Function at 0x1005fc60
Capabilities:
Access peb ldr_data
Authenticate hmac
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Encode data using xor
Get ntdll base address
Get number of processors
Get process heap force flags
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100eeb22
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xe48
mov eax, dword [0x1010e080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x110], edi
lea eax, [ebp - 0x3e4]
mov dword [ebp - 0x3e4], 0x79616c70
push eax
lea ecx, [ebp - 0x600]
mov dword [ebp - 0x3e0], 0x737265
call fcn.10027de0
lea eax, [ebp - 0x600]
mov dword [ebp - 4], 0
push eax
mov ecx, edi
call fcn.1002e730
lea ecx, [ebp - 0x600]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0x278]
mov dword [ebp - 0x278], 0x786f62
push eax
lea ecx, [ebp - 0x630]
lea esi, [edi + 0x30]
call fcn.10027de0
lea eax, [ebp - 0x294]
mov dword [ebp - 4], 1
push eax
lea ecx, [ebp - 0x618]
mov dword [ebp - 0x294], 0x786f62
call fcn.10027de0
lea eax, [ebp - 0x630]
mov byte [ebp - 4], 2
push eax
lea ecx, [edi + 0x68]
call fcn.1002e730
lea eax, [ebp - 0x618]
mov byte [edi + 0x99], 1
push eax
lea ecx, [edi + 0xa0]
call fcn.1002e730
lea ecx, [ebp - 0x618]
mov byte [edi + 0x9c], 0
call fcn.10027d90
lea ecx, [ebp - 0x630]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
mov dword [ebp - 0x58], esi
lea ecx, [ebp - 0x58]
mov dword [esi + 0x18], 0
imul eax, dword [esi + 0x18], 0xeb
push ecx
lea ecx, [edi + 0x18]
add eax, 0x14
mov dword [esi + 4], eax
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
call fcn.100406b0
lea eax, [ebp - 0x438]
mov dword [ebp - 0x438], 0x5f786f62
push eax
lea ecx, [ebp - 0x660]
mov dword [ebp - 0x434], 0x6d656e65
lea esi, [edi + 0xb8]
mov word [ebp - 0x430], 0x79
call fcn.10027de0
mov dword [ebp - 4], 3
lea eax, [ebp - 0x598]
movaps xmm0, xmmword [0x10100ba0]
lea ecx, [ebp - 0x648]
xorps xmm0, xmmword [0x10100a70]
push eax
movups xmmword [ebp - 0x598], xmm0
call fcn.10027de0
lea eax, [ebp - 0x648]
mov byte [ebp - 4], 4
push eax
lea ecx, [edi + 0x128]
mov dword [ebp - 0x298], 0xffffffff
call fcn.1002e730
lea eax, [ebp - 0x660]
push eax
lea ecx, [edi + 0xf0]
call fcn.1002e730
mov eax, dword [ebp - 0x298]
lea ecx, [ebp - 0x648]
mov dword [edi + 0x140], eax
mov dword [edi + 0x144], 0
call fcn.10027d90
lea ecx, [ebp - 0x660]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0x84]
mov dword [ebp - 0x84], 0x1002e1d0
lea ecx, [esi + 0x58]
push eax
call fcn.100406b0
mov dword [ebp - 0x88], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0xd0], 0
imul eax, dword [edi + 0xd0], 0xeb
add eax, 0x14
mov dword [edi + 0xbc], eax
mov dword [edi + 0xc4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xd4], eax
lea eax, [ebp - 0x88]
push eax
call fcn.100406b0
lea eax, [ebp - 0x3dc]
mov dword [ebp - 0x3dc], 0x6d726f64
push eax
lea ecx, [ebp - 0x690]
mov dword [ebp - 0x3d8], 0x746e61
lea esi, [edi + 0x1d8]
call fcn.10027de0
mov dword [ebp - 4], 5
lea eax, [ebp - 0x5a8]
movaps xmm0, xmmword [0x10100ba0]
lea ecx, [ebp - 0x678]
xorps xmm0, xmmword [0x10100ad0]
push eax
movups xmmword [ebp - 0x5a8], xmm0
call fcn.10027de0
lea eax, [ebp - 0x690]
mov byte [ebp - 4], 6
push eax
lea ecx, [edi + 0x210]
call fcn.1002e730
lea eax, [ebp - 0x678]
mov byte [edi + 0x241], 1
push eax
lea ecx, [edi + 0x248]
call fcn.1002e730
lea ecx, [ebp - 0x678]
mov byte [edi + 0x244], 0
call fcn.10027d90
lea ecx, [ebp - 0x690]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
mov dword [ebp - 0x8c], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x1f0], 0
imul eax, dword [edi + 0x1f0], 0xeb
add eax, 0x14
mov dword [edi + 0x1dc], eax
mov dword [edi + 0x1e4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x1f4], eax
lea eax, [ebp - 0x8c]
push eax
call fcn.100406b0
lea eax, [ebp - 0x414]
mov dword [ebp - 0x414], 0x7366666f
push eax
lea ecx, [ebp - 0x6c0]
mov dword [ebp - 0x410], 0x65657263
mov word [ebp - 0x40c], 0x6e
call fcn.10027de0
mov dword [ebp - 4], 7
mov ecx, 0x10
movaps xmm0, xmmword [0x10100ba0]
xorps xmm0, xmmword [0x10100890]
mov dword [ebp - 0x460], 0xfe8e8d9b
movups xmmword [ebp - 0x470], xmm0
nop word [eax + eax]
xor byte [ebp + ecx - 0x470], 0xfe
inc ecx
cmp ecx, 0x14
jb 0x10060030
lea eax, [ebp - 0x470]
push eax
lea ecx, [ebp - 0x6a8]
call fcn.10027de0
lea eax, [ebp - 0x6c0]
mov byte [ebp - 4], 8
push eax
lea ecx, [edi + 0x298]
call fcn.1002e730
lea eax, [ebp - 0x6a8]
mov byte [edi + 0x2c9], 1
push eax
lea ecx, [edi + 0x2d0]
call fcn.1002e730
lea ecx, [ebp - 0x6a8]
mov byte [edi + 0x2cc], 0
call fcn.10027d90
lea ecx, [ebp - 0x6c0]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [edi + 0x260]
mov dword [ebp - 0x90], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x278], 0
imul eax, dword [edi + 0x278], 0xeb
add eax, 0x14
mov dword [edi + 0x264], eax
mov dword [edi + 0x26c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x27c], eax
lea eax, [ebp - 0x90]
push eax
call fcn.100406b0
movaps xmm0, xmmword [0x10100ba0]
lea eax, [ebp - 0x5b8]
xorps xmm0, xmmword [0x10100a60]
lea ecx, [ebp - 0x6f0]
mov esi, dword [0x100fdec0]
push eax
movups xmmword [ebp - 0x5b8], xmm0
call fcn.10027de0
mov dword [ebp - 4], 9
mov ecx, 0x10
movaps xmm0, xmmword [0x10100ba0]
xorps xmm0, xmmword [0x101001a0]
mov dword [ebp - 0x44c], 0xfe8c9192
movups xmmword [ebp - 0x45c], xmm0
nop word [eax + eax]
xor byte [ebp + ecx - 0x45c], 0xfe
inc ecx
cmp ecx, 0x14
jb 0x10060150
lea eax, [ebp - 0x45c]
push eax
lea ecx, [ebp - 0x6d8]
call fcn.10027de0
lea eax, [ebp - 0x6d8]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [edi + 0x358]
call fcn.1002e730
lea eax, [ebp - 0x6f0]
push eax
lea ecx, [edi + 0x320]
call fcn.1002e730
mov dword [edi + 0x370], esi
lea ecx, [ebp - 0x6d8]
mov dword [edi + 0x374], 0
call fcn.10027d90
lea ecx, [ebp - 0x6f0]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0x94]
mov dword [ebp - 0x94], 0x1002e1c0
lea esi, [edi + 0x2e8]
lea ecx, [esi + 0x58]
push eax
call fcn.100406b0
mov dword [ebp - 0x98], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x300], 0
imul eax, dword [edi + 0x300], 0xeb
add eax, 0x14
mov dword [edi + 0x2ec], eax
mov dword [edi + 0x2f4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x304], eax
lea eax, [ebp - 0x98]
push eax
call fcn.100406b0
lea eax, [ebp - 0x344]
mov dword [ebp - 0x344], 0x656d616e
push eax
lea ecx, [ebp - 0x720]
mov byte [ebp - 0x340], 0
lea esi, [edi + 0x378]
call fcn.10027de0
lea eax, [ebp - 0x32c]
mov dword [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x708]
mov dword [ebp - 0x32c], 0x656d616e
mov byte [ebp - 0x328], 0
call fcn.10027de0
lea eax, [ebp - 0x720]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [edi + 0x3b0]
call fcn.1002e730
lea eax, [ebp - 0x708]
mov byte [edi + 0x3e1], 1
push eax
lea ecx, [edi + 0x3e8]
call fcn.1002e730
lea ecx, [ebp - 0x708]
mov byte [edi + 0x3e4], 0
call fcn.10027d90
lea ecx, [ebp - 0x720]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
mov dword [ebp - 0x24], esi
mov dword [esi + 0x18], 0
imul eax, dword [esi + 0x18], 0xeb
add eax, 0x14
mov dword [esi + 4], eax
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [edi + 0x18]
call fcn.100406b0
mov esi, dword [0x100fdeac]
xor ecx, ecx
mov dword [ebp - 0x240], 0x9b939f90
mov dword [ebp - 0x23c], 0x92919da1
mov word [ebp - 0x238], 0x8c91
mov byte [ebp - 0x236], 0xfe
nop dword [eax + eax]
xor byte [ebp + ecx - 0x240], 0xfe
inc ecx
cmp ecx, 0xb
jb 0x10060330
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x750]
call fcn.10027de0
mov dword [ebp - 4], 0xd
xor ecx, ecx
mov dword [ebp - 0x234], 0x9b939f90
mov dword [ebp - 0x230], 0x92919dde
mov word [ebp - 0x22c], 0x8c91
mov byte [ebp - 0x22a], 0xfe
nop dword [eax]
xor byte [ebp + ecx - 0x234], 0xfe
inc ecx
cmp ecx, 0xb
jb 0x10060380
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x738]
call fcn.10027de0
lea eax, [ebp - 0x738]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [edi + 0x470]
call fcn.1002e730
lea eax, [ebp - 0x750]
push eax
lea ecx, [edi + 0x438]
call fcn.1002e730
mov dword [edi + 0x488], esi
lea ecx, [ebp - 0x738]
mov dword [edi + 0x48c], 0
call fcn.10027d90
lea ecx, [ebp - 0x750]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0xa0]
mov dword [ebp - 0xa0], 0x1002e130
lea esi, [edi + 0x400]
lea ecx, [esi + 0x58]
push eax
call fcn.100406b0
mov dword [ebp - 0xa4], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x418], 0
imul eax, dword [edi + 0x418], 0xeb
add eax, 0x14
mov dword [edi + 0x404], eax
mov dword [edi + 0x40c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x41c], eax
lea eax, [ebp - 0xa4]
push eax
call fcn.100406b0
lea eax, [ebp - 0x3ac]
mov dword [ebp - 0x3ac], 0x6c616568
push eax
lea ecx, [ebp - 0x780]
mov word [ebp - 0x3a8], 0x6874
lea esi, [edi + 0x490]
mov byte [ebp - 0x3a6], 0
call fcn.10027de0
mov dword [ebp - 4], 0xf
lea eax, [ebp - 0x3b4]
push eax
lea ecx, [ebp - 0x768]
mov dword [ebp - 0x3b4], 0x6c616568
mov word [ebp - 0x3b0], 0x6874
mov byte [ebp - 0x3ae], 0
call fcn.10027de0
lea eax, [ebp - 0x780]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [edi + 0x4c8]
call fcn.1002e730
lea eax, [ebp - 0x768]
mov byte [edi + 0x4f9], 1
push eax
lea ecx, [edi + 0x500]
call fcn.1002e730
lea ecx, [ebp - 0x768]
mov byte [edi + 0x4fc], 0
call fcn.10027d90
lea ecx, [ebp - 0x780]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
mov dword [ebp - 0xa8], esi
mov dword [esi + 0x18], 0
imul eax, dword [esi + 0x18], 0xeb
add eax, 0x14
mov dword [esi + 4], eax
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0xa8]
push eax
lea ecx, [edi + 0x18]
call fcn.100406b0
lea eax, [ebp - 0x34c]
mov dword [ebp - 0x34c], 0x776f6c67
push eax
lea ecx, [ebp - 0x7b0]
mov byte [ebp - 0x348], 0
lea esi, [edi + 0x518]
call fcn.10027de0
lea eax, [ebp - 0x354]
mov dword [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x798]
mov dword [ebp - 0x354], 0x776f6c67
mov byte [ebp - 0x350], 0
call fcn.10027de0
lea eax, [ebp - 0x7b0]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [edi + 0x550]
call fcn.1002e730
lea eax, [ebp - 0x798]
mov byte [edi + 0x581], 1
push eax
lea ecx, [edi + 0x588]
call fcn.1002e730
lea ecx, [ebp - 0x798]
mov byte [edi + 0x584], 0
call fcn.10027d90
lea ecx, [ebp - 0x7b0]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
mov dword [ebp - 0xac], esi
lea ecx, [edi + 0x18]
mov dword [esi + 0x18], 0
imul eax, dword [esi + 0x18], 0xeb
add eax, 0x14
mov dword [esi + 4], eax
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0xac]
push eax
call fcn.100406b0
mov dword [ebp - 0x228], 0x89919299
xor ecx, ecx
mov dword [ebp - 0x224], 0x9b909ba1
mov word [ebp - 0x220], 0x8793
mov byte [ebp - 0x21e], 0xfe
nop dword [eax]
xor byte [ebp + ecx - 0x228], 0xfe
inc ecx
cmp ecx, 0xb
jb 0x10060650
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x7e0]
call fcn.10027de0
mov dword [ebp - 4], 0x13
xor ecx, ecx
mov dword [ebp - 0x264], 0x939b909b
mov dword [ebp - 0x260], 0x919dde87
mov dword [ebp - 0x25c], 0xfe8c9192
nop word [eax + eax]
xor byte [ebp + ecx - 0x264], 0xfe
inc ecx
cmp ecx, 0xc
jb 0x100606a0
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x7c8]
call fcn.10027de0
lea eax, [ebp - 0x7c8]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [edi + 0x698]
mov dword [ebp - 0x274], 0xffba2fb8
call fcn.1002e730
lea eax, [ebp - 0x7e0]
push eax
lea ecx, [edi + 0x660]
call fcn.1002e730
mov eax, dword [ebp - 0x274]
lea ecx, [ebp - 0x7c8]
mov dword [edi + 0x6b0], eax
mov dword [edi + 0x6b4], 0
call fcn.10027d90
lea ecx, [ebp - 0x7e0]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xb0], 0x1002e150
lea ecx, [edi + 0x680]
push eax
call fcn.100406b0
lea eax, [edi + 0x628]
mov dword [ebp - 0xb4], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x640], 0
imul eax, dword [edi + 0x640], 0xeb
add eax, 0x14
mov dword [edi + 0x62c], eax
mov dword [edi + 0x634], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x644], eax
lea eax, [ebp - 0xb4]
push eax
call fcn.100406b0
lea eax, [ebp - 0x444]
mov dword [ebp - 0x444], 0x25
push eax
lea ecx, [ebp - 0x810]
call fcn.10097d00
mov dword [ebp - 4], 0x15
xor ecx, ecx
mov dword [ebp - 0x1f8], 0x89919299
mov dword [ebp - 0x1f4], 0x9b929ca1
mov word [ebp - 0x1f0], 0x9a90
mov byte [ebp - 0x1ee], 0xfe
nop word [eax + eax]
xor byte [ebp + ecx - 0x1f8], 0xfe
inc ecx
cmp ecx, 0xb
jb 0x100607e0
lea eax, [ebp - 0x1f8]
push eax
lea ecx, [ebp - 0x7f8]
call fcn.10027de0
push 0x100fd3bc
lea ecx, [ebp - 0xcf0]
mov byte [ebp - 4], 0x16
call fcn.10027de0
lea eax, [ebp - 0x7f8]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [edi + 0x780]
call fcn.1002e730
mov byte [edi + 0x7b1], 0
lea eax, [ebp - 0x810]
mov dword [edi + 0x800], 0
lea ecx, [edi + 0x7e8]
mov dword [edi + 0x758], 8
mov dword [edi + 0x75c], 8
mov dword [edi + 0x7bc], 0x41200000
mov dword [edi + 0x7c0], 0x42c80000
mov dword [edi + 0x7b8], 0x42700000
mov dword [edi + 0x7cc], 0
push eax
mov dword [edi + 0x7c4], 0x3f800000
call fcn.10097cd0
lea ecx, [ebp - 0xcf0]
call fcn.10027d90
lea ecx, [ebp - 0x7f8]
call fcn.10027d90
lea ecx, [ebp - 0x810]
mov dword [ebp - 4], 0xffffffff
call fcn.1004af30
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x1002e150
lea ecx, [edi + 0x7a0]
push eax
call fcn.100406b0
lea eax, [edi + 0x748]
mov dword [ebp - 0xbc], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x760], 0
imul eax, dword [edi + 0x760], 0xeb
add eax, 0x14
mov dword [edi + 0x74c], eax
mov dword [edi + 0x754], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x764], eax
lea eax, [ebp - 0xbc]
push eax
call fcn.100406b0
lea eax, [ebp - 0x3fc]
mov dword [ebp - 0x3fc], 0x6c656b73
push eax
lea ecx, [ebp - 0x840]
mov dword [ebp - 0x3f8], 0x6e6f7465
lea esi, [edi + 0x804]
mov byte [ebp - 0x3f4], 0
call fcn.10027de0
mov dword [ebp - 4], 0x18
lea eax, [ebp - 0x3f0]
push eax
lea ecx, [ebp - 0x828]
mov dword [ebp - 0x3f0], 0x6c656b73
mov dword [ebp - 0x3ec], 0x6e6f7465
mov byte [ebp - 0x3e8], 0
call fcn.10027de0
lea eax, [ebp - 0x840]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [edi + 0x83c]
call fcn.1002e730
lea eax, [ebp - 0x828]
mov byte [edi + 0x86d], 1
push eax
lea ecx, [edi + 0x874]
call fcn.1002e730
lea ecx, [ebp - 0x828]
mov byte [edi + 0x870], 0
call fcn.10027d90
lea ecx, [ebp - 0x840]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
mov dword [ebp - 0xc0], esi
lea ecx, [edi + 0x18]
mov dword [esi + 0x18], 0
imul eax, dword [esi + 0x18], 0xeb
add eax, 0x14
mov dword [esi + 4], eax
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0xc0]
push eax
call fcn.100406b0
mov dword [ebp - 0x33c], 0x929b958d
xor ecx, ecx
mov dword [ebp - 0x338], 0x90918a9b
mov dword [ebp - 0x334], 0x9b909ba1
mov word [ebp - 0x330], 0x8793
mov byte [ebp - 0x32e], 0xfe
xor byte [ebp + ecx - 0x33c], 0xfe
inc ecx
cmp ecx, 0xf
jb 0x10060a42
lea eax, [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x870]
call fcn.10027de0
mov dword [ebp - 4], 0x1a
xor ecx, ecx
mov dword [ebp - 0x258], 0x939b909b
mov dword [ebp - 0x254], 0x919dde87
mov dword [ebp - 0x250], 0xfe8c9192
nop dword [eax]
xor byte [ebp + ecx - 0x258], 0xfe
inc ecx
cmp ecx, 0xc
jb 0x10060a90
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x858]
call fcn.10027de0
lea eax, [ebp - 0x858]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [edi + 0x8fc]
mov dword [ebp - 0x29c], 0xffffffff
call fcn.1002e730
lea eax, [ebp - 0x870]
push eax
lea ecx, [edi + 0x8c4]
call fcn.1002e730
mov eax, dword [ebp - 0x29c]
lea ecx, [ebp - 0x858]
mov dword [edi + 0x914], eax
mov dword [edi + 0x918], 0
call fcn.10027d90
lea ecx, [ebp - 0x870]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0xc4]
mov dword [ebp - 0xc4], 0x1002e190
lea ecx, [edi + 0x8e4]
push eax
call fcn.100406b0
lea eax, [edi + 0x88c]
mov dword [ebp - 0xc8], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x8a4], 0
imul eax, dword [edi + 0x8a4], 0xeb
add eax, 0x14
mov dword [edi + 0x890], eax
mov dword [edi + 0x898], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x8a8], eax
lea eax, [ebp - 0xc8]
push eax
call fcn.100406b0
lea eax, [ebp - 0x39c]
mov dword [ebp - 0x39c], 0x656e6f6d
push eax
lea ecx, [ebp - 0xe58]
mov word [ebp - 0x398], 0x79
call fcn.10027de0
lea eax, [ebp - 0x394]
mov dword [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0xe40]
mov dword [ebp - 0x394], 0x6f6d7261
mov word [ebp - 0x390], 0x72
call fcn.10027de0
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp - 0xe28]
mov dword [ebp - 0x3c4], 0x706f6373
mov word [ebp - 0x3c0], 0x6465
mov byte [ebp - 0x3be], 0
call fcn.10027de0
lea eax, [ebp - 0x3d4]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0xe10]
mov dword [ebp - 0x3d4], 0x73616c66
mov dword [ebp - 0x3d0], 0x646568
call fcn.10027de0
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x408]
push eax
lea ecx, [ebp - 0xdf8]
mov dword [ebp - 0x408], 0x6f6c6572
mov dword [ebp - 0x404], 0x6e696461
mov word [ebp - 0x400], 0x67
call fcn.10027de0
lea eax, [ebp - 0x35c]
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0xde0]
mov dword [ebp - 0x35c], 0x626d6f62
mov byte [ebp - 0x358], 0
call fcn.10027de0
mov byte [ebp - 4], 0x21
xor ecx, ecx
mov dword [ebp - 0x2dc], 0x918d9b8c
mov dword [ebp - 0x2d8], 0x8c9b8892
mov dword [ebp - 0x2d4], 0x9a9193de
mov word [ebp - 0x2d0], 0xfe9b
nop
xor byte [ebp + ecx - 0x2dc], 0xfe
inc ecx
cmp ecx, 0xe
jb 0x10060cb0
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0xdc8]
call fcn.10027de0
lea eax, [ebp - 0x43d]
mov dword [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0xdb0]
push ecx
lea edx, [ebp - 0xe58]
push edx
lea ecx, [ebp - 0x47c]
call fcn.10097870
mov byte [ebp - 4], 0x23
xor ecx, ecx
mov dword [ebp - 0x24c], 0x999f9298
mov dword [ebp - 0x248], 0x909ba18d
mov dword [ebp - 0x244], 0xfe87939b
nop dword [eax + eax]
xor byte [ebp + ecx - 0x24c], 0xfe
inc ecx
cmp ecx, 0xc
jb 0x10060d20
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x8a0]
call fcn.10027de0
mov byte [ebp - 4], 0x24
xor ecx, ecx
mov dword [ebp - 0x2b4], 0x999f9298
mov dword [ebp - 0x2b0], 0x909bde8d
mov dword [ebp - 0x2ac], 0xfe87939b
xor byte [ebp + ecx - 0x2b4], 0xfe
inc ecx
cmp ecx, 0xc
jb 0x10060d64
lea eax, [ebp - 0x2b4]
push eax
lea ecx, [ebp - 0x888]
call fcn.10027de0
lea ecx, [ebp - 0x508]
call fcn.100292c0
lea eax, [ebp - 0x8a0]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [edi + 0x954]
call fcn.1002e730
lea eax, [ebp - 0x888]
mov byte [edi + 0x985], 1
push eax
lea ecx, [edi + 0x98c]
call fcn.1002e730
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x985], al
cmovne eax, ecx
mov dword [edi + 0x9c0], eax
add eax, 0x14
mov dword [edi + 0x92c], eax
mov dword [edi + 0x930], eax
mov eax, dword [ebp - 0x478]
mov esi, dword [ebp - 0x47c]
mov dword [ebp - 0x114], eax
cmp esi, eax
je 0x10060e2b
lea eax, [edi + 0x9a4]
mov edi, dword [ebp - 0x114]
mov dword [ebp - 0x10c], eax
nop dword [eax + eax]
push esi
mov ecx, eax
call fcn.1004b2b0
mov eax, dword [ebp - 0x10c]
add esi, 0x18
cmp esi, edi
jne 0x10060e10
mov edi, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x504]
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x108], ecx
mov dword [ebp - 0x114], eax
cmp eax, ecx
je 0x10060f0e
lea ecx, [edi + 0x9b4]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x54c]
push eax
call fcn.10026e20
lea ecx, [edi + 0x9b4]
mov esi, dword [eax]
lea eax, [ebp - 0x534]
push eax
call fcn.10026e30
push esi
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x530]
push dword [eax]
call fcn.10028f70
add esp, 8
lea ecx, [edi + 0x9b4]
mov esi, eax
lea eax, [ebp - 0x52c]
push eax
call fcn.10026e20
mov ecx, dword [edi + 0x9a8]
sub ecx, dword [edi + 0x9a4]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0x10c], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x20], eax
jae 0x10060ed9
lea eax, [ebp - 0x20]
push eax
lea ecx, [edi + 0x9b4]
call fcn.100406b0
cmp esi, dword [ebp - 0x10c]
jne 0x10060eed
mov eax, dword [edi + 0x980]
test eax, eax
je 0x10060eed
call eax
mov eax, dword [ebp - 0x114]
lea ecx, [edi + 0x9b4]
add eax, 4
mov dword [ebp - 0x114], eax
cmp eax, dword [ebp - 0x108]
jne 0x10060e51
lea ecx, [ebp - 0x508]
call fcn.10026f80
lea ecx, [ebp - 0x888]
call fcn.10027d90
lea ecx, [ebp - 0x8a0]
call fcn.10027d90
lea ecx, [ebp - 0x47c]
call fcn.1004aeb0
push fcn.10027d90
push 7
push 0x18
lea eax, [ebp - 0xe58]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100c2152
lea eax, [edi + 0x91c]
mov dword [ebp - 0xd4], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x934], 0
imul eax, dword [edi + 0x934], 0xeb
add eax, 0x14
mov dword [edi + 0x920], eax
mov dword [edi + 0x928], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x938], eax
lea eax, [ebp - 0xd4]
push eax
call fcn.100406b0
lea eax, [ebp - 0x3bc]
mov dword [ebp - 0x3bc], 0x70616577
push eax
lea ecx, [ebp - 0x8d0]
mov word [ebp - 0x3b8], 0x6e6f
lea esi, [edi + 0xa6c]
mov byte [ebp - 0x3b6], 0
call fcn.10027de0
mov dword [ebp - 4], 0x27
lea eax, [ebp - 0x3a4]
push eax
lea ecx, [ebp - 0x8b8]
mov dword [ebp - 0x3a4], 0x70616577
mov word [ebp - 0x3a0], 0x6e6f
mov byte [ebp - 0x39e], 0
call fcn.10027de0
lea eax, [ebp - 0x8d0]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [edi + 0xaa4]
call fcn.1002e730
lea eax, [ebp - 0x8b8]
mov byte [edi + 0xad5], 1
push eax
lea ecx, [edi + 0xadc]
call fcn.1002e730
lea ecx, [ebp - 0x8b8]
mov byte [edi + 0xad8], 0
call fcn.10027d90
lea ecx, [ebp - 0x8d0]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
mov dword [ebp - 0xd8], esi
lea ecx, [edi + 0x18]
mov dword [esi + 0x18], 0
imul eax, dword [esi + 0x18], 0xeb
add eax, 0x14
mov dword [esi + 4], eax
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0xd8]
push eax
call fcn.100406b0
lea eax, [ebp - 0x364]
mov dword [ebp - 0x364], 0x74786574
push eax
lea ecx, [ebp - 0xc78]
mov byte [ebp - 0x360], 0
call fcn.10027de0
lea eax, [ebp - 0x314]
mov dword [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0xc60]
mov dword [ebp - 0x314], 0x6e6f6369
mov byte [ebp - 0x310], 0
call fcn.10027de0
lea eax, [ebp - 0x439]
mov dword [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0xc48]
push ecx
lea edx, [ebp - 0xc78]
push edx
lea ecx, [ebp - 0x488]
call fcn.10097870
mov byte [ebp - 4], 0x2b
xor ecx, ecx
mov dword [ebp - 0x284], 0x8e9f9b89
mov dword [ebp - 0x280], 0x93a19091
mov dword [ebp - 0x27c], 0xfe9b9a91
nop word [eax + eax]
xor byte [ebp + ecx - 0x284], 0xfe
inc ecx
cmp ecx, 0xc
jb 0x10061130
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0x8e8]
call fcn.10027de0
push 0x100fd3bc
lea ecx, [ebp - 0xd08]
mov byte [ebp - 4], 0x2c
call fcn.10027de0
lea eax, [ebp - 0x8e8]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [edi + 0xb2c]
call fcn.1002e730
mov byte [edi + 0xb5d], 0
mov dword [edi + 0xb90], 0
mov dword [edi + 0xb04], 0x14
mov dword [edi + 0xb08], 0x14
mov eax, dword [ebp - 0x484]
mov esi, dword [ebp - 0x488]
mov dword [ebp - 0x108], eax
cmp esi, eax
je 0x100611e2
lea eax, [edi + 0xb7c]
mov edi, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
push esi
mov ecx, eax
call fcn.1004b2b0
mov eax, dword [ebp - 0x10c]
add esi, 0x18
cmp esi, edi
jne 0x100611c7
mov edi, dword [ebp - 0x110]
mov ecx, dword [edi + 0xb80]
mov eax, 0x2aaaaaab
sub ecx, dword [edi + 0xb7c]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1006120b
mov dword [edi + 0xb8c], 0
lea ecx, [ebp - 0xd08]
call fcn.10027d90
lea ecx, [ebp - 0x8e8]
call fcn.10027d90
lea ecx, [ebp - 0x488]
call fcn.1004aeb0
push fcn.10027d90
push 2
push 0x18
lea eax, [ebp - 0xc78]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100c2152
lea eax, [ebp - 0xdc]
mov dword [ebp - 0xdc], 0x1002e140
lea esi, [edi + 0xaf4]
lea ecx, [esi + 0x58]
push eax
call fcn.100406b0
mov dword [ebp - 0xe0], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0xb0c], 0
imul eax, dword [edi + 0xb0c], 0xeb
add eax, 0x14
mov dword [edi + 0xaf8], eax
mov dword [edi + 0xb00], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xb10], eax
lea eax, [ebp - 0xe0]
push eax
call fcn.100406b0
lea eax, [ebp - 0x31c]
mov dword [ebp - 0x31c], 0x6f6d6d61
push eax
lea ecx, [ebp - 0x918]
mov byte [ebp - 0x318], 0
lea esi, [edi + 0xb94]
call fcn.10027de0
lea eax, [ebp - 0x324]
mov dword [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x900]
mov dword [ebp - 0x324], 0x6f6d6d61
mov byte [ebp - 0x320], 0
call fcn.10027de0
lea eax, [ebp - 0x918]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [edi + 0xbcc]
call fcn.1002e730
lea eax, [ebp - 0x900]
mov byte [edi + 0xbfd], 1
push eax
lea ecx, [edi + 0xc04]
call fcn.1002e730
lea ecx, [ebp - 0x900]
mov byte [edi + 0xc00], 0
call fcn.10027d90
lea ecx, [ebp - 0x918]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
mov dword [ebp - 0xe4], esi
lea ecx, [edi + 0x18]
mov dword [esi + 0x18], 0
imul eax, dword [esi + 0x18], 0xeb
add eax, 0x14
mov dword [esi + 4], eax
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0xe4]
push eax
call fcn.100406b0
mov esi, dword [0x100fdecc]
xor ecx, ecx
mov dword [ebp - 0x21c], 0x9193939f
mov dword [ebp - 0x218], 0x92919da1
mov word [ebp - 0x214], 0x8c91
mov byte [ebp - 0x212], 0xfe
xor byte [ebp + ecx - 0x21c], 0xfe
inc ecx
cmp ecx, 0xb
jb 0x100613b4
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x948]
call fcn.10027de0
lea eax, [ebp - 0x36c]
mov dword [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x930]
mov dword [ebp - 0x36c], 0x6f6c6f63
mov word [ebp - 0x368], 0x72
call fcn.10027de0
lea eax, [ebp - 0x930]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [edi + 0xc8c]
call fcn.1002e730
lea eax, [ebp - 0x948]
push eax
lea ecx, [edi + 0xc54]
call fcn.1002e730
mov dword [edi + 0xca4], esi
lea ecx, [ebp - 0x930]
mov dword [edi + 0xca8], 0
call fcn.10027d90
lea ecx, [ebp - 0x948]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0xe8]
mov dword [ebp - 0xe8], 0x1002e1b0
lea esi, [edi + 0xc1c]
lea ecx, [esi + 0x58]
push eax
call fcn.100406b0
mov dword [ebp - 0xec], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0xc34], 0
imul eax, dword [edi + 0xc34], 0xeb
add eax, 0x14
mov dword [edi + 0xc20], eax
mov dword [edi + 0xc28], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xc38], eax
lea eax, [ebp - 0xec]
push eax
call fcn.100406b0
mov dword [ebp - 0x210], 0xa1879c92
xor ecx, ecx
mov dword [ebp - 0x20c], 0x9f9a8e8b
mov word [ebp - 0x208], 0x9b8a
mov byte [ebp - 0x206], 0xfe
nop
xor byte [ebp + ecx - 0x210], 0xfe
inc ecx
cmp ecx, 0xb
jb 0x100614e0
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x978]
call fcn.10027de0
mov dword [ebp - 4], 0x32
xor ecx, ecx
mov dword [ebp - 0x204], 0xde879c92
mov dword [ebp - 0x200], 0x9f9a8e8b
mov word [ebp - 0x1fc], 0x9b8a
mov byte [ebp - 0x1fa], 0xfe
nop dword [eax]
xor byte [ebp + ecx - 0x204], 0xfe
inc ecx
cmp ecx, 0xb
jb 0x10061530
lea eax, [ebp - 0x204]
push eax
lea ecx, [ebp - 0x960]
call fcn.10027de0
lea eax, [ebp - 0x978]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [edi + 0xce4]
call fcn.1002e730
lea eax, [ebp - 0x960]
mov byte [edi + 0xd15], 1
push eax
lea ecx, [edi + 0xd1c]
call fcn.1002e730
lea ecx, [ebp - 0x960]
mov byte [edi + 0xd18], 0
call fcn.10027d90
lea ecx, [ebp - 0x978]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [edi + 0xcac]
mov dword [ebp - 0xf0], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xcc4], 0
imul eax, dword [edi + 0xcc4], 0xeb
add eax, 0x14
mov dword [edi + 0xcb0], eax
mov dword [edi + 0xcb8], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xcc8], eax
lea eax, [ebp - 0xf0]
push eax
call fcn.100406b0
movaps xmm0, xmmword [0x10100ba0]
lea eax, [ebp - 0x580]
xorps xmm0, xmmword [0x10100030]
lea ecx, [ebp - 0x9a8]
mov esi, dword [0x100fdec4]
add edi, 0xd34
mov byte [ebp - 0x570], 0xfe
push eax
movups xmmword [ebp - 0x580], xmm0
mov byte [ebp - 0x570], 0
call fcn.10027de0
lea eax, [ebp - 0x374]
mov dword [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x990]
mov dword [ebp - 0x374], 0x6f6c6f63
mov word [ebp - 0x370], 0x72
call fcn.10027de0
mov ecx, dword [ebp - 0x110]
lea eax, [ebp - 0x990]
push eax
add ecx, 0xda4
mov byte [ebp - 4], 0x35
call fcn.1002e730
mov ecx, dword [ebp - 0x110]
lea eax, [ebp - 0x9a8]
push eax
lea ecx, [ecx + 0xd6c]
call fcn.1002e730
mov eax, dword [ebp - 0x110]
lea ecx, [ebp - 0x990]
mov dword [eax + 0xdbc], esi
mov dword [eax + 0xdc0], 0
call fcn.10027d90
lea ecx, [ebp - 0x9a8]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0xf4]
mov dword [ebp - 0xf4], 0x1002e1a0
lea ecx, [edi + 0x58]
push eax
call fcn.100406b0
mov dword [ebp - 0xf8], edi
mov edi, dword [ebp - 0x110]
mov dword [edi + 0xd4c], 0
imul eax, dword [edi + 0xd4c], 0xeb
lea ecx, [edi + 0x18]
add eax, 0x14
mov dword [edi + 0xd38], eax
mov dword [edi + 0xd40], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xd50], eax
lea eax, [ebp - 0xf8]
push eax
call fcn.100406b0
lea eax, [ebp - 0x37c]
mov dword [ebp - 0x37c], 0x6d656e65
push eax
lea ecx, [ebp - 0xdb0]
mov word [ebp - 0x378], 0x79
call fcn.10027de0
lea eax, [ebp - 0x384]
mov dword [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0xd98]
mov dword [ebp - 0x384], 0x61636f6c
mov word [ebp - 0x380], 0x6c
call fcn.10027de0
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0xd80]
mov dword [ebp - 0x420], 0x6b636162
mov dword [ebp - 0x41c], 0x63617274
mov word [ebp - 0x418], 0x6b
call fcn.10027de0
lea eax, [ebp - 0x43a]
mov dword [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0xd68]
push ecx
lea edx, [ebp - 0xdb0]
push edx
lea ecx, [ebp - 0x4f8]
call fcn.10097870
mov byte [ebp - 4], 0x39
xor ecx, ecx
mov dword [ebp - 0x2cc], 0x939f969d
mov dword [ebp - 0x2c8], 0x9b8da18d
mov dword [ebp - 0x2c4], 0x8a9d9b92
mov byte [ebp - 0x2c0], 0xfe
nop dword [eax]
xor byte [ebp + ecx - 0x2cc], 0xfe
inc ecx
cmp ecx, 0xd
jb 0x10061800
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0x9d8]
call fcn.10027de0
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x5c8]
movaps xmm0, xmmword [0x10100ba0]
lea ecx, [ebp - 0x9c0]
xorps xmm0, xmmword [0x10100ae0]
push eax
movups xmmword [ebp - 0x5c8], xmm0
call fcn.10027de0
lea eax, [ebp - 0x9d8]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [edi + 0xdfc]
call fcn.1002e730
lea eax, [ebp - 0x9c0]
mov byte [edi + 0xe2d], 1
push eax
lea ecx, [edi + 0xe34]
call fcn.1002e730
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0xe2d], al
cmovne eax, ecx
mov dword [edi + 0xe60], eax
add eax, 0x14
mov dword [edi + 0xdd4], eax
mov dword [edi + 0xdd8], eax
mov eax, dword [ebp - 0x4f4]
mov esi, dword [ebp - 0x4f8]
mov dword [ebp - 0x108], eax
cmp esi, eax
je 0x100618e2
lea eax, [edi + 0xe4c]
mov edi, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
push esi
mov ecx, eax
call fcn.1004b2b0
mov eax, dword [ebp - 0x10c]
add esi, 0x18
cmp esi, edi
jne 0x100618c7
mov edi, dword [ebp - 0x110]
mov ecx, dword [edi + 0xe50]
mov eax, 0x2aaaaaab
sub ecx, dword [edi + 0xe4c]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1006190b
mov dword [edi + 0xe5c], 0
lea ecx, [ebp - 0x9c0]
call fcn.10027d90
lea ecx, [ebp - 0x9d8]
call fcn.10027d90
lea ecx, [ebp - 0x4f8]
call fcn.1004aeb0
push fcn.10027d90
push 3
push 0x18
lea eax, [ebp - 0xdb0]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100c2152
lea eax, [edi + 0xdc4]
mov dword [ebp - 0xfc], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xddc], 1
imul eax, dword [edi + 0xddc], 0xeb
add eax, 0x14
mov dword [edi + 0xdc8], eax
mov dword [edi + 0xdd0], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xde0], eax
lea eax, [ebp - 0xfc]
push eax
call fcn.100406b0
lea eax, [ebp - 0x3cc]
mov dword [ebp - 0x3cc], 0x69736976
push eax
lea ecx, [ebp - 0xca8]
mov dword [ebp - 0x3c8], 0x656c62
call fcn.10027de0
mov dword [ebp - 4], 0x3c
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0xc90]
mov dword [ebp - 0x42c], 0x69766e69
mov dword [ebp - 0x428], 0x6c626973
mov word [ebp - 0x424], 0x65
call fcn.10027de0
lea eax, [ebp - 0x43b]
mov dword [ebp - 4], 0x3d
push eax
lea ecx, [ebp - 0xc78]
push ecx
lea edx, [ebp - 0xca8]
push edx
lea ecx, [ebp - 0x4a4]
call fcn.10097870
mov byte [ebp - 4], 0x3e
xor ecx, ecx
mov dword [ebp - 0x270], 0x939f969d
mov dword [ebp - 0x26c], 0x909ba18d
mov dword [ebp - 0x268], 0xfe87939b
nop word [eax + eax]
xor byte [ebp + ecx - 0x270], 0xfe
inc ecx
cmp ecx, 0xc
jb 0x10061a40
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0xa08]
call fcn.10027de0
mov byte [ebp - 4], 0x3f
xor ecx, ecx
mov dword [ebp - 0x290], 0x939f969d
mov dword [ebp - 0x28c], 0x909bde8d
mov dword [ebp - 0x288], 0xfe87939b
xor byte [ebp + ecx - 0x290], 0xfe
inc ecx
cmp ecx, 0xc
jb 0x10061a84
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x9f0]
call fcn.10027de0
lea ecx, [ebp - 0x498]
call fcn.100292c0
lea eax, [ebp - 0xa08]
mov byte [ebp - 4], 0x41
push eax
lea ecx, [edi + 0xe9c]
call fcn.1002e730
lea eax, [ebp - 0x9f0]
mov byte [edi + 0xecd], 1
push eax
lea ecx, [edi + 0xed4]
call fcn.1002e730
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0xecd], al
cmovne eax, ecx
mov dword [edi + 0xf08], eax
add eax, 0x14
mov dword [edi + 0xe74], eax
mov dword [edi + 0xe78], eax
mov eax, dword [ebp - 0x4a0]
mov esi, dword [ebp - 0x4a4]
mov dword [ebp - 0x108], eax
cmp esi, eax
je 0x10061b4b
lea eax, [edi + 0xeec]
mov edi, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
nop dword [eax + eax]
push esi
mov ecx, eax
call fcn.1004b2b0
mov eax, dword [ebp - 0x10c]
add esi, 0x18
cmp esi, edi
jne 0x10061b30
mov edi, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x114], eax
cmp eax, ecx
je 0x10061c2e
lea ecx, [edi + 0xefc]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x528]
push eax
call fcn.10026e20
lea ecx, [edi + 0xefc]
mov esi, dword [eax]
lea eax, [ebp - 0x524]
push eax
call fcn.10026e30
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x520]
push dword [eax]
call fcn.10028f70
add esp, 8
lea ecx, [edi + 0xefc]
mov esi, eax
lea eax, [ebp - 0x56c]
push eax
call fcn.10026e20
mov ecx, dword [edi + 0xef0]
sub ecx, dword [edi + 0xeec]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0x108], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x18], eax
jae 0x10061bf9
lea eax, [ebp - 0x18]
push eax
lea ecx, [edi + 0xefc]
call fcn.100406b0
cmp esi, dword [ebp - 0x108]
jne 0x10061c0d
mov eax, dword [edi + 0xec8]
test eax, eax
je 0x10061c0d
call eax
mov eax, dword [ebp - 0x114]
lea ecx, [edi + 0xefc]
add eax, 4
mov dword [ebp - 0x114], eax
cmp eax, dword [ebp - 0x10c]
jne 0x10061b71
lea ecx, [ebp - 0x498]
call fcn.10026f80
lea ecx, [ebp - 0x9f0]
call fcn.10027d90
lea ecx, [ebp - 0xa08]
call fcn.10027d90
lea ecx, [ebp - 0x4a4]
call fcn.1004aeb0
push fcn.10027d90
push 2
push 0x18
lea eax, [ebp - 0xca8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100c2152
lea eax, [ebp - 0x100]
mov dword [ebp - 0x100], 0x1002e160
lea esi, [edi + 0xe64]
lea ecx, [esi + 0x58]
push eax
call fcn.100406b0
mov dword [ebp - 0x28], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0xe7c], 1
imul eax, dword [edi + 0xe7c], 0xeb
add eax, 0x14
mov dword [edi + 0xe68], eax
mov dword [edi + 0xe70], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xe80], eax
lea eax, [ebp - 0x28]
push eax
call fcn.100406b0
movaps xmm0, xmmword [0x10100ba0]
lea eax, [ebp - 0x5d8]
xorps xmm0, xmmword [0x10100ac0]
lea ecx, [ebp - 0xa38]
push eax
movups xmmword [ebp - 0x5d8], xmm0
call fcn.10027de0
mov dword [ebp - 4], 0x42
xor ecx, ecx
mov dword [ebp - 0x2ec], 0x9192919d
mov dword [ebp - 0x2e8], 0x9788de8c
mov dword [ebp - 0x2e4], 0x929c978d
mov word [ebp - 0x2e0], 0xfe9b
nop dword [eax + eax]
xor byte [ebp + ecx - 0x2ec], 0xfe
inc ecx
cmp ecx, 0xe
jb 0x10061d30
lea eax, [ebp - 0x2ec]
push eax
lea ecx, [ebp - 0xa20]
call fcn.10027de0
lea eax, [ebp - 0xa20]
mov byte [ebp - 4], 0x43
push eax
lea ecx, [edi + 0xf7c]
mov dword [ebp - 0x2a0], 0xff3cc896
call fcn.1002e730
lea eax, [ebp - 0xa38]
push eax
lea ecx, [edi + 0xf44]
call fcn.1002e730
mov eax, dword [ebp - 0x2a0]
lea ecx, [ebp - 0xa20]
mov dword [edi + 0xf94], eax
mov dword [edi + 0xf98], 0
call fcn.10027d90
lea ecx, [ebp - 0xa38]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x1002e160
lea ecx, [edi + 0xf64]
push eax
call fcn.100406b0
lea eax, [edi + 0xf0c]
mov dword [ebp - 0x30], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xf24], 1
imul eax, dword [edi + 0xf24], 0xeb
add eax, 0x14
mov dword [edi + 0xf10], eax
mov dword [edi + 0xf18], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xf28], eax
lea eax, [ebp - 0x30]
push eax
call fcn.100406b0
movaps xmm0, xmmword [0x10100ba0]
mov ecx, 0x10
xorps xmm0, xmmword [0x10100240]
mov word [ebp - 0x50c], 0xfe8d
movups xmmword [ebp - 0x51c], xmm0
xor byte [ebp + ecx - 0x51c], 0xfe
inc ecx
cmp ecx, 0x12
jb 0x10061e33
lea eax, [ebp - 0x51c]
push eax
lea ecx, [ebp - 0xa68]
call fcn.10027de0
mov dword [ebp - 4], 0x44
lea eax, [ebp - 0x5e8]
movaps xmm0, xmmword [0x10100ba0]
lea ecx, [ebp - 0xa50]
xorps xmm0, xmmword [0x10100b30]
push eax
movups xmmword [ebp - 0x5e8], xmm0
call fcn.10027de0
lea eax, [ebp - 0xa50]
mov byte [ebp - 4], 0x45
push eax
lea ecx, [edi + 0x100c]
mov dword [ebp - 0x2a4], 0xffe1b43c
call fcn.1002e730
lea eax, [ebp - 0xa68]
push eax
lea ecx, [edi + 0xfd4]
call fcn.1002e730
mov eax, dword [ebp - 0x2a4]
lea ecx, [ebp - 0xa50]
mov dword [edi + 0x1024], eax
mov dword [edi + 0x1028], 0
call fcn.10027d90
lea ecx, [ebp - 0xa68]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x1002e160
lea ecx, [edi + 0xff4]
push eax
call fcn.100406b0
lea eax, [edi + 0xf9c]
mov dword [ebp - 0x38], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xfb4], 1
imul eax, dword [edi + 0xfb4], 0xeb
add eax, 0x14
mov dword [edi + 0xfa0], eax
mov dword [edi + 0xfa8], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xfb8], eax
lea eax, [ebp - 0x38]
push eax
call fcn.100406b0
lea eax, [ebp - 0x448]
mov dword [ebp - 0x448], 0x25
push eax
lea ecx, [ebp - 0xa98]
call fcn.10097d00
mov dword [ebp - 4], 0x46
mov ecx, 0x10
movaps xmm0, xmmword [0x10100ba0]
xorps xmm0, xmmword [0x10100140]
mov word [ebp - 0x4dc], 0xfe9a
movups xmmword [ebp - 0x4ec], xmm0
nop word [eax + eax]
xor byte [ebp + ecx - 0x4ec], 0xfe
inc ecx
cmp ecx, 0x12
jb 0x10061f90
lea eax, [ebp - 0x4ec]
push eax
lea ecx, [ebp - 0xa80]
call fcn.10027de0
push 0x100fd3bc
lea ecx, [ebp - 0xd20]
mov byte [ebp - 4], 0x47
call fcn.10027de0
lea eax, [ebp - 0xa80]
mov byte [ebp - 4], 0x48
push eax
lea ecx, [edi + 0x1064]
call fcn.1002e730
mov byte [edi + 0x1095], 0
lea eax, [ebp - 0xa98]
mov dword [edi + 0x10e4], 0
lea ecx, [edi + 0x10cc]
mov dword [edi + 0x103c], 8
mov dword [edi + 0x1040], 8
mov dword [edi + 0x10a0], 0x41200000
mov dword [edi + 0x10a4], 0x42c80000
mov dword [edi + 0x109c], 0x42c80000
mov dword [edi + 0x10b0], 0
push eax
mov dword [edi + 0x10a8], 0x3f800000
call fcn.10097cd0
lea ecx, [ebp - 0xd20]
call fcn.10027d90
lea ecx, [ebp - 0xa80]
call fcn.10027d90
lea ecx, [ebp - 0xa98]
mov dword [ebp - 4], 0xffffffff
call fcn.1004af30
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x1002e160
lea ecx, [edi + 0x1084]
push eax
call fcn.100406b0
lea eax, [edi + 0x102c]
mov dword [ebp - 0x40], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x1044], 1
imul eax, dword [edi + 0x1044], 0xeb
add eax, 0x14
mov dword [edi + 0x1030], eax
mov dword [edi + 0x1038], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x1048], eax
lea eax, [ebp - 0x40]
push eax
call fcn.100406b0
mov dword [ebp - 0x30c], 0x939f969d
xor ecx, ecx
mov dword [ebp - 0x308], 0x9796a18d
mov dword [ebp - 0x304], 0x8c918a8d
mov word [ebp - 0x300], 0xfe87
nop
xor byte [ebp + ecx - 0x30c], 0xfe
inc ecx
cmp ecx, 0xe
jb 0x100620f0
lea eax, [ebp - 0x30c]
push eax
lea ecx, [ebp - 0xac8]
call fcn.10027de0
mov dword [ebp - 4], 0x49
xor ecx, ecx
mov dword [ebp - 0x2fc], 0x939f969d
mov dword [ebp - 0x2f8], 0x9796de8d
mov dword [ebp - 0x2f4], 0x8c918a8d
mov word [ebp - 0x2f0], 0xfe87
xor byte [ebp + ecx - 0x2fc], 0xfe
inc ecx
cmp ecx, 0xe
jb 0x10062140
lea eax, [ebp - 0x2fc]
push eax
lea ecx, [ebp - 0xab0]
call fcn.10027de0
lea eax, [ebp - 0xac8]
mov byte [ebp - 4], 0x4a
push eax
lea ecx, [edi + 0x1120]
call fcn.1002e730
lea eax, [ebp - 0xab0]
mov byte [edi + 0x1151], 1
push eax
lea ecx, [edi + 0x1158]
call fcn.1002e730
lea ecx, [ebp - 0xab0]
mov byte [edi + 0x1154], 0
call fcn.10027d90
lea ecx, [ebp - 0xac8]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x9c], 0x1002e180
lea ecx, [edi + 0x1140]
push eax
call fcn.100406b0
lea eax, [edi + 0x10e8]
mov dword [ebp - 0x44], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x1100], 1
imul eax, dword [edi + 0x1100], 0xeb
add eax, 0x14
mov dword [edi + 0x10ec], eax
mov dword [edi + 0x10f4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x1104], eax
lea eax, [ebp - 0x44]
push eax
call fcn.100406b0
movaps xmm0, xmmword [0x10100ba0]
mov ecx, 0x10
xorps xmm0, xmmword [0x10100190]
mov word [ebp - 0x4c8], 0xfe92
movups xmmword [ebp - 0x4d8], xmm0
nop word [eax + eax]
xor byte [ebp + ecx - 0x4d8], 0xfe
inc ecx
cmp ecx, 0x12
jb 0x10062240
lea eax, [ebp - 0x4d8]
push eax
lea ecx, [ebp - 0xaf8]
call fcn.10027de0
lea eax, [ebp - 0x38c]
mov dword [ebp - 4], 0x4b
push eax
lea ecx, [ebp - 0xae0]
mov dword [ebp - 0x38c], 0x6f6c6f63
mov word [ebp - 0x388], 0x72
call fcn.10027de0
lea eax, [ebp - 0xae0]
mov byte [ebp - 4], 0x4c
push eax
lea ecx, [edi + 0x11e0]
mov dword [ebp - 0x2a8], 0xffc8ffff
call fcn.1002e730
lea eax, [ebp - 0xaf8]
push eax
lea ecx, [edi + 0x11a8]
call fcn.1002e730
mov eax, dword [ebp - 0x2a8]
lea ecx, [ebp - 0xae0]
mov dword [edi + 0x11f8], eax
mov dword [edi + 0x11fc], 0
call fcn.10027d90
lea ecx, [ebp - 0xaf8]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x1002e180
lea ecx, [edi + 0x11c8]
push eax
call fcn.100406b0
lea eax, [edi + 0x1170]
mov dword [ebp - 0x4c], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x1188], 1
imul eax, dword [edi + 0x1188], 0xeb
add eax, 0x14
mov dword [edi + 0x1174], eax
mov dword [edi + 0x117c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x118c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.100406b0
push 0x25
lea ecx, [ebp - 0x1ec]
call fcn.100989d0
push 0
lea ecx, [ebp - 0x1ec]
mov word [ebp - 0x1ec], ax
call fcn.100989d0
mov word [ebp - 0x1ea], ax
xor edi, edi
nop word [eax + eax]
push edi
lea ecx, [ebp - 0x1ec]
call fcn.10097840
mov ecx, 0xfe
push edi
xor cx, word [eax]
movzx esi, cx
lea ecx, [ebp - 0x1ec]
call fcn.10097840
inc edi
mov word [eax], si
cmp edi, 2
jb 0x10062380
lea ecx, [ebp - 0x1ec]
call fcn.10027070
push eax
lea ecx, [ebp - 0xb28]
call fcn.10097d00
push 0x63
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 4], 0x4d
call fcn.100294a0
push 0x68
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1b0], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1af], al
call fcn.100294a0
push 0x6d
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1ae], al
call fcn.100294a0
push 0x73
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1ad], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1ac], al
call fcn.100294a0
push 0x68
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1ab], al
call fcn.100294a0
push 0x69
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1aa], al
call fcn.100294a0
push 0x73
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1a9], al
call fcn.100294a0
push 0x74
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1a8], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1a7], al
call fcn.100294a0
push 0x72
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1a6], al
call fcn.100294a0
push 0x79
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1a5], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1a4], al
call fcn.100294a0
push 0x62
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1a3], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1a2], al
call fcn.100294a0
push 0x65
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1a1], al
call fcn.100294a0
push 0x6e
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x1a0], al
call fcn.100294a0
mov byte [ebp - 0x19f], al
lea ecx, [ebp - 0x1b0]
push 0x64
call fcn.100294a0
push 0
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x19e], al
call fcn.100294a0
mov edi, dword [ebp - 0x110]
xor esi, esi
mov byte [ebp - 0x19d], al
nop
push esi
lea ecx, [ebp - 0x1b0]
call fcn.10027080
push esi
lea ecx, [ebp - 0x1b0]
mov al, byte [eax]
xor al, 0xfe
mov byte [ebp - 0x101], al
call fcn.10027080
mov cl, byte [ebp - 0x101]
inc esi
mov byte [eax], cl
cmp esi, 0x14
jb 0x10062550
lea ecx, [ebp - 0x1b0]
call fcn.10027070
push eax
lea ecx, [ebp - 0xb10]
call fcn.10027de0
push 0x100fd3bc
lea ecx, [ebp - 0xd38]
mov byte [ebp - 4], 0x4e
call fcn.10027de0
lea eax, [ebp - 0xb10]
mov byte [ebp - 4], 0x4f
push eax
lea ecx, [edi + 0x1238]
call fcn.1002e730
mov byte [edi + 0x1269], 0
lea eax, [ebp - 0xb28]
mov dword [edi + 0x12b8], 0
lea ecx, [edi + 0x12a0]
mov dword [edi + 0x1210], 8
mov dword [edi + 0x1214], 8
mov dword [edi + 0x1274], 0x41200000
mov dword [edi + 0x1278], 0x42c80000
mov dword [edi + 0x1270], 0x42c80000
mov dword [edi + 0x1284], 0
push eax
mov dword [edi + 0x127c], 0x3f800000
call fcn.10097cd0
lea ecx, [ebp - 0xd38]
call fcn.10027d90
lea ecx, [ebp - 0xb10]
call fcn.10027d90
lea ecx, [ebp - 0xb28]
mov dword [ebp - 4], 0xffffffff
call fcn.1004ae80
lea eax, [ebp - 0x50]
mov dword [ebp - 0x50], 0x1002e180
lea esi, [edi + 0x1200]
lea ecx, [esi + 0x58]
push eax
call fcn.1003d810
mov dword [ebp - 0x54], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x1218], 1
imul eax, dword [edi + 0x1218], 0xeb
add eax, 0x14
mov dword [edi + 0x1204], eax
mov dword [edi + 0x120c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x121c], eax
lea eax, [ebp - 0x54]
push eax
call fcn.1003d810
lea ecx, [ebp - 0x43c]
call fcn.10027070
push 0x72
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x108], eax
call fcn.100294a0
push 0x65
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x124], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x123], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x122], al
call fcn.100294a0
push 0
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x121], al
call fcn.100294a0
mov byte [ebp - 0x120], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x124]
call fcn.10027080
push esi
lea ecx, [ebp - 0x124]
mov al, byte [eax]
xor al, 0xfe
mov byte [ebp - 0x101], al
call fcn.10027080
mov cl, byte [ebp - 0x101]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x10062720
lea ecx, [ebp - 0x124]
call fcn.10027070
push eax
lea ecx, [ebp - 0xcd8]
call fcn.10027de0
push 0x66
lea ecx, [ebp - 0x11c]
mov dword [ebp - 4], 0x50
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x11c]
mov byte [ebp - 0x11c], al
call fcn.100294a0
push 0x6b
lea ecx, [ebp - 0x11c]
mov byte [ebp - 0x11b], al
call fcn.100294a0
push 0x65
lea ecx, [ebp - 0x11c]
mov byte [ebp - 0x11a], al
call fcn.100294a0
push 0
lea ecx, [ebp - 0x11c]
mov byte [ebp - 0x119], al
call fcn.100294a0
mov byte [ebp - 0x118], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x11c]
call fcn.10027080
push esi
lea ecx, [ebp - 0x11c]
mov al, byte [eax]
xor al, 0xfe
mov byte [ebp - 0x101], al
call fcn.10027080
mov cl, byte [ebp - 0x101]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x100627d0
lea ecx, [ebp - 0x11c]
call fcn.10027070
push eax
lea ecx, [ebp - 0xcc0]
call fcn.10027de0
lea eax, [ebp - 0xca8]
mov dword [ebp - 4], 0x51
push eax
lea eax, [ebp - 0xcd8]
push eax
lea ecx, [ebp - 0x588]
call fcn.10097850
push dword [ebp - 0x108]
lea ecx, [ebp - 0x4c4]
push dword [eax + 4]
push dword [eax]
call fcn.10097870
push 0x63
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x52
call fcn.100294a0
push 0x68
lea ecx, [ebp - 0x144]
mov byte [ebp - 0x144], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x144]
mov byte [ebp - 0x143], al
call fcn.100294a0
push 0x6d
lea ecx, [ebp - 0x144]
mov byte [ebp - 0x142], al
call fcn.100294a0
push 0x73
lea ecx, [ebp - 0x144]
mov byte [ebp - 0x141], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x144]
mov byte [ebp - 0x140], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x144]
mov byte [ebp - 0x13f], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x144]
mov byte [ebp - 0x13e], al
call fcn.100294a0
push 0x63
lea ecx, [ebp - 0x144]
mov byte [ebp - 0x13d], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x144]
mov byte [ebp - 0x13c], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x144]
mov byte [ebp - 0x13b], al
call fcn.100294a0
push 0
lea ecx, [ebp - 0x144]
mov byte [ebp - 0x13a], al
call fcn.100294a0
mov byte [ebp - 0x139], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x144]
call fcn.10027080
push esi
lea ecx, [ebp - 0x144]
mov al, byte [eax]
xor al, 0xfe
mov byte [ebp - 0x101], al
call fcn.10027080
mov cl, byte [ebp - 0x101]
inc esi
mov byte [eax], cl
cmp esi, 0xc
jb 0x10062940
lea ecx, [ebp - 0x144]
call fcn.10027070
push eax
lea ecx, [ebp - 0xb58]
call fcn.10027de0
push 0x63
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x53
call fcn.100294a0
push 0x68
lea ecx, [ebp - 0x150]
mov byte [ebp - 0x150], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x150]
mov byte [ebp - 0x14f], al
call fcn.100294a0
push 0x6d
lea ecx, [ebp - 0x150]
mov byte [ebp - 0x14e], al
call fcn.100294a0
push 0x73
lea ecx, [ebp - 0x150]
mov byte [ebp - 0x14d], al
call fcn.100294a0
push 0x20
lea ecx, [ebp - 0x150]
mov byte [ebp - 0x14c], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x150]
mov byte [ebp - 0x14b], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x150]
mov byte [ebp - 0x14a], al
call fcn.100294a0
push 0x63
lea ecx, [ebp - 0x150]
mov byte [ebp - 0x149], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x150]
mov byte [ebp - 0x148], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x150]
mov byte [ebp - 0x147], al
call fcn.100294a0
push 0
lea ecx, [ebp - 0x150]
mov byte [ebp - 0x146], al
call fcn.100294a0
mov byte [ebp - 0x145], al
xor esi, esi
push esi
lea ecx, [ebp - 0x150]
call fcn.10027080
push esi
lea ecx, [ebp - 0x150]
mov al, byte [eax]
xor al, 0xfe
mov byte [ebp - 0x101], al
call fcn.10027080
mov cl, byte [ebp - 0x101]
inc esi
mov byte [eax], cl
cmp esi, 0xc
jb 0x10062a71
lea ecx, [ebp - 0x150]
call fcn.10027070
push eax
lea ecx, [ebp - 0xb40]
call fcn.10027de0
lea ecx, [ebp - 0x4b8]
call fcn.100292c0
lea eax, [ebp - 0xb58]
mov byte [ebp - 4], 0x55
push eax
lea ecx, [edi + 0x1578]
call fcn.1002e730
lea eax, [ebp - 0xb40]
mov byte [edi + 0x15a9], 1
push eax
lea ecx, [edi + 0x15b0]
call fcn.1002e730
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x15a9], al
cmovne eax, ecx
lea ecx, [ebp - 0x4c4]
mov dword [edi + 0x15e4], eax
add eax, 0x14
mov dword [edi + 0x1550], eax
mov dword [edi + 0x1554], eax
call fcn.10026e10
lea ecx, [ebp - 0x4c4]
mov esi, eax
call fcn.10026e00
mov dword [ebp - 0x108], eax
cmp esi, eax
je 0x10062b6b
lea eax, [edi + 0x15c8]
mov edi, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
nop dword [eax + eax]
push esi
mov ecx, eax
call fcn.1004abd0
mov eax, dword [ebp - 0x10c]
add esi, 0x18
cmp esi, edi
jne 0x10062b50
mov edi, dword [ebp - 0x110]
lea ecx, [ebp - 0x4b8]
call fcn.10026e10
mov esi, eax
lea ecx, [ebp - 0x4b8]
mov dword [ebp - 0x114], esi
call fcn.10026e00
mov dword [ebp - 0x108], eax
cmp esi, eax
je 0x10062c50
lea ecx, [edi + 0x15d8]
nop dword [eax]
mov eax, dword [esi]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x554]
push eax
call fcn.10026e20
lea ecx, [edi + 0x15d8]
mov esi, dword [eax]
lea eax, [ebp - 0x550]
push eax
call fcn.10026e30
push esi
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x540]
push dword [eax]
call fcn.10028f70
add esp, 8
lea ecx, [edi + 0x15d8]
mov esi, eax
lea eax, [ebp - 0x568]
push eax
call fcn.10026e20
push eax
mov ecx, esi
call fcn.10026de0
lea ecx, [edi + 0x15c8]
mov byte [ebp - 0x101], al
call fcn.1002e520
cmp dword [ebp - 0x1c], eax
jae 0x10062c1a
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x15d8]
call fcn.1003d810
cmp byte [ebp - 0x101], 0
je 0x10062c2f
mov eax, dword [edi + 0x15a4]
test eax, eax
je 0x10062c2f
call eax
mov esi, dword [ebp - 0x114]
lea ecx, [edi + 0x15d8]
add esi, 4
mov dword [ebp - 0x114], esi
cmp esi, dword [ebp - 0x108]
jne 0x10062ba0
lea ecx, [ebp - 0x4b8]
call fcn.10026e40
lea ecx, [ebp - 0xb40]
call fcn.10027d90
lea ecx, [ebp - 0xb58]
call fcn.10027d90
lea ecx, [ebp - 0x4c4]
call fcn.1004ac00
push fcn.10027d90
push 2
push 0x18
lea eax, [ebp - 0xcd8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100c2152
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0x1002e170
lea ecx, [edi + 0x1598]
push eax
call fcn.1003d810
lea eax, [edi + 0x1540]
mov dword [ebp - 0x60], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x1558], 1
imul eax, dword [edi + 0x1558], 0xeb
add eax, 0x14
mov dword [edi + 0x1544], eax
mov dword [edi + 0x154c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x155c], eax
lea eax, [ebp - 0x60]
push eax
call fcn.1003d810
push 0x63
lea ecx, [ebp - 0x160]
call fcn.100294a0
push 0x68
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x160], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x15f], al
call fcn.100294a0
push 0x6d
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x15e], al
call fcn.100294a0
push 0x73
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x15d], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x15c], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x15b], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x15a], al
call fcn.100294a0
push 0x63
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x159], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x158], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x157], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x156], al
call fcn.100294a0
mov byte [ebp - 0x155], al
push 0x63
lea ecx, [ebp - 0x160]
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x154], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x153], al
call fcn.100294a0
push 0
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x152], al
call fcn.100294a0
mov byte [ebp - 0x151], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x160]
call fcn.10027080
push esi
lea ecx, [ebp - 0x160]
mov al, byte [eax]
xor al, 0xfe
mov byte [ebp - 0x101], al
call fcn.10027080
mov cl, byte [ebp - 0x101]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x10062e30
lea ecx, [ebp - 0x160]
call fcn.10027070
push eax
lea ecx, [ebp - 0xb88]
call fcn.10027de0
push 0x63
lea ecx, [ebp - 0x12c]
mov dword [ebp - 4], 0x56
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x12c]
mov byte [ebp - 0x12c], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x12c]
mov byte [ebp - 0x12b], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x12c]
mov byte [ebp - 0x12a], al
call fcn.100294a0
push 0x72
lea ecx, [ebp - 0x12c]
mov byte [ebp - 0x129], al
call fcn.100294a0
push 0
lea ecx, [ebp - 0x12c]
mov byte [ebp - 0x128], al
call fcn.100294a0
mov byte [ebp - 0x127], al
xor esi, esi
push esi
lea ecx, [ebp - 0x12c]
call fcn.10027080
push esi
lea ecx, [ebp - 0x12c]
mov al, byte [eax]
xor al, 0xfe
mov byte [ebp - 0x101], al
call fcn.10027080
mov cl, byte [ebp - 0x101]
inc esi
mov byte [eax], cl
cmp esi, 6
jb 0x10062ef2
lea ecx, [ebp - 0x12c]
call fcn.10027070
push eax
lea ecx, [ebp - 0xb70]
call fcn.10027de0
lea eax, [ebp - 0xb70]
mov byte [ebp - 4], 0x57
push eax
lea ecx, [edi + 0x1658]
mov dword [ebp - 0x2bc], 0xffc8ffff
call fcn.1002e730
lea eax, [ebp - 0xb88]
push eax
lea ecx, [edi + 0x1620]
call fcn.1002e730
mov eax, dword [ebp - 0x2bc]
lea ecx, [ebp - 0xb70]
mov dword [edi + 0x1670], eax
mov dword [edi + 0x1674], 0
call fcn.10027d90
lea ecx, [ebp - 0xb88]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0x64]
mov dword [ebp - 0x64], 0x1002e170
lea ecx, [edi + 0x1640]
push eax
call fcn.1003d810
lea eax, [edi + 0x15e8]
mov dword [ebp - 0x68], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x1600], 1
imul eax, dword [edi + 0x1600], 0xeb
add eax, 0x14
mov dword [edi + 0x15ec], eax
mov dword [edi + 0x15f4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x1604], eax
lea eax, [ebp - 0x68]
push eax
call fcn.1003d810
push 0x25
lea ecx, [ebp - 0x1e4]
call fcn.100989d0
push 0
lea ecx, [ebp - 0x1e4]
mov word [ebp - 0x1e4], ax
call fcn.100989d0
mov word [ebp - 0x1e2], ax
xor edi, edi
push edi
lea ecx, [ebp - 0x1e4]
call fcn.10097840
push edi
lea ecx, [ebp - 0x1e4]
movzx eax, word [eax]
xor eax, 0xfe
movzx esi, ax
call fcn.10097840
inc edi
mov word [eax], si
cmp edi, 2
jb 0x10063023
lea ecx, [ebp - 0x1e4]
call fcn.10027070
push eax
lea ecx, [ebp - 0xbb8]
call fcn.10097d00
push 0x63
lea ecx, [ebp - 0x174]
mov dword [ebp - 4], 0x58
call fcn.100294a0
push 0x68
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x174], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x173], al
call fcn.100294a0
push 0x6d
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x172], al
call fcn.100294a0
push 0x73
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x171], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x170], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x16f], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x16e], al
call fcn.100294a0
push 0x63
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x16d], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x16c], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x16b], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x16a], al
call fcn.100294a0
push 0x62
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x169], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x168], al
call fcn.100294a0
push 0x65
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x167], al
call fcn.100294a0
push 0x6e
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x166], al
call fcn.100294a0
push 0x64
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x165], al
call fcn.100294a0
push 0
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x164], al
call fcn.100294a0
mov edi, dword [ebp - 0x110]
xor esi, esi
mov byte [ebp - 0x163], al
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x174]
call fcn.10027080
push esi
lea ecx, [ebp - 0x174]
mov al, byte [eax]
xor al, 0xfe
mov byte [ebp - 0x101], al
call fcn.10027080
mov cl, byte [ebp - 0x101]
inc esi
mov byte [eax], cl
cmp esi, 0x12
jb 0x100631d0
lea ecx, [ebp - 0x174]
call fcn.10027070
push eax
lea ecx, [ebp - 0xba0]
call fcn.10027de0
push 0x100fd3bc
lea ecx, [ebp - 0xd50]
mov byte [ebp - 4], 0x59
call fcn.10027de0
lea eax, [ebp - 0xba0]
mov byte [ebp - 4], 0x5a
push eax
lea ecx, [edi + 0x16b0]
call fcn.1002e730
mov byte [edi + 0x16e1], 0
lea eax, [ebp - 0xbb8]
mov dword [edi + 0x1730], 0
lea ecx, [edi + 0x1718]
mov dword [edi + 0x1688], 8
mov dword [edi + 0x168c], 8
mov dword [edi + 0x16ec], 0x41200000
mov dword [edi + 0x16f0], 0x42c80000
mov dword [edi + 0x16e8], 0x42c80000
mov dword [edi + 0x16fc], 0
push eax
mov dword [edi + 0x16f4], 0x3f800000
call fcn.10097cd0
lea ecx, [ebp - 0xd50]
call fcn.10027d90
lea ecx, [ebp - 0xba0]
call fcn.10027d90
lea ecx, [ebp - 0xbb8]
mov dword [ebp - 4], 0xffffffff
call fcn.1004ae80
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0x1002e170
lea ecx, [edi + 0x16d0]
push eax
call fcn.1003d810
lea eax, [edi + 0x1678]
mov dword [ebp - 0x70], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x1690], 1
imul eax, dword [edi + 0x1690], 0xeb
add eax, 0x14
mov dword [edi + 0x167c], eax
mov dword [edi + 0x1684], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x1694], eax
lea eax, [ebp - 0x70]
push eax
call fcn.1003d810
push 0x63
lea ecx, [ebp - 0x1c8]
call fcn.100294a0
push 0x68
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c8], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c7], al
call fcn.100294a0
push 0x6d
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c6], al
call fcn.100294a0
push 0x73
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c5], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c4], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c3], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c2], al
call fcn.100294a0
push 0x63
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c1], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c0], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1bf], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1be], al
call fcn.100294a0
push 0x67
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1bd], al
call fcn.100294a0
push 0x68
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1bc], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1bb], al
call fcn.100294a0
push 0x73
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1ba], al
call fcn.100294a0
push 0x74
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1b9], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1b8], al
call fcn.100294a0
push 0x63
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1b7], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1b6], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1b5], al
call fcn.100294a0
push 0
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1b4], al
call fcn.100294a0
mov byte [ebp - 0x1b3], al
xor esi, esi
push esi
lea ecx, [ebp - 0x1c8]
call fcn.10027080
push esi
lea ecx, [ebp - 0x1c8]
mov al, byte [eax]
xor al, 0xfe
mov byte [ebp - 0x101], al
call fcn.10027080
mov cl, byte [ebp - 0x101]
inc esi
mov byte [eax], cl
cmp esi, 0x16
jb 0x100634d1
lea ecx, [ebp - 0x1c8]
call fcn.10027070
push eax
lea ecx, [ebp - 0xbe8]
call fcn.10027de0
push 0x66
lea ecx, [ebp - 0x138]
mov dword [ebp - 4], 0x5b
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x138]
mov byte [ebp - 0x138], al
call fcn.100294a0
push 0x6b
lea ecx, [ebp - 0x138]
mov byte [ebp - 0x137], al
call fcn.100294a0
push 0x65
lea ecx, [ebp - 0x138]
mov byte [ebp - 0x136], al
call fcn.100294a0
push 0x20
lea ecx, [ebp - 0x138]
mov byte [ebp - 0x135], al
call fcn.100294a0
push 0x63
lea ecx, [ebp - 0x138]
mov byte [ebp - 0x134], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x138]
mov byte [ebp - 0x133], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x138]
mov byte [ebp - 0x132], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x138]
mov byte [ebp - 0x131], al
call fcn.100294a0
push 0x72
lea ecx, [ebp - 0x138]
mov byte [ebp - 0x130], al
call fcn.100294a0
push 0
lea ecx, [ebp - 0x138]
mov byte [ebp - 0x12f], al
call fcn.100294a0
mov byte [ebp - 0x12e], al
xor esi, esi
push esi
lea ecx, [ebp - 0x138]
call fcn.10027080
push esi
lea ecx, [ebp - 0x138]
mov al, byte [eax]
xor al, 0xfe
mov byte [ebp - 0x101], al
call fcn.10027080
mov cl, byte [ebp - 0x101]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x100635f2
lea ecx, [ebp - 0x138]
call fcn.10027070
push eax
lea ecx, [ebp - 0xbd0]
call fcn.10027de0
lea eax, [ebp - 0xbd0]
mov byte [ebp - 4], 0x5c
push eax
lea ecx, [edi + 0x17a4]
mov dword [ebp - 0x2b8], 0xffc8ffff
call fcn.1002e730
lea eax, [ebp - 0xbe8]
push eax
lea ecx, [edi + 0x176c]
call fcn.1002e730
mov eax, dword [ebp - 0x2b8]
lea ecx, [ebp - 0xbd0]
mov dword [edi + 0x17bc], eax
mov dword [edi + 0x17c0], 0
call fcn.10027d90
lea ecx, [ebp - 0xbe8]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0x74]
mov dword [ebp - 0x74], 0x1002e170
lea ecx, [edi + 0x178c]
push eax
call fcn.1003d810
lea eax, [edi + 0x1734]
mov dword [ebp - 0x78], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x174c], 1
imul eax, dword [edi + 0x174c], 0xeb
add eax, 0x14
mov dword [edi + 0x1738], eax
mov dword [edi + 0x1740], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x1750], eax
lea eax, [ebp - 0x78]
push eax
call fcn.1003d810
push 0x25
lea ecx, [ebp - 0x1e8]
call fcn.100989d0
push 0
lea ecx, [ebp - 0x1e8]
mov word [ebp - 0x1e8], ax
call fcn.100989d0
mov word [ebp - 0x1e6], ax
xor edi, edi
push edi
lea ecx, [ebp - 0x1e8]
call fcn.10097840
push edi
lea ecx, [ebp - 0x1e8]
movzx eax, word [eax]
xor eax, 0xfe
movzx esi, ax
call fcn.10097840
inc edi
mov word [eax], si
cmp edi, 2
jb 0x10063723
lea ecx, [ebp - 0x1e8]
call fcn.10027070
push eax
lea ecx, [ebp - 0xc18]
call fcn.10097d00
push 0x63
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 4], 0x5d
call fcn.100294a0
push 0x68
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1e0], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1df], al
call fcn.100294a0
push 0x6d
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1de], al
call fcn.100294a0
push 0x73
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1dd], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1dc], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1db], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1da], al
call fcn.100294a0
push 0x63
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1d9], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1d8], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1d7], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1d6], al
call fcn.100294a0
push 0x67
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1d5], al
call fcn.100294a0
push 0x68
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1d4], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1d3], al
call fcn.100294a0
push 0x73
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1d2], al
call fcn.100294a0
push 0x74
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1d1], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1d0], al
call fcn.100294a0
mov byte [ebp - 0x1cf], al
lea ecx, [ebp - 0x1e0]
push 0x62
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1ce], al
call fcn.100294a0
push 0x65
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1cd], al
call fcn.100294a0
push 0x6e
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1cc], al
call fcn.100294a0
push 0x64
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1cb], al
call fcn.100294a0
push 0
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x1ca], al
call fcn.100294a0
mov edi, dword [ebp - 0x110]
xor esi, esi
mov byte [ebp - 0x1c9], al
nop dword [eax]
push esi
lea ecx, [ebp - 0x1e0]
call fcn.10027080
push esi
lea ecx, [ebp - 0x1e0]
mov al, byte [eax]
xor al, 0xfe
mov byte [ebp - 0x101], al
call fcn.10027080
mov cl, byte [ebp - 0x101]
inc esi
mov byte [eax], cl
cmp esi, 0x18
jb 0x10063940
lea ecx, [ebp - 0x1e0]
call fcn.10027070
push eax
lea ecx, [ebp - 0xc00]
call fcn.10027de0
push 0x100fd3bc
lea ecx, [ebp - 0xd68]
mov byte [ebp - 4], 0x5e
call fcn.10027de0
lea eax, [ebp - 0xc00]
mov byte [ebp - 4], 0x5f
push eax
lea ecx, [edi + 0x17fc]
call fcn.1002e730
mov byte [edi + 0x182d], 0
lea eax, [ebp - 0xc18]
mov dword [edi + 0x187c], 0
lea ecx, [edi + 0x1864]
mov dword [edi + 0x17d4], 8
mov dword [edi + 0x17d8], 8
mov dword [edi + 0x1838], 0x41200000
mov dword [edi + 0x183c], 0x42c80000
mov dword [edi + 0x1834], 0x42c80000
mov dword [edi + 0x1848], 0
push eax
mov dword [edi + 0x1840], 0x3f800000
call fcn.10097cd0
lea ecx, [ebp - 0xd68]
call fcn.10027d90
lea ecx, [ebp - 0xc00]
call fcn.10027d90
lea ecx, [ebp - 0xc18]
mov dword [ebp - 4], 0xffffffff
call fcn.1004ae80
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x7c], 0x1002e170
lea ecx, [edi + 0x181c]
push eax
call fcn.1003d810
lea eax, [edi + 0x17c4]
mov dword [ebp - 0x80], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x17dc], 1
imul eax, dword [edi + 0x17dc], 0xeb
add eax, 0x14
mov dword [edi + 0x17c8], eax
mov dword [edi + 0x17d0], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x17e0], eax
lea eax, [ebp - 0x80]
push eax
call fcn.1003d810
push 0x63
lea ecx, [ebp - 0x188]
call fcn.100294a0
push 0x68
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x188], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x187], al
call fcn.100294a0
push 0x6d
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x186], al
call fcn.100294a0
push 0x73
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x185], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x184], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x183], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x182], al
call fcn.100294a0
push 0x63
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x181], al
call fcn.100294a0
push 0x61
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x180], al
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x17f], al
call fcn.100294a0
push 0x5f
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x17e], al
call fcn.100294a0
push 0x73
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x17d], al
call fcn.100294a0
push 0x63
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x17c], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x17b], al
call fcn.100294a0
push 0x70
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x17a], al
call fcn.100294a0
push 0x65
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x179], al
call fcn.100294a0
push 0
lea ecx, [ebp - 0x188]
mov byte [ebp - 0x178], al
call fcn.100294a0
mov byte [ebp - 0x177], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x188]
call fcn.10027080
push esi
lea ecx, [ebp - 0x188]
mov al, byte [eax]
xor al, 0xfe
mov byte [ebp - 0x101], al
call fcn.10027080
mov cl, byte [ebp - 0x101]
inc esi
mov byte [eax], cl
cmp esi, 0x12
jb 0x10063c00
lea ecx, [ebp - 0x188]
call fcn.10027070
push eax
lea ecx, [ebp - 0xc48]
call fcn.10027de0
push 0x62
lea ecx, [ebp - 0x19c]
mov dword [ebp - 4], 0x60
call fcn.100294a0
push 0x6c
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x19c], al
call fcn.100294a0
push 0x65
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x19b], al
call fcn.100294a0
push 0x6e
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x19a], al
call fcn.100294a0
push 0x64
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x199], al
call fcn.100294a0
push 0x20
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x198], al
call fcn.100294a0
push 0x77
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x197], al
call fcn.100294a0
push 0x68
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x196], al
call fcn.100294a0
push 0x65
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x195], al
call fcn.100294a0
push 0x6e
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x194], al
call fcn.100294a0
push 0x20
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x193], al
call fcn.100294a0
push 0x73
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x192], al
call fcn.100294a0
push 0x63
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x191], al
call fcn.100294a0
push 0x6f
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x190], al
call fcn.100294a0
push 0x70
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x18f], al
call fcn.100294a0
push 0x65
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x18e], al
call fcn.100294a0
push 0x64
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x18d], al
call fcn.100294a0
push 0
lea ecx, [ebp - 0x19c]
mov byte [ebp - 0x18c], al
call fcn.100294a0
mov byte [ebp - 0x18b], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x19c]
call fcn.10027080
push esi
lea ecx, [ebp - 0x19c]
mov al, byte [eax]
xor al, 0xfe
mov byte [ebp - 0x101], al
call fcn.10027080
mov cl, byte [ebp - 0x101]
inc esi
mov byte [eax], cl
cmp esi, 0x12
jb 0x10063db0
lea ecx, [ebp - 0x19c]
call fcn.10027070
push eax
lea ecx, [ebp - 0xc30]
call fcn.10027de0
lea eax, [ebp - 0xc48]
mov byte [ebp - 4], 0x61
push eax
lea ecx, [edi + 0x18b8]
call fcn.1002e730
lea eax, [ebp - 0xc30]
mov byte [edi + 0x18e9], 1
push eax
lea ecx, [edi + 0x18f0]
call fcn.1002e730
lea ecx, [ebp - 0xc30]
mov byte [edi + 0x18ec], 0
call fcn.10027d90
lea ecx, [ebp - 0xc48]
mov dword [ebp - 4], 0xffffffff
call fcn.10027d90
lea eax, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0x1002e170
push eax
lea ecx, [edi + 0x18d8]
call fcn.1003d810
lea eax, [edi + 0x1880]
mov dword [ebp - 0xd0], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x1898], 1
imul eax, dword [edi + 0x1898], 0xeb
add eax, 0x14
mov dword [edi + 0x1884], eax
mov dword [edi + 0x188c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x189c], eax
lea eax, [ebp - 0xd0]
push eax
call fcn.1003d810
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100c2101
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret