Function at 0x10006c98
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x796c
call fcn.10035110
push ebx
push esi
push edi
mov esi, 0x23a5f
push esi
call sub.MSVCRT.dll_malloc
pop ecx
mov dword [ebp - 0x1c], eax
mov byte [eax], 0
inc eax
dec esi
jne 0x10006cb7
push 5
xor eax, eax
pop edi
call fcn.100035eb
inc al
mov byte [ebp - 0xd], al
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov esi, 0x1fe
push esi
mov dword [ebp - 0x7964], eax
lea eax, [ebp - 0x795e]
push ebx
push eax
mov dword [ebp - 0x7968], ebx
mov word [ebp - 0x7960], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x1fa
lea eax, [ebp - 0x775a]
push ebx
push eax
mov word [ebp - 0x7760], 0x4d
mov word [ebp - 0x775e], 0x65
mov word [ebp - 0x775c], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
push esi
lea eax, [ebp - 0x755e]
push ebx
push eax
mov word [ebp - 0x7560], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
cmp dword [ebp + 0xc], 6
je 0x10006d54
cmp dword [ebp + 0xc], 7
mov byte [ebp - 0x7360], 2
jne 0x10006d5b
mov byte [ebp - 0x7360], 1
push 3
xor eax, eax
pop edi
mov byte [ebp - 0x735f], 0x10
mov byte [ebp - 0x735e], 1
call fcn.100035eb
mov cl, byte [ebp - 0x7360]
dec cl
neg cl
push 5
sbb ecx, ecx
and ecx, edi
inc ecx
add ax, cx
mov word [ebp - 0x735c], ax
xor eax, eax
pop edi
call fcn.100035eb
mov byte [ebp - 0x735a], al
xor eax, eax
call fcn.100035eb
push edi
mov byte [ebp - 0x7359], al
pop eax
mov word [ebp - 0x7358], ax
mov word [ebp - 0x7356], ax
mov word [ebp - 0x7354], ax
mov word [ebp - 0x7352], ax
xor eax, eax
mov word [ebp - 0x7350], bx
lea edi, [ebp - 0x734e]
stosw word es:[edi], ax
push esi
lea eax, [ebp - 0x7322]
push ebx
push eax
mov dword [ebp - 0x734c], ebx
mov dword [ebp - 0x7348], ebx
mov dword [ebp - 0x7344], ebx
mov dword [ebp - 0x7340], ebx
mov dword [ebp - 0x733c], ebx
mov dword [ebp - 0x7338], ebx
mov dword [ebp - 0x7334], ebx
mov dword [ebp - 0x7330], ebx
mov dword [ebp - 0x732c], ebx
mov dword [ebp - 0x7328], ebx
mov word [ebp - 0x7324], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x7124], ebx
mov dword [ebp - 0x7120], ebx
mov dword [ebp - 0x711c], ebx
mov dword [ebp - 0x7118], ebx
lea edi, [ebp - 0x7114]
stosd dword es:[edi], eax
push esi
lea eax, [ebp - 0x70e6]
push ebx
push eax
mov dword [ebp - 0x7110], ebx
mov dword [ebp - 0x710c], ebx
mov dword [ebp - 0x7108], ebx
mov dword [ebp - 0x7104], ebx
mov dword [ebp - 0x7100], ebx
mov dword [ebp - 0x70fc], ebx
mov dword [ebp - 0x70f8], ebx
mov dword [ebp - 0x70f4], ebx
mov dword [ebp - 0x70f0], ebx
mov dword [ebp - 0x70ec], ebx
mov word [ebp - 0x70e8], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
push esi
lea eax, [ebp - 0x6ee4]
push ebx
push eax
mov byte [ebp - 0x6ee8], 0x64
mov word [ebp - 0x6ee6], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
xor eax, eax
lea edi, [ebp - 0x6ce6]
stosw word es:[edi], ax
push esi
lea eax, [ebp - 0x6c37]
push ebx
push eax
mov dword [ebp - 0x6ce4], ebx
mov word [ebp - 0x6ce0], bx
mov dword [ebp - 0x6cdc], ebx
mov dword [ebp - 0x6cd8], ebx
mov word [ebp - 0x6cd4], bx
mov dword [ebp - 0x6cd0], ebx
mov dword [ebp - 0x6ccc], ebx
mov word [ebp - 0x6cc8], bx
mov dword [ebp - 0x6cc4], ebx
mov dword [ebp - 0x6cc0], ebx
mov word [ebp - 0x6cbc], bx
mov dword [ebp - 0x6cb8], ebx
mov dword [ebp - 0x6cb4], ebx
mov word [ebp - 0x6cb0], bx
mov dword [ebp - 0x6cac], ebx
mov dword [ebp - 0x6ca8], ebx
mov word [ebp - 0x6ca4], bx
mov dword [ebp - 0x6ca0], ebx
mov dword [ebp - 0x6c9c], ebx
mov word [ebp - 0x6c98], bx
mov dword [ebp - 0x6c94], ebx
mov dword [ebp - 0x6c90], ebx
mov word [ebp - 0x6c8c], bx
mov dword [ebp - 0x6c88], ebx
mov dword [ebp - 0x6c84], ebx
mov word [ebp - 0x6c80], bx
mov dword [ebp - 0x6c7c], ebx
mov dword [ebp - 0x6c78], ebx
mov word [ebp - 0x6c74], bx
mov dword [ebp - 0x6c70], ebx
mov dword [ebp - 0x6c6c], ebx
mov word [ebp - 0x6c68], bx
mov dword [ebp - 0x6c64], ebx
mov dword [ebp - 0x6c60], ebx
mov word [ebp - 0x6c5c], bx
mov dword [ebp - 0x6c58], ebx
mov dword [ebp - 0x6c54], ebx
mov word [ebp - 0x6c50], bx
mov dword [ebp - 0x6c4c], ebx
mov dword [ebp - 0x6c48], 4
mov dword [ebp - 0x6c44], 0x3000000
mov dword [ebp - 0x6c40], 0x4e21
mov byte [ebp - 0x6c3c], bl
mov byte [ebp - 0x6c3b], bl
mov byte [ebp - 0x6c3a], bl
mov word [ebp - 0x6c39], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x14
xor eax, eax
pop edi
call fcn.100035eb
inc al
mov byte [ebp - 0x6a39], al
push 8
xor eax, eax
pop edi
call fcn.100035eb
mov cl, 5
imul cl
add al, byte [ebp - 0xd]
push 6
mov byte [ebp - 0x6a38], al
xor eax, eax
pop edi
call fcn.100035eb
mov cl, 5
imul cl
add al, byte [ebp - 0xd]
mov byte [ebp - 0x6a36], bl
mov byte [ebp - 0x6a37], al
mov byte [ebp - 0x6a35], cl
mov byte [ebp - 0x6a34], cl
mov byte [ebp - 0x6a33], cl
mov eax, 0x3e8
mov dword [ebp - 0x6a03], eax
mov dword [ebp - 0x69ff], eax
mov dword [ebp - 0x69fb], eax
push 9
mov byte [ebp - 0x6a32], cl
mov byte [ebp - 0x6a31], cl
pop ecx
xor eax, eax
mov byte [ebp - 0x6a30], 2
mov dword [ebp - 0x6a2f], ebx
mov dword [ebp - 0x6a2b], ebx
mov dword [ebp - 0x6a27], ebx
mov dword [ebp - 0x6a23], ebx
mov dword [ebp - 0x6a1f], ebx
mov dword [ebp - 0x6a1b], ebx
mov dword [ebp - 0x6a17], ebx
mov dword [ebp - 0x6a13], ebx
mov dword [ebp - 0x6a0f], ebx
mov dword [ebp - 0x6a0b], ebx
mov dword [ebp - 0x6a07], 0x1e
mov dword [ebp - 0x69f7], ebx
mov byte [ebp - 0x69f3], bl
mov dword [ebp - 0x69f2], ebx
lea edi, [ebp - 0x69ee]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
push esi
lea eax, [ebp - 0x6986]
push ebx
push eax
mov byte [ebp - 0x69c9], bl
mov dword [ebp - 0x69c8], ebx
mov dword [ebp - 0x69c4], ebx
mov dword [ebp - 0x69c0], ebx
mov dword [ebp - 0x69bc], ebx
mov dword [ebp - 0x69b8], ebx
mov dword [ebp - 0x69b4], ebx
mov dword [ebp - 0x69b0], ebx
mov dword [ebp - 0x69ac], ebx
mov dword [ebp - 0x69a8], ebx
mov dword [ebp - 0x69a4], ebx
mov dword [ebp - 0x69a0], ebx
mov dword [ebp - 0x699c], ebx
mov byte [ebp - 0x6998], bl
mov dword [ebp - 0x6990], ebx
mov dword [ebp - 0x698c], ebx
mov word [ebp - 0x6988], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
push esi
lea eax, [ebp - 0x6778]
push ebx
push eax
mov dword [ebp - 0x6788], ebx
mov byte [ebp - 0x6784], bl
mov dword [ebp - 0x6780], ebx
mov byte [ebp - 0x677c], bl
mov word [ebp - 0x677a], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
