx, [0x6cfa98]
xor ebp, ebp
mov dword [esp + 0xfc], eax
mov dword [esp + 0x80], ebx
mov dword [esp + 0x1ec], ebp
mov dword [esp + 0x1f0], edx
mov dword [esp + 0x1f4], esi
mov dword [esp + 0x1f8], ecx
lea ecx, [0x64cfc0]
mov dword [esp], ecx
lea edx, [esp + 0x1ec]
mov dword [esp + 4], edx
call fcn.00408be0
mov eax, dword [esp + 8]
lea ecx, [0x64cfc0]
mov edx, dword [esp + 0x80]
mov ebx, eax
mov edi, dword [esp + 0xfc]
mov eax, dword [esp + 0xa0]
jmp 0x528a3b
cmp edx, 4
jne 0x5267de
mov dword [esp + 0x118], edi
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00408eb0
mov eax, dword [esp + 0xc]
lea ecx, [0x62d820]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x118]
mov eax, dword [esp + 0xa0]
jmp 0x528a3b
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00524140
mov eax, dword [esp + 0x14]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x120], ecx
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
mov dword [esp + 4], edx
mov dword [esp], ebx
call fcn.00408d80
mov eax, dword [esp + 8]
lea ecx, [0x633cc0]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x120]
mov eax, dword [esp + 0xa0]
jmp 0x528a3b
cmp edx, 0x16
jg 0x5267cb
cmp edx, 0x13
je 0x52676b
cmp edx, 0x14
je 0x526727
cmp edx, 0x16
jne 0x5267de
xor edx, edx
jmp 0x528a47
mov dword [esp], 0
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408e30
mov eax, dword [esp + 8]
lea ecx, [0x634440]
xor edx, edx
mov ebx, eax
xor edi, edi
mov eax, dword [esp + 0xa0]
jmp 0x528a3b
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.005253e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa8], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x120], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408e30
mov eax, dword [esp + 8]
lea ecx, [0x634440]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x120]
mov eax, dword [esp + 0xa0]
jmp 0x528a3b
cmp edx, 0x17
je 0x5268e8
cmp edx, 0x18
je 0x52684e
cmp edx, 0x1e
je 0x5267ee
xor ecx, ecx
mov edx, dword [esp + 0xa8]
xor ebx, ebx
jmp 0x528a3b
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.005254f0
mov eax, dword [esp + 0x14]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x120], ecx
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00408e30
mov eax, dword [esp + 8]
lea ecx, [0x634440]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x120]
mov eax, dword [esp + 0xa0]
jmp 0x528a3b
lea edi, [esp + 0x224]
xor eax, eax
call fcn.0045f63b
mov dword [esp], ebx
mov ecx, dword [esp + 0x58]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.005251a0
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x120], edx
lea edi, [esp + 0x224]
lea esi, [esp + 0xc]
call fcn.0045fb1e
lea edi, [esp + 0x1fc]
lea esi, [esp + 0x224]
call fcn.0045fb1e
lea ecx, [0x65fe80]
mov dword [esp], ecx
lea ecx, [esp + 0x1fc]
mov dword [esp + 4], ecx
call fcn.00408be0
mov eax, dword [esp + 8]
lea ecx, [0x65fe80]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x120]
mov eax, dword [esp + 0xa0]
jmp 0x528a3b
lea edi, [esp + 0x224]
xor eax, eax
call fcn.0045f63b
mov dword [esp], ebx
mov ecx, dword [esp + 0x58]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00524e50
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x120], edx
lea edi, [esp + 0x224]
lea esi, [esp + 0xc]
call fcn.0045fb1e
lea edi, [esp + 0x210]
lea esi, [esp + 0x224]
call fcn.0045fb1e
lea ecx, [0x65fe80]
mov dword [esp], ecx
lea ecx, [esp + 0x210]
mov dword [esp + 4], ecx
call fcn.00408be0
mov eax, dword [esp + 8]
lea ecx, [0x65fe80]
mov edx, dword [esp + 0xa8]
mov ebx, eax
mov edi, dword [esp + 0x120]
mov eax, dword [esp + 0xa0]
jmp 0x528a3b
mov eax, dword [esp + 0xa8]
xor ecx, ecx
xor edx, edx
jmp 0x52892e
lea eax, [0x66554e]
mov dword [esp + 0x1d4], eax
mov dword [esp + 0x1d8], 0xe
mov eax, dword [esp + 0x1d4]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cfa98]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edi
add esp, 0x338
ret
mov eax, dword [esp + 0x348]
mov dword [esp], eax
mov ecx, dword [esp + 0x34c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x350]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x354]
mov dword [esp + 0xc], ebx
call fcn.005256e0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x118], edx
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x18]
movzx esi, byte [esp + 0x1c]
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xb4], edi
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], ebp
xchg esi, eax
mov byte [esp + 0xc0], al
xchg esi, eax
test ecx, ecx
jne 0x5282a7
mov dword [esp + 0xa4], eax
movzx eax, byte [esp + 0x359]
test al, al
je 0x526e39
movzx eax, byte [esp + 0x35a]
test al, al
je 0x526ab6
mov eax, 1
jmp 0x526abb
mov eax, 2
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x114], ebx
mov ecx, dword [esp + 0x34c]
mov ebx, dword [esp + 0xa4]
cmp ecx, ebx
je 0x526ddd
cmp eax, edi
jne 0x526d2c
mov eax, dword [esp + 0x360]
cmp dword [eax], edx
jne 0x526d2c
test ebp, ebp
je 0x526b04
xchg esi, eax
test al, al
xchg esi, eax
je 0x526d2c
mov eax, dword [0x827d54]
mov ecx, dword [esp + 0x11c]
cmp dword [0x827d50], ecx
jne 0x526ba5
mov dword [esp + 0xa0], edi
mov dword [esp + 0x9c], edx
xchg esi, eax
mov byte [esp + 0x43], al
xchg esi, eax
mov dword [esp + 0x98], ebp
mov dword [esp], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00403430
movzx eax, byte [esp + 0xc]
test al, al
je 0x526b8c
mov ebp, dword [esp + 0x98]
mov ecx, dword [esp + 0x9c]
mov ebx, dword [esp + 0xa0]
mov eax, dword [esp + 0xa4]
mov edx, dword [esp + 0xa8]
movzx esi, byte [esp + 0x43]
mov edi, dword [esp + 0x114]
jmp 0x526e5a
mov eax, dword [esp + 0x98]
test eax, eax
mov ecx, dword [esp + 0x11c]
mov ebx, dword [esp + 0xa4]
jmp 0x526ba7
test ebp, ebp
jg 0x526c92
mov eax, dword [0x827d3c]
cmp dword [0x827d38], ecx
jne 0x526bdb
mov dword [esp], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00403430
movzx eax, byte [esp + 0xc]
test al, al
jne 0x526c37
lea eax, [0x6728f0]
mov dword [esp + 0x1a4], eax
mov dword [esp + 0x1a8], 0x2d
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cfa84]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.00483250
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x114]
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov eax, dword [esp + 0x348]
mov dword [esp], eax
mov ecx, dword [esp + 0x34c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x350]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.005256e0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x18]
movzx esi, byte [esp + 0x1c]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x118], edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], ebp
xchg esi, eax
mov byte [esp + 0xc0], al
xchg esi, eax
test edx, edx
je 0x526e5a
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edi
add esp, 0x338
ret
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x358]
call fcn.0045fb14
call fcn.00528bd0
movzx eax, byte [esp + 0x24]
test al, al
je 0x526d81
mov eax, dword [esp + 0x354]
mov ecx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x114]
jmp 0x526dc1
lea eax, [0x670197]
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], 0x25
mov eax, dword [esp + 0x19c]
mov dword [esp], eax
mov dword [esp + 4], 0x25
call fcn.00408e30
mov ebx, dword [esp + 8]
mov eax, dword [esp + 0xa4]
lea ecx, [0x6cfa84]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
lea eax, [0x66a953]
mov dword [esp + 0x1ac], eax
mov dword [esp + 0x1b0], 0x19
mov eax, dword [esp + 0x1ac]
mov dword [esp], eax
mov dword [esp + 4], 0x19
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cfa84]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov eax, dword [esp + 0xa4]
mov eax, ecx
mov ecx, edx
mov edx, eax
mov eax, dword [esp + 0xa4]
mov eax, ebx
mov ebx, edi
mov edi, eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x118], edi
mov dword [esp + 0xa8], edx
xchg esi, eax
mov byte [esp + 0x41], al
xchg esi, eax
mov dword [esp + 0x48], ebp
mov dword [esp + 0x44], ecx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], eax
mov edx, dword [esp + 0x120]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
call fcn.00529510
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp + 8]
movzx edx, byte [esp + 0x11]
movzx ebx, byte [esp + 0x10]
test dl, dl
je 0x5281e6
cmp eax, 0x13
jne 0x526f0c
mov ebp, dword [esp + 0x4c]
test ebp, ebp
jne 0x526ef7
mov edx, ebx
mov ebx, dword [esp + 0x44]
cmp ebx, 0x14
jg 0x526edc
cmp ebx, 0xc
je 0x526eeb
cmp ebx, 0x12
je 0x526eeb
cmp ebx, 0x14
je 0x526eeb
jmp 0x526eef
cmp ebx, 0x16
je 0x526eeb
cmp ebx, 0x1b
je 0x526eeb
cmp ebx, 0x1e
jne 0x526eef
mov eax, ebx
jmp 0x526f18
mov ebx, eax
mov eax, dword [esp + 0x44]
jmp 0x526f18
mov edx, ebx
mov ebx, dword [esp + 0x364]
test ebx, ebx
jne 0x526f06
mov ebx, eax
mov eax, dword [esp + 0x44]
jmp 0x526f18
mov edx, ebx
mov ebp, dword [esp + 0x4c]
mov ebx, eax
mov eax, dword [esp + 0x44]
cmp ebx, 0x17
jne 0x526f2b
cmp eax, 0x18
jne 0x526f2b
test ebp, ebp
jne 0x526f2b
mov ebx, 0x18
mov esi, ebp
movzx ebp, byte [esp + 0x36c]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x526f40
mov ebx, 0x11
mov byte [esp + 0x42], cl
movzx ebp, byte [esp + 0x359]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x526f89
mov edi, ebx
mov ebx, dword [esp + 0x360]
test ebx, ebx
je 0x526f83
mov ebx, dword [ebx]
xchg ebp, eax
test al, al
xchg ebp, eax
mov dword [esp + 0xac], eax
mov eax, 2
mov dword [esp + 0x70], eax
mov ecx, 0
mov eax, dword [esp + 0xac]
jmp 0x526f96
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, edi
mov edi, ebx
mov ebx, 0
mov dword [esp + 0x70], ebx
mov ebx, edi
jne 0x526fd7
mov dword [esp + 0x6c], ebx
movzx ebx, byte [esp + 0x35a]
test bl, bl
je 0x526fcf
mov ebx, dword [esp + 0x360]
test ebx, ebx
je 0x526fc5
mov ebx, dword [ebx]
xchg ebp, eax
test al, al
xchg ebp, eax
mov ecx, 1
mov ebp, 0
jmp 0x526fdd
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, dword [esp + 0x6c]
jmp 0x526fd7
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, dword [esp + 0x6c]
mov ebp, ecx
mov ecx, dword [esp + 0x70]
jne 0x527018
mov dword [esp + 0x94], ebx
movzx ebx, byte [esp + 0x35b]
test bl, bl
je 0x527011
mov ebx, dword [esp + 0x360]
test ebx, ebx
je 0x527008
mov ebx, dword [ebx]
xor ebp, ebp
mov ecx, 3
jmp 0x527018
mov ebx, dword [esp + 0x94]
jmp 0x527018
mov ebx, dword [esp + 0x94]
mov dword [esp + 0x6c], ebx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x527032
cmp ecx, esi
jne 0x527fb7
cmp ebx, eax
jne 0x527fb7
movzx ebp, byte [esp + 0x42]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x527044
movzx ebp, byte [esp + 0x41]
jmp 0x527053
movzx ebp, byte [esp + 0x41]
xchg ebp, eax
cmp al, dl
xchg ebp, eax
jne 0x527fb7
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x50]
lea esi, [ebp + ebx]
cmp ebp, esi
jg 0x527f5e
mov ebx, dword [esp + 0x34c]
cmp ebx, esi
jl 0x527f5e
mov ebx, dword [esp + 0x350]
cmp ebx, esi
jb 0x528925
cmp ebp, esi
ja 0x52891c
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa0], edi
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov ecx, dword [esp + 0x340]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x344]
mov dword [esp + 8], edx
call fcn.00480e70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.00482280
mov eax, dword [esp + 0x350]
mov ecx, dword [esp + 0x50]
mov edx, eax
sub eax, ecx
mov ebx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x348]
lea ebp, [eax + ecx]
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov dword [esp + 0xd8], edi
mov edi, dword [esp + 0x14]
mov dword [esp + 0xd4], edi
mov edi, dword [esp + 0x14]
mov dword [esp + 0xd0], edi
mov edi, dword [esp + 0x14]
mov dword [esp + 0xcc], edi
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
test esi, esi
je 0x52774c
mov edx, dword [esi + 8]
cmp edx, 0x4c618499
ja 0x5273ef
cmp edx, 0x1c87085b
jne 0x5271d2
lea eax, [0x6283a0]
cmp edi, eax
jne 0x527745
mov dword [esp], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.005243b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
jne 0x5271af
mov ecx, dword [esp + 0xc8]
mov dword [ecx], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], edx
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
cmp edx, 0x26ca392d
jne 0x52736a
lea ecx, [0x660e60]
cmp edi, ecx
jne 0x527745
mov ecx, dword [esp + 0xa0]
cmp ecx, 0x17
jne 0x5272b3
lea edi, [esp + 0x224]
xor eax, eax
call fcn.0045f63b
mov dword [esp], ebp
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00524e50
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x120], ecx
mov edx, dword [esp + 0x24]
lea edi, [esp + 0x224]
lea esi, [esp + 0xc]
call fcn.0045fb1e
mov edi, dword [esp + 0xcc]
test byte [edi], al
mov ecx, dword [0x84f450]
test ecx, ecx
jne 0x52725e
lea esi, [esp + 0x224]
call fcn.0045fb1e
jmp 0x527289
mov dword [esp + 0x118], edx
lea eax, [0x65fe80]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x224]
mov dword [esp + 8], eax
call fcn.00410a60
mov edx, dword [esp + 0x118]
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edx
add esp, 0x338
ret
lea edi, [esp + 0x224]
xor eax, eax
call fcn.0045f63b
mov dword [esp], ebp
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.005251a0
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x120], ecx
mov edx, dword [esp + 0x24]
lea edi, [esp + 0x224]
lea esi, [esp + 0xc]
call fcn.0045fb1e
mov edi, dword [esp + 0xcc]
test byte [edi], al
mov ecx, dword [0x84f450]
test ecx, ecx
jne 0x527315
lea esi, [esp + 0x224]
call fcn.0045fb1e
jmp 0x527340
mov dword [esp + 0x118], edx
lea eax, [0x65fe80]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x224]
mov dword [esp + 8], eax
call fcn.00410a60
mov edx, dword [esp + 0x118]
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edx
add esp, 0x338
ret
cmp edx, 0x4c618499
jne 0x527745
lea eax, [0x63e5c0]
cmp edi, eax
jne 0x527745
mov dword [esp], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.005249f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0xd4]
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0x84f450]
test ecx, ecx
jne 0x5273c7
mov dword [edi], eax
jmp 0x5273cc
call fcn.0045f3a0
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], ebx
mov dword [esp + 0x378], ebp
add esp, 0x338
ret
cmp edx, 0x7418f6b4
ja 0x5274cd
cmp edx, 0x4d10f6f9
jne 0x527445
lea ecx, [0x6283e0]
cmp edi, ecx
jne 0x527745
mov byte [eax], 1
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x378], eax
add esp, 0x338
ret
cmp edx, 0x7418f6b4
jne 0x527745
lea eax, [0x627160]
cmp edi, eax
jne 0x527745
mov dword [esp + 0xc4], ecx
mov dword [esp], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00524560
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
jne 0x5274aa
mov edi, dword [esp + 0xc4]
test byte [edi], al
mov ecx, dword [0x84f450]
test ecx, ecx
jne 0x5274a5
mov dword [edi], eax
jmp 0x5274aa
call fcn.0045f3a0
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], edx
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
cmp edx, 0x8faab972
jne 0x5275f2
lea edx, [0x628460]
cmp edi, edx
jne 0x527745
mov eax, dword [esp + 0x354]
mov ecx, dword [esp + 0xa4]
cmp eax, ecx
ja 0x528917
lea edi, [esp + 0x250]
mov edx, eax
xor eax, eax
call fcn.0045f637
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x250], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x254], ecx
movzx ecx, byte [esp + 0x41]
mov byte [esp + 0x258], cl
mov dword [esp + 0x25c], ebp
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], ebx
mov ecx, dword [esp + 0x350]
sub ecx, edx
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, edx
mov ebp, dword [esp + 0x348]
add ecx, ebp
mov dword [esp + 0x268], ecx
mov ecx, dword [esp + 0xa4]
mov ebp, ecx
sub ecx, edx
mov dword [esp + 0x26c], ecx
mov dword [esp + 0x270], ebx
mov edi, dword [esp + 0xd8]
test byte [edi], al
mov ecx, dword [0x84f450]
test ecx, ecx
jne 0x5275a4
lea esi, [esp + 0x250]
call fcn.0045faf6
jmp 0x5275c8
lea eax, [0x64d8c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x250]
mov dword [esp + 8], eax
call fcn.00410a60
mov ebp, dword [esp + 0xa4]
mov dword [esp + 0x370], ebp
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x378], eax
add esp, 0x338
ret
cmp edx, 0xeb2625b9
jne 0x527745
lea edx, [0x63e560]
cmp edi, edx
jne 0x527745
mov edx, dword [esp + 0x48]
test edx, edx
je 0x5276b8
mov esi, dword [esp + 0x348]
mov eax, ebx
mov ebx, dword [esp + 0x9c]
movzx ecx, byte [ebx + esi]
movzx ebx, cl
cmp ebx, 7
jg 0x527656
cmp edx, 1
jne 0x52763d
test ebx, ebx
jne 0x527656
movzx esi, byte [edx + ebp - 1]
mov edi, ebp
mov ebp, 1
shl ebp, cl
dec ebp
xchg esi, eax
xchg ebp, ebx
test bl, al
xchg ebp, ebx
xchg esi, eax
je 0x527699
lea eax, [0x66efdd]
mov dword [esp + 0x174], eax
mov dword [esp + 0x178], 0x22
mov eax, dword [esp + 0x174]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00408e30
mov eax, dword [esp + 8]
xor ebx, ebx
xor ebp, ebp
xor edx, edx
xor ecx, ecx
lea esi, [0x6cfa98]
jmp 0x5276f9
lea ecx, [edx - 1]
mov edx, ecx
shl ecx, 3
sub ecx, ebx
lea ebx, [eax - 1]
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
add ebx, edi
xor esi, esi
xor eax, eax
jmp 0x5276f9
lea eax, [0x669395]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], 0x16
mov eax, dword [esp + 0x17c]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.00408e30
mov eax, dword [esp + 8]
xor ebx, ebx
xor ebp, ebp
xor edx, edx
xor ecx, ecx
lea esi, [0x6cfa98]
mov edi, dword [esp + 0xd0]
mov dword [edi + 4], edx
mov dword [edi + 8], ebp
mov dword [edi + 0xc], ecx
mov ecx, dword [0x84f450]
test ecx, ecx
jne 0x527717
mov dword [edi], ebx
jmp 0x527722
mov ecx, eax
mov eax, ebx
call fcn.0045f3a0
mov eax, ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x370], ecx
mov dword [esp + 0x374], esi
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov edx, dword [esp + 0x350]
mov dword [esp + 0x98], ebx
mov dword [esp + 0xdc], ebp
nop
mov eax, dword [esp + 0x344]
mov ecx, eax
and eax, 0x1f
cmp eax, 6
jbe 0x527c25
cmp eax, 0x17
je 0x5279b2
cmp eax, 0x18
jne 0x5279a2
mov eax, dword [esp + 0xa0]
cmp eax, 0x13
jg 0x527858
cmp eax, 0xc
je 0x5277d9
cmp eax, 0x12
jne 0x5277a7
mov eax, dword [esp + 0x48]
xor edx, edx
jmp 0x528894
cmp eax, 0x13
jne 0x5278ad
mov dword [esp], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.005253e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
jmp 0x5287aa
mov dword [esp], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00465d00
movzx eax, byte [esp + 0xc]
test al, al
je 0x527826
mov dword [esp], 0
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
jmp 0x5287aa
