Function at 0x10074f20
Capabilities:
Check os version
Extract resource via kernel32 functions

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101b4f74
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x520
mov eax, dword [0x10224008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x3b8], edi
mov dword [ebp - 0x394], 0
mov dword [ebp - 4], 0
mov esi, dword [edi]
push dword [esi + 4]
call fcn.10076e30
mov eax, dword [edi]
mov dword [eax + 4], esi
mov eax, dword [edi]
mov dword [eax], esi
mov eax, dword [edi]
mov dword [eax + 8], esi
lea eax, [edi + 8]
mov dword [edi + 4], 0
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x390], eax
mov dword [ebp - 4], 1
mov ecx, eax
mov esi, dword [eax]
push dword [esi + 4]
call fcn.10076b90
mov eax, dword [edi + 8]
mov dword [eax + 4], esi
mov eax, dword [edi + 8]
mov dword [eax], esi
mov eax, dword [edi + 8]
mov dword [eax + 8], esi
lea eax, [edi + 0x10]
mov dword [edi + 0xc], 0
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x3bc], eax
mov dword [ebp - 4], 2
mov ecx, eax
mov esi, dword [eax]
push dword [esi + 4]
call fcn.10076b90
mov eax, dword [edi + 0x10]
mov dword [eax + 4], esi
mov eax, dword [edi + 0x10]
mov dword [eax], esi
mov eax, dword [edi + 0x10]
mov dword [eax + 8], esi
lea eax, [edi + 0x18]
mov dword [edi + 0x14], 0
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 4], 3
mov ecx, eax
mov esi, dword [eax]
push dword [esi + 4]
call fcn.10076b90
mov eax, dword [edi + 0x18]
mov dword [eax + 4], esi
mov eax, dword [edi + 0x18]
mov dword [eax], esi
mov eax, dword [edi + 0x18]
mov dword [eax + 8], esi
mov dword [edi + 0x1c], 0
add edi, 0x20
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x3c4], edi
mov dword [ebp - 4], 4
mov ecx, edi
mov esi, dword [edi]
push dword [esi + 4]
call fcn.10076b90
mov eax, dword [edi]
push 0x118
push 0
mov dword [eax + 4], esi
mov eax, dword [edi]
mov dword [eax], esi
mov eax, dword [edi]
mov dword [eax + 8], esi
lea eax, [ebp - 0x384]
mov dword [edi + 4], 0
mov dword [ebp - 4], 0xffffffff
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x388], 0x11c
lea eax, [ebp - 0x388]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x100751b8
cmp dword [ebp - 0x384], 6
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
ja 0x100750e0
jne 0x10075161
cmp dword [ebp - 0x380], 2
jb 0x10075161
push str.kernel32.dll
call edi
mov esi, eax
test esi, esi
je 0x10075161
push 0x10
push 1
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x10075161
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x10075161
movups xmm0, xmmword [0x101e4238]
push eax
movups xmmword [ebp - 0x38], xmm0
movups xmm0, xmmword [0x101e4248]
movups xmmword [ebp - 0x28], xmm0
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
test esi, esi
je 0x10075161
lea eax, [ebp - 0x38]
push eax
lea ecx, [esi + 6]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x10075161
cmp word [esi + 2], ax
jbe 0x10075161
movzx edx, word [esi + 0x32]
movzx ecx, word [esi + 0x30]
movzx eax, word [esi + 0x36]
mov dword [ebp - 0x384], edx
mov dword [ebp - 0x380], ecx
mov dword [ebp - 0x37c], eax
push 0x101e0f40
call edi
push str.RtlGetVersion
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x100751b8
push 0x118
lea eax, [ebp - 0x264]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x268], 0x11c
lea eax, [ebp - 0x268]
push eax
call esi
mov ecx, dword [ebp - 0x37c]
test eax, eax
cmove ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x37c], ecx
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
movq qword [ebp - 0x44], xmm0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x384]
cmp eax, 0xa
jb 0x1007540b
push str.9E04CAB2_CC14_11DF_BB8C_A2F1DED72085
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x1007521a
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x10075223
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.A3D53349_6E61_4557_8FC7_0028EDCEEBF6
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x1007525a
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x10075263
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.B267E3AD_A825_4A09_82B9_EEC22AA3B847
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x1007529a
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x100752a3
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.BCB48336_4DDD_48FF_BB0B_D3190DACB3E2
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x100752da
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x100752e3
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.CAA59E3C_4792_41A5_9909_6A6A8D32490E
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x1007531a
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x10075323
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.CEBFF5CD_ACE2_4F4F_9178_9926F41749EA
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x1007535a
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x10075363
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.F2A1CB5A_E3CC_4A2E_AF9D_505A7009D442
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x1007539a
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x100753a3
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.F4E57C4B_2036_45F0_A9AB_443BCFE33D9F
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x100753da
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x100753e3
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.FA99DFC7_6AC2_453A_A5E2_5E2AFF4507BD
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0xe
jmp 0x100756b0
cmp eax, 6
ja 0x100754dc
jne 0x10075483
mov eax, dword [ebp - 0x380]
cmp eax, 2
jae 0x100754dc
cmp eax, 1
jb 0x10075483
push str.CEBFF5CD_ACE2_4F4F_9178_9926F41749EA
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x10075452
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x1007545b
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.F4E57C4B_2036_45F0_A9AB_443BCFE33D9F
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0x18
jmp 0x100756b0
push str.5E6AB780_7743_11CF_A12B_00AA004AE837
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x100754ab
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x100754b4
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.75048700_EF1F_11D0_9888_006097DEACF9
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0x1a
jmp 0x100756b0
push str.9E04CAB2_CC14_11DF_BB8C_A2F1DED72085
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x10075504
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x1007550d
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.A3D53349_6E61_4557_8FC7_0028EDCEEBF6
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x10075544
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x1007554d
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.B267E3AD_A825_4A09_82B9_EEC22AA3B847
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x10075584
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x1007558d
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.CAA59E3C_4792_41A5_9909_6A6A8D32490E
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x100755c4
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x100755cd
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.CEBFF5CD_ACE2_4F4F_9178_9926F41749EA
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x10075604
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x1007560d
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.F2A1CB5A_E3CC_4A2E_AF9D_505A7009D442
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x10075644
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x1007564d
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.F4E57C4B_2036_45F0_A9AB_443BCFE33D9F
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x10075684
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x1007568d
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
push str.FA99DFC7_6AC2_453A_A5E2_5E2AFF4507BD
lea ecx, [ebp - 0x3ac]
call fcn.10004fc0
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x40]
push eax
cmp dword [ebp - 0x3c], ecx
je 0x100756c4
call fcn.10006a80
add dword [ebp - 0x40], 0x18
jmp 0x100756cd
push ecx
lea ecx, [ebp - 0x44]
call fcn.1006e770
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
mov edi, dword [ebp - 0x44]
cmp edi, dword [ebp - 0x40]
je 0x10075955
lea ecx, [ebp - 0x68]
call fcn.10005010
mov byte [ebp - 4], 0x1b
mov eax, edi
cmp dword [edi + 0x14], 8
jb 0x100756fe
mov eax, dword [edi]
push eax
lea eax, [ebp - 0x68]
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerUserAssist_scount
push eax
call fcn.100b6030
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
movq qword [ebp - 0x50], xmm0
add esp, 0xc
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x68]
push eax
push SysReAllocString
call fcn.1006f5a0
lea ecx, [ebp - 0x148]
call fcn.10005010
lea ecx, [ebp - 0x130]
call fcn.10005010
lea ecx, [ebp - 0x118]
call fcn.10005010
xorps xmm0, xmm0
lea ecx, [ebp - 0xf8]
movlpd qword [ebp - 0x100], xmm0
call fcn.10005010
lea ecx, [ebp - 0xe0]
call fcn.10005010
lea ecx, [ebp - 0xc8]
call fcn.10005010
lea ecx, [ebp - 0xb0]
call fcn.10005010
lea ecx, [ebp - 0x98]
call fcn.10005010
lea ecx, [ebp - 0x80]
call fcn.10005010
mov byte [ebp - 4], 0x1d
mov esi, dword [ebp - 0x50]
cmp esi, dword [ebp - 0x4c]
je 0x100758cd
nop word [eax + eax]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x38c], esp
push esi
call fcn.10006ac0
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x1e
push eax
mov byte [ebp - 4], 0x1d
call fcn.10076040
push edx
push eax
push esi
push edi
lea ecx, [ebp - 0x148]
call fcn.10094f40
push esi
lea ecx, [ebp - 0x248]
call fcn.10006ac0
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x230]
call fcn.10078870
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x248]
push dword [ebp - 0x390]
push eax
push ecx
mov ecx, dword [ebp - 0x3b8]
lea eax, [ebp - 0x3b4]
push eax
call fcn.10078ac0
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x23
call fcn.10004f10
lea ecx, [ebp - 0x180]
call fcn.10004f10
lea ecx, [ebp - 0x198]
call fcn.10004f10
lea ecx, [ebp - 0x1b0]
call fcn.10004f10
lea ecx, [ebp - 0x1c8]
call fcn.10004f10
lea ecx, [ebp - 0x1e0]
call fcn.10004f10
lea ecx, [ebp - 0x200]
call fcn.10004f10
lea ecx, [ebp - 0x218]
call fcn.10004f10
lea ecx, [ebp - 0x230]
call fcn.10004f10
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x22
call fcn.10004f10
add esi, 0x18
mov byte [ebp - 4], 0x1d
cmp esi, dword [ebp - 0x4c]
jne 0x100757d0
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x24
call fcn.10004f10
lea ecx, [ebp - 0x98]
call fcn.10004f10
lea ecx, [ebp - 0xb0]
call fcn.10004f10
lea ecx, [ebp - 0xc8]
call fcn.10004f10
lea ecx, [ebp - 0xe0]
call fcn.10004f10
lea ecx, [ebp - 0xf8]
call fcn.10004f10
lea ecx, [ebp - 0x118]
call fcn.10004f10
lea ecx, [ebp - 0x130]
call fcn.10004f10
lea ecx, [ebp - 0x148]
call fcn.10004f10
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x1b
call fcn.10048a60
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 5
call fcn.10004f10
add edi, 0x18
cmp edi, dword [ebp - 0x40]
jne 0x100756e8
mov eax, dword [ebp - 0x3b8]
mov eax, dword [eax]
mov esi, dword [eax]
cmp esi, eax
je 0x10075e5a
mov edi, dword [ebp - 0x394]
nop dword [eax]
lea eax, [esi + 0x58]
push eax
lea ecx, [ebp - 0x68]
call fcn.10006ac0
or edi, 1
mov dword [ebp - 0x394], edi
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x58], 0
mov eax, dword [esi + 0x70]
mov dword [ebp - 0x3b0], eax
mov eax, dword [esi + 0x74]
mov dword [ebp - 0x38c], eax
je 0x10075a03
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x460]
call fcn.10006ac0
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x444], eax
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x460]
push dword [ebp - 0x390]
push eax
push ecx
mov ecx, dword [ebp - 0x390]
lea eax, [ebp - 0x508]
push eax
call fcn.10078c80
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 0x28
call fcn.10004f10
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 5
call fcn.10004f10
lea eax, [esi + 0x78]
push eax
lea ecx, [ebp - 0x3dc]
call fcn.10006ac0
or edi, 2
mov dword [ebp - 0x394], edi
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0x3cc], 0
mov eax, dword [esi + 0x70]
mov dword [ebp - 0x38c], eax
mov eax, dword [esi + 0x74]
mov dword [ebp - 0x3b0], eax
je 0x10075aab
lea eax, [ebp - 0x3dc]
push eax
lea ecx, [ebp - 0x480]
call fcn.10006ac0
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x464], eax
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x480]
push dword [ebp - 0x390]
push eax
push ecx
mov ecx, dword [ebp - 0x3bc]
lea eax, [ebp - 0x510]
push eax
call fcn.10078c80
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x2c
call fcn.10004f10
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 5
call fcn.10004f10
lea eax, [esi + 0x90]
push eax
lea ecx, [ebp - 0x3f4]
call fcn.10006ac0
or edi, 4
mov dword [ebp - 0x394], edi
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0x3e4], 0
mov eax, dword [esi + 0x70]
mov dword [ebp - 0x38c], eax
mov eax, dword [esi + 0x74]
mov dword [ebp - 0x3b0], eax
je 0x10075b59
lea eax, [ebp - 0x3f4]
push eax
lea ecx, [ebp - 0x4a0]
call fcn.10006ac0
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x484], eax
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0x4a0]
push dword [ebp - 0x390]
push eax
push ecx
mov ecx, dword [ebp - 0x3c0]
lea eax, [ebp - 0x518]
push eax
call fcn.10078c80
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x30
call fcn.10004f10
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 5
call fcn.10004f10
lea eax, [esi + 0xa8]
push eax
lea ecx, [ebp - 0x40c]
call fcn.10006ac0
or edi, 8
mov dword [ebp - 0x394], edi
mov byte [ebp - 4], 0x31
cmp dword [ebp - 0x3fc], 0
mov eax, dword [esi + 0x70]
mov dword [ebp - 0x38c], eax
mov eax, dword [esi + 0x74]
mov dword [ebp - 0x3b0], eax
je 0x10075c07
lea eax, [ebp - 0x40c]
push eax
lea ecx, [ebp - 0x4c0]
call fcn.10006ac0
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x4a4], eax
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x4c0]
push dword [ebp - 0x390]
push eax
push ecx
mov ecx, dword [ebp - 0x3c4]
lea eax, [ebp - 0x530]
push eax
call fcn.10078c80
lea ecx, [ebp - 0x4c0]
mov byte [ebp - 4], 0x34
call fcn.10004f10
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 5
call fcn.10004f10
lea eax, [esi + 0xc0]
push eax
lea ecx, [ebp - 0x424]
call fcn.10006ac0
or edi, 0x10
mov dword [ebp - 0x394], edi
mov byte [ebp - 4], 0x35
cmp dword [ebp - 0x414], 0
mov eax, dword [esi + 0x70]
mov dword [ebp - 0x38c], eax
mov eax, dword [esi + 0x74]
mov dword [ebp - 0x3b0], eax
je 0x10075cb5
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.10006ac0
mov byte [ebp - 4], 0x36
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x4c4], eax
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x4e0]
push dword [ebp - 0x390]
push eax
push ecx
mov ecx, dword [ebp - 0x3bc]
lea eax, [ebp - 0x528]
push eax
call fcn.10078c80
lea ecx, [ebp - 0x4e0]
mov byte [ebp - 4], 0x38
call fcn.10004f10
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 5
call fcn.10004f10
lea eax, [esi + 0xd8]
push eax
lea ecx, [ebp - 0x43c]
call fcn.10006ac0
or edi, 0x20
mov dword [ebp - 0x394], edi
mov byte [ebp - 4], 0x39
cmp dword [ebp - 0x42c], 0
mov eax, dword [esi + 0x70]
mov dword [ebp - 0x38c], eax
mov eax, dword [esi + 0x74]
mov dword [ebp - 0x3b0], eax
je 0x10075d63
lea eax, [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x500]
call fcn.10006ac0
mov byte [ebp - 4], 0x3a
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x4e4], eax
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0x500]
push dword [ebp - 0x390]
push eax
push ecx
mov ecx, dword [ebp - 0x3c0]
lea eax, [ebp - 0x520]
push eax
call fcn.10078c80
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x3c
call fcn.10004f10
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 5
call fcn.10004f10
lea eax, [esi + 0xf0]
push eax
lea ecx, [ebp - 0x3ac]
call fcn.10006ac0
or edi, 0x40
mov dword [ebp - 0x394], edi
mov byte [ebp - 4], 0x3d
cmp dword [ebp - 0x39c], 0
mov eax, dword [esi + 0x70]
mov dword [ebp - 0x38c], eax
mov eax, dword [esi + 0x74]
mov dword [ebp - 0x3b0], eax
je 0x10075dff
lea eax, [ebp - 0x3ac]
push eax
lea ecx, [ebp - 0x38]
call fcn.10006ac0
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x38]
push dword [ebp - 0x390]
push eax
push ecx
mov ecx, dword [ebp - 0x3c4]
lea eax, [ebp - 0x4c]
push eax
call fcn.10078c80
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x40
call fcn.10004f10
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 5
call fcn.10004f10
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x10075e34
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x10075e30
cmp esi, dword [eax + 8]
jne 0x10075e30
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x10075e20
mov esi, eax
jmp 0x10075e4c
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x10075e4c
nop
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x10075e40
mov eax, dword [ebp - 0x3b8]
cmp esi, dword [eax]
jne 0x10075970
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0xffffffff
call fcn.10048a60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1019e7b8
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret