Function at 0xb8e17f
Capabilities:
Authenticate hmac
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18c
mov eax, dword [ebp + 8]
push ebx
xor ebx, ebx
mov dword [ebp - 0x13c], ecx
mov ecx, dword [ecx]
push esi
mov esi, dword [eax]
mov eax, ecx
and eax, 0x800
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x5c], eax
push edi
push ebx
pop eax
setne al
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x7c], eax
mov eax, ecx
shr eax, 9
and eax, 1
mov dword [ebp - 0x154], edx
mov edx, dword [edx]
mov dword [ebp - 0xec], eax
xor eax, 1
and ecx, dword [ebp - 0xc]
mov dword [ebp - 0xf0], eax
push 0xfffffffffffffffe
pop eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x58], eax
mov eax, ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 8], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 4], esi
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], 0xff
mov dword [ebp - 0x12c], 0xfc00
mov dword [ebp - 0x130], 0xdc00
mov dword [ebp - 0x158], 0x2b
mov dword [ebp - 0x144], 0x7b
mov dword [ebp - 0x138], 0x3a
mov dword [ebp - 0x134], 0x21
mov dword [ebp - 0x128], 0x87
mov dword [ebp - 0x90], 0x30
mov dword [ebp - 0xc0], 0x39
mov dword [ebp - 0xe4], 0x3c
mov dword [ebp - 0x140], 0x27
mov dword [ebp - 0x11c], 0x20
mov dword [ebp - 0x15c], 0x1d
mov dword [ebp - 0xe8], 0x1e
mov dword [ebp - 0x118], 0x1f
mov dword [ebp - 0x120], 0xa
mov dword [ebp - 0x124], 0x82
mov dword [ebp - 0x150], 0x5d
jmp 0xb8e472
mov eax, ebx
sub eax, 0x5b
je 0xb8e877
sub eax, 1
je 0xb8ee8c
sub eax, 1
je 0xbccff6
sub eax, 1
je 0xbccfcb
sub eax, 0x1d
je 0xbcc375
sub eax, 1
je 0xb8e65e
cmp dword [ebp - 0x5c], 0
mov ecx, dword [ebp - 0xc]
mov edi, ecx
mov word [ebp - 0x114], bx
je 0xb8e361
mov eax, 0xfc00
and ebx, eax
mov eax, 0xd800
cmp ebx, eax
je 0xbcd01c
push 2
pop esi
mov ebx, dword [ebp + 0x28]
mov dword [ebp - 0x18], edx
mov eax, dword [ebx + 0x20]
sub eax, dword [ebx + 0x10]
sar eax, 1
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
je 0xb8e3d3
test cl, al
je 0xb8e3d3
movzx ecx, word [ebp - 0x114]
mov edx, 0xfc00
mov eax, ecx
and eax, edx
mov edx, 0xd800
cmp eax, edx
je 0xbce2bd
mov eax, ecx
mov ecx, 0x80
cdq
idiv ecx
movzx eax, byte [eax + 0xc2fb40]
shl eax, 7
add eax, edx
mov edx, dword [ebp - 8]
movzx eax, word [eax*2 + 0xc21840]
movzx eax, byte [eax*8 + 0xc1efe3]
test eax, eax
jne 0xb8e84d
mov eax, dword [ebp - 0x2c]
and eax, dword [ebp - 0xc]
push 0x1d
pop ecx
add eax, ecx
mov word [edx], ax
add edx, esi
xor eax, eax
mov dword [ebp - 8], edx
mov ecx, eax
test edi, edi
je 0xb8e400
mov ax, word [ebp + ecx*2 - 0x114]
mov word [edx], ax
add edx, esi
inc ecx
cmp ecx, edi
jb 0xb8e3eb
mov dword [ebp - 8], edx
mov ax, word [ebp - 0x114]
push 0xd
pop ecx
cmp ax, cx
je 0xbce2e9
push 0xa
pop ecx
cmp ax, cx
je 0xbce2e9
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xfffffffe
je 0xb8ef9a
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x70], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x68], eax
cmp edi, dword [ebp - 0xc]
jne 0xbce31e
movzx eax, word [edx - 2]
mov dword [ebp - 0x60], eax
mov eax, dword [ebx + 0x68]
or eax, ecx
mov dword [ebp - 0x54], eax
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 8]
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
mov eax, dword [ebp - 0x50]
movzx ebx, word [esi]
mov dword [ebp - 0x10], ebx
test ebx, ebx
je 0xb8e6c8
cmp dword [ebp + 0x2c], 0
mov edi, dword [ebp + 0x28]
mov ecx, dword [edi + 0x3c]
mov eax, dword [edi + 0x10]
lea ecx, [eax + ecx*2]
je 0xb8e650
lea eax, [ecx - 0xc8]
cmp edx, eax
ja 0xbce48e
mov eax, dword [ebp - 0xbc]
cmp edx, eax
jb 0xbcb545
mov ecx, edx
sub ecx, eax
mov eax, dword [ebp + 0x2c]
sar ecx, 1
mov edx, dword [eax]
mov eax, 0x7fffffeb
sub eax, edx
cmp eax, ecx
jl 0xbce480
lea eax, [edx + ecx]
mov ecx, dword [ebp + 0x2c]
mov edx, dword [ebp - 0x18]
mov dword [ecx], eax
test edx, edx
je 0xb8e6ba
mov ecx, dword [ebp - 0xb0]
cmp edx, ecx
jbe 0xb8e519
mov esi, dword [ebp - 8]
mov eax, esi
sub eax, edx
and eax, 0xfffffffe
push eax
push edx
push ecx
call fcn.00b94760
mov edx, dword [ebp - 0x18]
add esp, 0xc
mov ecx, dword [ebp - 0xb0]
sub edx, ecx
sar edx, 1
neg edx
mov dword [ebp - 0x18], ecx
lea esi, [esi + edx*2]
mov dword [ebp - 8], esi
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov dword [ebp - 0xbc], edx
test ebx, ebx
je 0xb8e543
push 0x5c
pop ecx
cmp ebx, ecx
je 0xb8eb12
cmp dword [ebp - 0x64], 0
jne 0xbcb564
cmp ebx, ecx
je 0xb8eb27
mov edi, dword [ebp - 0x2c]
and edi, 8
mov dword [ebp - 0x38], edi
jne 0xbcb5d1
push 0x28
pop eax
cmp ebx, eax
je 0xb8e6d5
push 0x2a
pop eax
cmp ebx, eax
je 0xb8eb39
push 0x2b
pop eax
cmp ebx, eax
je 0xb8eb39
push 0x3f
pop eax
cmp ebx, eax
je 0xb8eb39
push 0x7b
pop eax
cmp ebx, eax
je 0xbcb719
mov edx, dword [ebp - 0x88]
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x50]
test edx, edx
jne 0xbcb731
test dword [ebp - 0x2c], 0x4000
jne 0xbcb772
mov edx, dword [ebp - 8]
push 0x3f
pop eax
cmp ebx, eax
ja 0xb8e303
je 0xbcc369
mov eax, ebx
xor ecx, ecx
sub eax, ecx
je 0xb8e65e
sub eax, 0x24
je 0xbcc34c
sub eax, 4
je 0xb8e6f4
sub eax, 1
je 0xb8e65e
sub eax, 1
je 0xb8eb44
sub eax, 1
je 0xbcb7c0
sub eax, 3
jne 0xb8e33b
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xfffffffe
jne 0xb8e60b
or ecx, 0xffffffff
mov dword [ebp - 0x34], ecx
mov ebx, dword [ebp + 0x28]
mov eax, dword [ebp - 0x54]
mov edi, dword [ebp - 0x6c]
mov dword [ebp - 0x68], eax
mov eax, dword [ebx + 0x20]
sub eax, dword [ebx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
shr eax, 2
and eax, dword [ebp - 0xc]
mov dword [ebp - 0x70], ecx
or eax, 0xc
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x18], edx
mov word [edx], ax
push 2
pop eax
add edx, eax
mov dword [ebp - 8], edx
jmp 0xb8e461
cmp dword [edi + 0x20], ecx
jbe 0xb8e522
jmp 0xbce688
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x6c]
mov edi, dword [ebp + 8]
mov ebx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x34]
mov dword [edi], esi
mov dword [eax], ecx
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x60]
mov dword [eax], ecx
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x154]
mov dword [eax], edx
test ebx, ebx
je 0xb8e6b0
sub edx, dword [ebp - 0xbc]
mov ecx, 0x7fffffeb
mov eax, dword [ebx]
sub ecx, eax
sar edx, 1
cmp ecx, edx
jl 0xbce5b3
lea ecx, [eax + edx]
mov dword [ebx], ecx
mov eax, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 8], edx
jmp 0xb8e51c
test eax, eax
je 0xb8e480
jmp 0xbcb530
push 0x3f
pop eax
cmp word [esi + 2], ax
jne 0xb8e589
push 0x23
pop eax
cmp word [esi + 4], ax
jne 0xb8e589
jmp 0xbcb6d4
add esi, 2
push 0x2a
mov dword [ebp - 4], esi
pop eax
movzx edx, word [esi]
cmp dx, ax
je 0xbcb7c8
mov eax, dword [ebp - 0x2c]
mov ecx, 0x85
mov dword [ebp - 0x28], ecx
xor edi, edi
mov ecx, dword [ebp + 0x28]
mov ebx, edi
mov dword [ebp - 0x38], eax
push 0x3f
mov dword [ebp - 0x1c], ebx
mov eax, dword [ecx + 0x20]
sub eax, dword [ecx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
pop eax
mov dword [ebp - 0x30], edi
cmp dx, ax
jne 0xb8ece4
add esi, 2
mov dword [ebp - 4], esi
push 0x3a
pop edx
movzx ebx, word [esi]
mov eax, ebx
cmp eax, edx
jbe 0xbcba47
mov edx, esi
mov edi, ebx
mov dword [ebp - 0x20], edx
sub eax, 0x3c
je 0xbcc129
sub eax, 1
je 0xbcbfed
sub eax, 1
je 0xbcc11f
sub eax, 5
je 0xbcc075
push 0xd
pop ebx
sub eax, ebx
je 0xbcc02e
push 2
pop ebx
sub eax, ebx
je 0xbcc011
push 0x2a
pop ebx
sub eax, ebx
je 0xbcbfdd
xor ecx, ecx
push 0x29
mov eax, ecx
mov dword [ebp - 0x30], ecx
pop ebx
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x30]
cmp di, bx
je 0xbcd2bc
mov ebx, edx
movzx eax, di
cmp di, word [ebp - 0x138]
je 0xb8e7fa
lea esi, [edx + 2]
movzx edi, di
push 0x69
pop edx
mov dword [ebp - 4], esi
cmp ax, dx
ja 0xbcd28c
jne 0xbcd241
mov eax, dword [ebp - 0xc]
or dword [ecx], eax
movzx eax, word [esi]
mov ebx, esi
push 0x29
mov dword [ebp - 0x20], ebx
mov edx, ebx
pop ebx
mov edi, eax
cmp ax, bx
jne 0xb8e7b6
mov ebx, esi
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
or ecx, dword [ebp - 0x2c]
not eax
and ecx, eax
push 0x29
pop eax
mov dword [ebp - 0x38], ecx
cmp word [esi], ax
jne 0xbcbf84
mov edx, dword [ebp - 0xc]
mov eax, ecx
shr eax, 9
and eax, edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0xec], eax
xor eax, edx
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x13c]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, ecx
and eax, edx
mov dword [ebp - 0x94], eax
jmp 0xb8e464
push 0x10
pop ecx
mov word [edx], cx
add edx, esi
push 9
pop ecx
mov word [edx], cx
add edx, esi
mov word [edx], ax
add edx, esi
cmp dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 8], edx
je 0xbce2dc
mov esi, dword [ebp - 4]
jmp 0xb8e467
push 6
lea ecx, [esi + 2]
mov edx, 0xc0fc1c
call fcn.00b8f0ae
pop ecx
test eax, eax
je 0xbcd935
mov ecx, dword [ebp - 4]
mov edx, 0xc0fc14
push 6
lea ecx, [ecx + 2]
call fcn.00b8f0ae
pop ecx
test eax, eax
je 0xbcd93c
mov edx, dword [ebp + 0x28]
mov ecx, dword [ebp - 4]
mov ebx, dword [ebp - 8]
push 0x3a
mov eax, dword [edx + 0x20]
sub eax, dword [edx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
movzx eax, word [ecx + 2]
pop edi
mov dword [ebp - 0x18], ebx
cmp ax, di
je 0xbcd955
push 0x2e
pop edx
cmp ax, dx
je 0xbcd955
push 0x3d
pop edx
cmp ax, dx
je 0xbcd955
xor esi, esi
push 0x5c
mov eax, esi
pop edx
mov dword [ebp - 0x10], eax
add ecx, 2
mov dword [ebp - 4], ecx
movzx edi, word [ecx]
mov dword [ebp - 0x14], edi
cmp edi, edx
je 0xbcd96d
test eax, eax
jne 0xb8e914
cmp edi, 0x5e
je 0xbcd9a7
push 0x5d
pop ecx
cmp edi, ecx
je 0xbcd9af
lea eax, [ebx + 6]
mov dword [ebp - 0x3c], esi
push 0x20
mov dword [ebp - 0x1c], eax
mov ebx, esi
mov dword [ebp - 0x24], eax
pop eax
push eax
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x68], esi
push esi
push eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x38], esi
call fcn.00b94380
mov esi, dword [ebp - 4]
add esp, 0xc
test edi, edi
je 0xbce1c4
mov edx, ebx
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 0x80], ebx
mov ebx, edx
mov dword [ebp - 0x30], edx
je 0xb8e97c
mov eax, edi
mov ecx, 0xfc00
and eax, ecx
cmp eax, 0xd800
je 0xbcd9fa
mov ecx, dword [ebp - 0x1c]
cmp dword [ebp - 0x24], ecx
ja 0xbcda36
cmp dword [ebp + 0x2c], 0
je 0xb8e999
mov eax, dword [ebp - 0x24]
cmp eax, ecx
ja 0xbcda41
cmp dword [ebp - 0x64], 0
jne 0xbcda55
cmp edi, 0x5b
je 0xbcda7d
push 0x5c
pop ecx
cmp edi, ecx
je 0xbcdcf5
xor edx, edx
mov ecx, dword [ebp + 0x28]
mov ebx, dword [ebp - 0x2c]
push 0x5c
pop eax
cmp word [esi + 2], ax
je 0xbcdfc5
push 0xd
pop eax
mov edx, esi
cmp edi, eax
je 0xbcdfee
push 0xa
pop eax
cmp edi, eax
je 0xbcdfee
mov ecx, dword [ebp - 0x64]
test ecx, ecx
jne 0xb8e9f8
push 0x2d
pop eax
cmp word [esi + 2], ax
je 0xbcdffa
mov eax, dword [ebp - 0x80]
mov ebx, eax
push 2
pop edx
mov dword [ebp - 0x20], eax
cmp eax, edx
jl 0xb8eb07
test ecx, ecx
jne 0xb8ea1f
cmp dword [ebp - 0x38], ecx
jne 0xb8ea1f
mov ecx, dword [ebp - 0xc]
cmp ebx, ecx
je 0xb8ef88
push edi
push edi
push dword [ebp + 0x28]
push dword [ebp - 0x2c]
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0xe0]
call fcn.00b8f017
mov edx, eax
add esp, 0x10
add edx, dword [ebp - 0x30]
mov esi, dword [ebp - 4]
mov dword [ebp - 0x28], edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x50]
push 2
pop edi
add esi, edi
mov dword [ebp - 4], esi
movzx edi, word [esi]
mov dword [ebp - 0x14], edi
test edi, edi
je 0xbce1a5
push 0x5d
pop eax
cmp edi, eax
jne 0xb8e95a
cmp dword [ebp - 0x64], 0
jne 0xb8e95a
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x24], ecx
ja 0xb8ea7f
mov eax, dword [ebp - 0x68]
