Function at 0x73c6c
Capabilities:
Link many functions at runtime
Rebuild import table
Resolve function by parsing pe exports

Disassembly:
push 0x64
call fcn.00073a37
mov ecx, dword [eax + 0x3c]
add ecx, eax
mov edx, dword [ecx + 0x7c]
mov ebx, dword [ecx + 0x78]
add ebx, eax
test ebx, ebx
je 0x74250
lea edi, [0x9fa26]
mov ecx, dword [ebx + 0x14]
mov esi, dword [ebx + 0x18]
mov edi, dword [ebx + 0x10]
mov ebp, dword [ebx + 0x20]
add ebp, eax
mov dword [0xa0b0a], ebx
mov ebx, dword [ebx + 0x24]
add ebx, eax
test dword [0xa0a12], 0x80000000
je 0x882a6
mov dword [esp + 0x3ac], ebp
mov ebp, esp
push esi
jmp 0x743b8
mov dword [0xa0b42], ecx
mov ebp, esp
lea ecx, [0x9fa26]
mov dword [ebp + 0x35c], eax
mov eax, dword [ebp + 0x380]
mov dword [ebp + 0x368], eax
and eax, 0xffff
mov dword [ecx + 0x1074], eax
sub eax, esi
cmp eax, dword [0xa0b42]
jge 0x8319e
lea eax, [eax*4]
mov dword [0xa0a76], edx
mov edx, dword [ebp + 0x36c]
mov ecx, dword [eax + edx]
add ecx, dword [esp + 0x35c]
cmp ecx, ebx
jge 0x82d72
lea edx, [0x9fa26]
mov dword [ebp + 0x368], ecx
mov ecx, dword [0x9fa96]
shl dword [0x9fc76], cl
mov edx, dword [ebp + 0x368]
mov ecx, dword [0x9fc76]
mov eax, dword [0x9fc76]
mov dword [reloc.KERNEL32.dll_IsDebuggerPresent], edx
mov dword [0xa0a32], ecx
mov dword [0xa0b5e], eax
jmp 0x831c0
mov dword [esp + 0x3b0], eax
mov esi, dword [esp + 0x34c]
mov edx, dword [ebx + 0x1170]
mov dword [esp + 0x378], esi
mov esi, dword [0xa0ab2]
mov eax, dword [0xa0b9a]
mov ebp, esp
add ebp, 4
jmp 0x741eb
mov dword [ebp + 0x368], ebx
mov ebx, dword [0xa0b3e]
jmp 0x73f22
mov dword [ebp + 0x350], ecx
mov ecx, dword [0xa0bd2]
add ecx, dword [ebx + 0x10e8]
add ecx, dword [ebx + 0x10e8]
mov edx, dword [ecx]
and edx, 0xffff
mov esi, dword [ebp + 0x374]
mov dword [ebp + 0x34c], ecx
mov dword [ebx + 0x1044], eax
mov dword [ebp + 0x344], edi
mov ecx, dword [ebp + 0x3ac]
mov eax, edx
mov edi, dword [ebp + 0x398]
mov dword [ebp + 0x348], edi
mov ebp, dword [ebx + 0x11ac]
mov dword [esp + 0x39c], ebp
mov edi, dword [esp + 0x348]
mov eax, dword [0xa0ae6]
mov dword [ebx + 0x108c], esi
mov dword [0xa0b9a], edx
jmp 0x73fd9
lea eax, [eax*4]
mov dword [ebp + 0x368], edx
mov edx, dword [ebp + 0x374]
mov edx, dword [eax + edx]
add edx, dword [0xa0b46]
cmp edx, dword [0xa0b0a]
jge 0x742de
lea ebx, [0x9fa26]
mov dword [ebx + 0x1140], esi
jmp 0x74976
lea edi, [0x9fa26]
mov ecx, dword [0x9fc4e]
rol dword [0xa0a6e], cl
lea esi, [0x9fa26]
mov edi, dword [ebp + 0x334]
add edi, dword [0x9fac6]
push 0
mov dword [0xa0a66], edi
mov ecx, dword [eax + 0x3c]
add ecx, eax
mov edx, dword [ecx + 0x7c]
mov ebx, dword [ecx + 0x78]
add ebx, eax
test ebx, ebx
je 0x83681
mov ecx, dword [ebx + 0x14]
mov ebp, dword [ebx + 0x18]
mov esi, dword [ebx + 0x10]
mov dword [esp + 0x3b0], ebp
mov ebp, dword [ebx + 0x20]
add ebp, eax
mov dword [esp + 0x39c], edx
mov edx, dword [ebx + 0x24]
add edx, eax
mov dword [esp + 0x378], ebp
mov ebp, dword [ebx + 0x1c]
add ebp, eax
test dword [esp + 0x380], 0x80000000
je 0x86580
mov dword [esp + 0x36c], ebp
jmp 0x73ebe
lea ebx, [0x9fa26]
mov dword [ebx + 0x1140], esi
mov esi, dword [ebx + 0x10e4]
add esi, dword [esp + 0x36c]
cmp edx, esi
jge 0x74976
mov ebx, 0x2e
mov ebx, edx
mov edx, 0xf
mov edx, ebx
mov ebx, dword [ebp + 0x80]
sub esp, 4
push ebx
mov dword [ebp + 0x358], eax
mov eax, 0x2e
mov dword [ebp + 0x354], ecx
mov ecx, 0xf
mov dword [0xa0b9e], edi
mov edi, edx
repne scasb al, byte es:[edi]
jmp 0x749c5
mov dword [0xa0b46], eax
mov eax, dword [0xa0b0a]
mov eax, dword [eax + 0x1c]
add eax, dword [0xa0b46]
mov dword [ebp + 0x398], ebx
lea ebx, [0x9fa26]
mov dword [ebp + 0x374], eax
mov eax, dword [0xa0a12]
mov dword [0xa0afa], eax
and eax, 0xffff
mov dword [ebx + 0x1130], eax
sub eax, edi
cmp eax, ecx
jge 0x82fd4
jmp 0x741eb
mov ecx, dword [0x9fc4e]
rol dword [0xa0a6e], cl
lea ebx, [0x9fa26]
mov esi, dword [ebp + 0x364]
add esi, dword [ebx + 0xa0]
mov eax, dword [ebx + 0x1120]
mov dword [ebp - 4], edx
mov dword [0xa0ac2], esi
mov dword [0xa0b26], esi
mov edi, esi
mov eax, dword [ebx + 0x109c]
mov dword [0xa0a66], eax
mov eax, dword [ebx + 0x1120]
add ebp, 0x30
jmp 0x7427f
mov eax, edi
mov eax, ebx
mov dword [ebp + 0x350], edi
sub edi, edx
mov ecx, edi
mov esi, edx
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 0x34c], edx
mov edx, dword [0xa08b2]
mov dword [edi], edx
call dword [0xa0916]
push dword [esp + 0x358]
push eax
mov dword [0xa0a7a], eax
call dword [0xa06fa]
mov dword [0xa0ace], esi
mov edx, dword [0xa0a7a]
mov ecx, dword [ebp + 0x354]
mov edi, dword [0xa0b9e]
mov dword [ebp + 0x348], eax
mov esi, dword [ebp + 0x350]
mov dword [0xa0b56], edx
mov eax, dword [ebp + 0x358]
mov edx, dword [ebp + 0x348]
add esp, 4
jmp 0x74976
mov dword [esp + 0x378], ebp
mov dword [0xa0c4e], eax
mov ebp, esp
lea eax, [0x9fa26]
mov dword [0xa0c06], 0
cmp dword [0xa0c06], esi
jg 0x8eb94
mov eax, dword [0xa0c06]
add eax, eax
add eax, dword [0xa0c06]
add eax, dword [0xa0c06]
mov dword [ebp + 0x368], ecx
mov ecx, dword [ebp + 0x378]
mov dword [ebp + 0x36c], ecx
add ecx, eax
mov ebp, dword [ecx]
add ebp, dword [esp + 0x35c]
mov dword [0xa0d5a], ebp
mov dword [esp + 0x358], edx
mov ebp, esp
lea edx, [0x9fa26]
mov dword [edx + 0x1294], ebx
mov dword [ebp + 0x354], 0
mov ebx, dword [edx + 0x1334]
mov dword [0xa0cf2], ebx
jmp 0x78bcc
and dword [ebp + 0x354], 0x7fffffff
mov edx, dword [ebp + 0x354]
cmp edx, dword [0x9ffd2]
je 0x8e5f2
inc dword [0xa0c06]
mov ecx, dword [ebp + 0x368]
mov edx, dword [ebp + 0x358]
mov dword [0xa0d12], ebx
mov ebx, dword [0xa0cba]
jmp 0x78b1d
mov dword [0xa0c6e], ecx
mov ecx, dword [0xa0d8a]
mov dword [0xa0da2], eax
mov eax, dword [0xa0cf2]
mov eax, dword [eax]
and eax, 0xff
test eax, eax
je 0x78b8d
mov edx, dword [ebp + 0x354]
mov dword [ebp + 0x36c], edx
shl edx, 5
shr dword [esp + 0x36c], 0x1b
or edx, dword [esp + 0x36c]
sub eax, 0x41
add edx, eax
inc dword [0xa0cf2]
mov dword [0xa0db2], eax
mov ecx, dword [0xa0c6e]
mov dword [ebp + 0x350], edx
mov eax, dword [0xa0da2]
mov dword [ebp + 0x354], edx
jmp 0x78bcc
mov dword [0xa0b3e], ebx
add ebx, dword [esp + 0x39c]
cmp ecx, ebx
jge 0x7413f
lea edx, [0x9fa26]
mov edx, 0x2e
mov edx, ecx
mov ecx, 0xf
mov ecx, edx
mov dword [ebp + 0x358], esi
sub esp, 4
mov esi, dword [0xa055a]
push esi
mov dword [ebp + 0x368], eax
mov eax, 0x2e
mov ecx, 0xf
mov dword [0xa0bd6], edi
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, edi
jmp 0x82f66
mov eax, esi
mov dword [ebp + 0x354], edi
sub edi, edx
mov ecx, edi
mov esi, edx
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [0xa0b86], esi
mov dword [ebp + 0x350], edx
mov dword [0xa0bae], edi
mov ebx, dword [0xa08b2]
mov dword [edi], ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [esp + 0x358]
push eax
mov dword [ebp + 0x34c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push edx
push 0xbb8
call fcn.00082fbe
ret
mov ebx, dword [ebx + 0x10e4]
mov dword [0xa0b02], eax
mov eax, dword [0xa0b46]
add esp, 4
add ebp, 0x30
jmp 0x74256
mov dword [0xa0aa2], ebx
mov dword [0xa0bb6], eax
mov ebx, dword [0xa0b0a]
mov eax, dword [0xa0b46]
add esp, 4
add ebp, 0x30
jmp 0x74256
mov ecx, dword [0xa0b92]
mov dword [0xa0b2e], eax
mov eax, dword [0xa0a7e]
add eax, dword [esp + 0x368]
add eax, dword [esp + 0x368]
mov ecx, dword [eax]
and ecx, 0xffff
push ecx
mov dword [0xa0b6a], eax
mov ebx, dword [0xa0b2e]
mov dword [ebp + 0x354], edx
mov esi, dword [0xa0b8e]
mov edi, dword [ebp + 0x35c]
mov ecx, dword [0xa0b7e]
mov eax, dword [0xa0abe]
mov dword [ebp + 0x358], esi
mov dword [0xa0aee], edi
mov dword [ebp + 0x350], ecx
mov dword [ebp + 0x378], eax
pop ecx
jmp 0x83181
mov esi, dword [0xa0b6a]
mov edx, dword [ebp + 0x344]
mov eax, dword [0xa0b52]
mov edi, dword [0xa0b92]
jmp 0x83325
mov ecx, dword [0x9fa96]
shl dword [0x9fc76], cl
mov dword [reloc.KERNEL32.dll_IsDebuggerPresent], 0
mov ecx, dword [0x9fc76]
mov dword [0xa0ad6], ecx
mov ebx, dword [ebp + 0x35c]
mov eax, dword [ebx + 0x3c]
add eax, ebx
mov edx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x78]
add ebx, dword [esp + 0x35c]
test ebx, ebx
je 0x8ea24
lea esi, [0x9fa26]
mov eax, dword [ebx + 0x14]
mov esi, dword [ebx + 0x18]
mov dword [ebp + 0x3b0], edi
mov edi, dword [ebx + 0x10]
mov dword [0xa0bc6], ecx
mov ecx, dword [ebx + 0x20]
add ecx, dword [esp + 0x35c]
mov ebp, dword [ebx + 0x24]
add ebp, dword [esp + 0x35c]
mov dword [esp + 0x39c], eax
mov eax, dword [ebx + 0x1c]
add eax, dword [esp + 0x35c]
jmp 0x8e470
mov dword [0xa0b42], ecx
mov dword [0xa0a5e], eax
mov eax, ebx
mov ebx, dword [0xa0a5a]
mov eax, dword [0xa0a5e]
mov dword [ebp + 0x35c], eax
mov eax, dword [ebp + 0x368]
jmp 0x8319e
mov ecx, edi
mov esi, dword [0xa0a7e]
add esi, dword [esp + 0x368]
add esi, dword [esp + 0x368]
mov ecx, dword [esi]
and ecx, 0xffff
mov dword [0xa0b2a], ecx
mov dword [0xa0b72], edi
shl dword [0xa0b2a], 2
mov ecx, dword [0xa0aee]
mov edi, dword [ebp + 0x348]
mov dword [ebp + 0x35c], ecx
mov dword [ebp + 0x368], eax
mov eax, dword [ebp + 0x36c]
mov dword [ebp + 0x34c], edx
mov edx, dword [0xa0b2a]
mov eax, dword [edx + eax]
add eax, ecx
cmp eax, dword [0xa0a5a]
jge 0x83374
jmp 0x835c6
mov ecx, dword [0xa0b72]
mov edi, dword [0xa0a5a]
add edi, dword [esp + 0x39c]
cmp eax, edi
jge 0x8388d
mov ecx, 0x2e
mov ecx, eax
mov eax, 0xf
mov edx, ecx
mov dword [0xa0a82], ebx
sub esp, 0x24
mov ebx, dword [0xa055a]
push ebx
mov eax, 0x2e
mov ecx, 0xf
mov dword [ebp + 0x344], edi
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, edi
mov eax, ebx
jmp 0x835dd
mov dword [ebp + 0x35c], ecx
mov dword [reloc.KERNEL32.dll_IsDebuggerPresent], eax
mov ecx, dword [0xa0b72]
jmp 0x831c0
mov dword [0xa0aa6], edi
sub edi, edx
mov ecx, edi
mov esi, edx
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 0x340], esi
mov dword [ebp + 0x33c], edx
mov eax, dword [0xa08b2]
mov dword [edi], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [0xa0aa6]
push eax
mov dword [ebp + 0x338], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [0xa0b2a]
mov ebx, dword [0xa0a82]
mov ecx, dword [0xa0aee]
mov edi, dword [ebp + 0x348]
add esp, 0x24
jmp 0x835c6
mov dword [ebp + 0x368], edx
mov dword [ebp + 0x328], eax
sub ebp, 0x34
jmp 0x8319e
mov dword [ebp + 0x35c], edi
mov dword [0xa0b82], edx
mov edx, dword [0xa0ba2]
mov dword [0x9fc76], edx
mov dword [0xa0a86], 0
mov edi, dword [ebp + 0x348]
mov edx, dword [0xa0a86]
mov dword [reloc.KERNEL32.dll_IsDebuggerPresent], edx
jmp 0x831c0
mov ecx, dword [0xa0aee]
push edi
mov edi, dword [ebp + 0x348]
add esp, 4
jmp 0x835c6
mov dword [ebp + 0x358], edi
lea edi, [0x9fa26]
and dword [esp + 0x354], 0x7fffffff
mov edi, dword [ebp + 0x354]
cmp edi, dword [0xa0742]
je 0x8f52b
mov dword [0xa0d3e], ebx
lea ebx, [0x9fa26]
inc dword [0xa0c62]
mov dword [ebp + 0x350], eax
mov dword [ebx + 0x11f4], ecx
mov edi, dword [ebp + 0x358]
mov eax, dword [ebx + 0x1368]
mov ecx, dword [ebx + 0x13b0]
mov ebx, dword [0xa0cfa]
jmp 0x85446
mov ecx, dword [0xa0dd6]
mov eax, dword [eax + 0x12c4]
mov esi, dword [0xa0d02]
mov dword [ebp + 0x348], esi
mov esi, dword [0xa0c0a]
mov dword [ebp + 0x344], edi
mov edi, dword [0xa0d02]
mov dword [ebp + 0x354], edi
mov edi, dword [ebp + 0x344]
jmp 0x8549f
mov dword [esp + 0x36c], ebp
mov ebp, esp
mov dword [ebp + 0x368], edx
lea edx, [0x9fa26]
mov dword [edx + 0x123c], 0
mov edx, dword [0xa0c62]
cmp edx, dword [0xa0ac6]
jg 0x8f385
mov dword [ebp + 0x358], eax
lea eax, [0x9fa26]
add edx, edx
add edx, dword [0xa0c62]
add edx, dword [eax + 0x123c]
mov eax, dword [ebp + 0x358]
mov dword [0xa0d8e], eax
add eax, edx
mov dword [0xa0cfa], ebx
mov ebx, dword [eax]
add ebx, dword [esp + 0x35c]
mov dword [0xa0caa], ebx
mov dword [ebp + 0x354], 0
mov dword [0xa0c0a], esi
mov dword [0xa0dd6], ecx
mov ecx, dword [0xa0caa]
mov ecx, dword [ecx]
and ecx, 0xff
test ecx, ecx
je 0x85194
mov dword [0xa0cea], eax
lea eax, [0x9fa26]
mov dword [ebp + 0x350], edx
mov edx, dword [ebp + 0x354]
mov dword [ebp + 0x358], edx
shl edx, 5
shr dword [esp + 0x358], 0x1b
or edx, dword [esp + 0x358]
sub ecx, 0x41
add edx, ecx
inc dword [eax + 0x1284]
mov dword [eax + 0x12dc], edx
mov dword [ebp + 0x34c], ecx
mov edx, dword [ebp + 0x350]
jmp 0x853ef
mov dword [0xa0d7a], ecx
and dword [esp + 0x358], 0x7fffffff
mov ecx, dword [0xa0bc6]
mov ebx, dword [esp + 0x358]
cmp ebx, dword [esp + 0x394]
je 0x8ed78
mov dword [esp + 0x34c], ebp
inc dword [esp + 0x378]
mov ebp, esp
mov edi, dword [0xa0ce6]
mov ecx, dword [0xa0cb6]
mov dword [0xa0bee], eax
mov ebp, dword [ebp + 0x34c]
mov ebx, dword [esp + 0x350]
mov eax, dword [esp + 0x36c]
jmp 0x855c7
mov dword [esp + 0x378], 0
mov dword [0xa0d82], ecx
mov dword [0xa0ce6], edi
cmp dword [esp + 0x378], esi
mov ecx, dword [0xa0bc6]
mov edi, dword [esp + 0x3b0]
jg 0x8e7b5
mov dword [esp + 0x36c], eax
mov eax, dword [esp + 0x378]
add eax, eax
add eax, dword [esp + 0x378]
add eax, dword [esp + 0x378]
mov edi, dword [0xa0d82]
mov dword [0xa0cb6], edi
add edi, eax
mov ecx, dword [edi]
add ecx, dword [esp + 0x35c]
mov dword [esp + 0x368], ecx
mov dword [esp + 0x358], 0
jmp 0x85a92
mov dword [0xa0d36], ecx
mov ebx, dword [esp + 0x350]
mov edi, dword [esp + 0x354]
jmp 0x85cd8
mov dword [0xa0dce], ecx
mov dword [esp + 0x354], edi
mov ecx, dword [0xa0bc6]
mov edi, dword [esp + 0x3b0]
mov dword [0xa0d6e], edx
mov dword [esp + 0x350], ebx
mov ebx, dword [esp + 0x368]
mov ecx, dword [ebx]
and ecx, 0xff
test ecx, ecx
je 0x85559
mov edi, dword [esp + 0x358]
mov dword [esp + 0x34c], edi
shl edi, 5
shr dword [esp + 0x358], 0x1b
or edi, dword [esp + 0x358]
sub ecx, 0x41
add edi, ecx
inc ebx
mov dword [esp + 0x348], ebx
mov dword [0xa0de2], edi
jmp 0x85a79
mov ecx, dword [0xa0dce]
mov ecx, dword [0xa0de2]
mov edx, dword [esp + 0x348]
mov dword [esp + 0x344], ecx
mov dword [esp + 0x368], edx
mov ecx, dword [0xa0dce]
mov edx, dword [esp + 0x358]
mov dword [0xa0c4a], edx
mov dword [esp + 0x340], eax
mov eax, dword [0xa0de2]
mov dword [esp + 0x358], eax
mov eax, dword [esp + 0x340]
mov edx, dword [0xa0d6e]
jmp 0x85a92
mov dword [ebp + 0x348], edi
mov edx, dword [0x9fc76]
and dword [0xa0b6e], 0x7fffffff
mov edi, dword [0x9fc76]
mov dword [ebp + 0x344], edx
mov dword [0xa0b8a], edi
mov edx, dword [0xa0b6e]
cmp edx, dword [esp + 0x380]
je 0x83307
mov ecx, edi
inc dword [esp + 0x368]
mov dword [0xa0ba2], edi
mov edi, dword [0xa0aee]
mov dword [ebp + 0x350], eax
mov dword [ebp + 0x35c], edi
mov eax, dword [ebp + 0x368]
cmp eax, dword [esp + 0x3b0]
jg 0x8375d
add eax, eax
add eax, dword [esp + 0x368]
add eax, dword [esp + 0x368]
mov dword [0xa0b7e], esi
mov esi, dword [ebp + 0x378]
mov dword [0xa0abe], esi
add esi, eax
mov edx, dword [esi]
add edx, edi
mov dword [0xa0b8e], edx
mov dword [ebp + 0x344], 0
jmp 0x860c2
mov dword [ebp + 0x35c], edi
mov ebx, dword [0xa0ba2]
mov dword [0x9fc76], ebx
mov dword [0xa0b92], ecx
mov ecx, dword [0xa0b8e]
mov ecx, dword [ecx]
and ecx, 0xff
test ecx, ecx
je 0x863cd
mov dword [0xa0b3a], esi
mov esi, dword [ebp + 0x344]
mov dword [0xa0a72], esi
shl esi, 5
shr dword [0xa0a72], 0x1b
or esi, dword [0xa0a72]
sub ecx, 0x41
add esi, ecx
inc dword [0xa0b8e]
push esi
mov dword [ebp + 0x350], ecx
mov esi, dword [0xa0b3a]
jmp 0x863b5
mov ecx, dword [esp + 0x33c]
mov dword [esp + 0x334], edx
mov dword [0xa0b8e], edi
mov dword [esp + 0x350], ebx
mov dword [esp + 0x348], ecx
mov edx, dword [esp + 0x354]
mov esi, dword [0xa0ba6]
mov edi, dword [0xa0aee]
mov ecx, ebp
mov ebx, dword [0x9fc76]
mov dword [esp + 0x344], esi
mov dword [0xa0ba2], ebx
mov esi, dword [esp + 0x34c]
mov ebp, esp
jmp 0x860c2
pop ecx
mov dword [0xa0bba], ecx
mov dword [ebp + 0x344], ecx
mov ecx, dword [0xa0b92]
jmp 0x860c2
mov dword [0xa0b52], ecx
mov edi, dword [ebp + 0x348]
and dword [esp + 0x344], 0x7fffffff
mov ecx, dword [0xa0b92]
mov ecx, dword [ebp + 0x344]
cmp ecx, dword [esp + 0x380]
je 0x830c1
mov ecx, dword [0xa0b92]
inc dword [esp + 0x368]
push esi
mov ebx, dword [0xa0abe]
mov dword [ebp + 0x354], edx
mov dword [0xa0a8a], eax
mov ecx, dword [ebp + 0x35c]
mov esi, dword [0xa0b7e]
mov dword [ebp + 0x378], ebx
mov eax, dword [0xa0b8e]
mov dword [0xa0aee], ecx
mov dword [ebp + 0x358], eax
mov ebx, dword [0xa0a8a]
pop ecx
mov edx, dword [ebp + 0x344]
mov eax, dword [0xa0b52]
mov edi, dword [0x9fc76]
mov dword [ebp + 0x34c], ecx
mov ecx, dword [0xa0b92]
jmp 0x85d76
mov edx, dword [esp + 0x354]
mov edi, dword [0xa0aee]
mov dword [esp + 0x338], ebp
mov ebx, dword [0x9fc76]
mov dword [0xa0abe], eax
mov dword [0xa0a56], ebx
mov eax, dword [0xa0ade]
mov edx, dword [0xa0ba6]
mov edi, dword [esp + 0x340]
mov ebx, dword [esp + 0x344]
jmp 0x8612f
mov ecx, dword [ebp + 0x350]
mov dword [ebp + 0x344], eax
mov dword [0xa0ba6], esi
mov dword [ebp + 0x340], edx
mov dword [ebp + 0x33c], edi
mov ebp, dword [0x9fc76]
mov dword [0xa0ade], ebx
mov dword [0xa0b7e], ecx
mov eax, dword [esp + 0x378]
mov esi, dword [esp + 0x34c]
jmp 0x86492
mov dword [esp + 0x36c], ebp
mov ebp, esp
mov dword [0xa0a5a], ebx
lea ebx, [0x9fa26]
mov dword [ebp + 0x368], 0
mov ebx, dword [ebp + 0x368]
cmp ebx, dword [esp + 0x3b0]
jg 0x832dc
lea ebx, [0x9fa26]
mov ebx, dword [ebp + 0x368]
add ebx, ebx
add ebx, dword [esp + 0x368]
add ebx, dword [esp + 0x368]
mov dword [0xa0be6], ecx
mov ecx, dword [ebp + 0x378]
mov dword [ebp + 0x35c], ecx
add ecx, ebx
mov dword [0xa0aee], eax
mov eax, dword [ecx]
add eax, dword [0xa0aee]
mov dword [ebp + 0x358], eax
mov dword [0xa0b6e], 0
jmp 0x8666a
mov dword [ebp + 0x354], eax
mov eax, dword [0xa0aee]
mov dword [ebp + 0x35c], eax
mov dword [ebp + 0x34c], ecx
mov ecx, dword [0x9fa96]
shl dword [0x9fc76], cl
mov dword [ebp + 0x350], esi
mov dword [0xa0a7e], edx
mov edx, dword [ebp + 0x358]
mov eax, dword [edx]
and eax, 0xff
test eax, eax
je 0x85d32
mov esi, dword [0xa0b6e]
mov dword [ebp + 0x348], esi
shl esi, 5
shr dword [0xa0b6e], 0x1b
or esi, dword [0xa0b6e]
sub eax, 0x41
add esi, eax
inc edx
jmp 0x864d7
mov dword [ebp + 0x378], ecx
mov ecx, dword [ebp + 0x36c]
mov dword [ebp + 0x354], ebx
mov dword [ebp + 0x350], edx
mov edx, dword [0xa0d0a]
mov ecx, dword [edx]
and ecx, 0xff
test ecx, ecx
je 0x871d0
mov dword [ebp + 0x348], eax
mov eax, dword [ebp + 0x358]
mov dword [ebp + 0x34c], eax
shl eax, 5
shr dword [esp + 0x358], 0x1b
or eax, dword [esp + 0x358]
sub ecx, 0x41
add eax, ecx
inc edx
mov dword [0xa0d26], eax
mov dword [ebp + 0x344], ecx
mov dword [0xa0d0a], edx
jmp 0x87024
mov dword [esp + 0x36c], ecx
lea ecx, [0x9fa26]
mov dword [esp + 0x378], edx
mov dword [0xa0cda], ebp
mov ebp, dword [0xa0d06]
mov ecx, dword [ebp + 0x1c]
add ecx, dword [esp + 0x35c]
mov ebp, esp
mov dword [ebp + 0x368], 0
mov dword [0xa0dd2], ecx
mov ecx, dword [ebp + 0x36c]
mov dword [ebp + 0x378], eax
mov eax, dword [ebp + 0x368]
cmp eax, dword [0xa0cda]
jg 0x8ec1f
add eax, eax
add eax, dword [esp + 0x368]
add eax, dword [esp + 0x368]
mov dword [0xa0ca6], esi
mov esi, dword [ebp + 0x378]
mov dword [0xa0cbe], esi
add esi, eax
mov ecx, dword [esi]
add ecx, dword [esp + 0x35c]
mov dword [0xa0d0a], ecx
mov dword [ebp + 0x358], 0
jmp 0x86e5f
mov eax, dword [ebp + 0x348]
mov ecx, dword [ebp + 0x378]
mov ecx, dword [0xa0d26]
mov edx, dword [ebp + 0x350]
mov dword [ebp + 0x340], ecx
mov ecx, dword [ebp + 0x378]
mov ebx, dword [ebp + 0x358]
mov dword [0xa0d7e], ebx
mov eax, dword [0xa0d26]
mov dword [ebp + 0x358], eax
mov ebx, dword [ebp + 0x354]
mov eax, dword [ebp + 0x348]
jmp 0x86e5f
mov dword [ebp + 0x34c], ecx
and dword [esp + 0x358], 0x7fffffff
mov ecx, dword [ebp + 0x36c]
mov edx, dword [ebp + 0x358]
cmp edx, dword [0x9fd86]
je 0x8ebb1
inc dword [esp + 0x368]
mov dword [0xa0d1e], esi
mov dword [ebp + 0x348], eax
mov ecx, dword [0xa0dd2]
mov edx, dword [ebp + 0x350]
mov esi, dword [0xa0ca6]
mov eax, dword [0xa0cbe]
jmp 0x86f6f
mov dword [0xa0bd2], ebx
and dword [esp + 0x358], 0x7fffffff
lea ebx, [0x9fa26]
mov dword [0xa0b96], edx
mov edx, dword [ebp + 0x354]
cmp edx, dword [0xa0a12]
je 0x74150
inc dword [ebx + 0x10e8]
mov esi, dword [ebp + 0x374]
mov dword [ebx + 0x1198], eax
mov edx, dword [0xa0b96]
mov eax, dword [ebp + 0x398]
mov ebx, dword [ebx + 0x11ac]
jmp 0x882db
mov dword [0xa0ae6], ebp
mov dword [esp + 0x3ac], ecx
mov ebp, esp
lea ecx, [0x9fa26]
push esi
mov dword [0xa0b46], eax
mov eax, dword [0xa0b0a]
mov eax, dword [eax + 0x1c]
add eax, dword [0xa0b46]
mov dword [ecx + 0x10e8], 0
cmp dword [0xa0b0e], esi
jg 0x83066
mov ecx, dword [0xa0b0e]
add ecx, ecx
add ecx, dword [0xa0b0e]
add ecx, dword [0xa0b0e]
mov dword [ebp + 0x398], eax
mov eax, dword [0xa0ae6]
mov dword [0xa0b1e], eax
add eax, ecx
mov dword [ebp + 0x374], esi
mov esi, dword [eax]
add esi, dword [0xa0b46]
mov dword [ebp + 0x368], eax
lea eax, [0x9fa26]
mov dword [ebp + 0x358], esi
mov dword [ebp + 0x354], 0
jmp 0x88389
mov dword [0xa0bc2], esi
mov esi, dword [ebp + 0x358]
mov eax, dword [esi]
and eax, 0xff
test eax, eax
je 0x88205
mov dword [ebp + 0x350], ebx
lea ebx, [0x9fa26]
mov dword [ebx + 0x1088], ecx
mov ecx, dword [ebp + 0x354]
mov dword [0xa0bde], ecx
shl ecx, 5
shr dword [0xa0bde], 0x1b
or ecx, dword [0xa0bde]
sub eax, 0x41
add ecx, eax
inc esi
mov ebx, dword [ebp + 0x350]
mov dword [ebp + 0x34c], ecx
mov dword [0xa0b5a], esi
mov ecx, dword [0xa0aae]
jmp 0x884fb
mov esi, dword [0xa0bc2]
mov dword [0xa0b7a], edx
mov ecx, dword [0xa0b5a]
mov edx, dword [ebp + 0x34c]
mov dword [ebp + 0x358], ecx
mov dword [ebp + 0x348], edx
mov ecx, dword [0xa0aae]
mov dword [ebp + 0x354], edx
mov edx, dword [0xa0b7a]
jmp 0x88389
test dword [esp + 0x394], 0x80000000
je 0x855bc
mov dword [esp + 0x378], ebp
mov dword [0xa0d22], ebx
mov ebp, esp
lea ebx, [0x9fa26]
mov dword [ebp + 0x36c], esi
mov esi, dword [ebp + 0x394]
mov dword [ebx + 0x1374], esi
and esi, 0xffff
mov dword [0xa0c56], esi
sub esi, edi
cmp esi, dword [esp + 0x39c]
jge 0x8e775
jmp 0x8e888
mov ecx, dword [0xa0d16]
mov dword [0xa0bfe], ebx
mov ebx, dword [0xa0d9a]
jmp 0x8e8c9
mov edx, dword [0xa0c4e]
add edx, dword [0xa0c06]
add edx, dword [0xa0c06]
mov ecx, dword [edx]
and ecx, 0xffff
mov dword [0xa0d32], esi
mov dword [0xa0c5e], eax
mov dword [0xa0d62], ebx
mov esi, dword [ebp + 0x358]
mov eax, dword [0xa0c4e]
mov ebx, dword [0xa0cba]
mov dword [ebp + 0x36c], esi
mov dword [ebp + 0x350], edx
mov edx, dword [ebp + 0x368]
mov dword [ebp + 0x358], edx
mov esi, dword [0xa0d32]
jmp 0x8eb41
mov edx, dword [0xa0c42]
mov dword [0xa0c66], ecx
mov ecx, dword [0xa0d8a]
jmp 0x8e8e6
lea edi, [0x9fa26]
mov dword [esp + 0x378], edx
mov dword [0xa0cda], ebp
mov ebp, dword [0xa0d06]
mov edx, dword [ebp + 0x1c]
add edx, dword [esp + 0x35c]
mov ebp, esp
mov edi, dword [ebp + 0x36c]
mov dword [ebp + 0x368], ebx
mov ebx, dword [0x9fd86]
mov dword [0xa0ca2], ebx
and ebx, 0xffff
mov dword [0xa0c26], ebx
sub ebx, esi
cmp ebx, dword [esp + 0x39c]
jge 0x8e798
mov dword [0xa0ca6], esi
mov dword [ebp + 0x358], ecx
mov dword [0xa0cbe], eax
mov dword [0xa0dd2], edx
mov edi, dword [ebp + 0x368]
mov ebp, dword [ebp + 0x378]
mov ecx, ebx
mov dword [esp + 0x354], edi
mov dword [esp + 0x350], ebp
mov eax, dword [esp + 0x36c]
mov dword [0xa0cca], eax
mov edx, dword [esp + 0x358]
mov dword [esp + 0x36c], edx
mov edi, eax
mov ebp, esp
jmp 0x8ebc7
mov dword [0xa0dbe], esi
mov ecx, dword [ebp + 0x358]
mov esi, dword [0xa0dd2]
jmp 0x8ec02
mov ebx, dword [0xa0d22]
mov dword [ebp + 0x368], ecx
mov dword [0xa0d72], edi
mov ecx, dword [0xa0bc6]
mov edi, dword [ebp + 0x3b0]
jmp 0x8ea2a
mov dword [ebp + 0x358], ebx
mov dword [ebp + 0x354], edx
mov ebx, dword [0xa0d06]
mov edx, dword [ebp + 0x378]
jmp 0x8e9b5
mov dword [esp + 0x36c], ebp
mov ebp, esp
jmp 0x8ea2a
mov dword [0xa0d16], ecx
mov ecx, dword [0xa0bc6]
mov ebx, dword [0xa0d22]
mov dword [0xa0dde], ebx
add ebx, edx
cmp dword [0xa0d16], ebx
jge 0x8e5db
mov ecx, 0x2e
mov ecx, dword [0xa0d16]
mov ecx, 0xf
mov ecx, dword [0xa0d16]
mov dword [ebp + 0x354], edx
sub esp, 4
mov edx, dword [0xa081a]
push edx
mov dword [0xa0c3a], eax
mov eax, 0x2e
mov ecx, 0xf
mov edi, dword [0xa0d16]
repne scasb al, byte es:[edi]
jmp 0x8ea99
test dword [0x9ffd2], 0x80000000
je 0x78afe
mov dword [esp + 0x378], ebp
mov ebp, esp
mov dword [ebp + 0x36c], edx
lea edx, [0x9fa26]
mov dword [ebp + 0x358], ecx
mov ecx, dword [edx + 0x5ac]
mov dword [ebp + 0x368], ecx
and ecx, 0xffff
mov dword [edx + 0x11f8], ecx
sub ecx, dword [esp + 0x358]
cmp ecx, dword [esp + 0x39c]
jge 0x8e697
jmp 0x8eb41
mov ebx, dword [0xa0d9a]
mov dword [ebp + 0x368], ecx
mov dword [ebp + 0x358], edi
lea esi, [esi*4]
mov dword [ebp + 0x394], ebx
mov ecx, dword [0xa0bc6]
mov edi, dword [ebp + 0x3b0]
mov ecx, dword [esi + eax]
add ecx, dword [esp + 0x35c]
cmp ecx, dword [0xa0d22]
jge 0x8e7c3
mov dword [ebp + 0x394], ebx
mov dword [ebp + 0x3b0], ecx
mov ecx, dword [0xa0bc6]
jmp 0x8ea34
lea esi, [0x9fa26]
mov dword [0xa0d6a], 0
mov ebx, dword [ebp + 0x35c]
mov eax, dword [ebx + 0x3c]
add eax, ebx
mov edx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x78]
add ebx, dword [esp + 0x35c]
test ebx, ebx
je 0x8e9b5
lea esi, [0x9fa26]
mov eax, dword [ebx + 0x14]
mov ebp, dword [ebx + 0x18]
mov esi, dword [ebx + 0x10]
mov dword [esp + 0x39c], eax
mov eax, dword [ebx + 0x20]
add eax, dword [esp + 0x35c]
mov dword [0xa0d06], ebx
mov ebx, dword [ebx + 0x24]
add ebx, dword [esp + 0x35c]
test dword [0x9fd86], 0x80000000
je 0x86f39
mov dword [esp + 0x36c], edi
jmp 0x8e6ae
mov dword [ebp + 0x39c], 0
mov edx, dword [ebp + 0x35c]
mov eax, dword [edx + 0x3c]
add eax, edx
mov edx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x78]
add ebx, dword [esp + 0x35c]
test ebx, ebx
je 0x8f49d
lea esi, [0x9fa26]
mov eax, dword [ebx + 0x14]
mov ebp, dword [ebx + 0x18]
mov esi, dword [ebx + 0x10]
mov dword [0xa0dca], eax
mov eax, dword [ebx + 0x20]
add eax, dword [esp + 0x35c]
mov dword [0xa0ac6], ebp
mov ebp, dword [ebx + 0x24]
add ebp, dword [esp + 0x35c]
mov dword [esp + 0x378], ebp
mov ebp, dword [ebx + 0x1c]
add ebp, dword [esp + 0x35c]
jmp 0x8f596
lea esi, [0x9fa26]
mov dword [ebp + 0x3b0], 0
mov edx, dword [ebp + 0x35c]
mov eax, dword [edx + 0x3c]
add eax, edx
mov edx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x78]
add ebx, dword [esp + 0x35c]
test ebx, ebx
je 0x8e8e0
lea esi, [0x9fa26]
mov eax, dword [ebx + 0x14]
mov esi, dword [ebx + 0x18]
mov dword [0xa0d8a], ecx
mov ecx, dword [ebx + 0x10]
mov ebp, dword [ebx + 0x20]
add ebp, dword [esp + 0x35c]
mov dword [esp + 0x39c], eax
mov eax, dword [ebx + 0x24]
add eax, dword [esp + 0x35c]
mov dword [0xa0c42], edx
mov edx, dword [ebx + 0x1c]
add edx, dword [esp + 0x35c]
jmp 0x8e82c
mov eax, edi
mov eax, edx
mov dword [0xa0c12], edi
sub edi, dword [0xa0d16]
mov ecx, edi
mov dword [ebp + 0x350], esi
mov esi, dword [0xa0d16]
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov edx, dword [0xa08b2]
mov dword [edi], edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [0xa0c12]
push eax
mov dword [ebp + 0x34c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp + 0x34c]
mov dword [0xa0d66], esi
mov dword [0xa0d52], eax
mov ebx, dword [0xa0d9a]
mov edi, dword [ebp + 0x3b0]
mov dword [0xa0c56], edx
mov esi, dword [ebp + 0x350]
mov eax, dword [0xa0c3a]
mov ecx, dword [0xa0d52]
mov edx, dword [ebp + 0x354]
add esp, 4
jmp 0x8e8c9
mov ecx, dword [0xa0cb6]
mov dword [esp + 0x340], eax
mov edx, dword [0xa0d6e]
mov eax, dword [esp + 0x348]
mov ebp, esp
jmp 0x8e888
lea ecx, [ecx*4]
mov dword [ebp + 0x368], ebx
mov ebx, dword [ebp + 0x36c]
mov edx, dword [ecx + ebx]
add edx, dword [esp + 0x35c]
cmp edx, dword [esp + 0x368]
jge 0x8eef4
mov dword [ebp + 0x354], edx
lea edx, [0x9fa26]
mov dword [ebp + 0x36c], ecx
mov ecx, dword [0xa0d8a]
mov edx, dword [ebp + 0x354]
mov dword [0xa0d6a], edx
jmp 0x8e8f0
mov dword [ebp + 0x36c], edx
mov dword [ebp + 0x368], ecx
mov edx, dword [0xa0c42]
mov ecx, dword [0xa0d8a]
jmp 0x8e8e6
add ebx, dword [esp + 0x368]
add ebx, dword [esp + 0x368]
mov ecx, dword [ebx]
and ecx, 0xffff
mov dword [0xa0d2e], ecx
shl dword [0xa0d2e], 2
mov ecx, dword [ebp + 0x36c]
mov esi, dword [0xa0dd2]
mov dword [ebp + 0x368], edx
mov edx, dword [0xa0d2e]
mov ecx, dword [edx + esi]
add ecx, dword [esp + 0x35c]
cmp ecx, dword [0xa0d06]
jge 0x8ef55
mov dword [0xa0be2], ecx
mov ecx, dword [ebp + 0x36c]
mov ebx, dword [0xa0be2]
mov dword [ebp + 0x39c], ebx
jmp 0x8e9bf
mov dword [0xa0dda], ebx
mov ebx, dword [0xa0d06]
jmp 0x8e9b5
mov dword [0xa0c32], esi
mov ecx, dword [ebp + 0x354]
mov esi, dword [0xa0c82]
mov dword [ebp + 0x354], edx
jmp 0x8eb77
repne scasb al, byte es:[edi]
mov eax, edi
mov eax, ebx
mov dword [0xa0c8a], edi
sub edi, edx
mov ecx, edi
mov esi, edx
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [0xa0d1a], ecx
mov dword [ebp + 0x348], edx
mov ebx, dword [0xa08b2]
mov dword [edi], ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [0xa0c8a]
push eax
mov dword [ebp + 0x344], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp + 0x344]
mov dword [0xa0a92], esi
mov ebx, dword [ebp + 0x36c]
mov dword [0xa0bf2], eax
mov edi, dword [ebp + 0x34c]
mov dword [0xa0c1e], ecx
mov esi, dword [0xa0c82]
mov eax, dword [ebp + 0x350]
mov ecx, dword [ebp + 0x354]
mov edx, dword [0xa0bf2]
mov dword [ebp + 0x354], edx
add esp, 4
jmp 0x8eb77
mov dword [esp + 0x34c], ebp
mov ebp, esp
mov dword [0xa0c9e], eax
mov eax, dword [ebp + 0x34c]
add eax, dword [esp + 0x378]
add eax, dword [esp + 0x378]
mov ecx, dword [eax]
and ecx, 0xffff
mov dword [ebp + 0x344], ecx
mov edi, dword [0xa0ce6]
mov ebx, dword [ebp + 0x34c]
mov ebp, dword [ebp + 0x350]
mov edx, dword [esp + 0x394]
mov ecx, dword [esp + 0x36c]
mov dword [esp + 0x378], ebx
mov dword [0xa0d22], ebp
mov dword [0xa0d9a], edx
mov dword [esp + 0x348], ecx
mov dword [esp + 0x36c], esi
mov esi, dword [esp + 0x344]
jmp 0x8eb20
mov eax, dword [0xa0a1e]
mov dword [ebp + 0x344], edi
sub edi, dword [esp + 0x360]
mov ecx, edi
mov esi, dword [ebp + 0x358]
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0xa08b2]
mov dword [edi], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [esp + 0x348]
push eax
mov dword [ebp + 0x340], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [0xa0d2e]
mov dword [0xa0daa], esi
mov dword [0xa0c16], eax
mov edi, dword [0xa0ce2]
mov esi, dword [0xa0dd2]
mov eax, dword [ebp + 0x348]
mov ecx, dword [0xa0c16]
add esp, 4
jmp 0x8ec02
mov dword [0xa0c82], esi
lea esi, [0x9fa26]
mov dword [ebp + 0x354], ecx
mov ecx, dword [esi + 0x1364]
mov esi, dword [ebp + 0x368]
add esi, dword [0xa0c42]
cmp edx, esi
jge 0x8ecce
mov ecx, 0x2e
mov ecx, edx
mov ecx, 0xf
mov ecx, edx
mov ebx, dword [0xa05ca]
sub esp, 4
push ebx
mov dword [ebp + 0x350], eax
mov eax, 0x2e
mov ecx, 0xf
mov dword [ebp + 0x34c], edi
mov edi, edx
jmp 0x8eceb
mov dword [ebp + 0x358], ecx
mov ecx, dword [ebp + 0x36c]
mov esi, dword [0xa0d06]
add esi, dword [esp + 0x350]
cmp dword [esp + 0x358], esi
jge 0x8e75e
mov ecx, 0x2e
mov ecx, dword [esp + 0x358]
mov ecx, 0xf
mov ecx, dword [esp + 0x358]
mov ecx, dword [0xa0a1e]
sub esp, 4
push ecx
mov dword [ebp + 0x348], eax
mov eax, 0x2e
mov ecx, 0xf
mov dword [0xa0ce2], edi
mov edi, dword [ebp + 0x358]
repne scasb al, byte es:[edi]
mov eax, edi
jmp 0x8ee37
mov dword [ebp + 0x354], ebx
mov edx, dword [ebp + 0x368]
mov ebx, dword [ebp + 0x358]
jmp 0x8f4a3
mov edx, dword [ebp + 0x368]
jmp 0x8f4a3
mov esi, dword [0xa0492]
xor esi, dword [0xa0a26]
lea eax, [0x9fa26]
mov edi, dword [ebp + 0x354]
mov dword [ebp + 0x378], edx
mov dword [eax + 0x1380], esi
mov dword [0xa0d96], esi
mov eax, esi
mov edi, dword [0xa0d96]
mov dword [0xa0cb2], edi
mov edi, dword [ebp + 0x354]
mov dword [ebp - 8], edi
sub esp, 8
push dword fs:[0]
mov dword fs:[0], esp
mov esi, dword [0xa05fe]
mov dword [0xa0bfa], esi
cld
mov eax, edi
mov eax, dword [0xa0582]
mov dword [esp + 0x354], edi
sub edi, edx
mov ecx, edi
mov esi, edx
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [0xa0db6], edi
mov dword [0xa0c92], esi
mov dword [esp + 0x350], ecx
mov edi, dword [0xa08b2]
mov dword [esp + 0x34c], ebx
mov ebx, dword [0xa0db6]
mov dword [ebx], edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [esp + 0x350]
push eax
mov dword [esp + 0x34c], eax
mov ecx, dword [esp + 0xc]
mov dword [0xa0c3e], ecx
call ecx
mov dword [0xa0dc2], eax
mov ecx, dword [esp + 0x344]
mov ebx, dword [esp + 0x348]
jmp 0x8f5ea
lea esi, [0x9fa26]
mov eax, dword [0xa0492]
xor eax, dword [0xa0a26]
lea esi, [0x9fa26]
mov dword [ebp + 0x378], 0
mov dword [0xa0cb2], eax
mov dword [0xa0d4e], eax
jmp 0x8f3ce
mov dword [0xa0c36], esi
lea esi, [0x9fa26]
mov dword [ebp + 0x350], eax
mov eax, dword [ebp + 0x358]
add eax, dword [esp + 0x368]
cmp edx, eax
jge 0x8f390
mov esi, 0x2e
mov ebp, edx
mov edx, 0xf
mov edx, ebp
mov dword [0xa0cae], ecx
sub esp, 4
mov ecx, dword [0xa0582]
push ecx
mov dword [0xa0d3a], eax
mov eax, esi
mov ecx, 0xf
mov edi, edx
repne scasb al, byte es:[edi]
jmp 0x8f3ef
lea esi, [0x9fa26]
mov dword [esi + 0x1378], edx
mov edx, dword [ebp + 0x378]
add edx, dword [esi + 0x123c]
add edx, dword [0xa0c62]
mov eax, dword [edx]
and eax, 0xffff
mov esi, dword [0xa0c0a]
mov dword [0xa0c86], ebx
mov dword [ebp + 0x34c], ecx
mov ebx, eax
mov ecx, dword [ebp + 0x358]
mov dword [ebp + 0x350], ecx
mov dword [0xa0c22], edx
mov edx, dword [0xa0cfa]
mov dword [ebp + 0x358], edx
mov eax, dword [0xa0d8e]
mov ecx, dword [0xa0dd6]
mov edi, dword [ebp + 0x350]
jmp 0x8f5f8
test dword [0xa0742], 0x80000000
je 0x85427
mov dword [esp + 0x36c], ebp
mov dword [esp + 0x368], edx
mov ebp, esp
lea edx, [0x9fa26]
mov dword [ebp + 0x358], ebx
mov ebx, dword [edx + 0xd1c]
mov dword [edx + 0x1208], ebx
and ebx, 0xffff
mov dword [0xa0c46], ebx
sub ebx, esi
cmp ebx, dword [0xa0dca]
jge 0x8f36e
jmp 0x8f5f8
mov edi, dword [esp + 0x370]
push edi
call fcn.0008f639
ret
lea ebx, [ebx*4]
mov dword [ebp + 0x354], edi
mov edi, dword [ebp + 0x36c]
mov edx, dword [ebx + edi]
add edx, dword [esp + 0x35c]
cmp edx, dword [esp + 0x358]
jge 0x8f4d0
mov dword [ebp + 0x350], eax
lea eax, [0x9fa26]
mov dword [0xa0c36], esi
jmp 0x8f390