Function at 0x10082830
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101bc1bd
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x1021e964]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 0x2c]
mov dword [esi + 0x2fc], eax
mov al, byte [ebp + 0x28]
mov byte [esi + 0x300], al
call fcn.100869a0
call fcn.10047410
mov ebx, eax
call fcn.10047520
cmp byte [ebp + 8], 0
mov edx, 0x601
mov edi, 0x10010b20
mov dword [ebp - 0x3c], 0x602
movzx ecx, word [eax + 6]
mov eax, ecx
mov dword [ebp - 0x38], eax
jne 0x100835f1
cmp cx, dx
jb 0x10082c3d
cmp byte [ebp + 0x28], 0
jne 0x10082c3d
movzx eax, word [0x1022f32d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100828f0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x2e8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0
push 0x10076740
push ecx
lea ecx, [esi + 0x1e4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f32f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10082970
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 1
push 0x1007ac90
push eax
lea ecx, [esi + 0x1e4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f331]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100829f0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x2ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 2
push 0x10076770
push eax
lea ecx, [esi + 0x1e4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f333]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10082a70
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x2f0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 3
push 0x1007acd0
push eax
lea ecx, [esi + 0x1e4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f335]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10082af0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x2f4]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 4
push 0x10075360
push ecx
lea ecx, [esi + 0xc4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f337]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10082b70
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x2f8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 5
push 0x1007a4c0
push eax
lea ecx, [esi + 0xc4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f32d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10082bf0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x2e8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 6
push 0x10076740
push ecx
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
jmp 0x10082f39
movzx eax, word [0x1022f32d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10082c71
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x2e8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 7
push 0x10076740
push ecx
lea ecx, [esi + 4]
call fcn.1008a740
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10010c38
cmp edx, 0x10
jb 0x10082cfa
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 8
cmp edx, 0x1000
jb 0x10082ce9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10086791
push edx
push ecx
call fcn.1018d246
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1022f32f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10082d30
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 9
push 0x1007ac90
push eax
lea ecx, [esi + 4]
call fcn.1008a740
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10010c38
cmp edx, 0x10
jb 0x10082db9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xa
cmp edx, 0x1000
jb 0x10082da8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10086796
push edx
push ecx
call fcn.1018d246
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1022f331]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10082df0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x2ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xb
push 0x10076770
push eax
lea ecx, [esi + 4]
call fcn.1008a740
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10010c38
cmp edx, 0x10
jb 0x10082e79
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xc
cmp edx, 0x1000
jb 0x10082e68
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008679b
push edx
push ecx
call fcn.1018d246
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1022f333]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10082eb0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x2f0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xd
push 0x1007acd0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10010c38
cmp edx, 0x10
jb 0x10082f39
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xe
cmp edx, 0x1000
jb 0x10082f28
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100867a0
push edx
push ecx
call fcn.1018d246
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
cmp ax, word [ebp - 0x3c]
jae 0x100830cc
movzx eax, word [0x1022f335]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10082f80
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x2f4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xf
push 0x10075360
push eax
lea ecx, [esi + 4]
call fcn.1008a740
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10010c38
cmp edx, 0x10
jb 0x10083009
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x10
cmp edx, 0x1000
jb 0x10082ff8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100867a5
push edx
push ecx
call fcn.1018d246
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1022f337]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083040
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x2f8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x11
push 0x1007a4c0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10010c38
cmp edx, 0x10
jb 0x100830c9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x12
cmp edx, 0x1000
jb 0x100830b8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100867aa
push edx
push ecx
call fcn.1018d246
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
mov ecx, 0x601
cmp ax, cx
jb 0x100832e5
cmp byte [ebp + 0x28], 0
jne 0x100832e5
movzx eax, word [0x1022f33b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083118
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1c0]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x13
push 0x10076f60
push ecx
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f33d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083197
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x14
push 0x100770c0
push eax
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f33f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083216
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1c4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x15
push 0x10077000
push eax
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f341]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083295
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x16
push 0x10077060
push eax
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
jmp 0x100835e9
movzx eax, word [0x1022f33b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083320
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x17
push 0x10076f60
push eax
lea ecx, [esi + 4]
call fcn.1008a740
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10010c38
cmp edx, 0x10
jb 0x100833a9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x18
cmp edx, 0x1000
jb 0x10083398
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100867af
push edx
push ecx
call fcn.1018d246
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1022f33d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100833e0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x19
push 0x100770c0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10010c38
cmp edx, 0x10
jb 0x10083469
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1a
cmp edx, 0x1000
jb 0x10083458
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100867b4
push edx
push ecx
call fcn.1018d246
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1022f33f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100834a0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1c4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x1b
push 0x10077000
push eax
lea ecx, [esi + 4]
call fcn.1008a740
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10010c38
cmp edx, 0x10
jb 0x10083529
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1c
cmp edx, 0x1000
jb 0x10083518
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100867b9
push edx
push ecx
call fcn.1018d246
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1022f341]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083560
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x1d
push 0x10077060
push eax
lea ecx, [esi + 4]
call fcn.1008a740
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10010c38
cmp edx, 0x10
jb 0x100835e9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1e
cmp edx, 0x1000
jb 0x100835d8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100867be
push edx
push ecx
call fcn.1018d246
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
mov edx, 0x601
cmp byte [ebp + 0x10], 0
je 0x10083b38
cmp ax, dx
jb 0x100838c0
movzx eax, word [0x1022f3b3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083638
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x3d8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x1f
push 0x10077ba0
push ecx
lea ecx, [esi + 0x184]
call fcn.1008a740
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10010c38
cmp edx, 0x10
jb 0x100836c4
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x20
cmp edx, 0x1000
jb 0x100836b3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100867c3
push edx
push ecx
call fcn.1018d246
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1022f3b5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100836f8
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x3dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x21
push 0x100780d0
push eax
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3b7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083777
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x3e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x22
push 0x10076960
push eax
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f411]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100837f6
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x460]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x23
push 0x10077ca0
push eax
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f413]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083875
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x464]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x24
push 0x10077f30
push eax
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3b3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100838f4
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x3d8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x25
push 0x10077ba0
push ecx
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3b5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083970
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x3dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x26
push 0x100780d0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3b7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100839f0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x3e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x27
push 0x10076960
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f411]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083a70
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x460]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x28
push 0x10077ca0
push ecx
lea ecx, [esi + 0x34]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f413]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083af0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x464]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x29
push 0x10077f30
push eax
lea ecx, [esi + 0x34]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
cmp byte [ebp + 0xc], 0
jne 0x10083b51
cmp byte [ebp + 0x20], 0
jne 0x10083b51
mov al, byte [ebp + 0x14]
test al, al
je 0x10083df1
jmp 0x10083b57
cmp byte [ebp + 0x14], 0
je 0x10083b6f
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push 0x1008a4b0
push 4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExA]
mov eax, dword [ebp - 0x38]
mov ecx, 0x601
cmp ax, cx
jb 0x10083cef
cmp byte [ebp + 0x28], 0
jne 0x10083cef
cmp byte [ebp + 0x24], 0
je 0x10083c0f
cmp ax, word [ebp - 0x3c]
jae 0x10083c0f
movzx eax, word [0x1022f36b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x208]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x2a
push 0x10075ae0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f36d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
mov dword [ebp - 4], 0x2b
jmp 0x10083dc2
movzx eax, word [0x1022f36b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083c43
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x208]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x2c
push 0x10075ae0
push ecx
lea ecx, [esi + 0xf4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f36d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083cc2
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
mov dword [ebp - 4], 0x2d
lea ecx, [esi + 0xf4]
jmp 0x10083dc5
movzx eax, word [0x1022f36b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083d23
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x208]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x2e
push 0x10075ae0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f36d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083da0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
mov dword [ebp - 4], 0x2f
lea ecx, [esi + 4]
push dword [ebx + 0x20c]
lea eax, [ebp - 0x30]
push 0x100760c0
push eax
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
cmp byte [ebp + 0xc], 0
jne 0x10083e04
mov al, byte [ebp + 0x14]
cmp byte [ebp + 0x10], 0
jne 0x10083e04
test al, al
jne 0x10083e04
cmp byte [ebp + 0x18], al
je 0x10084493
mov ecx, dword [esi + 0x2fc]
mov eax, 0x601
cmp word [ebp - 0x38], ax
movzx eax, word [0x1022f34d]
push eax
jb 0x10084208
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083e47
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1cc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x30
push 0x10077790
push ecx
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f34f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083ec6
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x31
push 0x10077930
push eax
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f351]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083f45
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x308]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x32
push 0x10077160
push eax
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f34d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083fc4
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x33
push 0x10077790
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f34f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084040
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x34
push 0x10077930
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f351]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100840c0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x308]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x35
push 0x10077160
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
mov eax, dword [ebp - 0x3c]
cmp word [ebp - 0x38], ax
jb 0x10084378
movzx eax, word [0x1022f34b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084150
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1d8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x39
push 0x10077a70
push ecx
lea ecx, [esi + 0x154]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f349]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100841d0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1d8]
mov dword [ebp - 4], 0x3a
lea ecx, [esi + 0x154]
push 0x10077600
jmp 0x10084360
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084230
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x36
push 0x10077790
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f34f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100842b0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x37
push 0x10077930
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f351]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084330
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x308]
mov dword [ebp - 4], 0x38
lea ecx, [esi + 4]
push 0x10077160
lea eax, [ebp - 0x30]
push eax
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f34b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100843b0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1d8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3b
push 0x10077a70
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f349]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084430
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x1c8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3c
push 0x10077600
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
cmp byte [ebp + 0x18], 0
je 0x10084493
mov ecx, esi
call fcn.100888d0
mov ecx, esi
call fcn.1007dc30
mov ecx, esi
call fcn.10086d50
push 0x1b8
push 0
push 0x1022f465
call fcn.101a4190
add esp, 0xc
cmp byte [ebp + 0xc], 0
jne 0x100844b7
cmp byte [ebp + 0x20], 0
je 0x100847cf
mov ecx, dword [esi + 0x2fc]
mov eax, 0x601
cmp word [ebp - 0x38], ax
movzx eax, word [0x1022f383]
push eax
jb 0x100845d4
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084500
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x378]
lea eax, [esi + 0xf4]
mov dword [ebp - 4], 0x3d
push 0x100755d0
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x14], eax
push ecx
mov ecx, eax
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f385]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084584
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x37c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3e
push 0x100759a0
push eax
lea ecx, [esi + 0xf4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
jmp 0x100846d1
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084600
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x378]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3f
push 0x100755d0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f385]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084680
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x37c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x40
push 0x100759a0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
lea eax, [esi + 0xf4]
mov dword [ebp - 0x14], eax
movzx eax, word [0x1022f387]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084705
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x380]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x41
push 0x10075710
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f389]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084781
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x384]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x42
push 0x10075860
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
cmp byte [ebp + 0xc], 0
jne 0x100847e2
cmp byte [ebp + 0x14], 0
lea eax, [esi + 0xf4]
mov dword [ebp - 0x14], eax
je 0x10085850
mov eax, 0x601
cmp word [ebp - 0x38], ax
jb 0x10084ca1
cmp byte [ebp + 0x28], 0
jne 0x10084ca1
cmp byte [ebp + 0x24], 0
lea edi, [esi + 0xf4]
jne 0x1008489b
movzx eax, word [0x1022f36f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x354]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x43
push 0x1007aec0
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f371]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x358]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x44
push 0x10078770
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f373]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x35c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x45
push 0x1007a6c0
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f377]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x364]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x46
push 0x1007a590
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f379]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x368]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x47
push 0x10076c80
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f375]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x360]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x48
push 0x1007a880
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f37b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
mov dword [ebp - 4], 0x49
push dword [ebx + 0x36c]
lea eax, [ebp - 0x30]
mov ecx, edi
push 0x10076dd0
push eax
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f369]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x350]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4a
push 0x10076b50
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f37d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x214]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4b
push 0x10075480
push eax
lea ecx, [esi + 0x124]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f357]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x314]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4c
push 0x100765e0
push eax
lea ecx, [esi + 0x124]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f35b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x31c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4d
push 0x10075f70
lea edi, [esi + 0x1b4]
push eax
mov ecx, edi
call fcn.1008a740
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.10042960
movzx eax, word [0x1022f35f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x324]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4e
push 0x10078740
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f361]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x328]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4f
push 0x10078200
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f363]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x32c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x50
push 0x10078350
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f365]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x330]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x51
push 0x10076840
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f367]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x334]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x52
push 0x1007ad90
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
lea edi, [esi + 4]
jmp 0x10085367
cmp byte [ebp + 0x24], 0
jne 0x10084da8
movzx eax, word [0x1022f36f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084ce0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x354]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x53
push 0x1007aec0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f371]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084d60
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x358]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x54
push 0x10078770
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f373]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084de0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x35c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x55
push 0x1007a6c0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f377]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084e60
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x364]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x56
push 0x1007a590
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f379]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084ee0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x368]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x57
push 0x10076c80
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f375]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084f60
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x360]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x58
push 0x1007a880
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f37b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084fe0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x36c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x59
push 0x10076dd0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f369]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10085060
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x350]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5a
push 0x10076b50
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f37d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100850e0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x214]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5b
push 0x10075480
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f357]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10085160
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1004a870
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x314]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5c
push 0x100765e0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f35b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
test eax, eax
lea ecx, [ebp - 0x2c]
cmovne edi, eax
push edi
call fcn.10040890
mov dword [ebp - 0x30], 0x10010c38
push dword [ebx + 0x31c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5d
push 0x10075f70
lea edi, [esi + 4]
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f35f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x324]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5e
push 0x10078740
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f361]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x328]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5f
push 0x10078200
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f363]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x32c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x60
push 0x10078350
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f365]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x330]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x61
push 0x10076840
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f367]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x334]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x62
push 0x1007ad90
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
mov eax, dword [ebp - 0x3c]
cmp word [ebp - 0x38], ax
jb 0x1008543e
cmp byte [ebp + 0x24], 0
je 0x10085410
movzx eax, word [0x1022f36f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x354]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x30]
push 0x1007aec0
push eax
mov dword [ebp - 4], 0x63
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f371]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x358]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x30]
push 0x10078770
push eax
mov dword [ebp - 4], 0x64
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f359]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
mov dword [ebp - 4], 0x65
lea ecx, [esi + 0x154]
jmp 0x100854fd
cmp byte [ebp + 0x24], 0
je 0x100854d8
movzx eax, word [0x1022f36f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x354]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x66
push 0x1007aec0
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f371]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x358]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x67
push 0x10078770
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f359]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
mov dword [ebp - 4], 0x68
mov ecx, edi
push dword [ebx + 0x318]
lea eax, [ebp - 0x30]
push 0x10075e20
push eax
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f35d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x320]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x69
push 0x10078710
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f38f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x390]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6a
push 0x1007b6f0
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f391]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x394]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6b
push 0x1007b3e0
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f393]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x398]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6c
push 0x1007b070
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f395]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x39c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6d
push 0x1007b840
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f39b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x3a8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6e
push 0x1007b290
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f39d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x3ac]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6f
push 0x1007b570
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f397]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x3a0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x70
push 0x1007b070
push eax
mov ecx, edi
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f399]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x3a4]
mov dword [ebp - 4], 0x71
push 0x1007b1c0
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
cmp byte [ebp + 0x1c], 0
jne 0x1008584a
movzx eax, word [0x1022f45b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x2e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x72
push 0x100784a0
push eax
lea ecx, [esi + 0x94]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f45d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x2e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x73
push 0x100785e0
push eax
lea ecx, [esi + 0x94]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
cmp byte [ebp + 0xc], 0
jne 0x1008585a
cmp byte [ebp + 0x20], 0
je 0x10086765
movzx eax, word [0x1022f423]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x484]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x74
push 0x10078cb0
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f429]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x490]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x75
push 0x100798e0
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f437]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4ac]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x76
push 0x10079d20
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f43f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4bc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x77
push 0x1007a0e0
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f443]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
mov dword [ebp - 4], 0x78
push dword [ebx + 0x4c4]
lea eax, [ebp - 0x30]
push 0x10079170
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f44b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x79
push 0x100792d0
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f44f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7a
push 0x10079440
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f453]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7b
push 0x100795c0
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f455]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x2c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7c
push 0x10078910
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f41d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x478]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7d
push 0x10078a20
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f41f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x47c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7e
push 0x10078e00
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f421]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x480]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7f
push 0x10078b60
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f425]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x488]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x80
push 0x10079800
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f427]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
mov dword [ebp - 4], 0x81
push dword [ebx + 0x48c]
lea eax, [ebp - 0x30]
push 0x10079ac0
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f42b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x494]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x82
push 0x100799d0
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f42d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x498]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x83
push 0x10079680
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f42f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x49c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x84
push 0x10079740
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f431]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4a0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x85
push 0x10079ba0
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f433]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4a4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x86
push 0x10079de0
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f435]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4a8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x87
push 0x10079c60
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f441]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x88
push 0x10078f40
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f439]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4b0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x89
push 0x10079ea0
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f43b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
mov dword [ebp - 4], 0x8a
push dword [ebx + 0x4b4]
lea eax, [ebp - 0x30]
push 0x1007a200
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f43d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4b8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8b
push 0x10079fc0
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f445]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4c8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8c
push 0x10078ff0
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f447]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8d
push 0x100790b0
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f449]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8e
push 0x10079220
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f44d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4d8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8f
push 0x10079380
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f451]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x4e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x90
push 0x10079500
push eax
lea ecx, [esi + 0x64]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
cmp byte [ebp + 0xc], 0
je 0x10086765
mov eax, 0x601
cmp word [ebp - 0x38], ax
jb 0x10086367
cmp byte [ebp + 0x28], 0
jne 0x10086367
movzx eax, word [0x1022f37f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x370]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x91
push 0x10076440
push eax
lea ecx, [esi + 0xf4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f38b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x388]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x92
push 0x1007a320
push eax
lea ecx, [esi + 0xf4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f381]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x374]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x93
push 0x10076510
push eax
lea ecx, [esi + 0xf4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f38d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x38c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x94
push 0x1007a3f0
push eax
lea ecx, [esi + 0xf4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3a1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
mov dword [ebp - 4], 0x95
push dword [ebx + 0x3b4]
lea eax, [ebp - 0x30]
push 0x1007a4e0
push eax
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3a3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x3b8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x96
push 0x1007abe0
push eax
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3a5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x3bc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x97
push 0x10076aa0
push eax
lea ecx, [esi + 0x184]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3cf]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x3f4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x98
push 0x10076f10
push eax
lea ecx, [esi + 0xc4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3d1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x3f8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x99
push 0x1007aa30
push eax
lea ecx, [esi + 0xc4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
jmp 0x10086759
movzx eax, word [0x1022f37f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x370]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9a
push 0x10076440
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f38b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x388]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9b
push 0x1007a320
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f381]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x374]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9c
push 0x10076510
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f38d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x38c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9d
push 0x1007a3f0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3a1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
mov dword [ebp - 4], 0x9e
push dword [ebx + 0x3b4]
lea eax, [ebp - 0x30]
push 0x1007a4e0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3a3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x3b8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9f
push 0x1007abe0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3a5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x3bc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa0
push 0x10076aa0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3cf]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x3f4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa1
push 0x10076f10
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3d1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x3f8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa2
push 0x1007aa30
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f343]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x300]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa3
push 0x10077210
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3a7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x3c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa4
push 0x1007aa80
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f345]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x304]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa5
push 0x100772f0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f347]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x30]
call fcn.10040350
push dword [ebx + 0x1e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa6
push 0x100774a0
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
movzx eax, word [0x1022f3a9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100a0d90
push eax
lea ecx, [ebp - 0x58]
call fcn.10040350
mov dword [ebp - 4], 0xa7
push dword [ebx + 0x3c4]
lea eax, [ebp - 0x58]
push 0x1007ab30
push eax
lea ecx, [esi + 4]
call fcn.1008a740
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0xffffffff
call fcn.10042960
mov ecx, esi
call fcn.1007d410
mov ecx, esi
call fcn.1007d580
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1018d760
mov esp, ebp
pop ebp
ret 0x28
call fcn.100be3b4
call fcn.100be3b4
call fcn.100be3b4
call fcn.100be3b4
call fcn.100be3b4
call fcn.100be3b4
call fcn.100be3b4
call fcn.100be3b4
call fcn.100be3b4
call fcn.100be3b4
call fcn.100be3b4
int3