Function at 0x5aa3c0
Capabilities:
Check os version
Contain obfuscated stackstrings
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x6ce898
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x590
push ebx
push ebp
push esi
push edi
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0x38], 0x6dd1f4
mov dword [esp + 0x5a8], ebx
mov word [esp + 0x3c], 0xffff
mov word [esp + 0x3e], bx
xor edi, edi
lea ecx, [esp + 0x44]
mov byte [esp + 0x5a8], 1
mov dword [esp + 0x1c], edi
call fcn.0061e190
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061aaa0
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d780
push 0x6c
push 0xf1
push 0x80
lea ecx, [esp + 0x6c]
mov byte [esp + 0x5b4], 4
call fcn.00555f00
mov al, byte [esp + 0x23]
mov dword [esp + 0x28], ebx
mov byte [esp + 0x24], al
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
push 6
push 0x7137f4
lea ecx, [esp + 0x20]
mov byte [esp + 0x5b0], 6
call fcn.0061d820
mov al, 0xae
mov cl, 0xf0
mov byte [esp + 0x5a8], 7
mov byte [esp + 0x42], 1
mov byte [esp + 0x43], 0x3f
mov byte [esp + 0xc8], 8
mov byte [esp + 0xc9], al
mov byte [esp + 0xca], 2
mov byte [esp + 0xcb], bl
mov byte [esp + 0xcc], bl
mov byte [esp + 0xcd], bl
mov byte [esp + 0xce], bl
mov byte [esp + 0xcf], cl
mov byte [esp + 0xd0], 0x20
mov byte [esp + 0xd1], bl
mov byte [esp + 0xd2], 8
mov byte [esp + 0xd3], al
mov byte [esp + 0xd4], 2
mov byte [esp + 0xd5], bl
mov byte [esp + 0xd6], bl
mov byte [esp + 0xd7], bl
mov byte [esp + 0xd8], bl
mov byte [esp + 0xd9], cl
mov byte [esp + 0xda], bl
mov byte [esp + 0xdb], bl
mov byte [esp + 0xdc], 8
mov byte [esp + 0xdd], al
mov byte [esp + 0xde], 2
mov byte [esp + 0xdf], bl
mov byte [esp + 0xe0], bl
mov byte [esp + 0xe1], bl
mov byte [esp + 0xe2], bl
mov byte [esp + 0xe3], bl
mov byte [esp + 0xe4], bl
mov byte [esp + 0xe5], bl
mov byte [esp + 0xe6], 8
mov byte [esp + 0xe7], al
mov byte [esp + 0xe8], 2
mov byte [esp + 0xe9], bl
mov byte [esp + 0xea], bl
mov byte [esp + 0xeb], bl
mov byte [esp + 0xec], bl
mov byte [esp + 0xed], cl
mov byte [esp + 0xee], 0x40
mov byte [esp + 0xef], bl
mov byte [esp + 0xf0], 8
mov byte [esp + 0xf1], al
mov byte [esp + 0xf2], 2
mov byte [esp + 0xf3], bl
mov byte [esp + 0xf4], bl
mov byte [esp + 0xf5], bl
mov byte [esp + 0xf6], bl
mov byte [esp + 0xf7], cl
mov byte [esp + 0xf8], bl
mov byte [esp + 0xf9], bl
mov byte [esp + 0xfa], 8
mov byte [esp + 0xfb], al
mov byte [esp + 0xfc], 2
mov byte [esp + 0xfd], bl
mov byte [esp + 0xfe], bl
mov byte [esp + 0xff], bl
mov byte [esp + 0x100], bl
mov byte [esp + 0x101], bl
mov byte [esp + 0x102], bl
mov byte [esp + 0x103], bl
mov byte [esp + 0x104], 8
mov byte [esp + 0x105], al
mov byte [esp + 0x106], 2
mov byte [esp + 0x107], bl
mov byte [esp + 0x108], bl
mov byte [esp + 0x109], bl
mov byte [esp + 0x10a], bl
mov byte [esp + 0x10b], cl
mov byte [esp + 0x10c], 0x80
mov byte [esp + 0x10d], bl
mov byte [esp + 0x10e], 8
mov byte [esp + 0x10f], al
mov byte [esp + 0x110], 2
mov byte [esp + 0x111], bl
mov byte [esp + 0x112], bl
mov byte [esp + 0x113], bl
mov byte [esp + 0x114], bl
mov byte [esp + 0x115], cl
mov byte [esp + 0x116], bl
mov byte [esp + 0x117], bl
mov byte [esp + 0x118], 8
mov byte [esp + 0x119], al
mov byte [esp + 0x11a], 2
mov byte [esp + 0x11b], bl
mov byte [esp + 0x11c], bl
mov byte [esp + 0x11d], bl
mov byte [esp + 0x11e], bl
mov byte [esp + 0x11f], bl
mov byte [esp + 0x120], bl
mov byte [esp + 0x121], bl
mov byte [esp + 0x122], 8
mov byte [esp + 0x123], al
mov byte [esp + 0x124], 2
mov byte [esp + 0x125], bl
mov byte [esp + 0x126], bl
mov byte [esp + 0x127], bl
mov byte [esp + 0x128], bl
mov byte [esp + 0x129], cl
mov byte [esp + 0x12a], 0x10
mov byte [esp + 0x12b], bl
mov byte [esp + 0x12c], 8
mov byte [esp + 0x12d], al
mov byte [esp + 0x12e], 2
mov byte [esp + 0x12f], bl
mov byte [esp + 0x130], bl
mov byte [esp + 0x131], bl
mov byte [esp + 0x132], bl
mov byte [esp + 0x133], cl
mov byte [esp + 0x134], bl
mov byte [esp + 0x135], bl
mov byte [esp + 0x136], 8
mov byte [esp + 0x137], al
mov dl, 0x84
xor ecx, ecx
mov byte [esp + 0x142], dl
mov dword [esp + 0x144], ecx
xor eax, eax
xor ebp, ebp
mov byte [esp + 0x17e], dl
xor edx, edx
mov word [esp + 0x148], cx
mov dword [esp + 0x160], ecx
mov dword [esp + 0x180], edx
mov dword [esp + 0x164], ecx
mov word [esp + 0x184], dx
mov dword [esp + 0x158], eax
mov dword [esp + 0x16c], ecx
mov word [esp + 0x18d], dx
mov word [esp + 0x15c], ax
mov word [esp + 0x170], cx
mov byte [esp + 0x18f], dl
mov al, 0x90
mov cl, 0xaa
mov dword [esp + 0x176], ebp
mov word [esp + 0x197], dx
mov byte [esp + 0x138], 2
mov byte [esp + 0x139], bl
mov byte [esp + 0x13a], bl
mov byte [esp + 0x13b], bl
mov byte [esp + 0x13c], bl
mov byte [esp + 0x13d], bl
mov byte [esp + 0x13e], bl
mov byte [esp + 0x13f], bl
mov byte [esp + 0x140], 3
mov byte [esp + 0x141], 0x3b
mov byte [esp + 0x143], 1
mov byte [esp + 0x14a], 7
mov byte [esp + 0x14b], 0x3b
mov byte [esp + 0x14c], 0x85
mov byte [esp + 0x14d], 0xf
mov byte [esp + 0x14e], 1
mov byte [esp + 0x14f], 2
mov byte [esp + 0x150], 3
mov byte [esp + 0x151], 4
mov word [esp + 0x152], bx
mov byte [esp + 0x154], 3
mov byte [esp + 0x155], 0x3b
mov byte [esp + 0x156], 0x81
mov byte [esp + 0x157], 0xc
mov byte [esp + 0x15e], 1
mov byte [esp + 0x15f], 0x3f
mov byte [esp + 0x168], 3
mov byte [esp + 0x169], 0x3b
mov byte [esp + 0x16a], al
mov byte [esp + 0x16b], 0xff
mov byte [esp + 0x172], 3
mov byte [esp + 0x173], 0x3b
mov byte [esp + 0x174], al
mov byte [esp + 0x175], cl
mov word [esp + 0x17a], bp
mov byte [esp + 0x17c], 3
mov byte [esp + 0x17d], 0x3b
mov byte [esp + 0x17f], bl
mov byte [esp + 0x186], 6
mov byte [esp + 0x187], 0x3b
mov byte [esp + 0x188], 0x86
mov byte [esp + 0x189], 0xca
mov byte [esp + 0x18a], 0xed
mov byte [esp + 0x18b], 0x32
mov byte [esp + 0x18c], 0xff
mov byte [esp + 0x190], 6
mov byte [esp + 0x191], 0x3b
mov byte [esp + 0x192], 0x89
mov byte [esp + 0x193], 0x10
mov byte [esp + 0x194], 0x4d
mov byte [esp + 0x195], 0x32
mov byte [esp + 0x196], 0xec
mov byte [esp + 0x199], dl
mov byte [esp + 0x19a], 6
mov byte [esp + 0x19b], 0x3b
mov byte [esp + 0x19c], 0x91
mov byte [esp + 0x19d], 0xff
mov byte [esp + 0x19e], 0xff
mov word [esp + 0x1a1], dx
mov byte [esp + 0x19f], 0xff
mov byte [esp + 0x1a3], dl
mov dword [esp + 0x1b2], edx
mov word [esp + 0x1b6], dx
mov dword [esp + 0x1d0], edx
mov word [esp + 0x1d4], dx
mov dword [esp + 0x1da], edx
mov word [esp + 0x1de], dx
mov dword [esp + 0x1e2], edx
mov dword [esp + 0x1e6], edx
mov dword [esp + 0x1ee], edx
mov word [esp + 0x1f2], dx
mov word [esp + 0x1fb], dx
mov byte [esp + 0x1fd], dl
mov byte [esp + 0x1a0], 0xff
mov byte [esp + 0x1a4], 7
mov byte [esp + 0x1a5], 0x3b
mov byte [esp + 0x1a6], 0x94
mov byte [esp + 0x1a7], 3
mov byte [esp + 0x1a8], 8
mov byte [esp + 0x1a9], 0x80
mov byte [esp + 0x1aa], 0x80
mov byte [esp + 0x1ab], 3
mov word [esp + 0x1ac], bx
mov byte [esp + 0x1ae], 3
mov byte [esp + 0x1af], 0x3b
mov byte [esp + 0x1b0], 0x97
