Function at 0x100abf08
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff0
sub esp, 0x180
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
cmp dword [ebx + 0x44], 0
mov dword [esp + 0x2c], eax
jle 0x100abf5b
mov edx, dword [ebx + 0x260]
mov eax, dword [ebx + 0x264]
not edx
rol eax, 1
xor eax, edx
cmp dword [ebx + 0x26c], 1
mov dword [ebx + 0x260], edx
mov dword [ebx + 0x264], eax
jle 0x100abf53
xor eax, eax
mov dword [ebx + 0x4c], eax
mov dword [esp], ebx
call fcn.100aad54
mov eax, dword [ebx + 0x44]
add eax, dword [ebx + 0x14]
cmp dword [ebx + 0x26c], 1
mov dword [ebx + 0x2c], eax
jne 0x100abfb2
xor eax, eax
mov edx, 0x42
mov dword [ebx + 0x25c], eax
mov dword [ebx + 0x258], eax
mov eax, ebx
call fcn.100aff08
mov edx, 0x5a
mov eax, ebx
call fcn.100aff08
mov edx, 0x68
mov eax, ebx
call fcn.100aff08
mov al, byte [ebx + 0x270]
lea edx, [eax + 0x30]
mov eax, ebx
movzx edx, dl
call fcn.100aff08
cmp dword [ebx + 0x44], 0
jle 0x100ad943
mov edx, 0x31
mov eax, ebx
xor edi, edi
call fcn.100aff08
mov edx, 0x41
mov eax, ebx
call fcn.100aff08
mov edx, 0x59
mov eax, ebx
call fcn.100aff08
mov edx, 0x26
mov eax, ebx
call fcn.100aff08
mov edx, 0x53
mov eax, ebx
call fcn.100aff08
mov edx, 0x59
mov eax, ebx
call fcn.100aff08
mov edx, dword [ebx + 0x260]
mov eax, ebx
call fcn.100aff18
xor ecx, ecx
mov edx, 1
mov eax, ebx
call fcn.100aff68
mov ecx, dword [ebx + 0x1c]
mov eax, ebx
mov edx, 0x18
call fcn.100aff68
mov eax, dword [ebx + 0x20]
mov dword [ebx + 0x54], edi
mov dword [esp + 0x5c], eax
mov eax, dword [ebx + 0x24]
mov dword [esp + 0x58], eax
mov eax, dword [ebx + 0x28]
mov dword [esp + 0x6c], eax
xor eax, eax
cmp byte [ebx + eax + 0x58], 0
je 0x100ac05f
mov edx, dword [ebx + 0x54]
mov byte [ebx + eax + 0x158], dl
inc edx
mov dword [ebx + 0x54], edx
inc eax
cmp eax, 0x100
jne 0x100ac04a
mov eax, dword [ebx + 0x54]
mov dword [esp + 0x68], eax
inc eax
mov dword [esp + 0x54], eax
xor eax, eax
cmp dword [esp + 0x54], eax
jl 0x100ac087
xor esi, esi
mov dword [ebx + eax*4 + 0x278], esi
inc eax
jmp 0x100ac075
xor eax, eax
cmp dword [esp + 0x68], eax
jle 0x100ac099
mov byte [esp + eax + 0x80], al
inc eax
jmp 0x100ac089
mov eax, dword [ebx + 0x44]
xor esi, esi
xor ecx, ecx
xor edi, edi
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x60]
cmp edi, eax
jge 0x100ac17e
mov eax, dword [esp + 0x5c]
mov eax, dword [eax + edi*4]
mov edx, eax
mov dword [esp + 0x64], eax
dec edx
jns 0x100ac0c8
mov eax, dword [esp + 0x60]
add edx, eax
mov eax, dword [esp + 0x58]
movzx edx, byte [eax + edx]
mov dl, byte [ebx + edx + 0x158]
mov byte [esp + 0x64], dl
mov dl, byte [esp + 0x80]
cmp byte [esp + 0x64], dl
jne 0x100ac0ee
inc ecx
jmp 0x100ac178
test ecx, ecx
je 0x100ac126
mov eax, esi
dec ecx
inc eax
mov esi, eax
mov eax, dword [esp + 0x6c]
test cl, 1
je 0x100ac110
mov word [eax + esi*2 - 2], 1
inc dword [ebx + 0x27c]
jmp 0x100ac11d
mov word [eax + esi*2 - 2], 0
inc dword [ebx + 0x278]
cmp ecx, 1
jle 0x100ac126
sar ecx, 1
jmp 0x100ac0f2
mov cl, byte [esp + 0x81]
mov byte [esp + 0x81], dl
lea edx, [esp + 0x81]
cmp byte [esp + 0x64], cl
je 0x100ac14b
mov al, byte [edx + 1]
inc edx
mov byte [edx], cl
mov ecx, eax
jmp 0x100ac13b
mov al, byte [esp + 0x64]
mov byte [esp + 0x80], al
lea eax, [esp + 0x80]
sub edx, eax
mov eax, dword [esp + 0x6c]
lea ecx, [edx + 1]
mov word [eax + esi*2], cx
mov eax, esi
xor ecx, ecx
inc dword [ebx + edx*4 + 0x27c]
inc eax
mov esi, eax
inc edi
jmp 0x100ac0a6
test ecx, ecx
je 0x100ac1b6
mov eax, esi
dec ecx
inc eax
mov esi, eax
mov eax, dword [esp + 0x6c]
test cl, 1
je 0x100ac1a0
mov word [eax + esi*2 - 2], 1
inc dword [ebx + 0x27c]
