Function at 0x10007b60
Capabilities:
Contain obfuscated stackstrings
Delete file
Get common file path
Parse pe header
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100fcd5e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1458
call fcn.100ec810
push ebx
push esi
push edi
lea edi, [ebp - 0x1468]
mov ecx, 0x516
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x18], 0
mov ecx, 0x1015b920
call fcn.1000d3c0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x1000b146
lea ecx, [ebp - 0x28]
call fcn.1000b2d0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.1000b990
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x48]
call fcn.1000b410
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x58]
call fcn.1000ba70
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x68]
call fcn.1000b4f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x78]
call fcn.1000bbd0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x88]
call fcn.1000b880
mov byte [ebp - 4], 6
push 0
push str.Excel.Application
lea ecx, [ebp - 0x28]
call sub.MFC70D.DLL_Ordinal_2047
test eax, eax
jne 0x10007c45
push 0
push 0
push 0x10103610
call sub.MFC70D.DLL_Ordinal_1383
mov esi, esp
push 1
call dword [sym.imp.MSVCR70D.dll_exit]
cmp esi, esp
call fcn.100ec680
push 0
lea ecx, [ebp - 0x28]
call fcn.1000b3b0
mov esi, esp
push 0x104
lea eax, [ebp - 0x198]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
cmp esi, esp
call fcn.100ec680
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x1a4]
call fcn.100031e0
mov byte [ebp - 4], 7
push str._standard
lea ecx, [ebp - 0x1a4]
call fcn.1000c140
push 1
lea ecx, [ebp - 0x28]
call fcn.1000b320
push eax
lea ecx, [ebp - 0x38]
call sub.MFC70D.DLL_Ordinal_1667
lea ecx, [ebp - 0x1a4]
call fcn.100032c0
push eax
lea ecx, [ebp - 0x500]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x4e8], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x4e4], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x4dc], eax
push 1
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x4e8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x4e4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x4e0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x4dc]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x38]
call fcn.1000b9e0
push eax
lea ecx, [ebp - 0x48]
call sub.MFC70D.DLL_Ordinal_1667
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x500]
call fcn.10006b10
push 1
lea ecx, [ebp - 0x48]
call fcn.1000b460
push eax
lea ecx, [ebp - 0x58]
call sub.MFC70D.DLL_Ordinal_1667
push 0x101035f4
lea ecx, [ebp - 0x530]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x518], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x514], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x510], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x50c], eax
push 1
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x518]
mov dword [ecx], edx
mov eax, dword [ebp - 0x514]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x510]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x50c]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x58]
call fcn.1000bb40
push eax
lea ecx, [ebp - 0x68]
call sub.MFC70D.DLL_Ordinal_1667
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x530]
call fcn.10006b10
mov dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x18]
and eax, 0x80000007
jns 0x10007e08
dec eax
or eax, 0xfffffff8
inc eax
test eax, eax
jne 0x10007e20
mov eax, dword [ebp - 0x18]
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0x1b0], eax
jmp 0x10007e35
mov eax, dword [ebp - 0x18]
cdq
and edx, 7
add eax, edx
sar eax, 3
add eax, 1
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1bc], 0
jmp 0x10007e50
mov eax, dword [ebp - 0x1bc]
add eax, 1
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1b0]
sub eax, 1
cmp dword [ebp - 0x1bc], eax
jge 0x10007f55
push 1
lea ecx, [ebp - 0x68]
call sub.MFC70D.DLL_Ordinal_1024
push eax
lea ecx, [ebp - 0x560]
call fcn.100069f0
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x548], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x544], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x540], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x53c], eax
mov ecx, dword [0x10183bd8]
mov dword [ebp - 0x578], ecx
mov edx, dword [0x10183bdc]
mov dword [ebp - 0x574], edx
mov eax, dword [0x10183be0]
mov dword [ebp - 0x570], eax
mov ecx, dword [0x10183be4]
mov dword [ebp - 0x56c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x548]
mov dword [edx], eax
mov ecx, dword [ebp - 0x544]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x540]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x53c]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x578]
mov dword [edx], eax
mov ecx, dword [ebp - 0x574]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x570]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x56c]
mov dword [edx + 0xc], ecx
lea ecx, [ebp - 0x68]
call fcn.1000b590
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x560]
call fcn.10006b10
jmp 0x10007e41
lea ecx, [ebp - 0x1c8]
call fcn.10003140
mov byte [ebp - 4], 0xb
push 0x101035f4
lea ecx, [ebp - 0x5a8]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x590], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x58c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x588], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x584], eax
push 1
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x590]
mov dword [ecx], edx
mov eax, dword [ebp - 0x58c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x588]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x584]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x58]
call fcn.1000bb40
push eax
lea ecx, [ebp - 0x68]
call sub.MFC70D.DLL_Ordinal_1667
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x5a8]
call fcn.10006b10
mov dword [ebp - 0x1bc], 0
jmp 0x10008018
mov eax, dword [ebp - 0x1bc]
add eax, 1
mov dword [ebp - 0x1bc], eax
lea ecx, [ebp - 0x58]
call fcn.1000bac0
sub eax, 3
cmp dword [ebp - 0x1bc], eax
jge 0x10008098
lea ecx, [ebp - 0x68]
call fcn.1000b650
push eax
lea ecx, [ebp - 0x5b8]
call fcn.1000b540
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x5b8]
push eax
lea ecx, [ebp - 0x68]
call fcn.1000be50
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x5b8]
call fcn.1000bd90
mov eax, dword [ebp - 0x1bc]
add eax, 2
push eax
push 0x101035e0
lea ecx, [ebp - 0x1c8]
push ecx
call fcn.10002610
add esp, 0xc
lea ecx, [ebp - 0x1c8]
call fcn.100032c0
push eax
lea ecx, [ebp - 0x68]
call fcn.1000b5f0
jmp 0x10008009
mov dword [ebp - 0x1d4], 0
jmp 0x100080b3
mov eax, dword [ebp - 0x1d4]
add eax, 1
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x1b0]
jge 0x1000ab60
mov eax, dword [ebp - 0x1d4]
add eax, 1
push eax
push 0x101035e0
lea ecx, [ebp - 0x1c8]
push ecx
call fcn.10002610
add esp, 0xc
lea ecx, [ebp - 0x1c8]
call fcn.100032c0
push eax
lea ecx, [ebp - 0x5e8]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x5d0], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x5cc], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x5c8], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x5c4], eax
push 1
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x5d0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x5cc]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x5c8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x5c4]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x58]
call fcn.1000bb40
push eax
lea ecx, [ebp - 0x68]
call sub.MFC70D.DLL_Ordinal_1667
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x5e8]
call fcn.10006b10
push 1
lea ecx, [ebp - 0x68]
call fcn.1000b6e0
push eax
lea ecx, [ebp - 0x88]
call sub.MFC70D.DLL_Ordinal_1667
push 1
lea ecx, [ebp - 0x68]
call fcn.1000b770
push eax
lea ecx, [ebp - 0x78]
call sub.MFC70D.DLL_Ordinal_1667
push 0x10102e12
lea ecx, [ebp - 0x1e0]
call fcn.100031e0
mov byte [ebp - 4], 0xf
push 0x1015b964
push 0x101035d4
lea eax, [ebp - 0x5f4]
push eax
call fcn.1000c2a0
add esp, 0xc
mov dword [ebp - 0x1454], eax
mov ecx, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], ecx
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x1458]
push edx
lea ecx, [ebp - 0x1e0]
call fcn.100024c0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x5f4]
call fcn.10003280
lea ecx, [ebp - 0x1e0]
call fcn.100032c0
push eax
lea ecx, [ebp - 0x628]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x610], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x60c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x608], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x604], eax
push 3
push 1
lea ecx, [ebp - 0x658]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0x640], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x63c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x638], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x634], ecx
push 3
push 2
lea ecx, [ebp - 0x688]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0x670], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x66c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x668], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x664], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x610]
mov dword [eax], ecx
mov edx, dword [ebp - 0x60c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x608]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x604]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x640]
mov dword [eax], ecx
mov edx, dword [ebp - 0x63c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x638]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x634]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x670]
mov dword [eax], ecx
mov edx, dword [ebp - 0x66c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x668]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x664]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x688]
call fcn.10006b10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x658]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x628]
call fcn.10006b10
push 0x1015b968
push 0x101035c8
lea eax, [ebp - 0x694]
push eax
call fcn.1000c2a0
add esp, 0xc
mov dword [ebp - 0x1454], eax
mov ecx, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], ecx
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x1458]
push edx
lea ecx, [ebp - 0x1e0]
call fcn.100024c0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x694]
call fcn.10003280
lea ecx, [ebp - 0x1e0]
call fcn.100032c0
push eax
lea ecx, [ebp - 0x6c8]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x6b0], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x6ac], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x6a8], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x6a4], eax
push 3
push 6
lea ecx, [ebp - 0x6f8]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0x6e0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x6dc], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x6d8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x6d4], ecx
push 3
push 2
lea ecx, [ebp - 0x728]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0x710], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x70c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x708], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x704], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x6b0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x6ac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x6a8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x6a4]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x6e0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x6dc]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x6d8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x6d4]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x710]
mov dword [eax], ecx
mov edx, dword [ebp - 0x70c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x708]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x704]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x728]
call fcn.10006b10
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x6f8]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6c8]
call fcn.10006b10
mov eax, dword [ebp - 0x1d4]
add eax, 1
push eax
mov ecx, dword [ebp - 0x1b0]
push ecx
push 0x101035b8
lea edx, [ebp - 0x1e0]
push edx
call fcn.10002610
add esp, 0x10
lea ecx, [ebp - 0x1e0]
call fcn.100032c0
push eax
lea ecx, [ebp - 0x758]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x740], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x73c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x738], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x734], eax
push 3
push 9
lea ecx, [ebp - 0x788]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0x770], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x76c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x768], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x764], ecx
push 3
push 2
lea ecx, [ebp - 0x7b8]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0x7a0], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x79c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x798], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x794], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x740]
mov dword [eax], ecx
mov edx, dword [ebp - 0x73c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x738]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x734]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x770]
mov dword [eax], ecx
mov edx, dword [ebp - 0x76c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x768]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x764]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x7a0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x79c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x798]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x794]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x7b8]
call fcn.10006b10
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x788]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x758]
call fcn.10006b10
mov dword [ebp - 0x1ec], 0
jmp 0x1000877d
mov eax, dword [ebp - 0x1ec]
add eax, 1
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 8
jge 0x100097fe
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1ec]
lea edx, [ecx + eax*8]
cmp edx, dword [ebp - 0x18]
jge 0x100097fe
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1ec]
lea edx, [ecx + eax*8]
push edx
mov ecx, 0x1015b920
call fcn.1000d560
mov ecx, eax
call fcn.100032c0
push eax
lea ecx, [ebp - 0x7e8]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x7d0], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x7cc], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x7c8], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x7c4], eax
push 3
push 1
lea ecx, [ebp - 0x818]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0x800], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x7fc], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x7f8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x7f4], ecx
push 3
mov edx, dword [ebp - 0x1ec]
lea eax, [edx + edx + 4]
push eax
lea ecx, [ebp - 0x848]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov ecx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], ecx
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x1468]
mov eax, dword [edx]
mov dword [ebp - 0x830], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x82c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x828], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x824], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x7d0]
mov dword [edx], eax
mov ecx, dword [ebp - 0x7cc]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x7c8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x7c4]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x800]
mov dword [edx], eax
mov ecx, dword [ebp - 0x7fc]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x7f8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x7f4]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x830]
mov dword [edx], eax
mov ecx, dword [ebp - 0x82c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x828]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x824]
mov dword [edx + 0xc], ecx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x848]
call fcn.10006b10
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x818]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x7e8]
call fcn.10006b10
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1ec]
lea edx, [ecx + eax*8]
push edx
mov ecx, 0x1015b920
call fcn.1000d560
add eax, 4
mov ecx, eax
call fcn.100032c0
push eax
lea ecx, [ebp - 0x878]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x860], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x85c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x858], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x854], eax
push 3
push 2
lea ecx, [ebp - 0x8a8]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0x890], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x88c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x888], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x884], ecx
push 3
mov edx, dword [ebp - 0x1ec]
lea eax, [edx + edx + 4]
push eax
lea ecx, [ebp - 0x8d8]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov ecx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], ecx
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x1468]
mov eax, dword [edx]
mov dword [ebp - 0x8c0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x8bc], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x8b8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x8b4], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x860]
mov dword [edx], eax
mov ecx, dword [ebp - 0x85c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x858]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x854]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x890]
mov dword [edx], eax
mov ecx, dword [ebp - 0x88c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x888]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x884]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x8c0]
mov dword [edx], eax
mov ecx, dword [ebp - 0x8bc]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x8b8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x8b4]
mov dword [edx + 0xc], ecx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x8d8]
call fcn.10006b10
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x8a8]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x878]
call fcn.10006b10
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1ec]
lea edx, [ecx + eax*8]
push edx
mov ecx, 0x1015b920
call fcn.1000d560
add eax, 8
mov ecx, eax
call fcn.100032c0
push eax
lea ecx, [ebp - 0x908]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x8f0], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x8ec], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x8e8], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x8e4], eax
push 3
push 3
lea ecx, [ebp - 0x938]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0x920], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x91c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x918], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x914], ecx
push 3
mov edx, dword [ebp - 0x1ec]
lea eax, [edx + edx + 4]
push eax
lea ecx, [ebp - 0x968]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov ecx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], ecx
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x1468]
mov eax, dword [edx]
mov dword [ebp - 0x950], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x94c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x948], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x944], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x8f0]
mov dword [edx], eax
mov ecx, dword [ebp - 0x8ec]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x8e8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x8e4]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x920]
mov dword [edx], eax
mov ecx, dword [ebp - 0x91c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x918]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x914]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x950]
mov dword [edx], eax
mov ecx, dword [ebp - 0x94c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x948]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x944]
mov dword [edx + 0xc], ecx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x968]
call fcn.10006b10
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x938]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x908]
call fcn.10006b10
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1ec]
lea edx, [ecx + eax*8]
push edx
mov ecx, 0x1015b920
call fcn.1000d560
add eax, 0xc
mov ecx, eax
call fcn.100032c0
push eax
lea ecx, [ebp - 0x998]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x980], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x97c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x978], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x974], eax
push 3
push 4
lea ecx, [ebp - 0x9c8]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0x9b0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x9ac], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x9a8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x9a4], ecx
push 3
mov edx, dword [ebp - 0x1ec]
lea eax, [edx + edx + 4]
push eax
lea ecx, [ebp - 0x9f8]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov ecx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], ecx
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x1468]
mov eax, dword [edx]
mov dword [ebp - 0x9e0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x9dc], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x9d8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x9d4], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x980]
mov dword [edx], eax
mov ecx, dword [ebp - 0x97c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x978]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x974]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x9b0]
mov dword [edx], eax
mov ecx, dword [ebp - 0x9ac]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x9a8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x9a4]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x9e0]
mov dword [edx], eax
mov ecx, dword [ebp - 0x9dc]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x9d8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x9d4]
mov dword [edx + 0xc], ecx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x9f8]
call fcn.10006b10
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x9c8]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x998]
call fcn.10006b10
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1ec]
lea edx, [ecx + eax*8]
push edx
mov ecx, 0x1015b920
call fcn.1000d560
add eax, 0x10
mov ecx, eax
call fcn.100032c0
push eax
lea ecx, [ebp - 0xa28]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0xa10], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xa0c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0xa08], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xa04], eax
push 3
push 5
lea ecx, [ebp - 0xa58]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0xa40], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xa3c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xa38], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xa34], ecx
push 3
mov edx, dword [ebp - 0x1ec]
lea eax, [edx + edx + 4]
push eax
lea ecx, [ebp - 0xa88]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov ecx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], ecx
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x1468]
mov eax, dword [edx]
mov dword [ebp - 0xa70], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xa6c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xa68], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xa64], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xa10]
mov dword [edx], eax
mov ecx, dword [ebp - 0xa0c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xa08]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa04]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xa40]
mov dword [edx], eax
mov ecx, dword [ebp - 0xa3c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xa38]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa34]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xa70]
mov dword [edx], eax
mov ecx, dword [ebp - 0xa6c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xa68]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa64]
mov dword [edx + 0xc], ecx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xa88]
call fcn.10006b10
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xa58]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xa28]
call fcn.10006b10
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1ec]
lea edx, [ecx + eax*8]
push edx
mov ecx, 0x1015b920
call fcn.1000d560
add eax, 0x14
mov ecx, eax
call fcn.100032c0
push eax
lea ecx, [ebp - 0xab8]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0xaa0], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xa9c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0xa98], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xa94], eax
push 3
push 6
lea ecx, [ebp - 0xae8]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0xad0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xacc], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xac8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xac4], ecx
push 3
mov edx, dword [ebp - 0x1ec]
lea eax, [edx + edx + 4]
push eax
lea ecx, [ebp - 0xb18]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov ecx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], ecx
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x1468]
mov eax, dword [edx]
mov dword [ebp - 0xb00], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xafc], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xaf8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xaf4], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xaa0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xa9c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xa98]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa94]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xad0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xacc]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xac8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xac4]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xb00]
mov dword [edx], eax
mov ecx, dword [ebp - 0xafc]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xaf8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xaf4]
mov dword [edx + 0xc], ecx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xb18]
call fcn.10006b10
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xae8]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xab8]
call fcn.10006b10
push 0x10102e12
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1ec]
lea edx, [ecx + eax*8]
push edx
mov ecx, 0x1015b920
call fcn.1000d560
add eax, 0x1c
push eax
call fcn.1000c3a0
add esp, 8
movzx eax, al
test eax, eax
je 0x100092b6
push 0x42340000
push 0x42340000
mov eax, dword [ebp - 0x1ec]
imul eax, eax, 0x2d
add eax, 0x50
mov dword [ebp - 0x1454], eax
fild dword [ebp - 0x1454]
push ecx
fstp dword [esp]
push 0x43d70000
push 1
push 0
mov ecx, dword [ebp - 0x1d4]
mov edx, dword [ebp - 0x1ec]
lea eax, [edx + ecx*8]
push eax
mov ecx, 0x1015b920
call fcn.1000d560
add eax, 0x1c
mov ecx, eax
call fcn.100032c0
push eax
lea ecx, [ebp - 0x88]
call fcn.1000b8d0
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1ec]
lea edx, [ecx + eax*8]
push edx
mov ecx, 0x1015b920
call fcn.1000d560
add eax, 0x24
mov ecx, eax
call fcn.100032c0
push eax
lea ecx, [ebp - 0xb48]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0xb30], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xb2c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0xb28], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xb24], eax
push 3
push 8
lea ecx, [ebp - 0xb78]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0xb60], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xb5c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xb58], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xb54], ecx
push 3
mov edx, dword [ebp - 0x1ec]
lea eax, [edx + edx + 4]
push eax
lea ecx, [ebp - 0xba8]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov ecx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], ecx
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x1468]
mov eax, dword [edx]
mov dword [ebp - 0xb90], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xb8c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xb88], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xb84], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xb30]
mov dword [edx], eax
mov ecx, dword [ebp - 0xb2c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xb28]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xb24]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xb60]
mov dword [edx], eax
mov ecx, dword [ebp - 0xb5c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xb58]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xb54]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xb90]
mov dword [edx], eax
mov ecx, dword [ebp - 0xb8c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xb88]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xb84]
mov dword [edx + 0xc], ecx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xba8]
call fcn.10006b10
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb78]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xb48]
call fcn.10006b10
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1ec]
lea edx, [ecx + eax*8]
push edx
mov ecx, 0x1015b920
call fcn.1000d560
add eax, 0x28
mov ecx, eax
call fcn.100032c0
push eax
lea ecx, [ebp - 0xbd8]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0xbc0], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xbbc], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0xbb8], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xbb4], eax
push 3
push 9
lea ecx, [ebp - 0xc08]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0xbf0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xbec], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xbe8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xbe4], ecx
push 3
mov edx, dword [ebp - 0x1ec]
lea eax, [edx + edx + 4]
push eax
lea ecx, [ebp - 0xc38]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov ecx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], ecx
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x1468]
mov eax, dword [edx]
mov dword [ebp - 0xc20], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xc1c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xc18], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xc14], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xbc0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xbbc]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xbb8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xbb4]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xbf0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xbec]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xbe8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xbe4]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xc20]
mov dword [edx], eax
mov ecx, dword [ebp - 0xc1c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xc18]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xc14]
mov dword [edx + 0xc], ecx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xc38]
call fcn.10006b10
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xc08]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xbd8]
call fcn.10006b10
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1ec]
lea edx, [ecx + eax*8]
push edx
mov ecx, 0x1015b920
call fcn.1000d560
add eax, 0x20
mov ecx, eax
call fcn.100032c0
push eax
lea ecx, [ebp - 0xc68]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0xc50], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xc4c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0xc48], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xc44], eax
push 3
push 0xa
lea ecx, [ebp - 0xc98]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0xc80], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xc7c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xc78], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xc74], ecx
push 3
mov edx, dword [ebp - 0x1ec]
lea eax, [edx + edx + 4]
push eax
lea ecx, [ebp - 0xcc8]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov ecx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], ecx
mov byte [ebp - 4], 0x35
mov edx, dword [ebp - 0x1468]
mov eax, dword [edx]
mov dword [ebp - 0xcb0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xcac], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xca8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xca4], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xc50]
mov dword [edx], eax
mov ecx, dword [ebp - 0xc4c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xc48]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xc44]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xc80]
mov dword [edx], eax
mov ecx, dword [ebp - 0xc7c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xc78]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xc74]
mov dword [edx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xcb0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xcac]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xca8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xca4]
mov dword [edx + 0xc], ecx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xcc8]
call fcn.10006b10
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xc98]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xc68]
call fcn.10006b10
jmp 0x1000876e
push 0x101035ac
lea ecx, [ebp - 0xcf8]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0xce0], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xcdc], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0xcd8], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xcd4], eax
push 1
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xce0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xcdc]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xcd8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xcd4]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x58]
call fcn.1000bb40
push eax
lea ecx, [ebp - 0x68]
call sub.MFC70D.DLL_Ordinal_1667
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xcf8]
call fcn.10006b10
push 1
lea ecx, [ebp - 0x68]
call fcn.1000b6e0
push eax
lea ecx, [ebp - 0x88]
call sub.MFC70D.DLL_Ordinal_1667
push 1
lea ecx, [ebp - 0x68]
call fcn.1000b770
push eax
lea ecx, [ebp - 0x78]
call sub.MFC70D.DLL_Ordinal_1667
mov ecx, 0x1015b964
call fcn.100032c0
push eax
lea ecx, [ebp - 0xd28]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0xd10], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xd0c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0xd08], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xd04], eax
push 3
push 1
lea ecx, [ebp - 0xd58]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0xd40], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xd3c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xd38], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xd34], ecx
push 3
push 3
lea ecx, [ebp - 0xd88]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x39
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0xd70], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0xd6c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0xd68], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0xd64], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xd10]
mov dword [eax], ecx
mov edx, dword [ebp - 0xd0c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xd08]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xd04]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xd40]
mov dword [eax], ecx
mov edx, dword [ebp - 0xd3c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xd38]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xd34]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xd70]
mov dword [eax], ecx
mov edx, dword [ebp - 0xd6c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xd68]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xd64]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0xd88]
call fcn.10006b10
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xd58]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xd28]
call fcn.10006b10
mov ecx, 0x1015b960
call fcn.100032c0
push eax
lea ecx, [ebp - 0xdb8]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0xda0], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xd9c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0xd98], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xd94], eax
push 3
push 5
lea ecx, [ebp - 0xde8]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x3b
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0xdd0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xdcc], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xdc8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xdc4], ecx
push 3
push 8
lea ecx, [ebp - 0xe18]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x3c
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0xe00], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0xdfc], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0xdf8], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0xdf4], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xda0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xd9c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xd98]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xd94]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xdd0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xdcc]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xdc8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xdc4]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xe00]
mov dword [eax], ecx
mov edx, dword [ebp - 0xdfc]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xdf8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xdf4]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xe18]
call fcn.10006b10
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0xde8]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xdb8]
call fcn.10006b10
mov ecx, 0x1015b968
call fcn.100032c0
push eax
lea ecx, [ebp - 0xe48]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0xe30], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xe2c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0xe28], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xe24], eax
push 3
push 5
lea ecx, [ebp - 0xe78]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0xe60], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xe5c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xe58], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xe54], ecx
push 3
push 0xb
lea ecx, [ebp - 0xea8]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x3f
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0xe90], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0xe8c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0xe88], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0xe84], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xe30]
mov dword [eax], ecx
mov edx, dword [ebp - 0xe2c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xe28]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xe24]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xe60]
mov dword [eax], ecx
mov edx, dword [ebp - 0xe5c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xe58]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xe54]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xe90]
mov dword [eax], ecx
mov edx, dword [ebp - 0xe8c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xe88]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xe84]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0xea8]
call fcn.10006b10
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0xe78]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xe48]
call fcn.10006b10
mov ecx, 0x1015b978
call fcn.100032c0
push eax
lea ecx, [ebp - 0xed8]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0xec0], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xebc], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0xeb8], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xeb4], eax
push 3
push 1
lea ecx, [ebp - 0xf08]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0xef0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xeec], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xee8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xee4], ecx
push 3
push 0x2c
lea ecx, [ebp - 0xf38]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x42
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0xf20], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0xf1c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0xf18], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0xf14], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xec0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xebc]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xeb8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xeb4]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xef0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xeec]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xee8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xee4]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xf20]
mov dword [eax], ecx
mov edx, dword [ebp - 0xf1c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xf18]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xf14]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xf38]
call fcn.10006b10
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0xf08]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xed8]
call fcn.10006b10
push 0x1010359c
lea ecx, [ebp - 0xf68]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0xf50], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xf4c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0xf48], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xf44], eax
push 1
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xf50]
mov dword [ecx], edx
mov eax, dword [ebp - 0xf4c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xf48]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xf44]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x58]
call fcn.1000bb40
push eax
lea ecx, [ebp - 0x68]
call sub.MFC70D.DLL_Ordinal_1667
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xf68]
call fcn.10006b10
push 1
lea ecx, [ebp - 0x68]
call fcn.1000b6e0
push eax
lea ecx, [ebp - 0x88]
call sub.MFC70D.DLL_Ordinal_1667
push 1
lea ecx, [ebp - 0x68]
call fcn.1000b770
push eax
lea ecx, [ebp - 0x78]
call sub.MFC70D.DLL_Ordinal_1667
mov ecx, 0x1015b960
call fcn.100032c0
push eax
lea ecx, [ebp - 0xf98]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0xf80], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xf7c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0xf78], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xf74], eax
push 3
push 7
lea ecx, [ebp - 0xfc8]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x45
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0xfb0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xfac], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0xfa8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xfa4], ecx
push 3
push 8
lea ecx, [ebp - 0xff8]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x46
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0xfe0], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0xfdc], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0xfd8], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0xfd4], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xf80]
mov dword [eax], ecx
mov edx, dword [ebp - 0xf7c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xf78]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xf74]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xfb0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xfac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xfa8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xfa4]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xfe0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xfdc]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xfd8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xfd4]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0xff8]
call fcn.10006b10
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0xfc8]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xf98]
call fcn.10006b10
mov ecx, 0x1015b968
call fcn.100032c0
push eax
lea ecx, [ebp - 0x1028]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x1010], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x100c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1008], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x1004], eax
push 3
push 7
lea ecx, [ebp - 0x1058]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x48
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0x1040], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x103c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x1038], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x1034], ecx
push 3
push 0xa
lea ecx, [ebp - 0x1088]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x49
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0x1070], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x106c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1068], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x1064], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1010]
mov dword [eax], ecx
mov edx, dword [ebp - 0x100c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1008]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1004]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1040]
mov dword [eax], ecx
mov edx, dword [ebp - 0x103c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1038]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1034]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1070]
mov dword [eax], ecx
mov edx, dword [ebp - 0x106c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1068]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1064]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x1088]
call fcn.10006b10
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1058]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1028]
call fcn.10006b10
mov ecx, 0x1015b964
call fcn.100032c0
push eax
lea ecx, [ebp - 0x10b8]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x10a0], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x109c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1098], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x1094], eax
push 3
push 5
lea ecx, [ebp - 0x10e8]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x4b
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0x10d0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x10cc], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x10c8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x10c4], ecx
push 3
push 0xe
lea ecx, [ebp - 0x1118]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x4c
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0x1100], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x10fc], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10f8], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x10f4], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x10a0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x109c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1098]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1094]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x10d0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x10cc]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x10c8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x10c4]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1100]
mov dword [eax], ecx
mov edx, dword [ebp - 0x10fc]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x10f8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x10f4]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x1118]
call fcn.10006b10
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x10e8]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x10b8]
call fcn.10006b10
mov ecx, 0x1015b96c
call fcn.100032c0
push eax
lea ecx, [ebp - 0x1148]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x4d
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x1130], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x112c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1128], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x1124], eax
push 3
push 7
lea ecx, [ebp - 0x1178]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0x1160], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x115c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x1158], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x1154], ecx
push 3
push 0x12
lea ecx, [ebp - 0x11a8]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x4f
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0x1190], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x118c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1188], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x1184], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1130]
mov dword [eax], ecx
mov edx, dword [ebp - 0x112c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1128]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1124]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1160]
mov dword [eax], ecx
mov edx, dword [ebp - 0x115c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1158]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1154]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1190]
mov dword [eax], ecx
mov edx, dword [ebp - 0x118c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1188]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1184]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x11a8]
call fcn.10006b10
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x1178]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1148]
call fcn.10006b10
mov ecx, 0x1015b970
call fcn.100032c0
push eax
lea ecx, [ebp - 0x11d8]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x11c0], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x11bc], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x11b8], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x11b4], eax
push 3
push 7
lea ecx, [ebp - 0x1208]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x51
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0x11f0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x11ec], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x11e8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x11e4], ecx
push 3
push 0x14
lea ecx, [ebp - 0x1238]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x52
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0x1220], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x121c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1218], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x1214], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x11c0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x11bc]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x11b8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x11b4]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x11f0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x11ec]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x11e8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x11e4]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1220]
mov dword [eax], ecx
mov edx, dword [ebp - 0x121c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1218]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1214]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x1238]
call fcn.10006b10
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x1208]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x11d8]
call fcn.10006b10
mov ecx, 0x1015b974
call fcn.100032c0
push eax
lea ecx, [ebp - 0x1268]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x53
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x1250], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x124c], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1248], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x1244], eax
push 3
push 7
lea ecx, [ebp - 0x1298]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x54
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0x1280], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x127c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x1278], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x1274], ecx
push 3
push 0x16
lea ecx, [ebp - 0x12c8]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x55
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0x12b0], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x12ac], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x12a8], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x12a4], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1250]
mov dword [eax], ecx
mov edx, dword [ebp - 0x124c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1248]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1244]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1280]
mov dword [eax], ecx
mov edx, dword [ebp - 0x127c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1278]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1274]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x12b0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x12ac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x12a8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x12a4]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x12c8]
call fcn.10006b10
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x1298]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1268]
call fcn.10006b10
mov ecx, 0x1015b978
call fcn.100032c0
push eax
lea ecx, [ebp - 0x12f8]
call fcn.10006990
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x56
mov ecx, dword [ebp - 0x1458]
mov edx, dword [ecx]
mov dword [ebp - 0x12e0], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x12dc], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x12d8], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x12d4], eax
push 3
push 2
lea ecx, [ebp - 0x1328]
call fcn.100068e0
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x1460]
mov eax, dword [edx]
mov dword [ebp - 0x1310], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x130c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x1308], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x1304], ecx
push 3
push 0x1a
lea ecx, [ebp - 0x1358]
call fcn.100068e0
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], edx
mov byte [ebp - 4], 0x58
mov eax, dword [ebp - 0x1468]
mov ecx, dword [eax]
mov dword [ebp - 0x1340], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x133c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1338], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x1334], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x12e0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x12dc]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x12d8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x12d4]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1310]
mov dword [eax], ecx
mov edx, dword [ebp - 0x130c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1308]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1304]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1340]
mov dword [eax], ecx
mov edx, dword [ebp - 0x133c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1338]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1334]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x78]
call fcn.1000bc20
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x1358]
call fcn.10006b10
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x1328]
call fcn.10006b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x12f8]
call fcn.10006b10
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1e0]
call fcn.10003280
jmp 0x100080a4
mov byte [ebp - 4], 0x59
push 0x10102e12
lea ecx, [ebp - 0x1f8]
call fcn.100031e0
mov dword [ebp - 0x1454], eax
mov byte [ebp - 4], 0x5a
push str.Excel_Files__.xls_.xls
lea ecx, [ebp - 0x204]
call fcn.100031e0
mov dword [ebp - 0x1454], eax
mov byte [ebp - 4], 0x5b
mov eax, dword [0x1015b960]
push eax
push 0x10103570
lea ecx, [ebp - 0x1c8]
push ecx
call fcn.10002610
add esp, 0xc
push 0x4c
push 0
lea ecx, [ebp - 0x204]
call fcn.100032c0
push eax
push 6
lea ecx, [ebp - 0x1c8]
call fcn.100032c0
push eax
push 0x1010356c
push 0
lea ecx, [ebp - 0x3d8]
call sub.MFC70D.DLL_Ordinal_366
mov dword [ebp - 0x1454], eax
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x3d8]
call sub.MFC70D.DLL_Ordinal_2505
mov dword [ebp - 0x1454], eax
cmp dword [ebp - 0x1454], 1
jne 0x1000af7d
lea eax, [ebp - 0x1364]
push eax
lea ecx, [ebp - 0x3d8]
call sub.MFC70D.DLL_Ordinal_4157
mov dword [ebp - 0x1454], eax
mov ecx, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], ecx
mov byte [ebp - 4], 0x5d
mov edx, dword [ebp - 0x1458]
push edx
lea ecx, [ebp - 0x1f8]
call fcn.100024c0
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x1364]
call fcn.10003280
push 1
lea ecx, [ebp - 0x28]
call fcn.1000b3b0
mov eax, dword [0x10183bd8]
mov dword [ebp - 0x1380], eax
mov ecx, dword [0x10183bdc]
mov dword [ebp - 0x137c], ecx
mov edx, dword [0x10183be0]
mov dword [ebp - 0x1378], edx
mov eax, dword [0x10183be4]
mov dword [ebp - 0x1374], eax
mov ecx, dword [0x10183bd8]
mov dword [ebp - 0x1398], ecx
mov edx, dword [0x10183bdc]
mov dword [ebp - 0x1394], edx
mov eax, dword [0x10183be0]
mov dword [ebp - 0x1390], eax
mov ecx, dword [0x10183be4]
mov dword [ebp - 0x138c], ecx
mov edx, dword [0x10183bd8]
mov dword [ebp - 0x13b0], edx
mov eax, dword [0x10183bdc]
mov dword [ebp - 0x13ac], eax
mov ecx, dword [0x10183be0]
mov dword [ebp - 0x13a8], ecx
mov edx, dword [0x10183be4]
mov dword [ebp - 0x13a4], edx
mov eax, dword [0x10183bd8]
mov dword [ebp - 0x13c8], eax
mov ecx, dword [0x10183bdc]
mov dword [ebp - 0x13c4], ecx
mov edx, dword [0x10183be0]
mov dword [ebp - 0x13c0], edx
mov eax, dword [0x10183be4]
mov dword [ebp - 0x13bc], eax
mov ecx, dword [0x10183bd8]
mov dword [ebp - 0x13e0], ecx
mov edx, dword [0x10183bdc]
mov dword [ebp - 0x13dc], edx
mov eax, dword [0x10183be0]
mov dword [ebp - 0x13d8], eax
mov ecx, dword [0x10183be4]
mov dword [ebp - 0x13d4], ecx
mov edx, dword [0x10183bd8]
mov dword [ebp - 0x13f8], edx
mov eax, dword [0x10183bdc]
mov dword [ebp - 0x13f4], eax
mov ecx, dword [0x10183be0]
mov dword [ebp - 0x13f0], ecx
mov edx, dword [0x10183be4]
mov dword [ebp - 0x13ec], edx
mov eax, dword [0x10183bd8]
mov dword [ebp - 0x1410], eax
mov ecx, dword [0x10183bdc]
mov dword [ebp - 0x140c], ecx
mov edx, dword [0x10183be0]
mov dword [ebp - 0x1408], edx
mov eax, dword [0x10183be4]
mov dword [ebp - 0x1404], eax
mov ecx, dword [0x10183bd8]
mov dword [ebp - 0x1428], ecx
mov edx, dword [0x10183bdc]
mov dword [ebp - 0x1424], edx
mov eax, dword [0x10183be0]
mov dword [ebp - 0x1420], eax
mov ecx, dword [0x10183be4]
mov dword [ebp - 0x141c], ecx
mov edx, dword [0x10183bd8]
mov dword [ebp - 0x1440], edx
mov eax, dword [0x10183bdc]
mov dword [ebp - 0x143c], eax
mov ecx, dword [0x10183be0]
mov dword [ebp - 0x1438], ecx
mov edx, dword [0x10183be4]
mov dword [ebp - 0x1434], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1380]
mov dword [eax], ecx
mov edx, dword [ebp - 0x137c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1378]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1374]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1398]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1394]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1390]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x138c]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x13b0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x13ac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x13a8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x13a4]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x13c8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x13c4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x13c0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x13bc]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x13e0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x13dc]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x13d8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x13d4]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x13f8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x13f4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x13f0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x13ec]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1410]
mov dword [eax], ecx
mov edx, dword [ebp - 0x140c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1408]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1404]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1428]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1424]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1420]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x141c]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x1440]
mov dword [eax], ecx
mov edx, dword [ebp - 0x143c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1438]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1434]
mov dword [eax + 0xc], edx
lea ecx, [ebp - 0x1f8]
call fcn.100032c0
push eax
lea ecx, [ebp - 0x68]
call fcn.1000b800
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x3d8]
call sub.MFC70D.DLL_Ordinal_680
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x204]
call fcn.10003280
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x1f8]
call fcn.10003280
jmp 0x1000afb4
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x78]
call sub.MFC70D.DLL_Ordinal_7137
lea ecx, [ebp - 0x68]
call sub.MFC70D.DLL_Ordinal_7137
lea ecx, [ebp - 0x58]
call sub.MFC70D.DLL_Ordinal_7137
lea ecx, [ebp - 0x48]
call sub.MFC70D.DLL_Ordinal_7137
lea ecx, [ebp - 0x38]
call sub.MFC70D.DLL_Ordinal_7137
lea ecx, [ebp - 0x28]
call sub.MFC70D.DLL_Ordinal_7137
lea ecx, [ebp - 0x3f8]
call sub.MFC70D.DLL_Ordinal_368
mov byte [ebp - 4], 0x5f
mov dword [ebp - 0x404], 0
push 0x10102e12
lea ecx, [ebp - 0x410]
call fcn.100031e0
mov byte [ebp - 4], 0x60
push 0
push str.C:TempDir.
lea ecx, [ebp - 0x3f8]
call sub.MFC70D.DLL_Ordinal_2974
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0
je 0x1000b0b0
lea ecx, [ebp - 0x3f8]
call sub.MFC70D.DLL_Ordinal_2984
mov dword [ebp - 0x404], eax
lea eax, [ebp - 0x144c]
push eax
lea ecx, [ebp - 0x3f8]
call sub.MFC70D.DLL_Ordinal_3645
mov dword [ebp - 0x1454], eax
mov ecx, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], ecx
mov byte [ebp - 4], 0x61
mov edx, dword [ebp - 0x1458]
push edx
lea ecx, [ebp - 0x410]
call fcn.100024c0
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x144c]
call fcn.10003280
lea ecx, [ebp - 0x410]
call fcn.100032c0
mov esi, esp
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp esi, esp
call fcn.100ec680
jmp 0x1000b030
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x410]
call fcn.10003280
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x3f8]
call sub.MFC70D.DLL_Ordinal_682
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1c8]
call fcn.10003280
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1a4]
call fcn.10003280
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x88]
call fcn.1000be10
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x78]
call fcn.1000bdd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x68]
call fcn.1000bd90
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x58]
call fcn.1000bd50
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x48]
call fcn.1000bd10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.1000bcd0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.1000bc90
push edx
mov ecx, ebp
push eax
lea edx, [0x1000b175]
call fcn.100ec6b0
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1468
cmp ebp, esp
call fcn.100ec680
mov esp, ebp
pop ebp
ret