Function at 0x10066ba0
Capabilities:
Check if file exists
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1018808b
mov eax, dword fs:[0]
push eax
mov eax, 0xd6dc
call fcn.1014e870
mov eax, dword [0x101d8724]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
cmp dword [0x101dd540], 0
sete al
movzx ecx, al
test ecx, ecx
jne 0x10066bfa
mov dl, byte [0x101db5dc]
mov byte [ebp - 0xc8b5], dl
movzx eax, byte [ebp - 0xc8b5]
test eax, eax
je 0x10066c01
xor al, al
jmp 0x100696fc
mov cl, byte [0x101db5ce]
mov byte [ebp - 0xc8b6], cl
movzx edx, byte [ebp - 0xc8b6]
test edx, edx
je 0x10066c1f
mov al, 1
jmp 0x100696fc
mov byte [ebp - 0x295], 0
mov byte [ebp - 0x4a5], 0
push 0xffffffffffffffff
push str.PdfPro3.10
call fcn.1014e8a0
add esp, 4
push eax
push str.PdfPro3.10
call fcn.101153c0
add esp, 0xc
push eax
push str._08X::WK
lea eax, [ebp - 0x4a4]
push eax
call fcn.1014ea28
add esp, 0xc
lea ecx, [ebp - 0x4a4]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 0x4b0], eax
push 0xbb8
mov edx, dword [ebp - 0x4b0]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 0
je 0x10066ca7
cmp dword [ebp - 0x4ac], 0x80
jne 0x100696a0
lea eax, [ebp - 0x3f3c]
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x9d4]
call fcn.10069910
mov dword [ebp - 4], 0
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0xf04]
call fcn.10069910
mov byte [ebp - 4], 1
mov byte [ebp - 0x4c6], 0
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0xc8bc], eax
cmp dword [ebp - 0xc8bc], 0
je 0x10066d15
lea ecx, [ebp - 0xf04]
push ecx
lea edx, [ebp - 0x9d4]
push edx
call fcn.10082420
add esp, 8
mov byte [ebp - 0x4c6], 1
mov eax, dword [0x101db5e0]
mov dword [ebp - 0xcdcc], eax
mov ecx, str.RALFCFEC60F
call fcn.100bd3e0
cmp eax, dword [ebp - 0xcdcc]
jbe 0x10067694
lea ecx, [ebp - 0x444c]
call fcn.10069720
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x683c]
call fcn.10069720
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4798]
call fcn.1003b630
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4770]
mov dword [ebp - 0xcde0], ecx
mov edx, dword [ebp - 0xcde0]
mov dword [edx], 0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6334]
call fcn.10070da0
mov byte [ebp - 4], 6
push 0
lea eax, [ebp - 0x6334]
push eax
lea ecx, [ebp - 0x683c]
push ecx
lea edx, [ebp - 0x444c]
push edx
call fcn.100638c0
add esp, 0x10
movzx eax, al
test eax, eax
je 0x1006763c
mov ecx, dword [ebp - 0x9d0]
mov dword [ebp - 0xcde4], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 4]
mov dword [ebp - 0xcde8], eax
mov ecx, dword [ebp - 0xcde4]
or ecx, dword [ebp - 0xcde8]
not ecx
mov dword [ebp - 0x6840], ecx
mov edx, dword [ebp - 0xf00]
mov dword [ebp - 0xcdec], edx
mov eax, dword [ebp - 0xcdec]
not eax
mov dword [ebp - 0x6844], eax
mov ecx, dword [ebp - 0x6840]
and ecx, 1
je 0x10066fd6
or edx, 0xffffffff
not edx
and edx, dword [ebp - 0x9d4]
mov dword [ebp - 0x9d4], edx
mov eax, dword [ebp - 0x9d4]
or eax, dword [ebp - 0x444c]
mov dword [ebp - 0x9d4], eax
lea ecx, [ebp - 0x74]
push ecx
lea ecx, [ebp - 0x444c]
call fcn.1006a9e0
mov dword [ebp - 0xd690], eax
mov edx, dword [ebp - 0xd690]
mov dword [ebp - 0xcdf0], edx
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0xcdf0]
push eax
lea ecx, [ebp - 0x9cc]
call fcn.100643d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x74]
call fcn.10063f10
mov ecx, dword [ebp - 0x43e4]
mov dword [ebp - 0xce04], ecx
mov edx, dword [ebp - 0xce04]
mov dword [ebp - 0x96c], edx
mov eax, dword [ebp - 0x96c]
push eax
lea ecx, [ebp - 0x43e0]
push ecx
lea edx, [ebp - 0x968]
push edx
call fcn.1014c8e0
add esp, 0xc
mov ax, word [ebp - 0x3fc6]
mov word [ebp - 0xce06], ax
mov cx, word [ebp - 0xce06]
mov word [ebp - 0x54e], cx
mov dword [ebp - 0x9d8], 0
jmp 0x10066edf
mov edx, dword [ebp - 0x9d8]
add edx, 1
mov dword [ebp - 0x9d8], edx
cmp dword [ebp - 0x9d8], 0xf
jge 0x10066f5a
cmp dword [ebp - 0x9d8], 0xf
jae 0x10066f1a
mov eax, dword [ebp - 0x9d8]
movzx ecx, word [ebp + eax*2 - 0x3fba]
test ecx, ecx
je 0x10066f1a
mov edx, dword [ebp - 0x9d8]
mov ax, word [ebp + edx*2 - 0x3fba]
mov word [ebp - 0xd692], ax
jmp 0x10066f28
mov cx, word [ebp - 0x3fc6]
mov word [ebp - 0xd692], cx
cmp dword [ebp - 0x9d8], 0xf
jae 0x10066f46
movzx edx, word [ebp - 0xd692]
mov eax, dword [ebp - 0x9d8]
mov word [ebp + eax*2 - 0x542], dx
mov ecx, dword [ebp - 0x9d0]
or ecx, 1
mov dword [ebp - 0x9d0], ecx
jmp 0x10066ed0
mov dword [ebp - 0x9d8], 0
jmp 0x10066f75
mov edx, dword [ebp - 0x9d8]
add edx, 1
mov dword [ebp - 0x9d8], edx
cmp dword [ebp - 0x9d8], 5
jge 0x10066fd6
cmp dword [ebp - 0x9d8], 5
jge 0x10066f9d
mov eax, dword [ebp - 0x9d8]
movzx ecx, word [ebp + eax*2 - 0x3fc4]
mov dword [ebp - 0xce0c], ecx
jmp 0x10066fa7
mov dword [ebp - 0xce0c], 0
cmp dword [ebp - 0x9d8], 5
jge 0x10066fc5
mov edx, dword [ebp - 0x9d8]
mov ax, word [ebp - 0xce0c]
mov word [ebp + edx*2 - 0x54c], ax
mov ecx, dword [ebp - 0x9d0]
or ecx, 1
mov dword [ebp - 0x9d0], ecx
jmp 0x10066f66
mov edx, dword [ebp - 0x6844]
and edx, 1
je 0x100671b4
or eax, 0xffffffff
not eax
and eax, dword [ebp - 0xf04]
mov dword [ebp - 0xf04], eax
mov ecx, dword [ebp - 0xf04]
or ecx, dword [ebp - 0x683c]
mov dword [ebp - 0xf04], ecx
lea edx, [ebp - 0xd4]
push edx
lea ecx, [ebp - 0x683c]
call fcn.1006a9e0
mov dword [ebp - 0xd698], eax
mov eax, dword [ebp - 0xd698]
mov dword [ebp - 0xce10], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0xce10]
push ecx
lea ecx, [ebp - 0xefc]
call fcn.100643d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd4]
call fcn.10063f10
mov edx, dword [ebp - 0x67d4]
mov dword [ebp - 0xce24], edx
mov eax, dword [ebp - 0xce24]
mov dword [ebp - 0xe9c], eax
mov ecx, dword [ebp - 0xe9c]
push ecx
lea edx, [ebp - 0x67d0]
push edx
lea eax, [ebp - 0xe98]
push eax
call fcn.1014c8e0
add esp, 0xc
mov cx, word [ebp - 0x63b6]
mov word [ebp - 0xce26], cx
mov dx, word [ebp - 0xce26]
mov word [ebp - 0xa7e], dx
mov dword [ebp - 0x9d8], 0
jmp 0x100670bd
mov eax, dword [ebp - 0x9d8]
add eax, 1
mov dword [ebp - 0x9d8], eax
cmp dword [ebp - 0x9d8], 0xf
jge 0x10067138
cmp dword [ebp - 0x9d8], 0xf
jae 0x100670f8
mov ecx, dword [ebp - 0x9d8]
movzx edx, word [ebp + ecx*2 - 0x63aa]
test edx, edx
je 0x100670f8
mov eax, dword [ebp - 0x9d8]
mov cx, word [ebp + eax*2 - 0x63aa]
mov word [ebp - 0xd69a], cx
jmp 0x10067106
mov dx, word [ebp - 0x63b6]
mov word [ebp - 0xd69a], dx
cmp dword [ebp - 0x9d8], 0xf
jae 0x10067124
movzx eax, word [ebp - 0xd69a]
mov ecx, dword [ebp - 0x9d8]
mov word [ebp + ecx*2 - 0xa72], ax
mov edx, dword [ebp - 0xf00]
or edx, 1
mov dword [ebp - 0xf00], edx
jmp 0x100670ae
mov dword [ebp - 0x9d8], 0
jmp 0x10067153
mov eax, dword [ebp - 0x9d8]
add eax, 1
mov dword [ebp - 0x9d8], eax
cmp dword [ebp - 0x9d8], 5
jge 0x100671b4
cmp dword [ebp - 0x9d8], 5
jge 0x1006717b
mov ecx, dword [ebp - 0x9d8]
movzx edx, word [ebp + ecx*2 - 0x63b4]
mov dword [ebp - 0xce2c], edx
jmp 0x10067185
mov dword [ebp - 0xce2c], 0
cmp dword [ebp - 0x9d8], 5
jge 0x100671a3
mov eax, dword [ebp - 0x9d8]
mov cx, word [ebp - 0xce2c]
mov word [ebp + eax*2 - 0xa7c], cx
mov edx, dword [ebp - 0xf00]
or edx, 1
mov dword [ebp - 0xf00], edx
jmp 0x10067144
mov eax, dword [ebp - 0x6840]
and eax, 0x80
je 0x100671ec
or ecx, 0xffffffff
not ecx
mov edx, dword [ebp + 0x10]
and ecx, dword [edx]
mov eax, dword [ebp + 0x10]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x6334]
mov dword [ebp - 0xce30], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
or eax, dword [ebp - 0xce30]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6840]
and edx, 2
je 0x10067270
mov eax, dword [ebp + 0x10]
add eax, 0x1bc4
mov dword [ebp - 0xce38], eax
mov ecx, dword [ebp - 0xce38]
mov edx, dword [ecx]
sub edx, 1
mov eax, dword [ebp - 0xce38]
mov dword [eax], edx
mov ecx, dword [ebp - 0xce38]
cmp dword [ecx], 0
jl 0x1006724f
mov edx, dword [ebp - 0xce38]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xce38]
mov edx, dword [ecx + eax*4 + 0x194]
mov dword [ebp - 0xce34], edx
mov eax, dword [ebp - 0xce34]
push eax
call fcn.1014e864
add esp, 4
jmp 0x10067205
mov ecx, dword [ebp - 0xce38]
mov dword [ecx], 0
lea edx, [ebp - 0x4770]
push edx
mov ecx, dword [ebp + 0x10]
add ecx, 0x1bc4
call fcn.10066850
mov eax, dword [ebp - 0x6840]
and eax, 4
je 0x100672e5
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x4928]
mov dword [ecx + 0x1a0c], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x1a0c]
shl ecx, 1
shl ecx, 2
push ecx
lea edx, [ebp - 0x48a4]
push edx
mov eax, dword [ebp + 0x10]
add eax, 0x1a90
push eax
call fcn.1014c8e0
add esp, 0xc
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x492c]
mov dword [ecx + 0x1a08], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x1a08]
shl ecx, 2
push ecx
lea edx, [ebp - 0x4924]
push edx
mov eax, dword [ebp + 0x10]
add eax, 0x1a10
push eax
call fcn.1014c8e0
add esp, 0xc
mov ecx, dword [ebp - 0x6840]
and ecx, 8
je 0x1006744a
push 2
lea ecx, [ebp - 0x6334]
call fcn.100711b0
test eax, eax
jne 0x10067321
push 1
push 0
lea ecx, [ebp - 0x6334]
call fcn.100711b0
push eax
push 0
mov ecx, dword [ebp + 0x10]
call fcn.100712b0
jmp 0x1006733b
push 0
push 2
lea ecx, [ebp - 0x6334]
call fcn.100711b0
push eax
push 2
mov ecx, dword [ebp + 0x10]
call fcn.100712b0
push 3
lea ecx, [ebp - 0x6334]
call fcn.100711b0
test eax, eax
jne 0x10067368
push 1
push 1
lea ecx, [ebp - 0x6334]
call fcn.100711b0
push eax
push 1
mov ecx, dword [ebp + 0x10]
call fcn.100712b0
jmp 0x10067382
push 0
push 3
lea ecx, [ebp - 0x6334]
call fcn.100711b0
push eax
push 3
mov ecx, dword [ebp + 0x10]
call fcn.100712b0
lea ecx, [ebp - 0x6334]
call fcn.10072a10
push eax
mov ecx, dword [ebp + 0x10]
call fcn.100729d0
mov edx, dword [ebp - 0x4854]
mov dword [ebp - 0xce44], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0xce44]
mov dword [eax + 0x1ae0], ecx
mov edx, dword [ebp - 0x4850]
mov dword [ebp - 0xce48], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0xce48]
mov dword [eax + 0x1ae4], ecx
mov edx, dword [ebp - 0x484c]
mov dword [ebp - 0xce4c], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0xce4c]
mov dword [eax + 0x1ae8], ecx
mov dword [ebp - 0x6848], 0
jmp 0x10067402
mov edx, dword [ebp - 0x6848]
add edx, 1
mov dword [ebp - 0x6848], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x1ae8]
mov dword [ebp - 0xce50], ecx
mov edx, dword [ebp - 0x6848]
cmp edx, dword [ebp - 0xce50]
jae 0x1006744a
mov eax, dword [ebp - 0x6848]
mov ecx, dword [ebp + eax*4 - 0x4848]
mov dword [ebp - 0xce54], ecx
mov edx, dword [ebp - 0x6848]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0xce54]
mov dword [eax + edx*4 + 0x1aec], ecx
jmp 0x100673f3
mov edx, dword [ebp - 0x6840]
and edx, 0x10
je 0x100674a1
mov dword [ebp - 0x684c], 0
jmp 0x10067470
mov eax, dword [ebp - 0x684c]
add eax, 1
mov dword [ebp - 0x684c], eax
cmp dword [ebp - 0x684c], 8
jge 0x100674a1
push 0
push 0
mov ecx, dword [ebp - 0x684c]
push ecx
lea ecx, [ebp - 0x6334]
call fcn.10071840
push eax
mov edx, dword [ebp - 0x684c]
push edx
mov ecx, dword [ebp + 0x10]
call fcn.10071790
jmp 0x10067461
mov eax, dword [ebp - 0x6840]
and eax, 0x20
je 0x1006751b
mov ecx, dword [ebp - 0x47a0]
mov dword [ebp - 0xce58], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 0xce58]
mov dword [edx + 0x1b94], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 4]
or edx, 0x20
mov eax, dword [ebp + 0x10]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x479c]
mov dword [ebp - 0xce5c], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 0xce5c]
mov dword [edx + 0x1b98], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 4]
or edx, 0x20
mov eax, dword [ebp + 0x10]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x47c8]
mov dword [ebp - 0xce60], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 0xce60]
mov dword [edx + 0x1b6c], eax
mov ecx, dword [ebp - 0x6840]
and ecx, 0x40
je 0x1006763c
mov dx, word [ebp - 0x47ac]
mov word [ebp - 0xce62], dx
mov eax, dword [ebp + 0x10]
mov cx, word [ebp - 0xce62]
mov word [eax + 0x1b88], cx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 4]
or eax, 0x40
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 4], eax
mov dx, word [ebp - 0x47aa]
mov word [ebp - 0xce64], dx
mov eax, dword [ebp + 0x10]
mov cx, word [ebp - 0xce64]
mov word [eax + 0x1b8a], cx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 4]
or eax, 0x40
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 4], eax
mov dx, word [ebp - 0x47a8]
mov word [ebp - 0xce66], dx
mov eax, dword [ebp + 0x10]
mov cx, word [ebp - 0xce66]
mov word [eax + 0x1b8c], cx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 4]
or eax, 0x40
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 4], eax
mov dl, byte [ebp - 0x47a5]
mov byte [ebp - 0xce67], dl
mov eax, dword [ebp + 0x10]
mov cl, byte [ebp - 0xce67]
mov byte [eax + 0x1b8f], cl
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 4]
or eax, 0x40
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 4], eax
lea edx, [ebp - 0x4b2c]
push edx
mov eax, dword [ebp + 0x10]
add eax, 0x1808
push eax
call fcn.1014e930
add esp, 8
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 4]
or edx, 0x40
mov eax, dword [ebp + 0x10]
mov dword [eax + 4], edx
lea ecx, [ebp - 0x4a2c]
push ecx
mov edx, dword [ebp + 0x10]
add edx, 0x1908
push edx
call fcn.1014e930
add esp, 8
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 4]
or ecx, 0x40
mov edx, dword [ebp + 0x10]
mov dword [edx + 4], ecx
lea eax, [ebp - 0x4a2c]
push eax
call fcn.1014e8a0
add esp, 4
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x4770]
call fcn.10064150
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4798]
mov dword [ebp - 0xce6c], ecx
mov byte [ebp - 4], 0xb
push 0
push 1
mov ecx, dword [ebp - 0xce6c]
call fcn.10042350
mov byte [ebp - 4], 3
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x683c]
call fcn.100644c0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x444c]
call fcn.100644c0
mov dword [ebp - 0x9d0], 0
mov dword [ebp - 0xf00], 0
mov edx, dword [ebp + 0x10]
mov dword [edx + 4], 0
mov al, byte [0x101db5cf]
mov byte [ebp - 0x4c5], al
mov ecx, dword [0x101db5e0]
mov dword [ebp - 0xce98], ecx
mov edx, dword [ebp - 0xce98]
add edx, 1
mov dword [ebp - 0xf34], edx
mov eax, dword [ebp - 0xf34]
mov dword [0x101db5e0], eax
mov ecx, dword [ebp - 0xf34]
push ecx
mov ecx, str.RALFCFEC60F
call fcn.100bd450
mov edx, dword [ebp - 0x9d4]
mov dword [ebp - 0xce9c], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov dword [ebp - 0xcea0], ecx
mov edx, dword [ebp - 0xce9c]
or edx, dword [ebp - 0xcea0]
mov dword [ebp - 0x4bc], edx
mov eax, dword [ebp - 0xf04]
mov dword [ebp - 0x9f0], eax
cmp dword [ebp - 0x4bc], 0
jne 0x1006773f
cmp dword [ebp - 0x9f0], 0
je 0x100677cf
mov dword [ebp - 0x4c0], 2
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 0xd
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0x4c0]
shl eax, 2
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], al
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
push 4
lea eax, [ebp - 0x4bc]
push eax
mov ecx, dword [ebp - 0xf3c]
push ecx
call fcn.1014c8e0
add esp, 0xc
mov edx, dword [ebp - 0xf3c]
add edx, 4
mov dword [ebp - 0xf3c], edx
push 4
lea eax, [ebp - 0x9f0]
push eax
mov ecx, dword [ebp - 0xf3c]
push ecx
call fcn.1014c8e0
add esp, 0xc
mov edx, dword [ebp - 0xf3c]
add edx, 4
mov dword [ebp - 0xf3c], edx
movzx eax, byte [ebp - 0x4c5]
test eax, eax
je 0x1006780a
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 0x29
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 0
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
lea ecx, [ebp - 0x9d4]
call fcn.10070a70
movzx edx, al
test edx, edx
jne 0x10067951
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x9d4]
call fcn.1006a9e0
mov dword [ebp - 0xd6a0], eax
mov ecx, dword [ebp - 0xd6a0]
mov dword [ebp - 0xd6a4], ecx
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x150]
push edx
mov ecx, dword [ebp - 0xd6a4]
call fcn.100e14c0
mov dword [ebp - 0xd6a8], eax
mov eax, dword [ebp - 0xd6a8]
mov dword [ebp - 0xcea4], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0xcea4]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0xcea8], edx
mov eax, dword [ebp - 0xcea8]
mov dword [ebp - 0x9d8], eax
mov byte [ebp - 4], 0xe
push 0
push 1
lea ecx, [ebp - 0x150]
call fcn.10042350
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x134]
call fcn.10063f10
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 5
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
mov cl, byte [ebp - 0x9d8]
mov byte [eax], cl
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x9d4]
call fcn.1006a9e0
mov dword [ebp - 0xd6ac], eax
mov ecx, dword [ebp - 0xd6ac]
mov dword [ebp - 0xd6b0], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x9d8]
push edx
mov ecx, dword [ebp - 0xd6b0]
call fcn.100e1870
push eax
mov eax, dword [ebp - 0xf3c]
push eax
call fcn.1014c8e0
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1b4]
call fcn.10063f10
mov ecx, dword [ebp - 0xf3c]
add ecx, dword [ebp - 0x9d8]
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0x96c]
mov dword [ebp - 0xcecc], edx
cmp dword [ebp - 0xcecc], 0
je 0x100679f2
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 6
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0x96c]
mov dword [ebp - 0xced0], edx
mov eax, dword [ebp - 0xf3c]
mov cl, byte [ebp - 0xced0]
mov byte [eax], cl
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0x96c]
mov dword [ebp - 0xced4], eax
mov ecx, dword [ebp - 0xced4]
push ecx
lea edx, [ebp - 0x968]
push edx
mov eax, dword [ebp - 0xf3c]
push eax
call fcn.1014c8e0
add esp, 0xc
mov ecx, dword [ebp - 0x96c]
mov dword [ebp - 0xced8], ecx
mov edx, dword [ebp - 0xf3c]
add edx, dword [ebp - 0xced8]
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xa54]
mov dword [ebp - 0xcedc], eax
mov ecx, dword [ebp - 0xcedc]
mov dword [ebp - 0x9ec], ecx
cmp dword [ebp - 0x9ec], 0
je 0x10067d6a
mov edx, dword [ebp - 0xf3c]
mov byte [edx], 0x22
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 4
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
push 4
lea eax, [ebp - 0x9ec]
push eax
mov ecx, dword [ebp - 0xf3c]
push ecx
call fcn.1014c8e0
add esp, 0xc
mov edx, dword [ebp - 0xf3c]
add edx, 4
mov dword [ebp - 0xf3c], edx
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0xf04]
call fcn.1006a9e0
mov dword [ebp - 0xd6b4], eax
mov ecx, dword [ebp - 0xd6b4]
mov dword [ebp - 0xd6b8], ecx
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x230]
push edx
mov ecx, dword [ebp - 0xd6b8]
call fcn.100e14c0
mov dword [ebp - 0xd6bc], eax
mov eax, dword [ebp - 0xd6bc]
mov dword [ebp - 0xcee0], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0xcee0]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0xcee4], edx
mov eax, dword [ebp - 0xcee4]
mov dword [ebp - 0x9d8], eax
mov byte [ebp - 4], 0x12
push 0
push 1
lea ecx, [ebp - 0x230]
call fcn.10042350
mov byte [ebp - 4], 0x10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x214]
call fcn.10063f10
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 0x23
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
mov cl, byte [ebp - 0x9d8]
mov byte [eax], cl
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0xf04]
call fcn.1006a9e0
mov dword [ebp - 0xd6c0], eax
mov ecx, dword [ebp - 0xd6c0]
mov dword [ebp - 0xd6c4], ecx
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x9d8]
push edx
mov ecx, dword [ebp - 0xd6c4]
call fcn.100e1870
push eax
mov eax, dword [ebp - 0xf3c]
push eax
call fcn.1014c8e0
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x294]
call fcn.10063f10
mov ecx, dword [ebp - 0xf3c]
add ecx, dword [ebp - 0x9d8]
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0xf3c]
mov byte [edx], 0x24
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xe9c]
mov dword [ebp - 0xcf08], ecx
mov edx, dword [ebp - 0xf3c]
mov al, byte [ebp - 0xcf08]
mov byte [edx], al
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0xe9c]
mov dword [ebp - 0xcf0c], edx
mov eax, dword [ebp - 0xcf0c]
push eax
lea ecx, [ebp - 0xe98]
push ecx
mov edx, dword [ebp - 0xf3c]
push edx
call fcn.1014c8e0
add esp, 0xc
mov eax, dword [ebp - 0xe9c]
mov dword [ebp - 0xcf10], eax
mov ecx, dword [ebp - 0xf3c]
add ecx, dword [ebp - 0xcf10]
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0xf3c]
mov byte [edx], 0x26
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov dword [ebp - 0x9d8], 4
mov ecx, dword [ebp - 0x9d8]
add ecx, 1
movzx edx, cl
shl edx, 1
mov eax, dword [ebp - 0xf3c]
mov byte [eax], dl
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov dword [ebp - 0x6854], 0
jmp 0x10067c89
mov edx, dword [ebp - 0x6854]
add edx, 1
mov dword [ebp - 0x6854], edx
mov eax, dword [ebp - 0x6854]
cmp eax, dword [ebp - 0x9d8]
jg 0x10067cf7
cmp dword [ebp - 0x6854], 5
jge 0x10067cb6
mov ecx, dword [ebp - 0x6854]
movzx edx, word [ebp + ecx*2 - 0xa7c]
mov dword [ebp - 0xd6c8], edx
jmp 0x10067cc0
mov dword [ebp - 0xd6c8], 0
mov ax, word [ebp - 0xd6c8]
mov word [ebp - 0x6858], ax
push 2
lea ecx, [ebp - 0x6858]
push ecx
mov edx, dword [ebp - 0xf3c]
push edx
call fcn.1014c8e0
add esp, 0xc
mov eax, dword [ebp - 0xf3c]
add eax, 2
mov dword [ebp - 0xf3c], eax
jmp 0x10067c7a
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 0x28
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 2
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov dx, word [ebp - 0xa7e]
mov word [ebp - 0xcf12], dx
mov ax, word [ebp - 0xcf12]
mov word [ebp - 0x6850], ax
push 2
lea ecx, [ebp - 0x6850]
push ecx
mov edx, dword [ebp - 0xf3c]
push edx
call fcn.1014c8e0
add esp, 0xc
mov eax, dword [ebp - 0xf3c]
add eax, 2
mov dword [ebp - 0xf3c], eax
lea ecx, [ebp - 0xf28]
push ecx
mov ecx, dword [ebp + 0x10]
call fcn.100697c0
mov byte [ebp - 4], 0x14
xor edx, edx
cmp dword [ebp - 0xf18], 0
sete dl
movzx eax, dl
test eax, eax
jne 0x10067e27
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 0x27
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf18]
mov dword [ebp - 0x685c], eax
mov ecx, dword [ebp - 0xf3c]
mov dl, byte [ebp - 0x685c]
mov byte [ecx], dl
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
cmp dword [ebp - 0xf14], 0x10
jb 0x10067dec
mov ecx, dword [ebp - 0xf28]
mov dword [ebp - 0xd6cc], ecx
jmp 0x10067df8
lea edx, [ebp - 0xf28]
mov dword [ebp - 0xd6cc], edx
mov eax, dword [ebp - 0x685c]
push eax
mov ecx, dword [ebp - 0xd6cc]
push ecx
mov edx, dword [ebp - 0xf3c]
push edx
call fcn.1014c8e0
add esp, 0xc
mov eax, dword [ebp - 0xf3c]
add eax, dword [ebp - 0x685c]
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 0
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 4
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0x55c]
mov dword [ebp - 0xcf18], edx
mov eax, dword [ebp - 0xcf18]
mov dword [ebp - 0xf0c], eax
push 4
lea ecx, [ebp - 0xf0c]
push ecx
mov edx, dword [ebp - 0xf3c]
push edx
call fcn.1014c8e0
add esp, 0xc
mov eax, dword [ebp - 0xf3c]
add eax, 4
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 1
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 2
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov dx, word [ebp - 0x550]
mov word [ebp - 0xcf1a], dx
mov ax, word [ebp - 0xcf1a]
mov word [ebp - 0x9e8], ax
push 2
lea ecx, [ebp - 0x9e8]
push ecx
mov edx, dword [ebp - 0xf3c]
push edx
call fcn.1014c8e0
add esp, 0xc
mov eax, dword [ebp - 0xf3c]
add eax, 2
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 2
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 2
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov dx, word [ebp - 0x54e]
mov word [ebp - 0xcf1c], dx
mov ax, word [ebp - 0xcf1c]
mov word [ebp - 0x9dc], ax
push 2
lea ecx, [ebp - 0x9dc]
push ecx
mov edx, dword [ebp - 0xf3c]
push edx
call fcn.1014c8e0
add esp, 0xc
mov eax, dword [ebp - 0xf3c]
add eax, 2
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp + 0x10]
mov dx, word [ecx + 0x1b86]
mov word [ebp - 0xcf1e], dx
mov ax, word [ebp - 0xcf1e]
mov word [ebp - 0x9fc], ax
mov ecx, dword [ebp + 0x10]
mov dl, byte [ecx + 0x1b8e]
mov byte [ebp - 0xcf1f], dl
movzx eax, byte [ebp - 0xcf1f]
test eax, eax
jne 0x10067fef
mov ecx, dword [ebp + 0x10]
mov dx, word [ecx + 0x1b86]
mov word [ebp - 0xcf22], dx
movzx esi, word [ebp - 0xcf22]
push 1
call fcn.100e9310
add esp, 4
movzx eax, ax
cmp esi, eax
jge 0x10067fef
push 1
call fcn.100e9310
add esp, 4
mov word [ebp - 0x9fc], ax
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 0xc
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 2
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
push 2
lea edx, [ebp - 0x9fc]
push edx
mov eax, dword [ebp - 0xf3c]
push eax
call fcn.1014c8e0
add esp, 0xc
mov ecx, dword [ebp - 0xf3c]
add ecx, 2
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp + 0x10]
mov ax, word [edx + 0x1b84]
mov word [ebp - 0xcf24], ax
mov cx, word [ebp - 0xcf24]
mov word [ebp - 0x9e4], cx
mov dx, word [0x101db604]
mov word [ebp - 0xcf26], dx
movzx eax, word [ebp - 0xcf26]
movzx ecx, word [ebp - 0x9e4]
cmp eax, ecx
jle 0x100680a1
mov dx, word [0x101db604]
mov word [ebp - 0xcf28], dx
mov ax, word [ebp - 0xcf28]
mov word [ebp - 0x9e4], ax
movzx ecx, word [ebp - 0x9e4]
test ecx, ecx
je 0x10068103
mov edx, dword [ebp - 0xf3c]
mov byte [edx], 7
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 2
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
push 2
lea eax, [ebp - 0x9e4]
push eax
mov ecx, dword [ebp - 0xf3c]
push ecx
call fcn.1014c8e0
add esp, 0xc
mov edx, dword [ebp - 0xf3c]
add edx, 2
mov dword [ebp - 0xf3c], edx
mov dword [ebp - 0x9d8], 4
cmp dword [ebp - 0x9d8], 0
jl 0x100681e0
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 4
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0x9d8]
add edx, 1
movzx eax, dl
shl eax, 1
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], al
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov dword [ebp - 0x6860], 0
jmp 0x10068172
mov eax, dword [ebp - 0x6860]
add eax, 1
mov dword [ebp - 0x6860], eax
mov ecx, dword [ebp - 0x6860]
cmp ecx, dword [ebp - 0x9d8]
jg 0x100681e0
cmp dword [ebp - 0x6860], 5
jge 0x1006819f
mov edx, dword [ebp - 0x6860]
movzx eax, word [ebp + edx*2 - 0x54c]
mov dword [ebp - 0xd6d0], eax
jmp 0x100681a9
mov dword [ebp - 0xd6d0], 0
mov cx, word [ebp - 0xd6d0]
mov word [ebp - 0x6864], cx
push 2
lea edx, [ebp - 0x6864]
push edx
mov eax, dword [ebp - 0xf3c]
push eax
call fcn.1014c8e0
add esp, 0xc
mov ecx, dword [ebp - 0xf3c]
add ecx, 2
mov dword [ebp - 0xf3c], ecx
jmp 0x10068163
mov dword [ebp - 0x9d8], 0xf
cmp dword [ebp - 0x9d8], 0
jle 0x10068251
mov edx, dword [ebp - 0x9d8]
sub edx, 1
mov dword [ebp - 0x9d8], edx
cmp dword [ebp - 0x9d8], 0xf
jae 0x10068234
mov eax, dword [ebp - 0x9d8]
movzx ecx, word [ebp + eax*2 - 0x542]
test ecx, ecx
je 0x10068234
mov edx, dword [ebp - 0x9d8]
mov ax, word [ebp + edx*2 - 0x542]
mov word [ebp - 0xd6d2], ax
jmp 0x10068242
mov cx, word [ebp - 0x54e]
mov word [ebp - 0xd6d2], cx
movzx edx, word [ebp - 0xd6d2]
test edx, edx
je 0x1006824f
jmp 0x10068251
jmp 0x100681ea
cmp dword [ebp - 0x9d8], 0
jl 0x1006833e
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 8
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0x9d8]
add edx, 1
movzx eax, dl
shl eax, 1
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], al
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov dword [ebp - 0x6868], 0
jmp 0x100682b6
mov eax, dword [ebp - 0x6868]
add eax, 1
mov dword [ebp - 0x6868], eax
mov ecx, dword [ebp - 0x6868]
cmp ecx, dword [ebp - 0x9d8]
jg 0x1006833e
cmp dword [ebp - 0x6868], 0xf
jae 0x100682f6
mov edx, dword [ebp - 0x6868]
movzx eax, word [ebp + edx*2 - 0x542]
test eax, eax
je 0x100682f6
mov ecx, dword [ebp - 0x6868]
mov dx, word [ebp + ecx*2 - 0x542]
mov word [ebp - 0xd6d4], dx
jmp 0x10068304
mov ax, word [ebp - 0x54e]
mov word [ebp - 0xd6d4], ax
mov cx, word [ebp - 0xd6d4]
mov word [ebp - 0x686c], cx
push 2
lea edx, [ebp - 0x686c]
push edx
mov eax, dword [ebp - 0xf3c]
push eax
call fcn.1014c8e0
add esp, 0xc
mov ecx, dword [ebp - 0xf3c]
add ecx, 2
mov dword [ebp - 0xf3c], ecx
jmp 0x100682a7
mov dword [ebp - 0x9d8], 0
jmp 0x10068359
mov edx, dword [ebp - 0x9d8]
add edx, 1
mov dword [ebp - 0x9d8], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x1bc4]
mov dword [ebp - 0xcf2c], ecx
mov edx, dword [ebp - 0x9d8]
cmp edx, dword [ebp - 0xcf2c]
jge 0x100684ea
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 0x18
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp + 0x10]
add edx, 0x1bc4
mov dword [ebp - 0xcf30], edx
mov eax, dword [ebp - 0xcf30]
mov ecx, dword [ebp - 0x9d8]
cmp ecx, dword [eax]
jge 0x100683c9
mov edx, dword [ebp - 0x9d8]
mov eax, dword [ebp - 0xcf30]
mov ecx, dword [eax + edx*4 + 4]
mov dword [ebp - 0xd6d8], ecx
jmp 0x100683d3
mov dword [ebp - 0xd6d8], 0
mov edx, dword [ebp - 0xf3c]
mov al, byte [ebp - 0xd6d8]
mov byte [edx], al
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp + 0x10]
add edx, 0x1bc4
mov dword [ebp - 0xcf34], edx
mov eax, dword [ebp - 0xcf34]
mov ecx, dword [ebp - 0x9d8]
cmp ecx, dword [eax]
jge 0x10068427
mov edx, dword [ebp - 0x9d8]
mov eax, dword [ebp - 0xcf34]
mov ecx, dword [eax + edx*4 + 4]
mov dword [ebp - 0xd6dc], ecx
jmp 0x10068431
mov dword [ebp - 0xd6dc], 0
mov edx, dword [ebp + 0x10]
add edx, 0x1bc4
mov dword [ebp - 0xcf38], edx
mov eax, dword [ebp - 0xcf38]
mov ecx, dword [ebp - 0x9d8]
cmp ecx, dword [eax]
jge 0x1006846b
mov edx, dword [ebp - 0x9d8]
mov eax, dword [ebp - 0xcf38]
mov ecx, dword [eax + edx*4 + 0x194]
mov dword [ebp - 0xd6e0], ecx
jmp 0x10068475
mov dword [ebp - 0xd6e0], 0
mov edx, dword [ebp - 0xd6dc]
push edx
mov eax, dword [ebp - 0xd6e0]
push eax
mov ecx, dword [ebp - 0xf3c]
push ecx
call fcn.1014c8e0
add esp, 0xc
mov edx, dword [ebp + 0x10]
add edx, 0x1bc4
mov dword [ebp - 0xcf3c], edx
mov eax, dword [ebp - 0xcf3c]
mov ecx, dword [ebp - 0x9d8]
cmp ecx, dword [eax]
jge 0x100684c9
mov edx, dword [ebp - 0x9d8]
mov eax, dword [ebp - 0xcf3c]
mov ecx, dword [eax + edx*4 + 4]
mov dword [ebp - 0xd6e4], ecx
jmp 0x100684d3
mov dword [ebp - 0xd6e4], 0
mov edx, dword [ebp - 0xf3c]
add edx, dword [ebp - 0xd6e4]
mov dword [ebp - 0xf3c], edx
jmp 0x1006834a
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x1a08]
mov dword [ebp - 0xcf40], ecx
cmp dword [ebp - 0xcf40], 0
je 0x100685d0
mov edx, dword [ebp - 0xf3c]
mov byte [edx], 0xa
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x1a08]
mov dword [ebp - 0xcf44], edx
mov eax, dword [ebp - 0xcf44]
shl eax, 2
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], al
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov dword [ebp - 0x9d8], 0
jmp 0x10068568
mov eax, dword [ebp - 0x9d8]
add eax, 1
mov dword [ebp - 0x9d8], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x1a08]
mov dword [ebp - 0xcf48], edx
mov eax, dword [ebp - 0x9d8]
cmp eax, dword [ebp - 0xcf48]
jge 0x100685d0
mov ecx, dword [ebp - 0x9d8]
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + ecx*4 + 0x1a10]
mov dword [ebp - 0xcf4c], eax
mov ecx, dword [ebp - 0xcf4c]
mov dword [ebp - 0x6870], ecx
push 4
lea edx, [ebp - 0x6870]
push edx
mov eax, dword [ebp - 0xf3c]
push eax
call fcn.1014c8e0
add esp, 0xc
mov ecx, dword [ebp - 0xf3c]
add ecx, 4
mov dword [ebp - 0xf3c], ecx
jmp 0x10068559
mov edx, dword [ebp - 0xf3c]
mov byte [edx], 0x25
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 4
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp + 0x10]
cmp dword [eax + 0x1ac8], 0
jne 0x10068626
push 0
push 0
push 0xc0
call fcn.100a3070
add esp, 0xc
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 0x1ac8], eax
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1ac8]
mov dword [ebp - 0xcf50], eax
mov ecx, dword [ebp - 0xcf50]
mov dword [ebp - 0x6874], ecx
push 4
lea edx, [ebp - 0x6874]
push edx
mov eax, dword [ebp - 0xf3c]
push eax
call fcn.1014c8e0
add esp, 0xc
mov ecx, dword [ebp - 0xf3c]
add ecx, 4
mov dword [ebp - 0xf3c], ecx
mov dword [ebp - 0xf38], 4
mov edx, dword [ebp - 0xf38]
sub edx, 1
mov dword [ebp - 0xf38], edx
jmp 0x10068692
mov eax, dword [ebp - 0xf38]
sub eax, 1
mov dword [ebp - 0xf38], eax
cmp dword [ebp - 0xf38], 0
jl 0x100686c1
mov ecx, dword [ebp - 0xf38]
push ecx
mov ecx, dword [ebp + 0x10]
call fcn.100711b0
test eax, eax
je 0x100686bf
mov edx, dword [ebp - 0xf38]
add edx, 1
mov dword [ebp - 0xf38], edx
jmp 0x100686c1
jmp 0x10068683
cmp dword [ebp - 0xf38], 0
jl 0x1006876d
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 0xb
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0xf38]
shl edx, 2
mov eax, dword [ebp - 0xf3c]
mov byte [eax], dl
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov dword [ebp - 0x6878], 0
jmp 0x10068721
mov edx, dword [ebp - 0x6878]
add edx, 1
mov dword [ebp - 0x6878], edx
mov eax, dword [ebp - 0x6878]
cmp eax, dword [ebp - 0xf38]
jge 0x1006876d
mov ecx, dword [ebp - 0x6878]
push ecx
mov ecx, dword [ebp + 0x10]
call fcn.100711b0
mov dword [ebp - 0x687c], eax
push 4
lea edx, [ebp - 0x687c]
push edx
mov eax, dword [ebp - 0xf3c]
push eax
call fcn.1014c8e0
add esp, 0xc
mov ecx, dword [ebp - 0xf3c]
add ecx, 4
mov dword [ebp - 0xf3c], ecx
jmp 0x10068712
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1ae0]
mov dword [ebp - 0xcf54], eax
cmp dword [ebp - 0xcf54], 0
je 0x100688e4
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 0xe
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x1ae8]
mov dword [ebp - 0xcf58], ecx
mov edx, dword [ebp - 0xcf58]
lea eax, [edx*4 + 0x10]
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], al
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov ecx, dword [ebp + 0x10]
call fcn.10072a10
mov ecx, dword [ebp - 0xf3c]
mov dword [ecx], eax
mov edx, dword [ebp - 0xf3c]
add edx, 4
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x1ae0]
mov dword [ebp - 0xcf5c], ecx
mov edx, dword [ebp - 0xf3c]
mov eax, dword [ebp - 0xcf5c]
mov dword [edx], eax
mov ecx, dword [ebp - 0xf3c]
add ecx, 4
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1ae4]
mov dword [ebp - 0xcf60], eax
mov ecx, dword [ebp - 0xf3c]
mov edx, dword [ebp - 0xcf60]
mov dword [ecx], edx
mov eax, dword [ebp - 0xf3c]
add eax, 4
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x1ae8]
mov dword [ebp - 0xcf64], edx
mov eax, dword [ebp - 0xf3c]
mov ecx, dword [ebp - 0xcf64]
mov dword [eax], ecx
mov edx, dword [ebp - 0xf3c]
add edx, 4
mov dword [ebp - 0xf3c], edx
mov dword [ebp - 0x3f40], 0
jmp 0x10068892
mov eax, dword [ebp - 0x3f40]
add eax, 1
mov dword [ebp - 0x3f40], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x1ae8]
mov dword [ebp - 0xcf68], edx
mov eax, dword [ebp - 0x3f40]
cmp eax, dword [ebp - 0xcf68]
jae 0x100688e4
mov ecx, dword [ebp - 0x3f40]
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + ecx*4 + 0x1aec]
mov dword [ebp - 0xcf6c], eax
mov ecx, dword [ebp - 0xf3c]
mov edx, dword [ebp - 0xcf6c]
mov dword [ecx], edx
mov eax, dword [ebp - 0xf3c]
add eax, 4
mov dword [ebp - 0xf3c], eax
jmp 0x10068883
mov dword [ebp - 0x9d8], 0
jmp 0x100688ff
mov ecx, dword [ebp - 0x9d8]
add ecx, 1
mov dword [ebp - 0x9d8], ecx
cmp dword [ebp - 0x9d8], 8
jge 0x100689b5
push 0
mov edx, dword [ebp - 0x9d8]
push edx
mov ecx, dword [ebp + 0x10]
call fcn.10071840
push eax
call fcn.1014e8a0
add esp, 4
mov byte [ebp - 0x687d], al
movzx eax, byte [ebp - 0x687d]
test eax, eax
je 0x100689b0
mov ecx, dword [ebp - 0x9d8]
add ecx, 0xf
mov edx, dword [ebp - 0xf3c]
mov byte [edx], cl
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov dl, byte [ebp - 0x687d]
mov byte [ecx], dl
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
movzx ecx, byte [ebp - 0x687d]
push ecx
push 0
mov edx, dword [ebp - 0x9d8]
push edx
mov ecx, dword [ebp + 0x10]
call fcn.10071840
push eax
mov eax, dword [ebp - 0xf3c]
push eax
call fcn.1014c8e0
add esp, 0xc
movzx ecx, byte [ebp - 0x687d]
add ecx, dword [ebp - 0xf3c]
mov dword [ebp - 0xf3c], ecx
jmp 0x100688f0
mov edx, dword [ebp + 0x10]
add edx, 0x808
push edx
call fcn.1014e8a0
add esp, 4
test eax, eax
je 0x10068ac8
mov eax, dword [ebp + 0x10]
add eax, 0x808
mov dword [ebp - 0x6888], eax
mov ecx, dword [ebp + 0x10]
add ecx, 0x808
push ecx
call fcn.1014e8a0
add esp, 4
add eax, dword [ebp - 0x6888]
mov dword [ebp - 0x6884], eax
mov edx, dword [ebp - 0x6888]
cmp edx, dword [ebp - 0x6884]
jae 0x10068ac8
mov eax, dword [ebp - 0x6884]
sub eax, dword [ebp - 0x6888]
cmp eax, 0xff
jle 0x10068a2c
mov dword [ebp - 0xd6e8], 0xff
jmp 0x10068a3e
mov ecx, dword [ebp - 0x6884]
sub ecx, dword [ebp - 0x6888]
mov dword [ebp - 0xd6e8], ecx
mov dl, byte [ebp - 0xd6e8]
mov byte [ebp - 0x6889], dl
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 0x17
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0xf3c]
mov al, byte [ebp - 0x6889]
mov byte [edx], al
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
movzx edx, byte [ebp - 0x6889]
push edx
mov eax, dword [ebp - 0x6888]
push eax
mov ecx, dword [ebp - 0xf3c]
push ecx
call fcn.1014c8e0
add esp, 0xc
movzx edx, byte [ebp - 0x6889]
add edx, dword [ebp - 0xf3c]
mov dword [ebp - 0xf3c], edx
movzx eax, byte [ebp - 0x6889]
add eax, dword [ebp - 0x6888]
mov dword [ebp - 0x6888], eax
jmp 0x100689fb
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x1a0c]
mov dword [ebp - 0xcf70], edx
cmp dword [ebp - 0xcf70], 0
je 0x10068b87
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 0x19
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1a0c]
mov dword [ebp - 0xcf74], eax
mov ecx, dword [ebp - 0xcf74]
shl ecx, 1
shl ecx, 2
mov edx, dword [ebp - 0xf3c]
mov byte [edx], cl
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x1a0c]
mov dword [ebp - 0xcf78], edx
mov eax, dword [ebp - 0xcf78]
shl eax, 1
shl eax, 2
push eax
mov ecx, dword [ebp + 0x10]
add ecx, 0x1a90
push ecx
mov edx, dword [ebp - 0xf3c]
push edx
call fcn.1014c8e0
add esp, 0xc
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x1a0c]
mov dword [ebp - 0xcf7c], ecx
mov edx, dword [ebp - 0xcf7c]
shl edx, 1
mov eax, dword [ebp - 0xf3c]
lea ecx, [eax + edx*4]
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1ab8]
mov dword [ebp - 0xcf80], eax
cmp dword [ebp - 0xcf80], 0
je 0x10068bf9
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 0x1a
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 0x10
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
push 0x10
mov edx, dword [ebp + 0x10]
add edx, 0x1ab8
push edx
mov eax, dword [ebp - 0xf3c]
push eax
call fcn.1014c8e0
add esp, 0xc
mov ecx, dword [ebp - 0xf3c]
add ecx, 0x10
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp + 0x10]
add edx, 0x1808
push edx
call fcn.1014e8a0
add esp, 4
test eax, eax
jne 0x10068c9a
mov eax, dword [ebp + 0x10]
add eax, 0x1908
push eax
call fcn.1014e8a0
add esp, 4
test eax, eax
jne 0x10068c9a
mov ecx, dword [ebp + 0x10]
mov dx, word [ecx + 0x1b88]
mov word [ebp - 0xcf82], dx
movzx eax, word [ebp - 0xcf82]
test eax, eax
jne 0x10068c9a
mov ecx, dword [ebp + 0x10]
mov dx, word [ecx + 0x1b8a]
mov word [ebp - 0xcf84], dx
movzx eax, word [ebp - 0xcf84]
test eax, eax
jne 0x10068c9a
mov ecx, dword [ebp + 0x10]
mov dx, word [ecx + 0x1b8c]
mov word [ebp - 0xcf86], dx
movzx eax, word [ebp - 0xcf86]
test eax, eax
jne 0x10068c9a
mov ecx, dword [ebp + 0x10]
mov dl, byte [ecx + 0x1b8f]
mov byte [ebp - 0xcf87], dl
movzx eax, byte [ebp - 0xcf87]
test eax, eax
je 0x10068e35
mov ecx, dword [ebp + 0x10]
add ecx, 0x1808
push ecx
call fcn.1014e8a0
add esp, 4
mov byte [ebp - 0x6892], al
mov edx, dword [ebp + 0x10]
add edx, 0x1908
push edx
call fcn.1014e8a0
add esp, 4
mov byte [ebp - 0x6891], al
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 0x1b
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
movzx edx, byte [ebp - 0x6892]
movzx eax, byte [ebp - 0x6891]
lea ecx, [edx + eax + 0x11]
mov edx, dword [ebp - 0xf3c]
mov byte [edx], cl
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
push 0x10
push 0
mov ecx, dword [ebp - 0xf3c]
push ecx
call fcn.1014e270
add esp, 0xc
mov edx, dword [ebp - 0xf3c]
mov dword [ebp - 0x6890], edx
mov eax, dword [ebp + 0x10]
mov cx, word [eax + 0x1b88]
mov word [ebp - 0xcf8a], cx
mov edx, dword [ebp - 0x6890]
mov ax, word [ebp - 0xcf8a]
mov word [edx], ax
mov ecx, dword [ebp + 0x10]
mov dx, word [ecx + 0x1b8a]
mov word [ebp - 0xcf8c], dx
mov eax, dword [ebp - 0x6890]
mov cx, word [ebp - 0xcf8c]
mov word [eax + 2], cx
mov edx, dword [ebp + 0x10]
mov ax, word [edx + 0x1b8c]
mov word [ebp - 0xcf8e], ax
mov ecx, dword [ebp - 0x6890]
mov dx, word [ebp - 0xcf8e]
mov word [ecx + 4], dx
mov eax, dword [ebp + 0x10]
mov cl, byte [eax + 0x1b8f]
mov byte [ebp - 0xcf8f], cl
movzx edx, byte [ebp - 0xcf8f]
neg edx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x6890]
mov word [eax + 6], dx
movzx ecx, byte [ebp - 0x6892]
push ecx
mov edx, dword [ebp + 0x10]
add edx, 0x1808
push edx
mov eax, dword [ebp - 0xf3c]
add eax, 0x10
push eax
call fcn.1014c8e0
add esp, 0xc
movzx ecx, byte [ebp - 0x6892]
mov edx, dword [ebp - 0xf3c]
mov byte [edx + ecx + 0x10], 0
movzx eax, byte [ebp - 0x6891]
push eax
mov ecx, dword [ebp + 0x10]
add ecx, 0x1908
push ecx
movzx edx, byte [ebp - 0x6892]
mov eax, dword [ebp - 0xf3c]
lea ecx, [eax + edx + 0x11]
push ecx
call fcn.1014c8e0
add esp, 0xc
movzx edx, byte [ebp - 0x6892]
movzx eax, byte [ebp - 0x6891]
add eax, dword [ebp - 0xf3c]
lea ecx, [eax + edx + 0x11]
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0xf3c]
mov byte [edx], 0x1c
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 4
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x1b94]
mov dword [ebp - 0xcf94], ecx
mov edx, dword [ebp - 0xcf94]
mov dword [ebp - 0xf08], edx
push 4
lea eax, [ebp - 0xf08]
push eax
mov ecx, dword [ebp - 0xf3c]
push ecx
call fcn.1014c8e0
add esp, 0xc
mov edx, dword [ebp - 0xf3c]
add edx, 4
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 0x1d
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0xf3c]
mov byte [edx], 4
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x1b98]
mov dword [ebp - 0xcf98], edx
mov eax, dword [ebp - 0xcf98]
mov dword [ebp - 0x9e0], eax
push 4
lea ecx, [ebp - 0x9e0]
push ecx
mov edx, dword [ebp - 0xf3c]
push edx
call fcn.1014c8e0
add esp, 0xc
mov eax, dword [ebp - 0xf3c]
add eax, 4
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 0x1e
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 4
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1b6c]
mov dword [ebp - 0xcf9c], eax
mov ecx, dword [ebp + 0x10]
call fcn.10072a50
add eax, dword [ebp - 0xcf9c]
mov dword [ebp - 0xf30], eax
push 4
lea ecx, [ebp - 0xf30]
push ecx
mov edx, dword [ebp - 0xf3c]
push edx
call fcn.1014c8e0
add esp, 0xc
mov eax, dword [ebp - 0xf3c]
add eax, 4
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 0x1f
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 4
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1bb8]
mov dword [ebp - 0xcfa0], eax
mov ecx, dword [ebp - 0xcfa0]
mov dword [ebp - 0xf2c], ecx
push 4
lea edx, [ebp - 0xf2c]
push edx
mov eax, dword [ebp - 0xf3c]
push eax
call fcn.1014c8e0
add esp, 0xc
mov ecx, dword [ebp - 0xf3c]
add ecx, 4
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0xf3c]
mov byte [edx], 0x20
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 4
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x1bbc]
mov dword [ebp - 0xcfa4], ecx
mov edx, dword [ebp - 0xcfa4]
mov dword [ebp - 0x4b4], edx
push 4
lea eax, [ebp - 0x4b4]
push eax
mov ecx, dword [ebp - 0xf3c]
push ecx
call fcn.1014c8e0
add esp, 0xc
mov edx, dword [ebp - 0xf3c]
add edx, 4
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 0x21
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0xf3c]
mov byte [edx], 4
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x1bc0]
mov dword [ebp - 0xcfa8], edx
mov eax, dword [ebp - 0xcfa8]
mov dword [ebp - 0x9f8], eax
push 4
lea ecx, [ebp - 0x9f8]
push ecx
mov edx, dword [ebp - 0xf3c]
push edx
call fcn.1014c8e0
add esp, 0xc
mov eax, dword [ebp - 0xf3c]
add eax, 4
mov dword [ebp - 0xf3c], eax
mov ecx, 2
shl ecx, 2
mov edx, dword [0x101db5fc]
mov eax, dword [edx + ecx]
xor eax, 0
mov dword [ebp - 0xcfac], eax
mov ecx, dword [ebp - 0xcfac]
mov dword [ebp - 0x6898], ecx
push 0x20
lea ecx, [ebp - 0x6898]
call fcn.10069850
add eax, 1
mov byte [ebp - 0x6893], al
mov edx, dword [ebp - 0xf3c]
mov byte [edx], 0xfd
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov dl, byte [ebp - 0x6893]
mov byte [ecx], dl
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov dword [ebp - 0x689c], 0
jmp 0x10069175
mov ecx, dword [ebp - 0x689c]
add ecx, 1
mov dword [ebp - 0x689c], ecx
movzx edx, byte [ebp - 0x6893]
cmp dword [ebp - 0x689c], edx
jge 0x100691ad
push pe_nt_image_headers32
lea ecx, [ebp - 0x6898]
call fcn.10069850
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], al
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
jmp 0x10069166
mov eax, dword [ebp - 0xf3c]
mov byte [eax], 0xfe
mov ecx, dword [ebp - 0xf3c]
add ecx, 1
mov dword [ebp - 0xf3c], ecx
mov edx, dword [ebp - 0xf3c]
mov byte [edx], 4
mov eax, dword [ebp - 0xf3c]
add eax, 1
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov edx, dword [ebp - 0xf34]
mov dword [ecx], edx
mov eax, dword [ebp - 0xf3c]
add eax, 4
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov byte [ecx], 0xff
mov edx, dword [ebp - 0xf3c]
add edx, 1
mov dword [ebp - 0xf3c], edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0xf3c]
lea ecx, [ebp - 0x3f3c]
sub eax, ecx
push eax
lea edx, [ebp - 0x3f3c]
push edx
call fcn.101153c0
add esp, 0xc
mov dword [ebp - 0x4b8], eax
push 4
lea eax, [ebp - 0x4b8]
push eax
mov ecx, dword [ebp - 0xf3c]
push ecx
call fcn.1014c8e0
add esp, 0xc
mov edx, dword [ebp - 0xf3c]
add edx, 4
mov dword [ebp - 0xf3c], edx
mov eax, dword [ebp - 0xf3c]
lea ecx, [ebp - 0x3f3c]
sub eax, ecx
mov dword [ebp - 0x4c4], eax
mov dword [ebp - 0x9f4], 0xa
mov dword [ebp - 0x68a0], 0
jmp 0x10069298
mov edx, dword [ebp - 0x68a0]
add edx, 1
mov dword [ebp - 0x68a0], edx
cmp dword [ebp - 0x68a0], 0xa
jge 0x10069600
mov eax, dword [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x3f3c]
push ecx
lea edx, [ebp - 0x98a4]
push edx
call fcn.1014c8e0
add esp, 0xc
movzx eax, byte [ebp - 0x4c5]
test eax, eax
je 0x10069392
cmp dword [ebp - 0x68a0], 0
jne 0x100692e9
mov dword [ebp - 0x98ac], 0xc
jmp 0x1006938d
cmp dword [ebp - 0x68a0], 1
jne 0x10069301
mov dword [ebp - 0x98ac], 0xd
jmp 0x1006938d
cmp dword [ebp - 0x68a0], 2
jne 0x10069316
mov dword [ebp - 0x98ac], 0xe
jmp 0x1006938d
cmp dword [ebp - 0x68a0], 3
jne 0x10069349
mov cl, byte [0x101db5d0]
mov byte [ebp - 0xcfcd], cl
movzx edx, byte [ebp - 0xcfcd]
test edx, edx
je 0x10069342
mov dword [ebp - 0x98ac], 0xb
jmp 0x10069347
jmp 0x10069289
jmp 0x1006938d
cmp dword [ebp - 0x68a0], 4
jne 0x1006935e
mov dword [ebp - 0x98ac], 0xf
jmp 0x1006938d
cmp dword [ebp - 0x68a0], 5
jne 0x10069373
mov dword [ebp - 0x98ac], 0x10
jmp 0x1006938d
cmp dword [ebp - 0x68a0], 6
jne 0x10069388
mov dword [ebp - 0x98ac], 0x15
jmp 0x1006938d
jmp 0x10069600
jmp 0x1006944d
cmp dword [ebp - 0x68a0], 0
jne 0x100693aa
mov dword [ebp - 0x98ac], 6
jmp 0x1006944d
cmp dword [ebp - 0x68a0], 1
jne 0x100693c2
mov dword [ebp - 0x98ac], 7
jmp 0x1006944d
cmp dword [ebp - 0x68a0], 2
jne 0x100693d7
mov dword [ebp - 0x98ac], 8
jmp 0x1006944d
cmp dword [ebp - 0x68a0], 3
jne 0x10069409
mov al, byte [0x101db5d0]
mov byte [ebp - 0xcfce], al
movzx ecx, byte [ebp - 0xcfce]
test ecx, ecx
je 0x10069402
mov dword [ebp - 0x98ac], 5
jmp 0x10069407
jmp 0x10069289
jmp 0x1006944d
cmp dword [ebp - 0x68a0], 4
jne 0x1006941e
mov dword [ebp - 0x98ac], 9
jmp 0x1006944d
cmp dword [ebp - 0x68a0], 5
jne 0x10069433
mov dword [ebp - 0x98ac], 0xa
jmp 0x1006944d
cmp dword [ebp - 0x68a0], 6
jne 0x10069448
mov dword [ebp - 0x98ac], 0x14
jmp 0x1006944d
jmp 0x10069600
mov edx, dword [ebp - 0x98ac]
push edx
call fcn.10066350
add esp, 4
mov dword [ebp - 0xcfd4], eax
mov eax, dword [ebp - 0xcfd4]
mov dword [ebp - 0x98a8], eax
lea ecx, [ebp - 0x98a4]
mov dword [ebp - 0x98b4], ecx
mov edx, dword [ebp - 0x98b4]
add edx, dword [ebp - 0x4c4]
mov dword [ebp - 0x98b0], edx
mov eax, dword [ebp - 0x98b4]
cmp eax, dword [ebp - 0x98b0]
jae 0x100694db
push pe_nt_image_headers32
lea ecx, [ebp - 0x98a8]
call fcn.10069850
mov byte [ebp - 0xcfe5], al
movzx ecx, byte [ebp - 0xcfe5]
mov edx, dword [ebp - 0x98b4]
movzx eax, byte [edx]
xor eax, ecx
mov ecx, dword [ebp - 0x98b4]
mov byte [ecx], al
mov edx, dword [ebp - 0x98b4]
add edx, 1
mov dword [ebp - 0x98b4], edx
jmp 0x1006948c
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x10069576
mov ecx, dword [ebp - 0x4c4]
mov dword [ebp - 0xcfec], ecx
lea edx, [ebp - 0xcfec]
push edx
lea eax, [ebp - 0xc8b4]
push eax
mov ecx, dword [ebp - 0x98ac]
push ecx
mov ecx, str.RALFCFEC60F
call fcn.100bd490
movzx edx, al
test edx, edx
jne 0x1006952d
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x1006952d
mov byte [ebp - 0x295], 1
jmp 0x10069571
push 0
mov eax, dword [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x98a4]
push ecx
mov edx, dword [ebp - 0x98ac]
push edx
mov ecx, str.RALFCFEC60F
call fcn.100bf3d0
movzx eax, al
test eax, eax
jne 0x10069563
mov byte [ebp - 0x295], 0
jmp 0x10069600
mov byte [ebp - 0x295], 1
mov byte [ebp - 0x4a5], 1
jmp 0x100695fb
push 1
mov ecx, dword [ebp - 0x4c4]
push ecx
lea edx, [ebp - 0x98a4]
push edx
mov eax, dword [ebp - 0x98ac]
push eax
mov ecx, str.RALFCFEC60F
call fcn.100bf3d0
movzx ecx, al
test ecx, ecx
je 0x100695ac
mov byte [ebp - 0x295], 1
mov byte [ebp - 0x4a5], 1
mov dl, byte [0x101db5cc]
mov byte [ebp - 0xcfed], dl
movzx eax, byte [ebp - 0xcfed]
test eax, eax
je 0x100695fb
movzx ecx, byte [ebp - 0x295]
test ecx, ecx
je 0x100695fb
push 1
mov edx, dword [ebp - 0x4c4]
push edx
lea eax, [ebp - 0x98a4]
push eax
movzx ecx, byte [ebp - 0x4c5]
neg ecx
sbb ecx, ecx
neg ecx
add ecx, 0x14
push ecx
mov ecx, str.RALFCFEC60F
call fcn.100bf3d0
jmp 0x10069600
jmp 0x10069289
movzx edx, byte [ebp - 0x4c6]
test edx, edx
je 0x10069621
lea eax, [ebp - 0xf04]
push eax
lea ecx, [ebp - 0x9d4]
push ecx
call fcn.10082420
add esp, 8
lea edx, [ebp - 0x9d4]
push edx
mov ecx, dword [ebp + 8]
call fcn.10066900
lea eax, [ebp - 0xf04]
push eax
mov ecx, dword [ebp + 0xc]
call fcn.10066900
mov byte [ebp - 4], 0x15
push 0
push 1
lea ecx, [ebp - 0xf28]
call fcn.10042350
mov byte [ebp - 4], 1
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xa40]
call fcn.10064070
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xefc]
call fcn.10063f10
mov dword [ebp - 4], 0x19
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x510]
call fcn.10064070
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9cc]
call fcn.10063f10
mov ecx, dword [ebp - 0x4b0]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, dword [ebp - 0x4b0]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, byte [ebp - 0x4a5]
test eax, eax
je 0x100696f6
mov ecx, dword [0x101db600]
mov dword [ebp - 0xd68c], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov edx, dword [ebp - 0xd68c]
push edx
push str.ArmReReadMessage
call dword [sym.imp.USER32.dll_RegisterWindowMessageA]
push eax
push 0xffff
call dword [sym.imp.USER32.dll_PostMessageA]
mov al, byte [ebp - 0x295]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1014c68a
mov esp, ebp
pop ebp
ret