Function at 0x8a0490
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x70
push 0xffffffffffffffff
push 0x5146fd
mov eax, dword fs:[0]
push eax
sub esp, 0x1d8
mov eax, dword [0x682790]
xor eax, ebp
mov dword [ebp + 0x6c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 0x7c]
xor ebx, ebx
push 1
push 0x14
mov dword [ebp + 0xc], ebx
mov dword [ebp + 0x48], ebx
call dword [0x51c538]
mov ebx, dword [fcn.0051c36c]
push 0xb
push 0x520488
call ebx
add esp, 0x10
mov dword [ebp + 0x3c], eax
push esi
lea eax, [ebp + 0x78]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp + 0x3c]
push eax
lea ecx, [ebp - 0x164]
call fcn.008c2c00
lea ecx, [ebp + 0x3c]
call dword [fcn.0051c364]
mov dword [ebp + 0x4c], 0x6821d0
lea eax, [ebp + 0x4c]
mov byte [ebp - 4], 3
push eax
call dword [0x51c540]
add esp, 4
lea ecx, [ebp + 0x4c]
call dword [fcn.0051c364]
mov dword [ebp + 0x4c], 0x6821f8
lea eax, [ebp + 0x4c]
mov byte [ebp - 4], 4
push eax
call dword [0x51c53c]
add esp, 4
lea ecx, [ebp + 0x4c]
call dword [fcn.0051c364]
mov dword [ebp + 0x4c], 0x682220
lea eax, [ebp + 0x4c]
mov byte [ebp - 4], 5
push eax
call dword [0x51c544]
add esp, 4
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x4c]
call dword [fcn.0051c364]
lea ecx, [ebp + 0x50]
call dword [0x51c560]
push 0x12
push 0x520494
mov byte [ebp - 4], 6
call ebx
add esp, 8
mov dword [ebp + 0x4c], eax
lea eax, [ebp + 0x4c]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp + 0x50]
call dword [0x51c570]
lea ecx, [ebp + 0x4c]
mov byte [ebp - 4], 6
call dword [fcn.0051c364]
lea eax, [ebp + 0x38]
push eax
lea ecx, [ebp + 0x50]
call dword [0x51c56c]
lea ecx, [ebp + 0x38]
call dword [0x51c558]
push 1
push 0x5204d8
call ebx
mov dword [ebp - 0x124], eax
push 4
push 0x5204dc
mov byte [ebp - 4], 8
call ebx
add esp, 0x10
mov dword [ebp - 0x120], eax
mov eax, dword [0x51c4ac]
mov dword [ebp + 0x10], eax
cmp dword [eax + 4], 2
mov byte [ebp - 4], 0xa
jge 0x8a0627
mov eax, dword [eax]
cmp eax, 1
je 0x8a0616
test eax, eax
je 0x8a0616
push 2
lea ecx, [ebp + 0x10]
call fcn.0089cee0
jmp 0x8a0621
push 2
lea ecx, [ebp + 0x10]
call dword [0x51c51c]
mov eax, dword [ebp + 0x48]
mov dword [ebp + 0xc], eax
lea esi, [ebp - 0x124]
nop dword [eax]
push esi
lea ecx, [ebp + 0x10]
call fcn.0089fdc0
add esi, 4
lea eax, [ebp - 0x11c]
cmp esi, eax
jne 0x8a0630
lea ecx, [ebp - 0x14c]
call dword [fcn.0051c35c]
mov edi, eax
lea ecx, [ebp - 0x148]
call dword [fcn.0051c35c]
mov esi, eax
mov ebx, dword [0x51c54c]
lea eax, [ebp - 0x144]
push 0xffffffffffffffff
push 0
push 0x5204a8
push 0x5204d0
push eax
mov byte [ebp - 4], 0xd
call ebx
add esp, 0x14
push edi
mov edi, dword [0x51c554]
lea ecx, [ebp - 0x30]
push esi
push eax
lea eax, [ebp + 0x10]
mov byte [ebp - 4], 0xe
push eax
call edi
lea ecx, [ebp - 0x144]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x148]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x14c]
call dword [fcn.0051c364]
lea ecx, [ebp + 0x10]
call fcn.0089c440
push dword [fcn.0051c364]
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0x14
push 2
push 4
push eax
call fcn.00930bf6
mov esi, dword [fcn.0051c36c]
push 9
push 0x5204e4
call esi
mov dword [ebp - 0xd8], eax
push 4
push 0x5204f0
mov byte [ebp - 4], 0x15
call esi
mov dword [ebp - 0xd0], eax
push 5
push 0x520508
mov byte [ebp - 4], 0x16
call esi
mov dword [ebp - 0xcc], eax
push 1
push 0x520504
mov byte [ebp - 4], 0x17
call esi
mov dword [ebp - 0xc8], eax
push 0xffffffffffffffff
push 0
push 0x5204f8
push 0x5204d0
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x18
push eax
call ebx
add esp, 0x34
mov esi, eax
mov ecx, dword [0x51c4ac]
mov dword [ebp + 0x48], ecx
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp + 0x48]
call fcn.0089fdc0
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp + 0x48]
call fcn.0089fdc0
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xd0]
push eax
push esi
lea eax, [ebp + 0x48]
push eax
lea ecx, [ebp + 0x24]
call edi
lea ecx, [ebp + 0x48]
call fcn.0089c440
