Function at 0x10005b3b
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
call fcn.1000b2eb
mov dword [0x100443b4], 0x98a067
mov dword [ebp - 4], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10005b72
push 6
call fcn.1001ebae
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0x40
push 0x1000
push 0x64
push 0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10005bab
push 6
call fcn.1001ebae
add esp, 4
mov dword [0x100443b8], eax
push dword [0x100443b4]
call fcn.1000d992
push eax
push dword [0x100443b8]
call fcn.1000d9f9
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0x12c
call fcn.1000d5d3
mov dword [ebp - 4], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10005bfc
push 6
call fcn.1001ebae
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0x40
push 0x1000
push 0x64
push 0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10005c35
push 6
call fcn.1001ebae
add esp, 4
mov dword [0x100443bc], eax
push 0x98b05a
call fcn.1000d992
push eax
push dword [0x100443bc]
call fcn.1000d9f9
push 0xa0000101
push 0
push 0x100415ab
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x100415c1
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x1004439c]
push dword [ebp - 8]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10005cbb
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000324f
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10005cdb
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10005ceb
push ebx
call fcn.1001ebba
add esp, 4
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push eax
call fcn.1000352f
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10005d13
push ebx
call fcn.1001ebba
add esp, 4
push 1
push dword [ebp - 0x18]
push 0x100443c0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov dword [0x100443c4], 0x12db21a
call fcn.1000db02
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x70
push 0x100158c6
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x72
push 0x10016135
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x74
push 0x10017203
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x75
push 0x10018f5c
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x76
push 0x1001abc3
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x77
push 0x1001af42
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0xc0
push 0x1001bfed
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x56
push 0x1001c951
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x42
push 0x1001ccf7
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x26
push 0x1001d6ef
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x28
push 0x1001d778
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x25
push 0x1001d801
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x27
push 0x1001d88a
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x26
push 0x1001d9f6
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x28
push 0x1001db62
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x25
push 0x1001dcce
call fcn.10004da3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x27
push 0x1001de3a
call fcn.10004da3
push 0xa0000101
push 0
push 0x100415cc
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x100415da
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x1004439c]
push dword [ebp - 8]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10006010
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000324f
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10006030
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10006040
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x100415e5
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x100415f5
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x1004439c]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100060ab
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000324f
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100060cb
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100060db
push ebx
call fcn.1001ebba
add esp, 4
push dword [ebp - 0x20]
push dword [0x100443c8]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.10001584
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10006107
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10006117
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x10041600
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x10041618
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x1004439c]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x10006182
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000324f
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100061a2
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100061b2
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x10041623
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x1004163b
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x1004439c]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000621d
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000324f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000623d
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x1000624d
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000301
push 0
push 0x10041423
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x10041646
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x1004439c]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x100062b8
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000324f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x100062d8
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x100062e8
push ebx
call fcn.1001ebba
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x100062fb
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x1000630f
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10006323
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x10006337
mov eax, 0x1004137c
push eax
push 4
mov ebx, 0x8c8
call fcn.1001f320
add esp, 0x34
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1000635d
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000636d
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x1000637d
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x1000638d
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000301
push 0
push 0x10041423
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x5c], eax
push 0xa0000101
push 0
push 0x10041651
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x60], eax
push dword [0x1004439c]
push dword [ebp - 0x60]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x100063f8
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.1000324f
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x10006418
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x10006428
push ebx
call fcn.1001ebba
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
push dword [ebp - 0x58]
call fcn.100019f0
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10006455
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x10006465
push ebx
call fcn.1001ebba
add esp, 4
cmp dword [ebp - 0x6c], 0
je 0x10006854
push 0xa0000101
push 0
push 0x1004165c
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x1004166a
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x1004439c]
push dword [ebp - 8]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x100064da
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000324f
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x100064fa
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x1000650a
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x10041675
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x10041685
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x1004439c]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10006575
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000324f
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10006595
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100065a5
push ebx
call fcn.1001ebba
add esp, 4
push dword [ebp - 0x20]
push dword [0x100443c8]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.10001584
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100065d1
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100065e1
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x10041690
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x100416a8
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x1004439c]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1000664c
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000324f
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000666c
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000667c
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x100416b2
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x100416ca
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x1004439c]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x100066e7
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000324f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10006707
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10006717
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x100416d4
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x100416de
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x1004439c]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10006782
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000324f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x100067a2
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x100067b2
push ebx
call fcn.1001ebba
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x100067c5
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x100067d9
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x100067ed
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x10006801
mov eax, 0x1004137c
push eax
push 4
mov ebx, 0x8cc
call fcn.100206c0
add esp, 0x34
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10006824
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10006834
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10006844
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10006854
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x100416e9
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x100416f7
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x1004439c]
push dword [ebp - 8]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x100068bf
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000324f
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x100068df
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x100068ef
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x10041702
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x10041712
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x1004439c]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1000695a
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000324f
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1000697a
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1000698a
push ebx
call fcn.1001ebba
add esp, 4
push dword [ebp - 0x20]
push dword [0x100443c8]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.10001584
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100069b6
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100069c6
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x1004171d
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x10041735
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x1004439c]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x10006a31
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000324f
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10006a51
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10006a61
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x10041740
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x10041754
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x1004439c]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10006acc
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000324f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10006aec
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10006afc
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000301
push 0
push 0x10041423
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x1004175e
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x1004439c]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10006b67
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000324f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10006b87
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10006b97
push ebx
call fcn.1001ebba
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x10006baa
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x10006bbe
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10006bd2
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x10006be6
mov eax, 0x1004137c
push eax
push 4
mov ebx, 0x8c8
call fcn.1001f320
add esp, 0x34
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10006c0c
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10006c1c
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10006c2c
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10006c3c
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000301
push 0
push 0x10041423
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x5c], eax
push 0xa0000101
push 0
push 0x10041769
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x60], eax
push dword [0x1004439c]
push dword [ebp - 0x60]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x10006ca7
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.1000324f
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x10006cc7
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x10006cd7
push ebx
call fcn.1001ebba
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
push dword [ebp - 0x58]
call fcn.100019f0
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10006d04
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x10006d14
push ebx
call fcn.1001ebba
add esp, 4
cmp dword [ebp - 0x6c], 0
je 0x10007103
push 0xa0000101
push 0
push 0x10041774
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x10041782
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x1004439c]
push dword [ebp - 8]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10006d89
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000324f
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10006da9
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10006db9
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x10041675
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x10041685
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x1004439c]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10006e24
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000324f
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10006e44
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10006e54
push ebx
call fcn.1001ebba
add esp, 4
push dword [ebp - 0x20]
push dword [0x100443c8]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.10001584
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10006e80
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10006e90
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x1004178d
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x100417a5
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x1004439c]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x10006efb
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000324f
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10006f1b
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10006f2b
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x100417b0
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x100417c4
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x1004439c]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10006f96
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000324f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10006fb6
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10006fc6
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x100417cf
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x100417db
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x1004439c]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10007031
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000324f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10007051
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10007061
push ebx
call fcn.1001ebba
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x10007074
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x10007088
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x1000709c
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x100070b0
mov eax, 0x1004137c
push eax
push 4
mov ebx, 0x8cc
call fcn.100206c0
add esp, 0x34
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x100070d3
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100070e3
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x100070f3
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10007103
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x100417e6
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x100417f4
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x1004439c]
push dword [ebp - 8]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1000716e
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000324f
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x1000718e
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x1000719e
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x100417ff
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x1004180f
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x1004439c]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10007209
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000324f
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10007229
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10007239
push ebx
call fcn.1001ebba
add esp, 4
push dword [ebp - 0x20]
push dword [0x100443c8]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.10001584
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10007265
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10007275
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x1004181a
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x10041832
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x1004439c]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100072e0
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000324f
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10007300
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10007310
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x1004183d
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x10041855
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x1004439c]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000737b
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000324f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000739b
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100073ab
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000301
push 0
push 0x10041423
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x1004185f
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x1004439c]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10007416
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000324f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10007436
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10007446
push ebx
call fcn.1001ebba
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x10007459
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x1000746d
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10007481
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x10007495
mov eax, 0x1004137c
push eax
push 4
mov ebx, 0x8c8
call fcn.1001f320
add esp, 0x34
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x100074bb
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100074cb
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x100074db
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x100074eb
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000301
push 0
push 0x10041423
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x5c], eax
push 0xa0000101
push 0
push 0x1004186a
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x60], eax
push dword [0x1004439c]
push dword [ebp - 0x60]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x10007556
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.1000324f
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x10007576
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x10007586
push ebx
call fcn.1001ebba
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
push dword [ebp - 0x58]
call fcn.100019f0
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x100075b3
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x100075c3
push ebx
call fcn.1001ebba
add esp, 4
cmp dword [ebp - 0x6c], 0
je 0x100079b2
push 0xa0000101
push 0
push 0x10041875
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x10041883
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x1004439c]
push dword [ebp - 8]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10007638
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000324f
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10007658
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10007668
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x1004188e
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x1004189e
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x1004439c]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100076d3
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000324f
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100076f3
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10007703
push ebx
call fcn.1001ebba
add esp, 4
push dword [ebp - 0x20]
push dword [0x100443c8]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.10001584
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1000772f
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000773f
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x100418a9
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x100418c1
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x1004439c]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100077aa
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000324f
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100077ca
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100077da
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x100418cc
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x1004154d
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x1004439c]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10007845
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000324f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10007865
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10007875
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x100418e4
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x100418ee
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x1004439c]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x100078e0
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000324f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10007900
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10007910
push ebx
call fcn.1001ebba
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x10007923
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x10007937
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x1000794b
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x1000795f
mov eax, 0x1004137c
push eax
push 4
mov ebx, 0x8cc
call fcn.100206c0
add esp, 0x34
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10007982
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10007992
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x100079a2
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x100079b2
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x100418f9
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x10041907
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x1004439c]
push dword [ebp - 8]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10007a1d
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000324f
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10007a3d
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10007a4d
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x10041912
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x10041922
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x1004439c]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10007ab8
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000324f
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10007ad8
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10007ae8
push ebx
call fcn.1001ebba
add esp, 4
push dword [ebp - 0x20]
push dword [0x100443c8]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.10001584
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10007b14
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10007b24
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x1004192d
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x10041945
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x1004439c]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x10007b8f
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000324f
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10007baf
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10007bbf
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000101
push 0
push 0x10041950
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x10041968
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x1004439c]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10007c2a
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000324f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10007c4a
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10007c5a
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000301
push 0
push 0x10041423
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x10041973
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x1004439c]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10007cc5
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000324f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10007ce5
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10007cf5
push ebx
call fcn.1001ebba
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x10007d08
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x10007d1c
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10007d30
mov eax, 0x1004137c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x10007d44
mov eax, 0x1004137c
push eax
push 4
mov ebx, 0x8c8
call fcn.1001f320
add esp, 0x34
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10007d6a
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10007d7a
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10007d8a
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10007d9a
push ebx
call fcn.1001ebba
add esp, 4
push 0xa0000301
push 0
push 0x10041423
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x5c], eax
push 0xa0000101
push 0
push 0x1004197e
push 1
mov ebx, 0x168
call fcn.1001f020
add esp, 0x10
mov dword [ebp - 0x60], eax
push dword [0x1004439c]
push dword [ebp - 0x60]
mov ecx, 2
call fcn.10001584
add esp, 8
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x10007e05
push ebx
call fcn.1001ebba
add esp, 4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.1000324f
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x10007e25
push ebx
call fcn.1001ebba
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x10007e35