mov byte [esp + 0x1b1], 7
mov byte [esp + 0x1b8], 5
mov byte [esp + 0x1b9], 0x3b
mov byte [esp + 0x1ba], 0x98
mov byte [esp + 0x1bb], 0x1a
mov byte [esp + 0x1bc], bl
mov byte [esp + 0x1bd], 6
mov dword [esp + 0x1be], ebx
mov byte [esp + 0x1c2], 8
mov byte [esp + 0x1c3], 0x3b
mov byte [esp + 0x1c4], 0x9f
mov byte [esp + 0x1c5], 0xa
mov byte [esp + 0x1c6], 5
mov byte [esp + 0x1c7], 0xd
mov byte [esp + 0x1c8], 0x50
mov byte [esp + 0x1c9], 0x64
mov byte [esp + 0x1ca], 0xaf
mov byte [esp + 0x1cb], bl
mov byte [esp + 0x1cc], 3
mov byte [esp + 0x1cd], 0x3b
mov byte [esp + 0x1ce], 0x93
mov byte [esp + 0x1cf], 8
mov byte [esp + 0x1d6], 3
mov byte [esp + 0x1d7], 0x3b
mov byte [esp + 0x1d8], al
mov byte [esp + 0x1d9], 0xff
mov byte [esp + 0x1e0], 1
mov byte [esp + 0x1e1], 0x14
mov byte [esp + 0x1ea], 3
mov byte [esp + 0x1eb], 0x3b
mov byte [esp + 0x1ec], al
mov byte [esp + 0x1ed], cl
mov byte [esp + 0x1f4], 6
mov byte [esp + 0x1f5], 0x3b
mov byte [esp + 0x1f6], 0x91
mov byte [esp + 0x1f7], 0xff
mov byte [esp + 0x1f8], 0xff
mov byte [esp + 0x1f9], 0xff
mov byte [esp + 0x1fa], 0xff
mov byte [esp + 0x1fe], 7
mov byte [esp + 0x1ff], 0x3b
mov byte [esp + 0x200], 0x94
mov byte [esp + 0x201], 3
mov byte [esp + 0x202], 8
mov byte [esp + 0x203], 0x80
mov byte [esp + 0x204], 0x80
mov byte [esp + 0x205], 3
mov word [esp + 0x206], bx
mov byte [esp + 0x208], 3
mov byte [esp + 0x209], 0x3b
mov byte [esp + 0x20a], 0x97
mov byte [esp + 0x20b], 4
mov dword [esp + 0x20c], edx
mov word [esp + 0x210], dx
mov dword [esp + 0x220], edx
mov word [esp + 0x224], dx
mov dword [esp + 0x22a], edx
mov word [esp + 0x22e], dx
mov dword [esp + 0x232], edx
mov dword [esp + 0x236], edx
mov dword [esp + 0x23e], edx
mov word [esp + 0x242], dx
mov dword [esp + 0x248], edx
mov word [esp + 0x24c], dx
mov word [esp + 0x255], dx
mov byte [esp + 0x257], dl
mov word [esp + 0x25f], dx
mov byte [esp + 0x261], dl
mov word [esp + 0x269], dx
mov byte [esp + 0x26b], dl
mov dword [esp + 0x27a], edx
mov byte [esp + 0x212], 8
mov byte [esp + 0x213], 0x3b
mov byte [esp + 0x214], 0x9f
mov byte [esp + 0x215], 0xa
mov byte [esp + 0x216], 5
mov byte [esp + 0x217], 0xd
mov byte [esp + 0x218], 0x50
mov byte [esp + 0x219], 0x64
mov byte [esp + 0x21a], 0xaf
mov byte [esp + 0x21b], bl
mov byte [esp + 0x21c], 3
mov byte [esp + 0x21d], 0x3b
mov byte [esp + 0x21e], 0x93
mov byte [esp + 0x21f], 8
mov byte [esp + 0x226], 3
mov byte [esp + 0x227], 0x3b
mov byte [esp + 0x228], al
mov byte [esp + 0x229], 0xff
mov byte [esp + 0x230], 1
mov byte [esp + 0x231], 0x14
mov byte [esp + 0x23a], 3
mov byte [esp + 0x23b], 0x3b
mov byte [esp + 0x23c], al
mov byte [esp + 0x23d], cl
mov byte [esp + 0x244], 3
mov byte [esp + 0x245], 0x3b
mov byte [esp + 0x246], 0x84
mov byte [esp + 0x247], bl
mov byte [esp + 0x24e], 6
mov byte [esp + 0x24f], 0x3b
mov byte [esp + 0x250], 0x86
mov byte [esp + 0x251], 0xca
mov byte [esp + 0x252], 0xed
mov byte [esp + 0x253], 0x32
mov byte [esp + 0x254], 0xff
mov byte [esp + 0x258], 6
mov byte [esp + 0x259], 0x3b
mov byte [esp + 0x25a], 0x89
mov byte [esp + 0x25b], 0x10
mov byte [esp + 0x25c], 0x4d
mov byte [esp + 0x25d], 0x32
mov byte [esp + 0x25e], 0xec
mov byte [esp + 0x262], 6
mov byte [esp + 0x263], 0x3b
mov byte [esp + 0x264], 0x91
mov byte [esp + 0x265], 0xff
mov byte [esp + 0x266], 0xff
mov byte [esp + 0x267], 0xff
mov byte [esp + 0x268], 0xff
mov byte [esp + 0x26c], 7
mov byte [esp + 0x26d], 0x3b
mov byte [esp + 0x26e], 0x94
mov byte [esp + 0x26f], 3
mov byte [esp + 0x270], 8
mov byte [esp + 0x271], 0x80
mov byte [esp + 0x272], 0x80
mov byte [esp + 0x273], 3
mov word [esp + 0x274], bx
mov byte [esp + 0x276], 3
mov byte [esp + 0x277], 0x3b
mov byte [esp + 0x278], 0x97
mov byte [esp + 0x279], 5
mov word [esp + 0x27e], dx
mov dword [esp + 0x298], edx
mov byte [esp + 0x2a0], al
mov word [esp + 0x29c], dx
mov dword [esp + 0x2a2], edx
mov word [esp + 0x2a6], dx
mov dword [esp + 0x2aa], edx
mov dword [esp + 0x2ae], edx
mov byte [esp + 0x2be], al
mov byte [esp + 0xa6], al
mov eax, dword [esi]
mov dl, 0x88
mov byte [esp + 0x2bf], cl
mov dword [esp + 0x2c0], ebp
mov byte [esp + 0xa7], cl
mov ecx, esi
mov byte [esp + 0x280], 5
mov byte [esp + 0x281], 0x3b
mov byte [esp + 0x282], 0x98
mov byte [esp + 0x283], 0x1a
mov byte [esp + 0x284], bl
mov byte [esp + 0x285], 6
mov dword [esp + 0x286], ebx
mov byte [esp + 0x28a], 8
mov byte [esp + 0x28b], 0x3b
mov byte [esp + 0x28c], 0x9f
mov byte [esp + 0x28d], 0xa
mov byte [esp + 0x28e], 5
mov byte [esp + 0x28f], 0xd
mov byte [esp + 0x290], 0x50
mov byte [esp + 0x291], 0x64
mov byte [esp + 0x292], 0xaf
mov byte [esp + 0x293], bl
mov byte [esp + 0x294], 3
mov byte [esp + 0x295], 0x3b
mov byte [esp + 0x296], 0x93
mov byte [esp + 0x297], 8
mov byte [esp + 0x29e], 3
mov byte [esp + 0x29f], 0x3b
mov byte [esp + 0x2a1], 0xff
mov byte [esp + 0x2a8], 1
mov byte [esp + 0x2a9], 0x14
mov byte [esp + 0x2b2], 7
mov byte [esp + 0x2b3], 0x3b
mov byte [esp + 0x2b4], dl
mov byte [esp + 0x2b5], bl
mov byte [esp + 0x2b6], bl
mov byte [esp + 0x2b7], 0x31
mov byte [esp + 0x2b8], 0x32
mov byte [esp + 0x2b9], 0x33
mov word [esp + 0x2ba], bx
mov byte [esp + 0x2bc], 3
mov byte [esp + 0x2bd], 0x3b
mov word [esp + 0x2c4], bp
mov byte [esp + 0xa4], 3
mov byte [esp + 0xa5], 0x3b
mov byte [esp + 0xa8], 1
mov byte [esp + 0xa9], 0x3f
mov word [esp + 0xaa], bx
mov byte [esp + 0xac], 2
mov byte [esp + 0xad], 0x3c
mov byte [esp + 0xae], 0x84
mov byte [esp + 0xaf], bl
mov byte [esp + 0xb0], 2
mov byte [esp + 0xb1], 0x3c
mov byte [esp + 0xb2], 0x85
mov byte [esp + 0xb3], bl
mov byte [esp + 0xb4], 2
mov byte [esp + 0xb5], 0x3c
mov byte [esp + 0xb6], 0x81
mov byte [esp + 0xb7], bl
mov byte [esp + 0xb8], 2
mov byte [esp + 0xb9], 0x3c
mov byte [esp + 0xba], dl
mov byte [esp + 0xbb], bl
call dword [eax + 0x18]
test ax, ax
jne 0x5ab1e9
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x5ab169
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ab160
cmp al, 0xff
je 0x5ab160
dec al
mov byte [ecx], al
jmp 0x5ab169
push ecx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0x60]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
mov eax, dword [esp + 0x4c]
cmp eax, ebx
je 0x5ab1d0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ab1c7
cmp al, 0xff
je 0x5ab1c7
dec al
mov byte [ecx], al
jmp 0x5ab1d0
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x38], 0x6dd1f4
jmp 0x5accef
push 5
lea ecx, [esp + 0x5b4]
call fcn.0061daa0
push ecx
mov byte [esp + 0x38], al
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x713764
call fcn.0061d820
lea ecx, [esp + 0x2d0]
push ecx
call fcn.0061ca80
add esp, 8
mov edx, dword [0x6dd1fc]
lea ecx, [esp + 0x24]
push edx
push ebx
push eax
mov byte [esp + 0x5b4], 8
call fcn.004136c0
mov eax, dword [esp + 0x2d0]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5ab268
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ab25f
cmp al, 0xff
je 0x5ab25f
dec al
mov byte [ecx], al
jmp 0x5ab268
push ecx
call fcn.006a64d0
add esp, 4
mov eax, dword [esp + 0x34]
and eax, 0xff
add eax, 0xffffff80
cmp eax, 8
ja case.default.0x5ab27d
jmp dword [eax*4 + 0x5ae330]
mov al, byte [esp + 0x34]
mov byte [esp + 0x23], bl
add al, 0x80
mov byte [esp + 0x1c], al
mov esi, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
cmp di, bx
je 0x5ab6d5
cmp byte [0x72bd0c], bl
je 0x5ab4aa
push 0x1f4
call fcn.0041afd0
add esp, 4
cmp di, 1
jne 0x5ab36c
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x713784
call fcn.0061d820
lea eax, [esp + 0x300]
push eax
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x5a8], 9
push ecx
push ebx
push eax
lea ecx, [esp + 0x30]
call fcn.004136c0
mov eax, dword [esp + 0x300]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5ab34e
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ab345
cmp al, 0xff
je 0x5ab345
dec al
mov byte [ecx], al
jmp 0x5ab34e
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x300], ebx
mov dword [esp + 0x304], ebx
mov dword [esp + 0x308], ebx
mov byte [esp + 0x23], bl
jmp 0x5ab6d3
cmp di, 2
jne 0x5ab401
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71377c
call fcn.0061d820
lea edx, [esp + 0x350]
push edx
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x5a8], 0xa
push ecx
push ebx
push eax
lea ecx, [esp + 0x30]
call fcn.004136c0
mov eax, dword [esp + 0x350]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5ab3e3
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ab3da
cmp al, 0xff
je 0x5ab3da
dec al
mov byte [ecx], al
jmp 0x5ab3e3
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x350], ebx
mov dword [esp + 0x354], ebx
mov dword [esp + 0x358], ebx
mov byte [esp + 0x23], bl
jmp 0x5ab6d3
cmp di, 3
jne 0x5ab6d3
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x713764
call fcn.0061d820
lea edx, [esp + 0x390]
push edx
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x5a8], 0xb
push ecx
push ebx
push eax
lea ecx, [esp + 0x30]
call fcn.004136c0
mov eax, dword [esp + 0x390]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5ab490
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ab487
cmp al, 0xff
je 0x5ab487
dec al
mov byte [ecx], al
mov dword [esp + 0x390], ebx
mov dword [esp + 0x394], ebx
mov dword [esp + 0x398], ebx
jmp 0x5ab6ce
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x390], ebx
mov dword [esp + 0x394], ebx
mov dword [esp + 0x398], ebx
jmp 0x5ab6ce
mov eax, esi
sub esp, 0x24
and eax, 0xff
mov edx, esp
movsx ecx, di
lea eax, [eax + eax*2]
mov dword [esp + 0x34], esp
add eax, ecx
push ebx
push 1
lea eax, [eax + eax*4]
lea ecx, [esp + eax*2 + 0xea]
push ecx
push edx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x84]
mov edx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061afb0
lea ecx, [esp + 0x18]
call fcn.0061dab0
lea ecx, [esp + 0x14]
call fcn.0061dc40
test ax, ax
jle 0x5ab7d2
cmp di, 1
jne 0x5ab5ad
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x713784
call fcn.0061d820
lea eax, [esp + 0x340]
push eax
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x5a8], 0xc
push ecx
push ebx
push eax
lea ecx, [esp + 0x30]
call fcn.004136c0
mov eax, dword [esp + 0x340]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5ab58f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ab586
cmp al, 0xff
je 0x5ab586
dec al
mov byte [ecx], al
jmp 0x5ab58f
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x340], ebx
mov dword [esp + 0x344], ebx
mov dword [esp + 0x348], ebx
mov byte [esp + 0x23], bl
jmp 0x5ab6d3
cmp di, 2
jne 0x5ab642
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x71377c
call fcn.0061d820
lea edx, [esp + 0x380]
push edx
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x5a8], 0xd
push ecx
push ebx
push eax
lea ecx, [esp + 0x30]
call fcn.004136c0
mov eax, dword [esp + 0x380]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5ab624
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ab61b
cmp al, 0xff
je 0x5ab61b
dec al
mov byte [ecx], al
jmp 0x5ab624
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x380], ebx
mov dword [esp + 0x384], ebx
mov dword [esp + 0x388], ebx
mov byte [esp + 0x23], bl
jmp 0x5ab6d3
cmp di, 3
jne 0x5ab6d3
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x713764
call fcn.0061d820
lea edx, [esp + 0x320]
push edx
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x5a8], 0xe
push ecx
push ebx
push eax
lea ecx, [esp + 0x30]
call fcn.004136c0
mov eax, dword [esp + 0x320]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5ab6b9
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ab6b0
cmp al, 0xff
je 0x5ab6b0
dec al
mov byte [ecx], al
jmp 0x5ab6b9
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x320], ebx
mov dword [esp + 0x324], ebx
mov dword [esp + 0x328], ebx
mov byte [esp + 0x23], 1
xor edi, edi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x713784
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x71377c
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x713774
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
mov dl, byte [esp + 0x24]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x20], esp
mov byte [ecx], dl
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], ebx
mov eax, dword [0x6dd1fc]
lea edx, [esp + 0x34]
push eax
push ebx
push edx
call fcn.004136c0
push ecx
mov byte [esp + 0x5bc], 0x10
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x71379c
call fcn.0061d820
mov ecx, dword [0x72baec]
mov byte [esp + 0x5bc], 7
call fcn.0062e450
mov ecx, dword [0x72baec]
call fcn.0062e830
movsx eax, ax
sub eax, ebx
je 0x5ab7c8
dec eax
je 0x5ab7be
dec eax
jne 0x5ab296
mov al, byte [esp + 0x23]
mov edi, 3
cmp al, bl
jne 0x5ab851
jmp 0x5ab296
mov edi, 2
jmp 0x5ab296
mov edi, 1
jmp 0x5ab296
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0xf
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x5ac424
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ac41b
cmp al, 0xff
je 0x5ac41b
dec al
mov byte [ecx], al
jmp 0x5ac424
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x5ab887
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ab87e
cmp al, 0xff
je 0x5ab87e
dec al
mov byte [ecx], al
jmp 0x5ab887
push ecx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0x60]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
mov eax, dword [esp + 0x4c]
cmp eax, ebx
je 0x5ab8ee
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ab8e5
cmp al, 0xff
je 0x5ab8e5
dec al
mov byte [ecx], al
jmp 0x5ab8ee
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x38], 0x6dd1f4
jmp 0x5adbdd
cmp byte [0x72bd0c], bl
je 0x5ab9bd
push 0x4a
push 5
lea ecx, [esp + 0x20]
call fcn.0061dbc0
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x370]
push ecx
call fcn.0061ca80
add esp, 8
mov edx, dword [0x6dd1fc]
lea ecx, [esp + 0x24]
push edx
push ebx
push eax
mov byte [esp + 0x5b4], 0x11
call fcn.004136c0
mov eax, dword [esp + 0x370]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5ab9a3
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ab99a
cmp al, 0xff
je 0x5ab99a
dec al
mov byte [ecx], al
mov dword [esp + 0x370], ebx
mov dword [esp + 0x374], ebx
mov dword [esp + 0x378], ebx
jmp 0x5abb96
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x370], ebx
mov dword [esp + 0x374], ebx
mov dword [esp + 0x378], ebx
jmp 0x5abb96
sub esp, 0x24
lea ecx, [esp + 0xc8]
mov eax, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
sub esp, 0x24
lea eax, [esp + 0xcc]
mov edx, esp
mov dword [esp + 0x34], esp
push ebx
push ebx
push eax
push edx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
push 0x32
call fcn.0041afd0
sub esp, 0x20
lea edx, [esp + 0xd0]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x84]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061afb0
lea ecx, [esp + 0x18]
call fcn.0061dab0
lea ecx, [esp + 0x14]
call fcn.0061dc40
cmp ax, 1
jge 0x5abaf5
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x12
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x5ac424
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ac41b
cmp al, 0xff
je 0x5ac41b
dec al
mov byte [ecx], al
jmp 0x5ac424
push 5
lea ecx, [esp + 0x18]
call fcn.0061daa0
add al, 0x49
mov byte [esp + 0x34], al
mov ecx, dword [esp + 0x34]
push ecx
push 5
lea ecx, [esp + 0x20]
call fcn.0061dbc0
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x310]
push eax
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x5a8], 0x13
push ecx
push ebx
push eax
lea ecx, [esp + 0x30]
call fcn.004136c0
mov eax, dword [esp + 0x310]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5abb81
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5abb78
cmp al, 0xff
je 0x5abb78
dec al
mov byte [ecx], al
jmp 0x5abb81
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x310], ebx
mov dword [esp + 0x314], ebx
mov dword [esp + 0x318], ebx
or esi, 0xffffffff
push ecx
lea edx, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
cmp di, bx
je 0x5abe73
cmp byte [0x72bd0c], bl
je 0x5abcd9
push 0x1f4
call fcn.0041afd0
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x14
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
push ecx
lea eax, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x360]
push eax
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x5a8], 0x15
push ecx
push ebx
push eax
lea ecx, [esp + 0x30]
call fcn.004136c0
mov eax, dword [esp + 0x360]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5abcbf
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5abcb6
cmp al, 0xff
je 0x5abcb6
dec al
mov byte [ecx], al
mov dword [esp + 0x360], ebx
mov dword [esp + 0x364], ebx
mov dword [esp + 0x368], ebx
jmp 0x5abe71
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x360], ebx
mov dword [esp + 0x364], ebx
mov dword [esp + 0x368], ebx
jmp 0x5abe71
sub esp, 0x24
lea eax, [esp + 0x164]
mov edx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push eax
push edx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push ecx
lea ecx, [esp + 0x88]
call fcn.0061afb0
lea ecx, [esp + 0x18]
call fcn.0061dab0
lea ecx, [esp + 0x14]
call fcn.0061dc40
test ax, ax
push ebx
push 1
jle 0x5abfc4
lea edx, [esp + 0x166]
lea eax, [esp + 0x584]
push edx
push eax
lea ecx, [esp + 0x70]
call fcn.00556960
lea ecx, [esp + 0x57c]
call fcn.0061ab90
push ebx
lea ecx, [esp + 0x16c]
push 1
lea edx, [esp + 0x440]
push ecx
push edx
lea ecx, [esp + 0x70]
call fcn.00556960
lea ecx, [esp + 0x438]
call fcn.0061ab90
cmp di, 1
jne 0x5abe71
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x16
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
push ecx
lea eax, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x2e0]
push eax
call fcn.0061ca80
add esp, 8
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x5a8], 0x17
push ecx
push ebx
push eax
lea ecx, [esp + 0x30]
call fcn.004136c0
mov eax, dword [esp + 0x2e0]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5abe5c
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5abe53
cmp al, 0xff
je 0x5abe53
dec al
mov byte [ecx], al
jmp 0x5abe5c
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x2e0], ebx
mov dword [esp + 0x2e4], ebx
mov dword [esp + 0x2e8], ebx
xor edi, edi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x71c5b4
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x713774
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
mov dl, byte [esp + 0x24]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x20], esp
mov byte [ecx], dl
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], ebx
mov eax, dword [0x6dd1fc]
lea edx, [esp + 0x34]
push eax
push ebx
push edx
call fcn.004136c0
push ecx
mov byte [esp + 0x5bc], 0x19
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x71e08c
call fcn.0061d820
mov ecx, dword [0x72baec]
mov byte [esp + 0x5bc], 7
call fcn.0062e450
mov ecx, dword [0x72baec]
call fcn.0062e830
movsx eax, ax
sub eax, ebx
je 0x5abf28
dec eax
je 0x5ac0d0
jmp 0x5abb99
push ecx
lea eax, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72bae0]
call fcn.0062a5d0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x720524
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x72051c
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
lea ecx, [esp + 0x38]
push ecx
mov ecx, dword [0x72bae0]
call fcn.0062a950
cmp ax, si
je 0x5abb99
mov dl, byte [esp + 0x3c]
lea ecx, [esp + 0x18]
add dl, 0x49
push edx
push 5
call fcn.0061dbc0
mov al, byte [esp + 0x3c]
mov edi, 1
mov byte [esp + 0x143], al
jmp 0x5abb99
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x5ac03a
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ac031
cmp al, 0xff
je 0x5ac031
dec al
mov byte [ecx], al
jmp 0x5ac03a
push ecx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0x60]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
mov eax, dword [esp + 0x4c]
cmp eax, ebx
je 0x5ac0a1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ac098
cmp al, 0xff
je 0x5ac098
dec al
mov byte [ecx], al
jmp 0x5ac0a1
push ecx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0x5b0]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x38], 0x6dd1f4
mov dword [esp + 0x5a8], esi
call fcn.0061d8c0
xor ax, ax
jmp 0x5adbf8
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x5ac106
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ac0fd
cmp al, 0xff
je 0x5ac0fd
dec al
mov byte [ecx], al
jmp 0x5ac106
push ecx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0x60]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
mov eax, dword [esp + 0x4c]
cmp eax, ebx
je 0x5ac16d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ac164
cmp al, 0xff
je 0x5ac164
dec al
mov byte [ecx], al
jmp 0x5ac16d
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x38], 0x6dd1f4
mov dword [esp + 0x5a8], esi
jmp 0x5adbe8
cmp byte [0x72bd0c], bl
je 0x5ac2ee
push 0x4c
push 5
lea ecx, [esp + 0x20]
call fcn.0061dbc0
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x330]
push eax
call fcn.0061ca80
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6dd1fc]
mov ebp, eax
mov byte [esp + 0x5a8], 0x1a
cmp ecx, ebp
jae 0x5ac1e2
mov ebp, ecx
lea edx, [esp + 0x24]
cmp edx, esi
jne 0x5ac205
push ecx
push ebp
lea ecx, [esp + 0x2c]
call fcn.004140f0
push ebx
push ebx
lea ecx, [esp + 0x2c]
call fcn.004140f0
jmp 0x5ac28c
cmp ebp, ebx
jbe 0x5ac252
cmp ebp, eax
jne 0x5ac252
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x5ac219
mov eax, 0x6dd1f8
cmp byte [eax - 1], 0xfe
jae 0x5ac252
push 1
lea ecx, [esp + 0x28]
call fcn.004138c0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x5ac236
mov eax, 0x6dd1f8
mov dword [esp + 0x28], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x2c], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x30], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x5ac28c
push 1
push ebp
lea ecx, [esp + 0x2c]
call fcn.00414230
test al, al
je 0x5ac28c
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x5ac26e
mov esi, 0x6dd1f8
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x28]
call fcn.00414210
mov eax, dword [esp + 0x330]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5ac2d4
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ac2cb
cmp al, 0xff
je 0x5ac2cb
dec al
mov byte [ecx], al
mov dword [esp + 0x330], ebx
mov dword [esp + 0x334], ebx
mov dword [esp + 0x338], ebx
jmp 0x5ac5fe
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x330], ebx
mov dword [esp + 0x334], ebx
mov dword [esp + 0x338], ebx
jmp 0x5ac5fe
sub esp, 0x24
lea edx, [esp + 0xc8]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
sub esp, 0x24
lea ecx, [esp + 0xcc]
mov eax, esp
mov dword [esp + 0x34], esp
push ebx
push ebx
push ecx
push eax
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
push 0x32
call fcn.0041afd0
sub esp, 0x20
lea eax, [esp + 0xd4]
mov edx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push eax
push edx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push ecx
lea ecx, [esp + 0x88]
call fcn.0061afb0
lea ecx, [esp + 0x18]
call fcn.0061dab0
lea ecx, [esp + 0x14]
call fcn.0061dc40
cmp ax, 1
jge 0x5ac491
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x1b
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x5ac424
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ac41b
cmp al, 0xff
je 0x5ac41b
dec al
mov byte [ecx], al
jmp 0x5ac424
push ecx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0x60]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
mov eax, dword [esp + 0x4c]
cmp eax, ebx
je 0x5ab1d0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ab1c7
cmp al, 0xff
je 0x5ab1c7
dec al
mov byte [ecx], al
jmp 0x5ab1d0
xor esi, esi
lea edi, [esp + 0x14e]
lea edx, [esi + 6]
lea ecx, [esp + 0x14]
push edx
call fcn.0061daa0
mov byte [edi], al
inc esi
inc edi
cmp si, 4
jl 0x5ac49a
push 5
lea ecx, [esp + 0x18]
call fcn.0061daa0
mov cl, 0x5a
sub cl, al
mov byte [esp + 0x34], cl
mov edx, dword [esp + 0x34]
push edx
push 5
lea ecx, [esp + 0x20]
call fcn.0061dbc0
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x2f0]
push ecx
call fcn.0061ca80
add esp, 8
mov esi, eax
mov ecx, dword [esi + 8]
mov eax, dword [0x6dd1fc]
mov ebp, ecx
mov byte [esp + 0x5a8], 0x1c
cmp eax, ebp
jae 0x5ac50f
mov ebp, eax
lea edx, [esp + 0x24]
cmp edx, esi
jne 0x5ac532
push eax
push ebp
lea ecx, [esp + 0x2c]
call fcn.004140f0
push ebx
push ebx
lea ecx, [esp + 0x2c]
call fcn.004140f0
jmp 0x5ac5b9
cmp ebp, ebx
jbe 0x5ac57f
cmp ebp, ecx
jne 0x5ac57f
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x5ac546
mov eax, 0x6dd1f8
cmp byte [eax - 1], 0xfe
jae 0x5ac57f
push 1
lea ecx, [esp + 0x28]
call fcn.004138c0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x5ac563
mov eax, 0x6dd1f8
mov dword [esp + 0x28], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x2c], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x30], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x5ac5b9
push 1
push ebp
lea ecx, [esp + 0x2c]
call fcn.00414230
test al, al
je 0x5ac5b9
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x5ac59b
mov esi, 0x6dd1f8
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x28]
call fcn.00414210
mov eax, dword [esp + 0x2f0]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5ac5e9
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ac5e0
cmp al, 0xff
je 0x5ac5e0
dec al
mov byte [ecx], al
jmp 0x5ac5e9
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x2f0], ebx
mov dword [esp + 0x2f4], ebx
mov dword [esp + 0x2f8], ebx
push ecx
lea edx, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
cmp word [esp + 0x1c], bx
je 0x5aca03
cmp byte [0x72bd0c], bl
je 0x5ac7eb
push 0x1f4
call fcn.0041afd0
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x1d
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
push ecx
lea eax, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x2d0]
push eax
call fcn.0061ca80
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6dd1fc]
mov ebp, eax
mov byte [esp + 0x5a8], 0x1e
cmp ecx, ebp
jae 0x5ac6df
mov ebp, ecx
lea edx, [esp + 0x24]
cmp edx, esi
jne 0x5ac702
push ecx
push ebp
lea ecx, [esp + 0x2c]
call fcn.004140f0
push ebx
push ebx
lea ecx, [esp + 0x2c]
call fcn.004140f0
jmp 0x5ac789
cmp ebp, ebx
jbe 0x5ac74f
cmp ebp, eax
jne 0x5ac74f
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x5ac716
mov eax, 0x6dd1f8
cmp byte [eax - 1], 0xfe
jae 0x5ac74f
push 1
lea ecx, [esp + 0x28]
call fcn.004138c0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x5ac733
mov eax, 0x6dd1f8
mov dword [esp + 0x28], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x2c], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x30], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x5ac789
push 1
push ebp
lea ecx, [esp + 0x2c]
call fcn.00414230
test al, al
je 0x5ac789
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x5ac76b
mov esi, 0x6dd1f8
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x28]
call fcn.00414210
mov eax, dword [esp + 0x2d0]
mov byte [esp + 0x5a8], 7
cmp eax, ebx
je 0x5ac7d1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5ac7c8
cmp al, 0xff
je 0x5ac7c8
dec al
mov byte [ecx], al
mov dword [esp + 0x2d0], ebx
mov dword [esp + 0x2d4], ebx
mov dword [esp + 0x2d8], ebx
jmp 0x5ac9ff
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x2d0], ebx
mov dword [esp + 0x2d4], ebx
mov dword [esp + 0x2d8], ebx
jmp 0x5ac9ff
sub esp, 0x24
lea edx, [esp + 0x16e]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x84]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061afb0
lea ecx, [esp + 0x18]
call fcn.0061dab0
lea ecx, [esp + 0x14]
call fcn.0061dc40
test ax, ax
push ebx
push 1
jle 0x5acc36
lea ecx, [esp + 0x166]
lea edx, [esp + 0x560]
push ecx
push edx
lea ecx, [esp + 0x70]
call fcn.00556960
lea ecx, [esp + 0x558]
call fcn.0061ab90
push ebx
lea eax, [esp + 0x16c]
push 1
lea ecx, [esp + 0x488]
push eax
push ecx
lea ecx, [esp + 0x70]
call fcn.00556960
lea ecx, [esp + 0x480]
call fcn.0061ab90
cmp word [esp + 0x1c], 1
jne 0x5ac9ff
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x1f
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
push ecx
lea edx, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x3c4]
push ecx
call fcn.0061ca80
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6dd1fc]
mov ebp, eax
mov byte [esp + 0x5a8], 0x20
cmp ecx, ebp
jae 0x5ac941
mov ebp, ecx
lea edx, [esp + 0x24]
cmp edx, esi
jne 0x5ac964
push ecx
push ebp
lea ecx, [esp + 0x2c]
call fcn.004140f0
push ebx
push ebx
lea ecx, [esp + 0x2c]
call fcn.004140f0
jmp 0x5ac9eb
cmp ebp, ebx
jbe 0x5ac9b1
cmp ebp, eax
jne 0x5ac9b1
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x5ac978
mov eax, 0x6dd1f8
cmp byte [eax - 1], 0xfe
jae 0x5ac9b1
push 1
lea ecx, [esp + 0x28]
call fcn.004138c0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x5ac995
mov eax, 0x6dd1f8
mov dword [esp + 0x28], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x2c], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x30], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x5ac9eb
push 1
push ebp
lea ecx, [esp + 0x2c]
call fcn.00414230
test al, al
je 0x5ac9eb
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x5ac9cd
mov esi, 0x6dd1f8
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x28]
call fcn.00414210
lea ecx, [esp + 0x3c0]
mov byte [esp + 0x5a8], 7
call fcn.00419a10
mov dword [esp + 0x1c], ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x71c5b4
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x713774
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
sub esp, 0x10
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00413060
push ecx
mov byte [esp + 0x5bc], 0x22
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x71e08c
call fcn.0061d820
mov ecx, dword [0x72baec]
mov byte [esp + 0x5bc], 7
call fcn.0062e450
mov ecx, dword [0x72baec]
call fcn.0062e830
movsx eax, ax
sub eax, ebx
je 0x5acaa2
dec eax
je case.default.0x5ab27d
jmp 0x5ac5fe
push ecx
lea eax, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72bae0]
call fcn.0062a5d0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x720514
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x72050c
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x720504
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x7204fc
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x7204f4
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x7204ec
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x7204e4
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x7204dc
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x7204d4
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x7204cc
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
lea ecx, [esp + 0x38]
push ecx
mov ecx, dword [0x72bae0]
call fcn.0062a950
cmp ax, 0xffff
je 0x5ac5fe
mov dl, byte [esp + 0x3c]
lea ecx, [esp + 0x18]
add dl, 0x4b
push edx
push 5
call fcn.0061dbc0
mov cl, byte [esp + 0x3c]
mov al, 0xf
sub al, cl
mov dword [esp + 0x1c], 1
mov byte [esp + 0x14d], al
jmp 0x5ac5fe
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x21
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
lea ecx, [esp + 0x24]
mov byte [esp + 0x5a8], 5
call fcn.00419a10
lea ecx, [esp + 0x60]
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
lea ecx, [esp + 0x44]
mov byte [esp + 0x5a8], 1
call fcn.0066b860
lea ecx, [esp + 0x38]
mov byte [esp + 0x5a8], bl
call fcn.004071e0
lea ecx, [esp + 0x5b0]
mov dword [esp + 0x5a8], 0xffffffff
call fcn.0061d8c0
xor ax, ax
jmp 0x5adbf8
cmp byte [0x72bd0c], bl
je 0x5acd6a
push 0x55
push 5
lea ecx, [esp + 0x20]
call fcn.0061dbc0
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x3a4]
push eax
call fcn.0061ca80
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x5ac], 0x23
call fcn.00452520
mov byte [esp + 0x5a8], 7
lea ecx, [esp + 0x3a0]
jmp 0x5acf94
sub esp, 0x24
lea edx, [esp + 0xc8]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
sub esp, 0x24
lea ecx, [esp + 0xcc]
mov eax, esp
mov dword [esp + 0x34], esp
push ebx
push ebx
push ecx
push eax
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
push 0x32
call fcn.0041afd0
sub esp, 0x20
lea eax, [esp + 0xd8]
mov edx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push eax
push edx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push ecx
lea ecx, [esp + 0x88]
call fcn.0061afb0
lea ecx, [esp + 0x18]
call fcn.0061dab0
lea ecx, [esp + 0x14]
call fcn.0061dc40
cmp ax, 1
jge 0x5acf02
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
lea ecx, [esp + 0x24]
mov byte [esp + 0x5a8], 5
call fcn.00419a10
lea ecx, [esp + 0x60]
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
lea ecx, [esp + 0x44]
mov byte [esp + 0x5a8], 1
call fcn.0066b860
lea ecx, [esp + 0x38]
mov byte [esp + 0x5a8], bl
call fcn.004071e0
lea ecx, [esp + 0x5b0]
mov dword [esp + 0x5a8], 0xffffffff
call fcn.0061d8c0
xor ax, ax
jmp 0x5adbf8
push 5
lea ecx, [esp + 0x18]
call fcn.0061daa0
and eax, 0xff
add eax, 0xfffffff8
cmp eax, 5
ja case.0x5acf1a.8
jmp dword [eax*4 + 0x5ae354]
mov byte [esp + 0x34], 0x56
jmp 0x5acf42
mov byte [esp + 0x34], 0x57
jmp 0x5acf42
mov byte [esp + 0x34], 0x58
jmp 0x5acf42
mov byte [esp + 0x34], 0x59
jmp 0x5acf42
mov byte [esp + 0x34], 0x55
mov edx, dword [esp + 0x34]
lea ecx, [esp + 0x18]
push edx
push 5
call fcn.0061dbc0
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x3e4]
push ecx
call fcn.0061ca80
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x5ac], 0x25
call fcn.00452520
mov byte [esp + 0x5a8], 7
lea ecx, [esp + 0x3e0]
call fcn.00419a10
or esi, 0xffffffff
push ecx
lea edx, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
cmp di, bx
je 0x5ad1e7
cmp byte [0x72bd0c], bl
je 0x5ad086
push 0x1f4
call fcn.0041afd0
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x26
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
push ecx
lea eax, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
lea eax, [esp + 0x3b4]
push eax
call fcn.0061ca80
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x5ac], 0x27
call fcn.00452520
mov byte [esp + 0x5a8], 7
lea ecx, [esp + 0x3b0]
jmp 0x5ad1e0
sub esp, 0x24
lea edx, [esp + 0x178]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x84]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061afb0
lea ecx, [esp + 0x18]
call fcn.0061dab0
lea ecx, [esp + 0x14]
call fcn.0061dc40
test ax, ax
push ebx
push 1
jle 0x5ad3d2
lea ecx, [esp + 0x166]
lea edx, [esp + 0x518]
push ecx
push edx
lea ecx, [esp + 0x70]
call fcn.00556960
lea ecx, [esp + 0x510]
call fcn.0061ab90
push ebx
lea eax, [esp + 0x16c]
push 1
lea ecx, [esp + 0x4d0]
push eax
push ecx
lea ecx, [esp + 0x70]
call fcn.00556960
lea ecx, [esp + 0x4c8]
call fcn.0061ab90
cmp di, 1
jne 0x5ad1e5
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x28
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
push ecx
lea edx, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
lea ecx, [esp + 0x3d4]
push ecx
call fcn.0061ca80
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x5ac], 0x29
call fcn.00452520
mov byte [esp + 0x5a8], 7
lea ecx, [esp + 0x3d0]
call fcn.00419a10
xor edi, edi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x71c5b4
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x713774
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
sub esp, 0x10
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00413060
push ecx
mov byte [esp + 0x5bc], 0x2b
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x71e08c
call fcn.0061d820
mov ecx, dword [0x72baec]
mov byte [esp + 0x5bc], 7
call fcn.0062e450
mov ecx, dword [0x72baec]
call fcn.0062e830
movsx eax, ax
sub eax, ebx
je 0x5ad286
dec eax
je 0x5ad4a6
jmp 0x5acf9c
push ecx
lea eax, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72bae0]
call fcn.0062a5d0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x7204c4
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x7204bc
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x7204b4
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x7204ac
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x7204a4
call fcn.0061d820
mov ecx, dword [0x72bae0]
call fcn.0062a810
lea ecx, [esp + 0x38]
push ecx
mov ecx, dword [0x72bae0]
call fcn.0062a950
cmp ax, si
je 0x5acf9c
mov dl, byte [esp + 0x3c]
lea ecx, [esp + 0x18]
add dl, 0x55
push edx
push 5
call fcn.0061dbc0
movsx eax, word [esp + 0x3c]
cmp eax, 4
ja case.default.0x5ad371
jmp dword [eax*4 + 0x5ae36c]
mov byte [esp + 0x157], 8
mov edi, 1
jmp 0x5acf9c
mov byte [esp + 0x157], 0xb
mov edi, 1
jmp 0x5acf9c
mov byte [esp + 0x157], 0xd
mov edi, 1
jmp 0x5acf9c
mov byte [esp + 0x157], 0xa
mov edi, 1
jmp 0x5acf9c
mov byte [esp + 0x157], 0xc
mov edi, 1
jmp 0x5acf9c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x2a
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
lea ecx, [esp + 0x24]
mov byte [esp + 0x5a8], 5
call fcn.00419a10
lea ecx, [esp + 0x60]
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
lea ecx, [esp + 0x44]
mov byte [esp + 0x5a8], 1
call fcn.0066b860
lea ecx, [esp + 0x38]
mov byte [esp + 0x5a8], bl
call fcn.004071e0
lea ecx, [esp + 0x5b0]
mov dword [esp + 0x5a8], esi
call fcn.0061d8c0
xor ax, ax
jmp 0x5adbf8
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
lea ecx, [esp + 0x24]
mov byte [esp + 0x5a8], 5
call fcn.00419a10
lea ecx, [esp + 0x60]
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
lea ecx, [esp + 0x44]
mov byte [esp + 0x5a8], 1
call fcn.0066b860
lea ecx, [esp + 0x38]
mov byte [esp + 0x5a8], bl
call fcn.004071e0
mov dword [esp + 0x5a8], esi
jmp 0x5adbe8
push ebx
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x2c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x72049c
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
cmp al, 4
push ebx
jne 0x5ad735
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x2d
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x71c630
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
cmp byte [0x72bd0c], bl
jne 0x5adb14
xor esi, esi
cmp si, 2
je 0x5ad5d8
cmp si, 4
je 0x5ad5d8
cmp si, 6
jne 0x5ad606
push ebx
lea eax, [esp + 0x46]
push ebx
lea ecx, [esp + 0x41c]
push eax
push ecx
lea ecx, [esp + 0x70]
call fcn.00556960
lea ecx, [esp + 0x414]
call fcn.0061ab90
push 0x1e
call fcn.0041afd0
add esp, 4
movsx eax, si
sub esp, 0x24
lea eax, [eax + eax*4]
mov edx, esp
mov dword [esp + 0x34], esp
push ebx
lea ecx, [esp + eax*2 + 0x212]
push 1
push ecx
push edx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
lea ecx, [esp + 0x80]
call fcn.0061b070
test ax, ax
je 0x5ad65a
inc esi
cmp si, 8
jl 0x5ad5c6
jmp 0x5adb21
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x2e
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
lea ecx, [esp + 0x24]
mov byte [esp + 0x5a8], 5
call fcn.00419a10
lea ecx, [esp + 0x60]
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
lea ecx, [esp + 0x44]
mov byte [esp + 0x5a8], 1
call fcn.0066b860
lea ecx, [esp + 0x38]
mov byte [esp + 0x5a8], bl
call fcn.004071e0
lea ecx, [esp + 0x5b0]
mov dword [esp + 0x5a8], 0xffffffff
call fcn.0061d8c0
xor ax, ax
jmp 0x5adbf8
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x2f
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x720494
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
push ebx
push ebx
push ecx
cmp al, 4
mov ecx, esp
jne 0x5ad949
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x30
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x71c630
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
cmp byte [0x72bd0c], bl
jne 0x5adb14
xor esi, esi
cmp si, bx
je 0x5ad7ec
cmp si, 3
je 0x5ad7ec
cmp si, 5
je 0x5ad7ec
cmp si, 7
je 0x5ad7ec
cmp si, 0xa
jne 0x5ad81a
push ebx
lea edx, [esp + 0x46]
push ebx
lea eax, [esp + 0x464]
push edx
push eax
lea ecx, [esp + 0x70]
call fcn.00556960
lea ecx, [esp + 0x45c]
call fcn.0061ab90
push 0x1e
call fcn.0041afd0
add esp, 4
movsx eax, si
sub esp, 0x24
lea edx, [eax + eax*4]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
lea eax, [esp + edx*2 + 0x19a]
push 1
push eax
push ecx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
lea ecx, [esp + 0x80]
call fcn.0061b070
test ax, ax
je 0x5ad86e
inc esi
cmp si, 0xc
jl 0x5ad7cf
jmp 0x5adb21
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x31
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
lea ecx, [esp + 0x24]
mov byte [esp + 0x5a8], 5
call fcn.00419a10
lea ecx, [esp + 0x60]
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
lea ecx, [esp + 0x44]
mov byte [esp + 0x5a8], 1
call fcn.0066b860
lea ecx, [esp + 0x38]
mov byte [esp + 0x5a8], bl
call fcn.004071e0
lea ecx, [esp + 0x5b0]
mov dword [esp + 0x5a8], 0xffffffff
call fcn.0061d8c0
xor ax, ax
jmp 0x5adbf8
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x32
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x71c630
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
cmp byte [0x72bd0c], bl
jne 0x5adb14
xor esi, esi
cmp si, bx
je 0x5ad9b7
cmp si, 1
je 0x5ad9b7
cmp si, 3
je 0x5ad9b7
cmp si, 6
je 0x5ad9b7
cmp si, 8
je 0x5ad9b7
cmp si, 0xb
jne 0x5ad9e5
push ebx
lea ecx, [esp + 0x46]
push ebx
lea edx, [esp + 0x4ac]
push ecx
push edx
lea ecx, [esp + 0x70]
call fcn.00556960
lea ecx, [esp + 0x4a4]
call fcn.0061ab90
push 0x1e
call fcn.0041afd0
add esp, 4
movsx eax, si
sub esp, 0x24
lea edx, [eax + eax*4]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
lea eax, [esp + edx*2 + 0x262]
push 1
push eax
push ecx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
lea ecx, [esp + 0x80]
call fcn.0061b070
test ax, ax
je 0x5ada39
inc esi
cmp si, 0xe
jl 0x5ad994
jmp 0x5adb21
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x33
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
lea ecx, [esp + 0x24]
mov byte [esp + 0x5a8], 5
call fcn.00419a10
lea ecx, [esp + 0x60]
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
lea ecx, [esp + 0x44]
mov byte [esp + 0x5a8], 1
call fcn.0066b860
lea ecx, [esp + 0x38]
mov byte [esp + 0x5a8], bl
call fcn.004071e0
lea ecx, [esp + 0x5b0]
mov dword [esp + 0x5a8], 0xffffffff
call fcn.0061d8c0
xor ax, ax
jmp 0x5adbf8
push 0x1f4
call fcn.0041afd0
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x34
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
lea ecx, [esp + 0x24]
mov byte [esp + 0x5a8], 5
call fcn.00419a10
lea ecx, [esp + 0x60]
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
lea ecx, [esp + 0x44]
mov byte [esp + 0x5a8], 1
call fcn.0066b860
lea ecx, [esp + 0x38]
mov byte [esp + 0x5a8], bl
call fcn.004071e0
mov dword [esp + 0x5a8], 0xffffffff
lea ecx, [esp + 0x5b0]
call fcn.0061d8c0
mov ax, 1
mov ecx, dword [esp + 0x5a0]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x59c
ret 4
cmp byte [0x72bd0c], bl
je 0x5adc25
push 0x720490
jmp 0x5addab
sub esp, 0x24
lea edx, [esp + 0xdc]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x84]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061afb0
lea ecx, [esp + 0x18]
call fcn.0061dab0
lea ecx, [esp + 0x14]
call fcn.0061dc40
cmp ax, 1
jge 0x5add5d
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x35
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
lea ecx, [esp + 0x24]
mov byte [esp + 0x5a8], 5
call fcn.00419a10
lea ecx, [esp + 0x60]
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
lea ecx, [esp + 0x44]
mov byte [esp + 0x5a8], 1
call fcn.0066b860
lea ecx, [esp + 0x38]
mov byte [esp + 0x5a8], bl
call fcn.004071e0
lea ecx, [esp + 0x5b0]
mov dword [esp + 0x5a8], 0xffffffff
call fcn.0061d8c0
xor ax, ax
jmp 0x5adbf8
push 9
lea ecx, [esp + 0x18]
call fcn.0061daa0
and eax, 0xff
lea ecx, [esp + 0x14]
push eax
push 8
call fcn.0061daa0
and eax, 0xff
lea ecx, [esp + 0x18]
push eax
push 7
call fcn.0061daa0
and eax, 0xff
lea ecx, [esp + 0x60]
push eax
push str._c_c_c
push ecx
call fcn.006a6fa5
add esp, 0x14
lea edx, [esp + 0x58]
mov byte [esp + 0x5b], bl
push edx
lea ecx, [esp + 0x28]
call fcn.004cfae0
or ebp, 0xffffffff
push ecx
lea eax, [esp + 0x5b4]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
cmp di, bx
je 0x5adf67
cmp byte [0x72bd0c], bl
je 0x5ade43
push 0x1f4
call fcn.0041afd0
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x36
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
jmp 0x5adf3f
push ebx
lea ecx, [esp + 0x2c0]
push 1
lea edx, [esp + 0x4f4]
push ecx
push edx
lea ecx, [esp + 0x70]
call fcn.00556960
lea ecx, [esp + 0x4ec]
call fcn.0061ab90
sub esp, 0x24
lea ecx, [esp + 0x2d6]
mov eax, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0x94]
call fcn.00556960
lea ecx, [esp + 0xa4]
call fcn.0061ac40
push ecx
lea ecx, [esp + 0x84]
mov edx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0061afb0
lea ecx, [esp + 0x18]
call fcn.0061dab0
lea ecx, [esp + 0x14]
call fcn.0061dc40
test ax, ax
push ebx
push 1
jle 0x5ae1cf
lea eax, [esp + 0x2a6]
lea ecx, [esp + 0x53c]
push eax
push ecx
lea ecx, [esp + 0x70]
call fcn.00556960
lea ecx, [esp + 0x534]
call fcn.0061ab90
cmp di, 1
jne 0x5adf65
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x37
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x71c5bc
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
lea edx, [esp + 0x5b4]
push edx
call fcn.0061d790
mov ecx, dword [0x72baec]
call fcn.0062e250
lea eax, [esp + 0x58]
lea ecx, [esp + 0x24]
push eax
call fcn.004cfae0
xor edi, edi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x71c5b4
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x713774
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
sub esp, 0x10
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00413060
push ecx
mov byte [esp + 0x5bc], 0x39
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x720488
call fcn.0061d820
mov ecx, dword [0x72baec]
mov byte [esp + 0x5bc], 7
call fcn.0062e450
mov ecx, dword [0x72baec]
call fcn.0062e830
movsx eax, ax
sub eax, ebx
je 0x5ae006
dec eax
je 0x5ae2a9
jmp 0x5addb7
sub esp, 0x10
lea eax, [esp + 0xcf]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
push str.
call fcn.00413180
sub esp, 0x10
lea edx, [esp + 0xe7]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
push 0x72ba88
mov byte [esp + 0x5d0], 0x3a
call fcn.00413180
sub esp, 0x10
lea eax, [esp + 0xf5]
mov ecx, esp
mov dword [esp + 0x64], esp
push eax
push 0x7144cc
mov byte [esp + 0x5e0], 0x3b
call fcn.00413180
sub esp, 0x10
lea edx, [esp + 0x106]
mov ecx, esp
mov dword [esp + 0x3dc], esp
push edx
push 0x72ba88
mov byte [esp + 0x5f0], 0x3c
call fcn.00413180
sub esp, 0x10
lea eax, [esp + 0x600]
mov esi, esp
mov dword [esp + 0x318], esp
push ecx
mov byte [esp + 0x5fc], 0x3d
mov ecx, esp
mov dword [esp + 0x114], esp
push eax
call fcn.0061d790
push esi
call fcn.0061ca80
sub esp, 8
mov byte [esp + 0x608], 0x3e
mov esi, esp
mov dword [esp + 0x120], esp
push ecx
mov ecx, esp
mov dword [esp + 0x124], esp
push 6
push 0x720478
call fcn.0061d820
push esi
call fcn.0061ca80
add esp, 8
lea ecx, [esp + 0x460]
mov byte [esp + 0x608], 7
push ecx
mov ecx, 0x72bae0
call fcn.0061f180
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x5ac], 0x3f
call fcn.004fe930
lea ecx, [esp + 0x400]
mov byte [esp + 0x5a8], 7
call fcn.0066b860
lea ecx, [esp + 0x44]
call fcn.00627420
cmp ax, 2
je 0x5ae2a9
lea edx, [esp + 0x3f0]
lea ecx, [esp + 0x44]
push edx
call fcn.0061e3e0
mov ecx, eax
mov byte [esp + 0x5a8], 0x40
call fcn.004ff060
mov edi, eax
mov ecx, ebp
xor eax, eax
lea edx, [esp + 0x58]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov byte [esp + 0x5a8], 7
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x3f0]
call fcn.00419a10
xor ecx, ecx
mov esi, 3
mov al, byte [esp + ecx + 0x58]
cmp al, 0x60
jle 0x5ae1af
sub al, 0x20
mov byte [esp + ecx + 0x58], al
mov dl, byte [esp + ecx + 0x58]
mov byte [esp + ecx + 0x2b7], dl
inc ecx
dec esi
jne 0x5ae1a1
mov dword [esp + 0x1c], 1
mov edi, dword [esp + 0x1c]
jmp 0x5addb7
push ecx
mov ecx, esp
mov dword [esp + 0xcc], esp
push 6
push 0x7137f4
call fcn.0061d820
push ecx
mov byte [esp + 0x5b8], 0x38
mov ecx, esp
mov dword [esp + 0x2d8], esp
push 6
push 0x713840
call fcn.0061d820
mov ecx, 0x72bae0
mov byte [esp + 0x5b8], 7
call fcn.0061ef70
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
lea ecx, [esp + 0x24]
mov byte [esp + 0x5a8], 5
call fcn.00419a10
lea ecx, [esp + 0x60]
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
lea ecx, [esp + 0x44]
mov byte [esp + 0x5a8], 1
call fcn.0066b860
lea ecx, [esp + 0x38]
mov byte [esp + 0x5a8], bl
call fcn.004071e0
lea ecx, [esp + 0x5b0]
mov dword [esp + 0x5a8], ebp
call fcn.0061d8c0
xor ax, ax
jmp 0x5adbf8
lea ecx, [esp + 0x18]
mov byte [esp + 0x5a8], 6
call fcn.0061d8c0
lea ecx, [esp + 0x24]
mov byte [esp + 0x5a8], 5
call fcn.00419a10
lea ecx, [esp + 0x60]
mov byte [esp + 0x5a8], 4
call fcn.00555f30
lea ecx, [esp + 0x14]
mov byte [esp + 0x5a8], 3
call fcn.0061d8c0
lea ecx, [esp + 0x80]
mov byte [esp + 0x5a8], 2
call fcn.0061ab90
lea ecx, [esp + 0x44]
mov byte [esp + 0x5a8], 1
call fcn.0066b860
lea ecx, [esp + 0x38]
mov byte [esp + 0x5a8], bl
call fcn.004071e0
mov dword [esp + 0x5a8], ebp
jmp 0x5adbe8