Function at 0x53b700
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x6c79d8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x22c
push ebx
push ebp
push esi
push edi
mov esi, ecx
xor ebx, ebx
or edi, 0xffffffff
mov dword [esp + 0x244], ebx
mov dword [esp + 0x34], 0x6dd1f4
mov word [esp + 0x38], di
mov word [esp + 0x3a], bx
xor ebp, ebp
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
mov dword [esp + 0x2c], ebp
call fcn.0061aaa0
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d780
push 0x6c
push 0xf1
push 0x40
lea ecx, [esp + 0x84]
mov byte [esp + 0x250], 3
call fcn.00555f00
push 0x6c
push 0xf1
push 0x58
lea ecx, [esp + 0xb8]
mov byte [esp + 0x250], 4
call fcn.00555f00
mov al, byte [esp + 0x9b]
mov dword [esp + 0x20], ebx
mov byte [esp + 0x1c], al
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
push 6
push 0x71c1fc
lea ecx, [esp + 0x38]
mov byte [esp + 0x24c], 6
call fcn.0061d820
push 6
push 0x7137f4
lea ecx, [esp + 0x1c]
mov byte [esp + 0x24c], 7
call fcn.0061d820
mov edx, dword [esi]
xor ecx, ecx
mov dword [esp + 0x43], ecx
mov al, 0xa5
mov word [esp + 0x47], cx
mov byte [esp + 0x244], 8
mov byte [esp + 0x49], cl
mov ecx, esi
mov byte [esp + 0x40], 2
mov byte [esp + 0x41], 0x3c
mov byte [esp + 0x42], al
mov byte [esp + 0x4a], 8
mov byte [esp + 0x4b], 0x3b
mov byte [esp + 0x4c], al
mov byte [esp + 0x4d], 1
mov byte [esp + 0x4e], 2
mov byte [esp + 0x4f], 3
mov byte [esp + 0x50], 4
mov byte [esp + 0x51], 2
mov byte [esp + 0x52], bl
mov byte [esp + 0x53], bl
call dword [edx + 0x18]
test ax, ax
jne 0x53b967
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x53b8f1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53b8e8
cmp al, 0xff
je 0x53b8e8
dec al
mov byte [ecx], al
jmp 0x53b8f1
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x53b8f1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53b8e8
cmp al, 0xff
je 0x53b8e8
dec al
mov byte [ecx], al
jmp 0x53b8f1
push ecx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
lea ecx, [esp + 0x24c]
mov dword [esp + 0x34], 0x6dd1f4
mov dword [esp + 0x244], edi
call fcn.0061d8c0
xor ax, ax
jmp 0x53eaa2
push 5
lea ecx, [esp + 0x250]
call fcn.0061daa0
push ecx
mov byte [esp + 0x40], al
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x713764
call fcn.0061d820
lea eax, [esp + 0xd0]
push eax
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x244], 9
push ecx
push ebx
push eax
lea ecx, [esp + 0x28]
call fcn.004136c0
mov eax, dword [esp + 0xd0]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53b9e6
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53b9dd
cmp al, 0xff
je 0x53b9dd
dec al
mov byte [ecx], al
jmp 0x53b9e6
push ecx
call fcn.006a64d0
add esp, 4
mov edx, dword [esp + 0x3c]
and edx, 0xff
lea eax, [edx - 0xa0]
cmp eax, 5
ja case.default.0x53b9ff
jmp dword [eax*4 + 0x53eac0]
cmp byte [0x72bd0c], bl
je 0x53babc
push 0x3a
push 5
lea ecx, [esp + 0x1c]
call fcn.0061dbc0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x190]
push ecx
call fcn.0061ca80
add esp, 8
mov edx, dword [0x6dd1fc]
lea ecx, [esp + 0x1c]
push edx
push ebx
push eax
mov byte [esp + 0x250], 0xa
call fcn.004136c0
mov eax, dword [esp + 0x190]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53baa2
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53ba99
cmp al, 0xff
je 0x53ba99
dec al
mov byte [ecx], al
mov dword [esp + 0x190], ebx
mov dword [esp + 0x194], ebx
mov dword [esp + 0x198], ebx
jmp 0x53bbf4
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x190], ebx
mov dword [esp + 0x194], ebx
mov dword [esp + 0x198], ebx
jmp 0x53bbf4
sub esp, 0x24
lea ecx, [esp + 0x64]
mov eax, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0xac]
call fcn.00556960
lea ecx, [esp + 0x78]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x58]
mov edx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061afb0
lea ecx, [esp + 0x1c]
call fcn.0061dab0
lea ecx, [esp + 0x18]
call fcn.0061dc40
cmp ax, 1
jge 0x53bb36
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0xb
mov ecx, esp
mov dword [esp + 0x3c], esp
jmp 0x53b88c
xor esi, esi
lea edi, [esp + 0x4d]
lea eax, [esi + 5]
lea ecx, [esp + 0x18]
push eax
call fcn.0061daa0
mov byte [edi], al
inc esi
inc edi
cmp si, 6
jl 0x53bb3c
push 5
lea ecx, [esp + 0x1c]
call fcn.0061daa0
add al, 0x39
mov byte [esp + 0x3c], al
mov ecx, dword [esp + 0x3c]
push ecx
push 5
lea ecx, [esp + 0x1c]
call fcn.0061dbc0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x120]
push eax
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x244], 0xc
push ecx
push ebx
push eax
lea ecx, [esp + 0x28]
call fcn.004136c0
mov eax, dword [esp + 0x120]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53bbdf
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53bbd6
cmp al, 0xff
je 0x53bbd6
dec al
mov byte [ecx], al
jmp 0x53bbdf
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x120], ebx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], ebx
or esi, 0xffffffff
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
cmp bp, bx
je 0x53be78
cmp byte [0x72bd0c], bl
je 0x53bd37
push 0x258
call fcn.0041afd0
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0xd
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x160]
push eax
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x244], 0xe
push ecx
push ebx
push eax
lea ecx, [esp + 0x28]
call fcn.004136c0
mov eax, dword [esp + 0x160]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53bd1d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53bd14
cmp al, 0xff
je 0x53bd14
dec al
mov byte [ecx], al
mov dword [esp + 0x160], ebx
mov dword [esp + 0x164], ebx
mov dword [esp + 0x168], ebx
jmp 0x53be76
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x160], ebx
mov dword [esp + 0x164], ebx
mov dword [esp + 0x168], ebx
jmp 0x53be76
sub esp, 0x24
lea eax, [esp + 0x6e]
mov edx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push eax
push edx
lea ecx, [esp + 0xac]
call fcn.00556960
lea ecx, [esp + 0x78]
call fcn.0061ac40
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push ecx
lea ecx, [esp + 0x5c]
call fcn.0061afb0
lea ecx, [esp + 0x1c]
call fcn.0061dab0
lea ecx, [esp + 0x18]
call fcn.0061dc40
test ax, ax
jle 0x53c005
cmp bp, 1
jne 0x53be76
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0xf
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x180]
push ecx
call fcn.0061ca80
add esp, 8
mov edx, dword [0x6dd1fc]
lea ecx, [esp + 0x1c]
push edx
push ebx
push eax
mov byte [esp + 0x250], 0x10
call fcn.004136c0
mov eax, dword [esp + 0x180]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53be61
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53be58
cmp al, 0xff
je 0x53be58
dec al
mov byte [ecx], al
jmp 0x53be61
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x180], ebx
mov dword [esp + 0x184], ebx
mov dword [esp + 0x188], ebx
xor ebp, ebp
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x71c5b4
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x713774
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
mov al, byte [esp + 0x1c]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x20], esp
mov byte [ecx], al
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], ebx
mov edx, dword [0x6dd1fc]
lea eax, [esp + 0x2c]
push edx
push ebx
push eax
call fcn.004136c0
push ecx
mov byte [esp + 0x258], 0x12
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x71e08c
call fcn.0061d820
mov ecx, dword [0x72baec]
mov byte [esp + 0x258], 8
call fcn.0062e450
mov ecx, dword [0x72baec]
call fcn.0062e830
movsx eax, ax
sub eax, ebx
je 0x53bf2e
dec eax
je 0x53c0ef
jmp 0x53bbf7
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72bae0]
call fcn.0062a5d0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e084
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e07c
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e074
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e06c
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
mov ecx, dword [0x72bae0]
lea eax, [esp + 0x34]
push eax
call fcn.0062a950
cmp ax, si
je 0x53bbf7
mov cl, byte [esp + 0x38]
add cl, 0x3a
push ecx
push 5
lea ecx, [esp + 0x1c]
call fcn.0061dbc0
mov dl, byte [esp + 0x38]
mov ebp, 1
inc dl
mov byte [esp + 0x4d], dl
jmp 0x53bbf7
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x11
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x53c08f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53c086
cmp al, 0xff
je 0x53c086
dec al
mov byte [ecx], al
jmp 0x53c08f
push ecx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
mov dword [esp + 0x34], 0x6dd1f4
jmp 0x53e950
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x53c136
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53c12d
cmp al, 0xff
je 0x53c12d
dec al
mov byte [ecx], al
jmp 0x53c136
push ecx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
mov dword [esp + 0x34], 0x6dd1f4
mov dword [esp + 0x244], esi
jmp 0x53ea92
cmp byte [0x72bd0c], bl
je 0x53c253
push 0x3e
push 5
lea ecx, [esp + 0x1c]
call fcn.0061dbc0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x1a0]
push ecx
call fcn.0061ca80
add esp, 8
mov edx, dword [0x6dd1fc]
lea ecx, [esp + 0x1c]
push edx
push ebx
push eax
mov byte [esp + 0x250], 0x13
call fcn.004136c0
mov eax, dword [esp + 0x1a0]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53c239
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53c230
cmp al, 0xff
je 0x53c230
dec al
mov byte [ecx], al
mov dword [esp + 0x1a0], ebx
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a8], ebx
jmp 0x53c38b
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x1a0], ebx
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a8], ebx
jmp 0x53c38b
sub esp, 0x24
lea ecx, [esp + 0x64]
mov eax, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0xac]
call fcn.00556960
lea ecx, [esp + 0x78]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x58]
mov edx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061afb0
lea ecx, [esp + 0x1c]
call fcn.0061dab0
lea ecx, [esp + 0x18]
call fcn.0061dc40
cmp ax, 1
jge 0x53c2cd
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x14
mov ecx, esp
mov dword [esp + 0x3c], esp
jmp 0x53b88c
xor esi, esi
lea edi, [esp + 0x4d]
lea eax, [esi + 5]
lea ecx, [esp + 0x18]
push eax
call fcn.0061daa0
mov byte [edi], al
inc esi
inc edi
cmp si, 6
jl 0x53c2d3
push 6
lea ecx, [esp + 0x1c]
call fcn.0061daa0
add al, 0x3d
mov byte [esp + 0x3c], al
mov ecx, dword [esp + 0x3c]
push ecx
push 5
lea ecx, [esp + 0x1c]
call fcn.0061dbc0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x150]
push eax
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x244], 0x15
push ecx
push ebx
push eax
lea ecx, [esp + 0x28]
call fcn.004136c0
mov eax, dword [esp + 0x150]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53c376
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53c36d
cmp al, 0xff
je 0x53c36d
dec al
mov byte [ecx], al
jmp 0x53c376
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x150], ebx
mov dword [esp + 0x154], ebx
mov dword [esp + 0x158], ebx
or esi, 0xffffffff
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
cmp bp, bx
je 0x53c60f
cmp byte [0x72bd0c], bl
je 0x53c4ce
push 0x258
call fcn.0041afd0
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x16
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x140]
push eax
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x244], 0x17
push ecx
push ebx
push eax
lea ecx, [esp + 0x28]
call fcn.004136c0
mov eax, dword [esp + 0x140]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53c4b4
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53c4ab
cmp al, 0xff
je 0x53c4ab
dec al
mov byte [ecx], al
mov dword [esp + 0x140], ebx
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebx
jmp 0x53c60d
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x140], ebx
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebx
jmp 0x53c60d
sub esp, 0x24
lea eax, [esp + 0x6e]
mov edx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push eax
push edx
lea ecx, [esp + 0xac]
call fcn.00556960
lea ecx, [esp + 0x78]
call fcn.0061ac40
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push ecx
lea ecx, [esp + 0x5c]
call fcn.0061afb0
lea ecx, [esp + 0x1c]
call fcn.0061dab0
lea ecx, [esp + 0x18]
call fcn.0061dc40
test ax, ax
jle 0x53c760
cmp bp, 1
jne 0x53c60d
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x18
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x110]
push ecx
call fcn.0061ca80
add esp, 8
mov edx, dword [0x6dd1fc]
lea ecx, [esp + 0x1c]
push edx
push ebx
push eax
mov byte [esp + 0x250], 0x19
call fcn.004136c0
mov eax, dword [esp + 0x110]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53c5f8
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53c5ef
cmp al, 0xff
je 0x53c5ef
dec al
mov byte [ecx], al
jmp 0x53c5f8
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], ebx
mov dword [esp + 0x118], ebx
xor ebp, ebp
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x71c5b4
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x713774
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
mov al, byte [esp + 0x1c]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x20], esp
mov byte [ecx], al
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], ebx
mov edx, dword [0x6dd1fc]
lea eax, [esp + 0x2c]
push edx
push ebx
push eax
call fcn.004136c0
push ecx
mov byte [esp + 0x258], 0x1b
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x71e08c
call fcn.0061d820
mov ecx, dword [0x72baec]
mov byte [esp + 0x258], 8
call fcn.0062e450
mov ecx, dword [0x72baec]
call fcn.0062e830
movsx eax, ax
sub eax, ebx
je 0x53c6c5
dec eax
je 0x53c0ef
jmp 0x53c38e
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72bae0]
call fcn.0062a5d0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e064
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e05c
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
mov ecx, dword [0x72bae0]
lea eax, [esp + 0x34]
push eax
call fcn.0062a950
cmp ax, si
je 0x53c38e
mov cl, byte [esp + 0x38]
add cl, 0x3e
push ecx
push 5
lea ecx, [esp + 0x1c]
call fcn.0061dbc0
mov dl, byte [esp + 0x38]
mov ebp, 1
inc dl
mov byte [esp + 0x4e], dl
jmp 0x53c38e
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x1a
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x53c08f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53c086
cmp al, 0xff
je 0x53c086
dec al
mov byte [ecx], al
jmp 0x53c08f
cmp byte [0x72bd0c], bl
je 0x53c951
push 0x40
push 5
lea ecx, [esp + 0x1c]
call fcn.0061dbc0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0xe0]
push ecx
call fcn.0061ca80
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6dd1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x1c
cmp ecx, ebp
jae 0x53c845
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x53c868
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140f0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140f0
jmp 0x53c8ef
cmp ebp, ebx
jbe 0x53c8b5
cmp ebp, eax
jne 0x53c8b5
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53c87c
mov eax, 0x6dd1f8
cmp byte [eax - 1], 0xfe
jae 0x53c8b5
push 1
lea ecx, [esp + 0x20]
call fcn.004138c0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53c899
mov eax, 0x6dd1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x53c8ef
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414230
test al, al
je 0x53c8ef
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x53c8d1
mov esi, 0x6dd1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
call fcn.00414210
mov eax, dword [esp + 0xe0]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53c937
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53c92e
cmp al, 0xff
je 0x53c92e
dec al
mov byte [ecx], al
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
jmp 0x53cbf8
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
jmp 0x53cbf8
sub esp, 0x24
lea edx, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00556960
lea ecx, [esp + 0x78]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061afb0
lea ecx, [esp + 0x1c]
call fcn.0061dab0
lea ecx, [esp + 0x18]
call fcn.0061dc40
cmp ax, 1
jge 0x53ca8f
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x1d
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x53ca2f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53ca26
cmp al, 0xff
je 0x53ca26
dec al
mov byte [ecx], al
jmp 0x53ca2f
push ecx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
mov dword [esp + 0x34], 0x6dd1f4
jmp 0x53e4b4
xor esi, esi
lea edi, [esp + 0x4d]
lea ecx, [esi + 5]
push ecx
lea ecx, [esp + 0x1c]
call fcn.0061daa0
mov byte [edi], al
inc esi
inc edi
cmp si, 6
jl 0x53ca95
push 7
lea ecx, [esp + 0x1c]
call fcn.0061daa0
add al, 0x3f
lea ecx, [esp + 0x14]
mov byte [esp + 0x3c], al
mov edx, dword [esp + 0x3c]
push edx
push 5
call fcn.0061dbc0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x130]
push ecx
call fcn.0061ca80
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6dd1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x1e
cmp ecx, ebp
jae 0x53cb09
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x53cb2c
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140f0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140f0
jmp 0x53cbb3
cmp ebp, ebx
jbe 0x53cb79
cmp ebp, eax
jne 0x53cb79
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53cb40
mov eax, 0x6dd1f8
cmp byte [eax - 1], 0xfe
jae 0x53cb79
push 1
lea ecx, [esp + 0x20]
call fcn.004138c0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53cb5d
mov eax, 0x6dd1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x53cbb3
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414230
test al, al
je 0x53cbb3
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x53cb95
mov esi, 0x6dd1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
call fcn.00414210
mov eax, dword [esp + 0x130]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53cbe3
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53cbda
cmp al, 0xff
je 0x53cbda
dec al
mov byte [ecx], al
jmp 0x53cbe3
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x130], ebx
mov dword [esp + 0x134], ebx
mov dword [esp + 0x138], ebx
mov esi, dword [esp + 0x2c]
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
cmp si, bx
je 0x53cfd3
cmp byte [0x72bd0c], bl
je 0x53cde7
push 0x258
call fcn.0041afd0
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x1f
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x170]
push eax
call fcn.0061ca80
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6dd1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x20
cmp ecx, ebp
jae 0x53ccdb
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x53ccfe
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140f0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140f0
jmp 0x53cd85
cmp ebp, ebx
jbe 0x53cd4b
cmp ebp, eax
jne 0x53cd4b
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53cd12
mov eax, 0x6dd1f8
cmp byte [eax - 1], 0xfe
jae 0x53cd4b
push 1
lea ecx, [esp + 0x20]
call fcn.004138c0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53cd2f
mov eax, 0x6dd1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x53cd85
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414230
test al, al
je 0x53cd85
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x53cd67
mov esi, 0x6dd1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
call fcn.00414210
mov eax, dword [esp + 0x170]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53cdcd
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53cdc4
cmp al, 0xff
je 0x53cdc4
dec al
mov byte [ecx], al
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], ebx
mov dword [esp + 0x178], ebx
jmp 0x53cfd1
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], ebx
mov dword [esp + 0x178], ebx
jmp 0x53cfd1
sub esp, 0x24
lea edx, [esp + 0x6e]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00556960
lea ecx, [esp + 0x78]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061afb0
lea ecx, [esp + 0x1c]
call fcn.0061dab0
lea ecx, [esp + 0x18]
call fcn.0061dc40
test ax, ax
jle 0x53d160
cmp si, 1
jne 0x53cfd1
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x21
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0xf0]
push ecx
call fcn.0061ca80
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6dd1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x22
cmp ecx, ebp
jae 0x53cee2
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x53cf05
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140f0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140f0
jmp 0x53cf8c
cmp ebp, ebx
jbe 0x53cf52
cmp ebp, eax
jne 0x53cf52
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53cf19
mov eax, 0x6dd1f8
cmp byte [eax - 1], 0xfe
jae 0x53cf52
push 1
lea ecx, [esp + 0x20]
call fcn.004138c0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53cf36
mov eax, 0x6dd1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x53cf8c
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414230
test al, al
je 0x53cf8c
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x53cf6e
mov esi, 0x6dd1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
call fcn.00414210
mov eax, dword [esp + 0xf0]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53cfbc
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53cfb3
cmp al, 0xff
je 0x53cfb3
dec al
mov byte [ecx], al
jmp 0x53cfbc
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xf4], ebx
mov dword [esp + 0xf8], ebx
xor esi, esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x71c5b4
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x713774
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
mov dl, byte [esp + 0x1c]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x20], esp
mov byte [ecx], dl
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], ebx
mov eax, dword [0x6dd1fc]
lea edx, [esp + 0x2c]
push eax
push ebx
push edx
call fcn.004136c0
push ecx
mov byte [esp + 0x258], 0x24
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x71e08c
call fcn.0061d820
mov ecx, dword [0x72baec]
mov byte [esp + 0x258], 8
call fcn.0062e450
mov ecx, dword [0x72baec]
call fcn.0062e830
movsx eax, ax
sub eax, ebx
je 0x53d088
dec eax
je 0x53d264
jmp 0x53cbfc
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72bae0]
call fcn.0062a5d0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e054
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e04c
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e044
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e03c
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
lea ecx, [esp + 0x34]
push ecx
mov ecx, dword [0x72bae0]
call fcn.0062a950
cmp ax, 0xffff
je 0x53cbfc
mov dl, byte [esp + 0x38]
lea ecx, [esp + 0x14]
add dl, 0x40
push edx
push 5
call fcn.0061dbc0
mov al, byte [esp + 0x38]
mov esi, 1
inc al
mov byte [esp + 0x4f], al
jmp 0x53cbfc
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x23
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x53d1ea
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53d1e1
cmp al, 0xff
je 0x53d1e1
dec al
mov byte [ecx], al
jmp 0x53d1ea
push ecx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
lea ecx, [esp + 0x24c]
mov dword [esp + 0x34], 0x6dd1f4
mov dword [esp + 0x244], 0xffffffff
call fcn.0061d8c0
xor ax, ax
jmp 0x53eaa2
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x53d2ab
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53d2a2
cmp al, 0xff
je 0x53d2a2
dec al
mov byte [ecx], al
jmp 0x53d2ab
push ecx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
mov dword [esp + 0x34], 0x6dd1f4
mov dword [esp + 0x244], 0xffffffff
jmp 0x53ea92
cmp byte [0x72bd0c], bl
je 0x53d477
push 0x40
push 5
lea ecx, [esp + 0x1c]
call fcn.0061dbc0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x100]
push eax
call fcn.0061ca80
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6dd1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x25
cmp ecx, ebp
jae 0x53d36b
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x53d38e
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140f0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140f0
jmp 0x53d415
cmp ebp, ebx
jbe 0x53d3db
cmp ebp, eax
jne 0x53d3db
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53d3a2
mov eax, 0x6dd1f8
cmp byte [eax - 1], 0xfe
jae 0x53d3db
push 1
lea ecx, [esp + 0x20]
call fcn.004138c0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53d3bf
mov eax, 0x6dd1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x53d415
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414230
test al, al
je 0x53d415
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x53d3f7
mov esi, 0x6dd1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
call fcn.00414210
mov eax, dword [esp + 0x100]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53d45d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53d454
cmp al, 0xff
je 0x53d454
dec al
mov byte [ecx], al
mov dword [esp + 0x100], ebx
mov dword [esp + 0x104], ebx
mov dword [esp + 0x108], ebx
jmp 0x53d6c5
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x100], ebx
mov dword [esp + 0x104], ebx
mov dword [esp + 0x108], ebx
jmp 0x53d6c5
sub esp, 0x24
lea edx, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00556960
lea ecx, [esp + 0x78]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061afb0
lea ecx, [esp + 0x1c]
call fcn.0061dab0
lea ecx, [esp + 0x18]
call fcn.0061dc40
cmp ax, 1
jge 0x53d55b
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x26
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x53ca2f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53ca26
cmp al, 0xff
je 0x53ca26
dec al
mov byte [ecx], al
jmp 0x53ca2f
xor esi, esi
lea edi, [esp + 0x4d]
lea ecx, [esi + 5]
push ecx
lea ecx, [esp + 0x1c]
call fcn.0061daa0
mov byte [edi], al
inc esi
inc edi
cmp si, 6
jl 0x53d561
push 8
lea ecx, [esp + 0x1c]
call fcn.0061daa0
add al, 0x3f
lea ecx, [esp + 0x14]
mov byte [esp + 0x3c], al
mov edx, dword [esp + 0x3c]
push edx
push 5
call fcn.0061dbc0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0xd0]
push ecx
call fcn.0061ca80
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6dd1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x27
cmp ecx, ebp
jae 0x53d5d5
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x53d5f8
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140f0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140f0
jmp 0x53d680
cmp ebp, ebx
jbe 0x53d645
cmp ebp, eax
jne 0x53d645
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53d60c
mov eax, 0x6dd1f8
cmp byte [eax - 1], 0xfe
jae 0x53d645
push 1
lea ecx, [esp + 0x20]
call fcn.004138c0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53d629
mov eax, 0x6dd1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x53d680
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414230
test al, al
je 0x53d680
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x53d661
mov esi, 0x6dd1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], ebp
mov byte [ecx + ebp], bl
mov eax, dword [esp + 0xd0]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53d6b0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x53d6a7
cmp al, 0xff
je 0x53d6a7
dec al
mov byte [ecx], al
jmp 0x53d6b0
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd8], ebx
mov esi, dword [esp + 0x2c]
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
cmp si, bx
je 0x53da06
cmp byte [0x72bd0c], bl
je 0x53d8fe
push 0x258
call fcn.0041afd0
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x28
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0xa0]
push eax
call fcn.0061ca80
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6dd1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x29
cmp ecx, ebp
jae 0x53d7a8
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x53d7cb
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140f0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140f0
jmp 0x53d853
cmp ebp, ebx
jbe 0x53d818
cmp ebp, eax
jne 0x53d818
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53d7df
mov eax, 0x6dd1f8
cmp byte [eax - 1], 0xfe
jae 0x53d818
push 1
lea ecx, [esp + 0x20]
call fcn.004138c0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x53d7fc
mov eax, 0x6dd1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x53d853
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414230
test al, al
je 0x53d853
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x53d834
mov esi, 0x6dd1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], ebp
mov byte [ecx + ebp], bl
mov eax, dword [esp + 0xa0]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x53d8e4
push eax
lea ecx, [esp + 0xa0]
call fcn.004cfba0
cmp byte [eax], bl
je 0x53d8c4
mov edx, dword [esp + 0xa0]
lea ecx, [esp + 0x9c]
push edx
call fcn.004cfba0
cmp byte [eax], 0xff
je 0x53d8c4
mov eax, dword [esp + 0xa0]
lea ecx, [esp + 0x9c]
push eax
call fcn.004cfba0
mov cl, byte [eax]
dec cl
mov byte [eax], cl
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
jmp 0x53da04
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xa0]
add ecx, 2
dec edx
push ecx
push edx
lea ecx, [esp + 0xa4]
call fcn.004ff070
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
jmp 0x53da04
sub esp, 0x24
lea ecx, [esp + 0x6e]
mov eax, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0xac]
call fcn.00556960
lea ecx, [esp + 0x78]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x58]
mov edx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061afb0
lea ecx, [esp + 0x1c]
call fcn.0061dab0
lea ecx, [esp + 0x18]
call fcn.0061dc40
test ax, ax
jle 0x53db7d
cmp si, 1
jne 0x53da04
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x2a
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x1f0]
push eax
call fcn.0061ca80
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x2b
call fcn.00452520
lea ecx, [esp + 0x1ec]
mov byte [esp + 0x244], 8
call fcn.00419a10
xor esi, esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x71c5b4
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x713774
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
sub esp, 0x10
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00413060
push ecx
mov byte [esp + 0x258], 0x2d
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x71e08c
call fcn.0061d820
mov ecx, dword [0x72baec]
mov byte [esp + 0x258], 8
call fcn.0062e450
mov ecx, dword [0x72baec]
call fcn.0062e830
movsx eax, ax
sub eax, ebx
je 0x53daa5
dec eax
je 0x53dc69
jmp 0x53d6c9
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72bae0]
call fcn.0062a5d0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e054
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e04c
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e044
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e03c
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
lea ecx, [esp + 0x34]
push ecx
mov ecx, dword [0x72bae0]
call fcn.0062a950
cmp ax, 0xffff
je 0x53d6c9
mov dl, byte [esp + 0x38]
lea ecx, [esp + 0x14]
add dl, 0x40
push edx
push 5
call fcn.0061dbc0
mov al, byte [esp + 0x38]
mov esi, 1
inc al
mov byte [esp + 0x50], al
jmp 0x53d6c9
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x2c
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.00419a10
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.004071e0
lea ecx, [esp + 0x24c]
mov dword [esp + 0x244], 0xffffffff
call fcn.0061d8c0
xor ax, ax
jmp 0x53eaa2
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.00419a10
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.004071e0
mov dword [esp + 0x244], 0xffffffff
jmp 0x53ea92
cmp byte [0x72bd0c], bl
je 0x53dd5f
push 0x44
push 5
lea ecx, [esp + 0x1c]
call fcn.0061dbc0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x1d0]
push eax
call fcn.0061ca80
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x2e
call fcn.00452520
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x1cc]
jmp 0x53df1b
sub esp, 0x24
lea edx, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00556960
lea ecx, [esp + 0x78]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061afb0
lea ecx, [esp + 0x1c]
call fcn.0061dab0
lea ecx, [esp + 0x18]
call fcn.0061dc40
cmp ax, 1
jge 0x53de9b
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x2f
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.00419a10
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.004071e0
lea ecx, [esp + 0x24c]
mov dword [esp + 0x244], edi
call fcn.0061d8c0
xor ax, ax
jmp 0x53eaa2
xor esi, esi
lea edi, [esp + 0x4d]
lea ecx, [esi + 5]
push ecx
lea ecx, [esp + 0x1c]
call fcn.0061daa0
mov byte [edi], al
inc esi
inc edi
cmp si, 6
jl 0x53dea1
push 9
lea ecx, [esp + 0x1c]
call fcn.0061daa0
add al, 0x43
lea ecx, [esp + 0x14]
mov byte [esp + 0x3c], al
mov edx, dword [esp + 0x3c]
push edx
push 5
call fcn.0061dbc0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x1b0]
push ecx
call fcn.0061ca80
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x30
call fcn.00452520
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x1ac]
call fcn.00419a10
or esi, 0xffffffff
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
cmp bp, bx
je 0x53e115
cmp byte [0x72bd0c], bl
je 0x53e00d
push 0x258
call fcn.0041afd0
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x31
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x210]
push eax
call fcn.0061ca80
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x32
call fcn.00452520
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x20c]
jmp 0x53e10e
sub esp, 0x24
lea edx, [esp + 0x6e]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00556960
lea ecx, [esp + 0x78]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061afb0
lea ecx, [esp + 0x1c]
call fcn.0061dab0
lea ecx, [esp + 0x18]
call fcn.0061dc40
test ax, ax
jle 0x53e24f
cmp bp, 1
jne 0x53e113
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x33
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x230]
push ecx
call fcn.0061ca80
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x34
call fcn.00452520
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x22c]
call fcn.00419a10
xor ebp, ebp
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x71c5b4
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x713774
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
sub esp, 0x10
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00413060
push ecx
mov byte [esp + 0x258], 0x36
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x71e08c
call fcn.0061d820
mov ecx, dword [0x72baec]
mov byte [esp + 0x258], 8
call fcn.0062e450
mov ecx, dword [0x72baec]
call fcn.0062e830
movsx eax, ax
sub eax, ebx
je 0x53e1b4
dec eax
je 0x53e96b
jmp 0x53df23
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72bae0]
call fcn.0062a5d0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e034
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e02c
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
lea ecx, [esp + 0x34]
push ecx
mov ecx, dword [0x72bae0]
call fcn.0062a950
cmp ax, si
je 0x53df23
mov dl, byte [esp + 0x38]
lea ecx, [esp + 0x14]
add dl, 0x44
push edx
push 5
call fcn.0061dbc0
mov al, byte [esp + 0x38]
mov ebp, 1
inc al
mov byte [esp + 0x51], al
jmp 0x53df23
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x35
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.00419a10
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.004071e0
lea ecx, [esp + 0x24c]
mov dword [esp + 0x244], esi
call fcn.0061d8c0
xor ax, ax
jmp 0x53eaa2
cmp byte [0x72bd0c], bl
je 0x53e393
push 0x46
push 5
lea ecx, [esp + 0x1c]
call fcn.0061dbc0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x200]
push eax
call fcn.0061ca80
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x37
call fcn.00452520
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x1fc]
jmp 0x53e54f
sub esp, 0x24
lea edx, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00556960
lea ecx, [esp + 0x78]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061afb0
lea ecx, [esp + 0x1c]
call fcn.0061dab0
lea ecx, [esp + 0x18]
call fcn.0061dc40
cmp ax, 1
jge 0x53e4cf
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x38
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.00419a10
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.004071e0
lea ecx, [esp + 0x24c]
mov dword [esp + 0x244], edi
call fcn.0061d8c0
xor ax, ax
jmp 0x53eaa2
xor esi, esi
lea edi, [esp + 0x4d]
lea ecx, [esi + 5]
push ecx
lea ecx, [esp + 0x1c]
call fcn.0061daa0
mov byte [edi], al
inc esi
inc edi
cmp si, 6
jl 0x53e4d5
push 0xa
lea ecx, [esp + 0x1c]
call fcn.0061daa0
add al, 0x45
lea ecx, [esp + 0x14]
mov byte [esp + 0x3c], al
mov edx, dword [esp + 0x3c]
push edx
push 5
call fcn.0061dbc0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x1e0]
push ecx
call fcn.0061ca80
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x39
call fcn.00452520
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x1dc]
call fcn.00419a10
or esi, 0xffffffff
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
cmp bp, bx
je 0x53e749
cmp byte [0x72bd0c], bl
je 0x53e641
push 0x258
call fcn.0041afd0
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x3a
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x220]
push eax
call fcn.0061ca80
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x3b
call fcn.00452520
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x21c]
jmp 0x53e742
sub esp, 0x24
lea edx, [esp + 0x6e]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00556960
lea ecx, [esp + 0x78]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061afb0
lea ecx, [esp + 0x1c]
call fcn.0061dab0
lea ecx, [esp + 0x18]
call fcn.0061dc40
test ax, ax
jle 0x53e883
cmp bp, 1
jne 0x53e747
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x3c
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x1c0]
push ecx
call fcn.0061ca80
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x3d
call fcn.00452520
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x1bc]
call fcn.00419a10
xor ebp, ebp
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x71c5b4
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x713774
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
sub esp, 0x10
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00413060
push ecx
mov byte [esp + 0x258], 0x3f
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x71e08c
call fcn.0061d820
mov ecx, dword [0x72baec]
mov byte [esp + 0x258], 8
call fcn.0062e450
mov ecx, dword [0x72baec]
call fcn.0062e830
movsx eax, ax
sub eax, ebx
je 0x53e7e8
dec eax
je 0x53e96b
jmp 0x53e557
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72bae0]
call fcn.0062a5d0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e024
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71e01c
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
lea ecx, [esp + 0x34]
push ecx
mov ecx, dword [0x72bae0]
call fcn.0062a950
cmp ax, si
je 0x53e557
mov dl, byte [esp + 0x38]
lea ecx, [esp + 0x14]
add dl, 0x46
push edx
push 5
call fcn.0061dbc0
mov al, byte [esp + 0x38]
mov ebp, 1
inc al
mov byte [esp + 0x52], al
jmp 0x53e557
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x254], 0x3e
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x254], 8
call fcn.0061ef70
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.00419a10
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.004071e0
lea ecx, [esp + 0x24c]
mov dword [esp + 0x244], esi
call fcn.0061d8c0
xor ax, ax
jmp 0x53eaa2
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.00419a10
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.004071e0
mov dword [esp + 0x244], esi
jmp 0x53ea92
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0061d8c0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0061d8c0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.00419a10
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00555f30
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00555f30
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0061d8c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0061ab90
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.004071e0
mov dword [esp + 0x244], edi
lea ecx, [esp + 0x24c]
call fcn.0061d8c0
mov ax, 1
mov ecx, dword [esp + 0x23c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x238
ret 4