Function at 0x1001b060
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100781bd
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1b8
mov eax, dword [0x100a900c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x100b0308
call fcn.1000b4c0
mov al, byte [0x100b02fc]
mov edi, 0xe990
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [0x100b02fd], al
test al, al
je 0x1001b16e
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x6577a
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov word [eax], di
mov ecx, dword [0x100b003c]
sub ecx, dword [0x100cab48]
mov eax, dword [ebp - 0x54]
sub ecx, 0x65780
mov dword [eax + 2], ecx
mov eax, dword [0x100b003c]
movups xmm0, xmmword [0x1009e300]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x1009e310]
movups xmmword [eax + 0x10], xmm0
movq xmm0, qword [0x1009e320]
movq qword [eax + 0x20], xmm0
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
sub eax, ecx
add eax, 0x6576a
mov dword [ecx + 0x1b], eax
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 0x28
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x6578d
mov dword [ecx - 4], eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b0424]
mov byte [0x100b0425], al
test al, al
je 0x1001b215
mov ecx, dword [0x100cab48]
mov dword [ebp - 0x50], 5
lea eax, [ecx + 0x1e0fa4]
add ecx, 0x44280
mov dword [0x100b9a98], eax
lea eax, [ebp - 0x4c]
push eax
push 0x40
push 5
push ecx
mov dword [ebp - 0x54], ecx
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x100730f0
mov byte [eax], 0xe9
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x44530
mov dword [ebp - 0x50], 5
push 5
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x10073150
mov byte [eax], 0xe9
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b00c0]
mov byte [0x100b00c1], al
test al, al
je 0x1001b39f
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x2c99b
mov dword [ebp - 0x50], 5
push 5
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0xe9
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
mov eax, dword [0x100b003c]
mov dword [eax], 0xf05fb83
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov byte [eax], 0x84
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
inc ecx
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x2c99c
mov dword [ecx], eax
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov dword [eax], 0x840fff85
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 4
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x2c9c0
mov dword [ecx], eax
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov dword [eax], 0xc35b5e5f
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 4
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x70]
push ecx
push 0x40
add eax, 0x360b8
mov dword [ebp - 0x74], 0x5d
push 0x5d
push eax
mov dword [ebp - 0x78], eax
call esi
mov ax, word [0x1009be4c]
movups xmm0, xmmword [0x1009be20]
mov ecx, dword [0x1009be48]
movups xmm1, xmmword [0x1009be30]
mov word [ebp - 0x18], ax
mov eax, dword [ebp - 0x78]
movq xmm2, qword [0x1009be40]
movups xmmword [eax], xmm0
mov eax, dword [ebp - 0x78]
movups xmmword [eax + 0x10], xmm1
mov eax, dword [ebp - 0x78]
movq qword [eax + 0x20], xmm2
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x28], ecx
mov eax, dword [ebp - 0x78]
mov cl, byte [ebp - 0x18]
mov byte [eax + 0x2c], cl
mov eax, dword [ebp - 0x78]
mov byte [eax + 0x44], 0xa1
mov eax, dword [ebp - 0x78]
mov ecx, dword [0x100cab48]
add ecx, 0x1e0fa4
mov dword [eax + 0x45], ecx
mov al, byte [0x1009be64]
movups xmm0, xmmword [0x1009be50]
mov ecx, dword [0x1009be60]
mov byte [ebp - 0x88], al
mov eax, dword [ebp - 0x78]
movups xmmword [eax + 0x49], xmm0
mov dword [eax + 0x59], ecx
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
call esi
mov al, byte [0x100b01a8]
mov byte [0x100b01a9], al
test al, al
je 0x1001b431
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x6821c
mov dword [ebp - 0x50], 0xc
push 0xc
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0xe8
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
mov eax, dword [ebp - 0x54]
mov dword [eax + 5], 0xf8b78c8b
mov eax, dword [ebp - 0x54]
mov dword [eax + 8], 0xf8
mov ecx, dword [0x100b003c]
movups xmm0, xmmword [0x1009deec]
movups xmmword [ecx], xmm0
mov eax, dword [0x1009defc]
mov dword [ecx + 0x10], eax
mov al, byte [0x1009df00]
mov byte [ecx + 0x14], al
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 0x15
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b01d8]
mov byte [0x100b01d9], al
test al, al
je 0x1001b4ff
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x325a1
mov dword [ebp - 0x50], 8
push 8
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov dword [eax], 0xe814c483
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 8
mov dword [eax + 4], ecx
mov eax, dword [0x100b003c]
mov dword [eax], 0x3b18478b
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov byte [eax], 5
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
inc ecx
add eax, 0x1e0fa0
mov dword [0x100b003c], ecx
mov dword [ecx], eax
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov dword [eax], 0xc883067c
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov dword [eax], 0x184789ff
mov eax, dword [0x100b003c]
add eax, 3
mov dword [0x100b003c], eax
mov dword [eax], 0xc3c08518
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 4
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b051c]
mov byte [0x100b051d], al
test al, al
je 0x1001b5c1
mov ecx, dword [0x100cab48]
movups xmm0, xmmword [0x1009bdf4]
mov ax, word [0x1009be1c]
mov word [ebp - 0x88], ax
movups xmmword [ebp - 0xb0], xmm0
lea eax, [ecx + 0x146250]
mov dword [ebp - 0x50], 0x3d
movups xmm0, xmmword [0x1009be04]
mov dword [ebp - 0xaf], eax
lea eax, [ecx + 0x188498]
add ecx, 0x326c3
movups xmmword [ebp - 0xa0], xmm0
mov dword [ebp - 0x9e], eax
lea eax, [ebp - 0x4c]
movq xmm0, qword [0x1009be14]
push eax
push 0x40
push 0x3d
push ecx
movq qword [ebp - 0x78], xmm0
mov dword [ebp - 0x54], ecx
call esi
mov eax, dword [ebp - 0x54]
movups xmm0, xmmword [ebp - 0xb0]
mov byte [eax], 0x1c
mov ecx, dword [ebp - 0x54]
mov al, byte [ebp - 0x88]
movups xmmword [ecx + 0x14], xmm0
movups xmm0, xmmword [ebp - 0xa0]
movups xmmword [ecx + 0x24], xmm0
movq xmm0, qword [ebp - 0x78]
movq qword [ecx + 0x34], xmm0
mov byte [ecx + 0x3c], al
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b02f4]
mov byte [0x100b02f5], al
test al, al
je 0x1001b6b7
mov ax, word [0x1009bd8c]
lea ecx, [ebp - 0x4c]
movups xmm0, xmmword [0x1009bd7c]
push ecx
mov word [ebp - 0x88], ax
mov eax, dword [0x100cab48]
push 0x40
add eax, 0x32742
mov dword [ebp - 0x50], 0x11
push 0x11
push eax
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
movups xmm0, xmmword [ebp - 0x68]
mov cl, byte [ebp - 0x88]
movups xmmword [eax], xmm0
mov eax, dword [ebp - 0x54]
mov byte [eax + 0x10], cl
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x1009bdf2]
lea ecx, [ebp - 0x4c]
movups xmm0, xmmword [0x1009bdd8]
mov di, word [0x1009bdf0]
push ecx
mov byte [ebp - 0x8a], al
mov eax, dword [0x100cab48]
push 0x40
add eax, 0x31b49
mov dword [ebp - 0x50], 0x25
movups xmmword [ebp - 0x68], xmm0
push 0x25
movq xmm0, qword [0x1009bde8]
push eax
movq qword [ebp - 0x78], xmm0
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x90c7
movups xmm0, xmmword [ebp - 0x68]
mov word [eax], cx
mov ecx, 0xba8d
mov eax, dword [ebp - 0x54]
mov word [eax + 5], cx
mov eax, dword [ebp - 0x54]
movups xmmword [eax + 0xb], xmm0
movq xmm0, qword [ebp - 0x78]
movq qword [eax + 0x1b], xmm0
mov word [eax + 0x23], di
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b0168]
mov byte [0x100b0169], al
test al, al
je 0x1001b762
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x70]
push ecx
push 0x40
add eax, 0x4df6
mov dword [ebp - 0x74], 0x1e
push 0x1e
push eax
mov dword [ebp - 0x78], eax
call esi
mov eax, dword [ebp - 0x78]
mov dword [eax], 0x82474ff
mov eax, dword [ebp - 0x78]
mov byte [eax + 4], 0x68
mov eax, dword [ebp - 0x78]
mov ecx, dword [0x100cab48]
add ecx, 0x9d8e0
mov dword [eax + 5], ecx
mov ecx, 0x1005cb60
mov eax, dword [ebp - 0x78]
mov byte [eax + 9], 0xe8
mov eax, dword [ebp - 0x78]
sub ecx, eax
sub ecx, 0xe
mov dword [eax + 0xa], ecx
mov ecx, 0x56ff
mov eax, dword [ebp - 0x78]
mov dword [eax + 0xe], 0xf06f883
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x12], 0xfffecc84
mov eax, dword [ebp - 0x78]
mov word [eax + 0x16], cx
mov eax, dword [ebp - 0x78]
mov ecx, dword [0x100cab48]
add ecx, 0x9a18c
mov dword [eax + 0x1a], ecx
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
call esi
cmp byte [0x100b0248], 0
je 0x1001b8af
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x28a8d
mov dword [ebp - 0x60], 0x1e
push 0x1e
push eax
mov dword [ebp - 0x64], eax
call esi
mov dword [ebp - 4], 0
mov ecx, dword [0x100b003c]
movups xmm0, xmmword [0x1009d208]
push 0x100b024c
mov dword [ebp - 0x70], 0x100b003c
movups xmmword [ecx], xmm0
mov al, byte [0x1009d218]
mov byte [ecx + 0x10], al
lea ecx, [ebp - 0x70]
mov eax, dword [0x100cab48]
add eax, 0x28a84
push eax
call fcn.10009070
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x70]
push 0x100b0264
add eax, 0x289cb
push eax
call fcn.10009070
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x70]
push 0x100b027c
add eax, 0x28a00
push eax
call fcn.10009070
mov al, byte [0x100b0248]
add dword [0x100b003c], 0x11
mov byte [ebp - 0x79], al
test al, al
je 0x1001b81a
cmp byte [0x100b025c], 0
jne 0x1001b835
jmp 0x1001b823
cmp byte [0x100b025c], 0
je 0x1001b835
mov ecx, 0x100b024c
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100b025c], al
mov al, byte [0x100b0248]
mov byte [ebp - 0x79], al
test al, al
je 0x1001b84c
cmp byte [0x100b0274], 0
jne 0x1001b867
jmp 0x1001b855
cmp byte [0x100b0274], 0
je 0x1001b867
mov ecx, 0x100b0264
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100b0274], al
mov al, byte [0x100b0248]
mov byte [ebp - 0x79], al
test al, al
je 0x1001b87e
cmp byte [0x100b028c], 0
jne 0x1001b899
jmp 0x1001b887
cmp byte [0x100b028c], 0
je 0x1001b899
mov ecx, 0x100b027c
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100b028c], al
lea eax, [ebp - 0x5c]
mov dword [ebp - 4], 0xffffffff
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov edi, dword [0x100cab48]
mov ecx, 0x100b049c
add edi, 0xaeb5c
call fcn.10027150
push 1
push edi
mov ecx, 0x100b049c
call fcn.1003f240
mov edi, dword [0x100cab48]
mov ecx, 0x100b04b4
mov byte [0x100b04b0], 1
add edi, 0xaeb60
call fcn.10027150
push str.scene
push edi
mov ecx, 0x100b04b4
call fcn.1003f2d0
mov edi, dword [0x100cab48]
mov ecx, 0x100b04cc
mov byte [0x100b04c8], 1
add edi, 0xae9b0
call fcn.10027150
push str.scene
push edi
mov ecx, 0x100b04cc
call fcn.1003f2d0
mov al, byte [0x100b0498]
mov byte [0x100b04e0], 1
mov byte [ebp - 0x79], al
test al, al
je 0x1001b94a
cmp byte [0x100b04ac], 0
jne 0x1001b965
jmp 0x1001b953
cmp byte [0x100b04ac], 0
je 0x1001b965
mov ecx, 0x100b049c
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100b04ac], al
mov al, byte [0x100b0498]
mov byte [ebp - 0x79], al
test al, al
je 0x1001b97c
cmp byte [0x100b04c4], 0
jne 0x1001b997
jmp 0x1001b985
cmp byte [0x100b04c4], 0
je 0x1001b997
mov ecx, 0x100b04b4
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100b04c4], al
mov al, byte [0x100b0498]
mov byte [ebp - 0x79], al
test al, al
je 0x1001b9ae
cmp byte [0x100b04dc], 0
jne 0x1001b9c9
jmp 0x1001b9b7
cmp byte [0x100b04dc], 0
je 0x1001b9c9
mov ecx, 0x100b04cc
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100b04dc], al
mov edi, dword [0x100cab48]
mov ecx, 0x100b03e4
add edi, 0x299d1
call fcn.10027150
push 0x73
push edi
mov ecx, 0x100b03e4
call fcn.1003f360
mov al, byte [0x100b03fc]
mov byte [0x100b03f8], 1
mov byte [ebp - 0x79], al
test al, al
je 0x1001ba0a
cmp byte [0x100b03f4], 0
jne 0x1001ba25
jmp 0x1001ba13
cmp byte [0x100b03f4], 0
je 0x1001ba25
mov ecx, 0x100b03e4
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100b03f4], al
mov al, byte [0x100b0518]
mov byte [0x100b0519], al
test al, al
je 0x1001ba9c
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x345da
mov dword [ebp - 0x50], 4
push 4
push eax
mov dword [ebp - 0x54], eax
call esi
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
mov eax, dword [0x100b003c]
movups xmm0, xmmword [0x1009db08]
movups xmmword [eax], xmm0
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
sub eax, ecx
add eax, 0x349a1
mov dword [ecx + 0xb], eax
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 0x10
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov edi, dword [0x100cab48]
mov ecx, 0x100b042c
add edi, 0xa14f4
call fcn.10027150
push str.status2
push edi
mov ecx, 0x100b042c
call fcn.1003f2d0
mov al, byte [0x100b0428]
mov byte [0x100b0440], 1
mov byte [ebp - 0x79], al
test al, al
je 0x1001bae0
cmp byte [0x100b043c], 0
jne 0x1001bafb
jmp 0x1001bae9
cmp byte [0x100b043c], 0
je 0x1001bafb
mov ecx, 0x100b042c
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100b043c], al
mov al, byte [0x100b0160]
mov byte [0x100b0161], al
test al, al
je 0x1001bc81
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x288b1
mov dword [ebp - 0x50], 5
push 5
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0xe9
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
mov ecx, dword [0x100b003c]
movups xmm0, xmmword [0x1009d3e8]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [str.QhXXXXU]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x1009d408]
movq qword [ecx + 0x20], xmm0
movzx eax, word [0x1009d410]
mov word [ecx + 0x28], ax
mov eax, dword [0x100b003c]
mov dword [eax + 0x12], str._fold_gui_d_r_n
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 0x2e
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x288bc
mov dword [ecx - 9], eax
mov eax, dword [0x100cab48]
mov ecx, dword [0x100b003c]
sub eax, ecx
add eax, 0x288c6
mov dword [ecx - 4], eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x29b21
mov dword [ebp - 0x50], 5
push 5
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0xe9
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
mov ecx, dword [0x100b003c]
movups xmm0, xmmword [0x1009d4d4]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x1009d4e4]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x1009d4f4]
movups xmmword [ecx + 0x20], xmm0
movzx eax, word [0x1009d504]
mov word [ecx + 0x30], ax
mov al, byte [0x1009d506]
mov byte [ecx + 0x32], al
mov eax, dword [0x100b003c]
mov dword [eax + 5], str._fold_gui
mov eax, dword [0x100cab48]
mov ecx, dword [0x100b003c]
sub eax, ecx
add eax, 0x91896
mov dword [ecx + 0x11], eax
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 0x37
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x29b26
mov dword [ecx - 4], eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b01d4]
mov edi, 0xe890
mov byte [0x100b01d5], al
test al, al
je 0x1001bd56
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x2d5a
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov word [eax], di
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x2911c
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov word [eax], di
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov ecx, dword [0x100b003c]
movups xmm0, xmmword [0x1009edb8]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x1009edc8]
movups xmmword [ecx + 0x10], xmm0
mov ax, word [0x1009edd8]
mov word [ecx + 0x20], ax
mov al, byte [0x1009edda]
mov byte [ecx + 0x22], al
add dword [0x100b003c], 0x23
cmp byte [0x100b018d], 0
je 0x1001be3f
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x64453
mov dword [ebp - 0x50], 4
push 4
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov dword [eax], 0x1009e7b8
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x64495
mov dword [ebp - 0x50], 4
push 4
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov dword [eax], 0x1009e7b8
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x64d4e
mov dword [ebp - 0x50], 4
push 4
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov dword [eax], 0x1009e7b8
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x5d099
mov dword [ebp - 0x50], 4
push 4
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov dword [eax], 0x1009e918
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b0300]
mov byte [0x100b0301], al
test al, al
je 0x1001be81
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x50716
mov dword [ebp - 0x50], 1
push 1
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0x5c
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov edi, dword [0x100cab48]
mov ecx, 0x100cac10
add edi, 0x674d
call fcn.10027150
push 0xe990
push edi
mov ecx, 0x100cac10
call fcn.1003f3f0
mov edi, dword [0x100cab48]
mov ecx, 0x100cac28
mov byte [0x100cac24], 1
add edi, 0x90116
call fcn.10027150
push 0xffffffffffffffeb
push edi
mov ecx, 0x100cac28
call fcn.1003f360
mov al, byte [0x100cac40]
mov byte [0x100cac3c], 1
mov byte [ebp - 0x79], al
test al, al
je 0x1001beef
cmp byte [0x100cac20], 0
jne 0x1001bf0a
jmp 0x1001bef8
cmp byte [0x100cac20], 0
je 0x1001bf0a
mov ecx, 0x100cac10
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100cac20], al
mov al, byte [0x100cac40]
mov byte [ebp - 0x79], al
test al, al
je 0x1001bf21
cmp byte [0x100cac38], 0
jne 0x1001bf3c
jmp 0x1001bf2a
cmp byte [0x100cac38], 0
je 0x1001bf3c
mov ecx, 0x100cac28
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100cac38], al
call fcn.10011210
mov al, byte [0x100b00e0]
mov byte [0x100b00e1], al
test al, al
je 0x1001c032
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x2093b
mov dword [ebp - 0x50], 9
push 9
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0xe852
mov word [eax], cx
mov ecx, 0x10064480
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov eax, dword [ebp - 0x54]
mov byte [eax + 8], 0x10
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x3be8f
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov edi, 0xe890
mov ecx, 0x10064530
mov word [eax], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x2e330
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x10064570
mov word [eax], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
jmp 0x1001c037
mov edi, 0xe890
mov al, byte [0x100b00c4]
mov byte [0x100b00c5], al
test al, al
je 0x1001c188
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x3c203
mov dword [ebp - 0x50], 5
push 5
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x10052b70
mov byte [eax], 0xe8
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x3c233
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x10052b90
mov word [eax], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x3c454
mov dword [ebp - 0x50], 4
push 4
push eax
mov dword [ebp - 0x54], eax
call esi
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
mov eax, dword [0x100b003c]
mov dword [eax], 0xd0248c8d
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov dword [eax], 0x51000000
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov byte [eax], 0xe8
mov eax, 0x10052bc0
mov ecx, dword [0x100b003c]
inc ecx
sub eax, ecx
mov dword [0x100b003c], ecx
sub eax, 4
mov dword [ecx], eax
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov byte [eax], 0xe9
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
inc ecx
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x43b48
mov dword [ecx], eax
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 4
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b03d8]
mov byte [0x100b03d9], al
test al, al
je 0x1001c1dd
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x2d927
mov dword [ebp - 0x50], 8
push 8
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x1005e950
mov dword [eax], 0xe8906650
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 8
mov dword [eax + 4], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b02a8]
mov byte [0x100b02a9], al
test al, al
je 0x1001c270
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x4fee8
mov dword [ebp - 0x50], 5
push 5
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x1005d2b0
mov byte [eax], 0xe9
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x50254
mov dword [ebp - 0x50], 4
push 4
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x1005d2e0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b04f0]
mov byte [0x100b04f1], al
test al, al
je 0x1001c303
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x734eb
mov dword [ebp - 0x50], 0x26
push 0x26
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0xe8
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
mov eax, dword [ebp - 0x54]
mov dword [eax + 0x1f], 0xe8cb2b
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 0x26
mov dword [eax + 0x22], ecx
mov ecx, dword [0x100b003c]
movq xmm0, qword [0x1009eedc]
movq qword [ecx], xmm0
mov eax, dword [0x1009eee4]
mov dword [ecx + 8], eax
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 0xc
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
call fcn.10011b30
call fcn.10011450
mov al, byte [0x100b015c]
mov byte [0x100b015d], al
test al, al
je 0x1001c447
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x54ed5
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov word [eax], di
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov ecx, dword [0x100b003c]
movq xmm0, qword [0x1009ed2c]
movq qword [ecx], xmm0
mov eax, dword [0x1009ed34]
mov dword [ecx + 8], eax
mov ax, word [0x1009ed38]
mov word [ecx + 0xc], ax
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 0xe
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
movaps xmm0, xmmword [0x1009fbc0]
lea ecx, [ebp - 0x4c]
mov eax, dword [0x100cab48]
push ecx
movups xmmword [ebp - 0x48], xmm0
add eax, 0x55574
mov dword [ebp - 0x18], 0x5846c
movaps xmm0, xmmword [0x1009fbd0]
push 0x40
movups xmmword [ebp - 0x38], xmm0
push 0x2ef9
movaps xmm0, xmmword [0x1009fbe0]
push eax
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], 0x2ef9
call esi
xor edx, edx
nop dword [eax + eax]
mov ecx, dword [ebp + edx*4 - 0x48]
inc edx
mov eax, dword [ebp - 0x54]
mov byte [ecx + eax - 0x55574], 0xeb
cmp edx, 0xd
jl 0x1001c3e0
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x55486
mov dword [ebp - 0x50], 0x14
push 0x14
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x8eb
mov word [eax], cx
mov eax, dword [ebp - 0x54]
mov dword [eax + 0x10], 0x1005ce50
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b044c]
mov byte [0x100b044d], al
test al, al
je 0x1001c4a0
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x891fc
mov dword [ebp - 0x50], 0x99f
push 0x99f
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0xeb
mov eax, dword [ebp - 0x54]
mov byte [eax + 0x4cc], 0xeb
mov eax, dword [ebp - 0x54]
mov byte [eax + 0x99e], 0xeb
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b00dc]
mov byte [0x100b00dd], al
test al, al
je 0x1001c56f
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x695ec
mov dword [ebp - 0x50], 0x72a
push 0x72a
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0xeb
mov eax, dword [ebp - 0x54]
mov byte [eax + 0x15c], 0xeb
mov eax, dword [ebp - 0x54]
mov byte [eax + 0x729], 0xeb
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x68b31
mov dword [ebp - 0x50], 7
push 7
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov dword [eax], 0xe89090
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 7
mov dword [eax + 3], ecx
mov eax, dword [0x100b003c]
mov dword [eax], 0x2454894a
mov eax, dword [0x100b003c]
mov dword [eax + 4], 0x1c8d4248
mov eax, dword [0x100b003c]
mov dword [eax + 7], 0xc34d4a1c
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 0xb
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b00c8]
mov byte [0x100b00c9], al
test al, al
je 0x1001c5b1
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x74fe
mov dword [ebp - 0x50], 1
push 1
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0xeb
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b0560]
mov byte [0x100b0561], al
test al, al
je 0x1001c60a
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x76b6
mov dword [ebp - 0x50], 0x191
push 0x191
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0xeb
mov eax, dword [ebp - 0x54]
mov byte [eax + 0xc0], 0xeb
mov eax, dword [ebp - 0x54]
mov byte [eax + 0x190], 0xeb
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
call fcn.100108e0
mov al, byte [0x100b00b0]
mov byte [0x100b00b1], al
test al, al
je 0x1001c6d5
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x5a80a
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x74], 4
mov word [eax], di
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov ecx, dword [0x100b003c]
movups xmm0, xmmword [0x1009d1ec]
movups xmmword [ecx], xmm0
mov eax, dword [0x1009d1fc]
mov dword [ecx + 0x10], eax
mov eax, 0x10071980
mov ecx, dword [0x100b003c]
sub eax, ecx
sub eax, 0xe
mov dword [ecx + 0xa], eax
lea ecx, [ebp - 0x70]
mov eax, dword [0x100cab48]
add dword [0x100b003c], 0x14
add eax, 0x5a92c
push ecx
push 0x40
push 4
push eax
mov dword [ebp - 0x78], eax
call esi
mov eax, dword [ebp - 0x78]
mov ecx, 0x10071a50
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
call esi
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b0450]
mov byte [0x100b0451], al
test al, al
je 0x1001c752
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x4d8e7
mov dword [ebp - 0x50], 5
push 5
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0xe8
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, dword [0x100cab48]
sub ecx, 0x4d8ec
mov dword [eax + 1], ecx
mov ecx, dword [0x100b003c]
movq xmm0, qword [0x1009ed58]
movq qword [ecx], xmm0
mov ax, word [0x1009ed60]
mov word [ecx + 8], ax
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 0xa
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b03e0]
mov byte [0x100b03e1], al
test al, al
je 0x1001c801
mov ecx, dword [0x100cab48]
mov dword [ebp - 0x74], 0x7b9
lea eax, [ecx + 0xd75c0]
add ecx, 0xb78b
mov dword [0x100b9b28], eax
lea eax, [ebp - 0x70]
push eax
push 0x40
push 0x7b9
push ecx
mov dword [ebp - 0x78], ecx
call esi
mov eax, dword [ebp - 0x78]
mov ecx, 0xe850
mov edx, 0x10016760
mov word [eax], cx
mov ecx, edx
mov eax, dword [ebp - 0x78]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov ecx, 0xe850
mov eax, dword [ebp - 0x78]
mov word [eax + 0x503], cx
mov ecx, edx
mov eax, dword [ebp - 0x78]
sub ecx, eax
sub ecx, 0x509
mov dword [eax + 0x505], ecx
mov ecx, 0xe850
mov eax, dword [ebp - 0x78]
mov word [eax + 0x7b3], cx
mov eax, dword [ebp - 0x78]
sub edx, eax
sub edx, 0x7b9
mov dword [eax + 0x7b5], edx
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
call esi
mov al, byte [0x100b00f0]
mov byte [0x100b00f1], al
test al, al
je 0x1001c88a
mov ecx, dword [0x100cab48]
mov dword [ebp - 0x50], 0x457
lea eax, [ecx + 0x1a6ba4]
add ecx, 0x4eae7
mov dword [0x100b9a9c], eax
lea eax, [ebp - 0x4c]
push eax
push 0x40
push 0x457
push ecx
mov dword [ebp - 0x54], ecx
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0xe850
mov edx, 0x10016840
mov word [eax], cx
mov ecx, edx
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov ecx, 0xe850
mov eax, dword [ebp - 0x54]
mov word [eax + 0x451], cx
mov eax, dword [ebp - 0x54]
sub edx, eax
sub edx, 0x457
mov dword [eax + 0x453], edx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b02c0]
mov byte [0x100b02c1], al
test al, al
je 0x1001ca0d
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x15cca
mov dword [ebp - 0x50], 7
push 7
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov dword [eax], 0xe89090
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 7
mov dword [eax + 3], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x15e25
mov dword [ebp - 0x50], 7
push 7
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov dword [eax], 0xe89090
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 7
mov dword [eax + 3], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x15f77
mov dword [ebp - 0x50], 7
push 7
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov dword [eax], 0xe89090
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 7
mov dword [eax + 3], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov ecx, dword [0x100b003c]
movq xmm0, qword [0x1009d948]
mov dword [ebp - 0x50], 6
movq qword [ecx], xmm0
mov eax, dword [0x1009d950]
mov dword [ecx + 8], eax
mov ax, word [0x1009d954]
mov word [ecx + 0xc], ax
mov eax, dword [0x100cab48]
add dword [0x100b003c], 0xe
add eax, 0x156f5
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
push 6
push eax
call esi
mov eax, dword [ebp - 0x54]
mov word [eax], di
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov ecx, dword [0x100b003c]
movq xmm0, qword [0x1009d5f4]
movq qword [ecx], xmm0
mov eax, dword [0x1009d5fc]
mov dword [ecx + 8], eax
mov al, byte [0x1009d600]
mov byte [ecx + 0xc], al
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 0xd
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b0170]
mov edi, 0xe855
mov byte [0x100b0171], al
test al, al
je 0x1001cabd
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x6de4c
mov dword [ebp - 0x50], 0x395
push 0x395
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0xeb
mov eax, dword [ebp - 0x54]
mov byte [eax + 0x15c], 0xeb
mov eax, dword [ebp - 0x54]
mov byte [eax + 0x2b4], 0xeb
mov eax, dword [ebp - 0x54]
mov byte [eax + 0x394], 0xeb
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x6e3fc
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x1005d280
mov word [eax], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b055c]
mov byte [0x100b055d], al
test al, al
je 0x1001cb15
mov ecx, dword [0x100cab48]
mov dword [ebp - 0x50], 4
lea eax, [ecx + 0x16e90]
add ecx, 0x17084
mov dword [0x100b9ab4], eax
lea eax, [ebp - 0x4c]
push eax
push 0x40
push 4
push ecx
mov dword [ebp - 0x54], ecx
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x100729b0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b0158]
mov ecx, 0x100b00f8
mov edi, dword [0x100cab48]
mov byte [0x100b0159], al
add edi, 0x144b0
call fcn.10027150
push 0xe9
push edi
mov ecx, 0x100b00f8
call fcn.1003f360
mov eax, dword [0x100cab48]
mov ecx, 0x1005ea30
sub ecx, eax
mov byte [0x100b010c], 1
mov dword [ebp - 0x70], ecx
mov ecx, 0x100b0110
lea edi, [eax + 0x144b1]
call fcn.10027150
mov eax, dword [ebp - 0x70]
mov ecx, 0x100b0110
add eax, 0xfffebb4b
push eax
push edi
call fcn.1003f2d0
mov edi, dword [0x100cab48]
mov ecx, 0x100b0128
mov byte [0x100b0124], 1
add edi, 0x14571
call fcn.10027150
push 0xe9
push edi
mov ecx, 0x100b0128
call fcn.1003f360
mov eax, dword [0x100cab48]
mov ecx, 0x1005ea80
sub ecx, eax
mov byte [0x100b013c], 1
mov dword [ebp - 0x70], ecx
mov ecx, 0x100b0140
lea edi, [eax + 0x14572]
call fcn.10027150
mov eax, dword [ebp - 0x70]
mov ecx, 0x100b0140
add eax, 0xfffeba8a
push eax
push edi
call fcn.1003f2d0
mov al, byte [0x100b0158]
mov byte [0x100b0154], 1
mov byte [ebp - 0x79], al
test al, al
je 0x1001cc04
cmp byte [0x100b0108], 0
jne 0x1001cc1f
jmp 0x1001cc0d
cmp byte [0x100b0108], 0
je 0x1001cc1f
mov ecx, 0x100b00f8
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100b0108], al
mov al, byte [0x100b0158]
mov byte [ebp - 0x79], al
test al, al
je 0x1001cc36
cmp byte [0x100b0120], 0
jne 0x1001cc51
jmp 0x1001cc3f
cmp byte [0x100b0120], 0
je 0x1001cc51
mov ecx, 0x100b0110
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100b0120], al
mov al, byte [0x100b0158]
mov byte [ebp - 0x79], al
test al, al
je 0x1001cc68
cmp byte [0x100b0138], 0
jne 0x1001cc83
jmp 0x1001cc71
cmp byte [0x100b0138], 0
je 0x1001cc83
mov ecx, 0x100b0128
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100b0138], al
mov al, byte [0x100b0158]
mov byte [ebp - 0x79], al
test al, al
je 0x1001cc9a
cmp byte [0x100b0150], 0
jne 0x1001ccb5
jmp 0x1001cca3
cmp byte [0x100b0150], 0
je 0x1001ccb5
mov ecx, 0x100b0140
call fcn.10008d20
mov al, byte [ebp - 0x79]
mov byte [0x100b0150], al
mov al, byte [0x100b02c4]
mov byte [0x100b02c5], al
test al, al
je 0x1001cd3d
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x3fd46
mov dword [ebp - 0x50], 4
push 4
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x10072130
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x3fd5c
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov ecx, 0x100721a0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov al, byte [0x100b02a4]
mov byte [0x100b02a5], al
test al, al
je 0x1001cf2a
mov ecx, dword [0x100cab48]
mov dword [ebp - 0x74], 0x30
lea eax, [ecx + 0x7df0]
add ecx, 0x9fbb4
mov dword [0x100b9ad4], eax
lea eax, [ebp - 0x70]
push eax
push 0x40
push 0x30
push ecx
mov dword [ebp - 0x78], ecx
call esi
mov eax, dword [ebp - 0x78]
mov dword [eax], 0x10051970
mov eax, dword [ebp - 0x78]
mov dword [eax + 4], 0x100519f0
mov eax, dword [ebp - 0x78]
mov dword [eax + 8], 0x10051a60
mov eax, dword [ebp - 0x78]
mov dword [eax + 0xc], 0x10051bc0
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x10], 0x10051d10
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x14], 0x10051e90
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x18], 0x10051fa0
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x1c], 0x100520b0
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x20], 0x100521b0
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x24], 0x100522e0
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x28], 0x10052440
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x2c], 0x100525e0
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
call esi
mov eax, dword [0x100cab48]
lea edi, [ebp - 0x1c8]
mov ecx, 0x40
mov dword [ebp - 0x50], 0x102
mov esi, 0x1009bba8
lea edx, [ebp - 0x4c]
rep movsd dword es:[edi], dword [esi]
push edx
push 0x40
add eax, 0x7df0
movsw word es:[edi], word [esi]
push 0x102
push eax
mov dword [ebp - 0x54], eax
movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edi, dword [ebp - 0x54]
lea esi, [ebp - 0x1c8]
mov ecx, 0x40
lea eax, [ebp - 0x4c]
rep movsd dword es:[edi], dword [esi]
push eax
movsw word es:[edi], word [esi]
push dword [ebp - 0x4c]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
movups xmm0, xmmword [0x1009bcac]
mov eax, dword [0x100cab48]
mov di, word [0x1009bcd4]
add eax, 0x7f20
movups xmmword [ebp - 0xc0], xmm0
mov dword [ebp - 0x54], eax
movups xmm0, xmmword [0x1009bcbc]
mov dword [ebp - 0x50], 0x68
movups xmmword [ebp - 0x98], xmm0
movq xmm0, qword [0x1009bccc]
movq qword [ebp - 0x78], xmm0
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
push 0x68
push eax
call esi
mov eax, dword [ebp - 0x54]
movups xmm0, xmmword [ebp - 0xc0]
movups xmmword [eax], xmm0
mov eax, dword [ebp - 0x54]
movups xmm0, xmmword [ebp - 0x98]
movups xmmword [eax + 0x10], xmm0
mov eax, dword [ebp - 0x54]
movq xmm0, qword [ebp - 0x78]
movq qword [eax + 0x20], xmm0
mov eax, dword [ebp - 0x54]
movups xmm0, xmmword [ebp - 0x18f]
mov word [eax + 0x28], di
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x157]
movups xmmword [ecx + 0x2a], xmm0
movups xmm0, xmmword [ebp - 0x17f]
movups xmmword [ecx + 0x3a], xmm0
movups xmm0, xmmword [ebp - 0x16f]
movups xmmword [ecx + 0x4a], xmm0
movq xmm0, qword [ebp - 0x15f]
movq qword [ecx + 0x5a], xmm0
mov dword [ecx + 0x62], eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b0178]
mov byte [0x100b0179], al
test al, al
je 0x1001cf96
mov eax, dword [0x100b0038]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
push 0x1c
mov eax, dword [eax]
add eax, 0x2701a
mov dword [ebp - 0x50], 0x1c
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0xe855
mov word [eax], cx
mov ecx, 0x1004fd20
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov ecx, 0x4eb
mov eax, dword [ebp - 0x54]
mov byte [eax + 8], 0xc
mov eax, dword [ebp - 0x54]
mov word [eax + 0x1a], cx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b0458]
mov byte [0x100b0459], al
test al, al
je 0x1001d073
mov ecx, dword [0x100cab48]
mov dword [ebp - 0x60], 4
lea eax, [ecx + 0x4ce20]
add ecx, 0x835bd
mov dword [0x100b9a5c], eax
lea eax, [ebp - 0x5c]
push eax
push 0x40
push 4
push ecx
mov dword [ebp - 0x64], ecx
call esi
mov eax, dword [ebp - 0x64]
mov ecx, 0x10072520
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x68a2d
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov ecx, 0x100726f0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x2be77
mov dword [ebp - 0x50], 5
push 5
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x10072960
mov byte [eax], 0xe9
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b0164]
mov byte [0x100b0165], al
test al, al
je 0x1001d155
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x5fd9
mov dword [ebp - 0x60], 1
push 1
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov byte [eax], 0x90
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x8faab
mov dword [ebp - 0x60], 1
push 1
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov byte [eax], 0x90
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x836b3
mov dword [ebp - 0x60], 1
push 1
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov byte [eax], 0x90
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x84297
mov dword [ebp - 0x60], 1
push 1
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov byte [eax], 0x90
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov al, byte [0x100b00bc]
mov byte [0x100b00bd], al
test al, al
je 0x1001d2e7
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x70]
push ecx
push 0x40
add eax, 0x54ed
mov dword [ebp - 0x74], 0x1a
push 0x1a
push eax
mov dword [ebp - 0x78], eax
call esi
mov eax, dword [ebp - 0x78]
mov ecx, 0x1005d300
mov dword [eax], 0x2474ff04
mov eax, dword [ebp - 0x78]
mov dword [eax + 4], 0xe8555318
mov eax, dword [ebp - 0x78]
sub ecx, eax
sub ecx, 0xc
mov dword [eax + 8], ecx
mov ecx, 0x1feb
mov eax, dword [ebp - 0x78]
mov dword [eax + 0xc], 0x8b0cc483
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x10], 0x24448bf0
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x14], 0x4f388b40
mov eax, dword [ebp - 0x78]
mov word [eax + 0x18], cx
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x70]
push ecx
push 0x40
add eax, 0x83474
mov dword [ebp - 0x74], 0x29
push 0x29
push eax
mov dword [ebp - 0x78], eax
call esi
mov eax, dword [ebp - 0x78]
mov ecx, 0x1005d390
mov dword [eax], 0x2474ff04
mov eax, dword [ebp - 0x78]
mov dword [eax + 4], 0xe85658
mov eax, dword [ebp - 0x78]
sub ecx, eax
sub ecx, 0xb
mov dword [eax + 7], ecx
mov eax, dword [ebp - 0x78]
mov dword [eax + 0xb], 0x38244c8b
mov eax, dword [ebp - 0x78]
mov byte [eax + 0x13], 0xf8
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x15], 0x401f0f01
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x21], 0xff9c951c
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x25], 0xeebffff
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x70]
push ecx
push 0x40
add eax, 0x84081
mov dword [ebp - 0x74], 0x34
push 0x34
push eax
mov dword [ebp - 0x78], eax
call esi
mov eax, dword [ebp - 0x78]
mov byte [eax + 2], 4
mov eax, dword [ebp - 0x78]
mov ecx, 0x1005d3d0
mov dword [eax + 5], 0x2474ff08
mov eax, dword [ebp - 0x78]
mov dword [eax + 9], 0xe85678
mov eax, dword [ebp - 0x78]
sub ecx, eax
sub ecx, 0x10
mov dword [eax + 0xc], ecx
mov ecx, 0xf88b
mov eax, dword [ebp - 0x78]
mov word [eax + 0x10], cx
mov ecx, 0x8eb
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x12], 0x5824548b
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x16], 0x8eb028b
mov eax, dword [ebp - 0x78]
mov word [eax + 0x32], cx
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
call esi
mov al, byte [0x100b0448]
mov byte [0x100b0449], al
test al, al
je 0x1001d3aa
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x3c0d0
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov edi, 0x10072d20
mov ecx, edi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x4392f
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov ecx, edi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x43aea
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
sub edi, eax
sub edi, 4
mov dword [eax], edi
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
call fcn.10012a00
mov al, byte [0x100b02ac]
mov byte [0x100b02ad], al
test al, al
je 0x1001d496
mov ecx, dword [0x100cab48]
mov dword [ebp - 0x50], 0x1b
lea eax, [ecx + 0x1ec728]
mov dword [0x100b9abc], eax
lea eax, [ecx + 0xade4c]
mov dword [0x100b9aa4], eax
add ecx, 0x7cab0
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x54], ecx
push eax
push 0x40
push 0x1b
push ecx
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0xfff
mov word [eax], cx
mov ecx, 0xd74
mov eax, dword [ebp - 0x54]
mov word [eax + 5], cx
mov ecx, 0x1005d8e0
mov eax, dword [ebp - 0x54]
mov byte [eax + 0x14], 0xe8
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 0x19
mov dword [eax + 0x15], ecx
mov ecx, 0xedeb
mov eax, dword [ebp - 0x54]
mov word [eax + 0x19], cx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov ecx, dword [0x100cab48]
mov dword [ebp - 0x60], 4
lea eax, [ecx + 0x7c050]
mov dword [0x100b9a3c], eax
lea eax, [ecx + 0x7c3f0]
mov dword [0x100b9a50], eax
add ecx, 0x797dc
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x64], ecx
push eax
push 0x40
push 4
push ecx
call esi
mov eax, dword [ebp - 0x64]
mov ecx, 0x1005d940
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov al, byte [0x100b0528]
mov byte [0x100b0529], al
test al, al
je 0x1001d573
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x6f585
mov dword [ebp - 0x50], 0x1c
push 0x1c
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov edi, 0x100738a0
mov ecx, edi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
mov ecx, edi
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 0x1c
mov dword [eax + 0x18], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x6f8a3
mov dword [ebp - 0x50], 0x1f
push 0x1f
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, edi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
mov ecx, edi
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 0x1f
mov dword [eax + 0x1b], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x6fbb8
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
sub edi, eax
sub edi, 4
mov dword [eax], edi
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov al, byte [0x100b02cc]
mov byte [0x100b02cd], al
test al, al
je 0x1001d6cc
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x25575
mov dword [ebp - 0x50], 5
push 5
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0xe8
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
mov ecx, dword [0x100b003c]
movq xmm0, qword [0x1009d420]
movq qword [ecx], xmm0
mov eax, dword [0x1009d428]
mov dword [ecx + 8], eax
mov ax, word [0x1009d42c]
mov word [ecx + 0xc], ax
mov eax, dword [0x100b003c]
mov ecx, dword [0x100cab48]
add ecx, 0x13596c
mov dword [eax + 9], ecx
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 0xe
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x4cefd
mov dword [ebp - 0x50], 7
push 7
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x5590
mov word [eax], cx
mov ecx, 0x10052700
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 7
mov dword [eax + 3], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x7d30a
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov ecx, 0x100528a0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x60], 4
push ecx
push 0x40
add eax, 0x7d37a
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov ecx, 0x10052980
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov al, byte [0x100b00ec]
mov byte [0x100b00ed], al
test al, al
je 0x1001d749
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x1b056
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov edi, 0xe890
mov word [eax], di
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov ecx, dword [0x100b003c]
movq xmm0, qword [0x1009dd48]
movq qword [ecx], xmm0
mov ax, word [0x1009dd50]
mov word [ecx + 8], ax
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 0xa
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
jmp 0x1001d74e
mov edi, 0xe890
mov al, byte [0x100b02a0]
mov byte [0x100b02a1], al
test al, al
je 0x1001d873
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x2be69
mov dword [ebp - 0x50], 8
push 8
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x10052a00
mov dword [eax], 0xe8905752
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 8
mov dword [eax + 4], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x2bddf
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov word [eax], di
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov ecx, 0x828b
mov eax, dword [0x100b003c]
mov word [eax], cx
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 2
mov dword [0x100b003c], ecx
add eax, 0x177a70
mov dword [ecx], eax
mov ecx, 0x53b
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov word [eax], cx
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 2
add eax, 0x1e0fa0
mov dword [0x100b003c], ecx
mov dword [ecx], eax
mov ecx, 0x37c
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov word [eax], cx
mov eax, dword [0x100b003c]
add eax, 2
mov dword [0x100b003c], eax
mov dword [eax], 0xc3ffc883
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 4
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
call fcn.10014280
mov ecx, 0x100b0514
call fcn.10014e90
mov al, byte [0x100b0490]
mov byte [0x100b0491], al
test al, al
je 0x1001d97d
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x8cc88
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0xe990
mov word [eax], cx
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov ecx, 0x15ff
mov eax, dword [0x100b003c]
mov word [eax], cx
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 2
add eax, 0x9a1a8
mov dword [0x100b003c], ecx
mov dword [ecx], eax
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov dword [eax], 0xf20f883
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov byte [eax], 0x8c
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
inc ecx
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x8cc8a
mov dword [ecx], eax
mov ecx, 0xe959
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov word [eax], cx
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 2
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x8ccbe
mov dword [ecx], eax
lea eax, [ebp - 0x4c]
add dword [0x100b003c], 4
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b00f4]
mov byte [0x100b00f5], al
test al, al
je 0x1001d9d1
mov eax, dword [0x100b0038]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
push 6
mov eax, dword [eax]
add eax, 0x5551
mov dword [ebp - 0x50], 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x1005cab0
mov word [eax], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b00e4]
mov byte [0x100b00e5], al
test al, al
je 0x1001dac5
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x6d8bc
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov ecx, 0x1005cc00
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x2b18b
mov dword [ebp - 0x50], 7
push 7
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x1005cc40
mov byte [eax], 0xe8
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
mov ecx, 0x62eb
mov eax, dword [ebp - 0x54]
mov word [eax + 5], cx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x2b252
mov dword [ebp - 0x50], 0xa
push 0xa
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x1005cd20
mov byte [eax], 0xe8
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
mov eax, dword [ebp - 0x54]
mov byte [eax + 5], 0xe9
mov eax, dword [ebp - 0x54]
mov dword [eax + 6], 0xc1
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b0298]
mov byte [0x100b0299], al
test al, al
je 0x1001db10
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x32594
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov ecx, 0x1005c9c0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov al, byte [0x100b00b4]
mov byte [0x100b00b5], al
test al, al
je 0x1001db72
mov eax, dword [0x100cab48]
mov byte [eax + 0xa992c], 0x4d
mov eax, dword [0x100cab48]
mov byte [eax + 0xa992e], 1
mov eax, dword [0x100cab48]
mov byte [eax + 0xa9930], 0xd2
mov eax, dword [0x100cab48]
mov byte [eax + 0xa9934], 0x92
mov eax, dword [0x100cab48]
mov byte [eax + 0xa9936], 0xd2
mov eax, dword [0x100cab48]
mov byte [eax + 0xa993c], 0x24
mov eax, dword [0x100cab48]
mov byte [eax + 0xa9940], 1
call fcn.10013b70
mov ecx, dword [0x100cab48]
mov dword [ebp - 0x60], 4
lea eax, [ecx + 0x2cde0]
add ecx, 0x2e804
mov dword [0x100b9af8], eax
lea eax, [ebp - 0x5c]
push eax
push 0x40
push 4
push ecx
mov dword [ebp - 0x64], ecx
call esi
mov eax, dword [ebp - 0x64]
mov dword [eax], 0x10072ae0
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov al, byte [0x100b0550]
mov byte [0x100b0551], al
test al, al
je 0x1001e50d
call fcn.1000c9f0
call fcn.1000cef0
call fcn.10014820
call fcn.100102b0
mov al, byte [0x100b0420]
mov byte [0x100b0421], al
test al, al
je 0x1001dc44
mov ecx, dword [0x100cab48]
mov dword [ebp - 0x60], 4
lea eax, [ecx + 0x6c650]
mov dword [0x100b9a60], eax
lea eax, [ecx + 0x7df0]
mov dword [0x100b9a64], eax
add ecx, 0x50ea3
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x64], ecx
push eax
push 0x40
push 4
push ecx
call esi
mov eax, dword [ebp - 0x64]
mov ecx, 0x1005c6d0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov al, byte [0x100b0444]
mov byte [0x100b0445], al
test al, al
je 0x1001dd3e
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x73882
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov ecx, 0x100664b0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x738ac
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov dword [eax], 0x100664b0
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x73949
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov ecx, 0x100668f0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0x7395b
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov dword [eax], 0x100668f0
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov al, byte [0x100b01e4]
mov byte [0x100b01e5], al
test al, al
je 0x1001dd5b
mov eax, dword [0x100cab48]
mov dword [eax + 0xa5d28], 0x10064760
mov al, byte [0x100b0234]
mov byte [0x100b0235], al
test al, al
je 0x1001ddaa
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x11bc3
mov dword [ebp - 0x50], 0x14
push 0x14
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov dword [eax], 0x10057830
mov eax, dword [ebp - 0x54]
mov dword [eax + 0x10], 0x10057920
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b01f8]
mov byte [0x100b01f9], al
test al, al
je 0x1001dee0
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x5c]
push ecx
push 0x40
add eax, 0xa0750
mov dword [ebp - 0x60], 4
push 4
push eax
mov dword [ebp - 0x64], eax
call esi
mov eax, dword [ebp - 0x64]
mov dword [eax], 0x10057190
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x70]
push ecx
push 0x40
add eax, 0xe5fe
mov dword [ebp - 0x74], 0x4b4
push 0x4b4
push eax
mov dword [ebp - 0x78], eax
call esi
mov eax, dword [ebp - 0x78]
mov dword [eax], 0x100534e0
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x99], 0x10053540
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x13a], 0x100534e0
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x1cf], 0x10053540
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x2c9], 0x10055920
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x366], 0x10055980
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x40c], 0x10055920
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x4b0], 0x10055980
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x11a1c
mov dword [ebp - 0x50], 0x71
push 0x71
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov dword [eax], 0x10055920
mov eax, dword [ebp - 0x54]
mov dword [eax + 0x33], 0x10055980
mov eax, dword [ebp - 0x54]
mov dword [eax + 0x6d], 0x10055920
mov eax, dword [ebp - 0x54]
mov dword [eax + 0xa0], 0x10055980
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b01f4]
mov byte [0x100b01f5], al
test al, al
je 0x1001e086
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0xa2b54
mov dword [ebp - 0x50], 8
push 8
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 1
mov eax, dword [ebp - 0x54]
mov ecx, dword [0x100cab48]
add ecx, 0xa5c80
mov dword [eax + 4], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x23c00
mov dword [ebp - 0x50], 5
push 5
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x1005a3f0
mov byte [eax], 0xe9
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x23b34
mov dword [ebp - 0x50], 0x26
push 0x26
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov byte [eax], 0xe9
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
mov eax, dword [0x100b003c]
mov dword [eax], 0x6864568b
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov dword [eax], 0x102
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov byte [eax], 0xe9
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
inc ecx
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x23b35
mov dword [ecx], eax
mov ecx, 0x1005a480
add dword [0x100b003c], 4
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 0x26
mov dword [eax + 0x22], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x22dd9
mov dword [ebp - 0x50], 0x2d
push 0x2d
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x1005b550
mov word [eax], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov ecx, 0x1005ac30
mov eax, dword [ebp - 0x54]
mov dword [eax + 0x13], 0x1005b5a0
mov eax, dword [ebp - 0x54]
mov word [eax + 0x27], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 0x2d
mov dword [eax + 0x29], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
call fcn.100120f0
mov al, byte [0x100b0228]
mov byte [0x100b0229], al
test al, al
je 0x1001e0f7
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x162d9
mov dword [ebp - 0x50], 0x58
push 0x58
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0xeeb
mov dword [eax], 0x10059fe0
mov eax, dword [ebp - 0x54]
mov word [eax + 0x25], cx
mov eax, dword [ebp - 0x54]
mov dword [eax + 0x3b], 0x1005a070
mov eax, dword [ebp - 0x54]
mov dword [eax + 0x4b], 0x1005a1f0
mov eax, dword [ebp - 0x54]
mov byte [eax + 0x57], 0x18
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b0230]
mov byte [0x100b0231], al
test al, al
je 0x1001e19f
call fcn.10005d10
shr eax, 0x10
test al, 1
je 0x1001e19f
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x70]
push ecx
push 0x40
add eax, 0x12e52
mov dword [ebp - 0x74], 0xab
push 0xab
push eax
mov dword [ebp - 0x78], eax
call esi
mov eax, dword [ebp - 0x78]
mov dword [eax], 0x10057ed0
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x18], 0x10058710
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x28], 0x100588d0
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x41], 0x10058310
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x51], 0x10058710
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x61], 0x10058f00
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x88], 0x100594f0
mov eax, dword [ebp - 0x78]
mov dword [eax + 0xa7], 0x10059b60
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
call esi
call fcn.1000f630
test al, al
je 0x1001e4f8
cmp byte [0x100b01fd], 0
je 0x1001e50d
mov al, byte [0x100b023c]
mov byte [0x100b023d], al
test al, al
je 0x1001e20b
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x74a62
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x1006c480
mov word [eax], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b01e8]
mov byte [0x100b01e9], al
test al, al
je 0x1001e25d
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x1f154
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x10068620
mov word [eax], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b03dc]
mov byte [0x100b03dd], al
test al, al
je 0x1001e386
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0xb5c1
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x1006cb30
mov word [eax], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0xbb39
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov word [eax], di
mov edi, 0x1006ce10
mov eax, dword [ebp - 0x54]
mov ecx, edi
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0xbb4f
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0xe890
mov word [eax], cx
mov ecx, 0x1006d080
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0xc1ec
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0xe890
mov word [eax], cx
mov eax, dword [ebp - 0x54]
sub edi, eax
sub edi, 6
mov dword [eax + 2], edi
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b01ec]
mov byte [0x100b01ed], al
test al, al
je 0x1001e3f6
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x4e8c0
mov dword [ebp - 0x50], 0x16
push 0x16
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov edi, 0xe890
mov ecx, 0x100696e0
mov word [eax], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov ecx, 0x100699d0
mov eax, dword [ebp - 0x54]
mov word [eax + 0x10], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 0x16
mov dword [eax + 0x12], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
jmp 0x1001e3fb
mov edi, 0xe890
mov al, byte [0x100b0454]
mov byte [0x100b0455], al
test al, al
je 0x1001e45c
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
push 6
mov dword [eax + 0xa00a0], 0x10067410
mov eax, dword [0x100cab48]
add eax, 0xcae6
mov dword [ebp - 0x50], 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x10067c00
mov word [eax], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov al, byte [0x100b022c]
mov byte [0x100b022d], al
test al, al
je 0x1001e50d
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x12761
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x1006bbf0
mov word [eax], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x4c]
push ecx
push 0x40
add eax, 0x12786
mov dword [ebp - 0x50], 6
push 6
push eax
mov dword [ebp - 0x54], eax
call esi
mov eax, dword [ebp - 0x54]
mov ecx, 0x1006beb0
mov word [eax], di
mov eax, dword [ebp - 0x54]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call esi
jmp 0x1001e50d
push 0x2030
mov edx, 0x2332
lea ecx, [ebp - 0x74]
call fcn.10006160
add esp, 4
call fcn.1000d390
cmp byte [0x100b016d], 0
je 0x1001e5f3
call fcn.1000e990
mov al, byte [0x100b01dc]
mov byte [0x100b01dd], al
test al, al
je 0x1001e5f3
mov edi, dword [0x100cab48]
lea eax, [ebp - 0x5c]
push eax
push 0x40
add edi, 0x252d88
mov dword [ebp - 0x60], 0x12
push 0x12
push edi
mov dword [ebp - 0x64], edi
call esi
mov eax, 0x33
mov word [edi + 8], ax
mov eax, 0x1b
mov word [edi + 0xc], ax
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov edi, dword [0x100cab48]
lea eax, [ebp - 0x5c]
push eax
push 0x40
add edi, 0x252da4
mov dword [ebp - 0x60], 0x12
push 0x12
push edi
mov dword [ebp - 0x64], edi
call esi
mov eax, 0x4e
mov word [edi + 8], ax
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
mov edi, dword [0x100cab48]
lea eax, [ebp - 0x5c]
push eax
push 0x40
add edi, 0x252dc0
mov dword [ebp - 0x60], 0x12
push 0x12
push edi
mov dword [ebp - 0x64], edi
call esi
mov eax, 0x55
mov word [edi + 8], ax
mov eax, 0x1b
mov word [edi + 0xc], ax
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call esi
push 0x100b0478
mov ecx, 0x100b9a30
call fcn.10018980
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1007491a
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret