Function at 0x1005d100
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f5fef
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1160
call fcn.100f1590
mov eax, dword [0x101110c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xf0], edi
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xbd0]
mov dword [ebp - 0x458], 0x69746e61
mov dword [ebp - 0x454], 0x6d69612d
mov byte [ebp - 0x450], 0
call fcn.1002cd70
lea ecx, [ebp - 0x458]
mov dword [ebp - 4], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d186
sub ecx, edx
lea eax, [ebp - 0x458]
push ecx
push eax
lea ecx, [ebp - 0xbd0]
call fcn.1002cd90
lea eax, [ebp - 0xbd0]
mov dword [ebp - 4], 1
push eax
mov ecx, edi
call fcn.10047df0
lea ecx, [ebp - 0xbd0]
call fcn.1002b9c0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x6f0]
mov dword [ebp - 0x380], 0x62616e65
lea esi, [edi + 0x30]
mov word [ebp - 0x37c], 0x656c
mov byte [ebp - 0x37a], 0
call fcn.1002cd70
lea ecx, [ebp - 0x380]
mov dword [ebp - 4], 2
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d200
sub ecx, edx
lea eax, [ebp - 0x380]
push ecx
push eax
lea ecx, [ebp - 0x6f0]
call fcn.1002cd90
mov dword [ebp - 4], 3
lea ecx, [ebp - 0xbe8]
push dword [ebp - 0x1c]
mov dword [ebp - 0x388], 0x62616e65
mov word [ebp - 0x384], 0x656c
mov byte [ebp - 0x382], 0
call fcn.1002cd70
lea ecx, [ebp - 0x388]
mov byte [ebp - 4], 4
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d258
sub ecx, edx
lea eax, [ebp - 0x388]
push ecx
push eax
lea ecx, [ebp - 0xbe8]
call fcn.1002cd90
lea eax, [ebp - 0x6f0]
mov byte [ebp - 4], 5
push eax
lea ecx, [edi + 0x68]
call fcn.10047df0
lea eax, [ebp - 0xbe8]
mov byte [edi + 0x99], 1
push eax
lea ecx, [edi + 0xa0]
call fcn.10047df0
lea ecx, [ebp - 0xbe8]
mov byte [edi + 0x9c], 0
call fcn.1002b9c0
lea ecx, [ebp - 0x6f0]
mov dword [ebp - 4], 0xffffffff
call fcn.1002b9c0
mov dword [ebp - 0x7c], esi
lea ecx, [ebp - 0x7c]
mov dword [edi + 0x48], 0
imul eax, dword [edi + 0x48], 0xeb
push ecx
lea ecx, [edi + 0x18]
add eax, 0x14
mov dword [edi + 0x34], eax
mov dword [edi + 0x3c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x4c], eax
call fcn.10043d10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1038]
mov dword [ebp - 0x2f8], 0x6e776f64
mov byte [ebp - 0x2f4], 0
call fcn.1002cd70
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 4], 6
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d323
sub ecx, edx
lea eax, [ebp - 0x2f8]
push ecx
push eax
lea ecx, [ebp - 0x1038]
call fcn.1002cd90
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x1020]
push dword [ebp - 0x1c]
mov word [ebp - 0x2e0], 0x7075
mov byte [ebp - 0x2de], 0
call fcn.1002cd70
lea ecx, [ebp - 0x2e0]
mov byte [ebp - 4], 8
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d371
sub ecx, edx
lea eax, [ebp - 0x2e0]
push ecx
push eax
lea ecx, [ebp - 0x1020]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1008]
mov dword [ebp - 0x300], 0x6f72657a
mov byte [ebp - 0x2fc], 0
call fcn.1002cd70
lea ecx, [ebp - 0x300]
mov byte [ebp - 4], 0xa
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d3c0
sub ecx, edx
lea eax, [ebp - 0x300]
push ecx
push eax
lea ecx, [ebp - 0x1008]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xff0]
mov dword [ebp - 0x390], 0x646e6172
mov word [ebp - 0x38c], 0x6d6f
mov byte [ebp - 0x38a], 0
call fcn.1002cd70
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], 0xc
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d411
sub ecx, edx
lea eax, [ebp - 0x390]
push ecx
push eax
lea ecx, [ebp - 0xff0]
call fcn.1002cd90
lea eax, [ebp - 0x4c9]
mov dword [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0xfd8]
push ecx
lea edx, [ebp - 0x1038]
push edx
lea ecx, [ebp - 0x684]
call fcn.100becd0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x720]
mov dword [ebp - 0x348], 0x63746970
mov word [ebp - 0x344], 0x68
call fcn.1002cd70
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d482
sub ecx, edx
lea eax, [ebp - 0x348]
push ecx
push eax
lea ecx, [ebp - 0x720]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x708]
mov dword [ebp - 0x350], 0x63746970
mov word [ebp - 0x34c], 0x68
call fcn.1002cd70
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0x11
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d4d0
sub ecx, edx
lea eax, [ebp - 0x350]
push ecx
push eax
lea ecx, [ebp - 0x708]
call fcn.1002cd90
lea eax, [ebp - 0x720]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [edi + 0xf0]
call fcn.10047df0
lea eax, [ebp - 0x708]
mov byte [edi + 0x121], 1
push eax
lea ecx, [edi + 0x128]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x121], al
cmovne eax, ecx
mov dword [edi + 0x154], eax
add eax, 0x14
mov dword [edi + 0xc8], eax
mov dword [edi + 0xcc], eax
lea eax, [edi + 0x140]
mov ecx, dword [ebp - 0x680]
mov esi, dword [ebp - 0x684]
mov dword [ebp - 0xe4], ecx
cmp esi, ecx
je 0x1005d57f
mov edi, eax
nop
push esi
mov ecx, edi
call fcn.1004f0e0
add esi, 0x18
cmp esi, dword [ebp - 0xe4]
jne 0x1005d560
mov edi, dword [ebp - 0xf0]
lea eax, [edi + 0x140]
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1005d5a1
mov dword [edi + 0x150], 0
lea ecx, [ebp - 0x708]
call fcn.1002b9c0
lea ecx, [ebp - 0x720]
call fcn.1002b9c0
lea ecx, [ebp - 0x684]
call fcn.1002bcb0
push fcn.1002b9c0
push 4
push 0x18
lea eax, [ebp - 0x1038]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100f036c
lea eax, [edi + 0xb8]
mov dword [ebp - 0x84], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xd0], 0
imul eax, dword [edi + 0xd0], 0xeb
add eax, 0x14
mov dword [edi + 0xbc], eax
mov dword [edi + 0xc4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xd4], eax
lea eax, [ebp - 0x84]
push eax
call fcn.10043d10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc18]
mov dword [ebp - 0x488], 0x6b636162
mov dword [ebp - 0x484], 0x64726177
mov word [ebp - 0x480], 0x73
call fcn.1002cd70
lea ecx, [ebp - 0x488]
mov dword [ebp - 4], 0x13
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d664
sub ecx, edx
lea eax, [ebp - 0x488]
push ecx
push eax
lea ecx, [ebp - 0xc18]
call fcn.1002cd90
mov dword [ebp - 4], 0x14
xor ecx, ecx
mov dword [ebp - 0x340], 0xc1dfc2da
mov dword [ebp - 0x33c], 0xc8d78dc9
mov word [ebp - 0x338], 0xc2df
mov byte [ebp - 0x336], 0xad
nop dword [eax]
xor byte [ebp + ecx - 0x340], 0xad
inc ecx
cmp ecx, 0xb
jb 0x1005d6b0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc00]
call fcn.1002cd70
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x15
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d6e0
sub ecx, edx
lea eax, [ebp - 0x340]
push ecx
push eax
lea ecx, [ebp - 0xc00]
call fcn.1002cd90
lea eax, [ebp - 0x4a1]
mov dword [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0xbe8]
push ecx
lea edx, [ebp - 0xc18]
push edx
lea ecx, [ebp - 0x6a4]
call fcn.100becd0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x750]
mov dword [ebp - 0x464], 0x65736162
mov dword [ebp - 0x460], 0x7761795f
mov byte [ebp - 0x45c], 0
call fcn.1002cd70
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 0x18
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d760
sub ecx, edx
lea eax, [ebp - 0x464]
push ecx
push eax
lea ecx, [ebp - 0x750]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x738]
mov dword [ebp - 0x470], 0x65736162
mov dword [ebp - 0x46c], 0x77617920
mov byte [ebp - 0x468], 0
call fcn.1002cd70
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x1a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d7b2
sub ecx, edx
lea eax, [ebp - 0x470]
push ecx
push eax
lea ecx, [ebp - 0x738]
call fcn.1002cd90
lea eax, [ebp - 0x750]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [edi + 0x190]
call fcn.10047df0
lea eax, [ebp - 0x738]
mov byte [edi + 0x1c1], 1
push eax
lea ecx, [edi + 0x1c8]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x1c1], al
cmovne eax, ecx
mov dword [edi + 0x1f4], eax
add eax, 0x14
mov dword [edi + 0x168], eax
mov dword [edi + 0x16c], eax
mov eax, dword [ebp - 0x6a0]
mov esi, dword [ebp - 0x6a4]
mov dword [ebp - 0xe4], eax
cmp esi, eax
je 0x1005d86b
lea eax, [edi + 0x1e0]
mov edi, dword [ebp - 0xe4]
mov dword [ebp - 0xe8], eax
nop word [eax + eax]
push esi
mov ecx, eax
call fcn.1004f0e0
mov eax, dword [ebp - 0xe8]
add esi, 0x18
cmp esi, edi
jne 0x1005d850
mov edi, dword [ebp - 0xf0]
mov ecx, dword [edi + 0x1e4]
mov eax, 0x2aaaaaab
sub ecx, dword [edi + 0x1e0]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1005d894
mov dword [edi + 0x1f0], 0
lea ecx, [ebp - 0x738]
call fcn.1002b9c0
lea ecx, [ebp - 0x750]
call fcn.1002b9c0
lea ecx, [ebp - 0x6a4]
call fcn.1002bcb0
push fcn.1002b9c0
push 2
push 0x18
lea eax, [ebp - 0xc18]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100f036c
lea eax, [edi + 0x158]
mov dword [ebp - 0x88], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x170], 0
imul eax, dword [edi + 0x170], 0xeb
add eax, 0x14
mov dword [edi + 0x15c], eax
mov dword [edi + 0x164], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x174], eax
lea eax, [ebp - 0x88]
push eax
call fcn.10043d10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x798]
mov dword [ebp - 0x4ac], 0xb0
lea esi, [edi + 0x1f8]
call fcn.1002cd70
lea ecx, [ebp - 0x4ac]
mov dword [ebp - 4], 0x1c
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1005d950
sub ecx, edx
lea eax, [ebp - 0x4ac]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x798]
call fcn.1004f120
mov dword [ebp - 4], 0x1d
lea ecx, [ebp - 0x780]
movaps xmm0, xmmword [0x10105130]
xorps xmm0, xmmword [0x101051e0]
push dword [ebp - 0x1c]
movups xmmword [ebp - 0x6d8], xmm0
call fcn.1002cd70
lea ecx, [ebp - 0x6d8]
mov byte [ebp - 4], 0x1e
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d9b0
sub ecx, edx
lea eax, [ebp - 0x6d8]
push ecx
push eax
lea ecx, [ebp - 0x780]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x768]
call fcn.1002cd70
push 6
push str.offset
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0x20
call fcn.1002cd90
lea eax, [ebp - 0x780]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [edi + 0x230]
call fcn.10047df0
lea eax, [ebp - 0x768]
mov byte [edi + 0x261], 1
push eax
lea ecx, [edi + 0x280]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x261], al
cmovne eax, ecx
lea ecx, [edi + 0x298]
mov dword [edi + 0x2b0], eax
add eax, 8
mov dword [edi + 0x208], eax
mov dword [edi + 0x20c], eax
lea eax, [ebp - 0x798]
mov dword [edi + 0x26c], 0xc3340000
mov dword [edi + 0x270], 0x43340000
mov dword [edi + 0x268], 0
mov dword [edi + 0x27c], 0
push eax
mov dword [edi + 0x274], 0x3f800000
call fcn.100beff0
lea ecx, [ebp - 0x768]
call fcn.1002b9c0
lea ecx, [ebp - 0x780]
call fcn.1002b9c0
lea ecx, [ebp - 0x798]
mov dword [ebp - 4], 0xffffffff
call fcn.1004edc0
mov dword [ebp - 0x8c], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x210], 0
imul eax, dword [edi + 0x210], 0xeb
add eax, 0x14
mov dword [edi + 0x1fc], eax
mov dword [edi + 0x204], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x214], eax
lea eax, [ebp - 0x8c]
push eax
call fcn.10043d10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xf48]
mov dword [ebp - 0x308], 0x656e6f6e
mov byte [ebp - 0x304], 0
call fcn.1002cd70
lea ecx, [ebp - 0x308]
mov dword [ebp - 4], 0x22
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005db24
sub ecx, edx
lea eax, [ebp - 0x308]
push ecx
push eax
lea ecx, [ebp - 0xf48]
call fcn.1002cd90
mov dword [ebp - 4], 0x23
lea ecx, [ebp - 0xf30]
push dword [ebp - 0x1c]
mov dword [ebp - 0x398], 0x7474696a
mov word [ebp - 0x394], 0x7265
mov byte [ebp - 0x392], 0
call fcn.1002cd70
lea ecx, [ebp - 0x398]
mov byte [ebp - 4], 0x24
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005db80
sub ecx, edx
lea eax, [ebp - 0x398]
push ecx
push eax
lea ecx, [ebp - 0xf30]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xf18]
mov dword [ebp - 0x3a0], 0x61746f72
mov word [ebp - 0x39c], 0x6574
mov byte [ebp - 0x39a], 0
call fcn.1002cd70
lea ecx, [ebp - 0x3a0]
mov byte [ebp - 4], 0x26
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005dbd1
sub ecx, edx
lea eax, [ebp - 0x3a0]
push ecx
push eax
lea ecx, [ebp - 0xf18]
call fcn.1002cd90
lea eax, [ebp - 0x4a2]
mov dword [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0xf00]
push ecx
lea edx, [ebp - 0xf48]
push edx
lea ecx, [ebp - 0x6b0]
call fcn.100becd0
movaps xmm0, xmmword [0x10105130]
mov ecx, 0x10
xorps xmm0, xmmword [0x10105540]
mov word [ebp - 0x5f0], 0xdedf
mov byte [ebp - 0x5ee], 0xad
movups xmmword [ebp - 0x600], xmm0
nop
xor byte [ebp + ecx - 0x600], 0xad
inc ecx
cmp ecx, 0x13
jb 0x1005dc40
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x7c8]
call fcn.1002cd70
lea ecx, [ebp - 0x600]
mov byte [ebp - 4], 0x29
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005dc70
sub ecx, edx
lea eax, [ebp - 0x600]
push ecx
push eax
lea ecx, [ebp - 0x7c8]
call fcn.1002cd90
mov dword [ebp - 0x400], 0x8ddaccd4
xor ecx, ecx
mov dword [ebp - 0x3fc], 0xc4c9c2c0
mov dword [ebp - 0x3f8], 0xdfc8c4cb
mov word [ebp - 0x3f4], 0xadde
nop word [eax + eax]
xor byte [ebp + ecx - 0x400], 0xad
inc ecx
cmp ecx, 0xe
jb 0x1005dcc0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x7b0]
call fcn.1002cd70
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x2b
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005dcf0
sub ecx, edx
lea eax, [ebp - 0x400]
push ecx
push eax
lea ecx, [ebp - 0x7b0]
call fcn.1002cd90
lea eax, [ebp - 0x7c8]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [edi + 0x2ec]
call fcn.10047df0
lea eax, [ebp - 0x7b0]
mov byte [edi + 0x31d], 1
push eax
lea ecx, [edi + 0x324]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x31d], al
cmovne eax, ecx
mov dword [edi + 0x350], eax
add eax, 0x14
mov dword [edi + 0x2c4], eax
mov dword [edi + 0x2c8], eax
mov eax, dword [ebp - 0x6ac]
mov esi, dword [ebp - 0x6b0]
mov dword [ebp - 0xe4], eax
cmp esi, eax
je 0x1005dda3
lea eax, [edi + 0x33c]
mov edi, dword [ebp - 0xe4]
mov dword [ebp - 0xe8], eax
push esi
mov ecx, eax
call fcn.1004f0e0
mov eax, dword [ebp - 0xe8]
add esi, 0x18
cmp esi, edi
jne 0x1005dd88
mov edi, dword [ebp - 0xf0]
mov ecx, dword [edi + 0x340]
mov eax, 0x2aaaaaab
sub ecx, dword [edi + 0x33c]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1005ddcc
mov dword [edi + 0x34c], 0
lea ecx, [ebp - 0x7b0]
call fcn.1002b9c0
lea ecx, [ebp - 0x7c8]
call fcn.1002b9c0
lea ecx, [ebp - 0x6b0]
call fcn.1002bcb0
push fcn.1002b9c0
push 3
push 0x18
lea eax, [ebp - 0xf48]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100f036c
lea eax, [edi + 0x2b4]
mov dword [ebp - 0x90], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x2cc], 0
imul eax, dword [edi + 0x2cc], 0xeb
add eax, 0x14
mov dword [edi + 0x2b8], eax
mov dword [edi + 0x2c0], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x2d0], eax
lea eax, [ebp - 0x90]
push eax
call fcn.10043d10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x810]
mov dword [ebp - 0x4b0], 0xb0
lea esi, [edi + 0x354]
call fcn.1002cd70
lea ecx, [ebp - 0x4b0]
mov dword [ebp - 4], 0x2d
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1005de82
sub ecx, edx
lea eax, [ebp - 0x4b0]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x810]
call fcn.1004f120
mov dword [ebp - 4], 0x2e
xor ecx, ecx
mov dword [ebp - 0x440], 0xc4c9c2c0
mov dword [ebp - 0x43c], 0xdfc8c4cb
mov dword [ebp - 0x438], 0xc3ccdff2
mov word [ebp - 0x434], 0xc8ca
mov byte [ebp - 0x432], 0xad
nop dword [eax + eax]
xor byte [ebp + ecx - 0x440], 0xad
inc ecx
cmp ecx, 0xf
jb 0x1005dee0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x7f8]
call fcn.1002cd70
lea ecx, [ebp - 0x440]
mov byte [ebp - 4], 0x2f
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005df10
sub ecx, edx
lea eax, [ebp - 0x440]
push ecx
push eax
lea ecx, [ebp - 0x7f8]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x7e0]
call fcn.1002cd70
push 5
push str.range
lea ecx, [ebp - 0x7e0]
mov byte [ebp - 4], 0x31
call fcn.1002cd90
lea eax, [ebp - 0x7f8]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [edi + 0x38c]
call fcn.10047df0
lea eax, [ebp - 0x7e0]
mov byte [edi + 0x3bd], 1
push eax
lea ecx, [edi + 0x3dc]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x3bd], al
cmovne eax, ecx
lea ecx, [edi + 0x3f4]
mov dword [edi + 0x40c], eax
add eax, 8
mov dword [edi + 0x364], eax
mov dword [edi + 0x368], eax
lea eax, [ebp - 0x810]
mov dword [edi + 0x3c8], 0xc3340000
mov dword [edi + 0x3cc], 0x43340000
mov dword [edi + 0x3c4], 0
mov dword [edi + 0x3d8], 0
push eax
mov dword [edi + 0x3d0], 0x3f800000
call fcn.100beff0
lea ecx, [ebp - 0x7e0]
call fcn.1002b9c0
lea ecx, [ebp - 0x7f8]
call fcn.1002b9c0
lea ecx, [ebp - 0x810]
mov dword [ebp - 4], 0xffffffff
call fcn.1004edc0
lea eax, [ebp - 0x94]
mov dword [ebp - 0x94], 0x10033030
lea ecx, [esi + 0x58]
push eax
call fcn.10043d10
mov dword [ebp - 0x98], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x36c], 0
imul eax, dword [edi + 0x36c], 0xeb
add eax, 0x14
mov dword [edi + 0x358], eax
mov dword [edi + 0x360], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x370], eax
lea eax, [ebp - 0x98]
push eax
call fcn.10043d10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x858]
mov dword [ebp - 0x4b4], 0x25
lea esi, [edi + 0x410]
call fcn.1002cd70
lea ecx, [ebp - 0x4b4]
mov dword [ebp - 4], 0x33
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1005e0a0
sub ecx, edx
lea eax, [ebp - 0x4b4]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x858]
call fcn.1004f120
mov dword [ebp - 4], 0x34
xor ecx, ecx
mov dword [ebp - 0x430], 0xc4c9c2c0
mov dword [ebp - 0x42c], 0xdfc8c4cb
mov dword [ebp - 0x428], 0xc8dddef2
mov word [ebp - 0x424], 0xc9c8
mov byte [ebp - 0x422], 0xad
nop dword [eax]
xor byte [ebp + ecx - 0x430], 0xad
inc ecx
cmp ecx, 0xf
jb 0x1005e100
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x840]
call fcn.1002cd70
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 0x35
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e130
sub ecx, edx
lea eax, [ebp - 0x430]
push ecx
push eax
lea ecx, [ebp - 0x840]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x828]
call fcn.1002cd70
push 5
push str.speed
lea ecx, [ebp - 0x828]
mov byte [ebp - 4], 0x37
call fcn.1002cd90
lea eax, [ebp - 0x840]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [edi + 0x448]
call fcn.10047df0
lea eax, [ebp - 0x828]
mov byte [edi + 0x479], 1
push eax
lea ecx, [edi + 0x498]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x479], al
cmovne eax, ecx
lea ecx, [edi + 0x4b0]
mov dword [edi + 0x4c8], eax
add eax, 8
mov dword [edi + 0x420], eax
mov dword [edi + 0x424], eax
lea eax, [ebp - 0x858]
mov dword [edi + 0x484], 0
mov dword [edi + 0x488], 0x42c80000
mov dword [edi + 0x480], 0
mov dword [edi + 0x494], 0
push eax
mov dword [edi + 0x48c], 0x3f800000
call fcn.100beff0
lea ecx, [ebp - 0x828]
call fcn.1002b9c0
lea ecx, [ebp - 0x840]
call fcn.1002b9c0
lea ecx, [ebp - 0x858]
mov dword [ebp - 4], 0xffffffff
call fcn.1004edc0
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0x10033040
lea ecx, [esi + 0x58]
push eax
call fcn.10043d10
mov dword [ebp - 0xa0], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x428], 0
imul eax, dword [edi + 0x428], 0xeb
add eax, 0x14
mov dword [edi + 0x414], eax
mov dword [edi + 0x41c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x42c], eax
lea eax, [ebp - 0xa0]
push eax
call fcn.10043d10
lea esi, [edi + 0x4cc]
mov dword [ebp - 0x410], 0xc8c8dfcb
mov dword [ebp - 0x40c], 0xc3ccd9de
xor ecx, ecx
mov dword [ebp - 0x408], 0xccd4f2c9
mov word [ebp - 0x404], 0xadda
nop word [eax + eax]
xor byte [ebp + ecx - 0x410], 0xad
inc ecx
cmp ecx, 0xe
jb 0x1005e2c0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x888]
call fcn.1002cd70
lea ecx, [ebp - 0x410]
mov dword [ebp - 4], 0x39
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e2f0
sub ecx, edx
lea eax, [ebp - 0x410]
push ecx
push eax
lea ecx, [ebp - 0x888]
call fcn.1002cd90
mov dword [ebp - 4], 0x3a
xor ecx, ecx
mov dword [ebp - 0x368], 0xc8c8dfcb
mov dword [ebp - 0x364], 0xc3ccd9de
mov dword [ebp - 0x360], 0xcac3c4c9
mov byte [ebp - 0x35c], 0xad
nop word [eax + eax]
xor byte [ebp + ecx - 0x368], 0xad
inc ecx
cmp ecx, 0xd
jb 0x1005e340
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x870]
call fcn.1002cd70
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 0x3b
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e370
sub ecx, edx
lea eax, [ebp - 0x368]
push ecx
push eax
lea ecx, [ebp - 0x870]
call fcn.1002cd90
lea eax, [ebp - 0x888]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [edi + 0x504]
call fcn.10047df0
lea eax, [ebp - 0x870]
mov byte [edi + 0x535], 1
push eax
lea ecx, [edi + 0x53c]
call fcn.10047df0
lea ecx, [ebp - 0x870]
mov byte [edi + 0x538], 0
call fcn.1002b9c0
lea ecx, [ebp - 0x888]
mov dword [ebp - 4], 0xffffffff
call fcn.1002b9c0
mov dword [ebp - 0x3c], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x4e4], 0
imul eax, dword [edi + 0x4e4], 0xeb
add eax, 0x14
mov dword [edi + 0x4d0], eax
mov dword [edi + 0x4d8], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x4e8], eax
lea eax, [ebp - 0x3c]
push eax
call fcn.10043d10
movaps xmm0, xmmword [0x10105130]
lea esi, [edi + 0x554]
xorps xmm0, xmmword [0x10105670]
mov ecx, 0x10
mov dword [ebp - 0x5b0], 0xc3d4dec8
mov word [ebp - 0x5ac], 0xadce
movups xmmword [ebp - 0x5c0], xmm0
xor byte [ebp + ecx - 0x5c0], 0xad
inc ecx
cmp ecx, 0x16
jb 0x1005e451
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x8b8]
call fcn.1002cd70
lea ecx, [ebp - 0x5c0]
mov dword [ebp - 4], 0x3d
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e480
sub ecx, edx
lea eax, [ebp - 0x5c0]
push ecx
push eax
lea ecx, [ebp - 0x8b8]
call fcn.1002cd90
mov dword [ebp - 4], 0x3e
mov ecx, 0x10
movaps xmm0, xmmword [0x10105130]
xorps xmm0, xmmword [0x10105570]
mov dword [ebp - 0x550], 0xd48dd9c8
mov word [ebp - 0x54c], 0xdacc
mov byte [ebp - 0x54a], 0xad
movups xmmword [ebp - 0x560], xmm0
nop word [eax + eax]
xor byte [ebp + ecx - 0x560], 0xad
inc ecx
cmp ecx, 0x17
