Function at 0x1006ae10
Capabilities:
Accept command line arguments

Disassembly:
push 0xffffffffffffffff
push 0x100e869a
mov eax, dword fs:[0]
push eax
sub esp, 0xe4
mov eax, dword [0x1010bb90]
xor eax, esp
mov dword [esp + 0xe0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1010bb90]
xor eax, esp
push eax
lea eax, [esp + 0xf8]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x18], edi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor ebp, ebp
xor ecx, ecx
mov word [esp + 0xdc], cx
mov ecx, eax
mov dword [esp + 0xf0], 7
mov dword [esp + 0xec], ebp
lea esi, [ecx + 2]
lea ebx, [ebx]
mov dx, word [ecx]
add ecx, 2
cmp dx, bp
jne 0x1006ae80
sub ecx, esi
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0xe0]
call fcn.1000c5b0
mov dword [esp + 0x100], ebp
xor esi, esi
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebp
push 2
push 0x100f5a40
xor eax, eax
lea edx, [esp + 0xe0]
mov byte [esp + 0x108], 1
call fcn.10016640
cmp eax, 0xffffffff
je 0x1006af63
push 1
sub esp, 0x14
mov eax, esp
mov dword [esp + 0x98], esp
call fcn.1006c6e0
push 2
push 0x100f5a40
xor eax, eax
lea edx, [esp + 0xf8]
mov byte [esp + 0x120], 2
call fcn.10016640
push 0xffffffffffffffff
push eax
lea edx, [esp + 0xa4]
push edx
lea ecx, [esp + 0xfc]
call fcn.1006bf80
mov byte [esp + 0x118], 3
push eax
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x120], 4
call fcn.1006c730
add esp, 0x20
mov byte [esp + 0x100], 1
cmp dword [esp + 0x9c], 8
jb 0x1006af5f
mov ecx, dword [esp + 0x88]
push ecx
call fcn.100c14d4
add esp, 4
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 7
jae 0x1006b256
push ebp
push 0x20
push 0x1f
push 0x1e
push 0x1d
push 0x1c
push 0x1b
push 0x1a
push 0x19
push 0xffffffffffffff80
push 0x7a
push 0xffffffffffffff8a
push 0x76
push 0xffffffffffffff81
push 0xffffffffffffff86
push 0x7b
push 0x7e
push 0x30
push 0xffffffffffffff83
push 0x7c
push 0xffffffffffffff82
push 0x7b
push 0x6e
push 0x2a
push 0x7b
push 0x6d
push 0x7b
push 0x6b
push 0x72
push 0x65
push 0x75
push 0x63
push 0x51
lea esi, [esp + 0x140]
call fcn.10070600
add esp, 0x84
mov ebx, 0x10
mov byte [esp + 0x100], 5
cmp dword [eax + 0x18], ebx
jb 0x1006afef
mov esi, dword [eax + 4]
jmp 0x1006aff2
lea esi, [eax + 4]
mov eax, esi
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], ebp
mov byte [esp + 0x30], 0
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006b008
sub eax, edi
push eax
push esi
lea ecx, [esp + 0x34]
call fcn.10009fb0
push ebp
push 0x20
push 0x1f
push 0x1e
push 0x1d
push 0x3c
push 0x55
push 0x7f
push 0xffffffffffffff87
push 0xffffffffffffff81
push 0xffffffffffffff83
push 0x36
push 0x79
push 0xffffffffffffff82
push 0x74
push 0x7f
push 0x7e
push 0x7f
push 0x72
push 0x2e
push 0x74
push 0x7a
push 0x74
push 0x6e
push 0x6a
push 0x6d
push 0x79
push 0x26
push 0x77
push 0x73
push 0x75
push 0x74
push 0x46
lea esi, [esp + 0x108]
mov byte [esp + 0x184], 6
call fcn.10070600
add esp, 0x84
mov byte [esp + 0x100], 7
cmp dword [eax + 0x18], ebx
jb 0x1006b089
mov esi, dword [eax + 4]
jmp 0x1006b08c
lea esi, [eax + 4]
mov edi, 0xf
mov ecx, esi
mov dword [esp + 0x60], edi
mov dword [esp + 0x5c], ebp
mov byte [esp + 0x4c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006b0a3
sub ecx, edx
push ecx
push esi
lea ecx, [esp + 0x50]
call fcn.10009fb0
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x4c]
push edx
lea esi, [esp + 0xa8]
mov byte [esp + 0x108], 8
call fcn.100105c0
add esp, 8
mov byte [esp + 0x100], 9
cmp dword [eax + 0x18], ebx
jb 0x1006b0ea
mov edx, dword [eax + 4]
jmp 0x1006b0ed
lea edx, [eax + 4]
mov eax, edx
mov dword [esp + 0x7c], edi
mov dword [esp + 0x78], ebp
mov byte [esp + 0x68], 0
lea esi, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006b100
sub eax, esi
push eax
push edx
lea ecx, [esp + 0x6c]
call fcn.10009fb0
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x64]
mov byte [esp + 0x100], 0xa
call fcn.1006abd0
cmp dword [esp + 0x7c], ebx
jb 0x1006b13c
mov eax, dword [esp + 0x68]
push eax
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x7c], edi
mov dword [esp + 0x78], ebp
mov byte [esp + 0x68], 0
cmp dword [esp + 0xb8], ebx
jb 0x1006b162
mov ecx, dword [esp + 0xa4]
push ecx
call fcn.100c14d4
add esp, 4
mov dword [esp + 0xb8], edi
mov dword [esp + 0xb4], ebp
mov byte [esp + 0xa4], 0
cmp dword [esp + 0x60], ebx
jb 0x1006b18b
mov edx, dword [esp + 0x4c]
push edx
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x60], edi
mov dword [esp + 0x5c], ebp
mov byte [esp + 0x4c], 0
cmp dword [esp + 0x9c], ebx
jb 0x1006b1b1
mov eax, dword [esp + 0x88]
push eax
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x9c], edi
mov dword [esp + 0x98], ebp
mov byte [esp + 0x88], 0
cmp dword [esp + 0x44], ebx
jb 0x1006b1da
mov ecx, dword [esp + 0x30]
push ecx
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x44], edi
mov dword [esp + 0x40], ebp
mov byte [esp + 0x30], 0
cmp dword [esp + 0xd4], ebx
jb 0x1006b200
mov edx, dword [esp + 0xc0]
push edx
call fcn.100c14d4
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebp
je 0x1006b229
mov ecx, dword [esp + 0x80]
mov edi, dword [esp + 0x24]
push ecx
call fcn.1006cf20
mov edx, dword [esp + 0x24]
add esp, 4
push edx
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebp
cmp dword [esp + 0xf0], 8
jb 0x1006b24f
mov eax, dword [esp + 0xdc]
push eax
call fcn.100c14d4
add esp, 4
xor al, al
jmp 0x1006bca4
mov ebx, 0x10
cmp esi, dword [esp + 0x24]
je 0x1006b3b6
mov ecx, dword [esi + 0x14]
push 2
push 0x100f5a4c
push ecx
push ebp
mov ecx, esi
call fcn.1006c190
test eax, eax
jne 0x1006b42b
lea edx, [esp + 0xbc]
add esi, 0x1c
push edx
mov ecx, esi
call fcn.10020ba0
mov edi, dword [esp + 0x18]
push 0xffffffffffffffff
push ebp
add edi, 0x38
push eax
mov ecx, edi
mov byte [esp + 0x10c], 0xb
call fcn.10009ed0
mov byte [esp + 0x100], 1
cmp dword [esp + 0xd4], ebx
jb 0x1006b2cd
mov eax, dword [esp + 0xc0]
push eax
call fcn.100c14d4
add esp, 4
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 0x4c], ebp
jne 0x1006b335
cmp esi, dword [esp + 0x24]
je 0x1006b335
lea esp, [esp]
lea edx, [esp + 0xbc]
add esi, 0x1c
push edx
mov ecx, esi
call fcn.10020ba0
push 0xffffffffffffffff
push ebp
push eax
mov ecx, edi
mov byte [esp + 0x10c], 0xc
call fcn.10009ed0
mov byte [esp + 0x100], 1
cmp dword [esp + 0xd4], ebx
jb 0x1006b326
mov eax, dword [esp + 0xc0]
push eax
call fcn.100c14d4
add esp, 4
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 0x4c], ebp
jne 0x1006b335
cmp esi, dword [esp + 0x24]
jne 0x1006b2e0
push 1
push 0x100f5a54
push edi
xor eax, eax
call fcn.10016580
cmp eax, 0xffffffff
je 0x1006b36d
push 1
push 0x100f5a54
push edi
xor eax, eax
call fcn.10016580
push 0xffffffffffffffff
push eax
mov ecx, edi
call fcn.10007a70
push 0xffffffffffffffff
push ebp
push eax
mov ecx, edi
call fcn.10009ed0
push 1
push 0x100f4258
push edi
xor eax, eax
call fcn.10016580
cmp eax, 0xffffffff
je 0x1006b3a5
push 1
push 0x100f4258
push edi
xor eax, eax
call fcn.10016580
push 0xffffffffffffffff
push eax
mov ecx, edi
call fcn.10007a70
push 0xffffffffffffffff
push ebp
push eax
mov ecx, edi
call fcn.10009ed0
mov edi, dword [esp + 0x18]
add esi, 0x1c
cmp esi, dword [esp + 0x24]
jne 0x1006b265
cmp dword [edi + 0x4c], ebp
jne 0x1006b76a
push ebp
push 0x20
push 0x1f
push 0x1e
push 0x1d
push 0xffffffffffffff81
push 0xffffffffffffff88
push 0x7b
push 0xffffffffffffff87
push 0x38
push 0xffffffffffffff89
push 0x7b
push 0xffffffffffffff8e
push 0x75
push 0x7f
push 0xffffffffffffff82
push 0x31
push 0x7e
push 0x78
push 0x6f
push 0xffffffffffffff81
push 0x6e
push 0x7a
push 0x2a
push 0x7d
push 0x77
push 0x75
push 0x26
push 0x69
push 0x70
push 0x78
push 0x71
push 0x44
lea esi, [esp + 0x140]
call fcn.10070600
add esp, 0x84
mov byte [esp + 0x100], 0xf
cmp dword [eax + 0x18], ebx
jb 0x1006b4fd
mov esi, dword [eax + 4]
jmp 0x1006b500
mov edx, dword [esi + 0x14]
push 2
push 0x100f5a58
push edx
push ebp
mov ecx, esi
call fcn.1006c190
test eax, eax
jne 0x1006b492
lea eax, [esp + 0xbc]
add esi, 0x1c
push eax
mov ecx, esi
call fcn.10020ba0
push 0xffffffffffffffff
push ebp
push eax
lea ecx, [edi + 0x1c]
mov byte [esp + 0x10c], 0xd
call fcn.10009ed0
mov byte [esp + 0x100], 1
cmp dword [esp + 0xd4], ebx
jb 0x1006b3a9
mov ecx, dword [esp + 0xc0]
push ecx
call fcn.100c14d4
add esp, 4
jmp 0x1006b3a9
mov edx, dword [esi + 0x14]
push 2
push 0x100f5a60
push edx
push ebp
mov ecx, esi
call fcn.1006c190
test eax, eax
jne 0x1006b3a9
lea eax, [esp + 0xbc]
add esi, 0x1c
push eax
mov ecx, esi
call fcn.10020ba0
push 0xffffffffffffffff
push ebp
push eax
lea ecx, [edi + 0x54]
mov byte [esp + 0x10c], 0xe
call fcn.10009ed0
mov byte [esp + 0x100], 1
cmp dword [esp + 0xd4], ebx
jb 0x1006b3a9
mov ecx, dword [esp + 0xc0]
push ecx
call fcn.100c14d4
add esp, 4
jmp 0x1006b3a9
lea esi, [eax + 4]
mov eax, esi
mov dword [esp + 0x7c], 0xf
mov dword [esp + 0x78], ebp
mov byte [esp + 0x68], 0
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006b516
sub eax, edi
push eax
push esi
lea ecx, [esp + 0x6c]
call fcn.10009fb0
push ebp
push 0x20
push 0x1f
push 0x1e
push 0x1d
push 0x3c
push 0x55
push 0x7f
push 0xffffffffffffff87
push 0xffffffffffffff81
push 0xffffffffffffff83
push 0x36
push 0x79
push 0xffffffffffffff82
push 0x74
push 0x7f
push 0x7e
push 0x7f
push 0x72
push 0x2e
push 0x74
push 0x7a
push 0x74
push 0x6e
push 0x6a
push 0x6d
push 0x79
push 0x26
push 0x77
push 0x73
push 0x75
push 0x74
push 0x46
lea esi, [esp + 0x124]
mov byte [esp + 0x184], bl
call fcn.10070600
add esp, 0x84
mov byte [esp + 0x100], 0x11
cmp dword [eax + 0x18], ebx
jb 0x1006b596
mov eax, dword [eax + 4]
jmp 0x1006b599
add eax, 4
mov edi, 0xf
mov ecx, eax
mov dword [esp + 0x60], edi
mov dword [esp + 0x5c], ebp
mov byte [esp + 0x4c], 0
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x1006b5b0
sub ecx, esi
push ecx
push eax
lea ecx, [esp + 0x50]
call fcn.10009fb0
lea edx, [esp + 0x64]
push edx
lea eax, [esp + 0x4c]
push eax
lea esi, [esp + 0x8c]
mov byte [esp + 0x108], 0x12
call fcn.100105c0
add esp, 8
mov byte [esp + 0x100], 0x13
cmp dword [eax + 0x18], ebx
jb 0x1006b5f7
mov edx, dword [eax + 4]
jmp 0x1006b5fa
lea edx, [eax + 4]
mov eax, edx
mov dword [esp + 0x44], edi
mov dword [esp + 0x40], ebp
mov byte [esp + 0x30], 0
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006b610
sub eax, esi
push eax
push edx
lea ecx, [esp + 0x34]
call fcn.10009fb0
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x2c]
mov byte [esp + 0x100], 0x14
call fcn.1006abd0
cmp dword [esp + 0x44], ebx
jb 0x1006b64c
mov ecx, dword [esp + 0x30]
push ecx
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x44], edi
mov dword [esp + 0x40], ebp
mov byte [esp + 0x30], 0
cmp dword [esp + 0x9c], ebx
jb 0x1006b672
mov edx, dword [esp + 0x88]
push edx
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x9c], edi
mov dword [esp + 0x98], ebp
mov byte [esp + 0x88], 0
cmp dword [esp + 0x60], ebx
jb 0x1006b69b
mov eax, dword [esp + 0x4c]
push eax
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x60], edi
mov dword [esp + 0x5c], ebp
mov byte [esp + 0x4c], 0
cmp dword [esp + 0xb8], ebx
jb 0x1006b6c1
mov ecx, dword [esp + 0xa4]
push ecx
call fcn.100c14d4
add esp, 4
mov dword [esp + 0xb8], edi
mov dword [esp + 0xb4], ebp
mov byte [esp + 0xa4], 0
cmp dword [esp + 0x7c], ebx
jb 0x1006b6ea
mov edx, dword [esp + 0x68]
push edx
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x7c], edi
mov dword [esp + 0x78], ebp
mov byte [esp + 0x68], 0
cmp dword [esp + 0xd4], ebx
jb 0x1006b710
mov eax, dword [esp + 0xc0]
push eax
call fcn.100c14d4
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, ebp
je 0x1006b739
mov ecx, dword [esp + 0x80]
mov edi, dword [esp + 0x24]
push ecx
call fcn.1006cf20
mov edx, dword [esp + 0x24]
add esp, 4
push edx
call fcn.100c14d4
add esp, 4
cmp dword [esp + 0xf0], 8
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebp
jb 0x1006b24f
mov eax, dword [esp + 0xdc]
push eax
call fcn.100c14d4
add esp, 4
xor al, al
jmp 0x1006bca4
cmp dword [edi + 0x30], ebp
jne 0x1006ba2c
push ebp
push 0x20
push 0xffffffffffffff92
push 0xffffffffffffff91
push 0xffffffffffffff82
push 0xffffffffffffff8e
push 0x7f
push 0x7e
push 0x7a
push 0x38
push 0xffffffffffffff89
push 0x7b
push 0xffffffffffffff8b
push 0xffffffffffffff86
push 0x78
push 0xffffffffffffff85
push 0x31
push 0x7e
push 0x78
push 0x6f
push 0xffffffffffffff81
push 0x6e
push 0x7a
push 0x2a
push 0x7d
push 0x77
push 0x75
push 0x26
push 0x69
push 0x70
push 0x78
push 0x71
push 0x44
lea esi, [esp + 0x140]
call fcn.10070600
add esp, 0x84
mov byte [esp + 0x100], 0x15
cmp dword [eax + 0x18], ebx
jb 0x1006b7d8
mov esi, dword [eax + 4]
jmp 0x1006b7db
lea esi, [eax + 4]
mov ebp, 0xf
mov eax, esi
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x78], 0
mov byte [esp + 0x68], 0
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006b7f6
sub eax, edi
push eax
push esi
lea ecx, [esp + 0x6c]
call fcn.10009fb0
push 0
push 0x20
push 0x1f
push 0x1e
push 0x1d
push 0x3c
push 0x55
push 0x7f
push 0xffffffffffffff87
push 0xffffffffffffff81
push 0xffffffffffffff83
push 0x36
push 0x79
push 0xffffffffffffff82
push 0x74
push 0x7f
push 0x7e
push 0x7f
push 0x72
push 0x2e
push 0x74
push 0x7a
push 0x74
push 0x6e
push 0x6a
push 0x6d
push 0x79
push 0x26
push 0x77
push 0x73
push 0x75
push 0x74
push 0x46
lea esi, [esp + 0x124]
mov byte [esp + 0x184], 0x16
call fcn.10070600
add esp, 0x84
mov byte [esp + 0x100], 0x17
cmp dword [eax + 0x18], ebx
jb 0x1006b878
mov eax, dword [eax + 4]
jmp 0x1006b87b
add eax, 4
xor edi, edi
mov ecx, eax
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], edi
mov byte [esp + 0x4c], 0
lea esi, [ecx + 1]
nop
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x1006b890
sub ecx, esi
push ecx
push eax
lea ecx, [esp + 0x50]
call fcn.10009fb0
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x4c]
push edx
lea esi, [esp + 0x8c]
mov byte [esp + 0x108], 0x18
call fcn.100105c0
add esp, 8
mov byte [esp + 0x100], 0x19
cmp dword [eax + 0x18], ebx
jb 0x1006b8d7
mov edx, dword [eax + 4]
jmp 0x1006b8da
lea edx, [eax + 4]
mov eax, edx
mov dword [esp + 0x44], ebp
mov dword [esp + 0x40], edi
mov byte [esp + 0x30], 0
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006b8f0
sub eax, esi
push eax
push edx
lea ecx, [esp + 0x34]
call fcn.10009fb0
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x2c]
mov byte [esp + 0x100], 0x1a
call fcn.1006abd0
cmp dword [esp + 0x44], ebx
jb 0x1006b92c
mov eax, dword [esp + 0x30]
push eax
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x44], ebp
mov dword [esp + 0x40], edi
mov byte [esp + 0x30], 0
cmp dword [esp + 0x9c], ebx
jb 0x1006b952
mov ecx, dword [esp + 0x88]
push ecx
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x98], edi
mov byte [esp + 0x88], 0
cmp dword [esp + 0x60], ebx
jb 0x1006b97b
mov edx, dword [esp + 0x4c]
push edx
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], edi
mov byte [esp + 0x4c], 0
cmp dword [esp + 0xb8], ebx
jb 0x1006b9a1
mov eax, dword [esp + 0xa4]
push eax
call fcn.100c14d4
add esp, 4
mov dword [esp + 0xb8], ebp
mov dword [esp + 0xb4], edi
mov byte [esp + 0xa4], 0
cmp dword [esp + 0x7c], ebx
jb 0x1006b9ca
mov ecx, dword [esp + 0x68]
push ecx
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x78], edi
mov byte [esp + 0x68], 0
cmp dword [esp + 0xd4], ebx
jb 0x1006b9f0
mov edx, dword [esp + 0xc0]
push edx
call fcn.100c14d4
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x1006ba1b
mov ecx, dword [esp + 0x80]
mov edi, dword [esp + 0x24]
push ecx
call fcn.1006cf20
mov edx, dword [esp + 0x24]
add esp, 4
push edx
call fcn.100c14d4
add esp, 4
xor edi, edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
jmp 0x1006b235
cmp dword [edi + 0x68], ebp
jne 0x1006bc8d
push ebp
push 0x20
push 0x1f
push 0x1e
push 0x1d
push 0xffffffffffffff90
push 0xffffffffffffff8d
push 0xffffffffffffff89
push 0xffffffffffffff89
push 0x38
push 0xffffffffffffff89
push 0x7b
push 0xffffffffffffff8b
push 0xffffffffffffff86
push 0x78
push 0xffffffffffffff85
push 0x31
push 0x7e
push 0x78
push 0x6f
push 0xffffffffffffff81
push 0x6e
push 0x7a
push 0x2a
push 0x7d
push 0x77
push 0x75
push 0x26
push 0x69
push 0x70
push 0x78
push 0x71
push 0x44
lea esi, [esp + 0x140]
call fcn.10070600
add esp, 0x84
mov byte [esp + 0x100], 0x1b
cmp dword [eax + 0x18], ebx
jb 0x1006ba9a
mov esi, dword [eax + 4]
jmp 0x1006ba9d
lea esi, [eax + 4]
mov ebp, 0xf
mov eax, esi
mov dword [esp + 0x44], ebp
mov dword [esp + 0x40], 0
mov byte [esp + 0x30], 0
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006bab8
sub eax, edi
push eax
push esi
lea ecx, [esp + 0x34]
call fcn.10009fb0
push 0
push 0x20
push 0x1f
push 0x1e
push 0x1d
push 0x3c
push 0x55
push 0x7f
push 0xffffffffffffff87
push 0xffffffffffffff81
push 0xffffffffffffff83
push 0x36
push 0x79
push 0xffffffffffffff82
push 0x74
push 0x7f
push 0x7e
push 0x7f
push 0x72
push 0x2e
push 0x74
push 0x7a
push 0x74
push 0x6e
push 0x6a
push 0x6d
push 0x79
push 0x26
push 0x77
push 0x73
push 0x75
push 0x74
push 0x46
lea esi, [esp + 0xe8]
mov byte [esp + 0x184], 0x1c
call fcn.10070600
add esp, 0x84
mov byte [esp + 0x100], 0x1d
cmp dword [eax + 0x18], ebx
jb 0x1006bb3a
mov eax, dword [eax + 4]
jmp 0x1006bb3d
add eax, 4
push eax
lea ecx, [esp + 0xa4]
call fcn.100079a0
lea ecx, [esp + 0x2c]
push ecx
push eax
lea esi, [esp + 0x8c]
mov byte [esp + 0x108], 0x1e
call fcn.100105c0
add esp, 8
mov byte [esp + 0x100], 0x1f
cmp dword [eax + 0x18], ebx
jb 0x1006bb79
mov eax, dword [eax + 4]
jmp 0x1006bb7c
add eax, 4
push eax
lea ecx, [esp + 0x4c]
call fcn.100079a0
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x48]
mov byte [esp + 0x100], 0x20
call fcn.1006abd0
cmp dword [esp + 0x60], ebx
jb 0x1006bbae
mov edx, dword [esp + 0x4c]
push edx
call fcn.100c14d4
add esp, 4
xor esi, esi
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], esi
mov byte [esp + 0x4c], 0
cmp dword [esp + 0x9c], ebx
jb 0x1006bbd6
mov eax, dword [esp + 0x88]
push eax
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x98], esi
mov byte [esp + 0x88], 0
cmp dword [esp + 0xb8], ebx
jb 0x1006bc05
mov ecx, dword [esp + 0xa4]
push ecx
call fcn.100c14d4
add esp, 4
mov dword [esp + 0xb8], ebp
mov dword [esp + 0xb4], esi
mov byte [esp + 0xa4], 0
cmp dword [esp + 0x7c], ebx
jb 0x1006bc2e
mov edx, dword [esp + 0x68]
push edx
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x78], esi
mov byte [esp + 0x68], 0
cmp dword [esp + 0x44], ebx
jb 0x1006bc4e
mov eax, dword [esp + 0x30]
push eax
call fcn.100c14d4
add esp, 4
mov dword [esp + 0x44], ebp
mov dword [esp + 0x40], esi
mov byte [esp + 0x30], 0
cmp dword [esp + 0xd4], ebx
jb 0x1006bc74
mov ecx, dword [esp + 0xc0]
push ecx
call fcn.100c14d4
add esp, 4
lea esi, [esp + 0x1c]
call fcn.1006c130
lea ecx, [esp + 0xd8]
call fcn.10002e10
xor al, al
jmp 0x1006bca4
lea esi, [esp + 0x1c]
call fcn.1006c130
lea ecx, [esp + 0xd8]
call fcn.10002e10
mov al, 1
mov ecx, dword [esp + 0xf8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xe0]
xor ecx, esp
call fcn.100bfcbc
add esp, 0xf0
ret