Function at 0x10006168
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x128c
call fcn.1002aba0
push ebx
push esi
push edi
mov esi, 0x2377f
push esi
call sub.MSVCRT.dll_malloc
pop ecx
mov dword [ebp - 0x14], eax
mov byte [eax], 0
inc eax
dec esi
jne 0x10006187
push 5
xor eax, eax
pop edi
call fcn.100035eb
inc al
mov byte [ebp - 1], al
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov esi, 0x1fe
push esi
mov dword [ebp - 0x1284], eax
lea eax, [ebp - 0x127e]
push ebx
push eax
mov dword [ebp - 0x1288], ebx
mov word [ebp - 0x1280], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x1fa
lea eax, [ebp - 0x107a]
push ebx
push eax
mov word [ebp - 0x1080], 0x4d
mov word [ebp - 0x107e], 0x65
mov word [ebp - 0x107c], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
cmp dword [ebp + 0xc], 6
je 0x1000620c
cmp dword [ebp + 0xc], 7
mov byte [ebp - 0xe80], 2
jne 0x10006213
mov byte [ebp - 0xe80], 1
push 3
xor eax, eax
pop edi
mov byte [ebp - 0xe7f], 0x10
mov byte [ebp - 0xe7e], 1
call fcn.100035eb
mov cl, byte [ebp - 0xe80]
dec cl
neg cl
push 5
sbb ecx, ecx
and ecx, edi
inc ecx
add ax, cx
mov word [ebp - 0xe7c], ax
xor eax, eax
pop edi
call fcn.100035eb
mov byte [ebp - 0xe7a], al
xor eax, eax
call fcn.100035eb
push edi
mov byte [ebp - 0xe79], al
pop eax
push esi
mov word [ebp - 0xe78], ax
mov word [ebp - 0xe76], ax
mov word [ebp - 0xe74], ax
mov word [ebp - 0xe72], ax
lea eax, [ebp - 0xe56]
push ebx
push eax
mov dword [ebp - 0xe70], ebx
mov dword [ebp - 0xe6c], ebx
mov dword [ebp - 0xe68], ebx
mov dword [ebp - 0xe64], ebx
mov dword [ebp - 0xe60], ebx
mov dword [ebp - 0xe5c], ebx
mov word [ebp - 0xe58], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
push esi
lea eax, [ebp - 0xc3e]
push ebx
push eax
mov dword [ebp - 0xc58], ebx
mov dword [ebp - 0xc54], ebx
mov dword [ebp - 0xc50], ebx
mov dword [ebp - 0xc4c], ebx
mov dword [ebp - 0xc48], ebx
mov dword [ebp - 0xc44], ebx
mov word [ebp - 0xc40], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
push esi
lea eax, [ebp - 0xa3c]
push ebx
push eax
mov byte [ebp - 0xa40], 0x64
mov word [ebp - 0xa3e], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
xor eax, eax
lea edi, [ebp - 0x83e]
stosw word es:[edi], ax
push esi
lea eax, [ebp - 0x832]
push ebx
push eax
mov dword [ebp - 0x83c], 4
mov dword [ebp - 0x838], 0x3000000
mov word [ebp - 0x834], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x14
xor eax, eax
pop edi
call fcn.100035eb
inc al
mov byte [ebp - 0x634], al
xor eax, eax
push 8
pop edi
call fcn.100035eb
mov cl, 5
imul cl
add al, byte [ebp - 1]
push 6
mov byte [ebp - 0x633], al
xor eax, eax
pop edi
call fcn.100035eb
mov cl, 5
imul cl
add al, byte [ebp - 1]
push esi
mov byte [ebp - 0x632], al
mov eax, 0x3e8
mov dword [ebp - 0x5ff], eax
mov dword [ebp - 0x5fb], eax
mov dword [ebp - 0x5f7], eax
lea eax, [ebp - 0x5ce]
push ebx
push eax
mov byte [ebp - 0x631], bl
mov byte [ebp - 0x630], cl
mov byte [ebp - 0x62f], cl
mov byte [ebp - 0x62e], cl
mov byte [ebp - 0x62d], cl
mov byte [ebp - 0x62c], cl
mov dword [ebp - 0x62b], ebx
mov dword [ebp - 0x627], ebx
mov dword [ebp - 0x623], ebx
mov dword [ebp - 0x61f], ebx
mov dword [ebp - 0x61b], ebx
mov dword [ebp - 0x617], ebx
mov dword [ebp - 0x613], ebx
mov dword [ebp - 0x60f], ebx
mov dword [ebp - 0x60b], ebx
mov dword [ebp - 0x607], ebx
mov dword [ebp - 0x603], 0x1e
mov byte [ebp - 0x5f3], bl
mov dword [ebp - 0x5f2], ebx
mov dword [ebp - 0x5ee], ebx
mov dword [ebp - 0x5ea], ebx
mov byte [ebp - 0x5e6], bl
mov dword [ebp - 0x5e4], ebx
mov dword [ebp - 0x5e0], ebx
mov dword [ebp - 0x5dc], ebx
mov dword [ebp - 0x5d8], ebx
mov dword [ebp - 0x5d4], ebx
mov word [ebp - 0x5d0], bx
call sub.MSVCRT.dll_memset
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + 0x15f1]
mov dword [ecx + 0x3261], eax
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffffc
add esp, 0xc
cmp ecx, 3
mov dword [ebp - 8], eax
ja 0x10006494
lea ecx, [ebp - 0x838]
push ecx
mov ebx, eax
call fcn.10005921
pop ecx
xor ebx, ebx
jmp 0x100072e6
push ebx
push dword [ebp + 0xc]
mov byte [ebp - 0x8c], 0x31
mov byte [ebp - 0x8b], 0x33
mov byte [ebp - 0x8a], 0x36
mov byte [ebp - 0x89], 0x2e
mov byte [ebp - 0x88], 0x32
mov byte [ebp - 0x87], 0x34
mov byte [ebp - 0x86], 0x33
mov byte [ebp - 0x85], 0x2e
mov byte [ebp - 0x84], 0x38
mov byte [ebp - 0x83], 0x31
mov byte [ebp - 0x82], 0x2e
mov byte [ebp - 0x81], 0x32
mov byte [ebp - 0x80], 0x33
mov byte [ebp - 0x7f], 0x38
mov byte [ebp - 0x7e], 0x2f
mov byte [ebp - 0x7d], 0x6c
mov byte [ebp - 0x7c], 0x6f
mov byte [ebp - 0x7b], 0x67
mov byte [ebp - 0x7a], 0x69
mov byte [ebp - 0x79], 0x6e
mov byte [ebp - 0x78], 0x2f
mov byte [ebp - 0x77], 0x61
mov byte [ebp - 0x76], 0x6c
mov byte [ebp - 0x75], 0x69
mov byte [ebp - 0x74], 0x63
mov byte [ebp - 0x73], 0x69
mov byte [ebp - 0x72], 0x61
mov byte [ebp - 0x71], 0x2f
mov byte [ebp - 0x70], 0x6f
mov byte [ebp - 0x6f], 0x66
mov byte [ebp - 0x6e], 0x66
mov byte [ebp - 0x6d], 0x6c
mov byte [ebp - 0x6c], 0x69
mov byte [ebp - 0x6b], 0x6e
mov byte [ebp - 0x6a], 0x65
mov byte [ebp - 0x69], 0x5f
mov byte [ebp - 0x68], 0x72
mov byte [ebp - 0x67], 0x61
mov byte [ebp - 0x66], 0x6e
mov byte [ebp - 0x65], 0x63
mov byte [ebp - 0x64], 0x68
mov byte [ebp - 0x63], 0x32
mov byte [ebp - 0x62], 0x2e
mov byte [ebp - 0x61], 0x70
mov byte [ebp - 0x60], 0x68
mov byte [ebp - 0x5f], 0x70
mov byte [ebp - 0x5e], bl
mov byte [ebp - 0x44], 0x68
mov byte [ebp - 0x43], 0x74
mov byte [ebp - 0x42], 0x74
mov byte [ebp - 0x41], 0x70
mov byte [ebp - 0x40], 0x73
mov byte [ebp - 0x3f], 0x3a
mov byte [ebp - 0x3e], 0x2f
mov byte [ebp - 0x3d], 0x2f
mov byte [ebp - 0x3c], 0x61
mov byte [ebp - 0x3b], 0x6c
mov byte [ebp - 0x3a], 0x69
mov byte [ebp - 0x39], 0x63
mov byte [ebp - 0x38], 0x69
mov byte [ebp - 0x37], 0x61
mov byte [ebp - 0x36], 0x67
mov byte [ebp - 0x35], 0x61
mov byte [ebp - 0x34], 0x6d
mov byte [ebp - 0x33], 0x65
mov byte [ebp - 0x32], 0x2e
mov byte [ebp - 0x31], 0x63
mov byte [ebp - 0x30], 0x6f
mov byte [ebp - 0x2f], 0x6d
mov byte [ebp - 0x2e], bl
call fcn.10003abf
mov ecx, dword [0x1003e9b0]
push dword [ecx]
mov dword [ebp - 0xc4], eax
push 0x1002c590
push dword [eax]
lea eax, [ebp - 0x44]
push 0x1002c59c
push str._r_nContent_Type:__r_nContent_Length:__r_n_r_n
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp + 8]
call fcn.1000331f
mov edi, eax
add esp, 0x28
cmp edi, ebx
mov dword [ebp - 0x10], edi
je 0x100072c0
lea eax, [ebp - 0x1288]
push eax
push 0x1002c5f4
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0x1284]
push eax
push str.memberno
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0x1280]
push eax
push str.authkey
push dword [edi]
call fcn.10005cdd
add esp, 0xc
lea eax, [ebp - 0x1080]
push eax
push str.name
push dword [edi]
call fcn.10005cdd
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x160]
push ecx
push 0x1002c614
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x100066a1
lea eax, [ebp - 0xe80]
push eax
lea ecx, [ebp - 0x160]
call fcn.10005cbe
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x138]
push ecx
push 0x1002c618
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x100066d1
lea eax, [ebp - 0xe7f]
push eax
lea ecx, [ebp - 0x138]
call fcn.10005cbe
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x148]
push ecx
push str.privacy
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006701
lea eax, [ebp - 0xe7e]
push eax
lea ecx, [ebp - 0x148]
call fcn.10005cbe
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x158]
push ecx
push str.voice
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006731
lea eax, [ebp - 0xe7c]
push eax
lea ecx, [ebp - 0x158]
call fcn.10005c9d
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x168]
push ecx
push str.body.eyes
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006761
lea eax, [ebp - 0xe7a]
push eax
lea ecx, [ebp - 0x168]
call fcn.10005cbe
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0xd8]
push ecx
push str.body.mouth
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006791
lea eax, [ebp - 0xe79]
push eax
lea ecx, [ebp - 0xd8]
call fcn.10005cbe
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0xf0]
push ecx
push str.body.head
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x100067c1
lea eax, [ebp - 0xe78]
push eax
lea ecx, [ebp - 0xf0]
call fcn.10005c9d
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x140]
push ecx
push str.body.height
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x100067f1
lea eax, [ebp - 0xe76]
push eax
lea ecx, [ebp - 0x140]
call fcn.10005c9d
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x100]
push ecx
push str.body.weight
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006821
lea eax, [ebp - 0xe74]
push eax
lea ecx, [ebp - 0x100]
call fcn.10005c9d
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x178]
push ecx
push str.body.proportion
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006851
lea eax, [ebp - 0xe72]
push eax
lea ecx, [ebp - 0x178]
call fcn.10005c9d
add esp, 4
lea eax, [ebp - 0xe70]
push eax
push str.carrots
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0xe6c]
push eax
push str._carrots
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0xe68]
push eax
push str._horses
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0xe64]
push eax
push 0x1002c694
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0xc58]
push eax
push str.eggs
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0xe60]
push eax
push str.horse
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0xe5c]
push eax
push 0x1002c6a8
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0xe58]
push eax
push str.pets
push dword [edi]
call fcn.10005cdd
add esp, 0xc
lea eax, [ebp - 0xc54]
push eax
push str.hatch
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0xc50]
push eax
push str.hatch_time
push dword [edi]
call fcn.10005b46
add esp, 0xc
lea eax, [ebp - 0xc48]
push eax
push str.crystal
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0xc44]
push eax
push str.pet_rename
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0xc40]
push eax
push str.keyboard
push dword [edi]
call fcn.10005cdd
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x110]
push ecx
push str.mouse
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x1000699f
lea eax, [ebp - 0xa40]
push eax
lea ecx, [ebp - 0x110]
call fcn.10005cbe
add esp, 4
lea eax, [ebp - 0xa3e]
push eax
push str.release_items
push dword [edi]
call fcn.10005cdd
add esp, 0xc
lea eax, [ebp - 0x83c]
push eax
push str.cloth
push dword [edi]
call fcn.10005c65
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x150]
push ecx
push str.ranch_state
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x100069fb
lea eax, [ebp - 0x5e6]
push eax
lea ecx, [ebp - 0x150]
call fcn.10005cbe
add esp, 4
lea eax, [ebp - 0x5e4]
push eax
push str.server_time
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0x5e0]
push eax
push str.debug_am
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0x5dc]
push eax
push str.debug_pm
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0x5d8]
push eax
push str.debug_ar
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0x5d4]
push eax
push str.debug_pr
push dword [edi]
call fcn.10005c65
add esp, 0xc
lea eax, [ebp - 0x5d0]
push eax
push str.debug_mode
push dword [edi]
call fcn.10005cdd
add esp, 0xc
cmp dword [ebp - 0x5e4], ebx
je 0x10006ac8
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [ebp - 0x5e4]
xor ecx, ecx
push ebx
add eax, 0xb6109100
push 0x989680
adc ecx, 2
push ecx
push eax
call fcn.1002ab60
sub eax, dword [ebp - 0xd0]
sbb edx, dword [ebp - 0xcc]
mov dword [0x1003e728], eax
mov dword [0x1003e72c], edx
mov eax, dword [0x1003e990]
add eax, 8
mov ecx, 0x10000
mov dword [eax - 4], ebx
mov dword [eax], ebx
add eax, 0x13
dec ecx
jne 0x10006ad5
mov dword [ebp + 0xc], ebx
lea eax, [ebp - 0xc8]
push eax
push dword [ebp + 0xc]
push str.ItemUID
push dword [edi]
call fcn.10005fbb
add esp, 0x10
test eax, eax
je 0x10006c28
lea eax, [ebp - 0xac]
push eax
push dword [ebp + 0xc]
push str.expires
push dword [edi]
call fcn.10005fbb
add esp, 0x10
test eax, eax
je 0x10006c28
lea eax, [ebp - 0xc0]
push eax
push dword [ebp + 0xc]
push str.quantity
push dword [edi]
call fcn.10005fbb
add esp, 0x10
test eax, eax
je 0x10006c28
mov eax, dword [edi]
push ebx
push dword [ebp + 0xc]
mov dword [ebp - 0xc], eax
call fcn.10003abf
push ebx
push ebx
push ebx
push ebx
mov esi, eax
push dword [esi]
push str.seconds
push 0x1002c584
call fcn.10003856
add esp, 0x24
lea ecx, [ebp - 0xb8]
push ecx
push dword [eax]
mov dword [ebp - 0x18], eax
push dword [ebp - 0xc]
call fcn.10005b46
add esp, 0xc
mov dword [ebp - 0xc], eax
call fcn.10003812
mov esi, dword [ebp - 0x18]
call fcn.10003812
cmp dword [ebp - 0xc], ebx
je 0x10006c28
mov esi, dword [ebp - 0xc8]
cmp esi, 0x10000
jae 0x10006c18
cmp dword [ebp - 0xb4], 0xffffffff
jl 0x10006c18
jg 0x10006bc3
cmp dword [ebp - 0xb8], 0xfffeae80
jbe 0x10006c18
cmp dword [ebp - 0xb8], 0x3b9aca00
jne 0x10006be3
cmp dword [ebp - 0xb4], ebx
jne 0x10006be3
mov dword [ebp - 0xac], 0x11bb8
jmp 0x10006bfc
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
call fcn.100041af
pop ecx
pop ecx
mov dword [ebp - 0xac], eax
mov eax, dword [0x1003e990]
imul esi, esi, 0x13
mov ecx, dword [ebp - 0xac]
add eax, esi
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0xc0]
mov dword [eax + 8], ecx
inc dword [ebp + 0xc]
cmp dword [ebp + 0xc], 0x2710
jl 0x10006ae3
lea eax, [ebp - 0x834]
push eax
push str.horse.name
push dword [edi]
call fcn.10005cdd
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x120]
push ecx
push str.horse.body.skin
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006c6e
lea eax, [ebp - 0x634]
push eax
lea ecx, [ebp - 0x120]
call fcn.10005cbe
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x170]
push ecx
push str.horse.body.mane
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006c9e
lea eax, [ebp - 0x633]
push eax
lea ecx, [ebp - 0x170]
call fcn.10005cbe
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x130]
push ecx
push str.horse.body.tail
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006cce
lea eax, [ebp - 0x632]
push eax
lea ecx, [ebp - 0x130]
call fcn.10005cbe
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0xe0]
push ecx
push str.horse.body.face
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006cfe
lea eax, [ebp - 0x631]
push eax
lea ecx, [ebp - 0xe0]
call fcn.10005cbe
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0xe8]
push ecx
push str.horse.body.size
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006d2e
lea eax, [ebp - 0x630]
push eax
lea ecx, [ebp - 0xe8]
call fcn.10005cbe
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0xf8]
push ecx
push str.horse.body.legs
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006d5e
lea eax, [ebp - 0x62f]
push eax
lea ecx, [ebp - 0xf8]
call fcn.10005cbe
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x108]
push ecx
push str.horse.body.back
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006d8e
lea eax, [ebp - 0x62e]
push eax
lea ecx, [ebp - 0x108]
call fcn.10005cbe
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x118]
push ecx
push str.horse.body.neck
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006dbe
lea eax, [ebp - 0x62d]
push eax
lea ecx, [ebp - 0x118]
call fcn.10005cbe
add esp, 4
mov eax, dword [edi]
lea ecx, [ebp - 0x128]
push ecx
push str.horse.body.front
push eax
call fcn.10005bd6
add esp, 0xc
test eax, eax
je 0x10006dee
lea eax, [ebp - 0x62c]
push eax
lea ecx, [ebp - 0x128]
call fcn.10005cbe
add esp, 4
mov ecx, 0x252
lea eax, [ebp - 0x3d0]
mov byte [eax], bl
inc eax
dec ecx
jne 0x10006df9
mov eax, dword [ebp - 0x14]
xor esi, esi
add eax, 0x18c9
mov dword [ebp + 0xc], esi
mov dword [ebp - 0xc], eax
jmp 0x10006e14
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x3d0]
push eax
push esi
push 0x1002c5f4
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1cc]
push eax
push esi
push str.body_skin
push dword [edi]
call fcn.10006101
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1cb]
push eax
push esi
push str.body_mane
push dword [edi]
call fcn.10006101
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1ca]
push eax
push esi
push str.body_tail
push dword [edi]
call fcn.10006101
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1c9]
push eax
push esi
push str.body_face
push dword [edi]
call fcn.10006101
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1c8]
push eax
push esi
push str.body_size
push dword [edi]
call fcn.10006101
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1c7]
push eax
push esi
push str.body_legs
push dword [edi]
call fcn.10006101
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1c6]
push eax
push esi
push str.body_back
push dword [edi]
call fcn.10006101
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1c5]
push eax
push esi
push str.body_neck
push dword [edi]
call fcn.10006101
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1c4]
push eax
push esi
push str.body_front
push dword [edi]
call fcn.10006101
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1c3]
push eax
push esi
push 0x1002c694
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1bf]
push eax
push esi
push str.stat_agility
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1bb]
push eax
push esi
push str.stat_spirit
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1b7]
push eax
push esi
push str.stat_speed
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1b3]
push eax
push esi
push str.stat_strength
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1af]
push eax
push esi
push str.stat_control
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1ab]
push eax
push esi
push str.stat_born
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x19f]
push eax
push esi
push str.intimacy
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x1a3]
push eax
push esi
push str.satiety
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x19b]
push eax
push esi
push str.playfulness
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x197]
push eax
push esi
push str.cleanbody
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x193]
push eax
push esi
push str.cleanmane
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x18f]
push eax
push esi
push str.cleantail
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x18b]
push eax
push esi
push str.injury
push dword [edi]
call fcn.10006101
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x18a]
push eax
push esi
push str.starter
push dword [edi]
call fcn.100060b1
add esp, 0x10
test eax, eax
je 0x100071e9
lea eax, [ebp - 0x186]
push eax
push esi
push dword [edi]
call fcn.1000605e
add esp, 0xc
test eax, eax
je 0x100071e9
cmp dword [ebp - 0x18a], 2
jae 0x100071e9
mov ebx, dword [ebp - 0xc]
lea eax, [ebp - 0x3cc]
push eax
push esi
push dword [edi]
call fcn.1000600b
add esp, 0xc
test eax, eax
jne 0x1000716d
push 0x1002c93c
lea eax, [ebp - 0x3cc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp dword [ebp - 0x18a], 1
jne 0x1000719e
lea eax, [ebp - 0x834]
push eax
lea eax, [ebp - 0x3cc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ebx, dword [ebp - 8]
lea esi, [ebp - 0x634]
lea edi, [ebp - 0x1cc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
jmp 0x100071a5
add dword [ebp - 0xc], 0x2d8
lea eax, [ebp - 0x3d0]
push eax
call fcn.10005921
mov eax, dword [ebx]
cmp eax, dword [ebp - 0xe60]
pop ecx
jne 0x100071c5
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x3261], ebx
inc dword [ebp + 0xc]
mov ecx, 0x252
lea eax, [ebp - 0x3d0]
mov byte [eax], 0
inc eax
dec ecx
jne 0x100071d3
mov edi, dword [ebp - 0x10]
xor ebx, ebx
cmp dword [ebp + 0xc], 5
jl 0x10006e11
mov dword [ebp + 0xc], ebx
mov eax, dword [edi]
mov dword [ebp - 8], eax
xor eax, eax
push eax
push dword [ebp + 0xc]
call fcn.10003abf
push ebx
push ebx
push ebx
push ebx
mov esi, eax
push dword [esi]
push str.type
push 0x1002c58c
call fcn.10003856
add esp, 0x24
lea ecx, [ebp - 0xbc]
push ecx
push dword [eax]
mov dword [ebp - 0x18], eax
push dword [ebp - 8]
call fcn.10005c65
add esp, 0xc
mov dword [ebp - 8], eax
call fcn.10003812
mov esi, dword [ebp - 0x18]
call fcn.10003812
cmp dword [ebp - 8], ebx
je 0x100072a9
mov esi, dword [ebp - 0xbc]
cmp esi, 0x100
jae 0x100072a9
mov eax, dword [edi]
mov dword [ebp - 8], eax
xor eax, eax
push eax
push dword [ebp + 0xc]
call fcn.10003abf
push ebx
push ebx
push ebx
push ebx
push dword [eax]
mov dword [ebp - 0x18], eax
push str.name
push 0x1002c58c
call fcn.10003856
mov ecx, dword [ebp - 0x14]
add esp, 0x24
shl esi, 9
lea ecx, [esi + ecx + 0x376a]
push ecx
push dword [eax]
mov dword [ebp - 0x10], eax
push dword [ebp - 8]
call fcn.10005cdd
mov esi, dword [ebp - 0x18]
add esp, 0xc
call fcn.10003812
mov esi, dword [ebp - 0x10]
call fcn.10003812
inc dword [ebp + 0xc]
cmp dword [ebp + 0xc], 0x100
jb 0x100071ec
mov esi, edi
call fcn.10003812
mov esi, dword [ebp - 0xc4]
call fcn.10003812
push 0x2f
pop ecx
lea eax, [ebp - 0x8c]
mov byte [eax], bl
inc eax
dec ecx
jne 0x100072d4
push 0x17
pop ecx
lea eax, [ebp - 0x44]
mov byte [eax], bl
inc eax
dec ecx
jne 0x100072e0
mov esi, dword [0x1003e9b4]
call fcn.10003812
lea eax, [ebp - 0x1280]
push eax
call fcn.10003cf1
mov esi, dword [ebp - 0x14]
mov dword [0x1003e9b4], eax
mov eax, dword [ebp - 0x1284]
mov dword [esi], eax
mov eax, dword [ebp - 0x1288]
cmp eax, 8
pop ecx
ja 0x1000731e
add eax, 0xf0000000
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [esi + 4], eax
mov dword [0x1003e970], eax
lea eax, [ebp - 0x1080]
push eax
lea eax, [esi + 8]
push eax
call edi
mov al, byte [ebp - 0xe80]
mov byte [esi + 0x209], al
push 0x1002c57c
lea eax, [esi + 0x20a]
push eax
call edi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0xa3e]
push eax
call edi
cdq
sub eax, edx
sar eax, 1
shr eax, 1
cmp eax, 0x19
ja 0x1000738a
lea ebx, [eax + eax]
lea eax, [esi + 0x40a]
push eax
lea edx, [ebp - 0xa3e]
call fcn.10003e0b
xor ebx, ebx
test eax, eax
pop ecx
jne 0x10007399
push 0x32
pop ecx
lea eax, [esi + 0x40a]
mov byte [eax], bl
inc eax
dec ecx
jne 0x10007393
lea eax, [ebp - 0xe58]
push eax
call edi
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x20
ja 0x100073c7
lea ecx, [esi + 0x3742]
push ecx
mov ebx, eax
lea edx, [ebp - 0xe58]
call fcn.10003e0b
xor ebx, ebx
test eax, eax
pop ecx
jne 0x100073d6
push 0x20
pop ecx
lea eax, [esi + 0x3742]
mov byte [eax], bl
inc eax
dec ecx
jne 0x100073d0
push 0x1002c948
lea eax, [ebp - 0x1080]
push eax
mov byte [esi + 0x43c], bl
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
neg eax
sbb eax, eax
xor edx, edx
inc eax
lea ecx, [esi + 0x15f9]
cmp word [ecx], bx
mov dword [0x1003e764], eax
sete dl
cmp edx, ebx
mov dword [0x1003e768], edx
je 0x10007421
push str.Alicia
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [0x1003e764]
cmp eax, ebx
jne 0x1000742d
cmp dword [0x1003e768], ebx
je 0x10007440
mov eax, 0x7cf
cmp dword [ebp - 0xe64], eax
jbe 0x10007440
mov dword [ebp - 0xe64], eax
mov eax, dword [ebp - 0xe68]
mov edx, dword [ebp - 0xe70]
mov ecx, dword [ebp - 0xe6c]
sub edx, eax
sub edx, dword [ebp - 0xe6c]
add ecx, eax
cmp ecx, dword [ebp - 0xe70]
sbb eax, eax
and eax, edx
mov dword [esi + 0x53d], eax
mov eax, dword [ebp - 0xe64]
mov dword [esi + 0x541], eax
lea eax, [ebp - 0xc40]
push eax
mov dword [esi + 0x545], ebx
mov byte [esi + 0x549], bl
call edi
cdq
sub eax, edx
sar eax, 1
shr eax, 2
cmp al, 0x10
mov byte [esi + 0x54a], al
ja 0x100074be
movzx ebx, al
lea eax, [esi + 0x54b]
shl ebx, 2
push eax
lea edx, [ebp - 0xc40]
call fcn.10003e0b
xor ebx, ebx
test eax, eax
pop ecx
jne 0x100074c4
mov byte [esi + 0x54a], bl
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [esi + 0x58b]
mov dword [ebp + 0xc], eax
mov dword [ebp - 0x10], 8
push 0x1002c57c
push dword [ebp + 0xc]
call edi
add dword [ebp + 0xc], 0x200
dec dword [ebp - 0x10]
pop ecx
pop ecx
jne 0x100074da
lea eax, [esi + 0x58b]
push 0x1002c960
push eax
call edi
lea eax, [esi + 0x78b]
push 0x1002c96c
push eax
call edi
lea eax, [esi + 0x98b]
push 0x1002c998
push eax
call edi
lea eax, [esi + 0xb8b]
push 0x1002c9c0
push eax
call edi
lea eax, [esi + 0xd8b]
push 0x1002c9d0
push eax
call edi
lea eax, [esi + 0xf8b]
push 0x1002c9f0
push eax
call edi
lea eax, [esi + 0x118b]
push 0x1002ca3c
push eax
call edi
lea eax, [esi + 0x138b]
push 0x1002ca44
push eax
call edi
mov dword [esi + 0x158b], 1
movzx eax, byte [ebp - 0xa40]
mov dword [esi + 0x158f], eax
mov al, byte [ebp - 0xe7f]
mov byte [esi + 0x1593], al
add esp, 0x40
cmp byte [ebp - 0xe7e], bl
mov byte [esi + 0x1595], 0xf
setne al
mov byte [esi + 0x1594], al
xor edx, edx
mov ecx, 0x1003b430
lea eax, [esi + 0x1596]
mov dword [eax], ecx
movzx edi, byte [esi + 0x1595]
inc edx
add ecx, 0xb
add eax, 4
cmp edx, edi
jl 0x100075ab
cmp byte [esi + 0x209], 1
mov word [esi + 0x15d7], 0xc96d
setne al
dec al
and al, 0xf6
add al, 0x14
mov byte [esi + 0x15e1], al
mov dword [esi + 0x15d9], 0x893915d7
mov dword [esi + 0x15dd], 0x110c8590
mov al, byte [ebp - 0xe79]
mov byte [esi + 0x15e2], al
mov al, byte [ebp - 0xe7a]
mov byte [esi + 0x15e3], al
mov byte [esi + 0x15e4], 1
mov ax, word [ebp - 0xe7c]
mov word [esi + 0x15e5], ax
mov ax, word [ebp - 0xe78]
mov word [esi + 0x15e7], ax
mov ax, word [ebp - 0xe76]
mov word [esi + 0x15e9], ax
mov ax, word [ebp - 0xe74]
mov word [esi + 0x15eb], ax
mov ax, word [ebp - 0xe72]
mov word [esi + 0x15ed], ax
push 0x23
xor eax, eax
pop edi
call fcn.100035eb
inc eax
mov word [esi + 0x15ef], ax
mov byte [esi + 0x3269], 0xa
xor edx, edx
mov ecx, 0x1003b4d8
lea eax, [esi + 0x326a]
mov dword [eax], ecx
movzx edi, byte [esi + 0x3269]
inc edx
add ecx, 8
add eax, 4
cmp edx, edi
jl 0x1000767d
push 0x15
lea eax, [ebp - 0x5c]
push eax
lea eax, [esi + 0x32aa]
push eax
mov byte [ebp - 0x5c], 6
mov byte [ebp - 0x5b], 0xe
mov byte [ebp - 0x5a], bl
mov byte [ebp - 0x59], bl
mov byte [ebp - 0x58], 0xc1
mov byte [ebp - 0x57], 0x27
mov byte [ebp - 0x56], 0xcc
mov byte [ebp - 0x55], 0x27
mov byte [ebp - 0x54], 0xe5
mov byte [ebp - 0x53], 0x27
mov byte [ebp - 0x52], bl
mov byte [ebp - 0x51], bl
mov byte [ebp - 0x50], bl
mov byte [ebp - 0x4f], bl
mov byte [ebp - 0x4e], 0x28
mov byte [ebp - 0x4d], 0x15
mov byte [ebp - 0x4c], 0x22
mov byte [ebp - 0x4b], bl
mov byte [ebp - 0x4a], bl
mov byte [ebp - 0x49], bl
mov byte [ebp - 0x48], bl
call sub.MSVCRT.dll_memcpy
add esp, 0xc
mov byte [esi + 0x32bf], bl
mov byte [esi + 0x3300], 0x2c
xor edx, edx
mov ecx, 0x1003b538
lea eax, [esi + 0x3301]
mov dword [eax], ecx
movzx edi, byte [esi + 0x3300]
inc edx
add ecx, 4
add eax, 4
cmp edx, edi
jl 0x1000770a
push 0x214
mov dword [esi + 0x3701], 0xca1b87db
call sub.MSVCRT.dll_malloc
pop ecx
mov edi, eax
mov ecx, 0x214
mov byte [eax], bl
inc eax
dec ecx
jne 0x1000773a
push 5
lea eax, [ebp - 0x24]
mov dword [edi], 0xb07c
push eax
lea eax, [edi + 4]
push eax
mov byte [ebp - 0x24], 1
mov byte [ebp - 0x23], 1
mov byte [ebp - 0x22], bl
mov byte [ebp - 0x21], bl
mov byte [ebp - 0x20], bl
call sub.MSVCRT.dll_memcpy
add esp, 0xc
push 0x1002c57c
lea eax, [edi + 0xa]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov byte [edi + 0x20a], 0xa
mov dword [edi + 0x20c], 0x6478a7dd
mov byte [edi + 0x210], bl
mov dword [esi + 0x3705], edi
push 0x19
lea eax, [ebp - 0xa8]
push eax
lea eax, [esi + 0x3709]
push eax
mov byte [ebp - 0xa8], 4
mov byte [ebp - 0xa7], bl
mov byte [ebp - 0xa6], bl
mov byte [ebp - 0xa5], bl
mov byte [ebp - 0xa4], bl
mov byte [ebp - 0xa3], bl
mov byte [ebp - 0xa2], bl
mov byte [ebp - 0xa1], bl
mov byte [ebp - 0xa0], bl
mov byte [ebp - 0x9f], bl
mov byte [ebp - 0x9e], 0x20
mov byte [ebp - 0x9d], 0x8c
mov byte [ebp - 0x9c], bl
mov byte [ebp - 0x9b], 0x2f
mov byte [ebp - 0x9a], 0x3c
mov byte [ebp - 0x99], bl
mov byte [ebp - 0x98], bl
mov byte [ebp - 0x97], 0x42
mov byte [ebp - 0x96], 2
mov byte [ebp - 0x95], bl
mov byte [ebp - 0x94], bl
mov byte [ebp - 0x93], 0x2c
mov byte [ebp - 0x92], 5
mov byte [ebp - 0x91], bl
mov byte [ebp - 0x90], bl
call sub.MSVCRT.dll_memcpy
add esp, 0xc
push 0x208
call sub.MSVCRT.dll_malloc
pop ecx
mov edi, eax
mov ecx, 0x208
mov byte [eax], bl
inc eax
dec ecx
jne 0x1000785e
mov al, byte [ebp - 0xe5c]
mov byte [edi], al
movzx eax, byte [ebp - 0xe5c]
shl eax, 9
lea eax, [eax + esi + 0x376a]
push eax
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 7
lea eax, [ebp - 0x2c]
push eax
lea eax, [edi + 1]
push eax
mov byte [ebp - 0x2c], bl
mov byte [ebp - 0x2b], bl
mov byte [ebp - 0x2a], bl
mov byte [ebp - 0x29], bl
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x27], bl
mov byte [ebp - 0x26], bl
call sub.MSVCRT.dll_memcpy
add esp, 0xc
push 4
lea eax, [ebp - 0x1c]
push eax
mov dword [esi + 0x3722], edi
lea eax, [esi + 0x3726]
push eax
mov byte [ebp - 0x1c], bl
mov byte [ebp - 0x1b], bl
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x19], bl
call sub.MSVCRT.dll_memcpy
mov eax, dword [ebp - 0xc58]
mov dword [esi + 0x372a], eax
mov eax, dword [ebp - 0xc54]
mov dword [esi + 0x3732], eax
mov eax, dword [ebp - 0xc50]
mov dword [esi + 0x373a], eax
mov eax, dword [ebp - 0xc4c]
add esp, 0xc
mov dword [esi + 0x373e], eax
call fcn.10004221
mov dword [esi + 0x3736], eax
mov eax, dword [ebp - 0xc48]
mov dword [esi + 0x3762], eax
mov eax, dword [ebp - 0xc44]
mov dword [esi + 0x3766], eax
mov al, byte [ebp - 0x5e6]
mov byte [esi + 0x2376e], al
mov eax, dword [ebp - 0x5e0]
xor ecx, ecx
mov ch, byte [ebp - 0x5e0]
shr eax, 0x10
xor edx, edx
mov dh, al
movzx eax, ah
mov cl, byte [ebp - 0x5df]
push ebx
movzx edx, dx
shl ecx, 0x10
or ecx, edx
or ecx, eax
mov dword [esi + 0x23773], ecx
mov ax, word [ebp - 0x5dc]
mov word [esi + 0x23777], ax
mov eax, dword [ebp - 0x5d8]
movzx ecx, byte [ebp - 0x5d7]
mov ch, byte [ebp - 0x5d8]
shr eax, 0x10
xor edx, edx
mov dh, al
movzx eax, ah
shl ecx, 0x10
movzx edx, dx
or ecx, edx
or ecx, eax
mov dword [esi + 0x23779], ecx
mov ax, word [ebp - 0x5d4]
mov word [esi + 0x2377d], ax
push dword [0x1003e9ec]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x100079de
lea eax, [ebp - 0x5d0]
push eax
push 0x1003e770
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push dword [0x1003e9ec]
call dword [sym.imp.KERNEL32.dll_SetEvent]
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret