Function at 0x1006d950
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x101702c0
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov eax, dword [0x101b01e4]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov ebp, ecx
mov dword [esp + 0x14], ebp
call fcn.10033b60
xor ebx, ebx
mov dword [esp + 0x28], ebx
mov dword [ebp + 4], 0x10184930
lea esi, [ebp + 8]
mov ecx, esi
mov byte [esp + 0x28], 1
mov dword [ebp], 0x101863e0
mov dword [ebp + 4], 0x101862f0
call fcn.10065bc0
mov dword [esi + 4], eax
mov byte [eax + 0x81], 1
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [eax], eax
mov eax, dword [esi + 4]
mov dword [eax + 8], eax
mov dword [esi + 8], ebx
movzx eax, byte [ebp + 0x18]
and al, 0xf1
mov dword [ebp + 0x14], ebx
or al, 0x11
mov byte [ebp + 0x18], al
mov byte [ebp + 0x19], bl
mov dword [ebp + 0x1a], ebx
mov word [ebp + 0x1e], bx
mov dword [ebp + 0x20], ebx
mov word [ebp + 0x24], bx
mov dword [ebp + 0x26], ebx
mov word [ebp + 0x2a], bx
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x38], ebx
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x44], ebx
mov dword [ebp + 0x48], ebx
mov esi, dword [sym.imp.KERNEL32.DLL_InitializeCriticalSection]
mov dword [ebp + 0x4c], ebx
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x50], 0x10186784
mov edi, 0x1018458c
push ecx
mov dword [ebp + 0x54], edi
call esi
mov dword [ebp + 0x70], ebx
lea edx, [ebp + 0x7c]
mov dword [ebp + 0x74], 0x10186784
push edx
mov dword [ebp + 0x78], edi
call esi
mov byte [ebp + 0x94], bl
lea edi, [ebp + 0x98]
mov ecx, edi
mov byte [esp + 0x28], 6
call fcn.10065c40
mov dword [edi + 4], eax
mov byte [eax + 0x41], 1
mov eax, dword [edi + 4]
mov dword [eax + 4], eax
mov eax, dword [edi + 4]
mov dword [eax], eax
mov eax, dword [edi + 4]
mov dword [eax + 8], eax
mov dword [edi + 8], ebx
lea eax, [ebp + 0xac]
mov dword [ebp + 0xa4], 0x10186784
mov edi, 0x1018458c
push eax
mov dword [ebp + 0xa8], edi
call esi
mov dword [ebp + 0xc8], 0x10186784
lea ecx, [ebp + 0xd0]
push ecx
mov dword [ebp + 0xcc], edi
call esi
lea edx, [ebp + 0xf4]
mov dword [ebp + 0xec], 0x10186784
push edx
mov dword [ebp + 0xf0], edi
call esi
lea eax, [ebp + 0x118]
mov dword [ebp + 0x110], 0x10186784
push eax
mov dword [ebp + 0x114], edi
call esi
lea ecx, [ebp + 0x13c]
mov dword [ebp + 0x134], 0x10186784
push ecx
mov dword [ebp + 0x138], edi
call esi
lea edx, [ebp + 0x160]
mov dword [ebp + 0x158], 0x10186784
push edx
mov dword [ebp + 0x15c], edi
call esi
lea eax, [ebp + 0x1dc]
mov byte [ebp + 0x190], bl
mov byte [ebp + 0x191], bl
mov dword [ebp + 0x1a0], ebx
mov dword [ebp + 0x1a4], ebx
mov dword [ebp + 0x1a8], ebx
mov byte [ebp + 0x1ac], 1
mov dword [ebp + 0x1b0], ebx
mov byte [ebp + 0x1b4], 1
mov dword [ebp + 0x1b8], ebx
mov byte [ebp + 0x1bc], 1
mov dword [ebp + 0x1c0], ebx
mov byte [ebp + 0x1c4], 1
mov dword [ebp + 0x1c8], ebx
mov byte [ebp + 0x1cc], 1
mov dword [ebp + 0x1d0], ebx
mov byte [ebp + 0x1d4], 1
push eax
mov dword [ebp + 0x1d8], edi
call esi
mov esi, dword [esp + 0x40]
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
lea edi, [ebp + 0x1f4]
mov ecx, 0x2da
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x30]
push 0xb68
mov dword [ebp + 0xd5c], ecx
mov ecx, dword [esp + 0x40]
lea esi, [ebp + 0xd6c]
push ebx
push esi
mov byte [esp + 0x34], 0xe
mov dword [ebp + 0xd60], edx
mov dword [ebp + 0xd64], eax
mov dword [ebp + 0xd68], ecx
call fcn.10149460
mov eax, 0x10
mov dword [esi + 0xb60], eax
mov dword [esi + 0xb5c], eax
mov eax, dword [esp + 0x50]
mov dword [esi + 6], 0xa
mov dword [esi + 0xa], 0x7d0
mov dword [esi + 0xe], 4
mov byte [esi + 0xb67], bl
mov dword [esi + 0x16], 0x1000
mov edx, dword [eax]
mov dword [ebp + 0x18d4], edx
mov ecx, dword [eax + 4]
add esp, 0xc
mov dword [ebp + 0x18d8], ecx
mov edx, dword [eax + 8]
mov dword [ebp + 0x18dc], edx
mov ecx, dword [eax + 0xc]
mov dword [ebp + 0x18e0], ecx
mov edx, dword [eax + 0x10]
mov eax, dword [esp + 0x48]
mov dword [ebp + 0x18e4], edx
mov dword [ebp + 0x18e8], ebx
mov dword [ebp + 0x18ec], ebx
mov dword [ebp + 0x18f0], ebx
push eax
lea ecx, [ebp + 0x18f8]
mov dword [ebp + 0x18f4], ebx
call fcn.10010a20
mov esi, dword [esp + 0x4c]
mov dl, byte [esp + 0x54]
mov al, byte [esp + 0x58]
lea edi, [ebp + 0x1a1c]
mov ecx, 0xd
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x50]
mov esi, dword [sym.imp.KERNEL32.DLL_InitializeCriticalSection]
mov dword [ebp + 0x1a50], ecx
mov dword [ebp + 0x1a58], ebx
mov dword [ebp + 0x1a5c], ebx
mov dword [ebp + 0x1a60], ebx
mov byte [ebp + 0x1a64], bl
mov byte [ebp + 0x1a65], dl
mov byte [ebp + 0x1a66], al
mov byte [ebp + 0x1a67], bl
lea ecx, [ebp + 0x1a70]
mov dword [ebp + 0x1a68], 0x10186784
mov edi, 0x1018458c
push ecx
mov dword [ebp + 0x1a6c], edi
call esi
mov byte [ebp + 0x1a88], bl
lea edx, [ebp + 0x1a94]
mov dword [ebp + 0x1a8c], 0x10186784
push edx
mov dword [ebp + 0x1a90], edi
call esi
mov dword [ebp + 0x1aac], ebx
lea esi, [ebp + 0x1ab0]
mov ecx, esi
mov byte [esp + 0x28], 0x11
call fcn.10019650
mov dword [esi + 4], eax
mov byte [eax + 0x11], 1
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [eax], eax
mov eax, dword [esi + 4]
mov dword [eax + 8], eax
mov dword [esi + 8], ebx
lea edi, [ebp + 0x1abc]
mov ecx, edi
mov byte [esp + 0x28], 0x12
call fcn.10019650
mov dword [edi + 4], eax
mov byte [eax + 0x11], 1
mov eax, dword [edi + 4]
mov dword [eax + 4], eax
mov eax, dword [edi + 4]
mov dword [eax], eax
mov eax, dword [edi + 4]
mov dword [eax + 8], eax
mov dword [edi + 8], ebx
lea ecx, [ebp + 0x1ac8]
mov byte [esp + 0x28], 0x13
call fcn.10019650
mov dword [ebp + 0x1acc], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1acc]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1acc]
mov dword [eax], eax
mov eax, dword [ebp + 0x1acc]
mov dword [eax + 8], eax
mov dword [ebp + 0x1ad0], ebx
lea ecx, [ebp + 0x1ad4]
mov byte [esp + 0x28], 0x14
call fcn.10019650
mov dword [ebp + 0x1ad8], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1ad8]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1ad8]
mov dword [eax], eax
mov eax, dword [ebp + 0x1ad8]
mov dword [eax + 8], eax
mov dword [ebp + 0x1adc], ebx
lea ecx, [ebp + 0x1ae0]
mov byte [esp + 0x28], 0x15
call fcn.10019650
mov dword [ebp + 0x1ae4], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1ae4]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1ae4]
mov dword [eax], eax
mov eax, dword [ebp + 0x1ae4]
mov dword [eax + 8], eax
mov dword [ebp + 0x1ae8], ebx
lea ecx, [ebp + 0x1aec]
mov byte [esp + 0x28], 0x16
call fcn.10019650
mov dword [ebp + 0x1af0], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1af0]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1af0]
mov dword [eax], eax
mov eax, dword [ebp + 0x1af0]
mov dword [eax + 8], eax
mov dword [ebp + 0x1af4], ebx
lea ecx, [ebp + 0x1af8]
mov byte [esp + 0x28], 0x17
call fcn.10019650
mov dword [ebp + 0x1afc], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1afc]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1afc]
mov dword [eax], eax
mov eax, dword [ebp + 0x1afc]
mov dword [eax + 8], eax
mov dword [ebp + 0x1b00], ebx
lea ecx, [ebp + 0x1b04]
mov byte [esp + 0x28], 0x18
call fcn.10019650
mov dword [ebp + 0x1b08], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1b08]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1b08]
mov dword [eax], eax
mov eax, dword [ebp + 0x1b08]
mov dword [eax + 8], eax
mov dword [ebp + 0x1b0c], ebx
lea ecx, [ebp + 0x1b10]
mov byte [esp + 0x28], 0x19
call fcn.10019650
mov dword [ebp + 0x1b14], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1b14]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1b14]
mov dword [eax], eax
mov eax, dword [ebp + 0x1b14]
mov dword [eax + 8], eax
mov dword [ebp + 0x1b18], ebx
lea ecx, [ebp + 0x1b1c]
mov byte [esp + 0x28], 0x1a
call fcn.10019650
mov dword [ebp + 0x1b20], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1b20]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1b20]
mov dword [eax], eax
mov eax, dword [ebp + 0x1b20]
mov dword [eax + 8], eax
mov dword [ebp + 0x1b24], ebx
lea ecx, [ebp + 0x1b28]
mov byte [esp + 0x28], 0x1b
call fcn.10019650
mov dword [ebp + 0x1b2c], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1b2c]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1b2c]
mov dword [eax], eax
mov eax, dword [ebp + 0x1b2c]
mov dword [eax + 8], eax
mov dword [ebp + 0x1b30], ebx
lea ecx, [ebp + 0x1b34]
mov byte [esp + 0x28], 0x1c
call fcn.10019650
mov dword [ebp + 0x1b38], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1b38]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1b38]
mov dword [eax], eax
mov eax, dword [ebp + 0x1b38]
mov dword [eax + 8], eax
mov dword [ebp + 0x1b3c], ebx
lea ecx, [ebp + 0x1b40]
mov byte [esp + 0x28], 0x1d
call fcn.10019650
mov dword [ebp + 0x1b44], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1b44]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1b44]
mov dword [eax], eax
mov eax, dword [ebp + 0x1b44]
mov dword [eax + 8], eax
mov dword [ebp + 0x1b48], ebx
lea ecx, [ebp + 0x1b4c]
mov byte [esp + 0x28], 0x1e
call fcn.10019650
mov dword [ebp + 0x1b50], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1b50]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1b50]
mov dword [eax], eax
mov eax, dword [ebp + 0x1b50]
mov dword [eax + 8], eax
mov dword [ebp + 0x1b54], ebx
lea ecx, [ebp + 0x1b58]
mov byte [esp + 0x28], 0x1f
call fcn.10019650
mov dword [ebp + 0x1b5c], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1b5c]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1b5c]
mov dword [eax], eax
mov eax, dword [ebp + 0x1b5c]
mov dword [eax + 8], eax
mov dword [ebp + 0x1b60], ebx
lea ecx, [ebp + 0x1b64]
mov byte [esp + 0x28], 0x20
call fcn.10019650
mov dword [ebp + 0x1b68], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1b68]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1b68]
mov dword [eax], eax
mov eax, dword [ebp + 0x1b68]
mov dword [eax + 8], eax
mov dword [ebp + 0x1b6c], ebx
lea ecx, [ebp + 0x1b70]
mov byte [esp + 0x28], 0x21
call fcn.10019650
mov dword [ebp + 0x1b74], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1b74]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1b74]
mov dword [eax], eax
mov eax, dword [ebp + 0x1b74]
mov dword [eax + 8], eax
mov dword [ebp + 0x1b78], ebx
lea ecx, [ebp + 0x1b7c]
mov byte [esp + 0x28], 0x22
call fcn.10065c80
mov dword [ebp + 0x1b80], eax
mov byte [eax + 0x19], 1
mov eax, dword [ebp + 0x1b80]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1b80]
mov dword [eax], eax
mov eax, dword [ebp + 0x1b80]
mov dword [eax + 8], eax
mov dword [ebp + 0x1b84], ebx
lea ecx, [ebp + 0x1b88]
mov byte [esp + 0x28], 0x23
call fcn.10019650
mov dword [ebp + 0x1b8c], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 0x1b8c]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1b8c]
mov dword [eax], eax
mov eax, dword [ebp + 0x1b8c]
mov dword [eax + 8], eax
mov dword [ebp + 0x1b90], ebx
mov dword [ebp + 0x1b98], ebx
mov dword [ebp + 0x1b9c], ebx
lea eax, [ebp + 0x1ba8]
mov dword [ebp + 0x1ba0], 0x10186784
push eax
mov dword [ebp + 0x1ba4], 0x1018458c
call dword [sym.imp.KERNEL32.DLL_InitializeCriticalSection]
mov byte [ebp + 0x1bc0], bl
lea ecx, [ebp + 0x1bcc]
mov dword [ebp + 0x1bc4], 0x10186784
push ecx
mov dword [ebp + 0x1bc8], 0x1018458c
call dword [sym.imp.KERNEL32.DLL_InitializeCriticalSection]
mov byte [ebp + 0x1be4], bl
mov byte [ebp + 0x1be8], bl
mov byte [ebp + 0x1be9], 0xf
mov byte [ebp + 0x1bea], bl
mov byte [ebp + 0x1beb], 0x40
mov byte [ebp + 0x1bec], 1
lea ecx, [ebp + 0x1bf0]
mov byte [esp + 0x28], 0x26
mov byte [ebp + 0x1bed], bl
call fcn.10019690
mov dword [ebp + 0x1bf4], eax
mov byte [eax + 0x15], 1
mov eax, dword [ebp + 0x1bf4]
mov dword [eax + 4], eax
mov eax, dword [ebp + 0x1bf4]
mov dword [eax], eax
mov eax, dword [ebp + 0x1bf4]
mov dword [eax + 8], eax
mov dword [ebp + 0x1bf8], ebx
mov edx, dword [esp + 0x40]
mov dword [ebp + 0x1bfc], ebx
mov byte [ebp + 0x1c00], 1
mov dword [ebp + 0x1c04], ebx
mov dword [ebp + 0x1c08], ebx
mov dword [ebp + 0x1c0c], ebx
mov dword [ebp + 0x1c10], ebx
mov dword [ebp + 0x1c14], ebx
mov dword [ebp + 0x1c18], ebx
mov dword [ebp + 0x1c1c], ebx
mov dword [ebp + 0x1c20], ebx
mov dword [ebp + 0x1c24], ebx
mov dword [ebp + 0x1c28], ebx
mov dword [ebp + 0x1c2c], ebx
mov dword [ebp + 0x1c30], ebx
mov dword [ebp + 0x1c34], ebx
mov dword [ebp + 0x1c38], ebx
mov dword [ebp + 0x1c3c], ebx
mov eax, dword [edx + 6]
mov dword [ebp + 0x1c40], eax
lea eax, [ebp + 0xac]
push eax
mov dword [ebp + 0x1c44], ebx
mov dword [ebp + 0x1c48], ebx
mov dword [ebp + 0x1c4c], ebx
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
lea eax, [ebp + 0xac]
push eax
mov dword [ebp + 0xc4], ebx
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
lea eax, [ebp + 0xd0]
push eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
lea eax, [ebp + 0xd0]
push eax
mov dword [ebp + 0xe8], ebx
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
lea eax, [ebp + 0x160]
push eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
lea eax, [ebp + 0x160]
push eax
mov dword [ebp + 0x178], ebx
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
lea eax, [ebp + 0xf4]
push eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
lea eax, [ebp + 0xf4]
push eax
mov dword [ebp + 0x10c], ebx
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
lea eax, [ebp + 0x118]
push eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
lea eax, [ebp + 0x118]
push eax
mov dword [ebp + 0x130], ebx
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
lea eax, [ebp + 0x13c]
push eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
lea eax, [ebp + 0x13c]
push eax
mov dword [ebp + 0x154], ebx
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
cmp byte [ebp + 0x1a66], bl
mov dword [ebp + 0x17c], ebx
mov dword [ebp + 0x180], ebx
mov dword [ebp + 0x188], ebx
mov dword [ebp + 0x18c], ebx
mov byte [ebp + 0x184], bl
mov byte [ebp + 0x185], bl
je 0x1006e35f
cmp byte [ebp + 0x1a2e], bl
je 0x1006e35f
mov dword [ebp + 0x194], 0x1d4c0
jmp 0x1006e369
mov dword [ebp + 0x194], 0x3e8
lea eax, [ebp + 0x1d8]
mov dword [esp + 0x1c], eax
add eax, 4
push eax
mov dword [ebp + 0x198], ebx
mov dword [ebp + 0x19c], 0x5265c00
mov dword [esp + 0x1c], 0x1018442c
mov dword [esp + 0x58], eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov ecx, dword [esi + 4]
mov edx, dword [ecx + 4]
push edx
mov ecx, esi
mov byte [esp + 0x2c], 0x28
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov eax, dword [esp + 0x54]
mov esi, dword [esi + 4]
push eax
mov dword [esi + 8], esi
mov byte [esp + 0x2c], 0x27
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov ecx, dword [edi + 4]
mov edx, dword [ecx + 4]
push edx
mov ecx, edi
call fcn.100196d0
mov eax, dword [edi + 4]
mov dword [eax + 4], eax
mov eax, dword [edi + 4]
mov dword [edi + 8], ebx
mov dword [eax], eax
mov edi, dword [edi + 4]
mov dword [edi + 8], edi
mov eax, dword [ebp + 0x1acc]
mov ecx, dword [eax + 4]
lea esi, [ebp + 0x1ac8]
push ecx
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov edx, dword [ebp + 0x1ad8]
mov eax, dword [edx + 4]
lea esi, [ebp + 0x1ad4]
push eax
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov ecx, dword [ebp + 0x1ae4]
mov edx, dword [ecx + 4]
lea esi, [ebp + 0x1ae0]
push edx
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov eax, dword [ebp + 0x1af0]
mov ecx, dword [eax + 4]
lea esi, [ebp + 0x1aec]
push ecx
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov edx, dword [ebp + 0x1afc]
mov eax, dword [edx + 4]
lea esi, [ebp + 0x1af8]
push eax
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov ecx, dword [ebp + 0x1b08]
mov edx, dword [ecx + 4]
lea esi, [ebp + 0x1b04]
push edx
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov eax, dword [ebp + 0x1b14]
mov ecx, dword [eax + 4]
lea esi, [ebp + 0x1b10]
push ecx
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov edx, dword [ebp + 0x1b20]
mov eax, dword [edx + 4]
lea esi, [ebp + 0x1b1c]
push eax
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov ecx, dword [ebp + 0x1b2c]
mov edx, dword [ecx + 4]
lea esi, [ebp + 0x1b28]
push edx
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov eax, dword [ebp + 0x1b38]
mov ecx, dword [eax + 4]
lea esi, [ebp + 0x1b34]
push ecx
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov edx, dword [ebp + 0x1b44]
mov eax, dword [edx + 4]
lea esi, [ebp + 0x1b40]
push eax
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov ecx, dword [ebp + 0x1b50]
mov edx, dword [ecx + 4]
lea esi, [ebp + 0x1b4c]
push edx
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov eax, dword [ebp + 0x1b5c]
mov ecx, dword [eax + 4]
lea esi, [ebp + 0x1b58]
push ecx
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov edx, dword [ebp + 0x1b68]
mov eax, dword [edx + 4]
lea esi, [ebp + 0x1b64]
push eax
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
mov dword [esi + 8], esi
mov ecx, dword [ebp + 0x1b74]
mov edx, dword [ecx + 4]
lea esi, [ebp + 0x1b70]
push edx
mov ecx, esi
call fcn.100196d0
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov esi, dword [esi + 4]
push ebx
mov dword [esi + 8], esi
call fcn.10149d08
push eax
call fcn.1014a76c
add esp, 8
mov eax, ebp
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret 0x2c