Function at 0x43c5f0
Capabilities:
Check os version
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x521324
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2b4
push ebx
push ebp
mov ebp, ecx
push esi
push edi
lea ecx, [esp + 0x34]
mov dword [esp + 0x60], ebp
call fcn.004f8480
xor ebx, ebx
lea ecx, [esp + 0x14]
push ebx
mov dword [esp + 0x2d0], ebx
call fcn.004f5870
push ebx
lea ecx, [esp + 0x28]
mov byte [esp + 0x2d0], 1
call fcn.004f5870
push ebx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2d0], 2
call fcn.004f5870
mov esi, 0x530160
mov word [esp + 0x30], 0xffff
mov dword [esp + 0x2c], esi
mov word [esp + 0x32], bx
mov byte [esp + 0x2cc], 4
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x549cc0
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa1d0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54a014
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54a00c
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54a004
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x549ffc
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x549ff4
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x549fec
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x549fe4
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
mov ecx, dword [0x5540a8]
lea eax, [esp + 0x2c]
push eax
call fcn.004fa550
cmp ax, 0xffff
je 0x43e7a5
movsx eax, word [esp + 0x30]
cmp eax, 8
ja case.default.0x43c78a
jmp dword [eax*4 + 0x43eccc]
mov cl, byte [esp + 0x13]
sub esp, 0x10
mov ebp, esp
mov dword [esp + 0x60], esp
push ebx
mov byte [ebp], cl
mov ecx, ebp
call fcn.004013e0
mov edi, str.ffffffffffffffffffffffffffffffff
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x3c], ecx
push ecx
mov ecx, ebp
call fcn.004016f0
test al, al
je 0x43c7f5
mov eax, dword [esp + 0x38]
mov edi, dword [ebp + 4]
mov ecx, eax
mov esi, str.ffffffffffffffffffffffffffffffff
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp + 4]
mov dword [ebp + 8], eax
add eax, ecx
mov esi, 0x530160
mov byte [eax], bl
sub esp, 0x10
lea eax, [esp + 0x9a]
mov ecx, esp
mov dword [esp + 0x48], esp
push eax
push str.00000000000000000000000000000000
mov byte [esp + 0x2f4], 5
call fcn.00401030
sub esp, 0x10
lea edx, [esp + 0xab]
mov ecx, esp
mov dword [esp + 0x7c], esp
push edx
push 0x548f04
mov byte [esp + 0x304], 6
call fcn.00401030
sub esp, 0x10
lea eax, [esp + 0x9e]
mov ecx, esp
mov dword [esp + 0x88], esp
push eax
push 0x554048
mov byte [esp + 0x314], 7
call fcn.00401030
push ecx
mov byte [esp + 0x310], 8
mov ecx, esp
mov dword [esp + 0x64], esp
push 6
push 0x54a014
call fcn.004f58e0
push ecx
mov byte [esp + 0x314], 9
mov ecx, esp
mov dword [esp + 0x64], esp
push 6
push 0x549fdc
call fcn.004f58e0
lea ecx, [esp + 0x2bc]
mov byte [esp + 0x314], 4
push ecx
mov ecx, 0x5540a8
call fcn.004f9710
mov ecx, dword [0x530168]
mov dx, word [eax]
push ecx
add eax, 4
push ebx
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2d8], 0xa
mov word [esp + 0x40], dx
call fcn.004011e0
push 1
lea ecx, [esp + 0x27c]
mov byte [esp + 0x2d0], 4
call fcn.004013e0
lea ecx, [esp + 0x34]
call fcn.004f86d0
cmp ax, 2
je 0x43e7a5
lea edx, [esp + 0x204]
lea ecx, [esp + 0x34]
push edx
call fcn.004f86e0
mov edx, dword [eax + 8]
push 1
cmp edx, 0x20
lea ecx, [esp + 0x208]
setne byte [esp + 0x17]
call fcn.004013e0
mov al, byte [esp + 0x13]
push ebx
cmp al, bl
jne 0x43e763
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0xc
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fd4
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
push 0x16
push 0x548edc
lea ecx, [esp + 0x1c]
call fcn.004f5de0
mov al, byte [0x554048]
mov edi, dword [esp + 0x60]
mov byte [esp + 0x68], al
mov word [esp + 0x69], bx
mov byte [esp + 0x13], bl
xor esi, esi
lea ecx, [esp + 0x244]
push ecx
lea ecx, [esp + 0x38]
call fcn.004f86e0
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x43c9bc
mov eax, 0x530164
movsx edx, byte [esi + eax]
push edx
lea eax, [esp + 0x6c]
push 0x5482ac
push eax
call fcn.0051497a
add esp, 0xc
lea ecx, [esp + 0x244]
push 1
call fcn.004013e0
lea ecx, [esp + 0x234]
push ecx
lea ecx, [esp + 0x38]
call fcn.004f86e0
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x43c9fe
mov eax, 0x530164
movsx edx, byte [esi + eax + 1]
push edx
lea eax, [esp + 0x6d]
push 0x5482ac
push eax
call fcn.0051497a
add esp, 0xc
lea ecx, [esp + 0x234]
push 1
call fcn.004013e0
lea ecx, [esp + 0x68]
push ecx
mov ecx, edi
call fcn.00491a40
mov dl, byte [esp + 0x13]
push eax
shr dl, 1
xor ax, ax
lea ecx, [esp + 0x18]
mov al, dl
add eax, 5
push eax
call fcn.004f5c80
mov al, byte [esp + 0x13]
add esi, 2
add al, 2
cmp al, 0x20
mov byte [esp + 0x13], al
jb 0x43c99f
push 6
push 0x548ed4
lea ecx, [esp + 0x20]
call fcn.004f5de0
lea ecx, [esp + 0x14]
push ecx
mov ecx, edi
call fcn.004d3100
lea edx, [esp + 0x18]
mov ecx, edi
push edx
call fcn.004d3100
push 1
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004f5850
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x1c]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x2e0], 0xd
call fcn.004f5850
mov ecx, edi
mov byte [esp + 0x2dc], 4
call fcn.00435de0
