Function at 0x10009601
Capabilities:
Check os version
Encrypt data using speck
Get number of processors
Resolve function by parsing pe exports

Disassembly:
je 0x10004364
push dword [ebp + 0xc]
push eax
jne 0x1000abaf
call fcn.1000b65f
pop ebp
xor eax, eax
and dword [ebp - 0x10], eax
movsx eax, word [ebp + 0x20]
nop
nop
nop
nop
nop
mov edi, edi
mov dword [ebp - 0x870], ebx
mov dword [ebp - 0x82c], edx
mov dword [ebp - 0x848], edx
mov dword [ebp - 0x83c], edx
call esi
xor edi, edi
push edi
lea eax, [ebp - 0x844]
push eax
call esi
mov ebx, dword [ebx + 0xc]
mov eax, dword [ebx + 0x30]
or dword [ebp - 0x878], 0xffffffff
mov dword [ebp - 0x810], edi
mov dword [ebp - 0x87c], edi
mov ebx, 0
mov byte [ebp - 0xc0], 0x2c
mov dword [ebp - 0x94], ebx
cmp dword [ebp - 0x80], 0xffffffc0
jne 0x100049d2
je 0x100097fa
mov esi, dword [ebp + 0x14]
cmp esi, ecx
je 0x10006a4a
lea eax, [ebp - 0x20c]
push 0x1000e41c
push eax
mov dword [ebx], ecx
call fcn.1000c853
pop ecx
pop ecx
xor eax, eax
mov ecx, 0x1000e9d2
lea edi, [ebp - 0x220c]
lea eax, [ebp - 0x21e2]
mov dword [ebp - 0x2218], 0x2a
mov dword [ebp - 0x221c], eax
mov edi, 0
add eax, dword [ebp - 0xc4]
mov dword [ebp - 0x68], edi
mov word [ebp - 0xbc], 0xe0
mov dword [ebp - 0x98], 0x2b65e
push dword [ebp - 0x98]
call fcn.1000453a
add ebx, 0xea9b
call fcn.10004fe0
cmp dword [ebp - 0x80], 1
je 0x10004a4e
call 0x1000aad0
call fcn.1000786d
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
mov ebx, dword [ebp + 8]
movzx eax, word [ebx + 0x9c]
test eax, 0xfffffffc
mov byte [ebp + 0xb], 0
je 0x10004a98
mov eax, 0x1000e898
lea eax, [ebp - 4]
push eax
push dword [ebx + 0x28]
call fcn.10007db4
mov edi, dword [ebp - 0x68]
lea ecx, [ebp - 0x94]
and eax, ecx
push ecx
and esi, edi
push edi
mov dword [ebp - 0xc4], 0x684
call fcn.100046c9
add dword [ebp - 0x88], 0
je 0x10004aa7
push dword [esi + 0x50]
call 0x1000653f
test byte [esi + 0x2c], 2
mov edx, eax
mov eax, dword [esi + 0x3c]
mov dword [ebp - 0x10], edx
mov dword [ebp + 8], eax
jne 0x1000c218
jne 0x10005c8b
lea edx, [ebp - 0x98]
or esi, eax
cmp dword [ebp - 0x88], 0x4a
jne 0x10004adc
push edi
movsx edi, word [ecx + 0x26]
cdq
idiv edi
or dword [ecx + 0x84], 1
movsx eax, si
mov esi, dword [ebp + 8]
mov dword [ebp - 4], eax
add eax, eax
movsx ebx, dx
movsx edx, word [ebp + 0xc]
imul ebx, ebx, 0x1c
push edx
xor esi, dword [ebp - 0xa8]
cmp dword [ebp - 0x88], 0x10000002
jne 0x10004b1d
xor eax, eax
cmp esi, 2
lea eax, [eax + eax + 1]
pop esi
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword fs:[0x18]
push dword [ebp + 8]
mov byte [eax + 0xf75], 1
push 0xfffffffffffffffe
call dword [0x1000e080]
pop ebp
push dword [ebp - 0x94]
cmp dword [ebp - 0x80], 0xffffffd0
jne 0x10004b59
pop edi
pop esi
pop ebx
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1000e3c2
mov eax, dword [0x1000e641]
push ebx
mov ebx, dword [ebp + 8]
mov cx, word [ebx + 0x24]
sub cx, word [ebp + 0x10]
mov dx, word [ebx + 0x26]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
push edi
call fcn.10004766
or ebx, dword [ebp - 0xc4]
or edi, dword [ebp - 0xc4]
push dword [ebp - 0x94]
call fcn.1000453a
mov edi, edx
push dword [ebp - 0x98]
call fcn.1000453a
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x64], eax
call 0x1000768f
cmp dword [ebp - 0x80], 1
je 0x10004bf1
cmp dword [ebp - 8], 9
jb 0x10004bea
push dword [ebp - 0x82e]
push dword [ebp - 0x830]
push dword [ebp - 0x832]
push dword [ebp - 0x834]
call 0x1000a3df
push dword [ebp - 0x830]
push dword [ebp - 0x834]
call fcn.1000c507
cmp esi, ebx
je 0x10007076
push 0xc
lea eax, [ebp - 0x14]
push eax
push 7
push 0xfffffffffffffffe
call fcn.10005ac1
cmp dword [ebp + 8], ebx
mov esi, dword [0x1000e356]
pop edi
jne 0x10004bd7
mov eax, dword [0x1000e3f3]
cmp eax, ebx
push dword [ebp - 0x94]
call fcn.1000453a
mov dword [ebp - 0xc8], eax
lea ecx, [ecx]
push dword [ebp - 0x98]
call fcn.1000453a
mov dword [ebp - 0x8c], esi
add ecx, 0x8c81
call 0x100056a8
mov edi, ecx
push dword [ebp - 0x68]
call fcn.1000453a
cmp dword [ebp - 0x88], 0
je 0x10004c89
push dword [ebp - 0x68]
call fcn.1000453a
or ebx, dword [ebp - 0xc8]
push dword [ebp - 0x94]
call fcn.1000453a
sub ecx, ebx
sub eax, dword [ebp - 0xc8]
push dword [ebp - 0x98]
call fcn.1000453a
cmp dword [ebp - 0x88], 0x10000002
jne 0x10004cda
call esi
push dword [ebp - 0xc]
call edi
lea eax, [ebp - 0xc]
push eax
push eax
call fcn.10005ec6
sub esi, dword [ebp - 0x78]
add ecx, dword [ebp - 0xb0]
lea edx, [ebp - 0x68]
push edx
call fcn.100045ea
add ecx, 0xde71
mov word [ebp - 0xc0], 0xcfd
push dword [ebp - 0x68]
call fcn.1000453a
cmp dword [ebp - 0x88], 0
je 0x10004d6e
and byte [esi + 0x141], 0xbf
push esi
call 0x10006f76
mov eax, 0x1000e320
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], eax
mov eax, 0x1000e639
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], eax
push 0x10
lea eax, [ebp - 0x110]
push eax
push 3
call fcn.1000c507
push edi
push dword [esi + 0x170]
call dword [0x1000e058]
lea eax, [ebp - 0xf0]
push eax
push edi
push 1
lea eax, [ebp - 0x100]
push eax
push dword [ebp - 0x98]
call fcn.1000453a
mov byte [ebp - 0xc0], 0x4f
mov dword [ebp - 0xc8], esi
mov ebx, dword [ebp - 0x94]
lea eax, [ebp - 0x98]
test dword [ebp - 0x88], 0
je 0x10004de8
push eax
cmp dword [ebp - 0x80], 0x10000002
jne 0x10004e22
mov word [ebp + 0xc], ax
mov ax, word [ebp - 0x36]
mov word [ebp + 0xe], ax
lea eax, [ebp - 0x24]
push eax
push esi
push dword [0x1000ead6]
xor ebx, ebx
push dword [ebp + 0xc]
mov word [ebp - 0x24], bx
push dword [ebp + 8]
mov word [ebp - 0x22], bx
mov word [ebp - 0x20], cx
call fcn.1000a236
push ebx
mov dword [ebp - 0xa8], ecx
call fcn.100046c9
mov byte [ebp - 0x64], 0xaa
xor esi, dword [ebp - 0x8c]
push dword [ebp - 0x98]
call fcn.1000453a
add eax, dword [ebp - 0xc4]
mov word [ebp - 0xc0], 0xbcc
lea edi, [ebp - 0x98]
mov dword [ebp - 0xb8], ebx
push edi
add ebx, 0x7acc
and edi, ebx
push dword [ebp - 0x98]
cmp dword [ebp - 0x80], 0x10000002
jne 0x10004e9c
call fcn.1000b65f
xor esi, esi
push dword [ebp + 8]
call 0x100097f9
mov eax, esi
pop edi
pop esi
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp + 8]
push eax
call fcn.1000481b
add ebx, dword [ebp - 0xb4]
and esi, ebx
push dword [ebp - 0x98]
call fcn.1000453a
cmp dword [ebp - 0x88], 0x10000002
jne 0x10004efe
push dword [ebx]
call 0x1000a05a
test byte [ebx + 4], 2
jne 0x10008486
cmp dword [0x1000ea06], edi
je 0x10004e8a
push dword [esi + 0x1a8]
call 0x10008186
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe4], edi
mov eax, dword [esi + 0xb0]
mov edx, dword [eax + 0x74]
push 0x37
pop ecx
xor eax, eax
mov edx, dword [ebp - 0x68]
lea esi, [ebp - 0x94]
mov dword [ebp - 0xbc], eax
push esi
mov dword [ebp - 0xb8], ecx
push edx
sub edi, dword [ebp - 0x8c]
mov dword [ebp - 0x90], 0xf37
call fcn.100046c9
cmp dword [ebp - 0x80], 0x41
jne 0x10004f58
mov eax, dword [ebx + 0x2c]
mov dword [0x1000e53c], eax
mov dword [ebx + 0x30], esi
push edi
call dword [0x1000e024]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x34]
pop edi
mov dword [ebx + 0x28], eax
pop esi
xor eax, eax
pop ebx
push 5
call dword [0x1000e17c]
push dword [ebp - 0x94]
call fcn.1000453a
add ecx, dword [ebp - 0x8c]
push dword [ebp - 0x94]
call fcn.1000453a
or edi, ebx
and ebx, ecx
xor eax, dword [ebp - 0xc0]
mov edi, dword [ebp - 0xa0]
mov eax, esi
cmp dword [ebp - 0x80], 1
je 0x10004fc1
push ebx
call fcn.1000a325
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x1000beb9
mov eax, dword [ebp - 0x28]
add eax, 0x20
push eax
push dword [ebp - 0x20]
call 0x1000ab4e
test al, al
je 0x10006a45
cmp dword [esi + 0x34], 0
jne 0x10006960
mov eax, dword [ebp - 0x20]
push dword [edi]
and edx, dword [ebp - 0xc8]
add dword [ebp - 0xa0], 8
lea eax, [ecx]
add edx, 0xa290
ret
push eax
push eax
push eax
push eax
mov dword [ebx + 0xc], esi
sub dword [ebp - 0x68], 0x10000
add eax, dword [ebp - 0xc4]
xor esi, dword [ebp - 0x64]
jmp 0x1000520c
cmp word [ebp - 0x34], cx
jne 0x100055c5
cmp word [ebp - 0x38], 0
jne 0x10005581
mov cx, word [eax + 0x26]
dec cx
cmp word [ebp - 0x32], cx
jne 0x10005556
cmp word [ebp - 0x36], 1
jne 0x1000557a
xor ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x42]
push 1
push ecx
push eax
call 0x10006af5
movsx esi, ax
imul esi, esi, 0x1c
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 8]
add esi, dword [eax + 0x58]
lea edx, [ebp - 0x70]
push edx
call fcn.100045ea
test dword [ebp - 0x88], 0
je 0x100055e3
test byte [ebp - 0x124], 3
jne 0x100061d0
push 1
lea eax, [ebp - 0x134]
push eax
lea esi, [edi + 0x20]
push esi
push edi
call 0x10004a75
test eax, eax
je 0x100055b4
cmp dword [ebp - 0x120], ebx
jne 0x10009e14
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.1000be03
nop
nop
nop
or edi, dword [ebp - 0xb4]
mov edx, dword [ebp - 0xa0]
cmp dword [ebp - 0x80], 1
je 0x10005625
push ebx
call 0x10008c44
cmp ax, 0xffff
je 0x1000566e
push eax
push ebx
call fcn.100054b6
mov dword [ebp + 8], eax
mov cx, word [ebx + 0x18]
xor eax, eax
mov ax, word [ebx + 0x10]
inc word [ebx + 0x12]
cmp ax, cx
jge 0x1000563c
inc eax
mov word [ebx + 0x10], ax
jmp 0x1000564b
push dword [edx]
or esi, eax
add dword [ebp - 0xa0], 8
cmp dword [ebp - 0x80], 1
je 0x10005658
nop
nop
nop
add byte [eax], al
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
push esi
push edi
xor edi, edi
push edi
push 0x1000ebab
push edi
push 0x68
ret
mov bx, word [esi + 0x36]
cmp bx, word [ecx + 4]
jne 0x10005699
mov bx, word [esi + 0x34]
cmp bx, word [ecx + 2]
jne 0x10005672
cmp dword [ebp - 0xc], 0
mov ebx, dword [ecx - 0xa]
je 0x10005641
and ebx, 0x1000e954
cmp ebx, 0x1000e5e4
and ebx, eax
cmp ebx, eax
je 0x10005719
inc dword [ebp - 4]
add ecx, 0x10
cmp dword [ebp - 4], edx
jb 0x10005676
add eax, 0xdcc
sub dword [ebp - 0xa0], 4
mov dword [ebp - 0xb4], edx
mov eax, dword [ebp - 0xa0]
and dword [ebp - 0xc8], eax
pop dword [eax]
push dword [ebp - 0x70]
call fcn.1000453a
xor ecx, edi
mov edi, dword [ebp - 0xa0]
lea ebx, [ebp - 0x70]
or word [ebp - 0xc0], 0xad5
push ebx
add esi, 0x4ee1
push edi
add ebx, dword [ebp - 0xb8]
call fcn.100046c9
xor edi, eax
add dword [ebp - 0xa0], 0xfffffff8
and dword [ebp - 0xb0], esi
test dword [ebp - 0x88], 0
je 0x10005735
jg 0x10009327
je 0x10005798
add ecx, dword [ebp - 0xb8]
mov esi, dword [ebp - 0xa4]
or edi, dword [ebp - 0xc8]
or ebx, esi
mov esi, dword [esi + 0x64]
mov ebx, edi
xor eax, esi
mov ecx, dword [ebp - 0xa0]
or eax, dword [ebp - 0x64]
mov dword [ecx], esi
cmp dword [ebp - 0x88], 0
je 0x10005ae7
push eax
call fcn.10008b53
test eax, eax
jl 0x10005a92
and word [ebp - 0xb0], 0x59c
add eax, dword [ebp - 0xa8]
add dword [ebp - 0x90], ecx
push dword [ebp - 0xa8]
call fcn.10004377
sub eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xa0]
and dword [ebp - 0xbc], 0x157
mov ecx, 0
and ebx, ecx
cmp dword [ebp - 0x88], 0xffffffcf
jne 0x10005b69
mov dword [eax], ecx
and eax, dword [ebp - 0x8c]
mov dword [ebp - 0x7c], esp
cmp dword [ebp - 0x88], 0xffffff98
jne 0x10005bd7
call fcn.10006b23
push 4
lea eax, [ebp - 4]
push eax
push 6
push dword [edi + 0x28]
call fcn.10005163
push esi
call ebx
and dword [0x1000e66a], 0
push 0
push dword [0x1000e6c5]
call dword [0x1000e010]
push esi
call dword [str.D_d_t]
jmp 0x10005ba1
test eax, eax
jl 0x1000c6b5
lea eax, [ebp - 0xe8]
push eax
push 0x1000e64e
push dword [ebp - 0xec]
mov eax, dword [ebp - 0x70]
xor ebx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x68]
add dword [ebp - 0xbc], 0x3a7
sub eax, 0x24
cmp dword [ebp - 0x88], 0x77
jne 0x10005d6c
nop
mov edi, edi
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
push edi
lea eax, [ebp + 8]
push eax
push dword [esi + 0x28]
call fcn.10007912
mov edi, eax
test edi, edi
jl 0x10004367
mov eax, dword [esi + 0x34]
test eax, eax
je 0x10005dc3
mov ecx, dword [eax + 0x20]
mov dword [ebp - 0x68], ecx
and eax, dword [ebp - 0xc4]
or dword [ebp - 0x8c], 0xffffffc4
and dword [ebp - 0xc0], 0x3b
lea ecx, [ebp - 0xa4]
push ecx
call fcn.100045ea
test dword [ebp - 0x88], 0
je 0x10005dce
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
push 4
lea eax, [ebp - 0x1c]
push eax
push 0x27
call dword [0x1000e004]
push 1
push 4
push 0x1000e713
xor eax, eax
push eax
push 4
push 0x1000e7dc
push eax
push 0x1000e455
xor eax, ebx
lea esi, [ebp - 0x94]
push esi
call fcn.100045ea
sub ecx, edx
test dword [ebp - 0x88], 0
je 0x10005e15
push esi
mov eax, dword [ebp - 0x164]
push dword [eax + 0xc4]
call dword [0x1000e070]
cmp byte [0x75b6d508], 0
je 0x1000a8c9
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, dword [ebp + 0x10]
pop dword [eax]
push dword [ebp - 0x70]
call fcn.1000453a
or ecx, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xa0]
lea edi, [ebp - 0x70]
add eax, ebx
and esi, dword [ebp - 0x90]
push edi
or dword [ebp - 0x90], 2
push ecx
and edi, eax
and edx, dword [ebp - 0xb4]
call fcn.100046c9
and ecx, dword [ebp - 0x90]
add dword [ebp - 0xa0], 0xfffffff8
add ecx, dword [ebp - 0x78]
cmp dword [ebp - 0x88], 0x10000002
jne 0x10005f94
push 0x1000e7a0
push esi
lea eax, [ebp - 0xc]
push eax
push esi
push 0xd
push dword [0x1000e7e9]
call fcn.1000b65f
mov edi, eax
cmp edi, esi
je 0x10005f43
push esi
push 0x1000e6e4
push esi
push edi
push esi
push dword [ebp - 0x98]
call fcn.1000453a
cmp dword [ebp - 0x88], 0x10000002
jne 0x10005fe2
mov ecx, dword [eax]
test byte [ecx + 4], 1
je 0x10005f87
mov eax, ecx
xor ecx, ecx
mov cl, byte [eax + 0x63]
push ecx
push dword [eax + 0x6c]
push eax
call fcn.100058bb
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xb0]
push dword [eax + 0x68]
push eax
call fcn.1000a5a8
xor esi, esi
mov esi, 0x1000ec17
jmp 0x10008333
push dword [ebp - 0x94]
call fcn.1000453a
xor ecx, dword [ebp - 0x90]
push dword [ebp - 0x6c]
call fcn.1000453a
add ebx, edi
and eax, dword [ebp - 0xb4]
push dword [ebp - 0x74]
call fcn.1000453a
or esi, dword [ebp - 0x8c]
push dword [ebp - 0xa4]
call fcn.1000453a
add dword [ebp - 0x88], 0
je 0x1000604e
mov dword [eax + 4], ecx
mov eax, dword [edi]
mov dword [esi], eax
mov dword [esi + 4], edi
mov dword [eax + 4], esi
mov dword [edi], esi
mov eax, esi
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x1000e72a]
push ebx
push esi
mov esi, dword [0x1000e2a7]
sub eax, dword [ebp - 0x64]
xor dword [ebp - 0x90], eax
mov esi, dword [ebp - 0x70]
or edi, ebx
cmp dword [ebp - 0x80], 1
je 0x1000607f
mov ecx, dword [ebp - 0x6c]
sub edi, dword [ebp - 0xc4]
sub esi, 0x1c
mov ebx, edx
and dword [ebp - 0xb0], edi
mov ecx, dword [esi + 0x24]
mov dword [ebp - 0x6c], ecx
xor ecx, dword [ebp - 0xc4]
xor eax, dword [ebp - 0xa8]
or edi, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x70]
cmp dword [ebp - 0x80], 0x10000002
jne 0x100060e2
lea eax, [ebp - 0x28]
push eax
push dword [esi + 0x28]
call fcn.10009eb6
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x10004ca4
and dword [ebp - 4], 0
or dword [ebp - 0x24], 0xffffffff
mov eax, dword fs:[0x18]
mov dword [ebp - 0x30], eax
mov eax, dword [eax + 0x3c]
mov ebx, dword [ebp - 0x94]
and ecx, dword [ebp - 0x78]
sub esi, 0x40
cmp dword [ebp - 0x80], 1
je 0x1000612d
mov ebx, dword [esi + 0x4c]
mov dword [ebp - 0x94], ebx
add edi, edx
xor dword [ebp - 0xb0], 0xffffffe2
and dword [ebp - 0xa8], 0x7e
mov ecx, dword [ebp - 0x6c]
and dword [ebp - 0x9c], ecx
mov ebx, dword [ebp - 0x94]
cmp dword [ebp - 0x80], 0x10000002
jne 0x100061a3
test al, al
jne 0x1000ba62
push 1
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x16c]
push eax
call esi
neg al
sbb eax, eax
and eax, 0x10001
add eax, 0x10000
mov dword [edi], eax
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 4]
pop edi
pop esi
call fcn.1000897c
nop
nop
nop
dec esi
add byte [ebp], al
inc ebx
sub ecx, 0x38
xor dword [ebp - 0x78], eax
add ebx, dword [ecx + 0xb4]
mov dword [ebp - 0x94], ebx
xor dword [ebp - 0xa8], edx
sub eax, dword [ebp - 0x64]
and esi, dword [ebp - 0x78]
mov eax, dword [ebp - 0x70]
add dword [ebp - 0x88], 0
je 0x10006203
push dword [esi + 0x14]
push dword [ebp + 8]
call fcn.10007e95
push dword [ebp + 8]
call fcn.10007968
xor eax, eax
mov eax, 0x1000eba2
pop edi
pop esi
pop ebx
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x3c]
mov eax, dword [eax + 0x20]
mov edx, dword [eax + 0x74]
mov esi, dword [ebp - 0x94]
xor edi, eax
and dword [ebp - 0xbc], 0xf52
sub eax, 0x38
and ecx, edx
mov dword [eax + 0x34], esi
sub eax, dword [ebp - 0x8c]
add dword [ebp - 0xbc], 0xffffffb5
mov edi, dword [ebp - 0x70]
test dword [ebp - 0x88], 0
je 0x1000624c
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push esi
mov esi, dword [eax + 0xc0]
push edi
mov edx, dword [ebp - 0x74]
cmp dword [ebp - 0x88], 0xffffffdd
jne 0x10006284
mov eax, dword [eax + 0x20]
mov ebx, dword [0x1000e622]
push 2
push edi
push edi
add ecx, 0x1000e666
push ecx
push 0xffffffffffffffff
push dword [eax + 0x30]
push 0xffffffffffffffff
call ebx
cmp eax, edi
jge 0x100062ea
mov esi, eax
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x3c]
sub edi, 0x38
sub ecx, edx
mov edx, dword [edi + 0x48]
mov dword [ebp - 0x74], edx
or eax, dword [ebp - 0x64]
sub edi, dword [ebp - 0x90]
mov dword [ebp - 0xb4], ebx
mov eax, dword [ebp - 0x6c]
and ebx, edx
cmp dword [ebp - 0x88], 0xffffffb6
jne 0x100062db
mov edi, dword [ebp - 0x74]
or edx, dword [ebp - 0x64]
and edx, dword [ebp - 0xb0]
sub eax, 0x28
xor edx, dword [ebp - 0xa8]
add edi, dword [eax + 0xb0]
mov dword [ebp - 0x74], edi
add ebx, dword [ebp - 0xc4]
sub dword [ebp - 0x74], 4
and ebx, dword [ebp - 0xc0]
and edi, eax
mov eax, dword [ebp - 0x6c]
or dword [ebp - 0x64], 0xa09
mov ebx, dword [ebp - 0x98]
mov dword [ebp - 0xc4], 0
mov ebx, dword [eax]
mov dword [ebp - 0x98], ebx
sub edi, esi
sub dword [ebp - 0x98], 4
and edi, edx
cmp dword [ebp - 0x80], 1
je 0x1000636a
sete cl
push ecx
push eax
call 0x1000a5f9
mov eax, dword [ebp - 0x164]
cmp byte [eax + 0x2a2], 0
je 0x1000a516
nop
inc ebx
add byte [edi], ch
add byte fs:[ebp], ah
mov dword [ebp - 0xa4], 0
or edi, dword [ebp - 0xc4]
cmp dword [ebp - 0x88], 0x75
jne 0x100063d0
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x94], eax
push edi
lea eax, [ebp - 0x98]
push eax
mov eax, dword [esi + 4]
mov eax, dword [eax]
push dword [eax + 0x1a8]
call 0x10009b1c
test eax, eax
mov edi, 0x1000e38b
jl 0x1000635b
mov edx, dword [ebp - 0x70]
add dword [ebp - 0x88], 0
je 0x10006427
push eax
call fcn.100099c2
mov eax, dword [edi + 4]
cmp eax, 0x100
jb 0x10006bf6
cmp eax, 0x109
ja 0x10006884
cmp eax, 0x102
je 0x100072c0
cmp eax, 0x103
je 0x1000bbb4
cmp eax, 0x106
je 0x1000aa0a
cmp eax, 0x107
je 0x1000c6c9
mov ebx, dword [ebp - 0x68]
add edi, ebx
sub edx, 0x30
and edi, dword [ebp - 0xc8]
mov ebx, dword [edx + 0x2c]
mov dword [ebp - 0x68], ebx
sub edi, dword [ebp - 0x78]
lea ecx, [ebp - 0x68]
add esi, dword [ebp - 0xc4]
and dword [ebp - 0x90], esi
push ecx
sub ecx, dword [ebp - 0xb8]
push dword [ebp - 0x98]
cmp dword [ebp - 0x80], 0x69
jne 0x100064a6
push dword [ebp - 0xc]
call 0x1000aa9e
mov eax, esi
pop esi
pop ebx
mov esi, dword [ebp - 4]
cmp byte [ebx + 0x34], 0
je 0x100064de
movzx ecx, word [esi + 8]
mov eax, dword [ebx + 0x2c]
lea eax, [ecx + eax + 2]
cmp eax, dword [ebp - 0x10]
ja 0x1000ae0e
mov esi, dword [esi + 0xc]
mov edi, dword [ebp - 8]
mov edx, dword [ebp - 8]
mov eax, ecx
shr ecx, 2
mov ecx, eax
and ecx, 3
mov ecx, dword [ebp - 4]
movzx eax, word [ecx + 8]
mov edi, dword [ebp - 0x14]
call fcn.10004766
cmp dword [ebp - 0x80], 1
je 0x100064e8
movsx eax, dx
imul eax, eax, 0x1c
add eax, dword [esi + 0x58]
mov edx, dword [eax + 8]
mov bx, word [edx + ecx*2]
lea ecx, [ebp + 0x16]
push ecx
lea ecx, [ebp + 8]
push ecx
push dword [ebp + 0xc]
push dword [eax + 0x18]
call fcn.10008d42
mov eax, dword [ebp + 8]
movzx eax, word [eax + 2]
shl eax, 0x10
movzx ecx, bx
or eax, ecx
movzx ecx, word [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x68]
xor dword [ebp - 0x64], ebx
mov edi, dword [ebp - 0x68]
test dword [ebp - 0x88], 0
je 0x1000652b
inc ecx
dec edx
je 0x100064cc
xor eax, eax
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebx + 0x104]
push edi
xor edi, edi
cmp dword [ebp + 0xc], edi
mov dword [ebp - 4], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], esi
mov edi, dword [ecx]
mov dword [ebp - 0x68], edi
or eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x80], 0x10000002
jne 0x10006574
jl 0x100065ac
mov eax, dword [ebp - 8]
mov dword [esi + 0x278], eax
lea eax, [ebp - 8]
push eax
push 5
push dword [ebp + 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push dword [ebp - 4]
push esi
call fcn.1000c3dd
cmp eax, edi
jl 0x1000654e
mov ecx, dword [ebp - 8]
mov dword [esi + 0x27c], ecx
pop edi
pop esi
nop
nop
nop
lea edx, [ebp - 0x68]
lea esi, [edx + edi*2 + 0x12]
mov word [ebp - 0x8c], 0xf20
push edx
cmp dword [ebp - 0x88], 0x10000002
jne 0x100065d9
push dword [edi]
call 0x10006cab
cmp dword [ebp - 0xc], 0
je 0x10009ffb
lea eax, [ebp - 0x48]
push eax
push dword [0x1000e4d6]
call dword [0x1000e1b4]
dec eax
dec eax
je 0x1000a91e
dec eax
jne 0x10006550
push dword [ebp + 0xc]
push edi
call 0x1000adcd
mov bl, byte [ebp - 1]
cmp dword [ebp + 0x10], 0
je 0x10006622
push dword [ebp - 0xa4]
add ebx, dword [ebp - 0x9c]
call fcn.100047d3
and word [ebp - 0xc4], 0xbb1
cmp dword [ebp - 0x80], 0x55
jne 0x10006630
je 0x10006570
mov ax, word [ebp - 0xe0]
mov word [ebx + 0x6e], ax
mov ax, word [ebp - 0xe0]
mov word [ebx + 0x72], ax
xor eax, eax
cmp dword [ebp - 0xe0], eax
mov dword [ebx + 0x64], eax
xor eax, eax
cmp dword [ebp - 0xe0], eax
mov dword [ebx + 0x5c], eax
jmp 0x10005676
mov ecx, dword [ebp - 0x70]
cmp dword [ebp - 0x80], 1
je 0x10006686
cmp byte [esi + 0x2a2], bl
jne 0x1000ba84
test byte [edi + 4], 1
je 0x10006d1d
mov eax, dword [esi + 0xb0]
mov eax, dword [eax + 0x90]
mov dword [ebp + 8], eax
push ebx
push ebx
push ebx
push ebx
mov ebx, dword [0x1000e2e4]
call ebx
movsx edx, word [ebp + 8]
movsx ecx, word [ebp + 0xa]
mov dword [ebp + 8], edx
movsx edx, word [ebp - 0xa]
mov dword [ebp - 8], eax
movsx eax, word [edi + 0x2a]
sub edx, eax
inc edx
imul edx, ecx
mov eax, dword [ebp - 0x68]
add dword [ebp - 0xc0], 0x12
sub ecx, 0x3c
and edx, ebx
mov dword [ecx + 0x34], eax
lea edi, [edi + eax*4 + 0x1ff9]
xor edi, dword [ebp - 0xbc]
cmp dword [ebp - 0x88], 0x10000002
jne 0x100066da
push dword [0x1000e8df]
call 0x10009835
pop edi
pop esi
pop ebx
cmp di, 0x50
jle 0x1000667c
push dword [ebp - 0x18]
push dword [0x1000e244]
call 0x10006a8b
mov eax, dword [ebp + 0x1a]
mov ecx, dword [ebp - 0x2c]
push ecx
mov edi, dword [ebp - 0x6c]
sub edx, dword [ebp - 0xc0]
and esi, dword [ebp - 0x78]
mov edx, dword [ebp - 0x94]
add eax, esi
sub edi, 0x20
xor eax, dword [ebp - 0xb4]
and dword [ebp - 0x9c], esi
mov edx, dword [edi + 0x74]
mov dword [ebp - 0x94], edx
xor word [ebp - 0xc8], 0xc3c
lea ecx, [ebp - 0x68]
cmp dword [ebp - 0x88], 0x10000002
jne 0x10006753
sub esp, 0x10
mov ax, word [ebp + 0x10]
push dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov word [ebp - 0x10], ax
mov word [ebp - 0xe], ax
mov word [ebp - 8], ax
mov word [ebp - 6], ax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0xc], ecx
call dword [0x1000e028]
leave
push ecx
xor esi, dword [ebp - 0xb0]
add dword [ebp - 0xc4], 0xffffff93
push dword [ebp - 0x94]
xor ebx, eax
call fcn.1000481b
add eax, 0xcc7a
cmp dword [ebp - 0x88], 0x10000002
jne 0x100067c6
mov ecx, dword [0x1000e41d]
mov dword [eax], ecx
mov eax, dword [0x1000eb2d]
mov dword [esi + 0x134], eax
cmp word [esi + 0x162], 7
jne 0x100067cb
push 7
push dword [esi + 0xc0]
call dword [0x1000e070]
and word [ebx], 0
or dword [esi + 0x140], 1
push esi
call 0x100090b6
push esi
call fcn.10009332
test eax, eax
jl 0x1000679f
mov esi, dword [ebp - 0x74]
sub ebx, esi
xor dword [ebp - 0xbc], ebx
mov edi, 0x5000
mov edi, esi
mov edi, ebx
mov edi, esi
or ecx, dword [ebp - 0xb8]
sub edi, 0x1d
mov ebx, dword [ebp - 0x68]
cmp dword [ebp - 0x80], 0x35
jne 0x10006834
ja 0x10007381
add ecx, eax
cmp byte [ecx - 1], 0xa
jne 0x10008a0f
cmp byte [ecx - 2], 0xd
jne 0x1000710a
mov dword [edi + 0x1d], ebx
or dword [ebp - 0xc8], ecx
cmp dword [ebp - 0x88], 0xffffffe0
jne 0x1000686d
sub ax, word [ecx]
push esi
push edi
push ecx
push eax
call fcn.10007db4
xor eax, eax
push eax
push eax
lea ecx, [ebp - 1]
push ecx
push eax
push dword [ebp + 0x14]
lea eax, [ebp + 0xa]
push 0x64
sub dword [ebp - 0x74], 4
cmp dword [ebp - 0x80], 0x10000002
jne 0x100068ac
cmp dx, cx
mov word [ebp - 0xe], dx
jg 0x1000681e
mov word [ebp - 0xe], cx
mov dx, word [ebp - 4]
mov cx, word [esi + 0x2c]
cmp dx, cx
mov word [ebp - 0xc], dx
jl 0x1000682e
mov word [ebp - 0xc], cx
mov cx, word [esi + 0x2e]
cmp di, cx
mov word [ebp - 0xa], di
jl 0x10006850
mov edi, dword [ebp - 0x68]
lea edx, [ebp - 0xa4]
cmp dword [ebp - 0x80], 0x10000002
jne 0x10006908
add dword [ebx + 0x2c], 0xfffffffe
mov word [eax], 0x20
add dword [ebx + 0x34], 0xfffffffe
dec dword [ebx + 0x30]
cmp dword [0x1000e397], 0
mov eax, dword [ebx + 0x34]
je 0x1000689f
cmp word [ebp - 0x10], 0x7f
jne 0x10006905
push edx
mov dword [ebp - 0xbc], ebx
push edi
and ebx, ecx
cmp dword [ebp - 0x88], 0x10000002
jne 0x10006949
mov ecx, dword [esi + 0x2c]
mov esi, dword [edx + 0x128]
mov edi, dword [edi]
call fcn.100046c9
cmp dword [ebp - 0x80], 1
je 0x1000697d
sub cx, word [eax + 0x28]
inc ecx
cmp cx, word [eax + 0x24]
sete cl
mov byte [eax + 0x36], cl
xor ecx, ecx
mov cx, word [eax + 0x2e]
sub cx, word [eax + 0x2a]
inc ecx
cmp cx, word [eax + 0x26]
sete cl
cmp dword [ebp + 0x10], esi
mov byte [eax + 0x37], cl
je 0x1000693e
mov byte [ebp - 0xa8], 0x7b
sub dword [ebp - 0xa0], 4
cmp dword [ebp - 0x80], 1
je 0x100069d9
test byte [ebx + 4], 4
je 0x100082f4
mov eax, dword [ebx]
test byte [eax + 0x16c], 1
jne 0x100050c7
mov ecx, dword [ebp - 0xa0]
or dword [ebp - 0x90], 0xffffffb2
mov esi, 0xff00
or edi, dword [ebp - 0xb0]
cmp dword [ebp - 0x88], 0x10000002
jne 0x10006a24
mov dword [ecx], esi
lea edi, [ebx]
or ebx, edi
and esi, dword [ebp - 0xbc]
lea edx, [ebp - 0x94]
push edx
call fcn.100045ea
cmp dword [ebp - 0x80], 1
je 0x10006a7f
call fcn.100053b1
cmp dword [ebx + 0x48], edi
je 0x10006a4f
mov eax, dword [ebx]
push edi
push dword [eax + 0xd4]
push dword [eax + 0xc8]
call dword [0x1000e0a8]
push ebx
call 0x1000975f
movzx eax, byte [esi + 0x13e]
push eax
push dword [esi + 0xc0]
call 0x10005550
push 1
sub edi, dword [ebp - 0x90]
cmp dword [ebp - 0x80], 1
je 0x10006aca
push edi
call 0x10007060
test eax, eax
jge 0x10005d4e
test eax, eax
je 0x10006d6a
mov ecx, dword [ebp - 0x70]
and dword [ebp - 0x78], eax
mov edi, dword [ebp - 0x68]
add eax, 0x512d
sub ecx, 0x10
sub ebx, dword [ebp - 0xb0]
mov edi, dword [ecx + 8]
mov dword [ebp - 0x68], edi
and dword [ebp - 0xb4], 0xffffffbe
cmp dword [ebp - 0x80], 0xe
jne 0x10006b17
push dword [ecx]
push edx
push eax
xor eax, eax
mov ax, word [ebx + 0x3c]
push eax
call 0x10009c31
add word [ebp + 8], ax
mov eax, dword [ebx + 4]
movsx ecx, word [eax + 0x24]
movsx edx, word [ebx + 0x3c]
sub ecx, edx
push ecx
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x80], 1
je 0x10006b74
jl 0x10007d1f
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x20]
push edi
call fcn.1000c4d5
mov dword [ebp - 0x2c], eax
test eax, eax
jl 0x1000a8a1
mov word [ebp - 0x38], 0x20
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 0xb0]
mov cx, word [eax + 0x32]
mov eax, dword [ebp - 0xa0]
and edi, dword [ebp - 0xc8]
mov ecx, 8
mov edx, edi
cmp dword [ebp - 0x80], 1
je 0x10006c8e
lea ecx, [esi + 2]
push ecx
add eax, 0x100000
push eax
push dword [0x1000e5a6]
mov dword [ebp + 0x2c], esi
call dword [0x1000e128]
test eax, eax
mov dword [ebx + 0x128], eax
je 0x10004932
mov edi, eax
mov ecx, esi
mov esi, dword [ebp + 0xc]
mov eax, ecx
shr ecx, 2
mov ecx, eax
mov eax, dword [ebp + 0x2c]
and ecx, 3
mov ecx, dword [ebx + 0x128]
shr eax, 1
xor esi, esi
mov word [ecx + eax*2], si
mov ax, word [ebp + 0x10]
push esi
mov dword [eax], ecx
or dword [ebp - 0x90], 0x31
push dword [ebp - 0x68]
call fcn.1000453a
cmp dword [ebp - 0x88], 0x10000002
jne 0x10006cda
dec ecx
outsb dx, byte [esi]
imul esi, dword [ecx + ebp*2 + 0x61], 0x617a696c
je 0x10006cb8
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [ebp + 0x73], dl
jb 0x10006d12
jb 0x10006d38
jb 0x10006d09
insb byte es:[edi], dx
insb byte es:[edi], dx
dec ecx
outsb dx, byte [esi]
imul esi, dword [ecx + ebp*2 + 0x61], 0x617a696c
je 0x10006d37
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [edi + 0x55], bl
jae 0x10006d0f
call fcn.1000c5bd
add eax, dword [ebp - 0x64]
add edi, 0xac68
add dword [ebp - 0x88], 0
je 0x10006d3d
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x1000e6ba
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x34], 0x18
inc ebp
int3
call dword [str.D_d_t]
mov edi, eax
call dword [0x1000e0c0]
loope 0x10006d14
adc byte [ebx - 0x3fea0008], cl
loopne 0x10006d1c
adc byte [ebp - 0xdc8201], al
jne 0x10006d1c
test edi, edi
jge 0x10006d44
push dword [ebp - 8]
call dword [0x1000e14c]
push dword [ebp - 0xc]
call dword [0x1000e0f4]
or byte [esi + 0x39], 8
mov eax, dword [ebp - 8]
inc ebp
clc
mov esi, dword [eax + 0x74]
sub dword [ebp - 0xa0], 4
and edi, dword [ebp - 0x90]
mov eax, dword [ebp - 0xa0]
and ecx, dword [ebp - 0x64]
mov ebx, 0xd0
mov edx, ecx
mov dword [eax], ebx
cmp dword [ebp - 0x80], 0x10000002
jne 0x10006dab
push 0x3b
push dword [ebp + 0xc]
call fcn.10004c33
mov esi, dword [0x1000e952]
inc dword [0x75b6dc14]
push 0x1c
xor eax, eax
pop ecx
lea edi, [ebp - 0xb4]
mov eax, dword [0x1000e5ef]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xb4], 1
mov dword [ebp - 0x24], eax
call esi
push 4
mov dword [ebp - 0x20], eax
pop edi
test ebx, ebx
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x88], 0x10000002
jne 0x10006df0
push dword [0x1000e8a9]
push dword [0x1000e32d]
call dword [0x1000e100]
cmp eax, edi
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], eax
je 0x100092bb
mov cx, word [esi]
mov word [ebp + 0xc], cx
mov cx, word [esi + 2]
mov word [ebp + 0xe], cx
mov ecx, dword [ebp - 0x18]
lea edx, [ecx - 1]
mov word [ebp - 0x20], dx
lea edx, [ebp - 0x94]
push edx
call fcn.100045ea
xor dword [ebp - 0xc4], edi
xor dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x94]
add edi, edx
cmp dword [ebp - 0x68], ecx
jb 0x10007081
xor ecx, dword [ebp - 0xc0]
xor esi, ebx
or ecx, ebx
mov eax, dword [ebp - 0x70]
and edi, dword [ebp - 0xc0]
mov esi, dword [ebp - 0x68]
lea ecx, [ecx + 0x171f]
cmp dword [ebp - 0x88], 0
je 0x10006ea5
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xac], eax
mov eax, dword [ebx + 0xd0]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0xd4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebx + 0xd8]
mov dword [ebp - 0x1c], eax
mov ax, word [ebx + 0xca]
push 0x10
pop ecx
mov esi, edx
lea edi, [ebp - 0xa8]
mov word [ebp - 0x28], ax
xor eax, eax
mov ax, word [ebx + 0xc6]
lea edi, [ebp - 0x68]
lea esi, [ebx + 0xa0]
mov dword [ebp - 0xe0], eax
movzx eax, ax
mov dword [ebp - 0x30], eax
xor eax, eax
mov ax, word [ebx + 0xc4]
sub eax, 0x20
and word [ebp - 0x64], 0x66
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x68], esi
sub esi, dword [ebp - 0xc8]
add esi, edx
or edi, dword [ebp - 0x64]
sub dword [ebp - 0xa0], 4
add edi, dword [ebp - 0x90]
xor dword [ebp - 0xc8], 7
mov ebx, dword [ebp - 0xa0]
mov word [ebp - 0xc0], 0xf4
mov edi, 0xf000
mov word [ebp - 0xb8], 0x96c
mov dword [ebx], edi
add dword [ebp - 0x64], 0x68
lea ecx, [esi + ebx*2 + 0xe09]
cmp dword [ebp - 0x88], 0x10000002
jne 0x10006f3e
movsx edx, word [ebp + 0x20]
inc edx
cmp si, word [ebp + 0x10]
jne 0x10006f2b
mov edi, dword [eax + 0xc]
movsx edx, si
test byte [edx + edi], 2
je 0x10006f17
mov edx, dword [ebp + 0x1c]
push dword [ebp - 4]
mov word [edx], 0x20
movsx ecx, word [ecx]
mov esi, dword [eax + 0xc]
mov eax, dword [eax + 8]
lea esi, [esi + ecx + 1]
push esi
movsx esi, word [ebp + 0x20]
dec esi
lea ebx, [ebp - 0x94]
push ebx
call fcn.100045ea
xor dword [ebp - 0xbc], 0x95c
xor esi, edx
mov dword [ebp - 0xc0], edi
mov esi, dword [ebp - 0x94]
sub edx, ecx
and dword [ebp - 0x68], esi
mov word [ebp - 0xb4], 0x592
cmp dword [ebp - 0x80], 0x24
jne 0x10006f9a
push ecx
push dword [ebx + 0x38]
mov ecx, dword [eax]
push dword [ecx + 0x1a4]
push eax
call fcn.10007912
test eax, eax
je 0x10006f3d
inc word [ebp + 8]
cmp byte [ebx + 0x48], 0
je 0x10006fd4
push 0
push 1
sub dword [ebp - 0xa0], 4
xor ecx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xa0]
add edx, ecx
mov esi, 0xc
and dword [ebp - 0xc0], eax
mov dword [eax], esi
cmp dword [ebp - 0x80], 1
je 0x10006fdf
mov dword [ebp - 0x20], edx
jbe 0x10006f8a
mov ebx, dword [ebp - 0x40]
cmp dx, bx
push dword [ebp - 0x68]
call fcn.1000453a
and dword [ebp - 0xc8], edx
and dword [ebp - 0x8c], edx
call fcn.1000c5bd
mov dword [ebp - 0xa8], esi
add ecx, 0x2f49
add dword [ebp - 0x68], 1
or dword [ebp - 0xbc], 0x5c
mov ecx, edi
add ebx, dword [ebp - 0xc4]
xor dword [ebp - 0xb8], esi
cmp dword [ebp - 0x68], 5
jbe 0x10007038
or ecx, ebx
mov dword [ebp - 0x68], 4
and eax, edi
lea esi, [ebp - 0x98]
add eax, dword [ebp - 0xbc]
or ecx, dword [ebp - 0xc0]
push esi
xor word [ebp - 0xc8], 0xc39
push dword [ebp - 0x68]
cmp dword [ebp - 0x80], 0x10000002
jne 0x10007079
test esi, esi
je 0x10007036
push esi
call dword [0x1000e0ac]
push 0
call 0x10008131
xor eax, eax
pop esi
nop
nop
nop
nop
call fcn.100047d3
lea ebx, [edx + 0x17]
sub dword [ebp - 0x98], 4
jne 0x1000637a
sub edi, edx
or ebx, dword [ebp - 0x90]
mov esi, dword [ebp - 0x70]
cmp dword [ebp - 0x88], 0x10000002
jne 0x100070f2
push ebp
mov ebp, esp
sub esp, 0x14
push esi
mov esi, dword [ebp + 8]
mov edx, dword [esi + 0x140]
test dl, 4
mov dword [ebp + 8], edx
je 0x1000a48b
test dl, 8
jne 0x1000a8a4
mov cx, word [ebp + 0x18]
push ebx
mov ebx, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 0x18]
shr edi, 0x10
test byte [ebx + 4], 1
je 0x100070a8
movsx eax, word [ebp + 0x18]
mov ecx, dword [ebx + 0x90]
cdq
movsx ecx, cx
idiv ecx
mov eax, dword [ebp - 0x68]
and dword [ebp - 0xa8], eax
sub esi, 4
mov dword [ebp - 0x90], esi
mov eax, dword [esi]
mov dword [ebp - 0x68], eax
or dword [ebp - 0x8c], ecx
lea edi, [ebp - 0x68]
mov ebx, eax
push edi
mov ecx, ebx
and dword [ebp - 0xb8], 0x54a
push dword [ebp - 0x98]
or eax, edi
add dword [ebp - 0x88], 0
je 0x10007187
push 2
lea eax, [ebp - 0x458]
push eax
push dword [ebp - 0x448]
call fcn.10008adc
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x458]
push eax
call 0x10007aa4
mov ecx, dword [ebx + 0x58]
mov eax, dword [ebp - 0x458]
lea ecx, [ecx + eax - 1]
mov dword [ebp - 0x450], ecx
mov ecx, dword [ebx + 0x54]
cmp dword [ebp - 0x450], ecx
jle 0x10007149
cmp eax, ecx
mov dword [ebp - 0x450], ecx
jge 0x10004be8
push dword [ebx + 0x5c]
push eax
call fcn.10004766
xor ebx, esi
cmp dword [ebp - 0x88], 0x10000002
jne 0x100071c4
push 1
push dword [ebp - 0x168]
call dword [0x1000e0d8]
push 0x27
pop edi
mov dword [ebp + 0xc], edi
push esi
push edx
push ebx
call 0x1000868e
mov dword [ebp - 0x174], eax
test eax, eax
jl 0x10005add
mov edi, dword [ebp - 0x68]
and edx, eax
mov esi, dword [ebp - 0x68]
or ecx, dword [ebp - 0xc8]
cmp dword [ebp - 0x88], 0xffffff8d
jne 0x10007222
mov esi, dword [edi]
mov dword [ebp - 0x68], esi
xor edi, dword [ebp - 0xc4]
cmp dword [ebp - 0x80], 1
je 0x1000725f
lea edx, [ebp - 0x68]
mov ecx, esi
push edx
cmp dword [ebp - 0x88], 0
je 0x10007296
push dword [ebp - 0xa4]
and dword [ebp - 0xbc], esi
call fcn.100047d3
cmp dword [ebp - 0x80], 0x4c
jne 0x100072f6
push dword [ebp - 0x1c]
call dword [0x1000e128]
mov esi, dword [ebp - 4]
push esi
push dword [0x1000e5e5]
mov edi, eax
mov dword [ebp - 0x30], edi
call fcn.10007af0
sub ebx, dword [ebp - 4]
mov ecx, eax
shr ecx, 2
mov ecx, eax
mov eax, dword [ebp - 0x30]
and ecx, 3
sar ebx, 1
cmp word [ebp - 0x20], 0
lea ebx, [eax + ebx*2]
jne 0x10007ba4
mov eax, dword [ebp + 8]
push dword [eax + 0x1a8]
mov esi, dword [ebp - 0x30]
add ecx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x88], 0x10000002
jne 0x10007329
mov edi, dword [ebp - 0x68]
add edx, dword [ebp - 0x64]
test dword [ebp - 0x88], 0
je 0x1000736a
push 1
lea eax, [ebp - 0x24]
push eax
mov esi, dword [str.D_D]
call esi
lea eax, [ebp - 0x48]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 1
lea eax, [ebp - 0x2c]
push eax
call esi
mov esi, eax
cmp esi, ebx
jl 0x1000b08c
push dword [ebp - 0x48]
sub eax, 0x24
or dword [ebp - 0xb4], eax
xor edi, dword [eax + 0x78]
mov dword [ebp - 0x68], edi
cmp dword [ebp - 0x80], 0xffffffac
jne 0x1000739b
lea edi, [ebp - 0x74]
add esi, ecx
add dword [ebp - 0xb8], edi
push edi
sub edi, ebx
push dword [ebp - 0x98]
add esi, edx
cmp dword [ebp - 0x80], 0xffffffa6
jne 0x100073de
sub ebx, edi
cmp ebx, edx
jae 0x10004b0a
add ebx, edi
cmp dword [ebp - 0x2c], 0
je 0x100073fe
push dword [esi + 0x1a8]
mov eax, ebx
sub eax, edx
sar eax, 1
push eax
push edx
call 0x1000a543
je 0x100073d1
call fcn.10004766
add dword [ebp - 0x88], 0
je 0x1000741f
pop ebx
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x1000e8a5]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
lea ebx, [esi + esi*4 + 5]
shl ebx, 2
push ebx
add eax, 0x200000
push eax
push dword [0x1000e6f0]
call dword [0x1000e188]
mov edi, eax
mov ebx, dword [ebp - 0x74]
and dword [ebp - 0xb4], esi
mov esi, 0x4a00
mov esi, ebx
mov esi, eax
mov esi, ebx
and dword [ebp - 0xc0], ecx
sub esi, 0x31
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0xa8], esi
mov dword [esi + 0x31], edx
or esi, dword [ebp - 0x8c]
mov word [ebp - 0x78], 0xed3
add eax, dword [ebp - 0xc4]
lea eax, [ebp - 0xa4]
push eax
call fcn.100045ea
xor dword [ebp - 0xb8], eax
add dword [ebp - 0x8c], 0xfffffffe
add dword [ebp - 0xb4], eax
lea esi, [ebp - 0x74]
push esi
call fcn.100045ea
sub edi, dword [ebp - 0x64]
and word [ebp - 0xc8], 0x779
lea eax, [ebp - 0x6c]
push eax
call fcn.100045ea
add ecx, dword [ebp - 0xc0]
add dword [ebp - 0xb0], eax
xor ecx, edx
test dword [ebp - 0x88], 0
je 0x100074fb
je 0x1000b522
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov word [ecx + 0xc], ax
mov eax, dword [ebp - 0x10]
sub eax, dword [0x75b6d3b8]
sub eax, dword [ebp - 0x18]
mov word [ecx + 0xe], ax
test byte [edi + 4], bl
je 0x10007d3d
mov eax, dword [edi + 0x90]
mov dword [ebp - 8], eax
movsx esi, word [ebp - 8]
movsx eax, word [0x75b6d464]
mov edx, esi
sub edx, eax
mov eax, dword [0x1000e934]
cdq
lea eax, [ebp - 0x94]
push eax
call fcn.100045ea
sub ecx, dword [ebp - 0x64]
mov byte [ebp - 0xb0], 0xf7
cmp dword [ebp - 0x80], 1
je 0x10007538
dec eax
cmp ecx, eax
jge 0x10007518
mov eax, dword [ebp - 0x140]
push 2
pop ecx
add word [ebp - 0x138], cx
mov word [edi], ax
add edi, ecx
mov byte [ebx], 1
inc ebx
mov word [edi], ax
lea esi, [ebp - 0x98]
push esi
call fcn.100045ea
add ebx, dword [ebp - 0xb0]
or dword [ebp - 0xc8], 0xffffffb8
mov esi, dword [ebp - 0x70]
add ecx, ebx
or ebx, edx
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x90], ecx
cmp dword [ebp - 0x88], 0xffffffda
jne 0x100075af
lea esi, [ebp - 0x70]
push esi
call fcn.100045ea
mov byte [ebp - 0x90], 0x7f
cmp dword [ebp - 0x88], 0
je 0x100075eb
mov edi, dword [eax]
cmp edi, eax
mov dword [ebp + 8], eax
je 0x10007556
push ebx
push esi
lea esi, [edi - 4]
mov eax, dword [esi + 4]
mov ecx, dword [esi + 8]
mov edi, dword [edi]
mov dword [ecx], eax
mov dword [eax + 4], ecx
mov eax, dword [esi + 0xc]
test eax, eax
je 0x100075b8
push eax
xor edx, ecx
xor ebx, dword [ebp - 0x78]
mov ecx, dword [ebp - 0xa0]
or dword [ebp - 0x78], 0x38d
push dword [ecx]
xor dword [ebp - 0xa8], edi
add dword [ebp - 0xa0], 0x10
cmp dword [ebp - 0x80], 1
je 0x10007647
add byte [ecx], ah
insb byte es:[edi], dx
add byte [ebp], ah
je 0x10007651
je 0x10007669
add byte gs:[eax], al
add byte [ebx + 0x452b0446], cl
adc bh, dh
fcomp dword [ebx]
sal bh, 0xd0
and eax, esi
mov eax, esi
push esi
mov si, word [ebp + 0x10]
cmp si, 0x20
jb 0x100075de
cmp si, 0x7e
ja 0x100076c2
xor eax, eax
ret
call fcn.100051b9
xor eax, eax
pop esi
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x10008486
mov ecx, dword [ebp + 0x10]
cmp word [esi + 0x18], cx
je 0x1000c1d0
cmp ecx, 0x1000e9dc
ja 0x10004a89
mov eax, dword [0x1000e25a]
xor edx, dword [ebp - 0xa8]
or edx, dword [ebp - 0xbc]
call fcn.10004318
or dword [ebp - 0x9c], ebx
mov edi, dword [ebp - 0xa0]
sub ebx, dword [ebp - 0xc8]
xor edx, dword [ebp - 0x90]
pop dword [edi]
push dword [ebp - 0x70]
call fcn.1000453a
xor dword [ebp - 0xa8], eax
add eax, dword [ebp - 0xc0]
mov edi, dword [ebp - 0xa0]
lea esi, [ebp - 0x70]
xor dword [ebp - 0x9c], esi
push esi
add ebx, dword [ebp - 0x8c]
push edi
and ecx, edx
add edi, dword [ebp - 0x64]
call fcn.100046c9
or dword [ebp - 0x64], 0xfe6
sub ebx, dword [ebp - 0x64]
add dword [ebp - 0xa0], 0xfffffffc
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000773a
pop ecx
div ecx
add dword [ebp + 0xc], edi
sub dword [ebp + 8], edi
add dword [ebx], eax
add dword [esi + 0x2c], edi
mov eax, dword [esi + 0x2c]
cmp eax, dword [esi + 0x34]
je 0x10005552
mov eax, dword [ebp + 0x10]
cmp dword [ebx], eax
jb 0x1000b6d7
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
nop
nop
nop
push dword [ebp - 0x98]
call fcn.1000453a
cmp dword [ebp - 0x80], 0xffffffec
jne 0x10007779
push dword [0x1000e64a]
call 0x10007d65
mov eax, dword [ebp - 0x38]
mov word [eax], bx
mov eax, dword [ebp - 0x2c]
pop ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
call fcn.10008eb9
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
push eax
push dword [ebp - 0x94]
call fcn.1000453a
sub ebx, edi
push dword [ebp - 0x6c]
call fcn.1000453a
cmp dword [ebp - 0x80], 1
je 0x100077c3
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
push 0x1000e669
call dword [0x1000e044]
mov ebx, dword [0x1000eaf9]
push 0x30
push 0x40
call ebx
mov esi, eax
test esi, esi
je 0x100077a2
push dword [ebp - 0x74]
call fcn.1000453a
and dword [ebp - 0xa8], ebx
or edi, dword [ebp - 0xb0]
push dword [ebp - 0xa4]
call fcn.1000453a
add ebx, 0x5b84
xor ecx, dword [ebp - 0x90]
mov esi, dword [ebp - 0x68]
lea ecx, [ebp - 0x94]
add edi, dword [ebp - 0xc4]
mov ebx, edi
push ecx
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000782b
call 0x10008f3b
push dword [ebp - 4]
call dword [0x1000e058]
push dword [ebp - 4]
call dword [0x1000e030]
cmp dword [ebp + 0xc], esi
jne 0x100078a3
push esi
and word [ebp - 0xc8], 0x8ab
call fcn.100046c9
mov byte [ebp - 0xbc], 1
sub edi, dword [ebp - 0x9c]
lea edi, [ebp - 0x94]
xor eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x9c]
push edi
xor dword [ebp - 0xb4], 0xffffffe1
push dword [ebp - 0x98]
cmp dword [ebp - 0x80], 1
je 0x100078a6
mov ecx, ebx
mov ebx, dword [ebp - 0x70]
and edx, ebx
mov esi, dword [ebp - 0x74]
mov byte [ebp - 0xc4], 0x30
sub ebx, 0x3c
and edi, dword [ebp - 0xc4]
and eax, dword [ebp - 0xb0]
mov esi, dword [ebx + 0x48]
mov dword [ebp - 0x74], esi
and dword [ebp - 0x90], 0x78c
add eax, 0x2052
mov dword [ebp - 0xbc], edi
mov ecx, dword [ebp - 0x70]
lea edi, [eax + 0x1786]
cmp dword [ebp - 0x88], 0x10000002
jne 0x10007a5c
or dword [ebp - 0x82c], eax
cmp dword [ebp - 0x864], 0
jne 0x10007a83
xor esi, esi
push esi
push 0x18
lea eax, [ebp - 0x8bc]
push eax
push esi
push dword [ebp - 0x810]
call dword [0x1000e00c]
test eax, eax
jl 0x10007a26
mov eax, dword [ebp - 0x8b8]
cmp eax, esi
mov edi, eax
mov edx, dword [ebp - 0x68]
or ebx, ecx
sub ecx, 8
cmp dword [ebp - 0x80], 0x10000002
jne 0x10007a90
je 0x10007a42
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push edi
call 0x10009cb7
pop edi
pop esi
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x44
mov edx, dword [ebp + 8]
mov edx, dword [ecx + 0x14]
mov dword [ebp - 0x68], edx
add edi, 0xa134
sub ebx, ecx
cmp dword [ebp - 0x80], 0xffffffc2
jne 0x10007ad2
pop esp
add byte [eax + eax + 0x2e], bl
add byte [eax + eax + 0x70], bl
add byte [ecx], ch
jo 0x10007a40
add byte gs:[eax + eax + 0x50], bl
add byte [ebx], al
dec eax
add byte [eax], cl
popal
add byte [esi], ch
add byte [bp + si], dl
add byte gs:[eax], dh
inc ebp
add byte [eax], bh
add byte gs:[ebx], ah
mov esi, dword [ebp - 0xa4]
add word [ebp - 0xb8], 0xd72
mov edx, dword [ebp - 0x68]
test dword [ebp - 0x88], 0
je 0x10007b1e
sub esi, 0x28
and ebx, edx
add edx, dword [esi + 0xd8]
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x88], 0x10000002
jne 0x10007b7d
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1000e637
mov eax, dword [0x1000e8ed]
push ebx
push esi
mov esi, dword [0x1000e903]
push edi
push 0x1000e79d
xor ebx, ebx
push ebx
push 1
push ebx
mov dword [ebp - 4], eax
mov dword [ebp - 0xfc], ebx
call esi
cmp eax, ebx
mov dword [ebp - 0x100], eax
je 0x1000bb47
mov edi, dword [0x1000e7ba]
push ebx
push ebx
mov ecx, dword [ebp - 0x68]
cmp dword [ebp - 0x80], 1
je 0x10007ba8
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp + 8]
push eax
push dword [esi + 0x28]
call 0x1000b229
mov ebx, eax
test ebx, ebx
jl 0x10007bfb
mov esi, dword [ebp - 0x68]
or edi, eax
lea edx, [edi + 0x1e33]
mov esi, dword [ecx]
mov dword [ebp - 0x68], esi
cmp dword [ebp - 0x80], 0xe
jne 0x10007c20
je 0x10004746
mov esi, dword [0x1000e8a4]
push 0
push 0x50
lea eax, [ebp - 0x90c]
push eax
push dword [ebp - 0x80c]
push dword [ebp - 0x810]
call esi
mov ecx, dword [ebp - 0x68]
cmp dword [ebp - 0x80], 1
je 0x10007c58
mov word [ebp - 0x14c], cx
jb 0x10005d7f
push eax
mov eax, dword [ebp - 0x148]
push dword [eax + 0x1a8]
push dword [eax + 0xc8]
call 0x100098cf
test eax, eax
je 0x10007c4e
jae 0x1000a068
mov edi, dword [ebp - 0x68]
cmp dword [ebp - 0x80], 1
je 0x10007c90
push esi
push edi
push dword [ebp - 0x8dc]
push dword [ebp - 0x810]
call dword [0x1000e0f8]
test eax, eax
jge 0x10007cb8
push edi
call dword [0x1000e01c]
mov dword [ebp - 0x80c], edi
mov dword [ebp - 0x83c], 1
mov edi, dword [ecx]
mov dword [ebp - 0x68], edi
mov byte [ebp - 0xc0], 0xb2
lea ecx, [eax - 0x61]
mov eax, dword [ebp - 0x68]
lea ebx, [ebp - 0x98]
cmp dword [ebp - 0x88], 0x10000002
jne 0x10007cc0
pop ebp
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push ebx
and dword [ebp - 0x64], esi
push eax
and dword [ebp - 0x90], 0xfffffffd
call fcn.100046c9
and word [ebp - 0x90], 0xebe
mov esi, edi
mov edx, ecx
mov eax, 0xff
sub esi, edi
and dword [ebp - 0x68], eax
mov dword [ebp - 0x78], 0x314
cmp dword [ebp - 0x80], 0x10000002
jne 0x10007d2f
test ebx, ebx
mov dword [ebp - 4], ebx
je 0x10007c80
cmp ebx, 0xffffffff
je 0x10007c95
call esi
mov ecx, dword [ebp - 0x20]
sub ecx, eax
add dword [ebp - 4], ecx
jns 0x10007cb6
and dword [ebp - 4], 0
push 0x1000ea68
push dword [ebp - 4]
lea eax, [ebp - 0x28]
push 0
push eax
push 2
call fcn.10006b23
je 0x1000b1a9
cmp dword [ebp - 0x80], 0x32
jne 0x10007d4f
je 0x10007d68
cmp dword [ebp + 8], 0
je 0x10007d35
mov bl, byte [ebp + 8]
cmp bl, byte [eax]
jne 0x10007d1f
test byte [eax], 4
jne 0x10007d72
mov bl, byte [ebp - 0x45]
cmp byte [eax + 1], bl
cmp dword [ebp - 0x68], 0x55
je 0x10007dfb
add dword [ebp - 0x88], 0
je 0x10007da8
push edx
xor eax, eax
mov dword [ebp - 0x38], 0x28
lea edi, [ebp - 0x34]
push ebx
mov dword [ebp + 0xc], edx
mov dword [ebp + 8], edx
call dword [0x1000e168]
test eax, eax
je 0x10007d44
lea ecx, [ebp - 0x38]
push ecx
push eax
call dword [0x1000e1c4]
test eax, eax
je 0x10007d42
lea eax, [ebp - 0x10]
push eax
push dword [esi + 0xc0]
call dword [0x1000e158]
mov edi, dword [0x1000e622]
add edi, 0x957d
cmp dword [ebp - 0x80], 1
je 0x10007dda
cmp dword [ebp - 0x68], 0x8b
je 0x10007dfb
add ebx, dword [ebp - 0x64]
add ecx, dword [ebp - 0xb4]
jmp 0x1000925b
sub ebx, dword [ebp - 0xb0]
mov ebx, 0xff0000
add eax, esi
and dword [ebp - 0x98], ebx
sub edi, dword [ebp - 0xc4]
and word [ebp - 0x78], 0x47
add edi, ebx
or dword [ebp - 0xb0], 0xffffffd7
sub dword [ebp - 0xa0], 4
sub edi, dword [ebp - 0x90]
mov ebx, dword [ebp - 0xa0]
test dword [ebp - 0x88], 0
je 0x10007e6e
mov ax, word [edx]
cmp ax, 0x20
je 0x10007dea
test si, si
je 0x10007e6b
push eax
call 0x10008186
test eax, eax
je fcn.10007e95
sub edx, edi
cmp edx, dword [ebx + 0x38]
jne 0x10007e58
cmp edx, dword [ebp + 8]
je 0x10007e78
add edx, edi
mov esi, dword [ebp + 8]
mov ecx, dword [ebx + 0x3c]
mov esi, 0x550000
and edx, dword [ebp - 0x64]
mov dword [ebx], esi
or esi, edi
add edi, dword [ebp - 0x78]
sub eax, dword [ebp - 0xb4]
lea edx, [ebp - 0x94]
push edx
call fcn.100045ea
cmp dword [ebp - 0x80], 1
je 0x10007ecb
sub edi, dword [ebp - 0x78]
lea ebx, [edi + 0x862]
cmp dword [ebp - 0x68], 0x8b
jne 0x100089b7
cmp dword [ebp - 0x88], 0x51
jne 0x10007f12
dec esi
push esi
push dword [ebp - 4]
lea ecx, [eax + 0x20]
push ecx
push eax
call 0x1000c354
mov dword [ebp - 8], ebx
push dword [ebp - 4]
push dword [0x1000e7e6]
call fcn.1000a0cb
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
nop
nop
add eax, dword [ebp - 0x78]
sub edx, esi
mov eax, dword [ebp - 0x94]
and esi, dword [ebp - 0x8c]
cmp dword [ebp - 0x98], eax
je 0x100089b7
add edi, 0x61d8
mov edx, 8
or esi, edx
add ebx, dword [ebp - 0xc4]
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x80], 0xffffff81
jne 0x10007f8c
je 0x10007f83
test byte [eax], 1
jne 0x10007f74
push eax
push esi
mov ecx, dword [eax + 4]
cmp ecx, 0x2c
jb 0x10007f76
mov esi, dword [eax + 8]
cmp esi, edx
je 0x10007fb4
mov dword [ebp - 0x74], 0xc
cmp dword [ebp - 0x80], 1
je 0x10007fd4
push dword [eax]
push dword [ebp - 8]
call fcn.100092ab
mov ebx, eax
test ebx, ebx
jl 0x10006f82
lea eax, [ebp + 8]
push eax
mov eax, dword [esi + 0x2c]
shr eax, 2
push eax
push dword [ebp - 8]
call fcn.1000b7c2
mov ebx, eax
test ebx, ebx
jl 0x10007f83
lea eax, [ebp - 4]
push eax
push dword [edi]
push dword [ebp - 8]
call 0x10009cb7
sub esi, dword [ebp - 0x8c]
sub ebx, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x70]
add esi, dword [ebp - 0xb0]
cmp dword [ebp - 0x88], 0x69
jne 0x10008012
movsx eax, word [ebx]
mov ecx, dword [esi + 8]
lea edx, [ecx + eax*2]
jle 0x1000805d
mov eax, dword [ebp - 0x68]
sub edx, esi
or esi, ecx
sub ecx, 0x34
cmp dword [ebp - 0x80], 1
je 0x10008041
mov eax, dword [ecx + 0x40]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x88], 0
je 0x10008081
push dword [ebp - 0x70]
call fcn.1000453a
cmp dword [ebp - 0x88], 0x10000002
jne 0x100080c2
push ecx
push ebx
push esi
mov esi, dword [ebp + 0xc]
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
push edi
mov edi, dword [ebp + 8]
je 0x100080f5
push dword [ebp + 0x14]
mov word [ebp - 8], bx
push dword [ebp + 0x10]
mov word [ebp - 6], bx
push edi
call 0x10009b1c
mov word [ebp - 4], ax
mov ecx, dword [ebp - 4]
dec ecx
mov ecx, dword [ebp - 0xa0]
lea edi, [ebp - 0x70]
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000810a
jne 0x100080a1
mov eax, 0x1000e2fa
push ecx
push dword [ebp + 0x14]
push dword [ebp + 0x18]
push 2
push esi
mov eax, dword [edi]
test eax, eax
push edi
xor eax, esi
and eax, dword [ebp - 0xc0]
push ecx
sub edi, dword [ebp - 0x9c]
xor dword [ebp - 0x8c], edi
call fcn.100046c9
add dword [ebp - 0x9c], ecx
cmp dword [ebp - 0x80], 1
je 0x10008176
mov dword [ebp - 0x1f0], eax
movsx ecx, ax
mov eax, dword [ebp - 0x150]
cdq
idiv ecx
xor ecx, ecx
mov cx, word [esi + 0x28]
add eax, ecx
mov word [ebp - 0x17c], ax
mov eax, dword [esi + 0x90]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x230], eax
movsx ecx, word [ebp - 0x1b6]
mov eax, dword [ebp - 0x154]
cdq
idiv ecx
xor ecx, ecx
sub dword [ebp - 0xa0], 0x60
cmp dword [ebp - 0x80], 1
je 0x100081b6
call esi
push 4
pop ecx
mov esi, 0x1000ea56
mov eax, dword [edi]
movzx eax, byte [esi + eax]
lea eax, [eax + eax + 0x54]
cdq
push 0x55
pop ebx
idiv ebx
add esi, 4
imul eax, eax, 0x15
cdq
sub eax, edx
mov edx, dword [0x1000e77f]
sar eax, 1
mov byte [edx + ecx], al
mov eax, dword [edi]
mov eax, edx
mov esi, dword [ebp - 0xa4]
cmp dword [ebp - 0x88], 0
je 0x10008212
pop ecx
xor eax, eax
lea edi, [ebp - 0xf4]
lea eax, [ebp - 0xf4]
push eax
push eax
push dword [ebp - 0xfc]
mov dword [ebp - 0xd8], 4
mov word [ebp - 0xee], bx
mov word [ebp - 0xf0], bx
mov word [ebp - 0xf2], 0xf0
mov word [ebp - 0xf4], 0xd8
call esi
cmp eax, ebx
mov dword [ebp - 0xf8], eax
mov ebx, dword [ebp - 0x68]
add edx, ecx
sub esi, 0x24
or dword [ebp - 0xc4], ecx
add ebx, dword [esi + 0xcc]
mov dword [ebp - 0x68], ebx
add dword [ebp - 0xa8], eax
xor ebx, eax
sub dword [ebp - 0x68], 0x1c
mov dword [ebp - 0xc4], 0x612
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xb0], esi
push ecx
or dword [ebp - 0xa8], ecx
push dword [ebp - 0x74]
cmp dword [ebp - 0x88], 0x10000002
jne 0x100082bb
je 0x10006d7f
mov ebx, dword [ebp - 0x20c]
push esi
lea eax, [ebp - 0x240]
mov dword [ebp - 0x230], eax
push 1
lea eax, [ebp - 0x238]
push eax
push 0x1000e6d2
lea eax, [ebp - 0x214]
push eax
mov dword [ebp - 0x238], 0x18
mov dword [ebp - 0x234], esi
mov dword [ebp - 0x22c], 0xc0
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], esi
call dword [0x1000e1c8]
call fcn.10004766
add word [ebp - 0x64], 0xc35
and edi, dword [ebp - 0xb4]
mov ebx, dword [ebp - 0x68]
cmp dword [ebp - 0x80], 0x1b
jne 0x100082fe
cmp eax, ebx
je 0x100093c3
mov ecx, dword [ebp + 0x14]
mov dword [ecx], 1
pop edi
pop esi
pop ebx
nop
nop
nop
nop
nop
jmp dword [0x1000e028]
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
mov esi, dword [ebp - 0x6c]
or eax, dword [ebp - 0x9c]
mov esi, dword [ebx]
mov dword [ebp - 0x6c], esi
cmp dword [ebp - 0x88], 0x10000002
jne 0x10008340
cmp dword [ebp - 0x3b], 0x1000e2
jb 0x1000b1fe
xor edi, ecx
add dword [ebp - 0x78], 0x873
mov edi, dword [ebp - 0x6c]
cmp dword [ebp - 0x80], 1
je 0x10008379
je 0x100083a4
mov esi, dword [eax + 0x40]
and dword [eax + 0x40], 0xffffffef
mov eax, dword [ebp + 8]
push dword [ebp - 4]
mov eax, dword [eax + 0xb0]
push dword [ebp - 8]
and dword [eax + 0x84], 0xfffffffe
call 0x1000975f
mov eax, dword [ebp + 8]
or dword [ebp - 0x6c], edi
jne 0x100084a4
cmp dword [ebp - 0x88], 0
je 0x100083ad
cmp dword [ebp + 0x10], edi
jne 0x100056a6
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push esi
call fcn.1000ad84
pop edi
pop esi
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
cmp dword [ebp - 0x80], 1
je 0x100083eb
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [ebp + 8]
push edi
lea eax, [ebp - 4]
push eax
push dword [esi + 0x28]
xor edi, edi
mov dword [ebp + 8], edi
call 0x1000774b
cmp eax, edi
jl 0x10006e7a
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x3c]
mov eax, dword [eax + 0x20]
push ecx
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x80], 1
je 0x10008415
pop edi
pop esi
pop ebx
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp + 8]
push eax
push dword [esi + 0x28]
call fcn.10005020
test eax, eax
jl 0x100083b5
mov edi, dword [ebp - 0x6c]
cmp dword [ebp - 0x88], 0xffffffef
jne 0x10008466
movsx ecx, ax
cmp dword [ebp - 0xc], ecx
jle 0x10007796
mov ecx, dword [ebp + 0xc]
mov ax, word [ecx]
sub ax, word [esi + 0x28]
inc dword [ebp - 0x14]
mov word [ebp - 4], ax
mov ax, word [ebp - 0x14]
cmp ax, word [esi + 0x26]
jne 0x10008469
and dword [ebp - 0x14], 0
movsx eax, word [ecx + 6]
inc dword [ebp - 0x20]
inc word [ebp - 2]
cmp dword [ebp - 0x20], eax
jle 0x1000a401
call dword [0x1000e130]
sub eax, 8
or dword [ebp - 0xb0], 0x3e8
mov edi, dword [eax + 0xc]
mov dword [ebp - 0x6c], edi
add dword [ebp - 0x88], 0
je 0x100084a4
push 0
push 0x1000e941
push dword [ebp + 8]
call esi
test byte [edi + 0x140], 1
je 0x10008457
push 1
push 0
push 0x1000e3cf
push dword [ebp - 0x68]
call fcn.1000453a
cmp dword [ebp - 0x80], 0x10000002
jne 0x100084d1
push dword [ebp - 0x94]
call fcn.1000453a
add esi, 0x8286
mov dword [ebp - 0x7c], esp
or dword [ebp - 0x90], ecx
mov esp, dword [ebp - 0xa0]
sub esi, ebx
mov ecx, dword [ebp - 0x6c]
xor dword [ebp - 0x9c], 0x65
call ecx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x94], edx
or ebx, edi
mov dword [ebp - 0xa0], esp
test dword [ebp - 0x88], 0
je 0x1000857b
mov ecx, dword [esi + 0x1a0]
pop eax
mov dword [ebp - 0x104], ecx
lea ecx, [ebp - 0xe4]
push ecx
lea ecx, [ebp - 0x108]
push ecx
push eax
push ecx
push eax
mov dword [ebp - 0xe4], eax
call dword [0x1000e120]
cmp eax, edi
je 0x10008537
and byte [esi + 0x141], 0xbf
push esi
call fcn.1000737f
mov eax, 0x1000e458
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], eax
mov eax, 0x1000eb0e
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], eax
push 0x10
mov esp, dword [ebp - 0x7c]
and edi, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x70]
xor edx, esi
mov dword [ebp - 0xa0], ecx
add edi, ecx
test dword [ebp - 0x88], 0
je 0x100085cd
call fcn.1000c169
push edi
call fcn.1000bba7
and dword [edi + 0x84], 0xfffffffb
xor eax, eax
inc eax
pop edi
pop esi
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
push esi
mov esi, dword [ebp + 0xc]
test byte [esi], 1
je 0x100085b8
mov eax, dword [ebp + 0x10]
cmp dword [ebp - 0x88], 0xc
jne 0x100085f2
mov eax, dword [eax + 8]
lea esi, [esi + ecx + 1]
push esi
movsx esi, word [ebp + 0x20]
dec esi
push esi
lea eax, [eax + ecx*2 + 2]
push eax
add edx, 2
push edx
call 0x1000bc6b
lea edi, [ebp - 0x70]
push edi
call fcn.100045ea
cmp dword [ebp - 0x80], 0xffffffb5
jne 0x10008616
sbb esi, esi
neg esi
pop ecx
pop ecx
mov edi, 0x1000e27f
je 0x100085ed
push 1
push edi
push ebx
add dword [ebp - 0x74], 8
cmp dword [ebp - 0x80], 0x10000002
jne 0x10008673
push esi
push ebx
call edi
test al, al
je 0x100079d5
mov eax, dword fs:[0x18]
cmp dword [esi + 0xc], 0
mov eax, dword [eax + 0x3c]
mov ebx, dword [eax + 0x20]
lea eax, [ebp - 0xc]
je 0x10008605
push dword [esi + 0x10]
push 0x1000ea23
push eax
call dword [0x1000e0a8]
mov eax, dword [0x1000e414]
push 0x1c
add eax, 0x140000
push eax
push dword [0x1000e432]
call dword [0x1000e1dc]
mov edi, eax
test edi, edi
sub dword [ebp - 0x98], 1
jne 0x10007f8c
add edi, eax
cmp dword [ebp - 0x80], 0x10000002
jne 0x100086d1
push edi
call fcn.1000c773
and dword [esi], 0xfffffffe
and word [ebp - 6], 0
mov ebx, 0x1000eb7b
push ebx
lea eax, [ebp - 0x404]
push eax
push edi
call 0x100055f5
sub ebx, eax
test byte [esi + 4], 0x20
lea ecx, [ebp + eax*2 - 0x404]
je 0x10008683
mov edx, dword [esi + 0x14]
mov eax, ebx
dec ebx
test eax, eax
je 0x100086ce
mov ax, word [edx]
mov word [ecx], ax
inc ecx
inc ecx
inc edx
mov ecx, edx
xor esi, dword [ebp - 0x64]
mov esi, dword [ebp - 0x70]
mov eax, edx
sub edi, esi
mov eax, dword [ebp - 0x68]
xor ecx, dword [ebp - 0xb4]
xor ebx, edi
sub esi, 0xc
and dword [ebp - 0xb0], eax
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x68], eax
add eax, edi
xor eax, dword [ebp - 0xc0]
and word [ebp - 0xc8], 0xa3f
mov ecx, dword [ebp - 0xa4]
xor dword [ebp - 0x8c], edi
mov ebx, dword [ebp - 0x68]
cmp dword [ebp - 0x88], 8
jne 0x10008752
je 0x10004cd5
cmp dword [ebp + 0x10], ecx
je 0x100086af
sub ecx, 0x34
and esi, dword [ebp - 0xc4]
xor edi, eax
add ebx, dword [ecx + 0xd8]
mov dword [ebp - 0x68], ebx
add esi, eax
or esi, dword [ebp - 0x90]
mov edx, dword [ebp - 0x68]
cmp dword [ebp - 0x88], 0x66
jne 0x100087de
mov esi, dword [ebp - 0x6c]
mov dword [ebp - 0xc4], eax
mov esi, dword [edx]
mov dword [ebp - 0x6c], esi
lea esi, [edx + ebx*2 + 0x56]
or eax, ecx
test dword [ebp - 0x88], 0
je 0x1000884f
add dword [ebp - 0x9c], edx
call fcn.10004318
or edi, eax
mov esi, dword [ebp - 0xa0]
and dword [ebp - 0xb0], 0x6c6
mov edi, 0x6c6c64
cmp dword [ebp - 0x80], 1
je 0x10008a1b
nop
nop
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
mov eax, dword [eax + 0xb0]
test byte [eax + 4], 2
jne 0x100096cf
push esi
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x100065bb
push edi
test byte [esi], 0x11
jne 0x100078ea
mov dword [esi], edi
add dword [ebp - 0x88], 0
je 0x10008a57
xor eax, eax
inc eax
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
cmp dword [0x1000ea29], 0
jne 0x10008cee
mov eax, dword [ebp + 8]
cmp word [eax + 6], 0x53
je 0x1000b820
sub ebx, dword [ebp - 0x64]
sub dword [ebp - 0xa0], 4
add dword [ebp - 0xc8], esi
mov ebx, dword [ebp - 0xa0]
add dword [ebp - 0x88], 0
je 0x10008aae
push ebp
mov ebp, esp
sub esp, 0x1000e40e
mov eax, dword [0x1000e811]
push ebx
push esi
mov esi, dword [ebp + 0xc]
xor ebx, ebx
cmp dword [ebp - 0x52], 0x1000e5
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 4], eax
mov dword [ebp - 0x138], esi
mov dword [ebp - 0x120], ebx
jae 0x1000a763
mov edx, 0x2e32336c
or dword [ebp - 0xb4], 0x850
mov dword [ebx], edx
mov edi, esi
add ebx, esi
xor dword [ebp - 0xbc], edi
sub dword [ebp - 0xa0], 4
or eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x80], 0xffffffed
jne 0x10008b08
call 0x1000af31
pop edi
mov eax, dword [ebp - 0x6c]
add ecx, dword [ebp - 0x8c]
mov edi, ecx
call eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x94], edx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xa0], esp
and edx, dword [ebp - 0x78]
mov esp, dword [ebp - 0x7c]
add ecx, dword [ebp - 0xb0]
mov word [ebp - 0x78], 0xafb
add dword [ebp - 0xa0], 0xc
xor dword [ebp - 0xa8], 0xffffffd6
mov eax, dword [ebp - 0x68]
lea ebx, [ebp - 0x74]
xor edx, dword [ebp - 0xc4]
add dword [ebp - 0x88], 0
je 0x10008d2e
mov eax, dword [ebp + 8]
push ecx
call 0x1000a822
call 0x1000b8e3
push edi
push esi
call 0x10006460
push esi
mov byte [esi + 0x66], 0
call 0x1000653f
mov word [ebp + 0xc], 1
mov word [ebp + 0xe], 1
test byte [esi + 0x264], 1
jne 0x1000c269
push ebx
add edx, 0x2b7f
push eax
cmp dword [ebp - 0x88], 0x10000002
jne 0x10008d6a
xor eax, eax
push eax
push 4
push 0x1000eb34
push eax
push 0x1000e781
push eax
push dword [0x1000e41d]
call dword [0x1000e158]
mov dword [ebp - 0x7c], esp
sub esi, dword [ebp - 0x90]
add eax, edi
mov esp, dword [ebp - 0xa0]
cmp dword [ebp - 0x80], 1
je 0x10008f85
jne 0x10008f9f
mov eax, dword [ebp - 0x6c]
xor ecx, dword [ebp - 0xc8]
call eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x80], 0x6a
jne 0x10008fcf
call 0x1000bc6b
test byte [esi + 4], 1
je 0x1000689b
mov edi, dword [ebp + 0xc]
mov ax, word [edi + 2]
mov dx, word [edi + 4]
mov cx, word [edi]
mov word [ebp - 2], ax
mov word [ebp - 0xa], ax
lea eax, [ebp - 0x10]
push eax
mov word [ebp - 0xc], dx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xa0], esp
or edx, ecx
add dword [ebp - 0xc0], 0xf
mov esp, dword [ebp - 0x7c]
add dword [ebp - 0x90], 0x8d
mov esi, ebx
mov ecx, dword [ebp - 0x68]
or ebx, dword [ebp - 0x9c]
or dword [ebp - 0xb8], 0x63
mov eax, dword [ebp - 0x68]
and ebx, dword [ebp - 0x64]
mov eax, dword [ecx]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x88], 0
je 0x1000903e
or word [ebp - 0xa8], 0x9d9
mov ecx, 0xff
cmp dword [ebp - 0x80], 1
je 0x10009089
and dword [ebp - 0x68], ecx
add dword [ebp - 0x64], ecx
xor ecx, eax
or ecx, dword [ebp - 0x64]
sub edx, dword [ebp - 0xc8]
cmp dword [ebp - 0x68], 0x55
je 0x10009c14
and dword [ebp - 0xc4], ecx
cmp dword [ebp - 0x80], 0x10000002
jne 0x100090f5
mov ebx, dword [ebp + 8]
push esi
push edi
lea eax, [ebp - 8]
push eax
push dword [ebx + 0x50]
push dword [ebx + 0x4c]
call fcn.100084b5
mov esi, eax
test esi, esi
mov dword [ebp - 0xc], esi
jge 0x100090ce
and dword [ebx + 0x2c], 0
mov eax, dword [ebx + 0x2c]
cmp eax, dword [ebx + 0x28]
mov esi, dword [ebp + 0xc]
jae 0x1000bf3f
mov edi, 0x1000e314
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 1]
push eax
push 0
or dword [ebp - 0xa8], eax
cmp dword [ebp - 0x68], 0x8b
je 0x10009c14
cmp dword [ebp - 0x80], 0xfffffffc
jne 0x10009128
call 0x1000774b
call fcn.10005974
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push ecx
push esi
mov esi, dword [ebp + 8]
or edx, dword [ebp - 0xb4]
add esi, eax
cmp dword [ebp - 0x68], 0xff
je 0x10009c14
or eax, dword [ebp - 0xc8]
mov eax, edx
mov ebx, dword [ebp - 0xa4]
xor ecx, eax
or dword [ebp - 0xa8], edx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb8], eax
sub ebx, 0x10
cmp dword [ebp - 0x88], 0x10000002
jne 0x1000918f
mov ecx, dword [eax + 4]
push ecx
mov dword [esi + 0x280], ecx
push dword [eax]
add eax, 8
push eax
push dword [esi + 0x278]
push esi
call fcn.10005a3d
jmp 0x100073ff
lea ecx, [ebx + 0x88]
mov dword [ebp - 0x94], ecx
and dword [ebp - 0x64], edx
xor eax, edi
cmp dword [ebp - 0x80], 0x10000002
jne 0x100091ef
cmp ecx, 5
ja 0x1000923c
lea edi, [esi + 0x30]
cmp byte [esi + 0x9c], 0
jne 0x1000928f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
add eax, 0x68
push eax
push dword [esi + 0x98]
push edi
mov ebx, 1
add dword [ebp - 0x88], 0
je 0x1000929f
mov dword [esi + 0x1c], ebx
mov dword [esi], edi
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
nop
nop
nop
nop
nop
mov dword [ebp - 0x98], ebx
cmp dword [ebp - 0x80], 1
je 0x100092fb
mov dword [0x1000e426], eax
lea eax, [ebp - 4]
push eax
push ebx
push 7
push dword [0x1000ea18]
call 0x10008095
push ebx
mov dword [0x1000e85e], eax
lea eax, [ebp - 4]
push eax
push ebx
push 8
push dword [0x1000e74d]
call fcn.100054b6
push dword [0x1000e63e]
mov dword [0x1000eb5d], eax
push dword [0x1000e2e4]
mov eax, 0xc
and dword [ebp - 0x64], 0x1c
mov dword [ebp - 0x74], eax
add eax, ecx
add word [ebp - 0x8c], 0x70c
mov ecx, dword [ebp - 0x70]
or edx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x68]
and dword [ebp - 0x9c], ecx
sub ecx, 0x20
sub edi, esi
cmp dword [ebp - 0x88], 0
je 0x10009369
mov eax, dword [ecx + 0x2c]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x80], 1
je 0x1000939a
xor eax, eax
pop edi
mov eax, dword [ebp - 0xa4]
and dword [ebp - 0xb4], ecx
mov edx, dword [ebp - 0x68]
cmp dword [ebp - 0x80], 1
je 0x1000941d
push esi
call 0x10007ff2
push dword [esi + 0xc0]
call dword [0x1000e040]
push dword [ebp + 0x18]
push esi
call 0x1000a09e
test byte [esi + 0x148], 4
jne 0x10009518
cmp eax, 0x20a
je 0x1000aab2
test byte [esi + 0x148], 8
je 0x10009239
nop
nop
sub eax, 0x28
cmp dword [ebp - 0x88], 0xffffffb3
jne 0x10009464
call 0x1000b99a
test eax, eax
je 0x10009429
movzx ecx, word [eax + 0xa]
movzx edx, word [ebx + 0x2e]
inc ecx
inc ecx
cmp ecx, edx
jbe 0x1000943a
mov dword [ebp - 4], 0xc0000023
mov cx, word [eax + 0xa]
mov edi, dword [ebp + 8]
add cx, 2
mov word [ebx + 0x2e], cx
movzx ecx, word [eax + 0xa]
mov esi, dword [eax + 0x10]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov dword [eax + 0xa0], edx
add ecx, dword [ebp - 0xb0]
and eax, dword [ebp - 0x64]
push dword [ebp - 0x70]
call fcn.1000453a
sub esi, edx
mov esi, dword [ebp - 0xa0]
lea ecx, [ebp - 0x70]
add ebx, 0x6ae0
sub eax, dword [ebp - 0xb4]
push ecx
or ebx, dword [ebp - 0x64]
push esi
test dword [ebp - 0x88], 0
je 0x100094d8
jl 0x1000944e
mov ecx, dword [ebp - 0xa10]
cmp ecx, 4
jbe 0x100094ae
mov eax, dword [ebp - 0x204]
shl eax, 2
lea edx, [ecx - 4]
cmp eax, edx
jb 0x1000951b
mov eax, dword [0x1000ebf1]
push ecx
add eax, 0x200000
push eax
push dword [0x1000e922]
call ebx
test eax, eax
je 0x100094d4
call fcn.100046c9
mov dword [ebp - 0x8c], 0xda5
sub dword [ebp - 0xa0], 0x40
and dword [ebp - 0xa8], eax
cmp dword [ebp - 0x80], 0x10000002
jne 0x10009525
push esi
call dword [0x1000e064]
push esi
push dword [0x1000e4c9]
call fcn.10004c33
push str.L__u
call ebx
pop edi
pop esi
pop ebx
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
mov edx, dword [ebp - 0xa4]
or dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0x68]
add dword [ebp - 0x8c], edx
sub edx, 0x14
cmp dword [ebp - 0x80], 0x10000002
jne 0x10009592
add eax, dword [edx + 0xb4]
mov dword [ebp - 0x68], eax
sub ecx, dword [ebp - 0x8c]
mov word [ebp - 0xb0], 0xfe5
lea edi, [ebp - 0x68]
or dword [ebp - 0xbc], esi
push edi
xor ebx, dword [ebp - 0xc0]
or edx, dword [ebp - 0xc8]
push dword [ebp - 0x74]
and edi, dword [ebp - 0xb0]
call fcn.10004766
or edi, ecx
mov ecx, dword [ebp - 0x68]
mov edi, edx
mov edx, dword [ebp - 0x6c]
and esi, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov dword [ebp - 0x6c], edx
add ecx, 0xab10
or esi, dword [ebp - 0x90]
sub ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x6c]
add dword [ebp - 0x88], 0
je 0x1000963d
movzx eax, word [ebp - 0x13c]
push eax
push dword [ebp + 0x14]
call dword [0x1000e0a0]
mov dword [ebp - 0x120], 1
mov word [ebp - 0x128], cx
cmp ebx, 0x1000e90a
je 0x10009d70
xor ebx, ebx
mov word [ebp - 0x126], bx
jmp 0x10007f83
or dword [ebp - 0x6c], edx
jne 0x10009742
test dword [ebp - 0x88], 0
je 0x100096ae
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push 9
pop ecx
cmp eax, ecx
ja 0x100096c0
mov dword [ebp + 8], 4
mov dword [ebp + 8], 5
and dword [ebp + 8], 0
mov dword [ebp + 8], 3
mov dword [ebp + 8], 1
mov dword [ebp + 8], 2
mov dword [ebp + 8], 7
mov dword [ebp + 8], 8
mov dword [ebp + 8], ecx
mov dword [ebp + 8], 0xa
push 0x44
lea eax, [ebp + 8]
push eax
call fcn.1000bcd2
jmp 0x10009670
and esi, dword [ebp - 0xb0]
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0xb0], edx
mov edx, dword [ebp - 0x6c]
sub esi, dword [ebp - 0x9c]
sub ebx, 0x24
cmp dword [ebp - 0x80], 1
je 0x10009736
mov eax, dword [ebp - 0x16c]
mov dword [edx + 0xc4], eax
cmp byte [0x75b6d508], 0
je 0x1000ae66
mov eax, dword [ebp - 0x164]
push dword [eax + 0xc4]
push dword [eax + 0x1b4]
push 0x1000e9c3
push eax
call 0x1000a7e2
test eax, eax
jl 0x100042e2
mov dword [ebp - 0x198], 0x40d
mov edx, dword [ebx + 0x28]
mov dword [ebp - 0x6c], edx
add esi, dword [ebp - 0x8c]
xor eax, dword [ebp - 0x9c]
mov edx, dword [ebp - 0xa4]
and dword [ebp - 0x64], edi
mov ecx, dword [ebp - 0x94]
or edi, esi
cmp dword [ebp - 0x80], 0xffffffb0
jne 0x100097a3
ja 0x100090dd
cmp bx, 0x74
jne 0x10009793
mov ebx, ecx
cmp bx, cx
mov esi, dword [ebp + 8]
jne 0x10009765
push dword [esi + 0x44]
call fcn.1000bba7
test eax, eax
je 0x1000972c
cmp bx, 0x28
jne 0x10008f07
push dword [esi + 0x44]
call 0x1000bed5
test eax, eax
jne 0x100092c3
push 1
push esi
call fcn.1000c3dd
sub edx, 0x38
xor dword [ebp - 0xbc], 0x6d2
lea ecx, [edx + 0xb0]
mov dword [ebp - 0x94], ecx
sub edi, dword [ebp - 0xc4]
mov word [ebp - 0x90], 0xd5
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x90], edi
add dword [eax], 1
lea ebx, [ecx + 0x15]
and ecx, edi
push dword [ebp - 0x94]
call fcn.1000453a
or dword [ebp - 0x78], eax
test dword [ebp - 0x88], 0
je 0x10009820
push eax
call fcn.1000be57
lea eax, [ebp - 0x10]
push eax
push esi
call fcn.100050f5
test eax, eax
jne 0x10009844
mov eax, dword [ebp - 0x1c]
cmp eax, edi
je 0x100097ea
mov eax, dword [eax + 0x18]
cmp eax, edi
je 0x1000983b
cmp eax, 0xffffffff
je 0x100097f9
mov dword [ebp - 0x7c], esp
xor dword [ebp - 0xc4], edi
mov esp, dword [ebp - 0xa0]
cmp dword [ebp - 0x80], 1
je 0x10009851
mov edi, dword [ebp + 8]
mov esi, dword [edi + 0x74]
mov eax, dword [esi]
test eax, eax
je 0x10009802
push ecx
push eax
call 0x10007e42
test eax, eax
jl 0x1000989c
push 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x80], 1
je 0x10009877
test ecx, ecx
je 0x100098cf
mov byte [ecx + 0x4b], al
add esi, 0x1000eb1f
lea edi, [ebx + 0x1c8]
push 0x10
pop ecx
push 1
mov esi, dword [ebp - 0x20]
xor eax, eax
call eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x94], edx
add ecx, edi
cmp dword [ebp - 0x80], 0x10000002
jne 0x100098bd
add dword [eax + 8], edx
mov edx, dword [ebp + 0xc]
push esi
mov esi, edx
and esi, 1
add dword [eax + 0xc], esi
mov esi, edx
shr esi, 1
and esi, 1
add dword [eax + 0x10], esi
mov eax, dword [ebp + 0x14]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
xor eax, eax
pop esi
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
mov dword [ebp - 0xa0], esp
test dword [ebp - 0x88], 0
je 0x1000991a
mov eax, dword [ebp + 8]
mov dword [ebx + 0x2c], eax
cmp dword [ebp + 3], 0xc01000e9
je 0x100098a3
push 0
push 0
lea eax, [ebx + 0xc]
push eax
push dword [ebx + 8]
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x20]
push dword [eax + 0x74]
call 0x10009c31
mov eax, dword [ebp - 0xc]
mov dword [esi + 0x20], eax
mov eax, dword [ebx + 0x2c]
cmp eax, dword [ebx + 0x20]
ja 0x10009d14
mov esp, dword [ebp - 0x7c]
add dword [ebp - 0x64], 0xb34
cmp dword [ebp - 0x80], 0xfffffff4
jne 0x10009952
xor edi, edi
push edi
push edi
lea eax, [ebp + 8]
push eax
push 0xffffffffffffffff
push dword [esi + 0x30]
push 0xffffffffffffffff
call dword [0x1000e0c4]
cmp eax, edi
mov dword [ebp - 4], eax
jne 0x100098d5
mov edi, dword [ebp - 0x70]
add ecx, esi
xor eax, dword [ebp - 0xbc]
mov dword [ebp - 0xa0], edi
cmp dword [ebp - 0x80], 1
je 0x1000999e
mov eax, dword [ebx + 8]
add eax, dword [ebp - 4]
push dword [ebp + 0x10]
mov dword [esi + 0xc], eax
push dword [ebp + 0x14]
mov esp, dword [ebp - 0x7c]
xor edi, dword [ebp - 0xb4]
or eax, dword [ebp - 0xb4]
lea esi, [edx + edi + 0x100f]
sub dword [ebp - 0xa0], 4
or edi, dword [ebp - 0x64]
cmp dword [ebp - 0x80], 1
je 0x10009c97
lea eax, [ebp - 0x86c]
push eax
call esi
mov eax, dword [ebp - 0x858]
and eax, 0xffdfffff
cmp dword [ebx + 0x30], 4
mov dword [ebp - 0x82c], eax
jne 0x10009bfc
mov eax, dword [ebp - 0x854]
mov dword [ebp - 0x878], eax
or dword [ebp - 0x878], 0xffffffff
mov eax, dword [ebp - 0x870]
mov ecx, dword [ebp - 0x860]
or byte [eax + 0x10], 0x80
mov esi, dword [0x1000e6da]
mov dword [eax + 0x2c], ecx
mov ecx, dword [ebp - 0x85c]
mov dword [eax + 0x30], ecx
mov eax, dword [ebp - 0x858]
mov cx, word [eax]
neg cx
sbb ecx, ecx
and ecx, eax
push ecx
mov eax, dword [ebp - 0xa0]
and edi, dword [ebp - 0xb0]
sub esi, dword [ebp - 0xb0]
mov ebx, 0xd3
cmp dword [ebp - 0x80], 0x10000002
jne 0x10009cd2
add byte [eax + eax + 0x65], dh
add byte [edx], dh
insd dword es:[edi], dx
add byte [ecx], ch
outsb dx, byte [esi]
add byte [ecx], ah
je 0x10009c5d
add byte gs:[eax], ah
add byte [eax + eax + 0x68], dh
add byte [ebp], ah
mov dword [eax], ebx
or dword [ebp - 0xc0], 0x1c
and dword [ebp - 0xb4], 0xffffff91
push dword [ebp - 0x74]
call fcn.1000453a
mov esi, edi
and dword [ebp - 0xa8], edx
cmp dword [ebp - 0x88], 0xffffffe0
jne 0x10009d2b
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
mov ecx, dword [ebp + 0xc]
and ecx, 0x1000e695
push ebx
mov edi, dword [ebp - 0x70]
sub eax, edx
xor edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x68]
mov esi, edx
sub edi, 0x20
and esi, dword [ebp - 0x8c]
mov eax, dword [edi + 0x2c]
mov dword [ebp - 0x68], eax
add esi, 0x4352
xor word [ebp - 0xb4], 0xda0
mov ecx, dword [ebp - 0xa4]
cmp dword [ebp - 0x80], 1
je 0x10009da3
push edi
add byte [edi], ch
jb 0x10009d9d
add byte fs:[eax + eax + 0x65], al
add byte [eax + eax + 0x69], ch
add byte [ebp], ch
imul eax, dword [eax], 0x650074
jb 0x10009d18
jae 0x10009d17
add byte [eax], al
nop
nop
inc ebp
add byte [eax], bh
je 0x10009d17
add byte gs:[esi], ch
add byte fs:[ebp], ah
add byte fs:[ebp], al
add byte fs:[ecx], ch
je 0x10009d39
dec ebx
add byte [ebp], ah
jns 0x10009d9e
mov ebx, dword [ebp - 0x68]
add esi, dword [ebp - 0x90]
sub ecx, 0x24
or word [ebp - 0x8c], 0x470
add ebx, dword [ecx + 0xd0]
mov dword [ebp - 0x68], ebx
sub esi, dword [ebp - 0xb0]
add eax, dword [ebp - 0xb8]
mov esi, dword [ebp - 0x68]
add eax, 0xfda2
mov eax, dword [ebp - 0x6c]
add ebx, dword [ebp - 0x78]
and edi, dword [ebp - 0xb8]
mov eax, dword [esi]
mov dword [ebp - 0x6c], eax
sub ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x7c], esp
sub edi, ecx
xor ebx, dword [ebp - 0xb8]
mov esp, dword [ebp - 0xa0]
sub edi, esi
cmp dword [ebp - 0x88], 0x10000002
jne 0x10009e6d
mov al, byte [ebp + 8]
shr al, 4
and eax, 0xf
push dword [edi + eax*4 + 0x1c8]
push dword [edi + 0xc8]
call dword [0x1000e148]
mov ax, word [ebp + 8]
mov word [edi + 0x13c], ax
mov eax, dword [ebp - 0x24]
and dword [ebp - 0x44], 0
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], 0xfffffff
movsx esi, ax
mov eax, 0x1000e755
mov eax, 0x1000eab8
lea edi, [ecx + ecx*2]
mov edi, dword [eax + edi*8 + 0x10]
and dword [esi + 4], 0xfffffffb
mov word [ebp + 0x14], ax
jmp 0x1000870e
mov eax, dword [ebp - 0x6c]
add esi, eax
add dword [ebp - 0xb0], edi
call eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x94], edx
xor edi, ecx
sub ebx, edi
mov dword [ebp - 0xa0], esp
add ecx, dword [ebp - 0xb4]
or dword [ebp - 0xb0], esi
mov esp, dword [ebp - 0x7c]
or edi, esi
sub edx, dword [ebp - 0xa8]
mov edi, dword [ebp - 0x70]
add ecx, dword [ebp - 0x90]
cmp dword [ebp - 0x80], 0x10000002
jne 0x10009f0c
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0xc8], edx
sub edi, 0x28
mov dword [ebp - 0x8c], ecx
lea edx, [edi + 0x24]
mov dword [ebp - 0x94], edx
add dword [ebp - 0xc4], ecx
mov esi, edx
push dword [ebp - 0x94]
call fcn.1000453a
mov edi, ebx
push dword [ebp - 0x94]
call fcn.1000453a
mov esi, edx
add ebx, dword [ebp - 0xb8]
push dword [ebp - 0x94]
call fcn.1000453a
cmp dword [ebp - 0x80], 1
je 0x10009f93
mov dword [ebp - 0xa8], ecx
sub dword [ebp - 0xa0], 4
add ecx, 0xcf19
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0xa0]
sub edi, dword [ebp - 0x8c]
or edx, dword [ebp - 0x90]
mov ebx, 0
test dword [ebp - 0x88], 0
je 0x1000a011
push eax
lea eax, [ebp - 0x130]
push eax
push ebx
lea eax, [ebp - 0x124]
push eax
push ebx
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x130], 1
mov dword [ebp - 0x12c], ebx
mov dword [esi], ebx
and eax, dword [ebp - 0xb0]
or dword [ebp - 0x78], eax
jmp 0x1000a046
mov edx, 0xffffffff
mov dword [ebp - 0x7c], esp
cmp dword [ebp - 0x88], 0x10000002
jne 0x1000a075
push dword [ebp - 0x24]
call fcn.1000c801
nop
nop
invalid
add byte [eax], al
add byte [eax], al
jbe 0x10009ffb
mov ch, 0x75
nop
nop
nop
nop
nop
mov esp, dword [ebp - 0xa0]
sub edi, dword [ebp - 0x9c]
mov edi, dword [ebp - 0x68]
xor dword [ebp - 0xbc], esi
call edi
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000a0bc
jne 0x1000a064
adc eax, 0x411a75b5
mov bl, 0x75
pushal
push 0xffffffffffffffb4
jne 0x1000a0a8
or esi, dword [ebp - 0x4af4888b]
jne 0x1000a066
or al, 0xb5
jne 0x1000a06c
or al, 0xb5
jne 0x1000a0a5
mov dword [ebp - 0xa0], esp
add dword [ebp - 0x88], 0
je 0x1000a116
mov esp, dword [ebp - 0x7c]
and dword [ebp - 0xb4], ebx
or edi, eax
xor dword [ebp - 0xa8], 0x9b6
mov ebx, dword [ebp - 0x94]
cmp dword [ebp - 0x88], 0x10000002
jne 0x1000a163
or dword [ebp - 0x94], ebx
jne 0x1000a1a3
cmp dword [ebp - 0x88], 0x20
jne 0x1000a195
jmp 0x1000925b
or word [ebp - 0xb4], 0xfc2
lea ecx, [ebp - 0xa4]
push ecx
call fcn.100045ea
or ecx, dword [ebp - 0x78]
mov ebx, esi
lea ecx, [ebp - 0x74]
push ecx
call fcn.100045ea
lea ecx, [eax + esi*8 + 0x12]
add eax, edi
and dword [ebp - 0xb8], 0x129
lea esi, [ebp - 0x6c]
push esi
call fcn.100045ea
xor ecx, dword [ebp - 0xc8]
lea ebx, [edx]
cmp dword [ebp - 0x88], 0x10000002
jne 0x1000a21b
call dword [0x1000e1d0]
mov ebx, eax
test ebx, ebx
je 0x1000a23d
lea edi, [esi + 1]
push edi
push ebx
push dword [ebp - 0x84c]
call fcn.100058bb
mov word [ebx + esi*2], 0x3a
mov word [ebx + edi*2], 0x20
lea esi, [ebp - 0x94]
push esi
call fcn.100045ea
or dword [ebp - 0xc4], ecx
cmp dword [ebp - 0x88], 0
je 0x1000a279
mov word [ebp - 0xa], ax
mov word [ebp - 0x46], ax
mov word [ebp - 0x42], ax
lea eax, [ebp - 0x48]
push eax
mov word [ebp - 0xc], cx
mov word [ebp - 0x48], cx
mov ecx, dword [ebp - 0xc]
push edi
push ecx
lea esi, [edx + ecx - 1]
push edx
mov dword [ebp - 0x28], ebx
mov word [ebp - 0x44], si
call fcn.1000c5ff
mov ax, word [ebp - 0x48]
mov esi, dword [ebp - 0x44]
sub esi, dword [ebp - 0x48]
mov word [ebp - 0xc], ax
lea eax, [ebp - 0x98]
push eax
call fcn.100045ea
mov byte [ebp - 0xc0], 0x8d
mov edi, dword [ebp - 0x70]
xor dword [ebp - 0xb0], eax
mov dword [ebp - 0xa0], edi
cmp dword [ebp - 0x80], 0x33
jne 0x1000a2e7
push dword [ebp + 0xc]
call fcn.10009f63
add esp, 0xc
mov eax, dword [ebp + 8]
push 0x14
xor edx, edx
pop ecx
div ecx
cmp dword [ebp + 0x18], 0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
jne 0x100061e9
mov eax, dword [ebp + 8]
add dword [ebx + 0x30], eax
mov ecx, dword [ebx + 0x34]
sub ecx, eax
cmp ecx, edi
ja 0x1000a2af
mov dword [ebp + 8], ecx
cmp byte [ebp + 0x24], 0
jne 0x1000ba18
mov eax, dword [ebp + 8]
mov dword [ebp + 0x1c], edx
add dword [ebp - 0xbc], 0x50
lea ecx, [ebp - 0x70]
push ecx
call fcn.100045ea
add edi, eax
and ebx, dword [ebp - 0xc8]
or esi, dword [ebp - 0x9c]
xor dword [ebp - 0xc4], esi
mov eax, dword [ebp - 0xa0]
mov word [ebp - 0x9c], 0xd48
push dword [eax]
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000a376
add dword [ebp - 0xa0], 0xc
or edx, ecx
or ebx, edx
ret
nop
mov edi, edi
push ebx
mov esi, edi
cmp dword [ebp - 0x88], 0x10000002
jne 0x1000a461
call fcn.100046c9
mov dword [ebp - 0xb4], edi
cmp dword [ebp - 0x88], 0xffffffec
jne 0x1000a49d
mov eax, 0x1000e381
movzx ecx, word [ebp - 0x34]
push ebx
lea eax, [ebp - 0x3c]
push eax
movzx eax, byte [ebp - 0x38]
imul eax, ecx
push eax
lea eax, [esi + 8]
push eax
push dword [0x1000e462]
call dword [0x1000e170]
test eax, eax
add dword [ebp - 0xa0], 0xfffffffc
mov esi, edi
push dword [ebp - 0x68]
call fcn.1000453a
xor edi, esi
xor edi, dword [ebp - 0x8c]
or word [ebp - 0x8c], 0x5c
mov esi, dword [ebp - 0x70]
cmp dword [ebp - 0x80], 1
je 0x1000a4fb
push eax
push 0
push dword [ebp - 0x10]
call dword [0x1000e180]
test eax, eax
jne 0x1000a4d7
lea eax, [ebp - 0xc8]
mov eax, dword [ebp - 8]
add eax, 0x18
je 0x1000a4d9
push eax
call 0x10007cf8
mov esi, edi
mov eax, dword [eax + 4]
dec eax
dec eax
je 0x1000a51b
dec eax
je 0x1000a483
mov edi, dword [ebp - 0x68]
cmp dword [ebp - 0x80], 1
je 0x1000a52c
nop
nop
push 1
push 1
push 0
push 0
call dword [0x1000e0d8]
test eax, eax
mov dword [0x1000e68d], eax
je 0x10008c7f
mov eax, dword [0x1000e6f0]
push edi
push 0x1000e67c
sub esi, 0x20
add ebx, edx
lea edi, [esi + 0x1c]
mov dword [ebp - 0x68], edi
cmp dword [ebp - 0x88], 0x10000002
jne 0x1000a58b
call 0x1000a475
push esi
mov edi, eax
call 0x1000988d
test edi, edi
je 0x1000a5cc
mov dword [ebp - 0x4c], 0xfffffffe
mov eax, dword [ebp - 0x5c]
xor ecx, ecx
cmp eax, ecx
jge 0x1000b069
cmp dword [0x1000e781], ecx
mov dl, byte [0x75b6d508]
jle 0x1000a5e7
mov eax, dword [0x1000eb3b]
add eax, 0x14
test dl, dl
je 0x1000a5cd
cmp dword [ebp + 8], 0
je 0x1000a550
mov bl, byte [ebp + 8]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xc4], ebx
mov edi, 0x3800
mov edi, eax
mov edi, ecx
mov edi, eax
add dword [ebp - 0x88], 0
je 0x1000a5de
push eax
push 2
push ebx
call fcn.100054b6
test eax, eax
jl 0x1000a074
push eax
sub edi, 0x4a
mov edx, dword [ebp - 0x98]
add dword [ebp - 0xc4], edi
mov dword [edi + 0x4a], edx
cmp dword [ebp - 0x88], 0x5c
jne 0x1000a61b
mov eax, dword [ebx]
test byte [eax + 0x40], 8
je 0x1000a643
push dword [ebx + 0x24]
push ebx
call 0x1000a9ad
xor eax, eax
mov eax, 0x1000e833
pop edi
pop esi
pop ebx
nop
nop
nop
nop
nop
mov edi, edi
mov esi, dword [ebp - 0x68]
lea edx, [ebp - 0x68]
add eax, 0x88f
push edx
add eax, dword [ebp - 0xc8]
push esi
and dword [ebp - 0x8c], ecx
call fcn.100046c9
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000a668
xor ebx, ebx
push ebx
push edx
call esi
push ebx
push 1
call esi
mov edi, dword [0x1000e957]
cmp edx, dword [ebp - 4]
je 0x1000a6af
push edx
call fcn.10009269
test eax, eax
jne 0x1000a6c1
push ebx
push 1
call esi
mov ebx, dword [ebp - 0x68]
lea eax, [ebp - 0x68]
add ecx, 0x51f1
push eax
mov word [ebp - 0xc8], 0x9ea
push ebx
add dword [ebp - 0xc8], eax
call fcn.100046c9
add eax, edi
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x68]
or word [ebp - 0xc0], 0x6a3
push edx
or dword [ebp - 0x64], 0xffffffae
push eax
cmp dword [ebp - 0x80], 1
je 0x1000a6f1
push 0x1000e75f
add eax, 0xec
push eax
mov byte [ebx + 0x8e], 0
call dword [0x1000e1d8]
test al, al
je 0x10004cce
mov eax, 0x1000e9d3
mov eax, dword [ebp - 0x124]
mov dword [eax], 1
xor eax, eax
xor ecx, ecx
test eax, eax
ja 0x1000a20a
nop
nop
nop
nop
nop
call fcn.100046c9
and ecx, dword [ebp - 0xbc]
lea ecx, [edx + 0x6e]
mov esi, dword [ebp - 0x68]
lea edx, [ebp - 0x68]
cmp dword [ebp - 0x80], 1
je 0x1000a737
push 0xffffffffffffffff
lea eax, [ebp - 0x458]
push eax
call fcn.10005020
mov ecx, dword [ebx + 0x58]
mov eax, dword [ebp - 0x458]
lea ecx, [ecx + eax - 1]
mov dword [ebp - 0x450], ecx
mov ecx, dword [ebx + 0x54]
cmp dword [ebp - 0x450], ecx
jle 0x1000a6cf
push edx
sub edi, dword [ebp - 0xc8]
cmp dword [ebp - 0x80], 1
je 0x1000a773
push esi
or ebx, dword [ebp - 0x90]
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000a7bb
mov eax, ecx
shr ecx, 2
lea esi, [edi + 2]
mov ecx, eax
and ecx, 3
mov eax, dword [ebx + 0x38]
mov ecx, dword [ebx + 0x2c]
mov word [eax + ecx], 0x20
and dword [ebp - 8], 0
cmp dword [0x1000e8fa], 0
je 0x1000af93
cmp word [ebp - 0x10], 0x7f
jne 0x1000c939
mov eax, dword [ebx + 0x34]
call fcn.100046c9
lea edi, [eax - 0x49]
mov eax, dword [ebp - 0x68]
lea ebx, [ebp - 0x68]
mov word [ebp - 0xbc], 0xccc
push ebx
or edi, ecx
and edx, dword [ebp - 0x90]
push eax
cmp dword [ebp - 0x80], 1
je 0x1000a812
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x1000a7e9
push edi
push dword [ebp - 0x20]
call 0x10006cab
cmp dword [esi + 0x34], 0
jne 0x10006737
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [eax + 0xc]
add eax, 0x10
push eax
push dword [esi + 0x38]
push dword [esi + 0x30]
call 0x10007060
call fcn.100046c9
or ecx, edx
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000a866
test byte [esi + 4], 4
je 0x1000a8a1
test byte [edi + 0x16c], 1
jne 0x1000a7c0
movsx eax, word [esi + 0x26]
movsx ecx, word [esi + 0x24]
push dword [edi + 0x1a8]
imul eax, ecx
push eax
push dword [esi + 0x5c]
call 0x10005da1
mov ebx, dword [ebx + 0x18]
test ebx, ebx
jne 0x1000a7e7
mov eax, dword [edi + 0xb0]
and dword [eax + 0x84], 0xfffffffe
pop ebx
push dword [edi + 0xb0]
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x68]
or ebx, edi
xor dword [ebp - 0x64], edi
push edx
cmp dword [ebp - 0x88], 0xb
jne 0x1000a8a5
pop edi
pop esi
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push esi
push edi
mov edi, dword [ebp + 8]
push 1
lea esi, [edi + 0x148]
or dword [esi], 0xc
push edi
call fcn.1000c46b
push dword [ebp + 0xc]
or dword [esi], 2
push edi
push eax
add edi, dword [ebp - 0xb8]
call fcn.100046c9
sub ebx, esi
xor dword [ebp - 0xc0], eax
mov ecx, dword [ebp - 0x68]
lea edi, [ebp - 0x68]
or ebx, dword [ebp - 0x78]
add eax, dword [ebp - 0xc4]
push edi
xor dword [ebp - 0xb8], 0xffffffb9
push ecx
or eax, dword [ebp - 0xb0]
mov edi, esi
call fcn.100046c9
xor dword [ebp - 0x64], 0x436
mov ebx, dword [ebp - 0x68]
lea edi, [ebp - 0x68]
xor edx, dword [ebp - 0xc8]
and dword [ebp - 0xc8], edi
push edi
xor esi, dword [ebp - 0x90]
add dword [ebp - 0x88], 0
je 0x1000a93d
push dword [0x1000e3f1]
call 0x1000687d
mov ecx, dword [esi + 0x288]
add eax, 4
push eax
push ecx
push edi
push dword [0x1000e615]
call dword [0x1000e02c]
mov eax, dword [0x1000e457]
push 4
add eax, 0x3c0000
push eax
push dword [0x1000e7d0]
push ebx
add eax, ecx
call fcn.100046c9
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000a9a2
push edx
call fcn.1000bcd2
movsx ecx, word [ebp + 0xc]
movsx esi, word [ebp + 0xe]
mov eax, dword [0x1000e709]
imul esi, ecx
mov edi, dword [0x1000e73d]
lea ecx, [esi + esi + 2]
push ecx
add eax, 0x340000
push eax
push dword [0x1000e2c2]
call edi
test eax, eax
mov ebx, dword [ebp + 0x10]
mov dword [ebx + 4], eax
je 0x1000b315
call fcn.1000ba46
cmp dword [ebp - 0x80], 1
je 0x1000aa12
call 0x10006d65
mov dword [ebp - 0xe4], eax
and dword [ebp - 0xe4], 0
mov eax, dword [esi + 0xb0]
mov edx, dword [eax + 0x74]
push edi
push 0x37
xor eax, eax
pop ecx
lea edi, [ebp - 0xe0]
mov eax, dword [0x1000eb87]
shl edx, 4
xor ecx, ecx
add eax, edx
cmp dword [ebp - 0xe4], ecx
mov word [ebp - 0x9c], 0xdc
mov word [ebp - 0x9a], cx
mov dword [ebp - 0x98], 0x3c0000
mov dword [ebp - 0x38], ebx
movsx edx, word [eax + 8]
mov dword [ebp - 0x34], edx
movsx edx, word [eax + 0xa]
mov dword [ebp - 0x30], edx
pop edi
mov edi, dword [ebp - 0x68]
or word [ebp - 0x64], 0x4ae
mov esi, 0xa00
mov esi, edi
mov esi, eax
mov esi, edi
and edx, dword [ebp - 0xbc]
sub esi, 0x3b
mov eax, dword [ebp - 0x94]
or ebx, ecx
mov dword [esi + 0x3b], eax
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000aa93
mov byte [ebp - 5], 0
call 0x1000992a
cmp eax, 0xffffffff
je 0x1000a9d4
mov eax, dword [edi + 0xb0]
cmp eax, esi
mov dword [ebp - 0x98], 2
mov dword [ebp - 0x8c], eax
je 0x1000aa51
lea ecx, [ebp - 0x98]
push ecx
add eax, 0x10
push eax
push 3
push 0x1000e683
call fcn.10005b2d
test eax, eax
jl 0x1000aa75
mov eax, dword [ebp - 0x8c]
inc dword [eax + 0xc]
mov byte [ebp - 5], 1
call fcn.1000bb78
cmp dword [ebp - 0x80], 1
je 0x1000aabe
mov eax, dword [ebp - 0x860]
mov cx, word [eax]
mov esi, dword [0x1000e3d5]
neg cx
sbb ecx, ecx
and ecx, eax
push ecx
lea eax, [ebp - 0x844]
push eax
call esi
mov ebx, dword [ebp - 0x68]
lea ecx, [ebx + 0x391]
cmp dword [ebp - 0x88], 0
je 0x1000ab19
mov dword [ebx + 0xf8], eax
xor edi, edi
mov eax, dword [0x1000eb8b]
mov dword [ebx + 0xf8], eax
mov dword [ebx + 0x9c], 1
push edi
call dword [section..rdata]
push eax
call 0x1000859d
mov eax, 0x1000e65e
push eax
call fcn.10009f63
mov eax, 0x1000e274
and dword [esi], 0
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov eax, dword [eax]
mov esi, 0x1c00
mov esi, ebx
mov esi, ecx
mov esi, ebx
xor dword [ebp - 0xc8], 0xae1
sub esi, 0xd
mov ecx, dword [ebp - 0x68]
lea edx, [edx - 0x65]
mov dword [esi + 0xd], ecx
xor dword [ebp - 0x9c], eax
call fcn.1000bcbb
add dword [ebp - 0x88], 0
je 0x1000ab5f
mov eax, ecx
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
mov ecx, dword [ebp - 0x68]
or dword [ebp - 0x8c], ecx
mov edx, 0x3200
mov edx, ecx
mov edx, ebx
mov edx, ecx
and dword [ebp - 0x78], ebx
sub edx, 0x24
mov edi, dword [ebp - 0xa4]
mov eax, edx
cmp dword [ebp - 0x80], 0xffffffef
jne 0x1000abb3
mov eax, dword [esi]
push dword [eax + 0x28c]
push esi
call 0x100083b3
mov cx, word [esi + 0x28]
mov ax, word [ebx + 0x10]
add cx, ax
add word [ebp - 8], cx
mov cx, word [esi + 0x28]
add cx, ax
add word [ebp - 4], cx
mov cx, word [esi + 0x2a]
mov dword [edx + 0x24], edi
sub edi, dword [ebp - 0x8c]
call fcn.1000bdce
and ecx, dword [ebp - 0xc8]
cmp dword [ebp - 0x88], 0x10000002
jne 0x1000abfd
mov ebp, esp
push esi
xor esi, esi
cmp dword [ebp + 0x10], esi
push edi
mov edi, dword [ebp + 8]
mov dword [ebp + 8], esi
jbe 0x1000ac3e
push ebx
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebp + 0xc]
mov ax, word [eax + esi*2]
cmp ax, 9
jne 0x1000ac22
mov ecx, edi
push 8
and ecx, 7
pop eax
mov ebx, dword [ebp - 0x68]
add dword [ebp - 0x88], 0
je 0x1000ac2d
xor eax, eax
cmp byte [esi + 0x36], al
sete al
imul eax, edx
mov edi, 0x5800
mov edi, ebx
mov edi, ecx
mov edi, ebx
cmp dword [ebp - 0x80], 1
je 0x1000ac69
call 0x10006a8b
push esi
push 0
push 0
push dword [edi + 0x6c]
call dword [0x1000e1a0]
push dword [esi + 0xc8]
call dword [0x1000e090]
movsx ecx, word [ebp - 0x38]
mov dword [ebp + 8], eax
movsx eax, bx
push eax
push ecx
sub edi, 4
mov ecx, dword [ebp - 0x70]
lea eax, [ebx + edx*8 + 0x4c]
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000aca5
je 0x1000acee
mov dword [ebp - 4], ebx
mov ecx, dword [ebp - 0x1c]
xor eax, eax
and ecx, 0xc
mov dword [ebp - 8], ebx
mov dword [ebp - 0x38], ecx
je 0x1000ac8f
mov dword [ebp - 8], edi
mov dword [ebp - 4], ebx
mov eax, 0x1000e8a3
or eax, dword [ebp + 0x14]
push eax
push dword [esi + 0xc]
push dword [esi]
mov dword [edi + 4], ecx
cmp dword [ebp - 0x80], 0xffffffd7
jne 0x1000acb9
pop esi
pop ebx
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
call fcn.1000be34
cmp dword [ebp - 0x80], 1
je 0x1000acf0
push 7
mov eax, dword [ebp - 0x68]
xor ecx, dword [ebp - 0xc0]
sub ebx, dword [ebp - 0xc4]
mov esi, 0x4600
mov esi, eax
mov esi, ebx
mov esi, eax
add edx, 0xdcb5
sub esi, 0xe
mov ecx, dword [ebp - 0xa0]
sub edi, dword [ebp - 0x8c]
lea edi, [ecx + 0x17a4]
mov dword [esi + 0xe], ecx
cmp dword [ebp - 0x80], 0xb
jne 0x1000ad6a
mov eax, dword [ebx + 0x2c]
sub eax, dword [edx + 0x88]
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx + 0x10]
mov dword [ecx + 0x20], eax
mov eax, dword [ebx + 0x38]
mov ecx, dword [ebp - 8]
add eax, dword [edx + 0x88]
mov ecx, dword [ecx + 0x10]
mov dword [ecx + 0x24], eax
mov ecx, dword [edx + 0x88]
mov esi, dword [ebx + 0x38]
mov edi, dword [ebx + 0x24]
mov eax, ecx
shr ecx, 2
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x68]
xor ecx, dword [ebp - 0x9c]
mov edx, 0x3a00
mov edx, esi
mov edx, edi
mov edx, esi
cmp dword [ebp - 0x80], 1
je 0x1000ada5
push 0xffffffffffffffff
mov dword [ebp - 0x14], eax
push esi
sub edx, 0x5d
mov ebx, dword [ebp - 0x6c]
or esi, ecx
mov dword [edx + 0x5d], ebx
add ebx, 0x93ad
call 0x1000bf5d
and edi, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x88], 0
je 0x1000ae03
test eax, eax
je 0x1000ad9f
push eax
call dword [0x1000e0b4]
push dword [esi + 0x10]
push dword [0x1000e34b]
call 0x1000bb22
and dword [esi + 0x10], 0
pop esi
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
cmp dword [esi + 0x40], 3
je 0x1000ada1
push dword [esi + 0x44]
mov edx, 0x6200
mov edx, eax
mov edx, esi
mov edx, eax
xor ecx, eax
sub edx, 0x3c
mov esi, dword [ebp - 0x74]
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000ae5a
call dword [0x1000e0a8]
lea eax, [ebp - 0x418]
push eax
push 0x1000e9d7
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x420]
call 0x100065f9
test eax, eax
jge 0x1000978e
push dword [ebp - 0x420]
call dword [0x1000e164]
mov eax, ebx
pop edi
mov ecx, dword [ebp - 4]
mov dword [edx + 0x3c], esi
and ebx, dword [ebp - 0x9c]
mov ebx, dword [ebp - 0x68]
add edi, dword [ebp - 0x9c]
mov edx, 0x4000
mov edx, ebx
mov edx, edi
mov edx, ebx
xor esi, dword [ebp - 0x64]
cmp dword [ebp - 0x88], 0x10000002
jne 0x1000aecd
sub edx, 0x1a
mov edi, dword [ebp - 0x98]
mov dword [ebp - 0xc4], edi
mov dword [edx + 0x1a], edi
mov dword [ebp - 0x64], edx
mov ebx, dword [ebp - 0x68]
cmp dword [ebp - 0x80], 1
je 0x1000af05
mov eax, 0x400
mov eax, ebx
mov eax, edx
mov eax, ebx
and edi, dword [ebp - 0xb0]
sub eax, 0x54
mov esi, dword [ebp - 0x94]
xor dword [ebp - 0xc4], ebx
mov dword [eax + 0x54], esi
cmp dword [ebp - 0x88], 0
je 0x1000af4e
mov eax, dword [esi + 0x90]
mov ecx, dword [ebp + 0xc]
mov dword [ebp + 8], eax
movsx eax, word [ebp + 0xa]
imul eax, ecx
add eax, 0x63
push 0x64
xor edx, edx
pop edi
div edi
call fcn.1000bff8
cmp dword [ebp - 0x80], 0x2e
jne 0x1000af99
push eax
push dword [ebx + 0x24]
mov eax, dword [ebx + 8]
push dword [eax + 0x1a4]
call fcn.100060f4
push dword [ebp + 0xc]
mov dword [edi + 0x88], eax
mov edi, dword [ebx + 0x24]
mov ecx, eax
shr ecx, 2
mov ecx, eax
and ecx, 3
push dword [0x1000e889]
call 0x100085d6
mov eax, 0x1000e7f1
pop edi
pop esi
pop ebx
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x68]
add eax, dword [ebp - 0xb0]
xor ebx, ecx
mov ebx, 0x400
mov ebx, ecx
mov ebx, edx
mov ebx, ecx
mov dword [ebp - 0x9c], 0x44e
sub ebx, 0x4b
mov eax, dword [ebp - 0x68]
xor esi, dword [ebp - 0xbc]
mov dword [ebx + 0x4b], eax
add dword [ebp - 0x88], 0
je 0x1000b015
push dword [ebp - 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call 0x100064fd
test eax, eax
jge 0x1000baee
test byte [edi + 0x141], 2
je 0x1000afa2
movsx eax, word [0x75b6d3a8]
movsx ecx, word [ebp - 0x10]
shl eax, 1
cmp ecx, eax
jne 0x1000af94
mov ax, word [ebp - 0xe]
cmp ax, word [0x75b6d3aa]
jne 0x1000b08c
cmp word [ebp - 0x10], 0x10
jne 0x1000b07f
mov ecx, dword [ebp - 0x68]
mov word [ebp - 0xb0], 0x529
mov edx, 0x2c00
mov edx, ecx
mov edx, eax
mov edx, ecx
mov dword [ebp - 0x90], 0x8be
sub edx, 0x4b
mov esi, dword [ebp - 0xa4]
and ebx, ecx
xor edi, ecx
mov dword [edx + 0x4b], esi
xor dword [ebp - 0xc8], 0x7e
and edi, dword [ebp - 0x64]
call fcn.1000c075
cmp dword [ebp - 0x80], 1
je 0x1000b09a
jle 0x1000b0c6
mov dword [ebp - 8], ecx
mov ax, word [ebx + 4]
cmp word [ebp + 0x18], ax
mov word [ebx + 6], ax
jge 0x1000b0cf
mov eax, dword [ebp + 0x14]
movsx eax, word [eax + 0x24]
mov ecx, dword [ebx + 8]
lea edx, [ecx + eax*2]
mov eax, dword [ebp - 0x34]
add eax, ecx
cmp word [eax], 0x20
jne 0x1000b086
inc eax
inc eax
cmp eax, edx
jb 0x1000b086
mov ecx, dword [ebp - 0x68]
cmp dword [ebp - 0x80], 1
je 0x1000b0d0
push ebp
mov ebp, esp
mov eax, dword [ebp + 0x22]
sub eax, dword [ebp + 0x1c]
xor ecx, ecx
inc ecx
sub ecx, dword [ebp + 0x18]
push esi
mov esi, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 0x20]
sub edi, dword [ebp + 0x18]
mov dword [ebp + 0x18], ecx
xor ecx, ecx
inc ecx
sub ecx, dword [ebp + 0x1c]
mov dword [ebp + 0x20], eax
mov dword [ebp + 0x1c], ecx
mov ecx, dword [ebp + 0x10]
push ebx
mov esi, 0xc00
mov esi, ecx
mov esi, edi
mov esi, ecx
sub eax, dword [ebp - 0xb8]
add eax, 0x83e3
sub esi, 0xe
mov edx, dword [ebp - 0x74]
xor eax, dword [ebp - 0xb8]
add edi, 0x2549
mov dword [esi + 0xe], edx
xor dword [ebp - 0x8c], esi
and edi, dword [ebp - 0xa8]
mov edx, dword [ebp - 0x68]
mov ebx, edi
mov edi, 0x6000
mov edi, edx
mov edi, ebx
mov edi, edx
sub ecx, ebx
sub edi, 0x34
mov esi, dword [ebp - 0x98]
cmp dword [ebp - 0x88], 0
je 0x1000b158
push dword [ebp - 0x34]
movzx ecx, bx
mov eax, ecx
mov word [edx], 0xd
shr ecx, 2
mov word [edx + 2], 0xa
mov ecx, eax
and ecx, 3
push dword [0x1000e25d]
call 0x10004df2
mov eax, dword [ebp - 0x38]
mov word [eax], bx
mov dword [edi + 0x34], esi
add esi, 0xc301
xor ebx, esi
mov edi, dword [ebp - 0x68]
sub ebx, esi
mov edx, 0x6a00
mov edx, edi
mov edx, ecx
mov edx, edi
add ebx, esi
sub edx, 0x32
mov ecx, dword [ebp - 0x94]
or esi, dword [ebp - 0xa8]
cmp dword [ebp - 0x80], 0x1d
jne 0x1000b1d3
push eax
call dword [0x1000e088]
test eax, eax
je 0x10007e14
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov word [ecx + 0xc], ax
mov eax, dword [ebp - 0x10]
sub eax, dword [0x75b6d3b8]
sub eax, dword [ebp - 0x18]
mov word [ecx + 0xe], ax
test byte [edi + 4], bl
je 0x1000558d
mov eax, dword [edi + 0x90]
mov dword [ebp - 8], eax
movsx esi, word [ebp - 8]
movsx eax, word [0x75b6d464]
mov dword [edx + 0x32], ecx
and eax, dword [ebp - 0x9c]
mov esi, dword [ebp - 0x68]
xor eax, dword [ebp - 0xc4]
mov eax, 0x3c00
mov eax, esi
mov eax, edx
mov eax, esi
add dword [ebp - 0x88], 0
je 0x1000b21d
inc edi
inc edi
cmp ecx, dword [eax + 0x20]
jb 0x1000b1fa
mov eax, dword [ebx + 0x10]
mov edx, dword [eax + 0x20]
cmp edx, esi
mov ecx, dword [eax + 0x24]
jbe 0x1000b203
cmp word [ecx + esi], 0xa
je 0x1000b212
inc esi
inc esi
cmp esi, edx
jb 0x1000b1fb
mov ecx, dword [ebp - 4]
sub eax, 0x69
mov edx, dword [ebp - 0x68]
cmp dword [ebp - 0x80], 1
je 0x1000b26f
test eax, eax
je 0x10005650
push 4
lea eax, [ebp - 0xe8]
push eax
push 3
push dword [ebp - 0xdc]
mov dword [ebp - 0xe8], 2
call dword [0x1000e158]
mov esi, eax
cmp esi, edi
jne 0x1000b259
mov dword [eax + 0x69], edx
add dword [ebp - 0x8c], ecx
mov ebx, dword [ebp - 0x68]
add eax, 0xc920
mov edi, 0x200
mov edi, ebx
mov edi, edx
mov edi, ebx
xor eax, ebx
sub edi, 8
mov esi, dword [ebp - 0xa4]
and eax, edx
and ebx, dword [ebp - 0xa8]
mov dword [edi + 8], esi
and esi, dword [ebp - 0xb4]
sub eax, dword [ebp - 0xb8]
mov esi, dword [ebp - 0x68]
mov ebx, esi
mov edi, 0xa00
mov edi, esi
mov edi, ecx
mov edi, esi
cmp dword [ebp - 0x88], 0
je 0x1000b2e3
cmp dword [esi + 0x30], 0
je 0x1000b2e1
or dword [ebp - 0x34], 8
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x34]
push edi
call fcn.1000c773
mov dword [ebp - 0x2c], eax
test eax, eax
sub edi, 0x65
mov ecx, dword [ebp - 0x68]
and dword [ebp - 0xc4], edx
mov dword [edi + 0x65], ecx
mov ebx, edx
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000b317
and dword [edx], 0
inc edi
test byte [ebp - 3], 8
je 0x1000b30a
push 4
pop eax
add edx, eax
cmp edi, dword [ebp + 0xc]
jg 0x10006733
mov dword [edx], eax
mov esi, dword [ebp - 0x68]
lea eax, [esi + ebx*4 + 0x73]
mov eax, 0x4600
mov eax, esi
mov eax, edi
mov eax, esi
and dword [ebp - 0xc4], edx
sub eax, 5
mov edx, dword [ebp - 0xa4]
or dword [ebp - 0xb0], ecx
mov dword [eax + 5], edx
and dword [ebp - 0x90], edi
mov ecx, dword [ebp - 0x68]
or edi, dword [ebp - 0xc4]
and edi, dword [ebp - 0xb8]
mov esi, 0x5200
mov esi, ecx
mov esi, edi
mov esi, ecx
cmp dword [ebp - 0x80], 1
je 0x1000b398
push edi
mov edi, dword [eax + 0xc]
mov ax, word [esi + 0x30]
cmp ax, word [edi + 0x24]
jge 0x1000b30c
mov cx, word [esi + 0x32]
cmp cx, word [edi + 0x26]
jge 0x1000b309
test ax, ax
jl 0x1000b338
test cx, cx
jl 0x1000b3fc
push 1
push dword [esi + 0x30]
push edi
call 0x1000ad2e
mov ebx, eax
jmp 0x1000b404
sub esi, 0x2b
mov eax, dword [ebp - 0x74]
lea edi, [edx + ebx + 0x1d66]
mov dword [esi + 0x2b], eax
xor dword [ebp - 0xc8], ebx
xor dword [ebp - 0x90], 0xffffffbc
mov eax, dword [ebp - 0x68]
xor dword [ebp - 0xa8], 0x45
mov edi, 0x1a00
mov edi, eax
mov edi, ebx
mov edi, eax
add eax, dword [ebp - 0x90]
xor eax, edi
sub edi, 0x14
mov ebx, dword [ebp - 0x74]
xor dword [ebp - 0x9c], 0x46
mov dword [edi + 0x14], ebx
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000b412
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push esi
push edi
mov edi, dword [ebp + 8]
add edi, 0x1000e391
mov esi, dword [edi]
cmp esi, edi
jne 0x1000557b
pop edi
pop esi
pop ebp
nop
nop
nop
mov ecx, dword [ebp - 0x68]
or dword [ebp - 0xb0], ebx
mov edx, 0x4000
mov edx, ecx
mov edx, ebx
mov edx, ecx
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000b465
sub esp, 0x10
push ebx
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi]
add eax, 0x264
xor ebx, ebx
xor edx, edx
test byte [eax], 1
jne 0x1000b450
or dword [eax], 1
mov eax, dword [esi]
mov eax, dword [eax + 0x28c]
cmp eax, ebx
je 0x1000b40e
mov ecx, dword [eax]
test cl, 4
jne 0x1000b3ef
xor edx, edx
sub edx, 0x44
mov edi, dword [ebp - 0x98]
add esi, 0x444b
cmp dword [ebp - 0x88], 0x10000002
jne 0x1000b49a
push esi
mov esi, dword [ebp + 8]
test byte [esi + 0xc], 0xf
jne fcn.1000b480
movzx eax, word [esi + 6]
cmp eax, 0x1b
je 0x1000b435
jle 0x1000b4e2
mov dword [edx + 0x44], edi
add dword [ebp - 0xb0], 0x497
add edi, dword [ebp - 0xc8]
mov ebx, dword [ebp - 0x68]
or eax, dword [ebp - 0x64]
mov esi, 0x3600
mov esi, ebx
mov esi, ecx
mov esi, ebx
add eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x88], 0
je 0x1000b4f6
push dword [0x1000e459]
call 0x100055f5
inc esi
cmp si, word [ebx + 0x26]
jne 0x1000b496
xor esi, esi
inc edi
cmp di, word [ebx + 0x26]
jge 0x1000b48d
jle 0x1000b485
cmp cx, word [ebp + 0xe]
jge 0x1000b4e6
mov edx, dword [ebp + 8]
movsx eax, cx
sub esi, 0x63
mov edi, dword [ebp - 0x94]
xor ecx, dword [ebp - 0xc0]
add edx, dword [ebp - 0x64]
mov dword [esi + 0x63], edi
cmp dword [ebp - 0x80], 1
je 0x1000b540
push 0xc
push 0xfffffffffffffffe
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
call 0x1000b622
test eax, eax
jl 0x1000b4dd
push edi
push 0x1000e336
push 1
push edi
push edi
push 0x1000e9f7
push ebx
call dword [0x1000e094]
push 0xc
lea eax, [ebp - 0xc]
push eax
mov edi, dword [ebp - 0x68]
test dword [ebp - 0x88], 0
je 0x1000b592
mov ebx, 0x1200
mov ebx, edi
mov ebx, eax
mov ebx, edi
or ecx, dword [ebp - 0xa8]
cmp dword [ebp - 0x88], 0
je 0x1000b5da
mov dword [esi + 0x30], eax
push ecx
call fcn.1000c4d5
mov eax, edi
pop edi
pop esi
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
lea eax, [ebp + 0xc]
push eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call 0x100085d6
test eax, eax
jl 0x1000b650
push esi
mov esi, dword [ebp + 0xc]
sub ebx, 0x16
mov edx, dword [ebp - 0x68]
lea ecx, [edx + eax*2 + 0xbb]
and esi, dword [ebp - 0x90]
mov dword [ebx + 0x16], edx
and ecx, edi
mov eax, dword [ebp - 0x68]
xor dword [ebp - 0xb4], eax
mov ebx, 0x6800
mov ebx, eax
mov ebx, edx
mov ebx, eax
add dword [ebp - 0xb0], 0x2a
sub ebx, 0x51
mov esi, dword [ebp - 0xa4]
cmp dword [ebp - 0x88], 0x10000002
jne 0x1000b642
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x40
push ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x140]
test eax, 0x400000
mov dword [ebx + 0x51], esi
xor dword [ebp - 0x90], eax
add eax, ecx
mov edi, dword [ebp - 0x68]
and ecx, dword [ebp - 0x8c]
cmp dword [ebp - 0x88], 0
je 0x1000b6b2
mov ecx, 0x7200
mov ecx, edi
mov ecx, edx
mov ecx, edi
xor esi, dword [ebp - 0x9c]
sub ecx, 0x60
mov eax, dword [ebp - 0x68]
or edx, edi
mov dword [ecx + 0x60], eax
and dword [ebp - 0xb0], ecx
mov edx, dword [ebp - 0x68]
add ecx, 0xad46
mov ecx, 0x6200
mov ecx, edx
mov ecx, esi
mov ecx, edx
and dword [ebp - 0xb8], ecx
sub ecx, 0x6e
mov ebx, dword [ebp - 0xa4]
add dword [ebp - 0xbc], ecx
mov dword [ecx + 0x6e], ebx
cmp dword [ebp - 0x80], 1
je 0x1000b72e
mov edx, dword [ebp - 0x68]
or dword [ebp - 0xc0], esi
mov eax, 0x1e00
mov eax, edx
mov eax, edi
mov eax, edx
add edx, dword [ebp - 0xb4]
lea ecx, [edx + eax*2 + 0x112b]
sub eax, 0x63
mov ebx, dword [ebp - 0x74]
add word [ebp - 0xc8], 0x2d0
mov dword [eax + 0x63], ebx
xor ebx, dword [ebp - 0x64]
add eax, edx
mov ebx, dword [ebp - 0x68]
cmp dword [ebp - 0x88], 0x4c
jne 0x1000b7ab
call 0x10009601
mov esi, eax
push dword [ebp - 0xd8]
call dword [0x1000e124]
mov dword [ebp - 0xf8], 0xc0000017
push eax
push 0x1000e778
push ebx
push 1
push ebx
call esi
mov esi, eax
cmp esi, ebx
jne 0x1000b7c8
mov dword [ebp - 0xf8], 0xc000009a
mov edi, 0x4600
mov edi, ebx
mov edi, esi
mov edi, ebx
test dword [ebp - 0x88], 0
je 0x1000b7e1
push ebx
mov ecx, eax
push 4
push dword [ebp + 8]
and ecx, 3
call dword [0x1000e0d4]
mov dword [ebp - 0x8c], eax
cmp ebx, eax
sub edi, 0x4c
mov esi, dword [ebp - 0xa4]
or dword [ebp - 0x64], 0xffffffd3
mov dword [edi + 0x4c], esi
test dword [ebp - 0x88], 0
je 0x1000b828
push dword [eax + 0x28]
call dword [0x1000e1c0]
push dword [ebp + 8]
mov edi, eax
call dword [0x1000e068]
cmp word [esi + 4], 1
jne 0x1000b845
call dword [0x1000e024]
mov eax, edi
pop edi
pop esi
pop ebp
nop
nop
nop
nop
nop
mov ebx, dword [ebp - 0x68]
cmp dword [ebp - 0x80], 0xd
jne 0x1000b852
add eax, 0x240000
push eax
push dword [0x1000e479]
call dword [0x1000e0f4]
mov ebx, eax
test ebx, ebx
je 0x1000b83d
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp + 0x14]
mov eax, ecx
push edi
mov ecx, 0x2a00
mov ecx, ebx
mov ecx, edi
mov ecx, ebx
and dword [ebp - 0x78], ebx
sub ecx, 0x34
mov edi, dword [ebp - 0x68]
sub eax, ebx
add esi, edx
mov dword [ecx + 0x34], edi
cmp dword [ebp - 0x88], 0
je 0x1000b88d
mov eax, dword [ebp - 0x68]
test dword [ebp - 0x88], 0
je 0x1000b8d2
mov ecx, 0x1200
mov ecx, eax
mov ecx, edi
mov ecx, eax
cmp dword [ebp - 0x80], 1
je 0x1000b907
call 0x1000a2a1
push dword [esi]
push dword [0x1000e866]
call 0x1000abd3
push ebx
push esi
mov esi, dword [0x1000e3c7]
push edi
xor ebx, ebx
push ebx
push edx
call esi
push ebx
push 1
sub ecx, 0x31
mov esi, dword [ebp - 0xa4]
mov byte [ebp - 0xc4], 0x93
mov dword [ecx + 0x31], esi
add esi, ebx
mov esi, dword [ebp - 0x68]
add edi, ecx
xor ecx, dword [ebp - 0xb4]
mov edx, 0x6a00
mov edx, esi
mov edx, eax
mov edx, esi
mov dword [ebp - 0xb8], ecx
sub edx, 0x1f
mov ebx, dword [ebp - 0x74]
sub eax, dword [ebp - 0x64]
mov dword [edx + 0x1f], ebx
xor dword [ebp - 0xbc], ebx
and ebx, eax
cmp dword [ebp - 0x80], 1
je 0x1000b96d
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 8]
test byte [esi + 4], 1
mov ebx, dword [esi]
push edi
je 0x1000917d
lea ebx, [ebp - 0x68]
push ebx
call fcn.100045ea
and ecx, dword [ebp - 0xb4]
xor ebx, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x70]
or dword [ebp - 0x78], ebx
mov dword [ebp - 0xa0], ecx
cmp dword [ebp - 0x88], 0x10000002
jne 0x1000b9de
call dword [0x1000e154]
mov eax, dword [ebp - 0x16c]
mov dword [edx + 0xc4], eax
cmp byte [0x75b6d508], 0
je 0x10008096
mov eax, dword [ebp - 0x164]
push dword [eax + 0xc4]
push dword [eax + 0x1b4]
push 0x1000e49f
push eax
call fcn.10005cc5
test eax, eax
jl 0x1000929a
and eax, edx
lea esi, [ebp - 0x70]
push esi
call fcn.100045ea
sub eax, ebx
add esi, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xa0]
lea ebx, [ebx]
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000ba23
lea edi, [esi + 0x38]
mov eax, dword [ebp + 8]
push ebx
push dword [esi + 0x34]
push dword [esi + 0x30]
push edi
push dword [eax + 0xc]
call 0x1000b952
mov esi, eax
push dword [ebp - 4]
call 0x10007d35
pop edi
push dword [eax]
or dword [ebp - 0x8c], 0x15
call fcn.1000448d
and esi, dword [ebp - 0xb0]
and ebx, dword [ebp - 0x9c]
ret
test eax, eax
jl 0x1000ba08
push edi
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x3c]
mov eax, dword [eax + 0x20]
lea ecx, [ebp + 8]
push ecx
push 0x1000e977
push 1
push dword [esi + 0x2c]
push dword [eax + 0x74]
call fcn.100079a7
mov edi, eax
sub dword [ebp - 0xa0], 4
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000bac2
imul esi, esi, 0x1c
add esi, dword [eax + 0x58]
test di, di
movsx eax, word [ebx]
mov ecx, dword [esi + 8]
lea edx, [ecx + eax*2]
jle 0x1000ba7c
mov eax, dword [ebp + 8]
movzx ecx, di
mov edi, edx
mov dx, ax
shl edx, 0x10
mov dx, ax
shr ecx, 1
mov edx, dword [ebp - 0xa0]
add dword [ebp - 0xc8], 0xffffff92
pop dword [edx]
cmp dword [ebp - 0x88], 0x1a
jne 0x1000bb10
cmp cx, bx
je 0x1000baf3
mov ebx, dword [ebp + 0x24]
sub edx, 4
inc ebx
cmp cx, bx
jle 0x1000baa4
mov cx, word [esi - 2]
sub eax, dword [ebp + 0x24]
sub esi, 4
cmp word [edx + 2], cx
jne 0x1000bac8
dec eax
mov edi, dword [ebp - 0xa0]
cmp dword [ebp - 0x88], 0x10000002
jne 0x1000bb55
add dword [ebp + 0xc], 4
dec esi
jne 0x1000bb72
test byte [edx + 4], 4
push ebx
je 0x1000bb0d
test byte [ecx + 0x16c], 1
push dword [edi]
add esi, dword [ebp - 0xc8]
add dword [ebp - 0xa0], 4
xor dword [ebp - 0x64], 0xf29
ret
call dword [0x1000e044]
test eax, eax
jl 0x1000a97d
call dword [0x1000e100]
test ebx, ebx
je 0x1000c235
lea eax, [ebp - 0x10]
push eax
push ebx
pop dword [edx]
add dword [ebp - 0xc0], 0x57
mov edi, dword [ebp - 0xa0]
sub ebx, edx
cmp dword [ebp - 0x80], 0xffffffd6
jne 0x1000bc14
or dword [ebx + 0x10], 0x10
mov ecx, dword [ebp + 0xc]
or dword [ecx + 0x2c], 0xffffffff
cmp dword [ebp - 4], eax
mov esi, ecx
je 0x1000bc25
mov eax, dword [ebx + 0xc]
or byte [ebx + 0x11], 1
mov dword [eax + 0x28], 1
push ebx
call fcn.10005230
xor edi, edi
push dword [edi]
cmp dword [ebp - 0x80], 0x2e
jne 0x1000bc5b
shr eax, 0x10
movsx eax, ax
sub dword [esi + 0x54], eax
mov edi, dword [esi + 0x54]
mov eax, edi
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x78
jl 0x100074f1
mov eax, dword [0x1000e602]
test eax, eax
jbe 0x100072da
mov cx, word [esi + 0x28]
mov word [ebp - 0x18c], cx
mov cx, word [esi + 0x2a]
mov word [ebp - 0x18a], cx
add dword [ebp - 0xa0], 4
cmp dword [ebp - 0x88], 0x67
jne 0x1000bcab
mov dword [edi + 0x18], eax
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x3c]
mov eax, dword [eax + 0x20]
push dword [eax + 0x30]
push edi
push dword [ebp + 8]
call 0x10007060
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x140]
and eax, 4
push eax
push ebx
call fcn.1000c88a
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x3c]
mov eax, dword [eax + 0x20]
push dword [eax + 0x30]
push dword [esi + 0x18]
ret
sub edi, eax
cmp dword [ebp - 0x80], 1
je 0x1000beca
push dword [esi + 0x1b4]
push 0x1000e3f4
push esi
call 0x100083b3
test eax, eax
jl 0x1000bea0
mov ecx, dword [esi + 0x28c]
test ecx, ecx
je 0x1000bef7
mov eax, dword [ebp + 0x10]
call fcn.1000448d
cmp dword [ebp - 0x80], 1
je 0x1000bf16
mov eax, dword [ecx + 0x278]
test eax, eax
jne 0x10005ae7
mov ecx, dword [ecx + 0x27c]
test ecx, ecx
pop esi
jne 0x10005ba1
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x40
mov eax, dword [0x1000e33e]
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push 0x1000eb34
push dword [0x1000e7ae]
ret
call ebx
test eax, eax
je 0x1000bf49
lea eax, [ebp - 0x40]
push eax
push 0x1000ec53
push 0
push dword [esi + 0xcc]
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
or dword [ebp - 0xbc], 0x13
call fcn.10004318
and dword [ebp - 0xc8], edi
mov edx, dword [ebp - 0xa0]
or word [ebp - 0xc4], 0xf89
pop dword [edx]
xor esi, dword [ebp - 0xa8]
mov ebx, dword [ebp - 0xa0]
cmp dword [ebp - 0x80], 1
je 0x1000bfbb
xor eax, eax
mov ax, word [esi]
push eax
mov eax, dword [ebp + 8]
push dword [eax + 0x1a4]
call fcn.10008b53
mov byte [esi], al
add esi, 0x14
dec edi
jne 0x1000bfd1
pop edi
pop esi
mov eax, dword [ebp + 0x10]
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push dword [ebx]
or dword [ebp - 0x78], ecx
call fcn.1000448d
cmp dword [ebp - 0x80], 1
je 0x1000bff1
mov dword [eax], ecx
xor eax, eax
pop ebp
nop
nop
nop
nop
nop
mov edi, edi
push ebp
mov ebp, esp
push 0
push 0
push dword [ebp + 8]
call 0x10007b38
neg eax
sbb eax, eax
neg eax
pop ebp
nop
nop
nop
nop
ret
cmp ah, byte [ebp - 0x48]
push dword [ebp - 0x98]
call fcn.1000453a
add dword [ebp - 0xc4], edx
xor dword [ebp - 0xc4], eax
push dword [ebp - 0xa4]
call fcn.1000453a
cmp dword [ebp - 0x80], 1
je 0x1000c23e
shr ecx, 2
mov ecx, eax
and ecx, 3
movsx edi, word [ebx + 0x24]
mov ecx, edi
sub ecx, edx
add dword [ebp - 0x1c], ecx
add dword [ebp + 8], ecx
inc dword [ebp + 0x10]
mov ax, word [ebx + 0x26]
cmp word [ebp + 0x10], ax
jne 0x1000c279
and dword [ebp + 0x10], 0
and dword [ebp - 0x14], 0
inc dword [ebp - 0x18]
cmp word [ebp - 0x18], ax
jge fcn.1000c262
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax]
jae 0x1000c26c
jmp 0x10005d04
add edx, edi
lea esi, [eax + 0xaaa]
mov edx, dword [ebp - 0x70]
add dword [ebp - 0xc8], 0xffffffd4
mov eax, dword [ebp - 0x68]
lea ecx, [ecx + 0x1d]
sub edx, 0x1c
add dword [ebp - 0x88], 0
je 0x1000c27f
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [ebp + 8]
push edi
push 1
push dword [esi + 0x34]
push eax
mov eax, dword [edx + 0x24]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x88], 0x10000002
jne 0x1000c2a1
call 0x1000a2a1
pop esi
pop edi
pop ebx
nop
nop
nop
nop
nop
mov edi, edi
push ebp
lea edx, [ebp - 0xa4]
or ecx, esi
cmp dword [ebp - 0x80], 0xfffffff1
jne 0x1000c2eb
push edx
or word [ebp - 0xb8], 0x2a0
push dword [ebp - 0xa4]
add esi, 0x4b06
call fcn.1000481b
and eax, esi
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], 4
mov dword [ebp - 0x9c], 0x61e
sub edi, dword [ebp - 0x90]
mov esi, ecx
mov ah, byte [ebp - 0x68]
mov byte [ebp - 0xa4], ah
or ecx, dword [ebp - 0xbc]
mov ebx, dword [ebp - 0xa4]
rol ebx, 8
mov dword [ebp - 0xa4], ebx
cmp dword [ebp - 0x80], 0x10000002
jne 0x1000c385
cmp ecx, dword [ebp - 0x868]
je 0x1000c322
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push ecx
push 0
push dword [eax + 0x18]
call dword [0x1000e1c8]
inc esi
cmp esi, dword [edi + 0x30]
jb 0x1000c328
mov edi, dword [ebp - 0x68]
ror edi, 8
mov dword [ebp - 0x68], edi
xor word [ebp - 0xc0], 0xf41
cmp dword [ebp - 0x88], 0
je 0x1000c3ca
xor eax, eax
pop ebx
mov dword [ebp + 8], eax
mov edi, dword [ebp - 0xc]
cmp dword [ebp - 4], 0
je 0x1000c38e
sub dword [ebp - 0x98], 1
jne 0x1000c328
mov word [esi + 0x152], ax
mov word [esi + 0x14e], ax
jne 0x10006239
test byte [edi + 4], 1
je 0x100053e4
mov ebx, dword [ebp - 0x70]
lea ecx, [edi + esi*4 + 0x67]
mov dword [ebp - 0xc0], ebx
mov ecx, dword [ebp - 0x98]
and edx, ecx
sub ebx, 0x30
add eax, dword [ebp - 0xc0]
mov dword [ebp - 0xbc], ebx
mov ecx, dword [ebx + 0x3c]
mov dword [ebp - 0x98], ecx
xor dword [ebp - 0xbc], ebx
or esi, eax
add dword [ebp - 0xc8], 0x7f
mov edx, dword [ebp - 0x70]
and esi, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x68]
lea edi, [edi]
sub edx, 0x28
cmp dword [ebp - 0x80], 1
je 0x1000c756
call dword [0x1000e038]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
mov dword [0x1000e8a6], ecx
mov dword [eax + 0x1c], 0x400
mov dword [eax + 0x20], 0x40b
mov dword [eax + 0x24], 0x75b6d560
add dword [ebp - 0xa0], 0xc
cmp dword [ebp - 0x88], 0xfffffffd
jne 0x1000c960
push eax
push dword [ebp - 0x168]
push esi
mov eax, dword [ebp - 0x164]
push dword [eax + 0x1ac]
call dword [0x1000e024]
xor esi, esi
mov si, word [ebx]
shr esi, 0xd
and esi, 1
mov dword [ebp - 0x1f4], esi
push dword [ebp - 0x184]
call dword [0x1000e050]
test esi, esi
je 0x1000c8eb
ret