Function at 0xa13cee
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
mov eax, 0xaf7c73
call fcn.00a6fc7c
sub esp, 0x2a4
push ebx
push esi
xor ebx, ebx
push edi
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 4], ebx
call fcn.004376f2
mov edi, eax
cmp edi, ebx
je 0xa15192
mov ecx, dword [ebp - 0x50]
push ebx
push 0x1f4
call fcn.00485138
test eax, eax
jne 0xa13d56
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0xfa
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
call fcn.0099fcc2
add esp, 0x14
jmp 0xa15192
push 0x4c
lea ecx, [ebp - 0x28]
call fcn.006f5e40
push dword [ebp + 8]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.004291b3
mov esi, dword [ebp + 0xc]
push esi
lea ecx, [ebp - 0x28]
call fcn.0040667c
push esi
call fcn.0048595a
mov dword [ebp - 0x3c], eax
add eax, 0xfffffff4
cmp eax, 0x3c
pop ecx
ja case.0xa13d98.36
movzx eax, byte [eax + 0xa17432]
jmp dword [eax*4 + 0xa1739e]
push 0xc0
mov ecx, 0xbe1de0
call fcn.00402d66
mov dword [ebp + 0xc], eax
cmp eax, ebx
mov byte [ebp - 4], 2
je 0xa13dc3
push esi
mov ecx, eax
call fcn.00a17747
jmp 0xa13dc5
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00a1e375
mov ecx, dword [ebp - 0x2c]
push 3
pop edi
mov byte [ebp - 4], 3
call fcn.004fd4ac
cmp eax, 1
jne 0xa13f0a
mov esi, fcn.004063b5
push esi
push fcn.004aded2
push edi
push 4
lea eax, [ebp - 0x18]
push eax
call fcn.00a70b1e
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 4
call fcn.007f707a
push ebx
push ebx
lea ecx, [ebp - 0x18]
call fcn.004aded8
mov ecx, eax
call fcn.004adf8d
mov eax, dword [eax]
cmp eax, ebx
je 0xa13e4e
cmp byte [eax], bl
jne 0xa13e84
push ebx
push ebx
lea ecx, [ebp - 0x14]
call fcn.004aded8
mov ecx, eax
call fcn.004adf8d
mov eax, dword [eax]
cmp eax, ebx
je 0xa13e69
cmp byte [eax], bl
jne 0xa13e84
push ebx
push ebx
lea ecx, [ebp - 0x10]
call fcn.004aded8
mov ecx, eax
call fcn.004adf8d
mov eax, dword [eax]
cmp eax, ebx
je 0xa13ef9
cmp byte [eax], bl
je 0xa13ef9
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0xa13e90
mov eax, dword [eax - 4]
jmp 0xa13e92
xor eax, eax
cmp eax, 0x3c
jle 0xa13ea3
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
jmp 0xa13edf
mov edx, dword [ebp - 0x14]
cmp edx, ebx
je 0xa13eaf
mov eax, dword [edx - 4]
jmp 0xa13eb1
xor eax, eax
cmp eax, 0x3c
jle 0xa13ec2
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
jmp 0xa13edf
mov ecx, dword [ebp - 0x10]
cmp ecx, ebx
je 0xa13ece
mov eax, dword [ecx - 4]
jmp 0xa13ed0
xor eax, eax
cmp eax, 0x3c
jle 0xa13f1b
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0xe3
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
call fcn.0099fcc2
add esp, 0x14
push esi
push edi
push 4
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 3
call fcn.00a70178
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00a1e392
jmp 0xa15187
cmp ecx, ebx
mov dword [ebp + 0xc], edi
je 0xa13f29
mov eax, dword [ebp - 0x10]
cmp byte [eax], bl
jne 0xa13f3f
cmp edx, ebx
mov dword [ebp + 0xc], 2
je 0xa13f38
cmp byte [edx], bl
jne 0xa13f3f
mov dword [ebp + 0xc], 1
push dword [ebp + 0xc]
lea ecx, [ebp - 0x28]
call fcn.0040661f
cmp dword [ebp + 0xc], ebx
jle 0xa13f79
mov eax, dword [ebp + 0xc]
lea edi, [ebp - 0x18]
mov dword [ebp + 0xc], eax
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push edi
mov dword [ecx], ebx
call fcn.00418f94
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
add edi, 4
dec dword [ebp + 0xc]
jne 0xa13f58
push 3
pop edi
push dword [ebp + 8]
lea ecx, [ebp - 0x28]
call fcn.0040661f
push esi
push edi
push 4
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 3
call fcn.00a70178
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00a1e392
jmp case.0xa13d98.62
mov dword [ebp + 0xc], ebx
cmp dword [ebp - 0x3c], 0xd
mov byte [ebp - 4], 5
jne 0xa14049
push 0x9c
mov ecx, 0xbe1de0
call fcn.00402d66
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 6
je 0xa13fda
mov ecx, eax
call fcn.00a17542
jmp 0xa13fdc
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.00a1e3a8
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 7
call fcn.004fd4ac
cmp eax, 1
je 0xa14028
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
call fcn.00a1e3c5
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 1
jmp 0xa14f95
mov ecx, dword [ebp - 0x10]
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.007f6c31
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
call fcn.00a1e3c5
jmp 0xa14253
cmp dword [ebp - 0x3c], 0x22
jne 0xa140d5
push 0x9c
mov ecx, 0xbe1de0
call fcn.00402d66
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 8
je 0xa14077
push ebx
mov ecx, eax
call fcn.00a175d4
jmp 0xa14079
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.00a1e3a8
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 9
call fcn.004fd4ac
cmp eax, 1
je 0xa140b9
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
jmp 0xa14017
mov ecx, dword [ebp - 0x10]
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.007f6c31
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
jmp 0xa1403f
cmp dword [ebp - 0x3c], 0x23
jne 0xa14162
push 0x9c
mov ecx, 0xbe1de0
call fcn.00402d66
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0xa
je 0xa14104
push 1
mov ecx, eax
call fcn.00a175d4
jmp 0xa14106
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.00a1e3a8
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 0xb
call fcn.004fd4ac
cmp eax, 1
je 0xa14146
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
jmp 0xa14017
mov ecx, dword [ebp - 0x10]
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.007f6c31
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
jmp 0xa1403f
push 0x69c
mov ecx, 0xbe1de0
call fcn.00402d66
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0xc
je 0xa14185
mov ecx, eax
call fcn.009af38b
jmp 0xa14187
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.00429c14
push ebx
push 1
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0xe1
push eax
mov byte [ebp - 4], 0xd
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push ebx
push 3
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xd
call fcn.00429875
mov ecx, eax
call fcn.009b796b
mov ecx, dword [ebp - 0x2c]
push ebx
push ebx
push 0x3c
push ebx
push ebx
call fcn.009b7bbd
mov ecx, dword [ebp - 0x2c]
call fcn.009aff86
mov ecx, dword [ebp - 0x2c]
call fcn.004fd4ac
cmp eax, 1
je 0xa14213
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.00429c31
jmp 0xa1401c
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0xcc]
push eax
call fcn.005247ee
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xf
call fcn.00418f94
mov eax, dword [ebp - 0xcc]
cmp eax, ebx
mov byte [ebp - 4], 0xd
je 0xa14247
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.00429c31
push ebx
push ebx
lea ecx, [ebp + 0xc]
call fcn.004aded8
mov ecx, eax
call fcn.004adf8d
mov eax, dword [eax]
cmp eax, ebx
je 0xa1401c
cmp byte [eax], bl
je 0xa1401c
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp + 8]
mov dword [ebp + 8], ebx
call fcn.00418f94
push 1
push 1
push ebx
push 1
push 0x400
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x10
call fcn.00416ef9
push eax
call fcn.007a6e6e
add esp, 0x10
or edi, 0xffffffff
push edi
lea ecx, [ebp + 8]
mov esi, eax
call fcn.00416fa4
cmp esi, ebx
jne 0xa14319
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0xe2
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
call fcn.0099fcc2
mov eax, dword [ebp + 8]
add esp, 0x14
cmp eax, ebx
mov byte [ebp - 4], 5
je 0xa142f1
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp + 0xc]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0xa14306
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call fcn.00429f38
mov dword [ebp - 4], edi
jmp 0xa15196
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0xa14325
mov ecx, dword [eax - 4]
jmp 0xa14327
xor ecx, ecx
cmp ecx, 0x50
jle 0xa1433d
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0xfb6
jmp 0xa142c7
cmp eax, ebx
je 0xa14346
mov eax, dword [eax - 4]
jmp 0xa14348
xor eax, eax
cmp eax, 0x3c
jle 0xa14361
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0xe3
jmp 0xa142c7
push ecx
mov ecx, esp
lea eax, [ebp + 0xc]
mov dword [ebp - 0x34], esp
push eax
mov dword [ecx], ebx
call fcn.00418f94
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
cmp dword [ebp - 0x3c], 0xd
je 0xa1438c
cmp dword [ebp - 0x3c], 0x22
je 0xa1438c
cmp dword [ebp - 0x3c], 0x23
jne 0xa14397
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
call fcn.0040661f
mov eax, dword [ebp + 8]
cmp eax, ebx
mov byte [ebp - 4], 5
je 0xa143ac
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 1
jmp 0xa14c31
cmp dword [0xbd9020], ebx
jne 0xa143ee
push 0x5a4
mov ecx, 0xbe1de0
call fcn.00402d66
mov dword [ebp + 0xc], eax
cmp eax, ebx
mov byte [ebp - 4], 0x11
je 0xa15187
push esi
push dword [ebp + 8]
mov ecx, eax
call fcn.0061f97e
jmp 0xa15187
lea eax, [ebp - 0x84]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x12
call fcn.00490191
mov eax, dword [ebp - 0x84]
pop ecx
pop ecx
mov byte [ebp - 4], 1
jmp 0xa14f95
cmp dword [0xbd9020], ebx
jne 0xa14456
push 0x584
mov ecx, 0xbe1de0
call fcn.00402d66
mov dword [ebp + 0xc], eax
cmp eax, ebx
mov byte [ebp - 4], 0x13
je 0xa15187
push esi
push dword [ebp + 8]
mov ecx, eax
call fcn.0083eee6
jmp 0xa15187
lea eax, [ebp - 0x8c]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x14
call fcn.00490191
mov eax, dword [ebp - 0x8c]
pop ecx
pop ecx
mov byte [ebp - 4], 1
jmp 0xa14f95
mov ecx, dword [0xbd8fe8]
push esi
lea eax, [ebp + 0xc]
push eax
call fcn.0060f2ef
cmp dword [ebp + 0xc], ebx
mov byte [ebp - 4], 0x15
jne 0xa144a9
lea ecx, [ebp + 0xc]
jmp 0xa15182
cmp dword [0xbd9020], ebx
je 0xa144ee
lea eax, [ebp - 0xd4]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x16
call fcn.00490191
mov eax, dword [ebp - 0xd4]
cmp eax, ebx
pop ecx
pop ecx
mov byte [ebp - 4], 0x15
je 0xa144a1
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
jmp 0xa144a1
mov eax, dword [0xbdea24]
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
call fcn.00504935
cmp dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x17
je 0xa14567
push 0x5d0
mov ecx, 0xbe1de0
call fcn.00402d66
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x18
je 0xa14556
push esi
push dword [ebp + 8]
lea eax, [ebp - 0x28]
sub esp, 0x10
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0050047e
mov ecx, dword [ebp + 0x10]
call fcn.0083b2f0
mov esi, eax
jmp 0xa14558
xor esi, esi
mov byte [ebp - 4], 0x17
call fcn.004376f2
mov dword [eax + 0x1e0], esi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x15
call fcn.00504952
jmp 0xa144a1
cmp esi, 0x4dab34
setne al
push 0xa0
mov ecx, 0xbe1de0
dec eax
and eax, 0x46
mov byte [ebp + 0x10], al
call fcn.00402d66
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x19
je 0xa145ae
push dword [ebp + 0x10]
mov ecx, eax
call fcn.007f14da
jmp 0xa145b0
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00a1e3db
mov eax, dword [ebp + 0x14]
cmp eax, ebx
mov byte [ebp - 4], 0x1a
je 0xa14606
cmp byte [eax], bl
je 0xa14606
push ecx
mov ecx, esp
lea eax, [ebp + 0x14]
mov dword [ebp - 0x34], esp
push eax
mov dword [ecx], ebx
call fcn.00418f94
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1a
call fcn.00a1dad9
mov ecx, eax
call fcn.007f1b5a
mov ecx, dword [ebp - 0x10]
call fcn.004fd4ac
cmp eax, 1
je 0xa14624
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00a1e3f8
jmp 0xa15187
mov dword [ebp + 8], ebx
mov dword [ebp + 0xc], ebx
mov ecx, dword [ebp - 0x10]
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x1d
call fcn.007f1ba1
push ecx
mov ecx, esp
lea eax, [ebp + 8]
mov dword [ebp - 0x34], esp
push eax
mov dword [ecx], ebx
call fcn.00418f94
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
push ecx
mov ecx, esp
lea eax, [ebp + 0xc]
mov dword [ebp - 0x34], esp
push eax
mov dword [ecx], ebx
call fcn.00418f94
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
call fcn.0040661f
mov eax, dword [ebp + 0xc]
cmp eax, ebx
mov byte [ebp - 4], 0x1c
je 0xa14690
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp + 8]
cmp eax, ebx
mov byte [ebp - 4], 0x1a
je 0xa146a5
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00a1e3f8
jmp case.0xa13d98.62
cmp dword [edi + 0x20], ebx
jne 0xa146e4
mov ecx, edi
call fcn.00a174e5
test eax, eax
jne 0xa146e4
mov eax, dword [0xbdd460]
cmp dword [eax + 0x100], ebx
jne 0xa146e4
cmp dword [eax + 0x114], ebx
jne 0xa146e4
test byte [edi + 0x13d], 0x40
je 0xa146f3
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
jmp 0xa1514e
mov ecx, dword [0xbd8fe8]
push esi
lea eax, [ebp + 8]
push eax
call fcn.0060f2ef
cmp dword [ebp + 8], ebx
mov byte [ebp - 4], 0x1e
jne 0xa14714
lea ecx, [ebp + 8]
jmp 0xa15182
push 0x69c
mov ecx, 0xbe1de0
call fcn.00402d66
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x1f
je 0xa14737
mov ecx, eax
call fcn.009af38b
jmp 0xa14739
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x1e
call fcn.00429c14
push ebx
push 1
pop esi
push esi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x29b
push eax
mov byte [ebp - 4], 0x20
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push ebx
push 3
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x20
call fcn.00429875
mov ecx, eax
call fcn.009b796b
mov ecx, dword [ebp - 0x34]
push ebx
push ebx
push 0x23
push ebx
push ebx
call fcn.009b7bbd
mov ecx, dword [ebp - 0x34]
call fcn.009aff86
mov ecx, dword [ebp - 0x34]
call fcn.004fd4ac
cmp eax, esi
jne 0xa14847
mov ecx, dword [ebp - 0x34]
lea eax, [ebp + 0xc]
push eax
call fcn.005247ee
push ebx
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x22
call fcn.004aded8
mov ecx, eax
call fcn.004adf8d
mov eax, dword [eax]
cmp eax, ebx
je 0xa14832
cmp byte [eax], bl
je 0xa14832
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00416ef9
push eax
call fcn.007a6e6e
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00416fa4
cmp esi, ebx
jne 0xa14858
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xe2
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
call fcn.0099fcc2
add esp, 0x14
mov eax, dword [ebp + 0xc]
cmp eax, ebx
mov byte [ebp - 4], 0x20
je 0xa14847
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x1e
call fcn.00429c31
jmp 0xa1470c
push ecx
mov ecx, esp
lea eax, [ebp + 0xc]
mov dword [ebp + 0x10], esp
push eax
mov dword [ecx], ebx
call fcn.00418f94
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
mov eax, dword [ebp + 0xc]
cmp eax, ebx
mov byte [ebp - 4], 0x20
je 0xa14886
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x1e
call fcn.00429c31
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa1512a
mov ecx, dword [0xbd9028]
lea eax, [ebp - 0xe8]
push eax
call fcn.00426f51
mov esi, dword [eax + 4]
lea ecx, [ebp - 0xe8]
call fcn.00429bfe
push ebx
mov ecx, esi
call fcn.0046cb2b
mov esi, eax
cmp esi, ebx
je 0xa15187
mov edi, dword [0xbd8fe8]
lea ecx, [esi + 0xc]
call fcn.00429944
push eax
lea eax, [ebp + 8]
push eax
mov ecx, edi
call fcn.0060313e
mov eax, dword [0xbe7b74]
add esi, 0x28
cmp esi, ebx
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x48], esi
mov ecx, esi
jne 0xa14901
mov ecx, eax
cmp dword [ebp + 8], ebx
je 0xa14909
mov eax, dword [ebp + 8]
push ecx
push eax
call fcn.00a7be70
test eax, eax
pop ecx
pop ecx
je 0xa1494b
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0x29c
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
call fcn.0099fdd3
add esp, 0x14
cmp eax, 6
je 0xa1494b
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 1
jmp 0xa14f95
push 0x69c
mov ecx, 0xbe1de0
call fcn.00402d66
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x24
je 0xa1496e
mov ecx, eax
call fcn.009af38b
jmp 0xa14970
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x23
call fcn.00429c14
push ebx
push 1
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0x29d
push eax
mov byte [ebp - 4], 0x25
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push ebx
push 3
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x25
call fcn.00429875
mov ecx, eax
call fcn.009b796b
mov ecx, dword [ebp - 0x40]
push 1
push ebx
push 0xc
push 4
push ebx
call fcn.009b7bbd
mov ecx, dword [ebp - 0x40]
call fcn.009aff86
mov ecx, dword [ebp - 0x40]
call fcn.004fd4ac
cmp eax, 1
je 0xa149fe
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x23
call fcn.00429c31
jmp 0xa1493f
mov ecx, dword [ebp - 0x40]
lea eax, [ebp + 0xc]
push eax
call fcn.005247ee
push 1
mov edi, 0x400
push edi
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x27
call fcn.00416ef9
mov esi, eax
xor eax, eax
mov al, byte [esi]
cmp al, bl
je 0xa14a48
push eax
call dword [sym.imp.kernel32.dll_IsDBCSLeadByte]
test eax, eax
je 0xa14a45
cmp word [esi], 0xa1a1
jne 0xa14a41
mov byte [esi + 1], 0x20
mov byte [esi], 0x20
inc esi
inc esi
jmp 0xa14a22
inc esi
jmp 0xa14a22
or esi, 0xffffffff
push esi
lea ecx, [ebp + 0xc]
call fcn.00416fa4
push ebx
push ebx
lea ecx, [ebp + 0xc]
call fcn.004aded8
mov ecx, eax
call fcn.004adf8d
mov eax, dword [eax]
cmp eax, ebx
je 0xa14a6f
cmp byte [eax], bl
jne 0xa14ab8
mov eax, dword [ebp + 0xc]
cmp eax, ebx
mov byte [ebp - 4], 0x25
je 0xa14a84
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x23
call fcn.00429c31
mov eax, dword [ebp + 8]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0xa14aa5
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call fcn.00429f38
mov dword [ebp - 4], esi
jmp 0xa15196
push ebx
push 1
push ebx
push 1
push edi
lea ecx, [ebp + 0xc]
call fcn.00416ef9
push eax
call fcn.007a6e6e
add esp, 0x10
push esi
lea ecx, [ebp + 0xc]
mov edi, eax
call fcn.00416fa4
cmp edi, ebx
jne 0xa14b08
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0xe2
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
call fcn.0099fcc2
add esp, 0x14
jmp 0xa14a6f
mov ecx, dword [ebp + 0xc]
cmp ecx, ebx
mov eax, dword [0xbe7b74]
jne 0xa14b16
mov ecx, eax
cmp dword [ebp + 8], ebx
je 0xa14b1e
mov eax, dword [ebp + 8]
push ecx
push eax
call fcn.00a7be70
test eax, eax
pop ecx
pop ecx
je 0xa14c48
mov ecx, dword [ebp - 0x48]
cmp ecx, ebx
mov eax, dword [0xbe7b74]
jne 0xa14b3d
mov ecx, eax
cmp dword [ebp + 0xc], ebx
je 0xa14b45
mov eax, dword [ebp + 0xc]
push ecx
push eax
call fcn.00a70a20
test eax, eax
pop ecx
pop ecx
je 0xa14c48
mov dword [ebp + 0x10], ebx
lea eax, [ebp - 0x60]
push 0x29f
push eax
mov byte [ebp - 4], 0x28
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push dword [ebp + 0xc]
mov eax, dword [eax]
push eax
lea eax, [ebp + 0x10]
push eax
mov byte [ebp - 4], 0x29
call fcn.0044549c
mov eax, dword [ebp - 0x60]
add esp, 0xc
cmp eax, ebx
mov byte [ebp - 4], 0x28
je 0xa14b9d
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
push ebx
push ebx
push ebx
push ebx
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.00429460
call fcn.0099fdd3
add esp, 0x14
cmp eax, 6
je 0xa14bdb
mov eax, dword [ebp + 0x10]
cmp eax, ebx
mov byte [ebp - 4], 0x27
je 0xa14a6f
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
jmp 0xa14a6f
push ecx
mov ecx, esp
lea eax, [ebp + 0xc]
mov dword [ebp - 0x34], esp
push eax
mov dword [ecx], ebx
call fcn.00418f94
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
mov eax, dword [ebp + 0x10]
cmp eax, ebx
mov byte [ebp - 4], 0x27
je 0xa14c09
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp + 0xc]
cmp eax, ebx
mov byte [ebp - 4], 0x25
je 0xa14c1e
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x23
call fcn.00429c31
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 1
cmp eax, ebx
je case.0xa13d98.62
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
jmp case.0xa13d98.62
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0x29e
jmp 0xa14aee
cmp dword [0xbd9020], ebx
je 0xa14c96
lea eax, [ebp - 0xa0]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x2a
call fcn.00490191
mov eax, dword [ebp - 0xa0]
pop ecx
pop ecx
mov byte [ebp - 4], 1
jmp 0xa14f95
mov ecx, dword [0xbd8fe8]
push esi
lea eax, [ebp + 0xc]
push eax
call fcn.0060f2ef
cmp dword [ebp + 0xc], ebx
mov byte [ebp - 4], 0x2b
jne 0xa14cb7
lea ecx, [ebp + 0xc]
jmp 0xa15182
mov ecx, dword [ebp - 0x50]
call fcn.00a1a992
xor edx, edx
mov ecx, 0x3e8
div ecx
cmp eax, 0xde2b0
jne 0xa14d0d
mov ecx, dword [ebp - 0x50]
call fcn.00a1a992
cmp eax, 0x363d7f80
je 0xa14d0d
lea eax, [ebp - 0x68]
push 0xd29
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x2c
call fcn.00490191
mov eax, dword [ebp - 0x68]
pop ecx
pop ecx
mov byte [ebp - 4], 0x2b
jmp 0xa14eca
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp + 0x10], ebx
push 0xa8
mov ecx, 0xbe1de0
mov byte [ebp - 4], 0x2f
call fcn.00402d66
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x30
je 0xa14d3e
push esi
mov ecx, eax
call fcn.007f0e0b
jmp 0xa14d40
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x2f
call fcn.00a1e40e
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 0x31
call fcn.004fd4ac
push 1
pop esi
cmp eax, esi
jne 0xa14e8d
mov ecx, dword [ebp - 0x10]
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.007f1406
lea ecx, [ebp - 0x14]
call fcn.00a1e42b
push 0xa
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x4c]
call fcn.004d9ab4
lea ecx, [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x70]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x32
call fcn.00472c4f
push 0xa
lea ecx, [ebp - 0xa8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x33
call fcn.004d9ab4
lea ecx, [ebp + 0x10]
push ecx
lea ecx, [ebp + 8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.00472c4f
mov eax, dword [ebp - 0xa8]
cmp eax, ebx
mov byte [ebp - 4], 0x38
je 0xa14df9
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp - 0x70]
cmp eax, ebx
mov byte [ebp - 4], 0x37
je 0xa14e0e
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp - 0xb0]
cmp eax, ebx
mov byte [ebp - 4], 0x36
je 0xa14e26
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 8]
call fcn.00416ef9
push eax
call fcn.007a6e6e
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 8]
mov esi, eax
call fcn.00416fa4
cmp esi, ebx
jne 0xa14ee1
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0xe2
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
call fcn.0099fcc2
mov eax, dword [ebp + 8]
add esp, 0x14
cmp eax, ebx
mov byte [ebp - 4], 0x31
je 0xa14e8d
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x2f
call fcn.00a1e42b
mov eax, dword [ebp + 0x10]
cmp eax, ebx
mov byte [ebp - 4], 0x2e
je 0xa14eae
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
mov byte [ebp - 4], 0x2d
je 0xa14ec3
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x2b
cmp eax, ebx
je 0xa14caf
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
jmp 0xa14caf
push ecx
mov ecx, esp
lea eax, [ebp + 8]
mov dword [ebp - 0x34], esp
push eax
mov dword [ecx], ebx
call fcn.00418f94
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
mov eax, dword [ebp + 8]
cmp eax, ebx
mov byte [ebp - 4], 0x31
je 0xa14f0f
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x2f
call fcn.00a1e42b
mov eax, dword [ebp + 0x10]
cmp eax, ebx
mov byte [ebp - 4], 0x2e
je 0xa14f30
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
mov byte [ebp - 4], 0x2d
je 0xa14f45
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp - 0x4c]
cmp eax, ebx
mov byte [ebp - 4], 0x2b
je 0xa14f5a
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
jmp 0xa1512a
cmp dword [0xbd9020], ebx
je 0xa14fac
lea eax, [ebp - 0x78]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x39
call fcn.00490191
mov eax, dword [ebp - 0x78]
pop ecx
pop ecx
mov byte [ebp - 4], 1
cmp eax, ebx
je 0xa15187
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
jmp 0xa15187
mov ecx, dword [0xbd8fe8]
push esi
lea eax, [ebp + 0xc]
push eax
call fcn.0060f2ef
cmp dword [ebp + 0xc], ebx
mov byte [ebp - 4], 0x3a
jne 0xa14fcd
lea ecx, [ebp + 0xc]
jmp 0xa15182
push 0x69c
mov ecx, 0xbe1de0
call fcn.00402d66
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x3b
je 0xa14ff0
mov ecx, eax
call fcn.009af38b
jmp 0xa14ff2
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3a
call fcn.00429c14
mov dword [ebp + 8], ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x820
push eax
mov byte [ebp - 4], 0x3d
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x3d
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
mov esi, eax
lea eax, [ebp - 0xb8]
push 0x2a0
push eax
mov byte [ebp - 4], 0x3f
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
mov edi, eax
push esi
mov byte [ebp - 4], 0x40
call fcn.00415344
pop ecx
pop ecx
push eax
mov ecx, edi
call fcn.00429475
push eax
lea eax, [ebp + 8]
push eax
call fcn.0044549c
mov eax, dword [ebp - 0xb8]
add esp, 0xc
cmp eax, ebx
mov byte [ebp - 4], 0x3f
je 0xa150a8
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea eax, [ebp - 0x190]
push eax
mov byte [ebp - 4], 0x3d
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0xa150c3
push eax
call fcn.00a6ef01
push ebx
push ebx
push ebx
push ebx
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00429460
call fcn.0099fdd3
add esp, 0x14
cmp eax, 6
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 0x3c
je 0xa15109
cmp eax, ebx
je 0xa150f8
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3a
call fcn.00429c31
jmp 0xa14fc5
cmp eax, ebx
je 0xa15117
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3a
call fcn.00429c31
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.004027e9
jmp case.0xa13d98.62
cmp dword [edi + 0x20], ebx
jne 0xa15144
mov ecx, edi
call fcn.00a174e5
test eax, eax
je 0xa1516a
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x15b8
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
call fcn.0099fcc2
add esp, 0x14
jmp 0xa15187
mov ecx, dword [0xbd8fe8]
push esi
lea eax, [ebp + 0xc]
push eax
call fcn.0060f2ef
cmp dword [ebp + 0xc], ebx
jne 0xa151b0
lea ecx, [ebp + 0xc]
call fcn.004027e9
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call fcn.00429f38
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x14]
cmp eax, ebx
je 0xa1738d
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
jmp 0xa1738d
mov dword [ebp + 8], ebx
lea eax, [ebp - 0x88]
push 0x50d
push eax
mov byte [ebp - 4], 0x42
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
mov ecx, dword [eax]
cmp ecx, ebx
mov byte [ebp - 4], 0x43
je 0xa151e0
call fcn.0040b439
jmp 0xa151e2
xor eax, eax
mov ecx, dword [0xbd8fe8]
push eax
push esi
lea eax, [ebp - 0xc0]
push eax
call fcn.006031fe
mov esi, eax
lea eax, [ebp - 0x80]
push 0x151
push eax
mov byte [ebp - 4], 0x44
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push dword [esi]
mov eax, dword [eax]
push eax
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x45
call fcn.0044549c
mov eax, dword [ebp - 0x80]
add esp, 0xc
cmp eax, ebx
mov byte [ebp - 4], 0x44
je 0xa1523b
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp - 0xc0]
cmp eax, ebx
mov byte [ebp - 4], 0x43
je 0xa15253
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x42
call fcn.00402fa4
push ebx
push ebx
push ebx
push ebx
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.00429460
call fcn.0099fdd3
add esp, 0x14
cmp eax, 6
je 0xa152af
mov eax, dword [ebp + 8]
cmp eax, ebx
mov byte [ebp - 4], 0x41
je 0xa15297
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp + 0xc]
call fcn.004027e9
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call fcn.00496524
jmp 0xa17381
push 0xffffffffffffffff
push 0xbdd488
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0x654
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x42
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x47
call fcn.00443ece
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00a1fd1a
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x49
call fcn.00403ab5
mov esi, 0xbe7330
push esi
lea ecx, [ebp - 0x140]
call fcn.00427dba
push esi
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x4a
call fcn.00427dba
push ebx
push ebx
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x4b
call fcn.00414b5f
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.0040339f
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 4], 0x4b
call fcn.00406548
mov ecx, eax
call fcn.00402680
mov ecx, eax
call fcn.00404a75
mov ecx, eax
mov byte [ebp - 4], 0x4d
call fcn.004032b2
mov dword [ebp - 0xc8], eax
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp + 0x10]
call fcn.00a1fd33
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x51
call fcn.00403ab5
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x50
call fcn.00403ab5
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x4f
call fcn.00403ab5
lea ecx, [ebp + 0x10]
call fcn.00a1ceae
mov ecx, eax
call fcn.00a174a9
push eax
lea ecx, [ebp - 0x28]
call fcn.0040667c
lea ecx, [ebp + 0x10]
call fcn.00444885
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x42
call fcn.0040265e
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x41
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
jmp 0xa171de
call fcn.00a1d7ed
test eax, eax
je 0xa1543f
lea eax, [ebp - 0x90]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x52
call fcn.00490191
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x90]
jmp 0xa1708d
lea eax, [ebp + 0xc]
push esi
push eax
call fcn.0042950d
mov ecx, eax
call fcn.0060f2ef
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x53
call fcn.004149f1
test al, al
je 0xa15469
lea ecx, [ebp + 0xc]
jmp 0xa171bc
mov ecx, dword [ebp - 0x50]
lea eax, [ebp - 0x120]
push eax
call fcn.00426f51
mov ecx, eax
mov byte [ebp - 4], 0x54
call fcn.004297a2
lea ecx, [ebp - 0x120]
mov esi, eax
mov byte [ebp - 4], 0x53
call fcn.0042978c
mov ecx, esi
call fcn.008dcda1
movsx eax, ax
push eax
call fcn.00a174d0
test eax, eax
pop ecx
jl 0xa15461
mov ecx, esi
call fcn.008dcda1
movsx eax, ax
push eax
call fcn.00a174d0
cmp eax, 9
pop ecx
jge 0xa15461
mov esi, 0xb4
push esi
mov dword [ebp + 8], ebx
mov dword [ebp + 0x10], ebx
call fcn.00402603
pop ecx
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x55
je 0xa154e5
mov ecx, eax
call fcn.00a17944
jmp 0xa154e7
xor eax, eax
push 1
pop edi
push edi
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x53
call fcn.00a1dae7
push ebx
push ebx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x56
call fcn.00a1db19
mov ecx, eax
call fcn.00a1799f
lea ecx, [ebp - 0x30]
call fcn.00a1db19
mov ecx, eax
call fcn.00a179b6
lea ecx, [ebp - 0x30]
call fcn.00a1db19
mov ecx, eax
call fcn.004fd4ac
cmp eax, edi
je 0xa15540
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x53
call fcn.00a1dae2
jmp 0xa15461
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x30]
call fcn.00a1db19
mov ecx, eax
call fcn.00a17a5a
push esi
call fcn.00402603
pop ecx
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x57
je 0xa15572
mov ecx, eax
call fcn.00a17944
jmp 0xa15574
xor eax, eax
push edi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x56
call fcn.00a1dae7
push ebx
push dword [ebp + 8]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x58
call fcn.00a1db19
mov ecx, eax
call fcn.00a1799f
lea ecx, [ebp - 0x14]
call fcn.00a1db19
mov ecx, eax
call fcn.00a179b6
lea ecx, [ebp - 0x14]
call fcn.00a1db19
mov ecx, eax
call fcn.004fd4ac
cmp eax, edi
jne 0xa1564c
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00a1db19
mov ecx, eax
call fcn.00a17a5a
push 0x94
call fcn.00402603
pop ecx
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x59
je 0xa155f5
mov ecx, eax
call fcn.00a17b37
jmp 0xa155f7
xor eax, eax
push edi
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x58
call fcn.00a1db22
push dword [ebp + 0x10]
lea ecx, [ebp - 0x44]
push dword [ebp + 8]
mov byte [ebp - 4], 0x5a
call fcn.00a1db54
mov ecx, eax
call fcn.00a17b68
lea ecx, [ebp - 0x44]
call fcn.00a1db54
mov ecx, eax
call fcn.00a17b7f
lea ecx, [ebp - 0x44]
call fcn.00a1db54
mov ecx, eax
call fcn.004fd4ac
cmp eax, edi
je 0xa1565d
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x58
call fcn.00a1db1d
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x56
call fcn.00a1dae2
jmp 0xa1552f
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x44]
call fcn.00a1db54
mov ecx, eax
call fcn.00a17bcd
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
call fcn.0040667c
push dword [ebp + 8]
lea ecx, [ebp - 0x28]
call fcn.0040667c
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x58
call fcn.00a1db1d
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x56
call fcn.00a1dae2
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x53
call fcn.00a1dae2
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
jmp 0xa171de
call fcn.00a1d7ed
test eax, eax
je 0xa156f5
lea eax, [ebp - 0xd0]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x5b
call fcn.00490191
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd0]
jmp 0xa1708d
lea eax, [ebp + 0xc]
push esi
push eax
call fcn.0042950d
mov ecx, eax
call fcn.0060f2ef
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x5c
call fcn.004149f1
test al, al
je 0xa1571f
lea ecx, [ebp + 0xc]
jmp 0xa171bc
mov ecx, dword [ebp - 0x50]
lea eax, [ebp - 0xf8]
push eax
call fcn.00426f51
mov ecx, eax
mov byte [ebp - 4], 0x5d
call fcn.004297a2
lea ecx, [ebp - 0xf8]
mov edi, eax
mov byte [ebp - 4], 0x5c
call fcn.0042978c
mov ecx, edi
call fcn.008dcda1
movsx eax, ax
push eax
call fcn.00a174d0
cmp eax, 1
pop ecx
jl 0xa15717
mov ecx, edi
call fcn.008dcda1
movsx eax, ax
push eax
call fcn.00a174d0
cmp eax, 9
pop ecx
jge 0xa15717
mov eax, esi
push 0xa
cdq
pop ecx
idiv ecx
mov ecx, edi
mov dword [ebp + 0x10], ebx
mov dword [ebp + 8], ebx
mov esi, edx
dec esi
call fcn.008dcda1
movsx eax, ax
push eax
call fcn.004ace1d
pop ecx
lea ecx, [esi + 1]
cmp eax, ecx
jl 0xa15717
push 0xcc
call fcn.00402603
pop ecx
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x5e
je 0xa157c2
mov ecx, eax
call fcn.00a17c8e
jmp 0xa157c4
xor eax, eax
push 1
pop edi
push edi
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x5c
call fcn.00a1db5d
push esi
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x5f
call fcn.00a1db8f
mov ecx, eax
call fcn.00a17d84
lea ecx, [ebp - 0x30]
call fcn.00a1db8f
mov ecx, eax
call fcn.00a17d10
lea ecx, [ebp - 0x30]
call fcn.00a1db8f
mov ecx, eax
call fcn.004fd4ac
cmp eax, edi
je 0xa1581c
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x5c
call fcn.00a1db58
jmp 0xa15717
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x30]
call fcn.00a1db8f
mov ecx, eax
call fcn.00a17d75
push 0xc4
call fcn.00402603
pop ecx
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x60
je 0xa1584e
mov ecx, eax
call fcn.00a17e50
jmp 0xa15850
xor eax, eax
push edi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x5f
call fcn.00a1db98
push esi
push dword [ebp + 8]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x61
call fcn.00a1dbca
mov ecx, eax
call fcn.00a17f45
lea ecx, [ebp - 0x14]
call fcn.00a1dbca
mov ecx, eax
call fcn.00a17ecc
lea ecx, [ebp - 0x14]
call fcn.00a1dbca
mov ecx, eax
call fcn.004fd4ac
cmp eax, edi
jne 0xa15924
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp - 0x14]
call fcn.00a1dbca
mov ecx, eax
call fcn.00a17f36
push 0x98
call fcn.00402603
pop ecx
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x62
je 0xa158cd
mov ecx, eax
call fcn.00a1800c
jmp 0xa158cf
xor eax, eax
push edi
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x61
call fcn.00a1dbd3
push dword [ebp + 0x10]
lea ecx, [ebp - 0x44]
push dword [ebp + 8]
mov byte [ebp - 4], 0x63
call fcn.00a1dc05
mov ecx, eax
call fcn.00a1807e
lea ecx, [ebp - 0x44]
call fcn.00a1dc05
mov ecx, eax
call fcn.00a18095
lea ecx, [ebp - 0x44]
call fcn.00a1dc05
mov ecx, eax
call fcn.004fd4ac
cmp eax, edi
je 0xa15935
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x61
call fcn.00a1dbce
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x5f
call fcn.00a1db93
jmp 0xa1580b
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x44]
call fcn.00a1dc05
mov ecx, eax
call fcn.00a18063
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
call fcn.0040667c
push dword [ebp + 8]
lea ecx, [ebp - 0x28]
call fcn.0040667c
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x61
call fcn.00a1dbce
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x5f
call fcn.00a1db93
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x5c
call fcn.00a1db58
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
jmp 0xa171de
call fcn.00429825
mov ecx, eax
call fcn.00a1748b
test eax, eax
je 0xa159d7
lea eax, [ebp - 0xd8]
push 0x1293
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x64
call fcn.00490191
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd8]
jmp 0xa1708d
push esi
call fcn.00a178f4
test eax, eax
pop ecx
je 0xa159f6
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x13e3
jmp 0xa17307
push esi
call fcn.00a178dd
test eax, eax
pop ecx
jne case.0xa13d98.62
mov eax, esi
cdq
mov ecx, 0x3e8
idiv ecx
xor ecx, ecx
cmp eax, 0x13b0
setne cl
mov eax, ecx
lea ecx, [ebp + 0x14]
push ecx
mov ecx, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00a13b08
test eax, eax
jne case.0xa13d98.62
jmp case.0xa13d98.36
push dword [ebp + 0x10]
jmp 0xa172de
lea eax, [ebp + 0xc]
push esi
push eax
call fcn.0042950d
mov ecx, eax
call fcn.0060f2ef
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x65
call fcn.004149f1
test al, al
je 0xa15a6b
lea ecx, [ebp + 0xc]
jmp 0xa171bc
call fcn.00a1d7ed
test eax, eax
je 0xa15aa8
lea eax, [ebp - 0x9c]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x66
call fcn.00490191
pop ecx
pop ecx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x65
call fcn.004063b5
jmp 0xa15a63
push 1
pop esi
push esi
call fcn.00a1d8d0
push eax
lea ecx, [ebp - 0x14]
call fcn.00a1d145
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x67
call fcn.00a1d177
test eax, eax
je 0xa15b58
push 0x598
call fcn.00402603
pop ecx
mov dword [ebp + 8], eax
cmp eax, ebx
mov byte [ebp - 4], 0x68
je 0xa15b40
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x1403
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x68
push 0x9ecb2be8
dec dword [ebx - 0x204f1738]
sahf
dec dword [ecx - 0x39af478b]
inc ebp
cld
push 0xffffffffffffffe8
and al, bh
lahf
call [ecx + 0x59]
push eax
sub esp, 0x10
lea eax, [ebp - 0x28]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0050047e
mov ecx, dword [ebp + 8]
call fcn.0083aa6e
test byte [ebp - 0x48], 1
mov dword [ebp - 4], 0x67
je 0xa15b58
lea ecx, [ebp - 0x160]
call fcn.00403ab5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x65
call fcn.00504809
jmp 0xa15a63
call fcn.00a1d7ed
test eax, eax
je 0xa15ba4
lea eax, [ebp - 0xbc]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x6c
call fcn.00490191
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xbc]
jmp 0xa1708d
push 1
call fcn.00a1d8d0
push eax
lea ecx, [ebp - 0x14]
call fcn.00a1d145
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x6d
call fcn.00a1d177
test eax, eax
je 0xa15bf6
push 0x58c
call fcn.00402603
pop ecx
mov dword [ebp + 0xc], eax
cmp eax, ebx
mov byte [ebp - 4], 0x6e
je 0xa15bf6
push ebx
push ebx
push ebx
sub esp, 0x10
lea eax, [ebp - 0x28]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0050047e
mov ecx, dword [ebp + 0xc]
call fcn.0082b798
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00504809
jmp case.0xa13d98.36
lea eax, [ebp + 0x10]
push esi
push eax
call fcn.0042950d
mov ecx, eax
call fcn.0060f2ef
push ebx
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x6f
call fcn.004149f1
test al, al
je 0xa15c31
lea ecx, [ebp + 0x10]
jmp 0xa171bc
lea eax, [ebp - 0x48]
push eax
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.00429411
mov byte [ebp - 4], 0x6f
call fcn.0042950d
mov ecx, eax
call fcn.00604676
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x118]
push eax
call fcn.00429825
mov ecx, eax
call fcn.00426f51
push 5
mov ecx, eax
mov byte [ebp - 4], 0x71
call fcn.009b861a
mov ecx, eax
call fcn.0053eadc
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0x6f
call fcn.0042978c
lea eax, [ebp - 0x108]
push eax
call fcn.00429825
mov ecx, eax
call fcn.00426f51
mov ecx, eax
mov byte [ebp - 4], 0x72
call fcn.004297a2
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0x6f
call fcn.0042978c
lea ecx, [ebp + 8]
call fcn.00a1dc09
push 1
pop eax
cmp dword [ebp - 0x34], eax
mov byte [ebp - 4], 0x73
mov dword [ebp - 0x4c], eax
jl 0xa15e2f
push dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x40]
push 5
lea eax, [ebp - 0x30]
push eax
call fcn.004296b0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x74
call fcn.00a1cec4
test eax, eax
jne 0xa15d1a
lea ecx, [ebp - 0x30]
call fcn.00429493
mov ecx, eax
add ecx, 0xc
call fcn.00429478
push eax
call fcn.00a17922
cmp eax, 8
pop ecx
je 0xa15d2b
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x73
call fcn.0042947d
jmp 0xa15e20
push dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x40]
push 5
lea eax, [ebp - 0xf0]
push eax
call fcn.004296b0
mov ecx, eax
mov byte [ebp - 4], 0x75
call fcn.00548152
push eax
call fcn.00a17538
pop ecx
lea ecx, [ebp - 0xf0]
mov esi, eax
mov byte [ebp - 4], 0x74
call fcn.0042947d
cmp esi, ebx
je 0xa15e11
cmp dword [ebp - 0x48], ebx
je 0xa15d87
mov ecx, esi
call fcn.00a17529
movzx ecx, word [ebp - 0x54]
test ecx, eax
jne 0xa15e11
cmp dword [ebp - 0x48], ebx
jne 0xa15d98
movzx edi, word [ebp - 0x54]
mov ecx, esi
call fcn.00a17529
and eax, edi
cmp eax, edi
jne 0xa15e11
mov ecx, esi
call fcn.00a17529
cmp dword [ebp - 0x48], ebx
je 0xa15da9
or eax, dword [ebp - 0x54]
jmp 0xa15db0
mov ecx, dword [ebp - 0x54]
not ecx
and eax, ecx
test al, 0x14
je 0xa15db8
test al, 1
je 0xa15e11
test al, 2
je 0xa15dc0
test al, 4
je 0xa15e11
mov ecx, esi
call fcn.004f36da
test eax, eax
jne 0xa15e11
lea ecx, [esi + 0xc]
call fcn.00429478
push eax
call fcn.007144c5
cmp dword [eax + 0x44], ebx
pop ecx
jne 0xa15e11
push 1
push esi
lea ecx, [ebp - 0xe0]
call fcn.00a1ced2
push 0xffffffffffffffff
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x76
call fcn.00a1dc22
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x74
call fcn.00504766
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x73
call fcn.0042947d
mov esi, dword [ebp + 0xc]
inc dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x34]
jle 0xa15cdb
lea ecx, [ebp + 8]
call fcn.00a1dc0f
test eax, eax
jne 0xa15f58
push 0x69c
call fcn.00402603
pop ecx
mov dword [ebp + 0xc], eax
cmp eax, ebx
mov byte [ebp - 4], 0x77
je 0xa15e5e
mov ecx, eax
call fcn.009af38b
jmp 0xa15e60
xor eax, eax
push 1
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x73
call fcn.00a1d89e
lea eax, [ebp - 0x3c]
push esi
push eax
mov byte [ebp - 4], 0x78
call fcn.0042950d
mov ecx, eax
call fcn.0060313e
lea eax, [ebp - 0xa4]
push 0xcf2
push eax
mov byte [ebp - 4], 0x79
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x7a
call fcn.0045b2cf
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x79
call fcn.004063b5
push ebx
push ebx
push ecx
lea eax, [ebp - 0x3c]
mov ecx, esp
mov dword [ebp + 0xc], esp
push eax
call fcn.00429460
push 0x897b50
push 6
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x79
call fcn.00429875
mov ecx, eax
call fcn.009b796b
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00429875
mov ecx, eax
call fcn.009b7f25
lea ecx, [ebp - 0x14]
call fcn.00429875
mov ecx, eax
call fcn.009aff86
lea ecx, [ebp - 0x14]
call fcn.00429875
mov ecx, eax
call fcn.004fd4ac
cmp eax, 1
jne 0xa15f40
lea ecx, [ebp - 0x14]
call fcn.00429875
mov ecx, eax
call fcn.00a17498
push eax
lea ecx, [ebp + 8]
call fcn.00a1fd5f
mov ecx, eax
call fcn.00a1cef7
cmp eax, ebx
jne 0xa15f69
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x78
call fcn.004063b5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x73
call fcn.00429870
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x6f
call fcn.0075464b
jmp 0xa15c29
push 8
add eax, 0x18
push eax
lea ecx, [ebp - 0x28]
call fcn.0046b7f8
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x78
call fcn.004063b5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x73
call fcn.00429870
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x6f
call fcn.0075464b
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x10]
jmp 0xa171de
mov ecx, dword [ebp - 0x50]
lea eax, [ebp - 0x28]
push eax
call fcn.00a1390c
jmp case.0xa13d98.36
call fcn.0054828b
mov ecx, eax
call fcn.00a1749f
test eax, eax
jne case.0xa13d98.62
lea eax, [ebp - 0x58]
push 0xda0
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x7c
call fcn.00490191
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
jmp 0xa1708d
call fcn.0054828b
cmp eax, ebx
mov dword [ebp - 0x34], eax
je case.0xa13d98.36
lea eax, [ebp + 0x10]
push esi
push eax
call fcn.0042950d
mov ecx, eax
call fcn.0060313e
push ebx
push 1
push ebx
push ebx
lea eax, [ebp - 0xc4]
push 0xd9d
push eax
mov byte [ebp - 4], 0x7d
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
mov esi, eax
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x7e
call fcn.004aded2
mov edi, eax
push dword [ebp + 0x10]
mov ecx, esi
mov byte [ebp - 4], 0x7f
call fcn.00429475
push eax
push edi
call fcn.0044549c
pop ecx
pop ecx
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.00429460
call fcn.0099fdd3
add esp, 0x14
cmp eax, 6
lea ecx, [ebp - 0xac]
setne byte [ebp + 0xb]
mov byte [ebp - 4], 0x7e
call fcn.004063b5
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x7d
call fcn.004063b5
cmp byte [ebp + 0xb], bl
je 0xa160b0
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x10]
jmp 0xa1708d
mov eax, dword [ebp - 0x34]
lea ecx, [eax + 0x88]
call fcn.0074b00f
mov eax, dword [eax + 0x11]
cdq
push 0x64
pop ecx
idiv ecx
push 0xa
pop ecx
push 0xa
pop esi
cdq
idiv ecx
mov eax, dword [ebp + 0xc]
mov ecx, edx
cdq
idiv esi
cmp ecx, edx
jne 0xa16102
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0xd9f
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
call fcn.0099fcc2
add esp, 0x14
jmp 0xa160a4
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x10]
jmp 0xa16c04
call fcn.00a1d7ed
test eax, eax
je case.0xa13d98.62
lea eax, [ebp - 0xb4]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x80
call fcn.00490191
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb4]
jmp 0xa1708d
call fcn.00a1d7ed
test eax, eax
je 0xa16188
lea eax, [ebp - 0x94]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0x81
call fcn.00490191
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x94]
jmp 0xa1708d
mov ecx, edi
call fcn.00a174e5
test eax, eax
je 0xa161a7
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0x15b8
jmp 0xa17307
lea ecx, [ebp + 8]
call fcn.004aded2
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x82
call fcn.004aded2
push 0xe4
mov byte [ebp - 4], 0x83
call fcn.00402603
pop ecx
mov dword [ebp - 0x3c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x84
je 0xa161de
mov ecx, eax
call fcn.00a1817a
jmp 0xa161e0
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x83
call fcn.00a1dc3e
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x85
call fcn.00a1dc70
mov ecx, eax
call fcn.004fd4ac
cmp eax, esi
je 0xa1622c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x83
call fcn.00a1dc39
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x82
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa1708d
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00a1dc70
mov ecx, eax
call fcn.008e9537
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
call fcn.004291b3
push dword [ebp - 0x34]
lea ecx, [ebp - 0x28]
call fcn.0040661f
push dword [ebp - 0x40]
lea ecx, [ebp - 0x28]
call fcn.0040661f
push dword [ebp - 0x48]
lea ecx, [ebp - 0x28]
call fcn.004291b3
push dword [ebp - 0x54]
lea ecx, [ebp - 0x28]
call fcn.0040661f
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x28]
call fcn.0040661f
push 0x14c
call fcn.00402603
pop ecx
mov dword [ebp - 0x3c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x86
je 0xa162ee
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00a182d9
jmp 0xa162f0
xor eax, eax
push esi
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x85
call fcn.00a1dc79
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x87
call fcn.00a1dcab
mov ecx, eax
call fcn.004fd4ac
cmp eax, esi
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x30]
je 0xa16326
call fcn.00a1dc74
jmp 0xa16208
call fcn.00a1dc74
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x83
call fcn.00a1dc39
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x82
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa16c04
lea ecx, [ebp + 8]
call fcn.004aded2
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x88
call fcn.004aded2
push 0xb8
mov byte [ebp - 4], 0x89
call fcn.00402603
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x8a
je 0xa16389
push ebx
push ebx
push ebx
mov ecx, eax
call fcn.008026a1
jmp 0xa1638b
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x89
call fcn.005482d3
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x8b
call fcn.00548305
mov ecx, eax
call fcn.004fd4ac
cmp eax, esi
je 0xa163d7
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x89
call fcn.005482ce
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x88
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa1708d
call fcn.005482a3
mov ecx, eax
call fcn.0066284c
test eax, eax
je 0xa163b3
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00548305
mov ecx, eax
call fcn.0080334c
push ebx
lea ecx, [ebp - 0x14]
call fcn.00548309
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00416ef9
push eax
call fcn.007a6e6e
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00416fa4
lea ecx, [ebp + 0xc]
call fcn.00429475
test eax, eax
je 0xa16441
cmp esi, ebx
je 0xa163b3
call fcn.00429825
lea ecx, [ebp + 8]
call fcn.00548085
neg eax
sbb al, al
and al, 0xfe
add al, 3
mov byte [ebp + 0x10], al
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
call fcn.0040661f
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x89
call fcn.005482ce
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x88
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa16c04
lea ecx, [ebp + 8]
call fcn.004aded2
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x8c
call fcn.004aded2
push 0xb8
mov byte [ebp - 4], 0x8d
call fcn.00402603
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x8e
je 0xa164f1
push ebx
push 1
push ebx
mov ecx, eax
call fcn.008026a1
jmp 0xa164f3
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x8d
call fcn.005482d3
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x8f
call fcn.00548305
mov ecx, eax
call fcn.004fd4ac
cmp eax, esi
je 0xa1653f
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x8d
call fcn.005482ce
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x8c
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa1708d
call fcn.005482a3
mov ecx, eax
call fcn.0066284c
test eax, eax
je 0xa1651b
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00548305
mov ecx, eax
call fcn.0080334c
push ebx
lea ecx, [ebp - 0x14]
call fcn.00548309
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00416ef9
push eax
call fcn.007a6e6e
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00416fa4
lea ecx, [ebp + 0xc]
call fcn.00429475
test eax, eax
je 0xa165a9
cmp esi, ebx
je 0xa1651b
call fcn.00429825
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x8d
call fcn.005482ce
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x8c
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa16c04
lea ecx, [ebp + 8]
call fcn.004aded2
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x90
call fcn.004aded2
push 0xb8
mov byte [ebp - 4], 0x91
call fcn.00402603
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x92
je 0xa16624
push ebx
push 2
push ebx
mov ecx, eax
call fcn.008026a1
jmp 0xa16626
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x91
call fcn.005482d3
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x93
call fcn.00548305
mov ecx, eax
call fcn.004fd4ac
cmp eax, esi
je 0xa16672
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x91
call fcn.005482ce
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x90
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa1708d
call fcn.005482a3
mov ecx, eax
call fcn.0066284c
test eax, eax
je 0xa1664e
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00548305
mov ecx, eax
call fcn.0080334c
push ebx
lea ecx, [ebp - 0x14]
call fcn.00548309
lea ecx, [ebp + 8]
call fcn.00548085
test eax, eax
je 0xa166f3
lea eax, [ebp + 0x10]
push 0x1027
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push ebx
push esi
push ebx
push ebx
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
mov byte [ebp - 4], 0x94
call fcn.00429460
call fcn.0099fcc2
add esp, 0x14
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x93
call fcn.004063b5
jmp 0xa1664e
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00416ef9
push eax
call fcn.007a6e6e
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00416fa4
lea ecx, [ebp + 0xc]
call fcn.00429475
test eax, eax
je 0xa1672d
cmp esi, ebx
je 0xa1664e
call fcn.00429825
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x91
call fcn.005482ce
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x90
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa16c04
lea ecx, [ebp + 8]
call fcn.004aded2
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x95
call fcn.004aded2
push 0xb8
mov byte [ebp - 4], 0x96
call fcn.00402603
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x97
je 0xa167bf
push 1
push ebx
push ebx
mov ecx, eax
call fcn.008026a1
jmp 0xa167c1
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x96
call fcn.005482d3
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x98
call fcn.00548305
mov ecx, eax
call fcn.004fd4ac
cmp eax, esi
je 0xa1680d
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x96
call fcn.005482ce
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x95
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa1708d
call fcn.005482a3
mov ecx, eax
call fcn.0066284c
test eax, eax
je 0xa167e9
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00548305
mov ecx, eax
call fcn.0080334c
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00416ef9
push eax
call fcn.007a6e6e
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00416fa4
lea ecx, [ebp + 0xc]
call fcn.00429475
test eax, eax
je 0xa1686e
cmp esi, ebx
je 0xa167e9
call fcn.00429825
lea ecx, [ebp + 8]
call fcn.00548085
neg eax
sbb al, al
and al, 0xfe
add al, 3
lea ecx, [ebp - 0x14]
mov byte [ebp + 0x10], al
call fcn.00548305
mov ecx, eax
call fcn.0080344a
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.0040661f
push esi
lea ecx, [ebp - 0x28]
call fcn.0040661f
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
push ebx
lea ecx, [ebp - 0x14]
call fcn.00548309
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x96
call fcn.005482ce
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x95
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa16c04
lea ecx, [ebp + 8]
call fcn.004aded2
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x99
call fcn.004aded2
push 0xb8
mov byte [ebp - 4], 0x9a
call fcn.00402603
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x9b
je 0xa16943
push 1
pop esi
push esi
push esi
push ebx
mov ecx, eax
call fcn.008026a1
jmp 0xa16948
push 1
xor eax, eax
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x9a
call fcn.005482d3
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x9c
call fcn.00548305
mov ecx, eax
call fcn.004fd4ac
cmp eax, esi
je 0xa16991
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x9a
call fcn.005482ce
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x99
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa1708d
call fcn.005482a3
mov ecx, eax
call fcn.0066284c
test eax, eax
je 0xa1696d
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00548305
mov ecx, eax
call fcn.0080334c
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00416ef9
push eax
call fcn.007a6e6e
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00416fa4
lea ecx, [ebp + 0xc]
call fcn.00429475
test eax, eax
je 0xa169f2
cmp esi, ebx
je 0xa1696d
call fcn.00429825
lea ecx, [ebp - 0x14]
call fcn.00548305
mov ecx, eax
call fcn.0080344a
push eax
lea ecx, [ebp - 0x28]
call fcn.0040661f
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
push ebx
lea ecx, [ebp - 0x14]
call fcn.00548309
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x9a
call fcn.005482ce
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x99
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa16c04
lea ecx, [ebp + 8]
call fcn.004aded2
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x9d
call fcn.004aded2
push 0xb8
mov byte [ebp - 4], 0x9e
call fcn.00402603
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x9f
je 0xa16a91
push 1
pop esi
push esi
push 2
push ebx
mov ecx, eax
call fcn.008026a1
jmp 0xa16a96
push 1
xor eax, eax
pop esi
push esi
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x9e
call fcn.005482d3
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xa0
call fcn.00548305
mov ecx, eax
call fcn.004fd4ac
cmp eax, esi
je 0xa16adf
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x9e
call fcn.005482ce
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x9d
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xa1708d
call fcn.005482a3
mov ecx, eax
call fcn.0066284c
test eax, eax
je 0xa16abb
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x30]
call fcn.00548305
mov ecx, eax
call fcn.0080334c
lea ecx, [ebp + 8]
call fcn.00548085
test eax, eax
je 0xa16b57
lea eax, [ebp + 0x10]
push 0x1027
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push ebx
push esi
push ebx
push ebx
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
mov byte [ebp - 4], 0xa1
call fcn.00429460
call fcn.0099fcc2
add esp, 0x14
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0xa0
call fcn.004063b5
jmp 0xa16abb
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00416ef9
push eax
call fcn.007a6e6e
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00416fa4
lea ecx, [ebp + 0xc]
call fcn.00429475
test eax, eax
je 0xa16b91
cmp esi, ebx
je 0xa16abb
call fcn.00429825
lea ecx, [ebp - 0x30]
call fcn.00548305
mov ecx, eax
call fcn.0080344a
push eax
lea ecx, [ebp - 0x28]
call fcn.0040661f
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
push ebx
lea ecx, [ebp - 0x30]
call fcn.00548309
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x9e
call fcn.005482ce
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x9d
call fcn.004063b5
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.004063b5
jmp case.0xa13d98.62
call fcn.004376f2
mov ecx, eax
call fcn.00a1751c
test eax, eax
je 0xa16c53
lea eax, [ebp - 0x98]
push 0x15b8
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0xa2
call fcn.00490191
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x98]
jmp 0xa1708d
call fcn.00a1d7ed
test eax, eax
je case.0xa13d98.62
lea eax, [ebp - 0x5c]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0xa3
call fcn.00490191
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5c]
jmp 0xa1708d
call fcn.00a1d7ed
test eax, eax
je 0xa16cc1
lea eax, [ebp - 0x64]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0xa4
call fcn.00490191
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
jmp 0xa1708d
call fcn.004376f2
mov ecx, eax
call fcn.00a17515
test eax, eax
je 0xa16cfd
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x15b8
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
call fcn.0099fcc2
add esp, 0x14
cmp eax, ebx
jne case.0xa13d98.36
push 0x69c
call fcn.00402603
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0xa5
je 0xa16d1c
mov ecx, eax
call fcn.009af38b
jmp 0xa16d1e
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00a1d89e
push ebx
push esi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x15a3
push eax
mov byte [ebp - 4], 0xa6
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push ebx
push 3
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xa6
call fcn.00429875
mov ecx, eax
call fcn.009b796b
push ebx
push ebx
push 0x28
push ebx
push ebx
lea ecx, [ebp - 0x30]
call fcn.00429875
mov ecx, eax
call fcn.009b7bbd
lea ecx, [ebp - 0x30]
call fcn.00429875
mov ecx, eax
call fcn.009aff86
lea ecx, [ebp - 0x30]
call fcn.00429875
mov ecx, eax
call fcn.004fd4ac
cmp eax, esi
jne 0xa16e3f
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x30]
call fcn.00429875
mov ecx, eax
call fcn.005247ee
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xa8
call fcn.005480c2
mov ecx, eax
call fcn.00548085
test eax, eax
jne 0xa16e33
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp + 8]
call fcn.00429460
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xa9
call fcn.00416ef9
push eax
call fcn.007a6e6e
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 8]
mov esi, eax
call fcn.00416fa4
cmp esi, ebx
jne 0xa16e50
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xe2
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
call fcn.0099fcc2
add esp, 0x14
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xa8
call fcn.004063b5
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xa6
call fcn.004063b5
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00429870
jmp case.0xa13d98.36
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xa8
call fcn.004063b5
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xa6
call fcn.004063b5
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00429870
jmp case.0xa13d98.62
push 0xa0
call fcn.00402603
pop ecx
mov dword [ebp + 8], eax
cmp eax, ebx
mov byte [ebp - 4], 0xaa
je 0xa16eb2
push 1
push ebx
mov ecx, eax
call fcn.00808c9e
jmp 0xa16eb4
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00a1dcb4
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xab
call fcn.00a1dce6
mov ecx, eax
call fcn.004fd4ac
cmp eax, esi
jne 0xa16f82
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x14]
call fcn.00a1dce6
mov ecx, eax
call fcn.00809163
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xac
call fcn.005480c2
mov ecx, eax
call fcn.00548085
test eax, eax
je 0xa16f1c
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0xfb8
jmp 0xa16f61
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00416ef9
push eax
call fcn.007a6e6e
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00416fa4
lea ecx, [ebp + 0xc]
call fcn.00429475
test eax, eax
je 0xa16f93
cmp esi, ebx
jne 0xa16f93
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0xe2
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
call fcn.0099fcc2
add esp, 0x14
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xab
call fcn.004063b5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00a1dcaf
jmp case.0xa13d98.36
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.00429460
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
lea ecx, [ebp - 0x14]
call fcn.00a1dce6
mov ecx, eax
call fcn.00809180
push eax
lea ecx, [ebp - 0x28]
call fcn.0040661f
call fcn.0054828b
lea ecx, [eax + 0x88]
call fcn.0074b00f
push eax
lea ecx, [ebp - 0x2b0]
call fcn.00459fb6
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0xad
call fcn.004f68ca
push ebx
lea ecx, [ebp - 0x14]
call fcn.00a1dcea
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0xac
call fcn.0042981e
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xab
call fcn.004063b5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00a1dcaf
jmp case.0xa13d98.62
push esi
call fcn.00a1790b
test eax, eax
pop ecx
jne 0xa1705d
lea eax, [ebp - 0x6c]
push 0x11e5
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0xae
call fcn.00490191
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6c]
jmp 0xa1708d
call fcn.00a1d7ed
test eax, eax
je 0xa17097
lea eax, [ebp - 0x74]
push 0x63
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push 0xb
push eax
mov byte [ebp - 4], 0xaf
call fcn.00490191
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x74]
call fcn.004063b5
jmp case.0xa13d98.36
lea eax, [ebp + 0xc]
push esi
push eax
call fcn.0042950d
mov ecx, eax
call fcn.0060f2ef
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xb0
call fcn.004149f1
test al, al
jne 0xa171b9
push 0x69c
call fcn.00402603
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0xb1
je 0xa170dc
mov ecx, eax
call fcn.009af38b
jmp 0xa170de
xor eax, eax
push 1
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb0
call fcn.00a1d89e
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb2
call fcn.004aded2
push ebx
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push 0xbd3c70
mov byte [ebp - 4], 0xb3
call fcn.0040339f
lea eax, [ebp - 0x180]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xb3
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
mov esi, eax
lea eax, [ebp - 0x7c]
push 0x11e6
push eax
mov byte [ebp - 4], 0xb5
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
mov edi, eax
push esi
mov byte [ebp - 4], 0xb6
call fcn.00415344
pop ecx
pop ecx
push eax
mov ecx, edi
call fcn.00429475
push eax
lea eax, [ebp + 8]
push eax
call fcn.0044549c
add esp, 0xc
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xb5
call fcn.004063b5
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0xb3
call fcn.00403ab5
push ebx
push ebx
push ebx
push ebx
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00429460
call fcn.0099fdd3
add esp, 0x14
cmp eax, 6
mov byte [ebp - 4], 0xb2
lea ecx, [ebp + 8]
je 0xa171c6
call fcn.004063b5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb0
call fcn.00429870
lea ecx, [ebp + 0xc]
call fcn.0040262e
jmp case.0xa13d98.36
call fcn.004063b5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb0
call fcn.00429870
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.0040262e
jmp case.0xa13d98.62
push esi
call fcn.0042950d
mov ecx, eax
call fcn.00432ed5
cmp eax, ebx
je case.0xa13d98.36
call fcn.0054828b
lea ecx, [eax + 4]
mov eax, dword [ecx]
call dword [eax + 0x10]
push dword [eax + 4]
push dword [eax]
push esi
call fcn.0054828b
mov ecx, eax
call fcn.007ad838
push eax
call fcn.00a1d845
mov ecx, eax
call fcn.00431470
test eax, eax
jne case.0xa13d98.62
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x13c1
jmp 0xa17307
lea eax, [ebp - 0x100]
push eax
call fcn.00429825
mov ecx, eax
call fcn.00426f51
mov ecx, eax
mov byte [ebp - 4], 0xb7
call fcn.004297a2
lea ecx, [ebp - 0x100]
mov esi, eax
mov byte [ebp - 4], 1
call fcn.0042978c
push dword [ebp + 8]
lea eax, [ebp - 0x110]
push 5
push eax
mov ecx, esi
call fcn.004296b0
mov ecx, eax
mov byte [ebp - 4], 0xb8
call fcn.00548152
lea ecx, [ebp - 0x110]
mov esi, eax
mov byte [ebp - 4], 1
call fcn.0042947d
push esi
call fcn.00a1753d
mov ecx, esp
mov esi, eax
mov eax, dword [esi]
mov dword [ebp + 0xc], esp
push ecx
mov ecx, esi
call dword [eax + 0x7c]
lea ecx, [ebp - 0x28]
call fcn.0046e6ae
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x80]
lea ecx, [ebp - 0x28]
push eax
call fcn.004291b3
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x84]
push eax
lea ecx, [ebp - 0x28]
call fcn.004291b3
mov ecx, dword [ebp - 0x50]
push ebx
push 0x1f4
call fcn.00485138
test eax, eax
jne 0xa1731e
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0xfa
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
call fcn.0099fcc2
add esp, 0x14
jmp case.0xa13d98.36
call fcn.00994c7a
push eax
lea ecx, [ebp - 0x28]
call fcn.0040667c
lea eax, [ebp - 0x28]
push eax
call fcn.0053e94d
pop ecx
mov ecx, dword [ebp - 0x50]
push 1
call fcn.00a1746f
lea eax, [ebp - 0x50]
push 0x821
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040634c
push 0x64
mov ecx, eax
mov byte [ebp - 4], 0xb9
call fcn.00414b5f
push eax
call fcn.00996d94
pop ecx
pop ecx
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.0040265e
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.0042599a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x14]
call fcn.004063b5
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x10