push ebx
push 1
push ecx
cmp al, bl
mov ecx, esp
je 0x43e7f6
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0xf
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fcc
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
mov ebp, dword [esp + 0x60]
mov esi, 0x530160
jmp case.default.0x43c78a
mov al, byte [esp + 0x5e]
sub esp, 0x10
mov ebp, esp
mov dword [esp + 0x2c], esp
push ebx
mov ecx, ebp
mov byte [ebp], al
call fcn.004013e0
mov edi, 0x548ec8
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x3c], ecx
push ecx
mov ecx, ebp
call fcn.004016f0
test al, al
je 0x43cb7f
mov eax, dword [esp + 0x38]
mov edi, dword [ebp + 4]
mov ecx, eax
mov esi, 0x548ec8
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], eax
mov ebp, dword [ebp + 4]
add ebp, eax
mov byte [ebp], bl
sub esp, 0x10
lea eax, [esp + 0xa1]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
push 0x548ec4
mov byte [esp + 0x2f4], 0x10
call fcn.00401030
sub esp, 0x10
lea edx, [esp + 0xb9]
mov ecx, esp
mov dword [esp + 0x78], esp
push edx
push 0x548f04
mov byte [esp + 0x304], 0x11
call fcn.00401030
sub esp, 0x10
lea eax, [esp + 0x97]
mov ecx, esp
mov dword [esp + 0x8c], esp
push eax
push 0x554048
mov byte [esp + 0x314], 0x12
call fcn.00401030
push ecx
mov byte [esp + 0x310], 0x13
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x54a00c
call fcn.004f58e0
push ecx
mov byte [esp + 0x314], 0x14
mov ecx, esp
mov dword [esp + 0x70], esp
push 6
push 0x549fc4
call fcn.004f58e0
lea ecx, [esp + 0x2e4]
mov byte [esp + 0x314], 4
push ecx
mov ecx, 0x5540a8
call fcn.004f9710
mov ecx, dword [0x530168]
mov dx, word [eax]
push ecx
add eax, 4
push ebx
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2d8], 0x15
mov word [esp + 0x40], dx
call fcn.004011e0
push 1
lea ecx, [esp + 0x2a4]
mov byte [esp + 0x2d0], 4
call fcn.004013e0
lea ecx, [esp + 0x34]
call fcn.004f86d0
cmp ax, 2
je 0x43e833
lea edx, [esp + 0x1c4]
lea ecx, [esp + 0x34]
push edx
call fcn.004f86e0
mov edx, dword [eax + 8]
push 1
cmp edx, 2
lea ecx, [esp + 0x1c8]
setne byte [esp + 0x17]
call fcn.004013e0
mov al, byte [esp + 0x13]
push ebx
cmp al, bl
jne 0x43e888
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x17
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fd4
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
push 7
push 0x548eb4
lea ecx, [esp + 0x1c]
call fcn.004f5de0
mov al, byte [0x554048]
lea ecx, [esp + 0x120]
push ecx
lea ecx, [esp + 0x38]
mov byte [esp + 0x68], al
mov word [esp + 0x69], bx
call fcn.004f86e0
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x43cd3f
mov eax, 0x530164
movsx edx, byte [eax]
push edx
lea eax, [esp + 0x68]
push 0x5482ac
push eax
call fcn.0051497a
mov eax, dword [esp + 0x130]
add esp, 0xc
cmp eax, ebx
je 0x43cd7d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43cd74
cmp al, 0xff
je 0x43cd74
dec al
mov byte [ecx], al
jmp 0x43cd7d
push ecx
call fcn.00514140
add esp, 4
lea ecx, [esp + 0x110]
mov dword [esp + 0x124], ebx
push ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x130], ebx
call fcn.004f86e0
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x43cdaf
mov eax, 0x530164
movsx edx, byte [eax + 1]
push edx
lea eax, [esp + 0x69]
push 0x5482ac
push eax
call fcn.0051497a
mov eax, dword [esp + 0x120]
add esp, 0xc
cmp eax, ebx
je 0x43cdee
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43cde5
cmp al, 0xff
je 0x43cde5
dec al
mov byte [ecx], al
jmp 0x43cdee
push ecx
call fcn.00514140
add esp, 4
mov esi, dword [esp + 0x60]
lea ecx, [esp + 0x64]
push ecx
mov ecx, esi
mov dword [esp + 0x118], ebx
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x120], ebx
call fcn.00491a40
push eax
push 5
lea ecx, [esp + 0x1c]
call fcn.004f5c80
push 6
push 0x548eac
lea ecx, [esp + 0x20]
call fcn.004f5de0
lea edx, [esp + 0x14]
mov ecx, esi
push edx
call fcn.004d3100
lea eax, [esp + 0x18]
mov ecx, esi
push eax
call fcn.004d3100
push 1
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.004f5850
lea eax, [esp + 0x2c]
lea edx, [esp + 0x1c]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x2e0], 0x18
call fcn.004f5850
mov ecx, esi
mov byte [esp + 0x2dc], 4
call fcn.00435de0
push ebx
push 1
push ecx
cmp al, bl
mov ecx, esp
je 0x43e92f
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x1a
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fcc
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
mov ebp, dword [esp + 0x60]
mov esi, 0x530160
jmp case.default.0x43c78a
mov al, byte [esp + 0x57]
sub esp, 0x10
mov edx, esp
mov edi, str.zzzzzzzzzzzzzzzzz
or ecx, 0xffffffff
mov dword [esp + 0x2c], esp
mov byte [edx], al
xor eax, eax
mov dword [edx + 4], ebx
mov dword [edx + 8], ebx
mov dword [edx + 0xc], ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.zzzzzzzzzzzzzzzzz
mov ecx, edx
call fcn.00401510
sub esp, 0x10
lea edx, [esp + 0xa7]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
push str.00000000000000000
mov byte [esp + 0x2f4], 0x1b
call fcn.00401030
sub esp, 0x10
lea eax, [esp + 0xa9]
mov ecx, esp
mov dword [esp + 0x78], esp
push eax
push 0x548e80
mov byte [esp + 0x304], 0x1c
call fcn.00401030
sub esp, 0x10
lea edx, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x8c], esp
push edx
push 0x554048
mov byte [esp + 0x314], 0x1d
call fcn.00401030
push ecx
mov byte [esp + 0x310], 0x1e
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x54a004
call fcn.004f58e0
push ecx
mov byte [esp + 0x314], 0x1f
mov ecx, esp
mov dword [esp + 0x70], esp
push 6
push 0x549fbc
call fcn.004f58e0
lea eax, [esp + 0x1d4]
mov ecx, 0x5540a8
push eax
mov byte [esp + 0x318], 4
call fcn.004f9710
mov edx, dword [0x530168]
mov cx, word [eax]
push edx
add eax, 4
mov word [esp + 0x38], cx
push ebx
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2d8], 0x20
call fcn.004011e0
mov eax, dword [esp + 0x194]
mov byte [esp + 0x2cc], 4
cmp eax, ebx
je 0x43d028
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43d01f
cmp al, 0xff
je 0x43d01f
dec al
mov byte [ecx], al
jmp 0x43d028
push ecx
call fcn.00514140
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0x194], ebx
mov dword [esp + 0x198], ebx
mov dword [esp + 0x19c], ebx
call fcn.004f86d0
cmp ax, 2
je 0x43eaeb
lea eax, [esp + 0xf0]
lea ecx, [esp + 0x34]
push eax
call fcn.004f86e0
mov edx, dword [eax + 8]
mov eax, dword [esp + 0xf4]
cmp edx, 0x11
setne byte [esp + 0x13]
cmp eax, ebx
je 0x43d094
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43d08b
cmp al, 0xff
je 0x43d08b
dec al
mov byte [ecx], al
jmp 0x43d094
push ecx
call fcn.00514140
add esp, 4
mov al, byte [esp + 0x13]
mov dword [esp + 0xf4], ebx
cmp al, bl
mov dword [esp + 0xf8], ebx
mov dword [esp + 0xfc], ebx
push ebx
jne 0x43e95a
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x22
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fd4
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
push 0x17
push 0x548e60
lea ecx, [esp + 0x1c]
call fcn.004f5de0
mov byte [esp + 0x13], bl
xor edi, edi
lea ecx, [esp + 0xc0]
push ecx
lea ecx, [esp + 0x38]
call fcn.004f86e0
mov eax, dword [eax + 4]
mov byte [esp + 0x2cc], 0x23
cmp eax, ebx
jne 0x43d132
mov eax, 0x530164
mov dl, byte [eax + edi]
lea ecx, [esp + 0x14]
movzx ax, byte [esp + 0x13]
add eax, 5
push edx
push eax
call fcn.004f5c80
mov eax, dword [esp + 0xc4]
mov byte [esp + 0x2cc], 4
cmp eax, ebx
je 0x43d179
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43d170
cmp al, 0xff
je 0x43d170
dec al
mov byte [ecx], al
jmp 0x43d179
push ecx
call fcn.00514140
add esp, 4
mov al, byte [esp + 0x13]
mov dword [esp + 0xc4], ebx
inc al
inc edi
cmp al, 0x11
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ebx
mov byte [esp + 0x13], al
jb 0x43d10d
push 6
push 0x548e58
lea ecx, [esp + 0x20]
call fcn.004f5de0
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebp
call fcn.004d3100
lea edx, [esp + 0x18]
mov ecx, ebp
push edx
call fcn.004d3100
push 1
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004f5850
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x1c]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x2e0], 0x24
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0x2dc], 4
call fcn.00435de0
push ebx
push 1
push ecx
cmp al, bl
mov ecx, esp
je 0x43e98a
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x26
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fcc
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
jmp case.default.0x43c78a
mov al, byte [esp + 0x5c]
sub esp, 0x10
mov edx, esp
mov edi, str.zzzzzzzzzz
or ecx, 0xffffffff
mov dword [esp + 0x2c], esp
mov byte [edx], al
xor eax, eax
mov dword [edx + 4], ebx
mov dword [edx + 8], ebx
mov dword [edx + 0xc], ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.zzzzzzzzzz
mov ecx, edx
call fcn.00401510
sub esp, 0x10
lea edx, [esp + 0xab]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
push str.0000000000
mov byte [esp + 0x2f4], 0x27
call fcn.00401030
sub esp, 0x10
lea eax, [esp + 0xb3]
mov ecx, esp
mov dword [esp + 0x78], esp
push eax
push 0x548e80
mov byte [esp + 0x304], 0x28
call fcn.00401030
sub esp, 0x10
lea edx, [esp + 0x9b]
mov ecx, esp
mov dword [esp + 0x8c], esp
push edx
push 0x554048
mov byte [esp + 0x314], 0x29
call fcn.00401030
push ecx
mov byte [esp + 0x310], 0x2a
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x549ffc
call fcn.004f58e0
push ecx
mov byte [esp + 0x314], 0x2b
mov ecx, esp
mov dword [esp + 0x70], esp
push 6
push 0x549fb4
call fcn.004f58e0
lea eax, [esp + 0x1ac]
mov ecx, 0x5540a8
push eax
mov byte [esp + 0x318], 4
call fcn.004f9710
mov edx, dword [0x530168]
mov cx, word [eax]
push edx
add eax, 4
mov word [esp + 0x38], cx
push ebx
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2d8], 0x2c
call fcn.004011e0
mov eax, dword [esp + 0x16c]
mov byte [esp + 0x2cc], 4
cmp eax, ebx
je 0x43d3a1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43d398
cmp al, 0xff
je 0x43d398
dec al
mov byte [ecx], al
jmp 0x43d3a1
push ecx
call fcn.00514140
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], ebx
call fcn.004f86d0
cmp ax, 2
je 0x43eaeb
lea eax, [esp + 0x130]
lea ecx, [esp + 0x34]
push eax
call fcn.004f86e0
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x134]
cmp edx, 0xa
setne byte [esp + 0x13]
cmp eax, ebx
je 0x43d40d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43d404
cmp al, 0xff
je 0x43d404
dec al
mov byte [ecx], al
jmp 0x43d40d
push ecx
call fcn.00514140
add esp, 4
mov al, byte [esp + 0x13]
mov dword [esp + 0x134], ebx
cmp al, bl
mov dword [esp + 0x138], ebx
mov dword [esp + 0x13c], ebx
push ebx
jne 0x43e9ae
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x2e
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fd4
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
push 0x10
push 0x548e24
lea ecx, [esp + 0x1c]
call fcn.004f5de0
mov byte [esp + 0x13], bl
xor edi, edi
lea ecx, [esp + 0xe0]
push ecx
lea ecx, [esp + 0x38]
call fcn.004f86e0
mov eax, dword [eax + 4]
mov byte [esp + 0x2cc], 0x2f
cmp eax, ebx
jne 0x43d4ab
mov eax, 0x530164
mov dl, byte [eax + edi]
lea ecx, [esp + 0x14]
movzx ax, byte [esp + 0x13]
add eax, 5
push edx
push eax
call fcn.004f5c80
mov eax, dword [esp + 0xe4]
mov byte [esp + 0x2cc], 4
cmp eax, ebx
je 0x43d4f2
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43d4e9
cmp al, 0xff
je 0x43d4e9
dec al
mov byte [ecx], al
jmp 0x43d4f2
push ecx
call fcn.00514140
add esp, 4
mov al, byte [esp + 0x13]
mov dword [esp + 0xe4], ebx
inc al
inc edi
cmp al, 0xa
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xec], ebx
mov byte [esp + 0x13], al
jb 0x43d486
push 6
push 0x548e1c
lea ecx, [esp + 0x20]
call fcn.004f5de0
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebp
call fcn.004d3100
lea edx, [esp + 0x18]
mov ecx, ebp
push edx
call fcn.004d3100
push 1
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004f5850
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x1c]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x2e0], 0x30
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0x2dc], 4
call fcn.00435de0
push ebx
push 1
push ecx
cmp al, bl
mov ecx, esp
je 0x43e9de
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x32
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fcc
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
jmp case.default.0x43c78a
mov al, byte [esp + 0x5b]
sub esp, 0x10
mov edx, esp
mov edi, str.99999999
or ecx, 0xffffffff
mov dword [esp + 0x2c], esp
mov byte [edx], al
xor eax, eax
mov dword [edx + 4], ebx
mov dword [edx + 8], ebx
mov dword [edx + 0xc], ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.99999999
mov ecx, edx
call fcn.00401510
sub esp, 0x10
lea edx, [esp + 0xad]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
push str.00000000
mov byte [esp + 0x2f4], 0x33
call fcn.00401030
sub esp, 0x10
lea eax, [esp + 0xb8]
mov ecx, esp
mov dword [esp + 0x78], esp
push eax
push 0x548324
mov byte [esp + 0x304], 0x34
call fcn.00401030
sub esp, 0x10
lea edx, [esp + 0x9f]
mov ecx, esp
mov dword [esp + 0x8c], esp
push edx
push 0x554048
mov byte [esp + 0x314], 0x35
call fcn.00401030
push ecx
mov byte [esp + 0x310], 0x36
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x549ff4
call fcn.004f58e0
push ecx
mov byte [esp + 0x314], 0x37
mov ecx, esp
mov dword [esp + 0x70], esp
push 6
push 0x549fac
call fcn.004f58e0
lea eax, [esp + 0x1c0]
mov ecx, 0x5540a8
push eax
mov byte [esp + 0x318], 4
call fcn.004f9710
mov edx, dword [0x530168]
mov cx, word [eax]
push edx
add eax, 4
mov word [esp + 0x38], cx
push ebx
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2d8], 0x38
call fcn.004011e0
mov eax, dword [esp + 0x180]
mov byte [esp + 0x2cc], 4
cmp eax, ebx
je 0x43d71a
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43d711
cmp al, 0xff
je 0x43d711
dec al
mov byte [ecx], al
jmp 0x43d71a
push ecx
call fcn.00514140
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0x180], ebx
mov dword [esp + 0x184], ebx
mov dword [esp + 0x188], ebx
call fcn.004f86d0
cmp ax, 2
je 0x43eaeb
lea eax, [esp + 0x90]
lea ecx, [esp + 0x34]
push eax
call fcn.004f86e0
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x94]
cmp edx, 8
setne byte [esp + 0x13]
cmp eax, ebx
je 0x43d786
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43d77d
cmp al, 0xff
je 0x43d77d
dec al
mov byte [ecx], al
jmp 0x43d786
push ecx
call fcn.00514140
add esp, 4
mov al, byte [esp + 0x13]
mov dword [esp + 0x94], ebx
cmp al, bl
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
push ebx
jne 0x43ea02
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x3a
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fd4
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
push 0xa
push 0x548df0
lea ecx, [esp + 0x1c]
call fcn.004f5de0
mov cl, byte [0x554048]
mov word [esp + 0x6d], bx
mov byte [esp + 0x6c], cl
mov byte [esp + 0x13], bl
xor edi, edi
lea edx, [esp + 0x100]
lea ecx, [esp + 0x34]
push edx
call fcn.004f86e0
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x43d82b
mov eax, 0x530164
movsx eax, byte [eax + edi]
push eax
lea ecx, [esp + 0x70]
push 0x5482ac
push ecx
call fcn.0051497a
mov eax, dword [esp + 0x110]
add esp, 0xc
cmp eax, ebx
je 0x43d86a
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43d861
cmp al, 0xff
je 0x43d861
dec al
mov byte [ecx], al
jmp 0x43d86a
push ecx
call fcn.00514140
add esp, 4
lea edx, [esp + 0x140]
lea ecx, [esp + 0x34]
push edx
mov dword [esp + 0x108], ebx
mov dword [esp + 0x10c], ebx
mov dword [esp + 0x110], ebx
call fcn.004f86e0
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x43d89c
mov eax, 0x530164
movsx eax, byte [eax + edi + 1]
push eax
lea ecx, [esp + 0x71]
push 0x5482ac
push ecx
call fcn.0051497a
mov eax, dword [esp + 0x150]
add esp, 0xc
cmp eax, ebx
je 0x43d8dc
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43d8d3
cmp al, 0xff
je 0x43d8d3
dec al
mov byte [ecx], al
jmp 0x43d8dc
push ecx
call fcn.00514140
add esp, 4
lea edx, [esp + 0x6c]
mov ecx, ebp
push edx
mov dword [esp + 0x148], ebx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], ebx
call fcn.00491a40
push eax
mov al, byte [esp + 0x17]
shr al, 1
xor cx, cx
mov cl, al
add ecx, 5
push ecx
lea ecx, [esp + 0x1c]
call fcn.004f5c80
mov al, byte [esp + 0x13]
add edi, 2
add al, 2
cmp al, 8
mov byte [esp + 0x13], al
jb 0x43d80e
push 6
push 0x548de8
lea ecx, [esp + 0x20]
call fcn.004f5de0
lea edx, [esp + 0x14]
mov ecx, ebp
push edx
call fcn.004d3100
lea eax, [esp + 0x18]
mov ecx, ebp
push eax
call fcn.004d3100
push 1
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.004f5850
lea eax, [esp + 0x2c]
lea edx, [esp + 0x1c]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x2e0], 0x3b
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0x2dc], 4
call fcn.00435de0
push ebx
push 1
push ecx
cmp al, bl
mov ecx, esp
je 0x43ea32
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x3d
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fcc
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
jmp case.default.0x43c78a
mov al, byte [esp + 0x5f]
sub esp, 0x10
mov edx, esp
mov edi, 0x548ec8
or ecx, 0xffffffff
mov dword [esp + 0x2c], esp
mov byte [edx], al
xor eax, eax
mov dword [edx + 4], ebx
mov dword [edx + 8], ebx
mov dword [edx + 0xc], ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x548ec8
mov ecx, edx
call fcn.00401510
sub esp, 0x10
lea edx, [esp + 0xae]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
push 0x548ec4
mov byte [esp + 0x2f4], 0x3e
call fcn.00401030
sub esp, 0x10
lea eax, [esp + 0xb0]
mov ecx, esp
mov dword [esp + 0x78], esp
push eax
push 0x548f04
mov byte [esp + 0x304], 0x3f
call fcn.00401030
sub esp, 0x10
lea edx, [esp + 0x9d]
mov ecx, esp
mov dword [esp + 0x8c], esp
push edx
push 0x554048
mov byte [esp + 0x314], 0x40
call fcn.00401030
push ecx
mov byte [esp + 0x310], 0x41
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x549fec
call fcn.004f58e0
push ecx
mov byte [esp + 0x314], 0x42
mov ecx, esp
mov dword [esp + 0x70], esp
push 6
push 0x549fa4
call fcn.004f58e0
lea eax, [esp + 0x1e8]
mov ecx, 0x5540a8
push eax
mov byte [esp + 0x318], 4
call fcn.004f9710
mov edx, dword [0x530168]
mov cx, word [eax]
push edx
add eax, 4
mov word [esp + 0x38], cx
push ebx
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2d8], 0x43
call fcn.004011e0
mov eax, dword [esp + 0x1a8]
mov byte [esp + 0x2cc], 4
cmp eax, ebx
je 0x43db2b
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43db22
cmp al, 0xff
je 0x43db22
dec al
mov byte [ecx], al
jmp 0x43db2b
push ecx
call fcn.00514140
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x1ac], ebx
mov dword [esp + 0x1b0], ebx
call fcn.004f86d0
cmp ax, 2
je 0x43eaeb
lea eax, [esp + 0xa0]
lea ecx, [esp + 0x34]
push eax
call fcn.004f86e0
mov edx, dword [eax + 8]
mov eax, dword [esp + 0xa4]
cmp edx, 2
setne byte [esp + 0x13]
cmp eax, ebx
je 0x43db97
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43db8e
cmp al, 0xff
je 0x43db8e
dec al
mov byte [ecx], al
jmp 0x43db97
push ecx
call fcn.00514140
add esp, 4
mov al, byte [esp + 0x13]
mov dword [esp + 0xa4], ebx
cmp al, bl
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], ebx
push ebx
jne 0x43ea53
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x45
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fd4
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
push 7
push 0x548dd8
lea ecx, [esp + 0x1c]
call fcn.004f5de0
mov cl, byte [0x554048]
lea edx, [esp + 0xb0]
mov byte [esp + 0x58], cl
push edx
lea ecx, [esp + 0x38]
mov word [esp + 0x5d], bx
call fcn.004f86e0
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x43dc36
mov eax, 0x530164
movsx eax, byte [eax]
push eax
lea ecx, [esp + 0x5c]
push 0x5482ac
push ecx
call fcn.0051497a
mov eax, dword [esp + 0xc0]
add esp, 0xc
cmp eax, ebx
je 0x43dc74
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43dc6b
cmp al, 0xff
je 0x43dc6b
dec al
mov byte [ecx], al
jmp 0x43dc74
push ecx
call fcn.00514140
add esp, 4
lea edx, [esp + 0xd0]
lea ecx, [esp + 0x34]
push edx
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xc0], ebx
call fcn.004f86e0
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x43dca6
mov eax, 0x530164
movsx eax, byte [eax + 1]
push eax
lea ecx, [esp + 0x5d]
push 0x5482ac
push ecx
call fcn.0051497a
mov eax, dword [esp + 0xe0]
add esp, 0xc
cmp eax, ebx
je 0x43dce5
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43dcdc
cmp al, 0xff
je 0x43dcdc
dec al
mov byte [ecx], al
jmp 0x43dce5
push ecx
call fcn.00514140
add esp, 4
lea edx, [esp + 0x58]
mov ecx, ebp
push edx
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], ebx
mov dword [esp + 0xe0], ebx
call fcn.00491a40
push eax
push 5
lea ecx, [esp + 0x1c]
call fcn.004f5c80
lea eax, [esp + 0x58]
mov ecx, ebp
push eax
call fcn.00491a40
test al, al
je 0x43ea80
push 6
push 0x548dd0
lea ecx, [esp + 0x20]
call fcn.004f5de0
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebp
call fcn.004d3100
lea edx, [esp + 0x18]
mov ecx, ebp
push edx
call fcn.004d3100
push 1
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004f5850
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x1c]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x2e0], 0x47
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0x2dc], 4
call fcn.00435de0
push ebx
push 1
push ecx
cmp al, bl
mov ecx, esp
je 0x43eaae
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x49
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fcc
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
jmp case.default.0x43c78a
mov al, byte [esp + 0x5d]
sub esp, 0x10
mov ebp, esp
mov edi, str.9999
or ecx, 0xffffffff
mov dword [esp + 0x2c], esp
mov byte [ebp], al
xor eax, eax
mov dword [ebp + 4], ebx
mov dword [ebp + 8], ebx
mov dword [ebp + 0xc], ebx
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x3c], ecx
push ecx
mov ecx, ebp
call fcn.004016f0
test al, al
je 0x43de3c
mov eax, dword [esp + 0x38]
mov edi, dword [ebp + 4]
mov ecx, eax
mov esi, str.9999
mov edx, ecx
push eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, ebp
call fcn.004016d0
sub esp, 0x10
lea eax, [esp + 0xa2]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
push str.0000
mov byte [esp + 0x2f4], 0x4a
call fcn.00401030
sub esp, 0x10
lea edx, [esp + 0xbc]
mov ecx, esp
mov dword [esp + 0x78], esp
push edx
push 0x548324
mov byte [esp + 0x304], 0x4b
call fcn.00401030
sub esp, 0x10
lea eax, [esp + 0xc4]
mov ecx, esp
mov dword [esp + 0x8c], esp
push eax
push 0x554048
mov byte [esp + 0x314], 0x4c
call fcn.00401030
push ecx
mov byte [esp + 0x310], 0x4d
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x549fe4
call fcn.004f58e0
push ecx
mov byte [esp + 0x314], 0x4e
mov ecx, esp
mov dword [esp + 0x70], esp
push 6
push 0x549f8c
call fcn.004f58e0
lea ecx, [esp + 0x198]
mov byte [esp + 0x314], 4
push ecx
mov ecx, 0x5540a8
call fcn.004f9710
mov ecx, dword [0x530168]
mov dx, word [eax]
push ecx
add eax, 4
push ebx
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2d8], 0x4f
mov word [esp + 0x40], dx
call fcn.004011e0
mov eax, dword [esp + 0x158]
mov byte [esp + 0x2cc], 4
cmp eax, ebx
je 0x43df50
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43df47
cmp al, 0xff
je 0x43df47
dec al
mov byte [ecx], al
jmp 0x43df50
push ecx
call fcn.00514140
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0x158], ebx
mov dword [esp + 0x15c], ebx
mov dword [esp + 0x160], ebx
call fcn.004f86d0
cmp ax, 2
je 0x43eaf4
lea edx, [esp + 0x1e4]
lea ecx, [esp + 0x34]
push edx
call fcn.004f86e0
mov ecx, dword [eax + 8]
cmp ecx, 4
lea ecx, [esp + 0x1e4]
setne byte [esp + 0x13]
call fcn.004010f0
mov al, byte [esp + 0x13]
push ebx
cmp al, bl
jne 0x43eb5f
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x51
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fd4
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
push 0xa
push 0x549f80
lea ecx, [esp + 0x1c]
call fcn.004f5de0
mov byte [esp + 0x13], bl
xor esi, esi
lea eax, [esp + 0x1b4]
lea ecx, [esp + 0x34]
push eax
call fcn.004f86e0
mov ecx, eax
mov byte [esp + 0x2cc], 0x52
call fcn.0040b060
movzx dx, byte [esp + 0x13]
mov cl, byte [eax + esi]
add edx, 5
push ecx
push edx
lea ecx, [esp + 0x1c]
call fcn.004f5c80
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x2cc], 4
call fcn.004010f0
mov al, byte [esp + 0x13]
inc al
inc esi
cmp al, 4
mov byte [esp + 0x13], al
jb 0x43e004
push 6
push 0x549f78
lea ecx, [esp + 0x20]
call fcn.004f5de0
mov esi, dword [esp + 0x60]
lea eax, [esp + 0x14]
push eax
mov ecx, esi
call fcn.004d3100
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.004d3100
push 1
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.004f5850
lea eax, [esp + 0x2c]
lea edx, [esp + 0x1c]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x2e0], 0x53
call fcn.004f5850
mov ecx, esi
mov byte [esp + 0x2dc], 4
call fcn.00435de0
push ebx
push 1
push ecx
cmp al, bl
mov ecx, esp
je 0x43eb8f
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x55
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fcc
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
mov ebp, esi
mov esi, 0x530160
jmp case.default.0x43c78a
sub esp, 0x10
lea eax, [esp + 0x8d]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
push 0x548ec8
call fcn.00401030
sub esp, 0x10
lea edx, [esp + 0x9f]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
push 0x548ec4
mov byte [esp + 0x2f4], 0x56
call fcn.00401030
sub esp, 0x10
lea eax, [esp + 0xb5]
mov ecx, esp
mov dword [esp + 0x78], esp
push eax
push 0x548f04
mov byte [esp + 0x304], 0x57
call fcn.00401030
sub esp, 0x10
lea edx, [esp + 0xca]
mov ecx, esp
mov dword [esp + 0x8c], esp
push edx
push 0x554048
mov byte [esp + 0x314], 0x58
call fcn.00401030
push ecx
mov byte [esp + 0x310], 0x59
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x549f70
call fcn.004f58e0
push ecx
mov byte [esp + 0x314], 0x5a
mov ecx, esp
mov dword [esp + 0x70], esp
push 6
push 0x549fc4
call fcn.004f58e0
lea eax, [esp + 0x2d0]
mov ecx, 0x5540a8
push eax
mov byte [esp + 0x318], 4
call fcn.004f9710
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x2d0], 0x5b
call fcn.0041d4d0
lea ecx, [esp + 0x288]
mov byte [esp + 0x2cc], 4
call fcn.004335b0
lea ecx, [esp + 0x34]
call fcn.004f86d0
cmp ax, 2
je 0x43ec6b
lea ecx, [esp + 0x224]
push ecx
lea ecx, [esp + 0x38]
call fcn.004f86e0
mov ecx, eax
mov byte [esp + 0x2cc], 0x5c
call fcn.0041fe60
cmp eax, 2
lea ecx, [esp + 0x224]
setne byte [esp + 0x13]
mov byte [esp + 0x2cc], 4
call fcn.004010f0
mov al, byte [esp + 0x13]
push ebx
cmp al, bl
jne 0x43ebb3
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x5e
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fd4
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
push 7
push 0x549f68
lea ecx, [esp + 0x1c]
call fcn.004f5de0
mov dl, byte [0x554048]
lea eax, [esp + 0x1d4]
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x78], dl
mov word [esp + 0x79], bx
call fcn.004f86e0
mov ecx, eax
mov byte [esp + 0x2cc], 0x5f
call fcn.0040b060
movsx ecx, byte [eax]
push ecx
lea edx, [esp + 0x78]
push 0x5482ac
push edx
call fcn.0051497a
add esp, 0xc
lea ecx, [esp + 0x1d4]
mov byte [esp + 0x2cc], 4
call fcn.004010f0
lea eax, [esp + 0x264]
lea ecx, [esp + 0x34]
push eax
call fcn.004f86e0
mov ecx, eax
mov byte [esp + 0x2cc], 0x60
call fcn.0040b060
movsx ecx, byte [eax + 1]
push ecx
lea edx, [esp + 0x79]
push 0x5482ac
push edx
call fcn.0051497a
add esp, 0xc
lea ecx, [esp + 0x264]
mov byte [esp + 0x2cc], 4
call fcn.004010f0
lea eax, [esp + 0x74]
mov ecx, ebp
push eax
call fcn.00491a40
push eax
push 5
lea ecx, [esp + 0x1c]
call fcn.004f5c80
push 6
push 0x549f60
lea ecx, [esp + 0x20]
call fcn.004f5de0
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebp
call fcn.004d3100
lea edx, [esp + 0x18]
mov ecx, ebp
push edx
call fcn.004d3100
push 1
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004f5850
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x1c]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x2e0], 0x61
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0x2dc], 4
call fcn.00435de0
push ebx
push 1
push ecx
cmp al, bl
mov ecx, esp
je 0x43ebe0
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x63
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fcc
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
jmp case.default.0x43c78a
sub esp, 0x10
lea eax, [esp + 0x9f]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
push 0x548ec8
call fcn.00401030
sub esp, 0x10
lea edx, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
push 0x548ec4
mov byte [esp + 0x2f4], 0x64
call fcn.00401030
sub esp, 0x10
lea eax, [esp + 0xb6]
mov ecx, esp
mov dword [esp + 0x78], esp
push eax
push 0x548f04
mov byte [esp + 0x304], 0x65
call fcn.00401030
sub esp, 0x10
lea edx, [esp + 0xbe]
mov ecx, esp
mov dword [esp + 0x8c], esp
push edx
push 0x554048
mov byte [esp + 0x314], 0x66
call fcn.00401030
push ecx
mov byte [esp + 0x310], 0x67
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x549f58
call fcn.004f58e0
push ecx
mov byte [esp + 0x314], 0x68
mov ecx, esp
mov dword [esp + 0x70], esp
push 6
push 0x549fc4
call fcn.004f58e0
lea eax, [esp + 0x2f8]
mov ecx, 0x5540a8
push eax
mov byte [esp + 0x318], 4
call fcn.004f9710
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x2d0], 0x69
call fcn.0041d4d0
lea ecx, [esp + 0x2b0]
mov byte [esp + 0x2cc], 4
call fcn.004335b0
lea ecx, [esp + 0x34]
call fcn.004f86d0
cmp ax, 2
je 0x43ec6b
lea ecx, [esp + 0x1f4]
push ecx
lea ecx, [esp + 0x38]
call fcn.004f86e0
mov ecx, eax
mov byte [esp + 0x2cc], 0x6a
call fcn.0041fe60
cmp eax, 2
lea ecx, [esp + 0x1f4]
setne byte [esp + 0x13]
mov byte [esp + 0x2cc], 4
call fcn.004010f0
mov al, byte [esp + 0x13]
push ebx
cmp al, bl
jne 0x43ec01
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x6c
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fd4
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
push 7
push 0x549f50
lea ecx, [esp + 0x1c]
call fcn.004f5de0
mov dl, byte [0x554048]
lea eax, [esp + 0x254]
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x74], dl
mov word [esp + 0x75], bx
call fcn.004f86e0
mov ecx, eax
mov byte [esp + 0x2cc], 0x6d
call fcn.0040b060
movsx ecx, byte [eax]
push ecx
lea edx, [esp + 0x74]
push 0x5482ac
push edx
call fcn.0051497a
add esp, 0xc
lea ecx, [esp + 0x254]
mov byte [esp + 0x2cc], 4
call fcn.004010f0
lea eax, [esp + 0x214]
lea ecx, [esp + 0x34]
push eax
call fcn.004f86e0
mov ecx, eax
mov byte [esp + 0x2cc], 0x6e
call fcn.0040b060
movsx ecx, byte [eax + 1]
push ecx
lea edx, [esp + 0x75]
push 0x5482ac
push edx
call fcn.0051497a
add esp, 0xc
lea ecx, [esp + 0x214]
mov byte [esp + 0x2cc], 4
call fcn.004010f0
lea eax, [esp + 0x70]
mov ecx, ebp
push eax
call fcn.00491a40
push eax
push 5
lea ecx, [esp + 0x1c]
call fcn.004f5c80
push 6
push 0x549f48
lea ecx, [esp + 0x20]
call fcn.004f5de0
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebp
call fcn.004d3100
lea edx, [esp + 0x18]
mov ecx, ebp
push edx
call fcn.004d3100
push 1
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004f5850
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x1c]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x2e0], 0x6f
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0x2dc], 4
call fcn.00435de0
push ebx
push 1
push ecx
cmp al, bl
mov ecx, esp
je 0x43ec2e
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x71
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549fcc
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
jmp case.default.0x43c78a
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0xb
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f40
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
lea ecx, [esp + 0x18]
mov dword [esp + 0x2c], esi
mov byte [esp + 0x2cc], 2
call fcn.004f5980
lea ecx, [esp + 0x24]
mov byte [esp + 0x2cc], 1
call fcn.004f5980
lea ecx, [esp + 0x14]
mov byte [esp + 0x2cc], bl
call fcn.004f5980
push 1
lea ecx, [esp + 0x3c]
mov dword [esp + 0x2d0], 0xffffffff
call fcn.004013e0
jmp 0x43ecaf
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0xe
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f38
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
lea ecx, [esp + 0x18]
mov dword [esp + 0x2c], 0x530160
mov byte [esp + 0x2cc], 2
call fcn.004f5980
lea ecx, [esp + 0x24]
mov byte [esp + 0x2cc], 1
call fcn.004f5980
lea ecx, [esp + 0x14]
mov byte [esp + 0x2cc], bl
call fcn.004f5980
push 1
lea ecx, [esp + 0x3c]
mov dword [esp + 0x2d0], 0xffffffff
call fcn.004013e0
jmp 0x43ecaf
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x16
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f40
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
mov dword [esp + 0x2c], 0x530160
lea ecx, [esp + 0x18]
mov byte [esp + 0x2cc], 2
call fcn.004f5980
lea ecx, [esp + 0x24]
mov byte [esp + 0x2cc], 1
call fcn.004f5980
lea ecx, [esp + 0x14]
mov byte [esp + 0x2cc], bl
call fcn.004f5980
mov eax, dword [esp + 0x3c]
cmp eax, ebx
je 0x43ecaf
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43eb51
cmp al, 0xff
je 0x43eb51
dec al
mov byte [ecx], al
jmp 0x43ecaf
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x19
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f38
jmp 0x43e8b3
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x21
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f40
jmp 0x43ead4
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x25
mov ecx, esp
mov dword [esp + 0x30], esp
jmp 0x43eacd
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x2d
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f40
jmp 0x43ead4
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x31
mov ecx, esp
mov dword [esp + 0x30], esp
jmp 0x43eacd
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x39
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f40
jmp 0x43ead4
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x3c
mov ecx, esp
mov dword [esp + 0x30], esp
jmp 0x43eacd
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x44
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f40
jmp 0x43ead4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x46
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f30
jmp 0x43ead4
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x48
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f38
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
mov dword [esp + 0x2c], esi
jmp 0x43e8d2
lea ecx, [esp + 0x18]
mov dword [esp + 0x2c], 0x530160
mov byte [esp + 0x2cc], 2
call fcn.004f5980
lea ecx, [esp + 0x24]
mov byte [esp + 0x2cc], 1
call fcn.004f5980
lea ecx, [esp + 0x14]
mov byte [esp + 0x2cc], bl
call fcn.004f5980
mov eax, dword [esp + 0x3c]
cmp eax, ebx
je 0x43ecaf
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43eb51
cmp al, 0xff
je 0x43eb51
dec al
mov byte [ecx], al
jmp 0x43ecaf
push ecx
call fcn.00514140
add esp, 4
jmp 0x43ecaf
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x50
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f40
jmp 0x43ec54
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x54
mov ecx, esp
mov dword [esp + 0x30], esp
jmp 0x43ec4d
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x5d
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f40
jmp 0x43ec54
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x62
mov ecx, esp
mov dword [esp + 0x30], esp
jmp 0x43ec4d
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x6b
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f40
jmp 0x43ec54
mov dword [esp + 0x28], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0x2dc], 0x70
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549f38
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x2dc], 4
call fcn.004f91a0
lea ecx, [esp + 0x2c]
call fcn.00401000
lea ecx, [esp + 0x18]
mov byte [esp + 0x2cc], 2
call fcn.004f5980
lea ecx, [esp + 0x24]
mov byte [esp + 0x2cc], 1
call fcn.004f5980
lea ecx, [esp + 0x14]
mov byte [esp + 0x2cc], bl
call fcn.004f5980
lea ecx, [esp + 0x34]
call fcn.004335b0
mov ecx, dword [esp + 0x2c4]
pop edi
pop esi
pop ebp
xor ax, ax
mov dword fs:[0], ecx
pop ebx
add esp, 0x2c0
ret