jmp 0x100ac1ad
mov word [eax + esi*2 - 2], 0
inc dword [ebx + 0x278]
cmp ecx, 1
jle 0x100ac1b6
sar ecx, 1
jmp 0x100ac182
mov eax, dword [esp + 0x6c]
mov edi, dword [esp + 0x54]
mov dword [esp + 0x48], ebx
mov ecx, ebx
mov word [eax + esi*2], di
mov edi, dword [esp + 0x54]
mov eax, esi
lea esi, [ebx + 0x60c]
inc eax
inc dword [ebx + edi*4 + 0x278]
mov edi, dword [esp + 0x68]
mov dword [ebx + 0x274], eax
add edi, 2
mov dword [esp + 0x58], edi
xor edx, edx
cmp dword [esp + 0x58], edx
jle 0x100ac200
mov byte [ecx + edx + 0x9324], 0xf
inc edx
jmp 0x100ac1ef
add ecx, 0x102
cmp ecx, esi
jne 0x100ac1ed
test eax, eax
jg 0x100ac21a
mov dword [esp], 0xbb9
call sym.secondstage.dll_bz_internal_error
mov edi, dword [ebx + 0x274]
mov dword [esp + 0x64], 2
cmp edi, 0xc7
jle 0x100ac268
mov dword [esp + 0x64], 3
cmp edi, 0x257
jle 0x100ac268
mov dword [esp + 0x64], 4
cmp edi, 0x4af
jle 0x100ac268
mov dword [esp + 0x64], 6
cmp edi, 0x95f
jg 0x100ac268
mov dword [esp + 0x64], 5
mov eax, dword [esp + 0x64]
xor ecx, ecx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x60], eax
mov eax, edi
cdq
idiv dword [esp + 0x60]
mov edx, dword [esp + 0x68]
lea ecx, [edx - 1]
xor edx, edx
mov dword [esp + 0x5c], edx
mov esi, dword [esp + 0x5c]
cmp eax, esi
jle 0x100ac2a8
mov edx, dword [esp + 0x54]
cmp ecx, edx
jge 0x100ac2a8
inc ecx
mov esi, dword [ebx + ecx*4 + 0x278]
add dword [esp + 0x5c], esi
jmp 0x100ac28a
cmp dword [esp + 0x68], ecx
mov esi, dword [esp + 0x60]
setl dl
cmp dword [esp + 0x64], esi
setne al
test dl, al
je 0x100ac2e0
cmp esi, 1
je 0x100ac2e0
mov eax, dword [esp + 0x64]
sub eax, esi
mov esi, 2
cdq
idiv esi
dec edx
jne 0x100ac2e0
mov esi, dword [ebx + ecx*4 + 0x278]
sub dword [esp + 0x5c], esi
dec ecx
imul eax, dword [esp + 0x60], 0x102
add eax, ebx
mov esi, eax
xor eax, eax
cmp dword [esp + 0x58], eax
jle 0x100ac30c
cmp dword [esp + 0x68], eax
jg 0x100ac300
xor edx, edx
cmp eax, ecx
jle 0x100ac302
mov dl, 0xf
mov byte [esi + eax + 0x9222], dl
inc eax
jmp 0x100ac2ee
lea eax, [ecx + 1]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x5c]
sub edi, eax
dec dword [esp + 0x60]
jne 0x100ac276
imul eax, dword [esp + 0x64], 0x408
mov dword [esp + 0x4c], 4
add eax, ebx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x64]
add eax, eax
mov dword [esp + 0x28], eax
imul eax, dword [esp + 0x64], 0x102
mov dword [esp + 0x40], eax
lea eax, [ebx + eax + 0x9324]
mov dword [esp + 0x30], eax
mov eax, ebx
xor edx, edx
cmp dword [esp + 0x58], edx
jle 0x100ac370
xor edi, edi
mov dword [eax + edx*4 + 0xb160], edi
inc edx
jmp 0x100ac35e
mov edi, dword [esp + 0x34]
add eax, 0x408
cmp eax, edi
jne 0x100ac35c
cmp dword [esp + 0x64], 6
je 0x100ac3a2
mov eax, dword [ebx + 0x274]
xor esi, esi
mov dword [esp + 0x50], esi
mov dword [esp + 0x44], eax
dec eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x5c], esi
jmp 0x100acfa7
xor eax, eax
cmp dword [esp + 0x58], eax
jle 0x100ac384
movzx edx, byte [ebx + eax + 0x9426]
movzx esi, byte [ebx + eax + 0x9324]
mov ecx, eax
shl ecx, 4
shl edx, 0x10
or edx, esi
mov dword [ebx + ecx + 0xc990], edx
movzx edx, byte [ebx + eax + 0x962a]
movzx esi, byte [ebx + eax + 0x9528]
shl edx, 0x10
or edx, esi
mov dword [ebx + ecx + 0xc994], edx
movzx edx, byte [ebx + eax + 0x982e]
movzx esi, byte [ebx + eax + 0x972c]
inc eax
shl edx, 0x10
or edx, esi
mov dword [ebx + ecx + 0xc998], edx
jmp 0x100ac3a4
mov eax, edi
mov ecx, dword [esp + 0x28]
lea edi, [esp + 0x74]
add eax, 0x31
cmp dword [esp + 0x44], eax
cmovle eax, dword [esp + 0x3c]
mov dword [esp + 0x54], eax
xor eax, eax
cmp dword [esp + 0x64], 6
rep stosb byte es:[edi], al
jne 0x100acfb7
mov eax, dword [esp + 0x54]
mov edi, dword [esp + 0x5c]
sub eax, edi
cmp eax, 0x31
jne 0x100acfb7
mov eax, edi
add eax, edi
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x68]
mov edi, dword [esp + 0x68]
movzx esi, word [eax + edx + 2]
movzx edi, word [eax + edi]
movzx eax, word [eax + edx + 4]
mov ecx, esi
shl esi, 4
mov edx, eax
shl ecx, 4
add esi, ebx
shl edx, 4
shl eax, 4
mov edx, dword [edx + ebx + 0xc990]
add edx, dword [ebx + ecx + 0xc990]
mov ecx, edi
add eax, ebx
shl ecx, 4
mov edi, dword [esp + 0x6c]
add edx, dword [ebx + ecx + 0xc990]
lea ecx, [ebx + ecx]
mov dword [esp + 0x38], edx
mov edx, dword [eax + 0xc994]
mov eax, dword [eax + 0xc998]
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
add edx, dword [ecx + 0xc994]
add eax, dword [ecx + 0xc998]
movzx esi, word [edi + esi + 6]
mov edi, dword [esp + 0x38]
mov ecx, esi
shl esi, 4
shl ecx, 4
add esi, ebx
add edi, dword [ebx + ecx + 0xc990]
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov ecx, edi
mov esi, dword [esp + 0x68]
mov edi, dword [esp + 0x6c]
movzx esi, word [edi + esi + 8]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0xa]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0xc]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0xe]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x10]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x12]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add eax, dword [esi + 0xc998]
add edx, dword [esi + 0xc994]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x14]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov edi, dword [esp + 0x6c]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x16]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x18]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x1a]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x1c]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x1e]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov edi, dword [esp + 0x6c]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x20]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x22]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x24]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x26]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x28]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x2a]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x2c]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x2e]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x30]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add eax, dword [esi + 0xc998]
add edx, dword [esi + 0xc994]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x32]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x34]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov edi, dword [esp + 0x6c]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x36]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x38]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x3a]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x3c]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x3e]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov edi, dword [esp + 0x6c]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x40]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x42]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x44]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x46]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x48]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x4a]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x4c]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x4e]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x50]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x52]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add eax, dword [esi + 0xc998]
add edx, dword [esi + 0xc994]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x54]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov edi, dword [esp + 0x6c]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x56]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x58]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x5a]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x5c]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x5e]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov edi, dword [esp + 0x6c]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x60]
mov edi, esi
shl edi, 4
mov esi, edi
add ecx, dword [ebx + edi + 0xc990]
mov edi, dword [esp + 0x6c]
add esi, ebx
add edx, dword [esi + 0xc994]
add eax, dword [esi + 0xc998]
mov esi, dword [esp + 0x68]
movzx esi, word [edi + esi + 0x62]
mov edi, esi
shl esi, 4
shl edi, 4
add ecx, dword [ebx + esi + 0xc990]
add edi, ebx
mov dword [esp + 0x74], ecx
add edx, dword [edi + 0xc994]
add eax, dword [edi + 0xc998]
mov dword [esp + 0x78], edx
mov dword [esp + 0x7c], eax
xor edx, edx
or eax, 0xffffffff
mov ecx, 0x3b9ac9ff
movzx esi, word [esp + edx*2 + 0x74]
cmp esi, ecx
jge 0x100acc6f
mov ecx, esi
mov eax, edx
inc edx
cmp dword [esp + 0x64], edx
jne 0x100acc62
mov edi, dword [esp + 0x50]
inc dword [esp + 0x50]
cmp dword [esp + 0x64], 6
mov byte [ebx + edi + 0x680], al
jne 0x100acfed
mov edx, dword [esp + 0x54]
mov edi, dword [esp + 0x5c]
sub edx, edi
cmp edx, 0x31
jne 0x100acfed
mov edx, edi
imul eax, eax, 0x102
add edx, edi
mov edi, dword [esp + 0x6c]
movzx ecx, word [edi + edx]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 2]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 4]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 6]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 8]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0xa]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0xc]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0xe]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x10]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x12]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x14]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x16]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x18]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x1a]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x1c]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x1e]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x20]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x22]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x24]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x26]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x28]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x2a]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x2c]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x2e]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x30]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x32]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x34]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x36]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x38]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x3a]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x3c]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x3e]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x40]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x42]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x44]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x46]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x48]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x4a]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x4c]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x4e]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x50]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x52]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x54]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x56]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x58]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x5a]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x5c]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x5e]
lea ecx, [ecx + eax + 0x2c58]
inc dword [ebx + ecx*4]
movzx ecx, word [edi + edx + 0x60]
movzx edx, word [edi + edx + 0x62]
lea ecx, [ecx + eax + 0x2c58]
lea eax, [edx + eax + 0x2c58]
inc dword [ebx + ecx*4]
inc dword [ebx + eax*4]
mov eax, dword [esp + 0x54]
inc eax
mov dword [esp + 0x5c], eax
mov edi, dword [esp + 0x5c]
cmp dword [esp + 0x44], edi
jg 0x100ac406
jmp 0x100ad019
mov eax, dword [esp + 0x5c]
cmp dword [esp + 0x54], eax
jl 0x100acc58
mov edi, dword [esp + 0x6c]
xor edx, edx
movzx ecx, word [edi + eax*2]
add ecx, ebx
movzx esi, byte [ecx + 0x9324]
add ecx, 0x102
add word [esp + edx*2 + 0x74], si
inc edx
cmp dword [esp + 0x64], edx
jne 0x100acfd1
inc eax
jmp 0x100acfbb
imul eax, eax, 0x102
mov edi, dword [esp + 0x5c]
cmp dword [esp + 0x54], edi
jl 0x100acf9e
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x6c]
inc dword [esp + 0x5c]
movzx edx, word [edx + ecx*2]
lea edx, [edx + eax + 0x2c58]
inc dword [ebx + edx*4]
jmp 0x100acff3
lea esi, [ebx + 0x9324]
lea edi, [ebx + 0xb160]
mov eax, dword [esp + 0x58]
mov dword [esp + 4], edi
add edi, 0x408
mov dword [esp], esi
add esi, 0x102
mov dword [esp + 0xc], 0x11
mov dword [esp + 8], eax
call fcn.100afac8
cmp dword [esp + 0x30], esi
jne 0x100ad025
dec dword [esp + 0x4c]
jne 0x100ac35a
xor ecx, ecx
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x5c]
mov al, byte [esp + 0x5c]
inc dword [esp + 0x5c]
mov byte [esp + edx + 0x80], al
mov edx, dword [esp + 0x5c]
cmp dword [esp + 0x64], edx
jne 0x100ad063
mov eax, dword [esp + 0x50]
mov cl, byte [esp + 0x80]
lea esi, [ebx + eax]
mov eax, ebx
cmp esi, eax
je 0x100ad0c3
mov dl, byte [eax + 0x680]
mov byte [esp + 0x68], dl
xor edx, edx
cmp byte [esp + 0x68], cl
je 0x100ad0ba
inc edx
movzx edi, byte [esp + edx + 0x80]
mov byte [esp + edx + 0x80], cl
mov ecx, edi
jmp 0x100ad0a0
mov byte [eax + 0x4cd2], dl
inc eax
jmp 0x100ad090
lea eax, [ebx + 0x9930]
mov edi, ebx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x40]
add eax, ebx
mov dword [esp + 0x54], eax
xor eax, eax
xor edx, edx
mov esi, 0x20
cmp dword [esp + 0x58], edx
jle 0x100ad0fd
movzx ecx, byte [edi + edx + 0x9324]
cmp eax, ecx
cmovl eax, ecx
cmp esi, ecx
cmovg esi, ecx
inc edx
jmp 0x100ad0e2
cmp eax, 0x11
jle 0x100ad116
mov dword [esp], 0xbbc
mov dword [esp + 0x44], eax
call sym.secondstage.dll_bz_internal_error
mov eax, dword [esp + 0x44]
test esi, esi
jne 0x100ad12e
mov dword [esp], 0xbbd
mov dword [esp + 0x44], eax
call sym.secondstage.dll_bz_internal_error
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
lea eax, [edi + 0x9324]
mov edx, dword [esp + 0x58]
add edi, 0x102
mov dword [esp + 4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x10], edx
mov dword [esp + 8], esi
mov dword [esp], eax
call fcn.100af9ec
add dword [esp + 0x68], 0x408
cmp dword [esp + 0x54], edi
jne 0x100ad0d9
xorps xmm0, xmm0
lea edi, [esp + 0x80]
xor eax, eax
movups xmmword [esp + 0x80], xmm0
mov ecx, edi
xor edx, edx
lea esi, [ebx + eax]
cmp byte [esi + edx + 0x58], 0
je 0x100ad191
mov byte [ecx], 1
inc edx
cmp edx, 0x10
jne 0x100ad187
add eax, 0x10
inc ecx
cmp eax, 0x100
jne 0x100ad182
xor esi, esi
cmp byte [esp + esi + 0x80], 0
mov ecx, 1
jne 0x100ad1b5
xor ecx, ecx
mov edx, 1
mov eax, ebx
inc esi
call fcn.100aff68
cmp esi, 0x10
jne 0x100ad1a4
cmp byte [edi], 0
jne 0x100ad200
add dword [esp + 0x4c], 0x10
inc edi
cmp dword [esp + 0x4c], 0x100
jne 0x100ad1c7
mov ecx, dword [esp + 0x64]
mov edx, 3
mov eax, ebx
xor esi, esi
call fcn.100aff68
mov ecx, dword [esp + 0x50]
mov edx, 0xf
mov eax, ebx
call fcn.100aff68
jmp 0x100ad239
xor esi, esi
mov eax, dword [esp + 0x4c]
mov ecx, 1
add eax, ebx
cmp byte [eax + esi + 0x58], 0
jne 0x100ad216
xor ecx, ecx
mov edx, 1
mov eax, ebx
inc esi
call fcn.100aff68
cmp esi, 0x10
jne 0x100ad202
jmp 0x100ad1cc
xor ecx, ecx
mov edx, 1
mov eax, ebx
inc esi
call fcn.100aff68
cmp dword [esp + 0x50], esi
je 0x100ad261
xor edi, edi
movzx eax, byte [ebx + esi + 0x4cd2]
cmp edi, eax
jge 0x100ad22a
mov ecx, 1
mov edx, 1
mov eax, ebx
inc edi
call fcn.100aff68
jmp 0x100ad241
mov eax, dword [esp + 0x48]
mov edx, 5
movzx edi, byte [eax + 0x9324]
mov eax, ebx
mov ecx, edi
call fcn.100aff68
xor edx, edx
mov esi, dword [esp + 0x48]
mov dword [esp + 0x68], edx
mov edx, dword [esp + 0x68]
cmp dword [esp + 0x58], edx
jle 0x100ad2e1
movzx eax, byte [esi + 0x9324]
cmp edi, eax
jge 0x100ad2ad
mov ecx, 2
mov edx, 2
mov eax, ebx
inc edi
call fcn.100aff68
jmp 0x100ad28e
movzx eax, byte [esi + 0x9324]
cmp edi, eax
jle 0x100ad2cc
mov ecx, 3
mov edx, 2
mov eax, ebx
dec edi
call fcn.100aff68
jmp 0x100ad2ad
xor ecx, ecx
mov edx, 1
mov eax, ebx
inc esi
call fcn.100aff68
inc dword [esp + 0x68]
jmp 0x100ad284
add dword [esp + 0x48], 0x102
mov edx, dword [esp + 0x48]
cmp dword [esp + 0x54], edx
jne 0x100ad261
xor eax, eax
mov dword [esp + 0x58], eax
mov eax, dword [ebx + 0x274]
mov edx, dword [esp + 0x60]
cmp eax, edx
jle 0x100ad92d
add edx, 0x31
mov dword [esp + 0x64], edx
cmp eax, edx
jg 0x100ad31f
dec eax
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x58]
movzx eax, byte [ebx + eax + 0x680]
cmp dword [esp + 0x5c], eax
jg 0x100ad33d
mov dword [esp], 0xbbe
call sym.secondstage.dll_bz_internal_error
cmp dword [esp + 0x5c], 6
jne 0x100ad8d2
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x60]
sub eax, edx
cmp eax, 0x31
jne 0x100ad8d2
mov eax, dword [esp + 0x58]
movzx eax, byte [ebx + eax + 0x680]
imul edx, eax, 0x102
imul eax, eax, 0x408
lea edi, [ebx + edx + 0x9324]
lea esi, [ebx + eax + 0x9930]
mov eax, dword [esp + 0x60]
add eax, eax
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x68]
movzx eax, word [eax + edx]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 2]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 4]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 6]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 8]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0xa]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0xc]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0xe]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x10]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x12]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x14]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x16]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x18]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x1a]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x1c]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x1e]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x20]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x22]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x24]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x26]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x28]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x2a]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x2c]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x2e]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x30]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x32]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x34]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x36]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x38]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + ecx + 0x3a]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x3c]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + ecx + 0x3e]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x40]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + ecx + 0x42]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x44]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + ecx + 0x46]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x48]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + ecx + 0x4a]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x4c]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + ecx + 0x4e]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x50]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + ecx + 0x52]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x54]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + ecx + 0x56]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x58]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + ecx + 0x5a]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x5c]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + ecx + 0x5e]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + edx + 0x60]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
movzx eax, word [eax + ecx + 0x62]
mov ecx, dword [esi + eax*4]
movzx edx, byte [edi + eax]
mov eax, ebx
call fcn.100aff68
jmp 0x100ad91b
mov edi, dword [esp + 0x60]
cmp dword [esp + 0x64], edi
jl 0x100ad91b
mov eax, dword [esp + 0x58]
mov edi, dword [esp + 0x6c]
mov esi, dword [esp + 0x60]
movzx eax, byte [ebx + eax + 0x680]
movzx edx, word [edi + esi*2]
imul eax, eax, 0x102
lea ecx, [edx + eax + 0x264c]
add eax, ebx
movzx edx, byte [edx + eax + 0x9324]
mov ecx, dword [ebx + ecx*4]
mov eax, ebx
call fcn.100aff68
inc dword [esp + 0x60]
jmp 0x100ad8d2
mov eax, dword [esp + 0x64]
inc dword [esp + 0x58]
inc eax
mov dword [esp + 0x60], eax
jmp 0x100ad2fd
mov edi, dword [esp + 0x58]
cmp dword [esp + 0x50], edi
je 0x100ad943
mov dword [esp], 0xbbf
call sym.secondstage.dll_bz_internal_error
cmp byte [esp + 0x2c], 0
je 0x100ad9cf
mov edx, 0x17
mov eax, ebx
call fcn.100aff08
mov edx, 0x72
mov eax, ebx
call fcn.100aff08
mov edx, 0x45
mov eax, ebx
call fcn.100aff08
mov edx, 0x38
mov eax, ebx
call fcn.100aff08
mov edx, 0x50
mov eax, ebx
call fcn.100aff08
mov edx, 0x90
mov eax, ebx
call fcn.100aff08
mov edx, dword [ebx + 0x264]
mov eax, ebx
call fcn.100aff18
cmp dword [ebx + 0x25c], 0
jle 0x100ad9cf
mov eax, dword [ebx + 0x4c]
movzx ecx, byte [ebx + 0x25b]
mov edx, dword [ebx + 0x2c]
mov byte [edx + eax], cl
inc dword [ebx + 0x4c]
sub dword [ebx + 0x25c], 8
shl dword [ebx + 0x258], 8
jmp 0x100ad9a3
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret