Function at 0x523bc0
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x168
mov eax, dword [0x5ff1d4]
xor eax, esp
mov dword [esp + 0x164], eax
mov ecx, dword [esp + 0x16c]
mov edx, dword [esp + 0x184]
mov eax, dword [esp + 0x180]
push ebx
push ebp
mov ebp, dword [esp + 0x180]
xor ebx, ebx
push esi
mov esi, dword [esp + 0x180]
push edi
mov edi, dword [esp + 0x180]
mov dword [esp + 0x14], ecx
xor ecx, ecx
mov dword [esp + 0x34], edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x60], 0
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x78], ecx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x50], ecx
test edi, edi
jne 0x523c5a
test esi, esi
mov eax, 0x59d348
cmovne eax, edi
mov edi, eax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x20]
test dword [esp + 0x18c], 0x1fff9fc0
jne 0x524efc
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x524ef5
test edi, edi
je 0x524ef5
test eax, eax
je 0x524ef5
lea eax, [ebp*2]
mov dword [esp + 0x84], eax
add eax, edi
mov esi, eax
mov dword [esp + 0x8c], eax
lea eax, [esi - 2]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x24]
cmp eax, 0xffffffff
jne 0x523ccd
push edi
call fcn.0052f830
mov edx, dword [esp + 0x38]
add esp, 4
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x60], 1
lea eax, [edi + eax*2]
mov dword [esp + 0x10], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x74], eax
cmp ebp, dword [esp + 0x24]
jbe 0x523cec
mov eax, 0xffffffdf
jmp 0x524f01
cmp dword [ecx + 0x38], 0x50435245
je 0x523cff
mov eax, 0xffffffe1
jmp 0x524f01
mov ecx, dword [ecx + 0x48]
mov eax, ecx
and al, 7
cmp al, 2
je 0x523d14
mov eax, 0xffffffe0
jmp 0x524f01
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18c]
shr ecx, 0xe
and ecx, 0xc
or edi, ecx
mov dword [esp + 0x18c], edi
cmp dword [eax + 0x10], ebx
je 0x523d42
test edi, 0xbfffbfc0
jne 0x523d42
mov edi, 1
jmp 0x523d44
xor edi, edi
mov ecx, dword [eax + 0x40]
mov eax, ecx
shr eax, 0x13
and eax, 1
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18c]
test al, 0x20
je 0x523d69
mov eax, 2
jmp 0x523d6f
shr eax, 4
and eax, 1
movzx eax, ax
mov word [esp + 0x10c], ax
test ax, ax
je 0x523d93
mov eax, ecx
or eax, dword [esp + 0x18c]
test eax, 0x20000000
jne 0x524efc
test edx, edx
je 0x523daf
cmp dword [edx + 0x24], 0xffffffff
je 0x523daf
test ecx, 0x800000
jne 0x523daf
mov eax, 0xffffffc8
jmp 0x524f01
mov eax, dword [esp + 0x20]
test byte [eax + 0x2d], 1
je 0x523dd3
push dword [eax + 8]
push dword [eax + 0x10]
mov eax, dword [eax + 4]
call eax
mov eax, dword [esp + 0x28]
add esp, 8
mov ecx, dword [esp + 0x1c]
and byte [eax + 0x2d], 0xfe
mov dword [eax + 0x10], ebx
lea edx, [eax + 0x28]
mov dword [esp + 0x5c], edx
mov dword [edx], ebx
mov dword [esp + 0x40], 0xfc00
mov dword [esp + 0x44], 0xdc00
test edi, edi
je 0x523f24
cmp dword [esp + 0x18], ebx
je 0x523eab
test dword [esp + 0x18c], 0x40000000
jne 0x523eab
test ecx, 0x4000000
jne 0x523eab
mov ebx, 0xfc00
mov edi, 0xdc00
cmp esi, dword [esp + 0x10]
jae 0x523e3d
mov ax, word [esi]
and ax, bx
cmp ax, di
je 0x5240d6
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
movzx ecx, word [eax + 0x64]
test ecx, ecx
je 0x523e77
nop dword [eax]
cmp esi, edx
jbe 0x523e77
sub esi, 2
cmp esi, edx
jbe 0x523e72
nop dword [eax + eax]
mov ax, word [esi]
and ax, bx
cmp ax, di
jne 0x523e72
sub esi, 2
cmp esi, edx
ja 0x523e60
sub ecx, 1
jne 0x523e50
mov eax, dword [esp + 0x24]
mov edi, esi
mov ebx, dword [esp + 0x5c]
sub edi, edx
sar edi, 1
push ebx
sub eax, edi
push eax
push esi
call fcn.005304c0
mov ecx, dword [esp + 0x2c]
add esp, 0xc
mov dword [ecx + 0x30], eax
test eax, eax
je 0x523ea4
add dword [ebx], edi
jmp 0x524f01
mov ebx, 1
mov eax, ecx
push dword [esp + 0x34]
push eax
push dword [esp + 0x194]
push ebp
push dword [esp + 0x34]
push dword [esp + 0x3c]
push dword [esp + 0x2c]
call fcn.0052f990
mov edi, eax
add esp, 0x1c
cmp edi, 0xffffffd3
je 0x523f24
test edi, edi
js 0x523f1d
test dword [esp + 0x18c], 0x4000
je 0x523f1d
mov ecx, dword [esp + 0x60]
mov esi, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
lea esi, [esi + ecx]
push dword [ebx + 8]
mov eax, dword [ebx]
add esi, esi
push esi
call eax
add esp, 8
mov dword [ebx + 0x10], eax
test eax, eax
je 0x5243a8
push esi
push dword [esp + 0x2c]
push eax
call fcn.00562cb0
add esp, 0xc
or byte [ebx + 0x2d], 1
mov eax, edi
jmp 0x524f01
cmp dword [esp + 0x18], 0
mov edi, dword [esp + 0x28]
mov dword [esp + 0x120], edi
je 0x524100
test ebx, ebx
jne 0x524100
test dword [esp + 0x18c], 0x40000000
mov ebx, dword [esp + 0x1c]
je 0x523f5f
test ebx, 0x4000000
je 0x524100
mov edx, dword [esp + 0x10]
mov eax, ebx
xor ecx, ecx
and eax, 0x4000000
cmp esi, edx
jae 0x523f9b
test eax, eax
je 0x5240bd
nop dword [eax + eax]
mov ax, word [esi]
and ax, word [esp + 0x40]
cmp ax, word [esp + 0x44]
jne 0x523f9b
add esi, 2
mov ecx, 1
cmp esi, edx
jb 0x523f80
mov edx, esi
mov dword [esp + 0x120], edx
test ecx, ecx
jne 0x523ff2
mov eax, dword [esp + 0x14]
movzx ecx, word [eax + 0x64]
test ecx, ecx
je 0x523ff2
cmp edx, edi
jbe 0x523ff2
sub edx, 2
mov dword [esp + 0x120], edx
cmp edx, edi
jbe 0x523fed
nop word [eax + eax]
mov ax, word [edx]
and ax, word [esp + 0x40]
cmp ax, word [esp + 0x44]
jne 0x523fed
sub edx, 2
mov dword [esp + 0x120], edx
cmp edx, edi
ja 0x523fd0
sub ecx, 1
jne 0x523fb4
push dword [esp + 0x5c]
mov eax, dword [esp + 0x28]
mov ecx, edx
sub ecx, edi
sar ecx, 1
sub eax, ecx
push eax
push edx
call fcn.005304c0
mov edx, dword [esp + 0x2c]
add esp, 0xc
mov dword [edx + 0x30], eax
test eax, eax
je 0x5240b3
nop dword [eax + eax]
mov ecx, dword [esp + 0x120]
mov eax, dword [edx + 0x28]
sub ecx, edi
sar ecx, 1
add eax, ecx
lea ecx, [edx + 0x28]
mov dword [ecx], eax
test ebx, 0x4000000
je 0x5240f8
cmp dword [edx + 0x30], 0
jg 0x5240f8
lea edx, [edi + eax*2]
mov dword [esp + 0x10], edx
cmp edx, esi
jae 0x5240ee
add edx, 2
mov dword [esp + 0x120], edx
cmp edx, esi
jae 0x52408d
nop dword [eax + eax]
mov ax, word [edx]
and ax, word [esp + 0x40]
cmp ax, word [esp + 0x44]
jne 0x52408d
add edx, 2
mov dword [esp + 0x120], edx
cmp edx, esi
jb 0x524070
mov eax, dword [esp + 0x24]
push ecx
mov ecx, edx
sub ecx, edi
sar ecx, 1
sub eax, ecx
push eax
push edx
call fcn.005304c0
mov edx, dword [esp + 0x2c]
add esp, 0xc
mov dword [edx + 0x30], eax
test eax, eax
jne 0x524020
mov edx, dword [esp + 0x54]
mov dword [esp + 0x10], edx
jmp 0x524104
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x523f9b
test ebp, ebp
je 0x5240e4
mov eax, 0xffffffdc
jmp 0x524f01
mov eax, 0xffffffe6
jmp 0x524f01
mov dword [esp + 0x50], 2
jmp 0x524104
mov eax, dword [edx + 0x30]
jmp 0x524f01
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
test ecx, ecx
jne 0x524119
mov eax, dword [esp + 0x14]
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
jmp 0x524120
movq xmm0, qword [ecx]
mov eax, dword [ecx + 8]
mov dword [esp + 0xd8], eax
test ecx, ecx
mov eax, dword [esp + 0x14]
mov ebx, 0x59da30
cmovne ebx, ecx
movq qword [esp + 0xd0], xmm0
mov ecx, dword [eax + 0x40]
mov eax, ecx
or eax, dword [esp + 0x18c]
shr eax, 0x1f
mov dword [esp + 0x58], eax
mov eax, ecx
shr eax, 8
and eax, 1
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x48]
mov dword [esp + 0x34], eax
mov eax, dword [ebx + 0x24]
cmp eax, 0xffffffff
jne 0x524176
mov eax, dword [esp + 0x74]
jmp 0x524179
lea eax, [edi + eax*2]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x90]
mov dword [esp + 0x168], eax
mov eax, edx
sub eax, edi
mov dword [esp + 0x124], edx
mov edx, dword [esp + 0x34]
sar eax, 1
mov dword [esp + 0xac], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x170], eax
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x16c], eax
mov eax, edx
mov dword [esp + 0x104], ebp
mov ebp, dword [esp + 0x14]
shr eax, 0xc
and eax, 1
mov dword [esp + 0x90], 2
mov dword [esp + 0xa8], edi
cmp word [ebp + 0x64], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0x11c], edi
mov dword [esp + 0xf0], eax
ja 0x524208
test edx, 0x2000
jne 0x524208
xor eax, eax
jmp 0x52420d
mov eax, 1
movzx edx, word [ebp + 0x6e]
lea edi, [ebp + 0x70]
mov dword [esp + 0xf4], eax
movzx eax, word [ebp + 0x6c]
mov word [esp + 0x112], ax
imul eax, edx
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x154], 0
mov dword [esp + 0x138], 0
mov dword [esp + 0x134], 0
mov dword [esp + 0x114], edi
mov word [esp + 0x110], dx
mov dword [esp + 0x158], 0
lea eax, [edi + eax*2]
mov dword [esp + 0x118], eax
mov ax, word [ebp + 0x60]
mov word [esp + 0x10e], ax
movzx eax, word [ebp + 0x62]
dec eax
cmp eax, 5
ja case.default.0x524290
jmp dword [eax*4 + 0x524f1c]
mov eax, 0xd
mov dword [esp + 0x15c], 1
mov word [esp + 0x160], ax
jmp 0x524312
mov eax, 0xa
mov dword [esp + 0x15c], 1
mov word [esp + 0x160], ax
jmp 0x524312
xor eax, eax
mov dword [esp + 0x15c], 1
mov word [esp + 0x160], ax
jmp 0x524312
mov dword [esp + 0x15c], 2
mov dword [esp + 0x160], 0xa000d
jmp 0x524312
mov dword [esp + 0x158], 1
jmp 0x524312
mov dword [esp + 0x158], 2
movzx eax, word [ebp + 0x68]
mov edx, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x2c]
lea edi, [eax*8 + 0x57]
mov eax, 0x5000
and edi, 0xfffffffc
cmp edx, dword [ebp + 0x4c]
mov dword [esp + 0x64], edi
cmovae edx, dword [ebp + 0x4c]
shl edx, 0xa
cmp ecx, dword [ebp + 0x50]
lea edi, [edi + edi*4]
mov dword [esp + 0xdc], edx
cmovae ecx, dword [ebp + 0x50]
mov dword [esp + 0xe0], ecx
mov ecx, dword [ebx + 0x30]
cmp ecx, dword [ebp + 0x54]
cmovae ecx, dword [ebp + 0x54]
add edi, edi
cmp edi, eax
mov dword [esp + 0xe4], ecx
cmovb edi, eax
cmp edi, edx
jbe 0x52437f
cmp dword [esp + 0x64], edx
jbe 0x52437d
mov eax, 0xffffffc1
jmp 0x524f01
mov edi, edx
mov ebx, dword [esp + 0x20]
cmp dword [ebx + 0x1c], edi
jae 0x5243b5
push dword [ebx + 8]
mov eax, dword [ebx + 4]
push dword [ebx + 0x18]
call eax
push dword [ebx + 8]
mov eax, dword [ebx]
push edi
call eax
add esp, 0x10
mov dword [ebx + 0x18], eax
test eax, eax
jne 0x5243b2
mov dword [ebx + 0x1c], eax
mov eax, 0xffffffd0
jmp 0x524f01
mov dword [ebx + 0x1c], edi
mov eax, dword [esp + 0x64]
add eax, 0xffffffac
push eax
mov eax, dword [ebx + 0x18]
add eax, 0x54
push 0xff
push eax
call fcn.00563230
mov eax, dword [ebp + 0xc]
add esp, 0xc
mov edx, dword [ebp + 0x48]
mov dword [esp + 0xf8], eax
lea edi, [eax + 0x100]
add eax, 0x340
mov dword [esp + 0xfc], edi
mov dword [esp + 0x100], eax
test dl, 0x10
je 0x524486
movzx ebp, word [ebp + 0x58]
movzx ebx, bp
mov dword [esp + 0x4c], 1
mov dword [esp + 0x30], ebp
movzx eax, bp
mov dword [esp + 0x38], ebx
test dl, 0x20
je 0x5244a8
mov ecx, eax
mov eax, 0xff
cmp bp, ax
ja 0x52443c
movzx eax, byte [ecx + edi]
mov dword [esp + 0x30], eax
cmp ebx, 0x7f
jbe 0x5244a8
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
test ebp, ebp
jne 0x524450
test ebx, 0x20000
je 0x5244b0
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x5a4390]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x5a8790]
lea eax, [eax + eax*2]
mov ax, word [eax*4 + 0x5a0184]
add ax, word [esp + 0x38]
movzx eax, ax
mov dword [esp + 0x30], eax
jmp 0x5244b4
mov ebx, dword [esp + 0x1c]
xor eax, eax
test dword [esp + 0x34], 0x200
jne 0x5244a2
test dl, 0x40
je 0x5244a2
lea ecx, [ebp + 0x14]
mov dword [esp + 0x48], ecx
mov ebp, dword [esp + 0x18]
jmp 0x5244b4
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x30]
movzx ecx, ax
mov eax, dword [esp + 0x38]
movzx eax, ax
mov dword [esp + 0x80], ecx
mov dword [esp + 0x7c], eax
test dl, dl
jns 0x524557
mov eax, dword [esp + 0x14]
mov dword [esp + 0x78], 1
movzx ecx, word [eax + 0x5c]
mov dword [esp + 0x2c], ecx
movzx eax, cx
movzx ecx, cx
mov dword [esp + 0x3c], ecx
test edx, 0x100
je 0x524559
mov edx, dword [esp + 0x3c]
mov ecx, eax
mov eax, 0xff
cmp word [esp + 0x2c], ax
ja 0x524517
movzx eax, byte [edi + ecx]
mov dword [esp + 0x2c], eax
cmp dx, 0x7f
jbe 0x524559
test ebp, ebp
jne 0x524523
test ebx, 0x20000
je 0x524559
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x5a4390]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x5a8790]
lea eax, [eax + eax*2]
mov ax, word [eax*4 + 0x5a0184]
add ax, dx
movzx eax, ax
mov dword [esp + 0x2c], eax
jmp 0x524559
xor eax, eax
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x10]
movzx eax, ax
mov dword [esp + 0x88], eax
nop dword [eax + eax]
mov ebp, dword [esp + 0x15c]
xor ecx, ecx
mov edx, dword [esp + 0x158]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0xec], ecx
mov ecx, dword [esp + 0x14]
test dword [ecx + 0x40], 0x10000
jne 0x524b2b
cmp dword [esp + 0x70], 0
mov ebx, dword [esp + 0x124]
je 0x5246d5
mov edi, esi
cmp esi, dword [esp + 0x10]
jae 0x5246d1
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x524680
nop word [eax + eax]
test edx, edx
je 0x524642
mov eax, dword [esp + 0x124]
cmp edi, eax
jae 0x524673
push ecx
lea ecx, [esp + 0x160]
push ecx
push eax
push edx
push edi
call fcn.0052fe70
mov ebp, dword [esp + 0x170]
add esp, 0x14
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x124]
test eax, eax
jne 0x5246d1
mov ecx, dword [esp + 0x18]
add edi, 2
cmp edi, dword [esp + 0x10]
jae 0x5246d1
mov ax, word [edi]
and ax, word [esp + 0x40]
cmp ax, word [esp + 0x44]
jne 0x5245d0
add edi, 2
cmp edi, dword [esp + 0x10]
jb 0x5245d0
jmp 0x5246d1
lea eax, [ebp*2]
mov ecx, ebx
sub ecx, eax
cmp edi, ecx
ja 0x524614
mov ax, word [edi]
cmp ax, word [esp + 0x160]
jne 0x524614
cmp ebp, 1
je 0x5246d1
mov ax, word [edi + 2]
cmp ax, word [esp + 0x162]
je 0x5246d1
jmp 0x524614
mov ebx, dword [esp + 0x124]
jmp 0x524618
test edx, edx
je 0x5247c5
mov eax, dword [esp + 0x124]
cmp edi, eax
jae 0x524809
push ecx
lea ecx, [esp + 0x160]
push ecx
push eax
push edx
push edi
call fcn.0052fe70
mov ebp, dword [esp + 0x170]
add esp, 0x14
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x124]
test eax, eax
jne 0x5246d1
mov ecx, dword [esp + 0x18]
add edi, 2
cmp edi, dword [esp + 0x10]
jb 0x524680
mov dword [esp + 0x10], edi
cmp dword [esp + 0x58], 0
je 0x524815
mov ecx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x48]
test ecx, ecx
jne 0x5246f4
test ebp, ebp
je 0x524a6d
cmp esi, edi
sbb eax, eax
neg eax
cmp esi, edi
jae 0x524747
movzx eax, word [esi]
test ecx, ecx
je 0x52471b
cmp ax, word [esp + 0x38]
je 0x524a6d
cmp ax, word [esp + 0x30]
je 0x524a6d
test ebp, ebp
je case.0x524bed.997
mov ecx, 0xff
cmp ax, cx
cmova eax, ecx
movzx edx, ax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebp], al
mov eax, 0
setne al
test eax, eax
jne 0x524a6d
mov ecx, dword [esp + 0x14]
xor ebx, ebx
cmp dword [esp + 0x18], 0
je 0x524dd0
mov ebp, dword [esp + 0x74]
cmp edi, ebp
je 0x524dd0
test ebx, ebx
je 0x524779
cmp ebx, 0xfffffffe
jne 0x524dd0
mov ebx, dword [esp + 0x5c]
nop dword [eax]
lea esi, [edi + 2]
cmp esi, ebp
jae 0x5247a7
mov ecx, 0xfc00
mov edx, 0xdc00
mov ax, word [esi]
and ax, cx
cmp ax, dx
jne 0x524d67
add esi, 2
cmp esi, ebp
jb 0x524791
mov ebp, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
mov dword [ebp + 0xc], eax
mov eax, dword [esp + 0x138]
mov byte [ebp + 0x2c], 0
mov dword [ebp + 0x14], eax
jmp 0x524eaa
lea eax, [ebp*2]
mov ecx, ebx
sub ecx, eax
cmp edi, ecx
ja 0x5246c4
mov ax, word [edi]
cmp ax, word [esp + 0x160]
jne 0x5246c4
cmp ebp, 1
je 0x5246d1
mov ax, word [edi + 2]
cmp ax, word [esp + 0x162]
je 0x5246d1
jmp 0x5246c4
mov ebx, dword [esp + 0x124]
jmp 0x5246c8
cmp dword [esp + 0x4c], 0
je 0x52487a
cmp esi, edi
jae 0x524a5a
mov eax, dword [esp + 0x7c]
cmp ax, word [esp + 0x80]
je 0x524861
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
nop word [eax + eax]
movzx eax, word [esi]
cmp ax, cx
je 0x524a5a
cmp ax, dx
je 0x524a5a
add esi, 2
cmp esi, edi
jb 0x524840
jmp 0x524a5a
mov eax, dword [esp + 0x38]
cmp word [esi], ax
je 0x524a5a
add esi, 2
cmp esi, edi
jb 0x524865
jmp 0x524a5a
test dword [esp + 0x34], 0x200
je 0x524a1a
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0x11c]
add eax, edi
cmp esi, eax
jbe 0x524a6d
cmp esi, dword [esp + 0x10]
jae 0x5249f8
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x158]
mov edx, dword [esp + 0x10]
test eax, eax
je 0x524972
test ebx, ebx
je 0x5248fc
cmp esi, edi
jbe 0x52493a
push eax
lea eax, [esp + 0x160]
push eax
push edi
push ebx
push esi
call fcn.0052ff30
add esp, 0x14
test eax, eax
jne 0x5249ea
mov ebp, dword [esp + 0x15c]
mov edi, dword [esp + 0x11c]
mov ebx, dword [esp + 0x158]
jmp 0x524936
lea edx, [ebp*2]
lea eax, [edi + edx]
cmp esi, eax
jb 0x524936
mov ecx, esi
sub ecx, edx
mov ax, word [ecx]
cmp ax, word [esp + 0x160]
jne 0x524936
cmp ebp, 1
je 0x5249ea
mov ax, word [ecx + 2]
cmp ax, word [esp + 0x162]
je 0x5249ea
mov edx, dword [esp + 0x10]
add esi, 2
cmp esi, edx
jae 0x5249ea
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
mov eax, dword [esp + 0x18]
jne 0x5248c1
add esi, 2
cmp esi, edx
jae 0x5249ea
jmp 0x5248c1
test ebx, ebx
je 0x5249a9
cmp esi, edi
jbe 0x5249e3
push eax
lea eax, [esp + 0x160]
push eax
push edi
push ebx
push esi
call fcn.0052ff30
add esp, 0x14
test eax, eax
jne 0x5249ea
mov ebp, dword [esp + 0x15c]
mov edi, dword [esp + 0x11c]
mov ebx, dword [esp + 0x158]
jmp 0x5249db
lea edx, [ebp*2]
lea eax, [edi + edx]
cmp esi, eax
jb 0x5249db
mov ecx, esi
sub ecx, edx
mov ax, word [ecx]
cmp ax, word [esp + 0x160]
jne 0x5249db
cmp ebp, 1
je 0x5249ea
mov ax, word [ecx + 2]
cmp ax, word [esp + 0x162]
je 0x5249ea
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
add esi, 2
cmp esi, edx
jb 0x524972
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x124]
cmp word [esi - 2], 0xd
jne 0x524a6d
cmp edx, 1
je 0x524a09
cmp edx, 2
jne 0x524a6d
cmp esi, dword [esp + 0x10]
jae 0x524a6d
cmp word [esi], 0xa
jne 0x524a6d
add esi, 2
jmp 0x524a6d
mov ebp, dword [esp + 0x48]
test ebp, ebp
je 0x524a6d
cmp esi, edi
jae 0x524a5a
mov ebx, 0xff
nop dword [eax + eax]
movzx edx, word [esi]
mov eax, 1
cmp edx, ebx
cmova edx, ebx
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebp], al
jne 0x524a53
add esi, 2
cmp esi, edi
jb 0x524a30
mov ebx, dword [esp + 0x124]
cmp word [esp + 0x10c], 0
jne 0x524a6d
cmp esi, ebx
jae case.0x524bed.997
cmp word [esp + 0x10c], 0
mov edi, ebx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10], edi
jne 0x524b2b
movzx eax, word [ecx + 0x66]
mov edx, edi
sub edx, esi
sar edx, 1
cmp edx, eax
jl 0x524753
cmp dword [esp + 0x78], 0
mov eax, dword [esp + 0x4c]
lea ecx, [esi + eax*2]
je 0x524b27
cmp ecx, dword [esp + 0x68]
jbe 0x524b27
cmp edx, 0x7d0
jb 0x524ac7
cmp dword [esp + 0x58], 0
jne 0x524b27
cmp edx, 0x1e8480
jae 0x524b27
mov edx, dword [esp + 0x124]
cmp ecx, edx
jae case.0x524bed.997
mov ebx, dword [esp + 0x2c]
movzx eax, bx
cmp word [esp + 0x88], ax
je 0x524bf4
mov ebp, dword [esp + 0x3c]
mov ebx, edx
movzx eax, word [ecx]
mov edi, ecx
add ecx, 2
mov edx, eax
cmp ax, bp
je 0x524b14
cmp dx, word [esp + 0x2c]
je 0x524b14
cmp ecx, ebx
jb 0x524af1
mov edi, dword [esp + 0x10]
jmp case.0x524bed.997
mov edx, dword [esp + 0x124]
cmp edi, edx
jae 0x524b0b
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
cmp esi, dword [esp + 0x6c]
ja case.0x524bed.997
or dword [esp + 0xcc], 1
mov eax, esi
sub eax, dword [esp + 0x28]
sar eax, 1
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x50]
or eax, dword [esp + 0x18c]
mov dword [esp + 0x148], eax
lea eax, [esp + 0xd0]
push eax
push dword [esp + 0x24]
movzx eax, word [ecx + 0x68]
push dword [esp + 0x6c]
mov dword [esp + 0x138], esi
push eax
push dword [esp + 0x128]
mov dword [esp + 0x144], esi
push esi
mov dword [esp + 0x100], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x168], 0
call fcn.00518a50
add esp, 0x18
mov ebx, eax
cmp dword [esp + 0xec], 0
je 0x524bd4
cmp dword [esp + 0x1c], 0
jne 0x524bd4
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x54], esi
test ebx, ebx
jg case.default.0x524bed
je case.0x524bed.996
lea eax, [ebx + 0x3e5]
cmp eax, 4
ja case.default.0x524bed
jmp dword [eax*4 + 0x524f34]
mov ebx, dword [esp + 0x3c]
movzx eax, word [ecx]
mov edi, ecx
add ecx, 2
cmp ax, bx
je 0x524b1b
cmp ecx, edx
jb 0x524bf8
mov edi, dword [esp + 0x10]
jmp case.0x524bed.997
mov eax, dword [esp + 0x150]
mov edi, esi
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x154], eax
jmp 0x524c71
mov edi, dword [esp + 0x140]
cmp edi, esi
jbe case.0x524bed.996
mov ecx, dword [esp + 0x18]
jmp 0x524c71
mov ecx, dword [esp + 0x18]
lea edi, [esi + 2]
mov dword [esp + 0x154], 0
test ecx, ecx
je 0x524c71
cmp edi, dword [esp + 0x10]
jae 0x524c71
mov ax, word [edi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x524c71
add edi, 2
mov edx, dword [esp + 0x158]
xor ebx, ebx
cmp dword [esp + 0x70], ebx
je 0x524cb6
mov eax, dword [esp + 0x124]
test edx, edx
je 0x524d1e
cmp esi, eax
jae 0x524cb6
push ecx
lea ecx, [esp + 0x160]
push ecx
push eax
push edx
push esi
call fcn.0052fe70
add esp, 0x14
test eax, eax
jne case.default.0x524bed
mov edx, dword [esp + 0x158]
mov ebp, dword [esp + 0x15c]
mov esi, edi
cmp dword [esp + 0x58], ebx
jne case.default.0x524bed
mov eax, dword [esp + 0x10]
cmp edi, eax
ja case.default.0x524bed
mov ecx, dword [esp + 0x14]
cmp edi, dword [esp + 0x8c]
jbe 0x524d0e
cmp word [edi - 2], 0xd
jne 0x524d0e
cmp edi, eax
jae 0x524d0e
cmp word [edi], 0xa
jne 0x524d0e
test dword [ecx + 0x48], 0x800
jne 0x524d0e
cmp edx, 1
je 0x524d0b
cmp edx, 2
je 0x524d0b
cmp ebp, 2
jne 0x524d0e
lea esi, [edi + 2]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x134], ebx
jmp 0x524593
mov ebp, dword [esp + 0x15c]
lea ecx, [ebp*2]
sub eax, ecx
cmp esi, eax
ja 0x524cbd
mov ax, word [esi]
cmp ax, word [esp + 0x160]
jne 0x524cbd
cmp ebp, 1
je case.default.0x524bed
mov ax, word [esi + 2]
cmp ax, word [esp + 0x162]
jne 0x524cbd
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
jmp 0x524755
mov eax, dword [esp + 0x24]
mov ecx, esi
sub ecx, dword [esp + 0x28]
sar ecx, 1
push ebx
sub eax, ecx
mov dword [esp + 0x124], esi
push eax
push esi
call fcn.005304c0
add esp, 0xc
test eax, eax
je 0x524db6
jns 0x524780
mov eax, dword [ebx]
lea edi, [esi + eax*2]
mov dword [esp + 0x10], edi
mov dword [esp + 0x124], edi
cmp edi, esi
jbe 0x524780
mov dword [esp + 0x50], 3
jmp 0x524570
mov edi, ebp
mov dword [esp + 0x124], ebp
mov dword [esp + 0x10], edi
mov dword [esp + 0x50], 1
jmp 0x524570
mov ebp, dword [esp + 0x20]
mov eax, dword [esp + 0x134]
mov dword [ebp + 0xc], ecx
mov dword [ebp + 0x14], eax
mov byte [ebp + 0x2c], 0
cmp ebx, 1
jne 0x524e97
movzx eax, word [ebp + 0x2e]
mov ecx, dword [esp + 0x108]
add eax, eax
cmp ecx, eax
jl 0x524e03
xor edx, edx
jmp 0x524e0d
mov eax, ecx
cdq
sub eax, edx
mov edx, eax
sar edx, 1
inc edx
mov ebx, dword [esp + 0x28]
sub esi, ebx
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x128]
sub eax, ebx
sar esi, 1
sar eax, 1
cmp dword [esp + 0x130], ecx
mov dword [ebp + 0x30], edx
cmova ecx, dword [esp + 0x130]
sub ecx, ebx
mov dword [ebp + 0x28], esi
sar ecx, 1
test dword [esp + 0x18c], 0x4000
mov dword [ebp + 0x20], eax
mov dword [ebp + 0x24], ecx
je 0x524e90
mov ecx, dword [esp + 0x60]
mov esi, dword [esp + 0x24]
push dword [ebp + 8]
mov eax, dword [ebp]
lea esi, [esi + ecx]
add esi, esi
push esi
call eax
add esp, 8
mov dword [ebp + 0x10], eax
test eax, eax
je 0x5243a8
push esi
push ebx
push eax
call fcn.00562cb0
mov edx, dword [ebp + 0x30]
add esp, 0xc
or byte [ebp + 0x2d], 1
mov eax, edx
jmp 0x524f01
mov dword [ebp + 0x10], ebx
mov eax, edx
jmp 0x524f01
mov eax, dword [esp + 0x138]
mov dword [ebp + 0x14], eax
test ebx, ebx
je 0x524eaa
cmp ebx, 0xfffffffe
jne 0x524ee7
mov ecx, dword [esp + 0x54]
test ecx, ecx
je 0x524ee4
mov eax, dword [esp + 0x28]
mov ebx, 0xfffffffe
sub ecx, eax
mov dword [ebp + 0x10], eax
sar ecx, 1
sub edi, eax
mov dword [ebp + 0x34], ecx
mov dword [ebp + 0x28], ecx
mov ecx, dword [esp + 0x1c]
sar edi, 1
sub ecx, eax
sar ecx, 1
mov eax, ebx
mov dword [ebp + 0x38], edi
mov dword [ebp + 0x20], ecx
mov dword [ebp + 0x24], edi
mov dword [ebp + 0x30], ebx
jmp 0x524f01
or ebx, 0xffffffff
mov dword [ebp + 0x30], ebx
mov eax, ebx
jmp 0x524f01
mov eax, 0xffffffd4
jmp 0x524f01
mov eax, 0xffffffcd
jmp 0x524f01
mov eax, 0xffffffde
mov ecx, dword [esp + 0x174]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00533fc6
add esp, 0x168
ret