lea eax, [0x63c100]
mov dword [esp], eax
call fcn.0040b470
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x66b1ac]
mov dword [eax], ecx
xor ecx, ecx
lea edx, [0x6cf624]
mov ebx, eax
xor eax, eax
jmp 0x5287aa
cmp eax, 0x16
jg 0x52789b
cmp eax, 0x14
je 0x527872
cmp eax, 0x16
jne 0x5278ad
mov eax, dword [esp + 0x48]
xor edx, edx
jmp 0x52881b
mov dword [esp], 0
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
jmp 0x5287aa
cmp eax, 0x1b
je 0x527979
cmp eax, 0x1e
je 0x527950
mov dword [esp + 0x1e4], 0
mov dword [esp + 0x1e8], 0
mov dword [esp], eax
call fcn.00408d20
mov eax, dword [esp + 4]
lea ecx, [0x633c00]
mov dword [esp + 0x1e4], ecx
mov dword [esp + 0x1e8], eax
lea eax, [0x670771]
mov dword [esp], eax
mov dword [esp + 4], 0x26
lea eax, [esp + 0x1e4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004b50a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
mov ecx, dword [esp + 0x144]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408e30
mov ebx, dword [esp + 8]
lea edx, [0x6cfa98]
xor ecx, ecx
xor eax, eax
jmp 0x5287aa
mov dword [esp], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.005254f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
jmp 0x5287aa
mov dword [esp], 0
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
jmp 0x5287aa
cmp eax, 0x19
jne 0x527ea9
xor eax, eax
jmp 0x5282d1
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x527b3e
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call fcn.00484050
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x33c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x340]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x344]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00483140
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
call fcn.00408eb0
mov eax, dword [esp + 0xc]
nop
movzx ecx, byte [0x8283e0]
test cl, cl
je 0x527aa0
lea ecx, [0x62d820]
mov dword [0x8283e4], ecx
mov edx, dword [0x84f450]
test edx, edx
jne 0x527a93
mov dword [0x8283e8], eax
jmp 0x527aa6
lea edi, [0x8283e8]
call fcn.0045f3a0
jmp 0x527aa6
lea ecx, [0x62d820]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], eax
mov ecx, dword [esp + 0x124]
test ecx, ecx
je 0x527ad6
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x527adc
or edx, 0x80
jmp 0x527adc
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x33c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x340]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x344]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00483d30
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xe8]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xdc]
mov dword [esp], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x98]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x120]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00525cf0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
test ebx, ebx
jne 0x527c02
mov dword [esp + 0x120], ebp
mov dword [esp + 0xec], esi
mov ebx, dword [esp + 0x33c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x340]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x344]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00483140
mov ebp, dword [esp + 0x120]
mov esi, dword [esp + 0xec]
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], ebp
mov dword [esp + 0x378], esi
add esp, 0x338
ret
cmp eax, 1
jne 0x527d52
mov eax, dword [esp + 0x48]
cmp eax, 1
jne 0x527cb1
mov eax, dword [esp + 0x348]
mov edx, dword [esp + 0x9c]
movzx eax, byte [edx + eax]
test al, al
jne 0x527c58
xor eax, eax
xor edx, edx
xor ebx, ebx
jmp 0x527cf3
cmp al, 0xff
jne 0x527c6b
mov eax, 1
xor edx, edx
xor ebx, ebx
jmp 0x527cf3
lea eax, [0x665bc4]
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], 0xf
mov eax, dword [esp + 0x164]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x344]
lea edx, [0x6cfa98]
mov ebx, eax
xor eax, eax
jmp 0x527cf3
lea eax, [0x665bc4]
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], 0xf
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00408e30
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 0x344]
lea edx, [0x6cfa98]
xor eax, eax
test edx, edx
jne 0x527d2f
mov dword [esp + 0xf8], ebx
mov dword [esp + 0x7c], edx
mov edx, dword [esp + 0x33c]
mov dword [esp], edx
mov edx, dword [esp + 0x340]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov byte [esp + 0xc], al
call fcn.00483250
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0xf8]
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], edx
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
cmp eax, 2
je 0x527d60
cmp eax, 5
jb 0x527ea9
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov edx, dword [esp + 0x340]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00483910
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x7c]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 4
jne 0x527e19
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
call fcn.005243b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test ecx, ecx
jne 0x527e86
mov dword [esp + 0xf4], edx
mov dword [esp + 0x78], ecx
mov ecx, dword [esp + 0x33c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x340]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x344]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.00483310
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0xf4]
jmp 0x527e86
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
call fcn.00524140
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
test eax, eax
jne 0x527e82
mov dword [esp + 0xf0], ecx
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 8], eax
call fcn.00483310
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0xf0]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], edx
add esp, 0x338
ret
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00483910
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x66512c]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xd
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044b990
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], eax
mov ecx, dword [esp + 0x13c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cfa84]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
lea eax, [0x66554e]
mov dword [esp + 0x184], eax
mov dword [esp + 0x188], 0xe
mov eax, dword [esp + 0x184]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cfa98]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x358]
call fcn.0045fb14
call fcn.00528bd0
movzx eax, byte [esp + 0x24]
test al, al
je 0x52800f
mov eax, dword [esp + 0x354]
mov ecx, dword [esp + 0xa8]
mov edi, dword [esp + 0x118]
jmp 0x5281ca
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0xbc], eax
movzx eax, byte [esp + 0x41]
mov byte [esp + 0xc0], al
lea edi, [esp + 0x238]
lea esi, [esp + 0x358]
call fcn.0045fb14
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0x60]
mov ecx, dword [esp + 0xe8]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0x120], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0xa4], ecx
lea edi, [esp + 0x274]
xor eax, eax
call fcn.0045f636
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
call fcn.00408d20
mov eax, dword [esp + 4]
lea ecx, [0x633c00]
mov dword [esp + 0x274], ecx
mov dword [esp + 0x278], eax
lea eax, [0x64a560]
mov dword [esp], eax
lea edx, [esp + 0xb4]
mov dword [esp + 4], edx
call fcn.00408c40
mov eax, dword [esp + 8]
lea ecx, [0x64a560]
mov dword [esp + 0x27c], ecx
mov dword [esp + 0x280], eax
lea eax, [0x654f20]
mov dword [esp], eax
lea ecx, [esp + 0x238]
mov dword [esp + 4], ecx
call fcn.00408be0
mov eax, dword [esp + 8]
lea ecx, [0x654f20]
mov dword [esp + 0x284], ecx
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
call fcn.00408e30
mov eax, dword [esp + 8]
lea ecx, [0x634440]
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x290], eax
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00408d20
mov eax, dword [esp + 4]
lea ecx, [0x633c00]
mov dword [esp + 0x294], ecx
mov dword [esp + 0x298], eax
lea eax, [0x670d01]
mov dword [esp], eax
mov dword [esp + 4], 0x27
lea eax, [esp + 0x274]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 5
mov dword [esp + 0x10], 5
call fcn.004b50a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
mov ecx, dword [esp + 0x18c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408e30
mov edi, dword [esp + 8]
mov eax, dword [esp + 0x50]
lea ecx, [0x6cfa84]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], edi
add esp, 0x338
ret
mov dword [esp + 0x1e4], 0
mov dword [esp + 0x1e8], 0
mov eax, dword [esp + 0x11c]
test eax, eax
je 0x52820c
mov ebp, dword [eax + 4]
jmp 0x52820e
mov ebp, eax
mov dword [esp + 0x1e4], ebp
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x1e8], eax
lea eax, [0x667b28]
mov dword [esp], eax
mov dword [esp + 4], 0x13
lea eax, [esp + 0x1e4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004b50a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x198], eax
mov ecx, dword [esp + 0x194]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cfa84]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
mov ecx, dword [esp + 0x64]
lea eax, [ecx + 1]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx + 0x64]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 0x64]
cmp dword [esp + 4], eax
jle 0x528397
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x304]
lea esi, [esp + 8]
call fcn.0045face
lea edi, [esp + 0x2d0]
lea esi, [esp + 0x304]
call fcn.0045face
mov eax, dword [esp + 0x2dc]
test eax, eax
je 0x5282ca
lea eax, [0x66ea5a]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], 0x21
mov eax, dword [esp + 0x15c]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.00408e30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x370], ecx
lea ecx, [0x6cfa84]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x378], eax
add esp, 0x338
ret
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x64]
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
jg 0x5283b6
xor eax, eax
jmp 0x528416
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
mov dword [esp + 4], 0
call ecx
lea edi, [esp + 0x304]
lea esi, [esp + 8]
call fcn.0045face
mov eax, dword [esp + 0x314]
mov ecx, dword [esp + 0x318]
mov edx, dword [0x827d4c]
cmp dword [0x827d48], eax
je 0x528401
xor eax, eax
jmp 0x528416
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00403430
movzx eax, byte [esp + 0xc]
test al, al
je 0x528565
mov eax, dword [esp + 0x354]
mov ecx, dword [esp + 0xa4]
cmp eax, ecx
ja 0x5287a5
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov ecx, dword [esp + 0x340]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x344]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.00481fe0
mov eax, dword [esp + 0x350]
mov ecx, dword [esp + 0x354]
sub eax, ecx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x348]
add eax, ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x110], ebx
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x10c], ebp
mov esi, dword [esp + 0x18]
mov dword [esp + 0x90], esi
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
sub eax, ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00408eb0
mov eax, dword [esp + 0xc]
nop
movzx ecx, byte [0x8283e0]
test cl, cl
je 0x5284f8
lea ecx, [0x634900]
mov dword [0x8283e4], ecx
mov edx, dword [0x84f450]
test edx, edx
jne 0x5284eb
mov dword [0x8283e8], eax
jmp 0x5284fe
lea edi, [0x8283e8]
call fcn.0045f3a0
jmp 0x5284fe
lea ecx, [0x634900]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], eax
mov ecx, dword [esp + 0x12c]
test ecx, ecx
je 0x52852e
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x528534
or edx, 0x80
jmp 0x528534
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x110]
mov dword [esp], ebx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x90]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00483140
xor eax, eax
xor ecx, ecx
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x118]
jmp 0x528584
mov ebp, dword [esp + 0x60]
inc ebp
mov edx, ecx
mov ecx, eax
mov eax, ebp
mov dword [esp + 0x120], ebx
mov dword [esp + 0xa8], edx
mov dword [esp + 0x60], eax
mov dword [esp + 0x5c], ecx
mov ebp, dword [esp + 0x68]
mov esi, dword [ebp + 0x64]
mov edi, dword [esp + 0xe8]
mov dword [esp], edi
call esi
mov eax, dword [esp + 0x60]
cmp dword [esp + 4], eax
jle 0x528774
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x29c]
lea esi, [esp + 8]
call fcn.0045face
mov eax, dword [esp + 0x60]
test eax, eax
jne 0x528627
mov ecx, dword [esp + 0x2ac]
mov edx, dword [esp + 0x2b0]
mov ebx, dword [0x827d4c]
cmp dword [0x827d48], ecx
je 0x52860a
xor ecx, ecx
jmp 0x528629
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.00403430
movzx eax, byte [esp + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x60]
jmp 0x528629
xor ecx, ecx
test cl, cl
je 0x528644
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x120]
jmp 0x528579
mov ecx, dword [esp + 0x33c]
mov dword [esp], ecx
mov edx, dword [esp + 0x340]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x344]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00481fe0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x110], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x90], edx
mov ebx, dword [esp + 0x2b4]
mov ebp, dword [esp + 0x2b8]
mov dword [esp], ebx
mov dword [esp + 4], ebp
lea ebx, [0x662914]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 4
call fcn.0047e5c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00529050
lea edi, [esp + 0x238]
lea esi, [esp + 8]
call fcn.0045fb14
mov eax, dword [esp + 0x110]
mov dword [esp], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x98]
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 0x18], ebx
lea edi, [esp + 0x1c]
lea esi, [esp + 0x238]
call fcn.0045fb14
call fcn.00526140
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
test ecx, ecx
je 0x528579
