Function at 0x523da0
Capabilities:
Check os version
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x6b78e4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x7dc
push ebx
push ebp
push esi
push edi
xor eax, eax
xor ebx, ebx
mov dword [esp + 0xbf], eax
mov dl, 0xae
mov dword [esp + 0xc3], eax
mov dword [esp + 0x7f4], ebx
mov dword [esp + 0xc7], eax
mov dword [esp + 0x3c], ebx
mov dword [esp + 0xcb], eax
mov dword [esp + 0x38], ebx
mov word [esp + 0xcf], ax
mov al, 0xfa
mov byte [esp + 0xa4], 8
mov byte [esp + 0xa5], 7
mov byte [esp + 0xa6], dl
mov byte [esp + 0xa7], 0x20
mov byte [esp + 0xa8], 0x30
mov byte [esp + 0xa9], bl
mov byte [esp + 0xaa], bl
mov byte [esp + 0xab], bl
mov byte [esp + 0xac], bl
mov byte [esp + 0xad], 8
mov byte [esp + 0xae], 7
mov byte [esp + 0xaf], dl
mov byte [esp + 0xb0], 0x20
mov byte [esp + 0xb1], 0x20
mov byte [esp + 0xb2], bl
mov byte [esp + 0xb3], bl
mov byte [esp + 0xb4], bl
mov byte [esp + 0xb5], bl
mov byte [esp + 0xb6], 8
mov byte [esp + 0xb7], 7
mov byte [esp + 0xb8], dl
mov byte [esp + 0xb9], 0x20
mov byte [esp + 0xba], bl
mov byte [esp + 0xbb], bl
mov byte [esp + 0xbc], bl
mov byte [esp + 0xbd], bl
mov byte [esp + 0xbe], bl
mov byte [esp + 0xd1], 8
mov byte [esp + 0xd2], 7
mov byte [esp + 0xd3], dl
mov byte [esp + 0xd4], 0x14
mov byte [esp + 0xd5], 0x40
mov byte [esp + 0xd6], bl
mov byte [esp + 0xd7], al
mov byte [esp + 0xd8], bl
mov byte [esp + 0xd9], bl
mov byte [esp + 0xda], 8
mov byte [esp + 0xdb], 7
mov byte [esp + 0xdc], dl
mov byte [esp + 0xdd], 0x1d
mov byte [esp + 0xde], 0x20
mov byte [esp + 0xdf], bl
mov byte [esp + 0xe0], bl
mov byte [esp + 0xe1], bl
mov byte [esp + 0xe2], bl
mov byte [esp + 0xe3], 8
mov byte [esp + 0xe4], 7
mov byte [esp + 0xe5], dl
mov byte [esp + 0xe6], 0x14
mov byte [esp + 0xe7], bl
mov byte [esp + 0xe8], bl
mov byte [esp + 0xe9], bl
mov byte [esp + 0xea], bl
mov byte [esp + 0xeb], bl
mov byte [esp + 0xec], 8
mov byte [esp + 0xed], 7
mov byte [esp + 0xee], dl
mov byte [esp + 0xef], 0x1d
mov byte [esp + 0xf0], bl
mov byte [esp + 0xf1], bl
mov byte [esp + 0xf2], bl
mov byte [esp + 0xf3], bl
mov byte [esp + 0xf4], bl
xor ecx, ecx
mov dword [esp + 0xf5], ecx
mov byte [esp + 0x104], al
mov dword [esp + 0xf9], ecx
xor eax, eax
mov byte [esp + 0xfd], cl
mov dword [esp + 0x146], ecx
mov dword [esp + 0x14a], ecx
mov dword [esp + 0x122], eax
mov dword [esp + 0x14e], ecx
mov dword [esp + 0x126], eax
mov dword [esp + 0x152], ecx
mov byte [esp + 0xfe], 8
mov byte [esp + 0xff], 7
mov byte [esp + 0x100], dl
mov byte [esp + 0x101], 0x14
mov byte [esp + 0x102], 0x40
mov byte [esp + 0x103], bl
mov byte [esp + 0x105], bl
mov byte [esp + 0x106], bl
mov byte [esp + 0x107], 8
mov byte [esp + 0x108], 7
mov byte [esp + 0x109], dl
mov byte [esp + 0x10a], 0x1d
mov byte [esp + 0x10b], 0x80
mov byte [esp + 0x10c], bl
mov byte [esp + 0x10d], bl
mov byte [esp + 0x10e], bl
mov byte [esp + 0x10f], bl
mov byte [esp + 0x110], 8
mov byte [esp + 0x111], 7
mov byte [esp + 0x112], dl
mov byte [esp + 0x113], 0x14
mov byte [esp + 0x114], bl
mov byte [esp + 0x115], bl
mov byte [esp + 0x116], bl
mov byte [esp + 0x117], bl
mov byte [esp + 0x118], bl
mov byte [esp + 0x119], 8
mov byte [esp + 0x11a], 7
mov byte [esp + 0x11b], dl
mov byte [esp + 0x11c], 0x1d
mov byte [esp + 0x11d], bl
mov byte [esp + 0x11e], bl
mov byte [esp + 0x11f], bl
mov byte [esp + 0x120], bl
mov byte [esp + 0x121], bl
mov byte [esp + 0x12a], al
mov byte [esp + 0x12b], 8
mov byte [esp + 0x12c], 7
mov byte [esp + 0x12d], dl
mov byte [esp + 0x12e], 0x1c
mov byte [esp + 0x12f], bl
mov byte [esp + 0x130], bl
mov byte [esp + 0x131], 0xc
mov byte [esp + 0x132], bl
mov byte [esp + 0x133], bl
mov byte [esp + 0x134], 8
mov byte [esp + 0x135], 7
mov byte [esp + 0x136], dl
mov byte [esp + 0x137], 0x1c
mov byte [esp + 0x138], bl
mov byte [esp + 0x139], bl
mov byte [esp + 0x13a], 8
mov byte [esp + 0x13b], bl
mov byte [esp + 0x13c], bl
mov byte [esp + 0x13d], 8
mov byte [esp + 0x13e], 7
mov byte [esp + 0x13f], dl
mov byte [esp + 0x140], 0x1c
mov byte [esp + 0x141], bl
mov byte [esp + 0x142], bl
mov byte [esp + 0x143], bl
mov byte [esp + 0x144], bl
mov byte [esp + 0x145], bl
mov word [esp + 0x156], cx
mov byte [esp + 0x158], 8
mov byte [esp + 0x159], 7
mov byte [esp + 0x15a], dl
mov byte [esp + 0x15b], 0x1c
mov byte [esp + 0x15c], bl
mov byte [esp + 0x15d], bl
mov dword [esp + 0x173], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x177], eax
mov dword [esp + 0x1a4], ecx
mov dword [esp + 0x17b], eax
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x17f], eax
mov dword [esp + 0x1ac], ecx
mov byte [esp + 0x15e], 0xc0
mov byte [esp + 0x15f], bl
mov byte [esp + 0x160], bl
mov byte [esp + 0x161], 8
mov byte [esp + 0x162], 7
mov byte [esp + 0x163], dl
mov byte [esp + 0x164], 0x1c
mov byte [esp + 0x165], bl
mov byte [esp + 0x166], bl
mov byte [esp + 0x167], 0x80
mov byte [esp + 0x168], bl
mov byte [esp + 0x169], bl
mov byte [esp + 0x16a], 8
mov byte [esp + 0x16b], 7
mov byte [esp + 0x16c], dl
mov byte [esp + 0x16d], 0x1c
mov byte [esp + 0x16e], bl
mov byte [esp + 0x16f], bl
mov byte [esp + 0x170], bl
mov byte [esp + 0x171], bl
mov byte [esp + 0x172], bl
mov word [esp + 0x183], ax
mov byte [esp + 0x185], 8
mov byte [esp + 0x186], 7
mov byte [esp + 0x187], dl
mov byte [esp + 0x188], 0x20
mov byte [esp + 0x189], bl
mov byte [esp + 0x18a], bl
mov byte [esp + 0x18b], bl
mov byte [esp + 0x18c], 0xc0
mov byte [esp + 0x18d], bl
mov byte [esp + 0x18e], 8
mov byte [esp + 0x18f], 7
mov byte [esp + 0x190], dl
mov byte [esp + 0x191], 0x20
mov byte [esp + 0x192], bl
mov byte [esp + 0x193], bl
mov byte [esp + 0x194], bl
mov byte [esp + 0x195], 0x80
mov byte [esp + 0x196], bl
mov byte [esp + 0x197], 8
mov byte [esp + 0x198], 7
mov byte [esp + 0x199], dl
mov byte [esp + 0x19a], 0x20
mov byte [esp + 0x19b], bl
mov byte [esp + 0x19c], bl
mov byte [esp + 0x19d], bl
mov byte [esp + 0x19e], bl
mov byte [esp + 0x19f], bl
mov word [esp + 0x1b0], cx
mov byte [esp + 0x1b2], 8
mov byte [esp + 0x1b3], 7
mov byte [esp + 0x1b4], dl
mov byte [esp + 0x1b5], 0x20
mov byte [esp + 0x1b6], bl
mov byte [esp + 0x1b7], bl
mov byte [esp + 0x1b8], bl
mov byte [esp + 0x1b9], 0xa0
mov byte [esp + 0x1ba], bl
mov byte [esp + 0x1bb], 8
mov byte [esp + 0x1bc], 7
mov byte [esp + 0x1bd], dl
mov byte [esp + 0x1be], 0x20
mov byte [esp + 0x1bf], bl
mov byte [esp + 0x1c0], bl
mov byte [esp + 0x1c1], bl
mov byte [esp + 0x1c2], 0x80
mov byte [esp + 0x1c3], bl
mov byte [esp + 0x1c4], 8
mov byte [esp + 0x1c5], 7
mov byte [esp + 0x1c6], dl
mov byte [esp + 0x1c7], 0x20
mov byte [esp + 0x1c8], bl
mov dword [esp + 0x1fa], ecx
mov dword [esp + 0x1cd], eax
mov dword [esp + 0x1fe], ecx
mov dword [esp + 0x1d1], eax
mov dword [esp + 0x202], ecx
mov dword [esp + 0x1d5], eax
mov dword [esp + 0x206], ecx
mov dword [esp + 0x1d9], eax
mov word [esp + 0x20a], cx
mov ecx, 6
lea edi, [esp + 0x21e]
mov byte [esp + 0x1c9], bl
mov byte [esp + 0x1ca], bl
mov byte [esp + 0x1cb], bl
mov byte [esp + 0x1cc], bl
mov word [esp + 0x1dd], ax
mov byte [esp + 0x1df], 8
mov byte [esp + 0x1e0], 7
mov byte [esp + 0x1e1], dl
mov byte [esp + 0x1e2], 0x20
mov byte [esp + 0x1e3], 3
mov byte [esp + 0x1e4], bl
mov byte [esp + 0x1e5], bl
mov byte [esp + 0x1e6], bl
mov byte [esp + 0x1e7], bl
mov byte [esp + 0x1e8], 8
mov byte [esp + 0x1e9], 7
mov byte [esp + 0x1ea], dl
mov byte [esp + 0x1eb], 0x20
mov byte [esp + 0x1ec], 2
mov byte [esp + 0x1ed], bl
mov byte [esp + 0x1ee], bl
mov byte [esp + 0x1ef], bl
mov byte [esp + 0x1f0], bl
mov byte [esp + 0x1f1], 8
mov byte [esp + 0x1f2], 7
mov byte [esp + 0x1f3], dl
mov byte [esp + 0x1f4], 0x20
mov byte [esp + 0x1f5], bl
mov byte [esp + 0x1f6], bl
mov byte [esp + 0x1f7], bl
mov byte [esp + 0x1f8], bl
mov byte [esp + 0x1f9], bl
mov byte [esp + 0x20c], 8
mov byte [esp + 0x20d], 7
mov byte [esp + 0x20e], dl
mov byte [esp + 0x20f], 0x18
mov byte [esp + 0x210], bl
mov byte [esp + 0x211], bl
mov byte [esp + 0x212], 0x80
mov byte [esp + 0x213], bl
mov byte [esp + 0x214], bl
mov byte [esp + 0x215], 8
mov byte [esp + 0x216], 7
mov byte [esp + 0x217], dl
mov byte [esp + 0x218], 0x18
mov byte [esp + 0x219], bl
mov byte [esp + 0x21a], bl
mov byte [esp + 0x21b], bl
mov byte [esp + 0x21c], bl
mov byte [esp + 0x21d], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [esp + 0x239], 8
mov byte [esp + 0x23a], 7
mov byte [esp + 0x23b], dl
mov byte [esp + 0x23c], 0x18
mov byte [esp + 0x23d], bl
mov byte [esp + 0x23e], bl
mov byte [esp + 0x23f], 0x20
mov byte [esp + 0x240], bl
mov byte [esp + 0x241], bl
mov byte [esp + 0x242], 8
mov byte [esp + 0x243], 7
mov byte [esp + 0x244], dl
mov byte [esp + 0x245], 0x18
mov byte [esp + 0x246], bl
mov byte [esp + 0x247], bl
mov byte [esp + 0x248], 0x30
mov byte [esp + 0x249], bl
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x254], eax
mov dword [esp + 0x28a], ecx
mov dword [esp + 0x258], eax
mov dword [esp + 0x28e], ecx
mov dword [esp + 0x25c], eax
mov byte [esp + 0x24a], bl
mov dword [esp + 0x260], eax
mov byte [esp + 0x24b], 8
mov byte [esp + 0x24c], 7
mov byte [esp + 0x24d], dl
mov byte [esp + 0x24e], 0x18
mov byte [esp + 0x24f], bl
mov byte [esp + 0x250], bl
mov byte [esp + 0x251], bl
mov byte [esp + 0x252], bl
mov byte [esp + 0x253], bl
mov word [esp + 0x264], ax
mov byte [esp + 0x266], 8
mov byte [esp + 0x267], 7
mov byte [esp + 0x268], dl
mov byte [esp + 0x269], 0x18
mov byte [esp + 0x26a], bl
mov byte [esp + 0x26b], bl
mov byte [esp + 0x26c], 0xa0
mov byte [esp + 0x26d], bl
mov byte [esp + 0x26e], bl
mov byte [esp + 0x26f], 8
mov byte [esp + 0x270], 7
mov byte [esp + 0x271], dl
mov byte [esp + 0x272], 0x18
mov byte [esp + 0x273], bl
mov byte [esp + 0x274], bl
mov byte [esp + 0x275], 0xa0
mov byte [esp + 0x276], bl
mov byte [esp + 0x277], bl
mov byte [esp + 0x278], 8
mov byte [esp + 0x279], 7
mov byte [esp + 0x27a], dl
mov byte [esp + 0x27b], 0x18
mov byte [esp + 0x27c], bl
mov byte [esp + 0x27d], bl
mov byte [esp + 0x27e], 0xa0
mov byte [esp + 0x27f], bl
mov byte [esp + 0x280], bl
mov byte [esp + 0x281], 8
mov byte [esp + 0x282], 7
mov byte [esp + 0x283], dl
mov byte [esp + 0x284], 0x18
mov byte [esp + 0x285], bl
mov byte [esp + 0x286], bl
mov byte [esp + 0x287], bl
mov byte [esp + 0x288], bl
mov byte [esp + 0x289], bl
mov byte [esp + 0x292], cl
mov byte [esp + 0x293], 8
mov byte [esp + 0x294], 7
mov byte [esp + 0x295], dl
mov byte [esp + 0x296], 0x18
mov byte [esp + 0x297], bl
mov byte [esp + 0x298], bl
mov byte [esp + 0x299], 8
mov byte [esp + 0x29a], bl
mov byte [esp + 0x29b], 0xff
mov byte [esp + 0x29c], 8
mov byte [esp + 0x29d], 7
mov byte [esp + 0x29e], dl
mov byte [esp + 0x29f], 0x18
mov byte [esp + 0x2a0], bl
mov byte [esp + 0x2a1], bl
mov byte [esp + 0x2a2], bl
mov byte [esp + 0x2a3], bl
mov byte [esp + 0x2a4], bl
mov byte [esp + 0x2a5], 8
mov byte [esp + 0x2a6], 7
mov byte [esp + 0x2a7], dl
mov byte [esp + 0x2a8], 0x18
mov byte [esp + 0x2a9], bl
mov byte [esp + 0x2aa], bl
mov byte [esp + 0x2ab], bl
mov dword [esp + 0x2ae], eax
mov ecx, 6
mov dword [esp + 0x2b2], eax
lea edi, [esp + 0x2d2]
mov dword [esp + 0x2b6], eax
mov byte [esp + 0x2ac], bl
mov dword [esp + 0x2ba], eax
mov byte [esp + 0x2ad], bl
mov word [esp + 0x2be], ax
mov byte [esp + 0x2c0], 8
mov byte [esp + 0x2c1], 7
mov byte [esp + 0x2c2], dl
mov byte [esp + 0x2c3], 0x1e
mov byte [esp + 0x2c4], 0x80
mov byte [esp + 0x2c5], bl
mov byte [esp + 0x2c6], bl
mov byte [esp + 0x2c7], bl
mov byte [esp + 0x2c8], bl
mov byte [esp + 0x2c9], 8
mov byte [esp + 0x2ca], 7
mov byte [esp + 0x2cb], dl
mov byte [esp + 0x2cc], 0x1e
mov byte [esp + 0x2cd], bl
mov byte [esp + 0x2ce], bl
mov byte [esp + 0x2cf], bl
mov byte [esp + 0x2d0], bl
mov byte [esp + 0x2d1], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x2ff]
mov byte [esp + 0x2ed], 8
mov byte [esp + 0x2ee], 7
mov byte [esp + 0x2ef], dl
mov byte [esp + 0x2f0], 0x1e
mov byte [esp + 0x2f1], 0x20
mov byte [esp + 0x2f2], bl
mov byte [esp + 0x2f3], bl
mov byte [esp + 0x2f4], bl
mov byte [esp + 0x2f5], bl
mov byte [esp + 0x2f6], 8
mov byte [esp + 0x2f7], 7
mov byte [esp + 0x2f8], dl
mov byte [esp + 0x2f9], 0x1e
mov byte [esp + 0x2fa], bl
mov byte [esp + 0x2fb], bl
mov byte [esp + 0x2fc], bl
mov byte [esp + 0x2fd], bl
mov byte [esp + 0x2fe], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [esp + 0x31a], 8
mov byte [esp + 0x31b], 7
mov byte [esp + 0x31c], dl
mov byte [esp + 0x31d], 0x18
mov byte [esp + 0x31e], 0x20
mov byte [esp + 0x31f], bl
mov byte [esp + 0x320], bl
mov byte [esp + 0x321], bl
mov byte [esp + 0x322], bl
mov byte [esp + 0x323], 8
mov byte [esp + 0x324], 7
mov byte [esp + 0x325], dl
mov byte [esp + 0x326], 0x18
mov byte [esp + 0x327], 0x30
mov byte [esp + 0x328], bl
mov byte [esp + 0x329], bl
mov byte [esp + 0x32a], bl
mov byte [esp + 0x32b], bl
mov byte [esp + 0x32c], 8
mov byte [esp + 0x32d], 7
mov byte [esp + 0x32e], dl
mov byte [esp + 0x32f], 0x18
mov byte [esp + 0x330], bl
mov byte [esp + 0x331], bl
mov byte [esp + 0x332], bl
mov byte [esp + 0x333], bl
mov byte [esp + 0x334], bl
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x335], ecx
mov dword [esp + 0x362], eax
mov dword [esp + 0x339], ecx
mov dword [esp + 0x366], eax
mov dword [esp + 0x33d], ecx
mov dword [esp + 0x36a], eax
mov dword [esp + 0x341], ecx
mov dword [esp + 0x36e], eax
mov word [esp + 0x345], cx
mov dword [esp + 0x38f], ecx
mov dword [esp + 0x393], ecx
mov byte [esp + 0x347], 8
mov dword [esp + 0x397], ecx
mov byte [esp + 0x348], 7
mov dword [esp + 0x39b], ecx
mov byte [esp + 0x349], dl
mov byte [esp + 0x34a], 0x20
mov byte [esp + 0x34b], 0xc0
mov byte [esp + 0x34c], bl
mov byte [esp + 0x34d], bl
mov byte [esp + 0x34e], bl
mov byte [esp + 0x34f], bl
mov byte [esp + 0x350], 8
mov byte [esp + 0x351], 7
mov byte [esp + 0x352], dl
mov byte [esp + 0x353], 0x20
mov byte [esp + 0x354], 0x80
mov byte [esp + 0x355], bl
mov byte [esp + 0x356], bl
mov byte [esp + 0x357], bl
mov byte [esp + 0x358], bl
mov byte [esp + 0x359], 8
mov byte [esp + 0x35a], 7
mov byte [esp + 0x35b], dl
mov byte [esp + 0x35c], 0x20
mov byte [esp + 0x35d], bl
mov byte [esp + 0x35e], bl
mov byte [esp + 0x35f], bl
mov byte [esp + 0x360], bl
mov byte [esp + 0x361], bl
mov word [esp + 0x372], ax
mov byte [esp + 0x374], 8
mov byte [esp + 0x375], 7
mov byte [esp + 0x376], dl
mov byte [esp + 0x377], 0x10
mov byte [esp + 0x378], 0x10
mov byte [esp + 0x379], bl
mov byte [esp + 0x37a], bl
mov byte [esp + 0x37b], bl
mov byte [esp + 0x37c], bl
mov byte [esp + 0x37d], 8
mov byte [esp + 0x37e], 7
mov byte [esp + 0x37f], dl
mov byte [esp + 0x380], 0x10
mov byte [esp + 0x381], bl
mov byte [esp + 0x382], bl
mov byte [esp + 0x383], bl
mov byte [esp + 0x384], bl
mov byte [esp + 0x385], bl
mov byte [esp + 0x386], 8
mov byte [esp + 0x387], 7
mov byte [esp + 0x388], dl
mov byte [esp + 0x389], 0x10
mov byte [esp + 0x38a], bl
mov byte [esp + 0x38b], bl
mov byte [esp + 0x38c], bl
mov byte [esp + 0x38d], bl
mov byte [esp + 0x38e], bl
mov word [esp + 0x39f], cx
mov byte [esp + 0x3a1], 8
mov byte [esp + 0x3a2], 7
mov byte [esp + 0x3a3], dl
mov byte [esp + 0x3a4], 0x20
mov byte [esp + 0x3a5], bl
mov byte [esp + 0x3a6], bl
mov byte [esp + 0x3a7], bl
mov byte [esp + 0x3a8], 0xc
mov byte [esp + 0x3a9], bl
mov byte [esp + 0x3aa], 8
mov dword [esp + 0x3bc], eax
mov dword [esp + 0x3e9], ecx
mov dword [esp + 0x3c0], eax
mov dword [esp + 0x3ed], ecx
mov dword [esp + 0x3c4], eax
mov dword [esp + 0x3f1], ecx
mov dword [esp + 0x3c8], eax
mov dword [esp + 0x3f5], ecx
mov byte [esp + 0x3ab], 7
mov byte [esp + 0x3ac], dl
mov byte [esp + 0x3ad], 0x20
mov byte [esp + 0x3ae], bl
mov byte [esp + 0x3af], bl
mov byte [esp + 0x3b0], bl
mov byte [esp + 0x3b1], 8
mov byte [esp + 0x3b2], bl
mov byte [esp + 0x3b3], 8
mov byte [esp + 0x3b4], 7
mov byte [esp + 0x3b5], dl
mov byte [esp + 0x3b6], 0x20
mov byte [esp + 0x3b7], bl
mov byte [esp + 0x3b8], bl
mov byte [esp + 0x3b9], bl
mov byte [esp + 0x3ba], bl
mov byte [esp + 0x3bb], bl
mov word [esp + 0x3cc], ax
mov byte [esp + 0x3ce], 8
mov byte [esp + 0x3cf], 7
mov byte [esp + 0x3d0], dl
mov byte [esp + 0x3d1], 0x40
mov byte [esp + 0x3d2], 2
mov byte [esp + 0x3d3], bl
mov byte [esp + 0x3d4], bl
mov byte [esp + 0x3d5], 2
mov byte [esp + 0x3d6], bl
mov byte [esp + 0x3d7], 8
mov byte [esp + 0x3d8], 7
mov byte [esp + 0x3d9], dl
mov byte [esp + 0x3da], 0x40
mov byte [esp + 0x3db], 2
mov byte [esp + 0x3dc], bl
mov byte [esp + 0x3dd], bl
mov byte [esp + 0x3de], 1
mov byte [esp + 0x3df], bl
mov byte [esp + 0x3e0], 8
mov byte [esp + 0x3e1], 7
mov byte [esp + 0x3e2], dl
mov byte [esp + 0x3e3], 0x40
mov byte [esp + 0x3e4], bl
mov byte [esp + 0x3e5], bl
mov byte [esp + 0x3e6], bl
mov byte [esp + 0x3e7], bl
mov byte [esp + 0x3e8], bl
mov word [esp + 0x3f9], cx
mov byte [esp + 0x3fb], 8
mov byte [esp + 0x3fc], 7
mov byte [esp + 0x3fd], dl
mov byte [esp + 0x3fe], 0x40
mov byte [esp + 0x3ff], bl
mov byte [esp + 0x400], bl
mov byte [esp + 0x401], 0x80
mov byte [esp + 0x402], bl
mov byte [esp + 0x403], 0xff
mov byte [esp + 0x404], 8
mov byte [esp + 0x405], 7
mov byte [esp + 0x406], dl
mov byte [esp + 0x407], 0x40
mov byte [esp + 0x408], bl
mov byte [esp + 0x409], bl
mov byte [esp + 0x40a], 0x80
mov byte [esp + 0x40b], bl
mov byte [esp + 0x40c], bl
mov byte [esp + 0x40d], 8
mov byte [esp + 0x40e], 7
mov byte [esp + 0x40f], dl
mov byte [esp + 0x410], 0x40
mov byte [esp + 0x411], bl
mov byte [esp + 0x412], bl
mov byte [esp + 0x413], bl
mov byte [esp + 0x414], bl
mov byte [esp + 0x415], bl
mov dword [esp + 0x416], eax
mov dword [esp + 0x44c], ecx
mov dword [esp + 0x41a], eax
mov dword [esp + 0x450], ecx
mov dword [esp + 0x41e], eax
mov byte [esp + 0x454], cl
mov dword [esp + 0x422], eax
mov ecx, 9
lea edi, [esp + 0x45e]
mov word [esp + 0x426], ax
mov byte [esp + 0x428], 8
mov byte [esp + 0x429], 7
mov byte [esp + 0x42a], dl
mov byte [esp + 0x42b], 0x40
mov byte [esp + 0x42c], bl
mov byte [esp + 0x42d], 3
mov byte [esp + 0x42e], bl
mov byte [esp + 0x42f], bl
mov byte [esp + 0x430], bl
mov byte [esp + 0x431], 8
mov byte [esp + 0x432], 7
mov byte [esp + 0x433], dl
mov byte [esp + 0x434], 0x41
mov byte [esp + 0x435], bl
mov byte [esp + 0x436], bl
mov byte [esp + 0x437], 0xc0
mov byte [esp + 0x438], bl
mov byte [esp + 0x439], bl
mov byte [esp + 0x43a], 8
mov byte [esp + 0x43b], 7
mov byte [esp + 0x43c], dl
mov byte [esp + 0x43d], 0x40
mov byte [esp + 0x43e], bl
mov byte [esp + 0x43f], bl
mov byte [esp + 0x440], bl
mov byte [esp + 0x441], bl
mov byte [esp + 0x442], bl
mov byte [esp + 0x443], 8
mov byte [esp + 0x444], 7
mov byte [esp + 0x445], dl
mov byte [esp + 0x446], 0x40
mov byte [esp + 0x447], bl
mov byte [esp + 0x448], bl
mov byte [esp + 0x449], bl
mov byte [esp + 0x44a], bl
mov byte [esp + 0x44b], bl
mov byte [esp + 0x455], 8
mov byte [esp + 0x456], 7
mov byte [esp + 0x457], dl
mov byte [esp + 0x458], 0x40
mov byte [esp + 0x459], bl
mov byte [esp + 0x45a], bl
mov byte [esp + 0x45b], 0x40
mov byte [esp + 0x45c], bl
mov byte [esp + 0x45d], bl
rep stosd dword es:[edi], eax
mov byte [esp + 0x482], 8
mov byte [esp + 0x483], 7
mov byte [esp + 0x484], dl
mov byte [esp + 0x485], 0x41
mov byte [esp + 0x486], 4
mov byte [esp + 0x487], bl
mov byte [esp + 0x488], bl
mov byte [esp + 0x489], bl
mov byte [esp + 0x48a], 0x78
mov byte [esp + 0x48b], 8
mov byte [esp + 0x48c], 7
mov byte [esp + 0x48d], dl
mov byte [esp + 0x48e], 0x41
mov byte [esp + 0x48f], 4
mov byte [esp + 0x490], bl
mov byte [esp + 0x491], bl
mov byte [esp + 0x492], bl
mov byte [esp + 0x493], 0x89
mov byte [esp + 0x494], 8
mov byte [esp + 0x495], 7
mov byte [esp + 0x496], dl
mov byte [esp + 0x497], 0x41
mov byte [esp + 0x498], bl
mov byte [esp + 0x499], bl
mov byte [esp + 0x49a], bl
mov dword [esp + 0x49d], eax
xor ecx, ecx
mov dword [esp + 0x4a1], eax
mov dword [esp + 0x4ca], ecx
mov dword [esp + 0x4a5], eax
mov dword [esp + 0x4ce], ecx
mov dword [esp + 0x4a9], eax
mov dword [esp + 0x4d2], ecx
mov word [esp + 0x4ad], ax
mov dword [esp + 0x4f7], eax
mov dword [esp + 0x4fb], eax
mov dword [esp + 0x4d6], ecx
mov dword [esp + 0x4ff], eax
mov byte [esp + 0x49b], bl
mov dword [esp + 0x503], eax
mov byte [esp + 0x49c], bl
mov byte [esp + 0x4af], 8
mov byte [esp + 0x4b0], 7
mov byte [esp + 0x4b1], dl
mov byte [esp + 0x4b2], 0x40
mov byte [esp + 0x4b3], bl
mov byte [esp + 0x4b4], 0xc
mov byte [esp + 0x4b5], bl
mov byte [esp + 0x4b6], bl
mov byte [esp + 0x4b7], bl
mov byte [esp + 0x4b8], 8
mov byte [esp + 0x4b9], 7
mov byte [esp + 0x4ba], dl
mov byte [esp + 0x4bb], 0x40
mov byte [esp + 0x4bc], bl
mov byte [esp + 0x4bd], bl
mov byte [esp + 0x4be], bl
mov byte [esp + 0x4bf], bl
mov byte [esp + 0x4c0], bl
mov byte [esp + 0x4c1], 8
mov byte [esp + 0x4c2], 7
mov byte [esp + 0x4c3], dl
mov byte [esp + 0x4c4], 0x40
mov byte [esp + 0x4c5], bl
mov byte [esp + 0x4c6], bl
mov byte [esp + 0x4c7], bl
mov byte [esp + 0x4c8], bl
mov byte [esp + 0x4c9], bl
mov word [esp + 0x4da], cx
mov byte [esp + 0x4dc], 8
mov byte [esp + 0x4dd], 7
mov byte [esp + 0x4de], dl
mov byte [esp + 0x4df], 0x40
mov byte [esp + 0x4e0], 0xc0
mov byte [esp + 0x4e1], bl
mov byte [esp + 0x4e2], bl
mov byte [esp + 0x4e3], bl
mov byte [esp + 0x4e4], bl
mov byte [esp + 0x4e5], 8
mov byte [esp + 0x4e6], 7
mov byte [esp + 0x4e7], dl
mov byte [esp + 0x4e8], 0x40
mov byte [esp + 0x4e9], 0x80
mov byte [esp + 0x4ea], bl
mov byte [esp + 0x4eb], bl
mov byte [esp + 0x4ec], bl
mov byte [esp + 0x4ed], bl
mov byte [esp + 0x4ee], 8
mov byte [esp + 0x4ef], 7
mov byte [esp + 0x4f0], dl
mov byte [esp + 0x4f1], 0x40
mov byte [esp + 0x4f2], bl
mov byte [esp + 0x4f3], bl
mov byte [esp + 0x4f4], bl
mov byte [esp + 0x4f5], bl
mov byte [esp + 0x4f6], bl
mov word [esp + 0x507], ax
mov byte [esp + 0x509], 8
mov byte [esp + 0x50a], 7
mov byte [esp + 0x50b], dl
mov byte [esp + 0x50c], 0x41
mov byte [esp + 0x50d], 0x80
mov byte [esp + 0x50e], bl
mov byte [esp + 0x50f], bl
mov byte [esp + 0x510], 0xb4
mov byte [esp + 0x511], bl
mov ecx, 6
lea edi, [esp + 0x51b]
mov byte [esp + 0x512], 8
mov byte [esp + 0x513], 7
mov byte [esp + 0x514], dl
mov byte [esp + 0x515], 0x41
mov byte [esp + 0x516], bl
mov byte [esp + 0x517], bl
mov byte [esp + 0x518], bl
mov byte [esp + 0x519], bl
mov byte [esp + 0x51a], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x548]
mov byte [esp + 0x536], 8
mov byte [esp + 0x537], 7
mov byte [esp + 0x538], dl
mov byte [esp + 0x539], 0x41
mov byte [esp + 0x53a], 0x80
mov byte [esp + 0x53b], bl
mov byte [esp + 0x53c], bl
mov byte [esp + 0x53d], 0xe8
mov byte [esp + 0x53e], bl
mov byte [esp + 0x53f], 8
mov byte [esp + 0x540], 7
mov byte [esp + 0x541], dl
mov byte [esp + 0x542], 0x41
mov byte [esp + 0x543], bl
mov byte [esp + 0x544], bl
mov byte [esp + 0x545], bl
mov byte [esp + 0x546], bl
mov byte [esp + 0x547], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor ecx, ecx
stosb byte es:[edi], al
mov dword [esp + 0x57e], ecx
mov byte [esp + 0x563], 8
mov dword [esp + 0x582], ecx
mov byte [esp + 0x564], 7
mov dword [esp + 0x586], ecx
mov byte [esp + 0x565], dl
mov dword [esp + 0x58a], ecx
mov byte [esp + 0x566], 0x40
mov byte [esp + 0x567], bl
mov byte [esp + 0x568], 0x30
mov byte [esp + 0x569], bl
mov byte [esp + 0x56a], bl
mov byte [esp + 0x56b], bl
mov byte [esp + 0x56c], 8
mov byte [esp + 0x56d], 7
mov byte [esp + 0x56e], dl
mov byte [esp + 0x56f], 0x40
mov byte [esp + 0x570], bl
mov byte [esp + 0x571], 0x20
mov byte [esp + 0x572], bl
mov byte [esp + 0x573], bl
mov byte [esp + 0x574], bl
mov byte [esp + 0x575], 8
mov byte [esp + 0x576], 7
mov byte [esp + 0x577], dl
mov byte [esp + 0x578], 0x40
mov byte [esp + 0x579], bl
mov byte [esp + 0x57a], bl
mov byte [esp + 0x57b], bl
mov byte [esp + 0x57c], bl
mov byte [esp + 0x57d], bl
mov word [esp + 0x58e], cx
mov byte [esp + 0x590], 8
mov byte [esp + 0x591], 7
mov byte [esp + 0x592], dl
mov byte [esp + 0x593], 0x40
mov byte [esp + 0x594], 0x30
mov byte [esp + 0x595], bl
mov byte [esp + 0x596], bl
mov byte [esp + 0x597], bl
mov byte [esp + 0x598], bl
mov byte [esp + 0x599], 8
xor eax, eax
mov dword [esp + 0x5d8], ecx
mov dword [esp + 0x5ab], eax
mov dword [esp + 0x5dc], ecx
mov dword [esp + 0x5af], eax
mov dword [esp + 0x5e0], ecx
mov dword [esp + 0x5b3], eax
mov dword [esp + 0x5e4], ecx
mov dword [esp + 0x5b7], eax
mov word [esp + 0x5e8], cx
mov ecx, 9
lea edi, [esp + 0x5f3]
mov byte [esp + 0x59a], 7
mov byte [esp + 0x59b], dl
mov byte [esp + 0x59c], 0x40
mov byte [esp + 0x59d], 0x20
mov byte [esp + 0x59e], bl
mov byte [esp + 0x59f], bl
mov byte [esp + 0x5a0], bl
mov byte [esp + 0x5a1], bl
mov byte [esp + 0x5a2], 8
mov byte [esp + 0x5a3], 7
mov byte [esp + 0x5a4], dl
mov byte [esp + 0x5a5], 0x40
mov byte [esp + 0x5a6], bl
mov byte [esp + 0x5a7], bl
mov byte [esp + 0x5a8], bl
mov byte [esp + 0x5a9], bl
mov byte [esp + 0x5aa], bl
mov word [esp + 0x5bb], ax
mov byte [esp + 0x5bd], 8
mov byte [esp + 0x5be], 7
mov byte [esp + 0x5bf], dl
mov byte [esp + 0x5c0], 0x40
mov byte [esp + 0x5c1], 0xc
mov byte [esp + 0x5c2], bl
mov byte [esp + 0x5c3], bl
mov byte [esp + 0x5c4], bl
mov byte [esp + 0x5c5], bl
mov byte [esp + 0x5c6], 8
mov byte [esp + 0x5c7], 7
mov byte [esp + 0x5c8], dl
mov byte [esp + 0x5c9], 0x40
mov byte [esp + 0x5ca], 8
mov byte [esp + 0x5cb], bl
mov byte [esp + 0x5cc], bl
mov byte [esp + 0x5cd], bl
mov byte [esp + 0x5ce], bl
mov byte [esp + 0x5cf], 8
mov byte [esp + 0x5d0], 7
mov byte [esp + 0x5d1], dl
mov byte [esp + 0x5d2], 0x40
mov byte [esp + 0x5d3], bl
mov byte [esp + 0x5d4], bl
mov byte [esp + 0x5d5], bl
mov byte [esp + 0x5d6], bl
mov byte [esp + 0x5d7], bl
mov byte [esp + 0x5ea], 8
mov byte [esp + 0x5eb], 7
mov byte [esp + 0x5ec], dl
mov byte [esp + 0x5ed], 0x41
mov byte [esp + 0x5ee], 8
mov byte [esp + 0x5ef], bl
mov byte [esp + 0x5f0], bl
mov byte [esp + 0x5f1], bl
mov byte [esp + 0x5f2], bl
rep stosd dword es:[edi], eax
mov byte [esp + 0x617], 8
mov byte [esp + 0x618], 7
mov byte [esp + 0x619], dl
mov byte [esp + 0x61a], 0x41
mov byte [esp + 0x61b], 0x10
mov byte [esp + 0x61c], bl
mov byte [esp + 0x61d], 1
mov byte [esp + 0x61e], bl
mov byte [esp + 0x61f], bl
mov byte [esp + 0x620], 8
mov byte [esp + 0x621], 7
mov byte [esp + 0x622], dl
mov byte [esp + 0x623], 0x41
mov byte [esp + 0x624], 0x10
mov dword [esp + 0x632], eax
mov ecx, 6
mov dword [esp + 0x636], eax
lea edi, [esp + 0x656]
mov dword [esp + 0x63a], eax
mov byte [esp + 0x625], bl
mov dword [esp + 0x63e], eax
mov byte [esp + 0x626], bl
mov byte [esp + 0x627], bl
mov byte [esp + 0x628], bl
mov byte [esp + 0x629], 8
mov byte [esp + 0x62a], 7
mov byte [esp + 0x62b], dl
mov byte [esp + 0x62c], 0x41
mov byte [esp + 0x62d], bl
mov byte [esp + 0x62e], bl
mov byte [esp + 0x62f], bl
mov byte [esp + 0x630], bl
mov byte [esp + 0x631], bl
mov word [esp + 0x642], ax
mov byte [esp + 0x644], 8
mov byte [esp + 0x645], 7
mov byte [esp + 0x646], dl
mov byte [esp + 0x647], 0x14
mov byte [esp + 0x648], 0x80
mov byte [esp + 0x649], bl
mov byte [esp + 0x64a], bl
mov byte [esp + 0x64b], bl
mov byte [esp + 0x64c], bl
mov byte [esp + 0x64d], 8
mov byte [esp + 0x64e], 7
mov byte [esp + 0x64f], dl
mov byte [esp + 0x650], 0x14
mov byte [esp + 0x651], bl
mov byte [esp + 0x652], bl
mov byte [esp + 0x653], bl
mov byte [esp + 0x654], bl
mov byte [esp + 0x655], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor ecx, ecx
stosb byte es:[edi], al
mov dword [esp + 0x68c], ecx
mov byte [esp + 0x671], 8
mov dword [esp + 0x690], ecx
mov byte [esp + 0x672], 7
mov dword [esp + 0x694], ecx
mov byte [esp + 0x673], dl
mov dword [esp + 0x698], ecx
mov byte [esp + 0x674], 0x18
mov byte [esp + 0x675], 3
mov byte [esp + 0x676], bl
mov byte [esp + 0x677], bl
mov byte [esp + 0x678], bl
mov byte [esp + 0x679], bl
mov byte [esp + 0x67a], 8
mov byte [esp + 0x67b], 7
mov byte [esp + 0x67c], dl
mov byte [esp + 0x67d], 0x18
mov byte [esp + 0x67e], 2
mov byte [esp + 0x67f], bl
mov byte [esp + 0x680], bl
mov byte [esp + 0x681], bl
mov byte [esp + 0x682], bl
mov byte [esp + 0x683], 8
mov byte [esp + 0x684], 7
mov byte [esp + 0x685], dl
mov byte [esp + 0x686], 0x18
mov byte [esp + 0x687], bl
mov byte [esp + 0x688], bl
mov byte [esp + 0x689], bl
mov byte [esp + 0x68a], bl
mov byte [esp + 0x68b], bl
mov word [esp + 0x69c], cx
mov byte [esp + 0x69e], 8
mov byte [esp + 0x69f], 7
mov byte [esp + 0x6a0], dl
mov byte [esp + 0x6a1], 0x18
mov byte [esp + 0x6a2], 4
mov byte [esp + 0x6a3], bl
mov byte [esp + 0x6a4], bl
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x6b0]
mov byte [esp + 0x6a5], bl
mov byte [esp + 0x6a6], bl
mov byte [esp + 0x6a7], 8
mov byte [esp + 0x6a8], 7
mov byte [esp + 0x6a9], dl
mov byte [esp + 0x6aa], 0x18
mov byte [esp + 0x6ab], bl
mov byte [esp + 0x6ac], bl
mov byte [esp + 0x6ad], bl
mov byte [esp + 0x6ae], bl
mov byte [esp + 0x6af], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor esi, esi
lea ecx, [esp + 0x4c]
stosb byte es:[edi], al
mov byte [esp + 0x1c], bl
mov byte [esp + 0x40], bl
mov byte [esp + 0x48], bl
mov dword [esp + 0x44], esi
call fcn.0060d180
lea ecx, [esp + 0x20]
mov byte [esp + 0x7f4], 1
call fcn.0060fe70
push 0x7e0
lea ecx, [esp + 0x78]
mov byte [esp + 0x7f8], 2
call fcn.00541680
mov dl, byte [esp + 0x1a]
mov dword [esp + 0x28], ebx
mov byte [esp + 0x24], dl
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
push 5
lea ecx, [esp + 0x804]
mov byte [esp + 0x7f8], 4
mov dword [esp + 0x38], ebx
mov byte [esp + 0x1f], bl
mov byte [esp + 0x1e], 1
call fcn.00610190
push ecx
mov byte [esp + 0x74], al
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703764
call fcn.0060ff10
lea eax, [esp + 0x6d0]
push eax
call fcn.0060f170
add esp, 8
mov edi, eax
mov eax, dword [edi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x7f4], 5
cmp ecx, ebp
jae 0x525c32
mov ebp, ecx
lea edx, [esp + 0x24]
cmp edx, edi
jne 0x525c55
push ecx
push ebp
lea ecx, [esp + 0x2c]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x2c]
call fcn.004140d0
jmp 0x525ce1
cmp ebp, ebx
jbe 0x525ca2
cmp ebp, eax
jne 0x525ca2
mov eax, dword [edi + 4]
cmp eax, ebx
jne 0x525c69
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x525ca2
push 1
lea ecx, [esp + 0x28]
call fcn.004138a0
mov eax, dword [edi + 4]
cmp eax, ebx
jne 0x525c86
mov eax, 0x6ce1f8
mov dword [esp + 0x28], eax
mov ecx, dword [edi + 8]
mov dword [esp + 0x2c], ecx
mov edi, dword [edi + 0xc]
mov dword [esp + 0x30], edi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x525ce1
push 1
push ebp
lea ecx, [esp + 0x2c]
call fcn.00414210
test al, al
je 0x525ce1
mov esi, dword [edi + 4]
cmp esi, ebx
jne 0x525cbe
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x44]
mov dword [esp + 0x2c], ebp
mov byte [ecx + ebp], bl
mov eax, dword [esp + 0x6d0]
mov byte [esp + 0x7f4], 4
cmp eax, ebx
je 0x525d11
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x525d08
cmp al, 0xff
je 0x525d08
dec al
mov byte [ecx], al
jmp 0x525d11
push ecx
call fcn.00697880
add esp, 4
mov eax, dword [esp + 0x70]
and eax, 0xff
cmp eax, 0xfb
ja case.0x525e9e.9
xor edx, edx
mov dl, byte [eax + 0x528814]
jmp dword [edx*4 + 0x528784]
mov byte [esp + 0x1c], bl
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 1
mov byte [esp + 0x40], 7
mov byte [esp + 0x48], 4
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 2
mov byte [esp + 0x40], 5
mov byte [esp + 0x48], 6
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 3
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 4
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 5
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 6
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 7
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 8
mov byte [esp + 0x40], 7
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 9
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0xa
mov byte [esp + 0x40], 7
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0xb
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0xc
mov byte [esp + 0x40], 5
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0xd
mov byte [esp + 0x40], 7
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0xe
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0xf
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x10
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x11
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x12
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x13
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x14
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x15
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x16
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x17
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x18
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x19
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x1a
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x1b
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x1c
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x1d
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x1e
mov byte [esp + 0x40], 5
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x1f
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x20
mov byte [esp + 0x40], 5
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x21
jmp case.0x525d2d.35
mov byte [esp + 0x1c], 0x22
cmp eax, 0xfb
ja case.0x525e9e.9
xor ecx, ecx
mov cl, byte [eax + 0x528938]
jmp dword [ecx*4 + 0x528910]
mov al, byte [esp + 0x70]
mov byte [esp + 0x13], 1
cmp al, 0x55
jne 0x525ef7
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x804], 6
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x70de48
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x804], 4
call fcn.006115e0
jmp 0x525f00
cmp al, 2
mov byte [esp + 0x1a], 1
je 0x525f04
mov byte [esp + 0x1a], bl
mov edi, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0x804]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
cmp si, bx
je 0x52639e
cmp byte [0x71bb5c], bl
je 0x525f4d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 4
push str.1234
call fcn.0060ff10
jmp 0x525f85
mov ecx, dword [esp + 0x3c]
sub esp, 0x24
mov eax, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0xa8]
call fcn.005436d0
lea ecx, [esp + 0x70]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x50]
mov edx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.0060d6b0
lea ecx, [esp + 0x24]
call fcn.006101a0
lea ecx, [esp + 0x20]
call fcn.00610330
test ax, ax
jle 0x52655b
cmp si, 1
jne 0x52611a
cmp byte [esp + 0x1a], bl
je 0x525fdf
cmp byte [0x71bb5c], bl
jne 0x525fdf
mov ecx, dword [esp + 0x38]
sub esp, 0x24
mov eax, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0xa8]
call fcn.005436d0
lea ecx, [esp + 0x70]
call fcn.0060d330
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703784
call fcn.0060ff10
lea edx, [esp + 0x700]
push edx
call fcn.0060f170
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x7f4], 7
cmp ecx, ebp
jae 0x52601d
mov ebp, ecx
lea edx, [esp + 0x24]
cmp edx, esi
jne 0x526040
push ecx
push ebp
lea ecx, [esp + 0x2c]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x2c]
call fcn.004140d0
jmp 0x5260cc
cmp ebp, ebx
jbe 0x52608d
cmp ebp, eax
jne 0x52608d
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x526054
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x52608d
push 1
lea ecx, [esp + 0x28]
call fcn.004138a0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x526071
mov eax, 0x6ce1f8
mov dword [esp + 0x28], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x2c], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x30], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x5260cc
push 1
push ebp
lea ecx, [esp + 0x2c]
call fcn.00414210
test al, al
je 0x5260cc
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x5260a9
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x2c], ebp
mov byte [ecx + ebp], bl
mov eax, dword [esp + 0x700]
mov byte [esp + 0x7f4], 4
cmp eax, ebx
je 0x5260fc
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5260f3
cmp al, 0xff
je 0x5260f3
dec al
mov byte [ecx], al
jmp 0x5260fc
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x700], ebx
mov dword [esp + 0x704], ebx
mov dword [esp + 0x708], ebx
mov byte [esp + 0x13], bl
jmp 0x52639c
cmp si, 2
jne 0x52625b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x70377c
call fcn.0060ff10
lea edx, [esp + 0x6f0]
push edx
call fcn.0060f170
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x7f4], 8
cmp ecx, ebp
jae 0x526162
mov ebp, ecx
lea edx, [esp + 0x24]
cmp edx, esi
jne 0x526185
push ecx
push ebp
lea ecx, [esp + 0x2c]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x2c]
call fcn.004140d0
jmp 0x52620d
cmp ebp, ebx
jbe 0x5261d2
cmp ebp, eax
jne 0x5261d2
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x526199
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x5261d2
push 1
lea ecx, [esp + 0x28]
call fcn.004138a0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x5261b6
mov eax, 0x6ce1f8
mov dword [esp + 0x28], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x2c], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x30], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x52620d
push 1
push ebp
lea ecx, [esp + 0x2c]
call fcn.00414210
test al, al
je 0x52620d
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x5261ee
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x2c], ebp
mov byte [ecx + ebp], bl
mov eax, dword [esp + 0x6f0]
mov byte [esp + 0x7f4], 4
cmp eax, ebx
je 0x52623d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x526234
cmp al, 0xff
je 0x526234
dec al
mov byte [ecx], al
jmp 0x52623d
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x6f0], ebx
mov dword [esp + 0x6f4], ebx
mov dword [esp + 0x6f8], ebx
mov byte [esp + 0x13], bl
jmp 0x526398
cmp si, 3
jne 0x52639c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703764
call fcn.0060ff10
lea edx, [esp + 0x6e0]
push edx
call fcn.0060f170
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x7f4], 9
cmp ecx, ebp
jae 0x5262a3
mov ebp, ecx
lea edx, [esp + 0x24]
cmp edx, esi
jne 0x5262c6
push ecx
push ebp
lea ecx, [esp + 0x2c]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x2c]
call fcn.004140d0
jmp 0x52634e
cmp ebp, ebx
jbe 0x526313
cmp ebp, eax
jne 0x526313
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x5262da
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x526313
push 1
lea ecx, [esp + 0x28]
call fcn.004138a0
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x5262f7
mov eax, 0x6ce1f8
mov dword [esp + 0x28], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x2c], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x30], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x52634e
push 1
push ebp
lea ecx, [esp + 0x2c]
call fcn.00414210
test al, al
je 0x52634e
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x52632f
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x2c], ebp
mov byte [ecx + ebp], bl
mov eax, dword [esp + 0x6e0]
mov byte [esp + 0x7f4], 4
cmp eax, ebx
je 0x52637e
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x526375
cmp al, 0xff
je 0x526375
dec al
mov byte [ecx], al
jmp 0x52637e
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x6e0], ebx
mov dword [esp + 0x6e4], ebx
mov dword [esp + 0x6e8], ebx
mov byte [esp + 0x13], 1
mov edi, dword [esp + 0x1c]
xor esi, esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703784
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70377c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
mov dl, byte [esp + 0x24]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x24], esp
mov byte [ecx], dl
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], ebx
mov eax, dword [0x6ce1fc]
lea edx, [esp + 0x34]
push eax
push ebx
push edx
call fcn.004136a0
push ecx
mov byte [esp + 0x808], 0xb
mov ecx, esp
mov dword [esp + 0x5c], esp
push 6
push 0x70379c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x808], 4
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x526506
dec eax
je 0x5264bc
dec eax
jne 0x525f08
mov al, byte [esp + 0x1a]
cmp al, bl
mov eax, edi
je 0x526490
and eax, 0xff
lea eax, [eax + eax*4]
lea ecx, [esp + eax + 0xbf]
jmp 0x52649f
and eax, 0xff
lea eax, [eax + eax*4]
lea ecx, [esp + eax + 0xb6]
lea edx, [ecx + eax*8]
mov al, byte [esp + 0x13]
cmp al, bl
mov dword [esp + 0x3c], edx
jne 0x5265c9
mov esi, 3
jmp 0x525f08
mov al, byte [esp + 0x1a]
cmp al, bl
mov eax, edi
je 0x5264e6
and eax, 0xff
mov esi, 2
lea eax, [eax + eax*4]
lea ecx, [esp + eax + 0xb6]
lea edx, [ecx + eax*8]
mov dword [esp + 0x3c], edx
jmp 0x525f08
and eax, 0xff
mov esi, 2
lea eax, [eax + eax*4]
lea ecx, [esp + eax + 0xad]
lea edx, [ecx + eax*8]
mov dword [esp + 0x3c], edx
jmp 0x525f08
mov al, byte [esp + 0x1a]
cmp al, bl
mov eax, edi
je 0x52653b
and eax, 0xff
mov esi, 1
lea eax, [eax + eax*4]
lea eax, [eax + eax*8]
lea ecx, [esp + eax + 0xa4]
lea edx, [esp + eax + 0xad]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], edx
jmp 0x525f08
and eax, 0xff
mov esi, 1
lea eax, [eax + eax*4]
lea ecx, [esp + eax + 0xa4]
lea edx, [ecx + eax*8]
mov dword [esp + 0x3c], edx
jmp 0x525f08
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x804], 0xa
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x804], 4
call fcn.006115e0
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x526d35
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x526d2c
cmp al, 0xff
je 0x526d2c
dec al
mov byte [ecx], al
jmp 0x526d35
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x5265ee
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5265e5
cmp al, 0xff
je 0x5265e5
dec al
mov byte [ecx], al
jmp 0x5265ee
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
jmp 0x52871a
mov byte [esp + 0x13], 1
push ecx
lea eax, [esp + 0x804]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
mov esi, dword [esp + 0x44]
cmp si, bx
je 0x526ad2
cmp byte [0x71bb5c], bl
je 0x52664d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 4
push str.1234
call fcn.0060ff10
jmp 0x526685
mov edx, dword [esp + 0x3c]
sub esp, 0x24
mov ecx, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xa8]
call fcn.005436d0
lea ecx, [esp + 0x70]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x50]
mov eax, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0060d6b0
lea ecx, [esp + 0x24]
call fcn.006101a0
lea ecx, [esp + 0x20]
call fcn.00610330
test ax, ax
jle 0x526ccd
cmp si, 1
jne 0x526806
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x704f0c
call fcn.0060ff10
lea ecx, [esp + 0x720]
push ecx
call fcn.0060f170
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x7f4], 0xc
cmp ecx, ebp
jae 0x5266e8
mov ebp, ecx
lea edx, [esp + 0x24]
cmp edx, esi
jne 0x52670b
push ecx
push ebp
lea ecx, [esp + 0x2c]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x2c]
call fcn.004140d0
jmp 0x5267b8
cmp ebp, ebx
jbe 0x52677e
cmp ebp, eax
jne 0x52677e
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x52671f
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x52677e
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x52674a
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x526741
cmp al, 0xff
je 0x526741
dec al
mov byte [ecx], al
jmp 0x52674a
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x526762
mov eax, 0x6ce1f8
mov dword [esp + 0x28], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x2c], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x30], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x5267b8
push 1
push ebp
lea ecx, [esp + 0x2c]
call fcn.00414210
test al, al
je 0x5267b8
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x52679a
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x28]
call fcn.004141f0
mov eax, dword [esp + 0x720]
mov byte [esp + 0x7f4], 4
cmp eax, ebx
je 0x5267e8
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5267df
cmp al, 0xff
je 0x5267df
dec al
mov byte [ecx], al
jmp 0x5267e8
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x720], ebx
mov dword [esp + 0x724], ebx
mov dword [esp + 0x728], ebx
mov byte [esp + 0x13], bl
jmp 0x526ace
cmp si, 2
jne 0x52696c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x704f14
call fcn.0060ff10
lea ecx, [esp + 0x710]
push ecx
call fcn.0060f170
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x7f4], 0xd
cmp ecx, ebp
jae 0x52684e
mov ebp, ecx
lea edx, [esp + 0x24]
cmp edx, esi
jne 0x526871
push ecx
push ebp
lea ecx, [esp + 0x2c]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x2c]
call fcn.004140d0
jmp 0x52691e
cmp ebp, ebx
jbe 0x5268e4
cmp ebp, eax
jne 0x5268e4
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x526885
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x5268e4
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x5268b0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x5268a7
cmp al, 0xff
je 0x5268a7
dec al
mov byte [ecx], al
jmp 0x5268b0
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x5268c8
mov eax, 0x6ce1f8
mov dword [esp + 0x28], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x2c], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x30], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x52691e
push 1
push ebp
lea ecx, [esp + 0x2c]
call fcn.00414210
test al, al
je 0x52691e
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x526900
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x28]
call fcn.004141f0
mov eax, dword [esp + 0x710]
mov byte [esp + 0x7f4], 4
cmp eax, ebx
je 0x52694e
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x526945
cmp al, 0xff
je 0x526945
dec al
mov byte [ecx], al
jmp 0x52694e
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x710], ebx
mov dword [esp + 0x714], ebx
mov dword [esp + 0x718], ebx
mov byte [esp + 0x13], bl
jmp 0x526ace
cmp si, 3
jne 0x526ace
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703764
call fcn.0060ff10
lea ecx, [esp + 0x6d0]
push ecx
call fcn.0060f170
add esp, 8
mov esi, eax
mov eax, dword [esi + 8]
mov ecx, dword [0x6ce1fc]
mov ebp, eax
mov byte [esp + 0x7f4], 0xe
cmp ecx, ebp
jae 0x5269b4
mov ebp, ecx
lea edx, [esp + 0x24]
cmp edx, esi
jne 0x5269d7
push ecx
push ebp
lea ecx, [esp + 0x2c]
call fcn.004140d0
push ebx
push ebx
lea ecx, [esp + 0x2c]
call fcn.004140d0
jmp 0x526a84
cmp ebp, ebx
jbe 0x526a4a
cmp ebp, eax
jne 0x526a4a
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x5269eb
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x526a4a
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x526a16
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x526a0d
cmp al, 0xff
je 0x526a0d
dec al
mov byte [ecx], al
jmp 0x526a16
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x526a2e
mov eax, 0x6ce1f8
mov dword [esp + 0x28], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x2c], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x30], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x526a84
push 1
push ebp
lea ecx, [esp + 0x2c]
call fcn.00414210
test al, al
je 0x526a84
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x526a66
mov esi, 0x6ce1f8
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x28]
call fcn.004141f0
mov eax, dword [esp + 0x6d0]
mov byte [esp + 0x7f4], 4
cmp eax, ebx
je 0x526ab4
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x526aab
cmp al, 0xff
je 0x526aab
dec al
mov byte [ecx], al
jmp 0x526ab4
push ecx
call fcn.00697880
add esp, 4
mov dword [esp + 0x6d0], ebx
mov dword [esp + 0x6d4], ebx
mov dword [esp + 0x6d8], ebx
mov byte [esp + 0x13], 1
mov dword [esp + 0x44], ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x704f0c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x704f14
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
mov cl, byte [esp + 0x24]
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x24], esp
mov byte [esi], cl
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov ecx, dword [esp + 0x3c]
mov eax, dword [0x6ce1fc]
mov edi, ecx
cmp eax, edi
jae 0x526b5b
mov edi, eax
lea edx, [esp + 0x34]
cmp esi, edx
jne 0x526b7a
push eax
push edi
mov ecx, esi
call fcn.004140d0
push ebx
push ebx
mov ecx, esi
call fcn.004140d0
jmp 0x526c02
cmp edi, ebx
jbe 0x526bd5
cmp edi, ecx
jne 0x526bd5
mov eax, dword [esp + 0x38]
cmp eax, ebx
jne 0x526b8f
mov eax, 0x6ce1f8
cmp byte [eax - 1], 0xfe
jae 0x526bd5
push 1
mov ecx, esi
call fcn.004138a0
mov eax, dword [esp + 0x38]
cmp eax, ebx
jne 0x526bab
mov eax, 0x6ce1f8
lea ecx, [esp + 0x34]
mov dword [esi + 4], eax
call fcn.0064dd30
lea ecx, [esp + 0x34]
mov dword [esi + 8], eax
call fcn.004c79f0
mov dword [esi + 0xc], eax
mov eax, dword [esi + 4]
push eax
mov ecx, esi
call fcn.004c22b0
inc byte [eax]
jmp 0x526c02
push 1
push edi
mov ecx, esi
call fcn.00414210
test al, al
je 0x526c02
push edi
lea ecx, [esp + 0x38]
call fcn.004f1770
mov ecx, dword [esi + 4]
push eax
push ecx
call fcn.004c1f10
add esp, 0xc
mov ecx, esi
push edi
call fcn.004141f0
push ecx
mov byte [esp + 0x808], 0x10
mov ecx, esp
mov dword [esp + 0x4c], esp
push 6
push 0x70379c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x808], 4
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x526ca6
dec eax
je 0x526c7f
dec eax
jne 0x526604
mov eax, dword [esp + 0x1c]
and eax, 0xff
lea eax, [eax + eax*4]
lea edx, [esp + eax + 0xb6]
lea eax, [edx + eax*8]
mov dword [esp + 0x3c], eax
mov al, byte [esp + 0x13]
cmp al, bl
jne case.0x525e9e.9
mov dword [esp + 0x44], 3
jmp 0x526604
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x44], 2
and eax, 0xff
lea eax, [eax + eax*4]
lea ecx, [esp + eax + 0xad]
lea edx, [ecx + eax*8]
mov dword [esp + 0x3c], edx
jmp 0x526604
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x44], 1
and eax, 0xff
lea eax, [eax + eax*4]
lea ecx, [esp + eax + 0xa4]
lea edx, [ecx + eax*8]
mov dword [esp + 0x3c], edx
jmp 0x526604
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x804], 0xf
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x804], 4
call fcn.006115e0
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x526d35
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x526d2c
cmp al, 0xff
je 0x526d2c
dec al
mov byte [ecx], al
jmp 0x526d35
push ecx
call fcn.00697880
add esp, 4
lea ecx, [esp + 0x74]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov byte [esp + 0x7f4], 2
call fcn.005416b0
lea ecx, [esp + 0x20]
mov byte [esp + 0x7f4], 1
call fcn.0060ffb0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x7f4], bl
call fcn.0060d280
lea ecx, [esp + 0x800]
mov dword [esp + 0x7f4], 0xffffffff
call fcn.0060ffb0
xor ax, ax
jmp 0x528767
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x3c]
mov byte [esp + 0x13], 1
push ecx
lea eax, [esp + 0x804]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
cmp si, bx
je 0x526f36
cmp byte [0x71bb5c], bl
je 0x526de4
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 4
push str.1234
call fcn.0060ff10
jmp 0x526e18
sub esp, 0x24
mov ecx, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push edi
push ecx
lea ecx, [esp + 0xa8]
call fcn.005436d0
lea ecx, [esp + 0x70]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x50]
mov edx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.0060d6b0
lea ecx, [esp + 0x24]
call fcn.006101a0
lea ecx, [esp + 0x20]
call fcn.00610330
test ax, ax
jle 0x527059
cmp si, 1
jne 0x526e8b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x70de40
call fcn.0060ff10
lea eax, [esp + 0x770]
push eax
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x7f8], 0x11
call fcn.0044fd20
lea ecx, [esp + 0x76c]
mov byte [esp + 0x7f4], 4
call fcn.004131d0
mov byte [esp + 0x13], bl
jmp 0x526f34
cmp si, 2
jne 0x526ee0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x70de38
call fcn.0060ff10
lea ecx, [esp + 0x7a0]
push ecx
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x7f8], 0x12
call fcn.0044fd20
lea ecx, [esp + 0x79c]
mov byte [esp + 0x7f4], 4
call fcn.004131d0
mov byte [esp + 0x13], bl
jmp 0x526f34
cmp si, 3
jne 0x526f34
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703764
call fcn.0060ff10
lea edx, [esp + 0x7c0]
push edx
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x7f8], 0x13
call fcn.0044fd20
lea ecx, [esp + 0x7bc]
mov byte [esp + 0x7f4], 4
call fcn.004131d0
mov byte [esp + 0x13], 1
xor esi, esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70de40
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70de38
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
sub esp, 0x10
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00412ff0
push ecx
mov byte [esp + 0x808], 0x15
mov ecx, esp
mov dword [esp + 0x4c], esp
push 6
push 0x70379c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x808], 4
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x52703b
dec eax
je 0x52701d
dec eax
jne 0x526d9f
mov eax, ebp
and eax, 0xff
lea eax, [eax + eax*4]
lea ecx, [esp + eax + 0xb6]
lea edi, [ecx + eax*8]
mov al, byte [esp + 0x13]
cmp al, bl
jne case.0x525e9e.9
mov esi, 3
jmp 0x526d9f
mov eax, ebp
mov esi, 2
and eax, 0xff
lea eax, [eax + eax*4]
lea edx, [esp + eax + 0xad]
lea edi, [edx + eax*8]
jmp 0x526d9f
mov eax, ebp
mov esi, 1
and eax, 0xff
lea eax, [eax + eax*4]
lea ecx, [esp + eax + 0xa4]
lea edi, [ecx + eax*8]
jmp 0x526d9f
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x804], 0x14
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x804], 4
call fcn.006115e0
lea ecx, [esp + 0x24]
mov byte [esp + 0x7f4], 3
call fcn.004131d0
lea ecx, [esp + 0x74]
mov byte [esp + 0x7f4], 2
call fcn.005416b0
lea ecx, [esp + 0x20]
mov byte [esp + 0x7f4], 1
call fcn.0060ffb0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x7f4], bl
call fcn.0060d280
lea ecx, [esp + 0x800]
mov dword [esp + 0x7f4], 0xffffffff
call fcn.0060ffb0
xor ax, ax
jmp 0x528767
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x3c]
mov byte [esp + 0x13], 1
push ecx
lea edx, [esp + 0x804]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
cmp si, bx
je 0x527241
cmp byte [0x71bb5c], bl
je 0x527150
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 4
push str.1234
call fcn.0060ff10
jmp 0x527184
sub esp, 0x24
lea ecx, [esp + 0x98]
mov eax, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push edi
push eax
call fcn.005436d0
lea ecx, [esp + 0x70]
call fcn.0060d330
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push ecx
lea ecx, [esp + 0x54]
call fcn.0060d6b0
lea ecx, [esp + 0x24]
call fcn.006101a0
lea ecx, [esp + 0x20]
call fcn.00610330
test ax, ax
jle 0x527323
push ecx
cmp si, 1
mov ecx, esp
jne 0x5271f4
mov dword [esp + 0x18], esp
push 6
push 0x703784
call fcn.0060ff10
lea edx, [esp + 0x7e0]
push edx
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x7f8], 0x16
call fcn.0044fd20
lea ecx, [esp + 0x7dc]
mov byte [esp + 0x7f4], 4
call fcn.004131d0
mov byte [esp + 0x13], bl
jmp 0x52723f
mov dword [esp + 0x18], esp
push 6
push 0x703764
call fcn.0060ff10
lea eax, [esp + 0x750]
push eax
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x7f8], 0x17
call fcn.0044fd20
lea ecx, [esp + 0x74c]
mov byte [esp + 0x7f4], 4
call fcn.004131d0
mov byte [esp + 0x13], 1
xor esi, esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703784
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
sub esp, 0x10
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00412ff0
push ecx
mov byte [esp + 0x808], 0x19
mov ecx, esp
mov dword [esp + 0x4c], esp
push 6
push 0x70379c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x808], 4
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x527305
dec eax
jne 0x52710b
mov eax, ebp
and eax, 0xff
lea eax, [eax + eax*4]
lea ecx, [esp + eax + 0xad]
lea edi, [ecx + eax*8]
mov al, byte [esp + 0x13]
cmp al, bl
jne case.0x525e9e.9
mov esi, 2
jmp 0x52710b
mov eax, ebp
mov esi, 1
and eax, 0xff
lea eax, [eax + eax*4]
lea edx, [esp + eax + 0xa4]
lea edi, [edx + eax*8]
jmp 0x52710b
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x804], 0x18
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x804], 4
call fcn.006115e0
lea ecx, [esp + 0x24]
mov byte [esp + 0x7f4], 3
call fcn.004131d0
lea ecx, [esp + 0x74]
mov byte [esp + 0x7f4], 2
call fcn.005416b0
lea ecx, [esp + 0x20]
mov byte [esp + 0x7f4], 1
call fcn.0060ffb0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x7f4], bl
call fcn.0060d280
lea ecx, [esp + 0x800]
mov dword [esp + 0x7f4], 0xffffffff
call fcn.0060ffb0
xor ax, ax
jmp 0x528767
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x3c]
mov byte [esp + 0x13], 1
push ecx
lea eax, [esp + 0x804]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
cmp si, bx
je 0x52750b
cmp byte [0x71bb5c], bl
je 0x52741a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 4
push str.1234
call fcn.0060ff10
jmp 0x52744e
sub esp, 0x24
mov ecx, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push edi
push ecx
lea ecx, [esp + 0xa8]
call fcn.005436d0
lea ecx, [esp + 0x70]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x50]
mov edx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.0060d6b0
lea ecx, [esp + 0x24]
call fcn.006101a0
lea ecx, [esp + 0x20]
call fcn.00610330
test ax, ax
jle 0x5275f8
push ecx
cmp si, 1
mov ecx, esp
jne 0x5274be
mov dword [esp + 0x18], esp
push 6
push 0x70d99c
call fcn.0060ff10
lea eax, [esp + 0x7d0]
push eax
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x7f8], 0x1a
call fcn.0044fd20
lea ecx, [esp + 0x7cc]
mov byte [esp + 0x7f4], 4
call fcn.004131d0
mov byte [esp + 0x13], bl
jmp 0x527509
mov dword [esp + 0x18], esp
push 6
push 0x703764
call fcn.0060ff10
lea ecx, [esp + 0x730]
push ecx
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x7f8], 0x1b
call fcn.0044fd20
lea ecx, [esp + 0x72c]
mov byte [esp + 0x7f4], 4
call fcn.004131d0
mov byte [esp + 0x13], 1
xor esi, esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70d99c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
sub esp, 0x10
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00412ff0
push ecx
mov byte [esp + 0x808], 0x1d
mov ecx, esp
mov dword [esp + 0x4c], esp
push 6
push 0x70379c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x808], 4
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x5275da
dec eax
jne 0x5273d5
cmp byte [esp + 0x70], 3
je case.0x525e9e.9
mov eax, ebp
and eax, 0xff
lea eax, [eax + eax*4]
lea ecx, [esp + eax + 0xad]
lea edi, [ecx + eax*8]
mov al, byte [esp + 0x13]
cmp al, bl
jne case.0x525e9e.9
mov esi, 2
jmp 0x5273d5
mov eax, ebp
mov esi, 1
and eax, 0xff
lea eax, [eax + eax*4]
lea edx, [esp + eax + 0xa4]
lea edi, [edx + eax*8]
jmp 0x5273d5
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x804], 0x1c
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x804], 4
call fcn.006115e0
lea ecx, [esp + 0x24]
mov byte [esp + 0x7f4], 3
call fcn.004131d0
lea ecx, [esp + 0x74]
mov byte [esp + 0x7f4], 2
call fcn.005416b0
lea ecx, [esp + 0x20]
mov byte [esp + 0x7f4], 1
call fcn.0060ffb0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x7f4], bl
call fcn.0060d280
lea ecx, [esp + 0x800]
mov dword [esp + 0x7f4], 0xffffffff
call fcn.0060ffb0
xor ax, ax
jmp 0x528767
push ebx
push 1
push ecx
mov byte [esp + 0x1f], 1
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x804], 0x1e
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x704218
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x804], 4
call fcn.006115e0
mov eax, dword [esp + 0x1c]
and eax, 0xff
lea eax, [eax + eax*4]
lea esi, [eax + eax*8]
mov al, byte [0x71bb5c]
cmp al, bl
lea ebp, [esp + esi + 0xa4]
jne 0x527727
sub esp, 0x24
lea ecx, [esp + 0x98]
mov eax, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push ebp
push eax
call fcn.005436d0
lea ecx, [esp + 0x70]
call fcn.0060d330
mov edi, dword [esp + 0x44]
cmp di, bx
jle 0x5277a7
cmp byte [0x71bb5c], bl
je 0x52774d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 4
push str.1234
call fcn.0060ff10
jmp 0x527781
sub esp, 0x24
mov ecx, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push ebp
push ecx
lea ecx, [esp + 0xa8]
call fcn.005436d0
lea ecx, [esp + 0x70]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x50]
mov edx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.0060d6b0
lea ecx, [esp + 0x24]
call fcn.006101a0
lea ecx, [esp + 0x20]
call fcn.00610330
test ax, ax
jle 0x527a3c
cmp di, 3
sete byte [esp + 0x13]
xor edi, edi
push ecx
lea eax, [esp + 0x804]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703794
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70378c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
cmp byte [esp + 0x1a], bl
je 0x527899
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703764
call fcn.0060ff10
lea ecx, [esp + 0x7b0]
push ecx
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x7f8], 0x20
call fcn.0044fd20
lea ecx, [esp + 0x7ac]
mov byte [esp + 0x7f4], 4
call fcn.004131d0
sub esp, 0x10
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00412ff0
push ecx
mov byte [esp + 0x808], 0x21
mov ecx, esp
mov dword [esp + 0x4c], esp
jmp 0x5278e9
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x98]
lea eax, [eax + eax*4]
push eax
push str._d__
push ecx
call fcn.00698355
add esp, 0xc
lea edx, [esp + 0x98]
lea ecx, [esp + 0x24]
push edx
call fcn.004c2200
sub esp, 0x10
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00412ff0
push ecx
mov byte [esp + 0x808], 0x22
mov ecx, esp
mov dword [esp + 0x4c], esp
push 6
push 0x70379c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x808], 4
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x5279d8
dec eax
je 0x52797c
dec eax
jne 0x52772b
mov al, byte [esp + 0x13]
mov byte [esp + 0x1a], 1
cmp al, bl
jne case.0x525e9e.9
cmp byte [0x71bb5c], bl
jne 0x52796b
sub esp, 0x24
lea edx, [esp + esi + 0xda]
mov ecx, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xa8]
call fcn.005436d0
lea ecx, [esp + 0x70]
call fcn.0060d330
lea ebp, [esp + esi + 0xbf]
mov edi, 3
jmp 0x52772b
mov eax, dword [esp + 0x34]
mov byte [esp + 0x1a], bl
dec eax
mov dword [esp + 0x34], eax
jns 0x527999
mov dword [esp + 0x34], ebx
mov byte [esp + 0x1b], 1
jmp 0x52772b
mov al, byte [esp + 0x34]
mov edx, dword [esp + 0x40]
mov cl, 0x19
and edx, 0xff
imul cl
add edx, esi
lea ebp, [esp + esi + 0xad]
mov byte [esp + edx + 0xad], al
mov al, byte [esp + 0x1b]
cmp al, bl
je 0x5279ce
mov byte [esp + 0x1b], bl
xor edi, edi
jmp 0x52772b
mov edi, 2
jmp 0x52772b
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x48]
inc eax
and ecx, 0xff
cmp eax, ecx
mov byte [esp + 0x1a], bl
mov dword [esp + 0x34], eax
jle 0x527a01
mov dword [esp + 0x34], ecx
mov byte [esp + 0x1b], 1
jmp 0x52772b
mov edx, dword [esp + 0x40]
mov cl, 0x19
imul cl
and edx, 0xff
lea ebp, [esp + esi + 0xad]
add edx, esi
mov byte [esp + edx + 0xad], al
mov al, byte [esp + 0x1b]
cmp al, bl
je 0x527a32
mov byte [esp + 0x1b], bl
xor edi, edi
jmp 0x52772b
mov edi, 1
jmp 0x52772b
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x804], 0x1f
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x804], 4
call fcn.006115e0
lea ecx, [esp + 0x24]
mov byte [esp + 0x7f4], 3
call fcn.004131d0
lea ecx, [esp + 0x74]
mov byte [esp + 0x7f4], 2
call fcn.005416b0
lea ecx, [esp + 0x20]
mov byte [esp + 0x7f4], 1
call fcn.0060ffb0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x7f4], bl
call fcn.0060d280
lea ecx, [esp + 0x800]
mov dword [esp + 0x7f4], 0xffffffff
call fcn.0060ffb0
xor ax, ax
jmp 0x528767
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x3c]
mov byte [esp + 0x13], 1
cmp si, bx
jle 0x527b6a
cmp byte [0x71bb5c], bl
je 0x527b10
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 4
push str.1234
call fcn.0060ff10
jmp 0x527b44
sub esp, 0x24
lea ecx, [esp + 0x98]
mov eax, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push edi
push eax
call fcn.005436d0
lea ecx, [esp + 0x70]
call fcn.0060d330
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push ecx
lea ecx, [esp + 0x54]
call fcn.0060d6b0
lea ecx, [esp + 0x24]
call fcn.006101a0
lea ecx, [esp + 0x20]
call fcn.00610330
test ax, ax
jle 0x527e0f
cmp si, 3
sete byte [esp + 0x13]
xor esi, esi
push ecx
lea edx, [esp + 0x804]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703794
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70378c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
cmp byte [esp + 0x1a], bl
je 0x527c5c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703764
call fcn.0060ff10
lea eax, [esp + 0x790]
push eax
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x7f8], 0x24
call fcn.0044fd20
lea ecx, [esp + 0x78c]
mov byte [esp + 0x7f4], 4
call fcn.004131d0
sub esp, 0x10
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00412ff0
push ecx
mov byte [esp + 0x808], 0x25
mov ecx, esp
mov dword [esp + 0x4c], esp
jmp 0x527cae
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x98]
lea eax, [eax + eax*4]
shl eax, 1
push eax
push str._d__
push ecx
call fcn.00698355
add esp, 0xc
lea edx, [esp + 0x98]
lea ecx, [esp + 0x24]
push edx
call fcn.004c2200
sub esp, 0x10
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00412ff0
push ecx
mov byte [esp + 0x808], 0x26
mov ecx, esp
mov dword [esp + 0x4c], esp
push 6
push 0x70379c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x808], 4
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x527d92
dec eax
je 0x527d1c
dec eax
jne 0x527aee
mov al, byte [esp + 0x13]
mov byte [esp + 0x1a], 1
cmp al, bl
jne case.0x525e9e.9
mov eax, ebp
mov esi, 3
and eax, 0xff
lea eax, [eax + eax*4]
lea ecx, [esp + eax + 0xad]
lea edi, [ecx + eax*8]
jmp 0x527aee
mov eax, dword [esp + 0x34]
mov byte [esp + 0x1a], bl
dec eax
mov dword [esp + 0x34], eax
jns 0x527d39
mov dword [esp + 0x34], ebx
mov byte [esp + 0x1b], 1
jmp 0x527aee
fild dword [esp + 0x34]
mov eax, ebp
and eax, 0xff
fmul qword [0x6d2730]
lea eax, [eax + eax*4]
fadd qword [0x6ce828]
lea esi, [eax + eax*8]
call fcn.00698624
mov edx, dword [esp + 0x40]
lea edi, [esp + esi + 0xa4]
and edx, 0xff
add edx, esi
mov byte [esp + edx + 0xa4], al
mov al, byte [esp + 0x1b]
cmp al, bl
je 0x527d88
mov byte [esp + 0x1b], bl
xor esi, esi
jmp 0x527aee
mov esi, 2
jmp 0x527aee
mov eax, dword [esp + 0x34]
mov byte [esp + 0x1a], bl
inc eax
cmp eax, 0xa
mov dword [esp + 0x34], eax
jle 0x527db6
mov dword [esp + 0x34], 0xa
mov byte [esp + 0x1b], 1
jmp 0x527aee
fild dword [esp + 0x34]
mov eax, ebp
and eax, 0xff
fmul qword [0x6d2730]
lea eax, [eax + eax*4]
fadd qword [0x6ce828]
lea esi, [eax + eax*8]
call fcn.00698624
mov ecx, dword [esp + 0x40]
lea edi, [esp + esi + 0xa4]
and ecx, 0xff
add ecx, esi
mov byte [esp + ecx + 0xa4], al
mov al, byte [esp + 0x1b]
cmp al, bl
je 0x527e05
mov byte [esp + 0x1b], bl
xor esi, esi
jmp 0x527aee
mov esi, 1
jmp 0x527aee
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x804], 0x23
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x804], 4
call fcn.006115e0
lea ecx, [esp + 0x24]
mov byte [esp + 0x7f4], 3
call fcn.004131d0
lea ecx, [esp + 0x74]
mov byte [esp + 0x7f4], 2
call fcn.005416b0
lea ecx, [esp + 0x20]
mov byte [esp + 0x7f4], 1
call fcn.0060ffb0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x7f4], bl
call fcn.0060d280
lea ecx, [esp + 0x800]
mov dword [esp + 0x7f4], 0xffffffff
call fcn.0060ffb0
xor ax, ax
jmp 0x528767
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x804], 0x27
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x70de28
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x804], 4
call fcn.006115e0
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x3c]
cmp si, bx
jle 0x527f72
cmp byte [0x71bb5c], bl
je 0x527f21
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 4
push str.1234
call fcn.0060ff10
jmp 0x527f55
sub esp, 0x24
lea ecx, [esp + 0x98]
mov edx, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push edi
push edx
call fcn.005436d0
lea ecx, [esp + 0x70]
call fcn.0060d330
push ecx
lea ecx, [esp + 0x50]
mov eax, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0060d6b0
lea ecx, [esp + 0x24]
call fcn.006101a0
lea ecx, [esp + 0x20]
call fcn.00610330
test ax, ax
jle 0x5281c1
xor esi, esi
push ecx
lea edx, [esp + 0x804]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703794
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70378c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
cmp byte [esp + 0x1a], bl
je 0x528064
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703764
call fcn.0060ff10
lea eax, [esp + 0x740]
push eax
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x7f8], 0x29
call fcn.0044fd20
lea ecx, [esp + 0x73c]
mov byte [esp + 0x7f4], 4
call fcn.004131d0
sub esp, 0x10
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00412ff0
push ecx
mov byte [esp + 0x808], 0x2a
mov ecx, esp
mov dword [esp + 0x4c], esp
jmp 0x5280b1
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x98]
push eax
push str._d__
push ecx
call fcn.00698355
add esp, 0xc
lea edx, [esp + 0x98]
lea ecx, [esp + 0x24]
push edx
call fcn.004c2200
sub esp, 0x10
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00412ff0
push ecx
mov byte [esp + 0x808], 0x2b
mov ecx, esp
mov dword [esp + 0x4c], esp
push 6
push 0x70379c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x808], 4
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x52814b
dec eax
je 0x5280f1
dec eax
je case.0x525e9e.9
jmp 0x527eff
mov eax, dword [esp + 0x34]
mov byte [esp + 0x1a], bl
dec eax
mov dword [esp + 0x34], eax
jns 0x52810e
mov dword [esp + 0x34], ebx
mov byte [esp + 0x1b], 1
jmp 0x527eff
mov cl, byte [esp + 0x34]
mov eax, ebp
and eax, 0xff
shl cl, 4
lea eax, [eax + eax*4]
lea eax, [eax + eax*8]
mov byte [esp + eax + 0xa9], cl
lea edi, [esp + eax + 0xa4]
cmp byte [esp + 0x1b], bl
je 0x528141
mov byte [esp + 0x1b], bl
xor esi, esi
jmp 0x527eff
mov esi, 2
jmp 0x527eff
mov ecx, dword [esp + 0x34]
mov byte [esp + 0x1a], bl
inc ecx
cmp ecx, 0x10
mov dword [esp + 0x34], ecx
jle 0x52816f
mov dword [esp + 0x34], 0x10
mov byte [esp + 0x1b], 1
jmp 0x527eff
mov eax, ebp
jne 0x528188
and eax, 0xff
lea eax, [eax + eax*4]
lea eax, [eax + eax*8]
mov byte [esp + eax + 0xa9], 0xff
jmp 0x52819d
and eax, 0xff
shl cl, 4
lea eax, [eax + eax*4]
lea eax, [eax + eax*8]
mov byte [esp + eax + 0xa9], cl
lea edi, [esp + eax + 0xa4]
mov al, byte [esp + 0x1b]
cmp al, bl
je 0x5281b7
mov byte [esp + 0x1b], bl
xor esi, esi
jmp 0x527eff
mov esi, 1
jmp 0x527eff
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x804], 0x28
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x804], 4
call fcn.006115e0
lea ecx, [esp + 0x24]
mov byte [esp + 0x7f4], 3
call fcn.004131d0
lea ecx, [esp + 0x74]
mov byte [esp + 0x7f4], 2
call fcn.005416b0
lea ecx, [esp + 0x20]
mov byte [esp + 0x7f4], 1
call fcn.0060ffb0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x7f4], bl
call fcn.0060d280
lea ecx, [esp + 0x800]
mov dword [esp + 0x7f4], 0xffffffff
call fcn.0060ffb0
xor ax, ax
jmp 0x528767
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x804], 0x2c
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x70de20
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x804], 4
call fcn.006115e0
mov eax, dword [esp + 0x1c]
mov ebp, dword [esp + 0x3c]
and eax, 0xff
mov byte [esp + 0x13], 1
lea eax, [eax + eax*4]
lea edi, [eax + eax*8]
cmp si, bx
jle 0x52836b
cmp byte [0x71bb5c], bl
je 0x5282e7
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 4
push str.1234
call fcn.0060ff10
jmp 0x528345
sub esp, 0x24
lea eax, [esp + edi + 0xd1]
mov edx, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push eax
push edx
lea ecx, [esp + 0xa8]
call fcn.005436d0
lea ecx, [esp + 0x70]
call fcn.0060d330
sub esp, 0x24
lea ecx, [esp + 0x98]
mov eax, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push ebp
push eax
call fcn.005436d0
lea ecx, [esp + 0x70]
call fcn.0060d330
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push ecx
lea ecx, [esp + 0x54]
call fcn.0060d6b0
lea ecx, [esp + 0x24]
call fcn.006101a0
lea ecx, [esp + 0x20]
call fcn.00610330
test ax, ax
jle 0x528667
cmp si, 3
sete byte [esp + 0x13]
xor esi, esi
push ecx
lea edx, [esp + 0x804]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.0060fe80
mov ecx, dword [0x71b93c]
call fcn.006206f0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703794
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x7037cc
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
cmp byte [esp + 0x1a], bl
je 0x5284a5
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703764
call fcn.0060ff10
lea eax, [esp + 0x760]
push eax
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x7f8], 0x2e
call fcn.0044fd20
lea ecx, [esp + 0x75c]
mov byte [esp + 0x7f4], 4
call fcn.004131d0
sub esp, 0x10
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00412ff0
push ecx
mov byte [esp + 0x808], 0x2f
mov ecx, esp
mov dword [esp + 0x4c], esp
push 6
push 0x70de18
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x808], 4
call fcn.006208f0
sub esp, 0x10
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00412ff0
push ecx
mov byte [esp + 0x808], 0x30
mov ecx, esp
mov dword [esp + 0x4c], esp
jmp 0x528581
mov eax, dword [esp + 0x34]
lea edx, [esp + 0x98]
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
push str._d__
push edx
call fcn.00698355
add esp, 0xc
lea eax, [esp + 0x98]
lea ecx, [esp + 0x24]
push eax
call fcn.004c2200
sub esp, 0x10
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00412ff0
push ecx
mov byte [esp + 0x808], 0x31
mov ecx, esp
mov dword [esp + 0x4c], esp
push 6
push 0x70de18
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x808], 4
call fcn.006208f0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x70377c
call fcn.0060ff10
lea eax, [esp + 0x780]
push eax
call fcn.0060f170
add esp, 8
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x7f8], 0x32
call fcn.0044fd20
lea ecx, [esp + 0x77c]
mov byte [esp + 0x7f4], 4
call fcn.004131d0
sub esp, 0x10
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00412ff0
push ecx
mov byte [esp + 0x808], 0x33
mov ecx, esp
mov dword [esp + 0x4c], esp
push 6
push 0x70de10
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x808], 4
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x5285f7
dec eax
je 0x5285de
dec eax
jne 0x5282c1
mov al, byte [esp + 0x13]
mov byte [esp + 0x1a], 1
cmp al, bl
lea ebp, [esp + edi + 0xbf]
jne case.0x525e9e.9
mov esi, 3
jmp 0x5282c1
mov byte [esp + 0x1a], bl
lea ebp, [esp + edi + 0xb6]
mov dword [esp + 0x34], ebx
mov esi, 2
jmp 0x5282c1
mov eax, dword [esp + 0x34]
mov byte [esp + 0x1a], bl
inc eax
cmp eax, 0xa
mov dword [esp + 0x34], eax
jle 0x52861b
mov dword [esp + 0x34], 0xa
mov byte [esp + 0x1b], 1
jmp 0x5282c1
fild dword [esp + 0x34]
fmul qword [0x6d2730]
fadd qword [0x6ce828]
call fcn.00698624
mov ecx, dword [esp + 0x40]
lea ebp, [esp + edi + 0xa4]
and ecx, 0xff
add ecx, edi
mov byte [esp + ecx + 0xa4], al
mov al, byte [esp + 0x1b]
cmp al, bl
je 0x52865d
mov byte [esp + 0x1b], bl
xor esi, esi
jmp 0x5282c1
mov esi, 1
jmp 0x5282c1
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x7037f4
call fcn.0060ff10
push ecx
mov byte [esp + 0x804], 0x2d
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x703840
call fcn.0060ff10
mov ecx, 0x71b930
mov byte [esp + 0x804], 4
call fcn.006115e0
lea ecx, [esp + 0x24]
mov byte [esp + 0x7f4], 3
call fcn.004131d0
lea ecx, [esp + 0x74]
mov byte [esp + 0x7f4], 2
call fcn.005416b0
lea ecx, [esp + 0x20]
mov byte [esp + 0x7f4], 1
call fcn.0060ffb0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x7f4], bl
call fcn.0060d280
lea ecx, [esp + 0x800]
mov dword [esp + 0x7f4], 0xffffffff
call fcn.0060ffb0
xor ax, ax
jmp 0x528767
lea ecx, [esp + 0x24]
mov byte [esp + 0x7f4], 3
call fcn.004131d0
lea ecx, [esp + 0x74]
mov byte [esp + 0x7f4], 2
call fcn.005416b0
lea ecx, [esp + 0x20]
mov byte [esp + 0x7f4], 1
call fcn.0060ffb0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x7f4], bl
call fcn.0060d280
lea ecx, [esp + 0x800]
mov dword [esp + 0x7f4], 0xffffffff
call fcn.0060ffb0
mov ax, 1
mov ecx, dword [esp + 0x7ec]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x7e8
ret 8