Function at 0x100a93db
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors
Parse pe header
Resolve function by parsing pe exports
Set global application hook

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f7c73
mov eax, dword fs:[0]
push eax
mov eax, 0x10b4
call fcn.100ccb40
mov eax, dword [0x10110164]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x1008], ebx
mov dword [ebp - 0x1014], ebx
mov dword [ebp - 0x1088], ebx
lea eax, [ebx + 0x20]
xor ecx, ecx
mov dword [ebx], 0x100fb364
mov dword [ebx + 4], ecx
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], ecx
mov dword [eax], ecx
mov dword [ebp - 0x1018], eax
mov dword [eax + 4], ecx
mov dword [ebp - 4], ecx
lea eax, [ebx + 0x28]
mov dword [ebp - 0x100c], eax
mov dword [eax], ecx
mov byte [ebp - 4], 1
mov dword [ebx + 0x2c], ecx
mov byte [ebp - 4], 2
lea eax, [ebx + 0x30]
mov ecx, eax
mov dword [ebp - 0x1030], eax
call fcn.10086250
mov byte [ebp - 4], 3
lea eax, [ebx + 0xb4]
mov ecx, eax
mov dword [ebp - 0x102c], eax
call fcn.10086696
mov byte [ebp - 4], 4
lea eax, [ebx + 0x13c]
xor ecx, ecx
mov dword [ebp - 0x1020], eax
mov dword [eax], ecx
mov byte [ebp - 4], 5
lea eax, [ebx + 0x140]
mov dword [ebp - 0x1050], eax
mov dword [eax], ecx
mov byte [ebp - 4], 6
mov dword [ebx + 0x144], ecx
mov byte [ebp - 4], 7
lea eax, [ebx + 0x148]
mov dword [ebp - 0x1038], eax
mov dword [eax], ecx
mov byte [ebp - 4], 8
lea eax, [ebx + 0x14c]
mov dword [ebp - 0x1034], eax
mov dword [eax], ecx
mov byte [ebp - 4], 9
lea eax, [ebx + 0x150]
mov dword [ebp - 0x104c], eax
mov dword [eax], ecx
mov byte [ebp - 4], 0xa
lea eax, [ebx + 0x154]
mov dword [ebp - 0x1054], eax
mov dword [eax], ecx
mov byte [ebp - 4], 0xb
lea eax, [ebx + 0x158]
mov dword [ebp - 0x1058], eax
mov dword [eax], ecx
mov byte [ebp - 4], 0xc
lea eax, [ebx + 0x15c]
mov dword [ebp - 0x1010], eax
mov dword [eax], ecx
mov byte [ebp - 4], 0xd
lea eax, [ebx + 0x160]
mov dword [ebp - 0x1048], eax
mov dword [eax], ecx
mov byte [ebp - 4], 0xe
lea eax, [ebx + 0x164]
mov dword [ebp - 0x1044], eax
mov dword [eax], ecx
mov byte [ebp - 4], 0xf
lea eax, [ebx + 0x168]
mov dword [ebp - 0x1040], eax
mov dword [eax], ecx
mov byte [ebp - 4], 0x10
lea eax, [ebx + 0x16c]
mov dword [ebp - 0x1024], eax
mov dword [eax], ecx
mov byte [ebp - 4], 0x11
lea eax, [ebx + 0x170]
mov ecx, eax
mov dword [ebp - 0x1014], eax
call fcn.1004ec17
mov byte [ebp - 4], 0x12
lea eax, [ebx + 0x180]
and dword [eax], 0
mov dword [ebp - 0x103c], eax
mov byte [ebp - 4], 0x13
and dword [ebx + 0x184], 0
call fcn.100b72b5
call fcn.10062e7d
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov esi, eax
mov eax, dword [0x101ef2d0]
call dword [eax + 0x160]
mov ecx, eax
lea eax, [esi + 0x348]
xchg dword [eax], ecx
call fcn.10062e7d
push dword [0x101ef0a0]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
je 0x100ae96c
call fcn.10062e7d
mov esi, eax
mov eax, dword [0x101ef2d0]
mov edi, dword [esi]
call dword [eax + 0x508]
push eax
push esi
call dword [edi + 0x28]
test eax, eax
jne 0x100a975d
mov dword [ebp - 0x734], 0x5d46
mov eax, dword [ebp - 0x734]
push 0x4d
pop ecx
xor eax, ecx
mov word [ebp - 0x730], ax
mov eax, dword [ebp - 0x734]
inc eax
xor eax, ecx
mov word [ebp - 0x72e], ax
mov eax, dword [ebp - 0x734]
add eax, 2
xor eax, 0x2e
mov word [ebp - 0x72c], ax
mov eax, dword [ebp - 0x734]
add eax, 3
xor eax, 0x58
mov word [ebp - 0x72a], ax
mov eax, dword [ebp - 0x734]
add eax, 4
xor eax, ecx
mov word [ebp - 0x728], ax
mov eax, dword [ebp - 0x734]
add eax, 5
xor eax, 0x4f
mov word [ebp - 0x726], ax
mov eax, dword [ebp - 0x734]
add eax, 6
xor eax, 0x44
mov word [ebp - 0x724], ax
mov eax, dword [ebp - 0x734]
add eax, 7
xor eax, 0x20
mov word [ebp - 0x722], ax
mov eax, dword [ebp - 0x734]
add eax, 8
xor eax, ecx
lea ecx, [ebp - 0x734]
mov word [ebp - 0x720], ax
mov eax, dword [ebp - 0x734]
add eax, 9
xor eax, 0x6f
mov word [ebp - 0x71e], ax
mov eax, dword [ebp - 0x734]
add eax, 0xa
xor eax, 0x64
mov word [ebp - 0x71c], ax
mov eax, dword [ebp - 0x734]
add eax, 0xb
xor eax, 0x58
mov word [ebp - 0x71a], ax
mov eax, dword [ebp - 0x734]
add eax, 0xc
xor eax, 0x73
mov word [ebp - 0x718], ax
mov eax, dword [ebp - 0x734]
add eax, 0xd
xor eax, 0x74
mov word [ebp - 0x716], ax
mov eax, dword [ebp - 0x734]
add eax, 0xe
xor eax, 0x20
mov word [ebp - 0x714], ax
xor eax, eax
mov word [ebp - 0x712], ax
mov ax, word [ebp - 0x730]
call fcn.1005f4f6
push eax
call fcn.1007ae76
pop ecx
push 0xe0190131
lea ecx, [ebp - 0x1098]
call fcn.100025b7
push 0x101026f0
lea eax, [ebp - 0x1098]
jmp 0x100aea4d
mov dword [ebp - 0x79c], 0x5a6f
mov eax, dword [ebp - 0x79c]
xor eax, 0x6b
mov word [ebp - 0x798], ax
mov eax, dword [ebp - 0x79c]
inc eax
xor eax, 0x65
mov word [ebp - 0x796], ax
mov eax, dword [ebp - 0x79c]
add eax, 2
push 0x72
pop ecx
xor eax, ecx
mov word [ebp - 0x794], ax
mov eax, dword [ebp - 0x79c]
add eax, 3
push 0x6e
pop ecx
xor eax, ecx
mov word [ebp - 0x792], ax
mov eax, dword [ebp - 0x79c]
add eax, 4
xor eax, 0x65
mov word [ebp - 0x790], ax
mov eax, dword [ebp - 0x79c]
add eax, 5
push 0x6c
pop esi
xor eax, esi
mov word [ebp - 0x78e], ax
mov eax, dword [ebp - 0x79c]
add eax, 6
push 0x33
pop ecx
xor eax, ecx
mov word [ebp - 0x78c], ax
mov eax, dword [ebp - 0x79c]
add eax, 7
push 0x32
pop ecx
xor eax, ecx
lea ecx, [ebp - 0x79c]
mov word [ebp - 0x78a], ax
mov eax, dword [ebp - 0x79c]
add eax, 8
xor eax, 0x2e
mov word [ebp - 0x788], ax
mov eax, dword [ebp - 0x79c]
add eax, 9
xor eax, 0x64
mov word [ebp - 0x786], ax
mov eax, dword [ebp - 0x79c]
add eax, 0xa
xor eax, esi
mov word [ebp - 0x784], ax
mov eax, dword [ebp - 0x79c]
add eax, 0xb
xor eax, esi
mov word [ebp - 0x782], ax
xor eax, eax
mov word [ebp - 0x780], ax
mov ax, word [ebp - 0x798]
call fcn.10002367
push eax
call fcn.10002336
mov edi, eax
test edi, edi
jne 0x100a989c
call dword [sym.imp.KERNEL32.dll_GetLastError]
or eax, 0xe0ff0000
lea ecx, [ebp - 0x1090]
push eax
call fcn.100025b7
push 0x101026f0
lea eax, [ebp - 0x1090]
jmp 0x100aea4d
push 0x35
pop eax
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
push 0x48
pop ecx
xor eax, ecx
mov byte [ebp - 0x440], al
mov eax, dword [ebp - 0x444]
inc al
xor eax, 0x65
mov byte [ebp - 0x43f], al
mov eax, dword [ebp - 0x444]
add al, 2
push 0x61
pop ecx
xor eax, ecx
mov byte [ebp - 0x43e], al
mov eax, dword [ebp - 0x444]
add al, 3
xor eax, 0x70
mov byte [ebp - 0x43d], al
mov eax, dword [ebp - 0x444]
add al, 4
push 0x41
pop ecx
xor eax, ecx
mov byte [ebp - 0x43c], al
mov eax, dword [ebp - 0x444]
add al, 5
xor eax, esi
mov byte [ebp - 0x43b], al
mov eax, dword [ebp - 0x444]
add al, 6
xor eax, esi
mov byte [ebp - 0x43a], al
mov eax, dword [ebp - 0x444]
add al, 7
push 0x6f
pop ecx
xor eax, ecx
lea ecx, [ebp - 0x444]
mov byte [ebp - 0x439], al
mov eax, dword [ebp - 0x444]
add al, 8
mov byte [ebp - 0x437], 0
xor eax, 0x63
mov byte [ebp - 0x438], al
mov al, byte [ebp - 0x440]
call fcn.10058231
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push edi
call esi
mov dword [ebx + 0x10], eax
mov dword [ebp - 0x454], 0x1b
mov eax, dword [ebp - 0x454]
push 0x48
pop ecx
xor eax, ecx
mov byte [ebp - 0x450], al
mov eax, dword [ebp - 0x454]
inc al
xor eax, 0x65
mov byte [ebp - 0x44f], al
mov eax, dword [ebp - 0x454]
add al, 2
xor eax, 0x61
mov byte [ebp - 0x44e], al
mov eax, dword [ebp - 0x454]
add al, 3
xor eax, 0x70
mov byte [ebp - 0x44d], al
mov eax, dword [ebp - 0x454]
add al, 4
push 0x46
pop ecx
xor eax, ecx
mov byte [ebp - 0x44c], al
mov eax, dword [ebp - 0x454]
add al, 5
push 0x72
pop ecx
xor eax, ecx
lea ecx, [ebp - 0x454]
mov byte [ebp - 0x44b], al
mov eax, dword [ebp - 0x454]
add al, 6
xor eax, 0x65
mov byte [ebp - 0x44a], al
mov eax, dword [ebp - 0x454]
add al, 7
mov byte [ebp - 0x448], 0
xor eax, 0x65
mov byte [ebp - 0x449], al
mov al, byte [ebp - 0x450]
call fcn.1000b3f4
push eax
push edi
call esi
mov dword [ebx + 0x14], eax
push 0x49
pop eax
mov byte [ebp - 0x480], al
push 0x67
pop eax
mov byte [ebp - 0x47f], al
push 0x76
pop ecx
push 0x56
pop eax
mov byte [ebp - 0x47e], cl
mov byte [ebp - 0x47d], al
push 0x6d
pop eax
mov byte [ebp - 0x47c], 0x6b
mov byte [ebp - 0x47b], 0x65
mov byte [ebp - 0x47a], al
push 0x45
pop eax
mov byte [ebp - 0x479], al
push 0x71
pop eax
mov byte [ebp - 0x478], al
push 0x77
pop eax
mov byte [ebp - 0x477], al
push 0x38
mov byte [ebp - 0x476], 0x70
mov byte [ebp - 0x475], cl
lea ecx, [ebp - 0x480]
pop eax
mov byte [ebp - 0x474], al
push 0x36
pop eax
mov byte [ebp - 0x473], al
mov byte [ebp - 0x472], 0
mov al, byte [ebp - 0x480]
call fcn.100cbf0b
push eax
push edi
call esi
mov dword [ebx + 0x18], eax
xor eax, eax
cmp dword [ebx + 0x10], eax
je 0x100ae945
cmp dword [ebx + 0x14], eax
je 0x100ae945
push eax
push 0x1000
push eax
call dword [sym.imp.KERNEL32.dll_HeapCreate]
mov dword [ebx + 0x1c], eax
test eax, eax
jne 0x100a9aff
call dword [sym.imp.KERNEL32.dll_GetLastError]
or eax, 0xe0ff0000
lea ecx, [ebp - 0x10b0]
push eax
call fcn.100025b7
push 0x101026f0
lea eax, [ebp - 0x10b0]
jmp 0x100aea4d
mov eax, dword [0x10201ab4]
push 0x4c
mov edi, dword [eax + 0xa8]
mov eax, 0x81
mov word [ebp - 0xb1c], ax
pop eax
push 0x39
pop ecx
push 0x38
mov word [ebp - 0xb1a], ax
pop eax
push 0x3b
pop edx
push 0x49
pop esi
mov word [ebp - 0xb18], cx
push 0x48
mov word [ebp - 0xb16], ax
mov word [ebp - 0xb14], dx
mov word [ebp - 0xb12], si
pop esi
push 0x33
mov word [ebp - 0xb10], ax
mov word [ebp - 0xb0e], cx
mov word [ebp - 0xb0c], si
pop esi
push 0x4a
mov word [ebp - 0xb0a], si
pop esi
push 0x47
mov word [ebp - 0xb08], ax
pop eax
push 0x33
mov word [ebp - 0xb06], si
mov word [ebp - 0xb04], ax
mov word [ebp - 0xb02], dx
pop edx
push 0x3a
mov word [ebp - 0xb00], dx
pop edx
push 0x68
mov word [ebp - 0xafe], dx
pop edx
push 0x3b
mov word [ebp - 0xafc], dx
pop edx
push 0x33
mov word [ebp - 0xafa], dx
pop edx
mov word [ebp - 0xaf8], cx
push 0x3e
pop ecx
push 0x36
mov word [ebp - 0xaf6], dx
mov word [ebp - 0xaf4], cx
mov word [ebp - 0xaf2], si
pop esi
push 0x3f
mov word [ebp - 0xaf0], ax
pop eax
push 0x37
pop ecx
mov word [ebp - 0xaee], si
mov word [ebp - 0xaec], dx
push 0x3d
mov word [ebp - 0xaea], ax
mov word [ebp - 0xae8], cx
pop ecx
mov word [ebp - 0xae6], cx
push 0x48
pop ecx
mov word [ebp - 0xae4], cx
push 0x3b
pop ecx
mov word [ebp - 0xae2], cx
push 0x4a
pop ecx
mov word [ebp - 0xae0], cx
mov dword [ebp - 0x1000], edi
mov word [ebp - 0xade], ax
push 0x4c
pop eax
mov word [ebp - 0xadc], ax
push 0x3a
pop edx
mov word [ebp - 0xada], dx
mov word [ebp - 0xad8], cx
lea ecx, [ebp - 0xb1c]
mov word [ebp - 0xad6], ax
add eax, 0x37
mov word [ebp - 0xad4], si
mov word [ebp - 0xad2], ax
xor eax, eax
mov word [ebp - 0xad0], ax
mov ax, word [ebp - 0xb1c]
mov esi, dword [edi]
call fcn.10010f82
push eax
push edi
call dword [esi + 0x110]
test eax, eax
je 0x100a9ec2
push 0x28
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x1004], eax
mov byte [ebp - 4], 0x14
test eax, eax
je 0x100a9cb8
mov ecx, eax
call fcn.10012c24
mov ecx, eax
jmp 0x100a9cba
xor ecx, ecx
mov byte [ebp - 4], 0x13
lea esi, [ebx + 0x2c]
mov eax, dword [esi]
mov dword [esi], ecx
test eax, eax
je 0x100a9cd3
push eax
mov ecx, esi
call fcn.100b575a
mov ecx, dword [esi]
mov eax, dword [0x10201ab4]
test eax, eax
jne 0x100a9ce0
xor edx, edx
jmp 0x100a9ce6
mov eax, dword [eax + 0x10]
mov edx, dword [eax + 0x1c]
mov eax, dword [edx]
push 0x1388
push ecx
push edx
call dword [eax + 0x14]
mov eax, dword [0x10201ab4]
push 0x6c
pop esi
push 0x69
mov eax, dword [eax + 0x10]
pop ecx
push 0x3a
pop edx
mov edi, dword [eax + 0x48]
mov dword [ebp - 0x518], 0x2dbb
mov eax, dword [ebp - 0x518]
xor eax, 0x78
mov word [ebp - 0x514], ax
mov eax, dword [ebp - 0x518]
inc eax
xor eax, 0x63
mov word [ebp - 0x512], ax
mov eax, dword [ebp - 0x518]
add eax, 2
xor eax, esi
mov word [ebp - 0x510], ax
mov eax, dword [ebp - 0x518]
add eax, 3
xor eax, ecx
mov word [ebp - 0x50e], ax
mov eax, dword [ebp - 0x518]
add eax, 4
xor eax, 0x6f
mov word [ebp - 0x50c], ax
mov eax, dword [ebp - 0x518]
add eax, 5
xor eax, edx
mov word [ebp - 0x50a], ax
mov eax, dword [ebp - 0x518]
add eax, 6
xor eax, edx
mov word [ebp - 0x508], ax
mov eax, dword [ebp - 0x518]
add eax, 7
xor eax, 0x20
mov word [ebp - 0x506], ax
mov eax, dword [ebp - 0x518]
add eax, 8
xor eax, 0x64
mov word [ebp - 0x504], ax
mov eax, dword [ebp - 0x518]
add eax, 9
xor eax, ecx
mov word [ebp - 0x502], ax
mov eax, dword [ebp - 0x518]
add eax, 0xa
xor eax, 0x66
mov word [ebp - 0x500], ax
mov eax, dword [ebp - 0x518]
add eax, 0xb
xor eax, 0x20
mov word [ebp - 0x4fe], ax
mov eax, dword [ebp - 0x518]
add eax, 0xc
xor eax, ecx
mov word [ebp - 0x4fc], ax
mov eax, dword [ebp - 0x518]
add eax, 0xd
push 0x6e
pop ecx
xor eax, ecx
mov word [ebp - 0x4fa], ax
mov eax, dword [ebp - 0x518]
push 0x73
add eax, 0xe
pop ecx
xor eax, ecx
mov word [ebp - 0x4f8], ax
mov eax, dword [ebp - 0x518]
add eax, 0xf
push 0x74
pop edx
xor eax, edx
lea ecx, [ebp - 0x518]
mov word [ebp - 0x4f6], ax
mov eax, dword [ebp - 0x518]
add eax, 0x10
xor eax, 0x61
mov word [ebp - 0x4f4], ax
mov eax, dword [ebp - 0x518]
add eax, 0x11
xor eax, esi
mov word [ebp - 0x4f2], ax
mov eax, dword [ebp - 0x518]
add eax, 0x12
xor eax, esi
mov word [ebp - 0x4f0], ax
mov eax, dword [ebp - 0x518]
add eax, 0x13
xor eax, 0x20
mov word [ebp - 0x4ee], ax
mov eax, dword [ebp - 0x518]
add eax, 0x14
xor eax, 0x63
mov word [ebp - 0x4ec], ax
xor eax, eax
mov word [ebp - 0x4ea], ax
mov ax, word [ebp - 0x514]
mov esi, dword [edi]
call fcn.10039933
push eax
push edi
call dword [esi + 0x28]
mov edi, dword [ebp - 0x1000]
pop ecx
pop ecx
mov ecx, ebx
call fcn.100c83c6
push 0x3e
mov eax, 0x85
mov word [ebp - 0xacc], ax
pop eax
mov word [ebp - 0xaca], ax
push 0x4f
pop eax
push 0x42
pop esi
mov word [ebp - 0xac8], ax
push 0x41
pop ecx
mov word [ebp - 0xac6], si
mov word [ebp - 0xac4], ax
push 0x3c
pop ebx
mov word [ebp - 0xac2], cx
push 0x50
mov word [ebp - 0xac0], bx
mov word [ebp - 0xabe], ax
pop eax
mov word [ebp - 0xabc], ax
push 0x37
pop edx
push 0x40
pop eax
mov word [ebp - 0xaba], dx
mov word [ebp - 0xab8], bx
mov word [ebp - 0xab6], ax
push 0x4f
pop eax
mov word [ebp - 0xab4], ax
push 0x4c
pop eax
mov word [ebp - 0xab2], ax
push 0x3e
pop eax
mov word [ebp - 0xab0], dx
mov word [ebp - 0xaae], ax
push 0x3d
pop eax
mov word [ebp - 0xaac], ax
mov word [ebp - 0xaaa], ax
push 0x4d
pop eax
mov word [ebp - 0xaa8], ax
mov word [ebp - 0xaa6], dx
mov word [ebp - 0xaa4], si
push 0x43
pop esi
mov word [ebp - 0xaa2], si
mov word [ebp - 0xaa0], bx
push 0x3a
pop ebx
push 0x3f
mov word [ebp - 0xa9e], bx
pop esi
mov word [ebp - 0xa9c], dx
mov word [ebp - 0xa9a], cx
push 0x3d
pop ecx
mov word [ebp - 0xa98], ax
mov word [ebp - 0xa96], si
push 0x3e
pop esi
mov word [ebp - 0xa94], cx
mov word [ebp - 0xa92], bx
push 0x50
mov word [ebp - 0xa90], si
pop edx
mov word [ebp - 0xa8e], cx
mov word [ebp - 0xa8c], dx
mov word [ebp - 0xa8a], ax
push 0x4e
pop eax
mov word [ebp - 0xa88], ax
push 0x3b
pop eax
mov word [ebp - 0xa86], ax
push 0x4c
pop eax
mov word [ebp - 0xa84], ax
lea ecx, [ebp - 0xacc]
add eax, 0x3b
mov word [ebp - 0xa82], ax
xor eax, eax
mov word [ebp - 0xa80], ax
mov ax, word [ebp - 0xacc]
mov esi, dword [edi]
call fcn.10039bac
push eax
push edi
call dword [esi + 0x110]
test eax, eax
je 0x100aa06b
call fcn.100c6572
test eax, eax
jns 0x100aa06b
push eax
lea ecx, [ebp - 0x10b8]
call fcn.100025b7
push 0x101026f0
lea eax, [ebp - 0x10b8]
jmp 0x100aea4d
push 0x51
mov eax, 0x88
mov word [ebp - 0xa7c], ax
pop eax
mov word [ebp - 0xa7a], ax
push 0x50
pop edx
push 0x3f
mov word [ebp - 0xa78], dx
pop ecx
mov word [ebp - 0xa76], cx
mov word [ebp - 0xa74], ax
push 0x40
pop eax
mov word [ebp - 0xa72], ax
mov word [ebp - 0xa70], dx
push 0x42
pop edx
push 0x41
pop eax
push 0x45
mov word [ebp - 0xa6e], dx
mov word [ebp - 0xa6c], ax
pop ecx
mov word [ebp - 0xa6a], bx
mov word [ebp - 0xa68], cx
mov word [ebp - 0xa66], cx
push 0x3d
pop esi
push 0x46
mov word [ebp - 0xa64], si
pop ecx
mov word [ebp - 0xa62], cx
mov word [ebp - 0xa60], bx
mov word [ebp - 0xa5e], ax
push 0x6f
pop eax
push 0x45
pop ecx
mov word [ebp - 0xa5c], si
mov word [ebp - 0xa5a], ax
mov word [ebp - 0xa58], dx
push 0x53
mov word [ebp - 0xa56], bx
mov word [ebp - 0xa54], cx
pop eax
mov word [ebp - 0xa52], ax
push esi
pop eax
mov word [ebp - 0xa50], ax
mov word [ebp - 0xa4e], cx
push 0x46
pop edx
mov word [ebp - 0xa4c], bx
mov word [ebp - 0xa4a], dx
mov word [ebp - 0xa48], ax
mov word [ebp - 0xa46], cx
push 0x50
pop ecx
mov word [ebp - 0xa44], cx
mov word [ebp - 0xa42], cx
mov word [ebp - 0xa40], ax
push 0x44
pop eax
push 0x43
pop ecx
mov word [ebp - 0xa3e], ax
push 0x45
pop eax
mov word [ebp - 0xa3c], cx
mov word [ebp - 0xa3a], ax
push 0x4e
pop eax
mov word [ebp - 0xa38], cx
mov word [ebp - 0xa36], ax
add eax, 0x3c
push 0x3f
pop ecx
mov word [ebp - 0xa34], cx
mov word [ebp - 0xa32], ax
xor eax, eax
mov word [ebp - 0xa30], ax
lea ecx, [ebp - 0xa7c]
mov ax, word [ebp - 0xa7c]
mov esi, dword [edi]
push 0
call fcn.10039ca6
push eax
push edi
call dword [esi + 0x70]
mov ecx, eax
mov esi, 0x86d2
mov eax, dword [0x10201ab4]
lea edi, [esi - 0x2f]
mov ebx, dword [eax + 0xa8]
mov eax, dword [eax + 0x10]
mov edx, dword [eax + 0x48]
mov eax, 0x86ea
mov dword [ebp - 0xd5c], 0x8691
mov word [ebp - 0xd58], ax
add eax, 0xffffffeb
mov word [ebp - 0xd56], ax
mov word [ebp - 0xd54], si
mov word [ebp - 0xd52], di
inc edi
mov word [ebp - 0xd50], ax
lea eax, [esi - 0x30]
mov word [ebp - 0xd4e], ax
add eax, 3
mov word [ebp - 0xd4c], si
add esi, 0xffffffea
mov word [ebp - 0xd4a], di
mov word [ebp - 0xd48], ax
mov word [ebp - 0xd46], si
mov esi, 0x86a9
mov word [ebp - 0xd44], si
mov word [ebp - 0xd42], si
add esi, 0xfffffff8
mov word [ebp - 0xd40], si
mov esi, 0x86a8
mov word [ebp - 0xd3e], si
mov dword [ebp - 0x1004], edx
lea edi, [esi + 0x14]
mov word [ebp - 0xd3c], di
add edi, 0xffffffe8
mov word [ebp - 0xd3a], ax
lea eax, [esi - 7]
mov word [ebp - 0xd38], ax
add eax, 0x52
mov word [ebp - 0xd36], ax
lea eax, [esi + 1]
mov word [ebp - 0xd34], di
lea edi, [esi + 0x14]
mov word [ebp - 0xd32], di
mov word [ebp - 0xd30], ax
add eax, 0x2e
mov word [ebp - 0xd2e], ax
lea eax, [esi - 7]
mov word [ebp - 0xd2c], ax
inc esi
mov word [ebp - 0xd2a], si
lea esi, [edi - 0x14]
mov word [ebp - 0xd28], di
add edi, 0x16
mov word [ebp - 0xd26], si
inc esi
mov word [ebp - 0xd24], ax
mov word [ebp - 0xd22], si
mov word [ebp - 0xd20], di
mov word [ebp - 0xd1e], di
mov word [ebp - 0xd1c], ax
add eax, 5
mov word [ebp - 0xd1a], ax
mov eax, 0x86a7
mov word [ebp - 0xd18], ax
mov word [ebp - 0xd16], si
mov word [ebp - 0xd14], ax
add eax, 0x29
mov word [ebp - 0xd12], ax
mov eax, 0x86a3
mov word [ebp - 0xd10], ax
add eax, 0x49
mov word [ebp - 0xd0e], ax
xor eax, eax
mov word [ebp - 0xd0c], ax
mov ax, word [ebp - 0xd58]
push 0x79
pop eax
mov byte [ebp - 0x4a4], al
mov byte [ebp - 0x4a3], 0x64
push 0x6d
pop eax
mov byte [ebp - 0x4a2], al
push 0x6a
pop eax
mov byte [ebp - 0x4a1], al
mov byte [ebp - 0x4a0], 0x70
push 0x3b
pop eax
mov byte [ebp - 0x49f], al
mov byte [ebp - 0x49e], al
mov byte [ebp - 0x49d], 0x21
mov byte [ebp - 0x49c], 0x66
push 0x79
pop eax
mov byte [ebp - 0x49b], al
mov byte [ebp - 0x49a], 0x6a
push 0x75
pop eax
mov byte [ebp - 0x499], al
mov byte [ebp - 0x498], 0x21
mov byte [ebp - 0x497], al
push 0x73
pop eax
mov byte [ebp - 0x496], al
push 0x62
pop eax
mov byte [ebp - 0x495], al
mov byte [ebp - 0x494], 0x71
mov byte [ebp - 0x493], 0x21
mov byte [ebp - 0x492], 0x67
mov byte [ebp - 0x491], 0x6d
mov byte [ebp - 0x490], al
mov byte [ebp - 0x48f], 0x68
push 0x3e
mov byte [ebp - 0x48e], 0x21
pop eax
mov byte [ebp - 0x48d], al
push 0x3f
pop eax
mov byte [ebp - 0x48c], al
mov byte [ebp - 0x48b], 0x21
push 0x26
pop eax
mov byte [ebp - 0x48a], al
mov byte [ebp - 0x489], 0x65
push 0x2d
pop eax
mov byte [ebp - 0x488], al
mov byte [ebp - 0x487], 0x21
push 0x26
pop eax
mov byte [ebp - 0x486], al
mov byte [ebp - 0x485], 0x65
mov byte [ebp - 0x484], 0
mov al, byte [ebp - 0x4a4]
mov edi, dword [edx]
mov esi, dword [ebx]
push ecx
lea ecx, [ebp - 0xd5c]
call fcn.1000b6ff
push eax
push ebx
call dword [esi + 0x110]
push eax
lea ecx, [ebp - 0x4a4]
call fcn.100cbf67
push eax
push dword [ebp - 0x1004]
call dword [edi + 0x24]
mov eax, 0x80
add esp, 0x10
mov word [ebp - 0xa2c], ax
push 0x49
pop eax
push 0x48
pop ebx
mov word [ebp - 0xa2a], ax
push 0x37
pop ecx
push 0x38
mov word [ebp - 0xa28], bx
pop edx
mov word [ebp - 0xa26], cx
mov word [ebp - 0xa24], ax
push 0x3a
pop eax
push 0x39
pop edi
mov word [ebp - 0xa22], dx
mov word [ebp - 0xa20], bx
mov word [ebp - 0xa1e], ax
push 0x32
pop edx
mov word [ebp - 0xa1c], di
mov word [ebp - 0xa1a], dx
push 0x3d
pop edx
push 0x35
mov word [ebp - 0xa18], dx
pop esi
mov word [ebp - 0xa16], dx
mov word [ebp - 0xa14], si
push 0x3e
pop esi
mov word [ebp - 0xa12], si
push 0x32
pop esi
mov word [ebp - 0xa10], si
mov word [ebp - 0xa0e], di
push 0x35
pop edi
mov word [ebp - 0xa0c], di
push 0x67
pop ebx
mov word [ebp - 0xa0a], bx
mov word [ebp - 0xa08], ax
mov word [ebp - 0xa06], si
push 0x4b
mov word [ebp - 0xa04], dx
pop eax
mov word [ebp - 0xa02], ax
push edi
pop eax
mov word [ebp - 0xa00], ax
mov word [ebp - 0x9fe], dx
push 0x3e
mov word [ebp - 0x9fc], si
pop eax
mov word [ebp - 0x9fa], ax
push edi
pop eax
mov word [ebp - 0x9f8], ax
push 0x48
pop ebx
mov word [ebp - 0x9f6], dx
mov word [ebp - 0x9f4], bx
push 0x3c
mov word [ebp - 0x9f2], bx
mov word [ebp - 0x9f0], ax
pop esi
mov word [ebp - 0x9ee], si
push 0x3b
pop eax
mov word [ebp - 0x9ec], ax
mov word [ebp - 0x9ea], dx
mov word [ebp - 0x9e8], ax
push 0x46
pop eax
mov word [ebp - 0x9e6], ax
add eax, 0x3c
mov word [ebp - 0x9e4], cx
mov word [ebp - 0x9e2], ax
xor eax, eax
mov ebx, dword [ebp - 0x1000]
lea ecx, [ebp - 0xa2c]
mov word [ebp - 0x9e0], ax
mov ax, word [ebp - 0xa2c]
mov esi, dword [ebx]
call fcn.1000b603
push eax
push ebx
call dword [esi + 0x110]
push 0x39
pop edi
test eax, eax
je 0x100aa734
push 0x18
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x1004], eax
mov byte [ebp - 4], 0x15
test eax, eax
je 0x100aa64c
mov ecx, eax
call fcn.10049dde
jmp 0x100aa64e
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1058]
push eax
call fcn.100cc60a
mov eax, dword [0x10201ab4]
mov eax, dword [eax + 0x10]
mov edi, dword [eax + 0x48]
mov eax, 0xbb2d
mov dword [ebp - 0xbbc], 0xbb55
mov word [ebp - 0xbb8], ax
add eax, 9
mov word [ebp - 0xbb6], ax
mov eax, 0xbb39
mov word [ebp - 0xbb4], ax
lea esi, [eax + 3]
inc eax
mov word [ebp - 0xbb2], si
lea edx, [esi + 0x39]
mov word [ebp - 0xbb0], ax
lea ecx, [esi - 0x1b]
lea eax, [esi + 0x33]
mov word [ebp - 0xbae], ax
mov word [ebp - 0xbac], ax
add eax, 0xffffffc1
mov word [ebp - 0xbaa], dx
mov word [ebp - 0xba8], ax
lea eax, [esi - 1]
mov word [ebp - 0xba6], cx
mov word [ebp - 0xba4], dx
mov word [ebp - 0xba2], si
mov word [ebp - 0xba0], ax
add eax, 0xfffffffb
mov word [ebp - 0xb9e], si
mov word [ebp - 0xb9c], cx
lea ecx, [ebp - 0xbbc]
mov word [ebp - 0xb9a], dx
mov word [ebp - 0xb98], ax
xor eax, eax
mov word [ebp - 0xb96], ax
mov ax, word [ebp - 0xbb8]
mov esi, dword [edi]
call fcn.10011265
push eax
push edi
call dword [esi + 0x28]
pop ecx
pop ecx
push 0x39
pop edi
push 0x10
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x1058], eax
mov byte [ebp - 4], 0x16
test eax, eax
je 0x100aa753
mov ecx, eax
call fcn.100810f0
jmp 0x100aa755
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1010]
push eax
call fcn.100cc5da
mov dword [ebp - 0x6e8], 0x4316
mov eax, dword [ebp - 0x6e8]
push 0x7b
pop ecx
xor eax, ecx
mov word [ebp - 0x6e4], ax
mov eax, dword [ebp - 0x6e8]
inc eax
push 0x31
pop ecx
xor eax, ecx
mov word [ebp - 0x6e2], ax
mov eax, dword [ebp - 0x6e8]
add eax, 2
xor eax, edi
mov word [ebp - 0x6e0], ax
mov eax, dword [ebp - 0x6e8]
add eax, 3
push 0x41
pop ecx
xor eax, ecx
mov word [ebp - 0x6de], ax
mov eax, dword [ebp - 0x6e8]
add eax, 4
push 0x32
pop edx
xor eax, edx
mov word [ebp - 0x6dc], ax
mov eax, dword [ebp - 0x6e8]
add eax, 5
xor eax, edx
mov word [ebp - 0x6da], ax
mov eax, dword [ebp - 0x6e8]
add eax, 6
xor eax, edi
mov word [ebp - 0x6d8], ax
mov eax, dword [ebp - 0x6e8]
add eax, 7
xor eax, ecx
mov word [ebp - 0x6d6], ax
mov eax, dword [ebp - 0x6e8]
add eax, 8
push 0x33
pop ecx
xor eax, ecx
mov word [ebp - 0x6d4], ax
mov eax, dword [ebp - 0x6e8]
add eax, 9
push 0x2d
pop esi
xor eax, esi
mov word [ebp - 0x6d2], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0xa
push 0x34
pop ecx
xor eax, ecx
mov word [ebp - 0x6d0], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0xb
push 0x38
pop edx
xor eax, edx
mov word [ebp - 0x6ce], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0xc
xor eax, 0x41
mov word [ebp - 0x6cc], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0xd
xor eax, 0x42
mov word [ebp - 0x6ca], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0xe
xor eax, esi
mov word [ebp - 0x6c8], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0xf
xor eax, ecx
mov word [ebp - 0x6c6], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x10
xor eax, edx
mov word [ebp - 0x6c4], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x11
xor eax, ecx
mov word [ebp - 0x6c2], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x12
xor eax, 0x62
mov word [ebp - 0x6c0], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x13
xor eax, esi
mov word [ebp - 0x6be], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x14
push 0x42
pop edx
xor eax, edx
mov word [ebp - 0x6bc], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x15
push 0x46
pop edx
xor eax, edx
mov word [ebp - 0x6ba], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x16
xor eax, edi
mov word [ebp - 0x6b8], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x17
push 0x35
pop edx
xor eax, edx
mov word [ebp - 0x6b6], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x18
xor eax, esi
mov word [ebp - 0x6b4], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x19
push 0x45
pop esi
xor eax, esi
mov word [ebp - 0x6b2], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x1a
xor eax, ecx
mov word [ebp - 0x6b0], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x1b
xor eax, edi
mov word [ebp - 0x6ae], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x1c
push 0x37
pop ecx
xor eax, ecx
mov word [ebp - 0x6ac], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x1d
xor eax, ecx
mov word [ebp - 0x6aa], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x1e
xor eax, esi
mov word [ebp - 0x6a8], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x1f
xor eax, edi
mov word [ebp - 0x6a6], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x20
xor eax, 0x30
mov word [ebp - 0x6a4], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x21
push 0x31
pop ecx
xor eax, ecx
mov word [ebp - 0x6a2], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x22
xor eax, edx
mov word [ebp - 0x6a0], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x23
xor eax, esi
mov word [ebp - 0x69e], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x24
push 0x32
pop ecx
xor eax, ecx
mov word [ebp - 0x69c], ax
mov eax, dword [ebp - 0x6e8]
add eax, 0x25
xor eax, 0x7d
mov word [ebp - 0x69a], ax
xor eax, eax
mov word [ebp - 0x698], ax
mov ax, word [ebp - 0x6e4]
mov esi, dword [ebx]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
lea ecx, [ebp - 0x6e8]
call fcn.1000b49e
push eax
push ebx
call dword [esi + 0xac]
test eax, eax
jns 0x100aaa94
push eax
lea ecx, [ebp - 0x10c0]
call fcn.100025b7
push 0x101026f0
lea eax, [ebp - 0x10c0]
jmp 0x100aea4d
lea eax, [ebp - 0x106c]
push eax
push 0xf02a
call fcn.10001ea3
test eax, eax
js 0x100aab92
mov eax, dword [ebp - 0x106c]
push 0x100c08b4
push connect
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [0x10201ab4]
mov eax, dword [eax + 0x10]
mov edi, dword [eax + 0x48]
mov eax, 0xc8e7
mov dword [ebp - 0xcb4], 0xc89f
mov word [ebp - 0xcb0], ax
lea esi, [eax + 0x15]
add eax, 0xc
mov word [ebp - 0xcae], si
lea edx, [esi - 0x3d]
mov word [ebp - 0xcac], ax
lea ecx, [esi - 0xf]
lea eax, [esi - 6]
mov word [ebp - 0xcaa], ax
add eax, 0xfffffffa
mov word [ebp - 0xca8], ax
lea eax, [esi - 0x57]
mov word [ebp - 0xca6], ax
mov word [ebp - 0xca4], ax
add eax, 0x55
mov word [ebp - 0xca2], dx
mov word [ebp - 0xca0], cx
mov word [ebp - 0xc9e], ax
lea eax, [esi - 0x10]
mov word [ebp - 0xc9c], ax
add eax, 3
mov word [ebp - 0xc9a], cx
lea ecx, [ebp - 0xcb4]
mov word [ebp - 0xc98], ax
lea eax, [esi - 0x11]
mov word [ebp - 0xc96], ax
xor eax, eax
mov word [ebp - 0xc94], dx
mov word [ebp - 0xc92], si
mov word [ebp - 0xc90], ax
mov ax, word [ebp - 0xcb0]
mov esi, dword [edi]
call fcn.1000b7b7
push eax
push edi
call dword [esi + 0x28]
pop ecx
pop ecx
push 0x3f
mov eax, 0x82
mov word [ebp - 0x9dc], ax
pop eax
push 0x37
pop ecx
push 0x4d
pop edi
push 0x3c
pop esi
mov word [ebp - 0x9da], ax
push 0x38
mov word [ebp - 0x9d8], cx
pop ecx
push 0x4b
mov word [ebp - 0x9d6], di
mov word [ebp - 0x9d4], si
mov word [ebp - 0x9d2], cx
mov word [ebp - 0x9d0], ax
pop eax
push 0x39
pop edx
push 0x34
mov word [ebp - 0x9ce], ax
pop eax
push 0x49
mov word [ebp - 0x9cc], dx
pop ecx
mov word [ebp - 0x9ca], ax
push 0x40
mov word [ebp - 0x9c8], cx
mov word [ebp - 0x9c6], dx
pop edx
push 0x3b
mov word [ebp - 0x9c4], dx
pop edx
push 0x38
mov word [ebp - 0x9c2], si
pop ecx
mov word [ebp - 0x9c0], ax
push 0x69
mov word [ebp - 0x9be], dx
pop edx
push 0x3a
mov word [ebp - 0x9bc], cx
mov word [ebp - 0x9ba], dx
pop edx
push 0x48
pop esi
mov word [ebp - 0x9b8], dx
mov word [ebp - 0x9b6], ax
mov word [ebp - 0x9b4], si
push 0x4a
pop esi
mov word [ebp - 0x9b2], si
push 0x3f
pop esi
mov word [ebp - 0x9b0], si
push 0x4c
mov word [ebp - 0x9ae], dx
pop edx
push 0x4b
pop esi
mov word [ebp - 0x9ac], ax
mov word [ebp - 0x9aa], dx
push 0x37
mov word [ebp - 0x9a8], si
pop eax
mov word [ebp - 0x9a6], si
mov word [ebp - 0x9a4], ax
push 0x3c
mov word [ebp - 0x9a2], cx
mov word [ebp - 0x9a0], si
pop esi
push 0x40
pop eax
mov word [ebp - 0x99e], si
mov word [ebp - 0x99c], ax
push 0x3f
pop eax
mov word [ebp - 0x99a], ax
push 0x3e
pop eax
mov word [ebp - 0x998], ax
lea ecx, [ebp - 0x9dc]
push 0x3b
pop eax
mov word [ebp - 0x996], ax
add eax, 0x49
mov word [ebp - 0x994], dx
mov word [ebp - 0x992], ax
xor eax, eax
mov word [ebp - 0x990], ax
mov ax, word [ebp - 0x9dc]
mov esi, dword [ebx]
call fcn.10039ae6
push eax
push ebx
call dword [esi + 0x110]
test eax, eax
je 0x100aae33
push 0x24
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x1010], eax
mov byte [ebp - 4], 0x17
test eax, eax
je 0x100aad41
push dword [0x10201ab0]
mov ecx, eax
call fcn.100965ea
jmp 0x100aad43
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1020]
push eax
call fcn.100cc685
mov eax, dword [0x10201ab4]
mov edx, 0xf337
mov eax, dword [eax + 0x10]
lea esi, [edx - 0x11]
lea ecx, [edx + 0x38]
mov edi, dword [eax + 0x48]
lea eax, [edx - 0xb]
mov dword [ebp - 0xd08], 0xf34f
mov word [ebp - 0xd04], dx
mov word [ebp - 0xd02], ax
add eax, 0xfffffff7
mov word [ebp - 0xd00], ax
lea eax, [edx - 0x17]
mov word [ebp - 0xcfe], si
mov word [ebp - 0xcfc], ax
add eax, 0x55
mov word [ebp - 0xcfa], ax
mov word [ebp - 0xcf8], ax
lea eax, [edx + 5]
mov word [ebp - 0xcf6], cx
mov word [ebp - 0xcf4], dx
mov word [ebp - 0xcf2], ax
add eax, 0xffffffec
mov word [ebp - 0xcf0], ax
lea eax, [edx - 0x16]
mov word [ebp - 0xcee], cx
mov word [ebp - 0xcec], si
mov word [ebp - 0xcea], ax
add eax, 0x1a
mov word [ebp - 0xce8], si
mov word [ebp - 0xce6], ax
lea eax, [edx - 0xb]
mov word [ebp - 0xce4], cx
lea ecx, [ebp - 0xd08]
mov word [ebp - 0xce2], ax
xor eax, eax
mov word [ebp - 0xce0], ax
mov ax, word [ebp - 0xd04]
mov esi, dword [edi]
call fcn.100023d4
push eax
push edi
call dword [esi + 0x28]
pop ecx
pop ecx
push 0x4d
pop edi
mov ecx, dword [0x10201ab4]
push 0x41
pop eax
push eax
lea ecx, [ecx + 0xb0]
call fcn.100c88da
mov eax, dword [0x10201ab0]
mov edx, 0x6786
mov eax, dword [eax + 0x15c]
lea ecx, [edx - 5]
mov dword [ebp - 0xdb0], 0x67b6
lea esi, [edx + 0x15]
mov dword [ebp - 0x1004], eax
mov eax, 0x67cd
mov word [ebp - 0xdac], ax
add eax, 0x27
mov word [ebp - 0xdaa], ax
lea eax, [edx - 2]
mov word [ebp - 0xda8], dx
mov word [ebp - 0xda6], ax
inc eax
mov word [ebp - 0xda4], ax
lea eax, [edx - 6]
mov word [ebp - 0xda2], ax
add eax, 0x73
mov word [ebp - 0xda0], ax
lea eax, [edx - 3]
mov word [ebp - 0xd9e], cx
mov word [ebp - 0xd9c], ax
add eax, 0x72
mov word [ebp - 0xd9a], si
mov word [ebp - 0xd98], cx
mov word [ebp - 0xd96], dx
add edx, 0x6c
mov word [ebp - 0xd94], ax
lea eax, [ecx + 1]
mov word [ebp - 0xd92], dx
lea edx, [esi + 0x5a]
mov word [ebp - 0xd90], si
mov word [ebp - 0xd8e], ax
add eax, 0x51
mov word [ebp - 0xd8c], cx
add ecx, 0xd
mov word [ebp - 0xd8a], cx
mov word [ebp - 0xd88], ax
lea eax, [esi + 0x58]
mov word [ebp - 0xd86], si
mov word [ebp - 0xd84], cx
mov word [ebp - 0xd82], ax
mov word [ebp - 0xd80], dx
add edx, 0xfffffffd
mov word [ebp - 0xd7e], ax
mov word [ebp - 0xd7c], si
add esi, 0xffffffe9
mov word [ebp - 0xd7a], si
mov word [ebp - 0xd78], dx
lea edx, [eax - 0x6e]
mov word [ebp - 0xd76], dx
add eax, 0xffffff94
mov word [ebp - 0xd74], ax
lea eax, [edx + 0x72]
mov word [ebp - 0xd72], dx
mov word [ebp - 0xd70], si
mov word [ebp - 0xd6e], dx
mov word [ebp - 0xd6c], ax
add eax, 0xffffff89
mov word [ebp - 0xd6a], cx
lea ecx, [ebp - 0xdb0]
mov word [ebp - 0xd68], ax
lea eax, [edx + 0xa]
mov word [ebp - 0xd66], ax
add eax, 0x66
mov word [ebp - 0xd64], ax
lea eax, [edx + 0x46]
mov word [ebp - 0xd62], ax
xor eax, eax
mov word [ebp - 0xd60], ax
mov ax, word [ebp - 0xdac]
mov esi, dword [ebx]
call fcn.1000b6ff
push eax
push ebx
call dword [esi + 0x110]
test eax, eax
je 0x100ab2cd
push dword [ebp - 0x1004]
mov ecx, dword [ebp - 0x1030]
call fcn.100929aa
mov esi, eax
mov dword [ebp - 0x1010], esi
test esi, esi
jns 0x100ab1c4
and dword [ebp - 0x1068], 0
and dword [ebp - 0x1064], 0
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x1068]
push eax
call fcn.10002412
pop ecx
push 0x57
pop eax
mov word [ebp - 0x86c], ax
mov word [ebp - 0x86a], ax
push 0x38
pop ecx
mov word [ebp - 0x868], cx
mov word [ebp - 0x866], di
mov word [ebp - 0x864], ax
push 0x59
pop eax
mov word [ebp - 0x862], ax
push 0x4e
pop eax
mov word [ebp - 0x860], ax
push 0x2a
pop eax
mov word [ebp - 0x85e], ax
push 0x62
pop eax
mov word [ebp - 0x85c], ax
push 0x75
pop eax
mov word [ebp - 0x85a], ax
push 0x6b
pop eax
mov word [ebp - 0x858], ax
push 0x71
pop edx
mov word [ebp - 0x856], dx
mov word [ebp - 0x854], ax
push 0x56
pop edx
mov word [ebp - 0x852], dx
push 0x79
pop edx
mov word [ebp - 0x850], dx
mov word [ebp - 0x84e], ax
push 0x6e
pop edx
mov word [ebp - 0x84c], dx
push 0x50
pop edx
mov word [ebp - 0x84a], dx
mov word [ebp - 0x848], ax
push 0x73
pop eax
mov word [ebp - 0x846], ax
push 0x76
pop eax
mov word [ebp - 0x844], ax
xor eax, eax
mov word [ebp - 0x842], cx
mov ecx, 0xf76
mov word [ebp - 0x840], ax
mov ax, word [ebp - 0x86c]
mov dword [ebp - 0x810], 0xf53
mov word [ebp - 0x80c], cx
lea eax, [ecx - 0x37]
mov word [ebp - 0x80a], ax
add eax, 0xffffffe1
mov word [ebp - 0x808], ax
lea eax, [ecx - 0x13]
mov word [ebp - 0x806], cx
mov word [ebp - 0x804], ax
add eax, 8
mov word [ebp - 0x802], ax
lea eax, [ecx - 0x4b]
mov word [ebp - 0x800], ax
xor eax, eax
mov word [ebp - 0x7fe], ax
mov ax, word [ebp - 0x80c]
mov edi, dword [0x101ef2d0]
push esi
lea ecx, [ebp - 0x86c]
call fcn.1005d27f
push eax
lea ecx, [ebp - 0x810]
call fcn.10011237
mov esi, dword [ebp - 0x1068]
push eax
push esi
call dword [edi + 0x5b4]
mov eax, dword [0x10201ab0]
add esp, 0x10
mov edi, dword [eax + 0x14c]
mov eax, dword [esi]
push esi
mov ebx, dword [edi]
call dword [eax + 0x14]
push eax
push 0xa
push 1
push edi
call dword [ebx + 0x20]
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1064]
test ecx, ecx
je 0x100ab1be
call fcn.10002bb1
mov ebx, dword [ebp - 0x1000]
mov eax, dword [0x10201ab4]
mov ecx, 0x84
push 0x6f
mov eax, dword [eax + 0x10]
mov edi, dword [eax + 0x48]
mov word [ebp - 0x89c], cx
pop eax
mov word [ebp - 0x89a], ax
push 0x78
pop eax
mov word [ebp - 0x898], ax
push 0x75
pop edx
push 0x7b
mov word [ebp - 0x896], dx
pop eax
mov word [ebp - 0x894], ax
push 0x46
pop eax
mov word [ebp - 0x892], ax
mov word [ebp - 0x890], ax
push 0x2c
pop eax
mov word [ebp - 0x88e], ax
mov word [ebp - 0x88c], cx
push 0x77
pop ecx
mov word [ebp - 0x88a], cx
push 0x6d
pop ecx
mov word [ebp - 0x888], cx
push 0x73
pop esi
mov word [ebp - 0x886], si
mov word [ebp - 0x884], cx
mov word [ebp - 0x882], ax
mov word [ebp - 0x880], dx
push 0x7a
pop ecx
mov word [ebp - 0x87e], cx
add ecx, 6
mov word [ebp - 0x87c], dx
mov word [ebp - 0x87a], cx
lea ecx, [edx + 0xf]
mov word [ebp - 0x878], ax
push 0x31
pop eax
mov word [ebp - 0x876], ax
push 0x3c
pop eax
mov word [ebp - 0x874], ax
push 0x44
pop eax
push dword [ebp - 0x1010]
mov word [ebp - 0x872], ax
xor eax, eax
mov word [ebp - 0x870], cx
lea ecx, [ebp - 0x89c]
mov word [ebp - 0x86e], ax
mov ax, word [ebp - 0x89c]
mov esi, dword [edi]
call fcn.10039e47
push eax
push edi
call dword [esi + 0x28]
add esp, 0xc
mov esi, dword [ebp - 0x1018]
push esi
push 0xf00f
push dword [0x101ef2d0]
call fcn.100128bf
mov eax, dword [0x101ef2d0]
add esp, 0xc
call dword [eax + 0x160]
push dword [esi]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov eax, dword [0x10201ab4]
push 0x6e
pop ecx
push 0x77
mov eax, dword [eax + 0x10]
mov edi, dword [eax + 0x48]
mov byte [ebp - 0x470], 0x83
mov byte [ebp - 0x46f], cl
pop eax
mov byte [ebp - 0x46e], al
push 0x74
pop eax
mov byte [ebp - 0x46d], al
push 0x7a
pop eax
mov byte [ebp - 0x46c], al
push 0x45
pop eax
mov byte [ebp - 0x46b], al
mov byte [ebp - 0x46a], al
push 0x7e
mov byte [ebp - 0x469], 0x2b
pop eax
mov byte [ebp - 0x468], al
push 0x73
pop eax
mov byte [ebp - 0x467], al
push 0x3d
pop eax
mov byte [ebp - 0x466], al
mov byte [ebp - 0x465], 0x2b
mov byte [ebp - 0x464], cl
lea ecx, [ebp - 0x470]
mov byte [ebp - 0x463], 0
mov al, byte [ebp - 0x470]
mov esi, dword [edi]
call fcn.100cbf22
push eax
push edi
call dword [esi + 0x24]
pop ecx
pop ecx
mov ecx, dword [0x10201ab4]
push 0x46
pop eax
push eax
lea ecx, [ecx + 0xb0]
call fcn.100c88da
mov dword [ebp - 0x694], 0x8ac4
mov eax, dword [ebp - 0x694]
xor eax, 0x7b
mov word [ebp - 0x690], ax
mov eax, dword [ebp - 0x694]
inc eax
push 0x36
pop ecx
xor eax, ecx
mov word [ebp - 0x68e], ax
mov eax, dword [ebp - 0x694]
add eax, 2
push 0x35
pop ecx
xor eax, ecx
mov word [ebp - 0x68c], ax
mov eax, dword [ebp - 0x694]
add eax, 3
xor eax, 0x41
mov word [ebp - 0x68a], ax
mov eax, dword [ebp - 0x694]
add eax, 4
push 0x34
pop edi
xor eax, edi
mov word [ebp - 0x688], ax
mov eax, dword [ebp - 0x694]
add eax, 5
xor eax, 0x45
mov word [ebp - 0x686], ax
mov eax, dword [ebp - 0x694]
add eax, 6
xor eax, edi
mov word [ebp - 0x684], ax
mov eax, dword [ebp - 0x694]
add eax, 7
push 0x38
pop edx
xor eax, edx
mov word [ebp - 0x682], ax
mov eax, dword [ebp - 0x694]
add eax, 8
push 0x39
pop ecx
xor eax, ecx
mov word [ebp - 0x680], ax
mov eax, dword [ebp - 0x694]
add eax, 9
push 0x2d
pop esi
xor eax, esi
mov word [ebp - 0x67e], ax
mov eax, dword [ebp - 0x694]
add eax, 0xa
xor eax, 0x32
mov word [ebp - 0x67c], ax
mov eax, dword [ebp - 0x694]
add eax, 0xb
xor eax, 0x30
mov word [ebp - 0x67a], ax
mov eax, dword [ebp - 0x694]
add eax, 0xc
xor eax, 0x36
mov word [ebp - 0x678], ax
mov eax, dword [ebp - 0x694]
add eax, 0xd
xor eax, 0x43
mov word [ebp - 0x676], ax
mov eax, dword [ebp - 0x694]
add eax, 0xe
xor eax, esi
mov word [ebp - 0x674], ax
mov eax, dword [ebp - 0x694]
add eax, 0xf
xor eax, edi
mov word [ebp - 0x672], ax
mov eax, dword [ebp - 0x694]
add eax, 0x10
xor eax, 0x35
mov word [ebp - 0x670], ax
mov eax, dword [ebp - 0x694]
add eax, 0x11
xor eax, 0x64
mov word [ebp - 0x66e], ax
mov eax, dword [ebp - 0x694]
add eax, 0x12
xor eax, 0x31
mov word [ebp - 0x66c], ax
mov eax, dword [ebp - 0x694]
add eax, 0x13
xor eax, esi
mov word [ebp - 0x66a], ax
mov eax, dword [ebp - 0x694]
add eax, 0x14
xor eax, ecx
mov word [ebp - 0x668], ax
mov eax, dword [ebp - 0x694]
push 0x33
add eax, 0x15
pop ecx
xor eax, ecx
mov word [ebp - 0x666], ax
mov eax, dword [ebp - 0x694]
add eax, 0x16
push 0x36
pop ecx
xor eax, ecx
mov word [ebp - 0x664], ax
mov eax, dword [ebp - 0x694]
add eax, 0x17
xor eax, 0x46
mov word [ebp - 0x662], ax
mov eax, dword [ebp - 0x694]
add eax, 0x18
xor eax, esi
mov word [ebp - 0x660], ax
mov eax, dword [ebp - 0x694]
add eax, 0x19
xor eax, ecx
mov word [ebp - 0x65e], ax
mov eax, dword [ebp - 0x694]
add eax, 0x1a
xor eax, 0x45
mov word [ebp - 0x65c], ax
mov eax, dword [ebp - 0x694]
add eax, 0x1b
push 0x42
pop esi
xor eax, esi
mov word [ebp - 0x65a], ax
mov eax, dword [ebp - 0x694]
add eax, 0x1c
xor eax, 0x44
mov word [ebp - 0x658], ax
mov eax, dword [ebp - 0x694]
add eax, 0x1d
push 0x33
pop ecx
xor eax, ecx
mov word [ebp - 0x656], ax
mov eax, dword [ebp - 0x694]
add eax, 0x1e
push 0x37
pop ecx
xor eax, ecx
mov word [ebp - 0x654], ax
mov eax, dword [ebp - 0x694]
add eax, 0x1f
push 0x32
pop ecx
xor eax, ecx
mov word [ebp - 0x652], ax
mov eax, dword [ebp - 0x694]
add eax, 0x20
xor eax, esi
mov word [ebp - 0x650], ax
mov eax, dword [ebp - 0x694]
add eax, 0x21
push 0x31
pop ecx
xor eax, ecx
mov word [ebp - 0x64e], ax
mov eax, dword [ebp - 0x694]
add eax, 0x22
push 0x46
pop esi
xor eax, esi
mov word [ebp - 0x64c], ax
mov eax, dword [ebp - 0x694]
add eax, 0x23
xor eax, ecx
mov word [ebp - 0x64a], ax
mov eax, dword [ebp - 0x694]
add eax, 0x24
xor eax, edx
mov word [ebp - 0x648], ax
mov eax, dword [ebp - 0x694]
add eax, 0x25
xor eax, 0x7d
mov word [ebp - 0x646], ax
xor eax, eax
mov word [ebp - 0x644], ax
mov ax, word [ebp - 0x690]
mov esi, dword [ebx]
lea ecx, [ebp - 0x694]
call fcn.1000b49e
push eax
push ebx
call dword [esi + 0x110]
test eax, eax
je 0x100ab97f
push dword [ebp - 0x1004]
mov ecx, dword [ebp - 0x102c]
call fcn.10086a35
mov esi, eax
mov dword [ebp - 0x1018], esi
test esi, esi
jns 0x100ab87d
and dword [ebp - 0x1060], 0
and dword [ebp - 0x105c], 0
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x1060]
push eax
call fcn.10002412
pop ecx
push 0x56
pop edx
push 0x37
pop ecx
push 0x4c
pop eax
push 0x58
mov word [ebp - 0x83c], dx
mov word [ebp - 0x83a], dx
mov word [ebp - 0x838], cx
mov word [ebp - 0x836], ax
pop eax
push 0x4d
mov word [ebp - 0x834], dx
mov word [ebp - 0x832], ax
pop eax
mov word [ebp - 0x830], ax
push 0x29
pop eax
mov word [ebp - 0x82e], ax
push 0x61
pop eax
mov word [ebp - 0x82c], ax
push 0x6e
pop eax
mov word [ebp - 0x82a], ax
add eax, 0x15
mov word [ebp - 0x828], ax
push 0x55
pop eax
mov word [ebp - 0x826], ax
push 0x78
pop eax
mov word [ebp - 0x824], ax
push 0x6a
pop edx
push 0x6d
pop eax
mov word [ebp - 0x822], dx
mov word [ebp - 0x820], ax
push 0x4f
pop eax
mov word [ebp - 0x81e], ax
push 0x72
pop eax
mov word [ebp - 0x81c], dx
mov word [ebp - 0x81a], ax
push 0x75
pop eax
mov word [ebp - 0x818], ax
xor eax, eax
mov word [ebp - 0x816], cx
mov word [ebp - 0x814], ax
mov ax, word [ebp - 0x83c]
push 0x2d
pop eax
push 0x74
mov word [ebp - 0x7bc], ax
pop ecx
mov word [ebp - 0x7ba], cx
push 0x7b
pop ecx
push 0x38
pop edx
mov word [ebp - 0x7b8], cx
mov word [ebp - 0x7b6], ax
push 0x40
pop eax
mov word [ebp - 0x7b4], dx
mov word [ebp - 0x7b2], ax
add eax, 0x40
mov word [ebp - 0x7b0], ax
xor eax, eax
mov word [ebp - 0x7ae], ax
lea ecx, [ebp - 0x83c]
mov ax, word [ebp - 0x7bc]
mov edi, dword [0x101ef2d0]
push esi
call fcn.100cc189
push eax
lea ecx, [ebp - 0x7bc]
call fcn.1004e38c
mov esi, dword [ebp - 0x1060]
push eax
push esi
call dword [edi + 0x5b4]
mov eax, dword [0x10201ab0]
add esp, 0x10
mov edi, dword [eax + 0x14c]
mov eax, dword [esi]
push esi
mov ebx, dword [edi]
call dword [eax + 0x14]
push eax
push 0xa
push 1
push edi
call dword [ebx + 0x20]
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x105c]
test ecx, ecx
je 0x100ab877
call fcn.10002bb1
mov ebx, dword [ebp - 0x1000]
mov eax, dword [0x10201ab4]
mov esi, 0x9568
push dword [ebp - 0x1018]
mov eax, dword [eax + 0x10]
lea edx, [esi + 0x11]
lea ecx, [esi - 0x38]
mov edi, dword [eax + 0x48]
lea eax, [esi + 0xb]
mov dword [ebp - 0xbec], 0x9510
mov word [ebp - 0xbe8], si
mov word [ebp - 0xbe6], ax
add eax, 9
mov word [ebp - 0xbe4], ax
lea eax, [esi + 0x17]
mov word [ebp - 0xbe2], dx
mov word [ebp - 0xbe0], ax
add eax, 0xffffffab
mov word [ebp - 0xbde], ax
mov word [ebp - 0xbdc], ax
lea eax, [esi + 0xd]
mov word [ebp - 0xbda], cx
mov word [ebp - 0xbd8], si
mov word [ebp - 0xbd6], ax
add eax, 0xfffffff5
mov word [ebp - 0xbd4], ax
lea eax, [esi + 0x16]
mov word [ebp - 0xbd2], cx
mov word [ebp - 0xbd0], dx
mov word [ebp - 0xbce], ax
add eax, 0xffffffe6
mov word [ebp - 0xbcc], dx
mov word [ebp - 0xbca], ax
lea eax, [esi - 0x33]
mov word [ebp - 0xbc8], cx
lea ecx, [ebp - 0xbec]
mov word [ebp - 0xbc6], ax
add eax, 0xffffffeb
mov word [ebp - 0xbc4], ax
lea eax, [esi - 0x40]
mov word [ebp - 0xbc2], ax
xor eax, eax
mov word [ebp - 0xbc0], si
mov word [ebp - 0xbbe], ax
mov ax, word [ebp - 0xbe8]
mov esi, dword [edi]
call fcn.10014a39
push eax
push edi
call dword [esi + 0x28]
add esp, 0xc
push 0x34
pop edi
mov ecx, dword [0x10201ab4]
push 0x4b
pop eax
push eax
lea ecx, [ecx + 0xb0]
call fcn.100c88da
push 0x40
mov eax, 0x82
mov word [ebp - 0x98c], ax
pop eax
push 0x3f
pop edx
push 0x37
pop esi
mov word [ebp - 0x98a], ax
push 0x3a
pop ecx
push 0x3d
pop eax
mov word [ebp - 0x988], dx
mov word [ebp - 0x986], si
mov word [ebp - 0x984], dx
mov word [ebp - 0x982], cx
mov word [ebp - 0x980], ax
push 0x4c
pop ecx
mov word [ebp - 0x97e], cx
push 0x3e
pop ecx
mov word [ebp - 0x97c], dx
mov word [ebp - 0x97a], di
mov word [ebp - 0x978], cx
push 0x40
pop ecx
mov word [ebp - 0x976], cx
push 0x4a
pop ecx
mov word [ebp - 0x974], si
mov word [ebp - 0x972], cx
push 0x3b
pop ecx
mov word [ebp - 0x970], di
mov word [ebp - 0x96e], cx
mov word [ebp - 0x96c], ax
push 0x68
pop eax
mov word [ebp - 0x96a], ax
push 0x3c
pop eax
mov word [ebp - 0x968], ax
push 0x49
pop ecx
mov word [ebp - 0x966], di
mov word [ebp - 0x964], cx
mov word [ebp - 0x962], ax
push 0x3d
pop eax
mov word [ebp - 0x960], ax
push 0x4b
pop eax
mov word [ebp - 0x95e], ax
push 0x3e
pop eax
mov word [ebp - 0x95c], di
push 0x48
pop edi
mov word [ebp - 0x95a], ax
push 0x4d
pop eax
mov word [ebp - 0x958], di
mov word [ebp - 0x956], ax
push 0x3a
mov word [ebp - 0x954], dx
pop ecx
mov word [ebp - 0x952], cx
mov word [ebp - 0x950], ax
push 0x38
mov word [ebp - 0x94e], di
pop eax
mov word [ebp - 0x94c], ax
mov word [ebp - 0x94a], si
push 0x4b
pop eax
mov word [ebp - 0x948], ax
lea ecx, [ebp - 0x98c]
push 0x3e
pop eax
mov word [ebp - 0x946], ax
push 0x4c
pop eax
mov word [ebp - 0x944], ax
add eax, 0x38
mov word [ebp - 0x942], ax
xor eax, eax
mov word [ebp - 0x940], ax
mov ax, word [ebp - 0x98c]
mov esi, dword [ebx]
call fcn.10039ae6
push eax
push ebx
call dword [esi + 0x110]
test eax, eax
je 0x100abc5b
push 0x14
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x1018], eax
mov byte [ebp - 4], 0x1a
test eax, eax
je 0x100abb3d
push dword [0x10201ab0]
mov ecx, eax
call fcn.100949f5
jmp 0x100abb3f
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1050]
push eax
call fcn.100cc66d
mov eax, dword [0x10201ab4]
mov ecx, 0x9665
mov eax, dword [eax + 0x10]
lea esi, [ecx + 0xd]
lea edx, [esi - 9]
mov edi, dword [eax + 0x48]
lea eax, [ecx + 0x19]
mov dword [ebp - 0xc54], 0x961d
mov word [ebp - 0xc50], cx
mov word [ebp - 0xc4e], ax
add eax, 0xfffffff3
mov word [ebp - 0xc4c], ax
lea eax, [ecx + 0xf]
mov word [ebp - 0xc4a], ax
add eax, 0xffffffb3
mov word [ebp - 0xc48], si
mov word [ebp - 0xc46], ax
mov word [ebp - 0xc44], ax
lea eax, [ecx - 0x28]
mov word [ebp - 0xc42], ax
add eax, 0x30
mov word [ebp - 0xc40], cx
mov word [ebp - 0xc3e], ax
lea eax, [ecx + 0x10]
mov word [ebp - 0xc3c], ax
add ecx, 0xe
add eax, 7
mov word [ebp - 0xc3a], ax
lea eax, [esi - 2]
mov word [ebp - 0xc38], cx
mov word [ebp - 0xc36], dx
mov word [ebp - 0xc34], si
add esi, 2
mov word [ebp - 0xc32], ax
add eax, 0xffffffcd
mov word [ebp - 0xc30], ax
mov word [ebp - 0xc2e], si
mov word [ebp - 0xc2c], cx
lea ecx, [ebp - 0xc54]
mov word [ebp - 0xc2a], si
mov word [ebp - 0xc28], dx
mov word [ebp - 0xc26], ax
lea eax, [edx + 0x15]
mov word [ebp - 0xc24], ax
xor eax, eax
mov word [ebp - 0xc22], ax
mov ax, word [ebp - 0xc50]
mov esi, dword [edi]
call fcn.10039f64
push eax
push edi
call dword [esi + 0x28]
pop ecx
pop ecx
mov ecx, dword [0x10201ab4]
push 0x50
pop eax
push eax
lea ecx, [ecx + 0xb0]
call fcn.100c88da
mov dword [ebp - 0xffc], 0x1845
mov ecx, 0x1874
mov eax, 0x183e
mov word [ebp - 0xff8], ax
add eax, 0xffffffc9
mov word [ebp - 0xff6], ax
mov word [ebp - 0xff4], cx
lea edi, [ecx + 2]
mov word [ebp - 0xff2], di
lea eax, [ecx + 1]
mov word [ebp - 0xff0], ax
lea esi, [ecx - 0xc]
add eax, 0xfffffffb
lea edx, [ecx - 0x6e]
mov word [ebp - 0xfee], ax
lea eax, [ecx - 0x71]
mov word [ebp - 0xfec], ax
add eax, 0x7a
mov word [ebp - 0xfea], cx
add ecx, 8
mov word [ebp - 0xfe8], dx
mov word [ebp - 0xfe6], si
mov word [ebp - 0xfe4], cx
mov word [ebp - 0xfe2], ax
lea eax, [esi + 0xa]
mov word [ebp - 0xfe0], dx
add edx, 0x6d
mov word [ebp - 0xfde], di
add edi, 0xfffffffb
mov word [ebp - 0xfdc], si
mov word [ebp - 0xfda], di
mov word [ebp - 0xfd8], dx
mov word [ebp - 0xfd6], ax
add eax, 0xb
mov word [ebp - 0xfd4], cx
lea ecx, [esi - 0x62]
mov word [ebp - 0xfd2], si
mov word [ebp - 0xfd0], ax
mov word [ebp - 0xfce], cx
add ecx, 0x6e
mov word [ebp - 0xfcc], cx
lea ecx, [esi - 0x64]
mov word [ebp - 0xfca], cx
mov word [ebp - 0xfc8], si
add esi, 0xffffff9e
mov word [ebp - 0xfc6], ax
lea eax, [ecx + 0x73]
mov word [ebp - 0xfc4], si
mov word [ebp - 0xfc2], di
mov word [ebp - 0xfc0], ax
mov word [ebp - 0xfbe], dx
lea edx, [ecx + 0x6c]
mov word [ebp - 0xfbc], dx
add edx, 0xd
mov word [ebp - 0xfba], dx
lea edx, [ecx + 0x72]
mov word [ebp - 0xfb8], dx
mov word [ebp - 0xfb6], ax
add eax, 0xffffffc1
mov word [ebp - 0xfb4], di
mov word [ebp - 0xfb2], cx
lea ecx, [ebp - 0xffc]
mov word [ebp - 0xfb0], si
mov word [ebp - 0xfae], ax
xor eax, eax
mov word [ebp - 0xfac], ax
mov ax, word [ebp - 0xff8]
mov esi, dword [ebx]
call fcn.1000b6ff
push eax
push ebx
call dword [esi + 0x110]
test eax, eax
je 0x100ac108
push 0x3bc
call fcn.100ccadc
mov esi, eax
pop ecx
mov dword [ebp - 0x1050], esi
mov byte [ebp - 4], 0x1b
test esi, esi
je 0x100abfed
mov dword [ebp - 0x77c], 0x1dc0
mov ecx, dword [ebp - 0x77c]
push 0x76
xor ecx, 0x2f
mov word [ebp - 0x778], cx
mov eax, dword [ebp - 0x77c]
inc eax
pop ecx
xor eax, ecx
mov word [ebp - 0x776], ax
mov eax, dword [ebp - 0x77c]
add eax, 2
xor eax, 0x65
mov word [ebp - 0x774], ax
mov eax, dword [ebp - 0x77c]
add eax, 3
push 0x72
pop ecx
xor eax, ecx
mov word [ebp - 0x772], ax
mov eax, dword [ebp - 0x77c]
add eax, 4
push 0x6f
pop edx
xor eax, edx
mov word [ebp - 0x770], ax
mov eax, dword [ebp - 0x77c]
add eax, 5
push 0x6e
pop ecx
xor eax, ecx
mov word [ebp - 0x76e], ax
mov eax, dword [ebp - 0x77c]
add eax, 6
push 0x69
pop ecx
xor eax, ecx
mov word [ebp - 0x76c], ax
mov eax, dword [ebp - 0x77c]
add eax, 7
xor eax, 0x63
mov word [ebp - 0x76a], ax
mov eax, dword [ebp - 0x77c]
add eax, 8
push 0x61
pop edi
xor eax, edi
mov word [ebp - 0x768], ax
xor eax, eax
mov word [ebp - 0x766], ax
mov ax, word [ebp - 0x778]
mov dword [ebp - 0x434], 0x1d
mov eax, dword [ebp - 0x434]
xor eax, 0x76
mov byte [ebp - 0x430], al
mov eax, dword [ebp - 0x434]
inc al
xor eax, 0x65
mov byte [ebp - 0x42f], al
mov eax, dword [ebp - 0x434]
add al, 2
xor eax, 0x72
mov byte [ebp - 0x42e], al
mov eax, dword [ebp - 0x434]
add al, 3
xor eax, edx
mov byte [ebp - 0x42d], al
mov eax, dword [ebp - 0x434]
add al, 4
push 0x6e
pop edx
xor eax, edx
mov byte [ebp - 0x42c], al
mov eax, dword [ebp - 0x434]
add al, 5
xor eax, ecx
mov byte [ebp - 0x42b], al
mov eax, dword [ebp - 0x434]
add al, 6
xor eax, 0x63
mov byte [ebp - 0x42a], al
mov eax, dword [ebp - 0x434]
add al, 7
xor eax, edi
mov byte [ebp - 0x429], al
mov eax, dword [ebp - 0x434]
add al, 8
xor eax, 0x2e
mov byte [ebp - 0x428], al
mov eax, dword [ebp - 0x434]
add al, 9
push 0x78
pop ecx
xor eax, ecx
mov byte [ebp - 0x427], al
mov eax, dword [ebp - 0x434]
add al, 0xa
xor eax, 0x65
mov byte [ebp - 0x426], al
mov eax, dword [ebp - 0x434]
push 0x6d
add al, 0xb
mov byte [ebp - 0x424], 0
pop ecx
xor eax, ecx
lea ecx, [ebp - 0x77c]
mov byte [ebp - 0x425], al
mov al, byte [ebp - 0x430]
call fcn.10010ec6
push eax
lea ecx, [ebp - 0x434]
call fcn.10010e10
push eax
mov ecx, esi
call fcn.1007b88e
jmp 0x100abfef
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1034]
push eax
call fcn.100cc592
mov eax, dword [0x10201ab4]
mov eax, dword [eax + 0x10]
mov edi, dword [eax + 0x48]
mov eax, 0xcbbe
mov dword [ebp - 0xc20], 0xcbc6
mov word [ebp - 0xc1c], ax
add eax, 0xffffffe7
mov word [ebp - 0xc1a], ax
mov eax, 0xcbaa
mov word [ebp - 0xc18], ax
lea esi, [eax + 5]
mov word [ebp - 0xc16], si
lea ecx, [eax - 1]
mov word [ebp - 0xc14], cx
lea edx, [esi + 0x37]
add eax, 0x52
mov word [ebp - 0xc12], ax
mov word [ebp - 0xc10], ax
lea eax, [esi + 1]
mov word [ebp - 0xc0e], dx
mov word [ebp - 0xc0c], ax
add eax, 0xfffffff3
mov word [ebp - 0xc0a], ax
lea eax, [esi + 5]
mov word [ebp - 0xc08], ax
add eax, 0xfffffff1
mov word [ebp - 0xc06], cx
dec ecx
mov word [ebp - 0xc04], cx
mov word [ebp - 0xc02], si
mov word [ebp - 0xc00], ax
lea eax, [esi - 8]
mov word [ebp - 0xbfe], ax
add eax, 0xb
mov word [ebp - 0xbfc], dx
mov word [ebp - 0xbfa], si
mov word [ebp - 0xbf8], cx
lea ecx, [ebp - 0xc20]
mov word [ebp - 0xbf6], si
mov word [ebp - 0xbf4], ax
lea eax, [esi - 0xa]
mov word [ebp - 0xbf2], dx
mov word [ebp - 0xbf0], ax
xor eax, eax
mov word [ebp - 0xbee], ax
mov ax, word [ebp - 0xc1c]
mov esi, dword [edi]
call fcn.10039f64
push eax
push edi
call dword [esi + 0x28]
pop ecx
pop ecx
mov ecx, dword [0x10201ab4]
push 0x55
pop eax
push eax
lea ecx, [ecx + 0xb0]
call fcn.100c88da
mov dword [ebp - 0x640], 0x4d5c
mov eax, dword [ebp - 0x640]
push 0x7b
pop ecx
xor eax, ecx
mov word [ebp - 0x63c], ax
mov eax, dword [ebp - 0x640]
inc eax
push 0x31
pop ecx
xor eax, ecx
mov word [ebp - 0x63a], ax
mov eax, dword [ebp - 0x640]
add eax, 2
xor eax, 0x30
mov word [ebp - 0x638], ax
mov eax, dword [ebp - 0x640]
add eax, 3
push 0x38
pop esi
xor eax, esi
mov word [ebp - 0x636], ax
mov eax, dword [ebp - 0x640]
add eax, 4
xor eax, ecx
mov word [ebp - 0x634], ax
mov eax, dword [ebp - 0x640]
add eax, 5
xor eax, 0x30
mov word [ebp - 0x632], ax
mov eax, dword [ebp - 0x640]
add eax, 6
push 0x34
pop ecx
xor eax, ecx
mov word [ebp - 0x630], ax
mov eax, dword [ebp - 0x640]
add eax, 7
push 0x35
pop edx
xor eax, edx
mov word [ebp - 0x62e], ax
mov eax, dword [ebp - 0x640]
add eax, 8
xor eax, 0x41
mov word [ebp - 0x62c], ax
mov eax, dword [ebp - 0x640]
add eax, 9
push 0x2d
pop edi
xor eax, edi
mov word [ebp - 0x62a], ax
mov eax, dword [ebp - 0x640]
add eax, 0xa
push 0x46
pop edx
xor eax, edx
mov word [ebp - 0x628], ax
mov eax, dword [ebp - 0x640]
add eax, 0xb
push 0x36
pop edx
xor eax, edx
mov word [ebp - 0x626], ax
mov eax, dword [ebp - 0x640]
add eax, 0xc
push 0x42
pop edx
xor eax, edx
mov word [ebp - 0x624], ax
mov eax, dword [ebp - 0x640]
add eax, 0xd
xor eax, 0x43
mov word [ebp - 0x622], ax
mov eax, dword [ebp - 0x640]
add eax, 0xe
xor eax, edi
mov word [ebp - 0x620], ax
mov eax, dword [ebp - 0x640]
add eax, 0xf
xor eax, ecx
mov word [ebp - 0x61e], ax
mov eax, dword [ebp - 0x640]
add eax, 0x10
xor eax, 0x30
mov word [ebp - 0x61c], ax
mov eax, dword [ebp - 0x640]
add eax, 0x11
push 0x39
pop edx
xor eax, edx
mov word [ebp - 0x61a], ax
mov eax, dword [ebp - 0x640]
add eax, 0x12
xor eax, 0x31
mov word [ebp - 0x618], ax
mov eax, dword [ebp - 0x640]
add eax, 0x13
xor eax, edi
mov word [ebp - 0x616], ax
mov eax, dword [ebp - 0x640]
add eax, 0x14
push 0x41
pop edx
xor eax, edx
mov word [ebp - 0x614], ax
mov eax, dword [ebp - 0x640]
add eax, 0x15
xor eax, 0x37
mov word [ebp - 0x612], ax
mov eax, dword [ebp - 0x640]
add eax, 0x16
xor eax, 0x44
mov word [ebp - 0x610], ax
mov eax, dword [ebp - 0x640]
add eax, 0x17
xor eax, 0x31
mov word [ebp - 0x60e], ax
mov eax, dword [ebp - 0x640]
add eax, 0x18
xor eax, edi
mov word [ebp - 0x60c], ax
mov eax, dword [ebp - 0x640]
add eax, 0x19
xor eax, edx
mov word [ebp - 0x60a], ax
mov eax, dword [ebp - 0x640]
add eax, 0x1a
xor eax, 0x31
mov word [ebp - 0x608], ax
mov eax, dword [ebp - 0x640]
add eax, 0x1b
xor eax, 0x44
mov word [ebp - 0x606], ax
mov eax, dword [ebp - 0x640]
add eax, 0x1c
xor eax, 0x30
mov word [ebp - 0x604], ax
mov eax, dword [ebp - 0x640]
add eax, 0x1d
xor eax, ecx
mov word [ebp - 0x602], ax
mov eax, dword [ebp - 0x640]
add eax, 0x1e
xor eax, 0x36
mov word [ebp - 0x600], ax
mov eax, dword [ebp - 0x640]
add eax, 0x1f
xor eax, 0x33
mov word [ebp - 0x5fe], ax
mov eax, dword [ebp - 0x640]
add eax, 0x20
xor eax, esi
mov word [ebp - 0x5fc], ax
mov eax, dword [ebp - 0x640]
add eax, 0x21
xor eax, edx
mov word [ebp - 0x5fa], ax
mov eax, dword [ebp - 0x640]
add eax, 0x22
push 0x35
pop edx
xor eax, edx
mov word [ebp - 0x5f8], ax
mov eax, dword [ebp - 0x640]
add eax, 0x23
xor eax, esi
mov word [ebp - 0x5f6], ax
mov eax, dword [ebp - 0x640]
add eax, 0x24
xor eax, ecx
lea ecx, [ebp - 0x640]
mov word [ebp - 0x5f4], ax
mov eax, dword [ebp - 0x640]
add eax, 0x25
xor eax, 0x7d
mov word [ebp - 0x5f2], ax
xor eax, eax
mov word [ebp - 0x5f0], ax
mov ax, word [ebp - 0x63c]
mov esi, dword [ebx]
call fcn.1000b49e
push eax
push ebx
call dword [esi + 0x110]
test eax, eax
je 0x100ac60f
push 0x98
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x1034], eax
mov byte [ebp - 4], 0x1c
test eax, eax
je 0x100ac450
mov ecx, eax
call fcn.1005d922
jmp 0x100ac452
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1038]
push eax
call fcn.100cc655
mov eax, dword [0x10201ab4]
push 0x78
pop ecx
push 0x6c
mov eax, dword [eax + 0x10]
mov edi, dword [eax + 0x48]
mov dword [ebp - 0x544], 0x3f33
mov eax, dword [ebp - 0x544]
xor eax, ecx
mov word [ebp - 0x540], ax
mov eax, dword [ebp - 0x544]
inc eax
xor eax, 0x63
mov word [ebp - 0x53e], ax
mov eax, dword [ebp - 0x544]
add eax, 2
pop ecx
xor eax, ecx
mov word [ebp - 0x53c], ax
mov eax, dword [ebp - 0x544]
add eax, 3
push 0x69
pop edx
xor eax, edx
mov word [ebp - 0x53a], ax
mov eax, dword [ebp - 0x544]
add eax, 4
push 0x6f
pop esi
xor eax, esi
mov word [ebp - 0x538], ax
mov eax, dword [ebp - 0x544]
add eax, 5
push 0x3a
pop ecx
xor eax, ecx
mov word [ebp - 0x536], ax
mov eax, dword [ebp - 0x544]
add eax, 6
xor eax, ecx
mov word [ebp - 0x534], ax
mov eax, dword [ebp - 0x544]
add eax, 7
xor eax, 0x20
mov word [ebp - 0x532], ax
mov eax, dword [ebp - 0x544]
add eax, 8
push 0x78
pop ecx
xor eax, ecx
mov word [ebp - 0x530], ax
mov eax, dword [ebp - 0x544]
add eax, 9
push 0x6e
pop ecx
xor eax, ecx
mov word [ebp - 0x52e], ax
mov eax, dword [ebp - 0x544]
add eax, 0xa
xor eax, esi
mov word [ebp - 0x52c], ax
mov eax, dword [ebp - 0x544]
add eax, 0xb
push 0x61
pop ecx
xor eax, ecx
mov word [ebp - 0x52a], ax
mov eax, dword [ebp - 0x544]
add eax, 0xc
xor eax, 0x20
mov word [ebp - 0x528], ax
mov eax, dword [ebp - 0x544]
add eax, 0xd
xor eax, edx
mov word [ebp - 0x526], ax
mov eax, dword [ebp - 0x544]
add eax, 0xe
push 0x6e
pop ecx
xor eax, ecx
mov word [ebp - 0x524], ax
mov eax, dword [ebp - 0x544]
add eax, 0xf
xor eax, edx
mov word [ebp - 0x522], ax
mov eax, dword [ebp - 0x544]
add eax, 0x10
push 0x74
pop ecx
xor eax, ecx
lea ecx, [ebp - 0x544]
mov word [ebp - 0x520], ax
mov eax, dword [ebp - 0x544]
add eax, 0x11
xor eax, 0x20
mov word [ebp - 0x51e], ax
mov eax, dword [ebp - 0x544]
add eax, 0x12
xor eax, 0x63
mov word [ebp - 0x51c], ax
xor eax, eax
mov word [ebp - 0x51a], ax
mov ax, word [ebp - 0x540]
mov esi, dword [edi]
call fcn.10010e68
push eax
push edi
call dword [esi + 0x28]
pop ecx
pop ecx
mov eax, dword [0x10201ab4]
mov ecx, 0xc043
mov edi, dword [eax + 0xa8]
lea esi, [ecx + 3]
mov dword [ebp - 0xe04], 0xc002
lea edx, [ecx - 3]
mov eax, 0xc079
mov word [ebp - 0xe00], ax
add eax, 0xffffffce
mov word [ebp - 0xdfe], ax
lea eax, [ecx - 0x13]
mov word [ebp - 0xdfc], cx
mov word [ebp - 0xdfa], ax
add eax, 0x11
mov word [ebp - 0xdf8], ax
lea eax, [ecx - 9]
mov word [ebp - 0xdf6], ax
mov word [ebp - 0xdf4], si
mov word [ebp - 0xdf2], cx
add ecx, 0xffffffec
mov word [ebp - 0xdf0], dx
inc eax
mov word [ebp - 0xdee], cx
mov word [ebp - 0xdec], ax
lea eax, [esi - 0x15]
mov word [ebp - 0xdea], ax
add eax, 0x16
mov word [ebp - 0xde8], dx
add edx, 0xfffffff6
mov word [ebp - 0xde6], ax
lea eax, [esi - 5]
mov word [ebp - 0xde4], cx
mov word [ebp - 0xde2], dx
mov word [ebp - 0xde0], ax
add eax, 0xfffffff2
mov word [ebp - 0xdde], ax
lea eax, [esi - 0xc]
mov word [ebp - 0xddc], dx
lea edx, [esi + 1]
mov word [ebp - 0xdda], cx
mov word [ebp - 0xdd8], ax
add eax, 7
mov word [ebp - 0xdd6], ax
mov word [ebp - 0xdd4], dx
mov word [ebp - 0xdd2], dx
mov word [ebp - 0xdd0], cx
lea ecx, [esi - 0x15]
mov word [ebp - 0xdce], cx
mov word [ebp - 0xdcc], si
add esi, 0xfffffff4
mov word [ebp - 0xdca], si
mov word [ebp - 0xdc8], dx
mov word [ebp - 0xdc6], ax
lea eax, [edx - 7]
mov word [ebp - 0xdc4], ax
add eax, 0xfffffff7
mov word [ebp - 0xdc2], si
mov word [ebp - 0xdc0], ax
lea eax, [edx - 0x13]
mov word [ebp - 0xdbe], cx
lea ecx, [ebp - 0xe04]
mov word [ebp - 0xdbc], ax
mov eax, edx
mov word [ebp - 0xdba], ax
add edx, 0xffffffef
add eax, 0x38
mov word [ebp - 0xdb8], dx
mov word [ebp - 0xdb6], ax
xor eax, eax
mov word [ebp - 0xdb4], ax
mov ax, word [ebp - 0xe00]
mov esi, dword [edi]
call fcn.1000b6ff
push eax
push edi
call dword [esi + 0x110]
test eax, eax
je 0x100ac899
push 0x8c
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x1038], eax
mov byte [ebp - 4], 0x1d
test eax, eax
je 0x100ac7cc
mov ecx, eax
call fcn.1009c606
jmp 0x100ac7ce
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x103c]
push eax
call fcn.100cc540
mov eax, dword [0x10201ab4]
mov eax, dword [eax + 0x10]
mov edi, dword [eax + 0x48]
mov eax, 0xe63f
mov dword [ebp - 0xc8c], 0xe647
mov word [ebp - 0xc88], ax
lea esi, [eax - 0x1b]
add eax, 0xffffffec
mov word [ebp - 0xc86], si
lea ecx, [esi + 4]
mov word [ebp - 0xc84], ax
lea edx, [esi + 0x43]
lea eax, [esi + 0xa]
mov word [ebp - 0xc82], ax
add eax, 0x4f
mov word [ebp - 0xc80], cx
mov word [ebp - 0xc7e], ax
mov word [ebp - 0xc7c], ax
lea eax, [esi + 1]
mov word [ebp - 0xc7a], dx
mov word [ebp - 0xc78], cx
lea ecx, [ebp - 0xc8c]
mov word [ebp - 0xc76], ax
add eax, 0xc
mov word [ebp - 0xc74], ax
lea eax, [esi + 0x11]
mov word [ebp - 0xc72], ax
xor eax, eax
mov word [ebp - 0xc70], dx
mov word [ebp - 0xc6e], si
mov word [ebp - 0xc6c], ax
mov ax, word [ebp - 0xc88]
mov esi, dword [edi]
call fcn.1000b813
push eax
push edi
call dword [esi + 0x28]
pop ecx
pop ecx
mov ecx, dword [0x10201ab4]
push 0x5a
lea ecx, [ecx + 0xb0]
call fcn.100c88da
mov eax, dword [0x10201ab4]
push 0x39
pop edx
push 0x4d
mov edi, dword [eax + 0xa8]
mov eax, 0x82
mov word [ebp - 0x93c], ax
pop eax
push 0x49
pop ecx
push 0x4a
mov word [ebp - 0x93a], dx
mov word [ebp - 0x938], ax
mov word [ebp - 0x936], cx
pop ecx
mov word [ebp - 0x934], cx
push 0x4c
pop ecx
push 0x3f
pop esi
mov word [ebp - 0x932], cx
mov word [ebp - 0x930], si
push 0x38
pop esi
mov word [ebp - 0x92e], si
push 0x49
pop esi
mov word [ebp - 0x92c], si
push 0x34
pop ecx
mov word [ebp - 0x92a], cx
mov word [ebp - 0x928], dx
mov word [ebp - 0x926], dx
mov word [ebp - 0x924], si
push 0x3b
pop esi
mov word [ebp - 0x922], dx
mov word [ebp - 0x920], cx
mov word [ebp - 0x91e], si
push 0x6c
pop esi
mov word [ebp - 0x91c], si
push 0x3e
pop esi
push 0x3f
mov word [ebp - 0x91a], dx
pop edx
mov word [ebp - 0x918], si
push 0x4b
mov word [ebp - 0x916], cx
pop esi
mov word [ebp - 0x914], dx
mov word [ebp - 0x912], si
push 0x3d
pop esi
mov word [ebp - 0x910], si
push 0x3c
pop esi
mov word [ebp - 0x90e], si
mov word [ebp - 0x90c], cx
push 0x37
pop ecx
mov word [ebp - 0x90a], cx
push 0x3b
mov word [ebp - 0x908], dx
pop ecx
mov word [ebp - 0x906], ax
mov word [ebp - 0x904], dx
mov word [ebp - 0x902], cx
push 0x3d
mov word [ebp - 0x900], cx
pop ecx
push 0x38
pop esi
mov word [ebp - 0x8fe], cx
mov word [ebp - 0x8fc], si
push 0x4a
pop ecx
mov word [ebp - 0x8fa], cx
lea ecx, [ebp - 0x93c]
mov word [ebp - 0x8f8], ax
push 0x4b
pop eax
mov word [ebp - 0x8f6], ax
push 0x3c
pop eax
mov word [ebp - 0x8f4], ax
add eax, 0x48
mov word [ebp - 0x8f2], ax
xor eax, eax
mov word [ebp - 0x8f0], ax
mov ax, word [ebp - 0x93c]
mov esi, dword [edi]
call fcn.10039ae6
push eax
push edi
call dword [esi + 0x110]
test eax, eax
je 0x100acbf8
push 8
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x103c], eax
mov byte [ebp - 4], 0x1e
test eax, eax
je 0x100aca62
mov ecx, dword [ebp - 0x1020]
push dword [ecx]
mov ecx, eax
call fcn.1007c654
jmp 0x100aca64
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x104c]
push eax
call fcn.100cc5aa
mov eax, dword [0x10201ab4]
push 0x78
pop ecx
push 0x6c
mov eax, dword [eax + 0x10]
mov edi, dword [eax + 0x48]
mov dword [ebp - 0x710], 0x7575
mov eax, dword [ebp - 0x710]
xor eax, ecx
mov word [ebp - 0x70c], ax
mov eax, dword [ebp - 0x710]
inc eax
xor eax, 0x63
mov word [ebp - 0x70a], ax
mov eax, dword [ebp - 0x710]
add eax, 2
pop ecx
xor eax, ecx
mov word [ebp - 0x708], ax
mov eax, dword [ebp - 0x710]
add eax, 3
push 0x69
pop edx
xor eax, edx
mov word [ebp - 0x706], ax
mov eax, dword [ebp - 0x710]
add eax, 4
push 0x6f
pop ecx
xor eax, ecx
mov word [ebp - 0x704], ax
mov eax, dword [ebp - 0x710]
add eax, 5
push 0x3a
pop ecx
xor eax, ecx
mov word [ebp - 0x702], ax
mov eax, dword [ebp - 0x710]
add eax, 6
xor eax, ecx
mov word [ebp - 0x700], ax
mov eax, dword [ebp - 0x710]
add eax, 7
xor eax, 0x20
mov word [ebp - 0x6fe], ax
mov eax, dword [ebp - 0x710]
add eax, 8
push 0x77
pop ecx
xor eax, ecx
mov word [ebp - 0x6fc], ax
mov eax, dword [ebp - 0x710]
add eax, 9
xor eax, 0x64
mov word [ebp - 0x6fa], ax
mov eax, dword [ebp - 0x710]
add eax, 0xa
xor eax, 0x20
mov word [ebp - 0x6f8], ax
mov eax, dword [ebp - 0x710]
add eax, 0xb
xor eax, edx
mov word [ebp - 0x6f6], ax
mov eax, dword [ebp - 0x710]
add eax, 0xc
push 0x6e
pop ecx
xor eax, ecx
mov word [ebp - 0x6f4], ax
mov eax, dword [ebp - 0x710]
add eax, 0xd
xor eax, edx
mov word [ebp - 0x6f2], ax
mov eax, dword [ebp - 0x710]
push 0x74
add eax, 0xe
pop ecx
xor eax, ecx
lea ecx, [ebp - 0x710]
mov word [ebp - 0x6f0], ax
mov eax, dword [ebp - 0x710]
add eax, 0xf
xor eax, 0x20
mov word [ebp - 0x6ee], ax
mov eax, dword [ebp - 0x710]
add eax, 0x10
xor eax, 0x63
mov word [ebp - 0x6ec], ax
xor eax, eax
mov word [ebp - 0x6ea], ax
mov ax, word [ebp - 0x70c]
mov esi, dword [edi]
call fcn.10010ef5
push eax
push edi
call dword [esi + 0x28]
pop ecx
pop ecx
push 0x1c
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x104c], eax
mov byte [ebp - 4], 0x1f
test eax, eax
je 0x100acc17
mov ecx, eax
call fcn.100a8f20
jmp 0x100acc19
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1054]
push eax
call fcn.100cc540
mov eax, dword [0x10201ab4]
push 0x7e
mov eax, dword [eax + 0x10]
mov edi, dword [eax + 0x48]
pop eax
mov word [ebp - 0x7fc], ax
push 0x69
pop eax
push 0x72
mov word [ebp - 0x7fa], ax
pop ecx
mov word [ebp - 0x7f8], cx
push 0x6f
pop ecx
mov word [ebp - 0x7f6], cx
push 0x75
pop edx
mov word [ebp - 0x7f4], dx
push 0x40
pop edx
mov word [ebp - 0x7f2], dx
mov word [ebp - 0x7f0], dx
push 0x26
pop esi
mov word [ebp - 0x7ee], si
push 0x76
pop edx
mov word [ebp - 0x7ec], dx
push 0x79
pop edx
mov word [ebp - 0x7ea], dx
mov word [ebp - 0x7e8], si
mov word [ebp - 0x7e6], cx
push 0x74
pop edx
mov word [ebp - 0x7e4], dx
mov word [ebp - 0x7e2], cx
push 0x7a
pop ecx
mov word [ebp - 0x7e0], cx
lea ecx, [ebp - 0x7fc]
mov word [ebp - 0x7de], si
mov word [ebp - 0x7dc], ax
xor eax, eax
mov word [ebp - 0x7da], ax
mov ax, word [ebp - 0x7fc]
mov esi, dword [edi]
call fcn.10039d3a
push eax
push edi
call dword [esi + 0x28]
pop ecx
pop ecx
lea eax, [ebp - 0x1078]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
push 0x40
pop edx
push 0x4a
pop ecx
push 0x3e
mov eax, 0x84
mov word [ebp - 0xb6c], ax
pop eax
mov word [ebp - 0xb6a], dx
mov word [ebp - 0xb68], cx
push 0x4b
mov word [ebp - 0xb66], cx
mov word [ebp - 0xb64], ax
pop eax
push 0x3c
pop edi
mov word [ebp - 0xb62], ax
push 0x39
mov word [ebp - 0xb60], di
mov word [ebp - 0xb5e], cx
pop eax
mov word [ebp - 0xb5c], ax
push 0x36
pop esi
mov word [ebp - 0xb5a], si
mov word [ebp - 0xb58], cx
mov word [ebp - 0xb56], dx
push 0x41
pop edx
mov word [ebp - 0xb54], dx
mov word [ebp - 0xb52], ax
push 0x3d
pop eax
mov word [ebp - 0xb50], si
mov word [ebp - 0xb4e], ax
push 0x6d
pop eax
mov word [ebp - 0xb4c], ax
push 0x3a
pop ecx
mov word [ebp - 0xb4a], di
push 0x42
mov word [ebp - 0xb48], cx
pop eax
mov word [ebp - 0xb46], si
mov word [ebp - 0xb44], ax
push 0x3d
mov word [ebp - 0xb42], di
pop eax
mov word [ebp - 0xb40], dx
mov word [ebp - 0xb3e], ax
push 0x4c
pop eax
mov word [ebp - 0xb3c], si
push 0x42
pop esi
mov word [ebp - 0xb3a], ax
push 0x4a
pop edi
push 0x3f
pop edx
mov word [ebp - 0xb38], si
mov word [ebp - 0xb36], di
push 0x40
mov word [ebp - 0xb34], dx
pop eax
mov word [ebp - 0xb32], ax
push 0x39
mov word [ebp - 0xb30], si
pop eax
mov word [ebp - 0xb2e], ax
push 0x3d
pop eax
mov word [ebp - 0xb2c], ax
mov word [ebp - 0xb2a], di
mov word [ebp - 0xb28], cx
lea ecx, [ebp - 0xb6c]
push 0x3b
mov word [ebp - 0xb26], dx
pop eax
mov word [ebp - 0xb24], ax
add eax, 0x4b
mov word [ebp - 0xb22], ax
xor eax, eax
mov word [ebp - 0xb20], ax
mov ax, word [ebp - 0xb6c]
mov esi, dword [ebx]
lea eax, [ebp - 0x1078]
push 8
push eax
call fcn.10010f9b
push eax
push ebx
call dword [esi + 0xdc]
test eax, eax
jns 0x100ace9c
push eax
lea ecx, [ebp - 0x10a8]
call fcn.100025b7
push 0x101026f0
lea eax, [ebp - 0x10a8]
jmp 0x100aea4d
push 0x38
pop eax
push eax
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x1054], eax
mov byte [ebp - 4], 0x20
test eax, eax
je 0x100acebd
mov ecx, eax
call fcn.10082685
jmp 0x100acebf
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x100c]
push eax
call fcn.100cc540
mov eax, dword [0x10201ab0]
test eax, eax
jne 0x100acedc
xor ecx, ecx
jmp 0x100acee2
mov ecx, dword [eax + 0x170]
call fcn.1005142f
mov ecx, dword [0x10201ab4]
push 0x64
lea ecx, [ecx + 0xb0]
call fcn.100c88da
mov eax, dword [0x10201ab4]
push 0x78
pop ecx
push 0x6c
mov eax, dword [eax + 0x10]
pop esi
push 0x69
pop edx
mov edi, dword [eax + 0x48]
mov dword [ebp - 0x4e8], 0xe3a1
mov eax, dword [ebp - 0x4e8]
xor eax, ecx
mov word [ebp - 0x4e4], ax
mov eax, dword [ebp - 0x4e8]
inc eax
xor eax, 0x63
mov word [ebp - 0x4e2], ax
mov eax, dword [ebp - 0x4e8]
add eax, 2
xor eax, esi
mov word [ebp - 0x4e0], ax
mov eax, dword [ebp - 0x4e8]
add eax, 3
xor eax, edx
mov word [ebp - 0x4de], ax
mov eax, dword [ebp - 0x4e8]
add eax, 4
push 0x6f
pop edx
xor eax, edx
mov word [ebp - 0x4dc], ax
mov eax, dword [ebp - 0x4e8]
add eax, 5
push 0x3a
pop ecx
xor eax, ecx
mov word [ebp - 0x4da], ax
mov eax, dword [ebp - 0x4e8]
add eax, 6
xor eax, ecx
mov word [ebp - 0x4d8], ax
mov eax, dword [ebp - 0x4e8]
add eax, 7
xor eax, 0x20
mov word [ebp - 0x4d6], ax
mov eax, dword [ebp - 0x4e8]
add eax, 8
push 0x75
pop ecx
xor eax, ecx
mov word [ebp - 0x4d4], ax
mov eax, dword [ebp - 0x4e8]
add eax, 9
xor eax, 0x70
mov word [ebp - 0x4d2], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0xa
xor eax, 0x64
mov word [ebp - 0x4d0], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0xb
xor eax, 0x63
mov word [ebp - 0x4ce], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0xc
xor eax, 0x20
mov word [ebp - 0x4cc], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0xd
xor eax, 0x63
mov word [ebp - 0x4ca], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0xe
xor eax, esi
mov word [ebp - 0x4c8], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0xf
xor eax, edx
mov word [ebp - 0x4c6], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x10
push 0x73
pop edx
xor eax, edx
mov word [ebp - 0x4c4], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x11
xor eax, 0x65
mov word [ebp - 0x4c2], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x12
xor eax, 0x20
mov word [ebp - 0x4c0], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x13
push 0x72
pop ecx
xor eax, ecx
mov word [ebp - 0x4be], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x14
xor eax, 0x65
mov word [ebp - 0x4bc], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x15
xor eax, edx
mov word [ebp - 0x4ba], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x16
push 0x75
pop ecx
xor eax, ecx
mov word [ebp - 0x4b8], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x17
xor eax, esi
mov word [ebp - 0x4b6], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x18
push 0x74
pop ecx
xor eax, ecx
mov word [ebp - 0x4b4], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x19
xor eax, 0x20
mov word [ebp - 0x4b2], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x1a
push 0x3d
pop ecx
xor eax, ecx
mov word [ebp - 0x4b0], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x1b
push 0x3e
pop ecx
xor eax, ecx
mov word [ebp - 0x4ae], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x1c
xor eax, 0x20
mov word [ebp - 0x4ac], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x1d
xor eax, 0x25
mov word [ebp - 0x4aa], ax
mov eax, dword [ebp - 0x4e8]
add eax, 0x1e
xor eax, 0x64
mov word [ebp - 0x4a8], ax
xor eax, eax
mov word [ebp - 0x4a6], ax
mov ax, word [ebp - 0x4e4]
mov ecx, dword [0x10201ab4]
mov esi, dword [edi]
lea ecx, [ecx + 0xb0]
call fcn.100bd3f7
push eax
lea ecx, [ebp - 0x4e8]
call fcn.100399c0
push eax
push edi
call dword [esi + 0x28]
mov eax, dword [0x10201ab4]
push dword [eax + 0xa8]
push dword [eax + 0x84]
push dword [eax + 0xc]
lea eax, [ebp - 0x218]
push 0x208
push eax
call fcn.100c2b79
mov eax, dword [0x10201ab4]
mov esi, 0xfb5d
add esp, 0x20
mov eax, dword [eax + 0x10]
lea edx, [esi - 5]
lea ecx, [esi - 0x4c]
mov edi, dword [eax + 0x48]
mov eax, 0xfb49
mov dword [ebp - 0xcdc], 0xfb31
mov word [ebp - 0xcd8], ax
add eax, 9
mov word [ebp - 0xcd6], ax
lea eax, [esi + 1]
mov word [ebp - 0xcd4], si
mov word [ebp - 0xcd2], dx
mov word [ebp - 0xcd0], ax
add eax, 0xffffffad
mov word [ebp - 0xcce], ax
mov word [ebp - 0xccc], ax
lea eax, [esi - 0x1a]
mov word [ebp - 0xcca], cx
mov word [ebp - 0xcc8], ax
add eax, 0x27
mov word [ebp - 0xcc6], dx
mov word [ebp - 0xcc4], cx
lea ecx, [ebp - 0xcdc]
mov word [ebp - 0xcc2], ax
lea eax, [esi - 0x49]
mov word [ebp - 0xcc0], ax
add eax, 0x2e
mov word [ebp - 0xcbe], si
mov word [ebp - 0xcbc], ax
lea eax, [esi + 0xf]
mov word [ebp - 0xcba], ax
xor eax, eax
mov word [ebp - 0xcb8], ax
mov ax, word [ebp - 0xcd8]
mov esi, dword [edi]
lea eax, [ebp - 0x218]
push eax
call fcn.1000b7b7
push eax
push edi
call dword [esi + 0x28]
mov eax, dword [0x10201ab4]
lea edx, [ebp - 0x101c]
add esp, 0xc
mov eax, dword [eax + 0x84]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2a8]
test eax, eax
js 0x100ad344
and dword [ebp - 0x1004], 0
cmp dword [ebp - 0x101c], 0x200
je 0x100ad2f9
cmp dword [ebp - 0x101c], 0x8664
je 0x100ad2f9
cmp dword [ebp - 0x101c], 0xaa64
jne 0x100ad303
mov dword [ebp - 0x1004], 2
jmp 0x100ad303
mov dword [ebp - 0x1004], 1
mov eax, dword [0x10201ab4]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0xa8]
lea eax, [ebp - 0x218]
push eax
push 0
push dword [ebp - 0x1004]
mov edi, dword [ecx + 0x38]
push dword [ecx]
mov eax, dword [edx]
push edx
mov esi, dword [edi + 4]
call dword [eax + 0x174]
push eax
push 0x2007
push 0x3003
lea ecx, [edi + 4]
call dword [esi + 8]
jmp 0x100ad39f
mov eax, dword [0x10201ab4]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x84]
mov edi, dword [eax + 0xa8]
mov eax, dword [ecx + 0x38]
mov esi, dword [ecx]
add eax, 4
mov dword [ebp - 0x100c], eax
mov ebx, dword [eax]
lea eax, [ebp - 0x218]
push eax
mov eax, dword [edx]
push 0
push edx
call dword [eax + 0xb8]
push eax
mov eax, dword [edi]
push esi
push edi
call dword [eax + 0x174]
mov ecx, dword [ebp - 0x100c]
push eax
push 0x2007
push 0x3003
call dword [ebx + 8]
mov ebx, dword [ebp - 0x1000]
mov ecx, dword [0x101ef2c0]
push 0x2104
call fcn.1006287e
mov dword [ebp - 0xe58], 0xe272
mov eax, 0xe209
mov word [ebp - 0xe54], ax
add eax, 0x28
mov word [ebp - 0xe52], ax
mov eax, 0xe246
mov word [ebp - 0xe50], ax
lea esi, [eax - 2]
mov word [ebp - 0xe4e], si
lea ecx, [eax - 0x12]
mov word [ebp - 0xe4c], cx
lea edi, [esi + 0x1b]
dec eax
lea edx, [esi - 0xe]
mov word [ebp - 0xe4a], ax
lea eax, [esi - 3]
mov word [ebp - 0xe48], si
mov word [ebp - 0xe46], ax
add eax, 0xfffffff6
mov word [ebp - 0xe44], ax
lea eax, [esi - 2]
mov word [ebp - 0xe42], di
mov word [ebp - 0xe40], cx
add ecx, 0xfffffffc
mov word [ebp - 0xe3e], ax
add eax, 4
mov word [ebp - 0xe3c], dx
mov word [ebp - 0xe3a], cx
mov word [ebp - 0xe38], di
mov word [ebp - 0xe36], ax
lea eax, [esi - 0x30]
mov word [ebp - 0xe34], si
add esi, 0xfffffffd
mov word [ebp - 0xe32], ax
mov word [ebp - 0xe30], ax
add eax, 0x31
mov word [ebp - 0xe2e], di
mov word [ebp - 0xe2c], cx
mov word [ebp - 0xe2a], cx
lea ecx, [edi - 0x14]
mov word [ebp - 0xe28], ax
lea eax, [edi - 0x18]
mov word [ebp - 0xe26], dx
mov word [ebp - 0xe24], di
mov word [ebp - 0xe22], dx
add edx, 0xa
mov word [ebp - 0xe20], si
mov word [ebp - 0xe1e], dx
mov word [ebp - 0xe1c], cx
mov word [ebp - 0xe1a], si
mov word [ebp - 0xe18], ax
add eax, 0xfffffffc
mov word [ebp - 0xe16], dx
mov word [ebp - 0xe14], cx
lea ecx, [ebp - 0xe58]
mov word [ebp - 0xe12], ax
lea eax, [edi - 0x19]
mov word [ebp - 0xe10], si
mov word [ebp - 0xe0e], ax
add eax, 0xffffffeb
mov word [ebp - 0xe0c], ax
lea eax, [edi - 0x50]
mov word [ebp - 0xe0a], ax
mov edi, 0x110
xor eax, eax
mov word [ebp - 0xe08], ax
mov ax, word [ebp - 0xe54]
mov esi, dword [ebx]
call fcn.1000b6ff
push eax
push ebx
call dword [esi + edi]
test eax, eax
je 0x100ad57b
push 0x20
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x100c], eax
mov byte [ebp - 4], 0x21
test eax, eax
je 0x100ad554
mov ecx, eax
call fcn.10092a6a
jmp 0x100ad556
xor eax, eax
mov byte [ebp - 4], 0x13
mov esi, dword [ebp - 0x1048]
mov ecx, esi
push eax
call fcn.100cc50d
mov eax, dword [0x101ef2d0]
call dword [eax + 0x160]
push dword [esi]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov dword [ebp - 0x598], 0x53ba
mov eax, dword [ebp - 0x598]
push 0x7b
pop ecx
xor eax, ecx
mov word [ebp - 0x594], ax
mov eax, dword [ebp - 0x598]
inc eax
push 0x39
pop edx
xor eax, edx
mov word [ebp - 0x592], ax
mov eax, dword [ebp - 0x598]
add eax, 2
xor eax, 0x30
mov word [ebp - 0x590], ax
mov eax, dword [ebp - 0x598]
add eax, 3
push 0x41
pop ecx
xor eax, ecx
mov word [ebp - 0x58e], ax
mov eax, dword [ebp - 0x598]
add eax, 4
xor eax, ecx
mov word [ebp - 0x58c], ax
mov eax, dword [ebp - 0x598]
add eax, 5
push 0x46
pop ecx
xor eax, ecx
mov word [ebp - 0x58a], ax
mov eax, dword [ebp - 0x598]
add eax, 6
push 0x34
pop ecx
xor eax, ecx
mov word [ebp - 0x588], ax
mov eax, dword [ebp - 0x598]
add eax, 7
push 0x36
pop esi
xor eax, esi
mov word [ebp - 0x586], ax
mov eax, dword [ebp - 0x598]
add eax, 8
push 0x35
pop esi
xor eax, esi
mov word [ebp - 0x584], ax
mov eax, dword [ebp - 0x598]
add eax, 9
push 0x2d
pop esi
xor eax, esi
mov word [ebp - 0x582], ax
mov eax, dword [ebp - 0x598]
add eax, 0xa
xor eax, 0x45
mov word [ebp - 0x580], ax
mov eax, dword [ebp - 0x598]
add eax, 0xb
xor eax, 0x32
mov word [ebp - 0x57e], ax
mov eax, dword [ebp - 0x598]
add eax, 0xc
xor eax, 0x35
mov word [ebp - 0x57c], ax
mov eax, dword [ebp - 0x598]
add eax, 0xd
xor eax, 0x30
mov word [ebp - 0x57a], ax
mov eax, dword [ebp - 0x598]
add eax, 0xe
xor eax, esi
mov word [ebp - 0x578], ax
mov eax, dword [ebp - 0x598]
add eax, 0xf
xor eax, ecx
mov word [ebp - 0x576], ax
mov eax, dword [ebp - 0x598]
add eax, 0x10
xor eax, 0x32
mov word [ebp - 0x574], ax
mov eax, dword [ebp - 0x598]
add eax, 0x11
xor eax, edx
mov word [ebp - 0x572], ax
mov eax, dword [ebp - 0x598]
add eax, 0x12
xor eax, 0x66
mov word [ebp - 0x570], ax
mov eax, dword [ebp - 0x598]
add eax, 0x13
xor eax, esi
mov word [ebp - 0x56e], ax
mov eax, dword [ebp - 0x598]
add eax, 0x14
xor eax, 0x42
mov word [ebp - 0x56c], ax
mov eax, dword [ebp - 0x598]
add eax, 0x15
xor eax, 0x32
mov word [ebp - 0x56a], ax
mov eax, dword [ebp - 0x598]
add eax, 0x16
xor eax, edx
mov word [ebp - 0x568], ax
mov eax, dword [ebp - 0x598]
add eax, 0x17
xor eax, 0x32
mov word [ebp - 0x566], ax
mov eax, dword [ebp - 0x598]
add eax, 0x18
xor eax, esi
mov word [ebp - 0x564], ax
mov eax, dword [ebp - 0x598]
add eax, 0x19
push 0x46
pop esi
xor eax, esi
mov word [ebp - 0x562], ax
mov eax, dword [ebp - 0x598]
add eax, 0x1a
xor eax, 0x35
mov word [ebp - 0x560], ax
mov eax, dword [ebp - 0x598]
add eax, 0x1b
xor eax, ecx
mov word [ebp - 0x55e], ax
mov eax, dword [ebp - 0x598]
add eax, 0x1c
push 0x42
pop ecx
xor eax, ecx
mov word [ebp - 0x55c], ax
mov eax, dword [ebp - 0x598]
add eax, 0x1d
xor eax, 0x30
mov word [ebp - 0x55a], ax
mov eax, dword [ebp - 0x598]
add eax, 0x1e
xor eax, esi
mov word [ebp - 0x558], ax
mov eax, dword [ebp - 0x598]
add eax, 0x1f
xor eax, 0x31
mov word [ebp - 0x556], ax
mov eax, dword [ebp - 0x598]
add eax, 0x20
xor eax, ecx
mov word [ebp - 0x554], ax
mov eax, dword [ebp - 0x598]
add eax, 0x21
xor eax, esi
mov word [ebp - 0x552], ax
mov eax, dword [ebp - 0x598]
push 0x41
add eax, 0x22
pop ecx
xor eax, ecx
mov word [ebp - 0x550], ax
mov eax, dword [ebp - 0x598]
add eax, 0x23
push 0x36
pop ecx
xor eax, ecx
lea ecx, [ebp - 0x598]
mov word [ebp - 0x54e], ax
mov eax, dword [ebp - 0x598]
add eax, 0x24
xor eax, edx
mov word [ebp - 0x54c], ax
mov eax, dword [ebp - 0x598]
add eax, 0x25
xor eax, 0x7d
mov word [ebp - 0x54a], ax
xor eax, eax
mov word [ebp - 0x548], ax
mov ax, word [ebp - 0x594]
mov esi, dword [ebx]
call fcn.1000b49e
push eax
push ebx
call dword [esi + edi]
test eax, eax
je 0x100ad8b5
push 4
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x1048], eax
mov byte [ebp - 4], 0x22
test eax, eax
je 0x100ad8a3
mov ecx, eax
call fcn.1004e50b
jmp 0x100ad8a5
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1044]
push eax
call fcn.100cc4f5
mov dword [ebp - 0xeac], 0x3d8e
mov edx, 0x3dbb
mov eax, 0x3df5
mov word [ebp - 0xea8], ax
add eax, 0xffffffda
mov word [ebp - 0xea6], ax
mov word [ebp - 0xea4], dx
lea esi, [edx + 4]
mov word [ebp - 0xea2], si
lea eax, [edx - 1]
mov word [ebp - 0xea0], si
lea ecx, [edx - 3]
mov word [ebp - 0xe9e], ax
lea edi, [edx + 0x12]
mov word [ebp - 0xe9c], cx
dec eax
mov word [ebp - 0xe9a], ax
lea eax, [edx + 0x10]
mov word [ebp - 0xe98], si
add esi, 0xffffffe4
mov word [ebp - 0xe96], si
mov word [ebp - 0xe94], ax
add eax, 0xfffffff3
mov word [ebp - 0xe92], di
mov word [ebp - 0xe90], ax
lea eax, [edx - 1]
mov word [ebp - 0xe8e], ax
mov word [ebp - 0xe8c], si
mov word [ebp - 0xe8a], ax
add eax, 0x15
mov word [ebp - 0xe88], dx
add edx, 2
mov word [ebp - 0xe86], cx
mov word [ebp - 0xe84], dx
mov word [ebp - 0xe82], si
mov word [ebp - 0xe80], ax
lea eax, [ecx - 2]
mov word [ebp - 0xe7e], ax
add ecx, 0x12
mov word [ebp - 0xe7c], cx
add eax, 6
mov word [ebp - 0xe7a], ax
lea eax, [edi - 0x16]
mov word [ebp - 0xe78], si
lea esi, [edi - 0x13]
mov word [ebp - 0xe76], si
mov word [ebp - 0xe74], si
mov word [ebp - 0xe72], ax
add eax, 8
mov word [ebp - 0xe70], si
mov word [ebp - 0xe6e], dx
mov word [ebp - 0xe6c], ax
lea eax, [edi + 2]
mov word [ebp - 0xe6a], di
mov word [ebp - 0xe68], cx
mov word [ebp - 0xe66], ax
add eax, 0xfffffff9
mov word [ebp - 0xe64], ax
lea eax, [edi + 0x26]
mov word [ebp - 0xe62], cx
lea ecx, [ebp - 0xeac]
mov word [ebp - 0xe60], dx
mov word [ebp - 0xe5e], ax
xor eax, eax
mov word [ebp - 0xe5c], ax
mov ax, word [ebp - 0xea8]
mov esi, dword [ebx]
call fcn.1000b6ff
push eax
push ebx
call dword [esi + 0x110]
test eax, eax
je 0x100adad4
mov ecx, 0x1dce
mov dword [ebp - 0xc68], 0x1db6
mov word [ebp - 0xc64], cx
lea eax, [ecx - 0x49]
mov word [ebp - 0xc62], ax
add eax, 0x13
mov word [ebp - 0xc60], ax
lea eax, [ecx + 5]
mov word [ebp - 0xc5e], cx
lea ecx, [ebp - 0xc68]
mov word [ebp - 0xc5c], ax
add eax, 8
mov word [ebp - 0xc5a], ax
xor eax, eax
mov word [ebp - 0xc58], ax
mov ax, word [ebp - 0xc64]
call fcn.100497f9
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x100adad4
push 0x104
lea ecx, [ebp - 0x420]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [0x10201ab4]
lea ecx, [ebp - 0x420]
push ecx
push dword [eax + 0xa0]
call fcn.100c3cc9
pop ecx
pop ecx
mov dword [ebp - 0xf00], 0x5f09
mov eax, 0x5f72
mov word [ebp - 0xefc], ax
lea esi, [eax - 0x38]
add eax, 0xffffffc7
mov word [ebp - 0xefa], si
lea ecx, [esi + 0x12]
mov word [ebp - 0xef8], ax
lea edx, [esi - 0x16]
lea eax, [esi - 9]
mov word [ebp - 0xef6], ax
lea edi, [esi - 2]
mov word [ebp - 0xef4], cx
add eax, 0x17
mov word [ebp - 0xef2], ax
lea eax, [esi + 3]
mov word [ebp - 0xef0], ax
dec eax
mov word [ebp - 0xeee], ax
lea eax, [esi + 3]
mov word [ebp - 0xeec], cx
dec ecx
mov word [ebp - 0xeea], dx
mov word [ebp - 0xee8], di
mov word [ebp - 0xee6], si
mov word [ebp - 0xee4], si
mov word [ebp - 0xee2], cx
mov word [ebp - 0xee0], dx
mov word [ebp - 0xede], ax
add eax, 0x2e
mov word [ebp - 0xedc], ax
lea eax, [esi + 2]
mov word [ebp - 0xeda], ax
mov word [ebp - 0xed8], ax
add eax, 0xfffffff4
mov word [ebp - 0xed6], dx
mov word [ebp - 0xed4], ax
lea eax, [esi + 0x12]
mov word [ebp - 0xed2], si
mov word [ebp - 0xed0], ax
add eax, 0xfffffff3
mov word [ebp - 0xece], si
mov word [ebp - 0xecc], dx
mov word [ebp - 0xeca], ax
lea eax, [esi + 4]
mov word [ebp - 0xec8], cx
lea ecx, [esi + 0x10]
mov word [ebp - 0xec6], ax
add eax, 0xfffffffb
mov word [ebp - 0xec4], ax
lea eax, [esi + 0x12]
mov word [ebp - 0xec2], cx
mov word [ebp - 0xec0], ax
add eax, 0xfffffff1
mov word [ebp - 0xebe], ax
lea eax, [esi + 2]
mov word [ebp - 0xebc], ax
add eax, 0x11
mov word [ebp - 0xeba], ax
lea eax, [esi + 0x15]
mov word [ebp - 0xeb8], ax
add eax, 0x25
mov word [ebp - 0xeb6], di
mov edi, 0x110
mov word [ebp - 0xeb4], cx
lea ecx, [ebp - 0xf00]
mov word [ebp - 0xeb2], ax
xor eax, eax
mov word [ebp - 0xeb0], ax
mov ax, word [ebp - 0xefc]
mov esi, dword [ebx]
call fcn.1000b6ff
push eax
push ebx
call dword [esi + edi]
test eax, eax
je 0x100add67
and dword [ebp - 0x1028], 0
mov eax, dword [ebp - 0x1020]
push 0x3b
mov ecx, dword [eax]
mov byte [ebp - 0x460], 0x7d
mov byte [ebp - 0x45f], 0x70
mov byte [ebp - 0x45e], 0x87
mov byte [ebp - 0x45d], 0x80
pop eax
mov byte [ebp - 0x45c], al
mov byte [ebp - 0x45b], 0x85
push 0x72
pop eax
mov byte [ebp - 0x45a], al
push 0x7a
pop edx
mov byte [ebp - 0x459], dl
mov byte [ebp - 0x458], 0
mov al, byte [ebp - 0x460]
mov dword [ebp - 0x7ac], 0x47c2
mov eax, dword [ebp - 0x7ac]
xor eax, 0x70
mov word [ebp - 0x7a8], ax
mov eax, dword [ebp - 0x7ac]
inc eax
xor eax, 0x63
mov word [ebp - 0x7a6], ax
mov eax, dword [ebp - 0x7ac]
add eax, 2
xor eax, edx
mov word [ebp - 0x7a4], ax
mov eax, dword [ebp - 0x7ac]
push 0x73
add eax, 3
pop esi
xor eax, esi
mov word [ebp - 0x7a2], ax
xor eax, eax
mov word [ebp - 0x7a0], ax
mov ax, word [ebp - 0x7a8]
push ecx
lea eax, [ebp - 0x1028]
push eax
lea ecx, [ebp - 0x460]
call fcn.100cbef4
push eax
lea ecx, [ebp - 0x7ac]
call fcn.100494f5
push eax
push 0xa
call fcn.100c0b1a
add esp, 0x14
test eax, eax
js 0x100add67
mov esi, dword [ebp - 0x1028]
test esi, esi
je 0x100add67
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x5ec], 0x734c
mov eax, dword [ebp - 0x5ec]
push 0x7b
pop ecx
xor eax, ecx
mov word [ebp - 0x5e8], ax
mov eax, dword [ebp - 0x5ec]
inc eax
push 0x46
pop ecx
xor eax, ecx
mov word [ebp - 0x5e6], ax
mov eax, dword [ebp - 0x5ec]
add eax, 2
push 0x33
pop ecx
xor eax, ecx
mov word [ebp - 0x5e4], ax
mov eax, dword [ebp - 0x5ec]
add eax, 3
push 0x45
pop ecx
xor eax, ecx
mov word [ebp - 0x5e2], ax
mov eax, dword [ebp - 0x5ec]
add eax, 4
xor eax, 0x30
mov word [ebp - 0x5e0], ax
mov eax, dword [ebp - 0x5ec]
add eax, 5
xor eax, ecx
mov word [ebp - 0x5de], ax
mov eax, dword [ebp - 0x5ec]
add eax, 6
push 0x42
pop ecx
xor eax, ecx
mov word [ebp - 0x5dc], ax
mov eax, dword [ebp - 0x5ec]
add eax, 7
push 0x37
pop ecx
xor eax, ecx
mov word [ebp - 0x5da], ax
mov eax, dword [ebp - 0x5ec]
add eax, 8
xor eax, 0x44
mov word [ebp - 0x5d8], ax
mov eax, dword [ebp - 0x5ec]
add eax, 9
push 0x2d
pop esi
xor eax, esi
mov word [ebp - 0x5d6], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0xa
push 0x39
pop edx
xor eax, edx
mov word [ebp - 0x5d4], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0xb
push 0x42
pop ecx
xor eax, ecx
mov word [ebp - 0x5d2], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0xc
push 0x41
pop ecx
xor eax, ecx
mov word [ebp - 0x5d0], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0xd
push 0x31
pop ecx
xor eax, ecx
mov word [ebp - 0x5ce], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0xe
xor eax, esi
mov word [ebp - 0x5cc], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0xf
push 0x34
pop ecx
xor eax, ecx
mov word [ebp - 0x5ca], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x10
xor eax, edx
mov word [ebp - 0x5c8], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x11
xor eax, ecx
mov word [ebp - 0x5c6], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x12
xor eax, ecx
mov word [ebp - 0x5c4], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x13
xor eax, esi
mov word [ebp - 0x5c2], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x14
xor eax, edx
mov word [ebp - 0x5c0], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x15
xor eax, 0x43
mov word [ebp - 0x5be], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x16
push 0x36
pop edx
xor eax, edx
mov word [ebp - 0x5bc], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x17
xor eax, 0x43
mov word [ebp - 0x5ba], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x18
xor eax, esi
mov word [ebp - 0x5b8], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x19
xor eax, edx
mov word [ebp - 0x5b6], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x1a
push 0x38
pop edx
xor eax, edx
mov word [ebp - 0x5b4], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x1b
xor eax, 0x30
mov word [ebp - 0x5b2], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x1c
xor eax, 0x30
mov word [ebp - 0x5b0], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x1d
push 0x36
pop edx
xor eax, edx
mov word [ebp - 0x5ae], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x1e
xor eax, 0x43
mov word [ebp - 0x5ac], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x1f
xor eax, ecx
mov word [ebp - 0x5aa], ax
mov eax, dword [ebp - 0x5ec]
push 0x31
add eax, 0x20
pop ecx
xor eax, ecx
mov word [ebp - 0x5a8], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x21
push 0x41
pop ecx
xor eax, ecx
mov word [ebp - 0x5a6], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x22
push 0x42
pop ecx
xor eax, ecx
mov word [ebp - 0x5a4], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x23
push 0x33
pop ecx
xor eax, ecx
lea ecx, [ebp - 0x5ec]
mov word [ebp - 0x5a2], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x24
xor eax, 0x43
mov word [ebp - 0x5a0], ax
mov eax, dword [ebp - 0x5ec]
add eax, 0x25
xor eax, 0x7d
mov word [ebp - 0x59e], ax
xor eax, eax
mov word [ebp - 0x59c], ax
mov ax, word [ebp - 0x5e8]
mov esi, dword [ebx]
call fcn.1000b49e
push eax
push ebx
call dword [esi + edi]
test eax, eax
je 0x100ae0b1
push 0xc
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x1044], eax
mov byte [ebp - 4], 0x23
test eax, eax
je 0x100ae09f
mov ecx, eax
call fcn.10011293
jmp 0x100ae0a1
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1040]
push eax
call fcn.100cc4dd
mov dword [ebp - 0xf54], 0xfae5
mov eax, 0xfa9e
mov word [ebp - 0xf50], ax
mov ecx, 0xfad1
add eax, 8
mov word [ebp - 0xf4e], ax
mov eax, 0xfaa4
mov word [ebp - 0xf4c], ax
add eax, 0x31
mov word [ebp - 0xf4a], ax
lea edx, [ecx + 5]
mov word [ebp - 0xf48], cx
lea eax, [ecx + 0xb]
mov word [ebp - 0xf46], ax
lea esi, [ecx - 9]
mov word [ebp - 0xf44], dx
lea edi, [ecx + 1]
mov word [ebp - 0xf42], ax
mov word [ebp - 0xf40], ax
add eax, 0xffffffc7
mov word [ebp - 0xf3e], si
mov word [ebp - 0xf3c], ax
mov word [ebp - 0xf3a], ax
lea eax, [ecx - 0x30]
mov word [ebp - 0xf38], di
mov word [ebp - 0xf36], ax
add eax, 0x33
mov word [ebp - 0xf34], si
mov word [ebp - 0xf32], cx
add ecx, 0xc
mov word [ebp - 0xf30], di
mov word [ebp - 0xf2e], ax
mov word [ebp - 0xf2c], dx
mov word [ebp - 0xf2a], si
mov word [ebp - 0xf28], cx
mov word [ebp - 0xf26], cx
mov word [ebp - 0xf24], ax
mov word [ebp - 0xf22], ax
lea eax, [edx - 3]
mov word [ebp - 0xf20], si
add edx, 6
mov word [ebp - 0xf1e], ax
add eax, 2
mov word [ebp - 0xf1c], ax
lea eax, [esi + 0xf]
mov word [ebp - 0xf1a], cx
mov word [ebp - 0xf18], dx
mov word [ebp - 0xf16], ax
add eax, 0xffffffcc
mov word [ebp - 0xf14], di
mov word [ebp - 0xf12], di
mov word [ebp - 0xf10], cx
lea ecx, [ebp - 0xf54]
mov word [ebp - 0xf0e], ax
lea eax, [esi - 0x24]
mov word [ebp - 0xf0c], dx
mov word [ebp - 0xf0a], ax
add eax, 0x2c
mov word [ebp - 0xf08], ax
lea eax, [esi - 0x30]
mov word [ebp - 0xf06], ax
xor eax, eax
mov word [ebp - 0xf04], ax
mov ax, word [ebp - 0xf50]
mov esi, dword [ebx]
call fcn.1000b6ff
push eax
push ebx
call dword [esi + 0x110]
test eax, eax
je 0x100ae326
mov eax, dword [0x10201ab4]
lea ecx, [ebp - 0x7d8]
push 0xc378
mov eax, dword [eax + 0x10]
mov ebx, dword [eax + 0x48]
call fcn.1003a0b8
movzx esi, ax
lea eax, [esi + 0x78]
mov word [ebp - 0x7d8], ax
lea edi, [esi + 0x63]
mov word [ebp - 0x7d6], di
lea edx, [esi + 0x6c]
mov word [ebp - 0x7d4], dx
lea eax, [esi + 0x69]
mov word [ebp - 0x7d2], ax
lea ecx, [esi + 0x20]
lea eax, [esi + 0x6f]
mov word [ebp - 0x7d0], ax
lea eax, [esi + 0x3a]
mov word [ebp - 0x7ce], ax
mov word [ebp - 0x7cc], ax
lea eax, [esi + 0x73]
mov word [ebp - 0x7ca], cx
mov word [ebp - 0x7c8], dx
mov word [ebp - 0x7c6], ax
lea eax, [esi + 0x75]
mov word [ebp - 0x7c4], ax
xor eax, eax
mov word [ebp - 0x7c2], cx
lea ecx, [ebp - 0x7d8]
mov word [ebp - 0x7c0], di
mov word [ebp - 0x7be], ax
mov ax, word [ebp - 0x7d8]
mov esi, dword [ebx]
call fcn.100cc281
push eax
push ebx
call dword [esi + 0x28]
push 0x14
call fcn.100ccadc
add esp, 0xc
mov dword [ebp - 0x1040], eax
mov byte [ebp - 4], 0x24
test eax, eax
je 0x100ae30e
mov ecx, eax
call fcn.100503b7
jmp 0x100ae310
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1024]
push eax
call fcn.100cc528
mov ebx, dword [ebp - 0x1000]
call fcn.100c06e1
call fcn.100bbe9a
push ebx
call fcn.100b8d86
pop ecx
call fcn.100c5c34
test eax, eax
jne 0x100ae505
mov dword [ebp - 0x764], 0xcec2
mov eax, dword [ebp - 0x764]
push 0x78
pop ecx
xor eax, ecx
mov word [ebp - 0x760], ax
mov eax, dword [ebp - 0x764]
inc eax
xor eax, 0x63
mov word [ebp - 0x75e], ax
mov eax, dword [ebp - 0x764]
add eax, 2
push 0x6c
pop ecx
xor eax, ecx
mov word [ebp - 0x75c], ax
mov eax, dword [ebp - 0x764]
add eax, 3
push 0x69
pop edx
xor eax, edx
mov word [ebp - 0x75a], ax
mov eax, dword [ebp - 0x764]
add eax, 4
push 0x6f
pop ecx
xor eax, ecx
mov word [ebp - 0x758], ax
mov eax, dword [ebp - 0x764]
add eax, 5
push 0x3a
pop ecx
xor eax, ecx
mov word [ebp - 0x756], ax
mov eax, dword [ebp - 0x764]
add eax, 6
xor eax, ecx
mov word [ebp - 0x754], ax
mov eax, dword [ebp - 0x764]
add eax, 7
xor eax, 0x20
mov word [ebp - 0x752], ax
mov eax, dword [ebp - 0x764]
add eax, 8
push 0x72
pop ecx
xor eax, ecx
mov word [ebp - 0x750], ax
mov eax, dword [ebp - 0x764]
add eax, 9
xor eax, 0x65
mov word [ebp - 0x74e], ax
mov eax, dword [ebp - 0x764]
add eax, 0xa
push 0x71
pop ecx
xor eax, ecx
mov word [ebp - 0x74c], ax
mov eax, dword [ebp - 0x764]
add eax, 0xb
xor eax, 0x64
mov word [ebp - 0x74a], ax
mov eax, dword [ebp - 0x764]
add eax, 0xc
xor eax, 0x20
mov word [ebp - 0x748], ax
mov eax, dword [ebp - 0x764]
add eax, 0xd
xor eax, edx
mov word [ebp - 0x746], ax
mov eax, dword [ebp - 0x764]
push 0x6e
add eax, 0xe
pop ecx
xor eax, ecx
mov word [ebp - 0x744], ax
mov eax, dword [ebp - 0x764]
push 0x76
add eax, 0xf
pop ecx
xor eax, ecx
mov word [ebp - 0x742], ax
mov eax, dword [ebp - 0x764]
add eax, 0x10
xor eax, 0x20
mov word [ebp - 0x740], ax
mov eax, dword [ebp - 0x764]
add eax, 0x11
xor eax, 0x63
mov word [ebp - 0x73e], ax
mov eax, dword [ebp - 0x764]
add eax, 0x12
push 0x67
pop ecx
xor eax, ecx
lea ecx, [ebp - 0x764]
mov word [ebp - 0x73c], ax
mov eax, dword [ebp - 0x764]
add eax, 0x13
xor eax, 0x21
mov word [ebp - 0x73a], ax
xor eax, eax
mov word [ebp - 0x738], ax
mov ax, word [ebp - 0x760]
call fcn.10073948
mov dword [ebp - 0x1070], eax
lea eax, [ebp - 0x1070]
push eax
call fcn.100a232a
pop ecx
call fcn.100c33ce
push 0x3e8
push dword [ebp - 0x1014]
mov edx, dword [eax]
push eax
call dword [edx + 0x14]
mov ecx, dword [ebp - 0x102c]
call fcn.10086cfe
mov ecx, dword [ebp - 0x1030]
call fcn.10092a42
call fcn.100c33ce
push 0xa
push dword [ebp - 0x1008]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov eax, dword [0x10201ab4]
lea ecx, [ebp - 0x8ec]
push 0x9bd7
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x1024], eax
call fcn.1003a0b8
movzx edi, ax
mov dword [ebp - 0x1000], edi
lea eax, [edi + 0x7b]
mov word [ebp - 0x8ec], ax
lea ecx, [edi + 0x44]
lea eax, [edi + 0x37]
mov word [ebp - 0x8ea], ax
lea edx, [edi + 0x2d]
mov word [ebp - 0x8e8], cx
lea ebx, [edi + 0x42]
mov word [ebp - 0x8e6], cx
lea esi, [edi + 0x43]
lea ecx, [edi + 0x36]
mov dword [ebp - 0x1014], ebx
mov word [ebp - 0x8e4], cx
mov word [ebp - 0x8e2], ax
lea eax, [edi + 0x33]
mov word [ebp - 0x8e0], cx
lea ecx, [edi + 0x31]
mov word [ebp - 0x8de], bx
add edi, 0x39
mov word [ebp - 0x8dc], ax
mov eax, dword [ebp - 0x1000]
mov word [ebp - 0x8da], dx
add eax, 0x36
mov word [ebp - 0x8d8], si
mov word [ebp - 0x8d6], cx
mov word [ebp - 0x8d4], di
mov word [ebp - 0x8d2], ax
mov eax, dword [ebp - 0x1000]
mov word [ebp - 0x8d0], dx
add eax, 0x34
mov word [ebp - 0x8ce], ax
mov eax, dword [ebp - 0x1000]
add eax, 0x41
mov word [ebp - 0x8cc], ax
mov eax, dword [ebp - 0x1000]
add eax, 0x30
mov word [ebp - 0x8ca], ax
mov eax, dword [ebp - 0x1000]
mov word [ebp - 0x8c8], si
add eax, 0x38
mov word [ebp - 0x8c6], dx
mov word [ebp - 0x8c4], ax
mov eax, dword [ebp - 0x1000]
mov word [ebp - 0x8c2], cx
add eax, 0x46
mov word [ebp - 0x8c0], ax
mov eax, dword [ebp - 0x1000]
mov word [ebp - 0x8be], si
mov word [ebp - 0x8bc], dx
mov word [ebp - 0x8ba], cx
lea edx, [eax + 0x44]
mov word [ebp - 0x8b8], dx
lea ecx, [eax + 0x36]
mov word [ebp - 0x8b6], cx
add eax, 0x45
mov word [ebp - 0x8b4], ax
mov word [ebp - 0x8b2], si
mov esi, dword [ebp - 0x1000]
lea eax, [esi + 0x35]
mov word [ebp - 0x8b0], ax
lea eax, [esi + 0x7d]
mov word [ebp - 0x8ae], cx
mov word [ebp - 0x8ac], bx
mov word [ebp - 0x8aa], cx
lea ecx, [ebp - 0x8ec]
mov word [ebp - 0x8a8], bx
mov word [ebp - 0x8a6], dx
mov word [ebp - 0x8a4], di
mov edi, dword [ebp - 0x1024]
mov word [ebp - 0x8a2], ax
xor eax, eax
mov word [ebp - 0x8a0], ax
mov ax, word [ebp - 0x8ec]
mov esi, dword [edi]
call fcn.10039bc5
push eax
push edi
call dword [esi + 0x110]
test eax, eax
je 0x100ae762
mov eax, dword [0x10201ab4]
mov eax, dword [eax + 0xa8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x138]
mov esi, eax
test esi, esi
je 0x100ae762
lea eax, [ebp - 0x1084]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push eax
push 0
push 0x100c7eac
push 3
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
mov ebx, dword [ebp - 0x1008]
mov dword [ebx + 4], eax
mov dword [ebx + 8], esi
jmp 0x100ae768
mov ebx, dword [ebp - 0x1008]
mov eax, dword [0x10201ab4]
mov edi, dword [eax + 0xa8]
mov eax, 0x74b9
mov dword [ebp - 0xfa8], 0x74c2
mov word [ebp - 0xfa4], ax
lea esi, [eax + 0x3d]
mov word [ebp - 0xfa2], si
lea edx, [eax + 0x3a]
mov word [ebp - 0xfa0], si
lea ecx, [eax + 0x39]
mov word [ebp - 0xf9e], dx
add eax, 0x3c
mov word [ebp - 0xf9c], cx
mov word [ebp - 0xf9a], ax
lea eax, [esi - 0x6f]
mov word [ebp - 0xf98], ax
add eax, 0x6d
mov word [ebp - 0xf96], ax
lea eax, [edx + 3]
mov word [ebp - 0xf94], si
add esi, 0xfffffff9
mov word [ebp - 0xf92], si
mov word [ebp - 0xf90], ax
add eax, 0xffffff90
mov word [ebp - 0xf8e], cx
add ecx, 8
mov word [ebp - 0xf8c], cx
mov word [ebp - 0xf8a], ax
lea eax, [edx + 3]
mov word [ebp - 0xf88], si
mov word [ebp - 0xf86], ax
add eax, 0xffffff8a
mov word [ebp - 0xf84], dx
add edx, 0xfffffffe
mov word [ebp - 0xf82], dx
mov word [ebp - 0xf80], ax
mov eax, 0x7483
mov word [ebp - 0xf7e], si
mov word [ebp - 0xf7c], ax
add eax, 0x70
mov word [ebp - 0xf7a], ax
mov word [ebp - 0xf78], cx
mov word [ebp - 0xf76], dx
mov word [ebp - 0xf74], si
mov esi, 0x74f6
mov word [ebp - 0xf72], si
lea ecx, [esi - 0x72]
lea eax, [esi - 0x6f]
mov word [ebp - 0xf70], ax
add eax, 0x6d
mov word [ebp - 0xf6e], cx
mov word [ebp - 0xf6c], si
mov word [ebp - 0xf6a], ax
lea eax, [esi - 6]
mov word [ebp - 0xf68], ax
mov word [ebp - 0xf66], dx
mov word [ebp - 0xf64], ax
add eax, 7
mov word [ebp - 0xf62], cx
mov word [ebp - 0xf60], si
mov word [ebp - 0xf5e], cx
lea ecx, [ebp - 0xfa8]
mov word [ebp - 0xf5c], ax
lea eax, [esi - 0x37]
mov word [ebp - 0xf5a], ax
xor eax, eax
mov word [ebp - 0xf58], ax
mov ax, word [ebp - 0xfa4]
mov esi, dword [edi]
call fcn.1000b6ff
push eax
push edi
call dword [esi + 0x110]
test eax, eax
je 0x100ae902
mov ecx, ebx
call fcn.100b81bb
mov ecx, ebx
call fcn.100c9759
mov ecx, ebx
call fcn.100b5e1c
mov ecx, ebx
call fcn.100bc782
mov ecx, ebx
call fcn.100b8e6b
mov ecx, ebx
call fcn.100b7519
or dword [ebp - 4], 0xffffffff
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100cc9b8
leave
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
or eax, 0xe0ff0000
lea ecx, [ebp - 0x1080]
push eax
call fcn.100025b7
push 0x101026f0
lea eax, [ebp - 0x1080]
jmp 0x100aea4d
mov dword [ebp - 0xb94], 0x19a9
mov ecx, 0x19e4
mov word [ebp - 0xb90], cx
mov word [ebp - 0xb8e], cx
lea edx, [ecx + 0xd]
lea eax, [ecx - 0x5d]
mov word [ebp - 0xb8c], ax
lea esi, [ecx - 0x5b]
mov word [ebp - 0xb8a], dx
add eax, 0x5f
mov word [ebp - 0xb88], cx
mov word [ebp - 0xb86], ax
lea eax, [ecx + 9]
mov word [ebp - 0xb84], ax
add eax, 0xffffffe0
mov word [ebp - 0xb82], si
mov word [ebp - 0xb80], cx
add ecx, 0xffffffe2
mov word [ebp - 0xb7e], cx
mov word [ebp - 0xb7c], ax
lea eax, [edx - 0x27]
mov word [ebp - 0xb7a], dx
mov word [ebp - 0xb78], ax
add eax, 0xfffffffb
mov word [ebp - 0xb76], ax
lea eax, [edx - 0x31]
mov word [ebp - 0xb74], ax
xor eax, eax
mov word [ebp - 0xb72], cx
lea ecx, [ebp - 0xb94]
mov word [ebp - 0xb70], si
mov word [ebp - 0xb6e], ax
mov ax, word [ebp - 0xb90]
call fcn.10011265
push eax
call fcn.1007ae76
pop ecx
push 0xe0190130
lea ecx, [ebp - 0x10a0]
call fcn.100025b7
push 0x101026f0
lea eax, [ebp - 0x10a0]
push eax
call fcn.100ce45f
int3