Function at 0x10045c30
Capabilities:
Access peb ldr_data
Authenticate hmac
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Encode data using xor
Get number of processors
Get process heap flags
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ba352
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1ba8
call fcn.100b6310
mov eax, dword [0x100cc008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1e4], edi
lea eax, [ebp - 0x790]
mov dword [ebp - 0x790], 0x69746e61
push eax
lea ecx, [ebp - 0x9b8]
mov dword [ebp - 0x78c], 0x6d69612d
mov byte [ebp - 0x788], 0
call fcn.1001d770
lea eax, [ebp - 0x9b8]
mov dword [ebp - 4], 0
push eax
mov ecx, edi
call fcn.10036880
lea ecx, [ebp - 0x9b8]
mov dword [ebp - 4], 1
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x750]
push eax
lea ecx, [ebp - 0x9e8]
mov dword [ebp - 0x750], 0x62616e65
mov word [ebp - 0x74c], 0x656c
mov byte [ebp - 0x74a], 0
call fcn.1001d770
mov dword [ebp - 4], 2
lea eax, [ebp - 0x758]
push eax
lea ecx, [ebp - 0x9d0]
mov dword [ebp - 0x758], 0x62616e65
mov word [ebp - 0x754], 0x656c
mov byte [ebp - 0x752], 0
call fcn.1001d770
lea eax, [ebp - 0x9e8]
mov byte [ebp - 4], 3
push eax
lea ecx, [edi + 0x68]
call fcn.10036880
lea eax, [ebp - 0x9d0]
mov byte [edi + 0x99], 1
push eax
lea ecx, [edi + 0xa0]
call fcn.10036880
mov byte [edi + 0x9c], 0
lea ecx, [ebp - 0x9d0]
mov byte [ebp - 4], 4
call fcn.1001d720
lea ecx, [ebp - 0x9e8]
mov dword [ebp - 4], 5
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x30]
mov dword [ebp - 0x2c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x2c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x2c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x6e0]
mov dword [ebp - 0x6e0], 0x65676465
push eax
lea ecx, [ebp - 0xa18]
mov byte [ebp - 0x6dc], 0
call fcn.1001d770
mov dword [ebp - 4], 6
mov dword [ebp - 0x6d8], 0x65676465
mov byte [ebp - 0x6d4], 0
lea eax, [ebp - 0x6d8]
push eax
lea ecx, [ebp - 0xa00]
call fcn.1001d770
lea eax, [ebp - 0xa18]
mov byte [ebp - 4], 7
push eax
lea ecx, [edi + 0xf0]
call fcn.10036880
lea eax, [ebp - 0xa00]
mov byte [edi + 0x121], 1
push eax
lea ecx, [edi + 0x128]
call fcn.10036880
mov byte [edi + 0x124], 0
lea ecx, [ebp - 0xa00]
mov byte [ebp - 4], 8
call fcn.1001d720
lea ecx, [ebp - 0xa18]
mov dword [ebp - 4], 9
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0xb8]
mov dword [ebp - 0x30], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x30]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x30]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x728]
mov dword [ebp - 0x728], 0x6e617473
push eax
lea ecx, [ebp - 0x1438]
mov word [ebp - 0x724], 0x64
call fcn.1001d770
lea eax, [ebp - 0x6d0]
mov dword [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x1420]
mov dword [ebp - 0x6d0], 0x6b6c6177
mov byte [ebp - 0x6cc], 0
call fcn.1001d770
lea eax, [ebp - 0x688]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x1408]
mov dword [ebp - 0x688], 0x726961
call fcn.1001d770
lea eax, [ebp - 0x7cf]
mov dword [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x13f0]
push ecx
lea edx, [ebp - 0x1438]
push edx
lea ecx, [ebp - 0x888]
call fcn.1008ddf0
lea eax, [ebp - 0x6f8]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0xa30]
mov dword [ebp - 0x6f8], 0x65646f6d
mov byte [ebp - 0x6f4], 0
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x11e0]
mov byte [ebp - 4], 0xe
call fcn.1001d770
lea eax, [ebp - 0xa30]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [edi + 0x178]
call fcn.10036880
mov byte [edi + 0x1a9], 0
lea ecx, [edi + 0x1c8]
mov dword [edi + 0x1dc], 0
mov dword [edi + 0x150], 0x14
mov dword [edi + 0x154], 0x14
mov eax, dword [ebp - 0x884]
mov esi, dword [ebp - 0x888]
mov dword [ebp - 0x1e8], eax
cmp esi, eax
je 0x10046001
mov edi, ecx
push esi
mov ecx, edi
call fcn.1003bf80
add esi, 0x18
cmp esi, dword [ebp - 0x1e8]
jne 0x10045fe2
mov edi, dword [ebp - 0x1e4]
lea ecx, [edi + 0x1c8]
call fcn.10022330
test eax, eax
je 0x10046014
mov dword [edi + 0x1d8], 0
lea ecx, [ebp - 0x11e0]
mov byte [ebp - 4], 0x10
call fcn.1001d720
lea ecx, [ebp - 0xa30]
mov byte [ebp - 4], 0x11
call fcn.1001d720
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x12
call fcn.1003c220
push fcn.1001d720
push 3
push 0x18
lea eax, [ebp - 0x1438]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
lea eax, [edi + 0x140]
mov dword [ebp - 0x38], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x38]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x38]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x38]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x38]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x68c]
mov dword [ebp - 0x68c], 0x66666f
push eax
lea ecx, [ebp - 0x16d8]
call fcn.1001d770
lea eax, [ebp - 0x6b8]
mov dword [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x16c0]
mov dword [ebp - 0x6b8], 0x6e776f64
mov byte [ebp - 0x6b4], 0
call fcn.1001d770
lea eax, [ebp - 0x664]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x16a8]
mov word [ebp - 0x664], 0x7075
mov byte [ebp - 0x662], 0
call fcn.1001d770
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x760]
push eax
lea ecx, [ebp - 0x1690]
mov dword [ebp - 0x760], 0x646e6172
mov word [ebp - 0x75c], 0x6d6f
mov byte [ebp - 0x75a], 0
call fcn.1001d770
lea eax, [ebp - 0x720]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x1678]
mov dword [ebp - 0x720], 0x61656469
mov word [ebp - 0x71c], 0x6c
call fcn.1001d770
lea eax, [ebp - 0x7d9]
mov dword [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x1660]
lea edx, [ebp - 0x16d8]
push ecx
push edx
lea ecx, [ebp - 0x894]
call fcn.1008ddf0
mov byte [ebp - 4], 0x18
xor ecx, ecx
mov dword [ebp - 0x67c], 0xc1d6cbd2
mov dword [ebp - 0x678], 0xd6d1fdca
mov word [ebp - 0x674], 0xc6cc
mov byte [ebp - 0x672], 0xa2
xor byte [ebp + ecx - 0x67c], 0xa2
inc ecx
cmp ecx, 0xb
jb 0x100461b2
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0xa60]
call fcn.1001d770
lea eax, [ebp - 0x738]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0x738], 0x63746970
mov word [ebp - 0x734], 0x68
call fcn.1001d770
lea eax, [ebp - 0xa60]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [edi + 0x218]
call fcn.10036880
lea eax, [ebp - 0xa48]
mov byte [edi + 0x249], 1
push eax
lea ecx, [edi + 0x250]
call fcn.10036880
xor ecx, ecx
mov edx, 0xf
cmp byte [edi + 0x249], cl
cmovne ecx, edx
mov dword [edi + 0x27c], ecx
lea eax, [ecx + 0x14]
mov dword [edi + 0x1f0], eax
lea ecx, [edi + 0x268]
mov dword [edi + 0x1f4], eax
mov eax, dword [ebp - 0x890]
mov esi, dword [ebp - 0x894]
mov dword [ebp - 0x1e8], eax
cmp esi, eax
je 0x10046292
mov dword [ebp - 0x1e0], ecx
mov edi, ecx
push esi
mov ecx, edi
call fcn.1003bf80
add esi, 0x18
cmp esi, dword [ebp - 0x1e8]
jne 0x10046273
mov edi, dword [ebp - 0x1e4]
lea ecx, [edi + 0x268]
call fcn.10022330
test eax, eax
je 0x100462a5
mov dword [edi + 0x278], 0
lea ecx, [ebp - 0xa48]
mov byte [ebp - 4], 0x1b
call fcn.1001d720
lea ecx, [ebp - 0xa60]
mov byte [ebp - 4], 0x1c
call fcn.1001d720
lea ecx, [ebp - 0x894]
mov byte [ebp - 4], 0x1d
call fcn.1003c220
push fcn.1001d720
push 5
push 0x18
lea eax, [ebp - 0x16d8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], 0x10021920
lea esi, [edi + 0x1e0]
lea ecx, [esi + 0x58]
push eax
call fcn.1002e3b0
mov dword [ebp - 0x40], esi
mov dword [esi + 0x18], 0
mov ecx, dword [ebp - 0x40]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x40]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x40]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x40]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x690]
mov dword [ebp - 0x690], 0x66666f
push eax
lea ecx, [ebp - 0x1750]
call fcn.1001d770
mov dword [ebp - 4], 0x1e
lea eax, [ebp - 0x7c0]
push eax
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0x7c0], 0x65726964
mov dword [ebp - 0x7bc], 0x6f697463
mov word [ebp - 0x7b8], 0x6e
call fcn.1001d770
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x768]
push eax
lea ecx, [ebp - 0x1720]
mov dword [ebp - 0x768], 0x7474696a
mov word [ebp - 0x764], 0x7265
mov byte [ebp - 0x762], 0
call fcn.1001d770
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x748]
push eax
lea ecx, [ebp - 0x1708]
mov dword [ebp - 0x748], 0x61746f72
mov word [ebp - 0x744], 0x6574
mov byte [ebp - 0x742], 0
call fcn.1001d770
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x770]
push eax
lea ecx, [ebp - 0x16f0]
mov dword [ebp - 0x770], 0x646e6172
mov word [ebp - 0x76c], 0x6d6f
mov byte [ebp - 0x76a], 0
call fcn.1001d770
lea eax, [ebp - 0x7d0]
mov dword [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x16d8]
push ecx
lea edx, [ebp - 0x1750]
push edx
lea ecx, [ebp - 0x8a0]
call fcn.1008ddf0
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x79c]
push eax
lea ecx, [ebp - 0xa90]
mov dword [ebp - 0x79c], 0x5f776179
mov dword [ebp - 0x798], 0x646e7473
mov byte [ebp - 0x794], 0
call fcn.1001d770
lea eax, [ebp - 0x680]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0xa78]
mov dword [ebp - 0x680], 0x776179
call fcn.1001d770
lea eax, [ebp - 0xa90]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [edi + 0x2b8]
call fcn.10036880
lea eax, [ebp - 0xa78]
mov byte [edi + 0x2e9], 1
push eax
lea ecx, [edi + 0x2f0]
call fcn.10036880
xor ecx, ecx
mov eax, 0xf
cmp byte [edi + 0x2e9], cl
cmovne ecx, eax
mov dword [edi + 0x31c], ecx
lea eax, [ecx + 0x14]
mov dword [edi + 0x290], eax
lea ecx, [edi + 0x308]
mov dword [edi + 0x294], eax
mov eax, dword [ebp - 0x89c]
mov esi, dword [ebp - 0x8a0]
mov dword [ebp - 0x1e8], eax
cmp esi, eax
je 0x10046537
mov dword [ebp - 0x1e0], ecx
mov edi, ecx
push esi
mov ecx, edi
call fcn.1003bf80
add esi, 0x18
cmp esi, dword [ebp - 0x1e8]
jne 0x10046518
mov edi, dword [ebp - 0x1e4]
lea ecx, [edi + 0x308]
call fcn.10022330
test eax, eax
je 0x1004654a
mov dword [edi + 0x318], 0
lea ecx, [ebp - 0xa78]
mov byte [ebp - 4], 0x26
call fcn.1001d720
lea ecx, [ebp - 0xa90]
mov byte [ebp - 4], 0x27
call fcn.1001d720
lea ecx, [ebp - 0x8a0]
mov byte [ebp - 4], 0x28
call fcn.1003c220
push fcn.1001d720
push 5
push 0x18
lea eax, [ebp - 0x1750]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
lea eax, [ebp - 0x1c4]
mov dword [ebp - 0x1c4], 0x10021920
lea esi, [edi + 0x280]
lea ecx, [esi + 0x58]
push eax
call fcn.1002e3b0
mov dword [ebp - 0x4c], esi
mov dword [esi + 0x18], 0
mov ecx, dword [ebp - 0x4c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x4c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x7f0]
mov dword [ebp - 0x7f0], 0xb0
push eax
lea ecx, [ebp - 0xac0]
call fcn.1008e160
mov dword [ebp - 4], 0x29
mov ecx, 0x10
movaps xmm0, xmmword [0x100c1ae0]
pxor xmm0, xmmword [0x100c1ec0]
mov word [ebp - 0x8e0], 0xa2c6
movups xmmword [ebp - 0x8f0], xmm0
xor byte [ebp + ecx - 0x8f0], 0xa2
inc ecx
cmp ecx, 0x12
jb 0x10046632
lea eax, [ebp - 0x8f0]
push eax
lea ecx, [ebp - 0xaa8]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x11f8]
mov byte [ebp - 4], 0x2a
call fcn.1001d770
lea eax, [ebp - 0xaa8]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [edi + 0x358]
call fcn.10036880
mov byte [edi + 0x389], 0
lea eax, [ebp - 0xac0]
mov dword [edi + 0x3d8], 0
lea ecx, [edi + 0x3c0]
mov dword [edi + 0x330], 8
mov dword [edi + 0x334], 8
mov dword [edi + 0x394], 0x3f800000
mov dword [edi + 0x398], 0x43340000
mov dword [edi + 0x390], 0x42340000
mov dword [edi + 0x3a4], 0
push eax
mov dword [edi + 0x39c], 0x40a00000
call fcn.1008e130
lea ecx, [ebp - 0x11f8]
mov byte [ebp - 4], 0x2c
call fcn.1001d720
lea ecx, [ebp - 0xaa8]
mov byte [ebp - 4], 0x2d
call fcn.1001d720
lea ecx, [ebp - 0xac0]
mov dword [ebp - 4], 0x2e
call fcn.1003c160
lea eax, [ebp - 0x1c8]
mov dword [ebp - 4], 0xffffffff
push eax
lea ecx, [edi + 0x378]
mov dword [ebp - 0x1c8], 0x10021920
call fcn.1002e3b0
lea eax, [ebp - 0x1cc]
mov dword [ebp - 0x1cc], 0x10021940
push eax
lea ecx, [edi + 0x378]
call fcn.1002e3b0
lea eax, [edi + 0x320]
mov dword [ebp - 0x90], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x90]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x90]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x90]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x90]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x7ec]
mov dword [ebp - 0x7ec], 0xb0
push eax
lea ecx, [ebp - 0xaf0]
call fcn.1008e160
mov dword [ebp - 4], 0x2f
xor ecx, ecx
mov dword [ebp - 0x6f0], 0xfdd6cdd0
mov dword [ebp - 0x6ec], 0xc5ccc3d0
mov dword [ebp - 0x6e8], 0xd6d1fdc7
mov word [ebp - 0x6e4], 0xc6cc
mov byte [ebp - 0x6e2], 0xa2
nop word [eax + eax]
xor byte [ebp + ecx - 0x6f0], 0xa2
inc ecx
cmp ecx, 0xf
jb 0x10046800
lea eax, [ebp - 0x6f0]
push eax
lea ecx, [ebp - 0xad8]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x1210]
mov byte [ebp - 4], 0x30
call fcn.1001d770
lea eax, [ebp - 0xad8]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [edi + 0x414]
call fcn.10036880
mov byte [edi + 0x445], 0
lea eax, [ebp - 0xaf0]
mov dword [edi + 0x494], 0
lea ecx, [edi + 0x47c]
mov dword [edi + 0x3ec], 8
mov dword [edi + 0x3f0], 8
mov dword [edi + 0x450], 0
mov dword [edi + 0x454], 0x43b40000
mov dword [edi + 0x44c], 0x43b40000
mov dword [edi + 0x460], 0
push eax
mov dword [edi + 0x458], 0x40a00000
call fcn.1008e130
lea ecx, [ebp - 0x1210]
mov byte [ebp - 4], 0x32
call fcn.1001d720
lea ecx, [ebp - 0xad8]
mov byte [ebp - 4], 0x33
call fcn.1001d720
lea ecx, [ebp - 0xaf0]
mov dword [ebp - 4], 0x34
call fcn.1003c160
lea eax, [ebp - 0x1d0]
mov dword [ebp - 4], 0xffffffff
push eax
lea ecx, [edi + 0x434]
mov dword [ebp - 0x1d0], 0x10021920
call fcn.1002e3b0
lea eax, [ebp - 0x1d4]
mov dword [ebp - 0x1d4], 0x10021950
push eax
lea ecx, [edi + 0x434]
call fcn.1002e3b0
lea eax, [edi + 0x3dc]
mov dword [ebp - 0x54], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x54]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x54]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x54]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x54]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x7f4]
mov dword [ebp - 0x7f4], 0x25
push eax
lea ecx, [ebp - 0xb20]
call fcn.1008e160
mov dword [ebp - 4], 0x35
xor ecx, ecx
mov dword [ebp - 0x708], 0xfdd6cdd0
mov dword [ebp - 0x704], 0xc7c7d2d1
mov dword [ebp - 0x700], 0xd6d1fdc6
mov word [ebp - 0x6fc], 0xc6cc
mov byte [ebp - 0x6fa], 0xa2
xor byte [ebp + ecx - 0x708], 0xa2
inc ecx
cmp ecx, 0xf
jb 0x100469b4
lea eax, [ebp - 0x708]
push eax
lea ecx, [ebp - 0xb08]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x1228]
mov byte [ebp - 4], 0x36
call fcn.1001d770
lea eax, [ebp - 0xb08]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [edi + 0x4d0]
call fcn.10036880
mov byte [edi + 0x501], 0
lea eax, [ebp - 0xb20]
mov dword [edi + 0x550], 0
lea ecx, [edi + 0x538]
mov dword [edi + 0x4a8], 8
mov dword [edi + 0x4ac], 8
mov dword [edi + 0x50c], 0x3f800000
mov dword [edi + 0x510], 0x42c80000
mov dword [edi + 0x508], 0x41200000
mov dword [edi + 0x51c], 0
push eax
mov dword [edi + 0x514], 0x3f800000
call fcn.1008e130
lea ecx, [ebp - 0x1228]
mov byte [ebp - 4], 0x38
call fcn.1001d720
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x39
call fcn.1001d720
lea ecx, [ebp - 0xb20]
mov dword [ebp - 4], 0x3a
call fcn.1003c160
lea eax, [ebp - 0x1d8]
mov dword [ebp - 4], 0xffffffff
push eax
lea ecx, [edi + 0x4f0]
mov dword [ebp - 0x1d8], 0x10021920
call fcn.1002e3b0
lea eax, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0x10021950
push eax
lea ecx, [edi + 0x4f0]
call fcn.1002e3b0
lea eax, [edi + 0x498]
mov dword [ebp - 0x58], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x58]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x58]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x58]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x58]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e3b0
push 0x100c1384
lea ecx, [ebp - 0xb50]
add edi, 0x554
call fcn.1008e160
mov dword [ebp - 4], 0x3b
lea eax, [ebp - 0x928]
movaps xmm0, xmmword [0x100c1ae0]
lea ecx, [ebp - 0xb38]
pxor xmm0, xmmword [0x100c1d50]
push eax
movups xmmword [ebp - 0x928], xmm0
mov byte [ebp - 0x918], 0
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x1240]
mov byte [ebp - 4], 0x3c
call fcn.1001d770
mov esi, dword [ebp - 0x1e4]
lea eax, [ebp - 0xb38]
push eax
mov byte [ebp - 4], 0x3d
lea ecx, [esi + 0x58c]
call fcn.10036880
mov byte [esi + 0x5bd], 0
lea eax, [ebp - 0xb50]
mov dword [esi + 0x60c], 0
lea ecx, [esi + 0x5f4]
mov dword [esi + 0x564], 8
mov dword [esi + 0x568], 8
mov dword [esi + 0x5c8], 0
mov dword [esi + 0x5cc], 0x3f800000
mov dword [esi + 0x5c4], 0
mov dword [esi + 0x5d8], 1
push eax
mov dword [esi + 0x5d0], 0x3dcccccd
call fcn.1008e130
lea ecx, [ebp - 0x1240]
mov byte [ebp - 4], 0x3e
call fcn.1001d720
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], 0x3f
call fcn.1001d720
lea ecx, [ebp - 0xb50]
mov dword [ebp - 4], 0x40
call fcn.1003c160
lea eax, [ebp - 0xd0]
mov dword [ebp - 4], 0xffffffff
push eax
lea ecx, [edi + 0x58]
mov dword [ebp - 0xd0], 0x10021920
call fcn.1002e3b0
lea eax, [ebp - 0xd4]
mov dword [ebp - 0xd4], 0x10021960
push eax
lea ecx, [edi + 0x58]
call fcn.1002e3b0
mov dword [ebp - 0x5c], edi
mov dword [edi + 0x18], 0
mov ecx, dword [ebp - 0x5c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x5c]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x5c]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x718]
mov dword [ebp - 0x718], 0x6f747561
push eax
lea ecx, [ebp - 0x17c8]
mov byte [ebp - 0x714], 0
call fcn.1001d770
mov dword [ebp - 4], 0x41
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x17b0]
mov dword [ebp - 0x7b4], 0x6b636162
mov dword [ebp - 0x7b0], 0x64726177
mov word [ebp - 0x7ac], 0x73
call fcn.1001d770
mov byte [ebp - 4], 0x42
mov dword [ebp - 0x710], 0x7466656c
lea eax, [ebp - 0x710]
mov byte [ebp - 0x70c], 0
push eax
lea ecx, [ebp - 0x1798]
call fcn.1001d770
lea eax, [ebp - 0x730]
mov byte [ebp - 4], 0x43
push eax
lea ecx, [ebp - 0x1780]
mov dword [ebp - 0x730], 0x68676972
mov word [ebp - 0x72c], 0x74
call fcn.1001d770
mov byte [ebp - 4], 0x44
lea eax, [ebp - 0x778]
push eax
lea ecx, [ebp - 0x1768]
mov dword [ebp - 0x778], 0x74737563
mov word [ebp - 0x774], 0x6d6f
mov byte [ebp - 0x772], 0
call fcn.1001d770
lea eax, [ebp - 0x7d1]
mov dword [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x1750]
push ecx
lea edx, [ebp - 0x17c8]
push edx
lea ecx, [ebp - 0x8ac]
call fcn.1008ddf0
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x7a8]
push eax
lea ecx, [ebp - 0xb80]
mov dword [ebp - 0x7a8], 0x5f726964
mov dword [ebp - 0x7a4], 0x646e7473
mov byte [ebp - 0x7a0], 0
call fcn.1001d770
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x7cc]
push eax
lea ecx, [ebp - 0xb68]
mov dword [ebp - 0x7cc], 0x65726964
mov dword [ebp - 0x7c8], 0x6f697463
mov word [ebp - 0x7c4], 0x6e
call fcn.1001d770
lea eax, [ebp - 0xb80]
mov byte [ebp - 4], 0x48
push eax
lea ecx, [esi + 0x648]
call fcn.10036880
lea eax, [ebp - 0xb68]
mov byte [esi + 0x679], 1
push eax
lea ecx, [esi + 0x680]
call fcn.10036880
xor eax, eax
mov ecx, 0xf
cmp byte [esi + 0x679], al
cmovne eax, ecx
mov dword [esi + 0x6ac], eax
add eax, 0x14
mov dword [esi + 0x620], eax
mov dword [esi + 0x624], eax
mov eax, dword [ebp - 0x8a8]
mov edi, dword [ebp - 0x8ac]
mov dword [ebp - 0x1e8], eax
cmp edi, eax
je 0x10046e8b
lea eax, [esi + 0x698]
mov esi, eax
push edi
mov ecx, esi
call fcn.1003bf80
add edi, 0x18
cmp edi, dword [ebp - 0x1e8]
jne 0x10046e72
mov esi, dword [ebp - 0x1e4]
lea ecx, [esi + 0x698]
call fcn.10022330
test eax, eax
je 0x10046ea4
mov dword [esi + 0x6a8], 0
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x49
call fcn.1001d720
lea ecx, [ebp - 0xb80]
mov byte [ebp - 4], 0x4a
call fcn.1001d720
lea ecx, [ebp - 0x8ac]
mov byte [ebp - 4], 0x4b
call fcn.1003c220
push fcn.1001d720
push 5
push 0x18
lea eax, [ebp - 0x17c8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
lea eax, [ebp - 0x198]
mov dword [ebp - 0x198], 0x10021920
lea edi, [esi + 0x610]
push eax
lea ecx, [edi + 0x58]
call fcn.1002e3b0
lea eax, [ebp - 0xdc]
mov dword [ebp - 0xdc], 0x10021930
push eax
lea ecx, [edi + 0x58]
call fcn.1002e3b0
mov dword [ebp - 0x60], edi
mov dword [edi + 0x18], 0
mov ecx, dword [ebp - 0x60]
mov edi, dword [ebp - 0x1e4]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x60]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x60]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x60]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x7e4]
mov dword [ebp - 0x7e4], 0x73
push eax
lea ecx, [ebp - 0xbb0]
call fcn.1008e160
mov dword [ebp - 4], 0x4c
xor ecx, ecx
mov dword [ebp - 0x6b0], 0xfdd0cbc6
mov dword [ebp - 0x6ac], 0xc7cfcbd6
mov dword [ebp - 0x6a8], 0xccd6d1fd
mov word [ebp - 0x6a4], 0xa2c6
xor byte [ebp + ecx - 0x6b0], 0xa2
inc ecx
cmp ecx, 0xe
jb 0x10046fb0
lea eax, [ebp - 0x6b0]
push eax
lea ecx, [ebp - 0xb98]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x1258]
mov byte [ebp - 4], 0x4d
call fcn.1001d770
lea eax, [ebp - 0xb98]
mov byte [ebp - 4], 0x4e
push eax
lea ecx, [edi + 0x6e8]
call fcn.10036880
mov byte [edi + 0x719], 0
lea eax, [ebp - 0xbb0]
mov dword [edi + 0x768], 0
lea ecx, [edi + 0x750]
mov dword [edi + 0x6c0], 8
mov dword [edi + 0x6c4], 8
mov dword [edi + 0x724], 0
mov dword [edi + 0x728], 0x41200000
mov dword [edi + 0x720], 0
mov dword [edi + 0x734], 0
push eax
mov dword [edi + 0x72c], 0x3f800000
call fcn.1008e130
lea ecx, [ebp - 0x1258]
mov byte [ebp - 4], 0x4f
call fcn.1001d720
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x50
call fcn.1001d720
lea ecx, [ebp - 0xbb0]
mov dword [ebp - 4], 0x51
call fcn.1003c160
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
push eax
lea ecx, [edi + 0x708]
mov dword [ebp - 0xe0], 0x10021920
call fcn.1002e3b0
lea eax, [ebp - 0xe4]
mov dword [ebp - 0xe4], 0x10021930
push eax
lea ecx, [edi + 0x708]
call fcn.1002e3b0
lea eax, [ebp - 0xe8]
mov dword [ebp - 0xe8], 0x10021970
push eax
lea ecx, [edi + 0x708]
call fcn.1002e3b0
lea eax, [edi + 0x6b0]
mov dword [ebp - 0x64], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x64]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x64]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x64]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x64]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x7e8]
mov dword [ebp - 0x7e8], 0xb0
push eax
lea ecx, [ebp - 0xbe0]
add edi, 0x76c
call fcn.1008e160
mov dword [ebp - 4], 0x52
movaps xmm0, xmmword [0x100c1ae0]
pxor xmm0, xmmword [0x100c1b00]
lea eax, [ebp - 0x980]
push eax
lea ecx, [ebp - 0xbc8]
movups xmmword [ebp - 0x980], xmm0
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x1270]
mov byte [ebp - 4], 0x53
call fcn.1001d770
mov esi, dword [ebp - 0x1e4]
lea eax, [ebp - 0xbc8]
push eax
mov byte [ebp - 4], 0x54
lea ecx, [esi + 0x7a4]
call fcn.10036880
mov byte [esi + 0x7d5], 0
lea eax, [ebp - 0xbe0]
mov dword [esi + 0x824], 0
lea ecx, [esi + 0x80c]
mov dword [esi + 0x77c], 8
mov dword [esi + 0x780], 8
mov dword [esi + 0x7e0], 0xc3340000
mov dword [esi + 0x7e4], 0x43340000
mov dword [esi + 0x7dc], 0
mov dword [esi + 0x7f0], 0
push eax
mov dword [esi + 0x7e8], 0x40a00000
call fcn.1008e130
lea ecx, [ebp - 0x1270]
mov byte [ebp - 4], 0x55
call fcn.1001d720
lea ecx, [ebp - 0xbc8]
mov byte [ebp - 4], 0x56
call fcn.1001d720
lea ecx, [ebp - 0xbe0]
mov dword [ebp - 4], 0x57
call fcn.1003c160
lea eax, [ebp - 0xec]
mov dword [ebp - 4], 0xffffffff
push eax
lea ecx, [edi + 0x58]
mov dword [ebp - 0xec], 0x10021920
call fcn.1002e3b0
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xf0], 0x10021930
push eax
lea ecx, [edi + 0x58]
call fcn.1002e3b0
lea eax, [ebp - 0xf4]
mov dword [ebp - 0xf4], 0x10021980
push eax
lea ecx, [edi + 0x58]
call fcn.1002e3b0
mov dword [ebp - 0x68], edi
mov dword [edi + 0x18], 0
mov ecx, dword [ebp - 0x68]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x68]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x68]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x68]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x684]
mov dword [ebp - 0x684], 0x66666f
push eax
lea ecx, [ebp - 0x14e0]
call fcn.1001d770
mov dword [ebp - 4], 0x58
lea eax, [ebp - 0x740]
mov dword [ebp - 0x740], 0x74617473
push eax
lea ecx, [ebp - 0x14c8]
mov word [ebp - 0x73c], 0x6369
mov byte [ebp - 0x73a], 0
call fcn.1001d770
mov byte [ebp - 4], 0x59
xor ecx, ecx
mov dword [ebp - 0x6c8], 0xdbc3d5c3
mov dword [ebp - 0x6c4], 0xcdd0c182
mov dword [ebp - 0x6c0], 0xc3cad1d1
mov word [ebp - 0x6bc], 0xd0cb
mov byte [ebp - 0x6ba], 0xa2
nop word [eax + eax]
xor byte [ebp + ecx - 0x6c8], 0xa2
inc ecx
cmp ecx, 0xf
jb 0x10047360
lea eax, [ebp - 0x6c8]
push eax
lea ecx, [ebp - 0x14b0]
call fcn.1001d770
mov byte [ebp - 4], 0x5a
xor ecx, ecx
mov dword [ebp - 0x6a0], 0xdbc3d5c3
mov dword [ebp - 0x69c], 0xd1cbc682
mov dword [ebp - 0x698], 0xc1ccc3d6
mov word [ebp - 0x694], 0xa2c7
nop dword [eax]
xor byte [ebp + ecx - 0x6a0], 0xa2
inc ecx
cmp ecx, 0xe
jb 0x100473b0
lea eax, [ebp - 0x6a0]
push eax
lea ecx, [ebp - 0x1498]
call fcn.1001d770
lea eax, [ebp - 0x7dc]
mov dword [ebp - 4], 0x5b
push eax
lea ecx, [ebp - 0x1480]
push ecx
lea edx, [ebp - 0x14e0]
push edx
lea ecx, [ebp - 0x87c]
call fcn.1008ddf0
mov byte [ebp - 4], 0x5c
lea eax, [ebp - 0x914]
movaps xmm0, xmmword [0x100c1ae0]
lea ecx, [ebp - 0xc10]
pxor xmm0, xmmword [0x100c1d40]
push eax
movups xmmword [ebp - 0x914], xmm0
mov byte [ebp - 0x904], 0
call fcn.1001d770
mov byte [ebp - 4], 0x5d
xor ecx, ecx
mov dword [ebp - 0x670], 0xc7d1c3c0
mov dword [ebp - 0x66c], 0xc5ccc382
mov word [ebp - 0x668], 0xc7ce
mov byte [ebp - 0x666], 0xa2
xor byte [ebp + ecx - 0x670], 0xa2
inc ecx
cmp ecx, 0xb
jb 0x10047454
lea eax, [ebp - 0x670]
push eax
lea ecx, [ebp - 0xbf8]
call fcn.1001d770
lea eax, [ebp - 0xc10]
mov byte [ebp - 4], 0x5e
push eax
lea ecx, [esi + 0x8e8]
call fcn.10036880
lea eax, [ebp - 0xbf8]
mov byte [esi + 0x919], 1
push eax
lea ecx, [esi + 0x920]
call fcn.10036880
xor eax, eax
mov ecx, 0xf
cmp byte [esi + 0x919], al
cmovne eax, ecx
mov dword [esi + 0x94c], eax
add eax, 0x14
mov dword [esi + 0x8c0], eax
mov dword [esi + 0x8c4], eax
mov eax, dword [ebp - 0x878]
mov edi, dword [ebp - 0x87c]
mov dword [ebp - 0x1e0], eax
cmp edi, eax
je 0x1004750b
lea eax, [esi + 0x938]
mov esi, dword [ebp - 0x1e0]
mov dword [ebp - 0x1e8], eax
push edi
mov ecx, eax
call fcn.1003bf80
mov eax, dword [ebp - 0x1e8]
add edi, 0x18
cmp edi, esi
jne 0x100474f0
mov esi, dword [ebp - 0x1e4]
lea ecx, [esi + 0x938]
call fcn.10022330
test eax, eax
je 0x10047524
mov dword [esi + 0x948], 0
lea ecx, [ebp - 0xbf8]
mov byte [ebp - 4], 0x5f
call fcn.1001d720
lea ecx, [ebp - 0xc10]
mov byte [ebp - 4], 0x60
call fcn.1001d720
lea ecx, [ebp - 0x87c]
mov byte [ebp - 4], 0x61
call fcn.1003c220
push fcn.1001d720
push 4
push 0x18
lea eax, [ebp - 0x14e0]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
lea eax, [ebp - 0xf8]
mov dword [ebp - 0xf8], 0x10021920
lea edi, [esi + 0x8b0]
push eax
lea ecx, [edi + 0x58]
call fcn.1002e3b0
lea eax, [ebp - 0xfc]
mov dword [ebp - 0xfc], 0x10021930
push eax
lea ecx, [edi + 0x58]
call fcn.1002e3b0
mov dword [ebp - 0x70], edi
mov dword [edi + 0x18], 0
mov ecx, dword [ebp - 0x70]
mov edi, dword [ebp - 0x1e4]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x70]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x70]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x784]
mov dword [ebp - 0x784], 0x5f726964
push eax
lea ecx, [ebp - 0xc40]
mov dword [ebp - 0x780], 0x6b636f6c
mov byte [ebp - 0x77c], 0
call fcn.1001d770
push 0x6c
lea ecx, [ebp - 0x53c]
mov dword [ebp - 4], 0x62
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x53c]
mov byte [ebp - 0x53c], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x53c]
mov byte [ebp - 0x53b], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x53c]
mov byte [ebp - 0x53a], al
call fcn.1001eed0
push 0x20
lea ecx, [ebp - 0x53c]
mov byte [ebp - 0x539], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x53c]
mov byte [ebp - 0x538], al
call fcn.1001eed0
mov byte [ebp - 0x537], al
lea ecx, [ebp - 0x53c]
push 0x69
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x53c]
mov byte [ebp - 0x536], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x53c]
mov byte [ebp - 0x535], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x53c]
mov byte [ebp - 0x534], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x53c]
mov byte [ebp - 0x533], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x53c]
mov byte [ebp - 0x532], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x53c]
mov byte [ebp - 0x531], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x53c]
mov byte [ebp - 0x530], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x53c]
mov byte [ebp - 0x52f], al
call fcn.1001eed0
mov byte [ebp - 0x52e], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x53c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x53c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x10047740
lea ecx, [ebp - 0x53c]
call fcn.10018960
push eax
lea ecx, [ebp - 0xc28]
call fcn.1001d770
lea eax, [ebp - 0xc40]
mov byte [ebp - 4], 0x63
push eax
lea ecx, [edi + 0x860]
call fcn.10036880
lea eax, [ebp - 0xc28]
mov byte [edi + 0x891], 1
push eax
lea ecx, [edi + 0x898]
call fcn.10036880
lea ecx, [ebp - 0xc28]
mov byte [edi + 0x894], 0
call fcn.1001d720
lea ecx, [ebp - 0xc40]
mov dword [ebp - 4], 0xffffffff
call fcn.1001d720
lea eax, [ebp - 0x100]
mov dword [ebp - 0x100], 0x10021920
push eax
lea ecx, [edi + 0x880]
call fcn.1002e380
lea eax, [ebp - 0x104]
mov dword [ebp - 0x104], 0x10021930
push eax
lea ecx, [edi + 0x880]
call fcn.1002e380
lea eax, [edi + 0x828]
mov dword [ebp - 0x74], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x74]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x74]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x74]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
lea ecx, [ebp - 0x7dd]
call fcn.10018960
push 0x6f
lea ecx, [ebp - 0x1f8]
mov dword [ebp - 0x1e0], eax
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 0x1f8], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 0x1f7], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 0x1f6], al
call fcn.1001eed0
mov byte [ebp - 0x1f5], al
xor esi, esi
push esi
lea ecx, [ebp - 0x1f8]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x1f8]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 4
jb 0x100478b0
lea ecx, [ebp - 0x1f8]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1840]
call fcn.1001d770
push 0x6c
lea ecx, [ebp - 0x258]
mov dword [ebp - 4], 0x64
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x258]
mov byte [ebp - 0x258], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x258]
mov byte [ebp - 0x257], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x258]
mov byte [ebp - 0x256], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x258]
mov byte [ebp - 0x255], al
call fcn.1001eed0
mov byte [ebp - 0x254], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x258]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x258]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x10047960
lea ecx, [ebp - 0x258]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1828]
call fcn.1001d770
push 0x72
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0x65
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 0x2b0], al
call fcn.1001eed0
push 0x67
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 0x2af], al
call fcn.1001eed0
push 0x68
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 0x2ae], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 0x2ad], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 0x2ac], al
call fcn.1001eed0
mov byte [ebp - 0x2ab], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x2b0]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x2b0]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 6
jb 0x10047a20
lea ecx, [ebp - 0x2b0]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1810]
call fcn.1001d770
push 0x6f
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 4], 0x66
call fcn.1001eed0
push 0x70
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 0x3c8], al
call fcn.1001eed0
push 0x70
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 0x3c7], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 0x3c6], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 0x3c5], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 0x3c4], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 0x3c3], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 0x3c2], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 0x3c1], al
call fcn.1001eed0
mov byte [ebp - 0x3c0], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x3c8]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x3c8]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x10047b20
lea ecx, [ebp - 0x3c8]
call fcn.10018960
push eax
lea ecx, [ebp - 0x17f8]
call fcn.1001d770
push 0x7a
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0x67
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 0x1ec], al
call fcn.1001eed0
mov byte [ebp - 0x1eb], al
xor esi, esi
push esi
lea ecx, [ebp - 0x1ec]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x1ec]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 2
jb 0x10047b93
lea ecx, [ebp - 0x1ec]
call fcn.10018960
push eax
lea ecx, [ebp - 0x17e0]
call fcn.1001d770
lea eax, [ebp - 0x17c8]
mov dword [ebp - 4], 0x68
push eax
lea eax, [ebp - 0x1840]
push eax
lea ecx, [ebp - 0x930]
call fcn.1008ddd0
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x8b8]
push dword [eax + 4]
push dword [eax]
call fcn.1008ddf0
push 0x62
lea ecx, [ebp - 0x54c]
mov byte [ebp - 4], 0x69
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x54c], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x54b], al
call fcn.1001eed0
push 0x79
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x54a], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x549], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x548], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x547], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x546], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x545], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x544], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x543], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x542], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x541], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x540], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x54c]
mov byte [ebp - 0x53f], al
call fcn.1001eed0
mov byte [ebp - 0x53e], al
xor esi, esi
push esi
lea ecx, [ebp - 0x54c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x54c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x10047d33
lea ecx, [ebp - 0x54c]
call fcn.10018960
push eax
lea ecx, [ebp - 0xc70]
call fcn.1001d770
push 0x66
lea ecx, [ebp - 0x44c]
mov byte [ebp - 4], 0x6a
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x44c]
mov byte [ebp - 0x44c], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x44c]
mov byte [ebp - 0x44b], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x44c]
mov byte [ebp - 0x44a], al
call fcn.1001eed0
push 0x20
lea ecx, [ebp - 0x44c]
mov byte [ebp - 0x449], al
call fcn.1001eed0
push 0x62
lea ecx, [ebp - 0x44c]
mov byte [ebp - 0x448], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x44c]
mov byte [ebp - 0x447], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x44c]
mov byte [ebp - 0x446], al
call fcn.1001eed0
push 0x79
lea ecx, [ebp - 0x44c]
mov byte [ebp - 0x445], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x44c]
mov byte [ebp - 0x444], al
call fcn.1001eed0
mov byte [ebp - 0x443], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x44c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x44c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x10047e40
lea ecx, [ebp - 0x44c]
call fcn.10018960
push eax
lea ecx, [ebp - 0xc58]
call fcn.1001d770
lea eax, [ebp - 0xc70]
mov byte [ebp - 4], 0x6b
push eax
lea ecx, [edi + 0x988]
call fcn.10036880
lea eax, [ebp - 0xc58]
mov byte [edi + 0x9b9], 1
push eax
lea ecx, [edi + 0x9c0]
call fcn.10036880
xor ecx, ecx
mov eax, 0xf
cmp byte [edi + 0x9b9], cl
cmovne ecx, eax
mov dword [edi + 0x9ec], ecx
lea eax, [ecx + 0x14]
mov dword [edi + 0x960], eax
lea ecx, [ebp - 0x8b8]
mov dword [edi + 0x964], eax
call fcn.1001d260
lea ecx, [ebp - 0x8b8]
mov esi, eax
call fcn.1001d250
mov dword [ebp - 0x1e8], eax
lea ecx, [edi + 0x9d8]
cmp esi, eax
je 0x10047f24
mov edi, ecx
push esi
mov ecx, edi
call fcn.1003bf50
add esi, 0x18
cmp esi, dword [ebp - 0x1e8]
jne 0x10047f05
mov edi, dword [ebp - 0x1e4]
lea ecx, [edi + 0x9d8]
call fcn.10022330
test eax, eax
je 0x10047f37
mov dword [edi + 0x9e8], 0
lea ecx, [ebp - 0xc58]
call fcn.1001d720
lea ecx, [ebp - 0xc70]
call fcn.1001d720
lea ecx, [ebp - 0x8b8]
call fcn.1003bfc0
push fcn.1001d720
push 5
push 0x18
lea eax, [ebp - 0x1840]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
add edi, 0x950
mov dword [ebp - 0x108], 0x10021920
lea eax, [ebp - 0x108]
push eax
lea ecx, [edi + 0x58]
call fcn.1002e380
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0x10021930
push eax
lea ecx, [edi + 0x58]
call fcn.1002e380
mov dword [ebp - 0x78], edi
mov dword [edi + 0x18], 0
mov ecx, dword [ebp - 0x78]
mov edi, dword [ebp - 0x1e4]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x78]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x78]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x78]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
lea ecx, [ebp - 0x7ce]
call fcn.10018960
push 0x6f
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x1e0], eax
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x21c], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x21b], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x21c]
mov byte [ebp - 0x21a], al
call fcn.1001eed0
mov byte [ebp - 0x219], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x21c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x21c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 4
jb 0x10048050
lea ecx, [ebp - 0x21c]
call fcn.10018960
push eax
lea ecx, [ebp - 0x18b8]
call fcn.1001d770
push 0x64
lea ecx, [ebp - 0x250]
mov dword [ebp - 4], 0x6c
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x250], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x24f], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x24e], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x24d], al
call fcn.1001eed0
mov byte [ebp - 0x24c], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x250]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x250]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x10048100
lea ecx, [ebp - 0x250]
call fcn.10018960
push eax
lea ecx, [ebp - 0x18a0]
call fcn.1001d770
push 0x75
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 0x6d
call fcn.1001eed0
push 0x70
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 0x1f0], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 0x1ef], al
call fcn.1001eed0
mov byte [ebp - 0x1ee], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x1f0]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x1f0]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 3
jb 0x10048190
lea ecx, [ebp - 0x1f0]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1888]
call fcn.1001d770
push 0x72
lea ecx, [ebp - 0x320]
mov byte [ebp - 4], 0x6e
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x320]
mov byte [ebp - 0x320], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x320]
mov byte [ebp - 0x31f], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x320]
mov byte [ebp - 0x31e], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x320]
mov byte [ebp - 0x31d], al
call fcn.1001eed0
push 0x6d
lea ecx, [ebp - 0x320]
mov byte [ebp - 0x31c], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x320]
mov byte [ebp - 0x31b], al
call fcn.1001eed0
mov byte [ebp - 0x31a], al
xor esi, esi
push esi
lea ecx, [ebp - 0x320]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x320]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x10048262
lea ecx, [ebp - 0x320]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1870]
call fcn.1001d770
push 0x69
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0x6f
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 0x2b8], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 0x2b7], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 0x2b6], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 0x2b5], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 0x2b4], al
call fcn.1001eed0
mov byte [ebp - 0x2b3], al
xor esi, esi
push esi
lea ecx, [ebp - 0x2b8]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x2b8]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 6
jb 0x10048321
lea ecx, [ebp - 0x2b8]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1858]
call fcn.1001d770
lea eax, [ebp - 0x1840]
mov dword [ebp - 4], 0x70
push eax
lea eax, [ebp - 0x18b8]
push eax
lea ecx, [ebp - 0x938]
call fcn.1008ddd0
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x8c4]
push dword [eax + 4]
push dword [eax]
call fcn.1008ddf0
push 0x70
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 0x71
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x464]
mov byte [ebp - 0x464], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x464]
mov byte [ebp - 0x463], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x464]
mov byte [ebp - 0x462], al
call fcn.1001eed0
push 0x68
lea ecx, [ebp - 0x464]
mov byte [ebp - 0x461], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x464]
mov byte [ebp - 0x460], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x464]
mov byte [ebp - 0x45f], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x464]
mov byte [ebp - 0x45e], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x464]
mov byte [ebp - 0x45d], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x464]
mov byte [ebp - 0x45c], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x464]
mov byte [ebp - 0x45b], al
call fcn.1001eed0
mov byte [ebp - 0x45a], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x464]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x464]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x10048480
lea ecx, [ebp - 0x464]
call fcn.10018960
push eax
lea ecx, [ebp - 0xca0]
call fcn.1001d770
push 0x70
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0x72
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 0x2c0], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 0x2bf], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 0x2be], al
call fcn.1001eed0
push 0x68
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 0x2bd], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 0x2bc], al
call fcn.1001eed0
mov byte [ebp - 0x2bb], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x2c0]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x2c0]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 6
jb 0x10048540
lea ecx, [ebp - 0x2c0]
call fcn.10018960
push eax
lea ecx, [ebp - 0xc88]
call fcn.1001d770
lea eax, [ebp - 0xca0]
mov byte [ebp - 4], 0x73
push eax
lea ecx, [edi + 0xa28]
call fcn.10036880
lea eax, [ebp - 0xc88]
mov byte [edi + 0xa59], 1
push eax
lea ecx, [edi + 0xa60]
call fcn.10036880
xor ecx, ecx
mov eax, 0xf
cmp byte [edi + 0xa59], cl
cmovne ecx, eax
mov dword [edi + 0xa8c], ecx
lea eax, [ecx + 0x14]
mov dword [edi + 0xa00], eax
lea ecx, [ebp - 0x8c4]
mov dword [edi + 0xa04], eax
call fcn.1001d260
lea ecx, [ebp - 0x8c4]
mov esi, eax
call fcn.1001d250
mov dword [ebp - 0x1e8], eax
lea ecx, [edi + 0xa78]
cmp esi, eax
je 0x10048624
mov edi, ecx
push esi
mov ecx, edi
call fcn.1003bf50
add esi, 0x18
cmp esi, dword [ebp - 0x1e8]
jne 0x10048605
mov edi, dword [ebp - 0x1e4]
lea ecx, [edi + 0xa78]
call fcn.10022330
test eax, eax
je 0x10048637
mov dword [edi + 0xa88], 0
lea ecx, [ebp - 0xc88]
call fcn.1001d720
lea ecx, [ebp - 0xca0]
call fcn.1001d720
lea ecx, [ebp - 0x8c4]
call fcn.1003bfc0
push fcn.1001d720
push 5
push 0x18
lea eax, [ebp - 0x18b8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0x10021990
lea esi, [edi + 0x9f0]
lea ecx, [esi + 0x58]
push eax
call fcn.1002e380
mov dword [ebp - 0x7c], esi
mov dword [esi + 0x18], 0
mov ecx, dword [ebp - 0x7c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x7c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x7c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x7c]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
lea ecx, [ebp - 0x7cd]
call fcn.10018960
push 0x6f
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x1e0], eax
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x220]
mov byte [ebp - 0x220], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x220]
mov byte [ebp - 0x21f], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x220]
mov byte [ebp - 0x21e], al
call fcn.1001eed0
mov byte [ebp - 0x21d], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x220]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x220]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 4
jb 0x10048730
lea ecx, [ebp - 0x220]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1930]
call fcn.1001d770
push 0x64
lea ecx, [ebp - 0x458]
mov dword [ebp - 4], 0x74
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x458]
mov byte [ebp - 0x458], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x458]
mov byte [ebp - 0x457], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x458]
mov byte [ebp - 0x456], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x458]
mov byte [ebp - 0x455], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x458]
mov byte [ebp - 0x454], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x458]
mov byte [ebp - 0x453], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x458]
mov byte [ebp - 0x452], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x458]
mov byte [ebp - 0x451], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x458]
mov byte [ebp - 0x450], al
call fcn.1001eed0
mov byte [ebp - 0x44f], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x458]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x458]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x10048840
lea ecx, [ebp - 0x458]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1918]
call fcn.1001d770
push 0x6a
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x75
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 0x2e8], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 0x2e7], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 0x2e6], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 0x2e5], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 0x2e4], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 0x2e3], al
call fcn.1001eed0
mov byte [ebp - 0x2e2], al
xor esi, esi
push esi
lea ecx, [ebp - 0x2e8]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x2e8]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x10048912
lea ecx, [ebp - 0x2e8]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1900]
call fcn.1001d770
push 0x72
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 0x76
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x348]
mov byte [ebp - 0x348], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x348]
mov byte [ebp - 0x347], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x348]
mov byte [ebp - 0x346], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x348]
mov byte [ebp - 0x345], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x348]
mov byte [ebp - 0x344], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x348]
mov byte [ebp - 0x343], al
call fcn.1001eed0
mov byte [ebp - 0x342], al
xor esi, esi
push esi
lea ecx, [ebp - 0x348]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x348]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x100489e4
lea ecx, [ebp - 0x348]
call fcn.10018960
push eax
lea ecx, [ebp - 0x18e8]
call fcn.1001d770
push 0x72
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x77
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x340]
mov byte [ebp - 0x340], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x340]
mov byte [ebp - 0x33f], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x340]
mov byte [ebp - 0x33e], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x340]
mov byte [ebp - 0x33d], al
call fcn.1001eed0
push 0x6d
lea ecx, [ebp - 0x340]
mov byte [ebp - 0x33c], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x340]
mov byte [ebp - 0x33b], al
call fcn.1001eed0
mov byte [ebp - 0x33a], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x340]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x340]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x10048ac0
lea ecx, [ebp - 0x340]
call fcn.10018960
push eax
lea ecx, [ebp - 0x18d0]
call fcn.1001d770
lea eax, [ebp - 0x18b8]
mov dword [ebp - 4], 0x78
push eax
lea eax, [ebp - 0x1930]
push eax
lea ecx, [ebp - 0x940]
call fcn.1008ddd0
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x8d0]
push dword [eax + 4]
push dword [eax]
call fcn.1008ddf0
push 0x79
lea ecx, [ebp - 0x3d4]
mov byte [ebp - 4], 0x79
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x3d4]
mov byte [ebp - 0x3d4], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x3d4]
mov byte [ebp - 0x3d3], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x3d4]
mov byte [ebp - 0x3d2], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x3d4]
mov byte [ebp - 0x3d1], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x3d4]
mov byte [ebp - 0x3d0], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x3d4]
mov byte [ebp - 0x3cf], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x3d4]
mov byte [ebp - 0x3ce], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x3d4]
mov byte [ebp - 0x3cd], al
call fcn.1001eed0
mov byte [ebp - 0x3cc], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x3d4]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x3d4]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x10048bf0
lea ecx, [ebp - 0x3d4]
call fcn.10018960
push eax
lea ecx, [ebp - 0xcd0]
call fcn.1001d770
push 0x79
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x7a
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x218], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x217], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x216], al
call fcn.1001eed0
mov byte [ebp - 0x215], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x218]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x218]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 4
jb 0x10048c90
lea ecx, [ebp - 0x218]
call fcn.10018960
push eax
lea ecx, [ebp - 0xcb8]
call fcn.1001d770
lea eax, [ebp - 0xcd0]
mov byte [ebp - 4], 0x7b
push eax
lea ecx, [edi + 0xac8]
call fcn.10036880
lea eax, [ebp - 0xcb8]
mov byte [edi + 0xaf9], 1
push eax
lea ecx, [edi + 0xb00]
call fcn.10036880
xor ecx, ecx
mov eax, 0xf
cmp byte [edi + 0xaf9], cl
cmovne ecx, eax
mov dword [edi + 0xb2c], ecx
lea eax, [ecx + 0x14]
mov dword [edi + 0xaa0], eax
lea ecx, [ebp - 0x8d0]
mov dword [edi + 0xaa4], eax
call fcn.1001d260
lea ecx, [ebp - 0x8d0]
mov esi, eax
call fcn.1001d250
mov dword [ebp - 0x1e8], eax
lea ecx, [edi + 0xb18]
cmp esi, eax
je 0x10048d7f
mov dword [ebp - 0x1e0], ecx
mov edi, ecx
nop dword [eax + eax]
push esi
mov ecx, edi
call fcn.1003bf50
add esi, 0x18
cmp esi, dword [ebp - 0x1e8]
jne 0x10048d60
mov edi, dword [ebp - 0x1e4]
lea ecx, [edi + 0xb18]
call fcn.10022330
test eax, eax
je 0x10048d92
mov dword [edi + 0xb28], 0
lea ecx, [ebp - 0xcb8]
call fcn.1001d720
lea ecx, [ebp - 0xcd0]
call fcn.1001d720
lea ecx, [ebp - 0x8d0]
call fcn.1003bfc0
push fcn.1001d720
push 5
push 0x18
lea eax, [ebp - 0x1930]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
lea eax, [ebp - 0x114]
mov dword [ebp - 0x114], 0x10021990
lea esi, [edi + 0xa90]
lea ecx, [esi + 0x58]
push eax
call fcn.1002e380
mov dword [ebp - 0x80], esi
mov dword [esi + 0x18], 0
mov ecx, dword [ebp - 0x80]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x80]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x80]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x80]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
push 0xb0
lea ecx, [ebp - 0x644]
call fcn.1008ed30
push 0
lea ecx, [ebp - 0x644]
mov word [ebp - 0x644], ax
call fcn.1008ed30
mov word [ebp - 0x642], ax
xor edi, edi
push edi
lea ecx, [ebp - 0x644]
call fcn.1008ddc0
push edi
lea ecx, [ebp - 0x644]
movzx eax, word [eax]
xor eax, 0xa2
movzx esi, ax
call fcn.1008ddc0
inc edi
mov word [eax], si
cmp edi, 2
jb 0x10048e54
lea ecx, [ebp - 0x644]
call fcn.10018960
push eax
lea ecx, [ebp - 0xd00]
call fcn.1008e160
push 0x6a
lea ecx, [ebp - 0x62c]
mov dword [ebp - 4], 0x7c
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x62c], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x62b], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x62a], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x629], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x628], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x627], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x626], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x625], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x624], al
call fcn.1001eed0
push 0x67
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x623], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x622], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x621], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x620], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x61f], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x61e], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x61d], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x62c]
mov byte [ebp - 0x61c], al
call fcn.1001eed0
mov edi, dword [ebp - 0x1e4]
xor esi, esi
mov byte [ebp - 0x61b], al
nop dword [eax]
push esi
lea ecx, [ebp - 0x62c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x62c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0x12
jb 0x10049000
lea ecx, [ebp - 0x62c]
call fcn.10018960
push eax
lea ecx, [ebp - 0xce8]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x1288]
mov byte [ebp - 4], 0x7d
call fcn.1001d770
lea eax, [ebp - 0xce8]
mov byte [ebp - 4], 0x7e
push eax
lea ecx, [edi + 0xb68]
call fcn.10036880
mov byte [edi + 0xb99], 0
lea eax, [ebp - 0xd00]
mov dword [edi + 0xbe8], 0
lea ecx, [edi + 0xbd0]
mov dword [edi + 0xb40], 8
mov dword [edi + 0xb44], 8
mov dword [edi + 0xba4], 0x3f800000
mov dword [edi + 0xba8], 0x43340000
mov dword [edi + 0xba0], 0x42340000
mov dword [edi + 0xbb4], 0
push eax
mov dword [edi + 0xbac], 0x40a00000
call fcn.1008e130
lea ecx, [ebp - 0x1288]
call fcn.1001d720
lea ecx, [ebp - 0xce8]
call fcn.1001d720
lea ecx, [ebp - 0xd00]
mov dword [ebp - 4], 0xffffffff
call fcn.1003c160
lea eax, [ebp - 0x118]
mov dword [ebp - 0x118], 0x10021990
push eax
lea ecx, [edi + 0xb88]
call fcn.1002e380
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x11c], 0x100219b0
push eax
lea ecx, [edi + 0xb88]
call fcn.1002e380
lea eax, [edi + 0xb30]
mov dword [ebp - 0x84], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x84]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x84]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x84]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x84]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
push 0xb0
lea ecx, [ebp - 0x64c]
call fcn.1008ed30
push 0
lea ecx, [ebp - 0x64c]
mov word [ebp - 0x64c], ax
call fcn.1008ed30
mov word [ebp - 0x64a], ax
xor edi, edi
nop word [eax + eax]
push edi
lea ecx, [ebp - 0x64c]
call fcn.1008ddc0
push edi
lea ecx, [ebp - 0x64c]
movzx eax, word [eax]
xor eax, 0xa2
movzx esi, ax
call fcn.1008ddc0
inc edi
mov word [eax], si
cmp edi, 2
jb 0x100491c0
lea ecx, [ebp - 0x64c]
call fcn.10018960
push eax
lea ecx, [ebp - 0xd30]
call fcn.1008e160
push 0x72
lea ecx, [ebp - 0x55c]
mov dword [ebp - 4], 0x7f
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x55c], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x55b], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x55a], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x559], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x558], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x557], al
call fcn.1001eed0
push 0x67
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x556], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x555], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x554], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x553], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x552], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x551], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x550], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x54f], al
call fcn.1001eed0
mov edi, dword [ebp - 0x1e4]
xor esi, esi
mov byte [ebp - 0x54e], al
nop
push esi
lea ecx, [ebp - 0x55c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x55c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x10049330
lea ecx, [ebp - 0x55c]
call fcn.10018960
push eax
lea ecx, [ebp - 0xd18]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x12a0]
mov byte [ebp - 4], 0x80
call fcn.1001d770
lea eax, [ebp - 0xd18]
mov byte [ebp - 4], 0x81
push eax
lea ecx, [edi + 0xc24]
call fcn.10036880
mov byte [edi + 0xc55], 0
lea eax, [ebp - 0xd30]
mov dword [edi + 0xca4], 0
lea ecx, [edi + 0xc8c]
mov dword [edi + 0xbfc], 8
mov dword [edi + 0xc00], 8
mov dword [edi + 0xc60], 0
mov dword [edi + 0xc64], 0x43b40000
mov dword [edi + 0xc5c], 0x43b40000
mov dword [edi + 0xc70], 0
push eax
mov dword [edi + 0xc68], 0x40a00000
call fcn.1008e130
lea ecx, [ebp - 0x12a0]
call fcn.1001d720
lea ecx, [ebp - 0xd18]
call fcn.1001d720
lea ecx, [ebp - 0xd30]
mov dword [ebp - 4], 0xffffffff
call fcn.1003c160
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], 0x10021990
push eax
lea ecx, [edi + 0xc44]
call fcn.1002e380
lea eax, [ebp - 0x124]
mov dword [ebp - 0x124], 0x100219c0
push eax
lea ecx, [edi + 0xc44]
call fcn.1002e380
lea eax, [edi + 0xbec]
mov dword [ebp - 0x88], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x88]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x88]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x88]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x88]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
push 0x25
lea ecx, [ebp - 0x650]
call fcn.1008ed30
push 0
lea ecx, [ebp - 0x650]
mov word [ebp - 0x650], ax
call fcn.1008ed30
mov word [ebp - 0x64e], ax
xor edi, edi
push edi
lea ecx, [ebp - 0x650]
call fcn.1008ddc0
push edi
lea ecx, [ebp - 0x650]
movzx eax, word [eax]
xor eax, 0xa2
movzx esi, ax
call fcn.1008ddc0
inc edi
mov word [eax], si
cmp edi, 2
jb 0x100494e2
lea ecx, [ebp - 0x650]
call fcn.10018960
push eax
lea ecx, [ebp - 0xd60]
call fcn.1008e160
push 0x72
lea ecx, [ebp - 0x56c]
mov dword [ebp - 4], 0x82
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x56c], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x56b], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x56a], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x569], al
call fcn.1001eed0
push 0x70
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x568], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x567], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x566], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x565], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x564], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x563], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x562], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x561], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x560], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x56c]
mov byte [ebp - 0x55f], al
call fcn.1001eed0
mov edi, dword [ebp - 0x1e4]
xor esi, esi
mov byte [ebp - 0x55e], al
push esi
lea ecx, [ebp - 0x56c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x56c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x10049651
lea ecx, [ebp - 0x56c]
call fcn.10018960
push eax
lea ecx, [ebp - 0xd48]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x12b8]
mov byte [ebp - 4], 0x83
call fcn.1001d770
lea eax, [ebp - 0xd48]
mov byte [ebp - 4], 0x84
push eax
lea ecx, [edi + 0xce0]
call fcn.10036880
mov byte [edi + 0xd11], 0
lea eax, [ebp - 0xd60]
mov dword [edi + 0xd60], 0
lea ecx, [edi + 0xd48]
mov dword [edi + 0xcb8], 8
mov dword [edi + 0xcbc], 8
mov dword [edi + 0xd1c], 0x3f800000
mov dword [edi + 0xd20], 0x42c80000
mov dword [edi + 0xd18], 0x41200000
mov dword [edi + 0xd2c], 0
push eax
mov dword [edi + 0xd24], 0x3f800000
call fcn.1008e130
lea ecx, [ebp - 0x12b8]
call fcn.1001d720
lea ecx, [ebp - 0xd48]
call fcn.1001d720
lea ecx, [ebp - 0xd60]
mov dword [ebp - 4], 0xffffffff
call fcn.1003c160
lea eax, [ebp - 0x128]
mov dword [ebp - 0x128], 0x10021990
push eax
lea ecx, [edi + 0xd00]
call fcn.1002e380
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0x100219c0
push eax
lea ecx, [edi + 0xd00]
call fcn.1002e380
lea eax, [edi + 0xca8]
mov dword [ebp - 0x8c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x8c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x8c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x8c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x8c]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
push 0x100c1384
lea ecx, [ebp - 0xd90]
call fcn.1008e160
push 0x72
lea ecx, [ebp - 0x5f0]
mov dword [ebp - 4], 0x85
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5f0], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5ef], al
call fcn.1001eed0
mov byte [ebp - 0x5ee], al
lea ecx, [ebp - 0x5f0]
push 0x64
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5ed], al
call fcn.1001eed0
push 0x75
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5ec], al
call fcn.1001eed0
push 0x70
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5eb], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5ea], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5e9], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5e8], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5e7], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5e6], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5e5], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5e4], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5e3], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5e2], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 0x5e1], al
call fcn.1001eed0
mov byte [ebp - 0x5e0], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x5f0]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x5f0]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0x11
jb 0x10049940
lea ecx, [ebp - 0x5f0]
call fcn.10018960
push eax
lea ecx, [ebp - 0xd78]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x12d0]
mov byte [ebp - 4], 0x86
call fcn.1001d770
lea eax, [ebp - 0xd78]
mov byte [ebp - 4], 0x87
push eax
lea ecx, [edi + 0xd9c]
call fcn.10036880
mov byte [edi + 0xdcd], 0
lea eax, [ebp - 0xd90]
mov dword [edi + 0xe1c], 0
lea ecx, [edi + 0xe04]
mov dword [edi + 0xd74], 8
mov dword [edi + 0xd78], 8
mov dword [edi + 0xdd8], 0
mov dword [edi + 0xddc], 0x3f800000
mov dword [edi + 0xdd4], 0
mov dword [edi + 0xde8], 1
push eax
mov dword [edi + 0xde0], 0x3dcccccd
call fcn.1008e130
lea ecx, [ebp - 0x12d0]
call fcn.1001d720
lea ecx, [ebp - 0xd78]
call fcn.1001d720
lea ecx, [ebp - 0xd90]
mov dword [ebp - 4], 0xffffffff
call fcn.1003c160
lea eax, [ebp - 0x130]
mov dword [ebp - 0x130], 0x10021990
push eax
lea ecx, [edi + 0xdbc]
call fcn.1002e380
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0x100219d0
push eax
lea ecx, [edi + 0xdbc]
call fcn.1002e380
lea eax, [edi + 0xd64]
mov dword [ebp - 0xac], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0xac]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xac]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0xac]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0xac]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
lea ecx, [ebp - 0x7de]
call fcn.10018960
push 0x61
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x1e0], eax
call fcn.1001eed0
push 0x75
lea ecx, [ebp - 0x260]
mov byte [ebp - 0x260], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x260]
mov byte [ebp - 0x25f], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x260]
mov byte [ebp - 0x25e], al
call fcn.1001eed0
mov byte [ebp - 0x25d], al
push 0
lea ecx, [ebp - 0x260]
call fcn.1001eed0
mov byte [ebp - 0x25c], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x260]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x260]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x10049b40
lea ecx, [ebp - 0x260]
call fcn.10018960
push eax
lea ecx, [ebp - 0x19a8]
call fcn.1001d770
push 0x62
lea ecx, [ebp - 0x434]
mov dword [ebp - 4], 0x88
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x434]
mov byte [ebp - 0x434], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x434]
mov byte [ebp - 0x433], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x434]
mov byte [ebp - 0x432], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x434]
mov byte [ebp - 0x431], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x434]
mov byte [ebp - 0x430], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x434]
mov byte [ebp - 0x42f], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x434]
mov byte [ebp - 0x42e], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x434]
mov byte [ebp - 0x42d], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x434]
mov byte [ebp - 0x42c], al
call fcn.1001eed0
mov byte [ebp - 0x42b], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x434]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x434]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x10049c50
lea ecx, [ebp - 0x434]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1990]
call fcn.1001d770
push 0x6c
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x89
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x248]
mov byte [ebp - 0x248], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x248]
mov byte [ebp - 0x247], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x248]
mov byte [ebp - 0x246], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x248]
mov byte [ebp - 0x245], al
call fcn.1001eed0
mov byte [ebp - 0x244], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x248]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x248]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x10049d00
lea ecx, [ebp - 0x248]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1978]
call fcn.1001d770
push 0x72
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x8a
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x278]
mov byte [ebp - 0x278], al
call fcn.1001eed0
push 0x67
lea ecx, [ebp - 0x278]
mov byte [ebp - 0x277], al
call fcn.1001eed0
push 0x68
lea ecx, [ebp - 0x278]
mov byte [ebp - 0x276], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x278]
mov byte [ebp - 0x275], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x278]
mov byte [ebp - 0x274], al
call fcn.1001eed0
mov byte [ebp - 0x273], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x278]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x278]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 6
jb 0x10049dc0
lea ecx, [ebp - 0x278]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1960]
call fcn.1001d770
push 0x63
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 0x8b
call fcn.1001eed0
push 0x75
lea ecx, [ebp - 0x338]
mov byte [ebp - 0x338], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x338]
mov byte [ebp - 0x337], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x338]
mov byte [ebp - 0x336], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x338]
mov byte [ebp - 0x335], al
call fcn.1001eed0
push 0x6d
lea ecx, [ebp - 0x338]
mov byte [ebp - 0x334], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x338]
mov byte [ebp - 0x333], al
call fcn.1001eed0
mov byte [ebp - 0x332], al
xor esi, esi
push esi
lea ecx, [ebp - 0x338]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x338]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x10049e92
lea ecx, [ebp - 0x338]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1948]
call fcn.1001d770
lea eax, [ebp - 0x1930]
mov dword [ebp - 4], 0x8c
push eax
lea eax, [ebp - 0x19a8]
push eax
lea ecx, [ebp - 0x948]
call fcn.1008ddd0
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x8dc]
push dword [eax + 4]
push dword [eax]
call fcn.1008ddf0
push 0x64
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 4], 0x8d
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 0x3e0], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 0x3df], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 0x3de], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 0x3dd], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 0x3dc], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 0x3db], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 0x3da], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 0x3d9], al
call fcn.1001eed0
mov byte [ebp - 0x3d8], al
xor esi, esi
push esi
lea ecx, [ebp - 0x3e0]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x3e0]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x10049fc0
lea ecx, [ebp - 0x3e0]
call fcn.10018960
push eax
lea ecx, [ebp - 0xdc0]
call fcn.1001d770
push 0x64
lea ecx, [ebp - 0x428]
mov byte [ebp - 4], 0x8e
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x428]
mov byte [ebp - 0x428], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x428]
mov byte [ebp - 0x427], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x428]
mov byte [ebp - 0x426], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x428]
mov byte [ebp - 0x425], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x428]
mov byte [ebp - 0x424], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x428]
mov byte [ebp - 0x423], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x428]
mov byte [ebp - 0x422], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x428]
mov byte [ebp - 0x421], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x428]
mov byte [ebp - 0x420], al
call fcn.1001eed0
mov byte [ebp - 0x41f], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x428]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x428]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x1004a0d0
lea ecx, [ebp - 0x428]
call fcn.10018960
push eax
lea ecx, [ebp - 0xda8]
call fcn.1001d770
lea eax, [ebp - 0xdc0]
mov byte [ebp - 4], 0x8f
push eax
lea ecx, [edi + 0xe58]
call fcn.10036880
lea eax, [ebp - 0xda8]
mov byte [edi + 0xe89], 1
push eax
lea ecx, [edi + 0xe90]
call fcn.10036880
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0xe89], al
cmovne eax, ecx
lea ecx, [ebp - 0x8dc]
mov dword [edi + 0xebc], eax
add eax, 0x14
mov dword [edi + 0xe30], eax
mov dword [edi + 0xe34], eax
call fcn.1001d260
lea ecx, [ebp - 0x8dc]
mov esi, eax
call fcn.1001d250
mov dword [ebp - 0x1e0], eax
cmp esi, eax
je 0x1004a1bb
lea eax, [edi + 0xea8]
mov edi, dword [ebp - 0x1e0]
mov dword [ebp - 0x1e8], eax
nop
push esi
mov ecx, eax
call fcn.1003bf50
mov eax, dword [ebp - 0x1e8]
add esi, 0x18
cmp esi, edi
jne 0x1004a1a0
mov edi, dword [ebp - 0x1e4]
lea ecx, [edi + 0xea8]
call fcn.10022330
test eax, eax
je 0x1004a1d4
mov dword [edi + 0xeb8], 0
lea ecx, [ebp - 0xda8]
call fcn.1001d720
lea ecx, [ebp - 0xdc0]
call fcn.1001d720
lea ecx, [ebp - 0x8dc]
call fcn.1003bfc0
push fcn.1001d720
push 5
push 0x18
lea eax, [ebp - 0x19a8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
add edi, 0xe20
mov dword [ebp - 0x138], 0x10021990
lea eax, [ebp - 0x138]
push eax
lea ecx, [edi + 0x58]
call fcn.1002e380
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x13c], 0x100219a0
push eax
lea ecx, [edi + 0x58]
call fcn.1002e380
mov dword [ebp - 0x94], edi
mov dword [edi + 0x18], 0
mov ecx, dword [ebp - 0x94]
mov edi, dword [ebp - 0x1e4]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x94]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x94]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x94]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
push 0x73
lea ecx, [ebp - 0x654]
call fcn.1008ed30
push 0
lea ecx, [ebp - 0x654]
mov word [ebp - 0x654], ax
call fcn.1008ed30
mov word [ebp - 0x652], ax
xor edi, edi
push edi
lea ecx, [ebp - 0x654]
call fcn.1008ddc0
push edi
lea ecx, [ebp - 0x654]
movzx eax, word [eax]
xor eax, 0xa2
movzx esi, ax
call fcn.1008ddc0
inc edi
mov word [eax], si
cmp edi, 2
jb 0x1004a2c1
lea ecx, [ebp - 0x654]
call fcn.10018960
push eax
lea ecx, [ebp - 0xdf0]
call fcn.1008e160
push 0x64
lea ecx, [ebp - 0x4dc]
mov dword [ebp - 4], 0x90
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x4dc], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x4db], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x4da], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x4d9], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x4d8], al
call fcn.1001eed0
push 0x6d
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x4d7], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x4d6], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x4d5], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x4d4], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x4d3], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x4d2], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x4d1], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x4d0], al
call fcn.1001eed0
mov edi, dword [ebp - 0x1e4]
xor esi, esi
mov byte [ebp - 0x4cf], al
nop dword [eax]
push esi
lea ecx, [ebp - 0x4dc]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x4dc]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x1004a420
lea ecx, [ebp - 0x4dc]
call fcn.10018960
push eax
lea ecx, [ebp - 0xdd8]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x12e8]
mov byte [ebp - 4], 0x91
call fcn.1001d770
lea eax, [ebp - 0xdd8]
mov byte [ebp - 4], 0x92
push eax
lea ecx, [edi + 0xef8]
call fcn.10036880
mov byte [edi + 0xf29], 0
lea eax, [ebp - 0xdf0]
mov dword [edi + 0xf78], 0
lea ecx, [edi + 0xf60]
mov dword [edi + 0xed0], 8
mov dword [edi + 0xed4], 8
mov dword [edi + 0xf34], 0
mov dword [edi + 0xf38], 0x41200000
mov dword [edi + 0xf30], 0
mov dword [edi + 0xf44], 0
push eax
mov dword [edi + 0xf3c], 0x3f800000
call fcn.1008e130
lea ecx, [ebp - 0x12e8]
call fcn.1001d720
lea ecx, [ebp - 0xdd8]
call fcn.1001d720
lea ecx, [ebp - 0xdf0]
mov dword [ebp - 4], 0xffffffff
call fcn.1003c160
lea eax, [ebp - 0x140]
mov dword [ebp - 0x140], 0x10021990
push eax
lea ecx, [edi + 0xf18]
call fcn.1002e380
lea eax, [ebp - 0x144]
mov dword [ebp - 0x144], 0x100219a0
push eax
lea ecx, [edi + 0xf18]
call fcn.1002e380
lea eax, [ebp - 0x148]
mov dword [ebp - 0x148], 0x100219e0
push eax
lea ecx, [edi + 0xf18]
call fcn.1002e380
lea eax, [edi + 0xec0]
mov dword [ebp - 0x98], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x98]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x98]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x98]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x98]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
push 0xb0
lea ecx, [ebp - 0x658]
call fcn.1008ed30
push 0
lea ecx, [ebp - 0x658]
mov word [ebp - 0x658], ax
call fcn.1008ed30
mov word [ebp - 0x656], ax
xor edi, edi
push edi
lea ecx, [ebp - 0x658]
call fcn.1008ddc0
push edi
lea ecx, [ebp - 0x658]
movzx eax, word [eax]
xor eax, 0xa2
movzx esi, ax
call fcn.1008ddc0
inc edi
mov word [eax], si
cmp edi, 2
jb 0x1004a5f1
lea ecx, [ebp - 0x658]
call fcn.10018960
push eax
lea ecx, [ebp - 0xe20]
call fcn.1008e160
push 0x64
lea ecx, [ebp - 0x5bc]
mov dword [ebp - 4], 0x93
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5bc], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5bb], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5ba], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5b9], al
call fcn.1001eed0
push 0x75
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5b8], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5b7], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5b6], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5b5], al
call fcn.1001eed0
push 0x6d
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5b4], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5b3], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5b2], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5b1], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5b0], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5af], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 0x5ae], al
call fcn.1001eed0
mov edi, dword [ebp - 0x1e4]
xor esi, esi
mov byte [ebp - 0x5ad], al
push esi
lea ecx, [ebp - 0x5bc]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x5bc]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x1004a773
lea ecx, [ebp - 0x5bc]
call fcn.10018960
push eax
lea ecx, [ebp - 0xe08]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x1300]
mov byte [ebp - 4], 0x94
call fcn.1001d770
lea eax, [ebp - 0xe08]
mov byte [ebp - 4], 0x95
push eax
lea ecx, [edi + 0xfb4]
call fcn.10036880
mov byte [edi + 0xfe5], 0
lea eax, [ebp - 0xe20]
mov dword [edi + 0x1034], 0
lea ecx, [edi + 0x101c]
mov dword [edi + 0xf8c], 8
mov dword [edi + 0xf90], 8
mov dword [edi + 0xff0], 0xc3340000
mov dword [edi + 0xff4], 0x43340000
mov dword [edi + 0xfec], 0
mov dword [edi + 0x1000], 0
push eax
mov dword [edi + 0xff8], 0x40a00000
call fcn.1008e130
lea ecx, [ebp - 0x1300]
call fcn.1001d720
lea ecx, [ebp - 0xe08]
call fcn.1001d720
lea ecx, [ebp - 0xe20]
mov dword [ebp - 4], 0xffffffff
call fcn.1003c160
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0x10021990
push eax
lea ecx, [edi + 0xfd4]
call fcn.1002e380
lea eax, [ebp - 0x150]
mov dword [ebp - 0x150], 0x100219a0
push eax
lea ecx, [edi + 0xfd4]
call fcn.1002e380
lea eax, [ebp - 0x154]
mov dword [ebp - 0x154], 0x100219f0
push eax
lea ecx, [edi + 0xfd4]
call fcn.1002e380
lea eax, [edi + 0xf7c]
mov dword [ebp - 0x9c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x9c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x9c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x9c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x9c]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
lea ecx, [ebp - 0x7db]
call fcn.10018960
push 0x6f
lea ecx, [ebp - 0x224]
mov dword [ebp - 0x1e0], eax
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x224]
mov byte [ebp - 0x224], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x224]
mov byte [ebp - 0x223], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x224]
mov byte [ebp - 0x222], al
call fcn.1001eed0
mov byte [ebp - 0x221], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x224]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x224]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 4
jb 0x1004a980
lea ecx, [ebp - 0x224]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1540]
call fcn.1001d770
push 0x73
lea ecx, [ebp - 0x330]
mov dword [ebp - 4], 0x96
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x330]
mov byte [ebp - 0x330], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x330]
mov byte [ebp - 0x32f], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x330]
mov byte [ebp - 0x32e], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x330]
mov byte [ebp - 0x32d], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x330]
mov byte [ebp - 0x32c], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x330]
mov byte [ebp - 0x32b], al
call fcn.1001eed0
mov byte [ebp - 0x32a], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x330]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x330]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x1004aa60
lea ecx, [ebp - 0x330]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1528]
call fcn.1001d770
push 0x61
lea ecx, [ebp - 0x57c]
mov byte [ebp - 4], 0x97
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x57c], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x57b], al
call fcn.1001eed0
push 0x79
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x57a], al
call fcn.1001eed0
push 0x20
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x579], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x578], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x577], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x576], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x575], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x574], al
call fcn.1001eed0
push 0x68
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x573], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x572], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x571], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x570], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x57c]
mov byte [ebp - 0x56f], al
call fcn.1001eed0
mov byte [ebp - 0x56e], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x57c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x57c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x1004abd0
lea ecx, [ebp - 0x57c]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1510]
call fcn.1001d770
push 0x61
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x98
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 0x4ec], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 0x4eb], al
call fcn.1001eed0
push 0x79
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 0x4ea], al
call fcn.1001eed0
push 0x20
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 0x4e9], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 0x4e8], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 0x4e7], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 0x4e6], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 0x4e5], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 0x4e4], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 0x4e3], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 0x4e2], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 0x4e1], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 0x4e0], al
call fcn.1001eed0
mov byte [ebp - 0x4df], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x4ec]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x4ec]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x1004ad30
lea ecx, [ebp - 0x4ec]
call fcn.10018960
push eax
lea ecx, [ebp - 0x14f8]
call fcn.1001d770
lea eax, [ebp - 0x14e0]
mov dword [ebp - 4], 0x99
push eax
lea eax, [ebp - 0x1540]
push eax
lea ecx, [ebp - 0x950]
call fcn.1008ddd0
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x800]
push dword [eax + 4]
push dword [eax]
call fcn.1008ddf0
push 0x62
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 4], 0x9a
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5cc], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5cb], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5ca], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5c9], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5c8], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5c7], al
call fcn.1001eed0
push 0x67
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5c6], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5c5], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5c4], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5c3], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5c2], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5c1], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5c0], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 0x5bf], al
call fcn.1001eed0
mov byte [ebp - 0x5be], al
push 0
lea ecx, [ebp - 0x5cc]
call fcn.1001eed0
mov byte [ebp - 0x5bd], al
xor esi, esi
push esi
lea ecx, [ebp - 0x5cc]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x5cc]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x1004aee3
lea ecx, [ebp - 0x5cc]
call fcn.10018960
push eax
lea ecx, [ebp - 0xe50]
call fcn.1001d770
push 0x62
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x9b
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x470]
mov byte [ebp - 0x470], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x470]
mov byte [ebp - 0x46f], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x470]
mov byte [ebp - 0x46e], al
call fcn.1001eed0
push 0x20
lea ecx, [ebp - 0x470]
mov byte [ebp - 0x46d], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x470]
mov byte [ebp - 0x46c], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x470]
mov byte [ebp - 0x46b], al
call fcn.1001eed0
push 0x67
lea ecx, [ebp - 0x470]
mov byte [ebp - 0x46a], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x470]
mov byte [ebp - 0x469], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x470]
mov byte [ebp - 0x468], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x470]
mov byte [ebp - 0x467], al
call fcn.1001eed0
mov byte [ebp - 0x466], al
xor esi, esi
push esi
lea ecx, [ebp - 0x470]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x470]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x1004b001
lea ecx, [ebp - 0x470]
call fcn.10018960
push eax
lea ecx, [ebp - 0xe38]
call fcn.1001d770
lea eax, [ebp - 0xe50]
mov byte [ebp - 4], 0x9c
push eax
lea ecx, [edi + 0x1070]
call fcn.10036880
lea eax, [ebp - 0xe38]
mov byte [edi + 0x10a1], 1
push eax
lea ecx, [edi + 0x10a8]
call fcn.10036880
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x10a1], al
cmovne eax, ecx
lea ecx, [ebp - 0x800]
mov dword [edi + 0x10d4], eax
add eax, 0x14
mov dword [edi + 0x1048], eax
mov dword [edi + 0x104c], eax
call fcn.1001d260
lea ecx, [ebp - 0x800]
mov esi, eax
call fcn.1001d250
mov dword [ebp - 0x1e0], eax
cmp esi, eax
je 0x1004b0eb
lea eax, [edi + 0x10c0]
mov edi, dword [ebp - 0x1e0]
mov dword [ebp - 0x1e8], eax
push esi
mov ecx, eax
call fcn.1003bf50
mov eax, dword [ebp - 0x1e8]
add esi, 0x18
cmp esi, edi
jne 0x1004b0d0
mov edi, dword [ebp - 0x1e4]
lea ecx, [edi + 0x10c0]
call fcn.10022330
test eax, eax
je 0x1004b104
mov dword [edi + 0x10d0], 0
lea ecx, [ebp - 0xe38]
call fcn.1001d720
lea ecx, [ebp - 0xe50]
call fcn.1001d720
lea ecx, [ebp - 0x800]
call fcn.1003bfc0
push fcn.1001d720
push 4
push 0x18
lea eax, [ebp - 0x1540]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
add edi, 0x1038
mov dword [ebp - 0x158], 0x10021990
lea eax, [ebp - 0x158]
push eax
lea ecx, [edi + 0x58]
call fcn.1002e380
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x15c], 0x100219a0
push eax
lea ecx, [edi + 0x58]
call fcn.1002e380
mov dword [ebp - 0xa0], edi
mov dword [edi + 0x18], 0
mov ecx, dword [ebp - 0xa0]
mov edi, dword [ebp - 0x1e4]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xa0]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0xa0]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0xa0]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
lea ecx, [ebp - 0x7da]
call fcn.10018960
push 0x6f
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x1e0], eax
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x228]
mov byte [ebp - 0x228], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x228]
mov byte [ebp - 0x227], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x228]
mov byte [ebp - 0x226], al
call fcn.1001eed0
mov byte [ebp - 0x225], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x228]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x228]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 4
jb 0x1004b230
lea ecx, [ebp - 0x228]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1a20]
call fcn.1001d770
push 0x64
lea ecx, [ebp - 0x240]
mov dword [ebp - 4], 0x9d
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x240]
mov byte [ebp - 0x240], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x240]
mov byte [ebp - 0x23f], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x240]
mov byte [ebp - 0x23e], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x240]
mov byte [ebp - 0x23d], al
call fcn.1001eed0
mov byte [ebp - 0x23c], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x240]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x240]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x1004b2e0
lea ecx, [ebp - 0x240]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1a08]
call fcn.1001d770
push 0x75
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x9e
call fcn.1001eed0
push 0x70
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1f4], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x1f3], al
call fcn.1001eed0
mov byte [ebp - 0x1f2], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x1f4]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x1f4]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 3
jb 0x1004b370
lea ecx, [ebp - 0x1f4]
call fcn.10018960
push eax
lea ecx, [ebp - 0x19f0]
call fcn.1001d770
push 0x72
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 0x9f
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x328]
mov byte [ebp - 0x328], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x328]
mov byte [ebp - 0x327], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x328]
mov byte [ebp - 0x326], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x328]
mov byte [ebp - 0x325], al
call fcn.1001eed0
push 0x6d
lea ecx, [ebp - 0x328]
mov byte [ebp - 0x324], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x328]
mov byte [ebp - 0x323], al
call fcn.1001eed0
mov byte [ebp - 0x322], al
xor esi, esi
push esi
lea ecx, [ebp - 0x328]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x328]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x1004b442
lea ecx, [ebp - 0x328]
call fcn.10018960
push eax
lea ecx, [ebp - 0x19d8]
call fcn.1001d770
push 0x69
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0xa0
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x280], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x27f], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x27e], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x27d], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x27c], al
call fcn.1001eed0
mov byte [ebp - 0x27b], al
xor esi, esi
push esi
lea ecx, [ebp - 0x280]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x280]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 6
jb 0x1004b501
lea ecx, [ebp - 0x280]
call fcn.10018960
push eax
lea ecx, [ebp - 0x19c0]
call fcn.1001d770
lea eax, [ebp - 0x19a8]
mov dword [ebp - 4], 0xa1
push eax
lea eax, [ebp - 0x1a20]
push eax
lea ecx, [ebp - 0x958]
call fcn.1008ddd0
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x80c]
push dword [eax + 4]
push dword [eax]
call fcn.1008ddf0
push 0x70
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0xa2
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x41c]
mov byte [ebp - 0x41c], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x41c]
mov byte [ebp - 0x41b], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x41c]
mov byte [ebp - 0x41a], al
call fcn.1001eed0
push 0x68
lea ecx, [ebp - 0x41c]
mov byte [ebp - 0x419], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x41c]
mov byte [ebp - 0x418], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x41c]
mov byte [ebp - 0x417], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x41c]
mov byte [ebp - 0x416], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x41c]
mov byte [ebp - 0x415], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x41c]
mov byte [ebp - 0x414], al
call fcn.1001eed0
mov byte [ebp - 0x413], al
xor esi, esi
push esi
lea ecx, [ebp - 0x41c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x41c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x1004b642
lea ecx, [ebp - 0x41c]
call fcn.10018960
push eax
lea ecx, [ebp - 0xe80]
call fcn.1001d770
push 0x70
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0xa3
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 0x2a8], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 0x2a7], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 0x2a6], al
call fcn.1001eed0
push 0x68
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 0x2a5], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 0x2a4], al
call fcn.1001eed0
mov byte [ebp - 0x2a3], al
xor esi, esi
push esi
lea ecx, [ebp - 0x2a8]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x2a8]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 6
jb 0x1004b701
lea ecx, [ebp - 0x2a8]
call fcn.10018960
push eax
lea ecx, [ebp - 0xe68]
call fcn.1001d770
lea eax, [ebp - 0xe80]
mov byte [ebp - 4], 0xa4
push eax
lea ecx, [edi + 0x1110]
call fcn.10036880
lea eax, [ebp - 0xe68]
mov byte [edi + 0x1141], 1
push eax
lea ecx, [edi + 0x1148]
call fcn.10036880
xor ecx, ecx
mov eax, 0xf
cmp byte [edi + 0x1141], cl
cmovne ecx, eax
mov dword [edi + 0x1174], ecx
lea eax, [ecx + 0x14]
mov dword [edi + 0x10e8], eax
lea ecx, [ebp - 0x80c]
mov dword [edi + 0x10ec], eax
call fcn.1001d260
lea ecx, [ebp - 0x80c]
mov esi, eax
call fcn.1001d250
mov dword [ebp - 0x1e8], eax
lea ecx, [edi + 0x1160]
cmp esi, eax
je 0x1004b7e5
mov edi, ecx
push esi
mov ecx, edi
call fcn.1003bf50
add esi, 0x18
cmp esi, dword [ebp - 0x1e8]
jne 0x1004b7c6
mov edi, dword [ebp - 0x1e4]
lea ecx, [edi + 0x1160]
call fcn.10022330
test eax, eax
je 0x1004b7f8
mov dword [edi + 0x1170], 0
lea ecx, [ebp - 0xe68]
call fcn.1001d720
lea ecx, [ebp - 0xe80]
call fcn.1001d720
lea ecx, [ebp - 0x80c]
call fcn.1003bfc0
push fcn.1001d720
push 5
push 0x18
lea eax, [ebp - 0x1a20]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
lea eax, [ebp - 0x160]
mov dword [ebp - 0x160], 0x10021a00
lea esi, [edi + 0x10d8]
lea ecx, [esi + 0x58]
push eax
call fcn.1002e380
mov dword [ebp - 0xa4], esi
mov dword [esi + 0x18], 0
mov ecx, dword [ebp - 0xa4]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xa4]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0xa4]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
lea ecx, [ebp - 0x7d6]
call fcn.10018960
push 0x6f
lea ecx, [ebp - 0x1fc]
mov dword [ebp - 0x1e0], eax
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 0x1fc], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 0x1fb], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 0x1fa], al
call fcn.1001eed0
mov byte [ebp - 0x1f9], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x1fc]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x1fc]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 4
jb 0x1004b900
lea ecx, [ebp - 0x1fc]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1a98]
call fcn.1001d770
push 0x64
lea ecx, [ebp - 0x410]
mov dword [ebp - 4], 0xa5
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x410]
mov byte [ebp - 0x410], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x410]
mov byte [ebp - 0x40f], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x410]
mov byte [ebp - 0x40e], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x410]
mov byte [ebp - 0x40d], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x410]
mov byte [ebp - 0x40c], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x410]
mov byte [ebp - 0x40b], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x410]
mov byte [ebp - 0x40a], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x410]
mov byte [ebp - 0x409], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x410]
mov byte [ebp - 0x408], al
call fcn.1001eed0
mov byte [ebp - 0x407], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x410]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x410]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x1004ba10
lea ecx, [ebp - 0x410]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1a80]
call fcn.1001d770
push 0x6a
lea ecx, [ebp - 0x300]
mov byte [ebp - 4], 0xa6
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x300]
mov byte [ebp - 0x300], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x300]
mov byte [ebp - 0x2ff], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x300]
mov byte [ebp - 0x2fe], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x300]
mov byte [ebp - 0x2fd], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x300]
mov byte [ebp - 0x2fc], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x300]
mov byte [ebp - 0x2fb], al
call fcn.1001eed0
mov byte [ebp - 0x2fa], al
xor esi, esi
push esi
lea ecx, [ebp - 0x300]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x300]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x1004bae2
lea ecx, [ebp - 0x300]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1a68]
call fcn.1001d770
push 0x72
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 4], 0xa7
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 0x2f8], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 0x2f7], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 0x2f6], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 0x2f5], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 0x2f4], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 0x2f3], al
call fcn.1001eed0
mov byte [ebp - 0x2f2], al
xor esi, esi
push esi
lea ecx, [ebp - 0x2f8]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x2f8]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x1004bbb4
lea ecx, [ebp - 0x2f8]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1a50]
call fcn.1001d770
push 0x72
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0xa8
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d8], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d7], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d6], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d5], al
call fcn.1001eed0
push 0x6d
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d4], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d3], al
call fcn.1001eed0
mov byte [ebp - 0x2d2], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x2d8]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x2d8]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x1004bc90
lea ecx, [ebp - 0x2d8]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1a38]
call fcn.1001d770
lea eax, [ebp - 0x1a20]
mov dword [ebp - 4], 0xa9
push eax
lea eax, [ebp - 0x1a98]
push eax
lea ecx, [ebp - 0x960]
call fcn.1008ddd0
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x818]
push dword [eax + 4]
push dword [eax]
call fcn.1008ddf0
push 0x79
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 0xaa
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x360]
mov byte [ebp - 0x360], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x360]
mov byte [ebp - 0x35f], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x360]
mov byte [ebp - 0x35e], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x360]
mov byte [ebp - 0x35d], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x360]
mov byte [ebp - 0x35c], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x360]
mov byte [ebp - 0x35b], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x360]
mov byte [ebp - 0x35a], al
call fcn.1001eed0
mov byte [ebp - 0x359], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x360]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x360]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x1004bdb0
lea ecx, [ebp - 0x360]
call fcn.10018960
push eax
lea ecx, [ebp - 0xeb0]
call fcn.1001d770
push 0x79
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 0xab
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x200]
mov byte [ebp - 0x200], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x200]
mov byte [ebp - 0x1ff], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x200]
mov byte [ebp - 0x1fe], al
call fcn.1001eed0
mov byte [ebp - 0x1fd], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x200]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x200]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 4
jb 0x1004be50
lea ecx, [ebp - 0x200]
call fcn.10018960
push eax
lea ecx, [ebp - 0xe98]
call fcn.1001d770
lea eax, [ebp - 0xeb0]
mov byte [ebp - 4], 0xac
push eax
lea ecx, [edi + 0x11b0]
call fcn.10036880
lea eax, [ebp - 0xe98]
mov byte [edi + 0x11e1], 1
push eax
lea ecx, [edi + 0x11e8]
call fcn.10036880
xor ecx, ecx
mov eax, 0xf
cmp byte [edi + 0x11e1], cl
cmovne ecx, eax
mov dword [edi + 0x1214], ecx
lea eax, [ecx + 0x14]
mov dword [edi + 0x1188], eax
lea ecx, [ebp - 0x818]
mov dword [edi + 0x118c], eax
call fcn.1001d260
lea ecx, [ebp - 0x818]
mov esi, eax
call fcn.1001d250
mov dword [ebp - 0x1e8], eax
lea ecx, [edi + 0x1200]
cmp esi, eax
je 0x1004bf3f
mov dword [ebp - 0x1e0], ecx
mov edi, ecx
nop dword [eax + eax]
push esi
mov ecx, edi
call fcn.1003bf50
add esi, 0x18
cmp esi, dword [ebp - 0x1e8]
jne 0x1004bf20
mov edi, dword [ebp - 0x1e4]
lea ecx, [edi + 0x1200]
call fcn.10022330
test eax, eax
je 0x1004bf52
mov dword [edi + 0x1210], 0
lea ecx, [ebp - 0xe98]
call fcn.1001d720
lea ecx, [ebp - 0xeb0]
call fcn.1001d720
lea ecx, [ebp - 0x818]
call fcn.1003bfc0
push fcn.1001d720
push 5
push 0x18
lea eax, [ebp - 0x1a98]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
lea eax, [ebp - 0x164]
mov dword [ebp - 0x164], 0x10021a00
lea esi, [edi + 0x1178]
lea ecx, [esi + 0x58]
push eax
call fcn.1002e380
mov dword [ebp - 0xa8], esi
mov dword [esi + 0x18], 0
mov ecx, dword [ebp - 0xa8]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xa8]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0xa8]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
push 0xb0
lea ecx, [ebp - 0x65c]
call fcn.1008ed30
push 0
lea ecx, [ebp - 0x65c]
mov word [ebp - 0x65c], ax
call fcn.1008ed30
mov word [ebp - 0x65a], ax
xor edi, edi
push edi
lea ecx, [ebp - 0x65c]
call fcn.1008ddc0
push edi
lea ecx, [ebp - 0x65c]
movzx eax, word [eax]
xor eax, 0xa2
movzx esi, ax
call fcn.1008ddc0
inc edi
mov word [eax], si
cmp edi, 2
jb 0x1004c023
lea ecx, [ebp - 0x65c]
call fcn.10018960
push eax
lea ecx, [ebp - 0xee0]
call fcn.1008e160
push 0x6a
lea ecx, [ebp - 0x604]
mov dword [ebp - 4], 0xad
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x604], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x603], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x602], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x601], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x600], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x5ff], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x5fe], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x5fd], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x5fc], al
call fcn.1001eed0
push 0x67
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x5fb], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x5fa], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x5f9], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x5f8], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x5f7], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x5f6], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x604]
mov byte [ebp - 0x5f5], al
call fcn.1001eed0
mov edi, dword [ebp - 0x1e4]
xor esi, esi
mov byte [ebp - 0x5f4], al
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x604]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x604]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0x11
jb 0x1004c1c0
lea ecx, [ebp - 0x604]
call fcn.10018960
push eax
lea ecx, [ebp - 0xec8]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x1318]
mov byte [ebp - 4], 0xae
call fcn.1001d770
lea eax, [ebp - 0xec8]
mov byte [ebp - 4], 0xaf
push eax
lea ecx, [edi + 0x1250]
call fcn.10036880
mov byte [edi + 0x1281], 0
lea eax, [ebp - 0xee0]
mov dword [edi + 0x12d0], 0
lea ecx, [edi + 0x12b8]
mov dword [edi + 0x1228], 8
mov dword [edi + 0x122c], 8
mov dword [edi + 0x128c], 0x3f800000
mov dword [edi + 0x1290], 0x43340000
mov dword [edi + 0x1288], 0x42340000
mov dword [edi + 0x129c], 0
push eax
mov dword [edi + 0x1294], 0x40a00000
call fcn.1008e130
lea ecx, [ebp - 0x1318]
call fcn.1001d720
lea ecx, [ebp - 0xec8]
call fcn.1001d720
lea ecx, [ebp - 0xee0]
mov dword [ebp - 4], 0xffffffff
call fcn.1003c160
lea eax, [ebp - 0x168]
mov dword [ebp - 0x168], 0x10021a00
push eax
lea ecx, [edi + 0x1270]
call fcn.1002e380
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x16c], 0x10021a20
push eax
lea ecx, [edi + 0x1270]
call fcn.1002e380
lea eax, [edi + 0x1218]
mov dword [ebp - 0xb0], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0xb0]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xb0]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0xb0]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0xb0]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
push 0xb0
lea ecx, [ebp - 0x630]
call fcn.1008ed30
push 0
lea ecx, [ebp - 0x630]
mov word [ebp - 0x630], ax
call fcn.1008ed30
mov word [ebp - 0x62e], ax
xor edi, edi
nop word [eax + eax]
push edi
lea ecx, [ebp - 0x630]
call fcn.1008ddc0
push edi
lea ecx, [ebp - 0x630]
movzx eax, word [eax]
xor eax, 0xa2
movzx esi, ax
call fcn.1008ddc0
inc edi
mov word [eax], si
cmp edi, 2
jb 0x1004c380
lea ecx, [ebp - 0x630]
call fcn.10018960
push eax
lea ecx, [ebp - 0xf10]
call fcn.1008e160
push 0x72
lea ecx, [ebp - 0x4fc]
mov dword [ebp - 4], 0xb0
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 0x4fc], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 0x4fb], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 0x4fa], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 0x4f9], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 0x4f8], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 0x4f7], al
call fcn.1001eed0
push 0x67
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 0x4f6], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 0x4f5], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 0x4f4], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 0x4f3], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 0x4f2], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 0x4f1], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 0x4f0], al
call fcn.1001eed0
mov edi, dword [ebp - 0x1e4]
xor esi, esi
mov byte [ebp - 0x4ef], al
nop dword [eax]
push esi
lea ecx, [ebp - 0x4fc]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x4fc]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x1004c4e0
lea ecx, [ebp - 0x4fc]
call fcn.10018960
push eax
lea ecx, [ebp - 0xef8]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x1330]
mov byte [ebp - 4], 0xb1
call fcn.1001d770
lea eax, [ebp - 0xef8]
mov byte [ebp - 4], 0xb2
push eax
lea ecx, [edi + 0x130c]
call fcn.10036880
mov byte [edi + 0x133d], 0
lea eax, [ebp - 0xf10]
mov dword [edi + 0x138c], 0
lea ecx, [edi + 0x1374]
mov dword [edi + 0x12e4], 8
mov dword [edi + 0x12e8], 8
mov dword [edi + 0x1348], 0
mov dword [edi + 0x134c], 0x43b40000
mov dword [edi + 0x1344], 0x43b40000
mov dword [edi + 0x1358], 0
push eax
mov dword [edi + 0x1350], 0x40a00000
call fcn.1008e130
lea ecx, [ebp - 0x1330]
call fcn.1001d720
lea ecx, [ebp - 0xef8]
call fcn.1001d720
lea ecx, [ebp - 0xf10]
mov dword [ebp - 4], 0xffffffff
call fcn.1003c160
lea eax, [ebp - 0x170]
mov dword [ebp - 0x170], 0x10021a00
push eax
lea ecx, [edi + 0x132c]
call fcn.1002e380
lea eax, [ebp - 0x174]
mov dword [ebp - 0x174], 0x10021a30
push eax
lea ecx, [edi + 0x132c]
call fcn.1002e380
lea eax, [edi + 0x12d4]
mov dword [ebp - 0xb4], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0xb4]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xb4]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0xb4]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0xb4]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
push 0x25
lea ecx, [ebp - 0x634]
call fcn.1008ed30
push 0
lea ecx, [ebp - 0x634]
mov word [ebp - 0x634], ax
call fcn.1008ed30
mov word [ebp - 0x632], ax
xor edi, edi
push edi
lea ecx, [ebp - 0x634]
call fcn.1008ddc0
push edi
lea ecx, [ebp - 0x634]
movzx eax, word [eax]
xor eax, 0xa2
movzx esi, ax
call fcn.1008ddc0
inc edi
mov word [eax], si
cmp edi, 2
jb 0x1004c692
lea ecx, [ebp - 0x634]
call fcn.10018960
push eax
lea ecx, [ebp - 0xf40]
call fcn.1008e160
push 0x72
lea ecx, [ebp - 0x4cc]
mov dword [ebp - 4], 0xb3
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x4cc], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x4cb], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x4ca], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x4c9], al
call fcn.1001eed0
push 0x70
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x4c8], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x4c7], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x4c6], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x4c5], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x4c4], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x4c3], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x4c2], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x4c1], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x4c0], al
call fcn.1001eed0
mov edi, dword [ebp - 0x1e4]
xor esi, esi
mov byte [ebp - 0x4bf], al
nop
push esi
lea ecx, [ebp - 0x4cc]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x4cc]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x1004c7f0
lea ecx, [ebp - 0x4cc]
call fcn.10018960
push eax
lea ecx, [ebp - 0xf28]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x1348]
mov byte [ebp - 4], 0xb4
call fcn.1001d770
lea eax, [ebp - 0xf28]
mov byte [ebp - 4], 0xb5
push eax
lea ecx, [edi + 0x13c8]
call fcn.10036880
mov byte [edi + 0x13f9], 0
lea eax, [ebp - 0xf40]
mov dword [edi + 0x1448], 0
lea ecx, [edi + 0x1430]
mov dword [edi + 0x13a0], 8
mov dword [edi + 0x13a4], 8
mov dword [edi + 0x1404], 0x3f800000
mov dword [edi + 0x1408], 0x42c80000
mov dword [edi + 0x1400], 0x41200000
mov dword [edi + 0x1414], 0
push eax
mov dword [edi + 0x140c], 0x3f800000
call fcn.1008e130
lea ecx, [ebp - 0x1348]
call fcn.1001d720
lea ecx, [ebp - 0xf28]
call fcn.1001d720
lea ecx, [ebp - 0xf40]
mov dword [ebp - 4], 0xffffffff
call fcn.1003c160
lea eax, [ebp - 0x178]
mov dword [ebp - 0x178], 0x10021a00
push eax
lea ecx, [edi + 0x13e8]
call fcn.1002e380
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x17c], 0x10021a30
push eax
lea ecx, [edi + 0x13e8]
call fcn.1002e380
lea eax, [edi + 0x1390]
mov dword [ebp - 0xb8], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0xb8]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xb8]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0xb8]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0xb8]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
push 0x100c1384
lea ecx, [ebp - 0xf70]
call fcn.1008e160
push 0x72
lea ecx, [ebp - 0x5dc]
mov dword [ebp - 4], 0xb6
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5dc], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5db], al
call fcn.1001eed0
mov byte [ebp - 0x5da], al
lea ecx, [ebp - 0x5dc]
push 0x64
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5d9], al
call fcn.1001eed0
push 0x75
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5d8], al
call fcn.1001eed0
push 0x70
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5d7], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5d6], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5d5], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5d4], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5d3], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5d2], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5d1], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5d0], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5cf], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 0x5ce], al
call fcn.1001eed0
mov byte [ebp - 0x5cd], al
xor esi, esi
push esi
lea ecx, [ebp - 0x5dc]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x5dc]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x1004cac1
lea ecx, [ebp - 0x5dc]
call fcn.10018960
push eax
lea ecx, [ebp - 0xf58]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x1360]
mov byte [ebp - 4], 0xb7
call fcn.1001d770
lea eax, [ebp - 0xf58]
mov byte [ebp - 4], 0xb8
push eax
lea ecx, [edi + 0x1484]
call fcn.10036880
mov byte [edi + 0x14b5], 0
lea eax, [ebp - 0xf70]
mov dword [edi + 0x1504], 0
lea ecx, [edi + 0x14ec]
mov dword [edi + 0x145c], 8
mov dword [edi + 0x1460], 8
mov dword [edi + 0x14c0], 0
mov dword [edi + 0x14c4], 0x3f800000
mov dword [edi + 0x14bc], 0
mov dword [edi + 0x14d0], 1
push eax
mov dword [edi + 0x14c8], 0x3dcccccd
call fcn.1008e130
lea ecx, [ebp - 0x1360]
call fcn.1001d720
lea ecx, [ebp - 0xf58]
call fcn.1001d720
lea ecx, [ebp - 0xf70]
mov dword [ebp - 4], 0xffffffff
call fcn.1003c160
lea eax, [ebp - 0x180]
mov dword [ebp - 0x180], 0x10021a00
push eax
lea ecx, [edi + 0x14a4]
call fcn.1002e380
lea eax, [ebp - 0x184]
mov dword [ebp - 0x184], 0x10021a40
push eax
lea ecx, [edi + 0x14a4]
call fcn.1002e380
lea eax, [edi + 0x144c]
mov dword [ebp - 0xbc], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0xbc]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xbc]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0xbc]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
lea ecx, [ebp - 0x7d7]
call fcn.10018960
push 0x61
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x1e0], eax
call fcn.1001eed0
push 0x75
lea ecx, [ebp - 0x238]
mov byte [ebp - 0x238], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x238]
mov byte [ebp - 0x237], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x238]
mov byte [ebp - 0x236], al
call fcn.1001eed0
mov byte [ebp - 0x235], al
push 0
lea ecx, [ebp - 0x238]
call fcn.1001eed0
mov byte [ebp - 0x234], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x238]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x238]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x1004ccc0
lea ecx, [ebp - 0x238]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1b10]
call fcn.1001d770
push 0x62
lea ecx, [ebp - 0x404]
mov dword [ebp - 4], 0xb9
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x404]
mov byte [ebp - 0x404], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x404]
mov byte [ebp - 0x403], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x404]
mov byte [ebp - 0x402], al
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x404]
mov byte [ebp - 0x401], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x404]
mov byte [ebp - 0x400], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x404]
mov byte [ebp - 0x3ff], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x404]
mov byte [ebp - 0x3fe], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x404]
mov byte [ebp - 0x3fd], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x404]
mov byte [ebp - 0x3fc], al
call fcn.1001eed0
mov byte [ebp - 0x3fb], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x404]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x404]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x1004cdd0
lea ecx, [ebp - 0x404]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1af8]
call fcn.1001d770
push 0x6c
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xba
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x230], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x22f], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x22e], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x22d], al
call fcn.1001eed0
mov byte [ebp - 0x22c], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x230]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x230]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x1004ce80
lea ecx, [ebp - 0x230]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1ae0]
call fcn.1001d770
push 0x72
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0xbb
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x288]
mov byte [ebp - 0x288], al
call fcn.1001eed0
push 0x67
lea ecx, [ebp - 0x288]
mov byte [ebp - 0x287], al
call fcn.1001eed0
push 0x68
lea ecx, [ebp - 0x288]
mov byte [ebp - 0x286], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x288]
mov byte [ebp - 0x285], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x288]
mov byte [ebp - 0x284], al
call fcn.1001eed0
mov byte [ebp - 0x283], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x288]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x288]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 6
jb 0x1004cf40
lea ecx, [ebp - 0x288]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1ac8]
call fcn.1001d770
push 0x63
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0xbc
call fcn.1001eed0
push 0x75
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 0x2d0], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 0x2cf], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 0x2ce], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 0x2cd], al
call fcn.1001eed0
push 0x6d
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 0x2cc], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 0x2cb], al
call fcn.1001eed0
mov byte [ebp - 0x2ca], al
xor esi, esi
push esi
lea ecx, [ebp - 0x2d0]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x2d0]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x1004d012
lea ecx, [ebp - 0x2d0]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1ab0]
call fcn.1001d770
lea eax, [ebp - 0x1a98]
mov dword [ebp - 4], 0xbd
push eax
lea eax, [ebp - 0x1b10]
push eax
lea ecx, [ebp - 0x968]
call fcn.1008ddd0
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x824]
push dword [eax + 4]
push dword [eax]
call fcn.1008ddf0
push 0x64
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0xbe
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x358]
mov byte [ebp - 0x358], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x358]
mov byte [ebp - 0x357], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x358]
mov byte [ebp - 0x356], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x358]
mov byte [ebp - 0x355], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x358]
mov byte [ebp - 0x354], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x358]
mov byte [ebp - 0x353], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x358]
mov byte [ebp - 0x352], al
call fcn.1001eed0
mov byte [ebp - 0x351], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x358]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x358]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x1004d130
lea ecx, [ebp - 0x358]
call fcn.10018960
push eax
lea ecx, [ebp - 0xfa0]
call fcn.1001d770
push 0x64
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 0xbf
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 0x3f8], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 0x3f7], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 0x3f6], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 0x3f5], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 0x3f4], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 0x3f3], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 0x3f2], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 0x3f1], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 0x3f0], al
call fcn.1001eed0
mov byte [ebp - 0x3ef], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x3f8]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x3f8]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x1004d240
lea ecx, [ebp - 0x3f8]
call fcn.10018960
push eax
lea ecx, [ebp - 0xf88]
call fcn.1001d770
lea eax, [ebp - 0xfa0]
mov byte [ebp - 4], 0xc0
push eax
lea ecx, [edi + 0x1540]
call fcn.10036880
lea eax, [ebp - 0xf88]
mov byte [edi + 0x1571], 1
push eax
lea ecx, [edi + 0x1578]
call fcn.10036880
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x1571], al
cmovne eax, ecx
lea ecx, [ebp - 0x824]
mov dword [edi + 0x15a4], eax
add eax, 0x14
mov dword [edi + 0x1518], eax
mov dword [edi + 0x151c], eax
call fcn.1001d260
lea ecx, [ebp - 0x824]
mov esi, eax
call fcn.1001d250
mov dword [ebp - 0x1e0], eax
cmp esi, eax
je 0x1004d32b
lea eax, [edi + 0x1590]
mov edi, dword [ebp - 0x1e0]
mov dword [ebp - 0x1e8], eax
nop
push esi
mov ecx, eax
call fcn.1003bf50
mov eax, dword [ebp - 0x1e8]
add esi, 0x18
cmp esi, edi
jne 0x1004d310
mov edi, dword [ebp - 0x1e4]
lea ecx, [edi + 0x1590]
call fcn.10022330
test eax, eax
je 0x1004d344
mov dword [edi + 0x15a0], 0
lea ecx, [ebp - 0xf88]
call fcn.1001d720
lea ecx, [ebp - 0xfa0]
call fcn.1001d720
lea ecx, [ebp - 0x824]
call fcn.1003bfc0
push fcn.1001d720
push 5
push 0x18
lea eax, [ebp - 0x1b10]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
add edi, 0x1508
mov dword [ebp - 0x188], 0x10021a00
lea eax, [ebp - 0x188]
push eax
lea ecx, [edi + 0x58]
call fcn.1002e380
lea eax, [ebp - 0x18c]
mov dword [ebp - 0x18c], 0x10021a10
push eax
lea ecx, [edi + 0x58]
call fcn.1002e380
mov dword [ebp - 0xc0], edi
mov dword [edi + 0x18], 0
mov ecx, dword [ebp - 0xc0]
mov edi, dword [ebp - 0x1e4]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xc0]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0xc0]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0xc0]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
push 0x73
lea ecx, [ebp - 0x638]
call fcn.1008ed30
push 0
lea ecx, [ebp - 0x638]
mov word [ebp - 0x638], ax
call fcn.1008ed30
mov word [ebp - 0x636], ax
xor edi, edi
push edi
lea ecx, [ebp - 0x638]
call fcn.1008ddc0
push edi
lea ecx, [ebp - 0x638]
movzx eax, word [eax]
xor eax, 0xa2
movzx esi, ax
call fcn.1008ddc0
inc edi
mov word [eax], si
cmp edi, 2
jb 0x1004d431
lea ecx, [ebp - 0x638]
call fcn.10018960
push eax
lea ecx, [ebp - 0xfd0]
call fcn.1008e160
push 0x64
lea ecx, [ebp - 0x4bc]
mov dword [ebp - 4], 0xc1
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 0x4bc], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 0x4bb], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 0x4ba], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 0x4b9], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 0x4b8], al
call fcn.1001eed0
push 0x6d
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 0x4b7], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 0x4b6], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 0x4b5], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 0x4b4], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 0x4b3], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 0x4b2], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 0x4b1], al
call fcn.1001eed0
mov edi, dword [ebp - 0x1e4]
xor esi, esi
mov byte [ebp - 0x4b0], al
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x4bc]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x4bc]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x1004d580
lea ecx, [ebp - 0x4bc]
call fcn.10018960
push eax
lea ecx, [ebp - 0xfb8]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x1378]
mov byte [ebp - 4], 0xc2
call fcn.1001d770
lea eax, [ebp - 0xfb8]
mov byte [ebp - 4], 0xc3
push eax
lea ecx, [edi + 0x15e0]
call fcn.10036880
mov byte [edi + 0x1611], 0
lea eax, [ebp - 0xfd0]
mov dword [edi + 0x1660], 0
lea ecx, [edi + 0x1648]
mov dword [edi + 0x15b8], 8
mov dword [edi + 0x15bc], 8
mov dword [edi + 0x161c], 0
mov dword [edi + 0x1620], 0x41200000
mov dword [edi + 0x1618], 0
mov dword [edi + 0x162c], 0
push eax
mov dword [edi + 0x1624], 0x3f800000
call fcn.1008e130
lea ecx, [ebp - 0x1378]
call fcn.1001d720
lea ecx, [ebp - 0xfb8]
call fcn.1001d720
lea ecx, [ebp - 0xfd0]
mov dword [ebp - 4], 0xffffffff
call fcn.1003c160
lea eax, [ebp - 0x190]
mov dword [ebp - 0x190], 0x10021a00
push eax
lea ecx, [edi + 0x1600]
call fcn.1002e380
lea eax, [ebp - 0x194]
mov dword [ebp - 0x194], 0x10021a10
push eax
lea ecx, [edi + 0x1600]
call fcn.1002e380
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x19c], 0x10021a50
push eax
lea ecx, [edi + 0x1600]
call fcn.1002e380
lea eax, [edi + 0x15a8]
mov dword [ebp - 0xc4], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0xc4]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xc4]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0xc4]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0xc4]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
push 0xb0
lea ecx, [ebp - 0x63c]
call fcn.1008ed30
push 0
lea ecx, [ebp - 0x63c]
mov word [ebp - 0x63c], ax
call fcn.1008ed30
mov word [ebp - 0x63a], ax
xor edi, edi
push edi
lea ecx, [ebp - 0x63c]
call fcn.1008ddc0
push edi
lea ecx, [ebp - 0x63c]
movzx eax, word [eax]
xor eax, 0xa2
movzx esi, ax
call fcn.1008ddc0
inc edi
mov word [eax], si
cmp edi, 2
jb 0x1004d751
lea ecx, [ebp - 0x63c]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1000]
call fcn.1008e160
push 0x64
lea ecx, [ebp - 0x58c]
mov dword [ebp - 4], 0xc4
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x58c], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x58b], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x58a], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x589], al
call fcn.1001eed0
push 0x75
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x588], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x587], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x586], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x585], al
call fcn.1001eed0
push 0x6d
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x584], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x583], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x582], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x581], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x580], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x57f], al
call fcn.1001eed0
mov edi, dword [ebp - 0x1e4]
xor esi, esi
mov byte [ebp - 0x57e], al
push esi
lea ecx, [ebp - 0x58c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x58c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x1004d8c0
lea ecx, [ebp - 0x58c]
call fcn.10018960
push eax
lea ecx, [ebp - 0xfe8]
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x1390]
mov byte [ebp - 4], 0xc5
call fcn.1001d770
lea eax, [ebp - 0xfe8]
mov byte [ebp - 4], 0xc6
push eax
lea ecx, [edi + 0x169c]
call fcn.10036880
mov byte [edi + 0x16cd], 0
lea eax, [ebp - 0x1000]
mov dword [edi + 0x171c], 0
lea ecx, [edi + 0x1704]
mov dword [edi + 0x1674], 8
mov dword [edi + 0x1678], 8
mov dword [edi + 0x16d8], 0xc3340000
mov dword [edi + 0x16dc], 0x43340000
mov dword [edi + 0x16d4], 0
mov dword [edi + 0x16e8], 0
push eax
mov dword [edi + 0x16e0], 0x40a00000
call fcn.1008e130
lea ecx, [ebp - 0x1390]
call fcn.1001d720
lea ecx, [ebp - 0xfe8]
call fcn.1001d720
lea ecx, [ebp - 0x1000]
mov dword [ebp - 4], 0xffffffff
call fcn.1003c160
lea eax, [ebp - 0x1a0]
mov dword [ebp - 0x1a0], 0x10021a00
push eax
lea ecx, [edi + 0x16bc]
call fcn.1002e380
lea eax, [ebp - 0x1a4]
mov dword [ebp - 0x1a4], 0x10021a10
push eax
lea ecx, [edi + 0x16bc]
call fcn.1002e380
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1a8], 0x10021a60
push eax
lea ecx, [edi + 0x16bc]
call fcn.1002e380
lea eax, [edi + 0x1664]
mov dword [ebp - 0xc8], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0xc8]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xc8]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0xc8]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
lea ecx, [ebp - 0x7d8]
call fcn.10018960
push 0x6f
lea ecx, [ebp - 0x204]
mov dword [ebp - 0x1e0], eax
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x204]
mov byte [ebp - 0x204], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x204]
mov byte [ebp - 0x203], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x204]
mov byte [ebp - 0x202], al
call fcn.1001eed0
mov byte [ebp - 0x201], al
xor esi, esi
push esi
lea ecx, [ebp - 0x204]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x204]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 4
jb 0x1004dac3
lea ecx, [ebp - 0x204]
call fcn.10018960
push eax
lea ecx, [ebp - 0x15a0]
call fcn.1001d770
push 0x73
lea ecx, [ebp - 0x318]
mov dword [ebp - 4], 0xc7
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x318]
mov byte [ebp - 0x318], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x318]
mov byte [ebp - 0x317], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x318]
mov byte [ebp - 0x316], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x318]
mov byte [ebp - 0x315], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x318]
mov byte [ebp - 0x314], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x318]
mov byte [ebp - 0x313], al
call fcn.1001eed0
mov byte [ebp - 0x312], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x318]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x318]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x1004dba0
lea ecx, [ebp - 0x318]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1588]
call fcn.1001d770
push 0x61
lea ecx, [ebp - 0x59c]
mov byte [ebp - 4], 0xc8
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x59c], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x59b], al
call fcn.1001eed0
push 0x79
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x59a], al
call fcn.1001eed0
push 0x20
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x599], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x598], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x597], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x596], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x595], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x594], al
call fcn.1001eed0
push 0x68
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x593], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x592], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x591], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x590], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x59c]
mov byte [ebp - 0x58f], al
call fcn.1001eed0
mov byte [ebp - 0x58e], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x59c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x59c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x1004dd10
lea ecx, [ebp - 0x59c]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1570]
call fcn.1001d770
push 0x61
lea ecx, [ebp - 0x50c]
mov byte [ebp - 4], 0xc9
call fcn.1001eed0
push 0x77
lea ecx, [ebp - 0x50c]
mov byte [ebp - 0x50c], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x50c]
mov byte [ebp - 0x50b], al
call fcn.1001eed0
push 0x79
lea ecx, [ebp - 0x50c]
mov byte [ebp - 0x50a], al
call fcn.1001eed0
push 0x20
lea ecx, [ebp - 0x50c]
mov byte [ebp - 0x509], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x50c]
mov byte [ebp - 0x508], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x50c]
mov byte [ebp - 0x507], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x50c]
mov byte [ebp - 0x506], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x50c]
mov byte [ebp - 0x505], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x50c]
mov byte [ebp - 0x504], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x50c]
mov byte [ebp - 0x503], al
call fcn.1001eed0
push 0x63
lea ecx, [ebp - 0x50c]
mov byte [ebp - 0x502], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x50c]
mov byte [ebp - 0x501], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x50c]
mov byte [ebp - 0x500], al
call fcn.1001eed0
mov byte [ebp - 0x4ff], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x50c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x50c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x1004de70
lea ecx, [ebp - 0x50c]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1558]
call fcn.1001d770
lea eax, [ebp - 0x1540]
mov dword [ebp - 4], 0xca
push eax
lea eax, [ebp - 0x15a0]
push eax
lea ecx, [ebp - 0x970]
call fcn.1008ddd0
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x830]
push dword [eax + 4]
push dword [eax]
call fcn.1008ddf0
push 0x62
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 4], 0xcb
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x5ac], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x5ab], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x5aa], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x5a9], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x5a8], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x5a7], al
call fcn.1001eed0
push 0x67
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x5a6], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x5a5], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x5a4], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x5a3], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x5a2], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x5a1], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x5a0], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 0x59f], al
call fcn.1001eed0
mov byte [ebp - 0x59e], al
xor esi, esi
push esi
lea ecx, [ebp - 0x5ac]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x5ac]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x1004e010
lea ecx, [ebp - 0x5ac]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1030]
call fcn.1001d770
push 0x62
lea ecx, [ebp - 0x47c]
mov byte [ebp - 4], 0xcc
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x47c]
mov byte [ebp - 0x47c], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x47c]
mov byte [ebp - 0x47b], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x47c]
mov byte [ebp - 0x47a], al
call fcn.1001eed0
push 0x20
lea ecx, [ebp - 0x47c]
mov byte [ebp - 0x479], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x47c]
mov byte [ebp - 0x478], al
call fcn.1001eed0
push 0x6e
lea ecx, [ebp - 0x47c]
mov byte [ebp - 0x477], al
call fcn.1001eed0
push 0x67
lea ecx, [ebp - 0x47c]
mov byte [ebp - 0x476], al
call fcn.1001eed0
push 0x6c
lea ecx, [ebp - 0x47c]
mov byte [ebp - 0x475], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x47c]
mov byte [ebp - 0x474], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x47c]
mov byte [ebp - 0x473], al
call fcn.1001eed0
mov byte [ebp - 0x472], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x47c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x47c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x1004e130
lea ecx, [ebp - 0x47c]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1018]
call fcn.1001d770
lea eax, [ebp - 0x1030]
mov byte [ebp - 4], 0xcd
push eax
lea ecx, [edi + 0x1758]
call fcn.10036880
lea eax, [ebp - 0x1018]
mov byte [edi + 0x1789], 1
push eax
lea ecx, [edi + 0x1790]
call fcn.10036880
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x1789], al
cmovne eax, ecx
lea ecx, [ebp - 0x830]
mov dword [edi + 0x17bc], eax
add eax, 0x14
mov dword [edi + 0x1730], eax
mov dword [edi + 0x1734], eax
call fcn.1001d260
lea ecx, [ebp - 0x830]
mov esi, eax
call fcn.1001d250
mov dword [ebp - 0x1e0], eax
cmp esi, eax
je 0x1004e21b
lea eax, [edi + 0x17a8]
mov edi, dword [ebp - 0x1e0]
mov dword [ebp - 0x1e8], eax
nop
push esi
mov ecx, eax
call fcn.1003bf50
mov eax, dword [ebp - 0x1e8]
add esi, 0x18
cmp esi, edi
jne 0x1004e200
mov edi, dword [ebp - 0x1e4]
lea ecx, [edi + 0x17a8]
call fcn.10022330
test eax, eax
je 0x1004e234
mov dword [edi + 0x17b8], 0
lea ecx, [ebp - 0x1018]
call fcn.1001d720
lea ecx, [ebp - 0x1030]
call fcn.1001d720
lea ecx, [ebp - 0x830]
call fcn.1003bfc0
push fcn.1001d720
push 4
push 0x18
lea eax, [ebp - 0x15a0]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
add edi, 0x1720
mov dword [ebp - 0x1ac], 0x10021a00
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [edi + 0x58]
call fcn.1002e380
lea eax, [ebp - 0x1b0]
mov dword [ebp - 0x1b0], 0x10021a10
push eax
lea ecx, [edi + 0x58]
call fcn.1002e380
mov esi, dword [ebp - 0x1e4]
mov dword [ebp - 0x1c], edi
mov dword [edi + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e380
lea ecx, [ebp - 0x7d5]
call fcn.10018960
push 0x6f
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x1e0], eax
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x208]
mov byte [ebp - 0x208], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x208]
mov byte [ebp - 0x207], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x208]
mov byte [ebp - 0x206], al
call fcn.1001eed0
mov byte [ebp - 0x205], al
xor edi, edi
nop word [eax + eax]
push edi
lea ecx, [ebp - 0x208]
call fcn.1001d6b0
push edi
lea ecx, [ebp - 0x208]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc edi
mov byte [eax], cl
cmp edi, 4
jb 0x1004e350
lea ecx, [ebp - 0x208]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1600]
call fcn.1001d770
push 0x6c
lea ecx, [ebp - 0x270]
mov dword [ebp - 4], 0xce
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x270]
mov byte [ebp - 0x270], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x270]
mov byte [ebp - 0x26f], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x270]
mov byte [ebp - 0x26e], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x270]
mov byte [ebp - 0x26d], al
call fcn.1001eed0
mov byte [ebp - 0x26c], al
xor edi, edi
nop
push edi
lea ecx, [ebp - 0x270]
call fcn.1001d6b0
push edi
lea ecx, [ebp - 0x270]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc edi
mov byte [eax], cl
cmp edi, 5
jb 0x1004e400
lea ecx, [ebp - 0x270]
call fcn.10018960
push eax
lea ecx, [ebp - 0x15e8]
call fcn.1001d770
push 0x72
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0xcf
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x290]
mov byte [ebp - 0x290], al
call fcn.1001eed0
push 0x67
lea ecx, [ebp - 0x290]
mov byte [ebp - 0x28f], al
call fcn.1001eed0
push 0x68
lea ecx, [ebp - 0x290]
mov byte [ebp - 0x28e], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x290]
mov byte [ebp - 0x28d], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x290]
mov byte [ebp - 0x28c], al
call fcn.1001eed0
mov byte [ebp - 0x28b], al
xor edi, edi
nop
push edi
lea ecx, [ebp - 0x290]
call fcn.1001d6b0
push edi
lea ecx, [ebp - 0x290]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc edi
mov byte [eax], cl
cmp edi, 6
jb 0x1004e4c0
lea ecx, [ebp - 0x290]
call fcn.10018960
push eax
lea ecx, [ebp - 0x15d0]
call fcn.1001d770
push 0x6f
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 4], 0xd0
call fcn.1001eed0
push 0x70
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 0x3b0], al
call fcn.1001eed0
push 0x70
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 0x3af], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 0x3ae], al
call fcn.1001eed0
push 0x73
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 0x3ad], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 0x3ac], al
call fcn.1001eed0
push 0x74
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 0x3ab], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 0x3aa], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 0x3a9], al
call fcn.1001eed0
mov byte [ebp - 0x3a8], al
xor edi, edi
nop dword [eax + eax]
push edi
lea ecx, [ebp - 0x3b0]
call fcn.1001d6b0
push edi
lea ecx, [ebp - 0x3b0]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc edi
mov byte [eax], cl
cmp edi, 9
jb 0x1004e5c0
lea ecx, [ebp - 0x3b0]
call fcn.10018960
push eax
lea ecx, [ebp - 0x15b8]
call fcn.1001d770
lea eax, [ebp - 0x15a0]
mov dword [ebp - 4], 0xd1
push eax
lea eax, [ebp - 0x1600]
push eax
lea ecx, [ebp - 0x988]
call fcn.1008ddd0
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x83c]
push dword [eax + 4]
push dword [eax]
call fcn.1008ddf0
push 0x62
lea ecx, [ebp - 0x51c]
mov byte [ebp - 4], 0xd2
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x51c]
mov byte [ebp - 0x51c], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x51c]
mov byte [ebp - 0x51b], al
call fcn.1001eed0
push 0x79
lea ecx, [ebp - 0x51c]
mov byte [ebp - 0x51a], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x51c]
mov byte [ebp - 0x519], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x51c]
mov byte [ebp - 0x518], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x51c]
mov byte [ebp - 0x517], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x51c]
mov byte [ebp - 0x516], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x51c]
mov byte [ebp - 0x515], al
call fcn.1001eed0
push 0x5f
lea ecx, [ebp - 0x51c]
mov byte [ebp - 0x514], al
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x51c]
mov byte [ebp - 0x513], al
call fcn.1001eed0
push 0x69
lea ecx, [ebp - 0x51c]
mov byte [ebp - 0x512], al
call fcn.1001eed0
push 0x72
lea ecx, [ebp - 0x51c]
mov byte [ebp - 0x511], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x51c]
mov byte [ebp - 0x510], al
call fcn.1001eed0
mov byte [ebp - 0x50f], al
xor edi, edi
nop dword [eax]
push edi
lea ecx, [ebp - 0x51c]
call fcn.1001d6b0
push edi
lea ecx, [ebp - 0x51c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc edi
mov byte [eax], cl
cmp edi, 0xe
jb 0x1004e750
lea ecx, [ebp - 0x51c]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1060]
call fcn.1001d770
push 0x66
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0xd3
call fcn.1001eed0
push 0x61
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 0x3ec], al
call fcn.1001eed0
push 0x6b
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 0x3eb], al
call fcn.1001eed0
push 0x65
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 0x3ea], al
call fcn.1001eed0
push 0x20
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 0x3e9], al
call fcn.1001eed0
push 0x62
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 0x3e8], al
call fcn.1001eed0
push 0x6f
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 0x3e7], al
call fcn.1001eed0
push 0x64
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 0x3e6], al
call fcn.1001eed0
push 0x79
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 0x3e5], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 0x3e4], al
call fcn.1001eed0
mov byte [ebp - 0x3e3], al
xor edi, edi
nop dword [eax + eax]
push edi
lea ecx, [ebp - 0x3ec]
call fcn.1001d6b0
push edi
lea ecx, [ebp - 0x3ec]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc edi
mov byte [eax], cl
cmp edi, 0xa
jb 0x1004e860
lea ecx, [ebp - 0x3ec]
call fcn.10018960
push eax
lea ecx, [ebp - 0x1048]
call fcn.1001d770
lea eax, [ebp - 0x1060]
mov byte [ebp - 4], 0xd4
push eax
lea ecx, [esi + 0x17f8]
call fcn.10036880
lea eax, [ebp - 0x1048]
mov byte [esi + 0x1829], 1
push eax
lea ecx, [esi + 0x1830]
call fcn.10036880
xor ecx, ecx
mov eax, 0xf
cmp byte [esi + 0x1829], cl
cmovne ecx, eax
mov dword [esi + 0x185c], ecx
lea eax, [ecx + 0x14]
mov dword [esi + 0x17d0], eax
lea ecx, [ebp - 0x83c]
mov dword [esi + 0x17d4], eax
call fcn.1001d260
lea ecx, [ebp - 0x83c]
mov edi, eax
call fcn.1001d250
mov dword [ebp - 0x1e8], eax
lea ecx, [esi + 0x1848]
cmp edi, eax
je 0x1004e944
mov esi, ecx
push edi
mov ecx, esi
call fcn.1003bf50
add edi, 0x18
cmp edi, dword [ebp - 0x1e8]
jne 0x1004e925
mov esi, dword [ebp - 0x1e4]
lea ecx, [esi + 0x1848]
call fcn.10022330
test eax, eax
je 0x1004e957
mov dword [esi + 0x1858], 0
lea ecx, [ebp - 0x1048]
call fcn.1001d720
lea ecx, [ebp - 0x1060]
call fcn.1001d720
lea ecx, [ebp - 0x83c]
call fcn.1003bfc0
push fcn.1001d720
push 4
push 0x18
lea eax, [ebp - 0x1600]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100b5186
lea eax, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], 0x10021a00
lea edi, [esi + 0x17c0]
push eax
lea ecx, [edi + 0x58]
call fcn.1002e380
lea eax, [ebp - 0x1b8]
mov dword [ebp - 0x1b8], 0x10021a10
push eax
lea ecx, [edi + 0x58]
call fcn.1002e380
mov dword [ebp - 0x20], edi
mov dword [edi + 0x18], 0
mov ecx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x1e4]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x20]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x20]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x20]
push eax
lea ecx, [edi + 0x18]
call fcn.1002e380
lea ecx, [ebp - 0x7d4]
call fcn.10018960
push 0x6f
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0x1e0], eax
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x20c]
mov byte [ebp - 0x20c], al
call fcn.1001eed0
push 0x66
lea ecx, [ebp - 0x20c]
mov byte [ebp - 0x20b], al
call fcn.1001eed0
push 0
lea ecx, [ebp - 0x20c]
mov byte [ebp - 0x20a], al
call fcn.1001eed0
mov byte [ebp - 0x209], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x20c]
call fcn.1001d6b0
push esi
lea ecx, [ebp - 0x20c]
mov al, byte [eax]
xor al, 0xa2
mov byte [ebp - 0x1d9], al
call fcn.1001d6b0
mov cl, byte [ebp - 0x1d9]
inc esi
mov byte [eax], cl
cmp esi, 4
jb 0x1004ea70