Function at 0x527df0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x16c]
cmp eax, dword [ecx + 8]
jbe 0x528d97
sub esp, 0x1ec
xor eax, eax
lea edi, [esp + 0x1c4]
call fcn.004637b6
lea edi, [esp + 0x184]
call fcn.004637ba
lea edi, [esp + 0x16c]
call fcn.004637ba
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], eax
xor ebx, ebx
mov dword [esp + 0x1fc], ebx
mov dword [esp + 0x200], ebx
mov ebx, dword [esp + 0x1f8]
xor ebp, ebp
cmp ebx, ebp
jne 0x527e90
mov ebx, 0x758905
mov dword [esp + 0x1fc], ebx
mov dword [esp + 0x200], 5
add esp, 0x1ec
ret
mov ebx, dword [esp + 0x1f4]
cmp ebx, 0
jne 0x527eb3
xor ebx, ebx
mov dword [esp + 0x1fc], ebx
mov dword [esp + 0x200], ebx
add esp, 0x1ec
ret
mov dword [esp], 0x70b300
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 0
call fcn.00449940
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x100], edx
mov dword [esp + 0x104], ecx
mov dword [esp + 0x108], eax
mov dword [esp], 0x733440
call fcn.0041a7b0
mov ecx, dword [esp + 4]
mov edi, ecx
cmp ecx, 0
je 0x528d90
xor eax, eax
call fcn.004637aa
mov dword [esp + 0xac], ecx
mov ebp, dword [esp + 0x104]
mov dword [ecx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ecx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x8f7eb8], 0
jne 0x528d78
mov dword [ecx], ebp
mov dword [esp + 0x94], ecx
mov ebx, dword [esp + 0x1f8]
cmp ebx, 0
je 0x528d71
mov eax, dword [ebx + 4]
mov edx, dword [ebx + 8]
mov edi, dword [ebx + 0xc]
mov ebp, dword [ebx + 0x10]
mov dword [esp + 0x148], ebp
mov dword [esp + 0x13c], eax
mov dword [esp + 0x140], edx
add eax, 0x886e0900
adc edx, 0xfffffff1
mov esi, 0x3b9aca00
xor ebx, ebx
mov ebp, edx
or ebp, ebx
jne 0x528d5c
mul esi
mov esi, eax
mov ebp, edx
mov dword [esp + 0x144], edi
mov eax, edi
cdq
mov ebx, eax
mov ecx, edx
mov eax, esi
mov edx, ebp
add eax, ebx
adc edx, ecx
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], 0x3b9aca00
mov dword [esp + 0xc], 0
call fcn.0045b5d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x14]
mov esi, dword [0x8de0d4]
cmp esi, 0
je 0x528d55
lea edi, [esp + 0x19c]
cld
call fcn.00463c6c
mov edx, dword [esp + 0x19c]
mov ecx, dword [esp + 0x1a0]
cmp ecx, ebp
mov dword [esp + 0x90], ebp
jne 0x52802d
cmp edx, dword [esp + 0x8c]
je 0x5287eb
mov esi, dword [esp + 0x1f8]
cmp esi, 0
je 0x528d4e
add esi, 4
mov edi, esp
cld
call fcn.00463ca8
call fcn.00512b70
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x84], ebx
mov esi, dword [esp + 0x1f8]
cmp esi, 0
je 0x528d47
add esi, 4
mov edi, esp
cld
call fcn.00463ca8
call fcn.00512bd0
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x88], ebx
mov esi, dword [esp + 0x1f8]
cmp esi, 0
je 0x528d40
add esi, 4
mov edi, esp
cld
call fcn.00463ca8
call fcn.00512b10
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x84]
mov dword [esp + 0x30], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x28], eax
mov esi, dword [esp + 0x1f8]
cmp esi, 0
je 0x528d39
add esi, 4
mov edi, esp
cld
call fcn.00463ca8
call fcn.00513070
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x88], ebx
mov esi, dword [esp + 0x1f8]
cmp esi, 0
je 0x528d32
add esi, 4
mov edi, esp
cld
call fcn.00463ca8
call fcn.00513140
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x80], ebx
mov esi, dword [esp + 0x1f8]
cmp esi, 0
je 0x528d2b
add esi, 4
mov edi, esp
cld
call fcn.00463ca8
call fcn.00513210
mov edi, dword [esp + 0x10]
mov ebx, dword [esp + 0x1f8]
cmp ebx, 0
je 0x528d24
mov ebp, dword [ebx + 4]
mov dword [esp + 0x14c], ebp
mov ebp, dword [ebx + 8]
mov dword [esp + 0x150], ebp
mov ecx, dword [ebx + 0xc]