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], edx
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x378], eax
add esp, 0x338
ret
call fcn.0045f480
test edx, edx
jne 0x5287f7
mov dword [esp + 0x120], ebx
mov dword [esp + 0xa8], edx
mov edx, dword [esp + 0x33c]
mov dword [esp], edx
mov edx, dword [esp + 0x340]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x344]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00483500
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x120]
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], edx
mov dword [esp + 0x378], ebx
add esp, 0x338
ret
inc edx
cmp edx, eax
jge 0x528866
lea ebx, [edx + ebp]
cmp byte [ebx], 0x80
jb 0x52881a
lea eax, [0x66f982]
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], 0x24
mov eax, dword [esp + 0x14c]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.00408e30
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x6cfa98]
xor ebx, ebx
jmp 0x528888
mov dword [esp], 0
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov ebp, eax
mov eax, ebx
mov ebx, ebp
jmp 0x5287aa
inc edx
cmp edx, eax
jge 0x5288ea
movzx ebx, byte [edx + ebp]
lea esi, [ebx - 0x30]
xchg esi, eax
cmp al, 9
xchg esi, eax
jbe 0x528893
cmp bl, 0x20
je 0x528893
lea eax, [0x670f28]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], 0x28
mov eax, dword [esp + 0x154]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.00408e30
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x6cfa98]
xor ebx, ebx
jmp 0x52890c
mov dword [esp], 0
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov ebp, eax
mov eax, ebx
mov ebx, ebp
jmp 0x5287aa
call fcn.0045f480
mov eax, ebp
mov ecx, esi
call fcn.0045f480
mov ecx, esi
mov edx, ebx
call fcn.0045f460
test eax, eax
jne 0x528a1f
test ecx, ecx
je 0x528a03
nop
movzx ebx, byte [0x8283e0]
test bl, bl
je 0x528977
mov dword [0x8283e4], ecx
mov ebx, dword [0x84f450]
test ebx, ebx
jne 0x528962
mov dword [0x8283e8], edx
jmp 0x528977
mov ebx, edi
lea edi, [0x8283e8]
mov ebp, eax
mov eax, edx
call fcn.0045f3a0
mov eax, ebp
mov edi, ebx
mov dword [esp + 0xa8], eax
mov dword [esp + 0x120], edi
mov dword [esp + 0x134], ecx
mov dword [esp + 0x138], edx
mov ecx, dword [esp + 0x134]
test ecx, ecx
je 0x5289b7
nop
movzx ebx, byte [ecx + 0xf]
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x5289bd
or ebx, 0x80
jmp 0x5289bd
xor ebx, ebx
xor ecx, ecx
xor edx, edx
mov eax, dword [esp + 0x33c]
mov dword [esp], eax
mov eax, dword [esp + 0x340]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x344]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.00483140
mov eax, dword [esp + 0xa8]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x120]
mov dword [esp + 0x370], esi
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edi
add esp, 0x338
ret
mov dword [esp + 0x370], esi
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], edi
add esp, 0x338
ret
mov esi, eax
mov eax, edx
mov edx, ebx
jmp 0x52892e
inc edx
cmp edx, ecx
jge 0x528a93
lea ebp, [edx + ebx]
cmp byte [ebp], 0x80
jb 0x528a46
lea eax, [0x66f982]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], 0x24
mov eax, dword [esp + 0x1c4]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.00408e30
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x6cfa98]
xor ebx, ebx
jmp 0x528ab5
mov dword [esp], 0
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov dword [esp + 0x104], eax
mov dword [esp + 0x88], edx
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00408e30
mov ebx, dword [esp + 8]
mov eax, dword [esp + 0xa0]
lea ecx, [0x634440]
mov edx, dword [esp + 0x88]
mov edi, dword [esp + 0x104]
jmp 0x528a3b
inc edx
cmp edx, ecx
jge 0x528b4c
movzx ebp, byte [edx + ebx]
lea esi, [ebp - 0x30]
xchg esi, eax
cmp al, 9
xchg esi, eax
jbe 0x528af3
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x528af3
lea eax, [0x670f28]
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], 0x28
mov eax, dword [esp + 0x1cc]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.00408e30
mov eax, dword [esp + 8]
xor ecx, ecx
lea edx, [0x6cfa98]
xor ebx, ebx
jmp 0x528b6e
mov dword [esp], 0
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0044bc40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov ebx, eax
xor eax, eax
mov dword [esp + 0x108], eax
mov dword [esp + 0x8c], edx
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00408e30
mov ebx, dword [esp + 8]
mov eax, dword [esp + 0xa0]
lea ecx, [0x634440]
mov edx, dword [esp + 0x8c]
mov edi, dword [esp + 0x108]
jmp 0x528a3b
mov ecx, esi
call fcn.0045f480
mov ecx, esi
mov edx, ebx
call fcn.0045f460
nop
call fcn.0045df90
jmp fcn.00526140