Function at 0x1006d520
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101166e2
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1218
call fcn.100e6680
mov eax, dword [0x1013b080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xe4], edi
push dword [ebp - 0x44]
lea ecx, [ebp - 0x804]
mov dword [ebp - 0x44c], 0x79616c70
mov dword [ebp - 0x448], 0x737265
call fcn.1002af80
lea ecx, [ebp - 0x44c]
mov dword [ebp - 4], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006d5a0
sub ecx, edx
lea eax, [ebp - 0x44c]
push ecx
push eax
lea ecx, [ebp - 0x804]
call fcn.1002afa0
lea eax, [ebp - 0x804]
mov dword [ebp - 4], 1
push eax
mov ecx, edi
call fcn.1003b440
lea ecx, [ebp - 0x804]
call fcn.10029b80
push dword [ebp - 0x44]
lea ecx, [ebp - 0xc54]
mov dword [ebp - 0x344], 0x6d656e65
mov word [ebp - 0x340], 0x79
call fcn.1002af80
lea ecx, [ebp - 0x344]
mov dword [ebp - 4], 2
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006d610
sub ecx, edx
lea eax, [ebp - 0x344]
push ecx
push eax
lea ecx, [ebp - 0xc54]
call fcn.1002afa0
mov dword [ebp - 4], 3
lea ecx, [ebp - 0xc3c]
push dword [ebp - 0x44]
mov dword [ebp - 0x4e0], 0x65697266
mov dword [ebp - 0x4dc], 0x796c646e
mov byte [ebp - 0x4d8], 0
call fcn.1002af80
lea ecx, [ebp - 0x4e0]
mov byte [ebp - 4], 4
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006d670
sub ecx, edx
lea eax, [ebp - 0x4e0]
push ecx
push eax
lea ecx, [ebp - 0xc3c]
call fcn.1002afa0
lea eax, [ebp - 0x521]
mov dword [ebp - 4], 5
push eax
lea ecx, [ebp - 0xc24]
push ecx
lea edx, [ebp - 0xc54]
push edx
lea ecx, [ebp - 0x66c]
call fcn.100b7bf0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x834]
mov dword [ebp - 0x2ac], 0x786f62
call fcn.1002af80
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 7
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006d6d8
sub ecx, edx
lea eax, [ebp - 0x2ac]
push ecx
push eax
lea ecx, [ebp - 0x834]
call fcn.1002afa0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x81c]
mov dword [ebp - 0x38c], 0x65786f62
mov word [ebp - 0x388], 0x73
call fcn.1002af80
lea ecx, [ebp - 0x38c]
mov byte [ebp - 4], 9
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006d722
sub ecx, edx
lea eax, [ebp - 0x38c]
push ecx
push eax
lea ecx, [ebp - 0x81c]
call fcn.1002afa0
lea ecx, [ebp - 0x660]
call fcn.1002b110
lea eax, [ebp - 0x834]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [edi + 0x68]
call fcn.1003b440
lea eax, [ebp - 0x81c]
mov byte [edi + 0x99], 1
push eax
lea ecx, [edi + 0xa0]
call fcn.1003b440
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x99], al
cmovne eax, ecx
mov dword [edi + 0xd4], eax
add eax, 0x14
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
lea eax, [edi + 0xb8]
mov ecx, dword [ebp - 0x668]
mov esi, dword [ebp - 0x66c]
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x534], eax
cmp esi, ecx
je 0x1006d7d3
mov edi, eax
push esi
mov ecx, edi
call fcn.10050040
add esi, 0x18
cmp esi, dword [ebp - 0xdc]
jne 0x1006d7b8
mov edi, dword [ebp - 0xe4]
jmp 0x1006d7d9
mov dword [ebp - 0x534], eax
mov ecx, dword [ebp - 0x65c]
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0xdc], eax
cmp eax, ecx
je 0x1006d8bc
lea ecx, [edi + 0xc8]
nop
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x778]
push eax
call fcn.10028ca0
lea ecx, [edi + 0xc8]
mov esi, dword [eax]
lea eax, [ebp - 0x774]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0x770]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0xc8]
mov esi, eax
lea eax, [ebp - 0x180]
push eax
call fcn.10028ca0
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x534]
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x38], eax
jae 0x1006d887
lea eax, [ebp - 0x38]
push eax
lea ecx, [edi + 0xc8]
call fcn.10045420
cmp esi, dword [ebp - 0xd8]
jne 0x1006d89b
mov eax, dword [edi + 0x94]
test eax, eax
je 0x1006d89b
call eax
mov eax, dword [ebp - 0xdc]
lea ecx, [edi + 0xc8]
add eax, 4
mov dword [ebp - 0xdc], eax
cmp eax, dword [ebp - 0xd4]
jne 0x1006d800
lea ecx, [ebp - 0x660]
call fcn.10028e00
lea ecx, [ebp - 0x81c]
call fcn.10029b80
lea ecx, [ebp - 0x834]
call fcn.10029b80
lea ecx, [ebp - 0x66c]
call fcn.1004fd60
push fcn.10029b80
push 2
push 0x18
lea eax, [ebp - 0xc54]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0x30]
mov dword [ebp - 0x9c], eax
lea ecx, [ebp - 0x9c]
mov dword [edi + 0x48], 0
imul eax, dword [edi + 0x48], 0xeb
push ecx
lea ecx, [edi + 0x18]
add eax, 0x14
mov dword [edi + 0x34], eax
mov dword [edi + 0x3c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x4c], eax
call fcn.10045420
push dword [ebp - 0x180]
lea ecx, [ebp - 0x864]
mov dword [ebp - 0x504], 0x5f786f62
lea esi, [edi + 0x180]
mov dword [ebp - 0x500], 0x6d656e65
mov word [ebp - 0x4fc], 0x79
call fcn.1002af80
lea ecx, [ebp - 0x504]
mov dword [ebp - 4], 0xc
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006d981
sub ecx, edx
lea eax, [ebp - 0x504]
push ecx
push eax
lea ecx, [ebp - 0x864]
call fcn.1002afa0
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x84c]
movaps xmm0, xmmword [0x10129700]
xorps xmm0, xmmword [0x10129670]
push dword [ebp - 0x180]
movups xmmword [ebp - 0x7ec], xmm0
call fcn.1002af80
lea ecx, [ebp - 0x7ec]
mov byte [ebp - 4], 0xe
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006d9d7
sub ecx, edx
lea eax, [ebp - 0x7ec]
push ecx
push eax
lea ecx, [ebp - 0x84c]
call fcn.1002afa0
lea eax, [ebp - 0x84c]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [edi + 0x1f0]
mov dword [ebp - 0x480], 0xffffffff
call fcn.1003b440
lea eax, [ebp - 0x864]
push eax
lea ecx, [edi + 0x1b8]
call fcn.1003b440
mov eax, dword [ebp - 0x480]
lea ecx, [ebp - 0x84c]
mov dword [edi + 0x208], eax
mov dword [edi + 0x20c], 0
call fcn.10029b80
lea ecx, [ebp - 0x864]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0xa0], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x198], 0
imul eax, dword [edi + 0x198], 0xeb
add eax, 0x14
mov dword [edi + 0x184], eax
mov dword [edi + 0x18c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x19c], eax
lea eax, [ebp - 0xa0]
push eax
call fcn.10045420
lea esi, [edi + 0x210]
mov dword [ebp - 0x3d8], 0xba9d8a87
mov dword [ebp - 0x3d4], 0x808c9783
xor ecx, ecx
mov dword [ebp - 0x3d0], 0x9c89818b
mov byte [ebp - 0x3cc], 0xe5
nop word [eax + eax]
xor byte [ebp + ecx - 0x3d8], 0xe5
inc ecx
cmp ecx, 0xd
jb 0x1006dad0
push dword [ebp - 0x180]
lea ecx, [ebp - 0x894]
call fcn.1002af80
lea ecx, [ebp - 0x3d8]
mov dword [ebp - 4], 0x10
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006db00
sub ecx, edx
lea eax, [ebp - 0x3d8]
push ecx
push eax
lea ecx, [ebp - 0x894]
call fcn.1002afa0
mov dword [ebp - 4], 0x11
mov ecx, 0x10
movaps xmm0, xmmword [0x10129700]
xorps xmm0, xmmword [0x10128d10]
mov word [ebp - 0x594], 0x978a
mov byte [ebp - 0x592], 0xe5
movups xmmword [ebp - 0x5a4], xmm0
nop dword [eax]
xor byte [ebp + ecx - 0x5a4], 0xe5
inc ecx
cmp ecx, 0x13
jb 0x1006db50
push dword [ebp - 0x180]
lea ecx, [ebp - 0x87c]
call fcn.1002af80
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x12
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006db80
sub ecx, edx
lea eax, [ebp - 0x5a4]
push ecx
push eax
lea ecx, [ebp - 0x87c]
call fcn.1002afa0
lea eax, [ebp - 0x87c]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [edi + 0x280]
mov dword [ebp - 0x484], 0xff00ff00
call fcn.1003b440
lea eax, [ebp - 0x894]
push eax
lea ecx, [edi + 0x248]
call fcn.1003b440
mov eax, dword [ebp - 0x484]
lea ecx, [ebp - 0x87c]
mov dword [edi + 0x298], eax
mov dword [edi + 0x29c], 0
call fcn.10029b80
lea ecx, [ebp - 0x894]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0xa4], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x228], 0
imul eax, dword [edi + 0x228], 0xeb
add eax, 0x14
mov dword [edi + 0x214], eax
mov dword [edi + 0x21c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x22c], eax
lea eax, [ebp - 0xa4]
push eax
call fcn.10045420
push dword [ebp - 0x180]
lea ecx, [ebp - 0xc84]
mov dword [ebp - 0x33c], 0x6d656e65
mov word [ebp - 0x338], 0x79
call fcn.1002af80
lea ecx, [ebp - 0x33c]
mov dword [ebp - 4], 0x14
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006dc80
sub ecx, edx
lea eax, [ebp - 0x33c]
push ecx
push eax
lea ecx, [ebp - 0xc84]
call fcn.1002afa0
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0xc6c]
push dword [ebp - 0x180]
mov dword [ebp - 0x4ec], 0x65697266
mov dword [ebp - 0x4e8], 0x796c646e
mov byte [ebp - 0x4e4], 0
call fcn.1002af80
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x16
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006dce0
sub ecx, edx
lea eax, [ebp - 0x4ec]
push ecx
push eax
lea ecx, [ebp - 0xc6c]
call fcn.1002afa0
lea eax, [ebp - 0x53a]
mov dword [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0xc54]
push ecx
lea edx, [ebp - 0xc84]
push edx
lea ecx, [ebp - 0x68c]
call fcn.100b7bf0
push dword [ebp - 0x180]
lea ecx, [ebp - 0x8c4]
mov dword [ebp - 0x4f8], 0x5f786f62
mov dword [ebp - 0x4f4], 0x6c6c6966
mov byte [ebp - 0x4f0], 0
call fcn.1002af80
lea ecx, [ebp - 0x4f8]
mov byte [ebp - 4], 0x19
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006dd60
sub ecx, edx
lea eax, [ebp - 0x4f8]
push ecx
push eax
lea ecx, [ebp - 0x8c4]
call fcn.1002afa0
push dword [ebp - 0x180]
lea ecx, [ebp - 0x8ac]
mov dword [ebp - 0x4a4], 0x20786f62
mov dword [ebp - 0x4a0], 0x6c6c6966
mov byte [ebp - 0x49c], 0
call fcn.1002af80
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 0x1b
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006ddb5
sub ecx, edx
lea eax, [ebp - 0x4a4]
push ecx
push eax
lea ecx, [ebp - 0x8ac]
call fcn.1002afa0
lea ecx, [ebp - 0x680]
call fcn.1002b110
lea eax, [ebp - 0x8c4]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [edi + 0x110]
call fcn.1003b440
lea eax, [ebp - 0x8ac]
mov byte [edi + 0x141], 1
push eax
lea ecx, [edi + 0x148]
call fcn.1003b440
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x141], al
cmovne eax, ecx
mov dword [edi + 0x17c], eax
add eax, 0x14
mov dword [edi + 0xe8], eax
mov dword [edi + 0xec], eax
mov eax, dword [ebp - 0x688]
mov esi, dword [ebp - 0x68c]
mov dword [ebp - 0xd4], eax
cmp esi, eax
je 0x1006de73
lea eax, [edi + 0x160]
mov edi, dword [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
push esi
mov ecx, eax
call fcn.10050040
mov eax, dword [ebp - 0xd8]
add esi, 0x18
cmp esi, edi
jne 0x1006de58
mov edi, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x67c]
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xdc], eax
cmp eax, ecx
je 0x1006df5d
lea ecx, [edi + 0x170]
nop dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x76c]
push eax
call fcn.10028ca0
lea ecx, [edi + 0x170]
mov esi, dword [eax]
lea eax, [ebp - 0x768]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x3c]
lea ecx, [ebp - 0x764]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0x170]
mov esi, eax
lea eax, [ebp - 0xe0]
push eax
call fcn.10028ca0
mov ecx, dword [edi + 0x164]
sub ecx, dword [edi + 0x160]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x3c], eax
jae 0x1006df28
lea eax, [ebp - 0x3c]
push eax
lea ecx, [edi + 0x170]
call fcn.10045420
cmp esi, dword [ebp - 0xd4]
jne 0x1006df3c
mov eax, dword [edi + 0x13c]
test eax, eax
je 0x1006df3c
call eax
mov eax, dword [ebp - 0xdc]
lea ecx, [edi + 0x170]
add eax, 4
mov dword [ebp - 0xdc], eax
cmp eax, dword [ebp - 0xd8]
jne 0x1006dea0
lea ecx, [ebp - 0x680]
call fcn.10028e00
lea ecx, [ebp - 0x8ac]
call fcn.10029b80
lea ecx, [ebp - 0x8c4]
call fcn.10029b80
lea ecx, [ebp - 0x68c]
call fcn.1004fd60
push fcn.10029b80
push 2
push 0x18
lea eax, [ebp - 0xc84]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0xd8]
mov dword [ebp - 0xa8], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xf0], 0
imul eax, dword [edi + 0xf0], 0xeb
add eax, 0x14
mov dword [edi + 0xdc], eax
mov dword [edi + 0xe4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xf4], eax
lea eax, [ebp - 0xa8]
push eax
call fcn.10045420
movaps xmm0, xmmword [0x10129700]
lea ecx, [ebp - 0x8f4]
xorps xmm0, xmmword [0x101293d0]
lea esi, [edi + 0x2a0]
push dword [ebp - 0xe0]
movups xmmword [ebp - 0x7cc], xmm0
mov byte [ebp - 0x7bc], 0
call fcn.1002af80
lea ecx, [ebp - 0x7cc]
mov dword [ebp - 4], 0x1e
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006e033
sub ecx, edx
lea eax, [ebp - 0x7cc]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
call fcn.1002afa0
mov dword [ebp - 4], 0x1f
lea ecx, [ebp - 0x8dc]
push dword [ebp - 0xe0]
mov dword [ebp - 0x454], 0x6d656e65
mov dword [ebp - 0x450], 0x312d79
call fcn.1002af80
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0x20
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006e088
sub ecx, edx
lea eax, [ebp - 0x454]
push ecx
push eax
lea ecx, [ebp - 0x8dc]
call fcn.1002afa0
lea eax, [ebp - 0x8dc]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [edi + 0x310]
mov dword [ebp - 0x488], 0xffff6200
call fcn.1003b440
lea eax, [ebp - 0x8f4]
push eax
lea ecx, [edi + 0x2d8]
call fcn.1003b440
mov eax, dword [ebp - 0x488]
lea ecx, [ebp - 0x8dc]
mov dword [edi + 0x328], eax
mov dword [edi + 0x32c], 0
call fcn.10029b80
lea ecx, [ebp - 0x8f4]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0xac], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x2b8], 0
imul eax, dword [edi + 0x2b8], 0xeb
add eax, 0x14
mov dword [edi + 0x2a4], eax
mov dword [edi + 0x2ac], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x2bc], eax
lea eax, [ebp - 0xac]
push eax
call fcn.10045420
movaps xmm0, xmmword [0x10129700]
lea ecx, [ebp - 0x924]
xorps xmm0, xmmword [0x101294c0]
lea esi, [edi + 0x3c0]
push dword [ebp - 0xe0]
movups xmmword [ebp - 0x7b8], xmm0
mov byte [ebp - 0x7a8], 0
call fcn.1002af80
lea ecx, [ebp - 0x7b8]
mov dword [ebp - 4], 0x22
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006e191
sub ecx, edx
lea eax, [ebp - 0x7b8]
push ecx
push eax
lea ecx, [ebp - 0x924]
call fcn.1002afa0
mov dword [ebp - 4], 0x23
lea ecx, [ebp - 0x90c]
push dword [ebp - 0xe0]
mov dword [ebp - 0x45c], 0x6d656e65
mov dword [ebp - 0x458], 0x322d79
call fcn.1002af80
lea ecx, [ebp - 0x45c]
mov byte [ebp - 4], 0x24
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006e1e6
sub ecx, edx
lea eax, [ebp - 0x45c]
push ecx
push eax
lea ecx, [ebp - 0x90c]
call fcn.1002afa0
lea eax, [ebp - 0x90c]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [edi + 0x430]
mov dword [ebp - 0x48c], 0xff7005ff
call fcn.1003b440
lea eax, [ebp - 0x924]
push eax
lea ecx, [edi + 0x3f8]
call fcn.1003b440
mov eax, dword [ebp - 0x48c]
lea ecx, [ebp - 0x90c]
mov dword [edi + 0x448], eax
mov dword [edi + 0x44c], 0
call fcn.10029b80
lea ecx, [ebp - 0x924]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0xb0], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x3d8], 0
imul eax, dword [edi + 0x3d8], 0xeb
add eax, 0x14
mov dword [edi + 0x3c4], eax
mov dword [edi + 0x3cc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x3dc], eax
lea eax, [ebp - 0xb0]
push eax
call fcn.10045420
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x954]
mov dword [ebp - 0x528], 0x25
lea esi, [edi + 0x4e0]
call fcn.1002af80
lea ecx, [ebp - 0x528]
mov dword [ebp - 4], 0x26
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1006e2e0
sub ecx, edx
lea eax, [ebp - 0x528]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x954]
call fcn.100500e0
mov dword [ebp - 4], 0x27
mov ecx, 0x10
movaps xmm0, xmmword [0x10129700]
xorps xmm0, xmmword [0x10128ca0]
mov dword [ebp - 0x54c], 0x9791ba9c
mov dword [ebp - 0x548], 0x95968b84
mov dword [ebp - 0x544], 0x8b809784
mov word [ebp - 0x540], 0x9c86
mov byte [ebp - 0x53e], 0xe5
movups xmmword [ebp - 0x55c], xmm0
xor byte [ebp + ecx - 0x55c], 0xe5
inc ecx
cmp ecx, 0x1f
jb 0x1006e351
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x93c]
call fcn.1002af80
lea ecx, [ebp - 0x55c]
mov byte [ebp - 4], 0x28
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006e380
sub ecx, edx
lea eax, [ebp - 0x55c]
push ecx
push eax
lea ecx, [ebp - 0x93c]
call fcn.1002afa0
push dword [ebp - 0xe0]
lea ecx, [ebp - 0xf84]
call fcn.1002af80
push 0
push 0x1012644c
lea ecx, [ebp - 0xf84]
mov byte [ebp - 4], 0x2a
call fcn.1002afa0
lea eax, [ebp - 0x93c]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [edi + 0x518]
call fcn.1003b440
mov byte [edi + 0x549], 0
lea eax, [ebp - 0x954]
mov dword [edi + 0x598], 0
lea ecx, [edi + 0x580]
mov dword [edi + 0x4f0], 8
mov dword [edi + 0x4f4], 8
mov dword [edi + 0x554], 0
mov dword [edi + 0x558], 0x43480000
mov dword [edi + 0x550], 0x42c80000
mov dword [edi + 0x564], 0
push eax
mov dword [edi + 0x55c], 0x3f800000
call fcn.100b80b0
lea ecx, [ebp - 0xf84]
call fcn.10029b80
lea ecx, [ebp - 0x93c]
call fcn.10029b80
lea ecx, [ebp - 0x954]
mov dword [ebp - 4], 0xffffffff
call fcn.1004fde0
mov dword [ebp - 0xb4], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x4f8], 0
imul eax, dword [edi + 0x4f8], 0xeb
add eax, 0x14
mov dword [edi + 0x4e4], eax
mov dword [edi + 0x4ec], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x4fc], eax
lea eax, [ebp - 0xb4]
push eax
call fcn.10045420
movaps xmm0, xmmword [0x10129700]
lea esi, [edi + 0x330]
xorps xmm0, xmmword [0x10128ca0]
mov ecx, 0x10
mov word [ebp - 0x5a8], 0xe59c
movups xmmword [ebp - 0x5b8], xmm0
nop dword [eax + eax]
xor byte [ebp + ecx - 0x5b8], 0xe5
inc ecx
cmp ecx, 0x12
jb 0x1006e4e0
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x984]
call fcn.1002af80
lea ecx, [ebp - 0x5b8]
mov dword [ebp - 4], 0x2c
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006e510
sub ecx, edx
lea eax, [ebp - 0x5b8]
push ecx
push eax
lea ecx, [ebp - 0x984]
call fcn.1002afa0
mov dword [ebp - 4], 0x2d
xor ecx, ecx
mov dword [ebp - 0x328], 0x808c9783
mov dword [ebp - 0x324], 0x9c89818b
mov word [ebp - 0x320], 0xd4c8
mov byte [ebp - 0x31e], 0xe5
nop dword [eax]
xor byte [ebp + ecx - 0x328], 0xe5
inc ecx
cmp ecx, 0xb
jb 0x1006e560
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x96c]
call fcn.1002af80
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 0x2e
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006e590
sub ecx, edx
lea eax, [ebp - 0x328]
push ecx
push eax
lea ecx, [ebp - 0x96c]
call fcn.1002afa0
lea eax, [ebp - 0x96c]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [edi + 0x3a0]
mov dword [ebp - 0x490], 0xff001900
call fcn.1003b440
lea eax, [ebp - 0x984]
push eax
lea ecx, [edi + 0x368]
call fcn.1003b440
mov eax, dword [ebp - 0x490]
lea ecx, [ebp - 0x96c]
mov dword [edi + 0x3b8], eax
mov dword [edi + 0x3bc], 0
call fcn.10029b80
lea ecx, [ebp - 0x984]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0xb8], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x348], 0
imul eax, dword [edi + 0x348], 0xeb
add eax, 0x14
mov dword [edi + 0x334], eax
mov dword [edi + 0x33c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x34c], eax
lea eax, [ebp - 0xb8]
push eax
call fcn.10045420
movaps xmm0, xmmword [0x10129700]
lea esi, [edi + 0x450]
xorps xmm0, xmmword [0x10128ca0]
mov ecx, 0x10
mov dword [ebp - 0x580], 0xe5d7ba9c
movups xmmword [ebp - 0x590], xmm0
xor byte [ebp + ecx - 0x590], 0xe5
inc ecx
cmp ecx, 0x14
jb 0x1006e680
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x9b4]
call fcn.1002af80
lea ecx, [ebp - 0x590]
mov dword [ebp - 4], 0x30
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006e6b0
sub ecx, edx
lea eax, [ebp - 0x590]
push ecx
push eax
lea ecx, [ebp - 0x9b4]
call fcn.1002afa0
mov dword [ebp - 4], 0x31
xor ecx, ecx
mov dword [ebp - 0x31c], 0x808c9783
mov dword [ebp - 0x318], 0x9c89818b
mov word [ebp - 0x314], 0xd7c8
mov byte [ebp - 0x312], 0xe5
nop dword [eax]
xor byte [ebp + ecx - 0x31c], 0xe5
inc ecx
cmp ecx, 0xb
jb 0x1006e700
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x99c]
call fcn.1002af80
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 0x32
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006e730
sub ecx, edx
lea eax, [ebp - 0x31c]
push ecx
push eax
lea ecx, [ebp - 0x99c]
call fcn.1002afa0
lea eax, [ebp - 0x99c]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [edi + 0x4c0]
mov dword [ebp - 0x47c], 0xff00ff00
call fcn.1003b440
lea eax, [ebp - 0x9b4]
push eax
lea ecx, [edi + 0x488]
call fcn.1003b440
mov eax, dword [ebp - 0x47c]
lea ecx, [ebp - 0x99c]
mov dword [edi + 0x4d8], eax
mov dword [edi + 0x4dc], 0
call fcn.10029b80
lea ecx, [ebp - 0x9b4]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0xbc], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x468], 0
imul eax, dword [edi + 0x468], 0xeb
add eax, 0x14
mov dword [edi + 0x454], eax
mov dword [edi + 0x45c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x46c], eax
lea eax, [ebp - 0xbc]
push eax
call fcn.10045420
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x9e4]
mov dword [ebp - 0x520], 0x25
lea esi, [edi + 0x59c]
call fcn.1002af80
lea ecx, [ebp - 0x520]
mov dword [ebp - 4], 0x34
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1006e827
sub ecx, edx
lea eax, [ebp - 0x520]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x9e4]
call fcn.100500e0
mov dword [ebp - 4], 0x35
mov ecx, 0x10
movaps xmm0, xmmword [0x10129700]
xorps xmm0, xmmword [0x10128ca0]
mov dword [ebp - 0x56c], 0x9791ba9c
mov dword [ebp - 0x568], 0x95968b84
mov dword [ebp - 0x564], 0x8b809784
mov word [ebp - 0x560], 0x9c86
mov byte [ebp - 0x55e], 0xe5
movups xmmword [ebp - 0x57c], xmm0
nop dword [eax + eax]
xor byte [ebp + ecx - 0x57c], 0xe5
inc ecx
cmp ecx, 0x1f
jb 0x1006e8a0
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x9cc]
call fcn.1002af80
lea ecx, [ebp - 0x57c]
mov byte [ebp - 4], 0x36
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006e8d0
sub ecx, edx
lea eax, [ebp - 0x57c]
push ecx
push eax
lea ecx, [ebp - 0x9cc]
call fcn.1002afa0
push dword [ebp - 0xe0]
lea ecx, [ebp - 0xf9c]
call fcn.1002af80
push 0
push 0x1012644c
lea ecx, [ebp - 0xf9c]
mov byte [ebp - 4], 0x38
call fcn.1002afa0
lea eax, [ebp - 0x9cc]
mov byte [ebp - 4], 0x39
push eax
lea ecx, [edi + 0x5d4]
call fcn.1003b440
mov byte [edi + 0x605], 0
lea eax, [ebp - 0x9e4]
mov dword [edi + 0x654], 0
lea ecx, [edi + 0x63c]
mov dword [edi + 0x5ac], 8
mov dword [edi + 0x5b0], 8
mov dword [edi + 0x610], 0
mov dword [edi + 0x614], 0x43480000
mov dword [edi + 0x60c], 0x42c80000
mov dword [edi + 0x620], 0
push eax
mov dword [edi + 0x618], 0x3f800000
call fcn.100b80b0
lea ecx, [ebp - 0xf9c]
call fcn.10029b80
lea ecx, [ebp - 0x9cc]
call fcn.10029b80
lea ecx, [ebp - 0x9e4]
mov dword [ebp - 4], 0xffffffff
call fcn.1004fde0
mov dword [ebp - 0xc0], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x5b4], 0
imul eax, dword [edi + 0x5b4], 0xeb
add eax, 0x14
mov dword [edi + 0x5a0], eax
mov dword [edi + 0x5a8], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x5b8], eax
lea eax, [ebp - 0xc0]
push eax
call fcn.10045420
push dword [ebp - 0xe0]
lea ecx, [ebp - 0xa14]
mov dword [ebp - 0x464], 0x6d726f64
lea esi, [edi + 0x658]
mov dword [ebp - 0x460], 0x746e61
call fcn.1002af80
lea ecx, [ebp - 0x464]
mov dword [ebp - 4], 0x3a
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006ea40
sub ecx, edx
lea eax, [ebp - 0x464]
push ecx
push eax
lea ecx, [ebp - 0xa14]
call fcn.1002afa0
mov dword [ebp - 4], 0x3b
lea ecx, [ebp - 0x9fc]
movaps xmm0, xmmword [0x10129700]
xorps xmm0, xmmword [0x10129630]
push dword [ebp - 0xe0]
movups xmmword [ebp - 0x7dc], xmm0
call fcn.1002af80
lea ecx, [ebp - 0x7dc]
mov byte [ebp - 4], 0x3c
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006ea96
sub ecx, edx
lea eax, [ebp - 0x7dc]
push ecx
push eax
lea ecx, [ebp - 0x9fc]
call fcn.1002afa0
lea eax, [ebp - 0xa14]
mov byte [ebp - 4], 0x3d
push eax
lea ecx, [edi + 0x690]
call fcn.1003b440
lea eax, [ebp - 0x9fc]
mov byte [edi + 0x6c1], 1
push eax
lea ecx, [edi + 0x6c8]
call fcn.1003b440
lea ecx, [ebp - 0x9fc]
mov byte [edi + 0x6c4], 0
call fcn.10029b80
lea ecx, [ebp - 0xa14]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0xc4], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x670], 0
imul eax, dword [edi + 0x670], 0xeb
add eax, 0x14
mov dword [edi + 0x65c], eax
mov dword [edi + 0x664], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x674], eax
lea eax, [ebp - 0xc4]
push eax
call fcn.10045420
push dword [ebp - 0xe0]
lea ecx, [ebp - 0xcb4]
mov dword [ebp - 0x34c], 0x6d656e65
mov word [ebp - 0x348], 0x79
call fcn.1002af80
lea ecx, [ebp - 0x34c]
mov dword [ebp - 4], 0x3e
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006eb80
sub ecx, edx
lea eax, [ebp - 0x34c]
push ecx
push eax
lea ecx, [ebp - 0xcb4]
call fcn.1002afa0
mov dword [ebp - 4], 0x3f
lea ecx, [ebp - 0xc9c]
push dword [ebp - 0xe0]
mov dword [ebp - 0x4b0], 0x65697266
mov dword [ebp - 0x4ac], 0x796c646e
mov byte [ebp - 0x4a8], 0
call fcn.1002af80
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 0x40
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006ebe0
sub ecx, edx
lea eax, [ebp - 0x4b0]
push ecx
push eax
lea ecx, [ebp - 0xc9c]
call fcn.1002afa0
lea eax, [ebp - 0x539]
mov dword [ebp - 4], 0x41
push eax
lea ecx, [ebp - 0xc84]
push ecx
lea edx, [ebp - 0xcb4]
push edx
lea ecx, [ebp - 0x6ac]
call fcn.100b7bf0
push dword [ebp - 0xe0]
lea ecx, [ebp - 0xa44]
mov dword [ebp - 0x2cc], 0x656d616e
mov byte [ebp - 0x2c8], 0
call fcn.1002af80
lea ecx, [ebp - 0x2cc]
mov byte [ebp - 4], 0x43
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006ec52
sub ecx, edx
lea eax, [ebp - 0x2cc]
push ecx
push eax
lea ecx, [ebp - 0xa44]
call fcn.1002afa0
push dword [ebp - 0xe0]
lea ecx, [ebp - 0xa2c]
mov dword [ebp - 0x2d4], 0x656d616e
mov byte [ebp - 0x2d0], 0
call fcn.1002af80
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 0x45
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006eca0
sub ecx, edx
lea eax, [ebp - 0x2d4]
push ecx
push eax
lea ecx, [ebp - 0xa2c]
call fcn.1002afa0
lea ecx, [ebp - 0x6a0]
call fcn.1002b110
lea eax, [ebp - 0xa44]
mov byte [ebp - 4], 0x47
push eax
lea ecx, [edi + 0x968]
call fcn.1003b440
lea eax, [ebp - 0xa2c]
mov byte [edi + 0x999], 1
push eax
lea ecx, [edi + 0x9a0]
call fcn.1003b440
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x999], al
cmovne eax, ecx
mov dword [edi + 0x9d4], eax
add eax, 0x14
mov dword [edi + 0x940], eax
mov dword [edi + 0x944], eax
mov eax, dword [ebp - 0x6a8]
mov esi, dword [ebp - 0x6ac]
mov dword [ebp - 0xd4], eax
cmp esi, eax
je 0x1006ed5e
lea eax, [edi + 0x9b8]
mov edi, dword [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
push esi
mov ecx, eax
call fcn.10050040
mov eax, dword [ebp - 0xd8]
add esi, 0x18
cmp esi, edi
jne 0x1006ed43
mov edi, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x69c]
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xdc], eax
cmp eax, ecx
je 0x1006ee41
lea ecx, [edi + 0x9c8]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x760]
push eax
call fcn.10028ca0
lea ecx, [edi + 0x9c8]
mov esi, dword [eax]
lea eax, [ebp - 0x75c]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x798]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0x9c8]
mov esi, eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.10028ca0
mov ecx, dword [edi + 0x9bc]
sub ecx, dword [edi + 0x9b8]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x40], eax
jae 0x1006ee0c
lea eax, [ebp - 0x40]
push eax
lea ecx, [edi + 0x9c8]
call fcn.10045420
cmp esi, dword [ebp - 0xd4]
jne 0x1006ee20
mov eax, dword [edi + 0x994]
test eax, eax
je 0x1006ee20
call eax
mov eax, dword [ebp - 0xdc]
lea ecx, [edi + 0x9c8]
add eax, 4
mov dword [ebp - 0xdc], eax
cmp eax, dword [ebp - 0xd8]
jne 0x1006ed84
lea ecx, [ebp - 0x6a0]
call fcn.10028e00
lea ecx, [ebp - 0xa2c]
call fcn.10029b80
lea ecx, [ebp - 0xa44]
call fcn.10029b80
lea ecx, [ebp - 0x6ac]
call fcn.1004fd60
push fcn.10029b80
push 2
push 0x18
lea eax, [ebp - 0xcb4]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0x930]
mov dword [ebp - 0x98], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x948], 0
imul eax, dword [edi + 0x948], 0xeb
add eax, 0x14
mov dword [edi + 0x934], eax
mov dword [edi + 0x93c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x94c], eax
lea eax, [ebp - 0x98]
push eax
call fcn.10045420
mov esi, dword [0x10126e64]
xor ecx, ecx
mov dword [ebp - 0x310], 0x8088848b
mov dword [ebp - 0x30c], 0x898a86ba
mov word [ebp - 0x308], 0x978a
mov byte [ebp - 0x306], 0xe5
xor byte [ebp + ecx - 0x310], 0xe5
inc ecx
cmp ecx, 0xb
jb 0x1006ef00
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0xa74]
call fcn.1002af80
lea ecx, [ebp - 0x310]
mov dword [ebp - 4], 0x48
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006ef30
sub ecx, edx
lea eax, [ebp - 0x310]
push ecx
push eax
lea ecx, [ebp - 0xa74]
call fcn.1002afa0
mov dword [ebp - 4], 0x49
xor ecx, ecx
mov dword [ebp - 0x304], 0x8088848b
mov dword [ebp - 0x300], 0x898a86c5
mov word [ebp - 0x2fc], 0x978a
mov byte [ebp - 0x2fa], 0xe5
nop dword [eax]
xor byte [ebp + ecx - 0x304], 0xe5
inc ecx
cmp ecx, 0xb
jb 0x1006ef80
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0xa5c]
call fcn.1002af80
lea ecx, [ebp - 0x304]
mov byte [ebp - 4], 0x4a
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006efb0
sub ecx, edx
lea eax, [ebp - 0x304]
push ecx
push eax
lea ecx, [ebp - 0xa5c]
call fcn.1002afa0
lea eax, [ebp - 0xa5c]
mov byte [ebp - 4], 0x4b
push eax
lea ecx, [edi + 0xa48]
call fcn.1003b440
lea eax, [ebp - 0xa74]
push eax
lea ecx, [edi + 0xa10]
call fcn.1003b440
mov dword [edi + 0xa60], esi
lea ecx, [ebp - 0xa5c]
mov dword [edi + 0xa64], 0
call fcn.10029b80
lea ecx, [ebp - 0xa74]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
lea eax, [edi + 0x9d8]
mov dword [ebp - 0xc8], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x9f0], 0
imul eax, dword [edi + 0x9f0], 0xeb
add eax, 0x14
mov dword [edi + 0x9dc], eax
mov dword [edi + 0x9e4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x9f4], eax
lea eax, [ebp - 0xc8]
push eax
call fcn.10045420
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0xce4]
mov dword [ebp - 0x3b4], 0x6d656e65
mov word [ebp - 0x3b0], 0x79
call fcn.1002af80
lea ecx, [ebp - 0x3b4]
mov dword [ebp - 4], 0x4c
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f0a0
sub ecx, edx
lea eax, [ebp - 0x3b4]
push ecx
push eax
lea ecx, [ebp - 0xce4]
call fcn.1002afa0
mov dword [ebp - 4], 0x4d
lea ecx, [ebp - 0xccc]
push dword [ebp - 0x2a8]
mov dword [ebp - 0x4bc], 0x65697266
mov dword [ebp - 0x4b8], 0x796c646e
mov byte [ebp - 0x4b4], 0
call fcn.1002af80
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 4], 0x4e
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f100
sub ecx, edx
lea eax, [ebp - 0x4bc]
push ecx
push eax
lea ecx, [ebp - 0xccc]
call fcn.1002afa0
lea eax, [ebp - 0x538]
mov dword [ebp - 4], 0x4f
push eax
lea ecx, [ebp - 0xcb4]
push ecx
lea edx, [ebp - 0xce4]
push edx
lea ecx, [ebp - 0x6cc]
call fcn.100b7bf0
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0xaa4]
mov dword [ebp - 0x3e8], 0x6c616568
mov word [ebp - 0x3e4], 0x6874
mov byte [ebp - 0x3e2], 0
call fcn.1002af80
lea ecx, [ebp - 0x3e8]
mov byte [ebp - 4], 0x51
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f180
sub ecx, edx
lea eax, [ebp - 0x3e8]
push ecx
push eax
lea ecx, [ebp - 0xaa4]
call fcn.1002afa0
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0xa8c]
mov dword [ebp - 0x3f0], 0x6c616568
mov word [ebp - 0x3ec], 0x6874
mov byte [ebp - 0x3ea], 0
call fcn.1002af80
lea ecx, [ebp - 0x3f0]
mov byte [ebp - 4], 0x53
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f1d4
sub ecx, edx
lea eax, [ebp - 0x3f0]
push ecx
push eax
lea ecx, [ebp - 0xa8c]
call fcn.1002afa0
lea ecx, [ebp - 0x6c0]
call fcn.1002b110
lea eax, [ebp - 0xaa4]
mov byte [ebp - 4], 0x55
push eax
lea ecx, [edi + 0xaa0]
call fcn.1003b440
lea eax, [ebp - 0xa8c]
mov byte [edi + 0xad1], 1
push eax
lea ecx, [edi + 0xad8]
call fcn.1003b440
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0xad1], al
cmovne eax, ecx
mov dword [edi + 0xb0c], eax
add eax, 0x14
mov dword [edi + 0xa78], eax
mov dword [edi + 0xa7c], eax
mov eax, dword [ebp - 0x6c8]
mov esi, dword [ebp - 0x6cc]
mov dword [ebp - 0xd4], eax
cmp esi, eax
je 0x1006f292
lea eax, [edi + 0xaf0]
mov edi, dword [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
push esi
mov ecx, eax
call fcn.10050040
mov eax, dword [ebp - 0xd8]
add esi, 0x18
cmp esi, edi
jne 0x1006f277
mov edi, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x6bc]
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xdc], eax
cmp eax, ecx
je 0x1006f37d
lea ecx, [edi + 0xb00]
nop dword [eax + eax]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x794]
push eax
call fcn.10028ca0
lea ecx, [edi + 0xb00]
mov esi, dword [eax]
lea eax, [ebp - 0x790]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x34]
lea ecx, [ebp - 0x78c]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0xb00]
mov esi, eax
lea eax, [ebp - 0x444]
push eax
call fcn.10028ca0
mov ecx, dword [edi + 0xaf4]
sub ecx, dword [edi + 0xaf0]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x34], eax
jae 0x1006f348
lea eax, [ebp - 0x34]
push eax
lea ecx, [edi + 0xb00]
call fcn.10045420
cmp esi, dword [ebp - 0xd4]
jne 0x1006f35c
mov eax, dword [edi + 0xacc]
test eax, eax
je 0x1006f35c
call eax
mov eax, dword [ebp - 0xdc]
lea ecx, [edi + 0xb00]
add eax, 4
mov dword [ebp - 0xdc], eax
cmp eax, dword [ebp - 0xd8]
jne 0x1006f2c0
lea ecx, [ebp - 0x6c0]
call fcn.10028e00
lea ecx, [ebp - 0xa8c]
call fcn.10029b80
lea ecx, [ebp - 0xaa4]
call fcn.10029b80
lea ecx, [ebp - 0x6cc]
call fcn.1004fd60
push fcn.10029b80
push 2
push 0x18
lea eax, [ebp - 0xce4]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0xa68]
mov dword [ebp - 0xcc], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xa80], 0
imul eax, dword [edi + 0xa80], 0xeb
add eax, 0x14
mov dword [edi + 0xa6c], eax
mov dword [edi + 0xa74], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xa84], eax
lea eax, [ebp - 0xcc]
push eax
call fcn.10045420
push dword [ebp - 0x444]
lea ecx, [ebp - 0xd14]
mov dword [ebp - 0x3ac], 0x6d656e65
mov word [ebp - 0x3a8], 0x79
call fcn.1002af80
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 4], 0x56
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f444
sub ecx, edx
lea eax, [ebp - 0x3ac]
push ecx
push eax
lea ecx, [ebp - 0xd14]
call fcn.1002afa0
mov dword [ebp - 4], 0x57
lea ecx, [ebp - 0xcfc]
push dword [ebp - 0x444]
mov dword [ebp - 0x4c8], 0x65697266
mov dword [ebp - 0x4c4], 0x796c646e
mov byte [ebp - 0x4c0], 0
call fcn.1002af80
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x58
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f4a0
sub ecx, edx
lea eax, [ebp - 0x4c8]
push ecx
push eax
lea ecx, [ebp - 0xcfc]
call fcn.1002afa0
lea eax, [ebp - 0x537]
mov dword [ebp - 4], 0x59
push eax
lea ecx, [ebp - 0xce4]
push ecx
lea edx, [ebp - 0xd14]
push edx
lea ecx, [ebp - 0x6ec]
call fcn.100b7bf0
push dword [ebp - 0x444]
lea ecx, [ebp - 0xad4]
mov dword [ebp - 0x39c], 0x6f6d7261
mov word [ebp - 0x398], 0x72
call fcn.1002af80
lea ecx, [ebp - 0x39c]
mov byte [ebp - 4], 0x5b
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f514
sub ecx, edx
lea eax, [ebp - 0x39c]
push ecx
push eax
lea ecx, [ebp - 0xad4]
call fcn.1002afa0
push dword [ebp - 0x444]
lea ecx, [ebp - 0xabc]
mov dword [ebp - 0x394], 0x6f6d7261
mov word [ebp - 0x390], 0x72
call fcn.1002af80
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 0x5d
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f561
sub ecx, edx
lea eax, [ebp - 0x394]
push ecx
push eax
lea ecx, [ebp - 0xabc]
call fcn.1002afa0
lea ecx, [ebp - 0x6e0]
call fcn.1002b110
lea eax, [ebp - 0xad4]
mov byte [ebp - 4], 0x5f
push eax
lea ecx, [edi + 0xb48]
call fcn.1003b440
lea eax, [ebp - 0xabc]
mov byte [edi + 0xb79], 1
push eax
lea ecx, [edi + 0xb80]
call fcn.1003b440
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0xb79], al
cmovne eax, ecx
mov dword [edi + 0xbb4], eax
add eax, 0x14
mov dword [edi + 0xb20], eax
mov dword [edi + 0xb24], eax
mov eax, dword [ebp - 0x6e8]
mov esi, dword [ebp - 0x6ec]
mov dword [ebp - 0xd4], eax
cmp esi, eax
je 0x1006f61f
lea eax, [edi + 0xb98]
mov edi, dword [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
push esi
mov ecx, eax
call fcn.10050040
mov eax, dword [ebp - 0xd8]
add esi, 0x18
cmp esi, edi
jne 0x1006f604
mov edi, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x6dc]
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xdc], eax
cmp eax, ecx
je 0x1006f702
lea ecx, [edi + 0xba8]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x788]
push eax
call fcn.10028ca0
lea ecx, [edi + 0xba8]
mov esi, dword [eax]
lea eax, [ebp - 0x784]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x780]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0xba8]
mov esi, eax
lea eax, [ebp - 0x194]
push eax
call fcn.10028ca0
mov ecx, dword [edi + 0xb9c]
sub ecx, dword [edi + 0xb98]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x30], eax
jae 0x1006f6cd
lea eax, [ebp - 0x30]
push eax
lea ecx, [edi + 0xba8]
call fcn.10045420
cmp esi, dword [ebp - 0xd4]
jne 0x1006f6e1
mov eax, dword [edi + 0xb74]
test eax, eax
je 0x1006f6e1
call eax
mov eax, dword [ebp - 0xdc]
lea ecx, [edi + 0xba8]
add eax, 4
mov dword [ebp - 0xdc], eax
cmp eax, dword [ebp - 0xd8]
jne 0x1006f645
lea ecx, [ebp - 0x6e0]
call fcn.10028e00
lea ecx, [ebp - 0xabc]
call fcn.10029b80
lea ecx, [ebp - 0xad4]
call fcn.10029b80
lea ecx, [ebp - 0x6ec]
call fcn.1004fd60
push fcn.10029b80
push 2
push 0x18
lea eax, [ebp - 0xd14]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0xb10]
mov dword [ebp - 0x74], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xb28], 0
imul eax, dword [edi + 0xb28], 0xeb
add eax, 0x14
mov dword [edi + 0xb14], eax
mov dword [edi + 0xb1c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xb2c], eax
lea eax, [ebp - 0x74]
push eax
call fcn.10045420
push dword [ebp - 0x194]
lea ecx, [ebp - 0x1198]
mov dword [ebp - 0x3bc], 0x656e6f6d
mov word [ebp - 0x3b8], 0x79
call fcn.1002af80
lea ecx, [ebp - 0x3bc]
mov dword [ebp - 4], 0x60
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f7c3
sub ecx, edx
lea eax, [ebp - 0x3bc]
push ecx
push eax
lea ecx, [ebp - 0x1198]
call fcn.1002afa0
mov dword [ebp - 4], 0x61
lea ecx, [ebp - 0x1180]
push dword [ebp - 0x194]
mov dword [ebp - 0x374], 0x6f6d7261
mov word [ebp - 0x370], 0x72
call fcn.1002af80
lea ecx, [ebp - 0x374]
mov byte [ebp - 4], 0x62
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f817
sub ecx, edx
lea eax, [ebp - 0x374]
push ecx
push eax
lea ecx, [ebp - 0x1180]
call fcn.1002afa0
push dword [ebp - 0x194]
lea ecx, [ebp - 0x1168]
mov dword [ebp - 0x3f8], 0x706f6373
mov word [ebp - 0x3f4], 0x6465
mov byte [ebp - 0x3f2], 0
call fcn.1002af80
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 0x64
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f870
sub ecx, edx
lea eax, [ebp - 0x3f8]
push ecx
push eax
lea ecx, [ebp - 0x1168]
call fcn.1002afa0
push dword [ebp - 0x194]
lea ecx, [ebp - 0x1150]
mov dword [ebp - 0x46c], 0x73616c66
mov dword [ebp - 0x468], 0x646568
call fcn.1002af80
lea ecx, [ebp - 0x46c]
mov byte [ebp - 4], 0x66
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f8c0
sub ecx, edx
lea eax, [ebp - 0x46c]
push ecx
push eax
lea ecx, [ebp - 0x1150]
call fcn.1002afa0
push dword [ebp - 0x194]
lea ecx, [ebp - 0x1138]
mov dword [ebp - 0x51c], 0x6f6c6572
mov dword [ebp - 0x518], 0x6e696461
mov word [ebp - 0x514], 0x67
call fcn.1002af80
lea ecx, [ebp - 0x51c]
mov byte [ebp - 4], 0x68
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f917
sub ecx, edx
lea eax, [ebp - 0x51c]
push ecx
push eax
lea ecx, [ebp - 0x1138]
call fcn.1002afa0
push dword [ebp - 0x194]
lea ecx, [ebp - 0x1120]
mov dword [ebp - 0x2c4], 0x626d6f62
mov byte [ebp - 0x2c0], 0
call fcn.1002af80
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x6a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f962
sub ecx, edx
lea eax, [ebp - 0x2c4]
push ecx
push eax
lea ecx, [ebp - 0x1120]
call fcn.1002afa0
lea eax, [ebp - 0x536]
mov dword [ebp - 4], 0x6b
push eax
lea ecx, [ebp - 0x1108]
push ecx
lea edx, [ebp - 0x1198]
push edx
lea ecx, [ebp - 0x6f8]
call fcn.100b7bf0
mov dword [ebp - 0x358], 0x82848983
xor ecx, ecx
mov dword [ebp - 0x354], 0x8b80ba96
mov dword [ebp - 0x350], 0xe59c8880
nop word [eax + eax]
xor byte [ebp + ecx - 0x358], 0xe5
inc ecx
cmp ecx, 0xc
jb 0x1006f9d0
push dword [ebp - 0x194]
lea ecx, [ebp - 0xb04]
call fcn.1002af80
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x6d
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006fa00
sub ecx, edx
lea eax, [ebp - 0x358]
push ecx
push eax
lea ecx, [ebp - 0xb04]
call fcn.1002afa0
mov dword [ebp - 0x36c], 0x82848983
xor ecx, ecx
mov dword [ebp - 0x368], 0x8b80c596
mov dword [ebp - 0x364], 0xe59c8880
nop dword [eax]
xor byte [ebp + ecx - 0x36c], 0xe5
inc ecx
cmp ecx, 0xc
jb 0x1006fa40
push dword [ebp - 0x194]
lea ecx, [ebp - 0xaec]
call fcn.1002af80
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0x6f
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006fa70
sub ecx, edx
lea eax, [ebp - 0x36c]
push ecx
push eax
lea ecx, [ebp - 0xaec]
call fcn.1002afa0
lea ecx, [ebp - 0x650]
call fcn.1002b110
lea eax, [ebp - 0xb04]
mov byte [ebp - 4], 0x71
push eax
lea ecx, [edi + 0xbf0]
call fcn.1003b440
lea eax, [ebp - 0xaec]
mov byte [edi + 0xc21], 1
push eax
lea ecx, [edi + 0xc28]
call fcn.1003b440
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0xc21], al
cmovne eax, ecx
mov dword [edi + 0xc5c], eax
add eax, 0x14
mov dword [edi + 0xbc8], eax
mov dword [edi + 0xbcc], eax
mov eax, dword [ebp - 0x6f4]
mov esi, dword [ebp - 0x6f8]
mov dword [ebp - 0xd4], eax
cmp esi, eax
je 0x1006fb2e
lea eax, [edi + 0xc40]
mov edi, dword [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
push esi
mov ecx, eax
call fcn.10050040
mov eax, dword [ebp - 0xd8]
add esi, 0x18
cmp esi, edi
jne 0x1006fb13
mov edi, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x64c]
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xdc], eax
cmp eax, ecx
je 0x1006fc11
lea ecx, [edi + 0xc50]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x77c]
push eax
call fcn.10028ca0
lea ecx, [edi + 0xc50]
mov esi, dword [eax]
lea eax, [ebp - 0x758]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x754]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0xc50]
mov esi, eax
lea eax, [ebp - 0x184]
push eax
call fcn.10028ca0
mov ecx, dword [edi + 0xc44]
sub ecx, dword [edi + 0xc40]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x2c], eax
jae 0x1006fbdc
lea eax, [ebp - 0x2c]
push eax
lea ecx, [edi + 0xc50]
call fcn.10045420
cmp esi, dword [ebp - 0xd4]
jne 0x1006fbf0
mov eax, dword [edi + 0xc1c]
test eax, eax
je 0x1006fbf0
call eax
mov eax, dword [ebp - 0xdc]
lea ecx, [edi + 0xc50]
add eax, 4
mov dword [ebp - 0xdc], eax
cmp eax, dword [ebp - 0xd8]
jne 0x1006fb54
lea ecx, [ebp - 0x650]
call fcn.10028e00
lea ecx, [ebp - 0xaec]
call fcn.10029b80
lea ecx, [ebp - 0xb04]
call fcn.10029b80
lea ecx, [ebp - 0x6f8]
call fcn.1004fd60
push fcn.10029b80
push 6
push 0x18
lea eax, [ebp - 0x1198]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0xbb8]
mov dword [ebp - 0x84], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xbd0], 0
imul eax, dword [edi + 0xbd0], 0xeb
add eax, 0x14
mov dword [edi + 0xbbc], eax
mov dword [edi + 0xbc4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xbd4], eax
lea eax, [ebp - 0x84]
push eax
call fcn.10045420
push dword [ebp - 0x184]
lea ecx, [ebp - 0x10a8]
mov dword [ebp - 0x37c], 0x656e6f6d
mov word [ebp - 0x378], 0x79
call fcn.1002af80
lea ecx, [ebp - 0x37c]
mov dword [ebp - 4], 0x72
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006fcd8
sub ecx, edx
lea eax, [ebp - 0x37c]
push ecx
push eax
lea ecx, [ebp - 0x10a8]
call fcn.1002afa0
mov dword [ebp - 4], 0x73
lea ecx, [ebp - 0x1090]
push dword [ebp - 0x184]
mov dword [ebp - 0x360], 0x6f6d7261
mov word [ebp - 0x35c], 0x72
call fcn.1002af80
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 0x74
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006fd30
sub ecx, edx
lea eax, [ebp - 0x360]
push ecx
push eax
lea ecx, [ebp - 0x1090]
call fcn.1002afa0
push dword [ebp - 0x184]
lea ecx, [ebp - 0x1078]
mov dword [ebp - 0x400], 0x706f6373
mov word [ebp - 0x3fc], 0x6465
mov byte [ebp - 0x3fa], 0
call fcn.1002af80
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x76
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006fd84
sub ecx, edx
lea eax, [ebp - 0x400]
push ecx
push eax
lea ecx, [ebp - 0x1078]
call fcn.1002afa0
push dword [ebp - 0x184]
lea ecx, [ebp - 0x1060]
mov dword [ebp - 0x474], 0x73616c66
mov dword [ebp - 0x470], 0x646568
call fcn.1002af80
lea ecx, [ebp - 0x474]
mov byte [ebp - 4], 0x78
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006fdd2
sub ecx, edx
lea eax, [ebp - 0x474]
push ecx
push eax
lea ecx, [ebp - 0x1060]
call fcn.1002afa0
push dword [ebp - 0x184]
lea ecx, [ebp - 0x1048]
mov dword [ebp - 0x510], 0x6f6c6572
mov dword [ebp - 0x50c], 0x6e696461
mov word [ebp - 0x508], 0x67
call fcn.1002af80
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0x7a
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006fe30
sub ecx, edx
lea eax, [ebp - 0x510]
push ecx
push eax
lea ecx, [ebp - 0x1048]
call fcn.1002afa0
push dword [ebp - 0x184]
lea ecx, [ebp - 0x1030]
mov dword [ebp - 0x2dc], 0x626d6f62
mov byte [ebp - 0x2d8], 0
call fcn.1002af80
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 0x7c
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006fe80
sub ecx, edx
lea eax, [ebp - 0x2dc]
push ecx
push eax
lea ecx, [ebp - 0x1030]
call fcn.1002afa0
lea eax, [ebp - 0x535]
mov dword [ebp - 4], 0x7d
push eax
lea ecx, [ebp - 0x1018]
push ecx
lea edx, [ebp - 0x10a8]
push edx
lea ecx, [ebp - 0x714]
call fcn.100b7bf0
mov dword [ebp - 0x424], 0x82848983
xor ecx, ecx
mov dword [ebp - 0x420], 0x9783ba96
mov dword [ebp - 0x41c], 0x818b808c
mov word [ebp - 0x418], 0x9c89
mov byte [ebp - 0x416], 0xe5
xor byte [ebp + ecx - 0x424], 0xe5
inc ecx
cmp ecx, 0xf
jb 0x1006fef3
push dword [ebp - 0x184]
lea ecx, [ebp - 0xb34]
call fcn.1002af80
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x7f
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006ff20
sub ecx, edx
lea eax, [ebp - 0x424]
push ecx
push eax
lea ecx, [ebp - 0xb34]
call fcn.1002afa0
mov dword [ebp - 0x434], 0x82848983
xor ecx, ecx
mov dword [ebp - 0x430], 0x9783c596
mov dword [ebp - 0x42c], 0x818b808c
mov word [ebp - 0x428], 0x9c89
mov byte [ebp - 0x426], 0xe5
nop dword [eax]
xor byte [ebp + ecx - 0x434], 0xe5
inc ecx
cmp ecx, 0xf
jb 0x1006ff70
push dword [ebp - 0x184]
lea ecx, [ebp - 0xb1c]
call fcn.1002af80
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 0x81
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006ffa0
sub ecx, edx
lea eax, [ebp - 0x434]
push ecx
push eax
lea ecx, [ebp - 0xb1c]
call fcn.1002afa0
lea ecx, [ebp - 0x708]
call fcn.1002b110
lea eax, [ebp - 0xb34]
mov byte [ebp - 4], 0x83
push eax
lea ecx, [edi + 0xc98]
call fcn.1003b440
lea eax, [ebp - 0xb1c]
mov byte [edi + 0xcc9], 1
push eax
lea ecx, [edi + 0xcd0]
call fcn.1003b440
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0xcc9], al
cmovne eax, ecx
mov dword [edi + 0xd04], eax
add eax, 0x14
mov dword [edi + 0xc70], eax
mov dword [edi + 0xc74], eax
mov eax, dword [ebp - 0x710]
mov esi, dword [ebp - 0x714]
mov dword [ebp - 0xd4], eax
cmp esi, eax
je 0x1007005e
lea eax, [edi + 0xce8]
mov edi, dword [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
push esi
mov ecx, eax
call fcn.10050040
mov eax, dword [ebp - 0xd8]
add esi, 0x18
cmp esi, edi
jne 0x10070043
mov edi, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xdc], eax
cmp eax, ecx
je 0x10070141
lea ecx, [edi + 0xcf8]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x750]
push eax
call fcn.10028ca0
lea ecx, [edi + 0xcf8]
mov esi, dword [eax]
lea eax, [ebp - 0x74c]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x748]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0xcf8]
mov esi, eax
lea eax, [ebp - 0x478]
push eax
call fcn.10028ca0
mov ecx, dword [edi + 0xcec]
sub ecx, dword [edi + 0xce8]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x28], eax
jae 0x1007010c
lea eax, [ebp - 0x28]
push eax
lea ecx, [edi + 0xcf8]
call fcn.10045420
cmp esi, dword [ebp - 0xd4]
jne 0x10070120
mov eax, dword [edi + 0xcc4]
test eax, eax
je 0x10070120
call eax
mov eax, dword [ebp - 0xdc]
lea ecx, [edi + 0xcf8]
add eax, 4
mov dword [ebp - 0xdc], eax
cmp eax, dword [ebp - 0xd8]
jne 0x10070084
lea ecx, [ebp - 0x708]
call fcn.10028e00
lea ecx, [ebp - 0xb1c]
call fcn.10029b80
lea ecx, [ebp - 0xb34]
call fcn.10029b80
lea ecx, [ebp - 0x714]
call fcn.1004fd60
push fcn.10029b80
push 6
push 0x18
lea eax, [ebp - 0x10a8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0xc60]
mov dword [ebp - 0x88], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xc78], 0
imul eax, dword [edi + 0xc78], 0xeb
add eax, 0x14
mov dword [edi + 0xc64], eax
mov dword [edi + 0xc6c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xc7c], eax
lea eax, [ebp - 0x88]
push eax
call fcn.10045420
push dword [ebp - 0x478]
lea ecx, [ebp - 0xd44]
mov dword [ebp - 0x3a4], 0x6d656e65
mov word [ebp - 0x3a0], 0x79
call fcn.1002af80
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 4], 0x84
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10070208
sub ecx, edx
lea eax, [ebp - 0x3a4]
push ecx
push eax
lea ecx, [ebp - 0xd44]
call fcn.1002afa0
mov dword [ebp - 4], 0x85
lea ecx, [ebp - 0xd2c]
push dword [ebp - 0x478]
mov dword [ebp - 0x4d4], 0x65697266
mov dword [ebp - 0x4d0], 0x796c646e
mov byte [ebp - 0x4cc], 0
call fcn.1002af80
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x86
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10070264
sub ecx, edx
lea eax, [ebp - 0x4d4]
push ecx
push eax
lea ecx, [ebp - 0xd2c]
call fcn.1002afa0
lea eax, [ebp - 0x52d]
mov dword [ebp - 4], 0x87
push eax
lea ecx, [ebp - 0xd14]
push ecx
lea edx, [ebp - 0xd44]
push edx
lea ecx, [ebp - 0x5d4]
call fcn.100b7bf0
push dword [ebp - 0x478]
lea ecx, [ebp - 0xb64]
mov dword [ebp - 0x408], 0x70616577
mov word [ebp - 0x404], 0x6e6f
mov byte [ebp - 0x402], 0
call fcn.1002af80
lea ecx, [ebp - 0x408]
mov byte [ebp - 4], 0x89
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100702e0
sub ecx, edx
lea eax, [ebp - 0x408]
push ecx
push eax
lea ecx, [ebp - 0xb64]
call fcn.1002afa0
push dword [ebp - 0x478]
lea ecx, [ebp - 0xb4c]
mov dword [ebp - 0x3e0], 0x70616577
mov word [ebp - 0x3dc], 0x6e6f
mov byte [ebp - 0x3da], 0
call fcn.1002af80
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 4], 0x8b
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10070334
sub ecx, edx
lea eax, [ebp - 0x3e0]
push ecx
push eax
lea ecx, [ebp - 0xb4c]
call fcn.1002afa0
lea ecx, [ebp - 0x5c8]
call fcn.1002b110
lea eax, [ebp - 0xb64]
mov byte [ebp - 4], 0x8d
push eax
lea ecx, [edi + 0xd40]
call fcn.1003b440
lea eax, [ebp - 0xb4c]
mov byte [edi + 0xd71], 1
push eax
lea ecx, [edi + 0xd78]
call fcn.1003b440
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0xd71], al
cmovne eax, ecx
mov dword [edi + 0xdac], eax
add eax, 0x14
mov dword [edi + 0xd18], eax
mov dword [edi + 0xd1c], eax
mov eax, dword [ebp - 0x5d0]
mov esi, dword [ebp - 0x5d4]
mov dword [ebp - 0xd4], eax
cmp esi, eax
je 0x100703f2
lea eax, [edi + 0xd90]
mov edi, dword [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
push esi
mov ecx, eax
call fcn.10050040
mov eax, dword [ebp - 0xd8]
add esi, 0x18
cmp esi, edi
jne 0x100703d7
mov edi, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x5c4]
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xdc], eax
cmp eax, ecx
je 0x100704dd
lea ecx, [edi + 0xda0]
nop dword [eax + eax]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x744]
push eax
call fcn.10028ca0
lea ecx, [edi + 0xda0]
mov esi, dword [eax]
lea eax, [ebp - 0x740]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x73c]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0xda0]
mov esi, eax
lea eax, [ebp - 0x118]
push eax
call fcn.10028ca0
mov ecx, dword [edi + 0xd94]
sub ecx, dword [edi + 0xd90]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x20], eax
jae 0x100704a8
lea eax, [ebp - 0x20]
push eax
lea ecx, [edi + 0xda0]
call fcn.10045420
cmp esi, dword [ebp - 0xd4]
jne 0x100704bc
mov eax, dword [edi + 0xd6c]
test eax, eax
je 0x100704bc
call eax
mov eax, dword [ebp - 0xdc]
lea ecx, [edi + 0xda0]
add eax, 4
mov dword [ebp - 0xdc], eax
cmp eax, dword [ebp - 0xd8]
jne 0x10070420
lea ecx, [ebp - 0x5c8]
call fcn.10028e00
lea ecx, [ebp - 0xb4c]
call fcn.10029b80
lea ecx, [ebp - 0xb64]
call fcn.10029b80
lea ecx, [ebp - 0x5d4]
call fcn.1004fd60
push fcn.10029b80
push 2
push 0x18
lea eax, [ebp - 0xd44]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0xd08]
mov dword [ebp - 0x8c], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xd20], 1
imul eax, dword [edi + 0xd20], 0xeb
add eax, 0x14
mov dword [edi + 0xd0c], eax
mov dword [edi + 0xd14], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xd24], eax
lea eax, [ebp - 0x8c]
push eax
call fcn.10045420
push dword [ebp - 0x118]
lea ecx, [ebp - 0xc24]
mov dword [ebp - 0x2e4], 0x74786574
mov byte [ebp - 0x2e0], 0
call fcn.1002af80
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 4], 0x8e
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100705a2
sub ecx, edx
lea eax, [ebp - 0x2e4]
push ecx
push eax
lea ecx, [ebp - 0xc24]
call fcn.1002afa0
mov dword [ebp - 4], 0x8f
lea ecx, [ebp - 0xc0c]
push dword [ebp - 0x118]
mov dword [ebp - 0x2ec], 0x6e6f6369
mov byte [ebp - 0x2e8], 0
call fcn.1002af80
lea ecx, [ebp - 0x2ec]
mov byte [ebp - 4], 0x90
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100705f4
sub ecx, edx
lea eax, [ebp - 0x2ec]
push ecx
push eax
lea ecx, [ebp - 0xc0c]
call fcn.1002afa0
lea eax, [ebp - 0x52c]
mov dword [ebp - 4], 0x91
push eax
lea ecx, [ebp - 0xbf4]
push ecx
lea edx, [ebp - 0xc24]
push edx
lea ecx, [ebp - 0x5e0]
call fcn.100b7bf0
mov dword [ebp - 0x3c8], 0x95848092
xor ecx, ecx
mov dword [ebp - 0x3c4], 0x88ba8b8a
mov dword [ebp - 0x3c0], 0xe580818a
nop word [eax + eax]
xor byte [ebp + ecx - 0x3c8], 0xe5
inc ecx
cmp ecx, 0xc
jb 0x10070660
push dword [ebp - 0x118]
lea ecx, [ebp - 0xb7c]
call fcn.1002af80
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 4], 0x93
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10070690
sub ecx, edx
lea eax, [ebp - 0x3c8]
push ecx
push eax
lea ecx, [ebp - 0xb7c]
call fcn.1002afa0
push dword [ebp - 0x118]
lea ecx, [ebp - 0xfb4]
call fcn.1002af80
push 0
push 0x1012644c
lea ecx, [ebp - 0xfb4]
mov byte [ebp - 4], 0x95
call fcn.1002afa0
lea eax, [ebp - 0xb7c]
mov byte [ebp - 4], 0x96
push eax
lea ecx, [edi + 0xde8]
call fcn.1003b440
mov byte [edi + 0xe19], 0
mov dword [edi + 0xe4c], 0
mov dword [edi + 0xdc0], 0x14
mov dword [edi + 0xdc4], 0x14
mov eax, dword [ebp - 0x5dc]
mov esi, dword [ebp - 0x5e0]
mov dword [ebp - 0xd4], eax
cmp esi, eax
je 0x10070751
lea eax, [edi + 0xe38]
mov edi, dword [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
push esi
mov ecx, eax
call fcn.10050040
mov eax, dword [ebp - 0xd8]
add esi, 0x18
cmp esi, edi
jne 0x10070736
mov edi, dword [ebp - 0xe4]
mov ecx, dword [edi + 0xe3c]
mov eax, 0x2aaaaaab
sub ecx, dword [edi + 0xe38]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1007077a
mov dword [edi + 0xe48], 0
lea ecx, [ebp - 0xfb4]
call fcn.10029b80
lea ecx, [ebp - 0xb7c]
call fcn.10029b80
lea ecx, [ebp - 0x5e0]
call fcn.1004fd60
push fcn.10029b80
push 2
push 0x18
lea eax, [ebp - 0xc24]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0xdb0]
mov dword [ebp - 0x90], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xdc8], 1
imul eax, dword [edi + 0xdc8], 0xeb
add eax, 0x14
mov dword [edi + 0xdb4], eax
mov dword [edi + 0xdbc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xdcc], eax
lea eax, [ebp - 0x90]
push eax
call fcn.10045420
push dword [ebp - 0x118]
lea ecx, [ebp - 0xbac]
mov dword [ebp - 0x2b4], 0x6f6d6d61
lea esi, [edi + 0xe50]
mov byte [ebp - 0x2b0], 0
call fcn.1002af80
lea ecx, [ebp - 0x2b4]
mov dword [ebp - 4], 0x97
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10070840
sub ecx, edx
lea eax, [ebp - 0x2b4]
push ecx
push eax
lea ecx, [ebp - 0xbac]
call fcn.1002afa0
mov dword [ebp - 4], 0x98
lea ecx, [ebp - 0xb94]
push dword [ebp - 0x118]
mov dword [ebp - 0x2bc], 0x6f6d6d61
mov byte [ebp - 0x2b8], 0
call fcn.1002af80
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x99
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10070892
sub ecx, edx
lea eax, [ebp - 0x2bc]
push ecx
push eax
lea ecx, [ebp - 0xb94]
call fcn.1002afa0
lea eax, [ebp - 0xbac]
mov byte [ebp - 4], 0x9a
push eax
lea ecx, [edi + 0xe88]
call fcn.1003b440
lea eax, [ebp - 0xb94]
mov byte [edi + 0xeb9], 1
push eax
lea ecx, [edi + 0xec0]
call fcn.1003b440
lea ecx, [ebp - 0xb94]
mov byte [edi + 0xebc], 0
call fcn.10029b80
lea ecx, [ebp - 0xbac]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0x94], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0xe68], 1
imul eax, dword [edi + 0xe68], 0xeb
add eax, 0x14
mov dword [edi + 0xe54], eax
mov dword [edi + 0xe5c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xe6c], eax
lea eax, [ebp - 0x94]
push eax
call fcn.10045420
lea esi, [edi + 0xed8]
mov dword [ebp - 0x2f8], 0x8a888884
mov dword [ebp - 0x2f4], 0x898a86ba
xor ecx, ecx
mov word [ebp - 0x2f0], 0x978a
mov byte [ebp - 0x2ee], 0xe5
xor byte [ebp + ecx - 0x2f8], 0xe5
inc ecx
cmp ecx, 0xb
jb 0x10070972
push dword [ebp - 0x118]
lea ecx, [ebp - 0xbdc]
call fcn.1002af80
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 4], 0x9b
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100709a1
sub ecx, edx
lea eax, [ebp - 0x2f8]
push ecx
push eax
lea ecx, [ebp - 0xbdc]
call fcn.1002afa0
mov dword [ebp - 4], 0x9c
lea ecx, [ebp - 0xbc4]
push dword [ebp - 0x118]
mov dword [ebp - 0x384], 0x6f6c6f63
mov word [ebp - 0x380], 0x72
call fcn.1002af80
lea ecx, [ebp - 0x384]
mov byte [ebp - 4], 0x9d
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100709f5
sub ecx, edx
lea eax, [ebp - 0x384]
push ecx
push eax
lea ecx, [ebp - 0xbc4]
call fcn.1002afa0
lea eax, [ebp - 0xbc4]
mov byte [ebp - 4], 0x9e
push eax
lea ecx, [edi + 0xf48]
mov dword [ebp - 0x494], 0xffd2965c
call fcn.1003b440
lea eax, [ebp - 0xbdc]
push eax
lea ecx, [edi + 0xf10]
call fcn.1003b440
mov eax, dword [ebp - 0x494]
lea ecx, [ebp - 0xbc4]
mov dword [edi + 0xf60], eax
mov dword [edi + 0xf64], 0
call fcn.10029b80
lea ecx, [ebp - 0xbdc]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0x48], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0xef0], 1
imul eax, dword [edi + 0xef0], 0xeb
add eax, 0x14
mov dword [edi + 0xedc], eax
mov dword [edi + 0xee4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xef4], eax
lea eax, [ebp - 0x48]
push eax
call fcn.10045420
mov dword [ebp - 0x334], 0xba9c8789
xor ecx, ecx
mov dword [ebp - 0x330], 0x84819590
mov word [ebp - 0x32c], 0x8091
mov byte [ebp - 0x32a], 0xe5
nop dword [eax + eax]
xor byte [ebp + ecx - 0x334], 0xe5
inc ecx
cmp ecx, 0xb
jb 0x10070ae0
push dword [ebp - 0x118]
lea ecx, [ebp - 0xbf4]
call fcn.1002af80
lea ecx, [ebp - 0x334]
mov dword [ebp - 4], 0x9f
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10070b10
sub ecx, edx
lea eax, [ebp - 0x334]
push ecx
push eax
lea ecx, [ebp - 0xbf4]
call fcn.1002afa0
mov dword [ebp - 4], 0xa0
xor esi, esi
mov dword [ebp - 0x414], 0xc59c8789
mov dword [ebp - 0x410], 0x84819590
mov word [ebp - 0x40c], 0x8091
mov byte [ebp - 0x40a], 0xe5
nop dword [eax]
push esi
lea ecx, [ebp - 0x414]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x414]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x10070b60
lea ecx, [ebp - 0x414]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xfcc]
call fcn.10029bd0
lea eax, [ebp - 0xbf4]
mov byte [ebp - 4], 0xa1
push eax
lea ecx, [edi + 0xfa0]
call fcn.1003b440
lea eax, [ebp - 0xfcc]
mov byte [edi + 0xfd1], 1
push eax
lea ecx, [edi + 0xfd8]
call fcn.1003b440
lea ecx, [ebp - 0xfcc]
mov byte [edi + 0xfd4], 0
call fcn.10029b80
lea ecx, [ebp - 0xbf4]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
lea eax, [edi + 0xf68]
mov dword [ebp - 0x4c], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xf80], 1
imul eax, dword [edi + 0xf80], 0xeb
add eax, 0x14
mov dword [edi + 0xf6c], eax
mov dword [edi + 0xf74], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xf84], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10042490
mov esi, dword [0x10126e78]
lea ecx, [ebp - 0x230]
push 0x6c
mov dword [ebp - 0xd4], esi
call fcn.1002b2e0
push 0x62
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x230], al
call fcn.1002b2e0
push 0x79
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x22f], al
call fcn.1002b2e0
push 0x5f
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x22e], al
call fcn.1002b2e0
push 0x75
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x22d], al
call fcn.1002b2e0
push 0x70
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x22c], al
call fcn.1002b2e0
push 0x64
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x22b], al
call fcn.1002b2e0
push 0x61
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x22a], al
call fcn.1002b2e0
push 0x74
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x229], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x228], al
call fcn.1002b2e0
push 0x5f
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x227], al
call fcn.1002b2e0
mov byte [ebp - 0x226], al
push 0x63
lea ecx, [ebp - 0x230]
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x225], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x224], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x223], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x222], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x221], al
call fcn.1002b2e0
mov byte [ebp - 0x220], al
xor esi, esi
push esi
lea ecx, [ebp - 0x230]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x230]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 0x11
jb 0x10070d90
lea ecx, [ebp - 0x230]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xedc]
call fcn.10029bd0
push 0x63
lea ecx, [ebp - 0x10c]
mov dword [ebp - 4], 0xa2
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x10c]
mov byte [ebp - 0x10c], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x10c]
mov byte [ebp - 0x10b], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x10c]
mov byte [ebp - 0x10a], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x10c]
mov byte [ebp - 0x109], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x10c]
mov byte [ebp - 0x108], al
call fcn.1002b2e0
mov esi, dword [ebp - 0xd4]
xor edi, edi
mov byte [ebp - 0x107], al
nop dword [eax + eax]
push edi
lea ecx, [ebp - 0x10c]
call fcn.10028f00
push edi
lea ecx, [ebp - 0x10c]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc edi
mov byte [eax], cl
cmp edi, 6
jb 0x10070e60
lea ecx, [ebp - 0x10c]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xfe4]
call fcn.10029bd0
mov edi, dword [ebp - 0xe4]
lea eax, [ebp - 0xfe4]
push eax
mov byte [ebp - 4], 0xa3
lea ecx, [edi + 0x1060]
call fcn.1003b440
lea eax, [ebp - 0xedc]
push eax
lea ecx, [edi + 0x1028]
call fcn.1003b440
mov dword [edi + 0x1078], esi
lea ecx, [ebp - 0xfe4]
mov dword [edi + 0x107c], 0
call fcn.10029b80
lea ecx, [ebp - 0xedc]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
lea eax, [edi + 0xff0]
mov dword [ebp - 0x50], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x1008], 1
imul eax, dword [edi + 0x1008], 0xeb
add eax, 0x14
mov dword [edi + 0xff4], eax
mov dword [edi + 0xffc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x100c], eax
lea eax, [ebp - 0x50]
push eax
call fcn.10042490
push 0x6f
lea ecx, [ebp - 0x164]
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x164]
mov byte [ebp - 0x164], al
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x164]
mov byte [ebp - 0x163], al
call fcn.1002b2e0
push 0x73
lea ecx, [ebp - 0x164]
mov byte [ebp - 0x162], al
call fcn.1002b2e0
push 0x63
lea ecx, [ebp - 0x164]
mov byte [ebp - 0x161], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x164]
mov byte [ebp - 0x160], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x164]
mov byte [ebp - 0x15f], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x164]
mov byte [ebp - 0x15e], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x164]
mov byte [ebp - 0x15d], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x164]
mov byte [ebp - 0x15c], al
call fcn.1002b2e0
mov byte [ebp - 0x15b], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x164]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x164]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x10071010
lea ecx, [ebp - 0x164]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xd5c]
call fcn.10029bd0
push 0x65
lea ecx, [ebp - 0x280]
mov dword [ebp - 4], 0xa4
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x280], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x27f], al
call fcn.1002b2e0
push 0x6d
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x27e], al
call fcn.1002b2e0
push 0x79
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x27d], al
call fcn.1002b2e0
push 0x20
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x27c], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x27b], al
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x27a], al
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x279], al
call fcn.1002b2e0
push 0x73
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x278], al
call fcn.1002b2e0
push 0x63
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x277], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x276], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x275], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x274], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x273], al
call fcn.1002b2e0
push 0x20
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x272], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x271], al
call fcn.1002b2e0
push 0x73
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x270], al
call fcn.1002b2e0
mov byte [ebp - 0x26f], al
lea ecx, [ebp - 0x280]
push 0x70
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x26e], al
call fcn.1002b2e0
mov byte [ebp - 0x26d], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x280]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x280]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 0x14
jb 0x100711e0
lea ecx, [ebp - 0x280]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xffc]
call fcn.10029bd0
lea eax, [ebp - 0xd5c]
mov byte [ebp - 4], 0xa5
push eax
lea ecx, [edi + 0x718]
call fcn.1003b440
lea eax, [ebp - 0xffc]
mov byte [edi + 0x749], 1
push eax
lea ecx, [edi + 0x750]
call fcn.1003b440
lea ecx, [ebp - 0xffc]
mov byte [edi + 0x74c], 0
call fcn.10029b80
lea ecx, [ebp - 0xd5c]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
lea eax, [edi + 0x6e0]
mov dword [ebp - 0x54], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x6f8], 1
imul eax, dword [edi + 0x6f8], 0xeb
add eax, 0x14
mov dword [edi + 0x6e4], eax
mov dword [edi + 0x6ec], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x6fc], eax
lea eax, [ebp - 0x54]
push eax
call fcn.10042490
lea ecx, [ebp - 0x52b]
call fcn.10028ef0
push 0x46
lea ecx, [ebp - 0x120]
mov dword [ebp - 0xd4], eax
call fcn.1002b2e0
push 0x69
lea ecx, [ebp - 0x120]
mov byte [ebp - 0x120], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x120]
mov byte [ebp - 0x11f], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x120]
mov byte [ebp - 0x11e], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x120]
mov byte [ebp - 0x11d], al
call fcn.1002b2e0
push 0x64
lea ecx, [ebp - 0x120]
mov byte [ebp - 0x11c], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x120]
mov byte [ebp - 0x11b], al
call fcn.1002b2e0
mov byte [ebp - 0x11a], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x120]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x120]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x10071360
lea ecx, [ebp - 0x120]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0x10d8]
call fcn.10029bd0
push 0x4f
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xa6
call fcn.1002b2e0
push 0x75
lea ecx, [ebp - 0x128]
mov byte [ebp - 0x128], al
call fcn.1002b2e0
push 0x74
lea ecx, [ebp - 0x128]
mov byte [ebp - 0x127], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x128]
mov byte [ebp - 0x126], al
call fcn.1002b2e0
push 0x69
lea ecx, [ebp - 0x128]
mov byte [ebp - 0x125], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x128]
mov byte [ebp - 0x124], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x128]
mov byte [ebp - 0x123], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x128]
mov byte [ebp - 0x122], al
call fcn.1002b2e0
mov byte [ebp - 0x121], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x128]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x128]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x10071450
lea ecx, [ebp - 0x128]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0x10c0]
call fcn.10029bd0
lea eax, [ebp - 0x10a8]
mov dword [ebp - 4], 0xa7
push eax
lea eax, [ebp - 0x10d8]
push eax
lea ecx, [ebp - 0xf5c]
call fcn.100b7bd0
push dword [ebp - 0xd4]
lea ecx, [ebp - 0x5fc]
push dword [eax + 4]
push dword [eax]
call fcn.100b7bf0
push 0x6f
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0xa8
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x21c], al
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x21b], al
call fcn.1002b2e0
push 0x73
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x21a], al
call fcn.1002b2e0
push 0x63
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x219], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x218], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x217], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x216], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x215], al
call fcn.1002b2e0
push 0x5f
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x214], al
call fcn.1002b2e0
push 0x61
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x213], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x212], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x211], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x210], al
call fcn.1002b2e0
push 0x77
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x20f], al
call fcn.1002b2e0
mov byte [ebp - 0x20e], al
push 0x73
lea ecx, [ebp - 0x21c]
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x20d], al
call fcn.1002b2e0
mov byte [ebp - 0x20c], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x21c]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x21c]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 0x11
jb 0x10071620
lea ecx, [ebp - 0x21c]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xd74]
call fcn.10029bd0
push 0x1012644c
lea ecx, [ebp - 0x11c8]
mov byte [ebp - 4], 0xa9
call fcn.10029bd0
lea ecx, [ebp - 0x5f0]
call fcn.1002b110
lea eax, [ebp - 0xd74]
mov byte [ebp - 4], 0xab
push eax
lea ecx, [edi + 0x7a0]
call fcn.1003b440
mov byte [edi + 0x7d1], 0
lea ecx, [ebp - 0x5fc]
mov dword [edi + 0x80c], 0
mov dword [edi + 0x778], 0x14
mov dword [edi + 0x77c], 0x14
call fcn.10028c90
lea ecx, [ebp - 0x5fc]
mov esi, eax
call fcn.10028c80
mov dword [ebp - 0xd4], eax
cmp esi, eax
je 0x10071710
lea eax, [edi + 0x7f0]
mov edi, dword [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
push esi
mov ecx, eax
call fcn.1004fa70
mov eax, dword [ebp - 0xd8]
add esi, 0x18
cmp esi, edi
jne 0x100716f5
mov edi, dword [ebp - 0xe4]
lea ecx, [ebp - 0x5f0]
call fcn.10028c90
mov esi, eax
lea ecx, [ebp - 0x5f0]
mov dword [ebp - 0xdc], esi
call fcn.10028c80
mov dword [ebp - 0xd4], eax
cmp esi, eax
je 0x100717f2
lea ecx, [edi + 0x800]
mov eax, dword [esi]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x738]
push eax
call fcn.10028ca0
lea ecx, [edi + 0x800]
mov esi, dword [eax]
lea eax, [ebp - 0x734]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x730]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0x800]
mov esi, eax
lea eax, [ebp - 0x72c]
push eax
call fcn.10028ca0
push eax
mov ecx, esi
call fcn.10028c60
lea ecx, [edi + 0x7f0]
mov byte [ebp - 0xcd], al
call fcn.1002f2a0
cmp dword [ebp - 0x1c], eax
jae 0x100717bc
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x800]
call fcn.10042490
cmp byte [ebp - 0xcd], 0
je 0x100717d1
mov eax, dword [edi + 0x7cc]
test eax, eax
je 0x100717d1
call eax
mov esi, dword [ebp - 0xdc]
lea ecx, [edi + 0x800]
add esi, 4
mov dword [ebp - 0xdc], esi
cmp esi, dword [ebp - 0xd4]
jne 0x10071742
lea ecx, [ebp - 0x5f0]
call fcn.10028cc0
lea ecx, [ebp - 0x11c8]
call fcn.10029b80
lea ecx, [ebp - 0xd74]
call fcn.10029b80
lea ecx, [ebp - 0x5fc]
call fcn.1004faa0
push fcn.10029b80
push 2
push 0x18
lea eax, [ebp - 0x10d8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0x768]
mov dword [ebp - 0x58], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x780], 1
imul eax, dword [edi + 0x780], 0xeb
add eax, 0x14
mov dword [edi + 0x76c], eax
mov dword [edi + 0x774], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x784], eax
lea eax, [ebp - 0x58]
push eax
call fcn.10042490
mov esi, dword [0x10126e64]
lea ecx, [ebp - 0x1f4]
push 0x6f
mov dword [ebp - 0xd4], esi
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1f4], al
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1f3], al
call fcn.1002b2e0
push 0x73
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1f2], al
call fcn.1002b2e0
push 0x63
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1f1], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1f0], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1ef], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1ee], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1ed], al
call fcn.1002b2e0
push 0x5f
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1ec], al
call fcn.1002b2e0
push 0x63
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1eb], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1ea], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1e9], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1e8], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1e7], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1e6], al
call fcn.1002b2e0
mov byte [ebp - 0x1e5], al
xor edi, edi
nop dword [eax]
push edi
lea ecx, [ebp - 0x1f4]
call fcn.10028f00
push edi
lea ecx, [ebp - 0x1f4]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc edi
mov byte [eax], cl
cmp edi, 0x10
jb 0x100719c0
lea ecx, [ebp - 0x1f4]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xda4]
call fcn.10029bd0
push 0x6f
lea ecx, [ebp - 0x26c]
mov dword [ebp - 4], 0xac
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x26c], al
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x26b], al
call fcn.1002b2e0
push 0x73
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x26a], al
call fcn.1002b2e0
push 0x63
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x269], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x268], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x267], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x266], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x265], al
call fcn.1002b2e0
push 0x20
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x264], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x263], al
call fcn.1002b2e0
push 0x73
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x262], al
call fcn.1002b2e0
push 0x70
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x261], al
call fcn.1002b2e0
push 0x20
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x260], al
call fcn.1002b2e0
push 0x63
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x25f], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x25e], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x25d], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x25c], al
call fcn.1002b2e0
mov byte [ebp - 0x25b], al
lea ecx, [ebp - 0x26c]
push 0x72
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x25a], al
call fcn.1002b2e0
mov edi, dword [ebp - 0xe4]
xor esi, esi
mov byte [ebp - 0x259], al
push esi
lea ecx, [ebp - 0x26c]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x26c]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 0x14
jb 0x10071b92
lea ecx, [ebp - 0x26c]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xd8c]
call fcn.10029bd0
lea eax, [ebp - 0xd8c]
mov byte [ebp - 4], 0xad
push eax
lea ecx, [edi + 0x880]
call fcn.1003b440
lea eax, [ebp - 0xda4]
push eax
lea ecx, [edi + 0x848]
call fcn.1003b440
mov esi, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd8c]
mov dword [edi + 0x898], esi
mov dword [edi + 0x89c], 0
call fcn.10029b80
lea ecx, [ebp - 0xda4]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
lea eax, [edi + 0x810]
mov dword [ebp - 0x5c], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x828], 1
imul eax, dword [edi + 0x828], 0xeb
add eax, 0x14
mov dword [edi + 0x814], eax
mov dword [edi + 0x81c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x82c], eax
lea eax, [ebp - 0x5c]
push eax
call fcn.10042490
mov esi, dword [0x10126e6c]
lea ecx, [ebp - 0x1e4]
push 0x6f
mov dword [ebp - 0xd4], esi
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1e4], al
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1e3], al
call fcn.1002b2e0
push 0x73
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1e2], al
call fcn.1002b2e0
push 0x63
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1e1], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1e0], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1df], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1de], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1dd], al
call fcn.1002b2e0
push 0x5f
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1dc], al
call fcn.1002b2e0
push 0x63
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1db], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1da], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1d9], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1d8], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1d7], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1d6], al
call fcn.1002b2e0
mov byte [ebp - 0x1d5], al
xor edi, edi
nop word [eax + eax]
push edi
lea ecx, [ebp - 0x1e4]
call fcn.10028f00
push edi
lea ecx, [ebp - 0x1e4]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc edi
mov byte [eax], cl
cmp edi, 0x10
jb 0x10071dc0
lea ecx, [ebp - 0x1e4]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xdd4]
call fcn.10029bd0
push 0x6f
lea ecx, [ebp - 0x29c]
mov dword [ebp - 4], 0xae
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x29c], al
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x29b], al
call fcn.1002b2e0
push 0x73
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x29a], al
call fcn.1002b2e0
push 0x63
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x299], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x298], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x297], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x296], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x295], al
call fcn.1002b2e0
push 0x20
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x294], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x293], al
call fcn.1002b2e0
push 0x73
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x292], al
call fcn.1002b2e0
push 0x70
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x291], al
call fcn.1002b2e0
push 0x20
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x290], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x28f], al
call fcn.1002b2e0
push 0x75
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x28e], al
call fcn.1002b2e0
push 0x74
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x28d], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x28c], al
call fcn.1002b2e0
mov byte [ebp - 0x28b], al
lea ecx, [ebp - 0x29c]
push 0x69
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x28a], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x289], al
call fcn.1002b2e0
push 0x20
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x288], al
call fcn.1002b2e0
push 0x63
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x287], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x286], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x285], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x284], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x283], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x29c]
mov byte [ebp - 0x282], al
call fcn.1002b2e0
mov edi, dword [ebp - 0xe4]
xor esi, esi
mov byte [ebp - 0x281], al
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x29c]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x29c]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 0x1c
jb 0x10072030
lea ecx, [ebp - 0x29c]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xdbc]
call fcn.10029bd0
lea eax, [ebp - 0xdbc]
mov byte [ebp - 4], 0xaf
push eax
lea ecx, [edi + 0x910]
call fcn.1003b440
lea eax, [ebp - 0xdd4]
push eax
lea ecx, [edi + 0x8d8]
call fcn.1003b440
mov esi, dword [ebp - 0xd4]
lea ecx, [ebp - 0xdbc]
mov dword [edi + 0x928], esi
mov dword [edi + 0x92c], 0
call fcn.10029b80
lea ecx, [ebp - 0xdd4]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
lea eax, [edi + 0x8a0]
mov dword [ebp - 0x60], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x8b8], 1
imul eax, dword [edi + 0x8b8], 0xeb
add eax, 0x14
mov dword [edi + 0x8a4], eax
mov dword [edi + 0x8ac], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x8bc], eax
lea eax, [ebp - 0x60]
push eax
call fcn.10042490
lea ecx, [ebp - 0x52a]
call fcn.10028ef0
push 0x65
lea ecx, [ebp - 0x104]
mov dword [ebp - 0xd4], eax
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x104]
mov byte [ebp - 0x104], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x104]
mov byte [ebp - 0x103], al
call fcn.1002b2e0
push 0x6d
lea ecx, [ebp - 0x104]
mov byte [ebp - 0x102], al
call fcn.1002b2e0
push 0x79
lea ecx, [ebp - 0x104]
mov byte [ebp - 0x101], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x104]
mov byte [ebp - 0x100], al
call fcn.1002b2e0
mov byte [ebp - 0xff], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x104]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x104]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 6
jb 0x100721a0
lea ecx, [ebp - 0x104]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0x1108]
call fcn.10029bd0
push 0x66
lea ecx, [ebp - 0x140]
mov dword [ebp - 4], 0xb0
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x140]
mov byte [ebp - 0x140], al
call fcn.1002b2e0
push 0x69
lea ecx, [ebp - 0x140]
mov byte [ebp - 0x13f], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x140]
mov byte [ebp - 0x13e], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x140]
mov byte [ebp - 0x13d], al
call fcn.1002b2e0
push 0x64
lea ecx, [ebp - 0x140]
mov byte [ebp - 0x13c], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x140]
mov byte [ebp - 0x13b], al
call fcn.1002b2e0
push 0x79
lea ecx, [ebp - 0x140]
mov byte [ebp - 0x13a], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x140]
mov byte [ebp - 0x139], al
call fcn.1002b2e0
mov byte [ebp - 0x138], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x140]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x140]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x100722a0
lea ecx, [ebp - 0x140]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0x10f0]
call fcn.10029bd0
lea eax, [ebp - 0x10d8]
mov dword [ebp - 4], 0xb1
push eax
lea eax, [ebp - 0x1108]
push eax
lea ecx, [ebp - 0xf6c]
call fcn.100b7bd0
push dword [ebp - 0xd4]
lea ecx, [ebp - 0x61c]
push dword [eax + 4]
push dword [eax]
call fcn.100b7bf0
push 0x73
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0xb2
call fcn.1002b2e0
push 0x6b
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x158], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x157], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x156], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x155], al
call fcn.1002b2e0
push 0x74
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x154], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x153], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x152], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x151], al
call fcn.1002b2e0
mov byte [ebp - 0x150], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x158]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x158]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x100723d0
lea ecx, [ebp - 0x158]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xe04]
call fcn.10029bd0
push 0x73
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0xb3
call fcn.1002b2e0
push 0x6b
lea ecx, [ebp - 0x134]
mov byte [ebp - 0x134], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x134]
mov byte [ebp - 0x133], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x134]
mov byte [ebp - 0x132], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x134]
mov byte [ebp - 0x131], al
call fcn.1002b2e0
push 0x74
lea ecx, [ebp - 0x134]
mov byte [ebp - 0x130], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x134]
mov byte [ebp - 0x12f], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x134]
mov byte [ebp - 0x12e], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x134]
mov byte [ebp - 0x12d], al
call fcn.1002b2e0
mov byte [ebp - 0x12c], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x134]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x134]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x100724d0
lea ecx, [ebp - 0x134]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xdec]
call fcn.10029bd0
lea ecx, [ebp - 0x610]
call fcn.1002b110
lea eax, [ebp - 0xe04]
mov byte [ebp - 4], 0xb5
push eax
lea ecx, [edi + 0x10b8]
call fcn.1003b440
lea eax, [ebp - 0xdec]
mov byte [edi + 0x10e9], 1
push eax
lea ecx, [edi + 0x10f0]
call fcn.1003b440
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x10e9], al
cmovne eax, ecx
lea ecx, [ebp - 0x61c]
mov dword [edi + 0x1124], eax
add eax, 0x14
mov dword [edi + 0x1090], eax
mov dword [edi + 0x1094], eax
call fcn.10028c90
lea ecx, [ebp - 0x61c]
mov esi, eax
call fcn.10028c80
mov dword [ebp - 0xd4], eax
cmp esi, eax
je 0x100725cb
lea eax, [edi + 0x1108]
mov edi, dword [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
nop word [eax + eax]
push esi
mov ecx, eax
call fcn.1004fa70
mov eax, dword [ebp - 0xd8]
add esi, 0x18
cmp esi, edi
jne 0x100725b0
mov edi, dword [ebp - 0xe4]
lea ecx, [ebp - 0x610]
call fcn.10028c90
mov esi, eax
lea ecx, [ebp - 0x610]
mov dword [ebp - 0xdc], esi
call fcn.10028c80
mov dword [ebp - 0xd4], eax
cmp esi, eax
je 0x100726b0
lea ecx, [edi + 0x1118]
nop dword [eax]
mov eax, dword [esi]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x724]
push eax
call fcn.10028ca0
lea ecx, [edi + 0x1118]
mov esi, dword [eax]
lea eax, [ebp - 0x720]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x71c]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0x1118]
mov esi, eax
lea eax, [ebp - 0x718]
push eax
call fcn.10028ca0
push eax
mov ecx, esi
call fcn.10028c60
lea ecx, [edi + 0x1108]
mov byte [ebp - 0xcd], al
call fcn.1002f2a0
cmp dword [ebp - 0x24], eax
jae 0x1007267a
lea eax, [ebp - 0x24]
push eax
lea ecx, [edi + 0x1118]
call fcn.10042490
cmp byte [ebp - 0xcd], 0
je 0x1007268f
mov eax, dword [edi + 0x10e4]
test eax, eax
je 0x1007268f
call eax
mov esi, dword [ebp - 0xdc]
lea ecx, [edi + 0x1118]
add esi, 4
mov dword [ebp - 0xdc], esi
cmp esi, dword [ebp - 0xd4]
jne 0x10072600
lea ecx, [ebp - 0x610]
call fcn.10028cc0
lea ecx, [ebp - 0xdec]
call fcn.10029b80
lea ecx, [ebp - 0xe04]
call fcn.10029b80
lea ecx, [ebp - 0x61c]
call fcn.1004faa0
push fcn.10029b80
push 2
push 0x18
lea eax, [ebp - 0x1108]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0x1080]
mov dword [ebp - 0x80], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x1098], 1
imul eax, dword [edi + 0x1098], 0xeb
add eax, 0x14
mov dword [edi + 0x1084], eax
mov dword [edi + 0x108c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x109c], eax
lea eax, [ebp - 0x80]
push eax
call fcn.10042490
push 0x73
lea ecx, [ebp - 0x1d4]
call fcn.1002b2e0
push 0x6b
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 0x1d4], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 0x1d3], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 0x1d2], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 0x1d1], al
call fcn.1002b2e0
push 0x74
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 0x1d0], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 0x1cf], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 0x1ce], al
call fcn.1002b2e0
push 0x5f
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 0x1cd], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 0x1cc], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 0x1cb], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 0x1ca], al
call fcn.1002b2e0
push 0x6d
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 0x1c9], al
call fcn.1002b2e0
mov byte [ebp - 0x1c8], al
push 0x79
lea ecx, [ebp - 0x1d4]
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 0x1c7], al
call fcn.1002b2e0
mov byte [ebp - 0x1c6], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x1d4]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x1d4]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x10072860
lea ecx, [ebp - 0x1d4]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xe34]
call fcn.10029bd0
push 0x65
lea ecx, [ebp - 0x190]
mov dword [ebp - 4], 0xb6
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x190]
mov byte [ebp - 0x190], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x190]
mov byte [ebp - 0x18f], al
call fcn.1002b2e0
push 0x6d
lea ecx, [ebp - 0x190]
mov byte [ebp - 0x18e], al
call fcn.1002b2e0
push 0x79
lea ecx, [ebp - 0x190]
mov byte [ebp - 0x18d], al
call fcn.1002b2e0
push 0x20
lea ecx, [ebp - 0x190]
mov byte [ebp - 0x18c], al
call fcn.1002b2e0
push 0x63
lea ecx, [ebp - 0x190]
mov byte [ebp - 0x18b], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x190]
mov byte [ebp - 0x18a], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x190]
mov byte [ebp - 0x189], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x190]
mov byte [ebp - 0x188], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x190]
mov byte [ebp - 0x187], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x190]
mov byte [ebp - 0x186], al
call fcn.1002b2e0
mov byte [ebp - 0x185], al
xor esi, esi
push esi
lea ecx, [ebp - 0x190]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x190]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 0xc
jb 0x10072994
lea ecx, [ebp - 0x190]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xe1c]
call fcn.10029bd0
lea eax, [ebp - 0xe1c]
mov byte [ebp - 4], 0xb7
push eax
lea ecx, [edi + 0x1198]
mov dword [ebp - 0x498], 0xffa5ffff
call fcn.1003b440
lea eax, [ebp - 0xe34]
push eax
lea ecx, [edi + 0x1160]
call fcn.1003b440
mov eax, dword [ebp - 0x498]
lea ecx, [ebp - 0xe1c]
mov dword [edi + 0x11b0], eax
mov dword [edi + 0x11b4], 0
call fcn.10029b80
lea ecx, [ebp - 0xe34]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
lea eax, [edi + 0x1128]
mov dword [ebp - 0x64], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x1140], 1
imul eax, dword [edi + 0x1140], 0xeb
add eax, 0x14
mov dword [edi + 0x112c], eax
mov dword [edi + 0x1134], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x1144], eax
lea eax, [ebp - 0x64]
push eax
call fcn.10042490
push 0x73
lea ecx, [ebp - 0x244]
call fcn.1002b2e0
push 0x6b
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x244], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x243], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x242], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x241], al
call fcn.1002b2e0
push 0x74
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x240], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x23f], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x23e], al
call fcn.1002b2e0
push 0x5f
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x23d], al
call fcn.1002b2e0
push 0x66
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x23c], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x23b], al
call fcn.1002b2e0
mov byte [ebp - 0x23a], al
push 0x69
lea ecx, [ebp - 0x244]
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x239], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x238], al
call fcn.1002b2e0
push 0x64
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x237], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x236], al
call fcn.1002b2e0
push 0x79
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x235], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x234], al
call fcn.1002b2e0
mov byte [ebp - 0x233], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x244]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x244]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 0x12
jb 0x10072be0
lea ecx, [ebp - 0x244]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xe64]
call fcn.10029bd0
push 0x66
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 4], 0xb8
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1c4], al
call fcn.1002b2e0
push 0x69
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1c3], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1c2], al
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1c1], al
call fcn.1002b2e0
push 0x64
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1c0], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1bf], al
call fcn.1002b2e0
push 0x79
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1be], al
call fcn.1002b2e0
push 0x20
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1bd], al
call fcn.1002b2e0
push 0x63
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1bc], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1bb], al
call fcn.1002b2e0
push 0x6c
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1ba], al
call fcn.1002b2e0
push 0x6f
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1b9], al
call fcn.1002b2e0
push 0x72
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1b8], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x1b7], al
call fcn.1002b2e0
mov byte [ebp - 0x1b6], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x1c4]
call fcn.10028f00
push esi
lea ecx, [ebp - 0x1c4]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x10072d50
lea ecx, [ebp - 0x1c4]
call fcn.10028ef0
push eax
lea ecx, [ebp - 0xe4c]
call fcn.10029bd0
lea eax, [ebp - 0xe4c]
mov byte [ebp - 4], 0xb9
push eax
lea ecx, [edi + 0x1228]
mov dword [ebp - 0x438], 0xff009b00
call fcn.1003b440
lea eax, [ebp - 0xe64]
push eax
lea ecx, [edi + 0x11f0]
call fcn.1003b440
mov eax, dword [ebp - 0x438]
lea ecx, [ebp - 0xe4c]
mov dword [edi + 0x1240], eax
mov dword [edi + 0x1244], 0
call fcn.10029b80
lea ecx, [ebp - 0xe64]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
lea eax, [edi + 0x11b8]
mov dword [ebp - 0x68], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x11d0], 1
imul eax, dword [edi + 0x11d0], 0xeb
add eax, 0x14
mov dword [edi + 0x11bc], eax
mov dword [edi + 0x11c4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x11d4], eax
lea eax, [ebp - 0x68]
push eax
call fcn.10042490
lea ecx, [ebp - 0x529]
call fcn.10028ef0
push 0x65
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0xd4], eax
call fcn.1002b2e0
push 0x6e
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0xfc], al
call fcn.1002b2e0
push 0x65
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0xfb], al
call fcn.1002b2e0
push 0x6d
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0xfa], al
call fcn.1002b2e0
push 0x79
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0xf9], al
call fcn.1002b2e0
push 0
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0xf8], al
call fcn.1002b2e0
mov byte [ebp - 0xf7], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0xfc]
call fcn.10028f00
push esi
lea ecx, [ebp - 0xfc]
mov al, byte [eax]
xor al, 0xe5
mov byte [ebp - 0xcd], al
call fcn.10028f00
mov cl, byte [ebp - 0xcd]
inc esi
mov byte [eax], cl
cmp esi, 6
jb 0x10072ed0