jb 0x1005e4e0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x8a0]
call fcn.1002cd70
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x3f
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e510
sub ecx, edx
lea eax, [ebp - 0x560]
push ecx
push eax
lea ecx, [ebp - 0x8a0]
call fcn.1002cd90
lea eax, [ebp - 0x8b8]
mov byte [ebp - 4], 0x40
push eax
lea ecx, [edi + 0x58c]
call fcn.10047df0
lea eax, [ebp - 0x8a0]
mov byte [edi + 0x5bd], 1
push eax
lea ecx, [edi + 0x5c4]
call fcn.10047df0
lea ecx, [ebp - 0x8a0]
mov byte [edi + 0x5c0], 0
call fcn.1002b9c0
lea ecx, [ebp - 0x8b8]
mov dword [ebp - 4], 0xffffffff
call fcn.1002b9c0
mov dword [ebp - 0xa8], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x56c], 0
imul eax, dword [edi + 0x56c], 0xeb
add eax, 0x14
mov dword [edi + 0x558], eax
mov dword [edi + 0x560], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x570], eax
lea eax, [ebp - 0xa8]
push eax
call fcn.10043d10
movaps xmm0, xmmword [0x10105130]
lea esi, [edi + 0x5dc]
xorps xmm0, xmmword [0x10105620]
mov ecx, 0x10
mov dword [ebp - 0x5c8], 0xc3c8d9d5
mov word [ebp - 0x5c4], 0xadc9
movups xmmword [ebp - 0x5d8], xmm0
nop word [eax + eax]
xor byte [ebp + ecx - 0x5d8], 0xad
inc ecx
cmp ecx, 0x16
jb 0x1005e600
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x8e8]
call fcn.1002cd70
lea ecx, [ebp - 0x5d8]
mov dword [ebp - 4], 0x41
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e630
sub ecx, edx
lea eax, [ebp - 0x5d8]
push ecx
push eax
lea ecx, [ebp - 0x8e8]
call fcn.1002cd90
mov dword [ebp - 4], 0x42
mov ecx, 0x10
movaps xmm0, xmmword [0x10105130]
xorps xmm0, xmmword [0x10105490]
mov word [ebp - 0x604], 0xc8c0
mov byte [ebp - 0x602], 0xad
movups xmmword [ebp - 0x614], xmm0
nop dword [eax]
xor byte [ebp + ecx - 0x614], 0xad
inc ecx
cmp ecx, 0x13
jb 0x1005e680
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x8d0]
call fcn.1002cd70
lea ecx, [ebp - 0x614]
mov byte [ebp - 4], 0x43
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e6b0
sub ecx, edx
lea eax, [ebp - 0x614]
push ecx
push eax
lea ecx, [ebp - 0x8d0]
call fcn.1002cd90
lea eax, [ebp - 0x8e8]
mov byte [ebp - 4], 0x44
push eax
lea ecx, [edi + 0x614]
call fcn.10047df0
lea eax, [ebp - 0x8d0]
mov byte [edi + 0x645], 1
push eax
lea ecx, [edi + 0x64c]
call fcn.10047df0
lea ecx, [ebp - 0x8d0]
mov byte [edi + 0x648], 0
call fcn.1002b9c0
lea ecx, [ebp - 0x8e8]
mov dword [ebp - 4], 0xffffffff
call fcn.1002b9c0
lea eax, [ebp - 0xac]
mov dword [ebp - 0xac], 0x10033020
lea ecx, [esi + 0x58]
push eax
call fcn.10043d10
mov dword [ebp - 0xb0], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x5f4], 0
imul eax, dword [edi + 0x5f4], 0xeb
add eax, 0x14
mov dword [edi + 0x5e0], eax
mov dword [edi + 0x5e8], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x5f8], eax
lea eax, [ebp - 0xb0]
push eax
call fcn.10043d10
movaps xmm0, xmmword [0x10105130]
lea esi, [edi + 0x664]
xorps xmm0, xmmword [0x10105660]
mov ecx, 0x10
mov dword [ebp - 0x4dc], 0xcfccdec4
mov dword [ebp - 0x4d8], 0xc2f2c8c1
mov dword [ebp - 0x4d4], 0xc8ddf2c3
mov word [ebp - 0x4d0], 0xc6c8
mov byte [ebp - 0x4ce], 0xad
movups xmmword [ebp - 0x4ec], xmm0
nop dword [eax + eax]
xor byte [ebp + ecx - 0x4ec], 0xad
inc ecx
cmp ecx, 0x1f
jb 0x1005e7d0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x918]
call fcn.1002cd70
lea ecx, [ebp - 0x4ec]
mov dword [ebp - 4], 0x45
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e800
sub ecx, edx
lea eax, [ebp - 0x4ec]
push ecx
push eax
lea ecx, [ebp - 0x918]
call fcn.1002cd90
mov dword [ebp - 4], 0x46
mov ecx, 0x10
movaps xmm0, xmmword [0x10105130]
xorps xmm0, xmmword [0x10105360]
mov dword [ebp - 0x580], 0xc8dd8dc3
mov word [ebp - 0x57c], 0xc6c8
mov byte [ebp - 0x57a], 0xad
movups xmmword [ebp - 0x590], xmm0
nop word [eax + eax]
xor byte [ebp + ecx - 0x590], 0xad
inc ecx
cmp ecx, 0x17
jb 0x1005e860
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x900]
call fcn.1002cd70
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x47
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e890
sub ecx, edx
lea eax, [ebp - 0x590]
push ecx
push eax
lea ecx, [ebp - 0x900]
call fcn.1002cd90
lea eax, [ebp - 0x918]
mov byte [ebp - 4], 0x48
push eax
lea ecx, [edi + 0x69c]
call fcn.10047df0
lea eax, [ebp - 0x900]
mov byte [edi + 0x6cd], 1
push eax
lea ecx, [edi + 0x6d4]
call fcn.10047df0
lea ecx, [ebp - 0x900]
mov byte [edi + 0x6d0], 0
call fcn.1002b9c0
lea ecx, [ebp - 0x918]
mov dword [ebp - 4], 0xffffffff
call fcn.1002b9c0
lea eax, [ebp - 0xb4]
mov dword [ebp - 0xb4], 0x10033020
lea ecx, [esi + 0x58]
push eax
call fcn.10043d10
mov dword [ebp - 0xb8], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x67c], 0
imul eax, dword [edi + 0x67c], 0xeb
add eax, 0x14
mov dword [edi + 0x668], eax
mov dword [edi + 0x670], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x680], eax
lea eax, [ebp - 0xb8]
push eax
call fcn.10043d10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xf90]
mov dword [ebp - 0x2f0], 0x656e6f6e
mov byte [ebp - 0x2ec], 0
call fcn.1002cd70
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 4], 0x49
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e990
sub ecx, edx
lea eax, [ebp - 0x2f0]
push ecx
push eax
lea ecx, [ebp - 0xf90]
call fcn.1002cd90
mov dword [ebp - 4], 0x4a
mov ecx, 0x10
movaps xmm0, xmmword [0x10105130]
xorps xmm0, xmmword [0x101055a0]
mov word [ebp - 0x618], 0xadde
movups xmmword [ebp - 0x628], xmm0
nop word [eax + eax]
xor byte [ebp + ecx - 0x628], 0xad
inc ecx
cmp ecx, 0x12
jb 0x1005e9e0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xf78]
call fcn.1002cd70
lea ecx, [ebp - 0x628]
mov byte [ebp - 4], 0x4b
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005ea10
sub ecx, edx
lea eax, [ebp - 0x628]
push ecx
push eax
lea ecx, [ebp - 0xf78]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xf60]
mov dword [ebp - 0x494], 0x61657262
mov dword [ebp - 0x490], 0x626c206b
mov word [ebp - 0x48c], 0x79
call fcn.1002cd70
lea ecx, [ebp - 0x494]
mov byte [ebp - 4], 0x4d
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005ea64
sub ecx, edx
lea eax, [ebp - 0x494]
push ecx
push eax
lea ecx, [ebp - 0xf60]
call fcn.1002cd90
lea eax, [ebp - 0x4a3]
mov dword [ebp - 4], 0x4e
push eax
lea ecx, [ebp - 0xf48]
push ecx
lea edx, [ebp - 0xf90]
push edx
lea ecx, [ebp - 0x6bc]
call fcn.100becd0
mov dword [ebp - 0x420], 0xf2d4cfc1
xor ecx, ecx
mov dword [ebp - 0x41c], 0xc4c9c2c0
mov dword [ebp - 0x418], 0xdfc8c4cb
mov word [ebp - 0x414], 0xadde
xor byte [ebp + ecx - 0x420], 0xad
inc ecx
cmp ecx, 0xe
jb 0x1005ead0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x948]
call fcn.1002cd70
lea ecx, [ebp - 0x420]
mov byte [ebp - 4], 0x50
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005eb00
sub ecx, edx
lea eax, [ebp - 0x420]
push ecx
push eax
lea ecx, [ebp - 0x948]
call fcn.1002cd90
mov dword [ebp - 0x3e0], 0x8dd4cfc1
xor ecx, ecx
mov dword [ebp - 0x3dc], 0xc4c9c2c0
mov dword [ebp - 0x3d8], 0xdfc8c4cb
mov word [ebp - 0x3d4], 0xadde
nop word [eax + eax]
xor byte [ebp + ecx - 0x3e0], 0xad
inc ecx
cmp ecx, 0xe
jb 0x1005eb50
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x930]
call fcn.1002cd70
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 4], 0x52
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005eb80
sub ecx, edx
lea eax, [ebp - 0x3e0]
push ecx
push eax
lea ecx, [ebp - 0x930]
call fcn.1002cd90
lea eax, [ebp - 0x948]
mov byte [ebp - 4], 0x53
push eax
lea ecx, [edi + 0x724]
call fcn.10047df0
lea eax, [ebp - 0x930]
mov byte [edi + 0x755], 1
push eax
lea ecx, [edi + 0x75c]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x755], al
cmovne eax, ecx
mov dword [edi + 0x788], eax
add eax, 0x14
mov dword [edi + 0x6fc], eax
mov dword [edi + 0x700], eax
mov eax, dword [ebp - 0x6b8]
mov esi, dword [ebp - 0x6bc]
mov dword [ebp - 0xe4], eax
cmp esi, eax
je 0x1005ec33
lea eax, [edi + 0x774]
mov edi, dword [ebp - 0xe4]
mov dword [ebp - 0xe8], eax
push esi
mov ecx, eax
call fcn.1004f0e0
mov eax, dword [ebp - 0xe8]
add esi, 0x18
cmp esi, edi
jne 0x1005ec18
mov edi, dword [ebp - 0xf0]
mov ecx, dword [edi + 0x778]
mov eax, 0x2aaaaaab
sub ecx, dword [edi + 0x774]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1005ec5c
mov dword [edi + 0x784], 0
lea ecx, [ebp - 0x930]
call fcn.1002b9c0
lea ecx, [ebp - 0x948]
call fcn.1002b9c0
lea ecx, [ebp - 0x6bc]
call fcn.1002bcb0
push fcn.1002b9c0
push 3
push 0x18
lea eax, [ebp - 0xf90]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100f036c
lea eax, [edi + 0x6ec]
mov dword [ebp - 0xbc], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x704], 0
imul eax, dword [edi + 0x704], 0xeb
add eax, 0x14
mov dword [edi + 0x6f0], eax
mov dword [edi + 0x6f8], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x708], eax
lea eax, [ebp - 0xbc]
push eax
call fcn.10043d10
movaps xmm0, xmmword [0x10105130]
lea esi, [edi + 0x78c]
xorps xmm0, xmmword [0x101058d0]
mov ecx, 0x10
mov dword [ebp - 0x598], 0xc4dbc2c0
mov word [ebp - 0x594], 0xcac3
mov byte [ebp - 0x592], 0xad
movups xmmword [ebp - 0x5a8], xmm0
nop
xor byte [ebp + ecx - 0x5a8], 0xad
inc ecx
cmp ecx, 0x17
jb 0x1005ed20
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x978]
call fcn.1002cd70
lea ecx, [ebp - 0x5a8]
mov dword [ebp - 4], 0x54
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005ed50
sub ecx, edx
lea eax, [ebp - 0x5a8]
push ecx
push eax
lea ecx, [ebp - 0x978]
call fcn.1002cd90
mov dword [ebp - 4], 0x55
mov ecx, 0x10
movaps xmm0, xmmword [0x10105130]
xorps xmm0, xmmword [0x10105a20]
mov dword [ebp - 0x51c], 0xc2c08dd9
mov dword [ebp - 0x518], 0xcac3c4db
mov dword [ebp - 0x514], 0xdaccd48d
mov byte [ebp - 0x510], 0xad
movups xmmword [ebp - 0x52c], xmm0
xor byte [ebp + ecx - 0x52c], 0xad
inc ecx
cmp ecx, 0x1d
jb 0x1005edb2
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x960]
call fcn.1002cd70
lea ecx, [ebp - 0x52c]
mov byte [ebp - 4], 0x56
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005ede0
sub ecx, edx
lea eax, [ebp - 0x52c]
push ecx
push eax
lea ecx, [ebp - 0x960]
call fcn.1002cd90
lea eax, [ebp - 0x978]
mov byte [ebp - 4], 0x57
push eax
lea ecx, [edi + 0x7c4]
call fcn.10047df0
lea eax, [ebp - 0x960]
mov byte [edi + 0x7f5], 1
push eax
lea ecx, [edi + 0x7fc]
call fcn.10047df0
lea ecx, [ebp - 0x960]
mov byte [edi + 0x7f8], 0
call fcn.1002b9c0
lea ecx, [ebp - 0x978]
mov dword [ebp - 4], 0xffffffff
call fcn.1002b9c0
lea eax, [ebp - 0xc0]
mov dword [ebp - 0xc0], 0x10033050
lea ecx, [esi + 0x58]
push eax
call fcn.10043d10
mov dword [ebp - 0xc4], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x7a4], 0
imul eax, dword [edi + 0x7a4], 0xeb
add eax, 0x14
mov dword [edi + 0x790], eax
mov dword [edi + 0x798], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x7a8], eax
lea eax, [ebp - 0xc4]
push eax
call fcn.10043d10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x9c0]
mov dword [ebp - 0x4b8], 0xb0
lea esi, [edi + 0x814]
call fcn.1002cd70
lea ecx, [ebp - 0x4b8]
mov dword [ebp - 4], 0x58
