Function at 0x1000ba86
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c0
push ebx
push esi
push edi
push 0x6c
pop edx
push 0x2e
pop ecx
push 0x72
pop eax
push 0x65
mov word [ebp - 0x458], ax
xor eax, eax
mov word [ebp - 0x444], ax
mov word [ebp - 0x448], dx
mov word [ebp - 0x446], dx
mov word [ebp - 0x452], dx
pop edx
push 0x32
pop eax
push 0x4b
mov word [ebp - 0x44e], ax
pop eax
push 0x6e
mov word [ebp - 0x45c], ax
pop eax
push 0x64
mov word [ebp - 0x456], ax
pop eax
push 0x33
mov word [ebp - 0x44c], cx
pop ecx
push 0x69
pop ebx
push 0x6c
mov word [ebp - 0x44a], ax
mov word [ebp - 0x3fc], ax
pop eax
push 0x70
mov word [ebp - 0x3fa], ax
pop eax
push 0x77
mov word [ebp - 0x402], ax
pop eax
push 0x61
mov word [ebp - 0x406], ax
xor eax, eax
mov word [ebp - 0x3f6], ax
pop eax
push 0x6c
pop esi
push 0x68
mov word [ebp - 0x450], cx
pop ecx
push 0x53
pop edi
push 0x2e
mov word [ebp - 0x40a], cx
pop ecx
push 0x70
mov word [ebp - 0x3fe], cx
pop ecx
push 0x32
mov word [ebp - 0x40c], di
pop edi
push 0x76
mov word [ebp - 0x438], cx
pop ecx
push 0x64
mov word [ebp - 0x43c], cx
pop ecx
mov word [ebp - 0x454], dx
mov word [ebp - 0x45a], dx
mov word [ebp - 0x400], bx
mov word [ebp - 0x404], ax
mov word [ebp - 0x3f8], si
mov word [ebp - 0x408], si
mov word [ebp - 0x436], bx
mov word [ebp - 0x432], di
mov word [ebp - 0x43e], cx
mov word [ebp - 0x43a], ax
push esi
pop eax
push 0x33
mov word [ebp - 0x42a], ax
pop eax
push ecx
mov word [ebp - 0x434], ax
xor eax, eax
mov word [ebp - 0x428], ax
pop eax
push 0x2e
pop ecx
push esi
mov word [ebp - 0x42e], ax
pop eax
push 0x41
pop esi
push 0x64
mov word [ebp - 0x440], si
pop esi
push 0x33
mov word [ebp - 0x42c], ax
mov word [ebp - 0x3cc], ax
mov word [ebp - 0x3ce], si
pop esi
push 0x5f
mov word [ebp - 0x3d4], si
pop esi
push 0x57
pop eax
push 0x73
mov word [ebp - 0x3dc], ax
pop eax
push 0x6c
mov word [ebp - 0x3da], ax
xor eax, eax
mov word [ebp - 0x3c8], ax
pop eax
push 0x72
mov word [ebp - 0x3ca], ax
pop eax
push 0x55
mov word [ebp - 0x3ee], ax
pop eax
push 0x6c
mov word [ebp - 0x3f4], ax
pop eax
push 0x33
mov word [ebp - 0x3e4], ax
mov word [ebp - 0x3e2], ax
mov word [ebp - 0x3d6], si
pop esi
push 0x64
pop eax
push 0x73
mov word [ebp - 0x3e6], ax
pop eax
mov word [ebp - 0x3f2], ax
push 0x70
xor eax, eax
mov word [ebp - 0x3e0], ax
pop eax
push 0x61
mov word [ebp - 0x3aa], ax
pop eax
push 0x73
mov word [ebp - 0x3ac], ax
pop eax
push 0x64
mov word [ebp - 0x3ae], ax
pop eax
mov word [ebp - 0x430], cx
mov word [ebp - 0x3d8], di
mov word [ebp - 0x3d2], di
mov word [ebp - 0x3d0], cx
mov word [ebp - 0x3ea], di
mov word [ebp - 0x3f0], dx
mov word [ebp - 0x3e8], cx
mov word [ebp - 0x3ec], si
mov word [ebp - 0x3a8], bx
mov word [ebp - 0x3a6], cx
mov word [ebp - 0x3a4], ax
push 0x6c
pop ebx
push 0x70
xor eax, eax
mov word [ebp - 0x39e], ax
pop eax
push 0x64
mov word [ebp - 0x3b0], ax
pop eax
push 0x68
mov word [ebp - 0x414], ax
xor eax, eax
mov word [ebp - 0x40e], ax
pop eax
push 0x53
mov word [ebp - 0x422], ax
pop eax
push esi
mov word [ebp - 0x424], ax
pop eax
push 0x64
mov word [ebp - 0x41a], ax
pop eax
push 0x74
mov word [ebp - 0x3c0], ax
mov word [ebp - 0x3b8], ax
pop eax
mov word [ebp - 0x3c2], ax
xor eax, eax
push 0x6e
mov word [ebp - 0x3b2], ax
pop eax
push 0x64
mov word [ebp - 0x3c4], ax
pop eax
push 0x4f
mov word [ebp - 0x390], ax
pop eax
mov word [ebp - 0x39c], ax
xor eax, eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov word [ebp - 0x38a], ax
pop eax
mov word [ebp - 0x396], ax
lea eax, [ebp - 0x45c]
push eax
mov word [ebp - 0x3a0], bx
mov word [ebp - 0x3a2], bx
mov word [ebp - 0x412], bx
mov word [ebp - 0x410], bx
mov word [ebp - 0x416], cx
mov word [ebp - 0x420], dx
mov word [ebp - 0x41c], bx
mov word [ebp - 0x41e], bx
mov word [ebp - 0x418], di
mov word [ebp - 0x3be], bx
mov word [ebp - 0x3b6], bx
mov word [ebp - 0x3b4], bx
mov word [ebp - 0x3ba], cx
mov word [ebp - 0x3bc], bx
mov word [ebp - 0x39a], bx
mov word [ebp - 0x398], dx
mov word [ebp - 0x38c], bx
mov word [ebp - 0x38e], bx
mov word [ebp - 0x394], di
mov word [ebp - 0x392], cx
call esi
mov edi, eax
lea eax, [ebp - 0x40c]
push eax
call esi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x440]
push eax
call esi
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x3dc]
push eax
call esi
mov ebx, eax
lea eax, [ebp - 0x3f4]
push eax
call esi
mov dword [ebp - 0x468], eax
lea eax, [ebp - 0x424]
push eax
call esi
mov dword [ebp - 0x464], eax
lea eax, [ebp - 0x3c4]
push eax
call esi
mov dword [ebp - 0x46c], eax
lea eax, [ebp - 0x39c]
push eax
call esi
mov dword [ebp - 0x460], eax
lea eax, [ebp - 0x3b0]
push eax
call esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x24], eax
test edi, edi
je 0x1000cbe5
push 0x6c
pop eax
push 0x64
mov byte [ebp - 0x13e], al
pop eax
push 0x6e
mov byte [ebp - 0x145], al
pop eax
mov byte [ebp - 0x146], al
lea eax, [ebp - 0x148]
push eax
push edi
mov word [ebp - 0x13c], 0x57
mov dword [ebp - 0x142], 0x69467478
mov byte [ebp - 0x13d], 0x65
mov word [ebp - 0x148], 0x6946
mov word [ebp - 0x144], 0x654e
call esi
push 0x64
mov dword [0x1006cabc], eax
pop eax
push 0x72
mov byte [ebp - 0x1c5], al
pop eax
push 0x6c
mov byte [ebp - 0x1c2], al
pop eax
push 0x73
mov byte [ebp - 0x1bd], al
pop eax
push 0x6e
mov byte [ebp - 0x1c1], al
pop eax
mov byte [ebp - 0x1c6], al
lea eax, [ebp - 0x1c8]
push eax
push edi
mov word [ebp - 0x1c8], 0x6946
mov word [ebp - 0x1bf], 0x6946
mov word [ebp - 0x1bb], 0x57
mov word [ebp - 0x1c4], 0x6946
mov byte [ebp - 0x1bc], 0x65
mov byte [ebp - 0x1c0], 0x74
call esi
push 0x70
mov dword [0x1006cac0], eax
pop eax
push 0x72
mov byte [ebp - 0xeb], al
pop eax
push 0x73
mov byte [ebp - 0xe7], al
pop eax
mov byte [ebp - 0xe2], al
mov byte [ebp - 0xe3], al
lea eax, [ebp - 0xec]
push eax
push edi
mov word [ebp - 0xe6], 0x636f
mov byte [ebp - 0xec], 0x4f
mov byte [ebp - 0xe1], 0
mov word [ebp - 0xea], 0x6e65
mov byte [ebp - 0xe4], 0x65
mov byte [ebp - 0xe8], 0x50
call esi
push 0x61
mov dword [0x1006ca98], eax
pop eax
push 0x33
pop ecx
push 0x6c
mov byte [ebp - 0x387], cl
mov byte [ebp - 0x379], al
mov word [ebp - 0x373], 0x4e65
mov dword [ebp - 0x385], 0x50746547
mov dword [ebp - 0x370], 0x57656d
mov word [ebp - 0x37f], 0x6563
mov word [ebp - 0x37b], 0x6d49
mov dword [ebp - 0x378], 0x69466567
mov byte [ebp - 0x388], 0x4b
pop ecx
push 0x73
mov byte [ebp - 0x374], cl
pop ecx
push 0x72
mov byte [ebp - 0x371], al
pop eax
push 0x32
mov byte [ebp - 0x381], al
pop eax
mov byte [ebp - 0x386], al
lea eax, [ebp - 0x388]
push eax
push edi
mov byte [ebp - 0x37c], cl
mov byte [ebp - 0x380], 0x6f
mov byte [ebp - 0x37d], cl
call esi
push 0x6c
mov dword [0x1006ca8c], eax
pop eax
push 0x72
mov byte [ebp - 0x85], al
pop eax
mov byte [ebp - 0x8b], al
lea eax, [ebp - 0x8c]
push eax
push edi
mov dword [ebp - 0x89], 0x69466574
mov word [ebp - 0x84], 0x65
mov byte [ebp - 0x8a], 0x69
mov byte [ebp - 0x8c], 0x57
call esi
push 0x53
mov dword [0x1006ca18], eax
pop eax
push 0x6c
mov byte [ebp - 0x2be], al
pop eax
push 0x73
mov byte [ebp - 0x2c6], al
pop eax
mov byte [ebp - 0x2bc], al
lea eax, [ebp - 0x2c8]
push eax
push edi
mov word [ebp - 0x2ba], 0x6d65
mov dword [ebp - 0x2c2], 0x6f54656d
mov word [ebp - 0x2c4], 0x6954
mov word [ebp - 0x2c8], 0x6946
mov dword [ebp - 0x2b7], 0x656d69
mov byte [ebp - 0x2bb], 0x74
mov byte [ebp - 0x2b8], 0x54
mov byte [ebp - 0x2c5], 0x65
mov byte [ebp - 0x2bd], 0x79
call esi
push 0x72
mov dword [0x1006ca04], eax
pop eax
push 0x73
mov byte [ebp - 0x197], al
pop eax
push 0x33
pop ecx
push 0x32
mov byte [ebp - 0x192], al
mov byte [ebp - 0x193], al
pop eax
mov byte [ebp - 0x190], al
lea eax, [ebp - 0x198]
push eax
push edi
mov word [ebp - 0x196], 0x636f
mov word [ebp - 0x18e], 0x7865
mov word [ebp - 0x18b], 0x57
mov byte [ebp - 0x18c], 0x74
mov byte [ebp - 0x191], cl
mov byte [ebp - 0x194], 0x65
mov byte [ebp - 0x198], 0x50
mov byte [ebp - 0x18f], 0x4e
call esi
mov dword [0x1006caa4], eax
push 0x73
pop ecx
push 0x72
pop eax
push 0x33
pop edx
push 0x32
mov byte [ebp - 0x1f7], al
mov byte [ebp - 0x1ed], al
pop eax
mov byte [ebp - 0x1f0], al
lea eax, [ebp - 0x1f8]
push eax
push edi
mov byte [ebp - 0x1f3], cl
mov word [ebp - 0x1ef], 0x6946
mov word [ebp - 0x1eb], 0x5774
mov word [ebp - 0x1f6], 0x636f
mov byte [ebp - 0x1ec], cl
mov byte [ebp - 0x1f1], dl
mov byte [ebp - 0x1f8], 0x50
mov byte [ebp - 0x1f2], cl
mov byte [ebp - 0x1e9], 0
mov byte [ebp - 0x1f4], 0x65
call esi
push 0x32
mov dword [0x1006cab0], eax
pop eax
push 0x53
mov byte [ebp - 0x2ed], al
pop eax
push 0x61
pop ecx
push 0x72
mov byte [ebp - 0x2ec], al
pop eax
push 0x6e
mov byte [ebp - 0x2fb], al
pop eax
push 0x6c
mov byte [ebp - 0x2eb], al
pop eax
push 0x33
pop edx
push 0x68
mov byte [ebp - 0x2ee], dl
pop edx
push 0x70
mov byte [ebp - 0x2f0], al
mov byte [ebp - 0x2f3], al
pop eax
push 0x73
mov byte [ebp - 0x2e9], al
mov byte [ebp - 0x2ef], al
pop eax
mov byte [ebp - 0x2e8], al
lea eax, [ebp - 0x2fc]
push eax
push edi
mov byte [ebp - 0x2fa], 0x65
mov byte [ebp - 0x2ea], cl
mov byte [ebp - 0x2f1], 0x65
mov dword [ebp - 0x2f7], 0x6f6f5465
mov byte [ebp - 0x2fc], 0x43
mov word [ebp - 0x2e6], 0x746f
mov byte [ebp - 0x2e4], 0
mov byte [ebp - 0x2f2], dl
mov byte [ebp - 0x2f8], 0x74
mov byte [ebp - 0x2e7], dl
mov byte [ebp - 0x2f9], cl
call esi
push 0x73
mov dword [0x1006cab4], eax
pop eax
push 0x6c
mov byte [ebp - 0x16d], al
mov word [ebp - 0x170], 0x6946
mov byte [ebp - 0x173], 0x65
mov word [ebp - 0x178], 0x6f4d
mov word [ebp - 0x16b], 0x57
pop eax
push 0x33
mov byte [ebp - 0x174], al
pop eax
push 0x32
mov byte [ebp - 0x172], al
pop eax
push 0x64
mov byte [ebp - 0x171], al
pop eax
push 0x72
mov byte [ebp - 0x176], al
pop eax
mov byte [ebp - 0x16e], al
lea eax, [ebp - 0x178]
push eax
push edi
mov byte [ebp - 0x175], 0x75
mov byte [ebp - 0x16c], 0x74
call esi
push 0x32
mov dword [0x1006ca94], eax
pop eax
push 0x33
mov byte [ebp - 0x161], al
pop eax
push 0x64
mov byte [ebp - 0x162], al
pop eax
push 0x6c
mov byte [ebp - 0x166], al
pop eax
mov byte [ebp - 0x164], al
lea eax, [ebp - 0x168]
push eax
push edi
mov byte [ebp - 0x163], 0x65
mov dword [ebp - 0x160], 0x7478654e
mov word [ebp - 0x15c], 0x57
mov word [ebp - 0x168], 0x6f4d
mov byte [ebp - 0x165], 0x75
call esi
push 0x6e
mov dword [0x1006ca90], eax
pop eax
push 0x70
mov byte [ebp - 0xb9], al
pop eax
mov byte [ebp - 0xbb], al
lea eax, [ebp - 0xbc]
push eax
push edi
mov word [ebp - 0xb7], 0x7475
mov byte [ebp - 0xb8], 0x4d
mov byte [ebp - 0xba], 0x65
mov word [ebp - 0xb4], 0x5778
mov byte [ebp - 0xb2], 0
mov byte [ebp - 0xbc], 0x4f
mov byte [ebp - 0xb5], 0x65
call esi
cmp dword [0x1006ca8c], 0
mov dword [0x1006ca2c], eax
jne 0x1000c43d
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x1000c43d
push 0x61
pop edx
push 0x73
pop ecx
push 0x6c
mov byte [ebp - 0x13], cl
mov byte [ebp - 0x14], cl
pop ecx
mov byte [ebp - 0xb], cl
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov byte [ebp - 0x10], dl
mov word [ebp - 0x19], 0x7250
mov word [ebp - 0x16], 0x6563
mov word [ebp - 0xf], 0x6567
mov dword [ebp - 7], 0x57656d
mov word [ebp - 0x12], 0x6d49
mov word [ebp - 0xd], 0x6946
mov word [ebp - 0x1c], 0x6547
mov byte [ebp - 0x17], 0x6f
mov word [ebp - 0xa], 0x4e65
mov byte [ebp - 8], dl
mov byte [ebp - 0x1a], 0x74
call esi
mov dword [0x1006ca8c], eax
push 0x33
pop eax
push 0x6c
mov byte [ebp - 0x36b], al
pop eax
push 0x61
mov byte [ebp - 0x358], al
pop eax
push 0x72
mov byte [ebp - 0x355], al
pop eax
push 0x32
mov byte [ebp - 0x35f], al
mov byte [ebp - 0x35b], al
pop eax
mov byte [ebp - 0x36a], al
lea eax, [ebp - 0x36c]
push eax
push edi
mov word [ebp - 0x353], 0x5765
mov word [ebp - 0x357], 0x4e65
mov word [ebp - 0x35a], 0x6946
mov word [ebp - 0x361], 0x4465
mov dword [ebp - 0x367], 0x76654474
mov byte [ebp - 0x354], 0x6d
mov word [ebp - 0x35e], 0x7669
mov byte [ebp - 0x351], 0
mov word [ebp - 0x369], 0x6547
mov byte [ebp - 0x36c], 0x4b
mov byte [ebp - 0x35c], 0x65
mov word [ebp - 0x363], 0x6369
call esi
mov dword [0x1006ca60], eax
test eax, eax
jne 0x1000c546
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x1000c546
push 0x72
pop ecx
push 0x6c
pop edx
mov byte [ebp - 0x12], cl
mov byte [ebp - 0xe], cl
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov dword [ebp - 0x1c], 0x44746547
mov word [ebp - 0x10], 0x6576
mov dword [ebp - 9], 0x656d614e
mov word [ebp - 0x15], 0x6563
mov byte [ebp - 0x11], 0x69
mov word [ebp - 5], 0x57
mov word [ebp - 0xd], 0x6946
mov word [ebp - 0x18], 0x7665
mov byte [ebp - 0xb], dl
mov byte [ebp - 0x16], 0x69
mov byte [ebp - 0xa], 0x65
mov byte [ebp - 0x13], 0x44
call esi
mov dword [0x1006ca60], eax
push 0x61
pop eax
push 0x72
mov byte [ebp - 0x95], al
pop eax
push 0x6c
mov byte [ebp - 0x92], al
pop eax
mov byte [ebp - 0x94], al
lea eax, [ebp - 0x98]
push eax
push edi
mov word [ebp - 0x98], 0x6f4c
mov word [ebp - 0x91], 0x6565
mov byte [ebp - 0x8f], 0
mov byte [ebp - 0x93], 0x46
mov byte [ebp - 0x96], 0x63
call esi
push 0x73
mov dword [0x1006ca30], eax
pop eax
push 0x6c
pop ecx
push 0x74
mov byte [ebp - 0x2cb], al
pop eax
push 0x72
mov byte [ebp - 0x2cc], al
mov byte [ebp - 0x2dd], al
mov byte [ebp - 0x2d6], al
pop eax
mov byte [ebp - 0x2da], al
lea eax, [ebp - 0x2e0]
push eax
push edi
mov word [ebp - 0x2cf], 0x656a
mov word [ebp - 0x2dc], 0x6f46
mov byte [ebp - 0x2ca], 0
mov word [ebp - 0x2d9], 0x754d
mov word [ebp - 0x2df], 0x6961
mov byte [ebp - 0x2d7], cl
mov word [ebp - 0x2d5], 0x7069
mov byte [ebp - 0x2cd], 0x63
mov word [ebp - 0x2d2], 0x4f65
mov byte [ebp - 0x2d0], 0x62
mov byte [ebp - 0x2e0], 0x57
mov byte [ebp - 0x2d3], cl
call esi
push 0x72
mov dword [0x1006ca54], eax
pop eax
push 0x61
mov byte [ebp - 0x228], al
mov byte [ebp - 0x223], al
mov byte [ebp - 0x22f], al
pop eax
mov byte [ebp - 0x22d], al
lea eax, [ebp - 0x230]
push eax
push edi
mov dword [ebp - 0x22c], 0x69446574
mov byte [ebp - 0x230], 0x43
mov dword [ebp - 0x227], 0x6f746365
mov word [ebp - 0x222], 0x5779
mov byte [ebp - 0x220], 0
mov byte [ebp - 0x22e], 0x65
call esi
push 0x64
mov dword [0x1006ca40], eax
pop eax
push 0x61
mov byte [ebp - 0x59], al
pop eax
mov byte [ebp - 0x5a], al
push 0x6c
pop eax
mov byte [ebp - 0x56], al
mov word [ebp - 0x5c], 0x6552
mov word [ebp - 0x55], 0x65
mov word [ebp - 0x58], 0x6946
lea eax, [ebp - 0x5c]
push eax
push edi
call esi
push 0x72
mov dword [0x1006ca44], eax
pop eax
push 0x68
mov byte [ebp - 0x1e6], al
mov byte [ebp - 0x1dd], al
pop eax
push 0x6e
mov byte [ebp - 0x1de], al
pop eax
push 0x61
mov byte [ebp - 0x1e3], al
pop eax
push 0x64
mov byte [ebp - 0x1e2], al
mov byte [ebp - 0x1db], al
pop eax
mov byte [ebp - 0x1da], al
lea eax, [ebp - 0x1e8]
push eax
push edi
mov word [ebp - 0x1e1], 0x6574
mov word [ebp - 0x1e8], 0x6554
mov word [ebp - 0x1e5], 0x696d
mov byte [ebp - 0x1dc], 0x65
mov byte [ebp - 0x1d9], 0
mov byte [ebp - 0x1df], 0x54
call esi
push 0x61
mov dword [0x1006ca0c], eax
pop eax
push 0x72
mov byte [ebp - 0x105], al
pop eax
mov byte [ebp - 0x107], al
lea eax, [ebp - 0x108]
push eax
push edi
mov dword [ebp - 0x104], 0x754d6574
mov dword [ebp - 0xff], 0x577865
mov byte [ebp - 0x108], 0x43
mov byte [ebp - 0x100], 0x74
mov byte [ebp - 0x106], 0x65
call esi
push 0x6c
mov dword [0x1006cad0], eax
pop eax
push 0x61
mov byte [ebp - 0x126], al
pop eax
push 0x73
mov byte [ebp - 0x124], al
pop eax
mov byte [ebp - 0x123], al
lea eax, [ebp - 0x128]
push eax
push edi
mov byte [ebp - 0x125], 0x65
mov dword [ebp - 0x121], 0x6574754d
mov word [ebp - 0x128], 0x6552
mov byte [ebp - 0x122], 0x65
mov word [ebp - 0x11d], 0x78
call esi
push 0x6e
mov dword [0x1006cacc], eax
pop eax
push 0x61
mov byte [ebp - 0x24f], al
pop eax
push 0x72
mov byte [ebp - 0x257], al
pop eax
mov dword [ebp - 0x256], 0x6f467469
mov word [ebp - 0x24b], 0x624f
mov byte [ebp - 0x250], 0x69
mov byte [ebp - 0x24c], 0x65
mov byte [ebp - 0x252], al
mov dword [ebp - 0x248], 0x746365
push 0x6c
pop eax
push 0x53
mov byte [ebp - 0x24d], al
pop eax
mov byte [ebp - 0x251], al
lea eax, [ebp - 0x258]
push eax
push edi
mov byte [ebp - 0x258], 0x57
mov byte [ebp - 0x249], 0x6a
mov byte [ebp - 0x24e], 0x67
call esi
push 0x61
mov dword [0x1006ca88], eax
pop eax
push 0x72
mov byte [ebp - 0x135], al
pop eax
push 0x6e
mov byte [ebp - 0x137], al
pop eax
mov byte [ebp - 0x12f], al
lea eax, [ebp - 0x138]
push eax
push edi
mov dword [ebp - 0x133], 0x65764565
mov byte [ebp - 0x138], 0x43
mov word [ebp - 0x12d], 0x57
mov byte [ebp - 0x134], 0x74
mov byte [ebp - 0x12e], 0x74
mov byte [ebp - 0x136], 0x65
call esi
push 0x73
pop ecx
push 0x72
mov dword [0x1006cac8], eax
pop eax
push 0x61
mov byte [ebp - 0x1a1], al
mov byte [ebp - 0x1a7], al
pop eax
mov byte [ebp - 0x1a5], al
lea eax, [ebp - 0x1a8]
push eax
push edi
mov byte [ebp - 0x19d], cl
mov word [ebp - 0x1a4], 0x6574
mov word [ebp - 0x19b], 0x57
mov word [ebp - 0x19f], 0x6563
mov byte [ebp - 0x1a6], 0x65
mov byte [ebp - 0x1a2], 0x50
mov byte [ebp - 0x19c], cl
mov byte [ebp - 0x1a8], 0x43
mov byte [ebp - 0x1a0], 0x6f
call esi
push 0x73
mov dword [0x1006ca58], eax
pop eax
push 0x6c
mov byte [ebp - 0x296], al
pop eax
push 0x53
mov byte [ebp - 0x28a], al
pop eax
mov byte [ebp - 0x298], al
lea eax, [ebp - 0x298]
push eax
push edi
mov dword [ebp - 0x295], 0x546d6574
mov dword [ebp - 0x288], 0x656d6954
mov dword [ebp - 0x291], 0x54656d69
mov byte [ebp - 0x284], 0
mov byte [ebp - 0x297], 0x79
mov word [ebp - 0x28d], 0x466f
mov byte [ebp - 0x28b], 0x69
mov byte [ebp - 0x289], 0x65
call esi
mov dword [0x1006ca10], eax
mov dword [ebp - 0x14e], 0x656d69
push 0x73
pop eax
push 0x53
mov byte [ebp - 0x153], al
pop eax
mov byte [ebp - 0x155], al
lea eax, [ebp - 0x158]
push eax
push edi
mov word [ebp - 0x151], 0x6d65
mov word [ebp - 0x157], 0x7465
mov byte [ebp - 0x152], 0x74
mov byte [ebp - 0x158], 0x47
mov byte [ebp - 0x154], 0x79
mov byte [ebp - 0x14f], 0x54
call esi
push 0x64
pop edx
push 0x73
pop ecx
push 0x72
mov dword [0x1006ca14], eax
pop eax
push 0x6e
mov byte [ebp - 0x2af], al
pop eax
push 0x53
mov byte [ebp - 0x29f], al
pop eax
mov byte [ebp - 0x2a5], al
lea eax, [ebp - 0x2b0]
push eax
push edi
mov word [ebp - 0x2a7], 0x6f54
mov byte [ebp - 0x29c], 0
mov byte [ebp - 0x2a9], 0x49
mov word [ebp - 0x2ae], 0x636f
mov word [ebp - 0x2a1], 0x6f69
mov byte [ebp - 0x29d], dl
mov byte [ebp - 0x29e], 0x49
mov byte [ebp - 0x2aa], cl
mov byte [ebp - 0x2a3], cl
mov byte [ebp - 0x2ac], 0x65
mov byte [ebp - 0x2a2], cl
mov byte [ebp - 0x2a8], dl
mov byte [ebp - 0x2b0], 0x50
mov byte [ebp - 0x2ab], cl
mov byte [ebp - 0x2a4], 0x65
call esi
push 0x64
mov dword [0x1006caa8], eax
pop eax
push 0x73
mov byte [ebp - 0x65], al
pop eax
push 0x6e
mov byte [ebp - 0x61], al
pop eax
push 0x6c
mov byte [ebp - 0x66], al
pop eax
mov byte [ebp - 0x63], al
lea eax, [ebp - 0x68]
push eax
push edi
mov byte [ebp - 0x62], 0x6f
mov word [ebp - 0x60], 0x65
mov byte [ebp - 0x64], 0x43
mov word [ebp - 0x68], 0x6946
call esi
push 0x72
mov dword [0x1006cab8], eax
pop eax
push 0x6c
mov byte [ebp - 0x25a], al
mov word [ebp - 0x264], 0x5465
mov word [ebp - 0x26c], 0x754d
mov word [ebp - 0x25e], 0x4365
mov byte [ebp - 0x259], 0
mov word [ebp - 0x261], 0x6957
mov dword [ebp - 0x268], 0x74794269
pop eax
push 0x64
mov byte [ebp - 0x26a], al
pop eax
push 0x68
mov byte [ebp - 0x25f], al
pop eax
push 0x61
mov byte [ebp - 0x25c], al
pop eax
mov byte [ebp - 0x25b], al
lea eax, [ebp - 0x26c]
push eax
push edi
mov byte [ebp - 0x262], 0x6f
mov byte [ebp - 0x269], 0x74
call esi
push 0x6e
mov dword [0x1006caa0], eax
pop eax
push 0x6c
mov byte [ebp - 0x114], al
pop eax
push 0x64
mov byte [ebp - 0x10e], al
pop eax
push 0x53
mov byte [ebp - 0x113], al
pop eax
mov byte [ebp - 0x118], al
lea eax, [ebp - 0x118]
push eax
push edi
mov dword [ebp - 0x112], 0x6946664f
mov word [ebp - 0x116], 0x4574
mov word [ebp - 0x10d], 0x65
mov byte [ebp - 0x117], 0x65
call esi
push 0x72
mov dword [0x1006ca1c], eax
pop eax
push 0x6c
mov byte [ebp - 0x17b], al
pop eax
push 0x6e
mov byte [ebp - 0x183], al
pop eax
push 0x53
mov byte [ebp - 0x17e], al
pop eax
mov byte [ebp - 0x188], al
lea eax, [ebp - 0x188]
push eax
push edi
mov word [ebp - 0x186], 0x4674
mov byte [ebp - 0x184], 0x69
mov byte [ebp - 0x17a], 0
mov word [ebp - 0x17d], 0x6574
mov dword [ebp - 0x182], 0x696f5065
mov byte [ebp - 0x187], 0x65
call esi
mov dword [0x1006ca20], eax
mov edi, dword [ebp - 0x34]
test edi, edi
je 0x1000ce18
push 0x61
pop eax
push 0x41
mov byte [ebp - 0xf7], al
pop eax
push 0x68
mov byte [ebp - 0xf4], al
pop eax
push 0x64
mov byte [ebp - 0xf5], al
pop eax
push 0x70
mov byte [ebp - 0xef], al
pop eax
push 0x6e
mov byte [ebp - 0xf3], al
mov byte [ebp - 0xf2], al
pop eax
mov byte [ebp - 0xf0], al
lea eax, [ebp - 0xf8]
push eax
push edi
mov byte [ebp - 0xf1], 0x65
mov byte [ebp - 0xf8], 0x50
mov word [ebp - 0xee], 0x57
mov byte [ebp - 0xf6], 0x74
call esi
push 0x6e
mov dword [0x1006ca24], eax
pop eax
push 0x53
mov byte [ebp - 0x6e], al
pop eax
push 0x72
mov byte [ebp - 0x74], al
pop eax
mov byte [ebp - 0x72], al
lea eax, [ebp - 0x74]
push eax
push edi
mov word [ebp - 0x70], 0x496f
mov word [ebp - 0x6c], 0x57
mov byte [ebp - 0x6d], 0x74
mov byte [ebp - 0x71], 0x54
mov byte [ebp - 0x73], 0x74
call esi
push 0x61
mov dword [0x1006c9fc], eax
pop eax
push 0x73
mov byte [ebp - 0x207], al
pop eax
push 0x6c
mov byte [ebp - 0x1fb], al
mov byte [ebp - 0x1fd], al
pop eax
push 0x68
mov byte [ebp - 0x202], al
pop eax
mov byte [ebp - 0x205], al
lea eax, [ebp - 0x208]
push eax
push edi
mov dword [ebp - 0x201], 0x69784565
mov word [ebp - 0x204], 0x6946
mov byte [ebp - 0x206], 0x74
mov word [ebp - 0x1fa], 0x57
mov byte [ebp - 0x208], 0x50
mov byte [ebp - 0x1fc], 0x74
call esi
push 0x6c
mov dword [0x1006ca08], eax
pop eax
push 0x53
mov byte [ebp - 0xc1], al
pop eax
mov dword [ebp - 0xc0], 0x576575
mov dword [ebp - 0xc7], 0x74654748
mov byte [ebp - 0xc3], 0x56
mov byte [ebp - 0xc8], al
push 0x61
pop eax
mov byte [ebp - 0xc2], al
lea eax, [ebp - 0xc8]
push eax
push edi
call esi
push 0x6c
mov dword [0x1006ca00], eax
pop eax
push 0x61
mov byte [ebp - 0xcd], al
pop eax
push 0x53
mov byte [ebp - 0xce], al
pop eax
mov byte [ebp - 0xd2], al
mov byte [ebp - 0xd4], al
lea eax, [ebp - 0xd4]
push eax
push edi
mov word [ebp - 0xcb], 0x5765
mov byte [ebp - 0xcc], 0x75
mov word [ebp - 0xd1], 0x7465
mov byte [ebp - 0xcf], 0x56
mov byte [ebp - 0xd3], 0x48
mov byte [ebp - 0xc9], 0
call esi
push 0x53
mov dword [0x1006c9f8], eax
pop eax
push 0x70
mov byte [ebp - 0x272], al
pop eax
push 0x68
mov byte [ebp - 0x271], al
pop eax
push 0x61
mov byte [ebp - 0x27d], al
pop eax
push 0x6c
mov byte [ebp - 0x27f], al
pop eax
mov byte [ebp - 0x274], al
lea eax, [ebp - 0x280]
push eax
push edi
mov dword [ebp - 0x270], 0x576365
mov word [ebp - 0x277], 0x4665
mov dword [ebp - 0x27c], 0x6f6d6552
mov byte [ebp - 0x280], 0x50
mov byte [ebp - 0x27e], 0x74
mov byte [ebp - 0x273], 0x65
mov byte [ebp - 0x278], 0x76
mov byte [ebp - 0x275], 0x69
call esi
mov dword [0x1006ca5c], eax
mov edi, dword [ebp - 0x2c]
test edi, edi
je 0x1000d07c
push 0x53
pop eax
push 0x6e
mov byte [ebp - 0x1d5], al
pop eax
push 0x72
mov byte [ebp - 0x1cc], al
pop eax
mov byte [ebp - 0x1d1], al
lea eax, [ebp - 0x1d8]
push eax
push edi
mov word [ebp - 0x1cb], 0x6f66
mov word [ebp - 0x1d8], 0x6547
mov dword [ebp - 0x1d0], 0x49797469
mov word [ebp - 0x1d3], 0x7563
mov byte [ebp - 0x1c9], 0
mov byte [ebp - 0x1d4], 0x65
mov byte [ebp - 0x1d6], 0x74
call esi
push 0x61
mov dword [0x1006ca3c], eax
pop eax
push 0x6e
pop edx
push 0x6c
pop ecx
push 0x41
mov byte [ebp - 0x32b], dl
mov byte [ebp - 0x328], dl
pop edx
push 0x53
mov byte [ebp - 0x32c], dl
pop edx
push 0x64
mov byte [ebp - 0x31f], dl
pop edx
push 0x41
mov byte [ebp - 0x324], al
mov byte [ebp - 0x32a], dl
pop edx
mov byte [ebp - 0x32f], al
lea eax, [ebp - 0x334]
push eax
push edi
mov word [ebp - 0x327], 0x7469
mov word [ebp - 0x32e], 0x6574
mov word [ebp - 0x321], 0x657a
mov byte [ebp - 0x322], 0x69
mov byte [ebp - 0x333], cl
mov word [ebp - 0x31e], 0x6469
mov byte [ebp - 0x325], 0x69
mov byte [ebp - 0x323], cl
mov word [ebp - 0x331], 0x636f
mov byte [ebp - 0x334], dl
mov byte [ebp - 0x329], 0x49
mov byte [ebp - 0x332], cl
mov byte [ebp - 0x31c], 0
call esi
push 0x72
pop ecx
push 0x73
mov dword [0x1006ca38], eax
pop eax
push 0x6c
mov byte [ebp - 0x343], al
pop eax
push 0x70
mov byte [ebp - 0x338], al
pop eax
push 0x53
mov byte [ebp - 0x341], cl
mov word [ebp - 0x34b], 0x7563
mov byte [ebp - 0x34f], 0x65
mov byte [ebp - 0x34c], 0x65
mov byte [ebp - 0x33d], 0x6f
mov word [ebp - 0x346], 0x4479
mov byte [ebp - 0x340], 0x69
mov byte [ebp - 0x33f], al
mov byte [ebp - 0x33b], 0x44
pop edx
push 0x74
pop eax
push 0x61
mov byte [ebp - 0x33e], al
mov byte [ebp - 0x34e], al
mov byte [ebp - 0x347], al
pop eax
mov byte [ebp - 0x33a], al
lea eax, [ebp - 0x350]
push eax
push edi
mov byte [ebp - 0x350], dl
mov byte [ebp - 0x339], 0x63
mov byte [ebp - 0x34d], dl
mov byte [ebp - 0x348], 0x69
mov byte [ebp - 0x33c], cl
mov byte [ebp - 0x344], 0x65
mov byte [ebp - 0x349], cl
mov byte [ebp - 0x342], 0x63
mov byte [ebp - 0x337], 0
call esi
push 0x72
mov dword [0x1006ca48], eax
pop eax
push 0x6e
mov byte [ebp - 0x23e], al
pop eax
push 0x73
mov byte [ebp - 0x239], al
mov byte [ebp - 0x240], al
pop eax
push 0x41
mov byte [ebp - 0x23b], al
pop eax
push 0x6c
mov byte [ebp - 0x238], al
pop eax
push 0x53
mov byte [ebp - 0x236], al
pop eax
mov byte [ebp - 0x244], al
lea eax, [ebp - 0x244]
push eax
push edi
mov word [ebp - 0x235], 0x57
mov word [ebp - 0x243], 0x7465
mov byte [ebp - 0x241], 0x45
mov word [ebp - 0x23d], 0x6569
mov byte [ebp - 0x23f], 0x74
mov byte [ebp - 0x237], 0x63
mov byte [ebp - 0x23a], 0x49
call esi
mov dword [0x1006ca34], eax
test ebx, ebx
je 0x1000d28b
push 0x61
pop eax
push 0x53
pop ecx
push 0x70
mov byte [ebp - 0x9f], al
pop eax
push 0x41
mov byte [ebp - 0x9b], al
pop eax
push 0x72
mov byte [ebp - 0xa2], al
pop eax
mov byte [ebp - 0x9e], al
lea eax, [ebp - 0xa4]
push eax
push ebx
mov byte [ebp - 0xa0], 0x74
mov byte [ebp - 0xa1], cl
mov word [ebp - 0x9d], 0x7574
mov byte [ebp - 0xa4], 0x57
mov byte [ebp - 0xa3], cl
mov byte [ebp - 0x9a], 0
call esi
push 0x73
mov dword [0x1006ca68], eax
pop eax
mov byte [ebp - 0x3c], al
lea eax, [ebp - 0x3c]
push eax
push ebx
mov dword [ebp - 0x3b], 0x656b636f
mov word [ebp - 0x37], 0x74
call esi
push 0x53
mov dword [0x1006ca80], eax
pop eax
push 0x6e
mov byte [ebp - 0xaf], al
pop eax
push 0x70
mov byte [ebp - 0xa9], al
pop eax
push 0x61
mov byte [ebp - 0xa7], al
pop eax
push 0x41
mov byte [ebp - 0xaa], al
pop eax
push 0x6c
mov byte [ebp - 0xae], al
pop eax
mov byte [ebp - 0xac], al
lea eax, [ebp - 0xb0]
push eax
push ebx
mov byte [ebp - 0xab], 0x65
mov byte [ebp - 0xb0], 0x57
mov byte [ebp - 0xa8], 0x75
mov byte [ebp - 0xad], 0x43
mov byte [ebp - 0xa6], 0
call esi
push 0x64
pop ecx
push 0x61
mov dword [0x1006ca64], eax
pop eax
push 0x6e
mov byte [ebp - 0x7b], al
pop eax
push 0x72
mov byte [ebp - 0x7f], al
pop eax
push 0x5f
mov byte [ebp - 0x78], al
pop eax
mov byte [ebp - 0x79], cl
mov word [ebp - 0x7e], 0x7465
mov byte [ebp - 0x77], 0
mov byte [ebp - 0x7a], cl
mov byte [ebp - 0x7c], al
lea eax, [ebp - 0x80]
push eax
push ebx
mov byte [ebp - 0x80], 0x69
call esi
push 0x73
mov dword [0x1006ca7c], eax
pop eax
push 0x6e
mov byte [ebp - 0x20], al
pop eax
push 0x68
mov byte [ebp - 0x21], al
pop eax
mov byte [ebp - 0x24], al
lea eax, [ebp - 0x24]
push eax
push ebx
mov word [ebp - 0x23], 0x6f74
mov byte [ebp - 0x1f], 0
call esi
push 0x6e
mov dword [0x1006ca78], eax
pop eax
mov byte [ebp - 0x42], al
mov byte [ebp - 0x41], al
lea eax, [ebp - 0x44]
push eax
push ebx
mov dword [ebp - 0x40], 0x746365
mov word [ebp - 0x44], 0x6f63
call esi
push 0x64
mov dword [0x1006ca74], eax
pop eax
push 0x73
mov byte [ebp - 0x29], al
pop eax
push 0x6e
mov byte [ebp - 0x2c], al
pop eax
mov byte [ebp - 0x2a], al
lea eax, [ebp - 0x2c]
push eax
push ebx
mov byte [ebp - 0x2b], 0x65
mov byte [ebp - 0x28], 0
call esi
push 0x72
mov dword [0x1006ca70], eax
pop eax
mov byte [ebp - 0x34], al
lea eax, [ebp - 0x34]
push eax
push ebx
mov dword [ebp - 0x33], 0x766365
call esi
push 0x73
mov dword [0x1006ca6c], eax
pop eax
push 0x6c
mov byte [ebp - 0xdd], al
mov byte [ebp - 0xdb], al
pop eax
mov byte [ebp - 0xdf], al
lea eax, [ebp - 0xe0]
push eax
push ebx
mov word [ebp - 0xd7], 0x7465
mov byte [ebp - 0xde], 0x6f
mov byte [ebp - 0xe0], 0x63
mov word [ebp - 0xda], 0x636f
mov byte [ebp - 0xd5], 0
mov byte [ebp - 0xdc], 0x65
mov byte [ebp - 0xd8], 0x6b
call esi
mov dword [0x1006ca84], eax
mov ebx, dword [ebp - 0x468]
test ebx, ebx
je 0x1000d3a0
push 0x61
pop eax
push 0x72
mov byte [ebp - 0x1b6], al
pop eax
push 0x68
mov byte [ebp - 0x1b5], al
mov byte [ebp - 0x1b0], al
pop eax
mov byte [ebp - 0x1b7], al
lea eax, [ebp - 0x1b8]
push eax
push ebx
mov dword [ebp - 0x1ae], 0x57666675
mov byte [ebp - 0x1b8], 0x43
mov word [ebp - 0x1b3], 0x776f
mov byte [ebp - 0x1aa], 0
mov byte [ebp - 0x1b4], 0x4c
mov byte [ebp - 0x1b1], 0x65
mov byte [ebp - 0x1af], 0x42
call esi
push 0x73
pop ecx
push 0x61
mov dword [0x1006ca9c], eax
pop eax
push 0x72
mov byte [ebp - 0x30b], al
pop eax
push 0x64
pop edx
mov byte [ebp - 0x308], al
mov byte [ebp - 0x30d], al
lea eax, [ebp - 0x318]
push eax
push ebx
mov word [ebp - 0x307], 0x636f
mov word [ebp - 0x318], 0x6547
mov byte [ebp - 0x304], cl
mov byte [ebp - 0x309], 0x50
mov byte [ebp - 0x302], 0x49
mov word [ebp - 0x315], 0x6957
mov byte [ebp - 0x30c], 0x65
mov byte [ebp - 0x30a], dl
mov dword [ebp - 0x311], 0x6854776f
mov byte [ebp - 0x312], dl
mov byte [ebp - 0x303], cl
mov byte [ebp - 0x305], 0x65
mov byte [ebp - 0x316], 0x74
mov byte [ebp - 0x313], 0x6e
mov byte [ebp - 0x300], 0
mov byte [ebp - 0x301], dl
call esi
mov dword [0x1006ca4c], eax
mov eax, dword [ebp - 0x464]
test eax, eax
je 0x1000d412
push 0x68
pop ecx
push 0x53
mov byte [ebp - 7], cl
pop ecx
push 0x6c
pop edx
push 0x64
pop ebx
push 0x70
mov byte [ebp - 0x1c], cl
mov byte [ebp - 0x17], cl
pop ecx
push 0x61
mov byte [ebp - 0x16], cl
pop ecx
mov byte [ebp - 0x12], cl
mov byte [ebp - 9], cl
lea ecx, [ebp - 0x1c]
push ecx
mov byte [ebp - 0xd], bl
push eax
mov byte [ebp - 8], 0x74
mov word [ebp - 0x10], 0x6f46
mov dword [ebp - 0x1b], 0x74654748
mov byte [ebp - 0x11], dl
mov word [ebp - 6], 0x57
mov word [ebp - 0x14], 0x6963
mov word [ebp - 0xb], 0x5072
mov byte [ebp - 0x15], 0x65
mov byte [ebp - 0xe], dl
mov byte [ebp - 0xc], 0x65
xor ebx, ebx
call esi
mov dword [0x1006ca28], eax
jmp 0x1000d414
xor ebx, ebx
mov eax, dword [ebp - 0x46c]
test eax, eax
je 0x1000d44d
push 0x5f
pop ecx
push 0x70
mov byte [ebp - 0x50], cl
pop ecx
mov byte [ebp - 0x49], cl
lea ecx, [ebp - 0x50]
push ecx
push eax
mov word [ebp - 0x4e], 0x7363
mov byte [ebp - 0x4f], 0x77
mov word [ebp - 0x4b], 0x6d63
mov byte [ebp - 0x48], bl
mov byte [ebp - 0x4c], 0x69
call esi
mov dword [0x1006caac], eax
mov eax, dword [ebp - 0x460]
test eax, eax
je 0x1000d4c6
push 0x61
pop ecx
push 0x6e
mov byte [ebp - 0x210], cl
mov byte [ebp - 0x217], cl
pop ecx
mov byte [ebp - 0x213], cl
mov byte [ebp - 0x20f], cl
lea ecx, [ebp - 0x21c]
push ecx
push eax
mov word [ebp - 0x219], 0x6572
mov word [ebp - 0x215], 0x4965
mov word [ebp - 0x212], 0x7473
mov word [ebp - 0x21c], 0x6f43
mov byte [ebp - 0x21a], 0x43
mov word [ebp - 0x20d], 0x65
mov byte [ebp - 0x216], 0x74
mov byte [ebp - 0x20e], 0x63
call esi
mov dword [0x1006ca50], eax
push ebx
push ebx
push 1
push ebx
call dword [0x1006cac8]
push ebx
push ebx
push 1
push ebx
mov dword [0x1004d504], eax
call dword [0x1006cac8]
push ebx
push ebx
push ebx
mov dword [0x1004d50c], eax
call dword [0x1006cad0]
pop edi
mov dword [0x1004d508], eax
lea eax, [ebp - 0x4c0]
pop esi
mov dword [0x1004d500], eax
pop ebx
leave
ret