mov edi, dword [ebp - 0x34]
cmp edi, 0xfffffffe
jne 0xb8ea8d
or edi, 0xffffffff
mov dword [ebp - 0x34], edi
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x84], edx
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x74], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x68], edx
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x70], edi
test eax, eax
jne 0xbce32b
mov ebx, dword [ebp + 0x2c]
test ebx, ebx
je 0xb8eac0
mov eax, dword [ebp - 0x24]
sub eax, ecx
sar eax, 1
add dword [ebx], eax
mov esi, dword [ebp - 0x10]
xor eax, eax
cmp esi, edx
mov edx, dword [ebp - 8]
push 0x6e
setne al
pop ecx
add eax, ecx
mov word [edx], ax
push 2
pop eax
add edx, eax
mov dword [ebp - 8], edx
test ebx, ebx
jne 0xb8eb00
test esi, esi
jne 0xbce46a
push 0x20
pop eax
push eax
lea eax, [ebp - 0xe0]
push eax
push edx
call fcn.00b921f0
mov edx, dword [ebp - 8]
add esp, 0xc
push 0x20
jmp 0xb8e645
lea ebx, [eax + 1]
mov dword [ebp - 0x20], ebx
jmp 0xb8ea0b
push 0x45
pop ecx
cmp word [esi + 2], cx
push 0x5c
pop ecx
jne 0xb8e531
jmp 0xbcb54f
push 0x51
pop ecx
cmp word [esi + 2], cx
jne 0xb8e543
jmp 0xbcb556
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x50]
jmp 0xb8e59e
or eax, 0xffffffff
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x44], eax
mov edx, dword [ebp - 0x18]
test edx, edx
je 0xbce5c1
test ecx, ecx
jne 0xb8eb7d
mov edi, dword [ebp - 0x84]
mov dword [ebp - 0x6c], edi
mov edi, dword [ebp - 0x70]
mov dword [ebp - 0x34], edi
mov edi, dword [ebp - 0x74]
mov dword [ebp - 0x60], edi
mov edi, dword [ebp - 0x68]
mov dword [ebp - 0x54], edi
mov edi, dword [ebp - 0x38]
sub ecx, eax
mov dword [ebp - 0x48], edx
neg ecx
push 2
sbb ecx, ecx
pop eax
and ecx, eax
xor eax, eax
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x20], eax
test edi, edi
jne 0xbcc3ac
push 0x23
pop eax
push 0x28
pop ecx
push 0x3f
pop edi
cmp word [esi + 2], cx
je 0xbcc4af
xor edx, edx
lea ecx, [esi + 2]
movzx eax, word [ecx]
cmp ax, word [ebp - 0x158]
je 0xbcc508
cmp ax, di
jne 0xbcc51d
mov edi, dword [ebp - 0xf0]
mov esi, ecx
mov dword [ebp - 4], esi
mov dword [ebp - 0x28], edi
mov edx, dword [ebp - 0x18]
push 0x75
pop eax
cmp word [edx], ax
je 0xbcc528
movzx ecx, word [edx]
mov eax, ecx
mov dword [ebp - 0x30], eax
cmp cx, word [ebp - 0x15c]
je 0xbccc31
cmp cx, word [ebp - 0xe8]
je 0xbccc31
cmp cx, word [ebp - 0x118]
je 0xbccc31
cmp cx, word [ebp - 0x11c]
je 0xbccc31
cmp ecx, 0x17
jae 0xbcc5a1
push 0x34
mov edi, ecx
movzx eax, ax
pop ebx
mov dword [ebp - 0x1c], edi
push 0x10
movzx eax, ax
pop ecx
cmp ax, cx
je 0xbccce5
push 0xf
pop ecx
cmp ax, cx
je 0xbccce5
or dword [ebp - 0x10], 0xffffffff
lea edi, [edx + 2]
or dword [ebp - 0x14], 0xffffffff
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 8]
mov dword [ebp - 8], edx
test eax, eax
je 0xb8ecd1
mov edx, dword [ebp - 0x28]
add edx, ebx
cmp dword [ebp - 0x4c], 0
mov dword [ebp - 0x30], edx
jne 0xbccd2c
mov ecx, dword [ebp - 0x44]
movzx eax, dx
cmp ecx, 0xffffffff
jne 0xbcccfa
mov ecx, dword [ebp - 0x18]
add eax, 0x21
push 2
mov word [ecx], ax
pop ecx
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x14]
cmp dword [ebp - 0x5c], 0
je 0xb8ecb1
test ebx, 0x10000000
jne 0xbcce55
mov word [edi], bx
mov ebx, ecx
lea edx, [ebx + edi]
mov dword [ebp - 8], edx
test esi, esi
jns 0xbccc1b
mov esi, dword [ebp - 4]
cmp dword [ebp - 0x20], 0
jne 0xbcce73
mov ecx, dword [ebp + 0x28]
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x80]
or dword [ecx + 0x68], eax
jmp 0xb8e464
test dword [ebp - 0x2c], 0x1000
jne 0xbcc33c
mov edx, dword [ebp - 8]
inc dword [ecx + 0x40]
mov eax, dword [ecx + 0x40]
mov ebx, dword [ebp - 0xc]
mov word [edx + 4], ax
mov esi, dword [ebp - 4]
mov ecx, dword [ecx + 0x58]
mov edi, dword [ebp + 0x28]
lea eax, [ecx + 1]
mov dword [edi + 0x58], eax
mov edi, dword [ebp - 0x28]
cmp ecx, 0xfa
jge 0xbce608
mov eax, 0x80
cmp edi, eax
mov eax, dword [ebp + 0x28]
jbe 0xbcd2d4
mov ecx, dword [eax + 0x20]
sub ecx, dword [eax + 0x10]
sar ecx, 1
mov dword [ebp - 0x40], ecx
xor ecx, ecx
mov dword [ebp - 0x18], edx
mov word [edx], di
mov edi, dword [eax + 0x68]
mov esi, dword [eax + 0x40]
mov eax, dword [ebp + 0x2c]
neg eax
mov dword [ebp - 0x8c], ecx
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x48], edx
sbb eax, eax
mov dword [ebp - 0x80], edi
and eax, ecx
xor edx, edx
mov ecx, dword [ebp - 0x28]
cmp ecx, 0x87
sete dl
cmp ecx, 0x7f
je 0xbcd2f0
cmp ecx, 0x80
je 0xbcd2f0
xor ecx, ecx
push eax
push dword [ebp + 0x28]
lea eax, [ebp - 0x9c]
push dword [ebp + 0x20]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0xf4]
push eax
mov eax, dword [ebp + 0x24]
add eax, edx
lea edx, [ebp - 0x48]
push eax
push ebx
push dword [ebp - 0x30]
lea eax, [ebp - 4]
push ecx
push dword [ebp + 0xc]
mov ecx, dword [ebp - 0x38]
push eax
call fcn.00b8df18
add esp, 0x34
test eax, eax
je 0xbce4da
mov ecx, dword [ebp + 0x28]
mov eax, 0x81
mov ebx, dword [ebp - 0x28]
dec dword [ecx + 0x58]
cmp ebx, eax
je 0xbcd2f8
mov eax, dword [ebp - 8]
mov edx, 0x80
cmp ebx, edx
jbe 0xbcd311
mov ecx, 0x87
cmp ebx, ecx
je 0xbcd319
mov eax, dword [ebp - 0x9c]
mov esi, dword [ebp - 4]
push 0x29
pop edx
cmp word [esi], dx
jne 0xbce5fa
cmp dword [ebp + 0x2c], 0
jne 0xb8efd4
mov edx, dword [ebp - 0x48]
mov dword [ebp - 8], edx
cmp ebx, 0x91
je 0xb8e467
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x74], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x84], ecx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x70], ecx
xor ecx, ecx
mov dword [ebp - 0xa0], ecx
mov ecx, 0x81
cmp ebx, ecx
mov ecx, dword [ebp - 0xac]
jb 0xbcd3cd
cmp dword [ebp - 0x34], 0xfffffffe
je 0xbcd386
test ecx, ecx
jns 0xbcd3ae
test eax, eax
js 0xb8e467
jmp 0xbcd3e5
mov ebx, dword [ebp + 0xc]
lea edx, [ebp - 0xb8]
xor eax, eax
mov dword [ebp - 0x78], esi
mov esi, dword [ebp + 0x28]
lea ecx, [ebp - 4]
push eax
push dword [ebp - 0x2c]
push dword [esi + 0x40]
push ebx
call fcn.00b8fe28
xor edx, edx
add esp, 0x10
mov edi, eax
cmp dword [ebx], edx
jne 0xbce4da
test edi, edi
je 0xbcd04f
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xfffffffe
jne 0xb8eeda
lea eax, [edi - 6]
cmp eax, 0x10
ja 0xb8eeda
or ecx, 0xffffffff
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x70], ecx
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x68], eax
cmp edi, 0x1b
je 0xbcd09e
cmp edi, 0x1c
je 0xbcd415
test edi, edi
js 0xbcd7f1
push 0xf
pop eax
cmp edi, eax
je 0xbcd8b3
push 0x10
pop eax
cmp edi, eax
je 0xbcd8b3
mov ecx, dword [ebp - 0xc]
cmp edi, 5
je 0xbcd86a
push 4
pop eax
cmp edi, eax
je 0xbcd86a
cmp edi, ecx
je 0xbcd86a
mov ebx, esi
push 0x1d
pop eax
cmp edi, eax
jge 0xbcd87d
push 0x10
pop ecx
lea eax, [edi - 6]
cmp ecx, eax
mov ecx, dword [ebx + 0x20]
sbb edx, edx
sub ecx, dword [ebx + 0x10]
not edx
sar ecx, 1
and edx, dword [ebp - 8]
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x40], ecx
je 0xbcd8a0
mov edx, dword [ebp - 8]
push 2
pop esi
mov word [edx], di
add edx, esi
mov dword [ebp - 8], edx
jmp 0xb8e86f
push 0x5d
pop eax
cmp word [esi + 2], ax
jne 0xb8ea1f
jmp 0xbce1d2
mov ecx, dword [ebp - 0x60]
or dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x74], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0xc]
cmp edi, ecx
jne 0xbce2f5
movzx eax, ax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x34], eax
cmp edi, ecx
jne 0xbce30f
mov edx, dword [ebp - 8]
jmp 0xb8e86f
mov ebx, dword [ebp + 0x2c]
mov eax, 0x7fffffeb
mov edi, dword [ebp - 0x8c]
mov edx, dword [ebx]
sub eax, edx
lea ecx, [edi - 4]
cmp eax, ecx
jl 0xbce480
push 2
pop ecx
lea eax, [edi - 4]
add eax, edx
mov edx, dword [ebp - 8]
add edx, ecx
mov dword [ebx], eax
push 0x78
pop eax
mov word [edx], cx
add edx, ecx
mov word [edx], ax
add edx, ecx
mov word [edx], cx
add edx, ecx
jmp 0xb8e648
mov esi, eax
xor eax, eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x50], eax
movzx ebx, word [esi]
mov dword [ebp - 0x10], ebx
jmp 0xb8e480
mov edx, eax
mov dword [ebp - 8], edx
jmp 0xb8e4b2
xor ebx, ebx
mov dword [ebp - 0x64], ebx
jmp 0xbcb55c
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x64], ecx
add esi, 2
jmp 0xb8e467
mov eax, dword [ebp - 0x88]
test eax, eax
je 0xbcb58c
cmp dword [ebp + 0x2c], 0
jne 0xbcb584
sub esi, dword [edi + 0x18]
sar esi, 1
sub si, word [eax + 4]
mov word [eax + 6], si
mov esi, dword [ebp - 4]
xor eax, eax
mov dword [ebp - 0x88], eax
test dword [ebp - 0x2c], 0x4000
je 0xbcd014
push 0x76
pop eax
mov word [edx], ax
mov ecx, 0xff
lea eax, [edx + 2]
mov dword [ebp - 0x88], edx
mov word [eax], cx
sub esi, dword [edi + 0x18]
push 2
pop ecx
add eax, ecx
sar esi, 1
xor ecx, ecx
lea edx, [eax + 4]
mov word [eax], si
mov word [eax + 2], cx
mov esi, dword [ebp - 4]
mov dword [ebp - 8], edx
jmp 0xb8e33b
mov ecx, esi
mov edx, 0xff
mov dword [ebp - 0x30], ecx
mov eax, ecx
cmp ebx, edx
ja 0xbcb607
mov eax, dword [ebp + 0x28]
mov edx, dword [eax + 0xc]
test byte [edx + ebx], 1
mov eax, ecx
je 0xbcb604
lea esi, [ecx + 2]
mov dword [ebp - 4], esi
mov ecx, esi
movzx ebx, word [esi]
mov eax, esi
cmp ebx, 0xff
jbe 0xbcb5e7
mov dword [ebp - 0x10], ebx
push 0x23
pop ecx
cmp ebx, ecx
jne 0xbcb65e
lea esi, [eax + 2]
mov dword [ebp - 4], esi
movzx eax, word [esi]
test ax, ax
je 0xbcb65e
mov edi, esi
mov ebx, eax
mov eax, dword [ebp + 0x28]
mov edx, dword [eax + 0x84]
mov ecx, dword [eax + 0x1c]
test edx, edx
je 0xbcb66f
cmp edi, ecx
jae 0xbcb69c
push dword [ebp - 0x7c]
lea edi, [eax + 0x88]
push edi
push ecx
mov ecx, esi
call fcn.00b9025e
mov esi, dword [ebp - 4]
add esp, 0xc
test eax, eax
je 0xbcb69c
mov edx, dword [edi]
lea esi, [esi + edx*2]
mov dword [ebp - 4], esi
mov edi, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
cmp esi, dword [ebp - 0x30]
ja 0xb8e46f
jmp 0xb8e552
mov edx, dword [eax + 0x88]
lea eax, [edx + edx]
sub ecx, eax
cmp edi, ecx
ja 0xbcb69c
mov ecx, dword [ebp + 0x28]
cmp bx, word [ecx + 0x8c]
jne 0xbcb69c
cmp edx, dword [ebp - 0xc]
je 0xbcb652
mov ax, word [esi + 2]
cmp ax, word [ecx + 0x8e]
je 0xbcb652
add esi, 2
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 4], esi
mov edi, esi
je 0xbcb6c7
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0xbcb6c7
add esi, 2
mov dword [ebp - 4], esi
mov edi, esi
movzx eax, word [esi]
test ax, ax
je 0xbcb658
jmp 0xbcb61e
add esi, 6
mov dword [ebp - 4], esi
movzx eax, word [esi]
test ax, ax
je 0xbcb70b
mov edx, esi
mov ecx, eax
push 0x29
pop eax
cmp cx, ax
je 0xbcb700
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ecx, eax
test ax, ax
jne 0xbcb6e6
xor ecx, ecx
cmp word [esi], cx
jne 0xb8e464
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x12
jmp 0xbce691
lea ecx, [esi + 2]
call fcn.00c0c842
mov esi, dword [ebp - 4]
test eax, eax
jne 0xb8eb39
jmp 0xb8e589
test eax, eax
jne 0xb8e59e
mov eax, dword [ebp - 0xa8]
dec dword [ebp - 0xa8]
test eax, eax
jg 0xb8eb3c
cmp dword [ebp + 0x2c], ecx
jne 0xbcb765
mov eax, dword [ebp + 0x28]
sub esi, dword [eax + 0x18]
sar esi, 1
sub si, word [edx + 4]
mov word [edx + 6], si
mov esi, dword [ebp - 4]
xor eax, eax
mov dword [ebp - 0x88], eax
jmp 0xb8eb3c
test ecx, ecx
jne 0xb8e5ab
test eax, eax
jne 0xb8e5ab
mov eax, dword [ebp - 8]
push 0x76
pop edx
mov dword [ebp - 0x88], eax
mov word [eax], dx
add eax, 2
mov edx, 0xff
push 2
mov word [eax], dx
pop edx
add eax, edx
mov edx, dword [ebp + 0x28]
sub esi, dword [edx + 0x18]
sar esi, 1
xor edx, edx
mov word [eax + 2], dx
lea edx, [eax + 4]
mov word [eax], si
mov esi, dword [ebp - 4]
mov dword [ebp - 8], edx
jmp 0xb8e5ae
mov ecx, dword [ebp - 0xc]
jmp 0xb8eb44
movzx eax, word [esi + 2]
push 0x3a
pop ecx
cmp ax, cx
je 0xbcb7f6