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1005eee0
sub ecx, edx
lea eax, [ebp - 0x4b8]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x9c0]
call fcn.1004f120
mov dword [ebp - 4], 0x59
mov ecx, 0x10
movaps xmm0, xmmword [0x10105130]
xorps xmm0, xmmword [0x101056a0]
mov word [ebp - 0x62c], 0xadc8
movups xmmword [ebp - 0x63c], xmm0
nop dword [eax]
xor byte [ebp + ecx - 0x63c], 0xad
inc ecx
cmp ecx, 0x12
jb 0x1005ef30
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x9a8]
call fcn.1002cd70
lea ecx, [ebp - 0x63c]
mov byte [ebp - 4], 0x5a
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005ef60
sub ecx, edx
lea eax, [ebp - 0x63c]
push ecx
push eax
lea ecx, [ebp - 0x9a8]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x990]
call fcn.1002cd70
push 0x12
push str.lby_breaker_offset
lea ecx, [ebp - 0x990]
mov byte [ebp - 4], 0x5c
call fcn.1002cd90
lea eax, [ebp - 0x9a8]
mov byte [ebp - 4], 0x5d
push eax
lea ecx, [edi + 0x84c]
call fcn.10047df0
lea eax, [ebp - 0x990]
mov byte [edi + 0x87d], 1
push eax
lea ecx, [edi + 0x89c]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x87d], al
cmovne eax, ecx
lea ecx, [edi + 0x8b4]
mov dword [edi + 0x8cc], eax
add eax, 8
mov dword [edi + 0x824], eax
mov dword [edi + 0x828], eax
lea eax, [ebp - 0x9c0]
mov dword [edi + 0x888], 0xc3340000
mov dword [edi + 0x88c], 0x43340000
mov dword [edi + 0x884], 0
mov dword [edi + 0x898], 0
push eax
mov dword [edi + 0x890], 0x3f800000
call fcn.100beff0
lea ecx, [ebp - 0x990]
call fcn.1002b9c0
lea ecx, [ebp - 0x9a8]
call fcn.1002b9c0
lea ecx, [ebp - 0x9c0]
mov dword [ebp - 4], 0xffffffff
call fcn.1004edc0
lea eax, [ebp - 0xc8]
mov dword [ebp - 0xc8], 0x10033060
lea ecx, [esi + 0x58]
push eax
call fcn.10043d10
mov dword [ebp - 0xcc], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x82c], 0
imul eax, dword [edi + 0x82c], 0xeb
add eax, 0x14
mov dword [edi + 0x818], eax
mov dword [edi + 0x820], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x830], eax
lea eax, [ebp - 0xcc]
push eax
call fcn.10043d10
movaps xmm0, xmmword [0x10105130]
lea esi, [edi + 0x8d0]
xorps xmm0, xmmword [0x101052e0]
mov ecx, 0x10
mov dword [ebp - 0x5dc], 0xadc8c9c2
movups xmmword [ebp - 0x5ec], xmm0
nop dword [eax + eax]
xor byte [ebp + ecx - 0x5ec], 0xad
inc ecx
cmp ecx, 0x14
jb 0x1005f0f0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x9f0]
call fcn.1002cd70
lea ecx, [ebp - 0x5ec]
mov dword [ebp - 4], 0x5e
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005f120
sub ecx, edx
lea eax, [ebp - 0x5ec]
push ecx
push eax
lea ecx, [ebp - 0x9f0]
call fcn.1002cd90
mov dword [ebp - 4], 0x5f
mov ecx, 0x10
movaps xmm0, xmmword [0x10105130]
xorps xmm0, xmmword [0x10104c40]
mov dword [ebp - 0x538], 0xccd9c8df
mov dword [ebp - 0x534], 0xc080c9df
mov dword [ebp - 0x530], 0xadc8c9c2
movups xmmword [ebp - 0x548], xmm0
nop dword [eax + eax]
xor byte [ebp + ecx - 0x548], 0xad
inc ecx
cmp ecx, 0x1c
jb 0x1005f180
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x9d8]
call fcn.1002cd70
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x60
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005f1b0
sub ecx, edx
lea eax, [ebp - 0x548]
push ecx
push eax
lea ecx, [ebp - 0x9d8]
call fcn.1002cd90
lea eax, [ebp - 0x9f0]
mov byte [ebp - 4], 0x61
push eax
lea ecx, [edi + 0x908]
call fcn.10047df0
lea eax, [ebp - 0x9d8]
mov byte [edi + 0x939], 1
push eax
lea ecx, [edi + 0x940]
call fcn.10047df0
lea ecx, [ebp - 0x9d8]
mov byte [edi + 0x93c], 0
call fcn.1002b9c0
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 4], 0xffffffff
call fcn.1002b9c0
mov dword [ebp - 0xd0], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x8e8], 1
imul eax, dword [edi + 0x8e8], 0xeb
add eax, 0x14
mov dword [edi + 0x8d4], eax
mov dword [edi + 0x8dc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x8ec], eax
lea eax, [ebp - 0xd0]
push eax
call fcn.10043d10
movaps xmm0, xmmword [0x10105130]
lea esi, [edi + 0x958]
xorps xmm0, xmmword [0x10105be0]
mov ecx, 0x10
mov dword [ebp - 0x568], 0xc1cac3cc
mov word [ebp - 0x564], 0xdec8
mov byte [ebp - 0x562], 0xad
movups xmmword [ebp - 0x578], xmm0
nop
xor byte [ebp + ecx - 0x578], 0xad
inc ecx
cmp ecx, 0x17
jb 0x1005f2a0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xa20]
call fcn.1002cd70
lea ecx, [ebp - 0x578]
mov dword [ebp - 4], 0x62
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005f2d0
sub ecx, edx
lea eax, [ebp - 0x578]
push ecx
push eax
lea ecx, [ebp - 0xa20]
call fcn.1002cd90
mov dword [ebp - 4], 0x63
mov ecx, 0x10
movaps xmm0, xmmword [0x10105130]
xorps xmm0, xmmword [0x10105720]
mov dword [ebp - 0x4fc], 0xc080c9df
mov dword [ebp - 0x4f8], 0x8dc8c9c2
mov dword [ebp - 0x4f4], 0xc1cac3cc
mov word [ebp - 0x4f0], 0xadc8
movups xmmword [ebp - 0x50c], xmm0
xor byte [ebp + ecx - 0x50c], 0xad
inc ecx
cmp ecx, 0x1e
jb 0x1005f334
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xa08]
call fcn.1002cd70
lea ecx, [ebp - 0x50c]
mov byte [ebp - 4], 0x64
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005f360
sub ecx, edx
lea eax, [ebp - 0x50c]
push ecx
push eax
lea ecx, [ebp - 0xa08]
call fcn.1002cd90
lea eax, [ebp - 0xa20]
mov byte [ebp - 4], 0x65
push eax
lea ecx, [edi + 0x990]
call fcn.10047df0
lea eax, [ebp - 0xa08]
mov byte [edi + 0x9c1], 1
push eax
lea ecx, [edi + 0x9c8]
call fcn.10047df0
lea ecx, [ebp - 0xa08]
mov byte [edi + 0x9c4], 0
call fcn.1002b9c0
lea ecx, [ebp - 0xa20]
mov dword [ebp - 4], 0xffffffff
call fcn.1002b9c0
lea eax, [ebp - 0xd4]
mov dword [ebp - 0xd4], 0x10033080
lea ecx, [esi + 0x58]
push eax
call fcn.10043d10
mov dword [ebp - 0xd8], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x970], 1
imul eax, dword [edi + 0x970], 0xeb
add eax, 0x14
mov dword [edi + 0x95c], eax
mov dword [edi + 0x964], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x974], eax
lea eax, [ebp - 0xd8]
push eax
call fcn.10043d10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xa68]
mov dword [ebp - 0x4bc], 0xb0
lea esi, [edi + 0x9e0]
call fcn.1002cd70
lea ecx, [ebp - 0x4bc]
mov dword [ebp - 4], 0x66
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1005f460
sub ecx, edx
lea eax, [ebp - 0x4bc]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xa68]
call fcn.1004f120
mov dword [ebp - 4], 0x67
xor ecx, ecx
mov dword [ebp - 0x378], 0xccd9c8df
mov dword [ebp - 0x374], 0xc2c0c9df
mov dword [ebp - 0x370], 0xd5f2c8c9
mov word [ebp - 0x36c], 0xad9c
xor byte [ebp + ecx - 0x378], 0xad
inc ecx
cmp ecx, 0xe
jb 0x1005f4b2
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xa50]
call fcn.1002cd70
lea ecx, [ebp - 0x378]
mov byte [ebp - 4], 0x68
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005f4e0
sub ecx, edx
lea eax, [ebp - 0x378]
push ecx
push eax
lea ecx, [ebp - 0xa50]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xa38]
call fcn.1002cd70
push 0x13
push str.retard_mode_pitch_1
lea ecx, [ebp - 0xa38]
mov byte [ebp - 4], 0x6a
call fcn.1002cd90
lea eax, [ebp - 0xa50]
mov byte [ebp - 4], 0x6b
push eax
lea ecx, [edi + 0xa18]
call fcn.10047df0
lea eax, [ebp - 0xa38]
mov byte [edi + 0xa49], 1
push eax
lea ecx, [edi + 0xa68]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0xa49], al
cmovne eax, ecx
lea ecx, [edi + 0xa80]
mov dword [edi + 0xa98], eax
add eax, 8
mov dword [edi + 0x9f0], eax
mov dword [edi + 0x9f4], eax
lea eax, [ebp - 0xa68]
mov dword [edi + 0xa54], 0xc2b40000
mov dword [edi + 0xa58], 0x42b40000
mov dword [edi + 0xa50], 0
mov dword [edi + 0xa64], 0
push eax
mov dword [edi + 0xa5c], 0x3f800000
call fcn.100beff0
lea ecx, [ebp - 0xa38]
call fcn.1002b9c0
lea ecx, [ebp - 0xa50]
call fcn.1002b9c0
lea ecx, [ebp - 0xa68]
mov dword [ebp - 4], 0xffffffff
call fcn.1004edc0
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10033080
lea ecx, [esi + 0x58]
push eax
call fcn.10043d10
mov dword [ebp - 0x38], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x9f8], 1
imul eax, dword [edi + 0x9f8], 0xeb
add eax, 0x14
mov dword [edi + 0x9e4], eax
mov dword [edi + 0x9ec], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x9fc], eax
lea eax, [ebp - 0x38]
push eax
call fcn.10043d10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xab0]
mov dword [ebp - 0x4c0], 0xb0
lea esi, [edi + 0xa9c]
call fcn.1002cd70
lea ecx, [ebp - 0x4c0]
mov dword [ebp - 4], 0x6c
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1005f660
sub ecx, edx
lea eax, [ebp - 0x4c0]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xab0]
call fcn.1004f120
mov dword [ebp - 4], 0x6d
xor ecx, ecx
mov dword [ebp - 0x3c0], 0xccd9c8df
mov dword [ebp - 0x3bc], 0xc2c0c9df
mov dword [ebp - 0x3b8], 0xd4f2c8c9
mov word [ebp - 0x3b4], 0xad9c
xor byte [ebp + ecx - 0x3c0], 0xad
inc ecx
cmp ecx, 0xe
jb 0x1005f6b2
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xa98]
call fcn.1002cd70
lea ecx, [ebp - 0x3c0]
mov byte [ebp - 4], 0x6e
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005f6e0
sub ecx, edx
lea eax, [ebp - 0x3c0]
push ecx
push eax
lea ecx, [ebp - 0xa98]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xa80]
call fcn.1002cd70
push 0x11
push str.retard_mode_yaw_1
lea ecx, [ebp - 0xa80]
mov byte [ebp - 4], 0x70
call fcn.1002cd90
lea eax, [ebp - 0xa98]
mov byte [ebp - 4], 0x71
push eax
lea ecx, [edi + 0xad4]
call fcn.10047df0
lea eax, [ebp - 0xa80]
mov byte [edi + 0xb05], 1
push eax
lea ecx, [edi + 0xb24]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0xb05], al
cmovne eax, ecx
lea ecx, [edi + 0xb3c]
mov dword [edi + 0xb54], eax
add eax, 8
mov dword [edi + 0xaac], eax
mov dword [edi + 0xab0], eax
lea eax, [ebp - 0xab0]
mov dword [edi + 0xb10], 0xc3340000
mov dword [edi + 0xb14], 0x43340000
mov dword [edi + 0xb0c], 0
mov dword [edi + 0xb20], 0
push eax
mov dword [edi + 0xb18], 0x3f800000
call fcn.100beff0
lea ecx, [ebp - 0xa80]
call fcn.1002b9c0
lea ecx, [ebp - 0xa98]
call fcn.1002b9c0
lea ecx, [ebp - 0xab0]
mov dword [ebp - 4], 0xffffffff
call fcn.1004edc0
lea eax, [ebp - 0x40]
mov dword [ebp - 0x40], 0x10033080
lea ecx, [esi + 0x58]
push eax
call fcn.10043d10
mov dword [ebp - 0x44], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0xab4], 1
imul eax, dword [edi + 0xab4], 0xeb
add eax, 0x14
mov dword [edi + 0xaa0], eax
mov dword [edi + 0xaa8], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xab8], eax
lea eax, [ebp - 0x44]
push eax
call fcn.10043d10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xaf8]
mov dword [ebp - 0x4c4], 0xb0
lea esi, [edi + 0xb58]
call fcn.1002cd70
lea ecx, [ebp - 0x4c4]
mov dword [ebp - 4], 0x72
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1005f860
sub ecx, edx
lea eax, [ebp - 0x4c4]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xaf8]
call fcn.1004f120
mov dword [ebp - 4], 0x73
xor ecx, ecx
mov dword [ebp - 0x3f0], 0xccd9c8df
mov dword [ebp - 0x3ec], 0xc2c0c9df
mov dword [ebp - 0x3e8], 0xd5f2c8c9
mov word [ebp - 0x3e4], 0xad9f
xor byte [ebp + ecx - 0x3f0], 0xad
inc ecx
cmp ecx, 0xe
jb 0x1005f8b2
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xae0]
