Function at 0xb7676f
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
mov eax, 0xc7c4bc
call fcn.00be12c8
sub esp, 0x300
push ebx
push esi
xor ebx, ebx
push edi
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 4], ebx
call fcn.0043d78a
mov edi, eax
cmp edi, ebx
je 0xb77b1e
mov ecx, dword [ebp - 0x50]
push ebx
push 0x1f4
call fcn.0049b415
test eax, eax
jne 0xb767d7
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0xfd
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9163
add esp, 0x14
jmp 0xb77b1e
push 0x52
lea ecx, [ebp - 0x28]
call fcn.0079117f
mov byte [ebp - 4], 1
call fcn.00adc3e4
push eax
lea ecx, [ebp - 0x28]
call fcn.00406d17
push dword [ebp + 8]
lea ecx, [ebp - 0x28]
call fcn.0042ceff
mov esi, dword [ebp + 0xc]
push esi
lea ecx, [ebp - 0x28]
call fcn.00406d17
push esi
call fcn.0049bc6f
mov dword [ebp - 0x3c], eax
add eax, 0xfffffff4
cmp eax, 0x3e
pop ecx
ja case.0xb76827.36
movzx eax, byte [eax + 0xb7a1c5]
jmp dword [eax*4 + 0xb7a12d]
push 0xd8
mov ecx, 0xd86a88
call fcn.004030bb
mov dword [ebp + 0xc], eax
cmp eax, ebx
mov byte [ebp - 4], 2
je 0xb76852
push esi
mov ecx, eax
call fcn.00b7a567
jmp 0xb76854
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00b82a00
mov ecx, dword [ebp - 0x2c]
push 3
pop edi
mov byte [ebp - 4], 3
call fcn.0052b5c9
cmp eax, 1
jne 0xb76999
mov esi, fcn.00406a50
push esi
push fcn.00490d26
push edi
push 4
lea eax, [ebp - 0x18]
push eax
call fcn.00be223e
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 4
call fcn.008dfaa5
push ebx
push ebx
lea ecx, [ebp - 0x18]
call fcn.004ce9e3
mov ecx, eax
call fcn.004cea98
mov eax, dword [eax]
cmp eax, ebx
je 0xb768dd
cmp byte [eax], bl
jne 0xb76913
push ebx
push ebx
lea ecx, [ebp - 0x14]
call fcn.004ce9e3
mov ecx, eax
call fcn.004cea98
mov eax, dword [eax]
cmp eax, ebx
je 0xb768f8
cmp byte [eax], bl
jne 0xb76913
push ebx
push ebx
lea ecx, [ebp - 0x10]
call fcn.004ce9e3
mov ecx, eax
call fcn.004cea98
mov eax, dword [eax]
cmp eax, ebx
je 0xb76988
cmp byte [eax], bl
je 0xb76988
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0xb7691f
mov eax, dword [eax - 4]
jmp 0xb76921
xor eax, eax
cmp eax, 0x3c
jle 0xb76932
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
jmp 0xb7696e
mov edx, dword [ebp - 0x14]
cmp edx, ebx
je 0xb7693e
mov eax, dword [edx - 4]
jmp 0xb76940
xor eax, eax
cmp eax, 0x3c
jle 0xb76951
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
jmp 0xb7696e
mov ecx, dword [ebp - 0x10]
cmp ecx, ebx
je 0xb7695d
mov eax, dword [ecx - 4]
jmp 0xb7695f
xor eax, eax
cmp eax, 0x3c
jle 0xb769aa
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0xe4
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9163
add esp, 0x14
push esi
push edi
push 4
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 3
call fcn.00be189b
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00b82a1d
jmp 0xb77b13
cmp ecx, ebx
mov dword [ebp + 0xc], edi
je 0xb769b8
mov eax, dword [ebp - 0x10]
cmp byte [eax], bl
jne 0xb769ce
cmp edx, ebx
mov dword [ebp + 0xc], 2
je 0xb769c7
cmp byte [edx], bl
jne 0xb769ce
mov dword [ebp + 0xc], 1
push dword [ebp + 0xc]
lea ecx, [ebp - 0x28]
call fcn.00406cba
cmp dword [ebp + 0xc], ebx
jle 0xb76a08
mov eax, dword [ebp + 0xc]
lea edi, [ebp - 0x18]
mov dword [ebp + 0xc], eax
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push edi
mov dword [ecx], ebx
call fcn.0041b94d
lea ecx, [ebp - 0x28]
call fcn.0048265c
add edi, 4
dec dword [ebp + 0xc]
jne 0xb769e7
push 3
pop edi
push dword [ebp + 8]
lea ecx, [ebp - 0x28]
call fcn.00406cba
push esi
push edi
push 4
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 3
call fcn.00be189b
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00b82a1d
jmp case.0xb76827.62
mov dword [ebp + 0xc], ebx
cmp dword [ebp - 0x3c], 0xd
mov byte [ebp - 4], 5
jne 0xb76ad8
push 0xb4
mov ecx, 0xd86a88
call fcn.004030bb
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 6
je 0xb76a69
mov ecx, eax
call fcn.00b7a353
jmp 0xb76a6b
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.00b82a33
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 7
call fcn.0052b5c9
cmp eax, 1
je 0xb76ab7
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
call fcn.00b82a50
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 1
jmp 0xb77ae2
mov ecx, dword [ebp - 0x10]
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.008df647
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
call fcn.00b82a50
jmp 0xb76ce2
cmp dword [ebp - 0x3c], 0x22
jne 0xb76b64
push 0xb4
mov ecx, 0xd86a88
call fcn.004030bb
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 8
je 0xb76b06
push ebx
mov ecx, eax
call fcn.00b7a3e8
jmp 0xb76b08
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.00b82a33
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 9
call fcn.0052b5c9
cmp eax, 1
je 0xb76b48
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
jmp 0xb76aa6
mov ecx, dword [ebp - 0x10]
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.008df647
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
jmp 0xb76ace
cmp dword [ebp - 0x3c], 0x23
jne 0xb76bf1
push 0xb4
mov ecx, 0xd86a88
call fcn.004030bb
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0xa
je 0xb76b93
push 1
mov ecx, eax
call fcn.00b7a3e8
jmp 0xb76b95
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.00b82a33
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 0xb
call fcn.0052b5c9
cmp eax, 1
je 0xb76bd5
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
jmp 0xb76aa6
mov ecx, dword [ebp - 0x10]
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.008df647
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
jmp 0xb76ace
push 0xafc
mov ecx, 0xd86a88
call fcn.004030bb
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0xc
je 0xb76c14
mov ecx, eax
call fcn.00af9a95
jmp 0xb76c16
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.0042d838
push ebx
push 1
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0xe2
push eax
mov byte [ebp - 4], 0xd
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push ebx
push 3
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xd
call fcn.0042d526
mov ecx, eax
call fcn.00b02db1
mov ecx, dword [ebp - 0x2c]
push ebx
push ebx
push 0x3c
push ebx
push ebx
call fcn.00b030a5
mov ecx, dword [ebp - 0x2c]
call fcn.00afa708
mov ecx, dword [ebp - 0x2c]
call fcn.0052b5c9
cmp eax, 1
je 0xb76ca2
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.0042d855
jmp 0xb76aab
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0xb8]
push eax
call fcn.0055e1f1
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xf
call fcn.0041b94d
mov eax, dword [ebp - 0xb8]
cmp eax, ebx
mov byte [ebp - 4], 0xd
je 0xb76cd6
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.0042d855
push ebx
push ebx
lea ecx, [ebp + 0xc]
call fcn.004ce9e3
mov ecx, eax
call fcn.004cea98
mov eax, dword [eax]
cmp eax, ebx
je 0xb76aab
cmp byte [eax], bl
je 0xb76aab
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp + 8]
mov dword [ebp + 8], ebx
call fcn.0041b94d
push 1
push 1
push ebx
push 1
push 0x400
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x10
call fcn.00419879
push eax
call fcn.0087a6ab
add esp, 0x10
or edi, 0xffffffff
push edi
lea ecx, [ebp + 8]
mov esi, eax
call fcn.00419924
cmp esi, ebx
jne 0xb76da8
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0xe3
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9163
mov eax, dword [ebp + 8]
add esp, 0x14
cmp eax, ebx
mov byte [ebp - 4], 5
je 0xb76d80
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
mov eax, dword [ebp + 0xc]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0xb76d95
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call fcn.0042db5c
mov dword [ebp - 4], edi
jmp 0xb77b22
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0xb76db4
mov ecx, dword [eax - 4]
jmp 0xb76db6
xor ecx, ecx
cmp ecx, 0x50
jle 0xb76dcc
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0x1000
jmp 0xb76d56
cmp eax, ebx
je 0xb76dd5
mov eax, dword [eax - 4]
jmp 0xb76dd7
xor eax, eax
cmp eax, 0x3c
jle 0xb76df0
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0xe4
jmp 0xb76d56
push ecx
mov ecx, esp
lea eax, [ebp + 0xc]
mov dword [ebp - 0x34], esp
push eax
mov dword [ecx], ebx
call fcn.0041b94d
lea ecx, [ebp - 0x28]
call fcn.0048265c
cmp dword [ebp - 0x3c], 0xd
je 0xb76e1b
cmp dword [ebp - 0x3c], 0x22
je 0xb76e1b
cmp dword [ebp - 0x3c], 0x23
jne 0xb76e26
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
call fcn.00406cba
mov eax, dword [ebp + 8]
cmp eax, ebx
mov byte [ebp - 4], 5
je 0xb76e3b
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 1
jmp 0xb77779
cmp dword [0xd7c464], ebx
jne 0xb76e7d
push 0x9ec
mov ecx, 0xd86a88
call fcn.004030bb
mov dword [ebp + 0xc], eax
cmp eax, ebx
mov byte [ebp - 4], 0x11
je 0xb77b13
push esi
push dword [ebp + 8]
mov ecx, eax
call fcn.0069dc5d
jmp 0xb77b13
lea eax, [ebp - 0x9c]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x12
call fcn.004a6f59
mov eax, dword [ebp - 0x9c]
pop ecx
pop ecx
mov byte [ebp - 4], 1
jmp 0xb77ae2
cmp dword [0xd7c464], ebx
jne 0xb76ee5
push 0x9d0
mov ecx, 0xd86a88
call fcn.004030bb
mov dword [ebp + 0xc], eax
cmp eax, ebx
mov byte [ebp - 4], 0x13
je 0xb77b13
push esi
push dword [ebp + 8]
mov ecx, eax
call fcn.0093cead
jmp 0xb77b13
lea eax, [ebp - 0xa4]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x14
call fcn.004a6f59
mov eax, dword [ebp - 0xa4]
pop ecx
pop ecx
mov byte [ebp - 4], 1
jmp 0xb77ae2
cmp dword [0xd7c464], ebx
jne 0xb76f4c
push 0xb0
mov ecx, 0xd86a88
call fcn.004030bb
mov ecx, eax
mov dword [ebp + 0xc], ecx
cmp ecx, ebx
mov byte [ebp - 4], 0x15
je 0xb77b13
push dword [ebp + 8]
call fcn.00a2c9c9
jmp 0xb77b13
lea eax, [ebp - 0xb0]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x16
call fcn.004a6f59
mov eax, dword [ebp - 0xb0]
pop ecx
pop ecx
mov byte [ebp - 4], 1
jmp 0xb77ae2
mov ecx, dword [0xd7c420]
push esi
lea eax, [ebp + 0xc]
push eax
call fcn.00684bb7
cmp dword [ebp + 0xc], ebx
mov byte [ebp - 4], 0x17
jne 0xb76f9f
lea ecx, [ebp + 0xc]
jmp 0xb77b0e
cmp dword [0xd7c464], ebx
je 0xb76fde
lea eax, [ebp - 0x60]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x18
call fcn.004a6f59
mov eax, dword [ebp - 0x60]
cmp eax, ebx
pop ecx
pop ecx
mov byte [ebp - 4], 0x17
je 0xb76f97
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
jmp 0xb76f97
mov eax, dword [0xd82bc8]
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
call fcn.005348cf
cmp dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x19
je 0xb77057
push 0xa18
mov ecx, 0xd86a88
call fcn.004030bb
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x1a
je 0xb77046
push esi
push dword [ebp + 8]
lea eax, [ebp - 0x28]
sub esp, 0x10
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.00b7b458
mov ecx, dword [ebp + 0x10]
call fcn.00938962
mov esi, eax
jmp 0xb77048
xor esi, esi
mov byte [ebp - 4], 0x19
call fcn.0043d78a
mov dword [eax + 0x214], esi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x17
call fcn.005348ec
jmp 0xb76f97
cmp esi, 0x4dab34
setne al
push 0xb8
mov ecx, 0xd86a88
dec eax
and eax, 0x46
mov byte [ebp + 0x10], al
call fcn.004030bb
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x1b
je 0xb7709e
push dword [ebp + 0x10]
mov ecx, eax
call fcn.008d9e61
jmp 0xb770a0
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00b82a66
mov eax, dword [ebp + 0x14]
cmp eax, ebx
mov byte [ebp - 4], 0x1c
je 0xb770f6
cmp byte [eax], bl
je 0xb770f6
push ecx
mov ecx, esp
lea eax, [ebp + 0x14]
mov dword [ebp - 0x34], esp
push eax
mov dword [ecx], ebx
call fcn.0041b94d
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1c
call fcn.00b81a36
mov ecx, eax
call fcn.008da4fe
mov ecx, dword [ebp - 0x10]
call fcn.0052b5c9
cmp eax, 1
je 0xb77114
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00b82a83
jmp 0xb77b13
mov dword [ebp + 8], ebx
mov dword [ebp + 0xc], ebx
mov ecx, dword [ebp - 0x10]
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x1f
call fcn.008da545
push ecx
mov ecx, esp
lea eax, [ebp + 8]
mov dword [ebp - 0x34], esp
push eax
mov dword [ecx], ebx
call fcn.0041b94d
lea ecx, [ebp - 0x28]
call fcn.0048265c
push ecx
mov ecx, esp
lea eax, [ebp + 0xc]
mov dword [ebp - 0x34], esp
push eax
mov dword [ecx], ebx
call fcn.0041b94d
lea ecx, [ebp - 0x28]
call fcn.0048265c
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
call fcn.00406cba
mov eax, dword [ebp + 0xc]
cmp eax, ebx
mov byte [ebp - 4], 0x1e
je 0xb77180
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
mov eax, dword [ebp + 8]
cmp eax, ebx
mov byte [ebp - 4], 0x1c
je 0xb77195
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00b82a83
jmp case.0xb76827.62
cmp dword [edi + 0x20], ebx
jne 0xb771d4
mov ecx, edi
call fcn.00b7a30b
test eax, eax
jne 0xb771d4
mov eax, dword [0xd808ac]
cmp dword [eax + 0xec], ebx
jne 0xb771d4
cmp dword [eax + 0x100], ebx
jne 0xb771d4
test byte [edi + 0x159], 0x40
je 0xb771fd
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x18e1
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9163
add esp, 0x14
jmp 0xb77b13
mov ecx, dword [0xd7c420]
push esi
lea eax, [ebp + 8]
push eax
call fcn.00684bb7
cmp dword [ebp + 8], ebx
mov byte [ebp - 4], 0x20
jne 0xb7721e
lea ecx, [ebp + 8]
jmp 0xb77b0e
push 0xafc
mov ecx, 0xd86a88
call fcn.004030bb
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x21
je 0xb77241
mov ecx, eax
call fcn.00af9a95
jmp 0xb77243
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x20
call fcn.0042d838
push ebx
push 1
pop esi
push esi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x2a1
push eax
mov byte [ebp - 4], 0x22
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push ebx
push 3
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x22
call fcn.0042d526
mov ecx, eax
call fcn.00b02db1
mov ecx, dword [ebp - 0x34]
push ebx
push ebx
push 0x23
push ebx
push ebx
call fcn.00b030a5
mov ecx, dword [ebp - 0x34]
call fcn.00afa708
mov ecx, dword [ebp - 0x34]
call fcn.0052b5c9
cmp eax, esi
jne 0xb77351
mov ecx, dword [ebp - 0x34]
lea eax, [ebp + 0xc]
push eax
call fcn.0055e1f1
push ebx
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x24
call fcn.004ce9e3
mov ecx, eax
call fcn.004cea98
mov eax, dword [eax]
cmp eax, ebx
je 0xb7733c
cmp byte [eax], bl
je 0xb7733c
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00419879
push eax
call fcn.0087a6ab
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00419924
cmp esi, ebx
jne 0xb77362
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xe3
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9163
add esp, 0x14
mov eax, dword [ebp + 0xc]
cmp eax, ebx
mov byte [ebp - 4], 0x22
je 0xb77351
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x20
call fcn.0042d855
jmp 0xb77216
push ecx
mov ecx, esp
lea eax, [ebp + 0xc]
mov dword [ebp + 0x10], esp
push eax
mov dword [ecx], ebx
call fcn.0041b94d
lea ecx, [ebp - 0x28]
call fcn.0048265c
mov eax, dword [ebp + 0xc]
cmp eax, ebx
mov byte [ebp - 4], 0x22
je 0xb77390
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x20
call fcn.0042d855
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb77aa9
mov ecx, dword [0xd7c46c]
lea eax, [ebp - 0x104]
push eax
call fcn.0042abbb
mov esi, dword [eax + 4]
lea ecx, [ebp - 0x104]
call fcn.0042d822
push ebx
mov ecx, esi
call fcn.004806f6
mov esi, eax
cmp esi, ebx
je 0xb77b13
mov edi, dword [0xd7c420]
lea ecx, [esi + 0xc]
call fcn.0042d5a8
push eax
lea eax, [ebp + 8]
push eax
mov ecx, edi
call fcn.00677f9a
mov eax, dword [0xd8d9b0]
add esi, 0x28
cmp esi, ebx
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x40], esi
mov ecx, esi
jne 0xb7740b
mov ecx, eax
cmp dword [ebp + 8], ebx
je 0xb77413
mov eax, dword [ebp + 8]
push ecx
push eax
call fcn.00bee280
test eax, eax
pop ecx
pop ecx
je 0xb77455
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0x2a2
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9274
add esp, 0x14
cmp eax, 6
je 0xb77455
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 1
jmp 0xb77ae2
push 0xafc
mov ecx, 0xd86a88
call fcn.004030bb
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x26
je 0xb77478
mov ecx, eax
call fcn.00af9a95
jmp 0xb7747a
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x25
call fcn.0042d838
push ebx
push 1
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0x2a3
push eax
mov byte [ebp - 4], 0x27
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push ebx
push 3
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x27
call fcn.0042d526
mov ecx, eax
call fcn.00b02db1
mov ecx, dword [ebp - 0x44]
push 1
push ebx
push 0xc
push 4
push ebx
call fcn.00b030a5
mov ecx, dword [ebp - 0x44]
call fcn.00afa708
mov ecx, dword [ebp - 0x44]
call fcn.0052b5c9
cmp eax, 1
je 0xb77508
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x25
call fcn.0042d855
jmp 0xb77449
mov ecx, dword [ebp - 0x44]
lea eax, [ebp + 0xc]
push eax
call fcn.0055e1f1
push 1
mov edi, 0x400
push edi
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x29
call fcn.00419879
mov esi, eax
xor eax, eax
mov al, byte [esi]
cmp al, bl
je 0xb77552
push eax
call dword [sym.imp.kernel32.dll_IsDBCSLeadByte]
test eax, eax
je 0xb7754f
cmp word [esi], 0xa1a1
jne 0xb7754b
mov byte [esi + 1], 0x20
mov byte [esi], 0x20
inc esi
inc esi
jmp 0xb7752c
inc esi
jmp 0xb7752c
or esi, 0xffffffff
push esi
lea ecx, [ebp + 0xc]
call fcn.00419924
push ebx
push ebx
lea ecx, [ebp + 0xc]
call fcn.004ce9e3
mov ecx, eax
call fcn.004cea98
mov eax, dword [eax]
cmp eax, ebx
je 0xb77579
cmp byte [eax], bl
jne 0xb775c2
mov eax, dword [ebp + 0xc]
cmp eax, ebx
mov byte [ebp - 4], 0x27
je 0xb7758e
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x25
call fcn.0042d855
mov eax, dword [ebp + 8]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0xb775af
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call fcn.0042db5c
mov dword [ebp - 4], esi
jmp 0xb77b22
push ebx
push 1
push ebx
push 1
push edi
lea ecx, [ebp + 0xc]
call fcn.00419879
push eax
call fcn.0087a6ab
add esp, 0x10
push esi
lea ecx, [ebp + 0xc]
mov edi, eax
call fcn.00419924
cmp edi, ebx
jne 0xb77612
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0xe3
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9163
add esp, 0x14
jmp 0xb77579
push 0xd3c340
push 0xd41670
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp + 0xc]
call fcn.007b4299
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x2a
call fcn.0041b94d
mov eax, dword [ebp - 0xd0]
cmp eax, ebx
mov byte [ebp - 4], 0x29
je 0xb77650
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
mov ecx, dword [ebp + 0xc]
cmp ecx, ebx
mov eax, dword [0xd8d9b0]
jne 0xb7765e
mov ecx, eax
cmp dword [ebp + 8], ebx
je 0xb77666
mov eax, dword [ebp + 8]
push ecx
push eax
call fcn.00bee280
test eax, eax
pop ecx
pop ecx
je 0xb77790
mov ecx, dword [ebp - 0x40]
cmp ecx, ebx
mov eax, dword [0xd8d9b0]
jne 0xb77685
mov ecx, eax
cmp dword [ebp + 0xc], ebx
je 0xb7768d
mov eax, dword [ebp + 0xc]
push ecx
push eax
call fcn.00be2140
test eax, eax
pop ecx
pop ecx
je 0xb77790
mov dword [ebp + 0x10], ebx
lea eax, [ebp - 0x68]
push 0x2a5
push eax
mov byte [ebp - 4], 0x2b
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push dword [ebp + 0xc]
mov eax, dword [eax]
push eax
lea eax, [ebp + 0x10]
push eax
mov byte [ebp - 4], 0x2c
call fcn.0044e655
mov eax, dword [ebp - 0x68]
add esp, 0xc
cmp eax, ebx
mov byte [ebp - 4], 0x2b
je 0xb776e5
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
push ebx
push ebx
push ebx
push ebx
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.0042d265
call fcn.00ae9274
add esp, 0x14
cmp eax, 6
je 0xb77723
mov eax, dword [ebp + 0x10]
cmp eax, ebx
mov byte [ebp - 4], 0x29
je 0xb77579
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
jmp 0xb77579
push ecx
mov ecx, esp
lea eax, [ebp + 0xc]
mov dword [ebp - 0x34], esp
push eax
mov dword [ecx], ebx
call fcn.0041b94d
lea ecx, [ebp - 0x28]
call fcn.0048265c
mov eax, dword [ebp + 0x10]
cmp eax, ebx
mov byte [ebp - 4], 0x29
je 0xb77751
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
mov eax, dword [ebp + 0xc]
cmp eax, ebx
mov byte [ebp - 4], 0x27
je 0xb77766
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x25
call fcn.0042d855
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 1
cmp eax, ebx
je case.0xb76827.62
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
jmp case.0xb76827.62
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0x2a4
jmp 0xb775f8
cmp dword [0xd7c464], ebx
je 0xb777de
lea eax, [ebp - 0xac]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x2d
call fcn.004a6f59
mov eax, dword [ebp - 0xac]
pop ecx
pop ecx
mov byte [ebp - 4], 1
jmp 0xb77ae2
mov ecx, dword [0xd7c420]
push esi
lea eax, [ebp + 0xc]
push eax
call fcn.00684bb7
cmp dword [ebp + 0xc], ebx
mov byte [ebp - 4], 0x2e
jne 0xb777ff
lea ecx, [ebp + 0xc]
jmp 0xb77b0e
mov ecx, dword [ebp - 0x50]
call fcn.00b7da94
xor edx, edx
mov ecx, 0x3e8
div ecx
cmp eax, 0xde2b0
jne 0xb77855
mov ecx, dword [ebp - 0x50]
call fcn.00b7da94
cmp eax, 0x363d7f80
je 0xb77855
lea eax, [ebp - 0x70]
push 0xd66
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x2f
call fcn.004a6f59
mov eax, dword [ebp - 0x70]
pop ecx
pop ecx
mov byte [ebp - 4], 0x2e
jmp 0xb77a12
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp + 0x10], ebx
push 0xc0
mov ecx, 0xd86a88
mov byte [ebp - 4], 0x32
call fcn.004030bb
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x33
je 0xb77886
push esi
mov ecx, eax
call fcn.008d977d
jmp 0xb77888
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x32
call fcn.00b82a99
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 0x34
call fcn.0052b5c9
push 1
pop esi
cmp eax, esi
jne 0xb779d5
mov ecx, dword [ebp - 0x10]
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.008d9d8d
lea ecx, [ebp - 0x14]
call fcn.00b82ab6
push 0xa
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x4c]
call fcn.004fcebb
lea ecx, [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x78]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x35
call fcn.00486cf9
push 0xa
lea ecx, [ebp - 0xb4]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x36
call fcn.004fcebb
lea ecx, [ebp + 0x10]
push ecx
lea ecx, [ebp + 8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x37
call fcn.00486cf9
mov eax, dword [ebp - 0xb4]
cmp eax, ebx
mov byte [ebp - 4], 0x3b
je 0xb77941
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
mov eax, dword [ebp - 0x78]
cmp eax, ebx
mov byte [ebp - 4], 0x3a
je 0xb77956
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
mov eax, dword [ebp - 0xbc]
cmp eax, ebx
mov byte [ebp - 4], 0x39
je 0xb7796e
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 8]
call fcn.00419879
push eax
call fcn.0087a6ab
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 8]
mov esi, eax
call fcn.00419924
cmp esi, ebx
jne 0xb77a29
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0xe3
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9163
mov eax, dword [ebp + 8]
add esp, 0x14
cmp eax, ebx
mov byte [ebp - 4], 0x34
je 0xb779d5
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x32
call fcn.00b82ab6
mov eax, dword [ebp + 0x10]
cmp eax, ebx
mov byte [ebp - 4], 0x31
je 0xb779f6
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
mov byte [ebp - 4], 0x30
je 0xb77a0b
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x2e
cmp eax, ebx
je 0xb777f7
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
jmp 0xb777f7
push ecx
mov ecx, esp
lea eax, [ebp + 8]
mov dword [ebp - 0x34], esp
push eax
mov dword [ecx], ebx
call fcn.0041b94d
lea ecx, [ebp - 0x28]
call fcn.0048265c
mov eax, dword [ebp + 8]
cmp eax, ebx
mov byte [ebp - 4], 0x34
je 0xb77a57
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x32
call fcn.00b82ab6
mov eax, dword [ebp + 0x10]
cmp eax, ebx
mov byte [ebp - 4], 0x31
je 0xb77a78
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
mov byte [ebp - 4], 0x30
je 0xb77a8d
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
mov eax, dword [ebp - 0x4c]
cmp eax, ebx
mov byte [ebp - 4], 0x2e
je 0xb77aa2
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.0040283f
jmp case.0xb76827.62
cmp dword [0xd7c464], ebx
je 0xb77af2
lea eax, [ebp - 0x80]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x3c
call fcn.004a6f59
mov eax, dword [ebp - 0x80]
pop ecx
pop ecx
mov byte [ebp - 4], 1
cmp eax, ebx
je 0xb77b13
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
jmp 0xb77b13
mov ecx, dword [0xd7c420]
push esi
lea eax, [ebp + 8]
push eax
call fcn.00684bb7
cmp dword [ebp + 8], ebx
mov byte [ebp - 4], 0x3d
jne 0xb77b3c
lea ecx, [ebp + 8]
call fcn.0040283f
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call fcn.0042db5c
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x14]
cmp eax, ebx
je 0xb7a11c
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
jmp 0xb7a11c
push 0xafc
mov ecx, 0xd86a88
call fcn.004030bb
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x3e
je 0xb77b5f
mov ecx, eax
call fcn.00af9a95
jmp 0xb77b61
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, eax
add eax, 0xfffffff8
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3d
call fcn.0042d838
mov dword [ebp + 0xc], ebx
push esi
mov byte [ebp - 4], 0x40
call fcn.0048128b
cmp eax, 0x13
pop ecx
jne 0xb77bf2
mov eax, esi
cdq
mov ecx, 0x3e8
idiv ecx
cmp eax, 0x1452
jne 0xb77bf2
lea eax, [ebp - 0xc4]
push 0x1796
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push dword [eax]
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x41
call fcn.0044e655
mov eax, dword [ebp - 0xc4]
cmp eax, ebx
pop ecx
pop ecx
mov byte [ebp - 4], 0x40
je 0xb77c8d
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
jmp 0xb77c8d
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x840
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x40
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov esi, eax
lea eax, [ebp - 0x88]
push 0x2a6
push eax
mov byte [ebp - 4], 0x43
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
mov edi, eax
push esi
mov byte [ebp - 4], 0x44
call fcn.004175f4
pop ecx
pop ecx
push eax
mov ecx, edi
call fcn.0042d27a
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0044e655
mov eax, dword [ebp - 0x88]
add esp, 0xc
cmp eax, ebx
mov byte [ebp - 4], 0x43
je 0xb77c7e
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0x40
call fcn.004032f6
push ebx
push ebx
push ebx
push ebx
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0042d265
call fcn.00ae9274
add esp, 0x14
cmp eax, 6
mov byte [ebp - 4], 0x3f
lea ecx, [ebp + 0xc]
je 0xb77ccd
call fcn.00406a50
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3d
call fcn.0042d521
lea ecx, [ebp + 8]
jmp 0xb79f4f
call fcn.00406a50
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3d
call fcn.0042d521
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb79f71
mov ecx, edi
call fcn.00b7a33b
test eax, eax
jne 0xb77d00
mov ecx, edi
call fcn.00b7a30b
test eax, eax
je 0xb77d14
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x18e1
jmp 0xb7a0a4
lea eax, [ebp + 0xc]
push esi
push eax
call fcn.0042d312
mov ecx, eax
call fcn.00684bb7
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x45
call fcn.00417238
test al, al
je 0xb77d3e
lea ecx, [ebp + 0xc]
jmp 0xb79f4f
lea ecx, [ebp + 8]
call fcn.00490d26
lea eax, [ebp - 0xd4]
push 0x51e
push eax
mov byte [ebp - 4], 0x46
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
mov ecx, eax
mov byte [ebp - 4], 0x47
call fcn.007b22a3
push eax
lea eax, [ebp - 0x90]
push esi
push eax
call fcn.0042d312
mov ecx, eax
call fcn.0067805a
mov esi, eax
lea eax, [ebp - 0xcc]
push 0x154
push eax
mov byte [ebp - 4], 0x48
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push dword [esi]
mov ecx, eax
mov byte [ebp - 4], 0x49
call fcn.0042d27a
push eax
lea eax, [ebp + 8]
push eax
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x48
call fcn.00406a50
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x47
call fcn.00406a50
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x46
call fcn.004033ea
push ebx
push ebx
push ebx
push ebx
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.0042d265
call fcn.00ae9274
add esp, 0x14
cmp eax, 6
je 0xb77e18
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x45
call fcn.00406a50
jmp 0xb77d36
push 0xffffffffffffffff
push 0xd808dc
push ecx
mov eax, esp
mov dword [ebp - 0x34], esp
push 0x666
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x46
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x4b
call fcn.00443744
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.00911324
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x4d
call fcn.00403688
mov esi, 0xd8d000
push esi
lea ecx, [ebp - 0x15c]
call fcn.0040b655
push esi
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x4e
call fcn.0040b655
push ebx
push ebx
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x4f
call fcn.004173e3
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.004033d8
lea eax, [ebp - 0x17c]
push eax
mov byte [ebp - 4], 0x4f
call fcn.00406be3
mov ecx, eax
call fcn.004026d6
mov ecx, eax
call fcn.00403ae9
mov ecx, eax
mov byte [ebp - 4], 0x51
call fcn.00403308
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp + 0x10]
call fcn.00b847e6
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x55
call fcn.00403688
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x54
call fcn.00403688
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x53
call fcn.00403688
lea ecx, [ebp + 0x10]
call fcn.00b80c42
mov ecx, eax
call fcn.006f7187
push eax
lea ecx, [ebp - 0x28]
call fcn.00406d17
lea ecx, [ebp + 0x10]
call fcn.0044d90c
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x46
call fcn.004026b4
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x45
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
jmp 0xb79f71
call fcn.00b8169e
test eax, eax
je 0xb77fa8
lea eax, [ebp - 0xdc]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x56
call fcn.004a6f59
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xdc]
jmp 0xb79e1a
lea eax, [ebp + 0xc]
push esi
push eax
call fcn.0042d312
mov ecx, eax
call fcn.00684bb7
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x57
call fcn.00417238
test al, al
je 0xb77fd2
lea ecx, [ebp + 0xc]
jmp 0xb79f4f
mov ecx, dword [ebp - 0x50]
lea eax, [ebp - 0x10c]
push eax
call fcn.0042abbb
mov ecx, eax
mov byte [ebp - 4], 0x58
call fcn.0042d4d2
lea ecx, [ebp - 0x10c]
mov esi, eax
mov byte [ebp - 4], 0x57
call fcn.0042d4bc
mov ecx, esi
call fcn.009fdf04
movsx eax, ax
push eax
call fcn.00b7a234
test eax, eax
pop ecx
jl 0xb77fca
mov ecx, esi
call fcn.009fdf04
movsx eax, ax
push eax
call fcn.00b7a234
cmp eax, 9
pop ecx
jge 0xb77fca
mov esi, 0xcc
push esi
mov dword [ebp + 8], ebx
mov dword [ebp + 0x10], ebx
call fcn.00402659
pop ecx
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x59
je 0xb7804e
mov ecx, eax
call fcn.00b7a709
jmp 0xb78050
xor eax, eax
push 1
pop edi
push edi
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x57
call fcn.00b81a44
push ebx
push ebx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x5a
call fcn.00b81a76
mov ecx, eax
call fcn.00b7a767
lea ecx, [ebp - 0x30]
call fcn.00b81a76
mov ecx, eax
call fcn.00b7a77e
lea ecx, [ebp - 0x30]
call fcn.00b81a76
mov ecx, eax
call fcn.0052b5c9
cmp eax, edi
je 0xb780a9
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x57
call fcn.00b81a3f
jmp 0xb77fca
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x30]
call fcn.00b81a76
mov ecx, eax
call fcn.00b7a822
push esi
call fcn.00402659
pop ecx
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x5b
je 0xb780db
mov ecx, eax
call fcn.00b7a709
jmp 0xb780dd
xor eax, eax
push edi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x5a
call fcn.00b81a44
push ebx
push dword [ebp + 8]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x5c
call fcn.00b81a76
mov ecx, eax
call fcn.00b7a767
lea ecx, [ebp - 0x14]
call fcn.00b81a76
mov ecx, eax
call fcn.00b7a77e
lea ecx, [ebp - 0x14]
call fcn.00b81a76
mov ecx, eax
call fcn.0052b5c9
cmp eax, edi
jne 0xb781b5
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00b81a76
mov ecx, eax
call fcn.00b7a822
push 0xac
call fcn.00402659
pop ecx
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x5d
je 0xb7815e
mov ecx, eax
call fcn.00b7a90a
jmp 0xb78160
xor eax, eax
push edi
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x5c
call fcn.00b81a7f
push dword [ebp + 0x10]
lea ecx, [ebp - 0x48]
push dword [ebp + 8]
mov byte [ebp - 4], 0x5e
call fcn.00b81ab1
mov ecx, eax
call fcn.00b7a93e
lea ecx, [ebp - 0x48]
call fcn.00b81ab1
mov ecx, eax
call fcn.00b7a955
lea ecx, [ebp - 0x48]
call fcn.00b81ab1
mov ecx, eax
call fcn.0052b5c9
cmp eax, edi
je 0xb781c6
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x5c
call fcn.00b81a7a
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x5a
call fcn.00b81a3f
jmp 0xb78098
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x48]
call fcn.00b81ab1
mov ecx, eax
call fcn.00b7a9a3
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
call fcn.00406d17
push dword [ebp + 8]
lea ecx, [ebp - 0x28]
call fcn.00406d17
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x5c
call fcn.00b81a7a
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x5a
call fcn.00b81a3f
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x57
call fcn.00b81a3f
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
jmp 0xb79f71
call fcn.00b8169e
test eax, eax
je 0xb7825e
lea eax, [ebp - 0xa0]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x5f
call fcn.004a6f59
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa0]
jmp 0xb79e1a
lea eax, [ebp + 0xc]
push esi
push eax
call fcn.0042d312
mov ecx, eax
call fcn.00684bb7
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x60
call fcn.00417238
test al, al
je 0xb78288
lea ecx, [ebp + 0xc]
jmp 0xb79f4f
mov ecx, dword [ebp - 0x50]
lea eax, [ebp - 0x13c]
push eax
call fcn.0042abbb
mov ecx, eax
mov byte [ebp - 4], 0x61
call fcn.0042d4d2
mov edi, eax
lea ecx, [ebp - 0x13c]
mov dword [ebp - 0x40], edi
mov byte [ebp - 4], 0x60
call fcn.0042d4bc
mov ecx, edi
call fcn.009fdf04
movsx eax, ax
push eax
call fcn.00b7a234
cmp eax, 1
pop ecx
jl 0xb78280
mov ecx, edi
call fcn.009fdf04
movsx eax, ax
push eax
call fcn.00b7a234
cmp eax, 9
pop ecx
jge 0xb78280
mov eax, esi
push 0xa
cdq
pop ecx
idiv ecx
mov ecx, edi
mov dword [ebp + 0x10], ebx
mov dword [ebp + 8], ebx
mov esi, edx
dec esi
call fcn.009fdf04
movsx eax, ax
push eax
call fcn.0047fdcb
pop ecx
mov ecx, dword [ebp - 0x40]
mov edi, eax
call fcn.009fdf04
movsx eax, ax
push eax
call fcn.00b7a249
test eax, eax
pop ecx
je 0xb783e5
cmp esi, 4
jl 0xb78280
sub esi, 4
lea eax, [esi + esi + 1]
cmp edi, eax
jl 0xb78280
push 0xe4
call fcn.00402659
pop ecx
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x62
je 0xb78357
mov ecx, eax
call fcn.00b7ac39
jmp 0xb78359
xor eax, eax
push 1
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x60
call fcn.00b81aba
push esi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x63
call fcn.00b81aec
mov ecx, eax
call fcn.00b7ad35
lea ecx, [ebp - 0x14]
call fcn.00b81aec
mov ecx, eax
call fcn.00b7acc1
lea ecx, [ebp - 0x14]
call fcn.00b81aec
mov ecx, eax
call fcn.0052b5c9
cmp eax, 1
je 0xb783b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x60
call fcn.00b81ab5
jmp 0xb78280
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00b81aec
mov ecx, eax
call fcn.00b7ad26
lea ecx, [ebp - 0x14]
call fcn.00b81aec
mov ecx, eax
call fcn.00b7ad42
lea ecx, [ebp - 0x14]
mov edi, eax
mov byte [ebp - 4], 0x60
call fcn.00b81ab5
jmp 0xb78498
lea eax, [esi + 1]
cmp edi, eax
jl 0xb78280
push 0xdc
call fcn.00402659
pop ecx
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x64
je 0xb7840f
mov ecx, eax
call fcn.00b7aa6d
jmp 0xb78411
xor eax, eax
push 1
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x60
call fcn.00b81af5
push esi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x65
call fcn.00b81b27
mov ecx, eax
call fcn.00b7ab5d
lea ecx, [ebp - 0x14]
call fcn.00b81b27
mov ecx, eax
call fcn.00b7aae9
lea ecx, [ebp - 0x14]
call fcn.00b81b27
mov ecx, eax
call fcn.0052b5c9
cmp eax, 1
je 0xb78468
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x60
call fcn.00b81af0
jmp 0xb78280
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00b81b27
mov ecx, eax
call fcn.00b7ab4e
lea ecx, [ebp - 0x14]
call fcn.00b81b27
mov ecx, eax
call fcn.00b7ab6a
lea ecx, [ebp - 0x14]
mov edi, eax
mov byte [ebp - 4], 0x60
call fcn.00b81af0
push 0xd8
call fcn.00402659
pop ecx
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x66
je 0xb784b7
mov ecx, eax
call fcn.00b7ae11
jmp 0xb784b9
xor eax, eax
push 1
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x60
call fcn.00b81b30
mov ecx, dword [ebp - 0x40]
mov byte [ebp - 4], 0x67
call fcn.009fdf04
movsx eax, ax
push eax
call fcn.00b7a249
test eax, eax
pop ecx
je 0xb784e8
lea eax, [edi + esi*2]
push eax
jmp 0xb784e9
push esi
push dword [ebp + 8]
lea ecx, [ebp - 0x30]
call fcn.00b81b62
mov ecx, eax
call fcn.00b7af00
lea ecx, [ebp - 0x30]
call fcn.00b81b62
mov ecx, eax
call fcn.00b7ae87
lea ecx, [ebp - 0x30]
call fcn.00b81b62
mov ecx, eax
call fcn.0052b5c9
cmp eax, 1
je 0xb7852f
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x60
call fcn.00b81b2b
jmp 0xb78280
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp - 0x30]
call fcn.00b81b62
mov ecx, eax
call fcn.00b7aef1
push 0xb4
call fcn.00402659
pop ecx
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 0x68
je 0xb78561
mov ecx, eax
call fcn.00b7afe9
jmp 0xb78563
xor eax, eax
push 1
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x67
call fcn.00b81b6b
push dword [ebp + 0x10]
lea ecx, [ebp - 0x48]
push dword [ebp + 8]
mov byte [ebp - 4], 0x69
call fcn.00b81b9d
mov ecx, eax
call fcn.00b7b061
lea ecx, [ebp - 0x48]
call fcn.00b81b9d
mov ecx, eax
call fcn.00b7b091
lea ecx, [ebp - 0x48]
call fcn.00b81b9d
mov ecx, eax
call fcn.0052b5c9
cmp eax, 1
je 0xb785bf
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x67
call fcn.00b81b66
jmp 0xb7851e
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x48]
call fcn.00b81b9d
mov ecx, eax
call fcn.00b7b046
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
call fcn.00406d17
push dword [ebp + 8]
lea ecx, [ebp - 0x28]
call fcn.00406d17
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x67
call fcn.00b81b66
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x60
call fcn.00b81b2b
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
jmp 0xb79f71
call fcn.0042d4d6
mov ecx, eax
call fcn.00b7a220
test eax, eax
je 0xb78655
lea eax, [ebp - 0xe4]
push 0x12ee
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x6a
call fcn.004a6f59
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xe4]
jmp 0xb79e1a
push esi
call fcn.00b7a2bb
test eax, eax
pop ecx
je 0xb78674
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x1451
jmp 0xb7a0a4
push esi
call fcn.00b7a2a4
test eax, eax
pop ecx
jne case.0xb76827.62
mov eax, esi
cdq
mov ecx, 0x3e8
idiv ecx
xor ecx, ecx
cmp eax, 0x13b0
setne cl
mov eax, ecx
lea ecx, [ebp + 0x14]
push ecx
mov ecx, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00b76589
test eax, eax
jne case.0xb76827.62
jmp case.0xb76827.36
push dword [ebp + 0x10]
jmp 0xb7a07b
lea eax, [ebp + 0xc]
push esi
push eax
call fcn.0042d312
mov ecx, eax
call fcn.00684bb7
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x6b
call fcn.00417238
test al, al
je 0xb786e9
lea ecx, [ebp + 0xc]
jmp 0xb79f4f
call fcn.00b8169e
test eax, eax
je 0xb78726
lea eax, [ebp - 0xa8]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x6c
call fcn.004a6f59
pop ecx
pop ecx
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x6b
call fcn.00406a50
jmp 0xb786e1
push 1
pop esi
push esi
call fcn.00b81781
push eax
lea ecx, [ebp - 0x14]
call fcn.00b80ece
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x6d
call fcn.00b80f00
test eax, eax
je 0xb787d6
push 0x9e0
call fcn.00402659
pop ecx
mov dword [ebp + 8], eax
cmp eax, ebx
mov byte [ebp - 4], 0x6e
je 0xb787be
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x1471
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x6e
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov dword [ebp - 0x40], esi
push eax
mov byte [ebp - 4], 0x70
call fcn.004175f4
pop ecx
pop ecx
push eax
sub esp, 0x10
lea eax, [ebp - 0x28]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.00b7b458
mov ecx, dword [ebp + 8]
call fcn.009380d3
test byte [ebp - 0x40], 1
mov dword [ebp - 4], 0x6d
je 0xb787d6
lea ecx, [ebp - 0x18c]
call fcn.00403688
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x6b
call fcn.005347a3
jmp 0xb786e1
call fcn.00b8169e
test eax, eax
je 0xb78822
lea eax, [ebp - 0xec]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x72
call fcn.004a6f59
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xec]
jmp 0xb79e1a
push 1
call fcn.00b81781
push eax
lea ecx, [ebp - 0x14]
call fcn.00b80ece
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x73
call fcn.00b80f00
test eax, eax
je 0xb78866
push 0xa0c
call fcn.00402659
pop ecx
mov dword [ebp + 0xc], eax
cmp eax, ebx
mov byte [ebp - 4], 0x74
je 0xb78866
push ebx
push ebx
push ebx
push esi
push dword [ebp + 8]
mov ecx, eax
call fcn.00926051
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.005347a3
jmp case.0xb76827.36
lea eax, [ebp + 0x10]
push esi
push eax
call fcn.0042d312
mov ecx, eax
call fcn.00684bb7
push ebx
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x75
call fcn.00417238
test al, al
je 0xb788a1
lea ecx, [ebp + 0x10]
jmp 0xb79f4f
lea eax, [ebp - 0x40]
push eax
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.0042d1cc
mov byte [ebp - 4], 0x75
call fcn.0042d312
mov ecx, eax
call fcn.006795ac
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x134]
push eax
call fcn.0042d4d6
mov ecx, eax
call fcn.0042abbb
push 5
mov ecx, eax
mov byte [ebp - 4], 0x77
call fcn.00b03b36
mov ecx, eax
call fcn.00b7a28c
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0x75
call fcn.0042d4bc
lea eax, [ebp - 0x124]
push eax
call fcn.0042d4d6
mov ecx, eax
call fcn.0042abbb
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.0042d4d2
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x75
call fcn.0042d4bc
lea ecx, [ebp + 8]
call fcn.00b81ba1
push 1
pop eax
cmp dword [ebp - 0x34], eax
mov byte [ebp - 4], 0x79
mov dword [ebp - 0x4c], eax
jl 0xb78a9f
push dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x44]
push 5
lea eax, [ebp - 0x30]
push eax
call fcn.0042c47a
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x7a
call fcn.00b80c58
test eax, eax
jne 0xb7898a
lea ecx, [ebp - 0x30]
call fcn.0042d298
mov ecx, eax
add ecx, 0xc
call fcn.0042d27d
push eax
call fcn.00b7a2e9
cmp eax, 8
pop ecx
je 0xb7899b
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x79
call fcn.0042d282
jmp 0xb78a90
push dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x44]
push 5
lea eax, [ebp - 0x114]
push eax
call fcn.0042c47a
mov ecx, eax
mov byte [ebp - 4], 0x7b
call fcn.00b80c61
push eax
call fcn.00b7a282
pop ecx
lea ecx, [ebp - 0x114]
mov esi, eax
mov byte [ebp - 4], 0x7a
call fcn.0042d282
cmp esi, ebx
je 0xb78a81
cmp dword [ebp - 0x40], ebx
je 0xb789f7
mov ecx, esi
call fcn.00b7a273
movzx ecx, word [ebp - 0x3c]
test ecx, eax
jne 0xb78a81
cmp dword [ebp - 0x40], ebx
jne 0xb78a08
movzx edi, word [ebp - 0x3c]
mov ecx, esi
call fcn.00b7a273
and eax, edi
cmp eax, edi
jne 0xb78a81
mov ecx, esi
call fcn.00b7a273
cmp dword [ebp - 0x40], ebx
je 0xb78a19
or eax, dword [ebp - 0x3c]
jmp 0xb78a20
mov ecx, dword [ebp - 0x3c]
not ecx
and eax, ecx
test al, 0x14
je 0xb78a28
test al, 1
je 0xb78a81
test al, 2
je 0xb78a30
test al, 4
je 0xb78a81
mov ecx, esi
call fcn.0051f2d6
test eax, eax
jne 0xb78a81
lea ecx, [esi + 0xc]
call fcn.0042d27d
push eax
call fcn.007b81b7
cmp dword [eax + 0x4c], ebx
pop ecx
jne 0xb78a81
push 1
push esi
lea ecx, [ebp - 0xfc]
call fcn.00534719
push 0xffffffffffffffff
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x7c
call fcn.00b81bba
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x7a
call fcn.005346db
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x79
call fcn.0042d282
mov esi, dword [ebp + 0xc]
inc dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x34]
jle 0xb7894b
lea ecx, [ebp + 8]
call fcn.00b81ba7
test eax, eax
je 0xb78bcf
cmp dword [ebp - 0x40], ebx
je 0xb78ba6
test byte [ebp - 0x3c], 0x14
je 0xb78b36
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0xf0]
push 0x17cc
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
mov esi, eax
lea eax, [ebp - 0xf4]
push 0x17cb
push eax
mov byte [ebp - 4], 0x7d
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x7e
call fcn.00486cf9
call fcn.00ae9163
add esp, 0x14
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x7d
call fcn.00406a50
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0xf0]
call fcn.00406a50
jmp 0xb78ce8
test byte [ebp - 0x3c], 2
je 0xb78ba6
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0xd8]
push 0x17cd
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
mov esi, eax
lea eax, [ebp - 0x58]
push 0x17cb
push eax
mov byte [ebp - 4], 0x7f
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x80
call fcn.00486cf9
call fcn.00ae9163
add esp, 0x14
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x7f
call fcn.00406a50
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0xd8]
jmp 0xb78b2c
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x17cb
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9163
add esp, 0x14
jmp 0xb78ce8
push 0xafc
call fcn.00402659
pop ecx
mov dword [ebp + 0xc], eax
cmp eax, ebx
mov byte [ebp - 4], 0x81
je 0xb78bee
mov ecx, eax
call fcn.00af9a95
jmp 0xb78bf0
xor eax, eax
push 1
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x79
call fcn.00b8174f
lea eax, [ebp - 0x54]
push esi
push eax
mov byte [ebp - 4], 0x82
call fcn.0042d312
mov ecx, eax
call fcn.00677f9a
lea eax, [ebp - 0xc0]
push 0xd2f
push eax
mov byte [ebp - 4], 0x83
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push eax
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x84
call fcn.004691a2
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x83
call fcn.00406a50
push ebx
push ebx
push ecx
lea eax, [ebp - 0x54]
mov ecx, esp
mov dword [ebp + 0xc], esp
push eax
call fcn.0042d265
push 0x897b50
push 6
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x83
call fcn.0042d526
mov ecx, eax
call fcn.00b02db1
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.0042d526
mov ecx, eax
call fcn.00b03404
lea ecx, [ebp - 0x14]
call fcn.0042d526
mov ecx, eax
call fcn.00afa708
lea ecx, [ebp - 0x14]
call fcn.0042d526
mov ecx, eax
call fcn.0052b5c9
cmp eax, 1
jne 0xb78cd0
lea ecx, [ebp - 0x14]
call fcn.0042d526
mov ecx, eax
call fcn.00b7a22d
push eax
lea ecx, [ebp + 8]
call fcn.00b84812
mov ecx, eax
call fcn.00b80c6a
cmp eax, ebx
jne 0xb78cf9
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x82
call fcn.00406a50
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x79
call fcn.0042d521
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x75
call fcn.00809180
jmp 0xb78899
push 8
add eax, 0x18
push eax
lea ecx, [ebp - 0x28]
call fcn.0047ec6c
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x82
call fcn.00406a50
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x79
call fcn.0042d521
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x75
call fcn.00809180
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x10]
jmp 0xb79f71
mov ecx, dword [ebp - 0x50]
lea eax, [ebp - 0x28]
push eax
call fcn.00b7638d
jmp case.0xb76827.36
call fcn.006f7231
mov ecx, eax
call fcn.00b7a269
test eax, eax
jne case.0xb76827.62
lea eax, [ebp - 0xe8]
push 0xdde
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x86
call fcn.004a6f59
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xe8]
jmp 0xb79e1a
call fcn.006f7231
cmp eax, ebx
mov dword [ebp - 0x34], eax
je case.0xb76827.36
push dword [ebp + 0xc]
lea eax, [ebp + 0x10]
push eax
call fcn.0042d312
mov ecx, eax
call fcn.00677f9a
push ebx
push 1
push ebx
push ebx
lea eax, [ebp - 0xe0]
push 0xddb
push eax
mov byte [ebp - 4], 0x87
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
mov esi, eax
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x88
call fcn.00490d26
mov edi, eax
push dword [ebp + 0x10]
mov ecx, esi
mov byte [ebp - 4], 0x89
call fcn.0042d27a
push eax
push edi
call fcn.0044e655
pop ecx
pop ecx
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0042d265
call fcn.00ae9274
add esp, 0x14
cmp eax, 6
lea ecx, [ebp - 0xc8]
setne byte [ebp + 0xb]
mov byte [ebp - 4], 0x88
call fcn.00406a50
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x87
call fcn.00406a50
cmp byte [ebp + 0xb], bl
je 0xb78e48
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x10]
jmp 0xb79e1a
mov eax, dword [ebp - 0x34]
lea ecx, [eax + 0x88]
call fcn.007fe817
mov eax, dword [eax + 0x11]
cdq
push 0x64
pop ecx
idiv ecx
push 0xa
pop ecx
push 0xa
pop esi
cdq
idiv ecx
mov eax, dword [ebp + 0xc]
mov ecx, edx
cdq
idiv esi
cmp ecx, edx
jne 0xb78e9a
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0xddd
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9163
add esp, 0x14
jmp 0xb78e3c
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x10]
jmp 0xb7998b
call fcn.00b8169e
test eax, eax
je case.0xb76827.62
lea eax, [ebp - 0x5c]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x8a
call fcn.004a6f59
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5c]
jmp 0xb79e1a
call fcn.00b8169e
test eax, eax
je 0xb78f14
lea eax, [ebp - 0x64]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0x8b
call fcn.004a6f59
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
jmp 0xb79e1a
mov ecx, edi
call fcn.00b7a30b
test eax, eax
je 0xb78f2e
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
jmp 0xb77d0a
lea ecx, [ebp + 8]
call fcn.00490d26
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x8c
call fcn.00490d26
push 0xfc
mov byte [ebp - 4], 0x8d
call fcn.00402659
pop ecx
mov dword [ebp - 0x3c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x8e
je 0xb78f65
mov ecx, eax
call fcn.00b7b17f
jmp 0xb78f67
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x8d
call fcn.00b81bd6
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x8f
call fcn.00b81c08
mov ecx, eax
call fcn.0052b5c9
cmp eax, esi
je 0xb78fb3
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x8d
call fcn.00b81bd1
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x8c
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb79e1a
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00b81c08
mov ecx, eax
call fcn.00a0bc9e
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
call fcn.0042ceff
push dword [ebp - 0x34]
lea ecx, [ebp - 0x28]
call fcn.00406cba
push dword [ebp - 0x44]
lea ecx, [ebp - 0x28]
call fcn.00406cba
push dword [ebp - 0x40]
lea ecx, [ebp - 0x28]
call fcn.0042ceff
push dword [ebp - 0x54]
lea ecx, [ebp - 0x28]
call fcn.00406cba
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x28]
call fcn.00406cba
push 0x164
call fcn.00402659
pop ecx
mov dword [ebp - 0x3c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x90
je 0xb79075
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00b7b2e4
jmp 0xb79077
xor eax, eax
push esi
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x8f
call fcn.00b81c11
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x91
call fcn.00b81c43
mov ecx, eax
call fcn.0052b5c9
cmp eax, esi
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x30]
je 0xb790ad
call fcn.00b81c0c
jmp 0xb78f8f
call fcn.00b81c0c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x8d
call fcn.00b81bd1
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x8c
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb7998b
lea ecx, [ebp + 8]
call fcn.00490d26
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x92
call fcn.00490d26
push 0xd0
mov byte [ebp - 4], 0x93
call fcn.00402659
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x94
je 0xb79110
push ebx
push ebx
push ebx
mov ecx, eax
call fcn.008eb5f1
jmp 0xb79112
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x93
call fcn.0058d6b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x95
call fcn.00b81c47
mov ecx, eax
call fcn.0052b5c9
cmp eax, esi
je 0xb7915e
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x93
call fcn.0058d6ab
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x92
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb79e1a
call fcn.00b819f6
mov ecx, eax
call fcn.006e736d
test eax, eax
je 0xb7913a
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00b81c47
mov ecx, eax
call fcn.008ec2c6
push ebx
lea ecx, [ebp - 0x14]
call fcn.00b81c4b
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00419879
push eax
call fcn.0087a6ab
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00419924
lea ecx, [ebp + 0xc]
call fcn.0042d27a
test eax, eax
je 0xb791c8
cmp esi, ebx
je 0xb7913a
call fcn.0042d4d6
lea ecx, [ebp + 8]
call fcn.00a39bde
neg eax
sbb al, al
and al, 0xfe
add al, 3
mov byte [ebp + 0x10], al
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
call fcn.00406cba
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x93
call fcn.0058d6ab
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x92
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb7998b
lea ecx, [ebp + 8]
call fcn.00490d26
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x96
call fcn.00490d26
push 0xd0
mov byte [ebp - 4], 0x97
call fcn.00402659
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x98
je 0xb79278
push ebx
push 1
push ebx
mov ecx, eax
call fcn.008eb5f1
jmp 0xb7927a
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x97
call fcn.0058d6b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x99
call fcn.00b81c47
mov ecx, eax
call fcn.0052b5c9
cmp eax, esi
je 0xb792c6
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x97
call fcn.0058d6ab
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x96
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb79e1a
call fcn.00b819f6
mov ecx, eax
call fcn.006e736d
test eax, eax
je 0xb792a2
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00b81c47
mov ecx, eax
call fcn.008ec2c6
push ebx
lea ecx, [ebp - 0x14]
call fcn.00b81c4b
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00419879
push eax
call fcn.0087a6ab
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00419924
lea ecx, [ebp + 0xc]
call fcn.0042d27a
test eax, eax
je 0xb79330
cmp esi, ebx
je 0xb792a2
call fcn.0042d4d6
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x97
call fcn.0058d6ab
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x96
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb7998b
lea ecx, [ebp + 8]
call fcn.00490d26
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x9a
call fcn.00490d26
push 0xd0
mov byte [ebp - 4], 0x9b
call fcn.00402659
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0x9c
je 0xb793ab
push ebx
push 2
push ebx
mov ecx, eax
call fcn.008eb5f1
jmp 0xb793ad
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x9b
call fcn.0058d6b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x9d
call fcn.00b81c47
mov ecx, eax
call fcn.0052b5c9
cmp eax, esi
je 0xb793f9
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x9b
call fcn.0058d6ab
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x9a
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb79e1a
call fcn.00b819f6
mov ecx, eax
call fcn.006e736d
test eax, eax
je 0xb793d5
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00b81c47
mov ecx, eax
call fcn.008ec2c6
push ebx
lea ecx, [ebp - 0x14]
call fcn.00b81c4b
lea ecx, [ebp + 8]
call fcn.00a39bde
test eax, eax
je 0xb7947a
lea eax, [ebp + 0x10]
push 0x1071
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push ebx
push esi
push ebx
push ebx
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
mov byte [ebp - 4], 0x9e
call fcn.0042d265
call fcn.00ae9163
add esp, 0x14
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x9d
call fcn.00406a50
jmp 0xb793d5
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00419879
push eax
call fcn.0087a6ab
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00419924
lea ecx, [ebp + 0xc]
call fcn.0042d27a
test eax, eax
je 0xb794b4
cmp esi, ebx
je 0xb793d5
call fcn.0042d4d6
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x9b
call fcn.0058d6ab
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x9a
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb7998b
lea ecx, [ebp + 8]
call fcn.00490d26
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x9f
call fcn.00490d26
push 0xd0
mov byte [ebp - 4], 0xa0
call fcn.00402659
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0xa1
je 0xb79546
push 1
push ebx
push ebx
mov ecx, eax
call fcn.008eb5f1
jmp 0xb79548
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa0
call fcn.0058d6b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa2
call fcn.00b81c47
mov ecx, eax
call fcn.0052b5c9
cmp eax, esi
je 0xb79594
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa0
call fcn.0058d6ab
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x9f
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb79e1a
call fcn.00b819f6
mov ecx, eax
call fcn.006e736d
test eax, eax
je 0xb79570
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00b81c47
mov ecx, eax
call fcn.008ec2c6
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00419879
push eax
call fcn.0087a6ab
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00419924
lea ecx, [ebp + 0xc]
call fcn.0042d27a
test eax, eax
je 0xb795f5
cmp esi, ebx
je 0xb79570
call fcn.0042d4d6
lea ecx, [ebp + 8]
call fcn.00a39bde
neg eax
sbb al, al
and al, 0xfe
add al, 3
lea ecx, [ebp - 0x14]
mov byte [ebp + 0x10], al
call fcn.00b81c47
mov ecx, eax
call fcn.008ec3c4
push dword [ebp + 0x10]
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.00406cba
push esi
lea ecx, [ebp - 0x28]
call fcn.00406cba
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
push ebx
lea ecx, [ebp - 0x14]
call fcn.00b81c4b
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa0
call fcn.0058d6ab
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x9f
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb7998b
lea ecx, [ebp + 8]
call fcn.00490d26
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xa3
call fcn.00490d26
push 0xd0
mov byte [ebp - 4], 0xa4
call fcn.00402659
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0xa5
je 0xb796ca
push 1
pop esi
push esi
push esi
push ebx
mov ecx, eax
call fcn.008eb5f1
jmp 0xb796cf
push 1
xor eax, eax
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa4
call fcn.0058d6b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa6
call fcn.00b81c47
mov ecx, eax
call fcn.0052b5c9
cmp eax, esi
je 0xb79718
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa4
call fcn.0058d6ab
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xa3
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb79e1a
call fcn.00b819f6
mov ecx, eax
call fcn.006e736d
test eax, eax
je 0xb796f4
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.00b81c47
mov ecx, eax
call fcn.008ec2c6
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00419879
push eax
call fcn.0087a6ab
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00419924
lea ecx, [ebp + 0xc]
call fcn.0042d27a
test eax, eax
je 0xb79779
cmp esi, ebx
je 0xb796f4
call fcn.0042d4d6
lea ecx, [ebp - 0x14]
call fcn.00b81c47
mov ecx, eax
call fcn.008ec3c4
push eax
lea ecx, [ebp - 0x28]
call fcn.00406cba
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
push ebx
lea ecx, [ebp - 0x14]
call fcn.00b81c4b
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa4
call fcn.0058d6ab
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xa3
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb7998b
lea ecx, [ebp + 8]
call fcn.00490d26
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xa7
call fcn.00490d26
push 0xd0
mov byte [ebp - 4], 0xa8
call fcn.00402659
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0xa9
je 0xb79818
push 1
pop esi
push esi
push 2
push ebx
mov ecx, eax
call fcn.008eb5f1
jmp 0xb7981d
push 1
xor eax, eax
pop esi
push esi
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xa8
call fcn.0058d6b0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xaa
call fcn.00b81c47
mov ecx, eax
call fcn.0052b5c9
cmp eax, esi
je 0xb79866
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xa8
call fcn.0058d6ab
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xa7
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
jmp 0xb79e1a
call fcn.00b819f6
mov ecx, eax
call fcn.006e736d
test eax, eax
je 0xb79842
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x30]
call fcn.00b81c47
mov ecx, eax
call fcn.008ec2c6
lea ecx, [ebp + 8]
call fcn.00a39bde
test eax, eax
je 0xb798de
lea eax, [ebp + 0x10]
push 0x1071
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push ebx
push esi
push ebx
push ebx
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
mov byte [ebp - 4], 0xab
call fcn.0042d265
call fcn.00ae9163
add esp, 0x14
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0xaa
call fcn.00406a50
jmp 0xb79842
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00419879
push eax
call fcn.0087a6ab
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00419924
lea ecx, [ebp + 0xc]
call fcn.0042d27a
test eax, eax
je 0xb79918
cmp esi, ebx
je 0xb79842
call fcn.0042d4d6
lea ecx, [ebp - 0x30]
call fcn.00b81c47
mov ecx, eax
call fcn.008ec3c4
push eax
lea ecx, [ebp - 0x28]
call fcn.00406cba
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
push ebx
lea ecx, [ebp - 0x30]
call fcn.00b81c4b
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xa8
call fcn.0058d6ab
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xa7
call fcn.00406a50
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.00406a50
jmp case.0xb76827.62
call fcn.0043d78a
mov ecx, eax
call fcn.00b7a346
test eax, eax
je 0xb799d4
lea eax, [ebp - 0x6c]
push 0x18e1
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0xac
call fcn.004a6f59
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6c]
jmp 0xb79e1a
call fcn.00b8169e
test eax, eax
je case.0xb76827.62
lea eax, [ebp - 0x74]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0xad
call fcn.004a6f59
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x74]
jmp 0xb79e1a
call fcn.00b8169e
test eax, eax
je 0xb79a42
lea eax, [ebp - 0x7c]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0xae
call fcn.004a6f59
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x7c]
jmp 0xb79e1a
call fcn.0043d78a
mov ecx, eax
call fcn.00b7a33f
test eax, eax
je 0xb79a7e
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x18e1
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9163
add esp, 0x14
cmp eax, ebx
jne case.0xb76827.36
push 0xafc
call fcn.00402659
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0xaf
je 0xb79a9d
mov ecx, eax
call fcn.00af9a95
jmp 0xb79a9f
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00b8174f
push ebx
push esi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x18c8
push eax
mov byte [ebp - 4], 0xb0
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push ebx
push 3
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xb0
call fcn.0042d526
mov ecx, eax
call fcn.00b02db1
push ebx
push ebx
push 0x28
push ebx
push ebx
lea ecx, [ebp - 0x30]
call fcn.0042d526
mov ecx, eax
call fcn.00b030a5
lea ecx, [ebp - 0x30]
call fcn.0042d526
mov ecx, eax
call fcn.00afa708
lea ecx, [ebp - 0x30]
call fcn.0042d526
mov ecx, eax
call fcn.0052b5c9
cmp eax, esi
jne 0xb79bc0
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x30]
call fcn.0042d526
mov ecx, eax
call fcn.0055e1f1
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xb2
call fcn.0058d465
mov ecx, eax
call fcn.00a39bde
test eax, eax
jne 0xb79bb4
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp + 8]
call fcn.0042d265
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb3
call fcn.00419879
push eax
call fcn.0087a6ab
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 8]
mov esi, eax
call fcn.00419924
cmp esi, ebx
jne 0xb79bd1
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xe3
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9163
add esp, 0x14
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb2
call fcn.00406a50
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xb0
call fcn.00406a50
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.0042d521
jmp case.0xb76827.36
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb2
call fcn.00406a50
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xb0
call fcn.00406a50
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.0042d521
jmp case.0xb76827.62
push 0xb8
call fcn.00402659
pop ecx
mov dword [ebp + 8], eax
cmp eax, ebx
mov byte [ebp - 4], 0xb4
je 0xb79c33
push 1
push ebx
mov ecx, eax
call fcn.008f1cc0
jmp 0xb79c35
xor eax, eax
push 1
pop esi
push esi
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00b81c5e
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb5
call fcn.00b81c90
mov ecx, eax
call fcn.0052b5c9
cmp eax, esi
jne 0xb79d03
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x14]
call fcn.00b81c90
mov ecx, eax
call fcn.008f2197
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xb6
call fcn.0058d465
mov ecx, eax
call fcn.00a39bde
test eax, eax
je 0xb79c9d
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x1002
jmp 0xb79ce2
push esi
push esi
push ebx
push esi
push 0x400
lea ecx, [ebp + 0xc]
call fcn.00419879
push eax
call fcn.0087a6ab
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0xc]
mov esi, eax
call fcn.00419924
lea ecx, [ebp + 0xc]
call fcn.0042d27a
test eax, eax
je 0xb79d14
cmp esi, ebx
jne 0xb79d14
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0xe3
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9163
add esp, 0x14
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xb5
call fcn.00406a50
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00b81c59
jmp case.0xb76827.36
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0042d265
lea ecx, [ebp - 0x28]
call fcn.0048265c
lea ecx, [ebp - 0x14]
call fcn.00b81c90
mov ecx, eax
call fcn.008f21b4
push eax
lea ecx, [ebp - 0x28]
call fcn.00406cba
call fcn.006f7231
lea ecx, [eax + 0x88]
call fcn.007fe817
push eax
lea ecx, [ebp - 0x30c]
call fcn.00467e4d
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x30c]
mov byte [ebp - 4], 0xb7
call fcn.005241d5
push ebx
lea ecx, [ebp - 0x14]
call fcn.00b81c94
lea ecx, [ebp - 0x30c]
mov byte [ebp - 4], 0xb6
call fcn.0042d1bf
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xb5
call fcn.00406a50
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00b81c59
jmp case.0xb76827.62
push esi
call fcn.00b7a2d2
test eax, eax
pop ecx
jne 0xb79de4
lea eax, [ebp - 0x84]
push 0x1232
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0xb8
call fcn.004a6f59
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x84]
jmp 0xb79e1a
call fcn.00b8169e
test eax, eax
je 0xb79e24
lea eax, [ebp - 0x8c]
push 0x62
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push 0xb
push eax
mov byte [ebp - 4], 0xb9
call fcn.004a6f59
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
call fcn.00406a50
jmp case.0xb76827.36
lea eax, [ebp + 0xc]
push esi
push eax
call fcn.0042d312
mov ecx, eax
call fcn.00684bb7
push ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xba
call fcn.00417238
test al, al
jne 0xb79f4c
push 0xafc
call fcn.00402659
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
mov byte [ebp - 4], 0xbb
je 0xb79e69
mov ecx, eax
call fcn.00af9a95
jmp 0xb79e6b
xor eax, eax
push 1
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xba
call fcn.00b8174f
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xbc
call fcn.00490d26
push ebx
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push str.dama
mov byte [ebp - 4], 0xbd
call fcn.004033d8
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xbd
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov esi, eax
lea eax, [ebp - 0x94]
push 0x1233
push eax
mov byte [ebp - 4], 0xbf
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
mov edi, eax
push esi
mov byte [ebp - 4], 0xc0
call fcn.004175f4
pop ecx
pop ecx
push eax
mov ecx, edi
call fcn.0042d27a
push eax
lea eax, [ebp + 8]
push eax
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xbf
call fcn.00406a50
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0xbd
call fcn.00403688
push ebx
push ebx
push ebx
push ebx
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0042d265
call fcn.00ae9274
add esp, 0x14
cmp eax, 6
mov byte [ebp - 4], 0xbc
lea ecx, [ebp + 8]
je 0xb79f59
call fcn.00406a50
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xba
call fcn.0042d521
lea ecx, [ebp + 0xc]
call fcn.00402684
jmp case.0xb76827.36
call fcn.00406a50
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xba
call fcn.0042d521
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.00402684
jmp case.0xb76827.62
push esi
call fcn.0042d312
mov ecx, eax
call fcn.00438268
cmp eax, ebx
je case.0xb76827.36
call fcn.006f7231
lea ecx, [eax + 4]
mov eax, dword [ecx]
lea edx, [ebp - 0x194]
push edx
call dword [eax + 0x10]
push dword [eax + 4]
push dword [eax]
push esi
call fcn.006f7231
mov ecx, eax
call fcn.00885c47
push eax
call fcn.00b816f6
mov ecx, eax
call fcn.00436504
test eax, eax
jne case.0xb76827.62
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x142e
jmp 0xb7a0a4
lea eax, [ebp - 0x11c]
push eax
call fcn.0042d4d6
mov ecx, eax
call fcn.0042abbb
mov ecx, eax
mov byte [ebp - 4], 0xc1
call fcn.0042d4d2
lea ecx, [ebp - 0x11c]
mov esi, eax
mov byte [ebp - 4], 1
call fcn.0042d4bc
push dword [ebp + 8]
lea eax, [ebp - 0x12c]
push 5
push eax
mov ecx, esi
call fcn.0042c47a
mov ecx, eax
mov byte [ebp - 4], 0xc2
call fcn.00b80c61
lea ecx, [ebp - 0x12c]
mov esi, eax
mov byte [ebp - 4], 1
call fcn.0042d282
push esi
call fcn.00b7a287
mov ecx, esp
mov esi, eax
mov eax, dword [esi]
mov dword [ebp + 0xc], esp
push ecx
mov ecx, esi
call dword [eax + 0x84]
lea ecx, [ebp - 0x28]
call fcn.0048265c
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x88]
lea ecx, [ebp - 0x28]
push eax
call fcn.0042ceff
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x28]
call fcn.0042ceff
mov ecx, dword [ebp - 0x50]
push ebx
push 0x1f4
call fcn.0049b415
test eax, eax
jne 0xb7a0bb
push ebx
push ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0xfd
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
call fcn.00ae9163
add esp, 0x14
jmp case.0xb76827.36
lea eax, [ebp - 0x28]
push eax
call fcn.00a96e1c
pop ecx
mov ecx, dword [ebp - 0x50]
push 1
call fcn.00b7a204
lea eax, [ebp - 0x50]
push 0x841
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
push 0x64
mov ecx, eax
mov byte [ebp - 4], 0xc3
call fcn.004173e3
push eax
call fcn.00adee8c
pop ecx
pop ecx
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.004026b4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.004295c5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x14]
call fcn.00406a50
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x10