lea ecx, [ebp - 0x13c]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xc8]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xcc]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xd0]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x21
call dword [fcn.0051c364]
mov esi, dword [fcn.0051c36c]
push 4
push 0x520510
call esi
mov dword [ebp - 0xe8], eax
push 7
push 0x520518
mov byte [ebp - 4], 0x22
call esi
mov dword [ebp - 0xe4], eax
push 9
push 0x520560
mov byte [ebp - 4], 0x23
call esi
mov dword [ebp - 0xe0], eax
push 1
push 0x52055c
mov byte [ebp - 4], 0x24
call esi
mov dword [ebp - 0xdc], eax
push 0xffffffffffffffff
push 0
push 0x520520
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 0x25
push 0x5204d0
push eax
call ebx
add esp, 0x34
mov esi, eax
mov ecx, dword [0x51c4ac]
mov dword [ebp - 0x28], ecx
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x28]
call fcn.0089fdc0
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x28]
call fcn.0089fdc0
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xe4]
push eax
push esi
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp + 0x34]
call edi
lea ecx, [ebp - 0x28]
call fcn.0089c440
lea ecx, [ebp - 0x140]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xdc]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xe0]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xe4]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x2e
call dword [fcn.0051c364]
mov esi, dword [fcn.0051c36c]
push 0
push 0x51ffa5
call esi
mov dword [ebp - 0x100], eax
push 7
push 0x52056c
mov byte [ebp - 4], 0x2f
call esi
mov dword [ebp - 0xfc], eax
push 6
push 0x520594
mov byte [ebp - 4], 0x30
call esi
mov dword [ebp - 0xf8], eax
push 1
push 0x520590
mov byte [ebp - 4], 0x31
call esi
mov dword [ebp - 0xec], eax
push 0xffffffffffffffff
push 0
push 0x520574
lea eax, [ebp + 0x14]
mov byte [ebp - 4], 0x32
push 0x5204d0
push eax
call ebx
add esp, 0x34
mov esi, eax
mov ecx, dword [0x51c4ac]
mov dword [ebp - 0x2c], ecx
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x2c]
call fcn.0089fdc0
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0089fdc0
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xfc]
push eax
push esi
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x44]
call edi
lea ecx, [ebp - 0x2c]
call fcn.0089c440
lea ecx, [ebp + 0x14]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xec]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xf8]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xfc]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x3b
call dword [fcn.0051c364]
mov esi, dword [fcn.0051c36c]
push 0
push 0x51ffa5
call esi
mov dword [ebp - 0x110], eax
push 3
push 0x52059c
mov byte [ebp - 4], 0x3c
call esi
mov dword [ebp - 0x10c], eax
push 0
push 0x51ffa5
mov byte [ebp - 4], 0x3d
call esi
mov dword [ebp - 0x108], eax
push 1
push 0x5205a0
mov byte [ebp - 4], 0x3e
call esi
add esp, 0x20
mov dword [ebp - 0x104], eax
mov eax, dword [0x51c4ac]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x40
push eax
lea ecx, [ebp - 0x60]
call fcn.0089fdc0
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp + 0x28]
call edi
lea ecx, [ebp - 0x60]
call fcn.0089c440
lea ecx, [ebp - 0x104]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x108]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x10c]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x46
call dword [fcn.0051c364]
push 9
push 0x5205a4
call esi
add esp, 8
mov dword [ebp - 0x6c], eax
mov eax, dword [0x51c4ac]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x48
push eax
lea ecx, [ebp - 0x58]
call fcn.0089fdc0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x34]
call dword [0x51c550]
lea ecx, [ebp - 0x58]
call fcn.0089c440
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x4b
call dword [fcn.0051c364]
push 0
push 0x51ffa5
call esi
mov dword [ebp - 0x7c], eax
push 9
push 0x5205b0
mov byte [ebp - 4], 0x4c
call esi
mov dword [ebp - 0x78], eax
push 9
push 0x5205b0
mov byte [ebp - 4], 0x4d
call esi
mov dword [ebp - 0x74], eax
push 1
push 0x520614
mov byte [ebp - 4], 0x4e
call esi
mov dword [ebp - 0x70], eax
push 0xffffffffffffffff
push 0
push 0x5205c0
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x4f
push 0x5204d0
push eax
call ebx
add esp, 0x34
mov esi, eax
mov ecx, dword [0x51c4ac]
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0x4c]
call fcn.0089fdc0
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0089fdc0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x78]
push eax
push esi
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp + 0x2c]
call edi
lea ecx, [ebp - 0x4c]
call fcn.0089c440
lea ecx, [ebp - 0xd4]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x70]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x74]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x78]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x58
call dword [fcn.0051c364]
mov esi, dword [0x51c55c]
push ecx
mov eax, esp
lea ecx, [ebp + 0x24]
mov dword [eax], 1
call esi
push ecx
mov eax, esp
lea ecx, [ebp - 0x44]
mov dword [eax], 1
call esi
push ecx
mov eax, esp
lea ecx, [ebp + 0x2c]
mov dword [eax], 1
call esi
push ecx
mov eax, esp
lea ecx, [ebp + 0x34]
mov dword [eax], 1
call esi
push ecx
mov eax, esp
lea ecx, [ebp + 0x28]
mov dword [eax], 1
call esi
mov esi, dword [0x51c568]
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp + 0x50]
call esi
lea eax, [ebp + 0x24]
push eax
lea ecx, [ebp + 0x50]
call esi
lea eax, [ebp + 0x34]
push eax
lea ecx, [ebp + 0x50]
call esi
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp + 0x50]
call esi
lea eax, [ebp + 0x28]
push eax
lea ecx, [ebp + 0x50]
call esi
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x50]
call esi
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp + 0x50]
call esi
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp + 0x50]
call dword [0x51c574]
mov esi, dword [0x51c578]
lea eax, [ebp + 0x28]
push eax
lea ecx, [ebp + 0x50]
call esi
test al, al
je 0x8a0ca6
push 0x5204e4
lea ecx, [ebp + 0x4c]
call dword [fcn.0051c508]
lea eax, [ebp + 0x4c]
mov byte [ebp - 4], 0x59
push eax
push 0
call fcn.008bfc70
add esp, 8
mov byte [ebp - 4], 0x58
lea ecx, [ebp + 0x4c]
call dword [fcn.0051c364]
push ecx
mov eax, esp
lea ecx, [ebp + 0x28]
push ecx
push eax
lea ecx, [ebp + 0x50]
call dword [0x51c57c]
call fcn.008a01b0
add esp, 4
push eax
call dword [0x51ce94]
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp + 0x50]
call esi
test al, al
je 0x8a0e8a
push 0x520618
lea ecx, [ebp + 0x4c]
call dword [fcn.0051c508]
push 0
push 1
lea eax, [ebp + 0x4c]
mov byte [ebp - 4], 0x5a
push eax
lea ecx, [ebp - 0x50]
call dword [0x51c524]
mov edi, eax
lea eax, [ebp + 0x38]
mov byte [ebp - 4], 0x5b
push eax
lea ecx, [ebp + 0x50]
call dword [0x51c584]
mov esi, eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x5c
push 0
call fcn.0089c310
push edi
lea eax, [ebp + 0x20]
mov ecx, esi
push eax
call dword [0x51c500]
lea ecx, [ebp + 0x38]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x50]
call dword [0x51c528]
lea ecx, [ebp + 0x4c]
mov byte [ebp - 4], 0x60
call dword [fcn.0051c364]
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp + 0x20]
call fcn.0089fe80
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x20]
call fcn.008a0010
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x44]
call fcn.0089fb20
test al, al
je 0x8a0e82
mov ebx, dword [ebp + 0xc]
lea ecx, [ebp + 0x44]
call fcn.0089fb30
push 0x520620
lea ecx, [ebp + 0x30]
mov esi, eax
call dword [fcn.0051c508]
push 1
lea eax, [ebp + 0x30]
mov byte [ebp - 4], 0x61
or ebx, 1
mov ecx, esi
push eax
mov dword [ebp + 0x48], ebx
call dword [0x51c4fc]
test al, al
jne 0x8a0dea
push 0x52062c
lea ecx, [ebp + 0x1c]
call dword [fcn.0051c508]
push 1
lea eax, [ebp + 0x1c]
mov dword [ebp - 4], 0x62
or ebx, 2
mov ecx, esi
push eax
mov dword [ebp + 0x48], ebx
call dword [0x51c4fc]
test al, al
jne 0x8a0dea
push 0x520518
lea ecx, [ebp + 0x3c]
call dword [fcn.0051c508]
push 1
lea eax, [ebp + 0x3c]
mov dword [ebp - 4], 0x63
or ebx, 4
mov ecx, esi
push eax
mov dword [ebp + 0x48], ebx
call dword [0x51c4fc]
mov byte [ebp + 0x43], 1
test al, al
je 0x8a0dee
mov byte [ebp + 0x43], 0
test bl, 4
je 0x8a0dff
lea ecx, [ebp + 0x3c]
and ebx, 0xfffffffb
call dword [fcn.0051c364]
test bl, 2
je 0x8a0e10
lea ecx, [ebp + 0x1c]
and ebx, 0xfffffffd
call dword [fcn.0051c364]
mov dword [ebp - 4], 0x60
test bl, 1
je 0x8a0e28
lea ecx, [ebp + 0x30]
and ebx, 0xfffffffe
call dword [fcn.0051c364]
cmp byte [ebp + 0x43], 0
je 0x8a0e66
lea eax, [ebp + 0x54]
mov ecx, esi
push eax
call dword [fcn.0051c50c]
push 0x477760
push eax
push dword [0x51c224]
mov byte [ebp - 4], 0x64
call fcn.0089efc0
add esp, 8
mov ecx, eax
call dword [0x51c218]
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 0x60
call fcn.0089f9f0
lea ecx, [ebp + 0x44]
call fcn.0089fb40
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x44]
call fcn.0089fb20
test al, al
jne 0x8a0d58
push 0
call dword [0x51ce94]
lea eax, [ebp + 0x24]
push eax
lea ecx, [ebp + 0x50]
call esi
mov byte [ebp - 0x10], al
lea ecx, [ebp + 0x50]
lea eax, [ebp + 0x24]
push eax
lea eax, [ebp - 0x3c]
push eax
call dword [0x51c57c]
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x65
cmp dword [eax + 4], 0
jne 0x8a0ee8
mov edi, dword [fcn.0051c36c]
push 9
push 0x5204e4
call edi
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x66
push eax
push dword [ebp - 0x10]
call fcn.008bfc70
add esp, 0x10
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x14]
call dword [fcn.0051c364]
jmp 0x8a0efd
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x10]
call fcn.008bfc70
mov edi, dword [fcn.0051c36c]
add esp, 8
call fcn.008bfa40
mov dword [ebp - 0x10], 0x682270
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x67
push eax
call dword [0x51c594]
add esp, 4
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x10]
call dword [fcn.0051c364]
mov ecx, 0x684060
call fcn.0089fb50
push 0x27
push 0x52087c
call edi
add esp, 8
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x68
push eax
lea ecx, [ebp + 0x1c]
call dword [0x51ca88]
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x6a
call dword [fcn.0051c364]
lea ecx, [ebp + 0x1c]
call dword [0x51ca90]
test al, al
je 0x8a0fc0
push 0x12
push 0x5208a4
call edi
add esp, 8
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x6b
push eax
push 0
push 0
push 0
lea ecx, [ebp - 0x190]
call dword [fcn.0051c350]
mov ecx, eax
call dword [fcn.0051c354]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x6c
push ecx
mov ecx, eax
call dword [fcn.0051c3a0]
lea ecx, [ebp - 0x1c]
call dword [fcn.0051c39c]
lea ecx, [ebp - 0x18]
call dword [fcn.0051c364]
jmp 0x8a1024
push 0xc
push 0x5208b8
call edi
add esp, 8
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x6d
push eax
push 0
push 0
push 0
lea ecx, [ebp - 0x190]
call dword [fcn.0051c350]
mov ecx, eax
call dword [fcn.0051c354]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x6e
push ecx
mov ecx, eax
call dword [fcn.0051c3a0]
lea ecx, [ebp - 0x1c]
call dword [fcn.0051c39c]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x6a
call dword [fcn.0051c364]
lea eax, [ebp + 0x1c]
push eax
call dword [0x51ca98]
add esp, 4
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x65
call dword [0x51ca8c]
push 0
push 0x51ffa5
call edi
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 0x34]
mov byte [ebp - 4], 0x6f
push eax
lea ecx, [ebp + 0x50]
call esi
mov ebx, dword [fcn.0051c3cc]
test al, al
je 0x8a11cc
push 1
push 0x520648
call edi
add esp, 8
mov dword [ebp + 0x3c], eax
lea eax, [ebp + 0x34]
mov byte [ebp - 4], 0x70
push eax
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp + 0x50]
call dword [0x51c580]
mov esi, eax
mov ecx, dword [ebp + 0x3c]
mov byte [ebp - 4], 0x71
push dword [ecx + 4]
lea ecx, [ebp + 0x3c]
call dword [0x51c4f4]
push eax
lea eax, [ebp - 0x88]
push esi
push eax
call dword [0x51c52c]
mov eax, 8
mov dword [ebp + 0xc], eax
push 0x15
push 0x520630
mov byte [ebp - 4], 0x72
call edi
mov dword [ebp - 0x84], eax
add esp, 0x14
mov byte [ebp - 0x1c], 0x20
mov ecx, esp
mov byte [ebp - 4], 0x73
push dword [ebp - 0x1c]
call dword [fcn.0051c3bc]
push 0
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x84]
call ebx
push eax
mov byte [ebp - 4], 0x74
call fcn.0089fd50
add esp, 4
lea ecx, [ebp - 0x138]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x84]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x88]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xf4]
call fcn.0089c440
lea ecx, [ebp + 0x3c]
mov byte [ebp - 4], 0x6f
call dword [fcn.0051c364]
lea eax, [ebp + 0x34]
push eax
lea eax, [ebp + 4]
push eax
lea ecx, [ebp + 0x50]
call dword [0x51c57c]
push eax
lea ecx, [ebp + 8]
call dword [fcn.0051c368]
lea ecx, [ebp + 4]
call dword [fcn.0051c364]
push 0x19
push 0x52064c
call edi
mov dword [ebp - 0x8c], eax
mov byte [ebp - 4], 0x75
mov byte [ebp + 4], 0x20
add esp, 4
mov ecx, esp
push dword [ebp + 4]
call dword [fcn.0051c3bc]
push 0
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x8c]
call ebx
push eax
mov byte [ebp - 4], 0x76
call fcn.0089fd50
add esp, 4
lea ecx, [ebp - 0x40]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x6f
call dword [fcn.0051c364]
lea eax, [ebp + 8]
push eax
call dword [0x51c544]
mov esi, dword [0x51c578]
add esp, 4
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x50]
call esi
mov byte [ebp + 4], al
test al, al
je 0x8a120e
push 0xe
push 0x520668
call edi
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x77
push eax
call fcn.0089fd50
add esp, 0xc
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x90]
call dword [fcn.0051c364]
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp + 0x50]
call esi
test al, al
je 0x8a1323
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp + 0x50]
call dword [0x51c57c]
push eax
mov ecx, 0x68405c
call dword [fcn.0051c368]
lea ecx, [ebp - 0x20]
call dword [fcn.0051c364]
push 0x19
push 0x520678
call edi
mov dword [ebp - 0x94], eax
add esp, 4
mov byte [ebp - 0x20], 0x20
mov ecx, esp
mov byte [ebp - 4], 0x78
push dword [ebp - 0x20]
call dword [fcn.0051c3bc]
push 0
push 0x68405c
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x94]
call ebx
push eax
mov byte [ebp - 4], 0x79
call fcn.0089fd50
add esp, 4
lea ecx, [ebp - 0x5c]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x94]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x9c]
call dword [fcn.0051c35c]
mov eax, dword [0x51c4ac]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x7b
push eax
lea eax, [ebp - 0x9c]
push eax
push 0x68405c
call fcn.008badd0
add esp, 0xc
test al, al
jne 0x8a1308
push 0x520694
lea ecx, [ebp + 0x4c]
call dword [fcn.0051c508]
lea eax, [ebp + 0x4c]
mov byte [ebp - 4], 0x7c
push eax
call fcn.0089fd50
add esp, 4
lea ecx, [ebp + 0x4c]
call dword [fcn.0051c364]
push 0
call dword [0x51ce94]
lea ecx, [ebp - 0x98]
call fcn.0089c440
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x6f
call dword [fcn.0051c364]
push 0xb
push 0x5206b4
call edi
add esp, 8
mov dword [ebp - 0xa0], eax
push 0x1388
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x7d
push eax
lea ecx, [ebp - 0x164]
call fcn.008c2ce0
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x6f
mov bl, al
call dword [fcn.0051c364]
test bl, bl
je 0x8a13bd
lea ecx, [ebp + 8]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x3c]
call dword [fcn.0051c364]
mov ebx, dword [0x51c558]
lea ecx, [ebp + 0x2c]
call ebx
lea ecx, [ebp - 0x34]
call ebx
lea ecx, [ebp + 0x28]
call ebx
lea ecx, [ebp - 0x44]
call ebx
lea ecx, [ebp + 0x34]
call ebx
lea ecx, [ebp + 0x24]
call ebx
lea ecx, [ebp - 0x30]
call ebx
lea ecx, [ebp + 0x50]
call dword [0x51c564]
lea ecx, [ebp - 0x164]
call dword [0x51ca94]
xor eax, eax
jmp 0x8a1bf2
push 0x3b
push 0x5206c0
call edi
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 0x7e
push eax
call fcn.0089fd50
add esp, 0xc
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0xa4]
call dword [fcn.0051c364]
call dword [0x51c4b4]
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x134]
push eax
call dword [0x51c4c4]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0x7f
push eax
call dword [0x51c4c0]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x80
push eax
call dword [0x51c4cc]
mov ebx, eax
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 0x81
push eax
call dword [0x51c4d0]
mov edi, eax
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x82
push eax
call dword [0x51c4c8]
mov esi, eax
push 0x23
push 0x5206fc
mov byte [ebp - 4], 0x83
call dword [fcn.0051c36c]
add esp, 0x1c
mov dword [ebp - 0xac], eax
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x84
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x154]
push dword [ebp - 0x40]
lea ecx, [ebp - 0xac]
push ebx
push edi
push esi
push eax
call fcn.0089f190
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x85
push ecx
mov ecx, eax
call dword [0x51c504]
mov ecx, eax
mov byte [ebp - 4], 0x86
call dword [0x51c4e4]
mov edx, eax
test edx, edx
je 0x8a14cb
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x8a14c0
sub ecx, esi
jmp 0x8a14ce
or ecx, 0xffffffff
mov ebx, dword [fcn.0051c36c]
push ecx
push edx
call ebx
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x87
push eax
call fcn.0089fd50
add esp, 0xc
lea ecx, [ebp - 0xa8]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x150]
call dword [fcn.0051c358]
lea ecx, [ebp - 0x154]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xac]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x168]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x128]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x12c]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x130]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x6f
call dword [fcn.0051c364]
lea eax, [ebp - 0x38]
push eax
call dword [fcn.0051c40c]
push eax
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x88
push 0x520720
push eax
call fcn.0089c720
push eax
mov byte [ebp - 4], 0x89
call fcn.0089fd50
add esp, 0x14
lea ecx, [ebp - 0xf0]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x6f
call dword [fcn.0051c364]
push 0
push dword [ebp + 4]
lea ecx, [ebp - 0x1e4]
call fcn.0089c320
push 0xc
mov byte [ebp - 4], 0x8a
mov dword [ebp - 0x38], 0x471a40
call fcn.00930749
add esp, 4
mov dword [ebp - 0xf0], eax
test eax, eax
je 0x8a15ee
mov dword [eax], 1
lea ecx, [ebp - 0x1e4]
mov dword [eax + 4], 0x478430
mov dword [eax + 8], ecx
jmp 0x8a15f0
xor eax, eax
push 0x6820c0
push 0
push 1
push eax
push 0
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x24]
push eax
call dword [fcn.0051c404]
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x24]
add esp, 0x24
or eax, 0x30
mov dword [ebp + 0x48], eax
call dword [0x51c3b8]
push 0x13
push 0x520748
call ebx
add esp, 8
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 0xb0]
mov byte [ebp - 4], 0x8b
push eax
lea ecx, [ebp - 0x68]
call dword [fcn.0051c5a4]
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x8c
push ecx
mov dword [ecx], 0xffffffff
mov ecx, esp
mov dword [ecx], 0xffffffff
lea ecx, [ebp + 0x44]
push ecx
mov ecx, eax
call dword [0x51c5ac]
lea ecx, [ebp - 0x68]
call dword [fcn.0051c5a8]
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x8f
call dword [fcn.0051c364]
mov eax, dword [ebp + 0x44]
mov eax, dword [eax]
cmp eax, 1
je 0x8a16aa
test eax, eax
je 0x8a16aa
mov eax, dword [ebp + 0x44]
lea ecx, [ebp + 0x44]
push dword [eax + 4]
call fcn.0089cee0
lea ecx, [ebp + 0x44]
call dword [fcn.0051c3f4]
mov esi, eax
mov eax, dword [ebp + 0x44]
mov eax, dword [eax]
cmp eax, 1
je 0x8a16d1
test eax, eax
je 0x8a16d1
mov eax, dword [ebp + 0x44]
lea ecx, [ebp + 0x44]
push dword [eax + 4]
call fcn.0089cee0
lea ecx, [ebp + 0x44]
call dword [fcn.0051c3f8]
mov dword [ebp - 0x24], eax
cmp esi, eax
je 0x8a17d6
mov edi, dword [ebp + 0x48]
nop dword [eax + eax]
push 0xffffffffffffffff
lea eax, [ebp + 0x30]
mov byte [ebp - 4], 0x90
push 0x520748
push eax
call dword [fcn.0051c3e0]
add esp, 0xc
lea ecx, [ebp + 0x30]
or edi, 0x40
mov dword [ebp + 0x48], edi
push esi
call dword [fcn.0051c3d4]
lea eax, [ebp + 0x30]
push eax
call dword [0x51ca84]
add esp, 4
cmp eax, 0xffffffff
jne 0x8a17bb
push 0x22
push 0x52075c
call ebx
mov dword [ebp - 0xb4], eax
add esp, 4
mov byte [ebp - 0x68], 0x20
mov ecx, esp
mov byte [ebp - 4], 0x91
push dword [ebp - 0x68]
call dword [fcn.0051c3bc]
push 0
lea eax, [ebp + 0x30]
push eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0xb4]
call dword [fcn.0051c3cc]
mov edi, eax
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x92
push eax
push 0
push 0
push 0
lea ecx, [ebp - 0x190]
call dword [fcn.0051c350]
mov ecx, eax
call dword [fcn.0051c354]
push edi
mov ecx, eax
mov byte [ebp - 4], 0x93
call dword [fcn.0051c3a0]
lea ecx, [ebp - 0x64]
call dword [fcn.0051c39c]
lea ecx, [ebp - 0x48]
call dword [fcn.0051c364]
lea ecx, [ebp - 0xb4]
call dword [fcn.0051c364]
mov edi, dword [ebp + 0x48]
and edi, 0xffffffbf
lea ecx, [ebp + 0x30]
mov dword [ebp + 0x48], edi
call dword [fcn.0051c364]
add esi, 4
cmp esi, dword [ebp - 0x24]
jne 0x8a16f0
lea ecx, [ebp + 0x44]
mov byte [ebp - 4], 0x8a
call fcn.0089c440
push 0
lea ecx, [ebp - 0x11c]
call dword [0x51ccec]
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x94
push 0x52038c
push eax
call dword [fcn.0051c374]
push 1
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x95
push 0
push eax
call fcn.0089f4b0
add esp, 0x14
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0xb8]
call dword [fcn.0051c358]
push 0x23
push 0x520780
call ebx
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 0x96
push eax
push 0x5207a4
push 0
push 1
push 0x5207b4
call fcn.0089f5d0
add esp, 0x1c
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0xbc]
call dword [fcn.0051c364]
push 0x12
push 0x5207d4
call ebx
add esp, 8
mov dword [ebp - 0xc0], eax
push 0
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x97
push eax
lea ecx, [ebp + 0x18]
call dword [fcn.0051c43c]
mov edi, eax
mov ecx, edi
mov byte [ebp - 4], 0x98
call dword [0x51c58c]
mov esi, dword [fcn.0051c440]
test al, al
je 0x8a18cd
push 0x520398
push 0
push 0
push 0
lea ecx, [ebp + 0x58]
call dword [fcn.0051c350]
push eax
call dword [fcn.0051c4d4]
add esp, 8
jmp 0x8a1920
push edi
lea ecx, [ebp - 0x17c]
call dword [0x51c588]
mov dword [ebp - 0x178], 0x5207c0
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0x520384
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 0x99
push eax
push 5
call dword [0x51ccd4]
add esp, 8
lea ecx, [ebp - 0x17c]
call esi
lea ecx, [ebp + 0x18]
call esi
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x94
call dword [fcn.0051c364]
mov eax, dword fs:[0x2c]
mov ecx, dword [0x985978]
mov esi, dword [eax + ecx*4]
mov eax, dword [0x684058]
mov dword [ebp + 0x18], esi
cmp eax, dword [esi + 4]
jg 0x8a1c0f
mov eax, dword [0x684030]
cmp eax, dword [esi + 4]
jg 0x8a1d02
push 0x13
push 0x5207e8
call ebx
add esp, 8
mov dword [ebp - 0xc4], eax
mov edi, dword [0x51ccf0]
lea eax, [ebp - 0xc4]
push 0x684040
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x9f
call edi
mov esi, dword [0x51ccdc]
mov ecx, eax
call esi
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x94
call dword [fcn.0051c364]
push 0x12
push 0x5207fc
call ebx
add esp, 8
mov dword [ebp - 0x50], eax
push 0x684024
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0xa0
push eax
lea ecx, [ebp - 0x11c]
call edi
mov ecx, eax
call esi
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x94
call dword [fcn.0051c364]
push 0xd
push 0x520810
call ebx
add esp, 8
mov dword [ebp + 0x38], eax
lea eax, [ebp - 0x1e4]
mov byte [ebp - 4], 0xa1
push eax
lea eax, [ebp + 0x38]
push eax
lea ecx, [ebp - 0x11c]
call edi
mov ecx, eax
call esi
lea ecx, [ebp + 0x38]
call dword [fcn.0051c364]
mov dword [ebp + 0x38], 0x68223c
push 0
lea eax, [ebp + 0x38]
mov byte [ebp - 4], 0xa2
push eax
lea ecx, [ebp - 0x54]
call dword [fcn.0051c43c]
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 0xa4
call dword [fcn.0051c364]
mov edi, dword [0x51c588]
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp + 0x4c]
call edi
mov eax, dword [0x51cce0]
mov dword [ebp + 0x18], eax
push 0xc
mov byte [ebp - 4], 0xa5
call fcn.00930749
mov esi, eax
add esp, 4
mov dword [ebp - 0x48], esi
mov byte [ebp - 4], 0xa6
test esi, esi
je 0x8a1aa7
lea eax, [ebp + 0x4c]
push eax
lea ecx, [ebp + 0x20]
call edi
lea eax, [ebp + 0x20]
mov dword [esi], 1
lea ecx, [esi + 8]
mov byte [ebp - 4], 0xa7
push eax
mov dword [esi + 4], 0x478540
mov dword [ebp - 0x64], ecx
call edi
mov edi, dword [fcn.0051c440]
lea ecx, [ebp + 0x20]
call edi
jmp 0x8a1aaf
mov edi, dword [fcn.0051c440]
xor esi, esi
push dword [0x51ccd8]
lea eax, [ebp - 0x164]
mov byte [ebp - 4], 0xa5
push 0x6822b8
push 2
push esi
push 0
push eax
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp]
push eax
call dword [fcn.0051c404]
add esp, 0x24
mov byte [ebp - 4], 0xa4
lea ecx, [ebp + 0x4c]
call edi
lea ecx, [ebp]
call dword [0x51c3b8]
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x11c]
call dword [0x51cce4]
call dword [0x51cac0]
lea ecx, [ebp - 0x54]
mov dword [ebp], eax
call edi
lea ecx, [ebp - 0x11c]
call dword [0x51cce8]
mov esi, dword [0x51c41c]
lea ecx, [ebp - 0x1ac]
call esi
lea ecx, [ebp - 0x1c4]
call esi
mov ecx, dword [ebp - 0x1cc]
test ecx, ecx
je 0x8a1b45
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
mov ebx, dword [ebp - 0x1d4]
test ebx, ebx
je 0x8a1b82
mov esi, dword [ebx + 4]
test esi, esi
je 0x8a1b77
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x8a1b77
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x8a1b77
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
push 8
push ebx
call fcn.0093072a
add esp, 8
mov ecx, dword [ebp - 0x1d8]
test ecx, ecx
je 0x8a1b93
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
lea ecx, [ebp - 0x1e4]
call dword [fcn.0051c400]
lea ecx, [ebp + 8]
call dword [fcn.0051c364]
lea ecx, [ebp - 0x3c]
call dword [fcn.0051c364]
mov ebx, dword [0x51c558]
lea ecx, [ebp + 0x2c]
call ebx
lea ecx, [ebp - 0x34]
call ebx
lea ecx, [ebp + 0x28]
call ebx
lea ecx, [ebp - 0x44]
call ebx
lea ecx, [ebp + 0x34]
call ebx
lea ecx, [ebp + 0x24]
call ebx
lea ecx, [ebp - 0x30]
call ebx
lea ecx, [ebp + 0x50]
call dword [0x51c564]
lea ecx, [ebp - 0x164]
call dword [0x51ca94]
mov eax, dword [ebp]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x6c]
xor ecx, ebp
call fcn.00930738
lea esp, [ebp + 0x70]
pop ebp
ret
push 0x684058
call fcn.00930afd
add esp, 4
cmp dword [0x684058], 0xffffffff
jne 0x8a1958
push 0
mov ecx, 0x684040
mov byte [ebp - 4], 0x9a
call dword [fcn.0051c3fc]
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x9b
push 8
mov dword [0x684040], 0x520410
mov dword [0x684048], eax
call fcn.00930749
mov esi, eax
add esp, 4
mov dword [ebp - 0x48], esi
mov edi, dword [0x51c598]
mov byte [ebp - 4], 0x9c
test esi, esi
je 0x8a1c83
call dword [fcn.0051c390]
push eax
mov ecx, esi
call edi
mov dword [esi], 0x5203d0
jmp 0x8a1c87
xor esi, esi
jmp 0x8a1c87
push 8
mov byte [ebp - 4], 0x9b
mov dword [0x68404c], esi
call fcn.00930749
mov esi, eax
add esp, 4
mov dword [ebp - 0x48], esi
mov byte [ebp - 4], 0x9d
test esi, esi
je 0x8a1cbb
call dword [fcn.0051c390]
push eax
mov ecx, esi
call edi
mov dword [esi], 0x5203d0
jmp 0x8a1cbf
xor esi, esi
jmp 0x8a1cbf
push dword [0x68404c]
mov byte [ebp - 4], 0x9b
mov dword [0x684050], esi
mov dword [0x684054], 1
call dword [fcn.0051c394]
push 0x51b3e0
call fcn.009309b5
push 0x684058
mov byte [ebp - 4], 0x94
call fcn.00930ab3
mov esi, dword [ebp + 0x18]
add esp, 0xc
jmp 0x8a1958
push 0x684030
call fcn.00930afd
add esp, 4
cmp dword [0x684030], 0xffffffff
jne 0x8a1969
mov ecx, 0x684024
mov byte [ebp - 4], 0x9e
call fcn.008c0ba0
push 0x51b3c0
call fcn.009309b5
push 0x684030
mov byte [ebp - 4], 0x94
call fcn.00930ab3
add esp, 8
jmp 0x8a1969