Function at 0xbfafa0
Capabilities:
Access peb ldr_data
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Get number of processors
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x9e1b98
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xd48
push esi
push edi
push 0x25
call dword [0x9ed080]
call fcn.00c781d0
mov dword [ebp - 0x24], eax
mov ecx, edx
shrd eax, ecx, 8
mov ecx, dword [ebp - 0x24]
movzx esi, al
mov eax, ecx
shrd eax, edx, 0x10
movzx eax, al
add esi, eax
movzx eax, cl
mov ecx, 0xa16da4
add esi, eax
call fcn.00bb7c90
push eax
call fcn.00be2eb7
add esp, 4
xor ecx, ecx
add esi, eax
call fcn.00c8dad0
sub eax, 0xffffff80
add eax, esi
push eax
call fcn.00bdb19c
add esp, 4
push 0x100
push 0
push 0xa190c0
call fcn.00bd75b0
add esp, 0xc
mov ecx, 0xa16da4
call fcn.00ba4880
push eax
mov ecx, 0xa16da4
call fcn.00bb7c90
push eax
push 0xa190c0
call fcn.00bd6e70
add esp, 0xc
mov ecx, 0xa192dc
call fcn.00ba4880
push eax
mov ecx, 0xa192dc
call fcn.00bb7c90
push eax
push 0xa19124
call fcn.00bd6e70
add esp, 0xc
mov ecx, 0xa16da4
call fcn.00bb7c90
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0xbfb091
sub eax, edx
mov ecx, 0xa16da4
push eax
call fcn.00bb7c90
push eax
lea ecx, [ebp - 0x230]
call fcn.00ba4930
mov dword [ebp - 4], 0
mov ecx, 0xa16da4
push eax
call fcn.00bb7ec0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.00ba4890
mov ecx, 0xa193dc
call fcn.00bb7c90
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0xbfb0e2
sub eax, edx
mov ecx, 0xa193dc
push eax
call fcn.00bb7c90
push eax
lea ecx, [ebp - 0xa98]
call fcn.00ba4930
mov dword [ebp - 4], 1
mov ecx, 0xa193dc
push eax
call fcn.00bb7ec0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa98]
call fcn.00ba4890
mov ecx, 0xa19550
call fcn.00bb7c90
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0xbfb133
sub eax, edx
mov ecx, 0xa19550
push eax
call fcn.00bb7c90
push eax
lea ecx, [ebp - 0xa80]
call fcn.00ba4930
mov dword [ebp - 4], 2
mov ecx, 0xa19550
push eax
call fcn.00bb7ec0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa80]
call fcn.00ba4890
push 0x8000
call dword [0x9ed200]
push eax
call dword [0x9ed204]
push 0x8edcc0
call dword [0x9ed140]
call fcn.00bff700
test al, al
jne 0xbfb1a7
mov eax, 1
jmp 0xbff6e2
mov esi, dword [0x9ed108]
push 0x80000041
call esi
test eax, eax
jne 0xbfb1bf
push 0x80000001
call esi
xor ecx, ecx
call fcn.00c8dad0
push eax
call fcn.00bdb19c
mov dword [ebp - 0x18], 0xeedfd0d1
add esp, 4
mov dword [ebp - 0x14], 0x9524d4ea
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60c], ecx
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x18], 0x7dbb928a
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x604], ecx
lea ecx, [ebp - 0x610]
mov dword [ebp - 0x608], eax
call fcn.00bb4ed0
push eax
call dword [0x9ed0b0]
mov esi, eax
test esi, esi
je 0xbfb325
mov dword [ebp - 0x18], 0xbefe91d6
mov dword [ebp - 0x14], 0x90049faf
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x7a0], ecx
mov dword [ebp - 0x79c], edx
mov dword [ebp - 0x18], 0x9d8f794
mov dword [ebp - 0x14], 0x25e902cd
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x794], ecx
mov dword [ebp - 0x798], eax
mov dword [ebp - 0x18], 0xb0390ce3
mov dword [ebp - 0x14], 0xb289a37a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x78c], ecx
mov dword [ebp - 0x790], eax
mov dword [ebp - 0x18], 0xf63d2b87
mov dword [ebp - 0x14], 0xec85123b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x784], ecx
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x18], 0x804e7e9f
mov dword [ebp - 0x14], 0x7eadd2b7
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x77c], ecx
mov dword [ebp - 0x780], eax
mov dword [ebp - 0x18], 0xd5d93a8a
mov dword [ebp - 0x14], 0x19127bfa
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x774], ecx
lea ecx, [ebp - 0x7a0]
mov dword [ebp - 0x778], eax
call fcn.00bb4ad0
push eax
push esi
call dword [0x9ed0e0]
test eax, eax
je 0xbfb325
push 0
push 0
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0
push eax
push 7
push 0
push 0
push 0x20
push 0
push 1
push 0
call dword [0xa181c0]
lea ecx, [ebp - 0x8b0]
call fcn.00baa600
mov dword [ebp - 4], 3
sub esp, 0x18
lea eax, [ebp - 0x8b0]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call fcn.00bb7fb0
mov byte [ebp - 4], 4
mov byte [ebp - 4], 3
mov edx, 0x1e8c54
lea ecx, [ebp - 0xa0]
call fcn.00c88f30
add esp, 0x18
mov byte [ebp - 4], 5
mov ecx, 0xa19538
call fcn.00ba4880
mov ecx, dword [ebp - 0xa0]
xor edi, edi
mov dword [ebp - 0x2c], eax
mov edx, dword [ecx + 0x10]
sub edx, eax
je 0xbfb576
nop word [eax + eax]
call fcn.00bb7c90
mov ecx, 0xa19538
mov esi, dword [eax + edi]
mov eax, dword [eax + edi + 4]
mov dword [ebp - 0x24], eax
call fcn.00bb7c90
cmp esi, dword [eax]
jne 0xbfb3e9
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [eax + 4]
jne 0xbfb3e9
lea ecx, [ebp - 0xa0]
call fcn.00bbcb40
mov ecx, eax
call fcn.00bb7c90
mov ecx, 0xa19538
mov esi, dword [eax + edi + 8]
mov eax, dword [eax + edi + 0xc]
mov dword [ebp - 0x24], eax
call fcn.00bb7c90
cmp esi, dword [eax + 8]
jne 0xbfb3e9
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [eax + 0xc]
je 0xbfb3ff
mov ecx, dword [ebp - 0xa0]
inc edi
mov eax, dword [ecx + 0x10]
sub eax, dword [ebp - 0x2c]
cmp edi, eax
jb 0xbfb390
jmp 0xbfb576
mov dword [ebp - 0x18], 0xb1e982c2
mov dword [ebp - 0x14], 0xd82794b2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x61c], ecx
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x614], ecx
lea ecx, [ebp - 0x620]
mov dword [ebp - 0x618], eax
call fcn.00bb4ed0
mov dword [ebp - 0x18], 0xacf28bc1
mov esi, eax
mov dword [ebp - 0x14], 0x96328afb
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x7e0], ecx
mov dword [ebp - 0x7dc], edx
mov dword [ebp - 0x18], 0x10dae081
mov dword [ebp - 0x14], 0x34ab2fde
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7d8], ecx
mov dword [ebp - 0x7d4], eax
mov dword [ebp - 0x18], 0xb03949c6
mov dword [ebp - 0x14], 0xeebcb36b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7cc], ecx
mov dword [ebp - 0x7d0], eax
mov dword [ebp - 0x18], 0x8e1602c8
mov dword [ebp - 0x14], 0xa9b43405
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7c4], ecx
mov dword [ebp - 0x7c8], eax
mov dword [ebp - 0x18], 0x894c729b
mov dword [ebp - 0x14], 0x98dabdb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7bc], ecx
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 0x18], 0xf5ad54eb
mov dword [ebp - 0x14], 0x6b32148e
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7b4], ecx
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 0x18], 0x4742374e
mov dword [ebp - 0x14], 0x74428611
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7ac], ecx
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x18], 0x227dac2c
mov dword [ebp - 0x14], 0x53bfeed8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7a4], ecx
lea ecx, [ebp - 0x7e0]
mov dword [ebp - 0x7a8], eax
call fcn.00bb4310
push 0x14
push esi
push eax
push 0
call dword [0x9ed33c]
cmp eax, 7
jne 0xbfb570
lea esi, [eax + 6]
jmp 0xbff6a4
mov ecx, dword [ebp - 0xa0]
push 0
call fcn.00bba6d0
mov edi, dword [0xa15b2c]
mov esi, dword [0xa15b28]
push 0
push 3
push edi
push esi
call fcn.00bfa260
add eax, dword [0xa15b30]
mov dword [ebp - 0x24], eax
mov eax, edx
adc eax, dword [0xa15b34]
mov edx, dword [ebp - 0x24]
mov ecx, edx
sub ecx, esi
mov dword [ebp - 0x40], eax
sbb eax, edi
or ecx, eax
mov eax, dword [ebp - 0x40]
je 0xbfb5ca
sub esi, edx
mov dword [0xa15b28], esi
sbb edi, eax
mov dword [0xa15b2c], edi
jmp 0xbfb5d0
add edx, 1
adc eax, 0
mov dword [ebp - 0x44], eax
mov ecx, edx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x48], edx
test edi, edi
jl 0xbfb5e9
jg 0xbfb602
cmp esi, 0x176
ja 0xbfb602
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x40], eax
test edi, edi
jg 0xbfb619
jl 0xbfb5f9
test esi, esi
jae 0xbfb619
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], eax
xorps xmm0, xmm0
movlpd qword [0xa15b28], xmm0
mov esi, dword [0xa15b28]
mov edi, dword [0xa15b2c]
push 0
push 3
push edi
push esi
call fcn.00bfa260
mov dword [ebp - 0x24], eax
mov eax, edx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x48]
mov ecx, edx
mov dword [0xa15b30], edx
adc eax, dword [ebp - 0x40]
sub ecx, esi
mov dword [ebp - 0x44], eax
mov dword [0xa15b34], eax
sbb eax, edi
or ecx, eax
je 0xbfb65d
sub esi, edx
mov dword [0xa15b28], esi
sbb edi, dword [ebp - 0x44]
mov dword [0xa15b2c], edi
jmp 0xbfb671
mov eax, dword [ebp - 0x44]
add edx, 1
mov dword [0xa15b30], edx
adc eax, 0
mov dword [0xa15b34], eax
test edi, edi
jg 0xbfb689
jl 0xbfb689
cmp esi, 0x176
ja 0xbfb689
test edi, edi
jg 0xbfb694
jl 0xbfb689
test esi, esi
jae 0xbfb694
xorps xmm0, xmm0
movlpd qword [0xa15b28], xmm0
push 0xa952
call dword [0x9ed1ec]
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x62c], ecx
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x624], ecx
push ecx
lea ecx, [ebp - 0x630]
mov dword [ebp - 0x628], eax
call fcn.00bb4ed0
add esp, 4
mov ecx, 0xa192f4
push eax
call fcn.00bb7bf0
test eax, eax
jne 0xbfb840
call fcn.00c77e80
test al, al
je 0xbfb797
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xbfb793
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfb793
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfb789
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfb768
cmp esi, 0xe80fd3a
je 0xbfb823
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfb750
mov eax, dword [eax]
jmp 0xbfb720
call fcn.00c77c80
test al, al
jne 0xbfb840
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xbfb81f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfb81f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfb815
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfb7f8
cmp esi, 0xe80fd3a
je 0xbfb823
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfb7e0
mov eax, dword [eax]
jmp 0xbfb7b0
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 0
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x2a4], ecx
push ecx
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x2a8], eax
call fcn.00bb4ed0
add esp, 4
mov ecx, 0xa16d8c
push eax
call fcn.00bb7bf0
test eax, eax
jne 0xbfb978
call fcn.00c77b90
mov byte [ebp - 0x59], al
call fcn.00c77570
mov byte [ebp - 0x39], al
call fcn.00c77270
cmp byte [ebp - 0x59], 0
jne 0xbfb8d6
cmp byte [ebp - 0x39], 0
jne 0xbfb8d6
test al, al
jne 0xbfb8d6
call fcn.00c77cc0
test al, al
je 0xbfb978
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xbfb957
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfb957
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfb94d
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfb930
cmp esi, 0xe80fd3a
je 0xbfb95b
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfb912
mov eax, dword [eax]
jmp 0xbfb8e2
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 0
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x2b4], ecx
push ecx
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2b8], eax
call fcn.00bb4ed0
add esp, 4
mov ecx, 0xa194d0
push eax
call fcn.00bb7bf0
test eax, eax
jne 0xbfb9e0
lea ecx, [eax + 1]
call fcn.00c75200
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x2c4], ecx
push ecx
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x2c8], eax
call fcn.00bb4ed0
add esp, 4
mov ecx, 0xa194b8
push eax
call fcn.00bb7bf0
test eax, eax
jne 0xbfba45
call fcn.00c712f0
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x2d4], ecx
push ecx
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x2d8], eax
call fcn.00bb4ed0
add esp, 4
mov ecx, 0xa19268
push eax
call fcn.00bb7bf0
mov edi, dword [0xa15b2c]
push 0
push 3
push edi
push dword [0xa15b28]
mov dword [ebp - 0x48], eax
call fcn.00bfa260
mov esi, eax
add esi, dword [0xa15b30]
mov ecx, esi
mov dword [0xa15b30], esi
adc edx, dword [0xa15b34]
sub ecx, dword [0xa15b28]
mov eax, edx
mov dword [0xa15b34], edx
sbb eax, edi
or ecx, eax
mov eax, dword [0xa15b28]
je 0xbfbafa
sub eax, esi
mov dword [0xa15b28], eax
sbb edi, edx
mov dword [0xa15b2c], edi
jmp 0xbfbb0c
add esi, 1
mov dword [0xa15b30], esi
adc edx, 0
mov dword [0xa15b34], edx
test edi, edi
jg 0xbfbb23
jl 0xbfbb23
cmp eax, 0x176
ja 0xbfbb23
test edi, edi
jg 0xbfbb2e
jl 0xbfbb23
test eax, eax
jae 0xbfbb2e
xorps xmm0, xmm0
movlpd qword [0xa15b28], xmm0
mov esi, dword [0x9ed108]
push 0x80000041
call esi
test eax, eax
jne 0xbfbb46
push 0x80000001
call esi
mov dword [ebp - 0x18], 0xb7f58ae2
mov dword [ebp - 0x14], 0xd7308eaf
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x18], 0x7dd7fe82
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2e4], ecx
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 0x2e8], eax
call fcn.00bb4ed0
mov ecx, dword fs:[0x30]
mov dword [ebp - 0x58], eax
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov edi, dword [ecx + 0x18]
mov dword [ebp - 0x34], edi
mov edx, dword [edi + 0x3c]
mov esi, dword [edx + edi + 0x78]
mov eax, dword [edx + edi + 0x7c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], esi
lea eax, [esi + edi]
mov dword [ebp - 0x2c], eax
cmp eax, edi
je 0xbfbc17
mov edi, dword [eax + 0x18]
test edi, edi
je 0xbfbc17
mov eax, dword [eax + 0x20]
mov esi, dword [ecx + 0x18]
lea eax, [eax + edi*4]
add eax, esi
mov edx, dword [eax - 4]
sub eax, 4
add edx, esi
mov dword [ebp - 0x24], eax
dec edi
mov esi, 0x811c9dc5
mov al, byte [edx]
inc edx
test al, al
je 0xbfbc0d
nop dword [eax]
movsx eax, al
lea edx, [edx + 1]
xor eax, esi
imul esi, eax, 0x1000193
mov al, byte [edx - 1]
test al, al
jne 0xbfbbf0
cmp esi, 0x53b2070f
je 0xbfbc1b
mov eax, dword [ebp - 0x24]
mov esi, dword [ecx + 0x18]
test edi, edi
jne 0xbfbbd4
mov ecx, dword [ecx]
jmp 0xbfbba1
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x58]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
test eax, eax
jne 0xbfbc44
xor esi, esi
jmp 0xbff6a4
mov dword [ebp - 0x18], 0x96d5aac2
mov dword [ebp - 0x14], 0xd714bf95
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2fc], ecx
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x18], 0x7df7dea2
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2f4], ecx
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x2f8], eax
call fcn.00bb4ed0
push eax
call dword [0x9ed0b0]
mov ecx, eax
call fcn.00c8fd70
mov dword [ebp - 0x18], 0xdf9be3af
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x304], ecx
push ecx
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x308], eax
call fcn.00bb4ed0
add esp, 4
mov ecx, 0xa192dc
push eax
call fcn.00bb7bf0
cmp eax, 0xffffffff
je 0xbfbddc
mov dword [ebp - 0x18], 0xdf9be3af
sub esp, 0x18
mov dword [ebp - 0x14], 0xf940fadb
mov esi, esp
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x314], ecx
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x28], esp
call fcn.00bb4ed0
push eax
mov ecx, esi
call fcn.00ba48f0
mov byte [ebp - 4], 6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0xa192dc
call fcn.00bb7fb0
mov byte [ebp - 4], 7
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x254]
call fcn.00c880d0
add esp, 0x30
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x254]
call fcn.00bb6e20
cmp eax, 2
jne 0xbfbdcd
push 1
lea ecx, [ebp - 0x254]
call fcn.00bb6e00
push eax
mov ecx, 0xa19328
call fcn.00bb7e90
push 0
lea ecx, [ebp - 0x254]
call fcn.00bb6e00
push eax
mov ecx, 0xa192dc
call fcn.00bb7e90
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x254]
call fcn.00bb6f40
push 0
push 0
push 0
push 0x957b00
push 0
push 0
call dword [0x9ed0c8]
push eax
call dword [0x9ed0c0]
cmp dword [0xa15b24], 0xffffffff
jne 0xbfbebd
nop word [eax + eax]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xbfbe8f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfbe8f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfbe85
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfbe68
cmp esi, 0x2fa62ca8
je 0xbfbe93
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfbe50
mov eax, dword [eax]
jmp 0xbfbe20
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 1
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
cmp dword [0xa15b24], 0xffffffff
je 0xbfbe10
mov dword [ebp - 0x18], 0xdf9bb9cf
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x324], ecx
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x328], eax
call fcn.00bb4ed0
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00ba48f0
mov byte [ebp - 4], 9
mov ecx, 0x104
lea eax, [ebp - 0xd50]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0xbfbf23
lea eax, [ebp - 0xd50]
push eax
push 0xfc
call dword [0x9ed084]
mov edx, 0xc
lea ecx, [ebp - 0x85c]
call fcn.00c87fa0
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x18], 0xa7f291e1
mov dword [ebp - 0x14], 0xf940faa2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x334], ecx
lea ecx, [ebp - 0x340]
mov dword [ebp - 0x338], eax
call fcn.00bb4ed0
push eax
lea ecx, [ebp - 0xa38]
call fcn.00ba48f0
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0xd50]
push eax
lea ecx, [ebp - 0xa50]
call fcn.00bbc8e0
add esp, 4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x85c]
push ecx
mov edx, eax
lea ecx, [ebp - 0xa68]
call fcn.00bbc980
add esp, 4
mov byte [ebp - 4], 0xd
mov ecx, 0xa16d74
push eax
call fcn.00bb7ec0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa68]
call fcn.00ba4890
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xa50]
call fcn.00ba4890
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa38]
call fcn.00ba4890
mov dword [ebp - 0x18], 0xb1fa93e6
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x344], ecx
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x348], eax
call fcn.00bb4ed0
push eax
lea ecx, [ebp - 0xab0]
call fcn.00ba48f0
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0xd50]
push eax
lea ecx, [ebp - 0xae0]
call fcn.00bbc8e0
add esp, 4
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x85c]
mov edx, eax
push ecx
lea ecx, [ebp - 0x26c]
call fcn.00bbc980
add esp, 4
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xae0]
call fcn.00ba4890
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xab0]
call fcn.00ba4890
mov ecx, 0xa16d74
call fcn.00bb7c90
mov ecx, eax
call fcn.00c888a0
test al, al
je 0xbfc0ea
push 0
mov dl, 1
mov ecx, 0xa16d74
call fcn.00c88370
add esp, 4
lea ecx, [ebp - 0x26c]
call fcn.00bb7c90
mov ecx, eax
call fcn.00c888a0
test al, al
je 0xbfc112
push 0
mov dl, 1
lea ecx, [ebp - 0x26c]
call fcn.00c88370
add esp, 4
push 0
mov ecx, 0xa16d74
call fcn.00bb7c90
mov esi, dword [0x9ed11c]
push eax
call esi
test eax, eax
jne 0xbfc13d
mov ecx, 0xa16d74
call fcn.00baa460
test al, al
je 0xbff3fa
push 0
lea ecx, [ebp - 0x26c]
call fcn.00bb7c90
push eax
call esi
test eax, eax
jne 0xbfc1e9
mov edi, dword [0xa15b2c]
push eax
push 3
push edi
push dword [0xa15b28]
call fcn.00bfa260
mov esi, eax
add esi, dword [0xa15b30]
mov ecx, esi
mov dword [0xa15b30], esi
adc edx, dword [0xa15b34]
sub ecx, dword [0xa15b28]
mov eax, edx
mov dword [0xa15b34], edx
sbb eax, edi
or ecx, eax
mov eax, dword [0xa15b28]
je 0xbfc1aa
sub eax, esi
mov dword [0xa15b28], eax
sbb edi, edx
mov dword [0xa15b2c], edi
jmp 0xbfc1bc
add esi, 1
mov dword [0xa15b30], esi
adc edx, 0
mov dword [0xa15b34], edx
test edi, edi
jg 0xbfc1d3
jl 0xbfc1d3
cmp eax, 0x176
ja 0xbfc1d3
test edi, edi
jg 0xbfc1de
jl 0xbfc1d3
test eax, eax
jae 0xbfc1de
xorps xmm0, xmm0
movlpd qword [0xa15b28], xmm0
lea ecx, [ebp - 0x26c]
call fcn.00baa460
lea ecx, [ebp - 0x26c]
call fcn.00bb7c90
mov ecx, dword fs:[0x30]
mov dword [ebp - 0x58], eax
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov edi, dword [ecx + 0x18]
mov dword [ebp - 0x34], edi
mov edx, dword [edi + 0x3c]
mov esi, dword [edx + edi + 0x78]
mov eax, dword [edx + edi + 0x7c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], esi
lea eax, [edi + esi]
mov dword [ebp - 0x2c], eax
cmp eax, edi
je 0xbfc277
mov edi, dword [eax + 0x18]
test edi, edi
je 0xbfc277
mov eax, dword [eax + 0x20]
mov esi, dword [ecx + 0x18]
lea eax, [eax + edi*4]
add eax, esi
mov edx, dword [eax - 4]
sub eax, 4
add edx, esi
mov dword [ebp - 0x24], eax
dec edi
mov esi, 0x811c9dc5
mov al, byte [edx]
inc edx
test al, al
je 0xbfc26d
nop
movsx eax, al
lea edx, [edx + 1]
xor eax, esi
imul esi, eax, 0x1000193
mov al, byte [edx - 1]
test al, al
jne 0xbfc250
cmp esi, 0x7a5b9fa2
je 0xbfc27b
mov eax, dword [ebp - 0x24]
mov esi, dword [ecx + 0x18]
test edi, edi
jne 0xbfc237
mov ecx, dword [ecx]
jmp 0xbfc204
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x58]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
lea eax, [ebp - 0x26c]
mov ecx, 0xa16dd4
push eax
call fcn.00bb7e90
call fcn.00c749c0
test al, al
je 0xbfc4d2
cmp dword [ebp - 0x48], 0
jne 0xbfc4d2
mov dword [ebp - 0x18], 0xbcf28fe6
mov dword [ebp - 0x14], 0x902ca9b0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x35c], ecx
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x18], 0x13faf782
mov dword [ebp - 0x14], 0x14d8469a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0xa16da4
mov dword [ebp - 0x354], ecx
push ecx
lea ecx, [ebp - 0x360]
mov dword [ebp - 0x358], eax
call fcn.00bb4ed0
add esp, 4
lea ecx, [ebp - 0xac8]
mov edx, eax
call fcn.00bbc850
add esp, 4
mov byte [ebp - 4], 0x13
mov ecx, eax
call fcn.00bb7c90
push eax
push 1
push 0
call dword [0x9ed1dc]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xac8]
call fcn.00ba4890
call dword [0x9ed098]
cmp eax, 0xb7
je 0xbff64a
mov edi, dword [0x9ed080]
mov esi, 0x32
push 0x529
call edi
sub esi, 1
jne 0xbfc366
mov dword [ebp - 0x18], 0x9cd5b5dd
sub esp, 0x18
mov dword [ebp - 0x14], 0x952c9ef5
mov esi, esp
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x224], ecx
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x28], esp
call fcn.00bb4ed0
push eax
mov ecx, esi
call fcn.00ba48f0
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x12
call fcn.00c69530
mov eax, dword [0xa193f8]
add esp, 0x18
sub eax, dword [0xa193f4]
je 0xbfc401
nop word [eax + eax]
push 0x2f
call edi
mov eax, dword [0xa193f8]
sub eax, dword [0xa193f4]
jne 0xbfc3f0
push 2
push dword [0xa15b24]
mov byte [0xa19081], 1
call dword [0x9ed380]
push dword [0xa15b24]
call dword [0x9ed388]
call dword [0x9ed384]
nop dword [eax + eax]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x2c], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x24], ecx
cmp ecx, edx
je 0xbfc4a7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfc4a7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, edx
sub ecx, 4
dec edi
mov dword [ebp - 0x70], ecx
mov esi, 0x811c9dc5
mov ecx, dword [ecx]
add ecx, edx
mov dl, byte [ecx]
inc ecx
test dl, dl
je 0xbfc49d
nop dword [eax]
movsx edx, dl
lea ecx, [ecx + 1]
xor edx, esi
imul esi, edx, 0x1000193
mov dl, byte [ecx - 1]
test dl, dl
jne 0xbfc480
cmp esi, 0x2fa62ca8
je 0xbfc4ab
mov ecx, dword [ebp - 0x70]
mov edx, dword [eax + 0x18]
test edi, edi
jne 0xbfc465
mov eax, dword [eax]
jmp 0xbfc440
mov esi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x2c]
push 0x162
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
jmp 0xbfc430
mov edi, dword [0xa15b2c]
push 0
push 3
push edi
push dword [0xa15b28]
call fcn.00bfa260
mov esi, eax
add esi, dword [0xa15b30]
mov ecx, esi
mov dword [0xa15b30], esi
adc edx, dword [0xa15b34]
sub ecx, dword [0xa15b28]
mov eax, edx
mov dword [0xa15b34], edx
sbb eax, edi
or ecx, eax
mov eax, dword [0xa15b28]
je 0xbfc528
sub eax, esi
mov dword [0xa15b28], eax
sbb edi, edx
mov dword [0xa15b2c], edi
jmp 0xbfc53a
add esi, 1
mov dword [0xa15b30], esi
adc edx, 0
mov dword [0xa15b34], edx
test edi, edi
jg 0xbfc551
jl 0xbfc551
cmp eax, 0x176
ja 0xbfc551
test edi, edi
jg 0xbfc55c
jl 0xbfc551
test eax, eax
jae 0xbfc55c
xorps xmm0, xmm0
movlpd qword [0xa15b28], xmm0
mov byte [0xa190b1], 0
mov dword [ebp - 0x18], 0xdf9be3e9
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x364], ecx
lea ecx, [ebp - 0x370]
mov dword [ebp - 0x368], eax
call fcn.00bb4ed0
lea ecx, [ebp - 0xb10]
mov edi, eax
call fcn.00c867d0
mov esi, eax
mov byte [ebp - 4], 0x15
push 0
push 0x2bc7
call fcn.00c8c020
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0xaf8]
mov eax, dword [0xa15b24]
mov edx, esi
push edi
mov dword [ebp - 0x2c], eax
call fcn.00bbc7b0
mov byte [ebp - 4], 0x16
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x28], esp
mov edx, eax
push 0xa16da4
call fcn.00bbc980
add esp, 4
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
call fcn.00baae80
add esp, 0x18
mov byte [ebp - 0x39], al
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xaf8]
call fcn.00ba4890
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xb10]
call fcn.00ba4890
cmp byte [ebp - 0x39], 0
je 0xbfc6fd
cmp byte [0xa190b1], 0
jne 0xbfc6fd
nop
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xbfc6cf
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfc6cf
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfc6c5
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfc6a8
cmp esi, 0x2fa62ca8
je 0xbfc6d3
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfc690
mov eax, dword [eax]
jmp 0xbfc660
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 0x65
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
cmp byte [0xa190b1], 0
je 0xbfc650
mov edx, 0xa16d5c
lea ecx, [ebp - 0x8e0]
call fcn.00c6a2c0
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x8e0]
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00bb7e90
cmp dword [0xa16d6c], 0
jne 0xbfc7ac
mov edi, dword [0x9ed080]
cmp dword [ebp - 0x1e0], 0
jne 0xbfc7ac
mov edx, 0xa16d5c
lea ecx, [ebp - 0xc48]
call fcn.00c6a2c0
mov esi, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x8e0]
push esi
call fcn.00bb7ec0
lea eax, [esi + 0x18]
push eax
lea ecx, [ebp - 0x8c8]
call fcn.00bb7ec0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xc48]
call fcn.00baa700
lea eax, [ebp - 0x8e0]
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00bb7e90
push 0
push 0x3f46
call fcn.00c8c020
add esp, 8
push eax
call edi
cmp dword [0xa16d6c], 0
je 0xbfc736
push 0x9f5de0
mov ecx, 0xa16d5c
call fcn.00bb7c90
push eax
call fcn.00bd6a60
add esp, 8
test eax, eax
je 0xbfc8b6
lea eax, [ebp - 0x814]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x660]
mov dword [ebp - 0x30], eax
nop
lea ecx, [ebp - 0x814]
call fcn.00ba4d10
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x814]
push 1
push 0x9f5af8
call fcn.00ba4c40
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x660]
call fcn.00ba4d10
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x660]
push 1
push 0x9f5de0
call fcn.00ba4c40
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x660]
push 0
push eax
mov ecx, 0xa16d5c
call fcn.00bb7c30
cmp eax, 0xffffffff
je 0xbfc85a
lea ecx, [ebp - 0x814]
push ecx
push dword [ebp - 0x650]
mov ecx, 0xa16d5c
push eax
call fcn.00bb7d00
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x660]
call fcn.00ba49f0
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x660]
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x814]
call fcn.00ba49f0
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x814]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x18
mov ecx, 0xa16d5c
push 0x9f5de0
call fcn.00bb7c90
push eax
call fcn.00bd6a60
add esp, 8
test eax, eax
jne 0xbfc7e0
mov dword [ebp - 0x18], 0xdf9bb6c7
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x374], ecx
lea ecx, [ebp - 0x380]
mov dword [ebp - 0x378], eax
call fcn.00bb4ed0
push eax
lea ecx, [ebp - 0xc18]
call fcn.00ba48f0
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x18], 0xdf9bb9de
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x384], ecx
lea ecx, [ebp - 0x390]
mov dword [ebp - 0x388], eax
call fcn.00bb4ed0
push eax
lea ecx, [ebp - 0xc00]
call fcn.00ba48f0
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x18], 0xdf9bbad7
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x394], ecx
lea ecx, [ebp - 0x3a0]
mov dword [ebp - 0x398], eax
call fcn.00bb4ed0
push eax
lea ecx, [ebp - 0xbe8]
call fcn.00ba48f0
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x18], 0xdf9baed4
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3a4], ecx
lea ecx, [ebp - 0x3b0]
mov dword [ebp - 0x3a8], eax
call fcn.00bb4ed0
push eax
lea ecx, [ebp - 0xbd0]
call fcn.00ba48f0
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x18], 0xdf9bb9c0
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3b4], ecx
lea ecx, [ebp - 0x3c0]
mov dword [ebp - 0x3b8], eax
call fcn.00bb4ed0
push eax
lea ecx, [ebp - 0xbb8]
call fcn.00ba48f0
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0x18], 0xdf9ba7d8
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3cc], ecx
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3c4], ecx
lea ecx, [ebp - 0x3d0]
mov dword [ebp - 0x3c8], eax
call fcn.00bb4ed0
push eax
lea ecx, [ebp - 0xba0]
call fcn.00ba48f0
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x18], 0xdf9ba4de
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3dc], ecx
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3d4], ecx
lea ecx, [ebp - 0x3e0]
mov dword [ebp - 0x3d8], eax
call fcn.00bb4ed0
push eax
lea ecx, [ebp - 0xb88]
call fcn.00ba48f0
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x18], 0xdf9ba9c1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3ec], ecx
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3e4], ecx
lea ecx, [ebp - 0x3f0]
mov dword [ebp - 0x3e8], eax
call fcn.00bb4ed0
push eax
lea ecx, [ebp - 0xb70]
call fcn.00ba48f0
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x18], 0xdf9ba2c0
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3f4], ecx
lea ecx, [ebp - 0x400]
mov dword [ebp - 0x3f8], eax
call fcn.00bb4ed0
push eax
lea ecx, [ebp - 0xb58]
call fcn.00ba48f0
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x18], 0xdf9bb9d4
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x404], ecx
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x408], eax
call fcn.00bb4ed0
push eax
lea ecx, [ebp - 0xb40]
call fcn.00ba48f0
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0xb28]
push eax
lea eax, [ebp - 0xc18]
push eax
lea ecx, [ebp - 0x948]
call fcn.00bb4c90
lea ecx, [ebp - 0x930]
push dword [eax + 4]
push dword [eax]
call fcn.00bb3ff0
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0xc18]
push 0x892c90
push 0xa
push 0x18
push eax
call fcn.00bd5617
lea eax, [ebp - 0x1f0]
push eax
lea ecx, [ebp - 0x930]
call fcn.00bbd840
test eax, eax
je 0xbfcd51
mov dword [ebp - 0x18], 0xbacf97db
mov dword [ebp - 0x14], 0x972997a9
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6cc], ecx
mov dword [ebp - 0x6d0], eax
mov dword [ebp - 0x18], 0x2ddee687
mov dword [ebp - 0x14], 0x71bb298c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6c4], ecx
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x18], 0xd94f1ad4
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6bc], ecx
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6b4], ecx
lea ecx, [ebp - 0x6d0]
mov dword [ebp - 0x6b8], eax
call fcn.00bb4be0
push 0x9f5d80
mov esi, eax
call dword [0x9ed06c]
push esi
push eax
call dword [0x9ed0e0]
mov esi, eax
test esi, esi
je 0xbfcd51
push 0
call dword [0x9ed200]
push eax
call esi
mov esi, dword [0x9ed1f8]
push 0x9f6028
call esi
call fcn.00c693f0
mov ecx, 0xa19318
call fcn.00bb5550
test al, al
je 0xbfd31d
mov ecx, 0xa19318
call fcn.00bb5570
test al, al
jne 0xbfd31d
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x8b238984
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x41c], ecx
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x18], 0x7dd5f783
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x414], ecx
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x418], eax
call fcn.00bb4ed0
push eax
mov ecx, 0xa19318
call fcn.00bbcb80
mov ecx, eax
call fcn.00bb5560
test al, al
je 0xbfd31d
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x8b238984
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x42c], ecx
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x18], 0x7dd5f783
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x424], ecx
lea ecx, [ebp - 0x430]
mov dword [ebp - 0x428], eax
call fcn.00bb4ed0
push eax
mov ecx, 0xa19318
call fcn.00bbcb80
mov ecx, eax
call fcn.00bbcde0
push 0x9f6038
mov byte [0xa15b23], al
call esi
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0xf9278e84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x43c], ecx
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x434], ecx
lea ecx, [ebp - 0x440]
mov dword [ebp - 0x438], eax
call fcn.00bb4ed0
push eax
mov ecx, 0xa19318
call fcn.00bbcb80
mov ecx, eax
call fcn.00bbcde0
mov byte [0xa15b3d], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0xf9339e84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x444], ecx
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x448], eax
call fcn.00bb4ed0
push eax
mov ecx, 0xa19318
call fcn.00bbcb80
mov ecx, eax
call fcn.00bbcde0
mov byte [0xa15b22], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x95218d84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x18], 0xecff78a
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x454], ecx
lea ecx, [ebp - 0x460]
mov dword [ebp - 0x458], eax
call fcn.00bb4ed0
push eax
mov ecx, 0xa19318
call fcn.00bbcb80
mov ecx, eax
call fcn.00bbcde0
mov byte [0xa15b21], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x90289384
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x46c], ecx
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x18], 0xfd4e695
mov dword [ebp - 0x14], 0x14d84687
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x464], ecx
lea ecx, [ebp - 0x470]
mov dword [ebp - 0x468], eax
call fcn.00bb4ed0
push eax
mov ecx, 0xa19318
call fcn.00bbcb80
mov ecx, eax
call fcn.00bbcde0
mov byte [0xa15b3c], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x89349c84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x474], ecx
lea ecx, [ebp - 0x480]
mov dword [ebp - 0x478], eax
call fcn.00bb4ed0
push eax
mov ecx, 0xa19318
call fcn.00bbcb80
mov ecx, eax
call fcn.00bbcde0
mov byte [0xa15b3e], al
test al, al
je 0xbfd04a
mov byte [0xa15b20], 0
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x94219d84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x48c], ecx
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x18], 0x7dbbe183
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x484], ecx
lea ecx, [ebp - 0x490]
mov dword [ebp - 0x488], eax
call fcn.00bb4ed0
push eax
mov ecx, 0xa19318
call fcn.00bbcb80
mov ecx, eax
call fcn.00bbcde0
mov byte [0xa15b20], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x8a259784
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x18], 0x1ad5f795
mov dword [ebp - 0x14], 0x14ab349b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x494], ecx
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 0x498], eax
call fcn.00bb4ed0
push eax
mov ecx, 0xa19318
call fcn.00bbcb80
mov ecx, eax
call fcn.00bbcde0
push 0x9f604c
mov byte [0xa16c0e], al
call esi
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x97308c84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4ac], ecx
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4a4], ecx
lea ecx, [ebp - 0x4b0]
mov dword [ebp - 0x4a8], eax
call fcn.00bb4ed0
push eax
mov ecx, 0xa19318
call fcn.00bbcb80
mov ecx, eax
call fcn.00bbcde0
mov byte [0xa15b3f], al
mov dword [ebp - 0x18], 0x80fe90e0
mov dword [ebp - 0x14], 0x9a2e8cb3
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4b4], ecx
lea ecx, [ebp - 0x4c0]
mov dword [ebp - 0x4b8], eax
call fcn.00bb4ed0
push eax
mov ecx, 0xa19318
call fcn.00bbcb80
mov ecx, eax
call fcn.00bbcde0
mov byte [0xa190ac], al
mov dword [ebp - 0x18], 0xb8e986f8
mov dword [ebp - 0x14], 0x8b22a5be
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x6b0], eax
mov dword [ebp - 0x18], 0x18c8e589
mov dword [ebp - 0x14], 0x75bc198c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6a4], ecx
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x18], 0xd94f08d3
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x69c], ecx
mov dword [ebp - 0x6a0], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x694], ecx
lea ecx, [ebp - 0x6b0]
mov dword [ebp - 0x698], eax
call fcn.00bb4be0
push eax
mov ecx, 0xa19318
call fcn.00bbcb80
mov ecx, eax
call fcn.00bbcde0
mov byte [0xa19083], al
mov dword [ebp - 0x18], 0xb8e986f8
mov dword [ebp - 0x14], 0x9627a5be
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x72c], ecx
mov dword [ebp - 0x18], 0x18d7f589
mov dword [ebp - 0x14], 0x7fb732a1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x724], ecx
mov dword [ebp - 0x18], 0xd93c07c2
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], ecx
lea ecx, [ebp - 0x730]
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x714], edx
call fcn.00bb4be0
push eax
mov ecx, 0xa19318
call fcn.00bbcb80
mov ecx, eax
call fcn.00bbcde0
mov byte [0xa190a6], al
call fcn.00c69210
push 0x9f59da
lea ecx, [ebp - 0x29c]
call fcn.00ba48f0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x284]
push 0x9f59da
call fcn.00ba48f0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x248]
push 0x9f59da
call fcn.00ba48f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x590]
push eax
mov ecx, 0xa19400
call fcn.00bb5430
lea eax, [ebp - 0x86c]
mov ecx, 0xa19400
push eax
call fcn.00bb53c0
lea eax, [ebp - 0x86c]
push eax
lea ecx, [ebp - 0x590]
call fcn.00bb95f0
test al, al
jne 0xbfe1bc
nop word [eax + eax]
lea ecx, [ebp - 0x590]
call fcn.00bb4e00
mov dword [ebp - 0x1f8], 0xbaf682fb
mov edi, eax
mov dword [ebp - 0x1f4], 0xf940fadb
mov ecx, dword [ebp - 0x1f8]
mov edx, dword [ebp - 0x1f4]
mov dword [ebp - 0x4d0], ecx
mov dword [ebp - 0x4cc], edx
mov dword [ebp - 0x200], 0x7dbb92e6
mov dword [ebp - 0x1fc], 0x14d846fe
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp - 0x4c4], ecx
lea ecx, [ebp - 0x4d0]
mov dword [ebp - 0x4c8], eax
call fcn.00bb4ed0
push eax
mov ecx, edi
call fcn.00bbcb80
lea ecx, [ebp - 0x960]
push ecx
mov ecx, eax
call fcn.00bbcce0
mov esi, eax
mov byte [ebp - 4], 0x35
mov dword [ebp - 0x208], 0x80fc8cf9
mov dword [ebp - 0x204], 0x9c349bac
mov ecx, dword [ebp - 0x208]
mov edx, dword [ebp - 0x204]
mov dword [ebp - 0x710], ecx
mov dword [ebp - 0x70c], edx
mov dword [ebp - 0x210], 0xfdaff94
mov dword [ebp - 0x20c], 0x7db41995
mov eax, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x704], ecx
mov dword [ebp - 0x708], eax
mov dword [ebp - 0xe8], 0xe8100cc9
mov dword [ebp - 0xe4], 0xc0cfc619
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x6fc], ecx
mov dword [ebp - 0x700], eax
mov dword [ebp - 0xf0], 0xae7946e8
mov dword [ebp - 0xec], 0x89c15b7c
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x6f4], ecx
lea ecx, [ebp - 0x710]
mov dword [ebp - 0x6f8], eax
call fcn.00bb4be0
push 0
push eax
mov ecx, esi
call fcn.00bb7bf0
mov esi, eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x960]
call fcn.00ba49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x960]
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0x34
test esi, esi
jne 0xbfd831
mov dword [ebp - 0xf8], 0xaaf782e3
mov dword [ebp - 0xf4], 0xf940fabe
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x4dc], ecx
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x100], 0x7dbb92e6
mov dword [ebp - 0xfc], 0x14d846fe
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x4d4], ecx
lea ecx, [ebp - 0x4e0]
mov dword [ebp - 0x4d8], eax
call fcn.00bb4ed0
push eax
mov ecx, edi
call fcn.00bbcb80
lea ecx, [ebp - 0xb28]
push ecx
mov ecx, eax
call fcn.00bbcce0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x29c]
push eax
call fcn.00bb7ec0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xb28]
call fcn.00ba4890
mov dword [ebp - 0x78], 0xe1e981a9
mov dword [ebp - 0x74], 0xf940fadb
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x80], 0x7dbb92e6
mov dword [ebp - 0x7c], 0x14d846fe
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x7c]
push esi
mov dword [ebp - 0xa4], ecx
push ecx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xa8], eax
call fcn.00bb4ed0
add esp, 4
lea ecx, [ebp - 0x29c]
push eax
call fcn.00bb7bf0
cmp eax, 0xffffffff
je 0xbfd831
lea eax, [ebp - 0x82c]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x648]
mov dword [ebp - 0x38], eax
nop word [eax + eax]
mov dword [ebp - 0x108], 0xdf9be998
mov dword [ebp - 0x104], 0xf940fadb
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x4ec], ecx
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0x110], 0x7dbb92e6
mov dword [ebp - 0x10c], 0x14d846fe
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x4e4], ecx
lea ecx, [ebp - 0x4f0]
mov dword [ebp - 0x4e8], eax
call fcn.00bb4ed0
lea ecx, [ebp - 0x82c]
mov esi, eax
call fcn.00ba4d10
mov byte [ebp - 4], 0x3b
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xbfd6b0
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x82c]
call fcn.00ba4c40
mov byte [ebp - 4], 0x3c
mov dword [ebp - 0x118], 0xe1e981a9
mov dword [ebp - 0x114], 0xf940fadb
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x4fc], ecx
mov dword [ebp - 0x500], eax
mov dword [ebp - 0x120], 0x7dbb92e6
mov dword [ebp - 0x11c], 0x14d846fe
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x4f4], ecx
lea ecx, [ebp - 0x500]
mov dword [ebp - 0x4f8], eax
call fcn.00bb4ed0
lea ecx, [ebp - 0x648]
mov esi, eax
call fcn.00ba4d10
mov byte [ebp - 4], 0x3e
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xbfd743
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x648]
call fcn.00ba4c40
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x648]
push 0
push eax
lea ecx, [ebp - 0x29c]
call fcn.00bb7c30
cmp eax, 0xffffffff
je 0xbfd78f
lea ecx, [ebp - 0x82c]
push ecx
push dword [ebp - 0x638]
lea ecx, [ebp - 0x29c]
push eax
call fcn.00bb7d00
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x648]
call fcn.00ba49f0
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x648]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x82c]
call fcn.00ba49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x82c]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x78], 0xe1e981a9
mov dword [ebp - 0x74], 0xf940fadb
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x80], 0x7dbb92e6
mov dword [ebp - 0x7c], 0x14d846fe
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x7c]
push 0
mov dword [ebp - 0xa4], ecx
push ecx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xa8], eax
call fcn.00bb4ed0
add esp, 4
lea ecx, [ebp - 0x29c]
push eax
call fcn.00bb7bf0
cmp eax, 0xffffffff
jne 0xbfd630
mov dword [ebp - 0x128], 0xbaf682fb
mov dword [ebp - 0x124], 0xf940fadb
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0x50c], ecx
mov dword [ebp - 0x510], eax
mov dword [ebp - 0x130], 0x7dbb92e6
mov dword [ebp - 0x12c], 0x14d846fe
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x504], ecx
lea ecx, [ebp - 0x510]
mov dword [ebp - 0x508], eax
call fcn.00bb4ed0
push eax
mov ecx, edi
call fcn.00bbcb80
lea ecx, [ebp - 0x978]
push ecx
mov ecx, eax
call fcn.00bbcce0
mov esi, eax
mov byte [ebp - 4], 0x46
mov dword [ebp - 0x138], 0x80fc8cf9
mov dword [ebp - 0x134], 0x9c349bac
mov ecx, dword [ebp - 0x138]
mov edx, dword [ebp - 0x134]
mov dword [ebp - 0x6f0], ecx
mov dword [ebp - 0x6ec], edx
mov dword [ebp - 0x140], 0xfdaff94
mov dword [ebp - 0x13c], 0x7db41995
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x6e4], ecx
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 0x148], 0xeb100cc9
mov dword [ebp - 0x144], 0xc0cfc619
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x144]
mov dword [ebp - 0x6dc], ecx
mov dword [ebp - 0x6e0], eax
mov dword [ebp - 0x150], 0xae7946e8
mov dword [ebp - 0x14c], 0x89c15b7c
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x6d4], ecx
lea ecx, [ebp - 0x6f0]
mov dword [ebp - 0x6d8], eax
call fcn.00bb4be0
push 0
push eax
mov ecx, esi
call fcn.00bb7bf0
mov esi, eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x978]
call fcn.00ba49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x978]
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0x34
test esi, esi
jne 0xbfdcd9
mov dword [ebp - 0x158], 0xaaf782e3
mov dword [ebp - 0x154], 0xf940fabe
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x51c], ecx
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x160], 0x7dbb92e6
mov dword [ebp - 0x15c], 0x14d846fe
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x514], ecx
lea ecx, [ebp - 0x520]
mov dword [ebp - 0x518], eax
call fcn.00bb4ed0
push eax
mov ecx, edi
call fcn.00bbcb80
lea ecx, [ebp - 0x9a8]
push ecx
mov ecx, eax
call fcn.00bbcce0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x284]
push eax
call fcn.00bb7ec0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x9a8]
call fcn.00ba4890
mov dword [ebp - 0x88], 0xe1e981a9
mov dword [ebp - 0x84], 0xf940fadb
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x90], 0x7dbb92e6
mov dword [ebp - 0x8c], 0x14d846fe
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
push esi
mov dword [ebp - 0xb4], ecx
push ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xb8], eax
call fcn.00bb4ed0
add esp, 4
lea ecx, [ebp - 0x284]
push eax
call fcn.00bb7bf0
cmp eax, 0xffffffff
je 0xbfdcd9
lea eax, [ebp - 0x844]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x678]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x168], 0xdf9be998
mov dword [ebp - 0x164], 0xf940fadb
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x52c], ecx
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x170], 0x7dbb92e6
mov dword [ebp - 0x16c], 0x14d846fe
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x524], ecx
lea ecx, [ebp - 0x530]
mov dword [ebp - 0x528], eax
call fcn.00bb4ed0
lea ecx, [ebp - 0x844]
mov esi, eax
call fcn.00ba4d10
mov byte [ebp - 4], 0x4c
mov ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0xbfdb40
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x844]
call fcn.00ba4c40
mov byte [ebp - 4], 0x4d
mov dword [ebp - 0x178], 0xe1e981a9
mov dword [ebp - 0x174], 0xf940fadb
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x53c], ecx
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x180], 0x7dbb92e6
mov dword [ebp - 0x17c], 0x14d846fe
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x17c]
mov dword [ebp - 0x534], ecx
lea ecx, [ebp - 0x540]
mov dword [ebp - 0x538], eax
call fcn.00bb4ed0
lea ecx, [ebp - 0x678]
mov esi, eax
call fcn.00ba4d10
mov byte [ebp - 4], 0x4f
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xbfdbd3
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x678]
call fcn.00ba4c40
mov byte [ebp - 4], 0x50
lea eax, [ebp - 0x678]
push 0
push eax
lea ecx, [ebp - 0x284]
call fcn.00bb7c30
cmp eax, 0xffffffff
je 0xbfdc1f
lea ecx, [ebp - 0x844]
push ecx
push dword [ebp - 0x668]
lea ecx, [ebp - 0x284]
push eax
call fcn.00bb7d00
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x678]
call fcn.00ba49f0
mov byte [ebp - 4], 0x4d
lea eax, [ebp - 0x678]
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x844]
call fcn.00ba49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x844]
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x88], 0xe1e981a9
mov dword [ebp - 0x84], 0xf940fadb
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x90], 0x7dbb92e6
mov dword [ebp - 0x8c], 0x14d846fe
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
push 0
mov dword [ebp - 0xb4], ecx
push ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xb8], eax
call fcn.00bb4ed0
add esp, 4
lea ecx, [ebp - 0x284]
push eax
call fcn.00bb7bf0
cmp eax, 0xffffffff
jne 0xbfdac6
mov dword [ebp - 0x188], 0xbaf682fb
mov dword [ebp - 0x184], 0xf940fadb
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x184]
mov dword [ebp - 0x54c], ecx
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x190], 0x7dbb92e6
mov dword [ebp - 0x18c], 0x14d846fe
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x18c]
mov dword [ebp - 0x544], ecx
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x548], eax
call fcn.00bb4ed0
push eax
mov ecx, edi
call fcn.00bbcb80
lea ecx, [ebp - 0x990]
push ecx
mov ecx, eax
call fcn.00bbcce0
mov esi, eax
mov byte [ebp - 4], 0x57
mov dword [ebp - 0x198], 0x80fc8cf9
mov dword [ebp - 0x194], 0x9c349bac
mov ecx, dword [ebp - 0x198]
mov edx, dword [ebp - 0x194]
mov dword [ebp - 0x750], ecx
mov dword [ebp - 0x74c], edx
mov dword [ebp - 0x1a0], 0xfdaff94
mov dword [ebp - 0x19c], 0x7db41995
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x744], ecx
mov dword [ebp - 0x748], eax
mov dword [ebp - 0x1a8], 0xea100cc9
mov dword [ebp - 0x1a4], 0xc0cfc619
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x73c], ecx
mov dword [ebp - 0x740], eax
mov dword [ebp - 0x1b0], 0xae7946e8
mov dword [ebp - 0x1ac], 0x89c15b7c
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x734], ecx
lea ecx, [ebp - 0x750]
mov dword [ebp - 0x738], eax
call fcn.00bb4be0
push 0
push eax
mov ecx, esi
call fcn.00bb7bf0
mov esi, eax
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x990]
call fcn.00ba49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x990]
mov dword [ebp - 0x64], eax
mov byte [ebp - 4], 0x34
test esi, esi
jne 0xbfe191
mov dword [ebp - 0x1b8], 0xaaf782e3
mov dword [ebp - 0x1b4], 0xf940fabe
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x55c], ecx
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x1c0], 0x7dbb92e6
mov dword [ebp - 0x1bc], 0x14d846fe
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x1bc]
mov dword [ebp - 0x554], ecx
lea ecx, [ebp - 0x560]
mov dword [ebp - 0x558], eax
call fcn.00bb4ed0
push eax
mov ecx, edi
call fcn.00bbcb80
lea ecx, [ebp - 0x8f8]
push ecx
mov ecx, eax
call fcn.00bbcce0
mov esi, eax
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0x248]
cmp eax, esi
je 0xbfdee3
mov ecx, eax
call fcn.00ba49f0
push esi
lea ecx, [ebp - 0x248]
call fcn.00ba4b70
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x8f8]
call fcn.00ba49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x8f8]
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x98], 0xe1e981a9
mov dword [ebp - 0x94], 0xf940fadb
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0xc4], ecx
push ecx
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xc8], eax
call fcn.00bb4ed0
add esp, 4
lea ecx, [ebp - 0x248]
push eax
call fcn.00bb7bf0
cmp eax, 0xffffffff
je 0xbfe191
lea eax, [ebp - 0x7fc]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x690]
mov dword [ebp - 0x50], eax
nop word [eax + eax]
mov dword [ebp - 0x1c8], 0xdf9be998
mov dword [ebp - 0x1c4], 0xf940fadb
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp - 0x56c], ecx
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x1d0], 0x7dbb92e6
mov dword [ebp - 0x1cc], 0x14d846fe
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp - 0x564], ecx
lea ecx, [ebp - 0x570]
mov dword [ebp - 0x568], eax
call fcn.00bb4ed0
lea ecx, [ebp - 0x7fc]
mov esi, eax
call fcn.00ba4d10
mov byte [ebp - 4], 0x60
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xbfe010
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x7fc]
call fcn.00ba4c40
mov byte [ebp - 4], 0x61
mov dword [ebp - 0x1d8], 0xe1e981a9
mov dword [ebp - 0x1d4], 0xf940fadb
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp - 0x57c], ecx
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x574], ecx
lea ecx, [ebp - 0x580]
mov dword [ebp - 0x578], eax
call fcn.00bb4ed0
lea ecx, [ebp - 0x690]
mov esi, eax
call fcn.00ba4d10
mov byte [ebp - 4], 0x63
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xbfe097
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x690]
call fcn.00ba4c40
mov byte [ebp - 4], 0x64
lea eax, [ebp - 0x690]
push 0
push eax
lea ecx, [ebp - 0x248]
call fcn.00bb7c30
cmp eax, 0xffffffff
je 0xbfe0e3
lea ecx, [ebp - 0x7fc]
push ecx
push dword [ebp - 0x680]
lea ecx, [ebp - 0x248]
push eax
call fcn.00bb7d00
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x690]
call fcn.00ba49f0
mov byte [ebp - 4], 0x61
lea eax, [ebp - 0x690]
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x7fc]
call fcn.00ba49f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x7fc]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x98], 0xe1e981a9
mov dword [ebp - 0x94], 0xf940fadb
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0xc4], ecx
push ecx
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xc8], eax
call fcn.00bb4ed0
add esp, 4
lea ecx, [ebp - 0x248]
push eax
call fcn.00bb7bf0
cmp eax, 0xffffffff
jne 0xbfdf90
lea ecx, [ebp - 0x590]
call fcn.00bb4db0
lea eax, [ebp - 0x86c]
push eax
lea ecx, [ebp - 0x590]
call fcn.00bb95f0
test al, al
je 0xbfd3a0
mov esi, dword [0x9ed1f8]
lea eax, [ebp - 0x248]
push eax
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x29c]
call fcn.00c8baa0
add esp, 4
cmp byte [0xa190ae], 0
jne 0xbff2b1
call fcn.00c69490
call fcn.00c69350
call fcn.00c692b0
call fcn.00c1d570
call fcn.00c1c2e0
mov ecx, 0xa192a0
call fcn.00bb49f0
push 0x9f6068
call esi
mov ecx, 0xa193d0
call fcn.00bb49f0
mov esi, dword [0x9ed0c8]
push 0
push 0
push 0
push 0x8faa80
push 0
push 0
call esi
push 0
push 0
push 0
push 0x8fa140
push 0
push 0
mov dword [ebp - 0x44], eax
call esi
mov dword [ebp - 0x40], eax
call fcn.00bab890
test al, al
je 0xbfe340
lea ecx, [ebp - 0x940]
call fcn.00babec0
mov edi, eax
mov byte [ebp - 4], 0x6b
mov dword [ebp - 0x20], 0xb6fc8cf9
mov dword [ebp - 0x1c], 0xf94089b5
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x5a0], ecx
mov dword [ebp - 0x59c], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x594], ecx
lea ecx, [ebp - 0x5a0]
mov dword [ebp - 0x598], eax
call fcn.00bb4ed0
sub esp, 0x10
mov ecx, edi
mov esi, esp
mov dword [ebp - 0x4c], esp
push eax
call fcn.00bbcb80
push eax
mov ecx, esi
call fcn.00bb5950
mov byte [ebp - 4], 0x6c
mov dword [ebp - 0x20], 0xb3ee82c3
mov dword [ebp - 0x1c], 0xbc09a5af
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5ac], ecx
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5a4], ecx
lea ecx, [ebp - 0x5b0]
mov dword [ebp - 0x5a8], eax
call fcn.00bb4ed0
push eax
mov ecx, 0xa19368
call fcn.00bbcb80
mov byte [ebp - 4], 0x6b
mov ecx, eax
call fcn.00bb58b0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x940]
call fcn.00bb58a0
call fcn.00babe90
lea ecx, [ebp - 0x880]
call fcn.00c37390
mov esi, eax
mov byte [ebp - 4], 0x6d
mov dword [ebp - 0x20], 0xb6fc8cf9
mov dword [ebp - 0x1c], 0xf94089b5
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x5c0], ecx
mov dword [ebp - 0x5bc], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5b4], ecx
lea ecx, [ebp - 0x5c0]
mov dword [ebp - 0x5b8], eax
call fcn.00bb4ed0
push eax
mov ecx, esi
call fcn.00bbcb80
push eax
lea ecx, [ebp - 0xe0]
call fcn.00bb5950
mov byte [ebp - 4], 0x6e
mov dword [ebp - 0x20], 0xbbf58ac2
mov dword [ebp - 0x1c], 0xba338db4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x76c], ecx
mov dword [ebp - 0x20], 0x18dff794
mov dword [ebp - 0x1c], 0x75b13290
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x764], ecx
mov dword [ebp - 0x20], 0xd94f1acb
mov dword [ebp - 0x1c], 0xc0cfc619
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x760], eax
mov dword [ebp - 0x75c], ecx
lea ecx, [ebp - 0x770]
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x754], edx
call fcn.00bb4be0
push eax
mov ecx, 0xa19368
call fcn.00bbcb80
mov edi, eax
mov byte [ebp - 4], 0x6f
mov dl, byte [edi]
mov cl, byte [ebp - 0xe0]
mov byte [edi], cl
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd4]
mov byte [ebp - 0xe0], dl
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0xd4], esi
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0xd8]
push dword [ebp - 0xe0]
call fcn.00bb96f0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x878]
push dword [ebp - 0x880]
call fcn.00bb96f0
push 0
push 0x4b707
call fcn.00c8c020
add esp, 8
push eax
push dword [ebp - 0x44]
call dword [0x9ed060]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xbfe547
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfe547
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfe53d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfe520
cmp esi, 0x71948ca4
je 0xbfe54b
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfe503
mov eax, dword [eax]
jmp 0xbfe4d3
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 0x493e0
push dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xbfe5ef
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfe5ef
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfe5e5
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfe5c8
cmp esi, 0xfaba0065
je 0xbfe5f3
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfe5b0
mov eax, dword [eax]
jmp 0xbfe580
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x44]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0xbfe68f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfe68f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfe685
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfe668
cmp esi, 0xfaba0065
je 0xbfe693
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfe650
mov eax, dword [eax]
jmp 0xbfe620
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
call fcn.00c1a740
mov esi, dword [0x9ed0c8]
push 0
push 0
push 0
push 0x8f6d20
push 0
push 0
call esi
push 0
push 0
push 0
push 0x8f3830
push 0
push 0
mov dword [ebp - 0x44], eax
call esi
push 0
push 0
push 0
push 0x8f1e10
push 0
push 0
mov dword [ebp - 0x40], eax
call esi
push 0
push 0
push 0
push 0x8ef740
push 0
push 0
mov dword [ebp - 0x6c], eax
call esi
push 0
push 0
push 0
push 0x8ef460
push 0
push 0
mov dword [ebp - 0x58], eax
call esi
push 0
push 0
push 0
push 0x8ee140
push 0
push 0
mov dword [ebp - 0x34], eax
call esi
push 0
push 0
push 0
push 0x8edcd0
push 0
push 0
mov dword [ebp - 0x2c], eax
call esi
sub esp, 0x18
mov dword [ebp - 0x24], eax
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0xa16d5c
call fcn.00bb7fb0
mov byte [ebp - 4], 0x70
sub esp, 0x18
lea eax, [ebp - 0x8c8]
mov dword [ebp - 0x54], esp
mov ecx, esp
push eax
call fcn.00bb7fb0
mov byte [ebp - 4], 0x71
sub esp, 0x18
lea eax, [ebp - 0x8e0]
mov dword [ebp - 0x50], esp
mov ecx, esp
push eax
call fcn.00bb7fb0
mov byte [ebp - 4], 0x72
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0xa16d74
call fcn.00bb7fb0
mov byte [ebp - 4], 0x73
mov byte [ebp - 4], 0x34
call fcn.00c822d0
mov eax, dword fs:[0x30]
add esp, 0x60
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x28], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xbfe82f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfe82f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x38], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfe825
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfe808
cmp esi, 0x71948ca4
je 0xbfe833
mov ecx, dword [ebp - 0x38]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfe7f0
mov eax, dword [eax]
jmp 0xbfe7c0
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x28]
push 0x493e0
push dword [ebp - 0x44]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xbfe8d7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfe8d7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfe8cd
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfe8b0
cmp esi, 0x71948ca4
je 0xbfe8db
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfe892
mov eax, dword [eax]
jmp 0xbfe862
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push 0x493e0
push dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0x493e0
push dword [ebp - 0x6c]
call dword [0x9ed060]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xbfe98f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfe98f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfe985
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfe968
cmp esi, 0x71948ca4
je 0xbfe993
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfe950
mov eax, dword [eax]
jmp 0xbfe920
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push 0x493e0
push dword [ebp - 0x58]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0x493e0
push dword [ebp - 0x34]
call dword [0x9ed060]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xbfea3f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfea3f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfea35
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfea18
cmp esi, 0x71948ca4
je 0xbfea43
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfea00
mov eax, dword [eax]
jmp 0xbfe9d0
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push 0x493e0
push dword [ebp - 0x2c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xbfeae7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfeae7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfeadd
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfeac0
cmp esi, 0x71948ca4
je 0xbfeaeb
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfeaa2
mov eax, dword [eax]
jmp 0xbfea72
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push 0x493e0
push dword [ebp - 0x24]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xbfeb8f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfeb8f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfeb85
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfeb68
cmp esi, 0xfaba0065
je 0xbfeb93
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfeb50
mov eax, dword [eax]
jmp 0xbfeb20
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x44]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xbfec2f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfec2f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfec25
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfec08
cmp esi, 0xfaba0065
je 0xbfec33
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfebf0
mov eax, dword [eax]
jmp 0xbfebc0
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push dword [ebp - 0x6c]
call dword [0x9ed0c0]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xbfecd7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfecd7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfeccd
nop
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfecb0
cmp esi, 0xfaba0065
je 0xbfecdb
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfec96
mov eax, dword [eax]
jmp 0xbfec66
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x58]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xbfed77
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfed77
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfed6d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfed50
cmp esi, 0xfaba0065
je 0xbfed7b
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfed35
mov eax, dword [eax]
jmp 0xbfed05
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x34]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xbfee17
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfee17
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfee0d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfedf0
cmp esi, 0xfaba0065
je 0xbfee1b
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfedd5
mov eax, dword [eax]
jmp 0xbfeda5
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x2c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0xbfeeb7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xbfeeb7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xbfeead
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xbfee90
cmp esi, 0xfaba0065
je 0xbfeebb
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xbfee75
mov eax, dword [eax]
jmp 0xbfee45
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x24]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov dword [ebp - 0x20], 0xaff299bb
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5cc], ecx
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5c4], ecx
lea ecx, [ebp - 0x5d0]
mov dword [ebp - 0x5c8], eax
call fcn.00bb4ed0
mov dword [ebp - 0x20], 0xdf9be3ca
mov esi, eax
mov dword [ebp - 0x1c], 0xf940fadb
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x5e0], ecx
mov dword [ebp - 0x5dc], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5d8], ecx
lea ecx, [ebp - 0x5e0]
mov dword [ebp - 0x5d4], eax
call fcn.00bb4ed0
push eax
lea edx, [ebp - 0x1f0]
lea ecx, [ebp - 0x9d8]
call fcn.00bbc720
add esp, 4
mov byte [ebp - 4], 0x74
mov edx, eax
push 0xa16d5c
lea ecx, [ebp - 0x9c0]
call fcn.00bbc980
add esp, 4
mov byte [ebp - 4], 0x75
mov edx, eax
push esi
lea ecx, [ebp - 0x910]
call fcn.00bbc7b0
add esp, 4
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x9c0]
call fcn.00ba4890
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x9d8]
call fcn.00ba4890
mov dword [ebp - 0x20], 0xaff299bb
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5ec], ecx
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5e4], ecx
lea ecx, [ebp - 0x5f0]
mov dword [ebp - 0x5e8], eax
call fcn.00bb4ed0
mov edx, 0x17
lea ecx, [ebp - 0xa08]
mov esi, eax
call fcn.00c87fa0
mov byte [ebp - 4], 0x79
lea edx, [ebp - 0xd50]
push eax
lea ecx, [ebp - 0x9f0]
call fcn.00bbc8e0
add esp, 4
mov byte [ebp - 4], 0x7a
mov edx, eax
push esi
lea ecx, [ebp - 0x898]
call fcn.00bbc7b0
add esp, 4
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x9f0]
call fcn.00ba4890
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0xa08]
call fcn.00ba4890
mov ecx, 0xa19410
call fcn.00bb7c90
sub esp, 0x18
lea ecx, [ebp - 0x898]
mov edi, eax
mov dword [ebp - 0x4c], esp
mov esi, esp
call fcn.00bb7c90
push eax
mov ecx, esi
call fcn.00ba48f0
mov byte [ebp - 4], 0x7e
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0xa16d74
call fcn.00bb7fb0
mov byte [ebp - 4], 0x7f
mov byte [ebp - 4], 0x7d
mov ecx, edi
call fcn.00c8c060
add esp, 0x18
lea eax, [ebp - 0x910]
mov ecx, esp
mov dword [ebp - 0x50], esp
push eax
call fcn.00bb7fb0
mov byte [ebp - 4], pe_nt_image_headers32
sub esp, 0x18
lea eax, [ebp - 0x898]
mov dword [ebp - 0x60], esp
mov ecx, esp
push eax
call fcn.00bb7fb0
mov byte [ebp - 4], 0x81
mov byte [ebp - 4], 0x7d
call fcn.00c68c70
add esp, 0x30
cmp byte [0xa190ac], 0
je 0xbff1cb
cmp dword [ebp - 0x48], 0
jne 0xbff1cb
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0xa193c0
call fcn.00bb5950
mov byte [ebp - 4], 0x82
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0xa19258
call fcn.00bb5950
mov byte [ebp - 4], 0x83
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x50], esp
push 0xa19368
call fcn.00bb5950
mov byte [ebp - 4], 0x84
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0xa19388
call fcn.00bb5950
mov byte [ebp - 4], 0x85
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0xa19378
call fcn.00bb5950
mov byte [ebp - 4], 0x86
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x64], esp
push 0xa19290
call fcn.00bb5950
mov byte [ebp - 4], 0x87
sub esp, 0x18
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call fcn.00bb7fb0
mov byte [ebp - 4], 0x88
mov byte [ebp - 4], 0x7d
call fcn.00c6d6c0
add esp, 0x78
test al, al
je 0xbff1cb
call fcn.00c73050
sub esp, 0x18
lea eax, [ebp - 0x26c]
mov ecx, esp
mov dword [ebp - 0x4c], esp
push eax
call fcn.00bb7fb0
mov byte [ebp - 4], 0x89
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0xa193c0
call fcn.00bb5950
mov byte [ebp - 4], 0x8a
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x50], esp
push 0xa19258
call fcn.00bb5950
mov byte [ebp - 4], 0x8b
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0xa19368
call fcn.00bb5950
mov byte [ebp - 4], 0x8c
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0xa19388
call fcn.00bb5950
mov byte [ebp - 4], 0x8d
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x64], esp
push 0xa19378
call fcn.00bb5950
mov byte [ebp - 4], 0x8e
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0xa19290
call fcn.00bb5950
mov byte [ebp - 4], 0x8f
sub esp, 0x18
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x30], esp
mov ecx, esp
push eax
call fcn.00bb7fb0
mov byte [ebp - 4], 0x90
mov byte [ebp - 4], 0x7d
call fcn.00c27c50
add esp, 0x90
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x898]
call fcn.00ba4890
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x910]
call fcn.00ba4890
jmp 0xbff379
cmp byte [0xa190ac], 0
je 0xbff379
cmp dword [ebp - 0x48], 0
jne 0xbff379
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0xa193c0
call fcn.00bb5950
mov byte [ebp - 4], 0x91
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0xa19258
call fcn.00bb5950
mov byte [ebp - 4], 0x92
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x50], esp
push 0xa19368
call fcn.00bb5950
mov byte [ebp - 4], 0x93
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0xa19388
call fcn.00bb5950
mov byte [ebp - 4], 0x94
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0xa19378
call fcn.00bb5950
mov byte [ebp - 4], 0x95
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x64], esp
push 0xa19290
call fcn.00bb5950
mov byte [ebp - 4], 0x96
sub esp, 0x18
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call fcn.00bb7fb0
mov byte [ebp - 4], 0x97
mov byte [ebp - 4], 0x34
call fcn.00c6d6c0
add esp, 0x78
test al, al
je 0xbff379
call fcn.00c73050
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x248]
call fcn.00ba49f0
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x248]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0x284]
call fcn.00ba49f0
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x284]
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x29c]
call fcn.00ba49f0
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0xa2
lea ecx, [ebp - 0x924]
call fcn.00bb40b0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x92c]
call fcn.00bb4130
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x8e0]
call fcn.00baa700
push 0x9f6074
call dword [0x9ed1f8]
cmp byte [0xa190ac], 0
mov esi, dword [ebp - 0x48]
je 0xbff60d
test esi, esi
je 0xbff60d
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0xa193c0
call fcn.00bb5950
mov byte [ebp - 4], 0xa4
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0xa19258
call fcn.00bb5950
mov byte [ebp - 4], 0xa5
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x50], esp
push 0xa19368
call fcn.00bb5950
mov byte [ebp - 4], 0xa6
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0xa19388
call fcn.00bb5950
mov byte [ebp - 4], 0xa7
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0xa19378
call fcn.00bb5950
mov byte [ebp - 4], 0xa8
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x64], esp
push 0xa19290
call fcn.00bb5950
mov byte [ebp - 4], 0xa9
sub esp, 0x18
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call fcn.00bb7fb0
mov byte [ebp - 4], 0xaa
mov byte [ebp - 4], 0x12
call fcn.00c6d6c0
add esp, 0x78
test al, al
je 0xbff60d
mov dword [ebp - 0x20], 0xbcf28fe6
mov dword [ebp - 0x1c], 0x902ca9b0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5fc], ecx
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x20], 0x13faf782
mov dword [ebp - 0x1c], 0x14d8469a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
push 0xa16da4
mov dword [ebp - 0x5f4], ecx
push ecx
lea ecx, [ebp - 0x600]
mov dword [ebp - 0x5f8], eax
call fcn.00bb4ed0
add esp, 4
lea ecx, [ebp - 0xa20]
mov edx, eax
call fcn.00bbc850
add esp, 4
mov byte [ebp - 4], 0xab
mov ecx, eax
call fcn.00bb7c90
push eax
push 1
push 0
call dword [0x9ed1dc]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xa20]
call fcn.00ba4890
call dword [0x9ed098]
cmp eax, 0xb7
je 0xbff64a
mov edi, dword [0x9ed080]
push 0x7595
call edi
mov dword [ebp - 0x20], 0x9cd5b5dd
sub esp, 0x18
mov dword [ebp - 0x1c], 0x952c9ef5
mov esi, esp
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x224], ecx
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x4c], esp
call fcn.00bb4ed0
push eax
mov ecx, esi
call fcn.00ba48f0
mov byte [ebp - 4], 0xac
mov byte [ebp - 4], 0x12
call fcn.00c69530
mov eax, dword [0xa193f8]
add esp, 0x18
sub eax, dword [0xa193f4]
je 0xbff601
nop dword [eax]
push 0x64
call edi
mov eax, dword [0xa193f8]
sub eax, dword [0xa193f4]
jne 0xbff5f0
mov esi, dword [ebp - 0x48]
mov byte [0xa19081], 1
jmp 0xbff613
mov edi, dword [0x9ed080]
push 0xbbb
call edi
push 2
push dword [0xa15b24]
call dword [0x9ed380]
push dword [0xa15b24]
call dword [0x9ed388]
cmp byte [0xa190ac], 0
je 0xbff64a
test esi, esi
je 0xbff64a
push 0x3f3
call edi
jmp 0xbff641
xor esi, esi
mov byte [ebp - 4], 0xad
lea ecx, [ebp - 0x26c]
call fcn.00ba49f0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x85c]
call fcn.00ba49f0
mov byte [ebp - 4], 9
lea eax, [ebp - 0x85c]
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0xb3
lea ecx, [ebp - 0x1f0]
call fcn.00ba49f0
mov byte [ebp - 4], 5
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 5
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x9c]
test ecx, ecx
je 0xbff6b7
call fcn.00ba5bc0
mov dword [ebp - 4], 0xb6
lea ecx, [ebp - 0x8b0]
call fcn.00ba49f0
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x8b0]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 0xffffffff
mov eax, esi
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10