Function at 0xc3afa0
Capabilities:
Access peb ldr_data
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Get number of processors
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xa21b98
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xd48
push esi
push edi
push 0x25
call dword [0xa2d080]
call fcn.00cb81d0
mov dword [ebp - 0x24], eax
mov ecx, edx
shrd eax, ecx, 8
mov ecx, dword [ebp - 0x24]
movzx esi, al
mov eax, ecx
shrd eax, edx, 0x10
movzx eax, al
add esi, eax
movzx eax, cl
mov ecx, 0xa56da4
add esi, eax
call fcn.00bf7c90
push eax
call fcn.00c22eb7
add esp, 4
xor ecx, ecx
add esi, eax
call fcn.00ccdad0
sub eax, 0xffffff80
add eax, esi
push eax
call fcn.00c1b19c
add esp, 4
push 0x100
push 0
push 0xa590c0
call fcn.00c175b0
add esp, 0xc
mov ecx, 0xa56da4
call fcn.00be4880
push eax
mov ecx, 0xa56da4
call fcn.00bf7c90
push eax
push 0xa590c0
call fcn.00c16e70
add esp, 0xc
mov ecx, 0xa592dc
call fcn.00be4880
push eax
mov ecx, 0xa592dc
call fcn.00bf7c90
push eax
push 0xa59124
call fcn.00c16e70
add esp, 0xc
mov ecx, 0xa56da4
call fcn.00bf7c90
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0xc3b091
sub eax, edx
mov ecx, 0xa56da4
push eax
call fcn.00bf7c90
push eax
lea ecx, [ebp - 0x230]
call fcn.00be4930
mov dword [ebp - 4], 0
mov ecx, 0xa56da4
push eax
call fcn.00bf7ec0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.00be4890
mov ecx, 0xa593dc
call fcn.00bf7c90
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0xc3b0e2
sub eax, edx
mov ecx, 0xa593dc
push eax
call fcn.00bf7c90
push eax
lea ecx, [ebp - 0xa98]
call fcn.00be4930
mov dword [ebp - 4], 1
mov ecx, 0xa593dc
push eax
call fcn.00bf7ec0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa98]
call fcn.00be4890
mov ecx, 0xa59550
call fcn.00bf7c90
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0xc3b133
sub eax, edx
mov ecx, 0xa59550
push eax
call fcn.00bf7c90
push eax
lea ecx, [ebp - 0xa80]
call fcn.00be4930
mov dword [ebp - 4], 2
mov ecx, 0xa59550
push eax
call fcn.00bf7ec0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa80]
call fcn.00be4890
push 0x8000
call dword [0xa2d200]
push eax
call dword [0xa2d204]
push 0x92dcc0
call dword [0xa2d140]
call fcn.00c3f700
test al, al
jne 0xc3b1a7
mov eax, 1
jmp 0xc3f6e2
mov esi, dword [0xa2d108]
push 0x80000041
call esi
test eax, eax
jne 0xc3b1bf
push 0x80000001
call esi
xor ecx, ecx
call fcn.00ccdad0
push eax
call fcn.00c1b19c
mov dword [ebp - 0x18], 0xeedfd0d1
add esp, 4
mov dword [ebp - 0x14], 0x9524d4ea
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60c], ecx
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x18], 0x7dbb928a
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x604], ecx
lea ecx, [ebp - 0x610]
mov dword [ebp - 0x608], eax
call fcn.00bf4ed0
push eax
call dword [0xa2d0b0]
mov esi, eax
test esi, esi
je 0xc3b325
mov dword [ebp - 0x18], 0xbefe91d6
mov dword [ebp - 0x14], 0x90049faf
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x7a0], ecx
mov dword [ebp - 0x79c], edx
mov dword [ebp - 0x18], 0x9d8f794
mov dword [ebp - 0x14], 0x25e902cd
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x794], ecx
mov dword [ebp - 0x798], eax
mov dword [ebp - 0x18], 0xb0390ce3
mov dword [ebp - 0x14], 0xb289a37a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x78c], ecx
mov dword [ebp - 0x790], eax
mov dword [ebp - 0x18], 0xf63d2b87
mov dword [ebp - 0x14], 0xec85123b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x784], ecx
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x18], 0x804e7e9f
mov dword [ebp - 0x14], 0x7eadd2b7
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x77c], ecx
mov dword [ebp - 0x780], eax
mov dword [ebp - 0x18], 0xd5d93a8a
mov dword [ebp - 0x14], 0x19127bfa
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x774], ecx
lea ecx, [ebp - 0x7a0]
mov dword [ebp - 0x778], eax
call fcn.00bf4ad0
push eax
push esi
call dword [0xa2d0e0]
test eax, eax
je 0xc3b325
push 0
push 0
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0
push eax
push 7
push 0
push 0
push 0x20
push 0
push 1
push 0
call dword [0xa581c0]
lea ecx, [ebp - 0x8b0]
call fcn.00bea600
mov dword [ebp - 4], 3
sub esp, 0x18
lea eax, [ebp - 0x8b0]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call fcn.00bf7fb0
mov byte [ebp - 4], 4
mov byte [ebp - 4], 3
mov edx, 0x1e8c54
lea ecx, [ebp - 0xa0]
call fcn.00cc8f30
add esp, 0x18
mov byte [ebp - 4], 5
mov ecx, 0xa59538
call fcn.00be4880
mov ecx, dword [ebp - 0xa0]
xor edi, edi
mov dword [ebp - 0x2c], eax
mov edx, dword [ecx + 0x10]
sub edx, eax
je 0xc3b576
nop word [eax + eax]
call fcn.00bf7c90
mov ecx, 0xa59538
mov esi, dword [eax + edi]
mov eax, dword [eax + edi + 4]
mov dword [ebp - 0x24], eax
call fcn.00bf7c90
cmp esi, dword [eax]
jne 0xc3b3e9
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [eax + 4]
jne 0xc3b3e9
lea ecx, [ebp - 0xa0]
call fcn.00bfcb40
mov ecx, eax
call fcn.00bf7c90
mov ecx, 0xa59538
mov esi, dword [eax + edi + 8]
mov eax, dword [eax + edi + 0xc]
mov dword [ebp - 0x24], eax
call fcn.00bf7c90
cmp esi, dword [eax + 8]
jne 0xc3b3e9
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [eax + 0xc]
je 0xc3b3ff
mov ecx, dword [ebp - 0xa0]
inc edi
mov eax, dword [ecx + 0x10]
sub eax, dword [ebp - 0x2c]
cmp edi, eax
jb 0xc3b390
jmp 0xc3b576
mov dword [ebp - 0x18], 0xb1e982c2
mov dword [ebp - 0x14], 0xd82794b2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x61c], ecx
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x614], ecx
lea ecx, [ebp - 0x620]
mov dword [ebp - 0x618], eax
call fcn.00bf4ed0
mov dword [ebp - 0x18], 0xacf28bc1
mov esi, eax
mov dword [ebp - 0x14], 0x96328afb
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x7e0], ecx
mov dword [ebp - 0x7dc], edx
mov dword [ebp - 0x18], 0x10dae081
mov dword [ebp - 0x14], 0x34ab2fde
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7d8], ecx
mov dword [ebp - 0x7d4], eax
mov dword [ebp - 0x18], 0xb03949c6
mov dword [ebp - 0x14], 0xeebcb36b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7cc], ecx
mov dword [ebp - 0x7d0], eax
mov dword [ebp - 0x18], 0x8e1602c8
mov dword [ebp - 0x14], 0xa9b43405
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7c4], ecx
mov dword [ebp - 0x7c8], eax
mov dword [ebp - 0x18], 0x894c729b
mov dword [ebp - 0x14], 0x98dabdb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7bc], ecx
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 0x18], 0xf5ad54eb
mov dword [ebp - 0x14], 0x6b32148e
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7b4], ecx
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 0x18], 0x4742374e
mov dword [ebp - 0x14], 0x74428611
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7ac], ecx
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x18], 0x227dac2c
mov dword [ebp - 0x14], 0x53bfeed8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7a4], ecx
lea ecx, [ebp - 0x7e0]
mov dword [ebp - 0x7a8], eax
call fcn.00bf4310
push 0x14
push esi
push eax
push 0
call dword [0xa2d33c]
cmp eax, 7
jne 0xc3b570
lea esi, [eax + 6]
jmp 0xc3f6a4
mov ecx, dword [ebp - 0xa0]
push 0
call fcn.00bfa6d0
mov edi, dword [0xa55b2c]
mov esi, dword [0xa55b28]
push 0
push 3
push edi
push esi
call fcn.00c3a260
add eax, dword [0xa55b30]
mov dword [ebp - 0x24], eax
mov eax, edx
adc eax, dword [0xa55b34]
mov edx, dword [ebp - 0x24]
mov ecx, edx
sub ecx, esi
mov dword [ebp - 0x40], eax
sbb eax, edi
or ecx, eax
mov eax, dword [ebp - 0x40]
je 0xc3b5ca
sub esi, edx
mov dword [0xa55b28], esi
sbb edi, eax
mov dword [0xa55b2c], edi
jmp 0xc3b5d0
add edx, 1
adc eax, 0
mov dword [ebp - 0x44], eax
mov ecx, edx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x48], edx
test edi, edi
jl 0xc3b5e9
jg 0xc3b602
cmp esi, 0x176
ja 0xc3b602
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x40], eax
test edi, edi
jg 0xc3b619
jl 0xc3b5f9
test esi, esi
jae 0xc3b619
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], eax
xorps xmm0, xmm0
movlpd qword [0xa55b28], xmm0
mov esi, dword [0xa55b28]
mov edi, dword [0xa55b2c]
push 0
push 3
push edi
push esi
call fcn.00c3a260
mov dword [ebp - 0x24], eax
mov eax, edx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x48]
mov ecx, edx
mov dword [0xa55b30], edx
adc eax, dword [ebp - 0x40]
sub ecx, esi
mov dword [ebp - 0x44], eax
mov dword [0xa55b34], eax
sbb eax, edi
or ecx, eax
je 0xc3b65d
sub esi, edx
mov dword [0xa55b28], esi
sbb edi, dword [ebp - 0x44]
mov dword [0xa55b2c], edi
jmp 0xc3b671
mov eax, dword [ebp - 0x44]
add edx, 1
mov dword [0xa55b30], edx
adc eax, 0
mov dword [0xa55b34], eax
test edi, edi
jg 0xc3b689
jl 0xc3b689
cmp esi, 0x176
ja 0xc3b689
test edi, edi
jg 0xc3b694
jl 0xc3b689
test esi, esi
jae 0xc3b694
xorps xmm0, xmm0
movlpd qword [0xa55b28], xmm0
push 0xa952
call dword [0xa2d1ec]
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x62c], ecx
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x624], ecx
push ecx
lea ecx, [ebp - 0x630]
mov dword [ebp - 0x628], eax
call fcn.00bf4ed0
add esp, 4
mov ecx, 0xa592f4
push eax
call fcn.00bf7bf0
test eax, eax
jne 0xc3b840
call fcn.00cb7e80
test al, al
je 0xc3b797