mov ebp, dword [ebx + 0x10]
mov dword [esp + 0x158], ebp
mov dword [esp + 0x154], ecx
mov ebx, 0x431bde83
mov dword [esp + 0x48], eax
mov eax, ebx
imul ecx
mov ebp, edx
mov eax, dword [esp + 0x48]
sar ebp, 0x12
sar ecx, 0x1f
sub ebp, ecx
mov ebx, dword [esp + 0x88]
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x38], ebp
mov esi, dword [esp + 0x1f8]
cmp esi, 0
je 0x528d1d
add esi, 4
mov edi, esp
cld
call fcn.00463ca8
call fcn.00514cb0
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xb8], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xbc], ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x78], ebx
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x74], ebx
xor ebx, ebx
mov dword [esp + 0x15c], ebx
mov dword [esp + 0x160], ebx
mov dword [esp + 0x164], ebx
mov dword [esp + 0x168], ebx
lea ebx, [esp + 0x15c]
mov dword [esp + 0xa8], ebx
mov dword [esp], 0x70aa00
lea ebx, [esp + 0x78]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.004178c0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0xa8]
mov dword [ebx], ecx
mov dword [ebx + 4], eax
mov dword [esp], 0x70aa00
lea ebx, [esp + 0x74]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.004178c0
mov ebx, dword [esp + 0xa8]
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
mov edx, 2
mov ecx, 2
mov eax, ebx
mov ebx, 0x75c0fb
mov dword [esp], ebx
mov dword [esp + 4], 9
mov dword [esp + 0x118], eax
mov dword [esp + 8], eax
mov dword [esp + 0x11c], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x120], ecx
mov dword [esp + 0x10], ecx
call fcn.004699b0
mov edi, dword [esp + 0x28]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xe0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xe4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x70], ebx
mov ebx, dword [esp + 0x40]
mov dword [esp + 0x6c], ebx
mov eax, 0x51eb851f
imul edi
mov ebx, edx
sar ebx, 5
mov ebp, edi
sar ebp, 0x1f
sub ebx, ebp
imul ebx, ebx, 0x64
mov ebp, edi
sub ebp, ebx
mov dword [esp + 0x68], ebp
xor ebx, ebx
mov dword [esp + 0x184], ebx
mov dword [esp + 0x188], ebx
mov dword [esp + 0x18c], ebx
mov dword [esp + 0x190], ebx
mov dword [esp + 0x194], ebx
mov dword [esp + 0x198], ebx
lea ebx, [esp + 0x184]
mov dword [esp + 0xa4], ebx
mov dword [esp], 0x7113a0
lea ebx, [esp + 0x70]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.004178c0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0xa4]
mov dword [ebx], ecx
mov dword [ebx + 4], eax
mov dword [esp], 0x70aa00
lea ebx, [esp + 0x6c]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.004178c0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
mov dword [esp], 0x70aa00
lea ebx, [esp + 0x68]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.004178c0
mov ebx, dword [esp + 0xa4]
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov dword [ebx + 0x10], ecx
mov dword [ebx + 0x14], eax
mov edx, 3
mov ecx, 3
mov eax, ebx
mov ebx, 0x761601
mov dword [esp], ebx
mov dword [esp + 4], 0x13
mov dword [esp + 0x118], eax
mov dword [esp + 8], eax
mov dword [esp + 0x11c], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x120], ecx
mov dword [esp + 0x10], ecx
call fcn.004699b0
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xd8], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x64], ebx
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 0xd0], ebx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 0xd4], ebx
lea edi, [esp + 0x1c4]
xor eax, eax
call fcn.004637b6
lea ebx, [esp + 0x1c4]
mov dword [esp + 0xa0], ebx
mov dword [esp], 0x70aa00
lea ebx, [esp + 0x64]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.004178c0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0xa0]
mov dword [ebx], ecx
mov dword [ebx + 4], eax
mov dword [esp], 0x70aa00
lea ebx, [esp + 0x60]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.004178c0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0xa0]
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
mov dword [esp], 0x70aa00
lea ebx, [esp + 0x5c]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.004178c0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0xa0]
mov dword [ebx + 0x10], ecx
mov dword [ebx + 0x14], eax
mov dword [esp], 0x70aa00
lea ebx, [esp + 0x58]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.004178c0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0xa0]
mov dword [ebx + 0x18], ecx
mov dword [ebx + 0x1c], eax
mov dword [esp], 0x70b040
lea ebx, [esp + 0xd0]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.004178c0
mov ebx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov dword [ebx + 0x20], ecx
mov dword [ebx + 0x24], eax
mov edx, 5
mov ecx, 5
mov eax, ebx
mov ebx, 0x763056
mov dword [esp], ebx
mov dword [esp + 4], 0x16
mov dword [esp + 0x118], eax
mov dword [esp + 8], eax
mov dword [esp + 0x11c], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x120], ecx
mov dword [esp + 0x10], ecx
call fcn.004699b0
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xc8], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xcc], ebx
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0x40]
mov dword [esp + 0x4c], ebx
xor ebx, ebx
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], ebx
mov dword [esp + 0x178], ebx
mov dword [esp + 0x17c], ebx
mov dword [esp + 0x180], ebx
lea ebx, [esp + 0x16c]
mov dword [esp + 0xa4], ebx
mov dword [esp], 0x70aa00
lea ebx, [esp + 0x54]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.004178c0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0xa4]
mov dword [ebx], ecx
mov dword [ebx + 4], eax
mov dword [esp], 0x7113a0
lea ebx, [esp + 0x50]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.004178c0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
mov dword [esp], 0x70aa00
lea ebx, [esp + 0x4c]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.004178c0
mov ebx, dword [esp + 0xa4]
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov dword [ebx + 0x10], ecx
mov dword [ebx + 0x14], eax
mov edx, 3
mov ecx, 3
mov eax, ebx
mov ebx, 0x75ea30
mov dword [esp], ebx
mov dword [esp + 4], 0xe
mov dword [esp + 0x118], eax
mov dword [esp + 8], eax
mov dword [esp + 0x11c], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x120], ecx
mov dword [esp + 0x10], ecx
call fcn.004699b0
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xc0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xc4], ebx
mov dword [esp], 0x733c40
call fcn.0041a7b0
mov ecx, dword [esp + 4]
mov ebp, dword [esp + 0x8c]
mov edx, dword [esp + 0x90]
mov dword [ecx], ebp
mov dword [ecx + 4], edx
mov dword [esp + 0x9c], ecx
mov ebp, dword [esp + 0xe4]
mov dword [ecx + 0xc], ebp
mov ebp, dword [esp + 0xe0]
cmp byte [0x8f7eb8], 0
jne 0x528d02
mov dword [ecx + 8], ebp
mov ebp, dword [esp + 0xdc]
mov dword [ecx + 0x14], ebp
mov ebp, dword [esp + 0xd8]
cmp byte [0x8f7eb8], 0
jne 0x528ce7
mov dword [ecx + 0x10], ebp
mov ebp, dword [esp + 0xcc]
mov dword [ecx + 0x1c], ebp
mov ebp, dword [esp + 0xc8]
cmp byte [0x8f7eb8], 0
jne 0x528ccc
mov dword [ecx + 0x18], ebp
mov ebp, dword [esp + 0xc4]
mov dword [ecx + 0x24], ebp
mov ebp, dword [esp + 0xc0]
cmp byte [0x8f7eb8], 0
jne 0x528cb1
mov dword [ecx + 0x20], ebp
mov eax, ecx
cmp ecx, 0
je 0x528caa
mov esi, ecx
lea edi, [esp + 0x19c]
cld
call fcn.00463c6c
cmp byte [0x8f7eb8], 0
jne 0x528c94
mov dword [0x8de0d4], eax
mov dword [esp], 0
mov ebx, dword [esp + 0x1f0]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x1f4]
mov dword [esp + 8], ebx
call fcn.0044d970
mov eax, dword [esp + 0xc]
mov dword [esp + 0x130], eax
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x27]
movzx ebp, byte [0x7b65e6]
xchg ebp, ebx
mov byte [eax], bl
xchg ebp, ebx
mov edx, 1
mov ecx, 1
mov ebx, dword [esp + 0x130]
mov dword [esp], ebx
mov dword [esp + 0x134], edi
mov dword [esp + 4], edi
mov dword [esp + 0x138], esi
mov dword [esp + 8], esi
mov dword [esp + 0x10c], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x110], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x114], ecx
mov dword [esp + 0x14], ecx
call fcn.005f9d70
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], edx
mov dword [esp + 0x12c], edx
mov dword [esp + 0x7c], 0
mov dword [esp + 0x128], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x124], ecx
mov dword [esp + 0x98], ecx
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x44]
cmp ebx, ebp
jge 0x528a1d
mov ebx, dword [esp + 0x98]
cmp ebx, 0
je 0x528c8d
mov ecx, dword [ebx]
mov esi, dword [ebx + 4]
mov ebp, dword [ebx + 8]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x10c], ecx
mov dword [esp + 0xf4], ecx
mov dword [esp + 0x110], esi
mov dword [esp + 0xf8], esi
mov dword [esp + 0x114], ebp
mov dword [esp + 0xfc], ebp
cmp eax, 0
jle 0x528c48
mov ebx, dword [esp + 0xf8]
cmp ebx, 0
jle 0x528c48
cmp dword [esp + 0xf8], 0
jbe 0x528c41
mov ebx, dword [esp + 0xf4]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x4d
xchg ebp, eax
ja 0x528b59
xchg ebp, eax
cmp al, 0x44
xchg ebp, eax
jne 0x528ace
mov eax, dword [esp + 0x94]
mov dword [esp], eax
lea eax, [esp + 0x19c]
add eax, 0x20
lea edi, [esp + 4]
cld
mov ecx, dword [eax]
mov dword [edi], ecx
mov ecx, dword [eax + 4]
mov dword [edi + 4], ecx
call fcn.005f82e0
mov ebx, dword [esp + 0xf8]
cmp ebx, 1
jle 0x5289f3
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xfc]
cmp eax, 1
jb 0x528ac7
mov edx, eax
dec edx
dec ecx
mov eax, dword [esp + 0xf4]
cmp ecx, 0
je 0x5289c3
inc eax
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov dword [esp + 0x130], eax
mov dword [esp + 4], eax
mov dword [esp + 0x134], edx
mov dword [esp + 8], edx
mov dword [esp + 0x138], ecx
mov dword [esp + 0xc], ecx
call fcn.005f8210
mov ebx, dword [esp + 0x98]
add ebx, 0xc
mov dword [esp + 0x98], ebx
mov ebx, dword [esp + 0x7c]
inc ebx
mov dword [esp + 0x7c], ebx
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x44]
cmp ebx, ebp
jl 0x5288da
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov byte [esp + 4], 0xa
call fcn.005f88b0
mov eax, dword [esp + 0x94]
xor ebx, ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
xor ebp, ebp
cmp eax, ebp
jne 0x528a6d
mov ecx, 0x758905
mov eax, 5
mov dword [esp + 0x1fc], ecx
mov dword [esp + 0x200], eax
add esp, 0x1ec
ret
mov ebp, dword [eax + 0xc]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
cmp ebp, ecx
ja 0x528ac0
mov esi, ecx
sub esi, ebp
sub edx, ebp
mov ecx, dword [eax]
cmp edx, 0
je 0x528a89
add ecx, ebp
mov dword [esp], 0
mov dword [esp + 0x130], ecx
mov dword [esp + 4], ecx
mov dword [esp + 0x134], esi
mov dword [esp + 8], esi
mov dword [esp + 0x138], edx
mov dword [esp + 0xc], edx
call fcn.0044d780
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
jmp 0x528a58
call fcn.004359e0
ud2
call fcn.004359e0
ud2
xchg ebp, eax
cmp al, 0x4c
xchg ebp, eax
jne 0x528b18
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1f8]
mov ebx, dword [ebx]
mov ebp, 0x8e1300
cmp ebx, 8
jae 0x528b11
shl ebx, 3
add ebp, ebx
lea edi, [esp + 4]
cld
mov ecx, dword [ebp]
mov dword [edi], ecx
mov ecx, dword [ebp + 4]
mov dword [edi + 4], ecx
call fcn.005f82e0
jmp 0x52898f
call fcn.00435970
ud2
xchg ebp, eax
cmp al, 0x4d
xchg ebp, eax
jne 0x52898f
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov eax, dword [esp + 0x1f8]
cmp eax, 0
je 0x528b55
add eax, 0x1c
lea edi, [esp + 4]
cld
mov ecx, dword [eax]
mov dword [edi], ecx
mov ecx, dword [eax + 4]
mov dword [edi + 4], ecx
call fcn.005f82e0
jmp 0x52898f
mov dword [eax], eax
jmp 0x528b39
xchg ebp, eax
cmp al, 0x54
xchg ebp, eax
ja 0x528bd5
xchg ebp, eax
cmp al, 0x53
xchg ebp, eax
jne 0x528b9d
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov eax, dword [esp + 0x1f8]
cmp eax, 0
je 0x528b99
add eax, 0x14
lea edi, [esp + 4]
cld
mov ecx, dword [eax]
mov dword [edi], ecx
mov ecx, dword [eax + 4]
mov dword [edi + 4], ecx
call fcn.005f82e0
jmp 0x52898f
mov dword [eax], eax
jmp 0x528b7d
xchg ebp, eax
cmp al, 0x54
xchg ebp, eax
jne 0x52898f
mov eax, dword [esp + 0x94]
mov dword [esp], eax
lea eax, [esp + 0x19c]
add eax, 0x18
lea edi, [esp + 4]
cld
mov ecx, dword [eax]
mov dword [edi], ecx
mov ecx, dword [eax + 4]
mov dword [edi + 4], ecx
call fcn.005f82e0
jmp 0x52898f
xchg ebp, eax
cmp al, 0x64
xchg ebp, eax
jne 0x528c09
mov eax, dword [esp + 0x94]
mov dword [esp], eax
lea eax, [esp + 0x19c]
add eax, 0x10
lea edi, [esp + 4]
cld
mov ecx, dword [eax]
mov dword [edi], ecx
mov ecx, dword [eax + 4]
mov dword [edi + 4], ecx
call fcn.005f82e0
jmp 0x52898f
xchg ebp, eax
cmp al, 0x74
xchg ebp, eax
jne 0x52898f
mov eax, dword [esp + 0x94]
mov dword [esp], eax
lea eax, [esp + 0x19c]
add eax, 8
lea edi, [esp + 4]
cld
mov ecx, dword [eax]
mov dword [edi], ecx
mov ecx, dword [eax + 4]
mov dword [edi + 4], ecx
call fcn.005f82e0
jmp 0x52898f
call fcn.00435970
ud2
mov ebx, dword [esp + 0xf8]
cmp ebx, 0
jle 0x5289f3
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0xf4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xfc]
mov dword [esp + 0xc], ebx
call fcn.005f8210
jmp 0x5289f3
mov dword [ebx], eax
jmp 0x5288ea
mov ebp, 0x8de0d4
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0041b160
jmp 0x5287eb
mov dword [ecx], eax
jmp 0x5287c9
lea esi, [ecx + 0x20]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0041b160
mov ecx, dword [esp + 0x9c]
jmp 0x5287be
lea esi, [ecx + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0041b160
mov ecx, dword [esp + 0x9c]
jmp 0x52879d
lea esi, [ecx + 0x10]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0041b160
mov ecx, dword [esp + 0x9c]
jmp 0x52877c
lea esi, [ecx + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0041b160
mov ecx, dword [esp + 0x9c]
jmp 0x52875b
mov dword [esi], eax
jmp 0x5281bc
mov dword [ebx], eax
jmp 0x52814b
mov dword [esi], eax
jmp 0x528127
mov dword [esi], eax
jmp 0x5280fc
mov dword [esi], eax
jmp 0x5280d1
mov dword [esi], eax
jmp 0x528093
mov dword [esi], eax
jmp 0x528068
mov dword [esi], eax
jmp 0x52803d
mov dword [esi], eax
jmp 0x527ffa
imul edx, esi
mov ebp, eax
imul ebp, ebx
add ebp, edx
mov edx, esi
mul edx
add edx, ebp
jmp 0x527fa6
mov dword [ebx], eax
jmp 0x527f6a
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.0041b160
mov ecx, dword [esp + 0xac]
jmp 0x527f53
mov dword [ecx], eax
jmp 0x527f1b
call fcn.004616d0
jmp fcn.00527df0