call fcn.1002cd70
lea ecx, [ebp - 0x3f0]
mov byte [ebp - 4], 0x74
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005f8e0
sub ecx, edx
lea eax, [ebp - 0x3f0]
push ecx
push eax
lea ecx, [ebp - 0xae0]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xac8]
call fcn.1002cd70
push 0x13
push str.retard_mode_pitch_2
lea ecx, [ebp - 0xac8]
mov byte [ebp - 4], 0x76
call fcn.1002cd90
lea eax, [ebp - 0xae0]
mov byte [ebp - 4], 0x77
push eax
lea ecx, [edi + 0xb90]
call fcn.10047df0
lea eax, [ebp - 0xac8]
mov byte [edi + 0xbc1], 1
push eax
lea ecx, [edi + 0xbe0]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0xbc1], al
cmovne eax, ecx
lea ecx, [edi + 0xbf8]
mov dword [edi + 0xc10], eax
add eax, 8
mov dword [edi + 0xb68], eax
mov dword [edi + 0xb6c], eax
lea eax, [ebp - 0xaf8]
mov dword [edi + 0xbcc], 0xc2b40000
mov dword [edi + 0xbd0], 0x42b40000
mov dword [edi + 0xbc8], 0
mov dword [edi + 0xbdc], 0
push eax
mov dword [edi + 0xbd4], 0x3f800000
call fcn.100beff0
lea ecx, [ebp - 0xac8]
call fcn.1002b9c0
lea ecx, [ebp - 0xae0]
call fcn.1002b9c0
lea ecx, [ebp - 0xaf8]
mov dword [ebp - 4], 0xffffffff
call fcn.1004edc0
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x10033080
lea ecx, [esi + 0x58]
push eax
call fcn.10043d10
mov dword [ebp - 0x4c], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0xb70], 1
imul eax, dword [edi + 0xb70], 0xeb
add eax, 0x14
mov dword [edi + 0xb5c], eax
mov dword [edi + 0xb64], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xb74], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10043d10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb40]
mov dword [ebp - 0x4c8], 0xb0
lea esi, [edi + 0xc14]
call fcn.1002cd70
lea ecx, [ebp - 0x4c8]
mov dword [ebp - 4], 0x78
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1005fa60
sub ecx, edx
lea eax, [ebp - 0x4c8]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xb40]
call fcn.1004f120
mov dword [ebp - 4], 0x79
xor ecx, ecx
mov dword [ebp - 0x3d0], 0xccd9c8df
mov dword [ebp - 0x3cc], 0xc2c0c9df
mov dword [ebp - 0x3c8], 0xd4f2c8c9
mov word [ebp - 0x3c4], 0xad9f
xor byte [ebp + ecx - 0x3d0], 0xad
inc ecx
cmp ecx, 0xe
jb 0x1005fab2
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb28]
call fcn.1002cd70
lea ecx, [ebp - 0x3d0]
mov byte [ebp - 4], 0x7a
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005fae0
sub ecx, edx
lea eax, [ebp - 0x3d0]
push ecx
push eax
lea ecx, [ebp - 0xb28]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb10]
call fcn.1002cd70
push 0x11
push str.retard_mode_yaw_2
lea ecx, [ebp - 0xb10]
mov byte [ebp - 4], 0x7c
call fcn.1002cd90
lea eax, [ebp - 0xb28]
mov byte [ebp - 4], 0x7d
push eax
lea ecx, [edi + 0xc4c]
call fcn.10047df0
lea eax, [ebp - 0xb10]
mov byte [edi + 0xc7d], 1
push eax
lea ecx, [edi + 0xc9c]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0xc7d], al
cmovne eax, ecx
lea ecx, [edi + 0xcb4]
mov dword [edi + 0xccc], eax
add eax, 8
mov dword [edi + 0xc24], eax
mov dword [edi + 0xc28], eax
lea eax, [ebp - 0xb40]
mov dword [edi + 0xc88], 0xc3340000
mov dword [edi + 0xc8c], 0x43340000
mov dword [edi + 0xc84], 0
mov dword [edi + 0xc98], 0
push eax
mov dword [edi + 0xc90], 0x3f800000
call fcn.100beff0
lea ecx, [ebp - 0xb10]
call fcn.1002b9c0
lea ecx, [ebp - 0xb28]
call fcn.1002b9c0
lea ecx, [ebp - 0xb40]
mov dword [ebp - 4], 0xffffffff
call fcn.1004edc0
lea eax, [ebp - 0x50]
mov dword [ebp - 0x50], 0x10033080
lea ecx, [esi + 0x58]
push eax
call fcn.10043d10
mov dword [ebp - 0x54], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0xc2c], 1
imul eax, dword [edi + 0xc2c], 0xeb
add eax, 0x14
mov dword [edi + 0xc18], eax
mov dword [edi + 0xc20], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xc30], eax
lea eax, [ebp - 0x54]
push eax
call fcn.10043d10
lea esi, [edi + 0xcd0]
mov dword [ebp - 0x334], 0xf2caccc1
mov dword [ebp - 0x330], 0xcfccc3c8
xor ecx, ecx
mov word [ebp - 0x32c], 0xc8c1
mov byte [ebp - 0x32a], 0xad
nop
xor byte [ebp + ecx - 0x334], 0xad
inc ecx
cmp ecx, 0xb
jb 0x1005fc60
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb70]
call fcn.1002cd70
lea ecx, [ebp - 0x334]
mov dword [ebp - 4], 0x7e
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005fc90
sub ecx, edx
lea eax, [ebp - 0x334]
push ecx
push eax
lea ecx, [ebp - 0xb70]
call fcn.1002cd90
mov dword [ebp - 4], 0x7f
lea ecx, [ebp - 0xb58]
push dword [ebp - 0x1c]
mov dword [ebp - 0x47c], 0x656b6166
mov dword [ebp - 0x478], 0x67616c2d
mov byte [ebp - 0x474], 0
call fcn.1002cd70
lea ecx, [ebp - 0x47c]
mov byte [ebp - 4], 0x80
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005fcf0
sub ecx, edx
lea eax, [ebp - 0x47c]
push ecx
push eax
lea ecx, [ebp - 0xb58]
call fcn.1002cd90
lea eax, [ebp - 0xb70]
mov byte [ebp - 4], 0x81
push eax
lea ecx, [edi + 0xd08]
call fcn.10047df0
lea eax, [ebp - 0xb58]
mov byte [edi + 0xd39], 1
push eax
lea ecx, [edi + 0xd40]
call fcn.10047df0
lea ecx, [ebp - 0xb58]
mov byte [edi + 0xd3c], 0
call fcn.1002b9c0
lea ecx, [ebp - 0xb70]
mov dword [ebp - 4], 0xffffffff
call fcn.1002b9c0
mov dword [ebp - 0x58], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0xce8], 1
imul eax, dword [edi + 0xce8], 0xeb
add eax, 0x14
mov dword [edi + 0xcd4], eax
mov dword [edi + 0xcdc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xcec], eax
lea eax, [ebp - 0x58]
push eax
call fcn.10043d10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xfd8]
mov dword [ebp - 0x310], 0x65766f6d
mov byte [ebp - 0x30c], 0
call fcn.1002cd70
lea ecx, [ebp - 0x310]
mov dword [ebp - 4], 0x82
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005fdd0
sub ecx, edx
lea eax, [ebp - 0x310]
push ecx
push eax
lea ecx, [ebp - 0xfd8]
call fcn.1002cd90
mov dword [ebp - 4], 0x83
lea ecx, [ebp - 0xfc0]
push dword [ebp - 0x1c]
mov dword [ebp - 0x2e4], 0x726961
call fcn.1002cd70
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 0x84
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005fe18
sub ecx, edx
lea eax, [ebp - 0x2e4]
push ecx
push eax
lea ecx, [ebp - 0xfc0]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xfa8]
mov dword [ebp - 0x3a8], 0x756f7263
mov word [ebp - 0x3a4], 0x6863
mov byte [ebp - 0x3a2], 0
call fcn.1002cd70
lea ecx, [ebp - 0x3a8]
mov byte [ebp - 4], 0x86
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005fe70
sub ecx, edx
lea eax, [ebp - 0x3a8]
push ecx
push eax
lea ecx, [ebp - 0xfa8]
call fcn.1002cd90
lea eax, [ebp - 0x4a4]
mov dword [ebp - 4], 0x87
push eax
lea ecx, [ebp - 0xf90]
push ecx
lea edx, [ebp - 0xfd8]
push edx
lea ecx, [ebp - 0x648]
call fcn.100becd0
mov dword [ebp - 0x31c], 0xf2caccc1
xor ecx, ecx
mov dword [ebp - 0x318], 0xc4d9cecc
mov word [ebp - 0x314], 0xc8db
mov byte [ebp - 0x312], 0xad
nop dword [eax]
xor byte [ebp + ecx - 0x31c], 0xad
inc ecx
cmp ecx, 0xb
jb 0x1005fee0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb88]
call fcn.1002cd70
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 0x89
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005ff10
sub ecx, edx
lea eax, [ebp - 0x31c]
push ecx
push eax
lea ecx, [ebp - 0xb88]
call fcn.1002cd90
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xed0]
call fcn.1002cd70
push 0
push 0x100ffac0
lea ecx, [ebp - 0xed0]
mov byte [ebp - 4], 0x8b
call fcn.1002cd90
lea ecx, [ebp - 0x698]
call fcn.1002b130
lea eax, [ebp - 0xb88]
mov byte [ebp - 4], 0x8d
push eax
lea ecx, [edi + 0xd90]
call fcn.10047df0
mov byte [edi + 0xdc1], 0
mov dword [edi + 0xdfc], 0
mov dword [edi + 0xd68], 0x14
mov dword [edi + 0xd6c], 0x14
mov eax, dword [ebp - 0x644]
mov esi, dword [ebp - 0x648]
mov dword [ebp - 0xe4], eax
cmp esi, eax
je 0x1005ffdb
lea eax, [edi + 0xde0]
mov edi, dword [ebp - 0xe4]
mov dword [ebp - 0xe8], eax
nop
push esi
mov ecx, eax
call fcn.1004f0e0
mov eax, dword [ebp - 0xe8]
add esi, 0x18
cmp esi, edi
jne 0x1005ffc0
mov edi, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x694]
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 0xe8], eax
cmp eax, ecx
je 0x100600be
lea ecx, [edi + 0xdf0]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x6c8]
push eax
call fcn.1002adf0
lea ecx, [edi + 0xdf0]
mov esi, dword [eax]
lea eax, [ebp - 0x6c4]
push eax
call fcn.1002ae00
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x6c0]
push dword [eax]
call fcn.1002c450
add esp, 8
lea ecx, [edi + 0xdf0]
mov esi, eax
lea eax, [ebp - 0x2dc]
push eax
call fcn.1002adf0
mov ecx, dword [edi + 0xde4]
sub ecx, dword [edi + 0xde0]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0xe4], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x18], eax
jae 0x10060089
lea eax, [ebp - 0x18]
push eax
lea ecx, [edi + 0xdf0]
call fcn.10043d10
cmp esi, dword [ebp - 0xe4]
jne 0x1006009d
mov eax, dword [edi + 0xdbc]
test eax, eax
je 0x1006009d
call eax
mov eax, dword [ebp - 0xe8]
lea ecx, [edi + 0xdf0]
add eax, 4
mov dword [ebp - 0xe8], eax
cmp eax, dword [ebp - 0xe0]
jne 0x10060001
lea ecx, [ebp - 0x698]
call fcn.1002ad50
lea ecx, [ebp - 0xed0]
call fcn.1002b9c0
lea ecx, [ebp - 0xb88]
call fcn.1002b9c0
lea ecx, [ebp - 0x648]
call fcn.1002bcb0
push fcn.1002b9c0
push 3
push 0x18
lea eax, [ebp - 0xfd8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100f036c
lea eax, [edi + 0xd58]
mov dword [ebp - 0x5c], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xd70], 1
imul eax, dword [edi + 0xd70], 0xeb
add eax, 0x14
mov dword [edi + 0xd5c], eax
mov dword [edi + 0xd64], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xd74], eax
lea eax, [ebp - 0x5c]
push eax
call fcn.10043d10
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x1098]
mov dword [ebp - 0x2e8], 0x78616d
call fcn.1002cd70
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x8e
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10060176
sub ecx, edx
lea eax, [ebp - 0x2e8]
push ecx
push eax
lea ecx, [ebp - 0x1098]
call fcn.1002cd90
mov dword [ebp - 4], 0x8f
lea ecx, [ebp - 0x1080]
push dword [ebp - 0x2dc]
mov dword [ebp - 0x358], 0x61657262
mov word [ebp - 0x354], 0x6b
call fcn.1002cd70
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x90
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100601d0
sub ecx, edx
lea eax, [ebp - 0x358]
push ecx
push eax
lea ecx, [ebp - 0x1080]
call fcn.1002cd90
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x1068]
mov dword [ebp - 0x3b0], 0x646e6172
mov word [ebp - 0x3ac], 0x6d6f
mov byte [ebp - 0x3aa], 0
call fcn.1002cd70
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 4], 0x92
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10060224
sub ecx, edx
lea eax, [ebp - 0x3b0]
push ecx
push eax
lea ecx, [ebp - 0x1068]
call fcn.1002cd90
mov dword [ebp - 0x328], 0xccc8dfcf
xor ecx, ecx
mov dword [ebp - 0x324], 0xd9de8dc6
mov word [ebp - 0x320], 0xddc8
mov byte [ebp - 0x31e], 0xad
nop word [eax + eax]
xor byte [ebp + ecx - 0x328], 0xad
inc ecx
cmp ecx, 0xb
jb 0x10060270
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x1050]
call fcn.1002cd70
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 0x94
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100602a0
sub ecx, edx
lea eax, [ebp - 0x328]
push ecx
push eax
lea ecx, [ebp - 0x1050]
call fcn.1002cd90
lea eax, [ebp - 0x4a5]
mov dword [ebp - 4], 0x95
push eax
lea ecx, [ebp - 0x1038]
push ecx
lea edx, [ebp - 0x1098]
push edx
lea ecx, [ebp - 0x654]
call fcn.100becd0
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0xba0]
mov dword [ebp - 0x44c], 0x5f67616c
mov dword [ebp - 0x448], 0x65646f6d
mov byte [ebp - 0x444], 0
call fcn.1002cd70
lea ecx, [ebp - 0x44c]
mov byte [ebp - 4], 0x97
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10060320
sub ecx, edx
lea eax, [ebp - 0x44c]
push ecx
push eax
lea ecx, [ebp - 0xba0]
call fcn.1002cd90
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0xee8]
call fcn.1002cd70
push 0
push 0x100ffac0
lea ecx, [ebp - 0xee8]
mov byte [ebp - 4], 0x99
call fcn.1002cd90
lea eax, [ebp - 0xba0]
mov byte [ebp - 4], 0x9a
push eax
lea ecx, [edi + 0xe38]
call fcn.10047df0
mov byte [edi + 0xe69], 0
mov dword [edi + 0xe9c], 0
mov dword [edi + 0xe10], 0x14
mov dword [edi + 0xe14], 0x14
mov eax, dword [ebp - 0x650]
mov esi, dword [ebp - 0x654]
mov dword [ebp - 0xe0], eax
cmp esi, eax
je 0x100603e1
lea eax, [edi + 0xe88]
mov edi, dword [ebp - 0xe0]
mov dword [ebp - 0xe4], eax
push esi
mov ecx, eax
call fcn.1004f0e0
mov eax, dword [ebp - 0xe4]
add esi, 0x18
cmp esi, edi
jne 0x100603c6
mov edi, dword [ebp - 0xf0]
mov ecx, dword [edi + 0xe8c]
mov eax, 0x2aaaaaab
sub ecx, dword [edi + 0xe88]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1006040a
mov dword [edi + 0xe98], 0
lea ecx, [ebp - 0xee8]
call fcn.1002b9c0
lea ecx, [ebp - 0xba0]
call fcn.1002b9c0
lea ecx, [ebp - 0x654]
call fcn.1002bcb0
push fcn.1002b9c0
push 4
push 0x18
lea eax, [ebp - 0x1098]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100f036c
lea eax, [edi + 0xe00]
mov dword [ebp - 0x60], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xe18], 1
imul eax, dword [edi + 0xe18], 0xeb
add eax, 0x14
mov dword [edi + 0xe04], eax
mov dword [edi + 0xe0c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xe1c], eax
lea eax, [ebp - 0x60]
push eax
call fcn.10043d10
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0xbb8]
call fcn.1002cd70
push 0
push 0x101042d8
lea ecx, [ebp - 0xbb8]
mov dword [ebp - 4], 0x9b
call fcn.1004f120
mov dword [ebp - 4], 0x9c
lea eax, [ebp - 0x4a0]
push eax
lea ecx, [ebp - 0xc30]
mov dword [ebp - 0x4a0], 0x5f67616c
mov dword [ebp - 0x49c], 0x696d696c
mov word [ebp - 0x498], 0x74
call fcn.1002ba60
push 0x6c
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x9d
call fcn.1002d000
push 0x69
lea ecx, [ebp - 0x100]
mov byte [ebp - 0x100], al
call fcn.1002d000
push 0x6d
lea ecx, [ebp - 0x100]
mov byte [ebp - 0xff], al
call fcn.1002d000
push 0x69
lea ecx, [ebp - 0x100]
mov byte [ebp - 0xfe], al
call fcn.1002d000
push 0x74
lea ecx, [ebp - 0x100]
mov byte [ebp - 0xfd], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x100]
mov byte [ebp - 0xfc], al
call fcn.1002d000
mov byte [ebp - 0xfb], al
xor esi, esi
push esi
lea ecx, [ebp - 0x100]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x100]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 6
jb 0x10060564
lea ecx, [ebp - 0x100]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0xf00]
call fcn.1002ba60
lea eax, [ebp - 0xc30]
mov byte [ebp - 4], 0x9e
push eax
lea ecx, [edi + 0xed8]
call fcn.10047df0
lea eax, [ebp - 0xf00]
mov byte [edi + 0xf09], 1
push eax
lea ecx, [edi + 0xf28]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0xf09], al
cmovne eax, ecx
lea ecx, [edi + 0xf40]
mov dword [edi + 0xf58], eax
add eax, 8
mov dword [edi + 0xeb0], eax
mov dword [edi + 0xeb4], eax
lea eax, [ebp - 0xbb8]
mov dword [edi + 0xf14], 0x40000000
mov dword [edi + 0xf18], 0x41800000
mov dword [edi + 0xf10], 0x40000000
mov dword [edi + 0xf24], 0
push eax
mov dword [edi + 0xf1c], 0x3f800000
call fcn.100beff0
lea ecx, [ebp - 0xf00]
call fcn.1002b9c0
lea ecx, [ebp - 0xc30]
call fcn.1002b9c0
lea ecx, [ebp - 0xbb8]
mov dword [ebp - 4], 0xffffffff
call fcn.1004ed50
lea eax, [edi + 0xea0]
mov dword [ebp - 0xa4], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xeb8], 1
imul eax, dword [edi + 0xeb8], 0xeb
add eax, 0x14
mov dword [edi + 0xea4], eax
mov dword [edi + 0xeac], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xebc], eax
lea eax, [ebp - 0xa4]
push eax
call fcn.1002ad20
push 0x6c
lea ecx, [ebp - 0x124]
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x124], al
call fcn.1002d000
push 0x67
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x123], al
call fcn.1002d000
push 0x5f
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x122], al
call fcn.1002d000
push 0x6c
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x121], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x120], al
call fcn.1002d000
push 0x6e
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x11f], al
call fcn.1002d000
mov byte [ebp - 0x11e], al
push 0x64
lea ecx, [ebp - 0x124]
call fcn.1002d000
push 0
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x11d], al
call fcn.1002d000
mov byte [ebp - 0x11c], al
xor esi, esi
push esi
lea ecx, [ebp - 0x124]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x124]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x10060763
lea ecx, [ebp - 0x124]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0xc60]
call fcn.1002ba60
push 0x6f
lea ecx, [ebp - 0x118]
mov dword [ebp - 4], 0x9f
call fcn.1002d000
push 0x6e
lea ecx, [ebp - 0x118]
mov byte [ebp - 0x118], al
call fcn.1002d000
push 0x20
lea ecx, [ebp - 0x118]
mov byte [ebp - 0x117], al
call fcn.1002d000
push 0x6c
lea ecx, [ebp - 0x118]
mov byte [ebp - 0x116], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x118]
mov byte [ebp - 0x115], al
call fcn.1002d000
push 0x6e
lea ecx, [ebp - 0x118]
mov byte [ebp - 0x114], al
call fcn.1002d000
push 0x64
lea ecx, [ebp - 0x118]
mov byte [ebp - 0x113], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x118]
mov byte [ebp - 0x112], al
call fcn.1002d000
mov byte [ebp - 0x111], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x118]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x118]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x10060850
lea ecx, [ebp - 0x118]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0xc48]
call fcn.1002ba60
lea eax, [ebp - 0xc60]
mov byte [ebp - 4], 0xa0
push eax
lea ecx, [edi + 0xf94]
call fcn.10047df0
lea eax, [ebp - 0xc48]
mov byte [edi + 0xfc5], 1
push eax
lea ecx, [edi + 0xfcc]
call fcn.10047df0
lea ecx, [ebp - 0xc48]
mov byte [edi + 0xfc8], 0
call fcn.1002b9c0
lea ecx, [ebp - 0xc60]
mov dword [ebp - 4], 0xffffffff
call fcn.1002b9c0
lea eax, [edi + 0xf5c]
mov dword [ebp - 0x64], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xf74], 1
imul eax, dword [edi + 0xf74], 0xeb
add eax, 0x14
mov dword [edi + 0xf60], eax
mov dword [edi + 0xf68], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xf78], eax
lea eax, [ebp - 0x64]
push eax
call fcn.1002ad20
lea ecx, [ebp - 0x4a6]
call fcn.1002adb0
push 0x6f
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xe0], eax
call fcn.1002d000
push 0x66
lea ecx, [ebp - 0xec]
mov byte [ebp - 0xec], al
call fcn.1002d000
push 0x66
lea ecx, [ebp - 0xec]
mov byte [ebp - 0xeb], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0xec]
mov byte [ebp - 0xea], al
call fcn.1002d000
mov byte [ebp - 0xe9], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0xec]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0xec]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 4
jb 0x10060990
lea ecx, [ebp - 0xec]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0x10e0]
call fcn.1002ba60
push 0x63
lea ecx, [ebp - 0x110]
mov dword [ebp - 4], 0xa1
call fcn.1002d000
push 0x75
lea ecx, [ebp - 0x110]
mov byte [ebp - 0x110], al
call fcn.1002d000
push 0x73
lea ecx, [ebp - 0x110]
mov byte [ebp - 0x10f], al
call fcn.1002d000
push 0x74
lea ecx, [ebp - 0x110]
mov byte [ebp - 0x10e], al
call fcn.1002d000
push 0x6f
lea ecx, [ebp - 0x110]
mov byte [ebp - 0x10d], al
call fcn.1002d000
push 0x6d
lea ecx, [ebp - 0x110]
mov byte [ebp - 0x10c], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x110]
mov byte [ebp - 0x10b], al
call fcn.1002d000
mov byte [ebp - 0x10a], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x110]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x110]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x10060a70
lea ecx, [ebp - 0x110]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0x10c8]
call fcn.1002ba60
push 0x72
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0xa2
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x108]
mov byte [ebp - 0x108], al
call fcn.1002d000
push 0x6e
lea ecx, [ebp - 0x108]
mov byte [ebp - 0x107], al
call fcn.1002d000
push 0x64
lea ecx, [ebp - 0x108]
mov byte [ebp - 0x106], al
call fcn.1002d000
push 0x6f
lea ecx, [ebp - 0x108]
mov byte [ebp - 0x105], al
call fcn.1002d000
push 0x6d
lea ecx, [ebp - 0x108]
mov byte [ebp - 0x104], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x108]
mov byte [ebp - 0x103], al
call fcn.1002d000
mov byte [ebp - 0x102], al
xor esi, esi
push esi
lea ecx, [ebp - 0x108]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x108]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x10060b42
lea ecx, [ebp - 0x108]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0x10b0]
call fcn.1002ba60
lea eax, [ebp - 0x1098]
mov dword [ebp - 4], 0xa3
push eax
lea eax, [ebp - 0x10e0]
push eax
lea ecx, [ebp - 0xeb8]
call fcn.100bec50
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x660]
push dword [eax + 4]
push dword [eax]
call fcn.100becd0
push 0x66
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0xa4
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x1b8], al
call fcn.1002d000
push 0x6b
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x1b7], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x1b6], al
call fcn.1002d000
push 0x5f
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x1b5], al
call fcn.1002d000
push 0x79
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x1b4], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x1b3], al
call fcn.1002d000
push 0x77
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x1b2], al
call fcn.1002d000
push 0x5f
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x1b1], al
call fcn.1002d000
push 0x74
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x1b0], al
call fcn.1002d000
push 0x79
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x1af], al
call fcn.1002d000
push 0x70
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x1ae], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x1ad], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x1ac], al
call fcn.1002d000
mov byte [ebp - 0x1ab], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x1b8]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x1b8]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x10060cd0
lea ecx, [ebp - 0x1b8]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0xc90]
call fcn.1002ba60
push 0x66
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0xa5
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x13c], al
call fcn.1002d000
push 0x6b
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x13b], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x13a], al
call fcn.1002d000
push 0x20
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x139], al
call fcn.1002d000
push 0x79
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x138], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x137], al
call fcn.1002d000
push 0x77
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x136], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x135], al
call fcn.1002d000
mov byte [ebp - 0x134], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x13c]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x13c]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x10060dd0
lea ecx, [ebp - 0x13c]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0xc78]
call fcn.1002ba60
lea eax, [ebp - 0xc90]
mov byte [ebp - 4], 0xa6
push eax
lea ecx, [edi + 0x101c]
call fcn.10047df0
lea eax, [ebp - 0xc78]
mov byte [edi + 0x104d], 1
push eax
lea ecx, [edi + 0x1054]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x104d], al
cmovne eax, ecx
lea ecx, [ebp - 0x660]
mov dword [edi + 0x1080], eax
add eax, 0x14
mov dword [edi + 0xff4], eax
mov dword [edi + 0xff8], eax
call fcn.1004ea80
lea ecx, [ebp - 0x660]
mov esi, eax
call fcn.10049080
mov dword [ebp - 0xe0], eax
cmp esi, eax
je 0x10060ebb
lea eax, [edi + 0x106c]
mov edi, dword [ebp - 0xe0]
mov dword [ebp - 0xe4], eax
nop
push esi
mov ecx, eax
call fcn.1004ebd0
mov eax, dword [ebp - 0xe4]
add esi, 0x18
cmp esi, edi
jne 0x10060ea0
mov edi, dword [ebp - 0xf0]
lea ecx, [edi + 0x106c]
call fcn.10033b60
test eax, eax
je 0x10060ed4
mov dword [edi + 0x107c], 0
lea ecx, [ebp - 0xc78]
call fcn.1002b9c0
lea ecx, [ebp - 0xc90]
call fcn.1002b9c0
lea ecx, [ebp - 0x660]
call fcn.1002b120
push fcn.1002b9c0
push 3
push 0x18
lea eax, [ebp - 0x10e0]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100f036c
lea eax, [edi + 0xfe4]
mov dword [ebp - 0x68], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xffc], 1
imul eax, dword [edi + 0xffc], 0xeb
add eax, 0x14
mov dword [edi + 0xfe8], eax
mov dword [edi + 0xff0], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x1000], eax
lea eax, [ebp - 0x68]
push eax
call fcn.1002ad20
lea ecx, [ebp - 0x4a7]
call fcn.1002adb0
push 0x6c
lea ecx, [ebp - 0x154]
mov dword [ebp - 0xe0], eax
call fcn.1002d000
push 0x6f
lea ecx, [ebp - 0x154]
mov byte [ebp - 0x154], al
call fcn.1002d000
push 0x63
lea ecx, [ebp - 0x154]
mov byte [ebp - 0x153], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x154]
mov byte [ebp - 0x152], al
call fcn.1002d000
push 0x6c
lea ecx, [ebp - 0x154]
mov byte [ebp - 0x151], al
call fcn.1002d000
push 0x20
lea ecx, [ebp - 0x154]
mov byte [ebp - 0x150], al
call fcn.1002d000
push 0x76
lea ecx, [ebp - 0x154]
mov byte [ebp - 0x14f], al
call fcn.1002d000
push 0x69
lea ecx, [ebp - 0x154]
mov byte [ebp - 0x14e], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x154]
mov byte [ebp - 0x14d], al
call fcn.1002d000
push 0x77
lea ecx, [ebp - 0x154]
mov byte [ebp - 0x14c], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x154]
mov byte [ebp - 0x14b], al
call fcn.1002d000
mov byte [ebp - 0x14a], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x154]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x154]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x10061040
lea ecx, [ebp - 0x154]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0x1128]
call fcn.1002ba60
push 0x6c
lea ecx, [ebp - 0x160]
mov dword [ebp - 4], 0xa7
call fcn.1002d000
push 0x6f
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x160], al
call fcn.1002d000
push 0x77
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x15f], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x15e], al
call fcn.1002d000
push 0x72
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x15d], al
call fcn.1002d000
push 0x20
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x15c], al
call fcn.1002d000
push 0x62
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x15b], al
call fcn.1002d000
push 0x6f
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x15a], al
call fcn.1002d000
push 0x64
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x159], al
call fcn.1002d000
push 0x79
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x158], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x157], al
call fcn.1002d000
mov byte [ebp - 0x156], al
xor esi, esi
push esi
lea ecx, [ebp - 0x160]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x160]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x10061161
lea ecx, [ebp - 0x160]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0x1110]
call fcn.1002ba60
push 0x7a
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0xa8
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0xf8]
mov byte [ebp - 0xf8], al
call fcn.1002d000
push 0x72
lea ecx, [ebp - 0xf8]
mov byte [ebp - 0xf7], al
call fcn.1002d000
push 0x6f
lea ecx, [ebp - 0xf8]
mov byte [ebp - 0xf6], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0xf8]
mov byte [ebp - 0xf5], al
call fcn.1002d000
mov byte [ebp - 0xf4], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0xf8]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0xf8]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x10061210
lea ecx, [ebp - 0xf8]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0x10f8]
call fcn.1002ba60
lea eax, [ebp - 0x10e0]
mov dword [ebp - 4], 0xa9
push eax
lea eax, [ebp - 0x1128]
push eax
lea ecx, [ebp - 0xeb0]
call fcn.100bec50
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x66c]
push dword [eax + 4]
push dword [eax]
call fcn.100becd0
push 0x66
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0xaa
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c8], al
call fcn.1002d000
push 0x6b
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c7], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c6], al
call fcn.1002d000
push 0x5f
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c5], al
call fcn.1002d000
push 0x79
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c4], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c3], al
call fcn.1002d000
push 0x77
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c2], al
call fcn.1002d000
push 0x5f
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c1], al
call fcn.1002d000
push 0x62
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1c0], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1bf], al
call fcn.1002d000
push 0x73
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1be], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1bd], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x1bc], al
call fcn.1002d000
mov byte [ebp - 0x1bb], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x1c8]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x1c8]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x100613a0
lea ecx, [ebp - 0x1c8]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0xcc0]
call fcn.1002ba60
push 0x66
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0xab
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 0x1d8], al
call fcn.1002d000
push 0x6b
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 0x1d7], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 0x1d6], al
call fcn.1002d000
push 0x20
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 0x1d5], al
call fcn.1002d000
push 0x79
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 0x1d4], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 0x1d3], al
call fcn.1002d000
push 0x77
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 0x1d2], al
call fcn.1002d000
push 0x20
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 0x1d1], al
call fcn.1002d000
push 0x62
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 0x1d0], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 0x1cf], al
call fcn.1002d000
push 0x73
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 0x1ce], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 0x1cd], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 0x1cc], al
call fcn.1002d000
mov byte [ebp - 0x1cb], al
xor esi, esi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x1d8]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x1d8]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x10061500
lea ecx, [ebp - 0x1d8]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0xca8]
call fcn.1002ba60
lea eax, [ebp - 0xcc0]
mov byte [ebp - 4], 0xac
push eax
lea ecx, [edi + 0x10bc]
call fcn.10047df0
lea eax, [ebp - 0xca8]
mov byte [edi + 0x10ed], 1
push eax
lea ecx, [edi + 0x10f4]
call fcn.10047df0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x10ed], al
cmovne eax, ecx
lea ecx, [ebp - 0x66c]
mov dword [edi + 0x1120], eax
add eax, 0x14
mov dword [edi + 0x1094], eax
mov dword [edi + 0x1098], eax
call fcn.1004ea80
lea ecx, [ebp - 0x66c]
mov esi, eax
call fcn.10049080
mov dword [ebp - 0xe0], eax
cmp esi, eax
je 0x100615eb
lea eax, [edi + 0x110c]
mov edi, dword [ebp - 0xe0]
mov dword [ebp - 0xe4], eax
nop
push esi
mov ecx, eax
call fcn.1004ebd0
mov eax, dword [ebp - 0xe4]
add esi, 0x18
cmp esi, edi
jne 0x100615d0
mov edi, dword [ebp - 0xf0]
lea ecx, [edi + 0x110c]
call fcn.10033b60
test eax, eax
je 0x10061604
mov dword [edi + 0x111c], 0
lea ecx, [ebp - 0xca8]
call fcn.1002b9c0
lea ecx, [ebp - 0xcc0]
call fcn.1002b9c0
lea ecx, [ebp - 0x66c]
call fcn.1002b120
push fcn.1002b9c0
push 3
push 0x18
lea eax, [ebp - 0x1128]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100f036c
lea eax, [edi + 0x1084]
mov dword [ebp - 0x6c], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x109c], 1
imul eax, dword [edi + 0x109c], 0xeb
add eax, 0x14
mov dword [edi + 0x1088], eax
mov dword [edi + 0x1090], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x10a0], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.1002ad20
push 0x66
lea ecx, [ebp - 0x218]
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x218], al
call fcn.1002d000
push 0x6b
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x217], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x216], al
call fcn.1002d000
push 0x5f
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x215], al
call fcn.1002d000
push 0x79
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x214], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x213], al
call fcn.1002d000
push 0x77
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x212], al
call fcn.1002d000
push 0x5f
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x211], al
call fcn.1002d000
push 0x73
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x210], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x20f], al
call fcn.1002d000
push 0x66
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x20e], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x20d], al
call fcn.1002d000
push 0x74
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x20c], al
call fcn.1002d000
push 0x79
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x20b], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x20a], al
call fcn.1002d000
mov byte [ebp - 0x209], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x218]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x218]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x100617c0
lea ecx, [ebp - 0x218]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0xcf0]
call fcn.1002ba60
push 0x61
lea ecx, [ebp - 0x250]
mov dword [ebp - 4], 0xad
call fcn.1002d000
push 0x76
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x250], al
call fcn.1002d000
push 0x6f
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x24f], al
call fcn.1002d000
push 0x69
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x24e], al
call fcn.1002d000
push 0x64
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x24d], al
call fcn.1002d000
push 0x20
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x24c], al
call fcn.1002d000
push 0x66
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x24b], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x24a], al
call fcn.1002d000
push 0x6b
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x249], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x248], al
call fcn.1002d000
push 0x20
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x247], al
call fcn.1002d000
push 0x6f
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x246], al
call fcn.1002d000
push 0x76
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x245], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x244], al
call fcn.1002d000
push 0x72
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x243], al
call fcn.1002d000
push 0x6c
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x242], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x241], al
call fcn.1002d000
push 0x70
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x240], al
call fcn.1002d000
mov byte [ebp - 0x23f], al
lea ecx, [ebp - 0x250]
push 0
call fcn.1002d000
mov byte [ebp - 0x23e], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x250]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x250]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 0x13
jb 0x10061980
lea ecx, [ebp - 0x250]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0xcd8]
call fcn.1002ba60
lea eax, [ebp - 0xcf0]
mov byte [ebp - 4], 0xae
push eax
lea ecx, [edi + 0x115c]
call fcn.10047df0
lea eax, [ebp - 0xcd8]
mov byte [edi + 0x118d], 1
push eax
lea ecx, [edi + 0x1194]
call fcn.10047df0
lea ecx, [ebp - 0xcd8]
mov byte [edi + 0x1190], 0
call fcn.1002b9c0
lea ecx, [ebp - 0xcf0]
mov dword [ebp - 4], 0xffffffff
call fcn.1002b9c0
lea eax, [edi + 0x1124]
mov dword [ebp - 0x70], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x113c], 1
imul eax, dword [edi + 0x113c], 0xeb
add eax, 0x14
mov dword [edi + 0x1128], eax
mov dword [edi + 0x1130], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x1140], eax
lea eax, [ebp - 0x70]
push eax
call fcn.1002ad20
push 0x66
lea ecx, [ebp - 0x130]
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x130]
mov byte [ebp - 0x130], al
call fcn.1002d000
push 0x6b
lea ecx, [ebp - 0x130]
mov byte [ebp - 0x12f], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x130]
mov byte [ebp - 0x12e], al
call fcn.1002d000
push 0x77
lea ecx, [ebp - 0x130]
mov byte [ebp - 0x12d], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x130]
mov byte [ebp - 0x12c], al
call fcn.1002d000
push 0x6c
lea ecx, [ebp - 0x130]
mov byte [ebp - 0x12b], al
call fcn.1002d000
push 0x6b
lea ecx, [ebp - 0x130]
mov byte [ebp - 0x12a], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x130]
mov byte [ebp - 0x129], al
call fcn.1002d000
mov byte [ebp - 0x128], al
xor esi, esi
nop dword [eax]
push esi
lea ecx, [ebp - 0x130]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x130]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x10061b10
lea ecx, [ebp - 0x130]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0xd20]
call fcn.1002ba60
push 0x66
lea ecx, [ebp - 0x148]
mov dword [ebp - 4], 0xaf
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x148], al
call fcn.1002d000
push 0x6b
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x147], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x146], al
call fcn.1002d000
push 0x2d
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x145], al
call fcn.1002d000
push 0x77
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x144], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x143], al
call fcn.1002d000
push 0x6c
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x142], al
call fcn.1002d000
push 0x6b
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x141], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x140], al
call fcn.1002d000
mov byte [ebp - 0x13f], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x148]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x148]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x10061c20
lea ecx, [ebp - 0x148]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0xd08]
call fcn.1002ba60
lea eax, [ebp - 0xd08]
mov byte [ebp - 4], 0xb0
push eax
lea ecx, [edi + 0x121c]
call fcn.10047df0
lea eax, [ebp - 0xd20]
push eax
lea ecx, [edi + 0x11e4]
call fcn.10047df0
lea ecx, [ebp - 0xd08]
mov dword [edi + 0x1218], 0xffffffff
call fcn.1002b9c0
lea ecx, [ebp - 0xd20]
mov dword [ebp - 4], 0xffffffff
call fcn.1002b9c0
lea eax, [edi + 0x11ac]
mov dword [ebp - 0x9c], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x11c4], 1
imul eax, dword [edi + 0x11c4], 0xeb
add eax, 0x14
mov dword [edi + 0x11b0], eax
mov dword [edi + 0x11b8], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x11c8], eax
lea eax, [ebp - 0x9c]
push eax
call fcn.1002ad20
push 0x66
lea ecx, [ebp - 0x2bc]
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2bc], al
call fcn.1002d000
push 0x6b
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2bb], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2ba], al
call fcn.1002d000
push 0x77
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2b9], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2b8], al
call fcn.1002d000
push 0x6c
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2b7], al
call fcn.1002d000
push 0x6b
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2b6], al
call fcn.1002d000
push 0x5f
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2b5], al
call fcn.1002d000
push 0x64
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2b4], al
call fcn.1002d000
push 0x69
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2b3], al
call fcn.1002d000
push 0x73
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2b2], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2b1], al
call fcn.1002d000
push 0x62
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2b0], al
call fcn.1002d000
push 0x6c
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2af], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2ae], al
call fcn.1002d000
push 0x5f
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2ad], al
call fcn.1002d000
push 0x64
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2ac], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2ab], al
call fcn.1002d000
push 0x73
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2aa], al
call fcn.1002d000
push 0x79
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2a9], al
call fcn.1002d000
push 0x6e
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2a8], al
call fcn.1002d000
push 0x63
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2a7], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 0x2a6], al
call fcn.1002d000
mov byte [ebp - 0x2a5], al
xor esi, esi
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x2bc]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x2bc]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 0x18
jb 0x10061ed0
lea ecx, [ebp - 0x2bc]
call fcn.1002adb0
push eax
lea ecx, [ebp - 0xd50]
call fcn.1002ba60
push 0x73
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 4], 0xb1
call fcn.1002d000
push 0x6c
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d8], al
call fcn.1002d000
push 0x6f
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d7], al
call fcn.1002d000
push 0x77
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d6], al
call fcn.1002d000
push 0x2d
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d5], al
call fcn.1002d000
push 0x77
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d4], al
call fcn.1002d000
push 0x61
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d3], al
call fcn.1002d000
push 0x6c
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d2], al
call fcn.1002d000
push 0x6b
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d1], al
call fcn.1002d000
push 0x20
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2d0], al
call fcn.1002d000
push 0x77
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2cf], al
call fcn.1002d000
push 0x68
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2ce], al
call fcn.1002d000
push 0x69
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2cd], al
call fcn.1002d000
push 0x6c
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2cc], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2cb], al
call fcn.1002d000
push 0x20
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2ca], al
call fcn.1002d000
push 0x64
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2c9], al
call fcn.1002d000
push 0x65
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2c8], al
call fcn.1002d000
mov byte [ebp - 0x2c7], al
lea ecx, [ebp - 0x2d8]
push 0x73
call fcn.1002d000
push 0x79
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2c6], al
call fcn.1002d000
push 0x6e
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2c5], al
call fcn.1002d000
push 0x63
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2c4], al
call fcn.1002d000
push 0x69
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2c3], al
call fcn.1002d000
push 0x6e
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2c2], al
call fcn.1002d000
push 0x67
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2c1], al
call fcn.1002d000
push 0
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 0x2c0], al
call fcn.1002d000
mov byte [ebp - 0x2bf], al
xor esi, esi
nop
push esi
lea ecx, [ebp - 0x2d8]
call fcn.1002adc0
push esi
lea ecx, [ebp - 0x2d8]
mov al, byte [eax]
xor al, 0xad
mov byte [ebp - 0xd9], al
call fcn.1002adc0
mov cl, byte [ebp - 0xd9]
inc esi
mov byte [eax], cl
cmp esi, 0x1a
jb 0x10062110