xor eax, eax
lea edi, [ebp - 0x657a]
push 0x3ae8
stosw word es:[edi], ax
lea eax, [ebp - 0x6578]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x2a90], ebx
mov dword [ebp - 0x2a8c], ebx
mov dword [ebp - 0x2a88], ebx
mov dword [ebp - 0x2a84], ebx
mov dword [ebp - 0x2a80], ebx
mov dword [ebp - 0x2a7c], ebx
mov dword [ebp - 0x2a78], ebx
mov dword [ebp - 0x2a74], ebx
mov dword [ebp - 0x2a70], ebx
mov dword [ebp - 0x2a6c], ebx
mov byte [ebp - 0x2a68], bl
push 0x400
lea eax, [ebp - 0x2a20]
push ebx
push eax
mov dword [ebp - 0x2a64], ebx
mov dword [ebp - 0x2a60], ebx
mov byte [ebp - 0x2a5c], bl
mov dword [ebp - 0x2a58], ebx
mov dword [ebp - 0x2a54], ebx
mov dword [ebp - 0x2a50], ebx
mov dword [ebp - 0x2a4c], ebx
mov dword [ebp - 0x2a48], ebx
mov byte [ebp - 0x2a44], bl
mov byte [ebp - 0x2a43], bl
mov byte [ebp - 0x2a42], bl
mov dword [ebp - 0x2a40], ebx
mov dword [ebp - 0x2a3c], ebx
mov byte [ebp - 0x2a38], 5
mov dword [ebp - 0x2a30], ebx
mov dword [ebp - 0x2a2c], ebx
mov dword [ebp - 0x2a28], ebx
mov dword [ebp - 0x2a24], ebx
call sub.MSVCRT.dll_memset
add esp, 0xc
push esi
lea eax, [ebp - 0x261c]
push ebx
push eax
mov byte [ebp - 0x2620], bl
mov word [ebp - 0x261e], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x1ffe
lea eax, [ebp - 0x241c]
push ebx
push eax
mov word [ebp - 0x241e], bx
call sub.MSVCRT.dll_memset
mov ecx, dword [ebp - 0x1c]
xor eax, eax
lea edi, [ebp - 0x41e]
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ecx + 0x187b]
mov dword [ecx + 0x34eb], eax
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffffc
add esp, 0xc
cmp ecx, 3
mov dword [ebp - 0xc], eax
ja 0x100072f4
lea ecx, [ebp - 0x6c44]
push ecx
mov ebx, eax
call fcn.10006219
pop ecx
xor ebx, ebx
jmp 0x10008a49
push ebx
push dword [ebp + 0xc]
mov byte [ebp - 0x70], 0x31
mov byte [ebp - 0x6f], 0x33
mov byte [ebp - 0x6e], 0x36
mov byte [ebp - 0x6d], 0x2e
mov byte [ebp - 0x6c], 0x32
mov byte [ebp - 0x6b], 0x34
mov byte [ebp - 0x6a], 0x33
mov byte [ebp - 0x69], 0x2e
mov byte [ebp - 0x68], 0x38
mov byte [ebp - 0x67], 0x31
mov byte [ebp - 0x66], 0x2e
mov byte [ebp - 0x65], 0x32
mov byte [ebp - 0x64], 0x33
mov byte [ebp - 0x63], 0x38
mov byte [ebp - 0x62], 0x2f
mov byte [ebp - 0x61], 0x6c
mov byte [ebp - 0x60], 0x6f
mov byte [ebp - 0x5f], 0x67
mov byte [ebp - 0x5e], 0x69
mov byte [ebp - 0x5d], 0x6e
mov byte [ebp - 0x5c], 0x2f
mov byte [ebp - 0x5b], 0x61
mov byte [ebp - 0x5a], 0x6c
mov byte [ebp - 0x59], 0x69
mov byte [ebp - 0x58], 0x63
mov byte [ebp - 0x57], 0x69
mov byte [ebp - 0x56], 0x61
mov byte [ebp - 0x55], 0x2f
mov byte [ebp - 0x54], 0x6f
mov byte [ebp - 0x53], 0x66
mov byte [ebp - 0x52], 0x66
mov byte [ebp - 0x51], 0x6c
mov byte [ebp - 0x50], 0x69
mov byte [ebp - 0x4f], 0x6e
mov byte [ebp - 0x4e], 0x65
mov byte [ebp - 0x4d], 0x5f
mov byte [ebp - 0x4c], 0x72
mov byte [ebp - 0x4b], 0x61
mov byte [ebp - 0x4a], 0x6e
mov byte [ebp - 0x49], 0x63
mov byte [ebp - 0x48], 0x68
mov byte [ebp - 0x47], 0x32
mov byte [ebp - 0x46], 0x34
mov byte [ebp - 0x45], 0x2e
mov byte [ebp - 0x44], 0x70
mov byte [ebp - 0x43], 0x68
mov byte [ebp - 0x42], 0x70
mov byte [ebp - 0x41], bl
mov byte [ebp - 0x40], 0x68
mov byte [ebp - 0x3f], 0x74
mov byte [ebp - 0x3e], 0x74
mov byte [ebp - 0x3d], 0x70
mov byte [ebp - 0x3c], 0x73
mov byte [ebp - 0x3b], 0x3a
mov byte [ebp - 0x3a], 0x2f
mov byte [ebp - 0x39], 0x2f
mov byte [ebp - 0x38], 0x61
mov byte [ebp - 0x37], 0x6c
mov byte [ebp - 0x36], 0x69
mov byte [ebp - 0x35], 0x63
mov byte [ebp - 0x34], 0x69
mov byte [ebp - 0x33], 0x61
mov byte [ebp - 0x32], 0x67
mov byte [ebp - 0x31], 0x61
mov byte [ebp - 0x30], 0x6d
mov byte [ebp - 0x2f], 0x65
mov byte [ebp - 0x2e], 0x2e
mov byte [ebp - 0x2d], 0x63
mov byte [ebp - 0x2c], 0x6f
mov byte [ebp - 0x2b], 0x6d
mov byte [ebp - 0x2a], bl
call fcn.10003ab6
mov ecx, dword [0x1004a3c0]
push dword [ecx]
mov dword [ebp - 0xa8], eax
push 0x10036590
push dword [eax]
push 0x1003659c
push str._r_nContent_Type:__r_nContent_Length:__r_n_r_n
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
push dword [ebp + 8]
call fcn.1000331f
mov edi, eax
add esp, 0x28
cmp edi, ebx
mov dword [ebp - 0x18], edi
je 0x10008a26
lea eax, [ebp - 0x7968]
push eax
push 0x100365f4
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x7964]
push eax
push str.memberno
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x7960]
push eax
push str.authkey
push dword [edi]
call fcn.10006669
add esp, 0xc
lea eax, [ebp - 0x7760]
push eax
push str.name
push dword [edi]
call fcn.10006669
add esp, 0xc
lea eax, [ebp - 0x7560]
push eax
push str.signature
push dword [edi]
call fcn.10006669
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0xf0]
push ecx
push 0x10036620
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x100074f4
lea eax, [ebp - 0x7360]
push eax
lea ecx, [ebp - 0xf0]
call fcn.1000664a
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x168]
push ecx
push 0x10036624
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10007524
lea eax, [ebp - 0x735f]
push eax
lea ecx, [ebp - 0x168]
call fcn.1000664a
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x178]
push ecx
push str.privacy
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10007554
lea eax, [ebp - 0x735e]
push eax
lea ecx, [ebp - 0x178]
call fcn.1000664a
add esp, 4
lea eax, [ebp - 0x735c]
push eax
push str.voice
push dword [edi]
call fcn.1000660f
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x188]
push ecx
push str.body.eyes
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x1000759a
lea eax, [ebp - 0x735a]
push eax
lea ecx, [ebp - 0x188]
call fcn.1000664a
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0xe0]
push ecx
push str.body.mouth
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x100075ca
lea eax, [ebp - 0x7359]
push eax
lea ecx, [ebp - 0xe0]
call fcn.1000664a
add esp, 4
lea eax, [ebp - 0x7358]
push eax
push str.body.head
push dword [edi]
call fcn.1000660f
add esp, 0xc
lea eax, [ebp - 0x7356]
push eax
push str.body.height
push dword [edi]
call fcn.1000660f
add esp, 0xc
lea eax, [ebp - 0x7354]
push eax
push str.body.weight
push dword [edi]
call fcn.1000660f
add esp, 0xc
lea eax, [ebp - 0x7352]
push eax
push str.body.proportion
push dword [edi]
call fcn.1000660f
add esp, 0xc
lea eax, [ebp - 0x7350]
push eax
push str.body.emblem
push dword [edi]
call fcn.1000660f
add esp, 0xc
lea eax, [ebp - 0x734c]
push eax
push str.carrots
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x7348]
push eax
push str._carrots
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x7344]
push eax
push str._horses
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x7340]
push eax
push str.cash
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x733c]
push eax
push str._cash
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x7338]
push eax
push 0x100366bc
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x7334]
push eax
push str.ranch_exp
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x7330]
push eax
push str.total_races
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x7124]
push eax
push str.eggs
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x732c]
push eax
push str.horse
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x7328]
push eax
push 0x100366e8
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x7324]
push eax
push str.pets
push dword [edi]
call fcn.10006669
add esp, 0xc
lea eax, [ebp - 0x7120]
push eax
push str.hatch
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x7110]
push eax
push str.hatch_time
push dword [edi]
call fcn.100064b8
add esp, 0xc
lea eax, [ebp - 0x711c]
push eax
push str.hatch1_egg
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x7108]
push eax
push str.hatch1_time
push dword [edi]
call fcn.100064b8
add esp, 0xc
lea eax, [ebp - 0x70f8]
push eax
push str.turns
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x70f4]
push eax
push str.crystal
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x70f0]
push eax
push str.overcube
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x70ec]
push eax
push str.pet_rename
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x70e8]
push eax
push str.keyboard
push dword [edi]
call fcn.10006669
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x150]
push ecx
push str.mouse
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10007836
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x150]
call fcn.1000664a
add esp, 4
lea eax, [ebp - 0x6ee6]
push eax
push str.release_items
push dword [edi]
call fcn.10006669
add esp, 0xc
lea eax, [ebp - 0x6c48]
push eax
push str.cloth
push dword [edi]
call fcn.100065d7
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x100]
push ecx
push str.ranch_state
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10007892
lea eax, [ebp - 0x69c9]
push eax
lea ecx, [ebp - 0x100]
call fcn.1000664a
add esp, 4
lea eax, [ebp - 0x69c8]
push eax
push str.server_time
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x69c4]
push eax
push str.debug_am
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x69c0]
push eax
push str.debug_pm
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x69bc]
push eax
push str.debug_au
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x69b8]
push eax
push str.debug_pu
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x69b4]
push eax
push str.debug_as
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x69b0]
push eax
push str.debug_ps
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x69ac]
push eax
push str.debug_ar
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x69a8]
push eax
push str.debug_pr
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x69a4]
push eax
push str.debug_ac
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x69a0]
push eax
push str.debug_pc
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x699c]
push eax
push str.guild_id
push dword [edi]
call fcn.100065d7
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x180]
push ecx
push str.guild_status
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x100079ca
lea eax, [ebp - 0x6998]
push eax
lea ecx, [ebp - 0x180]
call fcn.1000664a
add esp, 4
lea eax, [ebp - 0x6990]
push eax
push str.guild_joined
push dword [edi]
call fcn.100064b8
add esp, 0xc
lea eax, [ebp - 0x6988]
push eax
push str.guild_name
push dword [edi]
call fcn.10006669
add esp, 0xc
lea eax, [ebp - 0x6788]
push eax
push str.guild_emblem
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x261e]
push eax
push str.debug_mode
push dword [edi]
call fcn.10006669
add esp, 0xc
lea eax, [ebp - 0x2a90]
push eax
push str.daily_time
push dword [edi]
call fcn.100064b8
add esp, 0xc
lea eax, [ebp - 0x2a88]
push eax
push str.daily_mode
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x2a84]
push eax
push str.daily_status
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x2a80]
push eax
push str.daily1_type
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x2a7c]
push eax
push str.daily1_result
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x2a78]
push eax
push str.daily2_type
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x2a74]
push eax
push str.daily2_result
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x2a70]
push eax
push str.daily3_type
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x2a6c]
push eax
push str.daily3_result
push dword [edi]
call fcn.100065d7
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x110]
push ecx
push str.speed_set
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10007b18
lea eax, [ebp - 0x2a68]
push eax
lea ecx, [ebp - 0x110]
call fcn.1000664a
add esp, 4
lea eax, [ebp - 0x2a64]
push eax
push str.speed_set0
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x2a60]
push eax
push str.speed_set1
push dword [edi]
call fcn.100065d7
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x160]
push ecx
push str.magic_set
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10007b74
lea eax, [ebp - 0x2a5c]
push eax
lea ecx, [ebp - 0x160]
call fcn.1000664a
add esp, 4
lea eax, [ebp - 0x2a58]
push eax
push str.magic_set0
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x2a54]
push eax
push str.magic_set1
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x2a50]
push eax
push str.pc_horse
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x2a4c]
push eax
push str.pc_level
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x2a48]
push eax
push str.pc_seed
push dword [edi]
call fcn.100065d7
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x120]
push ecx
push str.pc_index
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10007c12
lea eax, [ebp - 0x2a44]
push eax
lea ecx, [ebp - 0x120]
call fcn.1000664a
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x198]
push ecx
push str.pc_package
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10007c42
lea eax, [ebp - 0x2a43]
push eax
lea ecx, [ebp - 0x198]
call fcn.1000664a
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x130]
push ecx
push str.pc_items
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10007c72
lea eax, [ebp - 0x2a42]
push eax
lea ecx, [ebp - 0x130]
call fcn.1000664a
add esp, 4
lea eax, [ebp - 0x2a40]
push eax
push str.emblems
push dword [edi]
call fcn.100064b8
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x170]
push ecx
push str.horse_slots
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10007cb8
lea eax, [ebp - 0x2a38]
push eax
lea ecx, [ebp - 0x170]
call fcn.1000664a
add esp, 4
lea eax, [ebp - 0x2a30]
push eax
push str.poses
push dword [edi]
call fcn.10006548
add esp, 0xc
lea eax, [ebp - 0x2a28]
push eax
push str.skill_exp
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x2a24]
push eax
push str.skills
push dword [edi]
call fcn.100065d7
add esp, 0xc
lea eax, [ebp - 0x241e]
push eax
push dword [edi]
call fcn.10006724
cmp dword [ebp - 0x69c8], ebx
pop ecx
pop ecx
je 0x10007d53
lea eax, [ebp - 0xd8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [ebp - 0x69c8]
xor ecx, ecx
push ebx
add eax, 0xb6109100
push 0x989680
adc ecx, 2
push ecx
push eax
call fcn.100350d0
sub eax, dword [ebp - 0xd8]
sbb edx, dword [ebp - 0xd4]
mov dword [0x1004a0f0], eax
mov dword [0x1004a0f4], edx
mov eax, dword [0x1004a398]
add eax, 8
mov ecx, 0x10000
mov dword [eax - 4], ebx
mov dword [eax], ebx
add eax, 0x17
dec ecx
jne 0x10007d60
mov dword [ebp + 0xc], ebx
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0xd0]
push eax
push esi
push str.ItemUID
push dword [edi]
call fcn.10006aeb
add esp, 0x10
test eax, eax
je 0x10007e72
lea eax, [ebp - 0xac]
push eax
push esi
push str.expires
push dword [edi]
call fcn.10006aeb
add esp, 0x10
test eax, eax
je 0x10007e72
lea eax, [ebp - 0xc8]
push eax
push esi
push str.quantity
push dword [edi]
call fcn.10006aeb
add esp, 0x10
test eax, eax
je 0x10007e72
lea eax, [ebp - 0xb8]
push eax
push esi
push dword [edi]
call fcn.10006a98
add esp, 0xc
test eax, eax
je 0x10007e72
mov esi, dword [ebp - 0xd0]
cmp esi, 0x10000
jae 0x10007e62
cmp dword [ebp - 0xb4], 0xffffffff
jl 0x10007e62
jg 0x10007e0d
cmp dword [ebp - 0xb8], 0xfffeae80
jbe 0x10007e62
cmp dword [ebp - 0xb8], 0x3b9aca00
jne 0x10007e2d
cmp dword [ebp - 0xb4], ebx
jne 0x10007e2d
mov dword [ebp - 0xac], 0x11bb8
jmp 0x10007e46
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
call fcn.1000430b
pop ecx
pop ecx
mov dword [ebp - 0xac], eax
mov eax, dword [0x1004a398]
imul esi, esi, 0x17
mov ecx, dword [ebp - 0xac]
add eax, esi
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0xc8]
mov dword [eax + 8], ecx
inc dword [ebp + 0xc]
cmp dword [ebp + 0xc], 0x2710
jl 0x10007d6e
mov dl, byte [ebp - 0x2a42]
call fcn.100067e3
lea eax, [ebp - 0x6ce0]
mov dword [ebp + 0xc], ebx
mov dword [ebp - 8], eax
mov eax, dword [edi]
mov dword [ebp - 0x14], eax
xor eax, eax
push eax
push dword [ebp + 0xc]
call fcn.10003ab6
push ebx
push ebx
push ebx
push ebx
mov esi, eax
push dword [esi]
push 0x100365f4
push 0x1003657c
call fcn.1000384d
add esp, 0x24
lea ecx, [ebp - 0xc4]
push ecx
push dword [eax]
mov dword [ebp - 4], eax
push dword [ebp - 0x14]
call fcn.100065d7
add esp, 0xc
mov dword [ebp - 0x14], eax
call fcn.10003809
mov esi, dword [ebp - 4]
call fcn.10003809
cmp dword [ebp - 0x14], ebx
je 0x10007fdc
mov eax, dword [edi]
mov dword [ebp - 4], eax
xor eax, eax
push eax
push dword [ebp + 0xc]
call fcn.10003ab6
push ebx
push ebx
push ebx
push ebx
mov esi, eax
push dword [esi]
push str.ItemUID
push 0x1003657c
call fcn.1000384d
add esp, 0x24
lea ecx, [ebp - 0xb0]
push ecx
push dword [eax]
mov dword [ebp - 0x14], eax
push dword [ebp - 4]
call fcn.1000660f
add esp, 0xc
mov dword [ebp - 4], eax
call fcn.10003809
mov esi, dword [ebp - 0x14]
call fcn.10003809
cmp dword [ebp - 4], ebx
je 0x10007fdc
mov eax, dword [edi]
mov dword [ebp - 4], eax
xor eax, eax
push eax
push dword [ebp + 0xc]
call fcn.10003ab6
push ebx
push ebx
push ebx
push ebx
mov esi, eax
push dword [esi]
push str.seconds
push 0x1003657c
call fcn.1000384d
add esp, 0x24
lea ecx, [ebp - 0xc0]
push ecx
push dword [eax]
mov dword [ebp - 0x14], eax
push dword [ebp - 4]
call fcn.100064b8
add esp, 0xc
mov dword [ebp - 4], eax
call fcn.10003809
mov esi, dword [ebp - 0x14]
call fcn.10003809
cmp dword [ebp - 4], ebx
je 0x10007fdc
cmp dword [ebp - 0xc0], 0x3b9aca00
mov eax, dword [ebp - 0xc4]
mov esi, dword [ebp - 8]
mov dword [esi - 4], eax
mov ax, word [ebp - 0xb0]
mov word [esi], ax
jne 0x10007fc4
cmp dword [ebp - 0xbc], ebx
jne 0x10007fc4
mov eax, 0x11bb8
jmp 0x10007fd7
push dword [ebp - 0xbc]
push dword [ebp - 0xc0]
call fcn.1000430b
pop ecx
pop ecx
mov dword [esi + 4], eax
jmp 0x10007fdf
mov esi, dword [ebp - 8]
inc dword [ebp + 0xc]
add esi, 0xc
cmp dword [ebp + 0xc], 0xd
mov dword [ebp - 8], esi
jb 0x10007e89
lea eax, [ebp - 0x6c39]
push eax
push str.horse.name
push dword [edi]
call fcn.10006669
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x140]
push ecx
push str.horse.body.skin
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10008038
lea eax, [ebp - 0x6a39]
push eax
lea ecx, [ebp - 0x140]
call fcn.1000664a
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x190]
push ecx
push str.horse.body.mane
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10008068
lea eax, [ebp - 0x6a38]
push eax
lea ecx, [ebp - 0x190]
call fcn.1000664a
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0xe8]
push ecx
push str.horse.body.tail
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10008098
lea eax, [ebp - 0x6a37]
push eax
lea ecx, [ebp - 0xe8]
call fcn.1000664a
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0xf8]
push ecx
push str.horse.body.face
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x100080c8
lea eax, [ebp - 0x6a36]
push eax
lea ecx, [ebp - 0xf8]
call fcn.1000664a
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x108]
push ecx
push str.horse.body.size
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x100080f8
lea eax, [ebp - 0x6a35]
push eax
lea ecx, [ebp - 0x108]
call fcn.1000664a
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x118]
push ecx
push str.horse.body.legs
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10008128
lea eax, [ebp - 0x6a34]
push eax
lea ecx, [ebp - 0x118]
call fcn.1000664a
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x128]
push ecx
push str.horse.body.back
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10008158
lea eax, [ebp - 0x6a33]
push eax
lea ecx, [ebp - 0x128]
call fcn.1000664a
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x138]
push ecx
push str.horse.body.neck
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x10008188
lea eax, [ebp - 0x6a32]
push eax
lea ecx, [ebp - 0x138]
call fcn.1000664a
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x148]
push ecx
push str.horse.body.front
push eax
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x100081b8
lea eax, [ebp - 0x6a31]
push eax
lea ecx, [ebp - 0x148]
call fcn.1000664a
add esp, 4
mov ecx, 0x27b
lea eax, [ebp - 0x418]
mov byte [eax], bl
inc eax
dec ecx
jne 0x100081c3
xor esi, esi
cmp byte [ebp - 0x2a38], bl
mov dword [ebp + 0xc], esi
jbe 0x1000876f
mov eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
jmp 0x100081e5
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x418]
push eax
push esi
push 0x100365f4
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x414]
push eax
push esi
push str.ItemUID
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x20d]
push eax
push esi
push str.body_skin
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x20c]
push eax
push esi
push str.body_mane
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x20b]
push eax
push esi
push str.body_tail
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x20a]
push eax
push esi
push str.body_face
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x209]
push eax
push esi
push str.body_size
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x208]
push eax
push esi
push str.body_legs
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x207]
push eax
push esi
push str.body_back
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x206]
push eax
push esi
push str.body_neck
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x205]
push eax
push esi
push str.body_front
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x204]
push eax
push esi
push str.tendency
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x203]
push eax
push esi
push 0x100366bc
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1ff]
push eax
push esi
push str.stat_agility
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1fb]
push eax
push esi
push str.stat_spirit
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1f7]
push eax
push esi
push str.stat_speed
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1f3]
push eax
push esi
push str.stat_strength
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1ef]
push eax
push esi
push str.stat_control
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1eb]
push eax
push esi
push str.stat_born
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1df]
push eax
push esi
push str.intimacy
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1e3]
push eax
push esi
push str.satiety
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1db]
push eax
push esi
push str.playfulness
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1d7]
push eax
push esi
push str.beauty
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1d3]
push eax
push esi
push str.cleanbody
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1cf]
push eax
push esi
push str.cleanmane
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1cb]
push eax
push esi
push str.cleantail
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1c7]
push eax
push esi
push str.injury
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1c6]
push eax
push esi
push str.starter
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1c2]
push eax
push esi
push dword [edi]
call fcn.10006b8e
add esp, 0xc
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1ba]
push eax
push esi
push str.energy
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1b6]
push eax
push esi
push str.fatigue
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1b2]
push eax
push esi
push str.emblem
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1ae]
push eax
push esi
push str.boost
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1aa]
push eax
push esi
push str.jump
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1a6]
push eax
push esi
push str.slide
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x1a2]
push eax
push esi
push str.glide
push dword [edi]
call fcn.10006be1
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x19e]
push eax
push esi
push str.state
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x410]
push eax
push esi
push str.potential_level
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x40f]
push eax
push esi
push str.potential
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
lea eax, [ebp - 0x40e]
push eax
push esi
push str.potential_ratio
push dword [edi]
call fcn.10006c31
add esp, 0x10
test eax, eax
je 0x1000876f
cmp dword [ebp - 0x1c6], 2
jae 0x1000876f
lea eax, [ebp - 0x40d]
push eax
push esi
push dword [edi]
call fcn.10006b3b
add esp, 0xc
test eax, eax
jne 0x100086ed
push 0x100361a4
lea eax, [ebp - 0x40d]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp dword [ebp - 0x1c6], 1
jne 0x10008719
lea eax, [ebp - 0x6c39]
push eax
lea eax, [ebp - 0x40d]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea esi, [ebp - 0x6a39]
lea edi, [ebp - 0x20d]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ebx, dword [ebp - 8]
lea eax, [ebp - 0x418]
push eax
call fcn.10006219
mov eax, dword [ebx]
cmp eax, dword [ebp - 0x732c]
pop ecx
jne 0x1000873c
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x34eb], ebx
inc dword [ebp + 0xc]
add ebx, 0x2d8
mov dword [ebp - 8], ebx
mov ecx, 0x27b
lea eax, [ebp - 0x418]
mov byte [eax], 0
inc eax
dec ecx
jne 0x10008753
movzx eax, byte [ebp - 0x2a38]
mov edi, dword [ebp - 0x18]
xor ebx, ebx
cmp dword [ebp + 0xc], eax
jl 0x100081e2
mov byte [ebp - 0x6784], bl
movzx eax, byte [ebp - 0x6784]
mov ecx, eax
imul ecx, ecx, 0x208
lea ecx, [ebp + ecx - 0x6780]
mov dword [ebp + 0xc], ecx
mov ecx, dword [edi]
push ebx
push eax
mov dword [ebp - 0xc], ecx
call fcn.10003ab6
push ebx
push ebx
push ebx
push ebx
mov esi, eax
push dword [esi]
push 0x100365f4
push 0x10036584
call fcn.1000384d
add esp, 0x24
push dword [ebp + 0xc]
mov dword [ebp - 4], eax
push dword [eax]
push dword [ebp - 0xc]
call fcn.100065d7
add esp, 0xc
mov dword [ebp + 0xc], eax
call fcn.10003809
mov esi, dword [ebp - 4]
call fcn.10003809
cmp dword [ebp + 0xc], ebx
je 0x100088df
movzx eax, byte [ebp - 0x6784]
mov esi, dword [edi]
mov ecx, eax
imul ecx, ecx, 0x208
lea ecx, [ebp + ecx - 0x677c]
push ebx
push eax
mov dword [ebp + 0xc], ecx
call fcn.10003ab6
push ebx
push ebx
push ebx
push ebx
push dword [eax]
mov dword [ebp - 0xc], eax
push str.status
push 0x10036584
call fcn.1000384d
add esp, 0x24
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], eax
mov eax, dword [eax]
push ecx
push eax
push esi
call fcn.10006548
add esp, 0xc
test eax, eax
je 0x1000884d
push dword [ebp + 0xc]
lea ecx, [ebp - 0x158]
call fcn.1000664a
add esp, 4
mov dword [ebp + 0xc], eax
jmp 0x10008850
mov dword [ebp + 0xc], ebx
mov esi, dword [ebp - 0xc]
call fcn.10003809
mov esi, dword [ebp - 4]
call fcn.10003809
cmp dword [ebp + 0xc], ebx
je 0x100088df
movzx eax, byte [ebp - 0x6784]
mov ecx, eax
imul ecx, ecx, 0x208
lea ecx, [ebp + ecx - 0x677a]
mov dword [ebp + 0xc], ecx
mov ecx, dword [edi]
push ebx
push eax
mov dword [ebp - 0xc], ecx
call fcn.10003ab6
push ebx
push ebx
push ebx
push ebx
mov esi, eax
push dword [esi]
push str.name
push 0x10036584
call fcn.1000384d
add esp, 0x24
push dword [ebp + 0xc]
mov dword [ebp - 4], eax
push dword [eax]
push dword [ebp - 0xc]
call fcn.10006669
add esp, 0xc
mov dword [ebp + 0xc], eax
call fcn.10003809
mov esi, dword [ebp - 4]
call fcn.10003809
cmp dword [ebp + 0xc], ebx
je 0x100088df
inc byte [ebp - 0x6784]
cmp byte [ebp - 0x6784], 0x1e
jb 0x10008775
mov dword [ebp + 0xc], ebx
mov eax, dword [edi]
mov dword [ebp - 0xc], eax
xor eax, eax
push eax
push dword [ebp + 0xc]
call fcn.10003ab6
push ebx
push ebx
push ebx
push ebx
mov esi, eax
push dword [esi]
push str.type
push 0x10036588
call fcn.1000384d
add esp, 0x24
lea ecx, [ebp - 0xcc]
push ecx
push dword [eax]
mov dword [ebp - 4], eax
push dword [ebp - 0xc]
call fcn.100065d7
add esp, 0xc
mov dword [ebp - 0xc], eax
call fcn.10003809
mov esi, dword [ebp - 4]
call fcn.10003809
cmp dword [ebp - 0xc], ebx
je 0x1000899f
mov esi, dword [ebp - 0xcc]
cmp esi, 0x100
jae 0x1000899f
mov eax, dword [edi]
mov dword [ebp - 0xc], eax
xor eax, eax
push eax
push dword [ebp + 0xc]
call fcn.10003ab6
push ebx
push ebx
push ebx
push ebx
push dword [eax]
mov dword [ebp - 4], eax
push str.name
push 0x10036588
call fcn.1000384d
mov ecx, dword [ebp - 0x1c]
add esp, 0x24
shl esi, 9
lea ecx, [esi + ecx + 0x35eb]
push ecx
push dword [eax]
mov dword [ebp - 0x14], eax
push dword [ebp - 0xc]
call fcn.10006669
mov esi, dword [ebp - 4]
add esp, 0xc
call fcn.10003809
mov esi, dword [ebp - 0x14]
call fcn.10003809
inc dword [ebp + 0xc]
cmp dword [ebp + 0xc], 0x100
jb 0x100088e2
mov byte [ebp - 0x2620], bl
movzx eax, byte [ebp - 0x2620]
lea ecx, [ebp + eax*4 - 0x2a20]
mov dword [ebp + 0xc], ecx
mov ecx, dword [edi]
push ebx
push eax
mov dword [ebp - 0xc], ecx
call fcn.10003ab6
push ebx
push ebx
push ebx
push ebx
mov esi, eax
push ebx
push dword [esi]
push 0x1003658c
call fcn.1000384d
add esp, 0x24
push dword [ebp + 0xc]
mov dword [ebp - 4], eax
push dword [eax]
push dword [ebp - 0xc]
call fcn.100065d7
add esp, 0xc
mov dword [ebp + 0xc], eax
call fcn.10003809
mov esi, dword [ebp - 4]
call fcn.10003809
cmp dword [ebp + 0xc], ebx
je 0x10008a1f
inc byte [ebp - 0x2620]
cmp byte [ebp - 0x2620], 0xff
jb 0x100089b5
mov esi, edi
call fcn.10003809
mov esi, dword [ebp - 0xa8]
call fcn.10003809
push 0x30
pop ecx
lea eax, [ebp - 0x70]
mov byte [eax], bl
inc eax
dec ecx
jne 0x10008a37
push 0x17
pop ecx
lea eax, [ebp - 0x40]
mov byte [eax], bl
inc eax
dec ecx
jne 0x10008a43
mov esi, dword [0x1004a3c4]
call fcn.10003809
lea eax, [ebp - 0x7960]
push eax
call fcn.10003ce8
mov edi, dword [ebp - 0x1c]
mov dword [0x1004a3c4], eax
mov eax, dword [ebp - 0x7964]
mov dword [edi], eax
mov eax, dword [ebp - 0x7968]
cmp eax, 8
pop ecx
ja 0x10008a81
add eax, 0xf0000000
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [edi + 4], eax
mov dword [0x1004a370], eax
lea eax, [ebp - 0x7760]
push eax
lea eax, [edi + 8]
push eax
call esi
lea eax, [ebp - 0x7560]
push eax
lea eax, [edi + 0x208]
push eax
call esi
mov al, byte [ebp - 0x7360]
mov byte [edi + 0x409], al
push 0x100361a4
lea eax, [edi + 0x40a]
push eax
call esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x6ee6]
push eax
call esi
cdq
sub eax, edx
sar eax, 1
shr eax, 1
cmp eax, 0x19
ja 0x10008afd
lea ebx, [eax + eax]
lea eax, [edi + 0x60a]
push eax
lea edx, [ebp - 0x6ee6]
call fcn.10003f54
xor ebx, ebx
test eax, eax
pop ecx
jne 0x10008b0c
push 0x32
pop ecx
lea eax, [edi + 0x60a]
mov byte [eax], bl
inc eax
dec ecx
jne 0x10008b06
lea eax, [ebp - 0x7324]
push eax
call esi
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x20
ja 0x10008b3a
lea ecx, [edi + 0x35bf]
push ecx
mov ebx, eax
lea edx, [ebp - 0x7324]
call fcn.10003f54
xor ebx, ebx
test eax, eax
pop ecx
jne 0x10008b49
push 0x20
pop ecx
lea eax, [edi + 0x35bf]
mov byte [eax], bl
inc eax
dec ecx
jne 0x10008b43
push 0x10036c08
lea eax, [ebp - 0x7760]
push eax
mov byte [edi + 0x6be], bl
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
neg eax
sbb eax, eax
inc eax
mov dword [0x1004a138], eax
jne 0x10008b75
cmp dword [0x1004a13c], ebx
je 0x10008b88
mov eax, 0x7cf
cmp dword [ebp - 0x7338], eax
jbe 0x10008b88
mov dword [ebp - 0x7338], eax
mov eax, dword [ebp - 0x7344]
mov edx, dword [ebp - 0x734c]
mov ecx, dword [ebp - 0x7348]
add ecx, eax
sub edx, eax
sub edx, dword [ebp - 0x7348]
cmp ecx, dword [ebp - 0x734c]
sbb eax, eax
and eax, edx
mov dword [edi + 0x7bf], eax
mov eax, dword [ebp - 0x7340]
mov ecx, eax
sub ecx, dword [ebp - 0x733c]
cmp dword [ebp - 0x733c], eax
sbb eax, eax
and eax, ecx
mov dword [edi + 0x7c3], eax
mov eax, dword [ebp - 0x7338]
mov dword [edi + 0x7c7], eax
lea eax, [ebp - 0x70e8]
push eax
mov dword [edi + 0x7cf], ebx
mov byte [edi + 0x7d3], bl
call esi
cdq
sub eax, edx
sar eax, 1
shr eax, 2
cmp al, 0x10
mov byte [edi + 0x7d4], al
ja 0x10008c24
movzx ebx, al
lea eax, [edi + 0x7d5]
shl ebx, 2
push eax
lea edx, [ebp - 0x70e8]
call fcn.10003f54
xor ebx, ebx
test eax, eax
pop ecx
jne 0x10008c2a
mov byte [edi + 0x7d4], bl
cmp word [ebp - 0x241e], bx
je 0x10008c9e
lea eax, [ebp - 0x241e]
call fcn.10003e56
mov esi, dword [eax]
mov dword [ebp - 0xa8], eax
lea eax, [edi + 0x815]
mov dword [ebp + 0xc], eax
mov dword [ebp - 8], 8
mov eax, esi
call fcn.10004042
mov dword [ebp - 0x18], eax
sub eax, esi
sar eax, 1
inc eax
cmp eax, 0x29
jbe 0x10008c6d
push 0x29
pop eax
push eax
push esi
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov eax, dword [ebp - 0x18]
cmp word [eax], bx
je 0x10008c85
mov esi, eax
add esi, 2
add dword [ebp + 0xc], 0x200
dec dword [ebp - 8]
jne 0x10008c56
mov esi, dword [ebp - 0xa8]
call fcn.100037e1
jmp 0x10008d17
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [edi + 0x815]
push str._wink_wave
push eax
call esi
lea eax, [edi + 0xa15]
push str.Thank_you___heart
push eax
call esi
lea eax, [edi + 0xc15]
push str._fire_fire_fire_Fire___fire_fire_fire
push eax
call esi
lea eax, [edi + 0xe15]
push str._sad_cry_Sorry___cry_sad
push eax
call esi
lea eax, [edi + 0x1015]
push str.__tada_Congratulations_____tada
push eax
call esi
lea eax, [edi + 0x1215]
push str._clap_Good_Game____clap
push eax
call esi
lea eax, [edi + 0x1415]
push str.Be_right_back__Please_wait_for_me___wink
push eax
call esi
lea eax, [edi + 0x1615]
push str.See_you___smile_wave
push eax
call esi
add esp, 0x40
mov dword [edi + 0x1815], 1
movzx eax, byte [ebp - 0x6ee8]
mov dword [edi + 0x1819], eax
mov al, byte [ebp - 0x735f]
mov byte [edi + 0x181d], al
cmp byte [ebp - 0x735e], bl
mov byte [edi + 0x181f], 0xf
setne al
mov byte [edi + 0x181e], al
xor edx, edx
mov ecx, 0x10046e08
lea eax, [edi + 0x1820]
mov dword [eax], ecx
movzx esi, byte [edi + 0x181f]
inc edx
add eax, 4
add ecx, 0xb
cmp edx, esi
jl 0x10008d5d
cmp byte [edi + 0x409], 1
mov word [edi + 0x1861], 0xc96d
setne al
dec al
and al, 0xf6
add al, 0x14
mov byte [edi + 0x186b], al
mov dword [edi + 0x1863], 0x893915d7
mov dword [edi + 0x1867], 0x110c8590
mov al, byte [ebp - 0x7359]
mov byte [edi + 0x186c], al
mov al, byte [ebp - 0x735a]
mov byte [edi + 0x186d], al
mov byte [edi + 0x186e], 1
mov ax, word [ebp - 0x735c]
mov word [edi + 0x186f], ax
mov ax, word [ebp - 0x7358]
mov word [edi + 0x1871], ax
mov ax, word [ebp - 0x7356]
mov word [edi + 0x1873], ax
mov ax, word [ebp - 0x7354]
mov word [edi + 0x1875], ax
mov ax, word [ebp - 0x7352]
mov word [edi + 0x1877], ax
mov ax, word [ebp - 0x7350]
mov word [edi + 0x1879], ax
mov byte [edi + 0x34f3], 0xa
xor edx, edx
mov ecx, 0x10046eb0
lea eax, [edi + 0x34f4]
mov dword [eax], ecx
movzx esi, byte [edi + 0x34f3]
inc edx
add eax, 4
add ecx, 8
cmp edx, esi
jl 0x10008e2b
mov dword [edi + 0x3534], 0xe06
mov ax, word [ebp - 0x2a30]
mov word [edi + 0x3538], ax
mov eax, dword [ebp - 0x2a30]
mov ecx, dword [ebp - 0x2a2c]
shrd eax, ecx, 0x10
mov word [edi + 0x353a], ax
mov eax, dword [ebp - 0x2a2c]
mov word [edi + 0x353c], ax
mov eax, dword [ebp - 0x2a28]
mov dword [edi + 0x3543], eax
push dword [ebp - 0x2a28]
shr ecx, 0x10
call fcn.10005c3b
mov byte [edi + 0x3542], al
movzx ax, al
pop ecx
xor ecx, ecx
mov word [edi + 0x3547], ax
mov edx, dword [ebp - 0x2a24]
mov byte [ebp - 0xa4], bl
mov byte [ebp - 0xa3], bl
mov byte [ebp - 0xa2], bl
mov byte [ebp - 0xa1], bl
mov byte [ebp - 0xa0], bl
mov byte [ebp - 0x9f], 1
mov byte [ebp - 0x9e], 3
mov byte [ebp - 0x9d], 6
mov byte [ebp - 0x9c], bl
mov byte [ebp - 0x9b], 1
mov byte [ebp - 0x9a], 3
mov byte [ebp - 0x99], 6
mov byte [ebp - 0x98], bl
mov byte [ebp - 0x97], 1
mov byte [ebp - 0x96], 3
mov byte [ebp - 0x95], 5
mov byte [ebp - 0x94], bl
mov byte [ebp - 0x93], 1
mov byte [ebp - 0x92], 4
mov byte [ebp - 0x91], 4
mov byte [ebp - 0x90], bl
mov byte [ebp - 0x8f], 1
mov byte [ebp - 0x8e], 3
mov byte [ebp - 0x8d], 5
mov byte [ebp - 0x8c], bl
mov byte [ebp - 0x8b], 1
mov byte [ebp - 0x8a], 3
mov byte [ebp - 0x89], 5
mov byte [ebp - 0x88], bl
mov byte [ebp - 0x87], 2
mov byte [ebp - 0x86], 4
mov byte [ebp - 0x85], 4
mov byte [ebp - 0x84], bl
mov byte [ebp - 0x83], 1
mov byte [ebp - 0x82], 4
mov byte [ebp - 0x81], 8
mov byte [ebp - 0x80], bl
mov byte [ebp - 0x7f], 1
mov byte [ebp - 0x7e], 4
mov byte [ebp - 0x7d], 8
mov byte [ebp - 0x7c], bl
mov byte [ebp - 0x7b], 1
mov byte [ebp - 0x7a], 3
mov byte [ebp - 0x79], 7
mov byte [ebp - 0x78], bl
mov byte [ebp - 0x77], 1
mov byte [ebp - 0x76], 2
mov byte [ebp - 0x75], 5
mov byte [ebp - 0x74], bl
mov byte [ebp - 0x73], 1
mov byte [ebp - 0x72], 3
mov byte [ebp - 0x71], 5
inc ecx
cmp edx, ebx
je 0x10009051
cmp byte [ebp + ecx*4 - 0xa3], bl
je 0x10009015
cmp ecx, 4
je 0x10008ff7
cmp ecx, 7
je 0x10008ff7
push 3
jmp 0x10008ff9
push 2
mov eax, edx
pop esi
and eax, 3
cmp esi, eax
jae 0x10009017
cmp ecx, 4
je 0x10009011
cmp ecx, 7
je 0x10009011
mov al, 3
jmp 0x1000901b
mov al, 2
jmp 0x1000901b
xor al, al
cmp al, bl
je 0x10009048
movzx esi, al
mov byte [ecx + edi + 0x3549], al
mov eax, ecx
shl eax, 2
add esi, eax
movzx esi, byte [ebp + esi - 0xa4]
movzx eax, word [edi + 0x3547]
sub eax, esi
jns 0x10009041
xor eax, eax
mov word [edi + 0x3547], ax
shr edx, 2
inc ecx
cmp ecx, 0xd
jl 0x10008fdc
push 0x400
lea eax, [ebp - 0x2a20]
push eax
lea eax, [edi + 0x2365e]
push eax
call sub.MSVCRT.dll_memcpy
mov al, byte [ebp - 0x2620]
add esp, 0xc
push 0x3ea6
mov byte [edi + 0x23a5e], al
mov dword [edi + 0x3556], 0xca1b87db
call sub.MSVCRT.dll_malloc
pop ecx
mov esi, eax
mov ecx, 0x3ea6
mov byte [eax], bl
inc eax
dec ecx
jne 0x10009094
mov eax, dword [ebp - 0x699c]
mov dword [esi], eax
mov byte [esi + 4], 1
mov eax, dword [ebp - 0x6788]
mov dword [esi + 5], eax
lea eax, [ebp - 0x6988]
push eax
lea eax, [esi + 9]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov al, byte [ebp - 0x6998]
mov byte [esi + 0x209], al
mov dword [esi + 0x20a], ebx
mov byte [esi + 0x20e], bl
mov al, byte [ebp - 0x6784]
mov byte [esi + 0x20f], al
cmp byte [ebp - 0x6784], bl
mov dword [ebp - 0x1c], ebx
jbe 0x1000913a
lea eax, [ebp - 0x677c]
mov dword [ebp + 0xc], eax
lea eax, [esi + 0x214]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax - 4]
mov ecx, dword [ebp - 8]
mov dword [ecx - 4], edx
mov dl, byte [eax]
add eax, 2
mov byte [ecx], dl
push eax
inc ecx
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
movzx eax, byte [esi + 0x20f]
inc dword [ebp - 0x1c]
add dword [ebp + 0xc], 0x208
add dword [ebp - 8], 0x205
cmp dword [ebp - 0x1c], eax
jl 0x10009101
mov dword [edi + 0x355a], esi
mov eax, dword [ebp - 0x7330]
mov dword [edi + 0x356b], eax
mov dword [edi + 0x356f], 0x38e
mov dword [edi + 0x3573], 0x1c6
mov eax, dword [ebp - 0x7334]
push 0x208
mov dword [edi + 0x7cb], eax
call sub.MSVCRT.dll_malloc
pop ecx
mov esi, eax
mov ecx, 0x208
mov byte [eax], bl
inc eax
dec ecx
jne 0x1000917e
mov al, byte [ebp - 0x7328]
mov byte [esi], al
movzx eax, byte [ebp - 0x7328]
shl eax, 9
lea eax, [eax + edi + 0x35eb]
push eax
lea eax, [esi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 7
lea eax, [ebp - 0x28]
push eax
lea eax, [esi + 1]
push eax
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x27], bl
mov byte [ebp - 0x26], bl
mov byte [ebp - 0x25], bl
mov byte [ebp - 0x24], bl
mov byte [ebp - 0x23], bl
mov byte [ebp - 0x22], bl
call sub.MSVCRT.dll_memcpy
add esp, 0xc
push 4
lea eax, [ebp - 0x20]
push eax
mov dword [edi + 0x3577], esi
lea eax, [edi + 0x357b]
push eax
mov byte [ebp - 0x20], bl
mov byte [ebp - 0x1f], bl
mov byte [ebp - 0x1e], bl
mov byte [ebp - 0x1d], bl
call sub.MSVCRT.dll_memcpy
mov eax, dword [ebp - 0x7124]
mov dword [edi + 0x357f], eax
mov eax, dword [ebp - 0x70f8]
add esp, 0xc
mov dword [edi + 0x35bb], eax
cmp dword [ebp - 0x711c], ebx
jne 0x10009223
cmp dword [ebp - 0x70f8], ebx
jne 0x10009223
xor eax, eax
inc eax
jmp 0x10009226
push 2
pop eax
mov dword [edi + 0x35b7], eax
lea eax, [edi + 0x35ab]
mov dword [ebp + 0xc], eax
lea eax, [edi + 0x3593]
xor esi, esi
mov dword [ebp - 8], eax
mov eax, dword [ebp + esi*4 - 0x7120]
mov ecx, dword [ebp + 0xc]
mov dword [ecx - 0x24], eax
mov ecx, dword [ebp + esi*8 - 0x7110]
mov eax, dword [ebp - 8]
mov dword [eax], ecx
mov ecx, dword [ebp + esi*8 - 0x710c]
mov dword [eax + 4], ecx
call fcn.1000aa95
mov ecx, dword [ebp + 0xc]
add dword [ebp - 8], 8
add dword [ebp + 0xc], 4
inc esi
cmp esi, 3
mov dword [ecx], eax
jl 0x10009240
mov dword [ebp + 0xc], 1
lea eax, [edi + 0x3587]
mov edx, 0x100465b8
mov dword [ebp - 8], 0x14
mov ecx, eax
mov dword [ebp - 0x18], 3
mov esi, dword [edx]
add esi, 0x15f90
cmp esi, dword [ecx]
jne 0x100092b2
mov esi, dword [ebp + 0xc]
or dword [edi + 0x357f], esi
add ecx, 4
dec dword [ebp - 0x18]
jne 0x1000929d
shl dword [ebp + 0xc], 1
add edx, 4
dec dword [ebp - 8]
jne 0x10009294
mov eax, dword [ebp - 0x70f4]
mov dword [edi + 0x35df], eax
mov eax, dword [ebp - 0x70f0]
mov dword [edi + 0x35e3], eax
mov eax, dword [ebp - 0x70ec]
mov dword [edi + 0x35e7], eax
mov al, byte [ebp - 0x69c9]
mov byte [edi + 0x235ef], al
mov eax, dword [ebp - 0x2a90]
mov dword [edi + 0x23612], eax
mov eax, dword [ebp - 0x2a8c]
mov dword [edi + 0x23616], eax
mov eax, dword [ebp - 0x2a88]
mov dword [edi + 0x2361a], eax
mov eax, dword [ebp - 0x2a84]
mov dword [edi + 0x2361e], eax
mov ax, word [ebp - 0x2a80]
mov word [edi + 0x23622], ax
mov eax, dword [ebp - 0x2a7c]
mov dword [edi + 0x23624], eax
mov ax, word [ebp - 0x2a78]
mov word [edi + 0x23628], ax
mov eax, dword [ebp - 0x2a74]
mov dword [edi + 0x2362a], eax
mov ax, word [ebp - 0x2a70]
mov word [edi + 0x2362e], ax
mov eax, dword [ebp - 0x2a6c]
push 0xd
mov dword [edi + 0x23630], eax
lea eax, [ebp - 0x6ce4]
lea ecx, [edi + 0x640]
pop esi
mov edx, dword [eax]
cmp edx, ebx
je 0x10009398
mov dword [ecx - 4], edx
mov dx, word [eax + 4]
mov word [ecx], dx
mov edx, dword [eax + 8]
mov dword [ecx + 2], edx
add eax, 0xc
add ecx, 0xa
dec esi
jne 0x10009382
mov al, byte [ebp - 0x2a68]
mov byte [edi + 0x23634], al
mov eax, dword [ebp - 0x2a64]
mov dword [edi + 0x23635], eax
mov eax, dword [ebp - 0x2a60]
mov dword [edi + 0x23639], eax
mov al, byte [ebp - 0x2a5c]
mov byte [edi + 0x2363d], al
mov eax, dword [ebp - 0x2a58]
mov dword [edi + 0x2363e], eax
mov eax, dword [ebp - 0x2a54]
mov dword [edi + 0x23642], eax
mov eax, dword [ebp - 0x2a50]
mov dword [edi + 0x23646], eax
mov eax, dword [ebp - 0x2a4c]
mov dword [edi + 0x2364a], eax
mov eax, dword [ebp - 0x2a48]
mov dword [edi + 0x2364e], eax
mov al, byte [ebp - 0x2a44]
mov byte [edi + 0x23652], al
mov al, byte [ebp - 0x2a43]
mov byte [edi + 0x23653], al
mov al, byte [ebp - 0x2a42]
mov byte [edi + 0x23654], al
mov eax, dword [ebp - 0x2a40]
mov dword [edi + 0x23655], eax
mov eax, dword [ebp - 0x2a3c]
mov dword [edi + 0x23659], eax
mov al, byte [ebp - 0x2a38]
mov byte [edi + 0x2365d], al
mov eax, dword [ebp - 0x69c4]
xor ecx, ecx
mov ch, byte [ebp - 0x69c4]
shr eax, 0x10
movzx edx, ah
mov cl, byte [ebp - 0x69c3]
shl ecx, 0x10
or ecx, edx
xor edx, edx
mov dh, al
movzx eax, dx
or ecx, eax
mov dword [edi + 0x235f4], ecx
mov ax, word [ebp - 0x69c0]
mov word [edi + 0x235f8], ax
mov eax, dword [ebp - 0x69bc]
xor ecx, ecx
mov ch, byte [ebp - 0x69bc]
shr eax, 0x10
movzx edx, ah
mov cl, byte [ebp - 0x69bb]
shl ecx, 0x10
or ecx, edx
xor edx, edx
mov dh, al
movzx eax, dx
or ecx, eax
mov dword [edi + 0x235fa], ecx
mov ax, word [ebp - 0x69b8]
mov word [edi + 0x235fe], ax
mov eax, dword [ebp - 0x69b4]
xor ecx, ecx
mov ch, byte [ebp - 0x69b4]
shr eax, 0x10
movzx edx, ah
mov cl, byte [ebp - 0x69b3]
shl ecx, 0x10
or ecx, edx
xor edx, edx
mov dh, al
movzx eax, dx
or ecx, eax
mov dword [edi + 0x23600], ecx
mov ax, word [ebp - 0x69b0]
mov word [edi + 0x23604], ax
mov eax, dword [ebp - 0x69ac]
xor ecx, ecx
mov ch, byte [ebp - 0x69ac]
shr eax, 0x10
mov cl, byte [ebp - 0x69ab]
shl ecx, 0x10
movzx edx, ah
or ecx, edx
xor edx, edx
mov dh, al
push ebx
push dword [0x1004a3c8]
movzx eax, dx
or ecx, eax
mov dword [edi + 0x23606], ecx
mov ax, word [ebp - 0x69a8]
mov word [edi + 0x2360a], ax
mov eax, dword [ebp - 0x69a4]
xor ecx, ecx
mov ch, byte [ebp - 0x69a4]
shr eax, 0x10
movzx edx, ah
mov cl, byte [ebp - 0x69a3]
shl ecx, 0x10
or ecx, edx
xor edx, edx
mov dh, al
movzx eax, dx
or ecx, eax
mov dword [edi + 0x2360c], ecx
mov ax, word [ebp - 0x69a0]
mov word [edi + 0x23610], ax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x100095b3
lea eax, [ebp - 0x261e]
push eax
push 0x1004a170
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push dword [0x1004a3c8]
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret