Function at 0x1006a440
Capabilities:
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009fe68
mov eax, dword fs:[0]
push eax
sub esp, 0x6e8
mov eax, dword [0x100b400c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1f4], edi
xor edx, edx
mov dword [ebp - 0x1f0], edx
mov byte [edi], dl
nop
mov ecx, dword [edi + 0x70]
test ecx, ecx
je 0x1006a77f
or edx, 1
mov esi, edx
mov eax, edx
and esi, 0xfffffffd
and al, 2
cmove esi, edx
and esi, 0xfffffffe
cmp dword [ecx + 0x18], 0
je 0x1006a78e
mov edx, 0xa3e6f6c3
lea ecx, [ebp - 0x6f4]
call fcn.100430a0
mov edx, 0xc0323159
lea ecx, [ebp - 0x6c4]
movq xmm0, qword [eax]
movq qword [edi + 4], xmm0
mov eax, dword [eax + 8]
mov dword [edi + 0xc], eax
call fcn.100430a0
mov edx, 0x4f644736
lea ecx, [ebp - 0x6dc]
movq xmm0, qword [eax]
movq qword [edi + 0x10], xmm0
mov eax, dword [eax + 8]
mov dword [edi + 0x18], eax
call fcn.100430a0
mov edx, 0x8ec4c73b
lea ecx, [ebp - 0x6b8]
movq xmm0, qword [eax]
movq qword [edi + 0x1c], xmm0
mov eax, dword [eax + 8]
mov dword [edi + 0x24], eax
call fcn.100430a0
mov edx, 0x6c5a4374
lea ecx, [ebp - 0x6ac]
movq xmm0, qword [eax]
movq qword [edi + 0x28], xmm0
mov eax, dword [eax + 8]
mov dword [edi + 0x30], eax
call fcn.100430a0
mov ecx, edi
mov edx, 0xe26d30e8
movq xmm0, qword [eax]
movq qword [ecx + 0x34], xmm0
mov eax, dword [eax + 8]
mov dword [ecx + 0x3c], eax
lea ecx, [ebp - 0x6a0]
call fcn.100430a0
mov ecx, edi
mov edx, 0x38450191
movq xmm0, qword [eax]
movq qword [ecx + 0x40], xmm0
mov eax, dword [eax + 8]
mov dword [ecx + 0x48], eax
lea ecx, [ebp - 0x688]
call fcn.100430a0
mov ecx, edi
mov edx, 0x990704d7
movq xmm0, qword [eax]
movq qword [ecx + 0x4c], xmm0
mov eax, dword [eax + 8]
mov dword [ecx + 0x54], eax
lea ecx, [ebp - 0x6e8]
call fcn.100430a0
mov ecx, edi
mov edx, 0x2935fa11
movq xmm0, qword [eax]
movq qword [ecx + 0x58], xmm0
mov eax, dword [eax + 8]
mov dword [ecx + 0x60], eax
lea ecx, [ebp - 0x6d0]
call fcn.100430a0
mov ecx, edi
lea edx, [edi + 4]
push 0xe682dd7e
movq xmm0, qword [eax]
movq qword [ecx + 0x64], xmm0
mov eax, dword [eax + 8]
mov dword [ecx + 0x6c], eax
lea ecx, [ebp - 0x614]
call fcn.10039830
push 0x9053f9c2
lea edx, [edi + 4]
lea ecx, [ebp - 0x618]
mov eax, dword [eax]
mov dword [0x1010db6c], eax
call fcn.10039830
push 0xf4d8b55
mov eax, dword [eax]
mov dword [0x1010db68], eax
lea edx, [edi + 4]
lea ecx, [ebp - 0x61c]
call fcn.10039830
push 0x820621f3
lea edx, [edi + 4]
lea ecx, [ebp - 0x620]
mov eax, dword [eax]
mov dword [0x1010db60], eax
call fcn.10039830
push 0xbe4d5ef8
lea edx, [edi + 4]
lea ecx, [ebp - 0x624]
mov eax, dword [eax]
mov dword [0x1010db70], eax
call fcn.10039830
push 0xb0c98c53
lea edx, [edi + 4]
lea ecx, [ebp - 0x628]
mov eax, dword [eax]
mov dword [0x1010db58], eax
call fcn.10039830
mov esi, edi
lea ecx, [ebp - 0x62c]
push 0x76991bcc
mov eax, dword [eax]
lea edx, [esi + 0x10]
mov dword [0x1010db78], eax
call fcn.10039830
push 0x656108c4
lea edx, [esi + 0x10]
lea ecx, [ebp - 0x630]
mov eax, dword [eax]
mov dword [0x1010db5c], eax
call fcn.10039830
push 0xe8692330
lea edx, [esi + 0x1c]
lea ecx, [ebp - 0x634]
mov eax, dword [eax]
mov dword [0x1010db64], eax
call fcn.10039830
push 0x307abd39
lea edx, [edi + 0x28]
lea ecx, [ebp - 0x610]
mov eax, dword [eax]
mov dword [0x1010db74], eax
call fcn.10039830
xorps xmm0, xmm0
add esp, 0x28
mov eax, dword [eax]
movq qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x14], 0
mov dword [0x1010db7c], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
movq qword [ebp - 0x28], xmm0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.10038bf0
test al, al
jne 0x1006a82a
mov byte [ebp - 4], al
mov edi, dword [ebp - 0x28]
test edi, edi
je 0x1006ac8e
mov ecx, dword [ebp - 0x20]
mov eax, 0x2aaaaaab
sub ecx, edi
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, edi
shl ecx, 2
cmp ecx, 0x1000
jb 0x1006a778
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push ecx
push edi
jmp 0x1006ac71
and edx, 0xfffffffd
mov esi, edx
mov eax, edx
and esi, 0xfffffffe
and al, 1
cmove esi, edx
mov edx, 0x515dc51c
lea ecx, [ebp - 0x694]
call fcn.100430a0
movq xmm0, qword [eax]
movq qword [edi + 0x70], xmm0
mov eax, dword [eax + 8]
mov dword [edi + 0x78], eax
mov eax, dword [edi + 0x70]
test eax, eax
je 0x1006a7c4
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x1ec], eax
mov eax, 4
jmp 0x1006a7d3
mov dword [ebp - 0x1ec], 0
mov eax, 8
or esi, eax
mov eax, esi
mov ecx, esi
and ecx, 0xfffffff7
and al, 8
cmove ecx, esi
mov edx, ecx
mov eax, ecx
and edx, 0xfffffffb
and al, 4
cmove edx, ecx
cmp dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1f0], edx
jne 0x1006a480
lea ecx, [ebp - 0x608]
mov dword [ebp - 0x608], 0x64
mov dword [ebp - 0x604], 0
call fcn.1006ed50
mov edx, dword [ebp - 0x1f0]
jmp 0x1006a480
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1f0], ecx
cmp eax, ecx
je 0x1006ac28
nop dword [eax]
nop dword [eax + eax]
push 0xbd1dd4d8
mov edx, eax
lea ecx, [ebp - 0x638]
call fcn.10039830
add esp, 4
mov esi, dword [eax]
test esi, esi
je 0x1006abfe
mov eax, dword [0x1010db58]
lea ecx, [ebp - 0x194]
push 0x1c
push ecx
push esi
call eax
test eax, eax
je 0x1006abfe
mov eax, dword [ebp - 0x180]
test al, 1
jne 0x1006abfe
test eax, 0x100
jne 0x1006abfe
cmp byte [esi + 4], 0xe9
jne 0x1006aa63
mov eax, dword [esi + 5]
test eax, eax
je 0x1006abfe
add esi, 9
add esi, eax
je 0x1006abfe
cmp byte [esi + 5], 0x35
jne 0x1006abfe
add esi, 6
je 0x1006abfe
mov edi, 2
nop dword [eax]
test esi, esi
je 0x1006abfe
mov eax, dword [0x1010db58]
lea ecx, [ebp - 0x15c]
push 0x1c
push ecx
push esi
call eax
test eax, eax
je 0x1006abfe
mov eax, dword [ebp - 0x148]
test al, 1
jne 0x1006abfe
test eax, 0x100
jne 0x1006abfe
mov esi, dword [esi]
sub edi, 1
jne 0x1006a8e0
test esi, esi
je 0x1006abfe
nop dword [eax]
mov edx, dword [esi + 4]
test edx, edx
je 0x1006aa53
mov ecx, edx
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0xf
mov byte [ebp - 0x244], 0
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a965
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x244]
call fcn.10020770
mov byte [ebp - 4], 2
mov eax, dword [esi]
call eax
mov dword [ebp - 0x22c], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x14]
je 0x1006a9ea
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
movups xmm0, xmmword [ebp - 0x244]
movups xmmword [ecx], xmm0
movq xmm0, qword [ebp - 0x234]
movq qword [ecx + 0x10], xmm0
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0xf
mov byte [ebp - 0x244], 0
mov dword [ecx + 0x18], eax
add dword [ebp - 0x18], 0x1c
jmp 0x1006a9fa
lea eax, [ebp - 0x244]
push eax
push ecx
lea ecx, [ebp - 0x1c]
call fcn.1006f8d0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x230]
cmp edx, 0x10
jb 0x1006aa38
mov ecx, dword [ebp - 0x244]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006aa2e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0xf
mov byte [ebp - 0x244], 0
mov esi, dword [esi + 8]
test esi, esi
jne 0x1006a930
jmp 0x1006abfe
cmp byte [esi + 2], 0x35
jne 0x1006abfe
add esi, 3
je 0x1006abfe
mov edi, 2
nop dword [eax + eax]
test esi, esi
je 0x1006abfe
mov eax, dword [0x1010db58]
lea ecx, [ebp - 0x140]
push 0x1c
push ecx
push esi
call eax
test eax, eax
je 0x1006abfe
mov eax, dword [ebp - 0x12c]
test al, 1
jne 0x1006abfe
test eax, 0x100
jne 0x1006abfe
mov esi, dword [esi]
sub edi, 1
jne 0x1006aa80
test esi, esi
je 0x1006abfe
nop dword [eax]
mov edx, dword [esi + 4]
test edx, edx
je 0x1006abf3
mov eax, edx
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0xf
mov byte [ebp - 0x228], 0
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006ab05
sub eax, edi
lea ecx, [ebp - 0x228]
push eax
push edx
call fcn.10020770
mov byte [ebp - 4], 4
mov eax, dword [esi]
call eax
mov dword [ebp - 0x210], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x14]
je 0x1006ab8a
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
movups xmm0, xmmword [ebp - 0x228]
movups xmmword [ecx], xmm0
movq xmm0, qword [ebp - 0x218]
movq qword [ecx + 0x10], xmm0
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0xf
mov byte [ebp - 0x228], 0
mov dword [ecx + 0x18], eax
add dword [ebp - 0x18], 0x1c
jmp 0x1006ab9a
lea eax, [ebp - 0x228]
push eax
push ecx
lea ecx, [ebp - 0x1c]
call fcn.1006f8d0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x214]
cmp edx, 0x10
jb 0x1006abd8
mov ecx, dword [ebp - 0x228]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006abce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0xf
mov byte [ebp - 0x228], 0
mov esi, dword [esi + 8]
test esi, esi
jne 0x1006aad0
mov eax, dword [ebp - 0x1ec]
add eax, 0xc
mov dword [ebp - 0x1ec], eax
cmp eax, dword [ebp - 0x1f0]
jne 0x1006a850
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x1f4]
mov dword [ebp - 0x1ec], eax
mov byte [ebp - 4], 0
test eax, eax
je 0x1006ac8e
mov ecx, dword [ebp - 0x20]
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [ebp - 0x1ec]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, ecx
shl edx, 2
cmp edx, 0x1000
jb 0x1006ac6f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
mov dword [ebp - 0x20], 0
add esp, 8
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
sub esp, 8
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x1c]
push 0x73e5f5e2
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0x7c], eax
lea ecx, [ebp - 0x1c]
push 0x5705c68d
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0x80], eax
lea ecx, [ebp - 0x1c]
push 0xcde34b18
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0x84], eax
lea ecx, [ebp - 0x1c]
push 0x317b804d
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0x88], eax
lea ecx, [ebp - 0x1c]
push 0xc753f6ce
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0x8c], eax
lea ecx, [ebp - 0x1c]
push 0x8a6910d0
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0x90], eax
lea ecx, [ebp - 0x1c]
push 0x187428c9
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0x94], eax
lea ecx, [ebp - 0x1c]
push 0xe0111286
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0x98], eax
lea ecx, [ebp - 0x1c]
push 0xfe7ea68f
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0x9c], eax
lea ecx, [ebp - 0x1c]
push 0x85100fff
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0xa0], eax
lea ecx, [ebp - 0x1c]
push 0x9809589e
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0xa4], eax
lea ecx, [ebp - 0x1c]
push 0xa685e44e
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0xa8], eax
lea ecx, [ebp - 0x1c]
push 0xfacb77d4
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0xb0], eax
lea ecx, [ebp - 0x1c]
push 0x4a1925fd
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0xb4], eax
lea ecx, [ebp - 0x1c]
push 0x56b733bb
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0xb8], eax
lea ecx, [ebp - 0x1c]
push 0x2f3a40fd
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0xbc], eax
lea ecx, [ebp - 0x1c]
push 0x53323cc
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0xc0], eax
lea ecx, [ebp - 0x1c]
push 0x9910a549
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0xc4], eax
lea ecx, [ebp - 0x1c]
push 0x1224e219
call fcn.1006f050
sub esp, 8
mov dword [esi + 0xc8], eax
lea ecx, [ebp - 0x1c]
push 0x41ece977
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0xcc], eax
lea ecx, [ebp - 0x1c]
push 0xabe9412f
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0xd4], eax
lea ecx, [ebp - 0x1c]
push 0xc7fe8bbb
call fcn.1006eeb0
sub esp, 8
mov dword [esi + 0xd8], eax
lea ecx, [ebp - 0x1c]
push 0xcb63bd96
call fcn.1006eeb0
mov dword [esi + 0xdc], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006aef6
nop
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006aeb0
xor edx, edx
test ecx, ecx
je 0x1006aee3
nop dword [eax]
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006aec0
cmp edi, 0x5c6e1222
je 0x1006bb69
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006aea0
xor eax, eax
mov dword [esi + 0x12c], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006af66
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006af21
xor edx, edx
test ecx, ecx
je 0x1006af53
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006af30
cmp edi, 0x6586ec6a
je 0x1006bb74
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006af11
xor eax, eax
mov dword [esi + 0x130], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006afd6
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006af91
xor edx, edx
test ecx, ecx
je 0x1006afc3
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006afa0
cmp edi, 0x8d39bde6
je 0x1006bb7f
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006af81
xor eax, eax
mov dword [esi + 0x134], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b046
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b001
xor edx, edx
test ecx, ecx
je 0x1006b033
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b010
cmp edi, 0x8c8dc452
je 0x1006bb8a
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006aff1
xor eax, eax
mov dword [esi + 0x138], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b0b6
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b071
xor edx, edx
test ecx, ecx
je 0x1006b0a3
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b080
cmp edi, 0x58e37709
je 0x1006bb95
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b061
xor eax, eax
mov dword [esi + 0x13c], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b126
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b0e1
xor edx, edx
test ecx, ecx
je 0x1006b113
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b0f0
cmp edi, 0x7a7ef71d
je 0x1006bba0
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b0d1
xor eax, eax
mov dword [esi + 0x140], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b196
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b151
xor edx, edx
test ecx, ecx
je 0x1006b183
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b160
cmp edi, 0x3e2a4345
je 0x1006bbab
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b141
xor eax, eax
mov dword [esi + 0x144], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b206
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b1c1
xor edx, edx
test ecx, ecx
je 0x1006b1f3
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b1d0
cmp edi, 0x2f5504fa
je 0x1006bbb6
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b1b1
xor eax, eax
mov dword [esi + 0x148], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b276
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b231
xor edx, edx
test ecx, ecx
je 0x1006b263
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b240
cmp edi, 0xad8af3df
je 0x1006bbc1
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b221
xor eax, eax
mov dword [esi + 0x14c], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b2e6
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [eax + ecx], 0
jne 0x1006b2a1
xor edx, edx
test ecx, ecx
je 0x1006b2d3
nop
movsx eax, byte [eax + edx]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b2b0
cmp edi, 0xa84213b4
je 0x1006bbcc
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b291
xor eax, eax
mov dword [esi + 0x150], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b356
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b311
xor edx, edx
test ecx, ecx
je 0x1006b343
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b320
cmp edi, 0xa9bf35
je 0x1006bbd7
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b301
xor eax, eax
mov dword [esi + 0x154], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b3c6
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b381
xor edx, edx
test ecx, ecx
je 0x1006b3b3
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b390
cmp edi, 0xadc3dc05
je 0x1006bbe2
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b371
xor eax, eax
mov dword [esi + 0x158], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b436
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b3f1
xor edx, edx
test ecx, ecx
je 0x1006b423
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b400
cmp edi, 0xe5abc68c
je 0x1006bbed
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b3e1
xor eax, eax
mov dword [esi + 0x15c], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b4a6
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b461
xor edx, edx
test ecx, ecx
je 0x1006b493
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b470
cmp edi, 0x95e5daaf
je 0x1006bbf8
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b451
xor eax, eax
mov dword [esi + 0x160], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b516
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b4d1
xor edx, edx
test ecx, ecx
je 0x1006b503
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b4e0
cmp edi, 0x658280e7
je 0x1006bc03
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b4c1
xor eax, eax
mov dword [esi + 0x164], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b586
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b541
xor edx, edx
test ecx, ecx
je 0x1006b573
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b550
cmp edi, 0xcf4e1864
je 0x1006bc0e
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b531
xor eax, eax
mov dword [esi + 0x168], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b5f6
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b5b1
xor edx, edx
test ecx, ecx
je 0x1006b5e3
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b5c0
cmp edi, 0x90f473ab
je 0x1006bc19
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b5a1
xor eax, eax
mov dword [esi + 0x16c], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b666
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b621
xor edx, edx
test ecx, ecx
je 0x1006b653
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b630
cmp edi, 0xc12e8fe5
je 0x1006bc24
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b611
xor eax, eax
mov dword [esi + 0x174], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b6e6
nop word [eax + eax]
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b6a0
xor edx, edx
test ecx, ecx
je 0x1006b6d3
nop dword [eax]
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b6b0
cmp edi, 0x1aef2a38
je 0x1006bc2f
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b690
xor eax, eax
mov dword [esi + 0x178], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b756
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b711
xor edx, edx
test ecx, ecx
je 0x1006b743
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b720
cmp edi, 0x9fec86c5
je 0x1006bc3a
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b701
xor eax, eax
mov dword [esi + 0x17c], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b7c6
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b781
xor edx, edx
test ecx, ecx
je 0x1006b7b3
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b790
cmp edi, 0x2bc18539
je 0x1006bc45
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b771
xor eax, eax
mov dword [esi + 0x180], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b846
nop word [eax + eax]
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b800
xor edx, edx
test ecx, ecx
je 0x1006b833
nop dword [eax]
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b810
cmp edi, 0x618e8cb3
je 0x1006bc50
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b7f0
xor eax, eax
mov dword [esi + 0x184], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b8b6
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b871
xor edx, edx
test ecx, ecx
je 0x1006b8a3
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b880
cmp edi, 0x6e983c77
je 0x1006bc5b
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b861
xor eax, eax
mov dword [esi + 0x188], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b926
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b8e1
xor edx, edx
test ecx, ecx
je 0x1006b913
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b8f0
cmp edi, 0x5198b136
je 0x1006bc66
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b8d1
xor eax, eax
mov dword [esi + 0x18c], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006b9a6
nop word [eax + eax]
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b960
xor edx, edx
test ecx, ecx
je 0x1006b993
nop dword [eax]
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b970
cmp edi, 0xa323ca34
je 0x1006bc71
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b950
xor eax, eax
mov dword [esi + 0x190], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006ba16
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006b9d1
xor edx, edx
test ecx, ecx
je 0x1006ba03
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006b9e0
cmp edi, 0xec2475d5
je 0x1006bc7c
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006b9c1
xor eax, eax
mov dword [esi + 0x194], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006ba86
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006ba41
xor edx, edx
test ecx, ecx
je 0x1006ba73
nop
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006ba50
cmp edi, 0xb228a6be
je 0x1006bc87
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006ba31
xor eax, eax
mov dword [esi + 0x198], eax
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1006bb06
nop word [eax + eax]
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0x1f0], eax
xor ecx, ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x1006bac0
xor edx, edx
test ecx, ecx
je 0x1006baf3
nop dword [eax]
movsx eax, byte [edx + eax]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0x1f0]
cmp edx, ecx
jb 0x1006bad0
cmp edi, 0xef5a6fad
je 0x1006bc92
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1ec], eax
test eax, eax
jne 0x1006bab0
xor eax, eax
mov dword [esi + 0x170], eax
lea ecx, [ebp - 0x4b0]
mov eax, dword [esi + 0x134]
push 0x19
push str.8B_0D_________8B_46_08_68
mov dword [eax + 0x50], 0
mov dword [ebp - 0x4b0], 0
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x49c], 0xf
mov byte [ebp - 0x4b0], 0
call fcn.10020770
mov byte [ebp - 4], 7
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006bc9d
mov edx, dword [eax + 0x50]
jmp 0x1006bc9f
mov eax, dword [ebp - 0x1ec]
jmp 0x1006aef8
mov eax, dword [ebp - 0x1ec]
jmp 0x1006af68
mov eax, dword [ebp - 0x1ec]
jmp 0x1006afd8
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b048
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b0b8
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b128
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b198
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b208
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b278
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b2e8
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b358
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b3c8
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b438
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b4a8
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b518
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b588
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b5f8
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b668
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b6e8
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b758
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b7c8
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b848
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b8b8
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b928
mov eax, dword [ebp - 0x1ec]
jmp 0x1006b9a8
mov eax, dword [ebp - 0x1ec]
jmp 0x1006ba18
mov eax, dword [ebp - 0x1ec]
jmp 0x1006ba88
mov eax, dword [ebp - 0x1ec]
jmp 0x1006bb08
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006bcab
mov eax, dword [eax + 0x18]
jmp 0x1006bcad
xor eax, eax
lea ecx, [ebp - 0x4b0]
push ecx
push eax
lea ecx, [ebp - 0x248]
call fcn.10043560
mov eax, dword [ebp - 0x248]
add esp, 8
test eax, eax
je 0x1006bd27
lea ecx, [eax + 2]
mov dword [ebp - 0x1f0], ecx
test ecx, ecx
je 0x1006bd27
mov dword [ebp - 0x1ec], 2
test ecx, ecx
je 0x1006bd27
mov eax, dword [0x1010db58]
lea edx, [ebp - 0x124]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006bd27
mov eax, dword [ebp - 0x110]
test al, 1
jne 0x1006bd27
test eax, 0x100
jne 0x1006bd27
sub dword [ebp - 0x1ec], 1
mov ecx, dword [ebp - 0x1f0]
mov ecx, dword [ecx]
mov dword [ebp - 0x1f0], ecx
jne 0x1006bce4
jmp 0x1006bd29
xor ecx, ecx
mov dword [esi + 0xec], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x49c]
cmp edx, 0x10
jb 0x1006bd6d
mov ecx, dword [ebp - 0x4b0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006bd63
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
mov dword [ebp - 0x4a0], 0
lea ecx, [ebp - 0x4c8]
mov dword [ebp - 0x49c], 0xf
mov byte [ebp - 0x4b0], 0
mov eax, dword [esi + 0x84]
push 0x27
push str.A1_________B9_________FF_75_08_FF_50_34
mov eax, dword [eax]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x10]
mov eax, dword [eax]
mov dword [esi + 0xf8], eax
mov dword [ebp - 0x4c8], 0
mov dword [ebp - 0x4b8], 0
mov dword [ebp - 0x4b4], 0xf
mov byte [ebp - 0x4c8], 0
call fcn.10020770
mov byte [ebp - 4], 8
mov edx, dword [esi + 0x54]
test edx, edx
je 0x1006bde5
mov edx, dword [edx + 0x50]
jmp 0x1006bde7
xor edx, edx
mov eax, dword [esi + 0x4c]
test eax, eax
je 0x1006bdf3
mov eax, dword [eax + 0x18]
jmp 0x1006bdf5
xor eax, eax
lea ecx, [ebp - 0x4c8]
push ecx
push eax
lea ecx, [ebp - 0x24c]
call fcn.10043560
mov eax, dword [ebp - 0x24c]
add esp, 8
test eax, eax
je 0x1006be73
lea ecx, [eax + 1]
mov dword [ebp - 0x1f0], ecx
test ecx, ecx
je 0x1006be73
mov dword [ebp - 0x1ec], 1
test ecx, ecx
je 0x1006be73
mov eax, dword [0x1010db58]
lea edx, [ebp - 0x108]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006be73
mov eax, dword [ebp - 0xf4]
test al, 1
jne 0x1006be73
test eax, 0x100
jne 0x1006be73
sub dword [ebp - 0x1ec], 1
mov ecx, dword [ebp - 0x1f0]
mov ecx, dword [ecx]
mov dword [ebp - 0x1f0], ecx
jne 0x1006be30
jmp 0x1006be75
xor ecx, ecx
mov dword [esi + 0xfc], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x4b4]
cmp edx, 0x10
jb 0x1006beb9
mov ecx, dword [ebp - 0x4c8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006beaf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x30
mov dword [ebp - 0x4e0], 0
lea ecx, [ebp - 0x4e0]
push str.A1_________B9_________FF_75_0C_FF_75_08_FF_50_0C
mov dword [ebp - 0x4b8], 0
mov dword [ebp - 0x4b4], 0xf
mov byte [ebp - 0x4c8], 0
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 0x4cc], 0xf
mov byte [ebp - 0x4e0], 0
call fcn.10020770
mov byte [ebp - 4], 9
mov eax, dword [esi + 0x54]
test eax, eax
je 0x1006bf1b
mov edx, dword [eax + 0x50]
jmp 0x1006bf1d
xor edx, edx
mov eax, dword [esi + 0x4c]
test eax, eax
je 0x1006bf29
mov eax, dword [eax + 0x18]
jmp 0x1006bf2b
xor eax, eax
lea ecx, [ebp - 0x4e0]
push ecx
push eax
lea ecx, [ebp - 0x250]
call fcn.10043560
mov eax, dword [ebp - 0x250]
add esp, 8
test eax, eax
je 0x1006bfa9
lea ecx, [eax + 1]
mov dword [ebp - 0x1f0], ecx
test ecx, ecx
je 0x1006bfa9
mov dword [ebp - 0x1ec], 1
test ecx, ecx
je 0x1006bfa9
mov eax, dword [0x1010db58]
lea edx, [ebp - 0xec]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006bfa9
mov eax, dword [ebp - 0xd8]
test al, 1
jne 0x1006bfa9
test eax, 0x100
jne 0x1006bfa9
sub dword [ebp - 0x1ec], 1
mov ecx, dword [ebp - 0x1f0]
mov ecx, dword [ecx]
mov dword [ebp - 0x1f0], ecx
jne 0x1006bf66
jmp 0x1006bfab
xor ecx, ecx
mov dword [esi + 0x100], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x4cc]
cmp edx, 0x10
jb 0x1006bfef
mov ecx, dword [ebp - 0x4e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006bfe5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x1e
mov dword [ebp - 0x2b8], 0
lea ecx, [ebp - 0x2b8]
push str.A1_________FF_90_________6A_00
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 0x4cc], 0xf
mov byte [ebp - 0x4e0], 0
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0xf
mov byte [ebp - 0x2b8], 0
call fcn.10020770
mov byte [ebp - 4], 0xa
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006c051
mov edx, dword [eax + 0x50]
jmp 0x1006c053
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006c05f
mov eax, dword [eax + 0x18]
jmp 0x1006c061
xor eax, eax
lea ecx, [ebp - 0x2b8]
push ecx
push eax
lea ecx, [ebp - 0x254]
call fcn.10043560
mov eax, dword [ebp - 0x254]
add esp, 8
test eax, eax
je 0x1006c0e5
lea ecx, [eax + 1]
mov dword [ebp - 0x1f0], ecx
test ecx, ecx
je 0x1006c0e5
mov dword [ebp - 0x1ec], 1
nop dword [eax]
test ecx, ecx
je 0x1006c0e5
mov eax, dword [0x1010db58]
lea edx, [ebp - 0xd0]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c0e5
mov eax, dword [ebp - 0xbc]
test al, 1
jne 0x1006c0e5
test eax, 0x100
jne 0x1006c0e5
sub dword [ebp - 0x1ec], 1
mov ecx, dword [ebp - 0x1f0]
mov ecx, dword [ecx]
mov dword [ebp - 0x1f0], ecx
jne 0x1006c0a0
test ecx, ecx
jne 0x1006c0e7
xor ecx, ecx
mov dword [esi + 0x108], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x2a4]
cmp edx, 0x10
jb 0x1006c12b
mov ecx, dword [ebp - 0x2b8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006c121
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x22
mov dword [ebp - 0x2d0], 0
lea ecx, [ebp - 0x2d0]
push str.8B_0D_________8B_01_FF_50_4C_8B_06
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0xf
mov byte [ebp - 0x2b8], 0
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2bc], 0xf
mov byte [ebp - 0x2d0], 0
call fcn.10020770
mov byte [ebp - 4], 0xb
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006c18d
mov edx, dword [eax + 0x50]
jmp 0x1006c18f
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006c19b
mov eax, dword [eax + 0x18]
jmp 0x1006c19d
xor eax, eax
lea ecx, [ebp - 0x2d0]
push ecx
push eax
lea ecx, [ebp - 0x258]
call fcn.10043560
mov eax, dword [ebp - 0x258]
add esp, 8
test eax, eax
je 0x1006c21b
lea ecx, [eax + 2]
mov dword [ebp - 0x1f0], ecx
test ecx, ecx
je 0x1006c21b
mov dword [ebp - 0x1ec], 2
test ecx, ecx
je 0x1006c21b
mov eax, dword [0x1010db58]
lea edx, [ebp - 0xb4]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c21b
mov eax, dword [ebp - 0xa0]
test al, 1
jne 0x1006c21b
test eax, 0x100
jne 0x1006c21b
sub dword [ebp - 0x1ec], 1
mov ecx, dword [ebp - 0x1f0]
mov ecx, dword [ecx]
mov dword [ebp - 0x1f0], ecx
jne 0x1006c1d8
jmp 0x1006c21d
xor ecx, ecx
mov dword [esi + 0xac], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x2bc]
cmp edx, 0x10
jb 0x1006c261
mov ecx, dword [ebp - 0x2d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006c257
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x22
mov dword [ebp - 0x2e8], 0
lea ecx, [ebp - 0x2e8]
push str.B9_________0F_94_C0_0F_B6_C0_50_68
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2bc], 0xf
mov byte [ebp - 0x2d0], 0
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d4], 0xf
mov byte [ebp - 0x2e8], 0
call fcn.10020770
mov byte [ebp - 4], 0xc
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006c2c3
mov edx, dword [eax + 0x50]
jmp 0x1006c2c5
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006c2d1
mov eax, dword [eax + 0x18]
jmp 0x1006c2d3
xor eax, eax
lea ecx, [ebp - 0x2e8]
push ecx
push eax
lea ecx, [ebp - 0x25c]
call fcn.10043560
mov eax, dword [ebp - 0x25c]
add esp, 8
test eax, eax
je 0x1006c355
lea ecx, [eax + 1]
mov dword [ebp - 0x1f0], ecx
test ecx, ecx
je 0x1006c355
mov dword [ebp - 0x1ec], 1
nop
test ecx, ecx
je 0x1006c355
mov eax, dword [0x1010db58]
lea edx, [ebp - 0x98]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c355
mov eax, dword [ebp - 0x84]
test al, 1
jne 0x1006c355
test eax, 0x100
jne 0x1006c355
sub dword [ebp - 0x1ec], 1
mov ecx, dword [ebp - 0x1f0]
mov ecx, dword [ecx]
mov dword [ebp - 0x1f0], ecx
jne 0x1006c310
test ecx, ecx
jne 0x1006c357
xor ecx, ecx
mov dword [esi + 0x10c], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x2d4]
cmp edx, 0x10
jb 0x1006c39b
mov ecx, dword [ebp - 0x2e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006c391
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x24
mov dword [ebp - 0x300], 0
lea ecx, [ebp - 0x300]
push str.8B_0D_________E8_________84_C0_75_6B
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d4], 0xf
mov byte [ebp - 0x2e8], 0
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2ec], 0xf
mov byte [ebp - 0x300], 0
call fcn.10020770
mov byte [ebp - 4], 0xd
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006c3fd
mov edx, dword [eax + 0x50]
jmp 0x1006c3ff
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006c40b
mov eax, dword [eax + 0x18]
jmp 0x1006c40d
xor eax, eax
lea ecx, [ebp - 0x300]
push ecx
push eax
lea ecx, [ebp - 0x260]
call fcn.10043560
mov eax, dword [ebp - 0x260]
add esp, 8
test eax, eax
je 0x1006c485
lea ecx, [eax + 2]
mov dword [ebp - 0x1f0], ecx
test ecx, ecx
je 0x1006c485
mov dword [ebp - 0x1ec], 1
test ecx, ecx
je 0x1006c485
mov eax, dword [0x1010db58]
lea edx, [ebp - 0x7c]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c485
mov eax, dword [ebp - 0x68]
test al, 1
jne 0x1006c485
test eax, 0x100
jne 0x1006c485
sub dword [ebp - 0x1ec], 1
mov ecx, dword [ebp - 0x1f0]
mov ecx, dword [ecx]
mov dword [ebp - 0x1f0], ecx
jne 0x1006c448
jmp 0x1006c487
xor ecx, ecx
mov dword [esi + 0x110], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x2ec]
cmp edx, 0x10
jb 0x1006c4cb
mov ecx, dword [ebp - 0x300]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006c4c1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x19
mov dword [ebp - 0x318], 0
lea ecx, [ebp - 0x318]
push str.8D_04_24_50_A1_________B9
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2ec], 0xf
mov byte [ebp - 0x300], 0
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x304], 0xf
mov byte [ebp - 0x318], 0
call fcn.10020770
mov byte [ebp - 4], 0xe
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006c52d
mov edx, dword [eax + 0x50]
jmp 0x1006c52f
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006c53b
mov eax, dword [eax + 0x18]
jmp 0x1006c53d
xor eax, eax
lea ecx, [ebp - 0x318]
push ecx
push eax
lea ecx, [ebp - 0x264]
call fcn.10043560
mov eax, dword [ebp - 0x264]
add esp, 8
test eax, eax
je 0x1006c5b5
lea ecx, [eax + 5]
mov dword [ebp - 0x1f0], ecx
test ecx, ecx
je 0x1006c5b5
mov dword [ebp - 0x1ec], 1
test ecx, ecx
je 0x1006c5b5
mov eax, dword [0x1010db58]
lea edx, [ebp - 0x60]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c5b5
mov eax, dword [ebp - 0x4c]
test al, 1
jne 0x1006c5b5
test eax, 0x100
jne 0x1006c5b5
sub dword [ebp - 0x1ec], 1
mov ecx, dword [ebp - 0x1f0]
mov ecx, dword [ecx]
mov dword [ebp - 0x1f0], ecx
jne 0x1006c578
jmp 0x1006c5b7
xor ecx, ecx
mov dword [esi + 0x114], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x304]
cmp edx, 0x10
jb 0x1006c5fb
mov ecx, dword [ebp - 0x318]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006c5f1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x45c21ffb
lea edx, [esi + 0x64]
mov dword [ebp - 0x308], 0
lea ecx, [ebp - 0x63c]
mov dword [ebp - 0x304], 0xf
mov byte [ebp - 0x318], 0
call fcn.10039830
add esp, 4
mov ecx, dword [eax]
mov dword [ebp - 0x1f0], ecx
test ecx, ecx
je 0x1006c67f
mov dword [ebp - 0x1ec], 1
test ecx, ecx
je 0x1006c67f
mov eax, dword [0x1010db58]
lea edx, [ebp - 0x44]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c67f
mov eax, dword [ebp - 0x30]
test al, 1
jne 0x1006c67f
test eax, 0x100
jne 0x1006c67f
sub dword [ebp - 0x1ec], 1
mov ecx, dword [ebp - 0x1f0]
mov ecx, dword [ecx]
mov dword [ebp - 0x1f0], ecx
jne 0x1006c642
jmp 0x1006c681
xor ecx, ecx
mov dword [esi + 0x104], ecx
lea ecx, [ebp - 0x600]
push 0x16
mov dword [ebp - 0x600], 0
push str.A1_________A8_01_75_4B
mov dword [ebp - 0x5f0], 0
mov dword [ebp - 0x5ec], 0xf
mov byte [ebp - 0x600], 0
call fcn.10020770
mov byte [ebp - 4], 0xf
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006c6ce
mov edx, dword [eax + 0x50]
jmp 0x1006c6d0
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006c6dc
mov eax, dword [eax + 0x18]
jmp 0x1006c6de
xor eax, eax
lea ecx, [ebp - 0x600]
push ecx
push eax
lea ecx, [ebp - 0x1f0]
call fcn.10043560
mov eax, dword [ebp - 0x1f0]
add esp, 8
mov dword [esi + 0x19c], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x5ec]
cmp edx, 0x10
jb 0x1006c744
mov ecx, dword [ebp - 0x600]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006c734
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
mov eax, dword [esi + 0x19c]
add esp, 8
mov dword [ebp - 0x5f0], 0
mov dword [ebp - 0x5ec], 0xf
mov byte [ebp - 0x600], 0
call eax
mov dword [esi + 0xf4], eax
mov eax, dword [esi + 0xf8]
mov eax, dword [eax + 8]
mov dword [esi + 0x11c], eax
mov eax, dword [esi + 0x7c]
mov eax, dword [eax]
mov ecx, dword [eax]
test ecx, ecx
je 0x1006c7e3
add ecx, 0x1b
mov dword [ebp - 0x1f0], ecx
je 0x1006c7e3
mov dword [ebp - 0x1ec], 2
nop word [eax + eax]
test ecx, ecx
je 0x1006c7e3
mov eax, dword [0x1010db58]
lea edx, [ebp - 0x1e8]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c7e3
mov eax, dword [ebp - 0x1d4]
test al, 1
jne 0x1006c7e3
test eax, 0x100
jne 0x1006c7e3
sub dword [ebp - 0x1ec], 1
mov ecx, dword [ebp - 0x1f0]
mov ecx, dword [ecx]
mov dword [ebp - 0x1f0], ecx
jne 0x1006c7a0
jmp 0x1006c7e5
xor ecx, ecx
mov dword [esi + 0xe4], ecx
mov eax, dword [esi + 0x7c]
mov eax, dword [eax]
mov ecx, dword [eax + 0x28]
test ecx, ecx
je 0x1006c853
add ecx, 5
mov dword [ebp - 0x1f0], ecx
je 0x1006c853
mov dword [ebp - 0x1ec], 2
test ecx, ecx
je 0x1006c853
mov eax, dword [0x1010db58]
lea edx, [ebp - 0x1cc]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c853
mov eax, dword [ebp - 0x1b8]
test al, 1
jne 0x1006c853
test eax, 0x100
jne 0x1006c853
sub dword [ebp - 0x1ec], 1
mov ecx, dword [ebp - 0x1f0]
mov ecx, dword [ecx]
mov dword [ebp - 0x1f0], ecx
jne 0x1006c810
jmp 0x1006c855
xor ecx, ecx
mov dword [esi + 0xe0], ecx
mov eax, dword [esi + 0x7c]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
test eax, eax
je 0x1006c86c
mov eax, dword [eax + 1]
jmp 0x1006c86e
xor eax, eax
mov dword [esi + 0xe8], eax
lea ecx, [ebp - 0x348]
push 0x20
mov dword [ebp - 0x348], 0
push str.55_8B_EC_83_E4_F8_83_EC_70_6A_58
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x334], 0xf
mov byte [ebp - 0x348], 0
call fcn.10020770
mov byte [ebp - 4], 0x10
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006c8bb
mov edx, dword [eax + 0x50]
jmp 0x1006c8bd
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006c8c9
mov eax, dword [eax + 0x18]
jmp 0x1006c8cb
xor eax, eax
lea ecx, [ebp - 0x348]
push ecx
push eax
lea ecx, [ebp - 0x1f0]
call fcn.10043560
mov eax, dword [ebp - 0x1f0]
add esp, 8
mov dword [esi + 0x1a0], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x334]
cmp edx, 0x10
jb 0x1006c92b
mov ecx, dword [ebp - 0x348]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006c921
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x2c
mov dword [ebp - 0x360], 0
lea ecx, [ebp - 0x360]
push str.55_8B_EC_83_E4_F8_83_EC_64_53_56_57_8B_F1_E8
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x334], 0xf
mov byte [ebp - 0x348], 0
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x34c], 0xf
mov byte [ebp - 0x360], 0
call fcn.10020770
mov byte [ebp - 4], 0x11
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006c98d
mov edx, dword [eax + 0x50]
jmp 0x1006c98f
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006c99b
mov eax, dword [eax + 0x18]
jmp 0x1006c99d
xor eax, eax
lea ecx, [ebp - 0x360]
push ecx
push eax
lea ecx, [ebp - 0x1f0]
call fcn.10043560
mov eax, dword [ebp - 0x1f0]
add esp, 8
mov dword [esi + 0x1a4], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x34c]
cmp edx, 0x10
jb 0x1006c9fd
mov ecx, dword [ebp - 0x360]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006c9f3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x29
mov dword [ebp - 0x378], 0
lea ecx, [ebp - 0x378]
push str.80_3D___________74_16_A1_________48_C7_81
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x34c], 0xf
mov byte [ebp - 0x360], 0
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x364], 0xf
mov byte [ebp - 0x378], 0
call fcn.10020770
mov byte [ebp - 4], 0x12
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006ca5f
mov edx, dword [eax + 0x50]
jmp 0x1006ca61
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006ca6d
mov eax, dword [eax + 0x18]
jmp 0x1006ca6f
xor eax, eax
lea ecx, [ebp - 0x378]
push ecx
push eax
lea ecx, [ebp - 0x1f0]
call fcn.10043560
mov eax, dword [ebp - 0x1f0]
add esp, 8
mov dword [esi + 0x1ac], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x364]
cmp edx, 0x10
jb 0x1006cacf
mov ecx, dword [ebp - 0x378]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006cac5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x20
mov dword [ebp - 0x3a8], 0
lea ecx, [ebp - 0x3a8]
push str.55_8B_EC_51_53_8B_D9_56_57_8D_B3
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x364], 0xf
mov byte [ebp - 0x378], 0
mov dword [ebp - 0x398], 0
mov dword [ebp - 0x394], 0xf
mov byte [ebp - 0x3a8], 0
call fcn.10020770
mov byte [ebp - 4], 0x13
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006cb31
mov edx, dword [eax + 0x50]
jmp 0x1006cb33
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006cb3f
mov eax, dword [eax + 0x18]
jmp 0x1006cb41
xor eax, eax
lea ecx, [ebp - 0x3a8]
push ecx
push eax
lea ecx, [ebp - 0x1f0]
call fcn.10043560
mov eax, dword [ebp - 0x1f0]
add esp, 8
mov dword [esi + 0x1b0], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x394]
cmp edx, 0x10
jb 0x1006cba1
mov ecx, dword [ebp - 0x3a8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006cb97
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x23
mov dword [ebp - 0x3c0], 0
lea ecx, [ebp - 0x3c0]
push str.55_8B_EC_83_E4_F8_51_53_56_57_8B_F1
mov dword [ebp - 0x398], 0
mov dword [ebp - 0x394], 0xf
mov byte [ebp - 0x3a8], 0
mov dword [ebp - 0x3b0], 0
mov dword [ebp - 0x3ac], 0xf
mov byte [ebp - 0x3c0], 0
call fcn.10020770
mov byte [ebp - 4], 0x14
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006cc03
mov edx, dword [eax + 0x50]
jmp 0x1006cc05
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006cc11
mov eax, dword [eax + 0x18]
jmp 0x1006cc13
xor eax, eax
lea ecx, [ebp - 0x3c0]
push ecx
push eax
lea ecx, [ebp - 0x1f0]
call fcn.10043560
mov eax, dword [ebp - 0x1f0]
add esp, 8
mov dword [esi + 0x1a8], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x3ac]
cmp edx, 0x10
jb 0x1006cc73
mov ecx, dword [ebp - 0x3c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006cc69
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x26
mov dword [ebp - 0x3d8], 0
lea ecx, [ebp - 0x3d8]
push str.55_8B_EC_51_56_8B_F1_85_F6_74_68_83_BE
mov dword [ebp - 0x3b0], 0
mov dword [ebp - 0x3ac], 0xf
mov byte [ebp - 0x3c0], 0
mov dword [ebp - 0x3c8], 0
mov dword [ebp - 0x3c4], 0xf
mov byte [ebp - 0x3d8], 0
call fcn.10020770
mov byte [ebp - 4], 0x15
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006ccd5
mov edx, dword [eax + 0x50]
jmp 0x1006ccd7
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006cce3
mov eax, dword [eax + 0x18]
jmp 0x1006cce5
xor eax, eax
lea ecx, [ebp - 0x3d8]
push ecx
push eax
lea ecx, [ebp - 0x1f0]
call fcn.10043560
mov eax, dword [ebp - 0x1f0]
add esp, 8
mov dword [esi + 0x1c0], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x3c4]
cmp edx, 0x10
jb 0x1006cd45
mov ecx, dword [ebp - 0x3d8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006cd3b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x32
mov dword [ebp - 0x3f0], 0
lea ecx, [ebp - 0x3f0]
push str.55_8B_EC_83_E4_F8_83_EC_0C_53_56_57_8B_7D_08_8B_F1
mov dword [ebp - 0x3c8], 0
mov dword [ebp - 0x3c4], 0xf
mov byte [ebp - 0x3d8], 0
mov dword [ebp - 0x3e0], 0
mov dword [ebp - 0x3dc], 0xf
mov byte [ebp - 0x3f0], 0
call fcn.10020770
mov byte [ebp - 4], 0x16
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006cda7
mov edx, dword [eax + 0x50]
jmp 0x1006cda9
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006cdb5
mov eax, dword [eax + 0x18]
jmp 0x1006cdb7
xor eax, eax
lea ecx, [ebp - 0x3f0]
push ecx
push eax
lea ecx, [ebp - 0x1f0]
call fcn.10043560
mov eax, dword [ebp - 0x1f0]
add esp, 8
mov dword [esi + 0x1c4], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x3dc]
cmp edx, 0x10
jb 0x1006ce17
mov ecx, dword [ebp - 0x3f0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006ce0d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x19
mov dword [ebp - 0x408], 0
lea ecx, [ebp - 0x408]
push str.E8_________8B_07_89_46_0C
mov dword [ebp - 0x3e0], 0
mov dword [ebp - 0x3dc], 0xf
mov byte [ebp - 0x3f0], 0
mov dword [ebp - 0x3f8], 0
mov dword [ebp - 0x3f4], 0xf
mov byte [ebp - 0x408], 0
call fcn.10020770
mov byte [ebp - 4], 0x17
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006ce79
mov edx, dword [eax + 0x50]
jmp 0x1006ce7b
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006ce87
mov eax, dword [eax + 0x18]
jmp 0x1006ce89
xor eax, eax
lea ecx, [ebp - 0x408]
push ecx
push eax
lea ecx, [ebp - 0x268]
call fcn.10043560
mov eax, dword [ebp - 0x268]
add esp, 8
test eax, eax
je 0x1006ceb7
mov ecx, dword [eax + 1]
test ecx, ecx
je 0x1006ceb7
add eax, 5
add eax, ecx
jne 0x1006ceb9
xor eax, eax
mov dword [esi + 0x1c8], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x3f4]
cmp edx, 0x10
jb 0x1006cefd
mov ecx, dword [ebp - 0x408]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006cef3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x13
mov dword [ebp - 0x330], 0
lea ecx, [ebp - 0x330]
push str.E9_________32_C0_5D
mov dword [ebp - 0x3f8], 0
mov dword [ebp - 0x3f4], 0xf
mov byte [ebp - 0x408], 0
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x31c], 0xf
mov byte [ebp - 0x330], 0
call fcn.10020770
mov byte [ebp - 4], 0x18
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006cf5f
mov edx, dword [eax + 0x50]
jmp 0x1006cf61
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006cf6d
mov eax, dword [eax + 0x18]
jmp 0x1006cf6f
xor eax, eax
lea ecx, [ebp - 0x330]
push ecx
push eax
lea ecx, [ebp - 0x26c]
call fcn.10043560
mov eax, dword [ebp - 0x26c]
add esp, 8
test eax, eax
je 0x1006cf9f
mov ecx, dword [eax + 1]
test ecx, ecx
jne 0x1006cf9a
xor eax, eax
jmp 0x1006cf9f
add eax, 5
add eax, ecx
mov dword [esi + 0x1d0], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x31c]
cmp edx, 0x10
jb 0x1006cfe3
mov ecx, dword [ebp - 0x330]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006cfd9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x1d
mov dword [ebp - 0x498], 0
lea ecx, [ebp - 0x498]
push str.53_56_8B_F1_8B_DA_85_F6_74_55
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x31c], 0xf
mov byte [ebp - 0x330], 0
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 0xf
mov byte [ebp - 0x498], 0
call fcn.10020770
mov byte [ebp - 4], 0x19
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006d045
mov edx, dword [eax + 0x50]
jmp 0x1006d047
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006d053
mov eax, dword [eax + 0x18]
jmp 0x1006d055
xor eax, eax
lea ecx, [ebp - 0x498]
push ecx
push eax
lea ecx, [ebp - 0x1f0]
call fcn.10043560
mov eax, dword [ebp - 0x1f0]
add esp, 8
mov dword [esi + 0x1d4], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x484]
cmp edx, 0x10
jb 0x1006d0b5
mov ecx, dword [ebp - 0x498]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006d0ab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x1f
mov dword [ebp - 0x480], 0
lea ecx, [ebp - 0x480]
push str.E8_________88_44_24_0F_8B_56_FC
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 0xf
mov byte [ebp - 0x498], 0
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x46c], 0xf
mov byte [ebp - 0x480], 0
call fcn.10020770
mov byte [ebp - 4], 0x1a
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006d117
mov edx, dword [eax + 0x50]
jmp 0x1006d119
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006d125
mov eax, dword [eax + 0x18]
jmp 0x1006d127
xor eax, eax
lea ecx, [ebp - 0x480]
push ecx
push eax
lea ecx, [ebp - 0x270]
call fcn.10043560
mov eax, dword [ebp - 0x270]
add esp, 8
test eax, eax
je 0x1006d155
mov ecx, dword [eax + 1]
test ecx, ecx
je 0x1006d155
add eax, 5
add eax, ecx
jne 0x1006d157
xor eax, eax
mov dword [esi + 0x1d8], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x46c]
cmp edx, 0x10
jb 0x1006d19b
mov ecx, dword [ebp - 0x480]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006d191
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x19
mov dword [ebp - 0x468], 0
lea ecx, [ebp - 0x468]
push str.55_8B_EC_8B_0D_________68
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x46c], 0xf
mov byte [ebp - 0x480], 0
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 0xf
mov byte [ebp - 0x468], 0
call fcn.10020770
mov byte [ebp - 4], 0x1b
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006d1fd
mov edx, dword [eax + 0x50]
jmp 0x1006d1ff
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006d20b
mov eax, dword [eax + 0x18]
jmp 0x1006d20d
xor eax, eax
lea ecx, [ebp - 0x468]
push ecx
push eax
lea ecx, [ebp - 0x1f0]
call fcn.10043560
mov eax, dword [ebp - 0x1f0]
add esp, 8
mov dword [esi + 0x1dc], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x454]
cmp edx, 0x10
jb 0x1006d26d
mov ecx, dword [ebp - 0x468]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006d263
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x10
mov dword [ebp - 0x450], 0
lea ecx, [ebp - 0x450]
push str.E8_________38_83
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 0xf
mov byte [ebp - 0x468], 0
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 0xf
mov byte [ebp - 0x450], 0
call fcn.10020770
mov byte [ebp - 4], 0x1c
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006d2cf
mov edx, dword [eax + 0x50]
jmp 0x1006d2d1
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006d2dd
mov eax, dword [eax + 0x18]
jmp 0x1006d2df
xor eax, eax
lea ecx, [ebp - 0x450]
push ecx
push eax
lea ecx, [ebp - 0x274]
call fcn.10043560
mov eax, dword [ebp - 0x274]
add esp, 8
test eax, eax
je 0x1006d30f
mov ecx, dword [eax + 1]
test ecx, ecx
jne 0x1006d30a
xor eax, eax
jmp 0x1006d30f
add eax, 5
add eax, ecx
mov dword [esi + 0x1e0], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x43c]
cmp edx, 0x10
jb 0x1006d353
mov ecx, dword [ebp - 0x450]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006d349
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x13
mov dword [ebp - 0x438], 0
lea ecx, [ebp - 0x438]
push str.E8_________89_5E_18
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 0xf
mov byte [ebp - 0x450], 0
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 0xf
mov byte [ebp - 0x438], 0
call fcn.10020770
mov byte [ebp - 4], 0x1d
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006d3b5
mov edx, dword [eax + 0x50]
jmp 0x1006d3b7
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006d3c3
mov eax, dword [eax + 0x18]
jmp 0x1006d3c5
xor eax, eax
lea ecx, [ebp - 0x438]
push ecx
push eax
lea ecx, [ebp - 0x2a0]
call fcn.10043560
mov eax, dword [ebp - 0x2a0]
add esp, 8
test eax, eax
je 0x1006d3f5
mov ecx, dword [eax + 1]
test ecx, ecx
jne 0x1006d3f0
xor eax, eax
jmp 0x1006d3f5
add eax, 5
add eax, ecx
mov dword [esi + 0x1e4], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x424]
cmp edx, 0x10
jb 0x1006d439
mov ecx, dword [ebp - 0x438]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006d42f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x1c
mov dword [ebp - 0x420], 0
lea ecx, [ebp - 0x420]
push str.E8_________59_C2_08_00_51_E8
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 0xf
mov byte [ebp - 0x438], 0
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x40c], 0xf
mov byte [ebp - 0x420], 0
call fcn.10020770
mov byte [ebp - 4], 0x1e
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006d49b
mov edx, dword [eax + 0x50]
jmp 0x1006d49d
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006d4a9
mov eax, dword [eax + 0x18]
jmp 0x1006d4ab
xor eax, eax
lea ecx, [ebp - 0x420]
push ecx
push eax
lea ecx, [ebp - 0x278]
call fcn.10043560
mov eax, dword [ebp - 0x278]
add esp, 8
test eax, eax
je 0x1006d4d9
mov ecx, dword [eax + 1]
test ecx, ecx
je 0x1006d4d9
add eax, 5
add eax, ecx
jne 0x1006d4db
xor eax, eax
mov dword [esi + 0x1e8], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x40c]
cmp edx, 0x10
jb 0x1006d51f
mov ecx, dword [ebp - 0x420]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006d515
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x29
mov dword [ebp - 0x5e8], 0
lea ecx, [ebp - 0x5e8]
push str.E8_________A1_________F3_0F_10_40___C6_83
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x40c], 0xf
mov byte [ebp - 0x420], 0
mov dword [ebp - 0x5d8], 0
mov dword [ebp - 0x5d4], 0xf
mov byte [ebp - 0x5e8], 0
call fcn.10020770
mov byte [ebp - 4], 0x1f
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006d581
mov edx, dword [eax + 0x50]
jmp 0x1006d583
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006d58f
mov eax, dword [eax + 0x18]
jmp 0x1006d591
xor eax, eax
lea ecx, [ebp - 0x5e8]
push ecx
push eax
lea ecx, [ebp - 0x27c]
call fcn.10043560
mov eax, dword [ebp - 0x27c]
add esp, 8
test eax, eax
je 0x1006d5bf
mov ecx, dword [eax + 1]
test ecx, ecx
je 0x1006d5bf
add eax, 5
add eax, ecx
jne 0x1006d5c1
xor eax, eax
mov dword [esi + 0x1ec], eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x5d4]
cmp edx, 0x10
jb 0x1006d605
mov ecx, dword [ebp - 0x5e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006d5fb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006dea0
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x30
mov dword [ebp - 0x4f8], 0
lea ecx, [ebp - 0x4f8]
push str.8B_81_________81_C1_________FF_50_04_83_C0_40_C3
mov dword [ebp - 0x5d8], 0
mov dword [ebp - 0x5d4], 0xf
mov byte [ebp - 0x5e8], 0
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x4e4], 0xf
mov byte [ebp - 0x4f8], 0
call fcn.10020770
mov byte [ebp - 4], 0x20
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006d667
mov edx, dword [eax + 0x50]
jmp 0x1006d669
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006d675
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10098145
add esp, 8
push 0x16
mov dword [ebp - 0x5d0], 0
lea ecx, [ebp - 0x5d0]
push str.8B_80_________8D_34_C8
mov dword [ebp - 0x5a8], 0
mov dword [ebp - 0x5a4], 0xf
mov byte [ebp - 0x5b8], 0
mov dword [ebp - 0x5c0], 0
mov dword [ebp - 0x5bc], 0xf
mov byte [ebp - 0x5d0], 0
call fcn.10020770
mov byte [ebp - 4], 0x2a
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x1006df12
mov edx, dword [eax + 0x50]
jmp 0x1006df14
xor edx, edx
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1006df20
mov eax, dword [eax + 0x18]
jmp 0x1006df22
xor eax, eax
lea ecx, [ebp - 0x5d0]
push ecx
push eax
lea ecx, [ebp - 0x29c]
call fcn.10043560
mov eax, dword [ebp - 0x29c]
add esp, 8
test eax, eax
je 0x1006df47
add eax, 2
jmp 0x1006df49
xor eax, eax
mov eax, dword [eax]
mov dword [esi + 0x218], eax
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x5bc]
cmp eax, 0x10
jb 0x1006df6d