Function at 0x100ac9a0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10119d4d
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xc98
mov eax, dword [0x1013b080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x9c], edi
push dword [ebp - 0x28]
lea ecx, [ebp - 0x6a8]
mov dword [ebp - 0xf4], 0x6373696d
mov byte [ebp - 0xf0], 0
call fcn.1002af80
lea ecx, [ebp - 0xf4]
mov dword [ebp - 4], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aca18
sub ecx, edx
lea eax, [ebp - 0xf4]
push ecx
push eax
lea ecx, [ebp - 0x6a8]
call fcn.1002afa0
lea eax, [ebp - 0x6a8]
mov dword [ebp - 4], 1
push eax
mov ecx, edi
call fcn.1003b440
lea ecx, [ebp - 0x6a8]
call fcn.10029b80
push dword [ebp - 0x28]
lea ecx, [ebp - 0xc48]
mov dword [ebp - 0x24c], 0x696c6167
mov dword [ebp - 0x248], 0x72616c
call fcn.1002af80
lea ecx, [ebp - 0x24c]
mov dword [ebp - 4], 2
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aca86
sub ecx, edx
lea eax, [ebp - 0x24c]
push ecx
push eax
lea ecx, [ebp - 0xc48]
call fcn.1002afa0
mov dword [ebp - 4], 3
lea ecx, [ebp - 0xc30]
push dword [ebp - 0x28]
mov dword [ebp - 0x144], 0x616d6166
mov word [ebp - 0x140], 0x73
call fcn.1002af80
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 4
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acad7
sub ecx, edx
lea eax, [ebp - 0x144]
push ecx
push eax
lea ecx, [ebp - 0xc30]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xc18]
mov dword [ebp - 0xec], 0x37346b61
mov byte [ebp - 0xe8], 0
call fcn.1002af80
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 6
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acb20
sub ecx, edx
lea eax, [ebp - 0xec]
push ecx
push eax
lea ecx, [ebp - 0xc18]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xc00]
mov dword [ebp - 0xe4], 0x3161346d
mov byte [ebp - 0xe0], 0
call fcn.1002af80
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 8
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acb68
sub ecx, edx
lea eax, [ebp - 0xe4]
push ecx
push eax
lea ecx, [ebp - 0xc00]
call fcn.1002afa0
mov dword [ebp - 0x20c], 0xd484d188
xor ecx, ecx
mov dword [ebp - 0x208], 0x898c96ba
mov dword [ebp - 0x204], 0x80868b80
mov word [ebp - 0x200], 0xe597
nop dword [eax]
xor byte [ebp + ecx - 0x20c], 0xe5
inc ecx
cmp ecx, 0xe
jb 0x100acbb0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xbe8]
call fcn.1002af80
lea ecx, [ebp - 0x20c]
mov byte [ebp - 4], 0xa
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acbe0
sub ecx, edx
lea eax, [ebp - 0x20c]
push ecx
push eax
lea ecx, [ebp - 0xbe8]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xbd0]
mov dword [ebp - 0x14c], 0x30677373
mov word [ebp - 0x148], 0x38
call fcn.1002af80
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0xc
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acc30
sub ecx, edx
lea eax, [ebp - 0x14c]
push ecx
push eax
lea ecx, [ebp - 0xbd0]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xbb8]
mov dword [ebp - 0x88], 0x677561
call fcn.1002af80
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xe
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acc71
sub ecx, edx
lea eax, [ebp - 0x88]
push ecx
push eax
lea ecx, [ebp - 0xbb8]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xba0]
mov dword [ebp - 0x154], 0x35356773
mov word [ebp - 0x150], 0x36
call fcn.1002af80
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x10
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100accc0
sub ecx, edx
lea eax, [ebp - 0x154]
push ecx
push eax
lea ecx, [ebp - 0xba0]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb88]
mov dword [ebp - 0x8c], 0x707761
call fcn.1002af80
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x12
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acd01
sub ecx, edx
lea eax, [ebp - 0x8c]
push ecx
push eax
lea ecx, [ebp - 0xb88]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb70]
mov dword [ebp - 0x1fc], 0x72616373
mov word [ebp - 0x1f8], 0x3032
mov byte [ebp - 0x1f6], 0
call fcn.1002af80
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x14
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acd52
sub ecx, edx
lea eax, [ebp - 0x1fc]
push ecx
push eax
lea ecx, [ebp - 0xb70]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb58]
mov dword [ebp - 0x15c], 0x67733367
mov word [ebp - 0x158], 0x31
call fcn.1002af80
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x16
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acda0
sub ecx, edx
lea eax, [ebp - 0x15c]
push ecx
push eax
lea ecx, [ebp - 0xb58]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb40]
mov dword [ebp - 0xdc], 0x61766f6e
mov byte [ebp - 0xd8], 0
call fcn.1002af80
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x18
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acde8
sub ecx, edx
lea eax, [ebp - 0xdc]
push ecx
push eax
lea ecx, [ebp - 0xb40]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb28]
mov dword [ebp - 0x1f4], 0x30316d78
mov word [ebp - 0x1f0], 0x3431
mov byte [ebp - 0x1ee], 0
call fcn.1002af80
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x1a
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ace40
sub ecx, edx
lea eax, [ebp - 0x1f4]
push ecx
push eax
lea ecx, [ebp - 0xb28]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb10]
mov dword [ebp - 0xd4], 0x3767616d
mov byte [ebp - 0xd0], 0
call fcn.1002af80
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x1c
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ace88
sub ecx, edx
lea eax, [ebp - 0xd4]
push ecx
push eax
lea ecx, [ebp - 0xb10]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xaf8]
mov dword [ebp - 0xcc], 0x3934326d
mov byte [ebp - 0xc8], 0
call fcn.1002af80
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x1e
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aced0
sub ecx, edx
lea eax, [ebp - 0xcc]
push ecx
push eax
lea ecx, [ebp - 0xaf8]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xae0]
mov dword [ebp - 0x164], 0x6567656e
mov word [ebp - 0x160], 0x76
call fcn.1002af80
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x20
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acf20
sub ecx, edx
lea eax, [ebp - 0x164]
push ecx
push eax
lea ecx, [ebp - 0xae0]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xac8]
mov dword [ebp - 0x16c], 0x3163616d
mov word [ebp - 0x168], 0x30
call fcn.1002af80
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x22
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acf70
sub ecx, edx
lea eax, [ebp - 0x16c]
push ecx
push eax
lea ecx, [ebp - 0xac8]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xab0]
mov dword [ebp - 0x90], 0x39706d
call fcn.1002af80
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x24
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acfb1
sub ecx, edx
lea eax, [ebp - 0x90]
push ecx
push eax
lea ecx, [ebp - 0xab0]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xa98]
mov dword [ebp - 0x94], 0x37706d
call fcn.1002af80
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x26
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100acff2
sub ecx, edx
lea eax, [ebp - 0x94]
push ecx
push eax
lea ecx, [ebp - 0xa98]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xa80]
mov dword [ebp - 0x174], 0x34706d75
mov word [ebp - 0x170], 0x35
call fcn.1002af80
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 0x28
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad040
sub ecx, edx
lea eax, [ebp - 0x174]
push ecx
push eax
lea ecx, [ebp - 0xa80]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xa68]
mov dword [ebp - 0x98], 0x303970
call fcn.1002af80
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x2a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad081
sub ecx, edx
lea eax, [ebp - 0x98]
push ecx
push eax
lea ecx, [ebp - 0xa68]
call fcn.1002afa0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xa50]
mov dword [ebp - 0x17c], 0x6f7a6962
mov word [ebp - 0x178], 0x6e
call fcn.1002af80
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x2c
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad0d0
sub ecx, edx
lea eax, [ebp - 0x17c]
push ecx
push eax
lea ecx, [ebp - 0xa50]
call fcn.1002afa0
lea eax, [ebp - 0x351]
mov dword [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0xa38]
push ecx
lea edx, [ebp - 0xc48]
push edx
lea ecx, [ebp - 0x3bc]
call fcn.100b7bf0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x4e0]
mov dword [ebp - 0x2b8], 0x6f747561
mov dword [ebp - 0x2b4], 0x7975625f
mov word [ebp - 0x2b0], 0x31
call fcn.1002af80
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0x2f
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad150
sub ecx, edx
lea eax, [ebp - 0x2b8]
push ecx
push eax
lea ecx, [ebp - 0x4e0]
call fcn.1002afa0
mov dword [ebp - 0x22c], 0x8a919084
xor ecx, ecx
mov dword [ebp - 0x228], 0x9c9087c5
mov dword [ebp - 0x224], 0x80918cc5
mov word [ebp - 0x220], 0x9688
mov byte [ebp - 0x21e], 0xe5
nop dword [eax]
xor byte [ebp + ecx - 0x22c], 0xe5
inc ecx
cmp ecx, 0xf
jb 0x100ad1a0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x6c0]
call fcn.1002af80
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0x31
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad1d0
sub ecx, edx
lea eax, [ebp - 0x22c]
push ecx
push eax
lea ecx, [ebp - 0x6c0]
call fcn.1002afa0
lea ecx, [ebp - 0x448]
call fcn.1002b110
lea eax, [ebp - 0x4e0]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [edi + 0x68]
call fcn.1003b440
lea eax, [ebp - 0x6c0]
mov byte [edi + 0x99], 1
push eax
lea ecx, [edi + 0xa0]
call fcn.1003b440
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x99], al
cmovne eax, ecx
mov dword [edi + 0xd4], eax
add eax, 0x14
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
mov eax, dword [ebp - 0x3b8]
mov esi, dword [ebp - 0x3bc]
mov dword [ebp - 0x78], eax
cmp esi, eax
je 0x100ad279
lea eax, [edi + 0xb8]
mov edi, dword [ebp - 0x78]
mov dword [ebp - 0x6c], eax
push esi
mov ecx, eax
call fcn.10050040
mov eax, dword [ebp - 0x6c]
add esi, 0x18
cmp esi, edi
jne 0x100ad261
mov edi, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x444]
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x78], eax
cmp eax, ecx
je 0x100ad34b
lea ecx, [edi + 0xc8]
nop dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x460]
push eax
call fcn.10028ca0
lea ecx, [edi + 0xc8]
mov esi, dword [eax]
lea eax, [ebp - 0x45c]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x458]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0xc8]
mov esi, eax
lea eax, [ebp - 0x80]
push eax
call fcn.10028ca0
mov ecx, dword [edi + 0xbc]
sub ecx, dword [edi + 0xb8]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x18], eax
jae 0x100ad322
lea eax, [ebp - 0x18]
push eax
lea ecx, [edi + 0xc8]
call fcn.10045420
cmp esi, dword [ebp - 0x6c]
jne 0x100ad333
mov eax, dword [edi + 0x94]
test eax, eax
je 0x100ad333
call eax
mov eax, dword [ebp - 0x78]
lea ecx, [edi + 0xc8]
add eax, 4
mov dword [ebp - 0x78], eax
cmp eax, dword [ebp - 0x70]
jne 0x100ad2a0
lea ecx, [ebp - 0x448]
call fcn.10028e00
lea ecx, [ebp - 0x6c0]
call fcn.10029b80
lea ecx, [ebp - 0x4e0]
call fcn.10029b80
lea ecx, [ebp - 0x3bc]
call fcn.1004fd60
push fcn.10029b80
push 0x16
push 0x18
lea eax, [ebp - 0xc48]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0x30]
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x44]
mov dword [edi + 0x48], 0
imul eax, dword [edi + 0x48], 0xeb
push ecx
lea ecx, [edi + 0x18]
add eax, 0x14
mov dword [edi + 0x34], eax
mov dword [edi + 0x3c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x4c], eax
call fcn.10045420
push dword [ebp - 0x80]
lea ecx, [ebp - 0x930]
mov dword [ebp - 0x184], 0x636f6c67
mov word [ebp - 0x180], 0x6b
call fcn.1002af80
lea ecx, [ebp - 0x184]
mov dword [ebp - 4], 0x34
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad3f7
sub ecx, edx
lea eax, [ebp - 0x184]
push ecx
push eax
lea ecx, [ebp - 0x930]
call fcn.1002afa0
mov dword [ebp - 4], 0x35
lea ecx, [ebp - 0x918]
push dword [ebp - 0x80]
mov dword [ebp - 0x234], 0x32706b68
mov dword [ebp - 0x230], 0x303030
call fcn.1002af80
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x36
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad450
sub ecx, edx
lea eax, [ebp - 0x234]
push ecx
push eax
lea ecx, [ebp - 0x918]
call fcn.1002afa0
mov dword [ebp - 0x194], 0xba959690
xor ecx, ecx
mov dword [ebp - 0x190], 0x80898c96
mov dword [ebp - 0x18c], 0x9780868b
mov byte [ebp - 0x188], 0xe5
xor byte [ebp + ecx - 0x194], 0xe5
inc ecx
cmp ecx, 0xd
jb 0x100ad493
push dword [ebp - 0x80]
lea ecx, [ebp - 0x900]
call fcn.1002af80
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x38
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad4c0
sub ecx, edx
lea eax, [ebp - 0x194]
push ecx
push eax
lea ecx, [ebp - 0x900]
call fcn.1002afa0
push dword [ebp - 0x80]
lea ecx, [ebp - 0x8e8]
mov dword [ebp - 0x120], 0x74696c65
mov word [ebp - 0x11c], 0x65
call fcn.1002af80
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x3a
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad510
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x8e8]
call fcn.1002afa0
push dword [ebp - 0x80]
lea ecx, [ebp - 0x8d0]
mov dword [ebp - 0xac], 0x30353270
mov byte [ebp - 0xa8], 0
call fcn.1002af80
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x3c
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad558
sub ecx, edx
lea eax, [ebp - 0xac]
push ecx
push eax
lea ecx, [ebp - 0x8d0]
call fcn.1002afa0
push dword [ebp - 0x80]
lea ecx, [ebp - 0x8b8]
mov dword [ebp - 0xb4], 0x39636574
mov byte [ebp - 0xb0], 0
call fcn.1002af80
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x3e
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad5a0
sub ecx, edx
lea eax, [ebp - 0xb4]
push ecx
push eax
lea ecx, [ebp - 0x8b8]
call fcn.1002afa0
push dword [ebp - 0x80]
lea ecx, [ebp - 0x8a0]
mov dword [ebp - 0xbc], 0x37356e66
mov byte [ebp - 0xb8], 0
call fcn.1002af80
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x40
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad5e8
sub ecx, edx
lea eax, [ebp - 0xbc]
push ecx
push eax
lea ecx, [ebp - 0x8a0]
call fcn.1002afa0
push dword [ebp - 0x80]
lea ecx, [ebp - 0x888]
mov dword [ebp - 0x1ec], 0x67616564
mov word [ebp - 0x1e8], 0x656c
mov byte [ebp - 0x1e6], 0
call fcn.1002af80
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0x42
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad640
sub ecx, edx
lea eax, [ebp - 0x1ec]
push ecx
push eax
lea ecx, [ebp - 0x888]
call fcn.1002afa0
lea eax, [ebp - 0x352]
mov dword [ebp - 4], 0x43
push eax
lea ecx, [ebp - 0x870]
push ecx
lea edx, [ebp - 0x930]
push edx
lea ecx, [ebp - 0x434]
call fcn.100b7bf0
push dword [ebp - 0x80]
lea ecx, [ebp - 0x4f8]
mov dword [ebp - 0x2c4], 0x6f747561
mov dword [ebp - 0x2c0], 0x7975625f
mov word [ebp - 0x2bc], 0x32
call fcn.1002af80
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x45
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad6c0
sub ecx, edx
lea eax, [ebp - 0x2c4]
push ecx
push eax
lea ecx, [ebp - 0x4f8]
call fcn.1002afa0
push dword [ebp - 0x80]
lea ecx, [ebp - 0x7e0]
call fcn.1002af80
push 0
push 0x1012644c
lea ecx, [ebp - 0x7e0]
mov byte [ebp - 4], 0x47
call fcn.1002afa0
lea ecx, [ebp - 0x3d0]
call fcn.1002b110
lea eax, [ebp - 0x4f8]
mov byte [ebp - 4], 0x49
push eax
lea ecx, [edi + 0x110]
call fcn.1003b440
mov byte [edi + 0x141], 0
mov dword [edi + 0x17c], 0
mov dword [edi + 0xe8], 0x14
mov dword [edi + 0xec], 0x14
mov eax, dword [ebp - 0x430]
mov esi, dword [ebp - 0x434]
mov dword [ebp - 0x70], eax
cmp esi, eax
je 0x100ad77d
lea eax, [edi + 0x160]
mov edi, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
push esi
mov ecx, eax
call fcn.10050040
mov eax, dword [ebp - 0x6c]
add esi, 0x18
cmp esi, edi
jne 0x100ad765
mov edi, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x3cc]
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x78], eax
cmp eax, ecx
je 0x100ad84b
lea ecx, [edi + 0x170]
nop dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x454]
push eax
call fcn.10028ca0
lea ecx, [edi + 0x170]
mov esi, dword [eax]
lea eax, [ebp - 0x450]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x44c]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0x170]
mov esi, eax
lea eax, [ebp - 0x74]
push eax
call fcn.10028ca0
mov ecx, dword [edi + 0x164]
sub ecx, dword [edi + 0x160]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x1c], eax
jae 0x100ad822
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x170]
call fcn.10045420
cmp esi, dword [ebp - 0x70]
jne 0x100ad833
mov eax, dword [edi + 0x13c]
test eax, eax
je 0x100ad833
call eax
mov eax, dword [ebp - 0x78]
lea ecx, [edi + 0x170]
add eax, 4
mov dword [ebp - 0x78], eax
cmp eax, dword [ebp - 0x6c]
jne 0x100ad7a0
lea ecx, [ebp - 0x3d0]
call fcn.10028e00
lea ecx, [ebp - 0x7e0]
call fcn.10029b80
lea ecx, [ebp - 0x4f8]
call fcn.10029b80
lea ecx, [ebp - 0x434]
call fcn.1004fd60
push fcn.10029b80
push 8
push 0x18
lea eax, [ebp - 0x930]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0xd8]
mov dword [ebp - 0x48], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xf0], 0
imul eax, dword [edi + 0xf0], 0xeb
add eax, 0x14
mov dword [edi + 0xdc], eax
mov dword [edi + 0xe4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xf4], eax
lea eax, [ebp - 0x48]
push eax
call fcn.10045420
push dword [ebp - 0x74]
lea ecx, [ebp - 0xa38]
mov dword [ebp - 0xc4], 0x74736576
mov byte [ebp - 0xc0], 0
call fcn.1002af80
lea ecx, [ebp - 0xc4]
mov dword [ebp - 4], 0x4a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad907
sub ecx, edx
lea eax, [ebp - 0xc4]
push ecx
push eax
lea ecx, [ebp - 0xa38]
call fcn.1002afa0
mov dword [ebp - 4], 0x4b
lea ecx, [ebp - 0xa20]
push dword [ebp - 0x74]
mov dword [ebp - 0x258], 0x74736576
mov dword [ebp - 0x254], 0x6d6c6568
mov byte [ebp - 0x250], 0
call fcn.1002af80
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x4c
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad960
sub ecx, edx
lea eax, [ebp - 0x258]
push ecx
push eax
lea ecx, [ebp - 0xa20]
call fcn.1002afa0
push dword [ebp - 0x74]
lea ecx, [ebp - 0xa08]
mov dword [ebp - 0x13c], 0x65736174
mov word [ebp - 0x138], 0x72
call fcn.1002af80
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x4e
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ad9b0
sub ecx, edx
lea eax, [ebp - 0x13c]
push ecx
push eax
lea ecx, [ebp - 0xa08]
call fcn.1002afa0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x23c], 0x75666564
mov dword [ebp - 0x238], 0x726573
call fcn.1002af80
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x50
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ada00
sub ecx, edx
lea eax, [ebp - 0x23c]
push ecx
push eax
lea ecx, [ebp - 0x9f0]
call fcn.1002afa0
mov dword [ebp - 0x10c], 0x9384808d
xor ecx, ecx
mov dword [ebp - 0x108], 0x8897849c
mov word [ebp - 0x104], 0x978a
mov byte [ebp - 0x102], 0xe5
xor byte [ebp + ecx - 0x10c], 0xe5
inc ecx
cmp ecx, 0xb
jb 0x100ada42
push dword [ebp - 0x74]
lea ecx, [ebp - 0x9d8]
call fcn.1002af80
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x52
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ada70
sub ecx, edx
lea eax, [ebp - 0x10c]
push ecx
push eax
lea ecx, [ebp - 0x9d8]
call fcn.1002afa0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x9c0]
mov dword [ebp - 0x244], 0x6f6c6f6d
mov dword [ebp - 0x240], 0x766f74
call fcn.1002af80
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0x54
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100adac0
sub ecx, edx
lea eax, [ebp - 0x244]
push ecx
push eax
lea ecx, [ebp - 0x9c0]
call fcn.1002afa0
mov dword [ebp - 0x118], 0x82868b8c
xor ecx, ecx
mov dword [ebp - 0x114], 0x848b8097
mov word [ebp - 0x110], 0x8081
mov byte [ebp - 0x10e], 0xe5
xor byte [ebp + ecx - 0x118], 0xe5
inc ecx
cmp ecx, 0xb
jb 0x100adb02
push dword [ebp - 0x74]
lea ecx, [ebp - 0x9a8]
call fcn.1002af80
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x56
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100adb30
sub ecx, edx
lea eax, [ebp - 0x118]
push ecx
push eax
lea ecx, [ebp - 0x9a8]
call fcn.1002afa0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x990]
mov dword [ebp - 0x128], 0x6f636564
mov word [ebp - 0x124], 0x79
call fcn.1002af80
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x58
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100adb80
sub ecx, edx
lea eax, [ebp - 0x128]
push ecx
push eax
lea ecx, [ebp - 0x990]
call fcn.1002afa0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x978]
mov dword [ebp - 0x2d0], 0x73616c66
mov dword [ebp - 0x2cc], 0x6e616268
mov word [ebp - 0x2c8], 0x67
call fcn.1002af80
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x5a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100adbd4
sub ecx, edx
lea eax, [ebp - 0x2d0]
push ecx
push eax
lea ecx, [ebp - 0x978]
call fcn.1002afa0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x960]
mov dword [ebp - 0x2ac], 0x72676568
mov dword [ebp - 0x2a8], 0x64616e65
mov word [ebp - 0x2a4], 0x65
call fcn.1002af80
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 0x5c
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100adc28
sub ecx, edx
lea eax, [ebp - 0x2ac]
push ecx
push eax
lea ecx, [ebp - 0x960]
call fcn.1002afa0
mov dword [ebp - 0x1a4], 0x8e8a8896
xor ecx, ecx
mov dword [ebp - 0x1a0], 0x80978280
mov dword [ebp - 0x19c], 0x8081848b
mov byte [ebp - 0x198], 0xe5
nop dword [eax + eax]
xor byte [ebp + ecx - 0x1a4], 0xe5
inc ecx
cmp ecx, 0xd
jb 0x100adc70
push dword [ebp - 0x74]
lea ecx, [ebp - 0x948]
call fcn.1002af80
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x5e
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100adca0
sub ecx, edx
lea eax, [ebp - 0x1a4]
push ecx
push eax
lea ecx, [ebp - 0x948]
call fcn.1002afa0
lea eax, [ebp - 0x353]
mov dword [ebp - 4], 0x5f
push eax
lea ecx, [ebp - 0x930]
push ecx
lea edx, [ebp - 0xa38]
push edx
lea ecx, [ebp - 0x404]
call fcn.100b7bf0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x510]
mov dword [ebp - 0x2a0], 0x6f747561
mov dword [ebp - 0x29c], 0x7975625f
mov word [ebp - 0x298], 0x33
call fcn.1002af80
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], 0x61
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100add20
sub ecx, edx
lea eax, [ebp - 0x2a0]
push ecx
push eax
lea ecx, [ebp - 0x510]
call fcn.1002afa0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x7f8]
call fcn.1002af80
push 0
push 0x1012644c
lea ecx, [ebp - 0x7f8]
mov byte [ebp - 4], 0x63
call fcn.1002afa0
lea ecx, [ebp - 0x428]
call fcn.1002b110
lea eax, [ebp - 0x510]
mov byte [ebp - 4], 0x65
push eax
lea ecx, [edi + 0x1b8]
call fcn.1003b440
mov byte [edi + 0x1e9], 0
mov dword [edi + 0x224], 0
mov dword [edi + 0x190], 0x14
mov dword [edi + 0x194], 0x14
mov eax, dword [ebp - 0x400]
mov esi, dword [ebp - 0x404]
mov dword [ebp - 0x70], eax
cmp esi, eax
je 0x100adddd
lea eax, [edi + 0x208]
mov edi, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
push esi
mov ecx, eax
call fcn.10050040
mov eax, dword [ebp - 0x6c]
add esi, 0x18
cmp esi, edi
jne 0x100addc5
mov edi, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x424]
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x78], eax
cmp eax, ecx
je 0x100adeae
lea ecx, [edi + 0x218]
nop dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x478]
push eax
call fcn.10028ca0
lea ecx, [edi + 0x218]
mov esi, dword [eax]
lea eax, [ebp - 0x474]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x470]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0x218]
mov esi, eax
lea eax, [ebp - 0x84]
push eax
call fcn.10028ca0
mov ecx, dword [edi + 0x20c]
sub ecx, dword [edi + 0x208]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x20], eax
jae 0x100ade85
lea eax, [ebp - 0x20]
push eax
lea ecx, [edi + 0x218]
call fcn.10045420
cmp esi, dword [ebp - 0x70]
jne 0x100ade96
mov eax, dword [edi + 0x1e4]
test eax, eax
je 0x100ade96
call eax
mov eax, dword [ebp - 0x78]
lea ecx, [edi + 0x218]
add eax, 4
mov dword [ebp - 0x78], eax
cmp eax, dword [ebp - 0x6c]
jne 0x100ade00
lea ecx, [ebp - 0x428]
call fcn.10028e00
lea ecx, [ebp - 0x7f8]
call fcn.10029b80
lea ecx, [ebp - 0x510]
call fcn.10029b80
lea ecx, [ebp - 0x404]
call fcn.1004fd60
push fcn.10029b80
push 0xb
push 0x18
lea eax, [ebp - 0xa38]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0x180]
mov dword [ebp - 0x4c], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x198], 0
imul eax, dword [edi + 0x198], 0xeb
add eax, 0x14
mov dword [edi + 0x184], eax
mov dword [edi + 0x18c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x19c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10045420
push dword [ebp - 0x84]
lea ecx, [ebp - 0x540]
mov dword [ebp - 0x294], 0x65746177
lea esi, [edi + 0x904]
mov dword [ebp - 0x290], 0x72616d72
mov word [ebp - 0x28c], 0x6b
call fcn.1002af80
lea ecx, [ebp - 0x294]
mov dword [ebp - 4], 0x66
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100adf80
sub ecx, edx
lea eax, [ebp - 0x294]
push ecx
push eax
lea ecx, [ebp - 0x540]
call fcn.1002afa0
mov dword [ebp - 4], 0x67
lea ecx, [ebp - 0x528]
push dword [ebp - 0x84]
mov dword [ebp - 0x2e8], 0x65746177
mov dword [ebp - 0x2e4], 0x72616d72
mov word [ebp - 0x2e0], 0x6b
call fcn.1002af80
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x68
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100adfe0
sub ecx, edx
lea eax, [ebp - 0x2e8]
push ecx
push eax
lea ecx, [ebp - 0x528]
call fcn.1002afa0
lea eax, [ebp - 0x540]
mov byte [ebp - 4], 0x69
push eax
lea ecx, [edi + 0x93c]
call fcn.1003b440
lea eax, [ebp - 0x528]
mov byte [edi + 0x96d], 1
push eax
lea ecx, [edi + 0x974]
call fcn.1003b440
lea ecx, [ebp - 0x528]
mov byte [edi + 0x970], 0
call fcn.10029b80
lea ecx, [ebp - 0x540]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0x50], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x91c], 1
imul eax, dword [edi + 0x91c], 0xeb
add eax, 0x14
mov dword [edi + 0x908], eax
mov dword [edi + 0x910], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x920], eax
lea eax, [ebp - 0x50]
push eax
call fcn.10045420
mov dword [ebp - 0x134], 0x86918488
xor ecx, ecx
mov dword [ebp - 0x130], 0x8e84888d
mov dword [ebp - 0x12c], 0xe5828b8c
nop
xor byte [ebp + ecx - 0x134], 0xe5
inc ecx
cmp ecx, 0xc
jb 0x100ae0b0
push dword [ebp - 0x84]
lea ecx, [ebp - 0x870]
call fcn.1002af80
lea ecx, [ebp - 0x134]
mov dword [ebp - 4], 0x6a
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ae0e0
sub ecx, edx
lea eax, [ebp - 0x134]
push ecx
push eax
lea ecx, [ebp - 0x870]
call fcn.1002afa0
mov dword [ebp - 4], 0x6b
lea ecx, [ebp - 0x858]
push dword [ebp - 0x84]
mov dword [ebp - 0x1e4], 0x616d6164
mov word [ebp - 0x1e0], 0x6567
mov byte [ebp - 0x1de], 0
call fcn.1002af80
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x6c
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ae140
sub ecx, edx
lea eax, [ebp - 0x1e4]
push ecx
push eax
lea ecx, [ebp - 0x858]
call fcn.1002afa0
push dword [ebp - 0x84]
lea ecx, [ebp - 0x840]
mov dword [ebp - 0x300], 0x63727570
mov dword [ebp - 0x2fc], 0x65736168
mov word [ebp - 0x2f8], 0x73
call fcn.1002af80
lea ecx, [ebp - 0x300]
mov byte [ebp - 4], 0x6e
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ae197
sub ecx, edx
lea eax, [ebp - 0x300]
push ecx
push eax
lea ecx, [ebp - 0x840]
call fcn.1002afa0
push dword [ebp - 0x84]
lea ecx, [ebp - 0x828]
mov dword [ebp - 0xa4], 0x626d6f62
mov byte [ebp - 0xa0], 0
call fcn.1002af80
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x70
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ae1e2
sub ecx, edx
lea eax, [ebp - 0xa4]
push ecx
push eax
lea ecx, [ebp - 0x828]
call fcn.1002afa0
push dword [ebp - 0x84]
lea ecx, [ebp - 0x810]
mov dword [ebp - 0x1dc], 0x75666564
mov word [ebp - 0x1d8], 0x6573
mov byte [ebp - 0x1d6], 0
call fcn.1002af80
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x72
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ae236
sub ecx, edx
lea eax, [ebp - 0x1dc]
push ecx
push eax
lea ecx, [ebp - 0x810]
call fcn.1002afa0
lea eax, [ebp - 0x355]
mov dword [ebp - 4], 0x73
push eax
lea ecx, [ebp - 0x7f8]
push ecx
lea edx, [ebp - 0x870]
push edx
lea ecx, [ebp - 0x3e8]
call fcn.100b7bf0
mov dword [ebp - 0x1d4], 0x8c918a8b
xor ecx, ecx
mov dword [ebp - 0x1d0], 0x84868c83
mov dword [ebp - 0x1cc], 0x8b8a8c91
mov word [ebp - 0x1c8], 0xe596
xor byte [ebp + ecx - 0x1d4], 0xe5
inc ecx
cmp ecx, 0xe
jb 0x100ae2a2
push dword [ebp - 0x84]
lea ecx, [ebp - 0x570]
call fcn.1002af80
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x75
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ae2d0
sub ecx, edx
lea eax, [ebp - 0x1d4]
push ecx
push eax
lea ecx, [ebp - 0x570]
call fcn.1002afa0
mov dword [ebp - 0x21c], 0x8c918a8b
xor ecx, ecx
mov dword [ebp - 0x218], 0x84868c83
mov dword [ebp - 0x214], 0x8b8a8c91
mov word [ebp - 0x210], 0xe596
nop word [eax + eax]
xor byte [ebp + ecx - 0x21c], 0xe5
inc ecx
cmp ecx, 0xe
jb 0x100ae320
push dword [ebp - 0x84]
lea ecx, [ebp - 0x558]
call fcn.1002af80
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x77
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ae350
sub ecx, edx
lea eax, [ebp - 0x21c]
push ecx
push eax
lea ecx, [ebp - 0x558]
call fcn.1002afa0
lea ecx, [ebp - 0x3f8]
call fcn.1002b110
lea eax, [ebp - 0x570]
mov byte [ebp - 4], 0x79
push eax
lea ecx, [edi + 0x260]
call fcn.1003b440
lea eax, [ebp - 0x558]
mov byte [edi + 0x291], 1
push eax
lea ecx, [edi + 0x298]
call fcn.1003b440
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x291], al
cmovne eax, ecx
mov dword [edi + 0x2cc], eax
add eax, 0x14
mov dword [edi + 0x238], eax
mov dword [edi + 0x23c], eax
mov eax, dword [ebp - 0x3e4]
mov esi, dword [ebp - 0x3e8]
mov dword [ebp - 0x70], eax
cmp esi, eax
je 0x100ae408
lea eax, [edi + 0x2b0]
mov edi, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
nop word [eax + eax]
push esi
mov ecx, eax
call fcn.10050040
mov eax, dword [ebp - 0x6c]
add esi, 0x18
cmp esi, edi
jne 0x100ae3f0
mov edi, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x3f4]
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x78], eax
cmp eax, ecx
je 0x100ae4db
lea ecx, [edi + 0x2c0]
nop dword [eax + eax]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x46c]
push eax
call fcn.10028ca0
lea ecx, [edi + 0x2c0]
mov esi, dword [eax]
lea eax, [ebp - 0x468]
push eax
call fcn.10028cb0
push esi
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x464]
push dword [eax]
call fcn.1002ada0
add esp, 8
lea ecx, [edi + 0x2c0]
mov esi, eax
lea eax, [ebp - 0x7c]
push eax
call fcn.10028ca0
mov ecx, dword [edi + 0x2b4]
sub ecx, dword [edi + 0x2b0]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x24], eax
jae 0x100ae4b2
lea eax, [ebp - 0x24]
push eax
lea ecx, [edi + 0x2c0]
call fcn.10045420
cmp esi, dword [ebp - 0x70]
jne 0x100ae4c3
mov eax, dword [edi + 0x28c]
test eax, eax
je 0x100ae4c3
call eax
mov eax, dword [ebp - 0x78]
lea ecx, [edi + 0x2c0]
add eax, 4
mov dword [ebp - 0x78], eax
cmp eax, dword [ebp - 0x6c]
jne 0x100ae430
lea ecx, [ebp - 0x3f8]
call fcn.10028e00
lea ecx, [ebp - 0x558]
call fcn.10029b80
lea ecx, [ebp - 0x570]
call fcn.10029b80
lea ecx, [ebp - 0x3e8]
call fcn.1004fd60
push fcn.10029b80
push 5
push 0x18
lea eax, [ebp - 0x870]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [edi + 0x228]
mov dword [ebp - 0x40], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x240], 0
imul eax, dword [edi + 0x240], 0xeb
add eax, 0x14
mov dword [edi + 0x22c], eax
mov dword [edi + 0x234], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x244], eax
lea eax, [ebp - 0x40]
push eax
call fcn.10045420
movaps xmm0, xmmword [0x10129700]
lea ecx, [ebp - 0x5a0]
xorps xmm0, xmmword [0x10128a10]
lea esi, [edi + 0x2d0]
push dword [ebp - 0x7c]
movups xmmword [ebp - 0x48c], xmm0
mov byte [ebp - 0x47c], 0
call fcn.1002af80
lea ecx, [ebp - 0x48c]
mov dword [ebp - 4], 0x7a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ae5a8
sub ecx, edx
lea eax, [ebp - 0x48c]
push ecx
push eax
lea ecx, [ebp - 0x5a0]
call fcn.1002afa0
mov dword [ebp - 4], 0x7b
lea ecx, [ebp - 0x588]
movaps xmm0, xmmword [0x10129700]
xorps xmm0, xmmword [0x10128a20]
push dword [ebp - 0x7c]
movups xmmword [ebp - 0x4a0], xmm0
mov byte [ebp - 0x490], 0
call fcn.1002af80
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x7c
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ae602
sub ecx, edx
lea eax, [ebp - 0x4a0]
push ecx
push eax
lea ecx, [ebp - 0x588]
call fcn.1002afa0
lea eax, [ebp - 0x588]
mov byte [ebp - 4], 0x7d
push eax
lea ecx, [edi + 0x340]
call fcn.1003b440
lea eax, [ebp - 0x5a0]
push eax
lea ecx, [edi + 0x308]
call fcn.1003b440
lea ecx, [ebp - 0x588]
mov dword [edi + 0x33c], 0xffffffff
call fcn.10029b80
lea ecx, [ebp - 0x5a0]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0x38], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x2e8], 0
imul eax, dword [edi + 0x2e8], 0xeb
add eax, 0x14
mov dword [edi + 0x2d4], eax
mov dword [edi + 0x2dc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x2ec], eax
lea eax, [ebp - 0x38]
push eax
call fcn.10045420
lea esi, [edi + 0x360]
mov dword [ebp - 0x1b4], 0x808e8483
mov dword [ebp - 0x1b0], 0x918489ba
xor ecx, ecx
mov dword [ebp - 0x1ac], 0x9c868b80
mov byte [ebp - 0x1a8], 0xe5
nop dword [eax]
xor byte [ebp + ecx - 0x1b4], 0xe5
inc ecx
cmp ecx, 0xd
jb 0x100ae6e0
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x5d0]
call fcn.1002af80
lea ecx, [ebp - 0x1b4]
mov dword [ebp - 4], 0x7e
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ae710
sub ecx, edx
lea eax, [ebp - 0x1b4]
push ecx
push eax
lea ecx, [ebp - 0x5d0]
call fcn.1002afa0
mov dword [ebp - 4], 0x7f
xor ecx, ecx
mov dword [ebp - 0x1c4], 0x808e8483
mov dword [ebp - 0x1c0], 0x918489c5
mov dword [ebp - 0x1bc], 0x9c868b80
mov byte [ebp - 0x1b8], 0xe5
nop word [eax + eax]
xor byte [ebp + ecx - 0x1c4], 0xe5
inc ecx
cmp ecx, 0xd
jb 0x100ae760
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x5b8]
call fcn.1002af80
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x80
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ae790
sub ecx, edx
lea eax, [ebp - 0x1c4]
push ecx
push eax
lea ecx, [ebp - 0x5b8]
call fcn.1002afa0
lea eax, [ebp - 0x5b8]
mov byte [ebp - 4], 0x81
push eax
lea ecx, [edi + 0x3d0]
call fcn.1003b440
lea eax, [ebp - 0x5d0]
push eax
lea ecx, [edi + 0x398]
call fcn.1003b440
lea ecx, [ebp - 0x5b8]
mov dword [edi + 0x3cc], 0xffffffff
call fcn.10029b80
lea ecx, [ebp - 0x5d0]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [edi + 0x3ec], 0x1002d3b0
lea ecx, [edi + 0x18]
mov dword [ebp - 0x34], esi
mov dword [edi + 0x378], 0
imul eax, dword [edi + 0x378], 0xeb
add eax, 0x14
mov dword [edi + 0x364], eax
mov dword [edi + 0x36c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x37c], eax
lea eax, [ebp - 0x34]
push eax
call fcn.10045420
push dword [ebp - 0x7c]
xor eax, eax
mov dword [ebp - 0x360], 0x73006d
lea ecx, [ebp - 0x600]
mov word [ebp - 0x35c], ax
lea esi, [edi + 0x3f0]
call fcn.1002af80
lea ecx, [ebp - 0x360]
mov dword [ebp - 4], 0x82
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100ae880
sub ecx, edx
lea eax, [ebp - 0x360]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x600]
call fcn.100500e0
mov dword [ebp - 4], 0x83
lea ecx, [ebp - 0x5e8]
movaps xmm0, xmmword [0x10129700]
xorps xmm0, xmmword [0x10128e90]
push dword [ebp - 0x7c]
movups xmmword [ebp - 0x4b4], xmm0
mov byte [ebp - 0x4a4], 0
call fcn.1002af80
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 4], 0x84
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100ae8e0
sub ecx, edx
lea eax, [ebp - 0x4b4]
push ecx
push eax
lea ecx, [ebp - 0x5e8]
call fcn.1002afa0
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x6d8]
call fcn.1002af80
push 0
push 0x1012644c
lea ecx, [ebp - 0x6d8]
mov byte [ebp - 4], 0x86
call fcn.1002afa0
lea eax, [ebp - 0x5e8]
mov byte [ebp - 4], 0x87
push eax
lea ecx, [edi + 0x428]
call fcn.1003b440
mov byte [edi + 0x459], 0
lea eax, [ebp - 0x600]
mov dword [edi + 0x4a8], 0
lea ecx, [edi + 0x490]
mov dword [edi + 0x400], 8
mov dword [edi + 0x404], 8
mov dword [edi + 0x464], 0
mov dword [edi + 0x468], 0x44160000
mov dword [edi + 0x460], 0x43480000
mov dword [edi + 0x474], 0
push eax
mov dword [edi + 0x46c], 0x41c80000
call fcn.100b80b0
lea ecx, [ebp - 0x6d8]
call fcn.10029b80
lea ecx, [ebp - 0x5e8]
call fcn.10029b80
lea ecx, [ebp - 0x600]
mov dword [ebp - 4], 0xffffffff
call fcn.1004fde0
mov dword [ebp - 0x30], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x408], 0
imul eax, dword [edi + 0x408], 0xeb
add eax, 0x14
mov dword [edi + 0x3f4], eax
mov dword [edi + 0x3fc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x40c], eax
lea eax, [ebp - 0x30]
push eax
call fcn.10045420
lea esi, [edi + 0x4ac]
mov dword [ebp - 0x100], 0x8a919084
mov dword [ebp - 0xfc], 0x80868684
xor ecx, ecx
mov word [ebp - 0xf8], 0x9195
mov byte [ebp - 0xf6], 0xe5
xor byte [ebp + ecx - 0x100], 0xe5
inc ecx
cmp ecx, 0xb
jb 0x100aea32
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x630]
call fcn.1002af80
lea ecx, [ebp - 0x100]
mov dword [ebp - 4], 0x88
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aea60
sub ecx, edx
lea eax, [ebp - 0x100]
push ecx
push eax
lea ecx, [ebp - 0x630]
call fcn.1002afa0
mov dword [ebp - 4], 0x89
mov ecx, 0x10
movaps xmm0, xmmword [0x10129700]
xorps xmm0, xmmword [0x10128ba0]
mov dword [ebp - 0x384], 0x8e84888d
mov dword [ebp - 0x380], 0xe5828b8c
movups xmmword [ebp - 0x394], xmm0
xor byte [ebp + ecx - 0x394], 0xe5
inc ecx
cmp ecx, 0x18
jb 0x100aeab1
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x618]
call fcn.1002af80
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 0x8a
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aeae0
sub ecx, edx
lea eax, [ebp - 0x394]
push ecx
push eax
lea ecx, [ebp - 0x618]
call fcn.1002afa0
lea eax, [ebp - 0x630]
mov byte [ebp - 4], 0x8b
push eax
lea ecx, [edi + 0x4e4]
call fcn.1003b440
lea eax, [ebp - 0x618]
mov byte [edi + 0x515], 1
push eax
lea ecx, [edi + 0x51c]
call fcn.1003b440
lea ecx, [ebp - 0x618]
mov byte [edi + 0x518], 0
call fcn.10029b80
lea ecx, [ebp - 0x630]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0x2c], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x4c4], 1
imul eax, dword [edi + 0x4c4], 0xeb
add eax, 0x14
mov dword [edi + 0x4b0], eax
mov dword [edi + 0x4b8], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x4c8], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.10045420
movaps xmm0, xmmword [0x10129700]
lea ecx, [ebp - 0x660]
xorps xmm0, xmmword [0x10129050]
lea esi, [edi + 0x534]
push dword [ebp - 0x7c]
movups xmmword [ebp - 0x4c8], xmm0
mov byte [ebp - 0x4b8], 0
call fcn.1002af80
lea ecx, [ebp - 0x4c8]
mov dword [ebp - 4], 0x8c
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aebd0
sub ecx, edx
lea eax, [ebp - 0x4c8]
push ecx
push eax
lea ecx, [ebp - 0x660]
call fcn.1002afa0
mov dword [ebp - 4], 0x8d
mov ecx, 0x10
movaps xmm0, xmmword [0x10129700]
xorps xmm0, xmmword [0x10129060]
mov dword [ebp - 0x36c], 0xc88b8cc5
mov dword [ebp - 0x368], 0x80888482
mov byte [ebp - 0x364], 0xe5
movups xmmword [ebp - 0x37c], xmm0
nop dword [eax + eax]
xor byte [ebp + ecx - 0x37c], 0xe5
inc ecx
cmp ecx, 0x19
jb 0x100aec30
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x648]
call fcn.1002af80
lea ecx, [ebp - 0x37c]
mov byte [ebp - 4], 0x8e
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aec60
sub ecx, edx
lea eax, [ebp - 0x37c]
push ecx
push eax
lea ecx, [ebp - 0x648]
call fcn.1002afa0
lea eax, [ebp - 0x660]
mov byte [ebp - 4], 0x8f
push eax
lea ecx, [edi + 0x56c]
call fcn.1003b440
lea eax, [ebp - 0x648]
mov byte [edi + 0x59d], 1
push eax
lea ecx, [edi + 0x5a4]
call fcn.1003b440
lea ecx, [ebp - 0x648]
mov byte [edi + 0x5a0], 0
call fcn.10029b80
lea ecx, [ebp - 0x660]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0x3c], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x54c], 1
imul eax, dword [edi + 0x54c], 0xeb
add eax, 0x14
mov dword [edi + 0x538], eax
mov dword [edi + 0x540], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x550], eax
lea eax, [ebp - 0x3c]
push eax
call fcn.10045420
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x690]
mov dword [ebp - 0x2f4], 0x6d746968
lea esi, [edi + 0x5bc]
mov dword [ebp - 0x2f0], 0x656b7261
mov word [ebp - 0x2ec], 0x72
call fcn.1002af80
lea ecx, [ebp - 0x2f4]
mov dword [ebp - 4], 0x90
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aed50
sub ecx, edx
lea eax, [ebp - 0x2f4]
push ecx
push eax
lea ecx, [ebp - 0x690]
call fcn.1002afa0
mov dword [ebp - 4], 0x91
lea ecx, [ebp - 0x678]
push dword [ebp - 0x7c]
mov dword [ebp - 0x2dc], 0x6d746968
mov dword [ebp - 0x2d8], 0x656b7261
mov word [ebp - 0x2d4], 0x72
call fcn.1002af80
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 0x92
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aedb0
sub ecx, edx
lea eax, [ebp - 0x2dc]
push ecx
push eax
lea ecx, [ebp - 0x678]
call fcn.1002afa0
lea eax, [ebp - 0x690]
mov byte [ebp - 4], 0x93
push eax
lea ecx, [edi + 0x5f4]
call fcn.1003b440
lea eax, [ebp - 0x678]
mov byte [edi + 0x625], 1
push eax
lea ecx, [edi + 0x62c]
call fcn.1003b440
lea ecx, [ebp - 0x678]
mov byte [edi + 0x628], 0
call fcn.10029b80
lea ecx, [ebp - 0x690]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0x54], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x5d4], 1
imul eax, dword [edi + 0x5d4], 0xeb
add eax, 0x14
mov dword [edi + 0x5c0], eax
mov dword [edi + 0x5c8], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x5d8], eax
lea eax, [ebp - 0x54]
push eax
call fcn.10045420
lea esi, [edi + 0x644]
mov dword [ebp - 0x268], 0x81828497
mov dword [ebp - 0x264], 0xba89898a
xor ecx, ecx
mov dword [ebp - 0x260], 0x86978a83
mov word [ebp - 0x25c], 0xe580
nop dword [eax]
xor byte [ebp + ecx - 0x268], 0xe5
inc ecx
cmp ecx, 0xe
jb 0x100aee90
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x708]
call fcn.10029bd0
mov dword [ebp - 4], 0x94
xor ecx, ecx
mov dword [ebp - 0x278], 0x81828497
mov dword [ebp - 0x274], 0xc589898a
mov dword [ebp - 0x270], 0x86978a83
mov word [ebp - 0x26c], 0xe580
xor byte [ebp + ecx - 0x278], 0xe5
inc ecx
cmp ecx, 0xe
jb 0x100aeee0
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x6f0]
call fcn.10029bd0
lea eax, [ebp - 0x708]
mov byte [ebp - 4], 0x95
push eax
lea ecx, [edi + 0x67c]
call fcn.1003b440
lea eax, [ebp - 0x6f0]
mov byte [edi + 0x6ad], 1
push eax
lea ecx, [edi + 0x6b4]
call fcn.1003b440
lea ecx, [ebp - 0x6f0]
mov byte [edi + 0x6b0], 0
call fcn.10029b80
lea ecx, [ebp - 0x708]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0x58], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x65c], 1
imul eax, dword [edi + 0x65c], 0xeb
add eax, 0x14
mov dword [edi + 0x648], eax
mov dword [edi + 0x650], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x660], eax
lea eax, [ebp - 0x58]
push eax
call fcn.10045420
lea eax, [ebp - 0x308]
mov dword [ebp - 0x308], 0x6b6e6172
push eax
lea ecx, [ebp - 0x738]
mov word [ebp - 0x304], 0x73
lea esi, [edi + 0x754]
call fcn.10029bd0
mov dword [ebp - 4], 0x96
mov ecx, 0x10
movaps xmm0, xmmword [0x10129700]
xorps xmm0, xmmword [0x10128de0]
mov dword [ebp - 0x3a0], 0x97c5828b
mov dword [ebp - 0x39c], 0x968e8b84
mov byte [ebp - 0x398], 0xe5
movups xmmword [ebp - 0x3b0], xmm0
nop dword [eax]
xor byte [ebp + ecx - 0x3b0], 0xe5
inc ecx
cmp ecx, 0x19
jb 0x100af000
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x720]
call fcn.10029bd0
lea eax, [ebp - 0x738]
mov byte [ebp - 4], 0x97
push eax
lea ecx, [edi + 0x78c]
call fcn.1003b440
lea eax, [ebp - 0x720]
mov byte [edi + 0x7bd], 1
push eax
lea ecx, [edi + 0x7c4]
call fcn.1003b440
lea ecx, [ebp - 0x720]
mov byte [edi + 0x7c0], 0
call fcn.10029b80
lea ecx, [ebp - 0x738]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0x5c], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x76c], 1
imul eax, dword [edi + 0x76c], 0xeb
add eax, 0x14
mov dword [edi + 0x758], eax
mov dword [edi + 0x760], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x770], eax
lea eax, [ebp - 0x5c]
push eax
call fcn.10045420
lea eax, [ebp - 0x344]
mov dword [ebp - 0x344], 0x6c6c696b
push eax
lea ecx, [ebp - 0x768]
mov dword [ebp - 0x340], 0x64656566
lea esi, [edi + 0x6cc]
mov byte [ebp - 0x33c], 0
call fcn.10029bd0
mov dword [ebp - 4], 0x98
mov ecx, 0x10
movaps xmm0, xmmword [0x10129700]
xorps xmm0, xmmword [0x10128930]
mov word [ebp - 0x408], 0xe581
movups xmmword [ebp - 0x418], xmm0
nop
xor byte [ebp + ecx - 0x418], 0xe5
inc ecx
cmp ecx, 0x12
jb 0x100af110
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x750]
call fcn.10029bd0
lea eax, [ebp - 0x768]
mov byte [ebp - 4], 0x99
push eax
lea ecx, [edi + 0x704]
call fcn.1003b440
lea eax, [ebp - 0x750]
mov byte [edi + 0x735], 1
push eax
lea ecx, [edi + 0x73c]
call fcn.1003b440
lea ecx, [ebp - 0x750]
mov byte [edi + 0x738], 0
call fcn.10029b80
lea ecx, [ebp - 0x768]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [edi + 0x730], 0x1002d3c0
lea ecx, [edi + 0x18]
mov dword [ebp - 0x60], esi
mov dword [edi + 0x6e4], 1
imul eax, dword [edi + 0x6e4], 0xeb
add eax, 0x14
mov dword [edi + 0x6d0], eax
mov dword [edi + 0x6d8], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x6e8], eax
lea eax, [ebp - 0x60]
push eax
call fcn.10045420
lea eax, [ebp - 0x320]
mov dword [ebp - 0x320], 0x6e616c63
push eax
lea ecx, [ebp - 0x798]
mov dword [ebp - 0x31c], 0x676174
lea esi, [edi + 0x7dc]
call fcn.10029bd0
lea eax, [ebp - 0x328]
mov dword [ebp - 4], 0x9a
push eax
lea ecx, [ebp - 0x780]
mov dword [ebp - 0x328], 0x6e616c43
mov dword [ebp - 0x324], 0x676174
call fcn.10029bd0
lea eax, [ebp - 0x798]
mov byte [ebp - 4], 0x9b
push eax
lea ecx, [edi + 0x814]
call fcn.1003b440
lea eax, [ebp - 0x780]
mov byte [edi + 0x845], 1
push eax
lea ecx, [edi + 0x84c]
call fcn.1003b440
lea ecx, [ebp - 0x780]
mov byte [edi + 0x848], 0
call fcn.10029b80
lea ecx, [ebp - 0x798]
mov dword [ebp - 4], 0xffffffff
call fcn.10029b80
mov dword [ebp - 0x64], esi
lea ecx, [edi + 0x18]
mov dword [esi + 0x18], 1
imul eax, dword [esi + 0x18], 0xeb
add eax, 0x14
mov dword [esi + 4], eax
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x64]
push eax
call fcn.10045420
mov dword [ebp - 0x330], 0x61666544
lea eax, [ebp - 0x330]
mov dword [ebp - 0x32c], 0x746c75
push eax
lea ecx, [ebp - 0xca8]
call fcn.10029bd0
mov dword [ebp - 4], 0x9c
lea eax, [ebp - 0x310]
push eax
lea ecx, [ebp - 0xc90]
mov dword [ebp - 0x310], 0x74617453
mov word [ebp - 0x30c], 0x6369
mov byte [ebp - 0x30a], 0
call fcn.10029bd0
mov byte [ebp - 4], 0x9d
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0xc78]
mov dword [ebp - 0x318], 0x61746f52
mov word [ebp - 0x314], 0x6574
mov byte [ebp - 0x312], 0
call fcn.10029bd0
mov byte [ebp - 4], 0x9e
lea eax, [ebp - 0x350]
push eax
lea ecx, [ebp - 0xc60]
mov dword [ebp - 0x350], 0x656d6147
mov dword [ebp - 0x34c], 0x736e6573
mov word [ebp - 0x348], 0x65
call fcn.10029bd0
lea eax, [ebp - 0x354]
mov dword [ebp - 4], 0x9f
push eax
lea ecx, [ebp - 0xc48]
push ecx
lea edx, [ebp - 0xca8]
push edx
lea ecx, [ebp - 0x3dc]
call fcn.100b7bf0
mov byte [ebp - 4], 0xa0
xor ecx, ecx
mov dword [ebp - 0x288], 0x8b848986
mov dword [ebp - 0x284], 0xba828491
mov dword [ebp - 0x280], 0x899c9196
mov word [ebp - 0x27c], 0xe580
nop dword [eax + eax]
xor byte [ebp + ecx - 0x288], 0xe5
inc ecx
cmp ecx, 0xe
jb 0x100af3c0
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x7c8]
call fcn.10029bd0
lea eax, [ebp - 0x338]
mov byte [ebp - 4], 0xa1
push eax
lea ecx, [ebp - 0x7b0]
mov dword [ebp - 0x338], 0x6c797453
mov dword [ebp - 0x334], 0x203a65
call fcn.10029bd0
lea eax, [ebp - 0x7c8]
mov byte [ebp - 4], 0xa2
push eax
lea ecx, [edi + 0x89c]
call fcn.1003b440
lea eax, [ebp - 0x7b0]
mov byte [edi + 0x8cd], 1
push eax
lea ecx, [edi + 0x8d4]
call fcn.1003b440
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x8cd], al
cmovne eax, ecx
mov dword [edi + 0x900], eax
add eax, 0x14
mov dword [edi + 0x874], eax
mov dword [edi + 0x878], eax
mov eax, dword [ebp - 0x3d8]
mov esi, dword [ebp - 0x3dc]
mov dword [ebp - 0x70], eax
cmp esi, eax
je 0x100af498
lea eax, [edi + 0x8ec]
mov edi, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
nop dword [eax]
push esi
mov ecx, eax
call fcn.10050040
mov eax, dword [ebp - 0x6c]
add esi, 0x18
cmp esi, edi
jne 0x100af480
mov edi, dword [ebp - 0x9c]
mov ecx, dword [edi + 0x8f0]
mov eax, 0x2aaaaaab
sub ecx, dword [edi + 0x8ec]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100af4c1
mov dword [edi + 0x8fc], 0
lea ecx, [ebp - 0x7b0]
call fcn.10029b80
lea ecx, [ebp - 0x7c8]
call fcn.10029b80
lea ecx, [ebp - 0x3dc]
call fcn.1004faa0
push fcn.10029b80
push 4
push 0x18
lea eax, [ebp - 0xca8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100e55d7
lea eax, [ebp - 0x68]
mov dword [ebp - 0x68], 0x1002eae0
push eax
lea ecx, [edi + 0x8bc]
call fcn.10042490
lea eax, [edi + 0x864]
mov dword [ebp - 0x28], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x87c], 1
imul eax, dword [edi + 0x87c], 0xeb
add eax, 0x14
mov dword [edi + 0x868], eax
mov dword [edi + 0x870], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x880], eax
lea eax, [ebp - 0x28]
push eax
call fcn.10042490
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100e5586
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret