Function at 0x52dd00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x6b8168
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x22c
push ebx
push ebp
push esi
push edi
mov esi, ecx
xor ebx, ebx
or edi, 0xffffffff
mov dword [esp + 0x244], ebx
mov dword [esp + 0x34], 0x6ce1f4
mov word [esp + 0x38], di
mov word [esp + 0x3a], bx
xor ebp, ebp
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
mov dword [esp + 0x2c], ebp
call fcn.0060d180
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060fe70
push 0x6c
push 0xf1
push 0x40
lea ecx, [esp + 0x84]
mov byte [esp + 0x250], 3
call fcn.00548440
push 0x6c
push 0xf1
push 0x58
lea ecx, [esp + 0xb8]
mov byte [esp + 0x250], 4
call fcn.00548440
mov al, byte [esp + 0x9b]
mov dword [esp + 0x20], ebx
mov byte [esp + 0x1c], al
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
push 6
push 0x70c07c
lea ecx, [esp + 0x38]
mov byte [esp + 0x24c], 6
call fcn.0060ff10
push 6
push 0x7037f4
lea ecx, [esp + 0x1c]
mov byte [esp + 0x24c], 7
call fcn.0060ff10
mov edx, dword [esi]
xor ecx, ecx
mov dword [esp + 0x43], ecx
mov al, 0xa5
mov word [esp + 0x47], cx
mov byte [esp + 0x244], 8
mov byte [esp + 0x49], cl
mov ecx, esi
mov byte [esp + 0x40], 2
mov byte [esp + 0x41], 0x3c
mov byte [esp + 0x42], al
mov byte [esp + 0x4a], 8
mov byte [esp + 0x4b], 0x3b
mov byte [esp + 0x4c], al
mov byte [esp + 0x4d], 1
mov byte [esp + 0x4e], 2
mov byte [esp + 0x4f], 3
mov byte [esp + 0x50], 4
mov byte [esp + 0x51], 2
mov byte [esp + 0x52], bl
mov byte [esp + 0x53], bl
call dword [edx + 0x18]
test ax, ax
jne 0x52df67
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x52def1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52dee8
cmp al, 0xff
je 0x52dee8
dec al
mov byte [ecx], al
jmp 0x52def1
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x52def1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52dee8
cmp al, 0xff
je 0x52dee8
dec al
mov byte [ecx], al
jmp 0x52def1
push ecx
call fcn.00697880
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
lea ecx, [esp + 0x24c]
mov dword [esp + 0x34], 0x6ce1f4
mov dword [esp + 0x244], edi
call fcn.0060ffb0
xor ax, ax
jmp 0x5310a2
push 5
lea ecx, [esp + 0x250]
call fcn.00610190
push ecx
mov byte [esp + 0x40], al
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x703764
call fcn.0060ff10
lea eax, [esp + 0xd0]
push eax
call fcn.0060f170
add esp, 8
mov ecx, dword [0x6ce1fc]
mov byte [esp + 0x244], 9
push ecx
push ebx
push eax
lea ecx, [esp + 0x28]
call fcn.004136a0
mov eax, dword [esp + 0xd0]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52dfe6
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52dfdd
cmp al, 0xff
je 0x52dfdd
dec al
mov byte [ecx], al
jmp 0x52dfe6
push ecx
call fcn.00697880
add esp, 4
mov edx, dword [esp + 0x3c]
and edx, 0xff
lea eax, [edx - 0xa0]
cmp eax, 5
ja case.default.0x52dfff
jmp dword [eax*4 + 0x5310c0]
cmp byte [0x71bb5c], bl
je 0x52e0bc
push 0x3a
push 5
lea ecx, [esp + 0x1c]
call fcn.006102b0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
lea ecx, [esp + 0x190]
push ecx
call fcn.0060f170
add esp, 8
mov edx, dword [0x6ce1fc]
lea ecx, [esp + 0x1c]
push edx
push ebx
push eax
mov byte [esp + 0x250], 0xa
call fcn.004136a0
mov eax, dword [esp + 0x190]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52e0a2
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52e099
cmp al, 0xff
je 0x52e099
dec al
mov byte [ecx], al
mov dword [esp + 0x190], ebx
mov dword [esp + 0x194], ebx
mov dword [esp + 0x198], ebx
jmp 0x52e1f4
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x190], ebx
mov dword [esp + 0x194], ebx
mov dword [esp + 0x198], ebx
jmp 0x52e1f4
sub esp, 0x24
lea ecx, [esp + 0x64]
mov eax, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0xac]
call fcn.00548ea0
lea ecx, [esp + 0x78]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x58]
mov edx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060d6b0
lea ecx, [esp + 0x1c]
call fcn.006101a0
lea ecx, [esp + 0x18]
call fcn.00610330
cmp ax, 1
jge 0x52e136
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0xb
mov ecx, esp
mov dword [esp + 0x3c], esp
jmp 0x52de8c
xor esi, esi
lea edi, [esp + 0x4d]
lea eax, [esi + 5]
lea ecx, [esp + 0x18]
push eax
call fcn.00610190
mov byte [edi], al
inc esi
inc edi
cmp si, 6
jl 0x52e13c
push 5
lea ecx, [esp + 0x1c]
call fcn.00610190
add al, 0x39
mov byte [esp + 0x3c], al
mov ecx, dword [esp + 0x3c]
push ecx
push 5
lea ecx, [esp + 0x1c]
call fcn.006102b0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
lea eax, [esp + 0x120]
push eax
call fcn.0060f170
add esp, 8
mov ecx, dword [0x6ce1fc]
mov byte [esp + 0x244], 0xc
push ecx
push ebx
push eax
lea ecx, [esp + 0x28]
call fcn.004136a0
mov eax, dword [esp + 0x120]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52e1df
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52e1d6
cmp al, 0xff
je 0x52e1d6
dec al
mov byte [ecx], al
jmp 0x52e1df
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x120], ebx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], ebx
or esi, 0xffffffff
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
cmp bp, bx
je 0x52e478
cmp byte [0x71bb5c], bl
je 0x52e337
push 0x258
call fcn.0041ad00
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0xd
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x70c43c
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
lea eax, [esp + 0x160]
push eax
call fcn.0060f170
add esp, 8
mov ecx, dword [0x6ce1fc]
mov byte [esp + 0x244], 0xe
push ecx
push ebx
push eax
lea ecx, [esp + 0x28]
call fcn.004136a0
mov eax, dword [esp + 0x160]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52e31d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52e314
cmp al, 0xff
je 0x52e314
dec al
mov byte [ecx], al
mov dword [esp + 0x160], ebx
mov dword [esp + 0x164], ebx
mov dword [esp + 0x168], ebx
jmp 0x52e476
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x160], ebx
mov dword [esp + 0x164], ebx
mov dword [esp + 0x168], ebx
jmp 0x52e476
sub esp, 0x24
lea eax, [esp + 0x6e]
mov edx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push eax
push edx
lea ecx, [esp + 0xac]
call fcn.00548ea0
lea ecx, [esp + 0x78]
call fcn.0060d330
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push ecx
lea ecx, [esp + 0x5c]
call fcn.0060d6b0
lea ecx, [esp + 0x1c]
call fcn.006101a0
lea ecx, [esp + 0x18]
call fcn.00610330
test ax, ax
jle 0x52e605
cmp bp, 1
jne 0x52e476
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0xf
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x70c43c
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
lea ecx, [esp + 0x180]
push ecx
call fcn.0060f170
add esp, 8
mov edx, dword [0x6ce1fc]
lea ecx, [esp + 0x1c]
push edx
push ebx
push eax
mov byte [esp + 0x250], 0x10
call fcn.004136a0
mov eax, dword [esp + 0x180]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52e461
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52e458
cmp al, 0xff
je 0x52e458
dec al
mov byte [ecx], al
jmp 0x52e461
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x180], ebx
mov dword [esp + 0x184], ebx
mov dword [esp + 0x188], ebx
xor ebp, ebp
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x70c434
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
mov al, byte [esp + 0x1c]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x20], esp
mov byte [ecx], al
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], ebx
mov edx, dword [0x6ce1fc]
lea eax, [esp + 0x2c]
push edx
push ebx
push eax
call fcn.004136a0
push ecx
mov byte [esp + 0x258], 0x12
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x70df18
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x258], 8
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x52e52e
dec eax
je 0x52e6ef
jmp 0x52e1f7
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b930]
call fcn.0061ca70
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70df10
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70df08
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70df00
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70def8
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
mov ecx, dword [0x71b930]
lea eax, [esp + 0x34]
push eax
call fcn.0061cdf0
cmp ax, si
je 0x52e1f7
mov cl, byte [esp + 0x38]
add cl, 0x3a
push ecx
push 5
lea ecx, [esp + 0x1c]
call fcn.006102b0
mov dl, byte [esp + 0x38]
mov ebp, 1
inc dl
mov byte [esp + 0x4d], dl
jmp 0x52e1f7
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x11
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x52e68f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52e686
cmp al, 0xff
je 0x52e686
dec al
mov byte [ecx], al
jmp 0x52e68f
push ecx
call fcn.00697880
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
mov dword [esp + 0x34], 0x6ce1f4
jmp 0x530f50
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x52e736
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52e72d
cmp al, 0xff
je 0x52e72d
dec al
mov byte [ecx], al
jmp 0x52e736
push ecx
call fcn.00697880
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
mov dword [esp + 0x34], 0x6ce1f4
mov dword [esp + 0x244], esi
jmp 0x531092
cmp byte [0x71bb5c], bl
je 0x52e853
push 0x3e
push 5
lea ecx, [esp + 0x1c]
call fcn.006102b0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
lea ecx, [esp + 0x1a0]
push ecx
call fcn.0060f170
add esp, 8
mov edx, dword [0x6ce1fc]
lea ecx, [esp + 0x1c]
push edx
push ebx
push eax
mov byte [esp + 0x250], 0x13
call fcn.004136a0
mov eax, dword [esp + 0x1a0]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52e839
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52e830
cmp al, 0xff
je 0x52e830
dec al
mov byte [ecx], al
mov dword [esp + 0x1a0], ebx
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a8], ebx
jmp 0x52e98b
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x1a0], ebx
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a8], ebx
jmp 0x52e98b
sub esp, 0x24
lea ecx, [esp + 0x64]
mov eax, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0xac]
call fcn.00548ea0
lea ecx, [esp + 0x78]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x58]
mov edx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060d6b0
lea ecx, [esp + 0x1c]
call fcn.006101a0
lea ecx, [esp + 0x18]
call fcn.00610330
cmp ax, 1
jge 0x52e8cd
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x14
mov ecx, esp
mov dword [esp + 0x3c], esp
jmp 0x52de8c
xor esi, esi
lea edi, [esp + 0x4d]
lea eax, [esi + 5]
lea ecx, [esp + 0x18]
push eax
call fcn.00610190
mov byte [edi], al
inc esi
inc edi
cmp si, 6
jl 0x52e8d3
push 6
lea ecx, [esp + 0x1c]
call fcn.00610190
add al, 0x3d
mov byte [esp + 0x3c], al
mov ecx, dword [esp + 0x3c]
push ecx
push 5
lea ecx, [esp + 0x1c]
call fcn.006102b0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
lea eax, [esp + 0x150]
push eax
call fcn.0060f170
add esp, 8
mov ecx, dword [0x6ce1fc]
mov byte [esp + 0x244], 0x15
push ecx
push ebx
push eax
lea ecx, [esp + 0x28]
call fcn.004136a0
mov eax, dword [esp + 0x150]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52e976
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52e96d
cmp al, 0xff
je 0x52e96d
dec al
mov byte [ecx], al
jmp 0x52e976
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x150], ebx
mov dword [esp + 0x154], ebx
mov dword [esp + 0x158], ebx
or esi, 0xffffffff
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
cmp bp, bx
je 0x52ec0f
cmp byte [0x71bb5c], bl
je 0x52eace
push 0x258
call fcn.0041ad00
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x16
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x70c43c
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
lea eax, [esp + 0x140]
push eax
call fcn.0060f170
add esp, 8
mov ecx, dword [0x6ce1fc]
mov byte [esp + 0x244], 0x17
push ecx
push ebx
push eax
lea ecx, [esp + 0x28]
call fcn.004136a0
mov eax, dword [esp + 0x140]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52eab4
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52eaab
cmp al, 0xff
je 0x52eaab
dec al
mov byte [ecx], al
mov dword [esp + 0x140], ebx
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebx
jmp 0x52ec0d
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x140], ebx
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebx
jmp 0x52ec0d
sub esp, 0x24
lea eax, [esp + 0x6e]
mov edx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push eax
push edx
lea ecx, [esp + 0xac]
call fcn.00548ea0
lea ecx, [esp + 0x78]
call fcn.0060d330
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push ecx
lea ecx, [esp + 0x5c]
call fcn.0060d6b0
lea ecx, [esp + 0x1c]
call fcn.006101a0
lea ecx, [esp + 0x18]
call fcn.00610330
test ax, ax
jle 0x52ed60
cmp bp, 1
jne 0x52ec0d
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x18
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x70c43c
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
lea ecx, [esp + 0x110]
push ecx
call fcn.0060f170
add esp, 8
mov edx, dword [0x6ce1fc]
lea ecx, [esp + 0x1c]
push edx
push ebx
push eax
mov byte [esp + 0x250], 0x19
call fcn.004136a0
mov eax, dword [esp + 0x110]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52ebf8
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52ebef
cmp al, 0xff
je 0x52ebef
dec al
mov byte [ecx], al
jmp 0x52ebf8
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], ebx
mov dword [esp + 0x118], ebx
xor ebp, ebp
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x70c434
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
mov al, byte [esp + 0x1c]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x20], esp
mov byte [ecx], al
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], ebx
mov edx, dword [0x6ce1fc]
lea eax, [esp + 0x2c]
push edx
push ebx
push eax
call fcn.004136a0
push ecx
mov byte [esp + 0x258], 0x1b
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x70df18
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x258], 8
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x52ecc5
dec eax
je 0x52e6ef
jmp 0x52e98e
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b930]
call fcn.0061ca70
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70def0
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70dee8
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
mov ecx, dword [0x71b930]
lea eax, [esp + 0x34]
push eax
call fcn.0061cdf0
cmp ax, si
je 0x52e98e
mov cl, byte [esp + 0x38]
add cl, 0x3e
push ecx
push 5
lea ecx, [esp + 0x1c]
call fcn.006102b0
mov dl, byte [esp + 0x38]
mov ebp, 1
inc dl
mov byte [esp + 0x4e], dl
jmp 0x52e98e
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x1a
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x52e68f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52e686
cmp al, 0xff
je 0x52e686
dec al
mov byte [ecx], al
jmp 0x52e68f
cmp byte [0x71bb5c], bl
je 0x52ef51
push 0x40
push 5
lea ecx, [esp + 0x1c]
call fcn.006102b0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
lea ecx, [esp + 0xe0]
push ecx
call fcn.0060f170
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x1c
cmp ecx, ebp
jae 0x52ee45
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x52ee68
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140d0
jmp 0x52eeef
cmp ebp, ebx
jbe 0x52eeb5
cmp ebp, eax
jne 0x52eeb5
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52ee7c
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x52eeb5
push 1
lea ecx, [esp + 0x20]
call fcn.004138a0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52ee99
mov eax, 0x6ce1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x52eeef
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414210
test al, al
je 0x52eeef
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x52eed1
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
call fcn.004141f0
mov eax, dword [esp + 0xe0]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52ef37
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52ef2e
cmp al, 0xff
je 0x52ef2e
dec al
mov byte [ecx], al
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
jmp 0x52f1f8
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
jmp 0x52f1f8
sub esp, 0x24
lea edx, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00548ea0
lea ecx, [esp + 0x78]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060d6b0
lea ecx, [esp + 0x1c]
call fcn.006101a0
lea ecx, [esp + 0x18]
call fcn.00610330
cmp ax, 1
jge 0x52f08f
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x1d
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x52f02f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52f026
cmp al, 0xff
je 0x52f026
dec al
mov byte [ecx], al
jmp 0x52f02f
push ecx
call fcn.00697880
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
mov dword [esp + 0x34], 0x6ce1f4
jmp 0x530ab4
xor esi, esi
lea edi, [esp + 0x4d]
lea ecx, [esi + 5]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00610190
mov byte [edi], al
inc esi
inc edi
cmp si, 6
jl 0x52f095
push 7
lea ecx, [esp + 0x1c]
call fcn.00610190
add al, 0x3f
lea ecx, [esp + 0x14]
mov byte [esp + 0x3c], al
mov edx, dword [esp + 0x3c]
push edx
push 5
call fcn.006102b0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
lea ecx, [esp + 0x130]
push ecx
call fcn.0060f170
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x1e
cmp ecx, ebp
jae 0x52f109
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x52f12c
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140d0
jmp 0x52f1b3
cmp ebp, ebx
jbe 0x52f179
cmp ebp, eax
jne 0x52f179
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52f140
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x52f179
push 1
lea ecx, [esp + 0x20]
call fcn.004138a0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52f15d
mov eax, 0x6ce1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x52f1b3
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414210
test al, al
je 0x52f1b3
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x52f195
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
call fcn.004141f0
mov eax, dword [esp + 0x130]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52f1e3
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52f1da
cmp al, 0xff
je 0x52f1da
dec al
mov byte [ecx], al
jmp 0x52f1e3
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x130], ebx
mov dword [esp + 0x134], ebx
mov dword [esp + 0x138], ebx
mov esi, dword [esp + 0x2c]
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
cmp si, bx
je 0x52f5d3
cmp byte [0x71bb5c], bl
je 0x52f3e7
push 0x258
call fcn.0041ad00
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x1f
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x70c43c
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
lea eax, [esp + 0x170]
push eax
call fcn.0060f170
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x20
cmp ecx, ebp
jae 0x52f2db
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x52f2fe
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140d0
jmp 0x52f385
cmp ebp, ebx
jbe 0x52f34b
cmp ebp, eax
jne 0x52f34b
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52f312
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x52f34b
push 1
lea ecx, [esp + 0x20]
call fcn.004138a0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52f32f
mov eax, 0x6ce1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x52f385
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414210
test al, al
je 0x52f385
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x52f367
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
call fcn.004141f0
mov eax, dword [esp + 0x170]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52f3cd
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52f3c4
cmp al, 0xff
je 0x52f3c4
dec al
mov byte [ecx], al
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], ebx
mov dword [esp + 0x178], ebx
jmp 0x52f5d1
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], ebx
mov dword [esp + 0x178], ebx
jmp 0x52f5d1
sub esp, 0x24
lea edx, [esp + 0x6e]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00548ea0
lea ecx, [esp + 0x78]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060d6b0
lea ecx, [esp + 0x1c]
call fcn.006101a0
lea ecx, [esp + 0x18]
call fcn.00610330
test ax, ax
jle 0x52f760
cmp si, 1
jne 0x52f5d1
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x21
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x70c43c
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
lea ecx, [esp + 0xf0]
push ecx
call fcn.0060f170
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x22
cmp ecx, ebp
jae 0x52f4e2
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x52f505
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140d0
jmp 0x52f58c
cmp ebp, ebx
jbe 0x52f552
cmp ebp, eax
jne 0x52f552
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52f519
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x52f552
push 1
lea ecx, [esp + 0x20]
call fcn.004138a0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52f536
mov eax, 0x6ce1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x52f58c
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414210
test al, al
je 0x52f58c
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x52f56e
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
call fcn.004141f0
mov eax, dword [esp + 0xf0]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52f5bc
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52f5b3
cmp al, 0xff
je 0x52f5b3
dec al
mov byte [ecx], al
jmp 0x52f5bc
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xf4], ebx
mov dword [esp + 0xf8], ebx
xor esi, esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x70c434
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
mov dl, byte [esp + 0x1c]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x20], esp
mov byte [ecx], dl
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], ebx
mov eax, dword [0x6ce1fc]
lea edx, [esp + 0x2c]
push eax
push ebx
push edx
call fcn.004136a0
push ecx
mov byte [esp + 0x258], 0x24
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x70df18
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x258], 8
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x52f688
dec eax
je 0x52f864
jmp 0x52f1fc
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b930]
call fcn.0061ca70
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70dee0
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70ded8
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70ded0
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70dec8
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
lea ecx, [esp + 0x34]
push ecx
mov ecx, dword [0x71b930]
call fcn.0061cdf0
cmp ax, 0xffff
je 0x52f1fc
mov dl, byte [esp + 0x38]
lea ecx, [esp + 0x14]
add dl, 0x40
push edx
push 5
call fcn.006102b0
mov al, byte [esp + 0x38]
mov esi, 1
inc al
mov byte [esp + 0x4f], al
jmp 0x52f1fc
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x23
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x52f7ea
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52f7e1
cmp al, 0xff
je 0x52f7e1
dec al
mov byte [ecx], al
jmp 0x52f7ea
push ecx
call fcn.00697880
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
lea ecx, [esp + 0x24c]
mov dword [esp + 0x34], 0x6ce1f4
mov dword [esp + 0x244], 0xffffffff
call fcn.0060ffb0
xor ax, ax
jmp 0x5310a2
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x52f8ab
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52f8a2
cmp al, 0xff
je 0x52f8a2
dec al
mov byte [ecx], al
jmp 0x52f8ab
push ecx
call fcn.00697880
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
mov dword [esp + 0x34], 0x6ce1f4
mov dword [esp + 0x244], 0xffffffff
jmp 0x531092
cmp byte [0x71bb5c], bl
je 0x52fa77
push 0x40
push 5
lea ecx, [esp + 0x1c]
call fcn.006102b0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
lea eax, [esp + 0x100]
push eax
call fcn.0060f170
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x25
cmp ecx, ebp
jae 0x52f96b
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x52f98e
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140d0
jmp 0x52fa15
cmp ebp, ebx
jbe 0x52f9db
cmp ebp, eax
jne 0x52f9db
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52f9a2
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x52f9db
push 1
lea ecx, [esp + 0x20]
call fcn.004138a0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52f9bf
mov eax, 0x6ce1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x52fa15
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414210
test al, al
je 0x52fa15
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x52f9f7
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
call fcn.004141f0
mov eax, dword [esp + 0x100]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52fa5d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52fa54
cmp al, 0xff
je 0x52fa54
dec al
mov byte [ecx], al
mov dword [esp + 0x100], ebx
mov dword [esp + 0x104], ebx
mov dword [esp + 0x108], ebx
jmp 0x52fcc5
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x100], ebx
mov dword [esp + 0x104], ebx
mov dword [esp + 0x108], ebx
jmp 0x52fcc5
sub esp, 0x24
lea edx, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00548ea0
lea ecx, [esp + 0x78]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060d6b0
lea ecx, [esp + 0x1c]
call fcn.006101a0
lea ecx, [esp + 0x18]
call fcn.00610330
cmp ax, 1
jge 0x52fb5b
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x26
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x52f02f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52f026
cmp al, 0xff
je 0x52f026
dec al
mov byte [ecx], al
jmp 0x52f02f
xor esi, esi
lea edi, [esp + 0x4d]
lea ecx, [esi + 5]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00610190
mov byte [edi], al
inc esi
inc edi
cmp si, 6
jl 0x52fb61
push 8
lea ecx, [esp + 0x1c]
call fcn.00610190
add al, 0x3f
lea ecx, [esp + 0x14]
mov byte [esp + 0x3c], al
mov edx, dword [esp + 0x3c]
push edx
push 5
call fcn.006102b0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
lea ecx, [esp + 0xd0]
push ecx
call fcn.0060f170
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x27
cmp ecx, ebp
jae 0x52fbd5
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x52fbf8
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140d0
jmp 0x52fc80
cmp ebp, ebx
jbe 0x52fc45
cmp ebp, eax
jne 0x52fc45
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52fc0c
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x52fc45
push 1
lea ecx, [esp + 0x20]
call fcn.004138a0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52fc29
mov eax, 0x6ce1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x52fc80
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414210
test al, al
je 0x52fc80
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x52fc61
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], ebp
mov byte [ecx + ebp], bl
mov eax, dword [esp + 0xd0]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52fcb0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x52fca7
cmp al, 0xff
je 0x52fca7
dec al
mov byte [ecx], al
jmp 0x52fcb0
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd8], ebx
mov esi, dword [esp + 0x2c]
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
cmp si, bx
je 0x530006
cmp byte [0x71bb5c], bl
je 0x52fefe
push 0x258
call fcn.0041ad00
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x28
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x70c43c
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
lea eax, [esp + 0xa0]
push eax
call fcn.0060f170
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x244], 0x29
cmp ecx, ebp
jae 0x52fda8
mov ebp, ecx
lea edx, [esp + 0x1c]
cmp edx, esi
jne 0x52fdcb
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x24]
call fcn.004140d0
jmp 0x52fe53
cmp ebp, ebx
jbe 0x52fe18
cmp ebp, eax
jne 0x52fe18
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52fddf
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x52fe18
push 1
lea ecx, [esp + 0x20]
call fcn.004138a0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52fdfc
mov eax, 0x6ce1f8
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x28], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x52fe53
push 1
push ebp
lea ecx, [esp + 0x24]
call fcn.00414210
test al, al
je 0x52fe53
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x52fe34
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x20]
mov ecx, ebp
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], ebp
mov byte [ecx + ebp], bl
mov eax, dword [esp + 0xa0]
mov byte [esp + 0x244], 8
cmp eax, ebx
je 0x52fee4
push eax
lea ecx, [esp + 0xa0]
call fcn.004c22b0
cmp byte [eax], bl
je 0x52fec4
mov edx, dword [esp + 0xa0]
lea ecx, [esp + 0x9c]
push edx
call fcn.004c22b0
cmp byte [eax], 0xff
je 0x52fec4
mov eax, dword [esp + 0xa0]
lea ecx, [esp + 0x9c]
push eax
call fcn.004c22b0
mov cl, byte [eax]
dec cl
mov byte [eax], cl
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
jmp 0x530004
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xa0]
add ecx, 2
dec edx
push ecx
push edx
lea ecx, [esp + 0xa4]
call fcn.004f1780
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
jmp 0x530004
sub esp, 0x24
lea ecx, [esp + 0x6e]
mov eax, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0xac]
call fcn.00548ea0
lea ecx, [esp + 0x78]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x58]
mov edx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060d6b0
lea ecx, [esp + 0x1c]
call fcn.006101a0
lea ecx, [esp + 0x18]
call fcn.00610330
test ax, ax
jle 0x53017d
cmp si, 1
jne 0x530004
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x2a
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x70c43c
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
lea eax, [esp + 0x1f0]
push eax
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x2b
call fcn.0044fd20
lea ecx, [esp + 0x1ec]
mov byte [esp + 0x244], 8
call fcn.004131d0
xor esi, esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x70c434
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
sub esp, 0x10
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00412ff0
push ecx
mov byte [esp + 0x258], 0x2d
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x70df18
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x258], 8
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x5300a5
dec eax
je 0x530269
jmp 0x52fcc9
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b930]
call fcn.0061ca70
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70dee0
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70ded8
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70ded0
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70dec8
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
lea ecx, [esp + 0x34]
push ecx
mov ecx, dword [0x71b930]
call fcn.0061cdf0
cmp ax, 0xffff
je 0x52fcc9
mov dl, byte [esp + 0x38]
lea ecx, [esp + 0x14]
add dl, 0x40
push edx
push 5
call fcn.006102b0
mov al, byte [esp + 0x38]
mov esi, 1
inc al
mov byte [esp + 0x50], al
jmp 0x52fcc9
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x2c
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.004131d0
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.00407170
lea ecx, [esp + 0x24c]
mov dword [esp + 0x244], 0xffffffff
call fcn.0060ffb0
xor ax, ax
jmp 0x5310a2
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.004131d0
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.00407170
mov dword [esp + 0x244], 0xffffffff
jmp 0x531092
cmp byte [0x71bb5c], bl
je 0x53035f
push 0x44
push 5
lea ecx, [esp + 0x1c]
call fcn.006102b0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
lea eax, [esp + 0x1d0]
push eax
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x2e
call fcn.0044fd20
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x1cc]
jmp 0x53051b
sub esp, 0x24
lea edx, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00548ea0
lea ecx, [esp + 0x78]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060d6b0
lea ecx, [esp + 0x1c]
call fcn.006101a0
lea ecx, [esp + 0x18]
call fcn.00610330
cmp ax, 1
jge 0x53049b
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x2f
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.004131d0
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.00407170
lea ecx, [esp + 0x24c]
mov dword [esp + 0x244], edi
call fcn.0060ffb0
xor ax, ax
jmp 0x5310a2
xor esi, esi
lea edi, [esp + 0x4d]
lea ecx, [esi + 5]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00610190
mov byte [edi], al
inc esi
inc edi
cmp si, 6
jl 0x5304a1
push 9
lea ecx, [esp + 0x1c]
call fcn.00610190
add al, 0x43
lea ecx, [esp + 0x14]
mov byte [esp + 0x3c], al
mov edx, dword [esp + 0x3c]
push edx
push 5
call fcn.006102b0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
lea ecx, [esp + 0x1b0]
push ecx
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x30
call fcn.0044fd20
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x1ac]
call fcn.004131d0
or esi, 0xffffffff
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
cmp bp, bx
je 0x530715
cmp byte [0x71bb5c], bl
je 0x53060d
push 0x258
call fcn.0041ad00
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x31
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x70c43c
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
lea eax, [esp + 0x210]
push eax
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x32
call fcn.0044fd20
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x20c]
jmp 0x53070e
sub esp, 0x24
lea edx, [esp + 0x6e]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00548ea0
lea ecx, [esp + 0x78]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060d6b0
lea ecx, [esp + 0x1c]
call fcn.006101a0
lea ecx, [esp + 0x18]
call fcn.00610330
test ax, ax
jle 0x53084f
cmp bp, 1
jne 0x530713
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x33
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x70c43c
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
lea ecx, [esp + 0x230]
push ecx
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x34
call fcn.0044fd20
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x22c]
call fcn.004131d0
xor ebp, ebp
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x70c434
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
sub esp, 0x10
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00412ff0
push ecx
mov byte [esp + 0x258], 0x36
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x70df18
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x258], 8
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x5307b4
dec eax
je 0x530f6b
jmp 0x530523
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b930]
call fcn.0061ca70
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70dec0
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70deb8
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
lea ecx, [esp + 0x34]
push ecx
mov ecx, dword [0x71b930]
call fcn.0061cdf0
cmp ax, si
je 0x530523
mov dl, byte [esp + 0x38]
lea ecx, [esp + 0x14]
add dl, 0x44
push edx
push 5
call fcn.006102b0
mov al, byte [esp + 0x38]
mov ebp, 1
inc al
mov byte [esp + 0x51], al
jmp 0x530523
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x35
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.004131d0
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.00407170
lea ecx, [esp + 0x24c]
mov dword [esp + 0x244], esi
call fcn.0060ffb0
xor ax, ax
jmp 0x5310a2
cmp byte [0x71bb5c], bl
je 0x530993
push 0x46
push 5
lea ecx, [esp + 0x1c]
call fcn.006102b0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
lea eax, [esp + 0x200]
push eax
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x37
call fcn.0044fd20
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x1fc]
jmp 0x530b4f
sub esp, 0x24
lea edx, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00548ea0
lea ecx, [esp + 0x78]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060d6b0
lea ecx, [esp + 0x1c]
call fcn.006101a0
lea ecx, [esp + 0x18]
call fcn.00610330
cmp ax, 1
jge 0x530acf
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x38
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.004131d0
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.00407170
lea ecx, [esp + 0x24c]
mov dword [esp + 0x244], edi
call fcn.0060ffb0
xor ax, ax
jmp 0x5310a2
xor esi, esi
lea edi, [esp + 0x4d]
lea ecx, [esi + 5]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00610190
mov byte [edi], al
inc esi
inc edi
cmp si, 6
jl 0x530ad5
push 0xa
lea ecx, [esp + 0x1c]
call fcn.00610190
add al, 0x45
lea ecx, [esp + 0x14]
mov byte [esp + 0x3c], al
mov edx, dword [esp + 0x3c]
push edx
push 5
call fcn.006102b0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
lea ecx, [esp + 0x1e0]
push ecx
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x39
call fcn.0044fd20
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x1dc]
call fcn.004131d0
or esi, 0xffffffff
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
cmp bp, bx
je 0x530d49
cmp byte [0x71bb5c], bl
je 0x530c41
push 0x258
call fcn.0041ad00
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x3a
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x70c43c
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
lea eax, [esp + 0x220]
push eax
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x3b
call fcn.0044fd20
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x21c]
jmp 0x530d42
sub esp, 0x24
lea edx, [esp + 0x6e]
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xac]
call fcn.00548ea0
lea ecx, [esp + 0x78]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x58]
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060d6b0
lea ecx, [esp + 0x1c]
call fcn.006101a0
lea ecx, [esp + 0x18]
call fcn.00610330
test ax, ax
jle 0x530e83
cmp bp, 1
jne 0x530d47
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x3c
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x70c43c
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
push ecx
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
lea ecx, [esp + 0x1c0]
push ecx
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x248], 0x3d
call fcn.0044fd20
mov byte [esp + 0x244], 8
lea ecx, [esp + 0x1bc]
call fcn.004131d0
xor ebp, ebp
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x70c434
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
sub esp, 0x10
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00412ff0
push ecx
mov byte [esp + 0x258], 0x3f
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x70df18
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x258], 8
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x530de8
dec eax
je 0x530f6b
jmp 0x530b57
push ecx
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b930]
call fcn.0061ca70
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70deb0
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x70dea8
call fcn.0060ff10
mov ecx, dword [0x71b930]
call fcn.0061ccb0
lea ecx, [esp + 0x34]
push ecx
mov ecx, dword [0x71b930]
call fcn.0061cdf0
cmp ax, si
je 0x530b57
mov dl, byte [esp + 0x38]
lea ecx, [esp + 0x14]
add dl, 0x46
push edx
push 5
call fcn.006102b0
mov al, byte [esp + 0x38]
mov ebp, 1
inc al
mov byte [esp + 0x52], al
jmp 0x530b57
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x254], 0x3e
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x254], 8
call fcn.006115e0
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.004131d0
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.00407170
lea ecx, [esp + 0x24c]
mov dword [esp + 0x244], esi
call fcn.0060ffb0
xor ax, ax
jmp 0x5310a2
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.004131d0
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.00407170
mov dword [esp + 0x244], esi
jmp 0x531092
lea ecx, [esp + 0x14]
mov byte [esp + 0x244], 7
call fcn.0060ffb0
lea ecx, [esp + 0x30]
mov byte [esp + 0x244], 6
call fcn.0060ffb0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x244], 5
call fcn.004131d0
lea ecx, [esp + 0xac]
mov byte [esp + 0x244], 4
call fcn.00548470
lea ecx, [esp + 0x78]
mov byte [esp + 0x244], 3
call fcn.00548470
lea ecx, [esp + 0x18]
mov byte [esp + 0x244], 2
call fcn.0060ffb0
lea ecx, [esp + 0x54]
mov byte [esp + 0x244], 1
call fcn.0060d280
lea ecx, [esp + 0x34]
mov byte [esp + 0x244], bl
call fcn.00407170
mov dword [esp + 0x244], edi
lea ecx, [esp + 0x24c]
call fcn.0060ffb0
mov ax, 1
mov ecx, dword [esp + 0x23c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x238
ret 4