Function at 0x10007200
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10059b61
mov eax, dword fs:[0]
push eax
sub esp, 0x3b0
mov eax, dword [0x10081140]
xor eax, esp
mov dword [esp + 0x3a8], eax
push ebx
push esi
push edi
mov eax, dword [0x10081140]
xor eax, esp
push eax
lea eax, [esp + 0x3c0]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [esp + 0x58], ebx
mov eax, dword [ecx + 0x10]
mov byte [eax + 0xc], 1
mov edi, 0xf
mov dword [esp + 0x54], ecx
mov dword [esp + 0x4c], esi
mov byte [esp + 0x23], 1
mov dword [esp + 0x264], edi
mov dword [esp + 0x260], ebx
mov byte [esp + 0x250], bl
mov dword [esp + 0x3c8], ebx
mov dword [esp + 0x2d4], edi
mov dword [esp + 0x2d0], ebx
mov byte [esp + 0x2c0], bl
mov dword [esp + 0x78], 0xcea
mov dword [esp + 0x280], edi
mov dword [esp + 0x27c], ebx
mov byte [esp + 0x26c], bl
mov dword [esp + 0x30c], edi
mov dword [esp + 0x308], ebx
mov byte [esp + 0x2f8], bl
mov dword [esp + 0x3b4], edi
mov dword [esp + 0x3b0], ebx
mov byte [esp + 0x3a0], bl
mov dword [esp + 0x2b8], edi
mov dword [esp + 0x2b4], ebx
mov byte [esp + 0x2a4], bl
push 4
push 0x10061534
lea ecx, [esp + 0x28c]
mov byte [esp + 0x3d0], 5
mov dword [esp + 0x2a4], edi
mov dword [esp + 0x2a0], ebx
mov byte [esp + 0x290], bl
call fcn.10001d42
push 4
push 0x1006153c
lea ecx, [esp + 0x2e0]
mov byte [esp + 0x3d0], 6
mov dword [esp + 0x2f8], edi
mov dword [esp + 0x2f4], ebx
mov byte [esp + 0x2e4], bl
call fcn.10001d42
mov dword [esp + 0x328], edi
mov dword [esp + 0x324], ebx
mov byte [esp + 0x314], bl
mov dword [esp + 0x398], edi
mov dword [esp + 0x394], ebx
mov byte [esp + 0x384], bl
mov dword [esp + 0x360], edi
mov dword [esp + 0x35c], ebx
mov byte [esp + 0x34c], bl
mov dword [esp + 0x344], edi
mov dword [esp + 0x340], ebx
mov byte [esp + 0x330], bl
mov dword [esp + 0x37c], edi
mov dword [esp + 0x378], ebx
mov byte [esp + 0x368], bl
mov eax, dword [esi + 0x18]
mov byte [esp + 0x4b], bl
mov eax, dword [eax]
mov byte [esp + 0x3c8], 0xc
mov byte [esp + 0x22], bl
mov byte [esp + 0x2b], bl
mov dword [esp + 0x24], 0x20000
mov byte [esp + 0x53], bl
mov edi, dword [esi]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], eax
jmp 0x100073f0
mov ecx, dword [esi + 0x18]
mov eax, dword [esi]
mov dword [esp + 0x84], ecx
cmp edi, ebx
je 0x10007404
cmp edi, eax
je 0x10007409
call fcn.10041baa
mov edx, dword [esp + 0x18]
cmp edx, dword [esp + 0x84]
je 0x100083a5
cmp edi, ebx
jne 0x10007456
call fcn.10041baa
xor edi, edi
mov eax, dword [esp + 0x18]
cmp eax, dword [edi + 0x18]
jne 0x10007433
call fcn.10041baa
mov edi, dword [esp + 0x18]
mov esi, dword [edi + 0x24]
add edi, 0x10
mov eax, esi
mov ecx, esi
cmp esi, 8
jb 0x1000744b
mov ecx, 8
cmp dword [edi + 0x18], 0x10
jb 0x1000745a
mov eax, dword [edi + 4]
jmp 0x1000745d
mov edi, dword [edi]
jmp 0x10007425
lea eax, [edi + 4]
push ecx
push 0x10061544
push eax
call fcn.10003780
add esp, 0xc
cmp eax, ebx
jne 0x100074f8
cmp esi, 8
jb 0x100074f8
xor eax, eax
cmp esi, 8
setne al
cmp eax, ebx
jne 0x100074f8
mov eax, dword [esp + 0x14]
cmp eax, ebx
jne 0x100074ba
call fcn.10041baa
xor eax, eax
mov esi, dword [esp + 0x18]
cmp esi, dword [eax + 0x18]
jne 0x100074a2
call fcn.10041baa
lea edx, [esi + 0x30]
cmp edx, ebx
je 0x10007d40
mov ecx, dword [edx]
cmp ecx, ebx
jge 0x100074be
or eax, 0xffffffff
sub eax, ecx
jmp 0x100074c0
mov eax, dword [eax]
jmp 0x10007494
mov eax, ecx
jmp dword [eax*4 + 0x10008a34]
mov esi, dword [esp + 0x14]
cmp esi, ebx
jne 0x1000755d
call fcn.10041baa
xor eax, eax
mov ecx, dword [esp + 0x18]
cmp ecx, dword [eax + 0x18]
jne 0x10007515
call fcn.10041baa
mov edx, dword [edi + 0x14]
push 8
push 0x10061574
push edx
push ebx
mov ecx, edi
call fcn.10003e40
test eax, eax
jne 0x1000759f
cmp esi, ebx
jne 0x10007561
call fcn.10041baa
xor esi, esi
mov edi, dword [esp + 0x18]
cmp edi, dword [esi + 0x18]
jne 0x10007545
call fcn.10041baa
lea edx, [edi + 0x30]
cmp edx, ebx
je 0x10007d8b
mov ecx, dword [edx]
cmp ecx, ebx
jge 0x10007565
or eax, 0xffffffff
sub eax, ecx
jmp switch.0x10007567
mov eax, dword [esi]
jmp 0x10007507
mov esi, dword [esi]
jmp 0x10007537
mov eax, ecx
jmp dword [eax*4 + 0x10008a44]
cmp esi, ebx
jne 0x10007622
call fcn.10041baa
xor eax, eax
mov ecx, dword [esp + 0x18]
cmp ecx, dword [eax + 0x18]
jne 0x100075b8
call fcn.10041baa
mov edx, dword [edi + 0x14]
push 8
push 0x100615a4
push edx
push ebx
mov ecx, edi
call fcn.10003e40
test eax, eax
jne 0x1000762a
cmp esi, ebx
jne 0x10007626
call fcn.10041baa
xor esi, esi
mov edi, dword [esp + 0x18]
cmp edi, dword [esi + 0x18]
jne 0x100075e8
call fcn.10041baa
add edi, 0x30
push edi
call fcn.1000eeb0
add esp, 4
cmp eax, ebx
je 0x10007dc4
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x3a8]
call fcn.10001cb0
lea ecx, [esp + 0x14]
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
mov eax, dword [esi]
jmp 0x100075aa
mov esi, dword [esi]
jmp 0x100075da
cmp esi, ebx
jne 0x10007693
call fcn.10041baa
xor esi, esi
mov eax, dword [esp + 0x18]
cmp eax, dword [esi + 0x18]
jne 0x10007643
call fcn.10041baa
mov ecx, dword [edi + 0x14]
push 4
push 0x100615d4
push ecx
push ebx
mov ecx, edi
call fcn.10003e40
lea ecx, [esp + 0x14]
test eax, eax
jne 0x10007697
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000eef0
add esp, 4
cmp eax, ebx
je 0x10007dfd
mov edx, dword [eax]
lea ecx, [esp + 0x14]
mov dword [esp + 0x78], edx
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
mov esi, dword [esi]
jmp 0x10007635
push 0x10061600
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x100076f3
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000eeb0
add esp, 4
cmp eax, ebx
je 0x10007e36
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x2c8]
call fcn.10001cb0
lea ecx, [esp + 0x14]
mov byte [esp + 0x23], bl
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x1006162c
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x1000774c
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000eeb0
add esp, 4
cmp eax, ebx
je 0x10007e6f
push eax
lea ecx, [esp + 0x2c0]
call fcn.1000ccc0
lea ecx, [esp + 0x14]
mov byte [esp + 0x23], bl
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x10061654
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x100077a6
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000eeb0
add esp, 4
cmp eax, ebx
je 0x10007ea8
push eax
lea ecx, [esp + 0x2a4]
call fcn.1000ccc0
lea ecx, [esp + 0x14]
mov byte [esp + 0x2b], 1
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x10061680
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x100077fb
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000eeb0
add esp, 4
cmp eax, ebx
je 0x10007ee1
push eax
lea ecx, [esp + 0x2dc]
call fcn.1000ccc0
lea ecx, [esp + 0x14]
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x100616c4
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x10007855
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000eeb0
add esp, 4
cmp eax, ebx
je 0x10007f1a
push eax
lea ecx, [esp + 0x314]
call fcn.1000ccc0
lea ecx, [esp + 0x14]
mov byte [esp + 0x22], 1
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x100616f0
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x100078af
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000eeb0
add esp, 4
cmp eax, ebx
je 0x10007f53
push eax
lea ecx, [esp + 0x384]
call fcn.1000ccc0
lea ecx, [esp + 0x14]
mov byte [esp + 0x22], 1
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x1006171c
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x10007909
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000eeb0
add esp, 4
cmp eax, ebx
je 0x10007f8c
push eax
lea ecx, [esp + 0x34c]
call fcn.1000ccc0
lea ecx, [esp + 0x14]
mov byte [esp + 0x22], 1
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x10061748
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x10007963
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000eeb0
add esp, 4
cmp eax, ebx
je 0x10007fc5
push eax
lea ecx, [esp + 0x330]
call fcn.1000ccc0
lea ecx, [esp + 0x14]
mov byte [esp + 0x22], 1
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x1006177c
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x100079bd
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000eeb0
add esp, 4
cmp eax, ebx
je 0x10007ffe
push eax
lea ecx, [esp + 0x368]
call fcn.1000ccc0
lea ecx, [esp + 0x14]
mov byte [esp + 0x22], 1
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x100617b0
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x10007a20
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000eef0
mov edi, eax
add esp, 4
cmp edi, ebx
je 0x10008037
mov eax, dword [edi]
cmp eax, ebx
je 0x10007a00
cmp eax, 1
jne 0x10008070
mov ecx, dword [esp + 0x54]
mov edx, dword [ecx + 0x10]
lea ecx, [esp + 0x14]
mov dword [edx + 0x30], eax
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x100618a0
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
test eax, eax
je 0x1000816b
push 0x1006190c
lea ecx, [esp + 0x18]
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x10007a91
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000ef30
add esp, 4
cmp eax, ebx
je 0x100081a4
mov ecx, dword [esp + 0x54]
mov edx, dword [ecx + 0x10]
mov al, byte [eax]
lea ecx, [esp + 0x14]
mov byte [edx + 0x2e], al
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x10061954
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x10007ae6
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000ef30
add esp, 4
cmp eax, ebx
je 0x100081dd
cmp byte [eax], bl
je 0x10007d2a
or dword [esp + 0x24], 0x20
lea ecx, [esp + 0x14]
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x10061990
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x10007b3b
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000ef30
add esp, 4
cmp eax, ebx
je 0x10008216
cmp byte [eax], bl
je 0x10007d2a
or dword [esp + 0x24], 2
lea ecx, [esp + 0x14]
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x100619d0
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x10007b93
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000ef30
add esp, 4
cmp eax, ebx
je 0x1000824f
cmp byte [eax], bl
je 0x10007d2a
or dword [esp + 0x24], 0x1000
lea ecx, [esp + 0x14]
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x10061a18
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x10007beb
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000ef30
add esp, 4
cmp eax, ebx
je 0x10008288
cmp byte [eax], bl
je 0x10007d2a
or dword [esp + 0x24], 0x100
lea ecx, [esp + 0x14]
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x10061a5c
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x10007c43
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000ef30
add esp, 4
cmp eax, ebx
je 0x100082c1
cmp byte [eax], bl
je 0x10007d2a
or dword [esp + 0x24], 0x400
lea ecx, [esp + 0x14]
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x10061a9c
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x10007c9b
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000ef30
add esp, 4
cmp eax, ebx
je 0x100082fa
cmp byte [eax], bl
je 0x10007d2a
or dword [esp + 0x24], 0x80
lea ecx, [esp + 0x14]
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x10061adc
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x10007cef
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000ef30
add esp, 4
cmp eax, ebx
je 0x10008333
cmp byte [eax], bl
je 0x10007d2a
or dword [esp + 0x24], 0x10000
lea ecx, [esp + 0x14]
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x10061b28
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
test eax, eax
jne 0x10007d2a
lea ecx, [esp + 0x14]
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000ef30
add esp, 4
cmp eax, ebx
je 0x1000836c
cmp byte [eax], bl
je 0x10007d2a
or dword [esp + 0x24], 0x10
lea ecx, [esp + 0x14]
call fcn.1000a8f0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
jmp 0x100073f0
push 0x23
push 0x10061550
lea ecx, [esp + 0x34]
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
call fcn.10001d42
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0xd
call fcn.100045a0
push 0x10071c5c
lea edx, [esp + 0x208]
push edx
call fcn.10041bbc
push 0x10061580
lea ecx, [esp + 0x30]
call fcn.10001c77
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0xe
call fcn.100045a0
push 0x10071c5c
lea ecx, [esp + 0x208]
push ecx
call fcn.10041bbc
push 0x100615b0
lea ecx, [esp + 0x30]
call fcn.10001c77
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0xf
call fcn.100045a0
push 0x10071c5c
lea eax, [esp + 0x208]
push eax
call fcn.10041bbc
push 0x100615dc
lea ecx, [esp + 0x30]
call fcn.10001c77
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x10
call fcn.100045a0
push 0x10071c5c
lea edx, [esp + 0x208]
push edx
call fcn.10041bbc
push 0x10061608
lea ecx, [esp + 0x30]
call fcn.10001c77
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x11
call fcn.100045a0
push 0x10071c5c
lea ecx, [esp + 0x208]
push ecx
call fcn.10041bbc
push 0x10061634
lea ecx, [esp + 0x30]
call fcn.10001c77
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x12
call fcn.100045a0
push 0x10071c5c
lea eax, [esp + 0x208]
push eax
call fcn.10041bbc
push 0x1006165c
lea ecx, [esp + 0x30]
call fcn.10001c77
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x13
call fcn.100045a0
push 0x10071c5c
lea edx, [esp + 0x208]
push edx
call fcn.10041bbc
push 0x10061694
lea ecx, [esp + 0x30]
call fcn.10001c77
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x14
call fcn.100045a0
push 0x10071c5c
lea ecx, [esp + 0x208]
push ecx
call fcn.10041bbc
push 0x100616cc
lea ecx, [esp + 0x30]
call fcn.10001c77
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x15
call fcn.100045a0
push 0x10071c5c
lea eax, [esp + 0x208]
push eax
call fcn.10041bbc
push 0x100616f8
lea ecx, [esp + 0x30]
call fcn.10001c77
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x16
call fcn.100045a0
push 0x10071c5c
lea edx, [esp + 0x208]
push edx
call fcn.10041bbc
push 0x10061724
lea ecx, [esp + 0x30]
call fcn.10001c77
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x17
call fcn.100045a0
push 0x10071c5c
lea ecx, [esp + 0x208]
push ecx
call fcn.10041bbc
push 0x10061754
lea ecx, [esp + 0x30]
call fcn.10001c77
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x18
call fcn.100045a0
push 0x10071c5c
lea eax, [esp + 0x208]
push eax
call fcn.10041bbc
push 0x10061788
lea ecx, [esp + 0x30]
call fcn.10001c77
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x19
call fcn.100045a0
push 0x10071c5c
lea edx, [esp + 0x208]
push edx
call fcn.10041bbc
push 0x100617cc
lea ecx, [esp + 0x30]
call fcn.10001c77
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x1a
call fcn.100045a0
push 0x10071c5c
lea ecx, [esp + 0x208]
push ecx
call fcn.10041bbc
push 1
push 2
cmp eax, 2
jne 0x100080f2
lea ecx, [esp + 0x10c]
call fcn.1000edd0
mov edx, dword [edi]
push 0x10061808
push edx
lea eax, [esp + 0x10c]
push 0x10061858
push eax
mov byte [esp + 0x3d8], 0x1b
call fcn.1000e7c0
add esp, 8
mov ecx, eax
call fcn.1000ec80
push eax
call fcn.1000e7c0
add esp, 8
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x108]
call fcn.1000c850
push eax
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x1c
call fcn.100045a0
push 0x10071c5c
lea edx, [esp + 0x208]
push edx
call fcn.10041bbc
lea ecx, [esp + 0x18c]
call fcn.1000edd0
mov eax, dword [edi]
push 0x10061868
push eax
lea ecx, [esp + 0x18c]
push 0x10061890
push ecx
mov byte [esp + 0x3d8], 0x1d
call fcn.1000e7c0
add esp, 8
mov ecx, eax
call fcn.1000ec80
push eax
call fcn.1000e7c0
add esp, 8
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x188]
call fcn.1000c850
push eax
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x1e
call fcn.100045a0
push 0x10071c5c
lea eax, [esp + 0x208]
push eax
call fcn.10041bbc
push 0x100618c8
lea ecx, [esp + 0x30]
call fcn.10001c77
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x1f
call fcn.1000c540
push 0x10072afc
lea edx, [esp + 0x208]
push edx
call fcn.10041bbc
push 0x10061924
lea ecx, [esp + 0x30]
call fcn.10001c77
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x20
call fcn.100045a0
push 0x10071c5c
lea ecx, [esp + 0x208]
push ecx
call fcn.10041bbc
push 0x10061964
lea ecx, [esp + 0x30]
call fcn.10001c77
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x21
call fcn.100045a0
push 0x10071c5c
lea eax, [esp + 0x208]
push eax
call fcn.10041bbc
push 0x100619a4
lea ecx, [esp + 0x30]
call fcn.10001c77
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x22
call fcn.100045a0
push 0x10071c5c
lea edx, [esp + 0x208]
push edx
call fcn.10041bbc
push 0x100619e8
lea ecx, [esp + 0x30]
call fcn.10001c77
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x23
call fcn.100045a0
push 0x10071c5c
lea ecx, [esp + 0x208]
push ecx
call fcn.10041bbc
push 0x10061a2c
lea ecx, [esp + 0x30]
call fcn.10001c77
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x24
call fcn.100045a0
push 0x10071c5c
lea eax, [esp + 0x208]
push eax
call fcn.10041bbc
push 0x10061a70
lea ecx, [esp + 0x30]
call fcn.10001c77
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x25
call fcn.100045a0
push 0x10071c5c
lea edx, [esp + 0x208]
push edx
call fcn.10041bbc
push 0x10061ab0
lea ecx, [esp + 0x30]
call fcn.10001c77
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x26
call fcn.100045a0
push 0x10071c5c
lea ecx, [esp + 0x208]
push ecx
call fcn.10041bbc
push 0x10061af4
lea ecx, [esp + 0x30]
call fcn.10001c77
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x27
call fcn.100045a0
push 0x10071c5c
lea eax, [esp + 0x208]
push eax
call fcn.10041bbc
push 0x10061b3c
lea ecx, [esp + 0x30]
call fcn.10001c77
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x28
call fcn.100045a0
push 0x10071c5c
lea edx, [esp + 0x208]
push edx
call fcn.10041bbc
push 7
push 0x10061b68
push 7
push ebx
lea ecx, [esp + 0x278]
call fcn.10003e40
lea ecx, [esp + 0x268]
test eax, eax
jne 0x10008441
push 0xffffffffffffffff
push 7
lea eax, [esp + 0x34]
push eax
mov byte [esp + 0x2f], bl
call fcn.1000cce0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x2c8]
mov byte [esp + 0x3d4], 0x29
call fcn.10001cb0
cmp dword [esp + 0x44], 0x10
mov byte [esp + 0x3c8], 0xc
jb 0x1000840c
mov ecx, dword [esp + 0x30]
push ecx
call fcn.100411cc
add esp, 4
push 1
push 0x10061b70
lea ecx, [esp + 0x254]
call fcn.10001d42
mov edx, dword [esp + 0x54]
mov ecx, dword [edx + 8]
lea edx, [esp + 0x7c]
mov dword [esp + 0x7c], 3
mov eax, dword [ecx]
mov eax, dword [eax + 0x3c]
push edx
push 9
call eax
jmp 0x1000868e
push 6
push 0x10061b74
push 6
push ebx
call fcn.10003e40
test eax, eax
jne 0x10008627
push 0xffffffffffffffff
push 6
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x274]
call fcn.1000cce0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x258]
mov byte [esp + 0x3d4], 0x2a
call fcn.10001cb0
cmp dword [esp + 0x44], 0x10
mov byte [esp + 0x3c8], 0xc
jb 0x100084a1
mov edx, dword [esp + 0x30]
push edx
call fcn.100411cc
add esp, 4
push 1
push ebx
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x258]
mov byte [esp + 0x28], 0x2f
call fcn.1000a780
mov edi, eax
cmp edi, 0xffffffff
je 0x10008563
mov ecx, dword [esp + 0x260]
inc edi
sub ecx, edi
push ecx
push edi
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0x258]
call fcn.1000cce0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x2ac]
mov byte [esp + 0x3d4], 0x2b
call fcn.10001cb0
cmp dword [esp + 0x44], 0x10
mov byte [esp + 0x3c8], 0xc
jb 0x10008516
mov eax, dword [esp + 0x30]
push eax
call fcn.100411cc
add esp, 4
dec edi
push edi
push ebx
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x258]
mov byte [esp + 0x37], 1
call fcn.1000cce0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x258]
mov byte [esp + 0x3d4], 0x2c
call fcn.10001cb0
cmp dword [esp + 0x44], 0x10
mov byte [esp + 0x3c8], 0xc
jb 0x10008563
mov edx, dword [esp + 0x30]
push edx
call fcn.100411cc
add esp, 4
push 1
push 0xffffffffffffffff
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x258]
mov byte [esp + 0x28], 0x3a
call fcn.1000a840
mov edi, eax
cmp edi, 0xffffffff
je 0x1000865b
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0x258]
call fcn.1000cce0
cmp dword [eax + 0x18], 0x10
jb 0x100085aa
mov eax, dword [eax + 4]
jmp 0x100085ad
add eax, 4
push eax
call fcn.1004260a
add esp, 4
cmp dword [esp + 0x44], 0x10
mov dword [esp + 0x78], eax
jb 0x100085ce
mov eax, dword [esp + 0x30]
push eax
call fcn.100411cc
add esp, 4
push edi
push ebx
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x258]
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
call fcn.1000cce0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x258]
mov byte [esp + 0x3d4], 0x2d
call fcn.10001cb0
cmp dword [esp + 0x74], 0x10
mov byte [esp + 0x3c8], 0xc
jb 0x1000865b
mov edx, dword [esp + 0x60]
push edx
call fcn.100411cc
add esp, 4
jmp 0x1000865b
cmp dword [esp + 0x280], 0x10
mov edx, dword [esp + 0x26c]
jae 0x1000863f
lea edx, [esp + 0x26c]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10008644
sub eax, edi
push eax
push edx
lea ecx, [esp + 0x254]
call fcn.10001d42
cmp byte [esp + 0x23], bl
je 0x1000868e
push 9
push 0x10061b7c
push 9
push ebx
lea ecx, [esp + 0x25c]
call fcn.10003e40
test eax, eax
jne 0x1000868e
push 9
push 0x10061b88
lea ecx, [esp + 0x254]
call fcn.10001d42
mov eax, dword [esi + 0x18]
mov eax, dword [eax]
mov edi, dword [esi]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], eax
lea ecx, [ecx]
mov eax, dword [esi + 0x18]
mov esi, dword [esi]
mov dword [esp + 0x100], eax
cmp edi, ebx
je 0x100086b4
cmp edi, esi
je 0x100086b9
call fcn.10041baa
mov ecx, dword [esp + 0x100]
cmp dword [esp + 0x18], ecx
je 0x10008bb0
cmp edi, ebx
jne 0x10008732
call fcn.10041baa
xor eax, eax
mov edx, dword [esp + 0x18]
cmp edx, dword [eax + 0x18]
jne 0x100086e3
call fcn.10041baa
mov esi, dword [esp + 0x18]
mov eax, dword [esi + 0x24]
push 0x13
add esi, 0x10
push 0x10061b94
push eax
push ebx
mov ecx, esi
call fcn.10003e40
test eax, eax
jne 0x1000876b
cmp edi, ebx
jne 0x10008736
call fcn.10041baa
xor edi, edi
mov esi, dword [esp + 0x18]
cmp esi, dword [edi + 0x18]
jne 0x1000871a
call fcn.10041baa
lea edx, [esi + 0x30]
cmp edx, ebx
je 0x10008a36
mov ecx, dword [edx]
cmp ecx, ebx
jge 0x1000873a
or eax, 0xffffffff
sub eax, ecx
jmp 0x1000873c
mov eax, dword [edi]
jmp 0x100086d5
mov edi, dword [edi]
jmp 0x1000870c
mov eax, ecx
jmp dword [eax*4 + 0x10008a54]
cmp edi, ebx
jne 0x100087d0
call fcn.10041baa
xor eax, eax
mov ecx, dword [esp + 0x18]
cmp ecx, dword [eax + 0x18]
jne 0x10008784
call fcn.10041baa
mov edx, dword [esi + 0x14]
push 0x10
push 0x10061bdc
push edx
push ebx
mov ecx, esi
call fcn.10003e40
test eax, eax
jne 0x10008823
cmp edi, ebx
jne 0x100087d4
call fcn.10041baa
xor edi, edi
mov esi, dword [esp + 0x18]
cmp esi, dword [edi + 0x18]
jne 0x100087b8
call fcn.10041baa
lea edx, [esi + 0x30]
cmp edx, ebx
je 0x10008a81
mov ecx, dword [edx]
cmp ecx, ebx
jge 0x100087d8
or eax, 0xffffffff
sub eax, ecx
jmp switch.0x100087da
mov eax, dword [edi]
jmp 0x10008776
mov edi, dword [edi]
jmp 0x100087aa
mov eax, ecx
jmp dword [eax*4 + 0x10008a64]
cmp edi, ebx
jne 0x100088bb
call fcn.10041baa
xor eax, eax
mov ecx, dword [esp + 0x18]
cmp ecx, dword [eax + 0x18]
jne 0x10008840
call fcn.10041baa
mov edx, dword [esi + 0x14]
push 0x11
push 0x10061c20
push edx
push ebx
mov ecx, esi
call fcn.10003e40
test eax, eax
jne 0x100088c6
cmp edi, ebx
jne 0x100088c2
call fcn.10041baa
xor edi, edi
mov esi, dword [esp + 0x18]
cmp esi, dword [edi + 0x18]
jne 0x10008870
call fcn.10041baa
add esi, 0x30
push esi
call fcn.1000eef0
add esp, 4
cmp eax, ebx
je 0x10008acc
mov eax, dword [eax]
mov ecx, dword [esp + 0x54]
mov ecx, dword [ecx + 8]
mov dword [esp + 0x80], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0x3c]
lea eax, [esp + 0x80]
push eax
push 0xc
call edx
lea ecx, [esp + 0x14]
call fcn.1000a8f0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x4c]
jmp 0x100086a0
mov eax, dword [edi]
jmp 0x10008832
mov edi, dword [edi]
jmp 0x10008862
cmp edi, ebx
jne 0x10008944
call fcn.10041baa
xor eax, eax
mov ecx, dword [esp + 0x18]
cmp ecx, dword [eax + 0x18]
jne 0x100088df
call fcn.10041baa
mov edx, dword [esi + 0x14]
push 0xd
push 0x10061c64
push edx
push ebx
mov ecx, esi
call fcn.10003e40
test eax, eax
jne 0x1000894c
cmp edi, ebx
jne 0x10008948
call fcn.10041baa
xor edi, edi
mov esi, dword [esp + 0x18]
cmp esi, dword [edi + 0x18]
jne 0x1000890f
call fcn.10041baa
add esi, 0x30
push esi
call fcn.1000ef30
add esp, 4
cmp eax, ebx
je 0x10008b05
mov al, byte [eax]
lea ecx, [esp + 0x14]
mov byte [esp + 0x53], 1
mov byte [esp + 0x4b], al
call fcn.1000a8f0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x4c]
jmp 0x100086a0
mov eax, dword [edi]
jmp 0x100088d1
mov edi, dword [edi]
jmp 0x10008901
cmp edi, ebx
jne 0x100089bf
call fcn.10041baa
xor edi, edi
mov ecx, dword [esp + 0x18]
cmp ecx, dword [edi + 0x18]
jne 0x10008965
call fcn.10041baa
mov edx, dword [esi + 0x14]
push 0x10
push 0x10061c9c
push edx
push ebx
mov ecx, esi
call fcn.10003e40
lea ecx, [esp + 0x14]
test eax, eax
jne 0x100089c3
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000eeb0
add esp, 4
cmp eax, ebx
je 0x10008b3e
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x290]
call fcn.10001cb0
lea ecx, [esp + 0x14]
call fcn.1000a8f0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x4c]
jmp 0x100086a0
mov edi, dword [edi]
jmp 0x10008957
push 0x10061ce0
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
lea ecx, [esp + 0x14]
test eax, eax
jne 0x100089fa
call fcn.1000b0d0
add eax, 0x20
push eax
call fcn.1000ef30
add esp, 4
cmp eax, ebx
je 0x10008b77
push eax
push 0x13
jmp 0x10008a12
push 0x10061d30
call fcn.1000b0d0
mov ecx, eax
call fcn.1000b6a0
test eax, eax
jne 0x10008a20
push ebx
push 2
mov ecx, dword [esp + 0x5c]
mov ecx, dword [ecx + 8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x3c]
call eax
lea ecx, [esp + 0x14]
call fcn.1000a8f0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x4c]
jmp 0x100086a0
push 0x31
push 0x10061ba8
lea ecx, [esp + 0x34]
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
call fcn.10001d42
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x2e
call fcn.100045a0
push 0x10071c5c
lea edx, [esp + 0x208]
push edx
call fcn.10041bbc
push 0x2e
push 0x10061bf0
lea ecx, [esp + 0x34]
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
call fcn.10001d42
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x2f
call fcn.100045a0
push 0x10071c5c
lea ecx, [esp + 0x208]
push ecx
call fcn.10041bbc
push 0x10061c34
lea ecx, [esp + 0x30]
call fcn.10001c77
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x30
call fcn.100045a0
push 0x10071c5c
lea eax, [esp + 0x208]
push eax
call fcn.10041bbc
push 0x10061c74
lea ecx, [esp + 0x30]
call fcn.10001c77
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x31
call fcn.100045a0
push 0x10071c5c
lea edx, [esp + 0x208]
push edx
call fcn.10041bbc
push 0x10061cb0
lea ecx, [esp + 0x30]
call fcn.10001c77
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x32
call fcn.100045a0
push 0x10071c5c
lea ecx, [esp + 0x208]
push ecx
call fcn.10041bbc
push 0x10061cfc
lea ecx, [esp + 0x30]
call fcn.10001c77
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x208]
mov byte [esp + 0x3cc], 0x33
call fcn.100045a0
push 0x10071c5c
lea eax, [esp + 0x208]
push eax
call fcn.10041bbc
mov esi, dword [esp + 0x54]
mov ecx, dword [esi + 8]
add esi, 8
lea eax, [esp + 0x1c]
mov byte [esp + 0x1c], 1
mov edx, dword [ecx]
mov edx, dword [edx + 0x3c]
push eax
push 0x12
mov dword [esp + 0x54], esi
call edx
mov ecx, dword [esi]
mov eax, dword [esp + 0x288]
mov esi, 0x10
cmp dword [esp + 0x29c], esi
jae 0x10008bef
lea eax, [esp + 0x288]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x3c]
push 7
call eax
cmp byte [esp + 0x22], bl
je 0x10008ead
mov edx, dword [esp + 0x368]
cmp dword [esp + 0x37c], esi
jae 0x10008c1a
lea edx, [esp + 0x368]
mov eax, edx
mov dword [esp + 0x74], 0xf
mov dword [esp + 0x70], ebx
mov byte [esp + 0x60], bl
lea edi, [eax + 1]
nop
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10008c30
sub eax, edi
push eax
push edx
lea ecx, [esp + 0x64]
call fcn.10001d42
mov edx, dword [esp + 0x330]
mov byte [esp + 0x3c8], 0x34
cmp dword [esp + 0x344], esi
jae 0x10008c63
lea edx, [esp + 0x330]
mov eax, edx
mov dword [esp + 0xc0], 0xf
mov dword [esp + 0xbc], ebx
mov byte [esp + 0xac], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10008c81
sub eax, edi
push eax
push edx
lea ecx, [esp + 0xb0]
call fcn.10001d42
mov edx, dword [esp + 0x34c]
mov byte [esp + 0x3c8], 0x35
cmp dword [esp + 0x360], esi
jae 0x10008cb7
lea edx, [esp + 0x34c]
mov eax, edx
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10008cd5
sub eax, edi
push eax
push edx
lea ecx, [esp + 0x94]
call fcn.10001d42
mov edx, dword [esp + 0x384]
mov byte [esp + 0x3c8], 0x36
cmp dword [esp + 0x398], esi
jae 0x10008d0b
lea edx, [esp + 0x384]
mov eax, edx
mov dword [esp + 0xdc], 0xf
mov dword [esp + 0xd8], ebx
mov byte [esp + 0xc8], bl
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10008d30
sub eax, edi
push eax
push edx
lea ecx, [esp + 0xcc]
call fcn.10001d42
mov edx, dword [esp + 0x314]
mov byte [esp + 0x3c8], 0x37
cmp dword [esp + 0x328], esi
jae 0x10008d66
lea edx, [esp + 0x314]
mov eax, edx
mov dword [esp + 0xf8], 0xf
mov dword [esp + 0xf4], ebx
mov byte [esp + 0xe4], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10008d84
sub eax, edi
push eax
push edx
lea ecx, [esp + 0xe8]
call fcn.10001d42
mov ecx, dword [esp + 0x4c]
mov ecx, dword [ecx]
mov edx, dword [ecx]
mov edx, dword [edx + 0x50]
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0xac]
push eax
lea eax, [esp + 0x94]
push eax
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xf0]
push eax
mov byte [esp + 0x3dc], 0x38
call edx
cmp dword [esp + 0xf8], esi
jb 0x10008dee
mov eax, dword [esp + 0xe4]
push eax
call fcn.100411cc
add esp, 4
mov edi, 0xf
mov dword [esp + 0xf8], edi
mov dword [esp + 0xf4], ebx
mov byte [esp + 0xe4], bl
cmp dword [esp + 0xdc], esi
jb 0x10008e21
mov ecx, dword [esp + 0xc8]
push ecx
call fcn.100411cc
add esp, 4
mov dword [esp + 0xdc], edi
mov dword [esp + 0xd8], ebx
mov byte [esp + 0xc8], bl
cmp dword [esp + 0xa4], esi
jb 0x10008e4f
mov edx, dword [esp + 0x90]
push edx
call fcn.100411cc
add esp, 4
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
cmp dword [esp + 0xc0], esi
jb 0x10008e7d
mov eax, dword [esp + 0xac]
push eax
call fcn.100411cc
add esp, 4
mov dword [esp + 0xc0], edi
mov dword [esp + 0xbc], ebx
mov byte [esp + 0xac], bl
mov byte [esp + 0x3c8], 0xc
cmp dword [esp + 0x74], esi
jb 0x10008ead
mov ecx, dword [esp + 0x60]
push ecx
call fcn.100411cc
add esp, 4
mov eax, dword [esp + 0x26c]
cmp dword [esp + 0x280], esi
jae 0x10008ec4
lea eax, [esp + 0x26c]
push eax
push 0x10061d40
call fcn.100056e0
mov eax, dword [esp + 0x300]
add esp, 8
cmp dword [esp + 0x30c], esi
jae 0x10008ee9
lea eax, [esp + 0x2f8]
push eax
push 0x10061d4c
call fcn.100056e0
mov esi, dword [esp + 0x80]
push esi
push 0x10061d54
call fcn.100056e0
mov eax, dword [esp + 0x2b4]
mov ecx, 0x10
add esp, 0x10
cmp dword [esp + 0x2b8], ecx
jae 0x10008f25
lea eax, [esp + 0x2a4]
push eax
push 0x10061d5c
call fcn.100056e0
mov eax, dword [esp + 0x2c8]
add esp, 8
cmp dword [esp + 0x2d4], ecx
jae 0x10008f4a
lea eax, [esp + 0x2c0]
push eax
push 0x10061d68
call fcn.100056e0
add esp, 8
cmp byte [esp + 0x23], bl
jne 0x10008f67
lea edi, [esp + 0x2bc]
jmp 0x10008f9a
push ebx
push 0x100614e7
lea ecx, [esp + 0x64]
mov dword [esp + 0x7c], 0xf
mov dword [esp + 0x78], ebx
mov byte [esp + 0x68], bl
call fcn.10001d42
lea edi, [esp + 0x5c]
mov byte [esp + 0x3c8], 0x39
mov dword [esp + 0x58], 1
cmp byte [esp + 0x2b], bl
je 0x10008fa9
cmp dword [esp + 0x2b4], ebx
jne 0x10008fbb
push ebx
push 0x1006150d
lea ecx, [esp + 0x2a8]
call fcn.10001d42
mov edx, dword [esp + 0x4c]
mov ecx, dword [edx]
mov edx, dword [esp + 0x24]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
push edi
push esi
lea edx, [esp + 0x2ac]
push edx
lea edx, [esp + 0x3ac]
push edx
lea edx, [esp + 0x308]
push edx
lea edx, [esp + 0x264]
push edx
call eax
test al, al
sete byte [esp + 0x1c]
test byte [esp + 0x58], 1
mov dword [esp + 0x3c8], 0xc
je 0x10009021
and dword [esp + 0x58], 0xfffffffe
cmp dword [esp + 0x74], 0x10
jb 0x10009021
mov ecx, dword [esp + 0x60]
push ecx
call fcn.100411cc
add esp, 4
cmp byte [esp + 0x1c], bl
je 0x10009235
mov esi, dword [esp + 0x4c]
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [esi]
mov edx, dword [ecx]
mov edx, dword [edx + 0x4c]
lea eax, [esp + 0x2c]
push eax
call edx
mov edi, 0x10
cmp dword [eax + 0x18], edi
jb 0x10009055
mov eax, dword [eax + 4]
jmp 0x10009058
add eax, 4
push eax
push 0x10061d90
call fcn.100056f0
add esp, 8
cmp dword [esp + 0x44], edi
jb 0x10009079
mov eax, dword [esp + 0x30]
push eax
call fcn.100411cc
add esp, 4
mov ecx, dword [esi]
mov edx, dword [ecx]
mov edx, dword [edx + 0x1c]
lea eax, [esp + 0x2c]
push eax
call edx
cmp dword [eax + 0x18], edi
jb 0x10009091
mov eax, dword [eax + 4]
jmp 0x10009094
add eax, 4
push eax
push 0x10061da8
call fcn.100056f0
add esp, 8
cmp dword [esp + 0x44], edi
jb 0x100090b5
mov eax, dword [esp + 0x30]
push eax
call fcn.100411cc
add esp, 4
mov ecx, esi
mov edi, dword [ecx]
mov edx, dword [edi]
mov edx, dword [edx + 0x1c]
lea eax, [esp + 0x5c]
push eax
mov ecx, edi
call edx
mov esi, eax
mov eax, dword [edi]
mov edx, dword [eax + 0x4c]
lea ecx, [esp + 0x2c]
push ecx
mov ecx, edi
mov byte [esp + 0x3cc], 0x3a
call edx
cmp dword [esi + 0x18], 0x10
mov byte [esp + 0x3c8], 0x3b
jb 0x100090f2
mov esi, dword [esi + 4]
jmp 0x100090f5
add esi, 4
cmp dword [eax + 0x18], 0x10
jb 0x10009100
mov eax, dword [eax + 4]
jmp 0x10009103
add eax, 4
push esi
push eax
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov ecx, edi
call edx
push eax
push 0x10061dc0
call fcn.100056f0
mov esi, 0x10
add esp, 0x10
cmp dword [esp + 0x44], esi
jb 0x10009134
mov eax, dword [esp + 0x30]
push eax
call fcn.100411cc
add esp, 4
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], ebx
mov byte [esp + 0x30], bl
mov byte [esp + 0x3c8], 0xc
cmp dword [esp + 0x74], esi
jb 0x1000915f
mov ecx, dword [esp + 0x60]
push ecx
call fcn.100411cc
add esp, 4
mov edx, dword [esp + 0x4c]
mov edi, dword [edx]
mov eax, dword [edi]
mov edx, dword [eax + 0x4c]
lea ecx, [esp + 0x5c]
push ecx
mov ecx, edi
call edx
mov esi, eax
mov eax, dword [edi]
mov edx, dword [eax + 0x1c]
lea ecx, [esp + 0x2c]
push ecx
mov ecx, edi
mov byte [esp + 0x3cc], 0x3c
call edx
mov dword [esp + 0x80], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov ecx, edi
mov byte [esp + 0x3c8], 0x3d
call edx
push eax
mov eax, dword [esp + 0x84]
push esi
push eax
lea ecx, [esp + 0x210]
call fcn.10004520
cmp dword [esp + 0x44], 0x10
jb 0x100091cd
mov ecx, dword [esp + 0x30]
push ecx
call fcn.100411cc
add esp, 4
mov esi, 0xf
mov dword [esp + 0x44], esi
mov dword [esp + 0x40], ebx
mov byte [esp + 0x30], bl
cmp dword [esp + 0x74], 0x10
mov byte [esp + 0x3c8], 0x40
jb 0x100091fa
mov edx, dword [esp + 0x60]
push edx
call fcn.100411cc
add esp, 4
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], ebx
mov byte [esp + 0x60], bl
call fcn.10036df0
lea eax, [esp + 0x204]
push eax
lea ecx, [esp + 0x108]
call fcn.100046f0
push 0x10072afc
lea ecx, [esp + 0x108]
push ecx
call fcn.10041bbc
cmp byte [esp + 0x53], bl
je 0x1000924f
mov edx, dword [esp + 0x4c]
mov ecx, dword [edx]
mov eax, dword [ecx]
mov eax, dword [eax + 0x3c]
lea edx, [esp + 0x4b]
push edx
push 0x14
call eax
mov esi, dword [esp + 0x54]
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push 1
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x88]
push 3
mov ecx, esi
call eax
cmp dword [esp + 0x29c], 0x10
mov eax, dword [esp + 0x288]
jae 0x10009284
lea eax, [esp + 0x288]
mov ecx, dword [esp + 0x298]
mov edx, dword [esp + 0x2ec]
push ecx
push eax
push edx
push ebx
lea ecx, [esp + 0x2e8]
call fcn.10003e40
test eax, eax
je 0x10009349
cmp dword [esp + 0x2ec], ebx
je 0x100092bc
lea edi, [esp + 0x2d8]
jmp 0x100092d9
push 0x10061de0
lea ecx, [esp + 0x30]
call fcn.10001c65
mov edi, eax
or dword [esp + 0x58], 2
mov byte [esp + 0x3c8], 0x41
push 0x10061de8
lea ecx, [esp + 0x60]
call fcn.10001c65
push edi
lea eax, [esp + 0x60]
push eax
mov ecx, esi
mov dword [esp + 0x3d0], 0x42
call fcn.10006f10
cmp dword [esp + 0x74], 0x10
jb 0x10009313
mov ecx, dword [esp + 0x60]
push ecx
call fcn.100411cc
add esp, 4
test byte [esp + 0x58], 2
mov dword [esp + 0x74], 0xf
mov dword [esp + 0x70], ebx
mov byte [esp + 0x60], bl
mov dword [esp + 0x3c8], 0xc
je 0x10009349
cmp dword [esp + 0x44], 0x10
jb 0x10009349
mov edx, dword [esp + 0x30]
push edx
call fcn.100411cc
add esp, 4
push 0x3c
call fcn.10041302
add esp, 4
mov dword [esp + 0x80], eax
mov byte [esp + 0x3c8], 0x43
cmp eax, ebx
je 0x100093a1
mov ecx, dword [esi + 0x10]
add ecx, 0x38
push ecx
mov ecx, dword [esp + 0x50]
mov edx, dword [ecx]
sub esp, 8
mov edi, esp
mov dword [edi], edx
mov edx, dword [ecx + 4]
mov dword [esp + 0x94], esp
mov dword [edi + 4], edx
cmp edx, ebx
je 0x10009397
add edx, 4
mov ecx, 1
lock xadd dword [edx], ecx
push esi
mov ecx, eax
call fcn.10019620
jmp 0x100093a3
xor eax, eax
mov edx, dword [esi + 0x10]
mov ecx, dword [edx + 0x40]
add edx, 0x40
mov byte [esp + 0x3c8], 0xc
mov dword [edx], eax
cmp ecx, ebx
je 0x100093c2
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov esi, 0x10
cmp dword [esp + 0x37c], esi
jb 0x100093e0
mov ecx, dword [esp + 0x368]
push ecx
call fcn.100411cc
add esp, 4
mov edi, 0xf
mov dword [esp + 0x37c], edi
mov dword [esp + 0x378], ebx
mov byte [esp + 0x368], bl
cmp dword [esp + 0x344], esi
jb 0x10009413
mov edx, dword [esp + 0x330]
push edx
call fcn.100411cc
add esp, 4
mov dword [esp + 0x344], edi
mov dword [esp + 0x340], ebx
mov byte [esp + 0x330], bl
cmp dword [esp + 0x360], esi
jb 0x10009441
mov eax, dword [esp + 0x34c]
push eax
call fcn.100411cc
add esp, 4
mov dword [esp + 0x360], edi
mov dword [esp + 0x35c], ebx
mov byte [esp + 0x34c], bl
cmp dword [esp + 0x398], esi
jb 0x1000946f
mov ecx, dword [esp + 0x384]
push ecx
call fcn.100411cc
add esp, 4
mov dword [esp + 0x398], edi
mov dword [esp + 0x394], ebx
mov byte [esp + 0x384], bl
cmp dword [esp + 0x328], esi
jb 0x1000949d
mov edx, dword [esp + 0x314]
push edx
call fcn.100411cc
add esp, 4
mov dword [esp + 0x328], edi
mov dword [esp + 0x324], ebx
mov byte [esp + 0x314], bl
cmp dword [esp + 0x2f0], esi
jb 0x100094cb
mov eax, dword [esp + 0x2dc]
push eax
call fcn.100411cc
add esp, 4
mov dword [esp + 0x2f0], edi
mov dword [esp + 0x2ec], ebx
mov byte [esp + 0x2dc], bl
cmp dword [esp + 0x29c], esi
jb 0x100094f9
mov ecx, dword [esp + 0x288]
push ecx
call fcn.100411cc
add esp, 4
mov dword [esp + 0x29c], edi
mov dword [esp + 0x298], ebx
mov byte [esp + 0x288], bl
cmp dword [esp + 0x2b8], esi
jb 0x10009527
mov edx, dword [esp + 0x2a4]
push edx
call fcn.100411cc
add esp, 4
mov dword [esp + 0x2b8], edi
mov dword [esp + 0x2b4], ebx
mov byte [esp + 0x2a4], bl
cmp dword [esp + 0x3b4], esi
jb 0x10009555
mov eax, dword [esp + 0x3a0]
push eax
call fcn.100411cc
add esp, 4
mov dword [esp + 0x3b4], edi
mov dword [esp + 0x3b0], ebx
mov byte [esp + 0x3a0], bl
cmp dword [esp + 0x30c], esi
jb 0x10009583
mov ecx, dword [esp + 0x2f8]
push ecx
call fcn.100411cc
add esp, 4
mov dword [esp + 0x30c], edi
mov dword [esp + 0x308], ebx
mov byte [esp + 0x2f8], bl
cmp dword [esp + 0x280], esi
jb 0x100095b1
mov edx, dword [esp + 0x26c]
push edx
call fcn.100411cc
add esp, 4
mov dword [esp + 0x280], edi
mov dword [esp + 0x27c], ebx
mov byte [esp + 0x26c], bl
cmp dword [esp + 0x2d4], esi
jb 0x100095df
mov eax, dword [esp + 0x2c0]
push eax
call fcn.100411cc
add esp, 4
mov dword [esp + 0x2d4], edi
mov dword [esp + 0x2d0], ebx
mov byte [esp + 0x2c0], bl
cmp dword [esp + 0x264], esi
jb 0x1000960d
mov ecx, dword [esp + 0x250]
push ecx
call fcn.100411cc
add esp, 4
mov ecx, dword [esp + 0x3c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3a8]
xor ecx, esp
call fcn.1004102e
mov esp, ebp
pop ebp
ret 4
mov eax, ebp
mov ecx, dword [esp + 0x1d0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c8
ret 8
push esp
mov byte [esp + 0x1dc], 7
call fcn.100045a0
push 0x10071c5c
lea ecx, [esp + 0x54]
push ecx
call fcn.10041bbc
push 0x10062300
mov ecx, esi
call fcn.1000b6a0
test eax, eax
jne 0x1000972e
push 0x10062324
lea ecx, [esp + 0x38]
call fcn.10001c77
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0x54]
mov dword [esp + 0x1dc], 8
call fcn.1000c5c0
push 0x10072b1c
lea eax, [esp + 0x54]
push eax
call fcn.10041bbc
int3
mov ebx, dword [fcn.10061138]
call ebx
mov dword [esi + 0x1f8], eax
push 0x1006dfd0
push dword [ebp - 0x1c]
call ebx
mov dword [esi + 0x1fc], eax
mov dword [esi + 0x70], edi
mov byte [esi + 0xc8], 0x43
mov byte [esi + 0x14b], 0x43
mov dword [esi + 0x68], 0x100816b0
push 0xd
call fcn.10048b49
pop ecx
and dword [ebp - 4], 0
push dword [esi + 0x68]
call dword [fcn.1006114c]
mov dword [ebp - 4], 0xfffffffe
call fcn.1004571d
push 0xc
call fcn.10048b49
pop ecx
mov dword [ebp - 4], edi
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x6c], eax
test eax, eax
jne 0x100456fc
mov eax, dword [0x100816a0]
mov dword [esi + 0x6c], eax
push dword [esi + 0x6c]
call fcn.1004992e
pop ecx
mov dword [ebp - 4], 0xfffffffe
call fcn.10045726
call fcn.100468f5
ret