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xc3b793
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3b793
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3b789
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3b768
cmp esi, 0xe80fd3a
je 0xc3b823
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3b750
mov eax, dword [eax]
jmp 0xc3b720
call fcn.00cb7c80
test al, al
jne 0xc3b840
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xc3b81f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3b81f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3b815
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3b7f8
cmp esi, 0xe80fd3a
je 0xc3b823
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3b7e0
mov eax, dword [eax]
jmp 0xc3b7b0
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 0
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x2a4], ecx
push ecx
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x2a8], eax
call fcn.00bf4ed0
add esp, 4
mov ecx, 0xa56d8c
push eax
call fcn.00bf7bf0
test eax, eax
jne 0xc3b978
call fcn.00cb7b90
mov byte [ebp - 0x59], al
call fcn.00cb7570
mov byte [ebp - 0x39], al
call fcn.00cb7270
cmp byte [ebp - 0x59], 0
jne 0xc3b8d6
cmp byte [ebp - 0x39], 0
jne 0xc3b8d6
test al, al
jne 0xc3b8d6
call fcn.00cb7cc0
test al, al
je 0xc3b978
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xc3b957
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3b957
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3b94d
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3b930
cmp esi, 0xe80fd3a
je 0xc3b95b
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3b912
mov eax, dword [eax]
jmp 0xc3b8e2
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 0
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x2b4], ecx
push ecx
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2b8], eax
call fcn.00bf4ed0
add esp, 4
mov ecx, 0xa594d0
push eax
call fcn.00bf7bf0
test eax, eax
jne 0xc3b9e0
lea ecx, [eax + 1]
call fcn.00cb5200
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x2c4], ecx
push ecx
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x2c8], eax
call fcn.00bf4ed0
add esp, 4
mov ecx, 0xa594b8
push eax
call fcn.00bf7bf0
test eax, eax
jne 0xc3ba45
call fcn.00cb12f0
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x2d4], ecx
push ecx
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x2d8], eax
call fcn.00bf4ed0
add esp, 4
mov ecx, 0xa59268
push eax
call fcn.00bf7bf0
mov edi, dword [0xa55b2c]
push 0
push 3
push edi
push dword [0xa55b28]
mov dword [ebp - 0x48], eax
call fcn.00c3a260
mov esi, eax
add esi, dword [0xa55b30]
mov ecx, esi
mov dword [0xa55b30], esi
adc edx, dword [0xa55b34]
sub ecx, dword [0xa55b28]
mov eax, edx
mov dword [0xa55b34], edx
sbb eax, edi
or ecx, eax
mov eax, dword [0xa55b28]
je 0xc3bafa
sub eax, esi
mov dword [0xa55b28], eax
sbb edi, edx
mov dword [0xa55b2c], edi
jmp 0xc3bb0c
add esi, 1
mov dword [0xa55b30], esi
adc edx, 0
mov dword [0xa55b34], edx
test edi, edi
jg 0xc3bb23
jl 0xc3bb23
cmp eax, 0x176
ja 0xc3bb23
test edi, edi
jg 0xc3bb2e
jl 0xc3bb23
test eax, eax
jae 0xc3bb2e
xorps xmm0, xmm0
movlpd qword [0xa55b28], xmm0
mov esi, dword [0xa2d108]
push 0x80000041
call esi
test eax, eax
jne 0xc3bb46
push 0x80000001
call esi
mov dword [ebp - 0x18], 0xb7f58ae2
mov dword [ebp - 0x14], 0xd7308eaf
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x18], 0x7dd7fe82
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2e4], ecx
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 0x2e8], eax
call fcn.00bf4ed0
mov ecx, dword fs:[0x30]
mov dword [ebp - 0x58], eax
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov edi, dword [ecx + 0x18]
mov dword [ebp - 0x34], edi
mov edx, dword [edi + 0x3c]
mov esi, dword [edx + edi + 0x78]
mov eax, dword [edx + edi + 0x7c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], esi
lea eax, [esi + edi]
mov dword [ebp - 0x2c], eax
cmp eax, edi
je 0xc3bc17
mov edi, dword [eax + 0x18]
test edi, edi
je 0xc3bc17
mov eax, dword [eax + 0x20]
mov esi, dword [ecx + 0x18]
lea eax, [eax + edi*4]
add eax, esi
mov edx, dword [eax - 4]
sub eax, 4
add edx, esi
mov dword [ebp - 0x24], eax
dec edi
mov esi, 0x811c9dc5
mov al, byte [edx]
inc edx
test al, al
je 0xc3bc0d
nop dword [eax]
movsx eax, al
lea edx, [edx + 1]
xor eax, esi
imul esi, eax, 0x1000193
mov al, byte [edx - 1]
test al, al
jne 0xc3bbf0
cmp esi, 0x53b2070f
je 0xc3bc1b
mov eax, dword [ebp - 0x24]
mov esi, dword [ecx + 0x18]
test edi, edi
jne 0xc3bbd4
mov ecx, dword [ecx]
jmp 0xc3bba1
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x58]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
test eax, eax
jne 0xc3bc44
xor esi, esi
jmp 0xc3f6a4
mov dword [ebp - 0x18], 0x96d5aac2
mov dword [ebp - 0x14], 0xd714bf95
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2fc], ecx
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x18], 0x7df7dea2
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2f4], ecx
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x2f8], eax
call fcn.00bf4ed0
push eax
call dword [0xa2d0b0]
mov ecx, eax
call fcn.00ccfd70
mov dword [ebp - 0x18], 0xdf9be3af
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x304], ecx
push ecx
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x308], eax
call fcn.00bf4ed0
add esp, 4
mov ecx, 0xa592dc
push eax
call fcn.00bf7bf0
cmp eax, 0xffffffff
je 0xc3bddc
mov dword [ebp - 0x18], 0xdf9be3af
sub esp, 0x18
mov dword [ebp - 0x14], 0xf940fadb
mov esi, esp
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x314], ecx
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x28], esp
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00be48f0
mov byte [ebp - 4], 6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0xa592dc
call fcn.00bf7fb0
mov byte [ebp - 4], 7
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x254]
call fcn.00cc80d0
add esp, 0x30
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x254]
call fcn.00bf6e20
cmp eax, 2
jne 0xc3bdcd
push 1
lea ecx, [ebp - 0x254]
call fcn.00bf6e00
push eax
mov ecx, 0xa59328
call fcn.00bf7e90
push 0
lea ecx, [ebp - 0x254]
call fcn.00bf6e00
push eax
mov ecx, 0xa592dc
call fcn.00bf7e90
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x254]
call fcn.00bf6f40
push 0
push 0
push 0
push 0x997b00
push 0
push 0
call dword [0xa2d0c8]
push eax
call dword [0xa2d0c0]
cmp dword [0xa55b24], 0xffffffff
jne 0xc3bebd
nop word [eax + eax]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xc3be8f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3be8f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3be85
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3be68
cmp esi, 0x2fa62ca8
je 0xc3be93
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3be50
mov eax, dword [eax]
jmp 0xc3be20
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 1
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
cmp dword [0xa55b24], 0xffffffff
je 0xc3be10
mov dword [ebp - 0x18], 0xdf9bb9cf
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x324], ecx
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x328], eax
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00be48f0
mov byte [ebp - 4], 9
mov ecx, 0x104
lea eax, [ebp - 0xd50]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0xc3bf23
lea eax, [ebp - 0xd50]
push eax
push 0xfc
call dword [0xa2d084]
mov edx, 0xc
lea ecx, [ebp - 0x85c]
call fcn.00cc7fa0
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x18], 0xa7f291e1
mov dword [ebp - 0x14], 0xf940faa2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x334], ecx
lea ecx, [ebp - 0x340]
mov dword [ebp - 0x338], eax
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xa38]
call fcn.00be48f0
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0xd50]
push eax
lea ecx, [ebp - 0xa50]
call fcn.00bfc8e0
add esp, 4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x85c]
push ecx
mov edx, eax
lea ecx, [ebp - 0xa68]
call fcn.00bfc980
add esp, 4
mov byte [ebp - 4], 0xd
mov ecx, 0xa56d74
push eax
call fcn.00bf7ec0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa68]
call fcn.00be4890
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xa50]
call fcn.00be4890
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa38]
call fcn.00be4890
mov dword [ebp - 0x18], 0xb1fa93e6
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x344], ecx
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x348], eax
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xab0]
call fcn.00be48f0
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0xd50]
push eax
lea ecx, [ebp - 0xae0]
call fcn.00bfc8e0
add esp, 4
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x85c]
mov edx, eax
push ecx
lea ecx, [ebp - 0x26c]
call fcn.00bfc980
add esp, 4
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xae0]
call fcn.00be4890
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xab0]
call fcn.00be4890
mov ecx, 0xa56d74
call fcn.00bf7c90
mov ecx, eax
call fcn.00cc88a0
test al, al
je 0xc3c0ea
push 0
mov dl, 1
mov ecx, 0xa56d74
call fcn.00cc8370
add esp, 4
lea ecx, [ebp - 0x26c]
call fcn.00bf7c90
mov ecx, eax
call fcn.00cc88a0
test al, al
je 0xc3c112
push 0
mov dl, 1
lea ecx, [ebp - 0x26c]
call fcn.00cc8370
add esp, 4
push 0
mov ecx, 0xa56d74
call fcn.00bf7c90
mov esi, dword [0xa2d11c]
push eax
call esi
test eax, eax
jne 0xc3c13d
mov ecx, 0xa56d74
call fcn.00bea460
test al, al
je 0xc3f3fa
push 0
lea ecx, [ebp - 0x26c]
call fcn.00bf7c90
push eax
call esi
test eax, eax
jne 0xc3c1e9
mov edi, dword [0xa55b2c]
push eax
push 3
push edi
push dword [0xa55b28]
call fcn.00c3a260
mov esi, eax
add esi, dword [0xa55b30]
mov ecx, esi
mov dword [0xa55b30], esi
adc edx, dword [0xa55b34]
sub ecx, dword [0xa55b28]
mov eax, edx
mov dword [0xa55b34], edx
sbb eax, edi
or ecx, eax
mov eax, dword [0xa55b28]
je 0xc3c1aa
sub eax, esi
mov dword [0xa55b28], eax
sbb edi, edx
mov dword [0xa55b2c], edi
jmp 0xc3c1bc
add esi, 1
mov dword [0xa55b30], esi
adc edx, 0
mov dword [0xa55b34], edx
test edi, edi
jg 0xc3c1d3
jl 0xc3c1d3
cmp eax, 0x176
ja 0xc3c1d3
test edi, edi
jg 0xc3c1de
jl 0xc3c1d3
test eax, eax
jae 0xc3c1de
xorps xmm0, xmm0
movlpd qword [0xa55b28], xmm0
lea ecx, [ebp - 0x26c]
call fcn.00bea460
lea ecx, [ebp - 0x26c]
call fcn.00bf7c90
mov ecx, dword fs:[0x30]
mov dword [ebp - 0x58], eax
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov edi, dword [ecx + 0x18]
mov dword [ebp - 0x34], edi
mov edx, dword [edi + 0x3c]
mov esi, dword [edx + edi + 0x78]
mov eax, dword [edx + edi + 0x7c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], esi
lea eax, [edi + esi]
mov dword [ebp - 0x2c], eax
cmp eax, edi
je 0xc3c277
mov edi, dword [eax + 0x18]
test edi, edi
je 0xc3c277
mov eax, dword [eax + 0x20]
mov esi, dword [ecx + 0x18]
lea eax, [eax + edi*4]
add eax, esi
mov edx, dword [eax - 4]
sub eax, 4
add edx, esi
mov dword [ebp - 0x24], eax
dec edi
mov esi, 0x811c9dc5
mov al, byte [edx]
inc edx
test al, al
je 0xc3c26d
nop
movsx eax, al
lea edx, [edx + 1]
xor eax, esi
imul esi, eax, 0x1000193
mov al, byte [edx - 1]
test al, al
jne 0xc3c250
cmp esi, 0x7a5b9fa2
je 0xc3c27b
mov eax, dword [ebp - 0x24]
mov esi, dword [ecx + 0x18]
test edi, edi
jne 0xc3c237
mov ecx, dword [ecx]
jmp 0xc3c204
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x58]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
lea eax, [ebp - 0x26c]
mov ecx, 0xa56dd4
push eax
call fcn.00bf7e90
call fcn.00cb49c0
test al, al
je 0xc3c4d2
cmp dword [ebp - 0x48], 0
jne 0xc3c4d2
mov dword [ebp - 0x18], 0xbcf28fe6
mov dword [ebp - 0x14], 0x902ca9b0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x35c], ecx
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x18], 0x13faf782
mov dword [ebp - 0x14], 0x14d8469a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0xa56da4
mov dword [ebp - 0x354], ecx
push ecx
lea ecx, [ebp - 0x360]
mov dword [ebp - 0x358], eax
call fcn.00bf4ed0
add esp, 4
lea ecx, [ebp - 0xac8]
mov edx, eax
call fcn.00bfc850
add esp, 4
mov byte [ebp - 4], 0x13
mov ecx, eax
call fcn.00bf7c90
push eax
push 1
push 0
call dword [0xa2d1dc]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xac8]
call fcn.00be4890
call dword [0xa2d098]
cmp eax, 0xb7
je 0xc3f64a
mov edi, dword [0xa2d080]
mov esi, 0x32
push 0x529
call edi
sub esi, 1
jne 0xc3c366
mov dword [ebp - 0x18], 0x9cd5b5dd
sub esp, 0x18
mov dword [ebp - 0x14], 0x952c9ef5
mov esi, esp
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x224], ecx
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x28], esp
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00be48f0
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x12
call fcn.00ca9530
mov eax, dword [0xa593f8]
add esp, 0x18
sub eax, dword [0xa593f4]
je 0xc3c401
nop word [eax + eax]
push 0x2f
call edi
mov eax, dword [0xa593f8]
sub eax, dword [0xa593f4]
jne 0xc3c3f0
push 2
push dword [0xa55b24]
mov byte [0xa59081], 1
call dword [0xa2d380]
push dword [0xa55b24]
call dword [0xa2d388]
call dword [0xa2d384]
nop dword [eax + eax]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x2c], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x24], ecx
cmp ecx, edx
je 0xc3c4a7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3c4a7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, edx
sub ecx, 4
dec edi
mov dword [ebp - 0x70], ecx
mov esi, 0x811c9dc5
mov ecx, dword [ecx]
add ecx, edx
mov dl, byte [ecx]
inc ecx
test dl, dl
je 0xc3c49d
nop dword [eax]
movsx edx, dl
lea ecx, [ecx + 1]
xor edx, esi
imul esi, edx, 0x1000193
mov dl, byte [ecx - 1]
test dl, dl
jne 0xc3c480
cmp esi, 0x2fa62ca8
je 0xc3c4ab
mov ecx, dword [ebp - 0x70]
mov edx, dword [eax + 0x18]
test edi, edi
jne 0xc3c465
mov eax, dword [eax]
jmp 0xc3c440
mov esi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x2c]
push 0x162
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
jmp 0xc3c430
mov edi, dword [0xa55b2c]
push 0
push 3
push edi
push dword [0xa55b28]
call fcn.00c3a260
mov esi, eax
add esi, dword [0xa55b30]
mov ecx, esi
mov dword [0xa55b30], esi
adc edx, dword [0xa55b34]
sub ecx, dword [0xa55b28]
mov eax, edx
mov dword [0xa55b34], edx
sbb eax, edi
or ecx, eax
mov eax, dword [0xa55b28]
je 0xc3c528
sub eax, esi
mov dword [0xa55b28], eax
sbb edi, edx
mov dword [0xa55b2c], edi
jmp 0xc3c53a
add esi, 1
mov dword [0xa55b30], esi
adc edx, 0
mov dword [0xa55b34], edx
test edi, edi
jg 0xc3c551
jl 0xc3c551
cmp eax, 0x176
ja 0xc3c551
test edi, edi
jg 0xc3c55c
jl 0xc3c551
test eax, eax
jae 0xc3c55c
xorps xmm0, xmm0
movlpd qword [0xa55b28], xmm0
mov byte [0xa590b1], 0
mov dword [ebp - 0x18], 0xdf9be3e9
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x364], ecx
lea ecx, [ebp - 0x370]
mov dword [ebp - 0x368], eax
call fcn.00bf4ed0
lea ecx, [ebp - 0xb10]
mov edi, eax
call fcn.00cc67d0
mov esi, eax
mov byte [ebp - 4], 0x15
push 0
push 0x2bc7
call fcn.00ccc020
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0xaf8]
mov eax, dword [0xa55b24]
mov edx, esi
push edi
mov dword [ebp - 0x2c], eax
call fcn.00bfc7b0
mov byte [ebp - 4], 0x16
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x28], esp
mov edx, eax
push 0xa56da4
call fcn.00bfc980
add esp, 4
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
call fcn.00beae80
add esp, 0x18
mov byte [ebp - 0x39], al
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xaf8]
call fcn.00be4890
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xb10]
call fcn.00be4890
cmp byte [ebp - 0x39], 0
je 0xc3c6fd
cmp byte [0xa590b1], 0
jne 0xc3c6fd
nop
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xc3c6cf
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3c6cf
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3c6c5
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3c6a8
cmp esi, 0x2fa62ca8
je 0xc3c6d3
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3c690
mov eax, dword [eax]
jmp 0xc3c660
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 0x65
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
cmp byte [0xa590b1], 0
je 0xc3c650
mov edx, 0xa56d5c
lea ecx, [ebp - 0x8e0]
call fcn.00caa2c0
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x8e0]
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00bf7e90
cmp dword [0xa56d6c], 0
jne 0xc3c7ac
mov edi, dword [0xa2d080]
cmp dword [ebp - 0x1e0], 0
jne 0xc3c7ac
mov edx, 0xa56d5c
lea ecx, [ebp - 0xc48]
call fcn.00caa2c0
mov esi, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x8e0]
push esi
call fcn.00bf7ec0
lea eax, [esi + 0x18]
push eax
lea ecx, [ebp - 0x8c8]
call fcn.00bf7ec0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xc48]
call fcn.00bea700
lea eax, [ebp - 0x8e0]
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00bf7e90
push 0
push 0x3f46
call fcn.00ccc020
add esp, 8
push eax
call edi
cmp dword [0xa56d6c], 0
je 0xc3c736
push 0xa35de0
mov ecx, 0xa56d5c
call fcn.00bf7c90
push eax
call fcn.00c16a60
add esp, 8
test eax, eax
je 0xc3c8b6
lea eax, [ebp - 0x814]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x660]
mov dword [ebp - 0x30], eax
nop
lea ecx, [ebp - 0x814]
call fcn.00be4d10
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x814]
push 1
push 0xa35af8
call fcn.00be4c40
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x660]
call fcn.00be4d10
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x660]
push 1
push 0xa35de0
call fcn.00be4c40
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x660]
push 0
push eax
mov ecx, 0xa56d5c
call fcn.00bf7c30
cmp eax, 0xffffffff
je 0xc3c85a
lea ecx, [ebp - 0x814]
push ecx
push dword [ebp - 0x650]
mov ecx, 0xa56d5c
push eax
call fcn.00bf7d00
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x660]
call fcn.00be49f0
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x660]
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x814]
call fcn.00be49f0
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x814]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x18
mov ecx, 0xa56d5c
push 0xa35de0
call fcn.00bf7c90
push eax
call fcn.00c16a60
add esp, 8
test eax, eax
jne 0xc3c7e0
mov dword [ebp - 0x18], 0xdf9bb6c7
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x374], ecx
lea ecx, [ebp - 0x380]
mov dword [ebp - 0x378], eax
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xc18]
call fcn.00be48f0
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x18], 0xdf9bb9de
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x384], ecx
lea ecx, [ebp - 0x390]
mov dword [ebp - 0x388], eax
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xc00]
call fcn.00be48f0
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x18], 0xdf9bbad7
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x394], ecx
lea ecx, [ebp - 0x3a0]
mov dword [ebp - 0x398], eax
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xbe8]
call fcn.00be48f0
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x18], 0xdf9baed4
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3a4], ecx
lea ecx, [ebp - 0x3b0]
mov dword [ebp - 0x3a8], eax
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xbd0]
call fcn.00be48f0
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x18], 0xdf9bb9c0
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3b4], ecx
lea ecx, [ebp - 0x3c0]
mov dword [ebp - 0x3b8], eax
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xbb8]
call fcn.00be48f0
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0x18], 0xdf9ba7d8
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3cc], ecx
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3c4], ecx
lea ecx, [ebp - 0x3d0]
mov dword [ebp - 0x3c8], eax
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xba0]
call fcn.00be48f0
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x18], 0xdf9ba4de
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3dc], ecx
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3d4], ecx
lea ecx, [ebp - 0x3e0]
mov dword [ebp - 0x3d8], eax
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xb88]
call fcn.00be48f0
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x18], 0xdf9ba9c1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3ec], ecx
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3e4], ecx
lea ecx, [ebp - 0x3f0]
mov dword [ebp - 0x3e8], eax
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xb70]
call fcn.00be48f0
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x18], 0xdf9ba2c0
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3f4], ecx
lea ecx, [ebp - 0x400]
mov dword [ebp - 0x3f8], eax
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xb58]
call fcn.00be48f0
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x18], 0xdf9bb9d4
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x404], ecx
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x408], eax
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xb40]
call fcn.00be48f0
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0xb28]
push eax
lea eax, [ebp - 0xc18]
push eax
lea ecx, [ebp - 0x948]
call fcn.00bf4c90
lea ecx, [ebp - 0x930]
push dword [eax + 4]
push dword [eax]
call fcn.00bf3ff0
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0xc18]
push 0x8d2c90
push 0xa
push 0x18
push eax
call fcn.00c15617
lea eax, [ebp - 0x1f0]
push eax
lea ecx, [ebp - 0x930]
call fcn.00bfd840
test eax, eax
je 0xc3cd51
mov dword [ebp - 0x18], 0xbacf97db
mov dword [ebp - 0x14], 0x972997a9
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6cc], ecx
mov dword [ebp - 0x6d0], eax
mov dword [ebp - 0x18], 0x2ddee687
mov dword [ebp - 0x14], 0x71bb298c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6c4], ecx
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x18], 0xd94f1ad4
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6bc], ecx
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6b4], ecx
lea ecx, [ebp - 0x6d0]
mov dword [ebp - 0x6b8], eax
call fcn.00bf4be0
push 0xa35d80
mov esi, eax
call dword [0xa2d06c]
push esi
push eax
call dword [0xa2d0e0]
mov esi, eax
test esi, esi
je 0xc3cd51
push 0
call dword [0xa2d200]
push eax
call esi
mov esi, dword [0xa2d1f8]
push 0xa36028
call esi
call fcn.00ca93f0
mov ecx, 0xa59318
call fcn.00bf5550
test al, al
je 0xc3d31d
mov ecx, 0xa59318
call fcn.00bf5570
test al, al
jne 0xc3d31d
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x8b238984
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x41c], ecx
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x18], 0x7dd5f783
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x414], ecx
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x418], eax
call fcn.00bf4ed0
push eax
mov ecx, 0xa59318
call fcn.00bfcb80
mov ecx, eax
call fcn.00bf5560
test al, al
je 0xc3d31d
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x8b238984
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x42c], ecx
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x18], 0x7dd5f783
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x424], ecx
lea ecx, [ebp - 0x430]
mov dword [ebp - 0x428], eax
call fcn.00bf4ed0
push eax
mov ecx, 0xa59318
call fcn.00bfcb80
mov ecx, eax
call fcn.00bfcde0
push 0xa36038
mov byte [0xa55b23], al
call esi
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0xf9278e84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x43c], ecx
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x434], ecx
lea ecx, [ebp - 0x440]
mov dword [ebp - 0x438], eax
call fcn.00bf4ed0
push eax
mov ecx, 0xa59318
call fcn.00bfcb80
mov ecx, eax
call fcn.00bfcde0
mov byte [0xa55b3d], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0xf9339e84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x444], ecx
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x448], eax
call fcn.00bf4ed0
push eax
mov ecx, 0xa59318
call fcn.00bfcb80
mov ecx, eax
call fcn.00bfcde0
mov byte [0xa55b22], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x95218d84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x18], 0xecff78a
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x454], ecx
lea ecx, [ebp - 0x460]
mov dword [ebp - 0x458], eax
call fcn.00bf4ed0
push eax
mov ecx, 0xa59318
call fcn.00bfcb80
mov ecx, eax
call fcn.00bfcde0
mov byte [0xa55b21], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x90289384
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x46c], ecx
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x18], 0xfd4e695
mov dword [ebp - 0x14], 0x14d84687
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x464], ecx
lea ecx, [ebp - 0x470]
mov dword [ebp - 0x468], eax
call fcn.00bf4ed0
push eax
mov ecx, 0xa59318
call fcn.00bfcb80
mov ecx, eax
call fcn.00bfcde0
mov byte [0xa55b3c], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x89349c84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x474], ecx
lea ecx, [ebp - 0x480]
mov dword [ebp - 0x478], eax
call fcn.00bf4ed0
push eax
mov ecx, 0xa59318
call fcn.00bfcb80
mov ecx, eax
call fcn.00bfcde0
mov byte [0xa55b3e], al
test al, al
je 0xc3d04a
mov byte [0xa55b20], 0
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x94219d84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x48c], ecx
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x18], 0x7dbbe183
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x484], ecx
lea ecx, [ebp - 0x490]
mov dword [ebp - 0x488], eax
call fcn.00bf4ed0
push eax
mov ecx, 0xa59318
call fcn.00bfcb80
mov ecx, eax
call fcn.00bfcde0
mov byte [0xa55b20], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x8a259784
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x18], 0x1ad5f795
mov dword [ebp - 0x14], 0x14ab349b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x494], ecx
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 0x498], eax
call fcn.00bf4ed0
push eax
mov ecx, 0xa59318
call fcn.00bfcb80
mov ecx, eax
call fcn.00bfcde0
push 0xa3604c
mov byte [0xa56c0e], al
call esi
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x97308c84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4ac], ecx
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4a4], ecx
lea ecx, [ebp - 0x4b0]
mov dword [ebp - 0x4a8], eax
call fcn.00bf4ed0
push eax
mov ecx, 0xa59318
call fcn.00bfcb80
mov ecx, eax
call fcn.00bfcde0
mov byte [0xa55b3f], al
mov dword [ebp - 0x18], 0x80fe90e0
mov dword [ebp - 0x14], 0x9a2e8cb3
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4b4], ecx
lea ecx, [ebp - 0x4c0]
mov dword [ebp - 0x4b8], eax
call fcn.00bf4ed0
push eax
mov ecx, 0xa59318
call fcn.00bfcb80
mov ecx, eax
call fcn.00bfcde0
mov byte [0xa590ac], al
mov dword [ebp - 0x18], 0xb8e986f8
mov dword [ebp - 0x14], 0x8b22a5be
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x6b0], eax
mov dword [ebp - 0x18], 0x18c8e589
mov dword [ebp - 0x14], 0x75bc198c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6a4], ecx
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x18], 0xd94f08d3
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x69c], ecx
mov dword [ebp - 0x6a0], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x694], ecx
lea ecx, [ebp - 0x6b0]
mov dword [ebp - 0x698], eax
call fcn.00bf4be0
push eax
mov ecx, 0xa59318
call fcn.00bfcb80
mov ecx, eax
call fcn.00bfcde0
mov byte [0xa59083], al
mov dword [ebp - 0x18], 0xb8e986f8
mov dword [ebp - 0x14], 0x9627a5be
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x72c], ecx
mov dword [ebp - 0x18], 0x18d7f589
mov dword [ebp - 0x14], 0x7fb732a1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x724], ecx
mov dword [ebp - 0x18], 0xd93c07c2
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], ecx
lea ecx, [ebp - 0x730]
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x714], edx
call fcn.00bf4be0
push eax
mov ecx, 0xa59318
call fcn.00bfcb80
mov ecx, eax
call fcn.00bfcde0
mov byte [0xa590a6], al
call fcn.00ca9210
push 0xa359da
lea ecx, [ebp - 0x29c]
call fcn.00be48f0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x284]
push 0xa359da
call fcn.00be48f0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x248]
push 0xa359da
call fcn.00be48f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x590]
push eax
mov ecx, 0xa59400
call fcn.00bf5430
lea eax, [ebp - 0x86c]
mov ecx, 0xa59400
push eax
call fcn.00bf53c0
lea eax, [ebp - 0x86c]
push eax
lea ecx, [ebp - 0x590]
call fcn.00bf95f0
test al, al
jne 0xc3e1bc
nop word [eax + eax]
lea ecx, [ebp - 0x590]
call fcn.00bf4e00
mov dword [ebp - 0x1f8], 0xbaf682fb
mov edi, eax
mov dword [ebp - 0x1f4], 0xf940fadb
mov ecx, dword [ebp - 0x1f8]
mov edx, dword [ebp - 0x1f4]
mov dword [ebp - 0x4d0], ecx
mov dword [ebp - 0x4cc], edx
mov dword [ebp - 0x200], 0x7dbb92e6
mov dword [ebp - 0x1fc], 0x14d846fe
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp - 0x4c4], ecx
lea ecx, [ebp - 0x4d0]
mov dword [ebp - 0x4c8], eax
call fcn.00bf4ed0
push eax
mov ecx, edi
call fcn.00bfcb80
lea ecx, [ebp - 0x960]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov esi, eax
mov byte [ebp - 4], 0x35
mov dword [ebp - 0x208], 0x80fc8cf9
mov dword [ebp - 0x204], 0x9c349bac
mov ecx, dword [ebp - 0x208]
mov edx, dword [ebp - 0x204]
mov dword [ebp - 0x710], ecx
mov dword [ebp - 0x70c], edx
mov dword [ebp - 0x210], 0xfdaff94
mov dword [ebp - 0x20c], 0x7db41995
mov eax, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x704], ecx
mov dword [ebp - 0x708], eax
mov dword [ebp - 0xe8], 0xe8100cc9
mov dword [ebp - 0xe4], 0xc0cfc619
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x6fc], ecx
mov dword [ebp - 0x700], eax
mov dword [ebp - 0xf0], 0xae7946e8
mov dword [ebp - 0xec], 0x89c15b7c
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x6f4], ecx
lea ecx, [ebp - 0x710]
mov dword [ebp - 0x6f8], eax
call fcn.00bf4be0
push 0
push eax
mov ecx, esi
call fcn.00bf7bf0
mov esi, eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x960]
call fcn.00be49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x960]
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0x34
test esi, esi
jne 0xc3d831
mov dword [ebp - 0xf8], 0xaaf782e3
mov dword [ebp - 0xf4], 0xf940fabe
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x4dc], ecx
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x100], 0x7dbb92e6
mov dword [ebp - 0xfc], 0x14d846fe
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x4d4], ecx
lea ecx, [ebp - 0x4e0]
mov dword [ebp - 0x4d8], eax
call fcn.00bf4ed0
push eax
mov ecx, edi
call fcn.00bfcb80
lea ecx, [ebp - 0xb28]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x29c]
push eax
call fcn.00bf7ec0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xb28]
call fcn.00be4890
mov dword [ebp - 0x78], 0xe1e981a9
mov dword [ebp - 0x74], 0xf940fadb
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x80], 0x7dbb92e6
mov dword [ebp - 0x7c], 0x14d846fe
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x7c]
push esi
mov dword [ebp - 0xa4], ecx
push ecx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xa8], eax
call fcn.00bf4ed0
add esp, 4
lea ecx, [ebp - 0x29c]
push eax
call fcn.00bf7bf0
cmp eax, 0xffffffff
je 0xc3d831
lea eax, [ebp - 0x82c]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x648]
mov dword [ebp - 0x38], eax
nop word [eax + eax]
mov dword [ebp - 0x108], 0xdf9be998
mov dword [ebp - 0x104], 0xf940fadb
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x4ec], ecx
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0x110], 0x7dbb92e6
mov dword [ebp - 0x10c], 0x14d846fe
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x4e4], ecx
lea ecx, [ebp - 0x4f0]
mov dword [ebp - 0x4e8], eax
call fcn.00bf4ed0
lea ecx, [ebp - 0x82c]
mov esi, eax
call fcn.00be4d10
mov byte [ebp - 4], 0x3b
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xc3d6b0
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x82c]
call fcn.00be4c40
mov byte [ebp - 4], 0x3c
mov dword [ebp - 0x118], 0xe1e981a9
mov dword [ebp - 0x114], 0xf940fadb
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x4fc], ecx
mov dword [ebp - 0x500], eax
mov dword [ebp - 0x120], 0x7dbb92e6
mov dword [ebp - 0x11c], 0x14d846fe
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x4f4], ecx
lea ecx, [ebp - 0x500]
mov dword [ebp - 0x4f8], eax
call fcn.00bf4ed0
lea ecx, [ebp - 0x648]
mov esi, eax
call fcn.00be4d10
mov byte [ebp - 4], 0x3e
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xc3d743
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x648]
call fcn.00be4c40
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x648]
push 0
push eax
lea ecx, [ebp - 0x29c]
call fcn.00bf7c30
cmp eax, 0xffffffff
je 0xc3d78f
lea ecx, [ebp - 0x82c]
push ecx
push dword [ebp - 0x638]
lea ecx, [ebp - 0x29c]
push eax
call fcn.00bf7d00
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x648]
call fcn.00be49f0
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x648]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x82c]
call fcn.00be49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x82c]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x78], 0xe1e981a9
mov dword [ebp - 0x74], 0xf940fadb
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x80], 0x7dbb92e6
mov dword [ebp - 0x7c], 0x14d846fe
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x7c]
push 0
mov dword [ebp - 0xa4], ecx
push ecx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xa8], eax
call fcn.00bf4ed0
add esp, 4
lea ecx, [ebp - 0x29c]
push eax
call fcn.00bf7bf0
cmp eax, 0xffffffff
jne 0xc3d630
mov dword [ebp - 0x128], 0xbaf682fb
mov dword [ebp - 0x124], 0xf940fadb
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0x50c], ecx
mov dword [ebp - 0x510], eax
mov dword [ebp - 0x130], 0x7dbb92e6
mov dword [ebp - 0x12c], 0x14d846fe
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x504], ecx
lea ecx, [ebp - 0x510]
mov dword [ebp - 0x508], eax
call fcn.00bf4ed0
push eax
mov ecx, edi
call fcn.00bfcb80
lea ecx, [ebp - 0x978]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov esi, eax
mov byte [ebp - 4], 0x46
mov dword [ebp - 0x138], 0x80fc8cf9
mov dword [ebp - 0x134], 0x9c349bac
mov ecx, dword [ebp - 0x138]
mov edx, dword [ebp - 0x134]
mov dword [ebp - 0x6f0], ecx
mov dword [ebp - 0x6ec], edx
mov dword [ebp - 0x140], 0xfdaff94
mov dword [ebp - 0x13c], 0x7db41995
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x6e4], ecx
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 0x148], 0xeb100cc9
mov dword [ebp - 0x144], 0xc0cfc619
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x144]
mov dword [ebp - 0x6dc], ecx
mov dword [ebp - 0x6e0], eax
mov dword [ebp - 0x150], 0xae7946e8
mov dword [ebp - 0x14c], 0x89c15b7c
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x6d4], ecx
lea ecx, [ebp - 0x6f0]
mov dword [ebp - 0x6d8], eax
call fcn.00bf4be0
push 0
push eax
mov ecx, esi
call fcn.00bf7bf0
mov esi, eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x978]
call fcn.00be49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x978]
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0x34
test esi, esi
jne 0xc3dcd9
mov dword [ebp - 0x158], 0xaaf782e3
mov dword [ebp - 0x154], 0xf940fabe
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x51c], ecx
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x160], 0x7dbb92e6
mov dword [ebp - 0x15c], 0x14d846fe
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x514], ecx
lea ecx, [ebp - 0x520]
mov dword [ebp - 0x518], eax
call fcn.00bf4ed0
push eax
mov ecx, edi
call fcn.00bfcb80
lea ecx, [ebp - 0x9a8]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x284]
push eax
call fcn.00bf7ec0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x9a8]
call fcn.00be4890
mov dword [ebp - 0x88], 0xe1e981a9
mov dword [ebp - 0x84], 0xf940fadb
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x90], 0x7dbb92e6
mov dword [ebp - 0x8c], 0x14d846fe
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
push esi
mov dword [ebp - 0xb4], ecx
push ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xb8], eax
call fcn.00bf4ed0
add esp, 4
lea ecx, [ebp - 0x284]
push eax
call fcn.00bf7bf0
cmp eax, 0xffffffff
je 0xc3dcd9
lea eax, [ebp - 0x844]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x678]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x168], 0xdf9be998
mov dword [ebp - 0x164], 0xf940fadb
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x52c], ecx
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x170], 0x7dbb92e6
mov dword [ebp - 0x16c], 0x14d846fe
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x524], ecx
lea ecx, [ebp - 0x530]
mov dword [ebp - 0x528], eax
call fcn.00bf4ed0
lea ecx, [ebp - 0x844]
mov esi, eax
call fcn.00be4d10
mov byte [ebp - 4], 0x4c
mov ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0xc3db40
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x844]
call fcn.00be4c40
mov byte [ebp - 4], 0x4d
mov dword [ebp - 0x178], 0xe1e981a9
mov dword [ebp - 0x174], 0xf940fadb
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x53c], ecx
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x180], 0x7dbb92e6
mov dword [ebp - 0x17c], 0x14d846fe
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x17c]
mov dword [ebp - 0x534], ecx
lea ecx, [ebp - 0x540]
mov dword [ebp - 0x538], eax
call fcn.00bf4ed0
lea ecx, [ebp - 0x678]
mov esi, eax
call fcn.00be4d10
mov byte [ebp - 4], 0x4f
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xc3dbd3
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x678]
call fcn.00be4c40
mov byte [ebp - 4], 0x50
lea eax, [ebp - 0x678]
push 0
push eax
lea ecx, [ebp - 0x284]
call fcn.00bf7c30
cmp eax, 0xffffffff
je 0xc3dc1f
lea ecx, [ebp - 0x844]
push ecx
push dword [ebp - 0x668]
lea ecx, [ebp - 0x284]
push eax
call fcn.00bf7d00
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x678]
call fcn.00be49f0
mov byte [ebp - 4], 0x4d
lea eax, [ebp - 0x678]
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x844]
call fcn.00be49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x844]
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x88], 0xe1e981a9
mov dword [ebp - 0x84], 0xf940fadb
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x90], 0x7dbb92e6
mov dword [ebp - 0x8c], 0x14d846fe
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
push 0
mov dword [ebp - 0xb4], ecx
push ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xb8], eax
call fcn.00bf4ed0
add esp, 4
lea ecx, [ebp - 0x284]
push eax
call fcn.00bf7bf0
cmp eax, 0xffffffff
jne 0xc3dac6
mov dword [ebp - 0x188], 0xbaf682fb
mov dword [ebp - 0x184], 0xf940fadb
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x184]
mov dword [ebp - 0x54c], ecx
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x190], 0x7dbb92e6
mov dword [ebp - 0x18c], 0x14d846fe
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x18c]
mov dword [ebp - 0x544], ecx
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x548], eax
call fcn.00bf4ed0
push eax
mov ecx, edi
call fcn.00bfcb80
lea ecx, [ebp - 0x990]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov esi, eax
mov byte [ebp - 4], 0x57
mov dword [ebp - 0x198], 0x80fc8cf9
mov dword [ebp - 0x194], 0x9c349bac
mov ecx, dword [ebp - 0x198]
mov edx, dword [ebp - 0x194]
mov dword [ebp - 0x750], ecx
mov dword [ebp - 0x74c], edx
mov dword [ebp - 0x1a0], 0xfdaff94
mov dword [ebp - 0x19c], 0x7db41995
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x744], ecx
mov dword [ebp - 0x748], eax
mov dword [ebp - 0x1a8], 0xea100cc9
mov dword [ebp - 0x1a4], 0xc0cfc619
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x73c], ecx
mov dword [ebp - 0x740], eax
mov dword [ebp - 0x1b0], 0xae7946e8
mov dword [ebp - 0x1ac], 0x89c15b7c
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x734], ecx
lea ecx, [ebp - 0x750]
mov dword [ebp - 0x738], eax
call fcn.00bf4be0
push 0
push eax
mov ecx, esi
call fcn.00bf7bf0
mov esi, eax
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x990]
call fcn.00be49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x990]
mov dword [ebp - 0x64], eax
mov byte [ebp - 4], 0x34
test esi, esi
jne 0xc3e191
mov dword [ebp - 0x1b8], 0xaaf782e3
mov dword [ebp - 0x1b4], 0xf940fabe
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x55c], ecx
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x1c0], 0x7dbb92e6
mov dword [ebp - 0x1bc], 0x14d846fe
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x1bc]
mov dword [ebp - 0x554], ecx
lea ecx, [ebp - 0x560]
mov dword [ebp - 0x558], eax
call fcn.00bf4ed0
push eax
mov ecx, edi
call fcn.00bfcb80
lea ecx, [ebp - 0x8f8]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov esi, eax
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0x248]
cmp eax, esi
je 0xc3dee3
mov ecx, eax
call fcn.00be49f0
push esi
lea ecx, [ebp - 0x248]
call fcn.00be4b70
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x8f8]
call fcn.00be49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x8f8]
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x98], 0xe1e981a9
mov dword [ebp - 0x94], 0xf940fadb
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0xc4], ecx
push ecx
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xc8], eax
call fcn.00bf4ed0
add esp, 4
lea ecx, [ebp - 0x248]
push eax
call fcn.00bf7bf0
cmp eax, 0xffffffff
je 0xc3e191
lea eax, [ebp - 0x7fc]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x690]
mov dword [ebp - 0x50], eax
nop word [eax + eax]
mov dword [ebp - 0x1c8], 0xdf9be998
mov dword [ebp - 0x1c4], 0xf940fadb
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp - 0x56c], ecx
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x1d0], 0x7dbb92e6
mov dword [ebp - 0x1cc], 0x14d846fe
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp - 0x564], ecx
lea ecx, [ebp - 0x570]
mov dword [ebp - 0x568], eax
call fcn.00bf4ed0
lea ecx, [ebp - 0x7fc]
mov esi, eax
call fcn.00be4d10
mov byte [ebp - 4], 0x60
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xc3e010
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x7fc]
call fcn.00be4c40
mov byte [ebp - 4], 0x61
mov dword [ebp - 0x1d8], 0xe1e981a9
mov dword [ebp - 0x1d4], 0xf940fadb
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp - 0x57c], ecx
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x574], ecx
lea ecx, [ebp - 0x580]
mov dword [ebp - 0x578], eax
call fcn.00bf4ed0
lea ecx, [ebp - 0x690]
mov esi, eax
call fcn.00be4d10
mov byte [ebp - 4], 0x63
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xc3e097
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x690]
call fcn.00be4c40
mov byte [ebp - 4], 0x64
lea eax, [ebp - 0x690]
push 0
push eax
lea ecx, [ebp - 0x248]
call fcn.00bf7c30
cmp eax, 0xffffffff
je 0xc3e0e3
lea ecx, [ebp - 0x7fc]
push ecx
push dword [ebp - 0x680]
lea ecx, [ebp - 0x248]
push eax
call fcn.00bf7d00
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x690]
call fcn.00be49f0
mov byte [ebp - 4], 0x61
lea eax, [ebp - 0x690]
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x7fc]
call fcn.00be49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x7fc]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x98], 0xe1e981a9
mov dword [ebp - 0x94], 0xf940fadb
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0xc4], ecx
push ecx
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xc8], eax
call fcn.00bf4ed0
add esp, 4
lea ecx, [ebp - 0x248]
push eax
call fcn.00bf7bf0
cmp eax, 0xffffffff
jne 0xc3df90
lea ecx, [ebp - 0x590]
call fcn.00bf4db0
lea eax, [ebp - 0x86c]
push eax
lea ecx, [ebp - 0x590]
call fcn.00bf95f0
test al, al
je 0xc3d3a0
mov esi, dword [0xa2d1f8]
lea eax, [ebp - 0x248]
push eax
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x29c]
call fcn.00ccbaa0
add esp, 4
cmp byte [0xa590ae], 0
jne 0xc3f2b1
call fcn.00ca9490
call fcn.00ca9350
call fcn.00ca92b0
call fcn.00c5d570
call fcn.00c5c2e0
mov ecx, 0xa592a0
call fcn.00bf49f0
push 0xa36068
call esi
mov ecx, 0xa593d0
call fcn.00bf49f0
mov esi, dword [0xa2d0c8]
push 0
push 0
push 0
push 0x93aa80
push 0
push 0
call esi
push 0
push 0
push 0
push 0x93a140
push 0
push 0
mov dword [ebp - 0x44], eax
call esi
mov dword [ebp - 0x40], eax
call fcn.00beb890
test al, al
je 0xc3e340
lea ecx, [ebp - 0x940]
call fcn.00bebec0
mov edi, eax
mov byte [ebp - 4], 0x6b
mov dword [ebp - 0x20], 0xb6fc8cf9
mov dword [ebp - 0x1c], 0xf94089b5
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x5a0], ecx
mov dword [ebp - 0x59c], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x594], ecx
lea ecx, [ebp - 0x5a0]
mov dword [ebp - 0x598], eax
call fcn.00bf4ed0
sub esp, 0x10
mov ecx, edi
mov esi, esp
mov dword [ebp - 0x4c], esp
push eax
call fcn.00bfcb80
push eax
mov ecx, esi
call fcn.00bf5950
mov byte [ebp - 4], 0x6c
mov dword [ebp - 0x20], 0xb3ee82c3
mov dword [ebp - 0x1c], 0xbc09a5af
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5ac], ecx
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5a4], ecx
lea ecx, [ebp - 0x5b0]
mov dword [ebp - 0x5a8], eax
call fcn.00bf4ed0
push eax
mov ecx, 0xa59368
call fcn.00bfcb80
mov byte [ebp - 4], 0x6b
mov ecx, eax
call fcn.00bf58b0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x940]
call fcn.00bf58a0
call fcn.00bebe90
lea ecx, [ebp - 0x880]
call fcn.00c77390
mov esi, eax
mov byte [ebp - 4], 0x6d
mov dword [ebp - 0x20], 0xb6fc8cf9
mov dword [ebp - 0x1c], 0xf94089b5
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x5c0], ecx
mov dword [ebp - 0x5bc], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5b4], ecx
lea ecx, [ebp - 0x5c0]
mov dword [ebp - 0x5b8], eax
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
push eax
lea ecx, [ebp - 0xe0]
call fcn.00bf5950
mov byte [ebp - 4], 0x6e
mov dword [ebp - 0x20], 0xbbf58ac2
mov dword [ebp - 0x1c], 0xba338db4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x76c], ecx
mov dword [ebp - 0x20], 0x18dff794
mov dword [ebp - 0x1c], 0x75b13290
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x764], ecx
mov dword [ebp - 0x20], 0xd94f1acb
mov dword [ebp - 0x1c], 0xc0cfc619
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x760], eax
mov dword [ebp - 0x75c], ecx
lea ecx, [ebp - 0x770]
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x754], edx
call fcn.00bf4be0
push eax
mov ecx, 0xa59368
call fcn.00bfcb80
mov edi, eax
mov byte [ebp - 4], 0x6f
mov dl, byte [edi]
mov cl, byte [ebp - 0xe0]
mov byte [edi], cl
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd4]
mov byte [ebp - 0xe0], dl
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0xd4], esi
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0xd8]
push dword [ebp - 0xe0]
call fcn.00bf96f0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x878]
push dword [ebp - 0x880]
call fcn.00bf96f0
push 0
push 0x4b707
call fcn.00ccc020
add esp, 8
push eax
push dword [ebp - 0x44]
call dword [0xa2d060]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xc3e547
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3e547
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3e53d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3e520
cmp esi, 0x71948ca4
je 0xc3e54b
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3e503
mov eax, dword [eax]
jmp 0xc3e4d3
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 0x493e0
push dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xc3e5ef
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3e5ef
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3e5e5
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3e5c8
cmp esi, 0xfaba0065
je 0xc3e5f3
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3e5b0
mov eax, dword [eax]
jmp 0xc3e580
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x44]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xc3e68f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3e68f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3e685
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3e668
cmp esi, 0xfaba0065
je 0xc3e693
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3e650
mov eax, dword [eax]
jmp 0xc3e620
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
call fcn.00c5a740
mov esi, dword [0xa2d0c8]
push 0
push 0
push 0
push 0x936d20
push 0
push 0
call esi
push 0
push 0
push 0
push 0x933830
push 0
push 0
mov dword [ebp - 0x44], eax
call esi
push 0
push 0
push 0
push 0x931e10
push 0
push 0
mov dword [ebp - 0x40], eax
call esi
push 0
push 0
push 0
push 0x92f740
push 0
push 0
mov dword [ebp - 0x6c], eax
call esi
push 0
push 0
push 0
push 0x92f460
push 0
push 0
mov dword [ebp - 0x58], eax
call esi
push 0
push 0
push 0
push 0x92e140
push 0
push 0
mov dword [ebp - 0x34], eax
call esi
push 0
push 0
push 0
push 0x92dcd0
push 0
push 0
mov dword [ebp - 0x2c], eax
call esi
sub esp, 0x18
mov dword [ebp - 0x24], eax
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0xa56d5c
call fcn.00bf7fb0
mov byte [ebp - 4], 0x70
sub esp, 0x18
lea eax, [ebp - 0x8c8]
mov dword [ebp - 0x54], esp
mov ecx, esp
push eax
call fcn.00bf7fb0
mov byte [ebp - 4], 0x71
sub esp, 0x18
lea eax, [ebp - 0x8e0]
mov dword [ebp - 0x50], esp
mov ecx, esp
push eax
call fcn.00bf7fb0
mov byte [ebp - 4], 0x72
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0xa56d74
call fcn.00bf7fb0
mov byte [ebp - 4], 0x73
mov byte [ebp - 4], 0x34
call fcn.00cc22d0
mov eax, dword fs:[0x30]
add esp, 0x60
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x28], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xc3e82f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3e82f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x38], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3e825
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3e808
cmp esi, 0x71948ca4
je 0xc3e833
mov ecx, dword [ebp - 0x38]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3e7f0
mov eax, dword [eax]
jmp 0xc3e7c0
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x28]
push 0x493e0
push dword [ebp - 0x44]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xc3e8d7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3e8d7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3e8cd
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3e8b0
cmp esi, 0x71948ca4
je 0xc3e8db
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3e892
mov eax, dword [eax]
jmp 0xc3e862
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push 0x493e0
push dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0x493e0
push dword [ebp - 0x6c]
call dword [0xa2d060]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xc3e98f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3e98f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3e985
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3e968
cmp esi, 0x71948ca4
je 0xc3e993
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3e950
mov eax, dword [eax]
jmp 0xc3e920
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push 0x493e0
push dword [ebp - 0x58]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0x493e0
push dword [ebp - 0x34]
call dword [0xa2d060]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xc3ea3f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3ea3f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3ea35
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3ea18
cmp esi, 0x71948ca4
je 0xc3ea43
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3ea00
mov eax, dword [eax]
jmp 0xc3e9d0
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push 0x493e0
push dword [ebp - 0x2c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xc3eae7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3eae7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3eadd
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3eac0
cmp esi, 0x71948ca4
je 0xc3eaeb
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3eaa2
mov eax, dword [eax]
jmp 0xc3ea72
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push 0x493e0
push dword [ebp - 0x24]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xc3eb8f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3eb8f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3eb85
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3eb68
cmp esi, 0xfaba0065
je 0xc3eb93
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3eb50
mov eax, dword [eax]
jmp 0xc3eb20
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x44]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xc3ec2f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3ec2f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3ec25
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3ec08
cmp esi, 0xfaba0065
je 0xc3ec33
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3ebf0
mov eax, dword [eax]
jmp 0xc3ebc0
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push dword [ebp - 0x6c]
call dword [0xa2d0c0]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xc3ecd7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3ecd7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3eccd
nop
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3ecb0
cmp esi, 0xfaba0065
je 0xc3ecdb
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3ec96
mov eax, dword [eax]
jmp 0xc3ec66
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x58]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xc3ed77
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3ed77
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3ed6d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3ed50
cmp esi, 0xfaba0065
je 0xc3ed7b
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3ed35
mov eax, dword [eax]
jmp 0xc3ed05
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x34]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xc3ee17
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3ee17
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3ee0d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3edf0
cmp esi, 0xfaba0065
je 0xc3ee1b
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3edd5
mov eax, dword [eax]
jmp 0xc3eda5
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x2c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xc3eeb7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xc3eeb7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xc3eead
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xc3ee90
cmp esi, 0xfaba0065
je 0xc3eebb
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xc3ee75
mov eax, dword [eax]
jmp 0xc3ee45
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x24]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov dword [ebp - 0x20], 0xaff299bb
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5cc], ecx
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5c4], ecx
lea ecx, [ebp - 0x5d0]
mov dword [ebp - 0x5c8], eax
call fcn.00bf4ed0
mov dword [ebp - 0x20], 0xdf9be3ca
mov esi, eax
mov dword [ebp - 0x1c], 0xf940fadb
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x5e0], ecx
mov dword [ebp - 0x5dc], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5d8], ecx
lea ecx, [ebp - 0x5e0]
mov dword [ebp - 0x5d4], eax
call fcn.00bf4ed0
push eax
lea edx, [ebp - 0x1f0]
lea ecx, [ebp - 0x9d8]
call fcn.00bfc720
add esp, 4
mov byte [ebp - 4], 0x74
mov edx, eax
push 0xa56d5c
lea ecx, [ebp - 0x9c0]
call fcn.00bfc980
add esp, 4
mov byte [ebp - 4], 0x75
mov edx, eax
push esi
lea ecx, [ebp - 0x910]
call fcn.00bfc7b0
add esp, 4
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x9c0]
call fcn.00be4890
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x9d8]
call fcn.00be4890
mov dword [ebp - 0x20], 0xaff299bb
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5ec], ecx
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5e4], ecx
lea ecx, [ebp - 0x5f0]
mov dword [ebp - 0x5e8], eax
call fcn.00bf4ed0
mov edx, 0x17
lea ecx, [ebp - 0xa08]
mov esi, eax
call fcn.00cc7fa0
mov byte [ebp - 4], 0x79
lea edx, [ebp - 0xd50]
push eax
lea ecx, [ebp - 0x9f0]
call fcn.00bfc8e0
add esp, 4
mov byte [ebp - 4], 0x7a
mov edx, eax
push esi
lea ecx, [ebp - 0x898]
call fcn.00bfc7b0
add esp, 4
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x9f0]
call fcn.00be4890
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0xa08]
call fcn.00be4890
mov ecx, 0xa59410
call fcn.00bf7c90
sub esp, 0x18
lea ecx, [ebp - 0x898]
mov edi, eax
mov dword [ebp - 0x4c], esp
mov esi, esp
call fcn.00bf7c90
push eax
mov ecx, esi
call fcn.00be48f0
mov byte [ebp - 4], 0x7e
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0xa56d74
call fcn.00bf7fb0
mov byte [ebp - 4], 0x7f
mov byte [ebp - 4], 0x7d
mov ecx, edi
call fcn.00ccc060
add esp, 0x18
lea eax, [ebp - 0x910]
mov ecx, esp
mov dword [ebp - 0x50], esp
push eax
call fcn.00bf7fb0
mov byte [ebp - 4], pe_nt_image_headers32
sub esp, 0x18
lea eax, [ebp - 0x898]
mov dword [ebp - 0x60], esp
mov ecx, esp
push eax
call fcn.00bf7fb0
mov byte [ebp - 4], 0x81
mov byte [ebp - 4], 0x7d
call fcn.00ca8c70
add esp, 0x30
cmp byte [0xa590ac], 0
je 0xc3f1cb
cmp dword [ebp - 0x48], 0
jne 0xc3f1cb
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0xa593c0
call fcn.00bf5950
mov byte [ebp - 4], 0x82
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0xa59258
call fcn.00bf5950
mov byte [ebp - 4], 0x83
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x50], esp
push 0xa59368
call fcn.00bf5950
mov byte [ebp - 4], 0x84
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0xa59388
call fcn.00bf5950
mov byte [ebp - 4], 0x85
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0xa59378
call fcn.00bf5950
mov byte [ebp - 4], 0x86
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x64], esp
push 0xa59290
call fcn.00bf5950
mov byte [ebp - 4], 0x87
sub esp, 0x18
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call fcn.00bf7fb0
mov byte [ebp - 4], 0x88
mov byte [ebp - 4], 0x7d
call fcn.00cad6c0
add esp, 0x78
test al, al
je 0xc3f1cb
call fcn.00cb3050
sub esp, 0x18
lea eax, [ebp - 0x26c]
mov ecx, esp
mov dword [ebp - 0x4c], esp
push eax
call fcn.00bf7fb0
mov byte [ebp - 4], 0x89
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0xa593c0
call fcn.00bf5950
mov byte [ebp - 4], 0x8a
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x50], esp
push 0xa59258
call fcn.00bf5950
mov byte [ebp - 4], 0x8b
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0xa59368
call fcn.00bf5950
mov byte [ebp - 4], 0x8c
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0xa59388
call fcn.00bf5950
mov byte [ebp - 4], 0x8d
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x64], esp
push 0xa59378
call fcn.00bf5950
mov byte [ebp - 4], 0x8e
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0xa59290
call fcn.00bf5950
mov byte [ebp - 4], 0x8f
sub esp, 0x18
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x30], esp
mov ecx, esp
push eax
call fcn.00bf7fb0
mov byte [ebp - 4], 0x90
mov byte [ebp - 4], 0x7d
call fcn.00c67c50
add esp, 0x90
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x898]
call fcn.00be4890
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x910]
call fcn.00be4890
jmp 0xc3f379
cmp byte [0xa590ac], 0
je 0xc3f379
cmp dword [ebp - 0x48], 0
jne 0xc3f379
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0xa593c0
call fcn.00bf5950
mov byte [ebp - 4], 0x91
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0xa59258
call fcn.00bf5950
mov byte [ebp - 4], 0x92
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x50], esp
push 0xa59368
call fcn.00bf5950
mov byte [ebp - 4], 0x93
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0xa59388
call fcn.00bf5950
mov byte [ebp - 4], 0x94
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0xa59378
call fcn.00bf5950
mov byte [ebp - 4], 0x95
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x64], esp
push 0xa59290
call fcn.00bf5950
mov byte [ebp - 4], 0x96
sub esp, 0x18
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call fcn.00bf7fb0
mov byte [ebp - 4], 0x97
mov byte [ebp - 4], 0x34
call fcn.00cad6c0
add esp, 0x78
test al, al
je 0xc3f379
call fcn.00cb3050
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x248]
call fcn.00be49f0
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x248]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0x284]
call fcn.00be49f0
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x284]
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x29c]
call fcn.00be49f0
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0xa2
lea ecx, [ebp - 0x924]
call fcn.00bf40b0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x92c]
call fcn.00bf4130
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x8e0]
call fcn.00bea700
push 0xa36074
call dword [0xa2d1f8]
cmp byte [0xa590ac], 0
mov esi, dword [ebp - 0x48]
je 0xc3f60d
test esi, esi
je 0xc3f60d
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0xa593c0
call fcn.00bf5950
mov byte [ebp - 4], 0xa4
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0xa59258
call fcn.00bf5950
mov byte [ebp - 4], 0xa5
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x50], esp
push 0xa59368
call fcn.00bf5950
mov byte [ebp - 4], 0xa6
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0xa59388
call fcn.00bf5950
mov byte [ebp - 4], 0xa7
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0xa59378
call fcn.00bf5950
mov byte [ebp - 4], 0xa8
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x64], esp
push 0xa59290
call fcn.00bf5950
mov byte [ebp - 4], 0xa9
sub esp, 0x18
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call fcn.00bf7fb0
mov byte [ebp - 4], 0xaa
mov byte [ebp - 4], 0x12
call fcn.00cad6c0
add esp, 0x78
test al, al
je 0xc3f60d
mov dword [ebp - 0x20], 0xbcf28fe6
mov dword [ebp - 0x1c], 0x902ca9b0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5fc], ecx
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x20], 0x13faf782
mov dword [ebp - 0x1c], 0x14d8469a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
push 0xa56da4
mov dword [ebp - 0x5f4], ecx
push ecx
lea ecx, [ebp - 0x600]
mov dword [ebp - 0x5f8], eax
call fcn.00bf4ed0
add esp, 4
lea ecx, [ebp - 0xa20]
mov edx, eax
call fcn.00bfc850
add esp, 4
mov byte [ebp - 4], 0xab
mov ecx, eax
call fcn.00bf7c90
push eax
push 1
push 0
call dword [0xa2d1dc]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xa20]
call fcn.00be4890
call dword [0xa2d098]
cmp eax, 0xb7
je 0xc3f64a
mov edi, dword [0xa2d080]
push 0x7595
call edi
mov dword [ebp - 0x20], 0x9cd5b5dd
sub esp, 0x18
mov dword [ebp - 0x1c], 0x952c9ef5
mov esi, esp
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x224], ecx
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x4c], esp
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00be48f0
mov byte [ebp - 4], 0xac
mov byte [ebp - 4], 0x12
call fcn.00ca9530
mov eax, dword [0xa593f8]
add esp, 0x18
sub eax, dword [0xa593f4]
je 0xc3f601
nop dword [eax]
push 0x64
call edi
mov eax, dword [0xa593f8]
sub eax, dword [0xa593f4]
jne 0xc3f5f0
mov esi, dword [ebp - 0x48]
mov byte [0xa59081], 1
jmp 0xc3f613
mov edi, dword [0xa2d080]
push 0xbbb
call edi
push 2
push dword [0xa55b24]
call dword [0xa2d380]
push dword [0xa55b24]
call dword [0xa2d388]
cmp byte [0xa590ac], 0
je 0xc3f64a
test esi, esi
je 0xc3f64a
push 0x3f3
call edi
jmp 0xc3f641
xor esi, esi
mov byte [ebp - 4], 0xad
lea ecx, [ebp - 0x26c]
call fcn.00be49f0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x85c]
call fcn.00be49f0
mov byte [ebp - 4], 9
lea eax, [ebp - 0x85c]
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0xb3
lea ecx, [ebp - 0x1f0]
call fcn.00be49f0
mov byte [ebp - 4], 5
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 5
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x9c]
test ecx, ecx
je 0xc3f6b7
call fcn.00be5bc0
mov dword [ebp - 4], 0xb6
lea ecx, [ebp - 0x8b0]
call fcn.00be49f0
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x8b0]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 0xffffffff
mov eax, esi
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10