Function at 0x10052b10
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10082c86
mov eax, dword fs:[0]
push eax
sub esp, 0x20c
mov eax, dword [0x100b3040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.10043150
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], str.JoinArena
push ecx
mov esi, eax
mov dword [ebp - 0x20], 0x100432e0
lea eax, [ebp - 0x1c]
push eax
push ecx
lea ecx, [ebp - 0x160]
call fcn.10043470
sub esp, 0x18
mov dword [ebp - 4], 0
mov eax, esp
xorps xmm0, xmm0
mov ecx, esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x160]
push eax
push 1
call fcn.1007afc0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x160]
test ecx, ecx
je 0x10052be6
mov eax, dword [ebp - 0x158]
sub eax, ecx
sar eax, 3
lea edx, [eax*8]
mov eax, ecx
cmp edx, 0x1000
jb 0x10052bdc
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10052bdc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1008095a
add esp, 8
call fcn.100404c0
mov eax, dword [0x100b5400]
mov dword [ebp - 0x16c], 0x100b4820
mov dword [ebp - 0x168], str.autoJoinWorld
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 1
mov dword [ebp - 0x15c], 0x100a46e0
mov dword [ebp - 0x158], 0x10043a20
cmp eax, dword [0x100b5404]
je 0x10052c66
mov dword [eax], 0x100b4820
mov dword [eax + 4], str.autoJoinWorld
mov dword [eax + 8], 0
mov dword [eax + 0xc], 1
mov dword [eax + 0x10], 0x100a46e0
mov dword [eax + 0x14], 0x10043a20
add dword [0x100b5400], 0x18
jmp 0x10052c73
lea ecx, [ebp - 0x16c]
push ecx
push eax
call fcn.1007aad0
call fcn.100404c0
push fcn.100438f0
lea ecx, [eax + 0x18]
call fcn.10040d80
call fcn.100404c0
mov eax, dword [0x100b53f4]
mov dword [ebp - 0x154], str.ENDLESS_CHARACTER_BOOST_RESULT
cmp eax, dword [0x100b53f8]
je 0x10052cb0
mov dword [eax], str.ENDLESS_CHARACTER_BOOST_RESULT
add dword [0x100b53f4], 4
jmp 0x10052cbd
lea ecx, [ebp - 0x154]
push ecx
push eax
call fcn.1007a9f0
call fcn.10043150
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x148], str.BoostCharacter
push ecx
mov esi, eax
mov dword [ebp - 0x144], 0x10043ba0
lea eax, [ebp - 0x138]
mov dword [ebp - 0x140], str.GetBoostCount
push eax
push ecx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x13c], 0x10043cc0
call fcn.10043470
sub esp, 0x18
mov dword [ebp - 4], 1
mov eax, esp
xorps xmm0, xmm0
mov ecx, esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x160]
push eax
push 2
call fcn.1007afc0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x160]
test ecx, ecx
je 0x10052d86
mov eax, dword [ebp - 0x158]
sub eax, ecx
sar eax, 3
lea edx, [eax*8]
mov eax, ecx
cmp edx, 0x1000
jb 0x10052d7c
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10052d7c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1008095a
add esp, 8
mov eax, dword [0x100b4bbc]
mov dword [ebp - 0x154], 0x10043b60
mov dword [ebp - 0x170], 0x531
cmp eax, dword [0x100b4bc0]
je 0x10052dbd
mov dword [eax], 0x531
mov dword [eax + 4], 0x10043b60
add dword [0x100b4bbc], 8
jmp 0x10052dd1
lea ecx, [ebp - 0x154]
push ecx
lea ecx, [ebp - 0x170]
push ecx
push eax
call fcn.10060930
sub esp, 0xc
mov edx, 0x10043d10
mov ecx, 0x100b30b8
call fcn.1007e0e0
call fcn.100470a0
call fcn.10043150
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x80], str.GetSpellRequiredLevel
push ecx
mov esi, eax
mov dword [ebp - 0x7c], 0x10055050
lea eax, [ebp - 0x58]
mov dword [ebp - 0x78], str.GetSpellFromTalent
push eax
push ecx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x74], 0x10055250
mov dword [ebp - 0x70], str.GetPetTalentId
mov dword [ebp - 0x6c], 0x10054e90
mov dword [ebp - 0x68], str.GetCVarBitfield
mov dword [ebp - 0x64], 0x10055520
mov dword [ebp - 0x60], str.SetCVarBitfield
mov dword [ebp - 0x5c], 0x10055580
call fcn.10043470
sub esp, 0x18
mov dword [ebp - 4], 2
mov eax, esp
xorps xmm0, xmm0
mov ecx, esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x160]
push eax
push 1
call fcn.1007afc0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x160]
test ecx, ecx
je 0x10052ec9
mov eax, dword [ebp - 0x158]
sub eax, ecx
sar eax, 3
lea edx, [eax*8]
mov eax, ecx
cmp edx, 0x1000
jb 0x10052ebf
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10052ebf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1008095a
add esp, 8
lea ecx, [ebp - 0x154]
mov word [ebp - 0x154], 0x3036
xor edi, edi
lea esi, [ebp - 0x152]
xor eax, eax
mov dword [ebp - 0x1c], edi
sub esi, ecx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], eax
mov ecx, eax
je 0x10052f14
push esi
lea ecx, [ebp - 0x1c]
call fcn.10042910
mov edi, dword [ebp - 0x1c]
lea eax, [ebp - 0x154]
push esi
push eax
push edi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x14]
lea ecx, [edi + esi]
add esp, 0xc
mov dword [ebp - 4], 3
mov dword [ebp - 0x164], 0x4648b3
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x160], edi
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x158], eax
push ecx
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x170], 0
lea edi, [ebp - 0x164]
lea esi, [ebp - 0x154]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 5
call fcn.100426e0
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0xc8]
call fcn.10041730
lea ecx, [ebp - 0x3c]
call fcn.100420c0
lea ecx, [ebp - 0x44]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 9
push eax
call fcn.10080db5
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0xa
call fcn.10041810
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xa4]
call fcn.100421b0
lea ecx, [ebp - 0xbc]
call fcn.100420c0
lea ecx, [ebp - 0xc4]
call fcn.100421b0
sub esp, 0xc
mov edx, 0x100555f0
mov ecx, 0x100b30dc
call fcn.1007e0e0
sub esp, 0xc
mov edx, 0x10055610
mov ecx, 0x100b30d8
call fcn.1007e0e0
call fcn.100404c0
push 0x10041cd0
lea ecx, [eax + 0xc]
call fcn.100425c0
xor esi, esi
mov dword [ebp - 0x18], 0xc029c033
xor eax, eax
mov word [ebp - 0x14], 0x9090
lea ecx, [ebp - 0x18]
mov byte [ebp - 0x12], 0x90
lea edi, [ebp - 0x11]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], esi
sub edi, ecx
mov dword [ebp - 0x20], eax
mov ecx, eax
je 0x1005307e
push edi
lea ecx, [ebp - 0x28]
call fcn.10042910
mov esi, dword [ebp - 0x28]
lea eax, [ebp - 0x18]
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x20]
lea ecx, [esi + edi]
add esp, 0xc
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x164], 0x5191c3
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x160], esi
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x158], eax
push ecx
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x154], 0
lea edi, [ebp - 0x164]
lea esi, [ebp - 0x154]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xd
call fcn.100426e0
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x108]
call fcn.10041730
lea ecx, [ebp - 0x3c]
call fcn.100420c0
lea ecx, [ebp - 0x44]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x11
push eax
call fcn.10080db5
sub esp, 0xc
mov dword [0x100b4600], 0x525fc0
mov edx, 0x10041e20
mov ecx, 0x100b4600
call fcn.1007e0e0
lea ecx, [ebp - 0xdc]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xe4]
call fcn.100421b0
lea ecx, [ebp - 0xfc]
call fcn.100420c0
lea ecx, [ebp - 0x104]
call fcn.100421b0
call fcn.100404c0
push 0x10055c30
lea ecx, [eax + 0x34]
call fcn.10040d80
mov eax, 0x10060ab0
xor edi, edi
cmp dword [eax], 0xcccccccc
je 0x100531ac
mov eax, 0x10060ab0
nop dword [eax + eax]
lea eax, [eax + 1]
inc edi
cmp dword [eax], 0xcccccccc
jne 0x100531a0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x154]
push eax
push 0x40
push edi
push 0x6226e3
call esi
push edi
push 0x10060ab0
push 0x6226e3
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x154]
push eax
push dword [ebp - 0x154]
push edi
push 0x6226e3
call esi
sub esp, 0xc
mov edx, 0x10060ad0
mov ecx, 0x100b3100
call fcn.1007e0e0
call fcn.10043150
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x148], str.SetSelectedRacial
push ecx
mov esi, eax
mov dword [ebp - 0x144], 0x10060b00
lea eax, [ebp - 0x138]
mov dword [ebp - 0x140], str.GetSelectedRacial
push eax
push ecx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x13c], 0x10060c00
call fcn.10043470
sub esp, 0x18
mov dword [ebp - 4], 0x13
mov eax, esp
xorps xmm0, xmm0
mov ecx, esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x160]
push eax
push 2
call fcn.1007afc0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x160]
test ecx, ecx
je 0x100532c6
mov eax, dword [ebp - 0x158]
sub eax, ecx
sar eax, 3
lea edx, [eax*8]
mov eax, ecx
cmp edx, 0x1000
jb 0x100532bc
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100532bc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1008095a
add esp, 8
sub esp, 0xc
mov edx, 0x10060c30
mov ecx, 0x100b3114
call fcn.1007e0e0
sub esp, 0xc
mov edx, 0x10060c50
mov ecx, 0x100b3110
call fcn.1007e0e0
sub esp, 0xc
mov edx, 0x10060c70
mov ecx, 0x100b310c
call fcn.1007e0e0
sub esp, 0xc
mov edx, 0x10060c90
mov ecx, 0x100b3108
call fcn.1007e0e0
call fcn.10043150
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x148], str.IsTalentsResetButtonAvailable
push ecx
mov esi, eax
mov dword [ebp - 0x144], 0x10061660
lea eax, [ebp - 0x138]
mov dword [ebp - 0x140], str.ResetCurrentPlayerSpec
push eax
push ecx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x13c], 0x100616b0
call fcn.10043470
sub esp, 0x18
mov dword [ebp - 4], 0x14
mov eax, esp
xorps xmm0, xmm0
mov ecx, esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x160]
push eax
push 1
call fcn.1007afc0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x160]
test ecx, ecx
je 0x100533d7
mov eax, dword [ebp - 0x158]
sub eax, ecx
sar eax, 3
lea edx, [eax*8]
mov eax, ecx
cmp edx, 0x1000
jb 0x100533cd
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100533cd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1008095a
add esp, 8
call fcn.100688e0
call fcn.10075c90
call fcn.10043150
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x150], str.SetXPModifier
push ecx
mov esi, eax
mov dword [ebp - 0x14c], 0x10076a30
lea eax, [ebp - 0x138]
mov dword [ebp - 0x148], str.GetXPModifier
push eax
push ecx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x144], 0x10076b30
mov dword [ebp - 0x140], str.GetMaxXPModifier
mov dword [ebp - 0x13c], 0x10076b70
call fcn.10043470
sub esp, 0x18
mov dword [ebp - 4], 0x15
mov eax, esp
xorps xmm0, xmm0
mov ecx, esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x160]
push eax
push 1
call fcn.1007afc0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x160]
test ecx, ecx
je 0x100534be
mov eax, dword [ebp - 0x158]
sub eax, ecx
sar eax, 3
lea edx, [eax*8]
mov eax, ecx
cmp edx, 0x1000
jb 0x100534b4
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100534b4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1008095a
add esp, 8
call fcn.100404c0
mov eax, dword [0x100b53f4]
mov dword [ebp - 0x154], str.XP_MODIFIER_CHANGED
cmp eax, dword [0x100b53f8]
je 0x100534e9
mov dword [eax], str.XP_MODIFIER_CHANGED
add dword [0x100b53f4], 4
jmp 0x100534f6
lea ecx, [ebp - 0x154]
push ecx
push eax
call fcn.1007a9f0
mov eax, dword [0x100b4bbc]
mov dword [ebp - 0x154], 0x100769c0
mov dword [ebp - 0x170], 0x51f
cmp eax, dword [0x100b4bc0]
je 0x1005352d
mov dword [eax], 0x51f
mov dword [eax + 4], 0x100769c0
add dword [0x100b4bbc], 8
jmp 0x10053541
lea ecx, [ebp - 0x154]
push ecx
lea ecx, [ebp - 0x170]
push ecx
push eax
call fcn.10060930
call fcn.10061110
lea ecx, [ebp - 0x171]
mov byte [ebp - 0x171], 0xeb
push ecx
lea eax, [ebp - 0x170]
push eax
push ecx
lea ecx, [ebp - 0x190]
call fcn.10041e90
mov dword [ebp - 4], 0x16
mov edx, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x138], 0x5f4dbf
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x12c], edx
lea ecx, [ebp - 0x172]
mov byte [ebp - 4], 0x17
push ecx
lea eax, [ebp - 0x171]
mov byte [ebp - 0x172], 0xeb
push eax
push ecx
lea ecx, [ebp - 0x19c]
call fcn.10041e90
mov edx, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x198]
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x128], 0x816625
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x11c], edx
lea ecx, [ebp - 0x173]
mov byte [ebp - 4], 0x19
push ecx
lea eax, [ebp - 0x172]
mov byte [ebp - 0x173], 3
push eax
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.10041e90
mov edx, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x118], 0x81663f
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0x10c], edx
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 0x1b
push ecx
lea eax, [ebp - 0x173]
mov byte [ebp - 0x174], 3
push eax
push ecx
lea ecx, [ebp - 0x58]
call fcn.10041e90
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x108], 0x816695
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x100], ecx
mov dword [ebp - 0xfc], edx
lea ecx, [ebp - 0x16d]
mov byte [ebp - 4], 0x1d
push ecx
lea eax, [ebp - 0x16c]
mov byte [ebp - 0x16d], 0xeb
push eax
push ecx
lea ecx, [ebp - 0x184]
call fcn.10041e90
mov edx, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0xf8], 0x816746
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x184], 0
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xec], edx
lea ecx, [ebp - 0x151]
mov byte [ebp - 4], 0x1f
push ecx
lea eax, [ebp - 0x150]
mov byte [ebp - 0x151], 0xb8
push eax
push ecx
lea ecx, [ebp - 0x144]
call fcn.10041e90
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xe8], 0x81675f
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x144], 0
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 0xdc], edx
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x21
push ecx
lea eax, [ebp - 0x12]
mov dword [ebp - 0x18], 3
push eax
push ecx
lea ecx, [ebp - 0x160]
mov word [ebp - 0x14], 0xedeb
call fcn.10041e90
mov edx, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xd8], 0x816760
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xcc], edx
push ecx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x29
lea edi, [ebp - 0x138]
mov dword [ebp - 0x20], 0
lea esi, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x48]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2a
call fcn.100426e0
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0xc8]
call fcn.10041730
lea ecx, [ebp - 0x3c]
call fcn.100420c0
lea ecx, [ebp - 0x44]
call fcn.100421b0
push fcn.10041c40
push 7
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x2e
push eax
call fcn.10080db5
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x35
call fcn.10041810
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xa4]
call fcn.100421b0
lea ecx, [ebp - 0xbc]
call fcn.100420c0
lea ecx, [ebp - 0xc4]
call fcn.100421b0
lea ecx, [ebp - 0x151]
mov byte [ebp - 0x151], 0xeb
push ecx
lea eax, [ebp - 0x150]
push eax
push ecx
lea ecx, [ebp - 0x160]
call fcn.10041e90
mov dword [ebp - 4], 0x36
mov edx, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x148], 0x816688
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x13c], edx
push ecx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x20], 0
lea edi, [ebp - 0x148]
lea esi, [ebp - 0x138]
call fcn.100423a0
push esi
mov byte [ebp - 4], 0x38
push edi
lea ecx, [ebp - 0x48]
call fcn.100426e0
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x39
push eax
lea ecx, [ebp - 0xc8]
call fcn.10041730
lea ecx, [ebp - 0x3c]
call fcn.100420c0
lea ecx, [ebp - 0x44]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x3c
push eax
call fcn.10080db5
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x3d
call fcn.10041810
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xa4]
call fcn.100421b0
lea ecx, [ebp - 0xbc]
call fcn.100420c0
lea ecx, [ebp - 0xc4]
call fcn.100421b0
lea ecx, [ebp - 0x154]
mov word [ebp - 0x154], 0x80
push ecx
lea eax, [ebp - 0x152]
push eax
push ecx
lea ecx, [ebp - 0x160]
call fcn.10041e90
mov dword [ebp - 4], 0x3e
mov edx, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x148], 0x6e9b97
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x13c], edx
push ecx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x3f
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x20], 0
lea edi, [ebp - 0x148]
lea esi, [ebp - 0x138]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x40
call fcn.100426e0
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x41
push eax
lea ecx, [ebp - 0xc8]
call fcn.10041730
lea ecx, [ebp - 0x3c]
call fcn.100420c0
lea ecx, [ebp - 0x44]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x44
push eax
call fcn.10080db5
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x45
call fcn.10041810
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xa4]
call fcn.100421b0
lea ecx, [ebp - 0xbc]
call fcn.100420c0
lea ecx, [ebp - 0xc4]
call fcn.100421b0
lea ecx, [ebp - 0x170]
mov word [ebp - 0x170], 0x2710
push ecx
lea eax, [ebp - 0x16e]
push eax
push ecx
lea ecx, [ebp - 0x160]
call fcn.10041e90
mov dword [ebp - 4], 0x46
mov edx, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x88], 0x414d37
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x7c], edx
lea ecx, [ebp - 0x151]
mov byte [ebp - 4], 0x47
push ecx
lea eax, [ebp - 0x150]
mov byte [ebp - 0x151], 0x34
push eax
push ecx
lea ecx, [ebp - 0x144]
call fcn.10041e90
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x78], 0x8ca5f0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x6c], edx
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x49
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x18], 0x461c4000
push eax
push ecx
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x14], 0x461c4000
call fcn.10041e90
mov edx, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x180]
mov dword [ebp - 0x68], 0xa3db0c
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], edx
push ecx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x4d
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x20], 0
lea edi, [ebp - 0x88]
lea esi, [ebp - 0x58]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x4e
call fcn.100426e0
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x4f
push eax
lea ecx, [ebp - 0x108]
call fcn.10041730
lea ecx, [ebp - 0x3c]
call fcn.100420c0
lea ecx, [ebp - 0x44]
call fcn.100421b0
push fcn.10041c40
push 3
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x52
push eax
call fcn.10080db5
lea ecx, [ebp - 0xdc]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xe4]
call fcn.100421b0
lea ecx, [ebp - 0xfc]
call fcn.100420c0
lea ecx, [ebp - 0x104]
call fcn.100421b0
lea ecx, [ebp - 0x151]
mov byte [ebp - 0x151], 0
push ecx
lea eax, [ebp - 0x150]
push eax
push ecx
lea ecx, [ebp - 0x160]
call fcn.10041e90
mov dword [ebp - 4], 0x56
mov edx, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x148], 0x71f89e
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x13c], edx
mov byte [ebp - 4], 0x57
lea edi, [ebp - 0x148]
lea esi, [ebp - 0x138]
mov dword [ebp - 0x20], 0
push ecx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x48]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x58
call fcn.100426e0
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x59
push eax
lea ecx, [ebp - 0xc8]
call fcn.10041730
lea ecx, [ebp - 0x3c]
call fcn.100420c0
lea ecx, [ebp - 0x44]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x5c
push eax
call fcn.10080db5
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x5d
call fcn.10041810
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xa4]
call fcn.100421b0
lea ecx, [ebp - 0xbc]
call fcn.100420c0
lea ecx, [ebp - 0xc4]
call fcn.100421b0
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], 0x90909090
push ecx
lea eax, [ebp - 0x28]
mov dword [ebp - 0x44], 0x90909090
push eax
push ecx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x40], 0x90909090
mov dword [ebp - 0x3c], 0x90909090
mov dword [ebp - 0x38], 0x90909090
mov dword [ebp - 0x34], 0x90909090
mov dword [ebp - 0x30], 0x90909090
mov dword [ebp - 0x2c], 0x90909090
call fcn.10041e90
mov dword [ebp - 4], 0x5e
mov edx, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xb8], 0x720e68
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0xac], edx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x5f
push ecx
lea eax, [ebp - 0x4b]
mov dword [ebp - 0x58], 0x90909090
push eax
mov dword [ebp - 0x54], 0x90909090
mov dword [ebp - 0x50], 0x90909090
mov byte [ebp - 0x4c], 0x90
push ecx
lea ecx, [ebp - 0x144]
call fcn.10041e90
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xa8], 0x524dc1
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x144], 0
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x9c], edx
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x61
push ecx
lea eax, [ebp - 0x11]
mov dword [ebp - 0x18], 0x90909090
push eax
push ecx
lea ecx, [ebp - 0x184]
mov word [ebp - 0x14], 0x9090
mov byte [ebp - 0x12], 0x90
call fcn.10041e90
mov edx, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x98], 0x524276
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x8c], edx
push ecx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x65
push eax
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x20], 0
lea edi, [ebp - 0xb8]
lea esi, [ebp - 0x88]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x66
call fcn.100426e0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x67
push eax
lea ecx, [ebp - 0x108]
call fcn.10041730
lea ecx, [ebp - 0x6c]
call fcn.100420c0
lea ecx, [ebp - 0x74]
call fcn.100421b0
push fcn.10041c40
push 3
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x6a
push eax
call fcn.10080db5
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0x6d
call fcn.10041810
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdc]
call fcn.100420c0
lea ecx, [ebp - 0xe4]
call fcn.100421b0
lea ecx, [ebp - 0xfc]
call fcn.100420c0
lea ecx, [ebp - 0x104]
call fcn.100421b0
lea ecx, [ebp - 0x151]
mov byte [ebp - 0x151], 0
push ecx
lea eax, [ebp - 0x150]
push eax
push ecx
lea ecx, [ebp - 0x160]
call fcn.10041e90
mov dword [ebp - 4], 0x6e
mov edx, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x148], 0x6b2ae0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x13c], edx
push ecx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x6f
push eax
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x20], 0
lea edi, [ebp - 0x148]
lea esi, [ebp - 0x138]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x70
call fcn.100426e0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x71
push eax
lea ecx, [ebp - 0x108]
call fcn.10041730
lea ecx, [ebp - 0x6c]
call fcn.100420c0
lea ecx, [ebp - 0x74]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x74
push eax
call fcn.10080db5
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0x75
call fcn.10041810
lea ecx, [ebp - 0xdc]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xe4]
call fcn.100421b0
lea ecx, [ebp - 0xfc]
call fcn.100420c0
lea ecx, [ebp - 0x104]
call fcn.100421b0
lea ecx, [ebp - 0x151]
mov byte [ebp - 0x151], 0xeb
lea eax, [ebp - 0x150]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x160]
call fcn.10041e90
mov dword [ebp - 4], 0x76
mov edx, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x148], 0x401a94
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x13c], edx
push ecx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x77
push eax
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x20], 0
lea edi, [ebp - 0x148]
lea esi, [ebp - 0x138]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x78
call fcn.100426e0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x79
push eax
lea ecx, [ebp - 0x108]
call fcn.10041730
lea ecx, [ebp - 0x6c]
call fcn.100420c0
lea ecx, [ebp - 0x74]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x7c
push eax
call fcn.10080db5
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0x7d
call fcn.10041810
lea ecx, [ebp - 0xdc]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xe4]
call fcn.100421b0
lea ecx, [ebp - 0xfc]
call fcn.100420c0
lea ecx, [ebp - 0x104]
call fcn.100421b0
lea ecx, [ebp - 0x151]
mov byte [ebp - 0x151], 0xeb
push ecx
lea eax, [ebp - 0x150]
push eax
push ecx
lea ecx, [ebp - 0x160]
call fcn.10041e90
mov dword [ebp - 4], 0x7e
mov edx, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x148], 0x7561bf
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x13c], edx
push ecx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x7f
push eax
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x20], 0
lea edi, [ebp - 0x148]
lea esi, [ebp - 0x138]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x80
call fcn.100426e0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x81
push eax
lea ecx, [ebp - 0x108]
call fcn.10041730
lea ecx, [ebp - 0x6c]
call fcn.100420c0
lea ecx, [ebp - 0x74]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x84
push eax
call fcn.10080db5
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0x85
call fcn.10041810
lea ecx, [ebp - 0xdc]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xe4]
call fcn.100421b0
lea ecx, [ebp - 0xfc]
call fcn.100420c0
lea ecx, [ebp - 0x104]
call fcn.100421b0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x90909090
push ecx
lea eax, [ebp - 0x11]
mov dword [ebp - 0x18], 0x90909090
push eax
push ecx
lea ecx, [ebp - 0x160]
mov word [ebp - 0x14], 0x9090
mov byte [ebp - 0x12], 0x90
call fcn.10041e90
mov dword [ebp - 4], 0x86
mov edx, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x148], 0x6e2867
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x13c], edx
mov byte [ebp - 4], 0x87
lea edi, [ebp - 0x148]
lea esi, [ebp - 0x138]
mov dword [ebp - 0x20], 0
push ecx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x78]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x88
call fcn.100426e0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x89
push eax
lea ecx, [ebp - 0x108]
call fcn.10041730
lea ecx, [ebp - 0x6c]
call fcn.100420c0
lea ecx, [ebp - 0x74]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x8c
push eax
call fcn.10080db5
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0x8d
call fcn.10041810
lea ecx, [ebp - 0xdc]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xe4]
call fcn.100421b0
lea ecx, [ebp - 0xfc]
call fcn.100420c0
lea ecx, [ebp - 0x104]
call fcn.100421b0
lea ecx, [ebp - 0x151]
mov byte [ebp - 0x151], 0xeb
push ecx
lea eax, [ebp - 0x150]
push eax
push ecx
lea ecx, [ebp - 0x190]
call fcn.10041e90
mov dword [ebp - 4], 0x8e
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x170]
mov dword [ebp - 0x164], 0x73e3c9
push eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x188], 0
push eax
push ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x190], 0
call fcn.10042f90
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x164]
push eax
push ecx
lea ecx, [ebp - 0x78]
call fcn.10042050
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x90
push eax
lea ecx, [ebp - 0x108]
call fcn.10041730
lea ecx, [ebp - 0x78]
call fcn.100419c0
push fcn.10041c40
push 1
push 0x10
lea eax, [ebp - 0x164]
mov byte [ebp - 4], 0x93
push eax
call fcn.10080db5
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x94
call fcn.10041e40
lea ecx, [ebp - 0x108]
call fcn.10041810
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], 0xffffffff
call fcn.10041ca0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x14], 0x46e499
push ecx
lea eax, [ebp - 0x1f]
mov dword [ebp - 0x24], 0x105
push eax
push ecx
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x20], 0
call fcn.10041e90
lea eax, [ebp - 0x160]
mov dword [ebp - 4], 0x95
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x148]
call fcn.10054990
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x148]
push eax
push ecx
lea ecx, [ebp - 0x78]
call fcn.10042050
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x97
push eax
lea ecx, [ebp - 0x108]
call fcn.10041730
lea ecx, [ebp - 0x78]
call fcn.100419c0
push fcn.10041c40
push 1
push 0x10
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x9a
push eax
call fcn.10080db5
lea ecx, [ebp - 0x160]
call fcn.10041e40
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], 0xffffffff
call fcn.10041ca0
mov dword [ebp - 0x14], 0x50d641
lea ecx, [ebp - 0x175]
mov byte [ebp - 0x175], 0xeb
push ecx
lea eax, [ebp - 0x174]
push eax
push ecx
lea ecx, [ebp - 0x160]
call fcn.10041e90
lea eax, [ebp - 0x160]
mov dword [ebp - 4], 0x9c
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.10054990
lea eax, [ebp - 0x1a8]
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0x1b8]
push eax
push ecx
lea ecx, [ebp - 0x1d8]
call fcn.10042050
lea eax, [ebp - 0x1d8]
mov byte [ebp - 4], 0x9e
push eax
lea ecx, [ebp - 0x218]
call fcn.10041730
lea ecx, [ebp - 0x1d8]
call fcn.100419c0
push fcn.10041c40
push 1
push 0x10
lea eax, [ebp - 0x1b8]
mov byte [ebp - 4], 0xa1
push eax
call fcn.10080db5
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0xa2
call fcn.10041e40
lea ecx, [ebp - 0x218]
call fcn.10041810
lea ecx, [ebp - 0x218]
mov dword [ebp - 4], 0xffffffff
call fcn.10041ca0
call fcn.100404c0
push 0x10052720
push 0x100a4c74
sub esp, 8
push str.mouseResetFix
push 0x100b4854
call fcn.10079b30
call fcn.100404c0
push 0x10052b00
push 0x100a4c74
sub esp, 8
push str.actionButtonUseKeyDown
push 0x100b4850
call fcn.10079b30
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10080947
mov esp, ebp
pop ebp
ret