mov ecx, 0xff
cmp ax, cx
ja 0xb8e709
mov edi, dword [ebp + 0x28]
mov ecx, eax
mov eax, dword [edi + 0xc]
test byte [ecx + eax], 2
je 0xb8e709
jmp 0xbcb7f9
mov edi, dword [ebp + 0x28]
add esi, 2
mov dword [ebp - 0x38], 0xc34ac0
xor eax, eax
mov dword [ebp - 4], esi
mov ebx, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov edx, 0xff
movzx eax, word [esi]
mov ecx, esi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x3c], esi
cmp ax, dx
ja 0xbcb852
mov ebx, dword [edi + 0xc]
mov edx, eax
mov edi, esi
movzx eax, dx
mov ecx, edi
test byte [eax + ebx], 2
je 0xbcb84f
lea esi, [edi + 2]
mov dword [ebp - 4], esi
mov edi, esi
movzx eax, word [esi]
mov ecx, esi
mov edx, eax
cmp ax, word [ebp - 0x98]
jbe 0xbcb82c
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
mov edi, ecx
sub edi, eax
push 0x3a
sar edi, 1
pop edx
mov dword [ebp - 0x30], edi
cmp word [esi], dx
jne 0xbcb8b5
lea edx, [ecx + 2]
mov esi, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 4], esi
mov ebx, edx
movzx eax, word [esi]
test ax, ax
je 0xbcb8a1
push 0x29
mov ecx, eax
pop edi
mov ebx, edx
cmp cx, di
je 0xbcb89b
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ebx, esi
mov ecx, eax
test ax, ax
jne 0xbcb880
mov edi, dword [ebp - 0x30]
mov edx, dword [ebp - 0x14]
sub ebx, edx
mov eax, 0xffff
sar ebx, 1
cmp ebx, eax
ja 0xbce4bb
mov eax, dword [ebp - 0x3c]
push 0x29
pop ecx
cmp word [esi], cx
jne 0xbcba40
xor ecx, ecx
mov esi, 0xc349a0
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x38]
cmp edi, dword [esi]
jne 0xbcb8e4
mov edx, ecx
mov ecx, eax
push edi
call fcn.00b8f0ae
pop ecx
test eax, eax
je 0xbcb901
mov ecx, dword [ebp - 0x38]
inc ecx
add ecx, dword [esi]
add esi, 0xc
inc dword [ebp - 0x10]
mov dword [ebp - 0x38], ecx
cmp esi, 0xc34a0c
jge 0xbcba31
mov eax, dword [ebp - 0x3c]
jmp 0xbcb8ce
imul eax, dword [ebp - 0x10], 0xc
mov edi, 0x9e
mov ecx, dword [eax + 0xc349a4]
cmp ecx, edi
jne 0xbcb985
test ebx, ebx
jne 0xbce4c9
mov esi, dword [ebp + 0x28]
mov eax, dword [ebp - 0xc]
mov ecx, dword [esi + 0x24]
mov dword [esi + 0x6c], eax
test ecx, ecx
je 0xbcb960
mov eax, dword [ebp + 0x2c]
push 2
pop esi
test eax, eax
je 0xbcb93b
add dword [eax], 3
jmp 0xbcb957
mov edx, dword [ebp - 8]
mov eax, 0xa0
mov word [edx], ax
add edx, esi
mov ax, word [ecx + 4]
mov word [edx], ax
add edx, esi
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 8], edx
mov ecx, dword [ecx]
test ecx, ecx
jne 0xbcb932
mov esi, dword [ebp + 0x28]
mov ebx, dword [ebp - 8]
xor eax, eax
xor ecx, ecx
cmp dword [esi + 0x5c], ecx
setg al
add eax, edi
cmp dword [ebp - 0x34], 0xfffffffe
movzx eax, ax
mov ecx, eax
mov word [ebx], ax
jne 0xbcb981
or dword [ebp - 0x34], 0xffffffff
mov eax, ecx
jmp 0xbcb9f5
test ebx, ebx
jne 0xbcb99e
movzx eax, cx
mov edx, eax
test ecx, ecx
js 0xbce4e2
mov ebx, dword [ebp - 8]
mov word [ebx], ax
jmp 0xbcb9f2
mov eax, dword [eax + 0xc349a8]
movzx ecx, ax
mov edi, ecx
test eax, eax
js 0xbce4c9
mov edx, dword [ebp - 8]
push 2
pop eax
mov word [edx], cx
add edx, eax
mov ecx, dword [ebp + 0x2c]
lea eax, [edx + 2]
test ecx, ecx
je 0xbcb9d1
add dword [ecx], ebx
xor ecx, ecx
mov word [edx], cx
mov ebx, eax
jmp 0xbcb9eb
lea esi, [ebx + ebx]
mov word [edx], bx
push esi
push dword [ebp - 0x14]
mov ebx, eax
mov dword [ebp - 8], eax
push ebx
call fcn.00b921f0
add esp, 0xc
add ebx, esi
xor eax, eax
mov word [ebx], ax
mov eax, edi
mov esi, dword [ebp + 0x28]
add ebx, 2
movzx eax, ax
mov edx, 0x96
mov dword [ebp - 8], ebx
mov ecx, ebx
cmp ax, dx
jb 0xbcba31
add edx, 3
mov dword [ebp - 8], ecx
cmp ax, dx
jbe 0xbcba2b
mov edx, 0x9b
cmp ax, dx
ja 0xbcba31
or dword [esi + 0x64], 0x1000
mov dword [ebp - 8], ecx
jmp 0xbcba31
mov eax, dword [ebp - 0xc]
mov dword [esi + 0x70], eax
mov esi, dword [ebp - 4]
push 9
pop eax
cmp dword [ebp - 0x10], eax
jl 0xb8e464
push 0x3c
jmp 0xbce4ef
je 0xbcbfe6
push 0x28
pop edx
cmp eax, edx
ja 0xbcbfa4
mov edx, esi
je 0xbcbb01
push 0x21
pop ecx
mov dword [ebp - 0x20], esi
mov edi, ebx
sub eax, ecx
je 0xbcba93
sub eax, 5
je 0xbcba7f
sub eax, 1
jne 0xbcd239
jmp 0xbcc16a
push 0x29
pop eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp + 0xc]
jmp 0xbcd46b
lea ecx, [esi + 2]
mov esi, ecx
push 0x29
pop eax
mov dword [ebp - 4], esi
cmp word [esi], ax
jne 0xbcbad6
movzx eax, word [esi + 2]
push 0x2a
pop ebx
cmp ax, bx
je 0xbcbad6
push 0x2b
pop edx
cmp ax, dx
je 0xbcbad6
push 0x3f
pop edx
cmp ax, dx
je 0xbcbad6
push 0x7b
pop edx
cmp ax, dx
jne 0xbcbae7
add ecx, 4
call fcn.00c0c842
test eax, eax
je 0xbcbae7
mov esi, dword [ebp - 4]
mov ecx, dword [ebp + 0x28]
push 0x7e
pop edi
mov dword [ebp - 0x28], edi
inc dword [ecx + 0x5c]
jmp 0xbcd2c9
mov edx, dword [ebp - 8]
mov eax, 0x9d
push 2
pop esi
mov word [edx], ax
add edx, esi
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0xb8ef80
push 0x3f
pop eax
mov edi, 0x87
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x28], edi
cmp word [esi + 2], ax
jne 0xbcbb61
push 0x43
pop ebx
cmp word [esi + 4], bx
jne 0xbcbb61
movzx eax, word [esi + 6]
push 3
pop ecx
push 0x30
pop ebx
jmp 0xbcbb38
cmp ax, word [ebp - 0xc0]
ja 0xbcbb3d
inc ecx
movzx eax, word [esi + ecx*2]
cmp ax, bx
jae 0xbcbb2a
push 0x29
pop eax
cmp word [esi + ecx*2], ax
jne 0xbcbb4f
lea edx, [ecx + 1]
lea edx, [esi + edx*2]
mov dword [ebp - 0x78], edx
push 0x28
pop eax
cmp word [edx], ax
jne 0xbce4fa
mov ecx, dword [ebp + 0x28]
push 0x3f
pop eax
cmp word [edx + 2], ax
jne 0xbcbba4
movzx eax, word [edx + 4]
push 0x3d
pop ebx
cmp ax, bx
je 0xbcbb96
cmp ax, word [ebp - 0x134]
je 0xbcbb96
cmp ax, word [ebp - 0xe4]
jne 0xbcbba4
movzx eax, word [edx + 6]
cmp ax, bx
je 0xbcbb96
push 0x21
pop edx
cmp ax, dx
jne 0xbcbba4
mov eax, dword [ebp - 0xc]
mov dword [ecx + 0x80], eax
jmp 0xbcd2c9
mov edi, dword [ebp - 8]
mov eax, 0x8d
push 2
or ebx, 0xffffffff
or dword [ebp - 0x14], ebx
mov edx, ebx
mov word [edi + 4], ax
mov esi, dword [ebp - 4]
pop eax
add esi, 2
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x3c], ebx
mov ebx, eax
mov dword [ebp - 0x10], eax
push 0x52
mov dword [ebp - 4], esi
movzx ecx, word [esi]
pop eax
mov dword [ebp - 0x18], ebx
cmp cx, ax
jne 0xbcbcdb
push 0x26
pop eax
cmp word [esi + 2], ax
jne 0xbcbcdb
or dword [ebp - 0x20], edx
lea eax, [esi + 4]
mov dword [ebp - 4], eax
mov eax, 0x8f
mov word [edi + 4], ax
mov esi, dword [ebp - 4]
movzx eax, word [esi]
push 0x30
pop ecx
mov dword [ebp - 0x3c], edx
cmp ax, cx
jb 0xbcbc22
push 0x39
pop ecx
mov dword [ebp - 0x3c], edx
cmp ax, cx
jbe 0xbce508
mov edx, 0xff
cmp ax, dx
ja 0xbce4fa
mov ecx, dword [ebp + 0x28]
movzx eax, ax
push 0x10
mov ebx, dword [ecx + 0xc]
pop ecx
test byte [eax + ebx], cl
je 0xbce4fa
mov eax, esi
mov dword [ebp - 0x10], eax
lea esi, [eax + 2]
mov dword [ebp - 4], esi
mov ecx, esi
movzx eax, word [esi]
mov edi, esi
cmp ax, dx
ja 0xbcbc8c
mov edx, ecx
mov ecx, eax
movzx eax, cx
push 0x10
pop ecx
mov dword [ebp - 0x14], edx
test byte [eax + ebx], cl
je 0xbcbc89
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edi, esi
movzx eax, word [esi]
mov edx, esi
mov ecx, eax
mov dword [ebp - 0x14], esi
cmp ax, word [ebp - 0x98]
jbe 0xbcbc60
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x10]
xor ebx, ebx
mov eax, dword [ebp + 0x2c]
mov edx, dword [ebp - 0x20]
sar ecx, 1
test eax, eax
push 2
setne bl
mov dword [ebp - 0x14], ecx
pop eax
add ebx, eax
mov dword [ebp - 0x1c], ebx
test edx, edx
jle 0xbcbd7f
movzx eax, word [esi]
lea esi, [edi + 2]
mov dword [ebp - 4], esi
mov ecx, esi
mov dword [ebp - 0x1c], ebx
mov edi, esi
cmp ax, dx
je 0xbcbd7f
mov eax, dword [ebp + 0xc]
lea esi, [ecx - 2]
mov dword [eax], 0x1a
jmp 0xbce691
push 0x3c
pop eax
cmp cx, ax
jne 0xbcbcf4
push 0x3e
pop eax
add esi, 2
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], esi
jmp 0xbcbc05
push 0x27
pop eax
cmp cx, ax
je 0xbcbce6
push 0x2d
xor edi, edi
pop eax
mov dword [ebp - 0x20], edi
cmp cx, ax
je 0xbcbd31
push 0x2b
pop eax
cmp cx, ax
je 0xbcbd31
mov eax, ecx
cmp cx, word [ebp - 0x90]
jb 0xbcbc22
push 0x39
pop eax
cmp cx, ax
ja 0xbcbc05
mov dword [ebp - 0x3c], edi
jmp 0xbcbd3a
add esi, 2
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 4], esi
movzx eax, word [esi]
mov edi, esi
push 0x30
pop ecx
cmp ax, cx
jb 0xbcbd82
mov edx, eax
push 0x39
pop eax
cmp dx, ax
ja 0xbcbd82
cmp ebx, 0xccccccb
jg 0xbce516
imul ecx, ebx, 0xa
add esi, 2
movzx ebx, dx
mov edi, esi
push 0x30
mov dword [ebp - 4], esi
movzx eax, word [esi]
add ecx, 0xffffffd0
mov edx, eax
add ebx, ecx
pop ecx
cmp ax, cx
jae 0xbcbd49
jmp 0xbcbd82
mov ebx, dword [ebp - 0x18]
mov ax, word [esi]
lea esi, [edi + 2]
push 0x29
pop edx
mov dword [ebp - 4], esi
mov ecx, esi
cmp ax, dx
jne 0xbcbcca
cmp dword [ebp + 0x2c], 0
jne 0xbcd2c6
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
js 0xbcbdfb
test ebx, ebx
jle 0xbce548
test ecx, ecx
je 0xbcbdcc
mov eax, dword [ebp + 0x28]
push 0x2d
pop edx
mov eax, dword [eax + 0x40]
cmp ecx, edx
jne 0xbcbdca
sub eax, ebx
lea ebx, [eax + 1]
jmp 0xbcbdcc
add ebx, eax
test ebx, ebx
jle 0xbce544
mov ecx, dword [ebp + 0x28]
cmp ebx, dword [ecx + 0x44]
jg 0xbce544
mov edx, dword [ebp - 8]
mov word [edx + 6], bx
mov esi, dword [ebp - 4]
cmp ebx, dword [ecx + 0x4c]
jle 0xbcd2cc
mov dword [ecx + 0x4c], ebx
jmp 0xbcd2cc
mov edx, dword [ebp + 0x28]
xor ecx, ecx
mov ebx, dword [ebp - 0x14]
mov edi, ecx
mov eax, dword [edx + 0x2c]
mov dword [ebp - 0x58], eax
cmp dword [edx + 0x30], ecx
jle 0xbcbe4e
mov ecx, dword [ebp - 0x10]
lea edx, [eax + 2]
push ebx
call fcn.00c0d169
pop ecx
test eax, eax
jne 0xbcbe32
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp word [eax + ebx*2 + 2], cx
jne 0xbcbe32
mov edx, dword [ebp + 0x28]
jmp 0xbcbe4b
mov edx, dword [ebp + 0x28]
inc edi
mov ecx, dword [ebp - 0x58]
mov eax, dword [edx + 0x34]
lea ecx, [ecx + eax*2]
mov eax, ecx
mov dword [ebp - 0x58], ecx
cmp edi, dword [edx + 0x30]
jl 0xbcbe10
xor ecx, ecx
mov esi, dword [ebp - 4]
cmp edi, dword [edx + 0x30]
jge 0xbcbed7
movzx eax, word [eax]
mov ecx, edi
mov esi, dword [ebp - 0xc]
inc edi
mov ebx, eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x3c], ebx
cmp eax, dword [edx + 0x4c]
jle 0xbcbe70
mov dword [edx + 0x4c], eax
cmp edi, dword [edx + 0x30]
jge 0xbcbeaf
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x58]
mov eax, dword [edx + 0x34]
push ebx
lea ecx, [ecx + eax*2]
mov dword [ebp - 0x58], ecx
lea edx, [ecx + 2]
mov ecx, dword [ebp - 0x10]
call fcn.00c0d169
pop ecx
test eax, eax
jne 0xbcbea9
mov ecx, dword [ebp - 0x58]
cmp word [ecx + ebx*2 + 2], ax
jne 0xbcbea9
mov edx, dword [ebp + 0x28]
inc esi
inc edi
cmp edi, dword [edx + 0x30]
jl 0xbcbe7b
mov ebx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 8]
cmp esi, dword [ebp - 0xc]
jle 0xbcbec8
mov ebx, dword [ebp - 0x1c]
inc ebx
mov word [edx + 8], si
inc word [edx + 4]
movzx eax, cx
jmp 0xbcbece
movzx eax, bx
mov ebx, dword [ebp - 0x1c]
mov word [edx + 6], ax
jmp 0xbcbf7f
cmp dword [ebp - 0x20], 0
jne 0xbce544
mov eax, dword [ebp - 0x10]
push 0x52
pop edx
cmp word [eax], dx
jne 0xbcbf51
mov edx, dword [ebp - 0xc]
cmp ebx, 1
jle 0xbcbf31
push 0x30
pop edi
movzx eax, word [eax + edx*2]
cmp ax, di
jb 0xbce544
cmp ax, word [ebp - 0xc0]
ja 0xbce544
cmp ecx, 0xccccccb
jg 0xbce53d
imul ecx, ecx, 0xa
add eax, 0xffffffd0
add ecx, eax
mov eax, dword [ebp - 0x10]
inc edx
cmp edx, ebx
jl 0xbcbef7
test ecx, ecx
jne 0xbcbf36
mov ecx, 0xffff
mov edx, dword [ebp - 8]
mov eax, 0x8f
mov word [edx + 6], cx
mov ecx, dword [ebp + 0x28]
mov word [edx + 4], ax
mov esi, dword [ebp - 4]
jmp 0xbcd2cc
cmp ebx, 6
jne 0xbce544
push ebx
mov edx, 0xc38dc4
mov ecx, eax
call fcn.00b8f0ae
pop ecx
test eax, eax
jne 0xbce541
mov edx, dword [ebp - 8]
mov eax, 0x91
mov ebx, dword [ebp - 0xc]
mov word [edx + 4], ax
mov esi, dword [ebp - 4]
jmp 0xbcbf9c
mov edx, dword [ebp - 8]
lea esi, [ebx + 2]
xor eax, eax
mov dword [ebp - 4], esi
mov edi, 0x83
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], edi
mov ebx, eax
mov ecx, dword [ebp + 0x28]
jmp 0xb8ed04
push 0x2b
pop ecx
cmp eax, ecx
je 0xbcbfd0
push 0x2d
pop ecx
cmp eax, ecx
je 0xbcbfd0
mov edx, esi
mov edi, ebx
mov dword [ebp - 0x20], edx
cmp eax, 0x2f
jbe 0xb8e79d
push 0x39
pop ecx
mov dword [ebp - 0x20], edx
cmp eax, ecx
ja 0xb8e79d
push 0x29
pop eax
mov dword [ebp - 0x14], eax
mov edx, esi
jmp 0xbcd13a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov dword [ecx + 0x7c], eax
mov edi, 0x83
jmp 0xbcbff3
inc dword [ecx + 0x5c]
push 0x7d
pop edi
add esi, 2
jmp 0xbcc006
mov edi, 0x80
mov ecx, dword [ebp + 0x28]
inc dword [ecx + 0x5c]
add esi, 4
mov dword [ebp - 0x28], edi
mov dword [ebp - 4], esi
jmp 0xbcd2c9
xor eax, eax
add esi, 2
push 0x29
mov edi, eax
mov dword [ebp - 4], esi
pop eax
cmp word [esi], ax
jne 0xbce54c
mov ebx, ecx
jmp 0xbcd63b
lea edx, [esi + 2]
mov esi, edx
push 0x3d
mov dword [ebp - 4], esi
pop ecx
movzx eax, word [esi]
cmp ax, cx
je 0xbcc05c
push 0x3e
pop ecx
cmp ax, cx
je 0xbcc05c
push 0x3c
pop ecx
cmp ax, cx
jne 0xbce550
mov edi, eax
jmp 0xbcc16a
push 0x29
pop ecx
push 0x3e
mov dword [ebp - 0x14], ecx
xor edx, edx
pop ecx
cmp ax, cx
sete dl
mov dword [ebp - 0x10], edx
jmp 0xbcba8b
mov edx, dword [ebp - 8]
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov ecx, ebx
push 0x76
mov dword [ebp - 0xa8], eax
pop eax
mov word [edx], ax
mov esi, dword [ebp - 4]
push 2
pop eax
add esi, eax
mov dword [ebp - 0x88], edx
add edx, eax
mov dword [ebp - 4], esi
push 0x30
pop edi
movzx eax, word [esi]
mov dword [ebp - 8], edx
cmp ax, di
jb 0xbcc0dc
mov edi, esi
mov edx, eax
push 0x39
pop eax
cmp dx, ax
ja 0xbcc0d9
imul ecx, ecx, 0xa
lea esi, [edi + 2]
movzx eax, dx
mov edi, esi
add eax, 0xffffffd0
mov dword [ebp - 4], esi
add ecx, eax
movzx eax, word [esi]
mov edx, eax
cmp ax, word [ebp - 0x90]
jae 0xbcc0b0
mov edx, dword [ebp - 8]
push 0x29
pop eax
cmp word [esi], ax
jne 0xbce562
mov eax, 0xff
cmp ecx, eax
jg 0xbce554
mov word [edx], cx
mov ecx, dword [ebp + 0x28]
push 2
pop eax
add edx, eax
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 4]
sub eax, dword [ecx + 0x18]
sar eax, 1
inc eax
mov word [edx], ax
xor eax, eax
mov word [edx + 2], ax
push 4
pop eax
add edx, eax
jmp 0xb8ef80
mov edi, 0x81
jmp 0xbcbff3
movzx eax, word [esi + 2]
push 0x21
mov ecx, eax
pop edx
cmp ecx, edx
je 0xbcbff8
push 0x3d
pop edx
cmp ax, dx
je 0xbcc334
mov edx, 0xff
cmp ax, dx
ja 0xbce5a0
mov eax, dword [ebp + 0x28]
mov edi, ebx
push 0x10
pop ebx
mov edx, esi
mov eax, dword [eax + 0xc]
test byte [ecx + eax], bl
je 0xbce5a0
lea esi, [edx + 2]
movzx ebx, di
push 0x30
mov dword [ebp - 4], esi
movzx eax, word [esi]
pop edi
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x3c], esi
cmp ax, di
jb 0xbcc190
push 0x39
pop ecx
cmp ax, cx
jbe 0xbce508
mov edx, 0xff
mov ecx, esi
cmp ax, dx
ja 0xbcc1d6
mov ecx, dword [ebp + 0x28]
mov edx, esi
push 0x10
pop ebx
mov edi, dword [ecx + 0xc]
mov ecx, eax
movzx eax, cx
mov dword [ebp - 0x10], edx
test byte [eax + edi], bl
je 0xbcc1cd
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ecx, eax
mov dword [ebp - 0x10], esi
cmp ax, word [ebp - 0x98]
jbe 0xbcc1a9
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
push 0x30
pop edi
sub ecx, dword [ebp - 0x3c]
sar ecx, 1
cmp dword [ebp + 0x2c], 0
mov dword [ebp - 0x10], ecx
je 0xbcc324
mov edx, dword [ebp + 0x28]
push 0x3e
mov eax, dword [edx + 0x40]
inc eax
mov dword [ebp - 0x14], eax
xor eax, eax
cmp bx, word [ebp - 0xe4]
pop ebx
sete al
dec eax
and eax, 0xffffffe9
add eax, ebx
cmp word [esi], ax
jne 0xbce593
cmp dword [edx + 0x30], 0x2710
jge 0xbce585
lea eax, [ecx + 2]
cmp eax, dword [edx + 0x34]
jle 0xbcc239
push 0x20
mov dword [edx + 0x34], eax
pop eax
cmp ecx, eax
jle 0xbcc239
mov eax, dword [ebp + 0xc]
mov dword [eax], edi
jmp 0xbce691
mov edi, dword [edx + 0x28]
xor eax, eax
mov ebx, eax
cmp dword [edx + 0x30], eax
jle 0xbcc2a5
cmp ecx, dword [edi + 4]
jne 0xbcc289
mov edx, dword [edi]
push ecx
mov ecx, dword [ebp - 0x3c]
call fcn.00c0d169
pop ecx
test eax, eax
jne 0xbcc286
mov eax, dword [ebp - 0x14]
cmp dword [edi + 8], eax
je 0xbcc29f
test dword [ebp - 0x2c], 0x80000
je 0xbce566
mov edx, dword [ebp + 0x28]
mov eax, dword [ebp - 0xc]
mov dword [edx + 0x78], eax
mov ecx, dword [ebp - 0x10]
inc ebx
add edi, 0xc
cmp ebx, dword [edx + 0x30]
jl 0xbcc245
jmp 0xbcc2a2
mov edx, dword [ebp + 0x28]
mov eax, dword [ebp - 0x14]
cmp dword [edi + 8], eax
jne 0xbcc278
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x41
jmp 0xbce4da
mov edx, dword [ebp + 0x28]
mov esi, dword [ebp - 4]
mov eax, dword [edx + 0x30]
cmp ebx, eax
jl 0xbcc324
mov ebx, dword [ebp + 0x28]
mov ecx, dword [ebx + 0x38]
cmp eax, ecx
jl 0xbcc2f6
lea edi, [ecx + ecx]
imul eax, edi, 0xc
push eax
call fcn.00b8f275
mov esi, eax
pop ecx
test esi, esi
je 0xbce577
imul eax, dword [ebx + 0x38], 0xc
push eax
push dword [ebx + 0x28]
push esi
call fcn.00b921f0
add esp, 0xc
cmp dword [ebx + 0x38], 0x14
jle 0xbcc2ed
push dword [ebx + 0x28]
call fcn.00b8d909
pop ecx
mov eax, dword [ebx + 0x30]
mov dword [ebx + 0x28], esi
mov dword [ebx + 0x38], edi
mov edx, dword [ebp - 0x3c]
imul ecx, eax, 0xc
mov eax, dword [ebx + 0x28]
mov dword [ecx + eax], edx
imul ecx, dword [ebx + 0x30], 0xc
mov eax, dword [ebx + 0x28]
mov edx, dword [ebp - 0x10]
mov dword [ecx + eax + 4], edx
imul ecx, dword [ebx + 0x30], 0xc
mov eax, dword [ebx + 0x28]
mov edx, dword [ebp - 0x14]
mov dword [ecx + eax + 8], edx
inc dword [ebx + 0x30]
mov esi, dword [ebp - 4]
mov ecx, dword [ebp + 0x28]
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
jmp 0xb8ecf1
push 0x7f
pop edi
jmp 0xbcbffd
mov edx, dword [ebp - 8]
mov edi, 0x83
mov dword [ebp - 0x28], edi
jmp 0xb8ed04
test byte [ebp - 0x2c], 2
push 0
pop eax
setne al
mov dword [ebp - 0x18], ecx
add eax, 0x19
push 2
pop esi
mov word [edx], ax
add edx, esi
jmp 0xb8e648
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0xc]
jmp 0xb8eb47
test ecx, ecx
je 0xb8e33b
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x44]
push ebx
push eax
lea ecx, [esi + 2]
lea edx, [ebp - 0x4c]
call fcn.00c0c8e6
mov esi, eax
xor eax, eax
pop ecx
pop ecx
mov dword [ebp - 4], esi
cmp dword [ebx], eax
jne 0xbce691
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x4c]
jmp 0xb8eb50
add esi, 2
mov ebx, dword [ebp + 0x28]
mov edx, 0xff
movzx eax, word [esi]
mov ecx, eax
cmp ax, dx
ja 0xbcc3f1
mov edi, dword [ebx + 0xc]
mov edx, eax
push 2
pop ebx
movzx eax, dx
movzx ecx, dx
mov edx, dword [ebp - 0xc]
test byte [eax + edi], dl
je 0xbcc3e9
add esi, ebx
movzx eax, word [esi]
mov edx, eax
mov ecx, eax
cmp ax, word [ebp - 0x98]
jbe 0xbcc3c9
mov ebx, dword [ebp + 0x28]
mov edx, 0xff
push 0x23
pop eax
cmp cx, ax
jne 0xbcc4a1
push 2
pop eax
add esi, eax
movzx edi, word [esi]
test di, di
je 0xbcc3b7
mov eax, dword [ebp + 0x28]
mov edx, dword [eax + 0x84]
mov ecx, dword [eax + 0x1c]
test edx, edx
je 0xbcc441
cmp esi, ecx
jae 0xbcc46e
push dword [ebp - 0x7c]
lea edi, [eax + 0x88]
push edi
push ecx
mov ecx, esi
call fcn.00b9025e
add esp, 0xc
test eax, eax
je 0xbcc46e
mov edx, dword [edi]
lea esi, [esi + edx*2]
jmp 0xbcc3af
mov edx, dword [eax + 0x88]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0xbcc46e
mov ecx, dword [ebp + 0x28]
cmp di, word [ecx + 0x8c]
jne 0xbcc46e
cmp edx, dword [ebp - 0xc]
je 0xbcc439
mov ax, word [esi + 2]
cmp ax, word [ecx + 0x8e]
je 0xbcc439
push 2
pop ecx
add esi, ecx
cmp dword [ebp - 0x5c], 0
je 0xbcc490
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0xbcc490
add esi, ecx
movzx edi, word [esi]
test di, di
jne 0xbcc40a
jmp 0xbcc3af
mov ebx, dword [ebp + 0xc]
add esi, 0xfffffffe
mov dword [ebp - 4], esi
jmp 0xb8eb9e
cmp word [esi + 4], di
jne 0xb8ebae
cmp word [esi + 6], ax
jne 0xb8ebae
add esi, 8
mov dword [ebp - 4], esi
movzx eax, word [esi]
test ax, ax
je 0xbcc4fd
push 0x29
mov edx, esi
mov ecx, eax
pop ebx
cmp cx, bx
je 0xbcc4ef
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ecx, eax
test ax, ax
jne 0xbcc4d8
mov ebx, dword [ebp + 0xc]
xor edx, edx
cmp word [esi], dx
jne 0xb8ebb0
mov dword [ebx], 0x12
jmp 0xbce691
mov eax, dword [ebp - 0xc]
mov esi, ecx
mov edi, edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], esi
jmp 0xb8ebda
mov edi, dword [ebp - 0xec]
jmp 0xb8ebd7
push 4
pop esi
push esi
push edx
lea eax, [edx + 4]
push eax
call fcn.00b94760
mov edx, dword [ebp - 0x18]
lea eax, [esi + 0x7d]
add dword [ebp - 8], 8
add esp, 0xc
cmp dword [ebp + 0x2c], 0
mov word [edx], ax
push 0x78
pop eax
mov word [edx + 2], si
mov word [edx + 8], ax
mov word [edx + 0xa], si
mov dword [ebp - 0x8c], 6
jne 0xbcc599
mov eax, dword [ebp + 0x28]
push 2
pop ecx
mov edx, dword [eax + 0x20]
mov eax, dword [eax + 0x10]
add eax, ecx
cmp edx, eax
jb 0xbcc596
mov eax, dword [ebp + 0x28]
mov ecx, dword [ebp - 0x18]
movzx esi, word [edx - 2]
push 2
sub ecx, dword [eax + 0x14]
pop eax
add ecx, eax
sar ecx, 1
cmp esi, ecx
jne 0xbcc596
lea eax, [esi + 2]
mov word [edx - 2], ax
mov edx, dword [ebp - 0x18]
mov esi, dword [ebp - 4]
jmp 0xb8ebe9
push 0x6e
pop eax
cmp cx, ax
je 0xbccbb5
push 0x6f
pop eax
cmp cx, ax
je 0xbccbb5
push 0x70
pop eax
cmp cx, ax
je 0xbccbb5
push 0x71
pop eax
cmp cx, ax
je 0xbccbb5
cmp ecx, 0x72
je 0xbccbb5
push 0x73
pop eax
cmp cx, ax
je 0xbccbb5
cmp ecx, 0x74
je 0xbccbb5
lea eax, [ecx - 0x7d]
cmp ax, word [ebp - 0x120]
ja 0xbccb9c
mov eax, dword [ebp - 0x40]
mov ebx, dword [ebp - 8]
mov dword [ebp - 0x10], eax
sub ebx, edx
xor eax, eax
sar ebx, 1
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x38], eax
mov eax, 0x87
mov dword [ebp - 0x3c], ebx
cmp cx, ax
jne 0xbcc62e
add eax, 0xa
cmp word [edx + 4], ax
je 0xb8ecd1
mov eax, 0x81
cmp cx, ax
mov ecx, dword [ebp - 0x4c]
jae 0xbcc657
test ecx, ecx
jg 0xb8ecd1
mov eax, dword [ebp - 0x44]
test eax, eax
js 0xbcc64f
cmp eax, 1
jle 0xbcc65a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x44], eax
jmp 0xbcc65a
mov eax, dword [ebp - 0x44]
test ecx, ecx
jne 0xbcc720
push dword [ebp - 0x40]
lea esi, [edx + 2]
mov edx, dword [ebp - 0xc]
push dword [ebp + 0x28]
cmp eax, edx
mov eax, dword [ebp - 8]
push dword [ebp - 0x7c]
mov word [eax], cx
mov ecx, dword [ebp - 0x18]
jg 0xbcc6c6
call fcn.00c0be5b
add esp, 0xc
lea eax, [ebx + ebx]
push eax
push dword [ebp - 0x18]
push esi
call fcn.00b94760
add esp, 0xc
push 2
pop eax
add dword [ebp - 8], eax
cmp dword [ebp - 0x44], 0
jne 0xbcc6b2
mov eax, dword [ebp - 0x18]
mov ecx, 0xa1
mov word [eax], cx
jmp 0xbccfc3
mov ecx, dword [ebp - 0x18]
lea eax, [edi + 0x92]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x18], esi
mov word [ecx], ax
jmp 0xbcc714
push 3
pop edx
call fcn.00c0be5b
add esp, 0xc
lea eax, [ebx + ebx]
push eax
mov eax, dword [ebp - 0x18]
push eax
add eax, 6
push eax
call fcn.00b94760
mov ecx, dword [ebp - 0x18]
lea eax, [edi + 0x92]
add dword [ebp - 8], 6
add esp, 0xc
mov edi, esi
mov word [ecx], ax
mov eax, edi
mov ecx, 0x83
mov word [edi], cx
push 2
pop ecx
add edi, ecx
xor ecx, ecx
add eax, 4
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], eax
mov word [edi], cx
mov edx, dword [ebp - 0x44]
mov esi, dword [ebp - 4]
dec edx
jmp 0xbcc85f
mov eax, dword [ebp - 0xc]
cmp ecx, eax
jle 0xbcc856
cmp dword [ebp + 0x2c], 0
je 0xbcc77b
lea eax, [ecx - 1]
xor ecx, ecx
mov edi, eax
imul dword [ebp - 0x8c]
imul edi, dword [ebp - 0x8c]
cmp edx, ecx
jg 0xbce480
jl 0xbcc75a
cmp eax, 0x7fffffff
ja 0xbce480
mov edx, dword [ebp + 0x2c]
mov eax, 0x7fffffeb
mov ecx, dword [edx]
sub eax, ecx
cmp eax, edi
jl 0xbce480
lea eax, [ecx + edi]
mov ecx, dword [ebp - 0x4c]
mov dword [edx], eax
jmp 0xbcc856
cmp dword [ebp - 0xa0], 0
je 0xbcc799
cmp dword [ebp - 0x54], 0
jge 0xbcc799
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov ebx, eax
cmp ecx, eax
jle 0xbcc853
mov esi, dword [ebp + 0x28]
mov edi, dword [ebp - 0x3c]
mov eax, dword [ebp - 8]
add edi, edi
mov dword [ebp - 0x1c], edi
mov ecx, dword [esi + 0x10]
mov esi, dword [esi + 0x20]
push edi
push edx
sub esi, ecx
push eax
sar esi, 1
call fcn.00b921f0
add esp, 0xc
jmp 0xbcc7df
mov ecx, edx
call fcn.00c0c1d1
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test eax, eax
jne 0xbce4da
mov edx, dword [ebp + 0x28]
mov eax, dword [ebp - 0x10]
sub eax, esi
add eax, 0xffffff9c
add eax, dword [edx + 0x3c]
mov ecx, dword [edx + 0x10]
lea eax, [ecx + eax*2]
cmp dword [edx + 0x20], eax
ja 0xbcc7cb
mov eax, dword [ebp - 0x10]
lea edx, [ecx + eax*2]
lea eax, [ecx + esi*2]
cmp edx, eax
jae 0xbcc82f
mov edi, dword [ebp - 0x3c]
mov ebx, dword [ebp + 0x28]
mov cx, word [edx]
mov eax, dword [ebx + 0x20]
add cx, di
push 2
mov word [eax], cx
pop eax
add dword [ebx + 0x20], eax
add edx, eax
mov ecx, dword [ebx + 0x10]
lea eax, [ecx + esi*2]
cmp edx, eax
jb 0xbcc80b
mov edi, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x18]
add eax, edi
inc ebx
mov dword [ebp - 0x10], esi
mov esi, dword [ebp + 0x28]
mov dword [ebp - 8], eax
mov dword [ebp - 0x30], ebx
cmp ebx, dword [ebp - 0x4c]
jl 0xbcc7b7
mov esi, dword [ebp - 4]
mov ecx, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
test edx, edx
jle 0xbcc864
sub edx, ecx
mov dword [ebp - 0x44], edx
test edx, edx
js 0xbcca25
mov edi, dword [ebp + 0x2c]
test edi, edi
je 0xbcc8bc
test edx, edx
jle 0xbcc8bc
mov eax, dword [ebp - 0x8c]
add eax, 5
mov ecx, eax
imul ecx, edx
push 4
imul edx
pop ebx
sub ecx, ebx
xor ebx, ebx
cmp edx, ebx
jg 0xbce480
jl 0xbcc8a1
cmp eax, 0x7fffffff
ja 0xbce480
mov edx, dword [edi]
mov eax, 0x7fffffeb
sub eax, edx
cmp eax, ecx
jl 0xbce480
lea eax, [edx + ecx]
mov dword [edi], eax
jmp 0xbcc9c8
lea eax, [edx - 1]
mov dword [ebp - 0x38], eax
test eax, eax
js 0xbcc9c8
mov edx, dword [ebp + 0x28]
mov esi, dword [ebp - 0x28]
add esi, 0x92
mov dword [ebp - 0x30], esi
mov ecx, dword [edx + 0x20]
mov edi, dword [edx + 0x10]
lea edx, [ebx + ebx]
sub ecx, edi
mov edi, dword [ebp - 8]
push 2
sar ecx, 1
mov ebx, ecx
mov word [edi], si
pop esi
add edi, esi
mov dword [ebp - 8], edi
test eax, eax
je 0xbcc920
mov ecx, dword [ebp - 0x14]
mov eax, 0x83
mov word [edi], ax
add edi, esi
test ecx, ecx
jne 0xbcc90f
xor eax, eax
jmp 0xbcc915
mov eax, edi
sub eax, ecx
sar eax, 1
mov dword [ebp - 0x14], edi
mov word [edi], ax
add edi, esi
mov dword [ebp - 8], edi
push edx
push dword [ebp - 0x18]
push edi
call fcn.00b921f0
mov esi, dword [ebp - 0x10]
add esp, 0xc
jmp 0xbcc946
mov ecx, edx
call fcn.00c0c1d1
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test eax, eax
jne 0xbce4da
mov edx, dword [ebp + 0x28]
mov eax, esi
sub eax, ebx
add eax, 0xffffff9c
add eax, dword [edx + 0x3c]
mov edi, dword [edx + 0x10]
mov ecx, dword [edx + 0x20]
lea eax, [edi + eax*2]
cmp ecx, eax
ja 0xbcc932
lea esi, [edi + esi*2]
lea eax, [edi + ebx*2]
cmp esi, eax
jae 0xbcc9a7
xor eax, eax
cmp dword [ebp - 0x38], eax
setne al
lea eax, [eax*2 + 1]
movzx edx, ax
mov edi, dword [ebp + 0x28]
mov cx, word [esi]
add cx, dx
add cx, word [ebp - 0x3c]
mov eax, dword [edi + 0x20]
push 2
mov word [eax], cx
mov ecx, dword [edi + 0x20]
add ecx, 2
mov dword [edi + 0x20], ecx
mov edi, dword [edi + 0x10]
pop eax
add esi, eax
lea eax, [edi + ebx*2]
cmp esi, eax
jb 0xbcc97c
mov eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x10], ebx
lea edx, [eax + eax]
mov eax, dword [ebp - 0x38]
add dword [ebp - 8], edx
sub eax, 1
mov dword [ebp - 0x38], eax
jns 0xbcc8e2
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0xbcca1d
mov esi, dword [ebp - 8]
push 2
pop edi
mov ecx, esi
mov edx, esi
sub ecx, ebx
sar ecx, 1
inc ecx
lea eax, [ecx + ecx]
sub edx, eax
movzx eax, word [edx + 2]
test eax, eax
jne 0xbcc9ef
mov ebx, eax
jmp 0xbcc9f4
neg eax
lea ebx, [ebx + eax*2]
push 0x78
pop eax
mov word [esi], ax
add esi, edi
movzx eax, cx
mov word [esi], ax
add esi, edi
mov word [edx + 2], ax
test ebx, ebx
jne 0xbcc9d5
mov dword [ebp - 8], esi
jmp 0xbcca1a
mov eax, dword [ebp - 0x28]
add eax, 0x79
mov word [ebx], ax
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 8]
jmp 0xb8ecc7
mov edx, dword [ebp - 8]
mov esi, 0x81
lea ebx, [edx - 4]
movzx eax, word [ebx + 2]
mov edi, ebx
add eax, eax
sub edi, eax
movzx ecx, word [edi]
cmp cx, si
je 0xbcca4d
mov eax, ecx
cmp cx, word [ebp - 0x124]
jne 0xbcca5d
cmp dword [ebp - 0x20], 0
mov eax, ecx
je 0xbcca5d
mov eax, 0x83
mov word [edi], ax
cmp ax, si
je 0xbcca11
mov ecx, 0x82
cmp ax, cx
je 0xbcca11
cmp dword [ebp + 0x2c], 0
jne 0xbccaa5
mov esi, edi
xor eax, eax
mov edx, ebx
push eax
push dword [ebp + 0x28]
mov ecx, esi
push dword [ebp - 0x7c]
call fcn.00b8f4f0
add esp, 0xc
test eax, eax
jne 0xbcca9e
movzx eax, word [esi + 2]
push 0x77
lea esi, [esi + eax*2]
pop eax
cmp word [esi], ax
je 0xbcca74
jmp 0xbccaa2
add word [edi], 5
mov edx, dword [ebp - 8]
movzx eax, word [edi]
mov esi, 0x87
mov ecx, eax
cmp ax, si
jne 0xbccad0
movzx eax, word [edi + 2]
mov ecx, esi
push 0x77
pop ebx
cmp word [edi + eax*2], bx
lea ebx, [edx - 4]
lea eax, [esi + 5]
je 0xbccad5
mov word [edi], ax
mov ecx, eax
jmp 0xbccad5
mov eax, 0x8c
cmp dword [ebp - 0x20], 0
je 0xbccb8e
cmp cx, si
je 0xbccafa
cmp cx, ax
je 0xbccafa
lea eax, [ecx + 1]
push 0x7b
mov word [edi], ax
pop eax
push 2
mov word [ebx], ax
pop ebx
jmp 0xbccb6c
push dword [ebp - 0x40]
mov esi, edx
xor eax, eax
push dword [ebp + 0x28]
mov word [edx], ax
sub esi, edi
push dword [ebp - 0x7c]
mov ecx, edi
sar esi, 1
push 2
pop ebx
mov edx, ebx
call fcn.00c0be5b
add esp, 0xc
lea eax, [esi + esi]
push eax
lea eax, [edi + 4]
push edi
push eax
call fcn.00b94760
mov edx, dword [ebp - 8]
add esp, 0xc
xor ecx, ecx
push 4
pop eax
add edx, eax
movzx eax, word [edi]
cmp ax, word [ebp - 0x128]
push 0x7b
sete cl
dec ecx
and ecx, 5
add ecx, 0x84
mov word [edi], cx
pop eax
mov word [edx], ax
add edx, ebx
lea eax, [esi + 2]
movzx eax, ax
mov word [edx], ax
add edx, ebx
mov dword [ebp - 8], edx
mov word [edi + 2], ax
mov eax, dword [ebp - 0x38]
test eax, eax
je 0xbccb7b
mov ecx, 0x94
mov word [eax], cx
cmp dword [ebp - 0x4c], ebx
jge 0xb8ecc4
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0xb8ecc4
mov eax, dword [ebp - 0x28]
add eax, 0x79
mov word [ebx], ax
jmp 0xbccfc3
mov eax, 0x9d
cmp cx, ax
je 0xb8ecd1
mov dword [ebx], 0xb
jmp 0xbce691
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0xbccbc4
mov dword [ebp - 8], edx
jmp 0xb8ecd1
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
jne 0xbccbea
cmp eax, 0xffffffff
jne 0xbccbe0
lea eax, [edi + 0x62]
jmp 0xbccbd8
lea eax, [edi + 0x64]
mov edx, dword [ebp - 8]
push 2
pop ecx
jmp 0xbccc24
cmp eax, dword [ebp - 0xc]
jne 0xbccbf4
lea eax, [edi + 0x66]
jmp 0xbccbd8
cmp ecx, dword [ebp - 0xc]
jne 0xbccbf4
cmp eax, 0xffffffff
je 0xbccbd5
mov edx, dword [ebp - 8]
lea eax, [edi + 0x68]
push 2
pop ecx
mov word [edx], ax
add edx, ecx
mov ax, word [ebp - 0x4c]
mov word [edx], ax
add edx, ecx
mov eax, dword [ebp - 0x44]
inc eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0x44]
mov dword [ebp - 0x44], eax
jmp 0xbccc24
mov eax, dword [ebp - 0x10]
mov word [edx], si
add edx, 2
mov word [edx], ax
add edx, ecx
mov dword [ebp - 8], edx
jmp 0xb8ecc4
push 0x1e
mov eax, ecx
pop edx
sub eax, edx
je 0xbccc51
sub eax, 1
je 0xbccc4c
sub eax, 1
je 0xbccc48
xor eax, eax
jmp 0xbccc54
push 0x27
jmp 0xbccc53
push 0x1a
pop ebx
jmp 0xbccc56
push 0xd
pop eax
mov ebx, eax
cmp dword [ebp - 0x5c], 0
mov edi, dword [ebp - 8]
je 0xbccca9
lea edx, [edi - 2]
mov ax, word [edx]
and ax, word [ebp - 0x12c]
cmp ax, word [ebp - 0x130]
jne 0xbccca9
push 2
pop eax
sub edx, eax
sub edi, edx
sar edi, 1
lea eax, [edi + edi]
push eax
push edx
lea eax, [ebp - 0x188]
push eax
call fcn.00b921f0
mov edx, dword [ebp - 0x18]
add esp, 0xc
mov esi, dword [ebp - 4]
or edi, 0x10000000
mov dword [ebp - 0x1c], edi
movzx eax, word [edx]
jmp 0xb8ec39
mov eax, dword [ebp - 0x30]
movzx edi, word [edi - 2]
movzx edx, ax
mov eax, edx
mov dword [ebp - 0x1c], edi
cmp cx, word [ebp - 0xe8]
ja 0xbcccdd
mov ecx, dword [ebp - 0xc]
cmp dword [ebp - 0x4c], ecx
jle 0xbcccdd
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x60], edi
mov eax, dword [eax + 0x68]
or eax, dword [ebp - 0x94]
mov dword [ebp - 0x54], eax
mov eax, edx
mov edx, dword [ebp - 0x18]
jmp 0xb8ec39
lea edi, [edx + 2]
movzx eax, word [edi]
mov dword [ebp - 0x14], eax
movzx eax, word [edx + 4]
mov dword [ebp - 0x10], eax
jmp 0xb8ec5f
cmp ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
push 2
jne 0xbccd12
add eax, 0x25
jmp 0xbcce4c
add eax, 0x27
jmp 0xbccd1a
lea eax, [edx + 0x27]
mov word [ecx], ax
mov ax, word [ebp - 0x44]
pop ecx
mov word [edi], ax
add edi, ecx
jmp 0xb8ec9f
cmp dword [ebp - 0x4c], 1
jne 0xbccd60
cmp eax, 0xffffffff
jne 0xbccd3f
mov ecx, dword [ebp - 0x18]
lea eax, [edx + 0x23]
jmp 0xbccd58
mov dword [ebp - 8], ecx
cmp eax, dword [ebp - 0xc]
je 0xb8ecd1
lea eax, [edx + 0x27]
mov word [ecx], ax
add ecx, 2
mov eax, dword [ebp - 0x44]
dec eax
lea edi, [ecx + 2]
jmp 0xb8ec93
mov ecx, dword [ebp - 0x18]
lea eax, [ebx + 0x29]
push 2
mov word [ecx], ax
lea edi, [ecx + 2]
mov ax, word [ebp - 0x4c]
mov word [edi], ax
mov eax, dword [ebp - 0x44]
pop ecx
add edi, ecx
test eax, eax
jns 0xbccdd8
cmp dword [ebp - 0x5c], 0
mov ebx, dword [ebp - 0x1c]
je 0xbccdb2
test ebx, 0x10000000
je 0xbccdb2
mov esi, ebx
lea eax, [ebp - 0x188]
and esi, 7
add esi, esi
push esi
push eax
push edi
call fcn.00b921f0
mov edx, dword [ebp - 0x30]
add esp, 0xc
add edi, esi
push 2
pop ecx
jmp 0xbccdcb
mov eax, dword [ebp - 0x14]
mov word [edi], bx
add edi, ecx
test eax, eax
js 0xbccdcb
mov word [edi], ax
add edi, ecx
mov eax, dword [ebp - 0x10]
mov word [edi], ax
add edi, ecx
lea eax, [edx + 0x21]
mov word [edi], ax
add edi, ecx
jmp 0xb8ec9c
cmp eax, dword [ebp - 0x4c]
je 0xb8ec99
cmp dword [ebp - 0x5c], 0
mov ebx, dword [ebp - 0x1c]
je 0xbcce0f
test ebx, 0x10000000
je 0xbcce0f
mov esi, ebx
lea eax, [ebp - 0x188]
and esi, 7
add esi, esi
push esi
push eax
push edi
call fcn.00b921f0
mov edx, dword [ebp - 0x30]
add esp, 0xc
jmp 0xbcce14
mov word [edi], bx
mov esi, ecx
lea ecx, [esi + edi]
mov esi, dword [ebp - 0x14]
test esi, esi
js 0xbcce2f
mov eax, dword [ebp - 0x10]
mov word [ecx], si
add ecx, 2
push 2
mov word [ecx], ax
pop eax
add ecx, eax
mov eax, dword [ebp - 0x44]
lea edi, [ecx + 2]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
movzx edx, dx
push 2
cmp eax, 1
jne 0xbccd17
lea eax, [edx + 0x25]
mov word [ecx], ax
pop ecx
jmp 0xb8ec9f
and ebx, 7
lea eax, [ebp - 0x188]
add ebx, ebx
push ebx
push eax
push edi
call fcn.00b921f0
add esp, 0xc
push 2
pop ecx
jmp 0xb8ecb6
mov eax, dword [ebp - 0x48]
movzx ecx, word [eax]
mov eax, ecx
cmp eax, 0x50
ja 0xbcceee
je 0xbcceab
push 0x1d
pop ecx
cmp eax, ecx
jb 0xbccf34
push 0x20
pop ecx
cmp eax, ecx
jbe 0xbcceab
push 0x29
pop ecx
cmp eax, ecx
je 0xbcceab
cmp eax, 0x36
je 0xbcceab
push 0x43
pop ecx
cmp eax, ecx
jne 0xbccf34
cmp dword [ebp - 0x5c], 0
movzx ecx, byte [eax + 0xc31d40]
mov eax, dword [ebp - 0x48]
lea ecx, [eax + ecx*2]
mov dword [ebp - 0x48], ecx
je 0xbccf34
mov ax, word [ecx - 2]
mov ebx, 0xfc00
and ax, bx
mov ebx, 0xd800
cmp ax, bx
jne 0xbccf34
lea eax, [ecx + 2]
jmp 0xbccee9
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
movzx ecx, word [ecx + 2]
lea eax, [eax + ecx*2]
mov dword [ebp - 0x48], eax
jmp 0xbccf34
push 0x5d
pop ebx
cmp eax, ebx
je 0xbccf13
push 0x6d
pop ebx
cmp eax, ebx
jbe 0xbccf34
push 0x6f
pop ebx
cmp eax, ebx
jbe 0xbccf0d
push 0x70
pop eax
cmp cx, ax
jne 0xbccf34
jmp 0xbccedc
add dword [ebp - 0x48], 0x22
jmp 0xbccf34
mov eax, dword [ebp - 0x48]
push 0x10
pop ecx
movzx eax, word [eax + 4]
cmp ax, cx
je 0xbccf2e
push 0xf
pop ecx
cmp ax, cx
je 0xbccf2e
push 6
jmp 0xbccf30
push 0xa
pop eax
add dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov edi, edx
sub edi, ecx
mov ebx, edi
sar ebx, 1
test ebx, ebx
jle 0xb8ecd1
movzx eax, word [ecx]
push 0x76
pop esi
cmp eax, esi
jae 0xbccf63
mov al, byte [eax + 0xc347c0]
test al, al
je 0xbccf63
movzx eax, al
mov word [ecx], ax
jmp 0xbccfc3
push dword [ebp - 0x40]
xor eax, eax
push dword [ebp + 0x28]
mov word [edx], ax
push dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x48]
push 2
pop esi
mov edx, esi
call fcn.00c0be5b
mov eax, dword [ebp - 0x48]
add esp, 0xc
and edi, 0xfffffffe
push edi
push eax
add eax, 4
push eax
call fcn.00b94760
mov edx, dword [ebp - 8]
lea ecx, [esi + 0x7f]
add esp, 0xc
push 4
pop eax
add edx, eax
mov eax, dword [ebp - 0x48]
push 0x78
mov word [eax], cx
pop eax
mov word [edx], ax
add edx, esi
lea eax, [ebx + 2]
movzx ecx, ax
mov word [edx], cx
add edx, esi
mov eax, dword [ebp - 0x48]
mov dword [ebp - 8], edx
mov word [eax + 2], cx
mov esi, dword [ebp - 4]
jmp 0xb8ecd1
xor eax, eax
test byte [ebp - 0x2c], 2
mov dword [ebp - 0x18], eax
je 0xbccfe8
cmp dword [ebp - 0x34], 0xfffffffe
jne 0xbccfe4
or dword [ebp - 0x34], 0xffffffff
or dword [ebp - 0x70], 0xffffffff
push 0x1c
jmp 0xbccfea
push 0x1b
pop ecx
mov word [edx], cx
add edx, 2
jmp 0xb8ef80
mov eax, dword [ebp + 0x28]
test dword [eax + 0x60], 0x2000000
je 0xb8e33b
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x40
jmp 0xbce691
mov edx, dword [ebp - 8]
jmp 0xb8e33b
add esi, 2
mov ebx, 0xfc00
push 2
mov ax, word [esi]
and ax, bx
mov ebx, 0xdc00
cmp ax, bx
jne 0xb8e363
mov dword [ebp - 4], esi
mov ax, word [esi]
pop esi
mov word [ebp - 0x112], ax
mov edi, esi
jmp 0xb8e364
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x5c], edx
je 0xbcd081
mov ecx, 0xffff
cmp eax, ecx
jbe 0xbcd081
mov ecx, eax
jmp 0xbcd069
mov ecx, edi
lea edx, [ebp - 0x114]
call fcn.00c0d199
mov edx, dword [ebp - 8]
mov edi, eax
mov ecx, dword [ebp - 0xc]
jmp 0xb8e361
mov ecx, dword [ebp - 0xc]
mov word [ebp - 0x114], ax
jmp 0xbcd094
mov word [ebp - 0x114], di
mov edx, dword [ebp - 8]
mov edi, ecx
jmp 0xb8e361
mov eax, dword [esi + 0x20]
xor ebx, ebx
sub eax, dword [esi + 0x10]
mov esi, dword [ebp - 4]
add esi, 2
sar eax, 1
push 0x3c
pop edi
mov dword [ebp - 4], esi
cmp word [esi], di
lea edx, [esi + 2]
push 0x3e
sete bl
mov dword [ebp - 0x40], eax
dec ebx
mov dword [ebp - 0x80], edx
pop eax
and ebx, 0xffffffe9
add ebx, eax
movzx eax, word [edx]
push 0x2b
pop ecx
mov dword [ebp - 0x14], ebx
cmp ax, cx
je 0xbcd0fa
push 0x2d
pop ecx
cmp ax, cx
je 0xbcd0fa
push 0x30
pop ecx
cmp ax, cx
jb 0xbcba85
push 0x39
pop ecx
cmp ax, cx
ja 0xbcba85
lea edi, [esi + 4]
movzx eax, word [edi]
mov ecx, eax
cmp ax, word [ebp - 0x90]
jb 0xbcd12c
push 2
pop ebx
push 0x39
pop edx
cmp cx, dx
ja 0xbcd126
add edi, ebx
movzx eax, word [edi]
mov ecx, eax
cmp ax, word [ebp - 0x90]
jae 0xbcd111
mov edx, dword [ebp - 0x80]
mov ebx, dword [ebp - 0x14]
cmp word [edi], bx
jne 0xbce64a
mov esi, edx
mov dword [ebp - 4], esi
movzx ecx, word [esi]
push 0x2b
pop eax
movzx ebx, cx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x38], ebx
cmp cx, ax
jne 0xbcd207
lea esi, [edx + 2]
push 0x30
mov dword [ebp - 4], esi
movzx eax, word [esi]
pop edx
cmp ax, dx
jb 0xbcd16b
push 0x39
pop edx
cmp ax, dx
jbe 0xbcd17e
mov eax, dword [ebp + 0xc]
push 0x3f
pop edx
mov dword [eax], edx
jmp 0xbce691
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
xor eax, eax
mov edi, eax
movzx eax, word [esi]
cmp ax, word [ebp - 0x90]
jb 0xbcd1cf
push 0x30
mov ebx, eax
pop ecx
push 0x39
pop eax
cmp bx, ax
ja 0xbcd1c9
cmp edi, 0xccccccb
jg 0xbce60f
imul ecx, edi, 0xa
lea esi, [edx + 2]
movzx edi, bx
mov edx, esi
push 0x30
mov dword [ebp - 4], esi
movzx eax, word [esi]
add ecx, 0xffffffd0
mov ebx, eax
add edi, ecx
pop ecx
cmp ax, cx
jae 0xbcd195
mov ebx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
cmp word [esi], ax
jne 0xbce54c
push 0x2d
pop eax
cmp cx, ax
jne 0xbcd3f6
test edi, edi
je 0xbce643
mov ebx, dword [ebp + 0x28]
mov eax, dword [ebx + 0x40]
sub eax, edi
lea edi, [eax + 1]
test edi, edi
jg 0xbcd63b
jmp 0xbce544
push 0x2d
pop eax
cmp cx, ax
jne 0xbcd180
movzx eax, word [esi + 2]
mov dword [ebp - 0x20], edx
movzx edi, cx
cmp ax, word [ebp - 0x90]
jb 0xbcd239
mov dword [ebp - 0x20], edx
movzx edi, cx
cmp ax, word [ebp - 0xc0]
jbe 0xbcd178
mov edx, dword [ebp - 0x20]
jmp 0xb8e79d
push 0x2d
pop edx
cmp ax, dx
je 0xbcd284
cmp eax, 0x4a
je 0xbcd26f
cmp eax, 0x55
je 0xbcd264
cmp eax, 0x58
jne 0xbce5cb
or dword [ecx], 0x40
jmp 0xb8e7e4
or dword [ecx], 0x200
jmp 0xb8e7e4
mov eax, dword [ebp + 0x28]
or dword [ecx], 0x80000
or dword [eax + 0x64], 0x400
jmp 0xb8e7e4
lea ecx, [ebp - 0x10]
jmp 0xb8e7e4
push 0x6d
pop edx
cmp ax, dx
je 0xbcd2b4
push 0x73
pop edx
cmp ax, dx
je 0xbcd2b0
push 0x78
pop eax
cmp di, ax
jne 0xbce5cb
or dword [ecx], 8
jmp 0xb8e7e4
push 4
jmp 0xbcd2b6
push 2
pop eax
jmp 0xb8e7e2
mov ebx, dword [ebp - 0x20]
mov ecx, eax
jmp 0xb8e800
mov ecx, dword [ebp + 0x28]
mov edx, dword [ebp - 8]
mov ebx, dword [ebp - 0x1c]
jmp 0xb8ed04
xor ecx, ecx
cmp dword [eax + 0x80], ecx
je 0xb8ed2f
mov dword [ebp - 0x18], ecx
mov dword [eax + 0x80], ecx
jmp 0xb8ed3f
mov ecx, dword [ebp - 0xc]
jmp 0xb8ed88
cmp dword [ecx + 0x40], esi
ja 0xb8ee06
mov eax, dword [ebp - 8]
mov edx, 0x82
mov word [eax], dx
jmp 0xb8edec
dec dword [ecx + 0x5c]
jmp 0xb8edf9
cmp dword [ebp + 0x2c], 0
jne 0xb8ee06
mov ecx, eax
xor eax, eax
push 0x78
mov esi, eax
pop edi
movzx eax, word [ecx + 2]
mov edx, esi
inc esi
lea ecx, [ecx + eax*2]
cmp word [ecx], di
jne 0xbcd32c
mov eax, dword [ebp - 8]
mov ecx, 0x91
mov edi, dword [ebp - 0x80]
cmp word [eax + 4], cx
jne 0xbcd35c
cmp edx, dword [ebp - 0xc]
jge 0xbce5de
mov ebx, ecx
jmp 0xb8ee06
push 2
pop eax
cmp edx, eax
jge 0xbce5ec
cmp esi, dword [ebp - 0xc]
jne 0xb8ee06
or eax, 0xffffffff
or ecx, eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xac], ecx
jmp 0xb8ee0c
test ecx, ecx
js 0xbcd3a1
mov ebx, dword [ebp - 0xf4]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0xa0], ecx
jmp 0xbcd3a5
or dword [ebp - 0x34], 0xffffffff
or dword [ebp - 0x70], 0xffffffff
jmp 0xb8ee7f
test eax, eax
jns 0xbcd3e5
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xb4], eax
mov eax, ecx
or eax, edi
mov dword [ebp - 0x9c], eax
jmp 0xb8ee7f
cmp ebx, 0x7d
jne 0xb8e467
test eax, eax
js 0xb8e467
test ecx, ecx
jmp 0xb8ee81
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x54], eax
jmp 0xb8e467
push 0x2b
pop eax
cmp bx, ax
jne 0xbcd638
test edi, edi
je 0xbce643
mov ebx, dword [ebp + 0x28]
add edi, dword [ebx + 0x40]
jmp 0xbcd63b
mov esi, dword [ebp - 4]
push 0x3c
pop edi
movzx eax, word [esi + 2]
cmp ax, di
je 0xbcd43d
cmp ax, word [ebp - 0x140]
je 0xbcd43d
cmp ax, word [ebp - 0x144]
je 0xbcd43d
push 0x45
jmp 0xbce5c3
add esi, 2
mov dword [ebp - 0x10], edx
mov dword [ebp - 4], esi
movzx eax, word [esi]
cmp ax, di
jne 0xbcd456
push 0x3e
pop eax
mov dword [ebp - 0x14], eax
jmp 0xbcd46b
xor ecx, ecx
push 0x27
pop edx
cmp ax, dx
setne cl
dec ecx
and ecx, 0xffffffaa
add ecx, 0x7d
mov dword [ebp - 0x14], ecx
add esi, 2
push 0x30
mov dword [ebp - 4], esi
mov ecx, esi
pop edx
movzx eax, word [esi]
mov dword [ebp - 0x30], ecx
cmp ax, dx
jb 0xbcd494
push 0x39
pop edx
cmp ax, dx
ja 0xbcd494
mov dword [ebx], 0x54
jmp 0xbce691
mov edx, 0xff
mov ebx, esi
cmp ax, dx
ja 0xbcd4d2
mov ecx, dword [ebp + 0x28]
mov edx, esi
mov edi, dword [ecx + 0xc]
mov ecx, eax
movzx eax, cx
mov ebx, edx
push 0x10
pop ecx
test byte [eax + edi], cl
je 0xbcd4cf
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ebx, esi
mov ecx, eax
cmp ax, word [ebp - 0x98]
jbe 0xbcd4aa
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp + 0x2c]
sub ebx, ecx
sar ebx, 1
test edx, edx
je 0xbcd592
xor eax, eax
mov edi, eax
mov dword [ebp - 0x38], edi
test ebx, ebx
je 0xbce65f
mov eax, dword [ebp - 0x14]
cmp word [esi], ax
jne 0xbce658
push 0x20
pop eax
cmp ebx, eax
jg 0xbce651
mov ecx, dword [ebp + 0x28]
cmp dword [ebp - 0x10], edi
jne 0xbcd512
inc dword [ecx + 0x54]
mov eax, dword [edx]
push 9
pop esi
add eax, esi
mov dword [edx], eax
cmp dword [ecx + 0x7c], edi
je 0xbcd525
add eax, 8
mov dword [edx], eax
mov esi, dword [ecx + 0x28]
xor eax, eax
mov ecx, dword [ecx + 0x30]
mov edx, eax
mov dword [ebp - 0x40], edx
test ecx, ecx
jle 0xbcd58d
cmp ebx, dword [esi + 4]
jne 0xbcd57c
mov edx, dword [esi]
mov ecx, dword [ebp - 0x30]
push ebx
call fcn.00c0d169
pop ecx
test eax, eax
jne 0xbcd579
mov edi, dword [esi + 8]
mov dword [ebp - 0x38], edi
cmp dword [ebp - 0x10], eax
jne 0xbcd638
mov eax, dword [ebp + 0x28]
mov ecx, dword [eax + 0x24]
jmp 0xbcd56c
movzx eax, word [ecx + 4]
cmp eax, edi
je 0xbcd572
mov ecx, dword [ecx]
test ecx, ecx
jne 0xbcd562
jmp 0xbcd579
mov eax, dword [ebp - 0xc]
mov word [ecx + 6], ax
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp + 0x28]
inc edx
add esi, 0xc
mov dword [ebp - 0x40], edx
mov ecx, dword [ecx + 0x30]
cmp edx, ecx
jl 0xbcd536
mov ebx, dword [ebp + 0x28]
jmp 0xbcd5f8
mov edi, dword [ebp + 0x28]
xor edx, edx
mov dword [ebp - 0x40], edx
mov eax, dword [edi + 0x2c]
mov dword [ebp - 0x58], eax
cmp dword [edi + 0x30], edx
jle 0xbcd5e5
push ebx
lea edx, [eax + 2]
call fcn.00c0d169
pop ecx
test eax, eax
jne 0xbcd5c4
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp word [eax + ebx*2 + 2], cx
jne 0xbcd5c4
mov edx, dword [ebp - 0x40]
jmp 0xbcd5e2
mov eax, dword [edi + 0x34]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x40]
inc edx
mov dword [ebp - 0x40], edx
lea ecx, [ecx + eax*2]
mov dword [ebp - 0x58], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x58]
cmp edx, dword [edi + 0x30]
jl 0xbcd5a5
mov esi, dword [ebp - 4]
mov ebx, edi
mov ecx, dword [ebx + 0x30]
cmp edx, ecx
jge 0xbce544
movzx edi, word [eax]
mov dword [ebp - 0x38], edi
cmp dword [ebp - 0x10], 0
jne 0xbcd63b
cmp dword [ebp + 0x2c], 0
jne 0xbcd7f3
xor eax, eax
cmp dword [ebx + 0x78], eax
je 0xbcd7f3
mov eax, dword [ebx + 0x34]
mov ebx, dword [ebp - 0x58]
mov esi, dword [ebp - 0xc]
mov dword [ebp - 0x80], edx
inc edx
mov dword [ebp - 0x40], edx
lea eax, [ebx + eax*2]
mov dword [ebp - 0x10], eax
cmp edx, ecx
jge 0xbcd7f3
mov edi, edx
jmp 0xbcd727
mov ebx, dword [ebp + 0x28]
mov ecx, dword [ebx + 0x20]
sub ecx, dword [ebx + 0x10]
mov eax, dword [ebp - 8]
mov esi, dword [ebx + 0x14]
sar ecx, 1
cmp dword [ebp + 0x2c], 0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x40], ecx
jne 0xbcd6f3
xor ecx, ecx
mov word [eax], cx
test edi, edi
je 0xbcd674
mov edx, dword [ebp - 0x7c]
mov ecx, dword [ebx + 0x14]
push edi
call fcn.00c0bb6b
mov esi, eax
mov eax, dword [ebp - 8]
pop ecx
test esi, esi
jne 0xbcd6c8
cmp edi, dword [ebx + 0x44]
jg 0xbce666
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0x3c]
lea esi, [eax + edi*2]
mov eax, dword [ebx + 0x10]
lea eax, [eax + ecx*2]
add eax, 0xffffff38
cmp dword [ebx + 0x20], eax
jb 0xbcd6ae
mov ecx, ebx
call fcn.00c0c1d1
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test eax, eax
jne 0xbce4da
mov edx, dword [ebp - 8]
mov ecx, edx
sub ecx, dword [ebx + 0x14]
mov eax, dword [ebx + 0x20]
push 2
pop edi
add ecx, edi
sar ecx, 1
mov word [eax], cx
add dword [ebx + 0x20], edi
jmp 0xbcd6f6
xor ecx, ecx
cmp word [esi + 2], cx
jne 0xbcd6f3
cmp dword [ebp + 0x24], ecx
jg 0xbcd6f3
push ebx
push dword [ebp - 0x7c]
mov edx, eax
mov ecx, esi
push dword [ebp + 0x20]
call fcn.00c0c193
add esp, 0xc
test eax, eax
je 0xbcd6f3
push 0x28
jmp 0xbce56c
mov edx, dword [ebp - 8]
push 0x75
pop eax
mov word [edx], ax
sub esi, dword [ebx + 0x14]
sar esi, 1
push 4
pop eax
mov word [edx + 2], si
add edx, eax
xor eax, eax
mov dword [ebp - 8], edx
cmp dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0xa0], eax
jne 0xb8e86f
jmp 0xbce2e0
mov eax, dword [ebp - 0x10]
lea edx, [eax + 2]
lea ecx, [ebx + 2]
call fcn.00c0d13e
mov ecx, dword [ebp - 0x10]
test eax, eax
jne 0xbcd74c
mov edx, dword [ebp + 0x28]
inc esi
inc edi
mov eax, dword [edx + 0x34]
lea ecx, [ecx + eax*2]
mov dword [ebp - 0x10], ecx
cmp edi, dword [edx + 0x30]
jl 0xbcd724
mov edi, dword [ebp - 0x38]
cmp esi, dword [ebp - 0xc]
jle 0xbcd7f3
cmp dword [ebp - 0x34], 0xfffffffe
jne 0xbcd762
or dword [ebp - 0x34], 0xffffffff
mov ebx, dword [ebp + 0x28]
mov edx, dword [ebp - 8]
push 0x73
pop edi
mov eax, dword [ebx + 0x20]
sub eax, dword [ebx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
and eax, 1
mov dword [ebp - 0x18], edx
add eax, edi
mov word [edx], ax
mov eax, dword [ebp - 0x80]
push 2
pop edi
add edx, edi
mov word [edx], ax
add edx, edi
mov word [edx], si
add edx, edi
mov edi, dword [ebp - 0x58]
mov dword [ebp - 8], edx
cmp edi, ecx
jae 0xb8e86f
mov esi, dword [ebp - 0x10]
movzx edx, word [edi]
push 0x20
pop eax
cmp edx, eax
mov eax, dword [ebp - 0xc]
jae 0xbcd7b8
mov ecx, edx
shl eax, cl
or dword [ebx + 0x50], eax
cmp edx, dword [ebx + 0x4c]
jle 0xbcd7c3
mov dword [ebx + 0x4c], edx
mov ecx, dword [ebx + 0x24]
jmp 0xbcd7d2
movzx eax, word [ecx + 4]
cmp eax, edx
je 0xbcd7d8
mov ecx, dword [ecx]
test ecx, ecx
jne 0xbcd7c8
jmp 0xbcd7df
mov eax, dword [ebp - 0xc]
mov word [ecx + 6], ax
mov eax, dword [ebx + 0x34]
lea edi, [edi + eax*2]
cmp edi, esi
jb 0xbcd7a7
mov dword [ebp - 0x58], edi
jmp 0xb8e461
neg edi
cmp dword [ebp - 0x34], 0xfffffffe
jne 0xbcd7fd
or dword [ebp - 0x34], 0xffffffff
mov ebx, dword [ebp + 0x28]
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
push 0x71
mov eax, dword [ebx + 0x20]
sub eax, dword [ebx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
and eax, ecx
mov dword [ebp - 0x18], edx
pop esi
add eax, esi
mov word [edx], ax
push 2
pop eax
add edx, eax
push 0x20
mov word [edx], di
add edx, eax
pop eax
cmp edi, eax
mov dword [ebp - 8], edx
mov eax, ecx
jge 0xbcd83b
mov ecx, edi
shl eax, cl
or dword [ebx + 0x50], eax
cmp edi, dword [ebx + 0x4c]
jle 0xbcd846
mov dword [ebx + 0x4c], edi
mov ecx, dword [ebx + 0x24]
jmp 0xbcd855
movzx eax, word [ecx + 4]
cmp eax, edi
je 0xbcd85e
mov ecx, dword [ecx]
test ecx, ecx
jne 0xbcd84b
jmp 0xb8e86f
mov eax, dword [ebp - 0xc]
mov word [ecx + 6], ax
jmp 0xb8e86f
mov ebx, esi
cmp dword [ebx + 0x48], edx
jne 0xb8ef43
mov dword [ebx + 0x48], ecx
jmp 0xb8ef43
cmp edi, 0x22
jg 0xb8ef4e
mov eax, dword [ebp - 4]
mov esi, dword [edi*4 + 0xc3357c]
add eax, 2
push 2
pop edx
mov dword [ebp - 0x50], eax
sub esi, edx
jmp 0xb8e464
cmp edi, 0xe
jne 0xb8ef75
push 0xd
pop eax
mov edi, eax
jmp 0xb8ef75
push ebx
lea eax, [ebp - 0xfc]
mov dword [ebp - 0xf8], edx
push eax
lea eax, [ebp - 0xf8]
mov dword [ebp - 0xfc], edx
push eax
lea edx, [ebp - 0x148]
lea ecx, [ebp - 4]
call fcn.00c0c72c
add esp, 0xc
test eax, eax
je 0xbce4da
mov eax, dword [esi + 0x20]
sub eax, dword [esi + 0x10]
mov edx, dword [ebp - 8]
sar eax, 1
push 0x10
pop ecx
mov dword [ebp - 0x40], eax
xor eax, eax
cmp edi, ecx
mov dword [ebp - 0x18], edx
push 0xf
sete al
xor ecx, ecx
cmp eax, dword [ebp - 0x148]
pop eax
setne cl
add ecx, eax
mov ax, word [ebp - 0xf8]
mov word [edx], cx
push 2
pop esi
add edx, esi
mov word [edx], ax
add edx, esi
mov ax, word [ebp - 0xfc]
mov word [edx], ax
jmp 0xb8ef7e
mov esi, 0xc337b4
jmp 0xbcd941
mov esi, 0xc33780
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
add eax, 0xe
mov dword [ebp - 0x50], eax
mov dword [ebp - 4], esi
jmp 0xb8e472
lea edx, [ebp - 0x78]
call fcn.00c0c0fb
test eax, eax
jne 0xbce49c
mov ecx, dword [ebp - 4]
jmp 0xb8e8e9
push 0x45
pop edx
cmp word [ecx + 2], dx
push 0x5c
pop edx
jne 0xbcd97e
add ecx, 2
jmp 0xbcd99f
push 3
mov edx, 0xc38dc0
lea ecx, [ecx + 2]
call fcn.00b8f0ae
pop ecx
test eax, eax
jne 0xb8e91f
mov ecx, dword [ebp - 4]
push 0x5c
add ecx, 6
pop edx
mov eax, dword [ebp - 0x10]
jmp 0xb8e8f3
mov eax, dword [ebp - 0xc]
jmp 0xb8e8f0
mov ecx, dword [ebp + 0x28]
test dword [ecx + 0x60], 0x2000000
je 0xb8e91f
mov edx, dword [ebp - 8]
neg eax
mov ecx, dword [ebp - 0x34]
sbb eax, eax
and eax, 0xffffff70
add eax, 0x9d
mov word [edx], ax
push 2
pop eax
add edx, eax
mov dword [ebp - 8], edx
cmp ecx, 0xfffffffe
jne 0xbcd9e9
or ecx, 0xffffffff
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x70], ecx
jmp 0xb8e86f
movzx edi, word [esi]
mov eax, edi
mov dword [ebp - 0x14], edi
and eax, ecx
mov ecx, 0xd800
cmp eax, ecx
jne 0xb8e97c
add esi, 2
mov ecx, 0x3ff
and edi, ecx
shl edi, 0xa
movzx eax, word [esi]
and eax, ecx
mov dword [ebp - 4], esi
or edi, eax
add edi, 0x10000
mov dword [ebp - 0x14], edi
jmp 0xb8e97c
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x68], eax
jmp 0xb8e988
mov edi, dword [ebp + 0x2c]
sub eax, ecx
sar eax, 1
mov dword [ebp - 0x24], ecx
add dword [edi], eax
mov edi, dword [ebp - 0x14]
jmp 0xb8e999
push 0x5c
pop ebx
cmp edi, ebx
jne 0xb8e9b7
push 0x45
pop ebx
cmp word [esi + 2], bx
jne 0xb8e9b7
xor ebx, ebx
add esi, 2
mov dword [ebp - 0x64], ebx
mov ebx, dword [ebp - 0x20]
jmp 0xb8ea46
movzx eax, word [esi + 2]
push 0x3a
pop ecx
cmp ax, cx
je 0xbcda9d
push 0x2e
pop ecx
cmp ax, cx
je 0xbcda9d
push 0x3d
pop ecx
cmp ax, cx
jne 0xb8e9b7
lea edx, [ebp - 0x78]
mov ecx, esi
call fcn.00c0c0fb
mov esi, dword [ebp - 4]
test eax, eax
je 0xb8e9b7
xor eax, eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x28]
push 0x3a
mov ebx, dword [eax + 8]
pop eax
cmp word [esi + 2], ax
jne 0xbce4ed
lea ecx, [esi + 4]
push 0x5e
pop edx
mov dword [ebp - 4], ecx
mov eax, ecx
cmp word [ecx], dx
jne 0xbcdaeb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x3c], eax
lea eax, [ecx + 2]
mov ecx, eax
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x78]
sub edx, eax
sar edx, 1
call fcn.00c0c0ae
mov edi, eax
test edi, edi
js 0xbce56a
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0xc]
test cl, al
je 0xbcdb18
push 2
pop ecx
cmp edi, ecx
jg 0xbcdb18
xor ecx, ecx
mov edi, ecx
jmp 0xbcdb1a
xor ecx, ecx
test eax, 0x20000000
je 0xbcdbe0
mov edx, ecx
mov ecx, dword [ebp - 0x30]
mov eax, ecx
neg eax
sbb eax, eax
and eax, 0xe
add eax, edi
mov esi, dword [eax*4 + 0xc33610]
test esi, esi
je 0xbcdb76
mov ecx, dword [ebp - 0x78]
add ecx, 2
add esi, 0xfffffffe
mov dword [ebp - 0x50], ecx
jmp 0xbcdb6b
push 0xc34f80
push ecx
push dword [ebp - 0x2c]
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0xe0]
call fcn.00c0bdcf
add esp, 0xc
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x28]
jmp 0xb8ea43
mov eax, edi
sub eax, 8
je 0xbcdc3f
sub eax, 1
je 0xbcdc31
sub eax, 1
je 0xbcdc34
test ecx, ecx
je 0xbcdbe0
cmp dword [ebp - 0x68], 0
jne 0xbcdba9
mov eax, dword [ebp - 0x78]
push 0x5d
pop ecx
cmp word [eax + 4], cx
je 0xbcdbe0
mov eax, dword [ebp - 0x24]
push 2
pop ecx
mov word [eax], cx
mov edx, dword [ebp - 0x24]
add edx, ecx
mov ecx, 0x100
mov dword [ebp - 0x24], edx
call fcn.00c0d199
mov ecx, dword [ebp - 0x24]
lea edx, [ecx + eax*2]
mov ecx, 0x10ffff
mov dword [ebp - 0x24], edx
call fcn.00c0d199
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax*2]
mov dword [ebp - 0x24], eax
imul esi, edi, 0xc
push 0x20
pop eax
push eax
mov eax, dword [esi + 0xc34840]
add eax, ebx
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.00b921f0
mov eax, dword [esi + 0xc34844]
add esp, 0xc
mov esi, dword [esi + 0xc34848]
xor edi, edi
mov dword [ebp - 0x74], esi
test eax, eax
js 0xbcdc8d
push 0x20
test esi, esi
lea edx, [ebx + eax]
mov ecx, edi
pop esi
js 0xbcdc79
mov al, byte [edx + ecx]
or byte [ebp + ecx - 0x17c], al
inc ecx
cmp ecx, esi
jb 0xbcdc20
jmp 0xbcdc8a
push 0xc
pop edx
test edx, edx
jne 0xbcdc42
push 0xd
pop eax
mov edx, eax
jmp 0xbcdc42
push 0xb
pop edx
mov eax, dword [ebp - 0x24]
add ecx, 3
push 2
pop ebx
mov word [eax], cx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
add eax, ebx
mov dword [ebp - 0x24], eax
mov word [eax], dx
mov eax, dword [ebp - 0x24]
add eax, ebx
mov dword [ebp - 0x24], eax
mov word [eax], cx
mov esi, dword [ebp - 0x78]
add dword [ebp - 0x24], ebx
add esi, ebx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
jmp 0xbcdb6b
mov al, byte [edx + ecx]
not al
and byte [ebp + ecx - 0x17c], al
inc ecx
cmp ecx, esi
jb 0xbcdc79
mov esi, dword [ebp - 0x74]
test esi, esi
jns 0xbcdc93
neg esi
push 2
pop ebx
cmp esi, dword [ebp - 0xc]
jne 0xbcdca4
and byte [ebp - 0x17b], 0xc3
jmp 0xbcdcaf
cmp esi, ebx
jne 0xbcdcaf
and byte [ebp - 0x171], 0x7f
cmp dword [ebp - 0x30], 0
mov ecx, edi
push 0x20
pop edx
je 0xbcdcd1
mov al, byte [ebp + ecx - 0x17c]
not al
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0xbcdcba
jmp 0xbcdce4
mov al, byte [ebp + ecx - 0x17c]
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0xbcdcd1
mov esi, dword [ebp - 0x78]
mov edx, dword [ebp - 0xc]
add esi, 2
mov dword [ebp - 0x20], ebx
jmp 0xb8ea40
push dword [ebp - 0xc]
mov eax, dword [ebp + 0x28]
lea edx, [ebp - 0xb8]
push dword [ebp - 0x2c]
lea ecx, [ebp - 4]
push dword [eax + 0x40]
push dword [ebp + 0xc]
call fcn.00b8fe28
mov esi, eax
xor edx, edx
mov eax, dword [ebp + 0xc]
add esp, 0x10
cmp dword [eax], edx
jne 0xbce4da
test esi, esi
jne 0xbcdd3e
mov edi, dword [ebp - 0xb8]
jmp 0xbcdd33
push 8
pop edi
mov esi, dword [ebp - 4]
mov dword [ebp - 0x14], edi
jmp 0xb8e9b9
cmp esi, 5
je 0xbcdd30
cmp esi, 0xc
je 0xbce4d4
cmp esi, 0x1a
jne 0xbcdd79
mov esi, dword [ebp - 4]
push 0x5c
pop eax
cmp word [esi + 2], ax
jne 0xbcdd6e
push 0x45
pop ecx
cmp word [esi + 4], cx
jne 0xbcdd6e
add esi, 4
jmp 0xbcdb6b
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
jmp 0xbcdb6b
cmp esi, 0x19
je 0xbcdb68
mov ecx, dword [ebp + 0x28]
inc dword [ebp - 0x28]
add dword [ebp - 0x20], 2
mov edi, dword [ecx + 8]
cmp esi, 0x10
jg 0xbcdf39
cmp esi, 0xf
jge 0xbcdeab
sub esi, 6
je 0xbcde87
sub esi, 1
je 0xbcde6b
sub esi, 1
je 0xbcde3f
sub esi, 1
je 0xbcde1b
sub esi, 1
je 0xbcddf7
sub esi, 1
jne 0xbcdf75
xor eax, eax
push 0x20
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0xa0]
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0xbcddd6
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x20]
jmp 0xb8ea43
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x3c], eax
xor eax, eax
push 0x20
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0xa0]
not al
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0xbcde04
jmp 0xbcdde9
xor eax, eax
lea eax, [ebp - 0xe0]
sub edi, eax
lea ecx, [ebp - 0xe0]
add ecx, edx
push 0x20
mov al, byte [ecx + edi]
or byte [ecx], al
inc edx
pop eax
cmp edx, eax
jb 0xbcde25
jmp 0xbcdb68
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x3c], eax
xor eax, eax
lea eax, [ebp - 0xe0]
sub edi, eax
lea ecx, [ebp - 0xe0]
add ecx, edx
push 0x20
mov al, byte [ecx + edi]
not al
or byte [ecx], al
inc edx
pop eax
cmp edx, eax
jb 0xbcde4f
jmp 0xbcdb68
xor eax, eax
push 0x20
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0x40]
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0xbcde72
jmp 0xbcdde9
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x3c], eax
xor eax, eax
push 0x20
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0x40]
not al
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0xbcde94
jmp 0xbcdde9
push eax
xor ecx, ecx
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x100]
mov dword [ebp - 0x100], ecx
mov dword [ebp - 0x104], ecx
lea edx, [ebp - 0x14c]
push eax
lea ecx, [ebp - 4]
call fcn.00c0c72c
add esp, 0xc
test eax, eax
je 0xbce4da
xor eax, eax
push 0x10
pop ecx
cmp esi, ecx
push 2
sete al
xor ecx, ecx
cmp eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x24]
sete cl
add ecx, 3
pop edx
mov word [eax], cx
mov ecx, dword [ebp - 0x24]
mov ax, word [ebp - 0x100]
add ecx, edx
mov dword [ebp - 0x24], ecx
mov word [ecx], ax
mov ecx, dword [ebp - 0x24]
mov ax, word [ebp - 0x104]
add ecx, edx
mov dword [ebp - 0x24], ecx
mov word [ecx], ax
add dword [ebp - 0x24], edx
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
jmp 0xb8ea3d
cmp esi, 0x12
je 0xbcdfbb
cmp esi, 0x13
je 0xbcdf9a
cmp esi, 0x14
je 0xbcdb4e
cmp esi, 0x15
je 0xbcdf91
add esi, 0xffffffe3
cmp esi, 5
ja 0xbcdf75
mov esi, dword [esi*4 + 0xc335f0]
mov edx, ebx
mov ecx, dword [ebp - 4]
mov ebx, dword [ebp - 0x20]
push 2
pop eax
mov dword [ebp - 0x50], ecx
sub esi, eax
jmp 0xb8ea40
mov ebx, dword [ebp - 0x2c]
mov esi, dword [ebp - 4]
test bl, 0x40
jne 0xbce66d
movzx edi, word [esi]
xor edx, edx
mov dword [ebp - 0x14], edi
jmp 0xb8e9bf
push 0xffffffffffffffff
push 0xc34f80
jmp 0xbcdfa1
push 0xffffffffffffffff
push 0xc34fa0
push ecx
push dword [ebp - 0x2c]
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0xe0]
call fcn.00c0bcb6
add esp, 0x10
jmp 0xbcdb68
push 0xc34fa0
jmp 0xbcdb53
push 0x5c
pop ebx
push 0x45
pop edi
cmp word [esi + 4], di
jne 0xbcdfe0
add esi, 4
mov dword [ebp - 0x64], edx
mov dword [ebp - 4], esi
cmp word [esi + 2], bx
je 0xbcdfcb
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp + 0x28]
mov ebx, dword [ebp - 0x2c]
jmp 0xb8e9cc
or dword [ecx + 0x64], 0x800
jmp 0xb8e9e4
push 0x5c
lea esi, [edx + 4]
pop ecx
mov dword [ebp - 4], esi
mov edi, esi
push 0x45
pop eax
cmp word [esi], cx
jne 0xbce059
cmp word [esi + 2], ax
jne 0xbce020
add esi, 4
mov dword [ebp - 4], esi
mov edi, esi
cmp word [esi], cx
je 0xbce00d
cmp word [esi], cx
jne 0xbce059
push 0x51
pop eax
cmp word [esi + 2], ax
push 0x45
pop eax
jne 0xbce059
lea esi, [edi + 4]
mov dword [ebp - 4], esi
cmp word [esi], cx
jne 0xbce051
cmp word [esi + 2], ax
jne 0xbce051
add esi, 4
mov dword [ebp - 4], esi
mov edi, esi
cmp word [esi], cx
je 0xbce025
jmp 0xbce057
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
mov edi, esi
movzx eax, word [esi]
mov ecx, eax
test ax, ax
je 0xbce195
cmp dword [ebp - 0x64], 0
jne 0xbce07a
cmp ax, word [ebp - 0x150]
je 0xbce195
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 0xa4], ecx
je 0xbce0be
mov eax, ecx
mov edx, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0xbce0c0
movzx eax, word [esi + 2]
mov edx, 0x3ff
and ecx, edx
lea esi, [edi + 2]
and eax, edx
shl ecx, 0xa
or ecx, eax
mov dword [ebp - 4], esi
add ecx, 0x10000
mov dword [ebp - 0xa4], ecx
mov edx, ecx
jmp 0xbce0c0
mov edx, eax
cmp dword [ebp - 0x64], 0
jne 0xbce15b
push 0x5c
pop eax
cmp edx, eax
jne 0xbce115
push dword [ebp - 0xc]
mov eax, dword [ebp + 0x28]
lea edx, [ebp - 0xa4]
push ebx
mov ebx, dword [ebp + 0xc]
lea ecx, [ebp - 4]
push dword [eax + 0x40]
push ebx
call fcn.00b8fe28
xor ecx, ecx
add esp, 0x10
cmp dword [ebx], ecx
jne 0xbce4da
test eax, eax
je 0xbce152
mov esi, dword [ebp - 4]
cmp eax, 5
jne 0xbce675
push 8
pop ecx
mov dword [ebp - 0xa4], ecx
jmp 0xbce15b
cmp edx, 0x5b
jne 0xbce15b
movzx eax, word [esi + 2]
push 0x3a
pop edx
cmp ax, dx
je 0xbce136
push 0x2e
pop edx
cmp ax, dx
je 0xbce136
push 0x3d
pop edx
cmp ax, dx
jne 0xbce15b
lea edx, [ebp - 0x78]
mov ecx, esi
call fcn.00c0c0fb
test eax, eax
je 0xbce152
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x53
jmp 0xbce4da
mov esi, dword [ebp - 4]
mov ecx, dword [ebp - 0xa4]
mov edi, dword [ebp - 0x14]
cmp ecx, edi
jb 0xbce67d
je 0xbce19d
push 2
pop eax
mov ebx, eax
push 0xd
pop eax
mov dword [ebp - 0x20], ebx
cmp ecx, eax
je 0xbce183
push 0xa
pop eax
cmp ecx, eax
je 0xbce183
mov eax, dword [ebp + 0x28]
jmp 0xbce18d
mov eax, dword [ebp + 0x28]
or dword [eax + 0x64], 0x800
push ecx
push edi
push eax
jmp 0xb8ea24
mov edi, dword [ebp - 0x14]
mov esi, edx
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 0x64]
jmp 0xb8e9f8
cmp dword [ebp - 0x50], 0
je 0xbce1c4
xor esi, esi
mov dword [ebp - 0x50], esi
lea esi, [eax + 2]
mov dword [ebp - 4], esi
movzx edi, word [esi]
mov dword [ebp - 0x14], edi
test edi, edi
jne 0xb8ea5f
mov eax, dword [ebp + 0xc]
mov dword [eax], 6
jmp 0xbce691
mov eax, dword [ebp - 0x60]
add esi, edx
cmp dword [ebp - 0x10], 0
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], esi
mov dword [ebp - 0x68], eax
je 0xbce2a1
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xfffffffe
jne 0xbce1fb
or ecx, 0xffffffff
mov dword [ebp - 0x34], ecx
mov ebx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x70], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x84], eax
test ebx, ebx
je 0xbce262
mov eax, dword [ebp - 0xc]
test al, cl
je 0xbce262
mov eax, edi
mov esi, 0x80
cdq
idiv esi
movzx eax, byte [eax + 0xc2fb40]
shl eax, 7
add eax, edx
movzx eax, word [eax*2 + 0xc21840]
movzx eax, byte [eax*8 + 0xc1efe3]
test eax, eax
je 0xbce262
mov edx, dword [ebp - 8]
push 0xf
pop ecx
push 2
mov word [edx], cx
pop edi
add edx, edi
push 9
pop ecx
mov word [edx], cx
add edx, edi
mov word [edx], ax
add edx, edi
jmp 0xb8ef80
mov edx, dword [ebp - 8]
mov eax, ecx
and eax, dword [ebp - 0xc]
push 0x1f
pop ecx
add eax, ecx
push 2
pop ecx
mov word [edx], ax
add edx, ecx
mov dword [ebp - 8], edx
test ebx, ebx
je 0xbce299
mov eax, 0xffff
cmp edi, eax
jbe 0xbce299
mov ecx, edi
call fcn.00c0d199
mov edx, dword [ebp - 8]
lea edx, [edx + eax*2]
jmp 0xb8ef80
mov word [edx], di
jmp 0xb8f010
cmp dword [ebp - 0x5c], 0
je 0xbcd08d
mov eax, 0xffff
cmp edi, eax
jbe 0xbcd08d
jmp 0xbcd067
mov eax, dword [ebp - 0x112]
mov edx, 0x3ff
and ecx, edx
and eax, edx
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
jmp 0xb8e39f
or dword [ebp - 0x70], 0xffffffff
or dword [ebp - 0x34], 0xffffffff
jmp 0xb8e86f
or dword [ebx + 0x64], 0x800
jmp 0xb8e41f
cmp dword [ebp - 0x94], 0
je 0xb8efb5
or dword [ebp - 0x54], 0xffffffff
or dword [ebp - 0x34], 0xffffffff
jmp 0xb8e461
movzx ecx, word [edx - 2]
mov eax, dword [ebx + 0x68]
mov dword [ebp - 0x60], ecx
jmp 0xb8e45e
test ecx, ecx
jne 0xb8e461
jmp 0xb8e452
mov ebx, dword [ebp - 0x38]
test ebx, ebx
jne 0xbce34a
test edx, edx
je 0xbce3be
mov eax, dword [ebp - 0x2c]
and eax, 0x20000000
je 0xb8eab0
jmp 0xbce352
mov eax, dword [ebp - 0x2c]
and eax, 0x20000000
mov esi, dword [ebp - 0x10]
test edx, edx
je 0xbce3c1
test esi, esi
jne 0xbce3c1
test eax, eax
jne 0xbce3c1
mov eax, dword [ebp - 0x24]
push 2
pop ecx
mov word [eax], cx
mov eax, dword [ebp - 0x24]
add eax, ecx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x5c], esi
je 0xbce3a1
mov edx, eax
mov ecx, 0x100
call fcn.00c0d199
mov ecx, dword [ebp - 0x24]
lea edx, [ecx + eax*2]
mov ecx, 0x10ffff
mov dword [ebp - 0x24], edx
call fcn.00c0d199
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax*2]
mov dword [ebp - 0x24], eax
jmp 0xbce3c1
mov edx, 0x100
mov word [eax], dx
mov edx, 0xffff
mov eax, dword [ebp - 0x24]
add eax, ecx
mov dword [ebp - 0x24], eax
mov word [eax], dx
add dword [ebp - 0x24], ecx
jmp 0xbce3c1
mov esi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov edi, dword [ebp - 8]
push 2
pop edx
mov word [eax], cx
add dword [ebp - 0x24], edx
push 0x70
pop eax
mov word [edi], ax
push 4
pop eax
add edi, eax
xor eax, eax
test esi, esi
setne al
movzx eax, ax
mov word [edi], ax
mov ecx, eax
test ebx, ebx
je 0xbce3fb
push 4
pop ecx
or eax, ecx
mov word [edi], ax
movzx ecx, ax
mov eax, dword [ebp - 0x28]
test eax, eax
jle 0xbce454
or ecx, edx
mov word [edi], cx
add edi, edx
mov eax, dword [ebp - 0x24]
sub eax, edi
and eax, 0xfffffffe
push eax
lea eax, [edi + 0x20]
push edi
push eax
call fcn.00b94760
add esp, 0xc
test esi, esi
je 0xbce438
test ebx, ebx
jne 0xbce438
push 0x20
xor eax, eax
pop ecx
not byte [ebp + eax - 0xe0]
inc eax
cmp eax, ecx
jb 0xbce42c
push 0x20
pop eax
push eax
lea eax, [ebp - 0xe0]
push eax
push edi
call fcn.00b921f0
mov eax, dword [ebp - 0x24]
add esp, 0xc
add eax, 0x20
jmp 0xbce457
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x18]
mov dword [ebp - 8], eax
sub eax, edx
sar eax, 1
mov word [edx + 2], ax
jmp 0xb8e461
push 0x20
xor eax, eax
pop ecx
not byte [ebp + eax - 0xe0]
inc eax
cmp eax, ecx
jb 0xbce46f
jmp 0xb8eae9
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x14
jmp 0xbce691
cmp edx, ecx
push 0x23
sbb eax, eax
pop ecx
and eax, ecx
add eax, 0x34
jmp 0xbce4b1
mov esi, dword [ebp - 4]
xor eax, eax
push 0xd
pop ecx
cmp word [esi + 2], di
sete al
dec eax
and eax, 0x12
add eax, ecx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0xbce691
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x4b
jmp 0xbce691
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x3b
jmp 0xbce4da
mov dword [eax], 0x47
mov esi, dword [ebp - 4]
jmp 0xbce691
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x42
jmp 0xbce4da
push 0x1f
mov eax, dword [ebp + 0xc]
pop ecx
mov dword [eax], ecx
jmp 0xbce691
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x1c
jmp 0xbce691
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x54
jmp 0xbce691
movzx eax, word [esi]
cmp ax, cx
jb 0xbce53d
push 0x30
mov ecx, eax
pop edx
push 0x39
pop eax
cmp cx, ax
ja 0xbce53d
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
movzx eax, word [esi]
mov ecx, eax
cmp ax, dx
jae 0xbce523
push 0x3d
jmp 0xbce4ef
mov esi, dword [ebp - 4]
push 0xf
jmp 0xbce4ef
push 0x23
jmp 0xbce4ef
push 0x1d
jmp 0xbce4ef
push 0x29
jmp 0xbce4ef
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x26
jmp 0xbce691
push 0x27
jmp 0xbce4ef
push 0x2b
jmp 0xbce56c
push 0x1e
mov eax, dword [ebp + 0xc]
pop ecx
mov dword [eax], ecx
jmp 0xbce4da
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x15
jmp 0xbce4da
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x31
jmp 0xbce691
mov eax, dword [ebp + 0xc]
push 0x2a
pop ebx
mov dword [eax], ebx
jmp 0xbce691
push 2
pop eax
add esi, eax
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x18
jmp 0xbce691
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x14
jmp 0xbce694
push 9
pop eax
mov dword [ebx], eax
jmp 0xbce691
mov eax, dword [ebp + 0xc]
push 2
mov dword [eax], 0xc
pop eax
sub esi, eax
jmp 0xbce691
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x36
jmp 0xbce4da
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x1b
jmp 0xbce4da
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xe
jmp 0xbce691
push 0x52
jmp 0xbce4ef
movzx eax, word [esi]
cmp ax, cx
jb 0xbce53d
push 0x30
mov ecx, eax
pop ebx
push 0x39
pop eax
cmp cx, ax
ja 0xbce53d
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ecx, eax
cmp ax, bx
jae 0xbce620
jmp 0xbce53d
push 0x3a
jmp 0xbce4ef
push 0x39
jmp 0xbce4ef
push 0x30
jmp 0xbce4ef
push 0x2a
jmp 0xbce4ef
push 0x3e
jmp 0xbce4ef
push 0xf
jmp 0xbce56c
mov dword [eax], 7
jmp 0xbce691
mov dword [ebx], 0x53
jmp 0xbce691
mov eax, dword [ebp + 0xc]
mov dword [eax], 8
jmp 0xbce691
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x34
mov edi, dword [ebp + 8]
mov dword [edi], esi
xor eax, eax
jmp 0xb8e6b3