Function at 0x10052b40
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10084ae5
mov eax, dword fs:[0]
push eax
sub esp, 0x208
mov eax, dword [0x100b6040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.10043160
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], str.JoinArena
push ecx
mov esi, eax
mov dword [ebp - 0x1c], 0x100432f0
lea eax, [ebp - 0x18]
push eax
push ecx
lea ecx, [ebp - 0x15c]
call fcn.10043480
sub esp, 0x18
mov dword [ebp - 4], 0
mov eax, esp
xorps xmm0, xmm0
mov ecx, esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x15c]
push eax
push 1
call fcn.1007cd60
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x15c]
test ecx, ecx
je 0x10052c16
mov eax, dword [ebp - 0x154]
sub eax, ecx
sar eax, 3
lea edx, [eax*8]
mov eax, ecx
cmp edx, 0x1000
jb 0x10052c0c
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10052c0c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1008278a
add esp, 8
call fcn.100404c0
mov eax, dword [0x100b8520]
mov dword [ebp - 0x168], 0x100b78d0
mov dword [ebp - 0x164], str.autoJoinWorld
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 1
mov dword [ebp - 0x158], 0x100a6760
mov dword [ebp - 0x154], 0x10043a30
cmp eax, dword [0x100b8524]
je 0x10052c96
mov dword [eax], 0x100b78d0
mov dword [eax + 4], str.autoJoinWorld
mov dword [eax + 8], 0
mov dword [eax + 0xc], 1
mov dword [eax + 0x10], 0x100a6760
mov dword [eax + 0x14], 0x10043a30
add dword [0x100b8520], 0x18
jmp 0x10052ca3
lea ecx, [ebp - 0x168]
push ecx
push eax
call fcn.1007c870
call fcn.100404c0
push fcn.10043900
lea ecx, [eax + 0x18]
call fcn.10040d80
sub esp, 0xc
mov edx, 0x10043af0
mov ecx, 0x100b60b4
call fcn.1007ff10
sub esp, 0xc
mov edx, 0x10043b20
mov ecx, 0x100b60b0
call fcn.1007ff10
call fcn.100404c0
mov eax, dword [0x100b8514]
mov dword [ebp - 0x18], str.ENDLESS_CHARACTER_BOOST_RESULT
cmp eax, dword [0x100b8518]
je 0x10052d01
mov dword [eax], str.ENDLESS_CHARACTER_BOOST_RESULT
add dword [0x100b8514], 4
jmp 0x10052d0b
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.1007c790
call fcn.10043160
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x144], str.BoostCharacter
push ecx
mov esi, eax
mov dword [ebp - 0x140], 0x10043bb0
lea eax, [ebp - 0x134]
mov dword [ebp - 0x13c], str.GetBoostCount
push eax
push ecx
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x138], 0x10043cd0
call fcn.10043480
sub esp, 0x18
mov dword [ebp - 4], 1
mov eax, esp
xorps xmm0, xmm0
mov ecx, esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x15c]
push eax
push 2
call fcn.1007cd60
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x15c]
test ecx, ecx
je 0x10052dd4
mov eax, dword [ebp - 0x154]
sub eax, ecx
sar eax, 3
lea edx, [eax*8]
mov eax, ecx
cmp edx, 0x1000
jb 0x10052dca
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10052dca
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1008278a
add esp, 8
mov eax, dword [0x100b7c6c]
mov dword [ebp - 0x18], 0x10043b70
mov dword [ebp - 0x16c], 0x531
cmp eax, dword [0x100b7c70]
je 0x10052e08
mov dword [eax], 0x531
mov dword [eax + 4], 0x10043b70
add dword [0x100b7c6c], 8
jmp 0x10052e19
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x16c]
push ecx
push eax
call fcn.10060950
sub esp, 0xc
mov edx, 0x10043d20
mov ecx, 0x100b60b8
call fcn.1007ff10
sub esp, 0xc
mov edx, 0x10043d40
mov ecx, 0x100b60bc
call fcn.1007ff10
sub esp, 0xc
mov edx, 0x10043d60
mov ecx, 0x100b60d0
call fcn.1007ff10
call fcn.100470d0
call fcn.10043160
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x7c], str.GetSpellRequiredLevel
push ecx
mov esi, eax
mov dword [ebp - 0x78], 0x100550d0
lea eax, [ebp - 0x54]
mov dword [ebp - 0x74], str.GetSpellFromTalent
push eax
push ecx
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x70], 0x100552d0
mov dword [ebp - 0x6c], str.GetPetTalentId
mov dword [ebp - 0x68], 0x10054f10
mov dword [ebp - 0x64], str.GetCVarBitfield
mov dword [ebp - 0x60], 0x100555a0
mov dword [ebp - 0x5c], str.SetCVarBitfield
mov dword [ebp - 0x58], 0x10055600
call fcn.10043480
sub esp, 0x18
mov dword [ebp - 4], 2
mov eax, esp
xorps xmm0, xmm0
mov ecx, esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x15c]
push eax
push 1
call fcn.1007cd60
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x15c]
test ecx, ecx
je 0x10052f35
mov eax, dword [ebp - 0x154]
sub eax, ecx
sar eax, 3
lea edx, [eax*8]
mov eax, ecx
cmp edx, 0x1000
jb 0x10052f2b
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10052f2b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1008278a
add esp, 8
lea ecx, [ebp - 0x18]
mov word [ebp - 0x18], 0x3036
xor edi, edi
lea esi, [ebp - 0x16]
xor eax, eax
mov dword [ebp - 0x24], edi
sub esi, ecx
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], eax
mov ecx, eax
je 0x10052f74
push esi
lea ecx, [ebp - 0x24]
call fcn.10042950
mov edi, dword [ebp - 0x24]
lea eax, [ebp - 0x18]
push esi
push eax
push edi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x1c]
lea ecx, [esi + edi]
add esp, 0xc
mov dword [ebp - 4], 3
mov dword [ebp - 0x160], 0x4648b3
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x15c], edi
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x154], eax
push ecx
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x16c], 0
lea edi, [ebp - 0x160]
lea esi, [ebp - 0x150]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 5
call fcn.10042720
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0xc4]
call fcn.10041730
lea ecx, [ebp - 0x38]
call fcn.100420c0
lea ecx, [ebp - 0x40]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 9
push eax
call fcn.10082be5
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0xa
call fcn.10041810
lea ecx, [ebp - 0x98]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xa0]
call fcn.100421b0
lea ecx, [ebp - 0xb8]
call fcn.100420c0
lea ecx, [ebp - 0xc0]
call fcn.100421b0
sub esp, 0xc
mov edx, 0x10055670
mov ecx, 0x100b60dc
call fcn.1007ff10
sub esp, 0xc
mov edx, 0x10055690
mov ecx, 0x100b60d8
call fcn.1007ff10
sub esp, 0xc
mov edx, 0x10058d00
mov ecx, 0x100b60f8
call fcn.1007ff10
sub esp, 0xc
mov edx, 0x10058d50
mov ecx, 0x100b60f4
call fcn.1007ff10
call fcn.100404c0
push 0x10041cd0
lea ecx, [eax + 0xc]
call fcn.10042600
mov dword [ebp - 0x20], 0xc029c033
mov word [ebp - 0x1c], 0x9090
mov byte [ebp - 0x1a], 0x90
lea ecx, [ebp - 0x20]
xor esi, esi
xor eax, eax
mov dword [ebp - 0x180], esi
lea edi, [ebp - 0x19]
mov dword [ebp - 0x17c], esi
sub edi, ecx
mov dword [ebp - 0x178], eax
mov ecx, eax
je 0x10053114
push edi
lea ecx, [ebp - 0x180]
call fcn.10042950
mov esi, dword [ebp - 0x180]
lea eax, [ebp - 0x20]
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x178]
lea ecx, [esi + edi]
add esp, 0xc
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x160], 0x5191c3
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x15c], esi
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x154], eax
push ecx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x18], 0
lea edi, [ebp - 0x160]
lea esi, [ebp - 0x150]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xd
call fcn.10042720
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x104]
call fcn.10041730
lea ecx, [ebp - 0x38]
call fcn.100420c0
lea ecx, [ebp - 0x40]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x11
push eax
call fcn.10082be5
sub esp, 0xc
mov dword [0x100b76b0], 0x525fc0
mov edx, 0x10041e20
mov ecx, 0x100b76b0
call fcn.1007ff10
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xe0]
call fcn.100421b0
lea ecx, [ebp - 0xf8]
call fcn.100420c0
lea ecx, [ebp - 0x100]
call fcn.100421b0
call fcn.100404c0
push 0x10055cb0
lea ecx, [eax + 0x34]
call fcn.10040d80
sub esp, 0xc
mov edx, 0x10060920
mov ecx, 0x100b60fc
call fcn.1007ff10
mov eax, 0x10060ad0
xor edi, edi
cmp dword [eax], 0xcccccccc
je 0x10053252
mov eax, 0x10060ad0
lea eax, [eax + 1]
inc edi
cmp dword [eax], 0xcccccccc
jne 0x10053246
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x18]
push eax
push 0x40
push edi
push 0x6226e3
call esi
push edi
push 0x10060ad0
push 0x6226e3
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push edi
push 0x6226e3
call esi
sub esp, 0xc
mov edx, 0x10060af0
mov ecx, 0x100b6100
call fcn.1007ff10
call fcn.10043160
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x144], str.SetSelectedRacial
push ecx
mov esi, eax
mov dword [ebp - 0x140], 0x10060b20
lea eax, [ebp - 0x134]
mov dword [ebp - 0x13c], str.GetSelectedRacial
push eax
push ecx
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x138], 0x10060c20
call fcn.10043480
sub esp, 0x18
mov dword [ebp - 4], 0x13
mov eax, esp
xorps xmm0, xmm0
mov ecx, esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x15c]
push eax
push 2
call fcn.1007cd60
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x15c]
test ecx, ecx
je 0x10053363
mov eax, dword [ebp - 0x154]
sub eax, ecx
sar eax, 3
lea edx, [eax*8]
mov eax, ecx
cmp edx, 0x1000
jb 0x10053359
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10053359
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1008278a
add esp, 8
sub esp, 0xc
mov edx, 0x10060c50
mov ecx, 0x100b6114
call fcn.1007ff10
sub esp, 0xc
mov edx, 0x10060c70
mov ecx, 0x100b6110
call fcn.1007ff10
sub esp, 0xc
mov edx, 0x10060c90
mov ecx, 0x100b610c
call fcn.1007ff10
sub esp, 0xc
mov edx, 0x10060cb0
mov ecx, 0x100b6108
call fcn.1007ff10
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0x500c7
xor edi, edi
mov dword [ebp - 0x20], 0x1b30000
xor eax, eax
mov word [ebp - 0x1c], 0x9090
lea esi, [ebp - 0x19]
mov byte [ebp - 0x1a], 0x90
sub esi, ecx
mov dword [ebp - 0x180], edi
mov dword [ebp - 0x17c], edi
mov ecx, eax
mov dword [ebp - 0x178], eax
je 0x1005340e
push esi
lea ecx, [ebp - 0x180]
call fcn.10042950
mov edi, dword [ebp - 0x180]
lea eax, [ebp - 0x24]
push esi
push eax
push edi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x178]
lea ecx, [edi + esi]
add esp, 0xc
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x160], 0x421f87
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x15c], edi
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x154], eax
push ecx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x18], 0
lea edi, [ebp - 0x160]
lea esi, [ebp - 0x150]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x16
call fcn.10042720
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0xc4]
call fcn.10041730
lea ecx, [ebp - 0x38]
call fcn.100420c0
lea ecx, [ebp - 0x40]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x1a
push eax
call fcn.10082be5
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x1b
call fcn.10041810
lea ecx, [ebp - 0x98]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xa0]
call fcn.100421b0
lea ecx, [ebp - 0xb8]
call fcn.100420c0
lea ecx, [ebp - 0xc0]
call fcn.100421b0
call fcn.10043160
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x144], str.IsTalentsResetButtonAvailable
push ecx
mov esi, eax
mov dword [ebp - 0x140], 0x10061b80
lea eax, [ebp - 0x134]
mov dword [ebp - 0x13c], str.ResetCurrentPlayerSpec
push eax
push ecx
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x138], 0x10061bd0
call fcn.10043480
sub esp, 0x18
mov dword [ebp - 4], 0x1c
mov eax, esp
xorps xmm0, xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x15c]
push eax
push 1
mov ecx, esi
call fcn.1007cd60
lea ecx, [ebp - 0x15c]
mov dword [ebp - 4], 0xffffffff
call fcn.100435e0
call fcn.10068e00
call fcn.10076350
call fcn.10043160
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x14c], str.SetXPModifier
push ecx
mov esi, eax
mov dword [ebp - 0x148], 0x100770f0
lea eax, [ebp - 0x134]
mov dword [ebp - 0x144], str.GetXPModifier
push eax
push ecx
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x140], 0x100771f0
mov dword [ebp - 0x13c], str.GetMaxXPModifier
mov dword [ebp - 0x138], 0x10077230
call fcn.10043480
sub esp, 0x18
mov dword [ebp - 4], 0x1d
mov eax, esp
xorps xmm0, xmm0
mov ecx, esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x15c]
push eax
push 1
call fcn.1007cd60
lea ecx, [ebp - 0x15c]
mov dword [ebp - 4], 0xffffffff
call fcn.100435e0
call fcn.100404c0
mov eax, dword [0x100b8514]
mov dword [ebp - 0x18], str.XP_MODIFIER_CHANGED
cmp eax, dword [0x100b8518]
je 0x1005365d
mov dword [eax], str.XP_MODIFIER_CHANGED
add dword [0x100b8514], 4
jmp 0x10053667
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.1007c790
mov eax, dword [0x100b7c6c]
mov dword [ebp - 0x18], 0x10077080
mov dword [ebp - 0x16c], 0x51f
cmp eax, dword [0x100b7c70]
je 0x1005369b
mov dword [eax], 0x51f
mov dword [eax + 4], 0x10077080
add dword [0x100b7c6c], 8
jmp 0x100536ac
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x16c]
push ecx
push eax
call fcn.10060950
call fcn.100611c0
call fcn.100404c0
push 0x10061ac0
lea ecx, [eax + 0x18]
call fcn.10040d80
sub esp, 0xc
mov edx, 0x10061a20
mov ecx, 0x100b6134
call fcn.1007ff10
sub esp, 0xc
mov edx, 0x10061aa0
mov ecx, 0x100b6138
call fcn.1007ff10
lea ecx, [ebp - 0x16d]
mov byte [ebp - 0x16d], 0xeb
push ecx
lea eax, [ebp - 0x16c]
push eax
push ecx
lea ecx, [ebp - 0x180]
call fcn.10041e90
mov dword [ebp - 4], 0x1e
mov edx, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x134], 0x5f4dbf
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x128], edx
lea ecx, [ebp - 0x16e]
mov byte [ebp - 4], 0x1f
push ecx
lea eax, [ebp - 0x16d]
mov byte [ebp - 0x16e], 0xeb
push eax
push ecx
lea ecx, [ebp - 0x198]
call fcn.10041e90
mov edx, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x124], 0x816625
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x118], edx
lea ecx, [ebp - 0x16f]
mov byte [ebp - 4], 0x21
push ecx
lea eax, [ebp - 0x16e]
mov byte [ebp - 0x16f], 3
push eax
push ecx
lea ecx, [ebp - 0x1a4]
call fcn.10041e90
mov edx, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x114], 0x81663f
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x108], edx
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x23
mov byte [ebp - 0x170], 3
lea eax, [ebp - 0x16f]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x54]
call fcn.10041e90
mov edx, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x104], 0x816695
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0xf8], edx
lea ecx, [ebp - 0x169]
mov byte [ebp - 4], 0x25
push ecx
lea eax, [ebp - 0x168]
mov byte [ebp - 0x169], 0xeb
push eax
push ecx
lea ecx, [ebp - 0x18c]
call fcn.10041e90
mov edx, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x188]
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xf4], 0x816746
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0xe8], edx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x27
push ecx
lea eax, [ebp - 0x13]
mov byte [ebp - 0x14], 0xb8
push eax
push ecx
lea ecx, [ebp - 0x140]
call fcn.10041e90
mov edx, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0xe4], 0x81675f
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xd8], edx
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x29
push ecx
lea eax, [ebp - 0x1a]
mov dword [ebp - 0x20], 3
push eax
push ecx
lea ecx, [ebp - 0x15c]
mov word [ebp - 0x1c], 0xedeb
call fcn.10041e90
mov edx, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x158]
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0xd4], 0x816760
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xc8], edx
push ecx
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x150], 0
lea edi, [ebp - 0x134]
lea esi, [ebp - 0xc4]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x32
call fcn.10042720
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0xc4]
call fcn.10041730
lea ecx, [ebp - 0x38]
call fcn.100420c0
lea ecx, [ebp - 0x40]
call fcn.100421b0
push fcn.10041c40
push 7
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x36
push eax
call fcn.10082be5
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x3d
call fcn.10041810
lea ecx, [ebp - 0x98]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xa0]
call fcn.100421b0
lea ecx, [ebp - 0xb8]
call fcn.100420c0
lea ecx, [ebp - 0xc0]
call fcn.100421b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 0x14], 0xeb
push ecx
lea eax, [ebp - 0x13]
push eax
push ecx
lea ecx, [ebp - 0x15c]
call fcn.10041e90
mov dword [ebp - 4], 0x3e
mov edx, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x158]
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x144], 0x816688
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x138], edx
mov byte [ebp - 4], 0x3f
push ecx
lea eax, [ebp - 0x150]
mov dword [ebp - 0x150], 0
push eax
lea ecx, [ebp - 0x44]
lea edi, [ebp - 0x144]
lea esi, [ebp - 0x134]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x40
call fcn.10042720
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x41
push eax
lea ecx, [ebp - 0xc4]
call fcn.10041730
lea ecx, [ebp - 0x38]
call fcn.100420c0
lea ecx, [ebp - 0x40]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x44
push eax
call fcn.10082be5
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x45
call fcn.10041810
lea ecx, [ebp - 0x98]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xa0]
call fcn.100421b0
lea ecx, [ebp - 0xb8]
call fcn.100420c0
lea ecx, [ebp - 0xc0]
call fcn.100421b0
lea ecx, [ebp - 0x18]
mov word [ebp - 0x18], 0x80
push ecx
lea eax, [ebp - 0x16]
push eax
push ecx
lea ecx, [ebp - 0x15c]
call fcn.10041e90
mov dword [ebp - 4], 0x46
mov edx, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x158]
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x144], 0x6e9b97
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x138], edx
push ecx
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x47
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x150], 0
lea edi, [ebp - 0x144]
lea esi, [ebp - 0x134]
call fcn.100423a0
push esi
mov byte [ebp - 4], 0x48
push edi
lea ecx, [ebp - 0x44]
call fcn.10042720
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x49
push eax
lea ecx, [ebp - 0xc4]
call fcn.10041730
lea ecx, [ebp - 0x38]
call fcn.100420c0
lea ecx, [ebp - 0x40]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x4c
push eax
call fcn.10082be5
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x4d
call fcn.10041810
lea ecx, [ebp - 0x98]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xa0]
call fcn.100421b0
lea ecx, [ebp - 0xb8]
call fcn.100420c0
lea ecx, [ebp - 0xc0]
call fcn.100421b0
lea ecx, [ebp - 0x16c]
mov word [ebp - 0x16c], 0x2710
push ecx
lea eax, [ebp - 0x16a]
push eax
push ecx
lea ecx, [ebp - 0x15c]
call fcn.10041e90
mov dword [ebp - 4], 0x4e
mov edx, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x158]
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x84], 0x414d37
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x78], edx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4f
push ecx
lea eax, [ebp - 0x13]
mov byte [ebp - 0x14], 0x34
push eax
push ecx
lea ecx, [ebp - 0x140]
call fcn.10041e90
mov edx, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x74], 0x8ca5f0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], edx
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x461c4000
mov dword [ebp - 0x1c], 0x461c4000
push ecx
lea eax, [ebp - 0x18]
push eax
push ecx
lea ecx, [ebp - 0x18c]
call fcn.10041e90
mov edx, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x188]
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x64], 0xa3db0c
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], edx
push ecx
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x55
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x150], 0
lea edi, [ebp - 0x84]
lea esi, [ebp - 0x54]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x56
call fcn.10042720
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x57
push eax
lea ecx, [ebp - 0x104]
call fcn.10041730
lea ecx, [ebp - 0x38]
call fcn.100420c0
lea ecx, [ebp - 0x40]
call fcn.100421b0
push fcn.10041c40
push 3
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x5a
push eax
call fcn.10082be5
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xe0]
call fcn.100421b0
lea ecx, [ebp - 0xf8]
call fcn.100420c0
lea ecx, [ebp - 0x100]
call fcn.100421b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 0x14], 0
push ecx
lea eax, [ebp - 0x13]
push eax
push ecx
lea ecx, [ebp - 0x15c]
call fcn.10041e90
mov dword [ebp - 4], 0x5e
mov edx, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0x144], 0x71f89e
mov dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x138], edx
push ecx
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x5f
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x150], 0
lea edi, [ebp - 0x144]
lea esi, [ebp - 0x134]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x60
call fcn.10042720
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x61
push eax
lea ecx, [ebp - 0xc4]
call fcn.10041730
lea ecx, [ebp - 0x38]
call fcn.100420c0
lea ecx, [ebp - 0x40]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x64
push eax
call fcn.10082be5
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x65
call fcn.10041810
lea ecx, [ebp - 0x98]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xa0]
call fcn.100421b0
lea ecx, [ebp - 0xb8]
call fcn.100420c0
lea ecx, [ebp - 0xc0]
call fcn.100421b0
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], 0x90909090
push ecx
lea eax, [ebp - 0x24]
mov dword [ebp - 0x40], 0x90909090
push eax
push ecx
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x3c], 0x90909090
mov dword [ebp - 0x38], 0x90909090
mov dword [ebp - 0x34], 0x90909090
mov dword [ebp - 0x30], 0x90909090
mov dword [ebp - 0x2c], 0x90909090
mov dword [ebp - 0x28], 0x90909090
call fcn.10041e90
mov dword [ebp - 4], 0x66
mov ecx, dword [ebp - 0x158]
mov eax, dword [ebp - 0x15c]
mov edx, dword [ebp - 0x154]
mov dword [ebp - 0xb4], 0x720e68
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xa8], edx
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x67
push ecx
lea eax, [ebp - 0x47]
mov dword [ebp - 0x54], 0x90909090
push eax
push ecx
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x50], 0x90909090
mov dword [ebp - 0x4c], 0x90909090
mov byte [ebp - 0x48], 0x90
call fcn.10041e90
mov edx, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0xa4], 0x524dc1
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x98], edx
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x69
push ecx
lea eax, [ebp - 0x19]
mov dword [ebp - 0x20], 0x90909090
push eax
push ecx
lea ecx, [ebp - 0x18c]
mov word [ebp - 0x1c], 0x9090
mov byte [ebp - 0x1a], 0x90
call fcn.10041e90
mov edx, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x188]
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x94], 0x524276
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x88], edx
push ecx
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x6d
push eax
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x150], 0
lea edi, [ebp - 0xb4]
lea esi, [ebp - 0x84]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x6e
call fcn.10042720
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x6f
push eax
lea ecx, [ebp - 0x104]
call fcn.10041730
lea ecx, [ebp - 0x68]
call fcn.100420c0
lea ecx, [ebp - 0x70]
call fcn.100421b0
mov byte [ebp - 4], 0x72
push fcn.10041c40
push 3
push 0x10
mov eax, edi
push eax
call fcn.10082be5
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x75
call fcn.10041810
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xe0]
call fcn.100421b0
lea ecx, [ebp - 0xf8]
call fcn.100420c0
lea ecx, [ebp - 0x100]
call fcn.100421b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 0x14], 0
push ecx
lea eax, [ebp - 0x13]
push eax
push ecx
lea ecx, [ebp - 0x15c]
call fcn.10041e90
mov dword [ebp - 4], 0x76
mov edx, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x158]
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x144], 0x6b2ae0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x138], edx
push ecx
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x77
push eax
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x150], 0
lea edi, [ebp - 0x144]
lea esi, [ebp - 0x134]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x78
call fcn.10042720
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x79
push eax
lea ecx, [ebp - 0x104]
call fcn.10041730
lea ecx, [ebp - 0x68]
call fcn.100420c0
lea ecx, [ebp - 0x70]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x7c
push eax
call fcn.10082be5
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x7d
call fcn.10041810
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.100420c0
lea ecx, [ebp - 0xe0]
call fcn.100421b0
lea ecx, [ebp - 0xf8]
call fcn.100420c0
lea ecx, [ebp - 0x100]
call fcn.100421b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 0x14], 0xeb
push ecx
lea eax, [ebp - 0x13]
push eax
push ecx
lea ecx, [ebp - 0x15c]
call fcn.10041e90
mov dword [ebp - 4], 0x7e
mov edx, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x158]
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x144], 0x401a94
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x138], edx
push ecx
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x7f
push eax
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x150], 0
lea edi, [ebp - 0x144]
lea esi, [ebp - 0x134]
call fcn.100423a0
push esi
push edi
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x80
call fcn.10042720
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x81
push eax
lea ecx, [ebp - 0x104]
call fcn.10041730
lea ecx, [ebp - 0x68]
call fcn.100420c0
lea ecx, [ebp - 0x70]
call fcn.100421b0
push fcn.10041c40
push 1
push 0x10
mov eax, edi
mov byte [ebp - 4], 0x84
push eax
call fcn.10082be5
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x85
call fcn.10041810
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0xffffffff
call fcn.100420c0
lea ecx, [ebp - 0xe0]
call fcn.100421b0
lea ecx, [ebp - 0xf8]
call fcn.100420c0
lea ecx, [ebp - 0x100]
call fcn.100421b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 0x14], 0xeb
lea eax, [ebp - 0x13]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x180]
call fcn.10041e90
mov dword [ebp - 4], 0x86
mov edx, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x160], 0x7561bf
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x154], edx
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x160]
push eax
push ecx
lea ecx, [ebp - 0x74]
call fcn.10042050
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x88
push eax
lea ecx, [ebp - 0x104]
call fcn.10041730
lea ecx, [ebp - 0x74]
call fcn.100419c0
push fcn.10041c40
push 1
push 0x10
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0x8b
push eax
call fcn.10082be5
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x8c
call fcn.10041e40
lea ecx, [ebp - 0x104]
call fcn.10041810
lea ecx, [ebp - 0x104]
mov dword [ebp - 4], 0xffffffff
call fcn.10041ca0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x150], 0x6e2867
push ecx
lea eax, [ebp - 0x19]
mov dword [ebp - 0x24], 0x90909090
push eax
push ecx
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x20], 0x90909090
mov word [ebp - 0x1c], 0x9090
mov byte [ebp - 0x1a], 0x90
call fcn.10041e90
lea eax, [ebp - 0x15c]
mov dword [ebp - 4], 0x8d
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x144]
call fcn.100425c0
lea eax, [ebp - 0x134]
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x144]
push eax
push ecx
lea ecx, [ebp - 0x74]
call fcn.10042050
mov byte [ebp - 4], 0x8f
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x104]
call fcn.10041730
lea ecx, [ebp - 0x74]
call fcn.100419c0
push fcn.10041c40
push 1
push 0x10
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 0x92
push eax
call fcn.10082be5
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x93
call fcn.10041e40
lea ecx, [ebp - 0x104]
call fcn.10041810
lea ecx, [ebp - 0x104]
mov dword [ebp - 4], 0xffffffff
call fcn.10041ca0
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x150], 0x73e3c9
push ecx
lea eax, [ebp - 0x13]
mov byte [ebp - 0x14], 0xeb
push eax
push ecx
lea ecx, [ebp - 0x15c]
call fcn.10041e90
lea eax, [ebp - 0x15c]
mov dword [ebp - 4], 0x94
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x144]
call fcn.100425c0
lea eax, [ebp - 0x134]
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0x144]
push eax
push ecx
lea ecx, [ebp - 0x74]
call fcn.10042050
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x96
push eax
lea ecx, [ebp - 0x104]
call fcn.10041730
lea ecx, [ebp - 0x74]
call fcn.100419c0
push fcn.10041c40
push 1
push 0x10
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 0x99
push eax
call fcn.10082be5
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x9a
call fcn.10041e40
lea ecx, [ebp - 0x104]
call fcn.10041810
lea ecx, [ebp - 0x104]
mov dword [ebp - 4], 0xffffffff
call fcn.10041ca0
mov dword [ebp - 0x150], 0x46e499
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0x105
mov byte [ebp - 0x14], 0
push ecx
lea eax, [ebp - 0x13]
push eax
push ecx
lea ecx, [ebp - 0x15c]
call fcn.10041e90
lea eax, [ebp - 0x15c]
mov dword [ebp - 4], 0x9b
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x144]
call fcn.100425c0
lea eax, [ebp - 0x134]
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x144]
push eax
push ecx
lea ecx, [ebp - 0x74]
call fcn.10042050
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x9d
push eax
lea ecx, [ebp - 0x104]
call fcn.10041730
lea ecx, [ebp - 0x74]
call fcn.100419c0
push fcn.10041c40
push 1
push 0x10
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 0xa0
push eax
call fcn.10082be5
lea ecx, [ebp - 0x15c]
call fcn.10041e40
lea ecx, [ebp - 0x104]
mov dword [ebp - 4], 0xffffffff
call fcn.10041ca0
lea ecx, [ebp - 0x171]
mov dword [ebp - 0x150], 0x50d641
push ecx
lea eax, [ebp - 0x170]
mov byte [ebp - 0x171], 0xeb
push eax
push ecx
lea ecx, [ebp - 0x15c]
call fcn.10041e90
lea eax, [ebp - 0x15c]
mov dword [ebp - 4], 0xa2
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x1b4]
call fcn.100425c0
lea eax, [ebp - 0x1a4]
mov byte [ebp - 4], 0xa3
lea ecx, [ebp - 0x1b4]
push eax
push ecx
lea ecx, [ebp - 0x1d4]
call fcn.10042050
lea eax, [ebp - 0x1d4]
mov byte [ebp - 4], 0xa4
push eax
lea ecx, [ebp - 0x214]
call fcn.10041730
lea ecx, [ebp - 0x1d4]
call fcn.100419c0
push fcn.10041c40
push 1
push 0x10
lea eax, [ebp - 0x1b4]
mov byte [ebp - 4], 0xa7
push eax
call fcn.10082be5
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0xa8
call fcn.10041e40
lea ecx, [ebp - 0x214]
call fcn.10041810
lea ecx, [ebp - 0x214]
mov dword [ebp - 4], 0xffffffff
call fcn.10041ca0
call fcn.100404c0
push 0x10052750
push 0x100a6cf4
sub esp, 8
push str.mouseResetFix
push 0x100b7904
call fcn.1007b8c0
call fcn.100404c0
push 0x10052b30
push 0x100a6cf4
sub esp, 8
push str.actionButtonUseKeyDown
push 0x100b7900
call fcn.1007b8c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10082777
mov esp, ebp
pop ebp
ret