Function at 0xb5f939
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0xc79998
call fcn.00be12c8
push ecx
sub esp, 0x49c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x3b0], ecx
push 0x620
lea eax, [ebp - 0x198]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x24c], eax
and dword [ebp - 4], 0
mov eax, dword [ebp - 0x24c]
mov eax, dword [eax]
mov dword [ebp - 0x250], eax
push 0
push 0xd87950
push dword [ebp - 0x250]
call fcn.00b64cea
add esp, 0xc
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x198], 0
je 0xb5f9c4
mov eax, dword [ebp - 0x198]
sub eax, 0xc
push eax
call fcn.004033fd
pop ecx
cmp dword [0xd87950], 0
jne 0xb5f9d7
push 0x80004003
call fcn.00be0541
mov eax, dword [0xd87950]
mov dword [ebp - 0x274], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x11
push dword [ebp - 0x274]
mov eax, dword [ebp - 0x274]
mov eax, dword [eax]
call dword [eax + 0x14]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
jge 0xb5fa1e
push 0xd3b9e8
push dword [ebp - 0x274]
push dword [ebp - 0x270]
call fcn.00be054f
push 0x622
lea eax, [ebp - 0x19c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x278], eax
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x278]
mov eax, dword [eax]
mov dword [ebp - 0x27c], eax
push 0
push 0xd87948
push dword [ebp - 0x27c]
call fcn.00b64d4f
add esp, 0xc
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x19c], 0
je 0xb5fa8f
mov eax, dword [ebp - 0x19c]
sub eax, 0xc
push eax
call fcn.004033fd
pop ecx
mov eax, dword [0xd87948]
mov dword [ebp - 0x2a0], eax
push 4
pop eax
shl eax, 2
mov eax, dword [eax + 0xd86d18]
mov dword [ebp - 0x29c], eax
push 1
lea eax, [ebp - 0x2a0]
push eax
call dword [ebp - 0x29c]
pop ecx
pop ecx
and dword [ebp - 0x18], 0
mov dword [ebp - 4], 2
push 0x623
lea eax, [ebp - 0x1a0]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x2a4], eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x2a4]
mov eax, dword [eax]
mov dword [ebp - 0x2a8], eax
push 0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x2a8]
call fcn.00b64db4
add esp, 0xc
mov byte [ebp - 4], 2
cmp dword [ebp - 0x1a0], 0
je 0xb5fb35
mov eax, dword [ebp - 0x1a0]
sub eax, 0xc
push eax
call fcn.004033fd
pop ecx
and dword [ebp - 0x14], 0
mov byte [ebp - 4], 4
push 0x104
lea eax, [ebp - 0x134]
push eax
push 0
call dword [0xd860e4]
lea eax, [ebp - 0x134]
push eax
call fcn.00b6222d
pop ecx
lea eax, [ebp - 0x134]
push eax
call fcn.00b622af
pop ecx
push ecx
mov eax, esp
mov dword [ebp - 0x1a4], esp
mov dword [ebp - 0x2c8], eax
lea eax, [ebp - 0x134]
push eax
mov ecx, dword [ebp - 0x2c8]
call fcn.00406a72
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x18]
call fcn.00b639d1
mov dword [ebp - 0x3c0], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3c0]
call fcn.00b607e7
and dword [ebp - 0x30], 0
mov byte [ebp - 4], 6
call fcn.00877d11
mov dword [ebp - 0x3c4], eax
push 0x837
lea eax, [ebp - 0x1a8]
push eax
mov ecx, dword [ebp - 0x3c4]
call fcn.004069e7
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x2cc], eax
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x2cc]
mov eax, dword [eax]
mov dword [ebp - 0x2d0], eax
push 0
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x2d0]
call fcn.00b64e19
add esp, 0xc
mov byte [ebp - 4], 6
cmp dword [ebp - 0x1a8], 0
je 0xb5fc2c
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc
push eax
call fcn.004033fd
pop ecx
push 0
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x1b0], esp
push str.Base.wz
call fcn.004033d8
mov dword [ebp - 0x3cc], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x18]
call fcn.00b639d1
mov dword [ebp - 0x3d0], eax
mov byte [ebp - 4], 6
lea eax, [ebp - 0x1c0]
push eax
mov ecx, dword [ebp - 0x3d0]
call fcn.0068371c
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x3d8], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x3d8]
call fcn.00403308
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x1ac], eax
and dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1ac], 0
je 0xb5fce6
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00b670b1
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0
jge 0xb5fce6
cmp dword [ebp - 0x2f0], 0x80004002
je 0xb5fce6
push dword [ebp - 0x2f0]
call fcn.00be0541
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x1c0]
push eax
call fcn.00402973
pop ecx
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
jge 0xb5fd1d
push dword [ebp - 0x2f4]
call fcn.00be0541
push 0x20
pop eax
call fcn.00be1990
mov dword [ebp - 0x3e4], esp
push dword [ebp - 0x1c]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c4], esp
call fcn.0046cdc2
mov dword [ebp - 0x3e8], eax
mov byte [ebp - 4], 0xc
push dword [ebp - 0x3e4]
push 0x55
call fcn.004173e6
pop ecx
pop ecx
mov dword [ebp - 0x3ec], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x1c8], esp
push dword [ebp - 0x3ec]
call fcn.004033d8
mov dword [ebp - 0x3f0], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x30]
call fcn.00b639f7
mov dword [ebp - 0x3f4], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x3f4]
call fcn.00b6083b
push 0
lea ecx, [ebp - 0x30]
call fcn.00b639f4
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x1cc], esp
push 0xd3c0d8
call fcn.0042a948
mov dword [ebp - 0x3f8], eax
mov byte [ebp - 4], 0xe
call fcn.006837c5
mov dword [ebp - 0x3fc], eax
mov ecx, dword [ebp - 0x3fc]
call fcn.0068859c
mov dword [ebp - 0x400], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x400]
call fcn.00b6078d
cmp dword [0xd87948], 0
jne 0xb5fdfc
push 0x80004003
call fcn.00be0541
lea eax, [ebp - 0x1d0]
push eax
mov ecx, dword [0xd87948]
call fcn.00683793
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x408], eax
mov byte [ebp - 4], 0xf
push dword [ebp - 0x408]
lea ecx, [ebp - 0x178]
call fcn.0040365c
mov dword [ebp - 0x40c], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1d0]
call fcn.00402807
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.oleaut32.dll_VariantInit]
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x174], str.Character
mov dword [ebp - 0x170], 0xd76848
mov dword [ebp - 0x16c], str.Skill
mov dword [ebp - 0x168], str.Reactor
mov dword [ebp - 0x164], 0xd7683c
mov dword [ebp - 0x160], 0xd76838
mov dword [ebp - 0x15c], str.Quest
mov dword [ebp - 0x158], str.Item
mov dword [ebp - 0x154], 0xd3e3d0
mov dword [ebp - 0x150], str.String
mov dword [ebp - 0x14c], 0xd7681c
mov dword [ebp - 0x148], str.Morph
mov dword [ebp - 0x144], str.TamingMob
mov dword [ebp - 0x140], str.Sound
mov dword [ebp - 0x13c], 0xd767fc
and dword [ebp - 0x138], 0
jmp 0xb5ff04
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xf
jge 0xb604a6
and dword [ebp - 0x17c], 0
mov byte [ebp - 4], 0x13
call fcn.00877d11
mov dword [ebp - 0x410], eax
push 0x837
lea eax, [ebp - 0x1d4]
push eax
mov ecx, dword [ebp - 0x410]
call fcn.004069e7
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x304], eax
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x304]
mov eax, dword [eax]
mov dword [ebp - 0x308], eax
push 0
lea eax, [ebp - 0x17c]
push eax
push dword [ebp - 0x308]
call fcn.00b64e19
add esp, 0xc
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x1d4], 0
je 0xb5ff96
mov eax, dword [ebp - 0x1d4]
sub eax, 0xc
push eax
call fcn.004033fd
pop ecx
push 0
push 0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x138]
push dword [ebp + eax*4 - 0x174]
lea ecx, [ebp - 0x1e4]
call fcn.0055f469
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x41c], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1e0]
call fcn.004a5026
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x424], eax
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x41c]
push dword [eax]
push str._s.wz
push dword [ebp - 0x424]
call fcn.00419a49
add esp, 0xc
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0x428]
call fcn.004173e3
mov dword [ebp - 0x42c], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x1dc], esp
push dword [ebp - 0x42c]
call fcn.004033d8
mov dword [ebp - 0x430], eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x18]
call fcn.00b639d1
mov dword [ebp - 0x434], eax
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x1f4]
push eax
mov ecx, dword [ebp - 0x434]
call fcn.0068371c
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x43c], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x43c]
call fcn.00403308
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x1d8], eax
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x1d8], 0
je 0xb600da
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x188]
call fcn.00b670b1
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0
jge 0xb600da
cmp dword [ebp - 0x328], 0x80004002
je 0xb600da
push dword [ebp - 0x328]
call fcn.00be0541
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x1f4]
push eax
call fcn.00402973
pop ecx
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jge 0xb60111
push dword [ebp - 0x32c]
call fcn.00be0541
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x1e0], 0
je 0xb6012e
mov eax, dword [ebp - 0x1e0]
sub eax, 0xc
push eax
call fcn.004033fd
pop ecx
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x1e4], 0
je 0xb6014b
mov eax, dword [ebp - 0x1e4]
sub eax, 0xc
push eax
call fcn.004033fd
pop ecx
push 0
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x1fc], esp
mov eax, dword [ebp - 0x138]
push dword [ebp + eax*4 - 0x174]
call fcn.0042a948
mov dword [ebp - 0x448], eax
mov byte [ebp - 4], 0x1d
call fcn.006837c5
mov dword [ebp - 0x44c], eax
mov ecx, dword [ebp - 0x44c]
call fcn.0068859c
mov dword [ebp - 0x450], eax
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x450]
call fcn.0068371c
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x458], eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x458]
call fcn.00403308
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x138]
lea eax, [eax*4 + 0xd8790c]
mov dword [ebp - 0x334], eax
lea eax, [ebp - 0x1f8]
push eax
mov ecx, dword [ebp - 0x334]
call fcn.00695612
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0
jge 0xb60224
cmp dword [ebp - 0x330], 0x80004002
je 0xb60224
push dword [ebp - 0x330]
call fcn.00be0541
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x20c]
push eax
call fcn.00402973
pop ecx
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0
jge 0xb6025b
push dword [ebp - 0x338]
call fcn.00be0541
push 0x20
pop eax
call fcn.00be1990
mov dword [ebp - 0x33c], esp
push 0xa
push dword [ebp - 0x33c]
push 0x55
call fcn.00be19bf
add esp, 0xc
mov dword [ebp - 0x340], eax
and dword [ebp - 0x180], 0
push 0xffffffffffffffff
push dword [ebp - 0x340]
lea ecx, [ebp - 0x180]
call fcn.0041fdb1
mov byte [ebp - 4], 0x1f
push dword [ebp - 0x188]
push ecx
mov ecx, esp
mov dword [ebp - 0x210], esp
mov eax, dword [ebp - 0x138]
push dword [ebp + eax*4 - 0x174]
call fcn.0042a948
mov dword [ebp - 0x464], eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x180]
call fcn.004173e3
mov dword [ebp - 0x468], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x214], esp
push dword [ebp - 0x468]
call fcn.004033d8
mov dword [ebp - 0x46c], eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x17c]
call fcn.00b639f7
mov dword [ebp - 0x470], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x470]
call fcn.00b6083b
and dword [ebp - 0x184], 0
mov byte [ebp - 4], 0x22
call fcn.00877d11
mov dword [ebp - 0x474], eax
push 0x837
lea eax, [ebp - 0x218]
push eax
mov ecx, dword [ebp - 0x474]
call fcn.004069e7
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x344], eax
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x344]
mov eax, dword [eax]
mov dword [ebp - 0x348], eax
push 0
lea eax, [ebp - 0x184]
push eax
push dword [ebp - 0x348]
call fcn.00b64d4f
add esp, 0xc
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x218]
call fcn.004026b4
push 0
lea ecx, [ebp - 0x17c]
call fcn.00b639f4
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x21c], esp
push 0xd3e740
call fcn.004033d8
mov dword [ebp - 0x47c], eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x184]
call fcn.0068859c
mov dword [ebp - 0x480], eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x480]
call fcn.00b6078d
push 1
lea ecx, [ebp - 0x184]
call fcn.00b6284d
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x220], esp
push 0xd3e740
call fcn.004033d8
mov dword [ebp - 0x484], eax
mov byte [ebp - 4], 0x25
push dword [ebp - 0x138]
call fcn.00b631c4
pop ecx
mov dword [ebp - 0x488], eax
mov ecx, dword [ebp - 0x488]
call fcn.0068859c
mov dword [ebp - 0x48c], eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x48c]
call fcn.00b6078d
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x184], 0
je 0xb60456
push dword [ebp - 0x184]
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
call dword [eax + 8]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x180]
call fcn.004026b4
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x188], 0
je 0xb60483
push dword [ebp - 0x188]
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
call dword [eax + 8]
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x17c], 0
je 0xb604a1
push dword [ebp - 0x17c]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
call dword [eax + 8]
jmp 0xb5fef7
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x2c]
push eax
call fcn.00402973
pop ecx
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0
jge 0xb604da
push dword [ebp - 0x370]
call fcn.00be0541
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x178], 0
je 0xb604f8
push dword [ebp - 0x178]
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
call dword [eax + 8]
mov byte [ebp - 4], 6
cmp dword [ebp - 0x1c], 0
je 0xb6050d
push dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
call dword [eax + 8]
mov byte [ebp - 4], 4
cmp dword [ebp - 0x30], 0
je 0xb60522
push dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
call dword [eax + 8]
jmp 0xb60547
mov dword [ebp - 4], 2
cmp dword [ebp - 0x14], 0
jge 0xb60763
push 0x835
lea eax, [ebp - 0x224]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x374], eax
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0x374]
mov eax, dword [eax]
mov dword [ebp - 0x378], eax
push dword [ebp - 0x378]
call dword [0xd861a4]
mov dword [ebp - 0x194], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x224]
call fcn.00406a50
cmp dword [ebp - 0x194], 0xffffffff
je 0xb606a6
mov eax, dword [ebp - 0x194]
and eax, 0x10
test eax, eax
je 0xb606a6
push 0x623
lea eax, [ebp - 0x228]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x380], eax
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x380]
mov eax, dword [eax]
mov dword [ebp - 0x384], eax
push 0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x384]
call fcn.00b64db4
add esp, 0xc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x228]
call fcn.004026b4
push ecx
mov eax, esp
mov dword [ebp - 0x22c], esp
push 0x835
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
mov dword [ebp - 0x49c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00b639d1
mov ecx, eax
call fcn.00b607e7
push 0
lea ecx, [ebp - 0x18]
call fcn.00b639ce
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x230], esp
push 0xd3e740
call fcn.004033d8
mov dword [ebp - 0x4a0], eax
mov byte [ebp - 4], 2
call fcn.006837c5
mov ecx, eax
call fcn.0068859c
mov ecx, eax
call fcn.00b6078d
jmp 0xb60763
cmp dword [ebp - 0x14], 0x80070005
jne 0xb606e8
mov dword [ebp - 0x238], 0x22000005
lea eax, [ebp - 0x238]
mov dword [ebp - 0x4a4], eax
mov byte [ebp - 4], 0x2b
mov eax, dword [ebp - 0x4a4]
mov eax, dword [eax]
mov dword [ebp - 0x234], eax
push 0xc98db8
lea eax, [ebp - 0x234]
push eax
call fcn.00be12e7
cmp dword [ebp - 0x14], 0x80070057
jne 0xb6072a
mov dword [ebp - 0x240], 0x22000003
lea eax, [ebp - 0x240]
mov dword [ebp - 0x4a8], eax
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x4a8]
mov eax, dword [eax]
mov dword [ebp - 0x23c], eax
push 0xc98db8
lea eax, [ebp - 0x23c]
push eax
call fcn.00be12e7
mov dword [ebp - 0x248], 0x22000004
lea eax, [ebp - 0x248]
mov dword [ebp - 0x4ac], eax
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x4ac]
mov eax, dword [eax]
mov dword [ebp - 0x244], eax
push 0xc98db8
lea eax, [ebp - 0x244]
push eax
call fcn.00be12e7
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x18], 0
je 0xb60778
push dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
call dword [eax + 8]
lea esp, [ebp - 0x4b8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret