Function at 0xb9729e
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x184
mov eax, edx
mov dword [ebp - 0x120], ecx
mov ecx, dword [ecx]
mov dword [ebp - 0x140], eax
push ebx
mov edx, dword [eax]
mov eax, ecx
shr eax, 0xb
and eax, 1
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x3c], eax
mov eax, ecx
shr eax, 9
push esi
mov esi, dword [ebp + 8]
and eax, 1
mov dword [ebp - 0xdc], eax
xor eax, 1
push edi
xor edi, edi
mov dword [ebp - 0xe8], eax
mov esi, dword [esi]
mov ebx, edi
push 0xfffffffffffffffe
pop eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x2c], eax
movsx eax, cl
and eax, dword [ebp - 0xc]
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x9c], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 8], edx
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x98], edi
mov dword [ebp - 4], esi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0xb4], 0xff
mov dword [ebp - 0x12c], 0xfc00
mov dword [ebp - 0x148], 0xdc00
mov dword [ebp - 0x158], 0x2b
mov dword [ebp - 0x128], 0x7b
mov dword [ebp - 0xe4], 0x30
mov dword [ebp - 0x118], 0x29
mov dword [ebp - 0x90], 0x39
mov dword [ebp - 0x110], 0x3c
mov dword [ebp - 0x144], 0x52
mov dword [ebp - 0xe0], 0x27
mov dword [ebp - 0x154], 0x2d
mov dword [ebp - 0x100], 0x10
mov dword [ebp - 0x114], 0x17
mov dword [ebp - 0x14c], 0x20
mov dword [ebp - 0x104], 0x1d
mov dword [ebp - 0x134], 0x1e
mov dword [ebp - 0x10c], 0x1f
mov dword [ebp - 0x13c], 0x6e
mov dword [ebp - 0x11c], 0x6f
mov dword [ebp - 0x150], 0x70
mov dword [ebp - 0x124], 0x71
mov dword [ebp - 0xfc], 0x73
mov dword [ebp - 0x108], 0xf
movzx edi, word [esi]
mov dword [ebp - 0x18], edi
test edi, edi
je 0xb97db7
mov eax, dword [ebp + 0x28]
mov ecx, dword [eax + 0x3c]
mov eax, dword [eax + 0x10]
lea eax, [eax + ecx*2]
add eax, 0xffffff38
cmp dword [ebp + 0x2c], 0
je 0xb974b8
cmp edx, eax
ja 0xbd4d28
mov eax, dword [ebp - 0xa8]
cmp edx, eax
jb 0xb983da
mov ecx, edx
sub ecx, eax
mov eax, dword [ebp + 0x2c]
sar ecx, 1
mov edx, dword [eax]
mov eax, 0x7fffffeb
sub eax, edx
cmp eax, ecx
jl 0xbd4c80
lea eax, [edx + ecx]
mov ecx, dword [ebp + 0x2c]
mov dword [ecx], eax
test ebx, ebx
je 0xb974c6
mov ecx, dword [ebp - 0xb0]
cmp ebx, ecx
ja 0xb97747
mov edx, dword [ebp - 8]
jmp 0xb974cf
mov ecx, dword [ebp + 0x28]
cmp dword [ecx + 0x20], eax
ja 0xbd4d28
jmp 0xb974d8
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 8], edx
mov ecx, dword [ebp + 0x28]
mov dword [ebp - 0xa8], edx
cmp dword [ebp - 0x30], 0
jne 0xbd2298
mov edx, dword [ebp - 0x34]
mov ebx, edx
and ebx, 8
mov dword [ebp - 0x68], ebx
jne 0xb983e4
push 0x2a
pop eax
cmp edi, eax
je 0xb97a0d
push 0x2b
pop eax
cmp edi, eax
je 0xb97a0d
push 0x3f
pop eax
cmp edi, eax
je 0xb97a0d
push 0x7b
pop eax
cmp edi, eax
je 0xbd2408
xor eax, eax
cmp dword [ebp - 0x78], eax
mov ecx, eax
mov eax, dword [ebp - 0x60]
jne 0xbd2420
test edx, 0x4000
jne 0xbd2461
mov edx, dword [ebp - 8]
push 0x3f
pop eax
cmp edi, eax
ja 0xb976bb
je 0xb97c8d
mov eax, edi
xor ecx, ecx
sub eax, ecx
je 0xb976eb
sub eax, 0x24
je 0xbd2f62
sub eax, 4
je 0xb97a7b
dec eax
je 0xb976eb
dec eax
je 0xb97de8
dec eax
je 0xb983ee
sub eax, 3
je 0xb98179
cmp dword [ebp - 0x3c], 0
mov edx, dword [ebp - 0xc]
mov ebx, edx
mov word [ebp - 0xf8], di
je 0xb975b1
mov eax, edi
mov ecx, 0xfc00
and eax, ecx
cmp eax, 0xd800
je 0xbd3a57
push 2
pop esi
cmp dword [ebp - 0x3c], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x34]
je 0xb97611
test dl, al
je 0xb97611
movzx ecx, di
mov edx, 0xfc00
mov eax, ecx
and eax, edx
mov edx, 0xd800
cmp eax, edx
je 0xbd4a9d
mov eax, ecx
mov ecx, 0x80
cdq
idiv ecx
movzx eax, byte [eax + 0xc34b50]
shl eax, 7
add eax, edx
movzx eax, word [eax*2 + 0xc26850]
movzx eax, byte [eax*8 + 0xc23f63]
test eax, eax
jne 0xb98101
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xc]
test cl, al
mov edi, dword [ebp - 8]
push 0
pop eax
setne al
push 0x1d
pop ecx
add eax, ecx
mov word [edi], ax
add edi, esi
mov dword [ebp - 8], edi
test ebx, ebx
je 0xb9764a
mov ecx, ebx
lea esi, [ebp - 0xf8]
shr ecx, 1
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
mov edi, dword [ebp - 8]
lea edi, [edi + ebx*2]
mov dword [ebp - 8], edi
mov eax, dword [ebp - 0x18]
push 0xd
pop ecx
cmp ax, cx
je 0xbd4ac9
push 0xa
pop ecx
cmp ax, cx
je 0xbd4ac9
mov ecx, dword [ebp + 0x28]
mov edx, dword [ebp - 0x2c]
cmp edx, 0xfffffffe
je 0xb979cd
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x58], eax
cmp ebx, dword [ebp - 0xc]
jne 0xbd4b04
movzx eax, word [edi - 2]
mov dword [ebp - 0x5c], eax
mov eax, dword [ecx + 0x68]
or eax, dword [ebp - 0x8c]
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x10]
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 8]
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
jmp 0xb97444
mov eax, edi
sub eax, 0x5b
je 0xb9777e
dec eax
je 0xb97a18
dec eax
je 0xbd3a39
dec eax
je 0xbd3a12
sub eax, 0x1d
je 0xbd2f76
dec eax
jne 0xb9758b
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x64]
mov ebx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x140]
mov dword [eax], edx
mov eax, dword [ebp + 8]
mov dword [eax], esi
test ebx, ebx
je 0xb9773d
sub edx, dword [ebp - 0xa8]
mov ecx, 0x7fffffeb
mov eax, dword [ebx]
sub ecx, eax
sar edx, 1
cmp ecx, edx
jl 0xbd4c80
lea ecx, [eax + edx]
mov dword [ebx], ecx
mov eax, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 8]
sub eax, ebx
and eax, 0xfffffffe
push eax
push ebx
push ecx
call fcn.00ba88f0
sub ebx, dword [ebp - 0xb0]
add esp, 0xc
mov edx, dword [ebp - 8]
mov esi, dword [ebp - 4]
sar ebx, 1
neg ebx
lea edx, [edx + ebx*2]
mov ebx, dword [ebp - 0xb0]
mov dword [ebp - 8], edx
mov dword [ebp - 0x10], ebx
jmp 0xb974cf
lea edi, [esi + 2]
mov edx, str._:_:__
push 6
mov ecx, edi
call fcn.00b98525
pop ecx
test eax, eax
je 0xbd42b0
push 6
mov edx, 0xc10bb0
mov ecx, edi
call fcn.00b98525
pop ecx
test eax, eax
je 0xbd42bd
mov eax, dword [ebp - 8]
push 0x3a
mov dword [ebp - 0x10], eax
movzx eax, word [edi]
pop ebx
cmp ax, bx
je 0xbd42ca
push 0x2e
pop ecx
cmp ax, cx
je 0xbd42ca
push 0x3d
pop ecx
cmp ax, cx
je 0xbd42ca
xor eax, eax
push 2
mov dword [ebp - 0x24], eax
pop edi
push 0x5c
pop ecx
push 0x45
pop edx
add esi, edi
mov dword [ebp - 4], esi
movzx ebx, word [esi]
mov dword [ebp - 0x18], ebx
cmp ebx, ecx
je 0xb98343
test eax, eax
jne 0xb9780a
cmp ebx, 0x5e
je 0xbd42f8
push 0x5d
pop ecx
cmp ebx, ecx
je 0xbd4303
mov edi, dword [ebp - 8]
xor edx, edx
push 0x20
pop eax
push eax
add edi, 6
mov dword [ebp - 0x28], edx
push edx
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x68], edx
push eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x38], edx
call fcn.00ba38f0
mov esi, dword [ebp - 4]
add esp, 0xc
test ebx, ebx
je 0xbd49a8
cmp dword [ebp - 0x3c], 0
je 0xb97870
mov eax, ebx
mov ecx, 0xfc00
and eax, ecx
mov edx, 0xd800
cmp eax, edx
je 0xbd4348
mov edx, dword [ebp + 0x2c]
test edx, edx
je 0xb97882
mov ecx, dword [ebp - 0x80]
cmp edi, ecx
ja 0xbd437f
cmp dword [ebp - 0x30], 0
jne 0xbd4398
cmp ebx, 0x5b
je 0xbd43bf
push 0x5c
pop eax
cmp ebx, eax
je 0xb9836f
mov edx, dword [ebp + 0xc]
xor ecx, ecx
push 0x5c
pop edi
cmp word [esi + 2], di
je 0xb98460
push 0xd
pop eax
mov ecx, esi
cmp ebx, eax
je 0xbd484a
push 0xa
pop eax
cmp ebx, eax
je 0xbd484a
mov edi, dword [ebp - 0x30]
test edi, edi
jne 0xb978de
push 0x2d
pop eax
cmp word [esi + 2], ax
je 0xb9805d
mov eax, dword [ebp - 0x58]
push 2
pop ecx
cmp eax, ecx
jl 0xb979c4
cmp dword [ebp - 0x30], 0
jne 0xb978fd
mov edx, dword [ebp - 0xc]
cmp eax, edx
je 0xb97c7b
push ebx
push ebx
push dword [ebp + 0x28]
push dword [ebp - 0x34]
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0xd4]
call fcn.00b98495
add esp, 0x10
add dword [ebp - 0x20], eax
mov edi, dword [ebp - 0x14]
mov esi, dword [ebp - 4]
mov dword [ebp - 0x1c], edi
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x28]
push 2
pop ebx
add esi, ebx
mov dword [ebp - 4], esi
movzx ebx, word [esi]
mov dword [ebp - 0x18], ebx
test ebx, ebx
je 0xbd4984
cmp ebx, 0x5d
jne 0xb97854
test eax, eax
jne 0xb97854
mov esi, dword [ebp - 0x80]
mov eax, dword [ebp - 0xc]
cmp edi, esi
ja 0xb9795c
mov eax, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x2c]
cmp ebx, 0xfffffffe
je 0xb9812b
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x58], ebx
test eax, eax
jne 0xbd4b19
mov ebx, dword [ebp + 0x2c]
test ebx, ebx
je 0xb97995
sub edi, esi
sar edi, 1
add dword [ebx], edi
mov ecx, dword [ebp - 0x24]
xor eax, eax
mov edi, dword [ebp - 8]
cmp ecx, edx
push 0x6e
pop edx
setne al
add eax, edx
push 2
pop edx
mov word [edi], ax
add edi, edx
test ebx, ebx
je 0xb97dc7
push 0x20
pop eax
add edi, eax
mov dword [ebp - 8], edi
jmp 0xb976a5
inc eax
mov dword [ebp - 0x58], eax
jmp 0xb978ec
mov edx, dword [ebp - 0x5c]
or dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x58], edx
mov edx, dword [ebp - 0xc]
cmp ebx, edx
jne 0xbd4ad8
movzx eax, ax
cmp ebx, edx
mov edx, dword [ebp - 8]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x2c], eax
jne 0xbd4af2
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x10]
jmp 0xb976ae
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x60]
jmp 0xb9752f
xor ebx, ebx
mov dword [ebp - 0x70], esi
mov esi, dword [ebp + 0x28]
lea edx, [ebp - 0x94]
push ebx
push dword [ebp - 0x34]
lea ecx, [ebp - 4]
push dword [esi + 0x40]
push dword [ebp + 0xc]
call fcn.00b98554
mov edx, dword [ebp + 0xc]
add esp, 0x10
mov edi, eax
cmp dword [edx], ebx
jne 0xb9848d
test edi, edi
jne 0xb981c4
cmp dword [ebp - 0x94], 0xffff
ja 0xbd3a85
mov di, word [ebp - 0x94]
mov edx, dword [ebp - 0xc]
mov word [ebp - 0xf8], di
mov ebx, edx
mov dword [ebp - 0x18], edi
jmp 0xb975b1
push 2
pop ebx
add esi, ebx
push 0x3f
mov dword [ebp - 4], esi
pop eax
movzx edx, word [esi]
cmp dx, ax
je 0xb97df2
push 0x2a
pop eax
cmp dx, ax
je 0xbd2501
mov ebx, dword [ebp + 0x28]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x20], ecx
push 0x3f
mov ecx, dword [ebx + 0x20]
sub ecx, dword [ebx + 0x10]
sar ecx, 1
mov dword [ebp - 0x88], ecx
xor ecx, ecx
pop edi
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x1c], 0x85
mov dword [ebp - 0x38], ecx
cmp dx, di
je 0xb97e04
test eax, 0x1000
jne 0xb98400
mov edx, dword [ebp - 8]
inc dword [ebx + 0x40]
mov ax, word [ebx + 0x40]
mov word [edx + 4], ax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x1c]
push 0x52
pop edi
mov eax, dword [ebp + 0x28]
inc dword [eax + 0x58]
cmp dword [eax + 0x58], 0xfa
jg 0xb98483
lea eax, [ebx - 0x7d]
xor ecx, ecx
cmp eax, 3
mov eax, dword [ebp + 0x28]
jbe 0xbd3cf7
mov dword [ebp - 0x10], edx
mov word [edx], bx
mov edi, dword [eax + 0x68]
mov esi, dword [eax + 0x40]
mov eax, dword [ebp + 0x2c]
neg eax
mov dword [ebp - 0x84], ecx
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x44], edx
sbb eax, eax
mov dword [ebp - 0x74], edi
and eax, ecx
mov ecx, 0x87
cmp ebx, ecx
je 0xb98424
xor ecx, ecx
mov edx, ecx
cmp ebx, 0x7f
je 0xb9842e
cmp ebx, 0x80
je 0xb9842e
push eax
push dword [ebp + 0x28]
lea eax, [ebp - 0xa0]
push dword [ebp + 0x20]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xd8]
push eax
mov eax, dword [ebp + 0x24]
add eax, edx
lea edx, [ebp - 0x44]
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 4]
push dword [ebp - 0x38]
push ecx
push dword [ebp + 0xc]
mov ecx, dword [ebp - 0x4c]
push eax
call fcn.00b96f48
add esp, 0x34
test eax, eax
je 0xb9848d
mov eax, dword [ebp + 0x28]
mov ecx, 0x81
dec dword [eax + 0x58]
cmp ebx, ecx
je 0xbd3d0b
mov esi, dword [ebp - 8]
push 0x7d
pop ecx
cmp ebx, ecx
jl 0xb97bde
add ecx, 3
cmp ebx, ecx
jle 0xb98436
mov eax, 0x87
cmp ebx, eax
je 0xbd3d24
mov eax, dword [ebp - 0xa0]
mov esi, dword [ebp - 4]
push 0x29
pop edx
cmp word [esi], dx
jne 0xbd4cba
mov edx, dword [ebp + 0x2c]
test edx, edx
jne 0xb98136
mov edx, dword [ebp - 0x44]
mov dword [ebp - 8], edx
cmp ebx, 0x91
je 0xb97a05
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x58], ecx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x6c], ecx
xor ecx, ecx
mov dword [ebp - 0x98], ecx
mov ecx, 0x81
cmp ebx, ecx
mov ecx, dword [ebp - 0xa4]
jl 0xbd3db4
cmp dword [ebp - 0x2c], 0xfffffffe
je 0xbd3d8c
test ecx, ecx
jns 0xb983b7
test eax, eax
js 0xb97a05
mov edi, dword [ebp - 0xac]
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x54], eax
jmp 0xb97a05
push 0x5d
pop eax
cmp word [esi + 2], ax
jne 0xb978fd
jmp 0xbd49b6
mov edx, dword [ebp - 0xc]
xor eax, eax
mov edi, eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x40], edx
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0xb9847c
test edi, edi
jne 0xb97cc4
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x54], eax
mov eax, edi
mov dword [ebp - 0x44], ecx
sub eax, edx
neg eax
sbb eax, eax
and eax, 2
mov dword [ebp - 0x74], eax
xor eax, eax
mov dword [ebp - 0x20], eax
test ebx, ebx
jne 0xb9840a
lea ecx, [esi + 2]
movzx eax, word [ecx]
push 0x2b
pop ebx
cmp ax, bx
je 0xbd308a
push 0x3f
pop ebx
cmp ax, bx
je 0xb98290
mov ebx, dword [ebp - 0xdc]
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x10]
push 0x75
pop ecx
cmp word [eax], cx
je 0xbd30a1
movzx ecx, word [eax]
cmp cx, word [ebp - 0x104]
je 0xbd365a
cmp cx, word [ebp - 0x134]
je 0xbd365a
cmp cx, word [ebp - 0x10c]
je 0xbd365a
cmp cx, word [ebp - 0x14c]
je 0xbd365a
cmp cx, word [ebp - 0x114]
jb 0xb982a0
cmp cx, word [ebp - 0x13c]
jne 0xb97f03
test edx, edx
je 0xb98412
test edi, edi
jne 0xbd360b
cmp edx, 0xffffffff
jne 0xb9804c
lea eax, [ebx + 0x62]
mov edi, dword [ebp - 8]
push 2
pop ebx
mov word [edi], ax
add edi, ebx
mov esi, dword [ebp - 4]
xor edx, edx
mov dword [ebp - 8], edi
cmp dword [ebp - 0x20], 0
jne 0xbd38b3
mov ecx, dword [ebp + 0x28]
xor eax, eax
mov ebx, eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x10], ebx
or dword [ecx + 0x68], eax
jmp 0xb976ab
mov eax, dword [ebp - 0x60]
test eax, eax
je 0xb97452
jmp 0xbd2283
test ecx, ecx
jne 0xb98472
push 0x20
pop eax
push eax
lea eax, [ebp - 0xd4]
push eax
push edi
call fcn.00ba1950
add esp, 0xc
jmp 0xb979b7
mov edi, ecx
or edx, 0xffffffff
jmp 0xb97c94
push 0x23
pop eax
cmp word [esi + 2], ax
jne 0xb97a92
jmp 0xbd24ac
push 2
pop edx
add esi, edx
mov dword [ebp - 4], esi
movzx edi, word [esi]
mov eax, edi
cmp eax, 0x3a
jle 0xbd273d
sub eax, 0x3c
je 0xbd2d6b
dec eax
je 0xbd2ca5
dec eax
je 0xbd2c9c
sub eax, 5
je 0xbd2cf7
sub eax, 0xd
je 0xbd2cbd
sub eax, edx
je 0xb983f6
sub eax, 0x2a
je 0xbd2c8f
mov eax, ecx
mov edx, ecx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x4c], edx
cmp di, word [ebp - 0x118]
je 0xb97ea2
push 2
pop edx
push 0x3a
pop eax
cmp di, ax
je 0xb97e9c
movzx eax, di
add esi, edx
mov dword [ebp - 4], esi
cmp eax, 0x69
jg 0xbd3ca4
jne 0xbd3c5d
mov eax, dword [ebp - 0xc]
or dword [ecx], eax
movzx edi, word [esi]
push 0x29
pop eax
cmp di, ax
jne 0xb97e6d
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
or edx, dword [ebp - 0x34]
not eax
and edx, eax
push 0x29
pop eax
mov dword [ebp - 0x4c], edx
cmp word [esi], ax
jne 0xb9841a
mov eax, dword [ebx + 0x14]
push 4
pop ecx
add eax, ecx
cmp dword [ebp - 8], eax
je 0xbd3cd2
mov ecx, dword [ebp - 0xc]
mov eax, edx
shr eax, 9
and eax, ecx
mov dword [ebp - 0xdc], eax
xor eax, ecx
mov dword [ebp - 0xe8], eax
movsx eax, dl
and eax, ecx
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x34], edx
mov dword [eax], edx
xor eax, eax
mov ebx, eax
mov dword [ebp - 0x10], ebx
jmp 0xb976ab
cmp cx, word [ebp - 0x11c]
je 0xb97d69
cmp cx, word [ebp - 0x150]
je 0xb97d69
cmp cx, word [ebp - 0x124]
je 0xb97d69
cmp ecx, 0x72
je 0xb97d69
cmp cx, word [ebp - 0xfc]
je 0xb97d69
cmp ecx, 0x74
je 0xb97d69
push 0x7d
pop edi
cmp cx, di
jb 0xbd35ef
add edi, 0xa
cmp cx, di
ja 0xbd35ef
mov ebx, dword [ebp - 0x88]
mov edi, dword [ebp - 8]
mov dword [ebp - 0x14], ebx
sub edi, eax
xor ebx, ebx
sar edi, 1
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x4c], ebx
mov ebx, 0x87
cmp cx, bx
mov dword [ebp - 0x18], edi
mov ebx, dword [ebp - 0x1c]
je 0xbd3121
mov eax, 0x81
cmp cx, ax
mov eax, dword [ebp - 0x50]
jb 0xbd3138
mov ecx, dword [ebp - 0xc]
test eax, eax
jne 0xbd31bd
mov eax, dword [ebp - 8]
push dword [ebp - 0x88]
push dword [ebp + 0x28]
push dword [ebp - 0x3c]
cmp edx, ecx
jg 0xbd3169
mov edx, dword [ebp - 0xc]
xor ecx, ecx
mov word [eax], cx
mov ecx, dword [ebp - 0x10]
call fcn.00b98831
mov ecx, dword [ebp - 0x10]
lea eax, [edi + edi]
add esp, 0xc
lea esi, [ecx + 2]
push eax
push ecx
push esi
call fcn.00ba88f0
mov edx, dword [ebp - 0x40]
add esp, 0xc
push 2
pop eax
add dword [ebp - 8], eax
test edx, edx
je 0xbd3159
mov ecx, dword [ebp - 0x10]
lea eax, [ebx + 0x92]
mov dword [ebp - 0x4c], ecx
mov word [ecx], ax
mov dword [ebp - 0x10], esi
dec edx
mov esi, dword [ebp - 4]
mov dword [ebp - 0x40], edx
test edx, edx
js 0xbd34aa
mov ebx, dword [ebp + 0x2c]
test ebx, ebx
jne 0xb98336
lea ebx, [edx - 1]
test ebx, ebx
jns 0xbd334a
xor edi, edi
mov edx, dword [ebp - 8]
mov ebx, dword [ebp - 0x24]
test ebx, ebx
jne 0xbd345a
mov edi, dword [ebp - 8]
xor edx, edx
push 2
pop ebx
jmp 0xb97d98
cmp edx, dword [ebp - 0xc]
jne 0xbd361d
lea eax, [ebx + 0x66]
jmp 0xb97d85
push 4
pop eax
add esi, eax
push 0x5c
pop eax
mov dword [ebp - 4], esi
cmp word [esi], ax
push 4
pop eax
je 0xbd4859
movzx eax, word [esi]
test ax, ax
je 0xb98468
test edi, edi
jne 0xb98090
push 0x5d
pop edi
cmp ax, di
je 0xb98468
cmp dword [ebp - 0x3c], 0
mov edi, eax
mov dword [ebp - 0x18], edi
je 0xb980af
mov ecx, 0xfc00
and eax, ecx
mov ecx, 0xd800
cmp eax, ecx
je 0xbd48c8
cmp dword [ebp - 0x30], 0
jne 0xb980c9
push 0x5c
pop eax
cmp edi, eax
je 0xbd48ed
cmp edi, 0x5b
je 0xbd4935
mov ecx, dword [ebp + 0xc]
cmp edi, ebx
jb 0xbd4d20
je 0xb978de
push 2
pop eax
push 0xd
mov dword [ebp - 0x58], eax
pop eax
cmp edi, eax
je 0xbd4975
push 0xa
pop eax
cmp edi, eax
je 0xbd4975
mov eax, dword [ebp + 0x28]
push edi
push ebx
push eax
jmp 0xb97902
mov edx, dword [ebp - 8]
push 0x10
pop ecx
push 9
mov word [edx], cx
add edx, esi
pop ecx
mov word [edx], cx
add edx, esi
mov word [edx], ax
add edx, esi
cmp dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 8], edx
jne 0xb97a02
jmp 0xbd4abc
or ebx, 0xffffffff
mov dword [ebp - 0x2c], ebx
jmp 0xb97968
mov edi, dword [ebp - 0x84]
mov ecx, 0x7fffffeb
mov edx, dword [edx]
sub ecx, edx
lea eax, [edi - 4]
cmp ecx, eax
jl 0xbd4c80
mov ecx, dword [ebp + 0x2c]
lea eax, [edi - 4]
mov edi, dword [ebp - 8]
add eax, edx
push 2
mov dword [ecx], eax
pop ecx
add edi, ecx
push 0x78
pop eax
mov word [edi], cx
add edi, ecx
mov word [edi], ax
add edi, ecx
mov word [edi], cx
add edi, ecx
jmp 0xb979bc
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0xfffffffe
jne 0xb98187
or ecx, 0xffffffff
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x64]
mov ebx, edx
mov edi, dword [ebp - 0x5c]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x34]
push 4
mov dword [ebp - 0x6c], ecx
pop ecx
movsx eax, al
and eax, ecx
mov dword [ebp - 0x28], edi
push 0x30
pop ecx
or eax, ecx
shr eax, 2
mov dword [ebp - 0x10], ebx
mov word [edx], ax
push 2
pop eax
add edx, eax
mov dword [ebp - 8], edx
jmp 0xb976a8
cmp edi, 0x1a
je 0xbd3ab7
cmp edi, 0x19
je 0xb976a5
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0xfffffffe
jne 0xb981ec
lea eax, [edi - 6]
cmp eax, 0x10
ja 0xb981ec
or ecx, 0xffffffff
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x54]
push 0x1b
mov dword [ebp - 0x58], eax
pop eax
mov dword [ebp - 0x6c], ecx
cmp edi, eax
je 0xbd3adf
push 0x1c
pop eax
cmp edi, eax
je 0xbd3de2
test edi, edi
js 0xb9843e
push 0xf
pop eax
cmp edi, eax
je 0xbd4249
push 0x10
pop eax
cmp edi, eax
je 0xbd4249
mov ecx, dword [ebp - 0xc]
cmp edi, 5
je 0xbd4217
push 4
pop eax
cmp edi, eax
je 0xbd4217
cmp edi, ecx
je 0xbd4217
push 0x1d
pop eax
cmp edi, eax
jge 0xbd4228
mov edx, dword [ebp - 8]
lea eax, [edi - 6]
push 0x10
pop ecx
cmp ecx, eax
sbb ebx, ebx
not ebx
and ebx, edx
cmp dword [ebp - 0x3c], 0
mov dword [ebp - 0x10], ebx
je 0xbd4236
push 2
mov word [edx], di
pop esi
add edx, esi
mov dword [ebp - 8], edx
mov esi, dword [ebp - 4]
jmp 0xb976ae
mov ebx, dword [ebp - 0xe8]
mov esi, ecx
mov dword [ebp - 4], esi
jmp 0xb97d06
push 0x34
pop edi
mov ebx, ecx
mov ecx, dword [ebp - 0x10]
push 0x10
pop edx
movzx eax, word [ecx]
cmp ax, dx
je 0xbd370d
push 0xf
pop edx
cmp ax, dx
je 0xbd370d
or dword [ebp - 0x14], 0xffffffff
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], edx
test eax, eax
je 0xb97da2
add dword [ebp - 0x1c], edi
cmp dword [ebp - 0x50], 0
jne 0xbd3749
cmp eax, 0xffffffff
jne 0xbd371d
mov eax, dword [ebp - 0x1c]
add eax, 0x21
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
lea edi, [ecx + 2]
mov esi, dword [ebp - 0x14]
push 2
pop ecx
cmp dword [ebp - 0x3c], 0
je 0xb9831e
test ebx, 0x10000000
jne 0xbd388e
mov word [edi], bx
add edi, ecx
mov dword [ebp - 8], edi
test edx, edx
jns 0xbd3648
mov esi, dword [ebp - 4]
jmp 0xb98042
test edx, edx
jle 0xb98024
jmp 0xbd3303
lea ecx, [esi + 2]
cmp word [ecx], dx
je 0xb98445
push 3
mov edx, 0xc10bc0
call fcn.00b98525
pop ecx
test eax, eax
jne 0xb97815
mov eax, dword [ebp - 0x24]
add esi, 6
jmp 0xb977e4
push dword [ebp - 0xc]
mov ebx, dword [ebp + 0x28]
lea edx, [ebp - 0x94]
push dword [ebp - 0x34]
lea ecx, [ebp - 4]
push dword [ebx + 0x40]
push dword [ebp + 0xc]
call fcn.00b98554
mov edx, dword [ebp + 0xc]
xor ecx, ecx
add esp, 0x10
mov esi, eax
cmp dword [edx], ecx
jne 0xb9848d
test esi, esi
jne 0xb9844f
mov ebx, dword [ebp - 0x94]
mov esi, dword [ebp - 4]
mov dword [ebp - 0x18], ebx
jmp 0xb978a5
test eax, eax
jns 0xb97c6a
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xac], eax
mov eax, ecx
or eax, edi
mov dword [ebp - 0xa0], eax
jmp 0xb97c62
mov edx, eax
mov dword [ebp - 8], edx
jmp 0xb9747f
mov ebx, 0xff
jmp 0xbd2324
mov edi, dword [ebp - 0xc]
jmp 0xb97dea
add esi, edx
mov dword [ebp - 4], esi
jmp 0xbd2c82
mov ebx, 0x83
jmp 0xbd3cec
add esi, 2
jmp 0xbd2faf
mov dword [ebp - 8], eax
jmp 0xb97da2
mov ebx, 0x83
jmp 0xbd2cb0
mov edx, dword [ebp - 0xc]
xor ecx, ecx
jmp 0xb97b69
mov ecx, dword [ebp - 0xc]
jmp 0xb97b69
dec dword [eax + 0x5c]
jmp 0xb97bde
neg edi
jmp 0xbd419d
push 0x5c
mov esi, ecx
pop ecx
jmp 0xb977ea
cmp esi, 5
jne 0xbd45c4
push 8
pop ebx
jmp 0xb983ac
push 0x45
pop ebx
jmp 0xbd482a
mov esi, ecx
mov dword [ebp - 4], esi
jmp 0xb978de
push 0x20
xor eax, eax
pop ecx
jmp 0xbd4bc7
push 9
jmp 0xbd4d00
mov eax, dword [ebp + 0xc]
mov dword [eax], edi
jmp 0xbd4d31
mov esi, dword [ebp - 4]
jmp 0xbd4d31
mov esi, eax
xor eax, eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x60], eax
movzx edi, word [esi]
mov dword [ebp - 0x18], edi
jmp 0xb97452
test edi, edi
je 0xb974e2
push 0x5c
pop eax
cmp edi, eax
jne 0xbd22c0
push 0x45
pop ecx
cmp word [esi + 2], cx
mov ecx, dword [ebp + 0x28]
jne 0xbd22c0
xor ecx, ecx
add esi, 2
mov dword [ebp - 0x30], ecx
jmp 0xb976ae
mov eax, dword [ebp - 0x78]
test eax, eax
je 0xbd22e2
cmp dword [ebp + 0x2c], 0
jne 0xbd22dd
sub esi, dword [ecx + 0x18]
sar esi, 1
sub si, word [eax + 4]
mov word [eax + 6], si
mov esi, dword [ebp - 4]
xor eax, eax
mov dword [ebp - 0x78], eax
test dword [ebp - 0x34], 0x4000
je 0xb9758b
push 0x76
pop eax
mov word [edx], ax
lea eax, [edx + 2]
mov dword [ebp - 0x78], edx
mov edx, 0xff
mov word [eax], dx
sub esi, dword [ecx + 0x18]
xor ecx, ecx
push 2
pop edx
add eax, edx
sar esi, 1
mov word [eax], si
mov word [eax + 2], cx
add eax, 4
mov esi, dword [ebp - 4]
mov dword [ebp - 8], eax
jmp 0xb9758b
cmp edi, ebx
ja 0xbd2343
mov eax, dword [ecx + 0xc]
push 2
pop edx
test byte [eax + edi], 1
je 0xbd2340
add esi, edx
mov dword [ebp - 4], esi
movzx edi, word [esi]
cmp edi, ebx
jbe 0xbd232e
mov dword [ebp - 0x18], edi
push 0x23
pop eax
cmp edi, eax
jne 0xbd23fa
push 2
pop edx
jmp 0xbd23e7
mov edx, dword [ecx + 0x80]
test edx, edx
je 0xbd2394
cmp esi, dword [ecx + 0x1c]
jae 0xbd23c4
push dword [ebp - 0x3c]
lea eax, [ecx + 0x84]
push eax
push dword [ecx + 0x1c]
mov ecx, esi
call fcn.00b9602f
mov ecx, dword [ebp + 0x28]
add esp, 0xc
test eax, eax
je 0xbd23c4
mov eax, dword [ecx + 0x84]
lea esi, [esi + eax*2]
mov dword [ebp - 4], esi
movzx edi, word [esi]
jmp 0xbd2324
mov edx, dword [ecx + 0x84]
mov ecx, dword [ecx + 0x1c]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
mov ecx, dword [ebp + 0x28]
ja 0xbd23c4
cmp di, word [ecx + 0x88]
jne 0xbd23c4
cmp edx, dword [ebp - 0xc]
je 0xbd2383
mov ax, word [esi + 2]
cmp ax, word [ecx + 0x8a]
je 0xbd2383
push 2
pop edx
add esi, edx
cmp dword [ebp - 0x3c], 0
mov dword [ebp - 4], esi
je 0xbd23ec
mov ax, word [esi]
mov edi, 0xfc00
and ax, di
mov edi, 0xdc00
cmp ax, di
jne 0xbd23ec
add esi, edx
mov dword [ebp - 4], esi
movzx edi, word [esi]
test di, di
jne 0xbd2356
jmp 0xbd238f
mov ebx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], edi
jmp 0xb974f3
lea ecx, [esi + 2]
call fcn.00c0e720
mov edx, dword [ebp - 0x34]
test eax, eax
jne 0xb97a0d
jmp 0xb9751f
test eax, eax
jne 0xb9752f
mov eax, dword [ebp - 0x9c]
dec dword [ebp - 0x9c]
test eax, eax
jg 0xb97a10
cmp dword [ebp + 0x2c], ecx
jne 0xbd2457
mov eax, dword [ebp + 0x28]
sub esi, dword [eax + 0x18]
mov eax, dword [ebp - 0x78]
sar esi, 1
sub si, word [eax + 4]
mov word [eax + 6], si
mov esi, dword [ebp - 4]
xor eax, eax
mov dword [ebp - 0x78], eax
jmp 0xb97a10
test ecx, ecx
jne 0xb9753b
test eax, eax
jne 0xb9753b
mov eax, dword [ebp - 8]
push 0x76
pop edx
mov dword [ebp - 0x78], eax
mov word [eax], dx
add eax, 2
mov edx, 0xff
push 2
mov word [eax], dx
pop edx
add eax, edx
mov edx, dword [ebp + 0x28]
sub esi, dword [edx + 0x18]
sar esi, 1
xor edx, edx
mov word [eax + 2], dx
lea edx, [eax + 4]
mov word [eax], si
mov esi, dword [ebp - 4]
mov dword [ebp - 8], edx
jmp 0xb9753e
push 4
pop eax
add esi, eax
mov dword [ebp - 4], esi
movzx eax, word [esi]
test ax, ax
je 0xbd24d6
push 0x29
pop edx
cmp ax, dx
je 0xbd24d1
add esi, ebx
mov dword [ebp - 4], esi
movzx eax, word [esi]
test ax, ax
jne 0xbd24bf
cmp word [esi], cx
jne 0xbd24f9
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x12
jmp 0xbd4d31
mov eax, dword [ebp - 4]
mov esi, dword [edi*4 + 0xc395dc]
add eax, 2
push 2
pop edx
mov dword [ebp - 0x60], eax
sub esi, edx
mov ebx, dword [ebp - 0x10]
jmp 0xb976ab
lea ebx, [esi + 2]
movzx eax, word [ebx]
push 0x3a
pop edi
mov dword [ebp - 0x68], ebx
cmp ax, di
je 0xbd2534
mov edi, 0xff
cmp ax, di
ja 0xb97a9e
mov ecx, eax
mov eax, dword [ebp + 0x28]
mov eax, dword [eax + 0xc]
test byte [ecx + eax], 2
je 0xbd2736
xor ecx, ecx
mov esi, ebx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], esi
mov edi, 0xff
mov edx, 0xc38810
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x24], edx
movzx eax, word [esi]
mov dword [ebp - 0x10], ecx
cmp ax, di
ja 0xbd2579
mov ecx, dword [ebp + 0x28]
push 2
pop edx
mov ecx, dword [ecx + 0xc]
movzx eax, ax
test byte [eax + ecx], 2
je 0xbd2576
add esi, edx
mov dword [ebp - 4], esi
movzx eax, word [esi]
cmp ax, di
jbe 0xbd2560
mov edx, dword [ebp - 0x24]
mov eax, esi
sub eax, ebx
push 0x3a
sar eax, 1
pop ecx
mov dword [ebp - 0x38], eax
cmp word [esi], cx
jne 0xbd25cc
push 2
pop ecx
add esi, ecx
mov dword [ebp - 4], esi
mov edi, esi
mov dword [ebp - 0x1c], edi
movzx eax, word [esi]
test ax, ax
je 0xbd25b4
push 0x29
pop ebx
cmp ax, bx
je 0xbd25b4
add esi, ecx
mov dword [ebp - 4], esi
movzx eax, word [esi]
test ax, ax
jne 0xbd25a2
mov ecx, esi
sub ecx, edi
sar ecx, 1
mov dword [ebp - 0x14], ecx
cmp ecx, 0xffff
ja 0xbd4bd8
mov eax, dword [ebp - 0x38]
push 0x29
pop ecx
cmp word [esi], cx
jne 0xbd272f
xor ecx, ecx
mov ebx, 0xc38740
mov dword [ebp - 0x18], ecx
mov edi, dword [ebx]
cmp eax, edi
jne 0xbd25ff
mov ecx, dword [ebp - 0x68]
push eax
call fcn.00b98525
pop ecx
test eax, eax
je 0xbd2619
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
inc edx
add ebx, 0xc
add edx, edi
inc ecx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x18], ecx
cmp ebx, 0xc387ac
jl 0xbd25e2
jmp 0xbd2723
imul eax, dword [ebp - 0x18], 0xc
mov edi, 0x9e
mov ecx, dword [eax + 0xc38744]
cmp ecx, edi
jne 0xbd268b
cmp dword [ebp - 0x14], 0
jne 0xbd4be6
mov ebx, dword [ebp + 0x28]
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov ecx, dword [ebx + 0x24]
mov dword [ebx + 0x6c], eax
test ecx, ecx
je 0xbd2665
push 2
pop esi
mov eax, 0xa0
mov word [edx], ax
add edx, esi
mov ax, word [ecx + 4]
mov word [edx], ax
add edx, esi
mov ecx, dword [ecx]
test ecx, ecx
jne 0xbd264c
xor eax, eax
xor ecx, ecx
cmp dword [ebx + 0x5c], ecx
push 2
setg al
add eax, edi
mov word [edx], ax
movzx esi, ax
pop eax
add edx, eax
cmp dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 8], edx
jne 0xbd26f9
or dword [ebp - 0x2c], 0xffffffff
jmp 0xbd26f9
mov ebx, dword [ebp - 0x14]
test ebx, ebx
jne 0xbd26af
test ecx, ecx
js 0xbd4bf4
movzx eax, cx
mov ecx, dword [ebp - 8]
mov esi, eax
push 2
mov word [ecx], ax
pop eax
add ecx, eax
mov dword [ebp - 8], ecx
jmp 0xbd26f6
xor ecx, ecx
cmp dword [eax + 0xc38748], ecx
jl 0xbd4be6
movzx eax, word [eax + 0xc38748]
mov edi, dword [ebp - 8]
mov esi, eax
push 2
mov word [edi], ax
pop eax
add edi, eax
mov word [edi], bx
add edi, eax
lea eax, [ebx + ebx]
push eax
push dword [ebp - 0x1c]
push edi
call fcn.00ba1950
add esp, 0xc
lea edi, [edi + ebx*2]
xor eax, eax
mov word [edi], ax
push 2
pop eax
add edi, eax
mov dword [ebp - 8], edi
mov ebx, dword [ebp + 0x28]
cmp esi, 0x96
jl 0xbd2720
cmp esi, 0x99
jle 0xbd271a
cmp esi, 0x9b
jg 0xbd2720
or dword [ebx + 0x64], 0x1000
jmp 0xbd2720
mov eax, dword [ebp - 0xc]
mov dword [ebx + 0x70], eax
mov esi, dword [ebp - 4]
push 9
pop eax
cmp dword [ebp - 0x18], eax
jl 0xbd24f9
push 0x3c
jmp 0xbd4cfd
xor ecx, ecx
jmp 0xb97a9e
je 0xbd2c95
cmp eax, 0x28
jg 0xbd2c60
je 0xbd2811
sub eax, 0x21
je 0xbd2785
sub eax, 5
je 0xbd2768
dec eax
je 0xbd2d9f
jmp 0xb97e54
push 0x29
pop eax
mov ebx, eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], eax
jmp 0xbd277d
mov dword [ebp - 0x18], ecx
push 0x29
pop eax
mov ebx, eax
mov edx, dword [ebp + 0xc]
jmp 0xbd3e39
add esi, edx
push 0x29
pop eax
mov dword [ebp - 4], esi
cmp word [esi], ax
jne 0xbd2803
movzx eax, word [esi + 2]
push 0x2a
pop edx
cmp ax, dx
je 0xbd2803
push 0x2b
pop edx
cmp ax, dx
je 0xbd2803
push 0x3f
pop edx
cmp ax, dx
je 0xbd2803
push 0x7b
pop edx
cmp ax, dx
jne 0xbd27c4
lea ecx, [esi + 4]
call fcn.00c0e720
test eax, eax
jne 0xbd2803
xor ecx, ecx
mov edx, dword [ebp - 8]
mov eax, 0x9d
push 2
pop ebx
mov word [edx], ax
add edx, ebx
mov ebx, ecx
jmp 0xbd27fb
mov word [edx], cx
push 2
pop eax
add edx, eax
mov eax, dword [ebp - 4]
sub eax, dword [ebx + 0x18]
sar eax, 1
inc eax
mov word [edx], ax
xor eax, eax
mov word [edx + 2], ax
push 4
pop eax
add edx, eax
xor eax, eax
mov ebx, eax
mov dword [ebp - 0x10], ebx
jmp 0xb98285
mov edx, dword [ebp + 0x28]
push 0x7e
pop ebx
inc dword [edx + 0x5c]
jmp 0xbd3cec
push 0x3f
pop eax
mov ebx, 0x87
mov edx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x70], edx
cmp word [esi + 2], ax
jne 0xbd2864
push 0x43
pop ecx
cmp word [esi + 4], cx
jne 0xbd2864
movzx eax, word [esi + 6]
push 3
pop ecx
push 0x30
pop edi
jmp 0xbd284a
cmp ax, word [ebp - 0x90]
ja 0xbd284f
inc ecx
movzx eax, word [esi + ecx*2]
cmp ax, di
jae 0xbd283c
push 0x29
pop eax
cmp word [esi + ecx*2], ax
push 0x3f
pop eax
jne 0xbd2864
lea edx, [ecx + 1]
lea edx, [esi + edx*2]
mov dword [ebp - 0x70], edx
cmp word [edx + 2], ax
jne 0xbd28a5
movzx eax, word [edx + 4]
push 0x3d
pop edi
cmp ax, di
je 0xbd2897
push 0x21
pop ecx
cmp ax, cx
je 0xbd2897
push 0x3c
pop ecx
cmp ax, cx
jne 0xbd28a5
movzx eax, word [edx + 6]
cmp ax, di
je 0xbd2897
push 0x21
pop ecx
cmp ax, cx
jne 0xbd28a5
mov edx, dword [ebp + 0x28]
mov eax, dword [ebp - 0xc]
mov dword [edx + 0x7c], eax
jmp 0xbd3cec
mov eax, dword [ebp - 8]
mov ecx, 0x8d
push 2
xor ebx, ebx
or edi, 0xffffffff
or dword [ebp - 0x18], edi
mov edx, ebx
mov word [eax + 4], cx
mov ecx, ebx
mov esi, dword [ebp - 4]
pop eax
add esi, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], ecx
movzx eax, word [esi]
cmp ax, word [ebp - 0x144]
jne 0xbd2a04
push 0x26
pop ebx
cmp word [esi + 2], bx
push edx
pop ebx
jne 0xbd2a04
push 4
pop eax
or ebx, edi
mov ecx, 0x8f
add esi, eax
mov dword [ebp - 0x10], ebx
mov eax, dword [ebp - 8]
mov dword [ebp - 4], esi
mov word [eax + 4], cx
mov esi, dword [ebp - 4]
movzx eax, word [esi]
push 0x30
pop ecx
cmp ax, cx
jb 0xbd2920
push 0x39
pop ecx
cmp ax, cx
jbe 0xbd4c02
mov ecx, 0xff
cmp ax, cx
ja 0xbd4c31
movzx ecx, ax
mov eax, dword [ebp + 0x28]
mov eax, dword [eax + 0xc]
test byte [ecx + eax], 0x10
je 0xbd4c31
push 2
pop eax
mov dword [ebp - 0x14], esi
mov ecx, 0xff
add esi, eax
mov dword [ebp - 4], esi
movzx eax, word [esi]
cmp ax, cx
ja 0xbd297f
mov ecx, dword [ebp + 0x28]
push 2
pop ebx
mov ecx, dword [ecx + 0xc]
movzx eax, ax
test byte [eax + ecx], 0x10
je 0xbd297c
add esi, ebx
mov dword [ebp - 4], esi
movzx eax, word [esi]
cmp ax, word [ebp - 0xb4]
jbe 0xbd2962
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebp + 0x2c]
mov ecx, esi
sub ecx, dword [ebp - 0x14]
sar ecx, 1
mov dword [ebp - 0x18], ecx
test eax, eax
je 0xbd2992
inc dword [eax]
test ebx, ebx
jle 0xbd29aa
mov ax, word [esi]
push 2
pop ecx
add esi, ecx
mov dword [ebp - 4], esi
cmp ax, bx
jne 0xbd4c1e
mov ecx, dword [ebp - 0x14]
mov ax, word [esi]
push 2
pop ebx
add esi, ebx
push 0x29
pop ebx
mov dword [ebp - 0x24], esi
mov dword [ebp - 4], esi
cmp ax, bx
jne 0xbd4c1e
cmp dword [ebp + 0x2c], 0
jne 0xbd3ce9
test edi, edi
js 0xbd2ae2
test edx, edx
jle 0xbd4c10
mov ebx, dword [ebp + 0x28]
test edi, edi
je 0xbd2ab4
push 0x2d
pop eax
cmp edi, eax
jne 0xbd2ab1
mov eax, dword [ebx + 0x40]
sub eax, edx
lea edx, [eax + 1]
jmp 0xbd2ab4
cmp ax, word [ebp - 0x110]
jne 0xbd2a26
push 0x3e
jmp 0xbd2a13
push 0x27
pop eax
mov ebx, eax
push 2
pop eax
add esi, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], esi
jmp 0xbd2909
cmp ax, word [ebp - 0xe0]
je 0xbd2a11
mov dword [ebp - 0x10], ebx
cmp ax, word [ebp - 0x154]
je 0xbd2a64
cmp ax, word [ebp - 0x158]
je 0xbd2a64
cmp ax, word [ebp - 0xe4]
jb 0xbd2920
cmp ax, word [ebp - 0x90]
ja 0xbd2909
xor eax, eax
mov edi, eax
jmp 0xbd2a76
mov edi, eax
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
test edi, edi
js 0xbd2909
movzx eax, word [esi]
push 0x30
pop ebx
cmp ax, bx
jb 0xbd29ad
push 0x39
pop ecx
cmp ax, cx
ja 0xbd29aa
imul ecx, edx, 0xa
movzx edx, ax
push 2
pop eax
add esi, eax
add edx, 0xffffffd0
mov dword [ebp - 4], esi
add edx, ecx
movzx eax, word [esi]
cmp ax, bx
jae 0xbd2a85
jmp 0xbd29aa
add edx, dword [ebx + 0x40]
test edx, edx
jle 0xbd3c4c
cmp edx, dword [ebx + 0x44]
jg 0xbd3c4c
mov eax, dword [ebp - 8]
push 0x52
pop edi
mov word [eax + 6], dx
mov esi, dword [ebp - 4]
cmp edx, dword [ebx + 0x4c]
jle 0xbd2ada
mov dword [ebx + 0x4c], edx
mov ebx, dword [ebp - 0x1c]
jmp 0xbd3cef
mov edx, dword [ebp + 0x28]
xor ebx, ebx
mov edi, ebx
mov ebx, dword [edx + 0x30]
mov eax, dword [edx + 0x2c]
mov dword [ebp - 0x48], eax
test ebx, ebx
jle 0xbd2b27
mov esi, dword [ebp - 0x18]
push esi
lea edx, [eax + 2]
call fcn.00c0eab9
mov edx, dword [ebp + 0x28]
pop ecx
test eax, eax
je 0xbd2b21
mov eax, dword [edx + 0x34]
inc edi
mov ecx, dword [ebp - 0x48]
lea ecx, [ecx + eax*2]
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x48]
cmp edi, ebx
jl 0xbd2af9
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
cmp edi, ebx
jge 0xbd2bb5
movzx eax, word [eax]
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x68], edi
inc edi
mov dword [ebp - 0x80], eax
cmp eax, dword [edx + 0x4c]
jle 0xbd2b44
mov dword [edx + 0x4c], eax
cmp edi, dword [edx + 0x30]
jge 0xbd2ba9
mov esi, dword [edx + 0x34]
mov eax, dword [ebp - 0x18]
add esi, esi
mov ecx, dword [ebp - 0x48]
add ecx, esi
mov dword [ebp - 0x48], ecx
push eax
lea edx, [ecx + 2]
mov ecx, dword [ebp - 0x14]
call fcn.00c0eab9
pop ecx
test eax, eax
jne 0xbd2b83
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x48]
cmp word [ecx + eax*2 + 2], dx
jne 0xbd2b83
mov edx, dword [ebp + 0x28]
inc ebx
inc edi
cmp edi, dword [edx + 0x30]
jl 0xbd2b54
cmp ebx, dword [ebp - 0xc]
jle 0xbd2ba6
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x20], 3
inc word [edx + 4]
mov word [edx + 6], ax
mov word [edx + 8], bx
jmp 0xb97aef
mov eax, dword [ebp - 0x80]
mov edx, dword [ebp - 8]
mov word [edx + 6], ax
jmp 0xb97aef
cmp dword [ebp - 0x10], 0
jne 0xbd3c4c
mov eax, dword [ebp - 0x14]
push 0x52
pop edi
cmp word [eax], di
jne 0xbd2c22
mov ebx, dword [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp - 0xc]
cmp ebx, 1
jle 0xbd2c08
push 0x30
pop edi
movzx eax, word [eax + edx*2]
cmp ax, di
jb 0xbd3c4c
cmp ax, word [ebp - 0x90]
ja 0xbd3c4c
imul ecx, ecx, 0xa
add eax, 0xffffffd0
add ecx, eax
mov eax, dword [ebp - 0x14]
inc edx
cmp edx, ebx
jl 0xbd2bda
test ecx, ecx
jne 0xbd2c0d
mov ecx, 0xffff
mov edx, dword [ebp - 8]
mov eax, 0x8f
mov word [edx + 4], ax
mov word [edx + 6], cx
jmp 0xb97aef
cmp dword [ebp - 0x18], 6
jne 0xbd3c4c
push 6
mov edx, str.DEFINE
mov ecx, eax
call fcn.00b98525
pop ecx
test eax, eax
jne 0xbd3c4c
mov edx, dword [ebp - 8]
mov eax, 0x91
mov ebx, dword [ebp - 0x1c]
mov word [edx + 4], ax
mov eax, dword [ebp - 0xc]
mov esi, dword [ebp - 4]
mov dword [ebp - 0x20], eax
jmp 0xb97af8
push 0x2b
pop edx
cmp eax, edx
je 0xbd2c82
push 0x2d
pop edx
cmp eax, edx
je 0xbd2c82
cmp eax, 0x2f
jle 0xb97e54
push 0x39
pop edx
cmp eax, edx
jg 0xb97e54
push 0x29
pop eax
mov ebx, eax
mov dword [ebp - 0x4c], ebx
jmp 0xbd3b8a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
mov ebx, 0x83
jmp 0xbd2ca1
mov ebx, 0x81
add esi, edx
jmp 0xbd2cb5
mov edx, dword [ebp + 0x28]
push 0x7d
pop eax
mov ebx, eax
inc dword [edx + 0x5c]
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
jmp 0xbd3cec
add esi, edx
push 0x3d
mov dword [ebp - 4], esi
pop eax
movzx edi, word [esi]
cmp di, ax
je 0xbd2775
push 0x3e
pop eax
cmp di, ax
je 0xbd2cec
push 0x3c
pop ecx
cmp di, cx
je 0xbd2d9f
push 0x29
jmp 0xbd4cfd
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], eax
jmp 0xbd2778
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
push 0x76
mov dword [ebp - 0x9c], eax
pop eax
mov word [edx], ax
mov esi, dword [ebp - 4]
push 2
pop eax
add esi, eax
mov dword [ebp - 0x78], edx
add edx, eax
mov dword [ebp - 4], esi
push 0x30
pop edi
movzx eax, word [esi]
cmp ax, di
jb 0xbd2d4b
push 2
pop ebx
cmp ax, word [ebp - 0x90]
ja 0xbd2d48
imul ecx, ecx, 0xa
add esi, ebx
movzx eax, ax
add eax, 0xffffffd0
mov dword [ebp - 4], esi
add ecx, eax
movzx eax, word [esi]
cmp ax, di
jae 0xbd2d27
mov ebx, dword [ebp + 0x28]
push 0x29
pop eax
cmp word [esi], ax
jne 0xbd4c3f
mov eax, 0xff
cmp ecx, eax
jle 0xbd27d8
push 0x26
jmp 0xbd4cfd
movzx eax, word [esi + 2]
mov ecx, eax
cmp ecx, 0x21
je 0xbd2f50
cmp ecx, 0x3d
je 0xbd2f4b
cmp ax, word [ebp - 0xb4]
ja 0xbd4c70
mov eax, dword [ebx + 0xc]
push 0x10
pop ebx
test byte [ecx + eax], bl
je 0xbd4c70
push 0x3c
pop eax
xor ecx, ecx
cmp di, ax
push 0x17
setne cl
add esi, edx
pop eax
dec ecx
mov dword [ebp - 4], esi
and ecx, eax
mov ebx, esi
push 0x27
pop eax
add ecx, eax
mov dword [ebp - 0x24], ebx
movzx eax, word [esi]
push 0x30
pop edx
cmp ax, dx
jb 0xbd2dd6
push 0x39
pop edx
cmp ax, dx
jbe 0xbd4c02
mov edi, dword [ebp + 0x28]
mov edx, 0xff
cmp ax, dx
ja 0xbd2e06
mov edx, dword [edi + 0xc]
push 2
pop ebx
movzx eax, ax
test byte [eax + edx], 0x10
je 0xbd2e03
add esi, ebx
mov dword [ebp - 4], esi
movzx eax, word [esi]
cmp ax, word [ebp - 0xb4]
jbe 0xbd2de9
mov ebx, dword [ebp - 0x24]
mov edx, esi
sub edx, ebx
sar edx, 1
cmp dword [ebp + 0x2c], 0
mov dword [ebp - 0x14], edx
je 0xbd2f3b
mov eax, dword [edi + 0x40]
inc eax
mov dword [ebp - 0x18], eax
cmp word [esi], cx
jne 0xbd4c69
cmp dword [edi + 0x30], 0x2710
jge 0xbd4c5b
lea eax, [edx + 2]
cmp eax, dword [edi + 0x34]
jle 0xbd2e4f
push 0x20
mov dword [edi + 0x34], eax
pop eax
cmp edx, eax
jle 0xbd2e4f
push 0x30
jmp 0xbd4cfd
mov ecx, dword [ebp + 0x28]
xor eax, eax
mov edi, dword [edi + 0x28]
mov ebx, eax
cmp dword [ecx + 0x30], eax
jle 0xbd2ebb
cmp edx, dword [edi + 4]
jne 0xbd2ea2
mov ecx, dword [ebp - 0x24]
push edx
mov edx, dword [edi]
call fcn.00c0eab9
pop ecx
test eax, eax
jne 0xbd2e9f
mov eax, dword [ebp - 0x18]
cmp dword [edi + 8], eax
je 0xbd2eb8
test dword [ebp - 0x34], 0x80000
je 0xbd4c46
mov ecx, dword [ebp + 0x28]
mov eax, dword [ebp - 0xc]
mov dword [ecx + 0x78], eax
mov edx, dword [ebp - 0x14]
inc ebx
add edi, 0xc
cmp ebx, dword [ecx + 0x30]
jl 0xbd2e5e
jmp 0xbd2ebb
mov ecx, dword [ebp + 0x28]
mov eax, dword [ebp - 0x18]
cmp dword [edi + 8], eax
jne 0xbd2e91
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x41
jmp 0xbd4d31
mov ecx, dword [ebp + 0x28]
cmp ebx, dword [ecx + 0x30]
mov ebx, dword [ebp + 0x28]
jl 0xbd2f3e
mov eax, dword [ebx + 0x38]
cmp dword [ebx + 0x30], eax
jl 0xbd2f0a
lea edi, [eax + eax]
imul eax, edi, 0xc
push eax
call dword [0xc2675c]
mov esi, eax
pop ecx
test esi, esi
je 0xbd4c4d
imul eax, dword [ebx + 0x38], 0xc
push eax
push dword [ebx + 0x28]
push esi
call fcn.00ba1950
add esp, 0xc
cmp dword [ebx + 0x38], 0x14
jle 0xbd2f04
push dword [ebx + 0x28]
call dword [0xc26758]
pop ecx
mov dword [ebx + 0x28], esi
mov dword [ebx + 0x38], edi
imul ecx, dword [ebx + 0x30], 0xc
mov eax, dword [ebx + 0x28]
mov edx, dword [ebp - 0x24]
mov dword [ecx + eax], edx
imul ecx, dword [ebx + 0x30], 0xc
mov eax, dword [ebx + 0x28]
mov edx, dword [ebp - 0x14]
mov dword [ecx + eax + 4], edx
imul ecx, dword [ebx + 0x30], 0xc
mov eax, dword [ebx + 0x28]
mov edx, dword [ebp - 0x18]
mov dword [ecx + eax + 8], edx
inc dword [ebx + 0x30]
mov esi, dword [ebp - 4]
jmp 0xbd2f3e
mov ebx, dword [ebp + 0x28]
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
jmp 0xb97adb
push 0x7f
pop ebx
jmp 0xbd2f55
mov ebx, 0x80
mov edx, dword [ebp + 0x28]
push 4
inc dword [edx + 0x5c]
jmp 0xbd2cb2
test byte [ebp - 0x34], 2
mov ebx, ecx
push 0
pop eax
setne al
add eax, 0x19
jmp 0xb981b1
test ecx, ecx
je 0xb9758b
push dword [ebp + 0xc]
lea eax, [ebp - 0x40]
push eax
lea ecx, [esi + 2]
lea edx, [ebp - 0x50]
call fcn.00c0e792
mov esi, eax
mov eax, dword [ebp + 0xc]
pop ecx
pop ecx
xor ecx, ecx
mov dword [ebp - 4], esi
cmp dword [eax], ecx
jne 0xbd4d31
mov edx, dword [ebp - 0x40]
mov edi, dword [ebp - 0x50]
jmp 0xb97c9d
push 2
pop edx
movzx eax, word [esi]
mov edi, 0xff
mov ebx, dword [ebp + 0x28]
cmp ax, di
ja 0xbd2fd8
mov ecx, dword [ebx + 0xc]
movzx eax, ax
test byte [eax + ecx], 1
je 0xbd2fd8
add esi, edx
movzx eax, word [esi]
cmp ax, di
jbe 0xbd2fc5
push 0x23
pop eax
cmp word [esi], ax
je 0xbd3077
mov edx, dword [ebp - 0x40]
add esi, 0xfffffffe
mov edi, dword [ebp - 0x50]
mov dword [ebp - 4], esi
jmp 0xb97ce2
mov edx, dword [ebx + 0x80]
test edx, edx
je 0xbd302a
cmp esi, dword [ebx + 0x1c]
jae 0xbd3057
push dword [ebp - 0x3c]
lea eax, [ebx + 0x84]
mov ecx, esi
push eax
push dword [ebx + 0x1c]
call fcn.00b9602f
add esp, 0xc
test eax, eax
je 0xbd3057
mov eax, dword [ebx + 0x84]
lea esi, [esi + eax*2]
jmp 0xbd2faf
mov edx, dword [ebx + 0x84]
mov ecx, dword [ebx + 0x1c]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0xbd3057
cmp di, word [ebx + 0x88]
jne 0xbd3057
cmp edx, dword [ebp - 0xc]
je 0xbd301f
mov ax, word [esi + 2]
cmp ax, word [ebx + 0x8a]
je 0xbd301f
push 2
pop edx
add esi, edx
cmp dword [ebp - 0x3c], 0
je 0xbd3079
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0xbd3079
add esi, edx
movzx edi, word [esi]
test di, di
jne 0xbd2ff5
jmp 0xbd2fb2
xor eax, eax
mov esi, ecx
mov ebx, eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], esi
jmp 0xb97d09
mov esi, dword [ebp - 0x10]
push 4
pop eax
push eax
lea eax, [esi + 4]
push esi
push eax
call fcn.00ba88f0
add dword [ebp - 8], 8
add esp, 0xc
cmp dword [ebp + 0x2c], 0
mov eax, 0x81
mov word [esi], ax
push 4
pop eax
push 0x78
pop ecx
mov word [esi + 2], ax
mov word [esi + 8], cx
mov word [esi + 0xa], ax
mov dword [ebp - 0x84], 6
jne 0xbd3113
mov eax, dword [ebp + 0x28]
push 2
pop edx
mov ecx, dword [eax + 0x20]
mov eax, dword [eax + 0x10]
add eax, edx
cmp ecx, eax
jb 0xbd3113
movzx edx, word [ecx - 2]
mov eax, esi
mov esi, dword [ebp + 0x28]
push 2
sub eax, dword [esi + 0x14]
pop esi
add eax, esi
sar eax, 1
cmp edx, eax
jne 0xbd3113
lea eax, [edx + 2]
mov word [ecx - 2], ax
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x40]
mov esi, dword [ebp - 4]
jmp 0xb97d18
mov ebx, 0x91
cmp word [eax + 4], bx
mov ebx, dword [ebp - 0x1c]
je 0xb97da2
jmp 0xb97f8d
test eax, eax
jg 0xb97da2
mov ecx, dword [ebp - 0xc]
test edx, edx
js 0xbd314f
cmp edx, ecx
jle 0xb97fa1
mov edx, ecx
mov dword [ebp - 0x40], edx
jmp 0xb97fa1
mov eax, dword [ebp - 0x10]
mov ecx, 0xa1
mov word [eax], cx
jmp 0xbd3a0a
mov esi, dword [ebp - 0x10]
xor ecx, ecx
mov word [eax], cx
mov ecx, esi
push 3
pop edx
call fcn.00b98831
add esp, 0xc
lea eax, [edi + edi]
push eax
lea eax, [esi + 6]
push esi
push eax
call fcn.00ba88f0
add dword [ebp - 8], 6
lea eax, [ebx + 0x92]
mov edx, dword [ebp - 0x40]
add esp, 0xc
mov word [esi], ax
mov eax, 0x83
push 2
pop ecx
add esi, ecx
mov word [esi], ax
add esi, ecx
xor eax, eax
mov dword [ebp - 0x24], esi
mov word [esi], ax
add esi, ecx
jmp 0xb98007
cmp eax, ecx
jle 0xbd32f4
mov ebx, dword [ebp + 0x2c]
test ebx, ebx
je 0xbd3211
dec eax
xor ecx, ecx
mov edi, eax
imul dword [ebp - 0x84]
imul edi, dword [ebp - 0x84]
cmp edx, ecx
jg 0xbd4c80
jl 0xbd31f3
cmp eax, 0x7fffffff
ja 0xbd4c80
mov ecx, dword [ebx]
mov eax, 0x7fffffeb
sub eax, ecx
cmp eax, edi
jl 0xbd4c80
lea eax, [ecx + edi]
mov edi, dword [ebp - 0x18]
mov dword [ebx], eax
jmp 0xbd32ee
cmp dword [ebp - 0x98], 0
je 0xbd322f
cmp dword [ebp - 0x54], 0
jge 0xbd322f
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x38], ecx
mov ebx, ecx
cmp eax, ecx
jle 0xbd32f4
mov esi, dword [ebp - 0x14]
lea eax, [edi + edi]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp + 0x28]
push eax
push dword [ebp - 0x10]
mov edi, dword [ecx + 0x20]
sub edi, dword [ecx + 0x10]
push dword [ebp - 8]
sar edi, 1
mov dword [ebp - 0x68], edi
call fcn.00ba1950
add esp, 0xc
jmp 0xbd3278
mov ecx, edx
call fcn.00c0e1a8
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test eax, eax
jne 0xb9848d
mov edx, dword [ebp + 0x28]
mov ecx, esi
sub ecx, edi
add ecx, dword [edx + 0x3c]
mov eax, dword [edx + 0x10]
lea eax, [eax + ecx*2]
add eax, 0xffffff38
cmp dword [edx + 0x20], eax
ja 0xbd3264
mov eax, dword [edx + 0x10]
lea edx, [eax + esi*2]
lea esi, [edi + edi]
add eax, esi
cmp edx, eax
jae 0xbd32ca
mov edi, dword [ebp - 0x18]
mov ebx, dword [ebp + 0x28]
mov cx, word [edx]
mov eax, dword [ebx + 0x20]
add cx, di
push 2
mov word [eax], cx
pop eax
add dword [ebx + 0x20], eax
add edx, eax
mov eax, dword [ebx + 0x10]
add eax, esi
cmp edx, eax
jb 0xbd32a7
mov edi, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebp - 8]
mov esi, edi
mov edi, dword [ebp - 0x18]
inc ebx
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x38], ebx
lea eax, [eax + edi*2]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x80]
cmp ebx, dword [ebp - 0x50]
jl 0xbd3245
mov esi, dword [ebp - 4]
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x40]
test edx, edx
jle 0xb98013
sub edx, eax
jmp 0xb9800e
mov eax, dword [ebp - 0x84]
add eax, 5
mov ecx, eax
imul ecx, edx
push 4
imul edx
pop edi
sub ecx, edi
xor edi, edi
cmp edx, edi
jg 0xbd4c80
jl 0xbd332f
cmp eax, 0x7fffffff
ja 0xbd4c80
mov edx, dword [ebx]
mov eax, 0x7fffffeb
sub eax, edx
cmp eax, ecx
jl 0xbd4c80
lea eax, [edx + ecx]
mov dword [ebx], eax
jmp 0xb98031
mov eax, dword [ebp - 0x1c]
lea ecx, [edi + edi]
mov esi, dword [ebp - 0x14]
add eax, 0x92
mov edx, dword [ebp - 8]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x38], ecx
mov edi, dword [ebp + 0x28]
mov ecx, dword [ebp + 0x28]
push 2
mov edi, dword [edi + 0x20]
sub edi, dword [ecx + 0x10]
mov ecx, dword [ebp - 0x38]
mov word [edx], ax
pop eax
sar edi, 1
add edx, eax
mov dword [ebp - 0x68], edi
mov dword [ebp - 8], edx
test ebx, ebx
je 0xbd33b7
mov eax, 0x83
mov word [edx], ax
push 2
pop eax
add edx, eax
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x24]
test edx, edx
jne 0xbd339f
xor eax, eax
jmp 0xbd33a6
mov eax, dword [ebp - 8]
sub eax, edx
sar eax, 1
mov edx, dword [ebp - 8]
push 2
mov dword [ebp - 0x24], edx
mov word [edx], ax
pop eax
add edx, eax
mov dword [ebp - 8], edx
push ecx
push dword [ebp - 0x10]
push edx
call fcn.00ba1950
add esp, 0xc
jmp 0xbd33da
mov ecx, edx
call fcn.00c0e1a8
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test eax, eax
jne 0xb9848d
mov edx, dword [ebp + 0x28]
mov ecx, esi
sub ecx, edi
add ecx, dword [edx + 0x3c]
mov eax, dword [edx + 0x10]
lea eax, [eax + ecx*2]
add eax, 0xffffff38
cmp dword [edx + 0x20], eax
ja 0xbd33c6
mov eax, dword [edx + 0x10]
lea edx, [eax + esi*2]
lea esi, [edi + edi]
add eax, esi
cmp edx, eax
jae 0xbd3438
mov edi, dword [ebp + 0x28]
mov cx, word [edx]
xor eax, eax
test ebx, ebx
push 2
setne al
add cx, word [ebp - 0x18]
lea eax, [eax*2 + 1]
add cx, ax
mov eax, dword [edi + 0x20]
mov word [eax], cx
pop eax
add dword [edi + 0x20], eax
add edx, eax
mov eax, dword [edi + 0x10]
add eax, esi
cmp edx, eax
jb 0xbd3406
mov edi, dword [ebp - 0x68]
dec ebx
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 8]
mov esi, edi
lea edx, [edx + eax*2]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 8], edx
jns 0xbd3361
mov esi, dword [ebp - 4]
xor edi, edi
jmp 0xb98034
mov ecx, edx
sub ecx, ebx
sar ecx, 1
inc ecx
lea eax, [ecx + ecx]
sub edx, eax
movzx eax, word [edx + 2]
test eax, eax
jne 0xbd3472
mov ebx, edi
jmp 0xbd3477
neg eax
lea ebx, [ebx + eax*2]
mov eax, dword [ebp - 8]
push 0x78
pop esi
push 2
mov word [eax], si
pop esi
add eax, esi
mov word [eax], cx
add eax, esi
mov word [edx + 2], cx
mov edx, eax
mov dword [ebp - 8], eax
test ebx, ebx
jne 0xbd345a
jmp 0xbd34a2
mov eax, dword [ebp - 0x1c]
add eax, 0x79
mov word [ecx], ax
mov esi, dword [ebp - 4]
jmp 0xb9803f
mov ecx, dword [ebp - 8]
mov edx, 0x81
add ecx, 0xfffffffc
mov edi, ecx
mov dword [ebp - 0x24], ecx
lea esi, [edx + 1]
movzx eax, word [ecx + 2]
add eax, eax
sub edi, eax
movzx eax, word [edi]
cmp ax, dx
je 0xbd34d2
cmp ax, si
jne 0xbd34e0
cmp dword [ebp - 0x20], 0
je 0xbd34e0
mov eax, 0x83
mov word [edi], ax
movzx ebx, word [edi]
cmp bx, dx
je 0xbd3499
cmp bx, si
je 0xbd3499
cmp dword [ebp + 0x2c], 0
jne 0xbd3526
mov esi, edi
xor eax, eax
mov edx, ecx
push eax
push dword [ebp + 0x28]
mov ecx, esi
push dword [ebp - 0x3c]
call fcn.00b98611
mov ecx, dword [ebp - 0x24]
add esp, 0xc
test eax, eax
jne 0xbd3520
movzx eax, word [esi + 2]
lea esi, [esi + eax*2]
cmp word [esi], 0x77
jne 0xbd3526
jmp 0xbd34f5
lea eax, [ebx + 5]
mov word [edi], ax
cmp dword [ebp - 0x20], 0
je 0xbd35dc
movzx eax, word [edi]
mov edx, 0x87
cmp ax, dx
je 0xbd3554
add edx, 5
cmp ax, dx
je 0xbd3554
inc eax
push 0x7b
mov word [edi], ax
pop eax
push 2
mov word [ecx], ax
pop edx
jmp 0xbd35b4
push dword [ebp - 0x88]
mov ebx, dword [ebp - 8]
xor eax, eax
push dword [ebp + 0x28]
mov esi, ebx
mov ecx, edi
push dword [ebp - 0x3c]
mov word [ebx], ax
sub esi, edi
push 2
pop eax
mov edx, eax
sar esi, 1
call fcn.00b98831
add esp, 0xc
lea eax, [esi + esi]
push eax
lea eax, [edi + 4]
push edi
push eax
call fcn.00ba88f0
add esp, 0xc
push 4
pop eax
add ebx, eax
mov eax, 0x84
push 2
pop edx
mov word [edi], ax
add esi, edx
push 0x7b
pop eax
mov word [ebx], ax
add ebx, edx
mov word [ebx], si
add ebx, edx
mov dword [ebp - 8], ebx
mov word [edi + 2], si
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0xbd35c3
mov ecx, 0x94
mov word [eax], cx
mov edi, dword [ebp - 8]
cmp dword [ebp - 0x50], edx
jge 0xb9832e
mov esi, dword [ebp - 4]
xor edx, edx
mov dword [ebp - 0x20], edx
jmp 0xb98044
mov eax, dword [ebp - 0x1c]
add eax, 0x79
jmp 0xbd35e7
movzx eax, al
mov word [ecx], ax
jmp 0xbd3a0a
mov eax, 0x9d
cmp cx, ax
je 0xb97da2
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xb
jmp 0xbd4d31
cmp edi, dword [ebp - 0xc]
jne 0xbd361d
cmp edx, 0xffffffff
jne 0xbd361d
lea eax, [ebx + 0x64]
jmp 0xb97d85
mov ecx, dword [ebp - 8]
lea eax, [ebx + 0x68]
push 2
mov word [ecx], ax
pop eax
add ecx, eax
push eax
mov dword [ebp - 8], ecx
lea eax, [edx + 1]
mov word [ecx], di
mov edi, ecx
pop ecx
add edi, ecx
neg eax
sbb eax, eax
and eax, edx
mov dword [ebp - 0x40], eax
mov word [edi], ax
jmp 0xbd3650
mov word [edi], dx
add edi, ecx
mov word [edi], si
add edi, ecx
mov dword [ebp - 8], edi
jmp 0xb9832e
push 0x1e
mov eax, ecx
pop edx
sub eax, edx
je 0xbd3676
dec eax
je 0xbd3671
dec eax
je 0xbd366d
xor eax, eax
jmp 0xbd3679
push 0x27
jmp 0xbd3678
push 0x1a
pop edi
jmp 0xbd367b
push 0xd
pop eax
mov edi, eax
cmp dword [ebp - 0x3c], 0
mov ebx, dword [ebp - 8]
je 0xbd36da
lea edx, [ebx - 2]
mov ax, word [edx]
and ax, word [ebp - 0x12c]
cmp ax, word [ebp - 0x148]
jne 0xbd36da
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0xbd36b4
push 2
pop eax
sub edx, eax
sub ebx, edx
sar ebx, 1
lea eax, [ebx + ebx]
push eax
push edx
lea eax, [ebp - 0x184]
push eax
call fcn.00ba1950
mov esi, dword [ebp - 4]
add esp, 0xc
or ebx, 0x10000000
jmp 0xb982a5
movzx ebx, word [ebx - 2]
push 0x1e
pop eax
cmp cx, ax
ja 0xb982a5
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x50], eax
jle 0xb982a5
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x5c], ebx
mov eax, dword [eax + 0x68]
or eax, dword [ebp - 0x8c]
mov dword [ebp - 0x54], eax
jmp 0xb982a5
movzx eax, word [ecx + 4]
movzx edx, word [ecx + 2]
mov dword [ebp - 0x14], eax
jmp 0xb982ca
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xc]
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
push 2
lea edi, [ecx + 2]
jne 0xbd373b
add eax, 0x25
mov word [ecx], ax
jmp 0xb9830b
add eax, 0x27
mov word [ecx], ax
mov eax, dword [ebp - 0x40]
jmp 0xbd3873
cmp dword [ebp - 0x50], 1
jne 0xbd378b
cmp eax, 0xffffffff
jne 0xbd375f
mov eax, dword [ebp - 0x1c]
add eax, 0x23
jmp 0xb982fd
mov dword [ebp - 8], ecx
cmp eax, 1
je 0xb97da2
mov eax, dword [ebp - 0x1c]
lea edi, [ecx + 2]
mov esi, dword [ebp - 0x14]
add eax, 0x27
mov word [ecx], ax
mov eax, dword [ebp - 0x40]
dec eax
push 2
pop ecx
mov word [edi], ax
add edi, ecx
jmp 0xb9830c
mov ecx, dword [ebp - 0x10]
lea eax, [edi + 0x29]
push 2
pop esi
mov word [ecx], ax
lea edi, [ecx + 2]
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x40]
mov word [edi], ax
add edi, esi
test ecx, ecx
jns 0xbd3805
cmp dword [ebp - 0x3c], 0
je 0xbd37ea
test ebx, 0x10000000
je 0xbd37ea
mov esi, ebx
and esi, 7
lea eax, [esi + esi]
push eax
lea eax, [ebp - 0x184]
push eax
push edi
call fcn.00ba1950
mov edx, dword [ebp - 0x24]
lea edi, [edi + esi*2]
add esp, 0xc
push 2
pop ecx
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
add eax, 0x21
mov word [edi], ax
jmp 0xbd3887
push 2
pop ecx
mov word [edi], bx
add edi, ecx
test edx, edx
js 0xbd37d9
mov esi, dword [ebp - 0x14]
mov word [edi], dx
add edi, ecx
mov word [edi], si
add edi, ecx
jmp 0xbd37dc
cmp ecx, eax
je 0xb98306
cmp dword [ebp - 0x3c], 0
je 0xbd3845
test ebx, 0x10000000
je 0xbd3845
mov esi, ebx
and esi, 7
lea eax, [esi + esi]
push eax
lea eax, [ebp - 0x184]
push eax
push edi
call fcn.00ba1950
mov edx, dword [ebp - 0x24]
lea edi, [edi + esi*2]
mov ecx, dword [ebp - 0x40]
add esp, 0xc
mov eax, dword [ebp - 0x50]
push 2
pop esi
jmp 0xbd384a
mov word [edi], bx
add edi, esi
test edx, edx
js 0xbd385e
mov word [edi], dx
add edi, esi
mov esi, dword [ebp - 0x14]
mov word [edi], si
add edi, 2
jmp 0xbd3861
mov esi, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], ecx
push 2
cmp ecx, dword [ebp - 0xc]
jne 0xbd3878
add eax, 0x25
mov word [edi], ax
jmp 0xbd3886
add eax, 0x27
mov word [edi], ax
pop eax
add edi, eax
push 2
mov word [edi], cx
pop ecx
add edi, ecx
jmp 0xb9830c
and ebx, 7
lea eax, [ebx + ebx]
push eax
lea eax, [ebp - 0x184]
push eax
push edi
call fcn.00ba1950
mov edx, dword [ebp - 0x24]
lea edi, [edi + ebx*2]
add esp, 0xc
push 2
pop ecx
jmp 0xb98323
mov eax, dword [ebp - 0x44]
movzx ecx, word [eax]
cmp ecx, 0x50
jg 0xbd391f
je 0xbd38e9
push 0x1d
pop eax
cmp ecx, eax
jl 0xbd3983
push 0x20
pop eax
cmp ecx, eax
jle 0xbd38e9
push 0x29
pop eax
cmp ecx, eax
je 0xbd38e9
cmp ecx, 0x36
je 0xbd38e9
push 0x43
pop eax
cmp ecx, eax
jne 0xbd3983
movzx eax, byte [ecx + 0xc26760]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x3c]
lea ecx, [ecx + eax*2]
mov dword [ebp - 0x44], ecx
test edx, edx
je 0xbd3986
mov ax, word [ecx - 2]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xd800
cmp ax, cx
jne 0xbd3986
add dword [ebp - 0x44], ebx
jmp 0xbd3986
push 0x5d
pop eax
cmp ecx, eax
je 0xbd3954
cmp ecx, 0x6d
jle 0xbd3983
push 0x6f
pop eax
cmp ecx, eax
jle 0xbd394e
mov edx, dword [ebp - 0x3c]
push 0x70
pop eax
cmp ecx, eax
jne 0xbd3986
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
movzx ecx, word [ecx + 2]
lea eax, [eax + ecx*2]
mov dword [ebp - 0x44], eax
jmp 0xbd3986
add dword [ebp - 0x44], 0x22
jmp 0xbd3983
mov eax, dword [ebp - 0x44]
movzx eax, word [eax + 4]
cmp ax, word [ebp - 0x100]
je 0xbd396f
cmp ax, word [ebp - 0x108]
mov eax, edx
jne 0xbd3971
mov eax, ebx
movzx ecx, byte [ecx + 0xc26760]
add ecx, eax
mov eax, dword [ebp - 0x44]
lea eax, [eax + ecx*2]
mov dword [ebp - 0x44], eax
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
sub edi, ecx
sar edi, 1
test edi, edi
jle 0xb97da2
movzx eax, word [ecx]
push 0x76
pop ebx
cmp eax, ebx
jae 0xbd39ad
mov al, byte [eax + 0xc39930]
test al, al
jne 0xbd35e4
push dword [ebp - 0x88]
mov ebx, dword [ebp - 8]
xor eax, eax
push dword [ebp + 0x28]
push edx
push 2
pop esi
mov word [ebx], ax
mov edx, esi
mov ecx, dword [ebp - 0x44]
call fcn.00b98831
add esp, 0xc
lea eax, [edi + edi]
push eax
mov eax, dword [ebp - 0x44]
push eax
add eax, 4
push eax
call fcn.00ba88f0
add esp, 0xc
lea ecx, [esi + 0x7f]
add edi, esi
push 4
pop eax
add ebx, eax
mov eax, dword [ebp - 0x44]
push 0x78
mov word [eax], cx
pop eax
mov word [ebx], ax
add ebx, esi
mov word [ebx], di
add ebx, esi
mov eax, dword [ebp - 0x44]
mov dword [ebp - 8], ebx
mov word [eax + 2], di
mov esi, dword [ebp - 4]
jmp 0xb97da2
xor eax, eax
test byte [ebp - 0x34], 2
mov ebx, eax
mov dword [ebp - 0x10], ebx
je 0xbd3a31
cmp dword [ebp - 0x2c], 0xfffffffe
jne 0xbd3a2d
or dword [ebp - 0x2c], 0xffffffff
or dword [ebp - 0x6c], 0xffffffff
push 0x1c
jmp 0xbd3a33
push 0x1b
pop eax
jmp 0xb981b4
mov eax, dword [ebp + 0x28]
test dword [eax + 0x60], 0x2000000
je 0xb9758b
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x40
jmp 0xbd4d31
add esi, 2
push 2
mov ax, word [esi]
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0xb975b3
mov dword [ebp - 4], esi
mov ax, word [esi]
pop esi
mov word [ebp - 0xf6], ax
mov ebx, esi
jmp 0xb975b4
cmp dword [ebp - 0x3c], ebx
je 0xb97a60
mov ecx, dword [ebp - 0x94]
jmp 0xbd3a98
mov ecx, ebx
lea edx, [ebp - 0xf8]
call fcn.00c0efeb
mov di, word [ebp - 0xf8]
mov ebx, eax
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x18], edi
jmp 0xb975b1
mov esi, dword [ebp - 4]
push 0x5c
pop eax
cmp word [esi + 2], ax
jne 0xbd3ad4
push 0x45
pop ecx
cmp word [esi + 4], cx
jne 0xbd3ad4
add esi, 4
jmp 0xbd24f9
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
jmp 0xbd24f9
mov eax, dword [esi + 0x20]
xor ebx, ebx
sub eax, dword [esi + 0x10]
mov esi, dword [ebp - 4]
sar eax, 1
push 2
mov dword [ebp - 0x88], eax
pop eax
add esi, eax
push 0x3c
pop edi
mov dword [ebp - 4], esi
cmp word [esi], di
lea edx, [esi + 2]
push 0x17
setne bl
mov dword [ebp - 0x74], edx
pop eax
dec ebx
and ebx, eax
push 0x27
pop eax
add ebx, eax
xor eax, eax
push 0x2b
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x38], eax
movzx eax, word [edx]
pop ecx
mov dword [ebp - 0x4c], ebx
cmp eax, ecx
je 0xbd3b4c
push 0x2d
pop ecx
cmp eax, ecx
je 0xbd3b4c
push 0x30
pop ecx
cmp eax, ecx
jb 0xbd3b3e
push 0x39
pop edi
cmp eax, edi
jbe 0xbd3b4c
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x18], eax
jmp 0xbd3e3c
lea ecx, [esi + 4]
movzx eax, word [ecx]
push 0x30
pop edi
cmp ax, di
jb 0xbd3b73
push 2
pop edx
cmp ax, word [ebp - 0x90]
ja 0xbd3b70
add ecx, edx
movzx eax, word [ecx]
cmp ax, di
jae 0xbd3b5d
mov edx, dword [ebp - 0x74]
cmp word [ecx], bx
je 0xbd3b85
mov eax, dword [ebp + 0xc]
push 0x39
pop ecx
mov dword [eax], ecx
jmp 0xbd24f9
mov esi, edx
mov dword [ebp - 4], esi
movzx edi, word [esi]
push 0x2b
mov edx, edi
pop eax
mov dword [ebp - 0x74], edx
cmp edx, eax
jne 0xbd3bbb
push 2
pop eax
add esi, eax
push 0x30
mov dword [ebp - 4], esi
pop edi
movzx eax, word [esi]
cmp ax, di
jb 0xbd3bb4
push 0x39
pop ecx
cmp ax, cx
jbe 0xbd3be2
push 0x3f
jmp 0xbd4cfd
push 0x2d
pop eax
cmp edx, eax
jne 0xbd3be2
movzx eax, word [esi + 2]
cmp ax, word [ebp - 0xe4]
jb 0xbd3c53
cmp ax, word [ebp - 0x90]
ja 0xbd3c53
add esi, 2
mov dword [ebp - 4], esi
xor eax, eax
push 0x30
mov edi, eax
movzx eax, word [esi]
pop ecx
cmp ax, cx
jb 0xbd3c1d
push 2
pop edx
push 0x39
pop ebx
cmp ax, bx
ja 0xbd3c17
imul ecx, edi, 0xa
add esi, edx
movzx edi, ax
push 0x30
mov dword [ebp - 4], esi
movzx eax, word [esi]
add ecx, 0xffffffd0
add edi, ecx
pop ecx
cmp ax, cx
jae 0xbd3bf7
mov edx, dword [ebp - 0x74]
mov ebx, dword [ebp - 0x4c]
cmp word [esi], bx
jne 0xbd4cc9
push 0x2d
pop eax
cmp edx, eax
jne 0xbd3dc4
test edi, edi
je 0xbd4cc5
mov edx, dword [ebp + 0x28]
mov eax, dword [edx + 0x40]
sub eax, edi
lea edi, [eax + 1]
test edi, edi
jg 0xbd4074
push 0xf
jmp 0xbd4cfd
mov ebx, dword [ebp + 0x28]
xor ecx, ecx
jmp 0xb97e54
push 0x2d
pop edi
cmp eax, edi
je 0xbd3c9c
cmp eax, 0x4a
je 0xbd3c8a
cmp eax, 0x55
je 0xbd3c7f
cmp eax, 0x58
jne 0xbd4c8e
or dword [ecx], 0x40
jmp 0xb97e91
or dword [ecx], 0x200
jmp 0xb97e91
or dword [ecx], 0x80000
or dword [ebx + 0x64], 0x400
jmp 0xb97e91
lea ecx, [ebp - 0x24]
jmp 0xb97e91
cmp eax, 0x6d
je 0xbd3ccb
push 0x73
pop edi
cmp eax, edi
je 0xbd3cc3
push 0x78
pop edi
cmp eax, edi
jne 0xbd4c8e
or dword [ecx], 8
jmp 0xb97e91
push 4
pop eax
jmp 0xb97e8f
or dword [ecx], edx
jmp 0xb97e91
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0xbd3ce1
cmp dword [eax], ecx
jne 0xb97ec9
mov dword [ebx + 0x60], edx
jmp 0xb97eec
mov ebx, dword [ebp - 0x1c]
push 0x52
pop edi
mov edx, dword [ebp - 8]
jmp 0xb97af8
cmp dword [eax + 0x7c], ecx
je 0xb97b1c
mov dword [ebp - 0x10], ecx
mov dword [eax + 0x7c], ecx
jmp 0xb97b1f
cmp dword [eax + 0x40], esi
ja 0xb97beb
mov esi, dword [ebp - 8]
mov ecx, 0x82
mov word [esi], cx
jmp 0xb97bcc
cmp dword [ebp + 0x2c], 0
jne 0xb97beb
xor eax, eax
mov ecx, esi
push 0x78
mov edx, eax
pop edi
movzx eax, word [ecx + 2]
inc edx
lea ecx, [ecx + eax*2]
cmp word [ecx], di
jne 0xbd3d37
mov edi, dword [ebp - 0x74]
mov eax, 0x91
cmp word [esi + 4], ax
jne 0xbd3d62
cmp edx, dword [ebp - 0xc]
jg 0xbd4c9e
mov ebx, eax
jmp 0xb97beb
push 2
pop eax
cmp edx, eax
jg 0xbd4cac
cmp edx, dword [ebp - 0xc]
jne 0xb97beb
or eax, 0xffffffff
or ecx, eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa4], ecx
jmp 0xb97bf1
test ecx, ecx
js 0xbd3da7
mov ebx, dword [ebp - 0xd8]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x98], ecx
jmp 0xbd3dab
or dword [ebp - 0x2c], 0xffffffff
or dword [ebp - 0x6c], 0xffffffff
jmp 0xb97c62
push 0x7d
pop ecx
cmp ebx, ecx
jne 0xb97a05
jmp 0xb97c62
push 0x2b
pop eax
cmp edx, eax
jne 0xbd4071
test edi, edi
je 0xbd4cc5
mov edx, dword [ebp + 0x28]
add edi, dword [edx + 0x40]
jmp 0xbd4074
mov esi, dword [ebp - 4]
push 0x3c
pop edi
movzx eax, word [esi + 2]
cmp ax, di
je 0xbd3e0d
cmp ax, word [ebp - 0xe0]
je 0xbd3e0d
cmp ax, word [ebp - 0x128]
je 0xbd3e0d
push 0x45
pop eax
mov dword [edx], eax
jmp 0xbd24f9
add esi, 2
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], esi
movzx eax, word [esi]
cmp ax, di
jne 0xbd3e25
push 0x3e
pop eax
mov ebx, eax
jmp 0xbd3e39
push 0x27
xor ebx, ebx
pop ecx
cmp ax, cx
push 0x7d
setne bl
dec ebx
and ebx, 0xffffffaa
pop eax
add ebx, eax
push 0x30
pop ecx
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x38], esi
movzx eax, word [esi]
cmp ax, cx
jb 0xbd3e65
push 0x39
pop ecx
cmp ax, cx
ja 0xbd3e65
mov dword [edx], 0x54
jmp 0xbd4d31
mov edi, 0xff
cmp ax, di
ja 0xbd3e94
mov ecx, dword [ebp + 0x28]
push 2
pop edx
mov ecx, dword [ecx + 0xc]
movzx eax, ax
test byte [eax + ecx], 0x10
je 0xbd3e8e
add esi, edx
mov dword [ebp - 4], esi
movzx eax, word [esi]
cmp ax, di
jbe 0xbd3e78
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x24], esi
mov eax, dword [ebp - 0x38]
mov edi, esi
sub edi, eax
sar edi, 1
cmp dword [ebp + 0x2c], 0
je 0xbd3f1a
test edi, edi
je 0xbd4cd5
cmp word [esi], bx
jne 0xbd4cd1
push 0x20
pop ecx
cmp edi, ecx
jg 0xbd4ccd
mov edx, dword [ebp + 0x28]
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov ebx, dword [edx + 0x30]
mov esi, dword [edx + 0x28]
test ebx, ebx
jle 0xbd3ef9
cmp edi, dword [esi + 4]
jne 0xbd3eeb
mov edx, dword [esi]
mov ecx, eax
push edi
call fcn.00c0eab9
pop ecx
mov ecx, dword [ebp - 0x14]
test eax, eax
je 0xbd3ef6
mov eax, dword [ebp - 0x38]
inc ecx
add esi, 0xc
mov dword [ebp - 0x14], ecx
cmp ecx, ebx
jl 0xbd3ed1
mov edx, dword [ebp + 0x28]
cmp ecx, ebx
jge 0xbd3f02
mov edi, dword [esi + 8]
jmp 0xbd3f06
xor eax, eax
mov edi, eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], edi
test eax, eax
jne 0xbd3f13
inc dword [edx + 0x54]
mov edx, dword [ebp + 0x2c]
inc dword [edx]
jmp 0xbd3f86
mov edx, dword [ebp + 0x28]
mov ecx, dword [edx + 0x2c]
mov ebx, dword [edx + 0x30]
mov dword [ebp - 0x48], ecx
xor ecx, ecx
mov dword [ebp - 0x14], ecx
test ebx, ebx
jle 0xbd3f6f
mov esi, edx
mov edx, dword [ebp - 0x48]
push edi
add edx, 2
mov ecx, eax
call fcn.00c0eab9
mov edx, dword [ebp - 0x48]
pop ecx
test eax, eax
jne 0xbd3f53
cmp word [edx + edi*2 + 2], ax
jne 0xbd3f53
mov ecx, dword [ebp - 0x14]
jmp 0xbd3f6a
mov eax, dword [esi + 0x34]
mov ecx, dword [ebp - 0x14]
inc ecx
mov dword [ebp - 0x14], ecx
lea edx, [edx + eax*2]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x48], edx
cmp ecx, ebx
jl 0xbd3f34
mov esi, dword [ebp - 0x24]
jmp 0xbd3f72
mov edx, dword [ebp - 0x48]
cmp ecx, ebx
jge 0xbd3c4c
movzx edi, word [edx]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp + 0x2c]
mov dword [ebp - 0x38], edi
test eax, eax
jne 0xbd4071
mov esi, dword [ebp + 0x28]
test edx, edx
jne 0xbd419d
cmp dword [esi + 0x78], eax
je 0xbd419d
mov ebx, dword [ebp + 0x28]
mov edx, dword [ebp - 0x48]
mov esi, dword [ebp - 0xc]
mov dword [ebp - 0x74], ecx
inc ecx
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x14], ecx
lea edx, [edx + eax*2]
mov dword [ebp - 0x24], edx
cmp ecx, dword [ebx + 0x30]
jge 0xbd419b
mov ebx, dword [ebp - 0x48]
mov edi, ecx
add edx, 2
lea ecx, [ebx + 2]
call fcn.00c0ea89
mov edx, dword [ebp - 0x24]
test eax, eax
jne 0xbd3fee
mov ecx, dword [ebp + 0x28]
inc esi
inc edi
mov eax, dword [ecx + 0x34]
lea edx, [edx + eax*2]
mov dword [ebp - 0x24], edx
cmp edi, dword [ecx + 0x30]
jl 0xbd3fc9
mov ecx, dword [ebp - 0xc]
mov edi, dword [ebp - 0x38]
cmp esi, ecx
jle 0xbd41eb
cmp dword [ebp - 0x2c], 0xfffffffe
jne 0xbd4006
or dword [ebp - 0x2c], 0xffffffff
mov eax, dword [ebp - 0xc]
test byte [ebp - 0x34], al
mov ecx, dword [ebp - 8]
mov ebx, ecx
push 0
pop eax
setne al
mov dword [ebp - 0x10], ebx
push 0x73
pop edi
add eax, edi
mov word [ecx], ax
push 2
pop eax
add ecx, eax
mov eax, dword [ebp - 0x74]
push 2
mov word [ecx], ax
pop eax
add ecx, eax
mov word [ecx], si
add ecx, eax
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x48]
cmp ecx, edx
jae 0xbd420f
mov esi, dword [ebp - 0x24]
mov edi, dword [ebp + 0x28]
mov ebx, dword [ebp - 0xc]
movzx edx, word [ecx]
push 0x20
pop eax
cmp edx, eax
mov eax, ebx
jge 0xbd405e
mov ecx, edx
shl eax, cl
or dword [edi + 0x50], eax
cmp edx, dword [edi + 0x4c]
jle 0xbd4069
mov dword [edi + 0x4c], edx
mov ecx, dword [edi + 0x24]
jmp 0xbd4178
mov edx, dword [ebp + 0x28]
mov eax, dword [ebp - 8]
xor ecx, ecx
mov ebx, eax
mov esi, dword [edx + 0x14]
mov dword [ebp - 0x10], ebx
cmp dword [ebp + 0x2c], ecx
jne 0xbd4166
mov word [eax], cx
test edi, edi
je 0xbd40a8
mov eax, dword [ebp + 0x28]
mov edx, dword [ebp - 0x3c]
push edi
mov ecx, dword [eax + 0x14]
call fcn.00c0dc12
mov edx, dword [ebp + 0x28]
mov esi, eax
pop ecx
mov eax, ebx
test esi, esi
jne 0xbd4136
cmp edi, dword [edx + 0x44]
jg 0xbd4cdc
mov eax, dword [edx + 0x14]
mov ecx, dword [edx + 0x3c]
lea esi, [eax + edi*2]
mov eax, dword [edx + 0x10]
lea eax, [eax + ecx*2]
add eax, 0xffffff38
cmp dword [edx + 0x20], eax
jb 0xbd40e6
mov ecx, edx
call fcn.00c0e1a8
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test eax, eax
jne 0xb9848d
mov eax, dword [ebp + 0x28]
mov edx, dword [ebp - 8]
mov ecx, edx
push 2
pop edi
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0x20]
add ecx, edi
sar ecx, 1
mov word [eax], cx
mov eax, dword [ebp + 0x28]
add dword [eax + 0x20], edi
xor ecx, ecx
push 0x75
pop edi
mov word [edx], di
sub esi, dword [eax + 0x14]
sar esi, 1
push 4
pop eax
mov word [edx + 2], si
add edx, eax
cmp dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 8], edx
mov dword [ebp - 0x98], ecx
jne 0xb98288
or dword [ebp - 0x2c], 0xffffffff
jmp 0xb98288
xor ecx, ecx
cmp word [esi + 2], cx
jne 0xbd4166
cmp dword [ebp + 0x24], ecx
jg 0xbd4166
push edx
push dword [ebp - 0x3c]
mov edx, eax
mov ecx, esi
push dword [ebp + 0x20]
call fcn.00c0e16a
add esp, 0xc
test eax, eax
jne 0xbd4ce9
mov edx, dword [ebp - 8]
mov eax, dword [ebp + 0x28]
jmp 0xbd4104
mov edx, dword [ebp - 8]
mov eax, dword [ebp + 0x28]
jmp 0xbd4106
movzx eax, word [ecx + 4]
cmp eax, edx
je 0xbd417e
mov ecx, dword [ecx]
test ecx, ecx
jne 0xbd416e
jmp 0xbd4182
mov word [ecx + 6], bx
mov ecx, dword [ebp - 0x48]
mov eax, dword [edi + 0x34]
lea ecx, [ecx + eax*2]
mov dword [ebp - 0x48], ecx
cmp ecx, esi
jb 0xbd404e
jmp 0xb976a5
mov esi, ebx
mov ecx, dword [ebp - 0xc]
cmp dword [ebp - 0x2c], 0xfffffffe
jne 0xbd41aa
or dword [ebp - 0x2c], 0xffffffff
mov edx, dword [ebp - 8]
mov ebx, edx
test byte [ebp - 0x34], cl
push 0
pop eax
setne al
mov dword [ebp - 0x10], ebx
add eax, 0x71
mov word [edx], ax
push 2
pop eax
add edx, eax
push 0x20
mov word [edx], di
add edx, eax
pop eax
cmp edi, eax
mov dword [ebp - 8], edx
mov eax, ecx
jge 0xbd41db
mov ecx, edi
shl eax, cl
or dword [esi + 0x50], eax
cmp edi, dword [esi + 0x4c]
jle 0xbd41e6
mov dword [esi + 0x4c], edi
mov ecx, dword [esi + 0x24]
jmp 0xbd41fa
mov esi, dword [ebp + 0x28]
jmp 0xbd41a0
movzx eax, word [ecx + 4]
cmp eax, edi
je 0xbd4203
mov ecx, dword [ecx]
test ecx, ecx
jne 0xbd41f0
jmp 0xb98288
mov eax, dword [ebp - 0xc]
mov word [ecx + 6], ax
jmp 0xb98288
mov edx, dword [ebp - 8]
jmp 0xb98288
cmp dword [esi + 0x48], ebx
jne 0xb98254
mov dword [esi + 0x48], ecx
jmp 0xb98254
cmp edi, 0x22
jg 0xb9825f
jmp 0xbd24e4
cmp edi, 0xe
jne 0xb9827d
push 0xd
pop eax
mov edi, eax
jmp 0xb9827d
push edx
lea eax, [ebp - 0x38]
mov dword [ebp - 0x4c], ebx
push eax
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x38], ebx
push eax
lea edx, [ebp - 0x130]
lea ecx, [ebp - 4]
call fcn.00c0e602
add esp, 0xc
test eax, eax
je 0xb9848d
mov edx, dword [ebp - 8]
xor eax, eax
push 0x10
pop ecx
cmp edi, ecx
mov ebx, edx
push 0xf
sete al
mov dword [ebp - 0x10], ebx
xor ecx, ecx
cmp eax, dword [ebp - 0x130]
pop eax
setne cl
add ecx, eax
mov ax, word [ebp - 0x4c]
mov word [edx], cx
push 2
pop esi
add edx, esi
mov word [edx], ax
add edx, esi
mov ax, word [ebp - 0x38]
mov word [edx], ax
jmp 0xb98283
lea eax, [esi + 0xe]
mov esi, str._b__w_
jmp 0xbd24f1
lea eax, [esi + 0xe]
mov esi, str._b___w_
jmp 0xbd24f1
lea edx, [ebp - 0x70]
mov ecx, esi
call fcn.00c0e0ef
test eax, eax
je 0xb977dc
xor eax, eax
cmp word [esi + 2], bx
push 0x1f
setne al
dec eax
pop ecx
and eax, 0xffffffee
add eax, ecx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0xbd4d31
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
jmp 0xb977ea
mov ecx, dword [ebp + 0x28]
test dword [ecx + 0x60], 0x2000000
je 0xb97815
mov edx, dword [ebp - 8]
neg eax
sbb eax, eax
and eax, 0xffffff70
add eax, 0x9d
mov word [edx], ax
add edx, edi
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 8], edx
cmp eax, 0xfffffffe
jne 0xbd433a
or eax, 0xffffffff
mov dword [ebp - 0x2c], eax
mov edi, dword [ebp - 0x64]
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x6c], eax
jmp 0xb97a02
movzx ebx, word [esi]
mov eax, ebx
mov dword [ebp - 0x18], ebx
and eax, ecx
cmp eax, edx
jne 0xb97870
add esi, 2
mov ecx, 0x3ff
and ebx, ecx
shl ebx, 0xa
movzx eax, word [esi]
and eax, ecx
mov dword [ebp - 4], esi
or ebx, eax
add ebx, 0x10000
mov dword [ebp - 0x18], ebx
jmp 0xb97870
mov eax, dword [ebp - 0xc]
sub edi, ecx
sar edi, 1
add dword [edx], edi
mov edi, ecx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x14], edi
jmp 0xb97882
push 0x5c
pop eax
cmp ebx, eax
jne 0xb978a0
push 0x45
pop ecx
cmp word [esi + 2], cx
jne 0xb978a0
xor ecx, ecx
add esi, 2
mov dword [ebp - 0x30], ecx
mov eax, ecx
jmp 0xb97925
movzx edi, word [esi + 2]
push 0x3a
pop eax
cmp di, ax
je 0xbd43df
push 0x2e
pop eax
cmp di, ax
je 0xbd43df
push 0x3d
pop eax
cmp di, ax
jne 0xb978a0
lea edx, [ebp - 0x70]
mov ecx, esi
call fcn.00c0e0ef
test eax, eax
je 0xb978a0
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0x28]
push 0x3a
mov ebx, dword [eax + 8]
pop eax
cmp di, ax
jne 0xbd4cfb
push 4
pop eax
add esi, eax
push 0x5e
pop eax
mov dword [ebp - 4], esi
cmp word [esi], ax
jne 0xbd442d
mov eax, dword [ebp - 0xc]
mov edi, eax
push 2
mov dword [ebp - 0x28], eax
pop eax
add esi, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 4], esi
jmp 0xbd4430
mov edi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x70]
mov ecx, esi
sub edx, esi
sar edx, 1
call fcn.00c0e0a2
mov ecx, eax
test ecx, ecx
js 0xbd4cf7
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
test dl, al
push 2
pop edx
je 0xbd445b
cmp ecx, edx
jg 0xbd445b
xor ecx, ecx
test eax, 0x20000000
je 0xbd44f5
mov eax, edi
neg eax
sbb eax, eax
and eax, 0xe
add eax, ecx
mov esi, dword [eax*4 + 0xc398b0]
test esi, esi
je 0xbd44a8
mov eax, dword [ebp - 0x70]
add eax, 2
add esi, 0xfffffffe
mov dword [ebp - 0x60], eax
jmp 0xbd44a0
mov eax, dword [ebp - 4]
mov esi, dword [esi*4 + 0xc39650]
push 2
mov dword [ebp - 0x60], eax
pop eax
sub esi, eax
dec ecx
mov dword [ebp - 0x20], ecx
mov edi, dword [ebp - 0x1c]
jmp 0xb97922
mov eax, ecx
sub eax, 8
je 0xbd44c0
dec eax
je 0xbd44bc
dec eax
jne 0xbd44f5
push 0xd
pop eax
mov ecx, eax
jmp 0xbd44c3
push 0xc
jmp 0xbd44c2
push 0xb
pop ecx
mov esi, dword [ebp - 0x70]
xor eax, eax
test edi, edi
mov edi, dword [ebp - 0x1c]
setne al
add eax, 3
mov word [edi], ax
add edi, edx
xor eax, eax
mov word [edi], cx
add edi, edx
mov word [edi], ax
add edi, edx
mov eax, dword [ebp - 0xc]
add esi, 2
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x38], eax
jmp 0xb9791f
imul esi, ecx, 3
push 0x20
pop eax
push eax
mov eax, dword [esi*4 + 0xc39800]
add eax, ebx
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.00ba1950
mov eax, dword [esi*4 + 0xc39804]
add esp, 0xc
mov esi, dword [esi*4 + 0xc39808]
test eax, eax
js 0xbd4558
xor ecx, ecx
lea edx, [eax + ebx]
push 0x20
pop edi
test esi, esi
js 0xbd4544
mov al, byte [edx + ecx]
or byte [ebp + ecx - 0x178], al
inc ecx
cmp ecx, edi
jb 0xbd4533
jmp 0xbd4555
mov al, byte [edx + ecx]
not al
and byte [ebp + ecx - 0x178], al
inc ecx
cmp ecx, edi
jb 0xbd4544
mov edi, dword [ebp - 0x18]
test esi, esi
jns 0xbd455e
neg esi
mov ebx, dword [ebp - 0xc]
push 2
pop edx
cmp esi, ebx
jne 0xbd4571
and byte [ebp - 0x177], 0xc3
jmp 0xbd457c
cmp esi, edx
jne 0xbd457c
and byte [ebp - 0x16d], 0x7f
xor eax, eax
mov ecx, eax
push 0x20
pop edx
test edi, edi
je 0xbd459e
mov al, byte [ebp + ecx - 0x178]
not al
or byte [ebp + ecx - 0xd4], al
inc ecx
cmp ecx, edx
jb 0xbd4587
jmp 0xbd45b1
mov al, byte [ebp + ecx - 0x178]
or byte [ebp + ecx - 0xd4], al
inc ecx
cmp ecx, edx
jb 0xbd459e
mov esi, dword [ebp - 0x70]
push 2
pop edx
add esi, edx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x58], edx
jmp 0xbd44a0
cmp esi, 0xc
je 0xbd4d0d
cmp esi, 0x1a
jne 0xbd45fa
mov esi, dword [ebp - 4]
push 0x5c
pop eax
cmp word [esi + 2], ax
jne 0xbd45ef
push 0x45
pop ecx
cmp word [esi + 4], cx
jne 0xbd45ef
add esi, 4
jmp 0xb97922
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
jmp 0xb97925
cmp esi, 0x19
je 0xbd4822
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x58]
inc ecx
mov edi, dword [ebx + 8]
add eax, 2
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x58], eax
cmp esi, 0x10
jg 0xbd478e
push 0xf
pop ebx
cmp esi, ebx
jge 0xbd471e
sub esi, 6
je 0xbd46fa
dec esi
je 0xbd46de
dec esi
je 0xbd46b3
dec esi
je 0xbd4690
dec esi
je 0xbd466c
dec esi
jne 0xbd47ae
xor eax, eax
mov ecx, eax
mov al, byte [edi + ecx + 0xa0]
or byte [ebp + ecx - 0xd4], al
inc ecx
push 0x20
pop eax
cmp ecx, eax
jb 0xbd464e
mov esi, dword [ebp - 4]
jmp 0xbd44a0
mov edx, dword [ebp - 0xc]
xor eax, eax
push 0x20
mov dword [ebp - 0x28], edx
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0xa0]
not al
or byte [ebp + ecx - 0xd4], al
inc ecx
cmp ecx, edx
jb 0xbd4679
jmp 0xbd4664
xor eax, eax
mov edx, eax
lea eax, [ebp - 0xd4]
sub edi, eax
lea ecx, [ebp - 0xd4]
add ecx, edx
push 0x20
mov al, byte [ecx + edi]
or byte [ecx], al
inc edx
pop eax
cmp edx, eax
jb 0xbd469c
jmp 0xbd4664
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x28], eax
xor eax, eax
mov edx, eax
lea eax, [ebp - 0xd4]
sub edi, eax
lea ecx, [ebp - 0xd4]
add ecx, edx
push 0x20
mov al, byte [ecx + edi]
not al
or byte [ecx], al
inc edx
pop eax
cmp edx, eax
jb 0xbd46c5
jmp 0xbd4664
xor eax, eax
mov ecx, eax
mov al, byte [edi + ecx + 0x40]
or byte [ebp + ecx - 0xd4], al
inc ecx
push 0x20
pop eax
cmp ecx, eax
jb 0xbd46e2
jmp 0xbd4664
mov edx, dword [ebp - 0xc]
xor eax, eax
push 0x20
mov dword [ebp - 0x28], edx
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0x40]
not al
or byte [ebp + ecx - 0xd4], al
inc ecx
cmp ecx, edx
jb 0xbd4707
jmp 0xbd4664
xor eax, eax
lea ecx, [ebp - 4]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push edx
push eax
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x138]
call fcn.00c0e602
add esp, 0xc
test eax, eax
je 0xb9848d
mov edi, dword [ebp - 0x1c]
xor eax, eax
push 0x10
pop ecx
cmp esi, ecx
push 2
sete al
xor ecx, ecx
cmp eax, dword [ebp - 0x138]
mov ax, word [ebp - 0x4c]
sete cl
add ecx, 3
mov word [edi], cx
pop ecx
add edi, ecx
mov word [edi], ax
add edi, ecx
mov ax, word [ebp - 0x38]
mov word [edi], ax
add edi, ecx
mov eax, dword [ebp - 0xc]
dec dword [ebp - 0x20]
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x38], eax
jmp 0xb9791c
cmp esi, 0x12
je 0xbd4803
cmp esi, 0x13
je 0xbd47db
cmp esi, 0x14
je 0xbd47fc
cmp esi, 0x15
je 0xbd47d2
add esi, 0xffffffe3
cmp esi, 5
jbe 0xbd448a
test byte [ebp - 0x34], 0x40
mov esi, dword [ebp - 4]
jne 0xbd4d05
movzx ebx, word [esi]
dec ecx
push 2
mov dword [ebp - 0x20], ecx
pop ecx
sub eax, ecx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x58], eax
jmp 0xb978a3
push 0xffffffffffffffff
push str._n_v_f_r
jmp 0xbd47e2
push 0xffffffffffffffff
push 0xc39f40
push ebx
push dword [ebp - 0x34]
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0xd4]
call fcn.00c0dd59
add esp, 0x10
jmp 0xb97919
push str._n_v_f_r
jmp 0xbd4808
push 0xc39f40
push ebx
push dword [ebp - 0x34]
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0xd4]
call fcn.00c0de5b
add esp, 0xc
jmp 0xb97919
mov esi, dword [ebp - 4]
jmp 0xb97922
cmp word [esi + 4], bx
jne 0xbd483f
add esi, 4
mov dword [ebp - 0x30], ecx
mov dword [ebp - 4], esi
cmp word [esi + 2], di
je 0xbd482a
mov ebx, dword [ebp - 0x18]
mov edx, dword [ebp + 0xc]
jmp 0xb978b2
mov eax, dword [ebp + 0x28]
or dword [eax + 0x64], 0x800
jmp 0xb978ca
push 0x5c
pop edx
push 0x45
pop edi
cmp word [esi + 2], di
jne 0xbd486f
add esi, eax
mov dword [ebp - 4], esi
cmp word [esi], dx
je 0xbd485f
cmp word [esi], dx
mov ebx, dword [ebp - 0x18]
mov edx, dword [ebp + 0xc]
mov edi, dword [ebp - 0x30]
jne 0xb98074
cmp word [esi + 2], 0x51
jne 0xb98074
add esi, eax
push 0x5c
pop eax
mov dword [ebp - 4], esi
cmp word [esi], ax
push 4
pop eax
jne 0xbd48bd
push 0x45
pop eax
cmp word [esi + 2], ax
push 4
pop eax
jne 0xbd48bd
add esi, eax
push 0x5c
pop eax
mov dword [ebp - 4], esi
cmp word [esi], ax
push 4
pop eax
je 0xbd4881
jmp 0xb98074
mov edi, dword [ebp - 0xc]
mov dword [ebp - 0x30], edi
jmp 0xb98074
add esi, 2
mov ecx, 0x3ff
and edi, ecx
shl edi, 0xa
movzx eax, word [esi]
and eax, ecx
mov dword [ebp - 4], esi
or edi, eax
add edi, 0x10000
mov dword [ebp - 0x18], edi
jmp 0xb980af
push dword [ebp - 0xc]
mov eax, dword [ebp + 0x28]
lea ecx, [ebp - 4]
push dword [ebp - 0x34]
push dword [eax + 0x40]
push edx
lea edx, [ebp - 0x18]
call fcn.00b98554
mov ecx, dword [ebp + 0xc]
xor edx, edx
add esp, 0x10
cmp dword [ecx], edx
jne 0xb9848d
mov esi, dword [ebp - 4]
test eax, eax
je 0xbd492d
cmp eax, 5
jne 0xbd4d18
push 8
pop edi
jmp 0xb980cc
mov edi, dword [ebp - 0x18]
jmp 0xb980cc
movzx eax, word [esi + 2]
push 0x3a
pop ecx
cmp ax, cx
je 0xbd4955
push 0x2e
pop ecx
cmp ax, cx
je 0xbd4955
push 0x3d
pop ecx
cmp ax, cx
jne 0xb980c9
lea edx, [ebp - 0x70]
mov ecx, esi
call fcn.00c0e0ef
test eax, eax
je 0xb980c9
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x53
jmp 0xbd4d31
mov eax, dword [ebp + 0x28]
or dword [eax + 0x64], 0x800
jmp 0xb980f9
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0xbd49a8
mov esi, ebx
xor ebx, ebx
mov dword [ebp - 0x60], ebx
push 2
pop ebx
add esi, ebx
mov dword [ebp - 4], esi
movzx ebx, word [esi]
mov dword [ebp - 0x18], ebx
test ebx, ebx
jne 0xb9793e
mov eax, dword [ebp + 0xc]
mov dword [eax], 6
jmp 0xbd4d31
mov edi, dword [ebp - 0x5c]
add esi, ecx
cmp dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x58], eax
je 0xbd4a83
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0xfffffffe
jne 0xbd49df
or ecx, 0xffffffff
mov dword [ebp - 0x2c], ecx
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x7c], eax
test esi, esi
je 0xbd4a46
test dl, cl
je 0xbd4a48
mov eax, ebx
mov edi, 0x80
cdq
idiv edi
movzx eax, byte [eax + 0xc34b50]
shl eax, 7
add eax, edx
movzx eax, word [eax*2 + 0xc26850]
movzx eax, byte [eax*8 + 0xc23f63]
test eax, eax
je 0xbd4a43
mov edx, dword [ebp - 8]
push 0xf
pop ecx
push 2
mov word [edx], cx
pop ecx
add edx, ecx
push 9
pop ebx
mov word [edx], bx
add edx, ecx
mov word [edx], ax
add edx, ecx
mov dword [ebp - 8], edx
jmp 0xb976a5
mov edx, dword [ebp - 0xc]
test dl, cl
mov edi, dword [ebp - 8]
push 0
pop eax
push 0x1f
pop ecx
setne al
add eax, ecx
push 2
pop ecx
mov word [edi], ax
add edi, ecx
test esi, esi
je 0xbd4a7b
cmp ebx, 0xffff
jbe 0xbd4a7b
mov edx, edi
mov ecx, ebx
call fcn.00c0efeb
lea edi, [edi + eax*2]
jmp 0xb979bc
mov word [edi], bx
jmp 0xb98172
cmp dword [ebp - 0x3c], 0
je 0xbd4a95
cmp ebx, 0xffff
ja 0xbd3a96
mov di, bx
jmp 0xb97a6a
mov eax, dword [ebp - 0xf6]
mov edx, 0x3ff
and ecx, edx
and eax, edx
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
jmp 0xb975e0
or dword [ebp - 0x6c], 0xffffffff
or dword [ebp - 0x2c], 0xffffffff
jmp 0xb97a02
mov ecx, dword [ebp + 0x28]
or dword [ecx + 0x64], 0x800
jmp 0xb97668
cmp dword [ebp - 0x8c], 0
je 0xb979e8
or dword [ebp - 0x54], 0xffffffff
or dword [ebp - 0x2c], 0xffffffff
jmp 0xb976a5
movzx edi, word [edi - 2]
mov eax, dword [ecx + 0x68]
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x54], eax
jmp 0xb97a02
cmp dword [ebp - 0x8c], 0
je 0xb97692
mov edx, dword [ebp - 8]
jmp 0xb97a02
test edx, edx
je 0xbd4b2a
test dword [ebp - 0x34], 0x20000000
je 0xb97988
mov edx, dword [ebp - 8]
xor eax, eax
mov ebx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x38]
mov word [edi], ax
push 2
pop eax
add edi, eax
push 0x70
pop eax
mov word [edx], ax
push 4
pop eax
add edx, eax
xor eax, eax
test ebx, ebx
setne al
mov word [edx], ax
test esi, esi
je 0xbd4b5c
or eax, 4
mov word [edx], ax
test ecx, ecx
jle 0xbd4bb2
push 2
pop eax
or word [edx], ax
add edx, eax
mov eax, edi
mov dword [ebp - 8], edx
sub eax, edx
and eax, 0xfffffffe
push eax
push edx
lea eax, [edx + 0x20]
push eax
call fcn.00ba88f0
add esp, 0xc
test ebx, ebx
je 0xbd4b99
test esi, esi
jne 0xbd4b99
push 0x20
xor eax, eax
pop ecx
not byte [ebp + eax - 0xd4]
inc eax
cmp eax, ecx
jb 0xbd4b8d
push 0x20
pop eax
push eax
lea eax, [ebp - 0xd4]
push eax
push dword [ebp - 8]
call fcn.00ba1950
add esp, 0xc
add edi, 0x20
mov ebx, dword [ebp - 0x10]
mov eax, edi
sub eax, ebx
mov dword [ebp - 8], edi
sar eax, 1
mov word [ebx + 2], ax
jmp 0xb976a8
not byte [ebp + eax - 0xd4]
inc eax
cmp eax, ecx
jb 0xbd4bc7
jmp 0xb97dcf
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x4b
jmp 0xbd4d31
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x3b
jmp 0xbd4d31
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x42
jmp 0xbd4d31
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x54
jmp 0xbd4d31
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x23
jmp 0xbd4d31
push 2
pop eax
sub esi, eax
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x1a
jmp 0xbd4d31
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x1c
jmp 0xbd4d31
push 0x27
jmp 0xbd4cfd
push 0x2b
jmp 0xbd4cfd
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x15
jmp 0xb9848d
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x31
jmp 0xbd4d31
push 0x2a
jmp 0xbd4cfd
mov eax, dword [ebp + 0xc]
add esi, edx
mov dword [eax], 0x18
jmp 0xbd4d31
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x14
jmp 0xbd4d31
mov eax, dword [ebp + 0xc]
sub esi, edx
mov dword [eax], 0xc
jmp 0xbd4d31
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x36
jmp 0xb9848d
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x1b
jmp 0xb9848d
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xe
jmp 0xbd4d31
push 0x3a
jmp 0xbd4cfd
push 0x1d
jmp 0xbd4cfd
push 0x30
jmp 0xbd4cd7
push 0x2a
jmp 0xbd4cd7
push 0x3e
pop eax
mov dword [edx], eax
jmp 0xbd4d31
mov eax, dword [ebp + 0xc]
push 0xf
pop ecx
mov dword [eax], ecx
jmp 0xb9848d
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x28
jmp 0xb9848d
push 0x1e
jmp 0xbd4cfd
push 0x1f
mov eax, dword [ebp + 0xc]
pop ecx
mov dword [eax], ecx
jmp 0xbd4d31
mov dword [edx], 7
jmp 0xbd4d31
mov dword [edx], 0x47
jmp 0xb9848d
mov dword [ecx], 0x53
jmp 0xbd4d31
mov dword [ecx], 8
jmp 0xbd4d31
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x34
mov eax, dword [ebp + 8]
mov dword [eax], esi
xor eax, eax
jmp 0xb97740