Function at 0x10034613
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0xa88
mov eax, 0x100605c9
call fcn.10045525
mov edi, ecx
mov dword [ebp - 0x8a4], edi
mov esi, dword [ebp + 8]
push esi
push 0x10005880
xor ebx, ebx
push 2
mov dword [ebp - 0x89c], ebx
call fcn.1002ed5d
push ebx
push ebx
lea ecx, [ebp - 0x8f4]
call fcn.100569a3
push 1
push esi
lea ecx, [ebp - 0x8f4]
mov dword [ebp - 4], ebx
call fcn.10056a98
lea ecx, [ebp - 0x994]
call fcn.10055e9f
xor eax, eax
push 0x100058b4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.10044eec
push ebx
lea eax, [ebp - 0x994]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 2
call fcn.100560d0
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 1
call fcn.10044eec
test bl, bl
je 0x100347fa
lea eax, [ebp - 0x994]
push eax
lea ecx, [ebp - 0x6c]
call fcn.1005654f
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x80], 7
mov dword [ebp - 0x84], ebx
mov word [ebp - 0x94], ax
push ebx
lea eax, [ebp - 0x94]
push eax
push 0x10069130
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 4
call fcn.1005658a
test al, al
je 0x100347d7
cmp dword [ebp - 0x84], ebx
je 0x100347d7
lea eax, [ebp - 0x94]
push eax
call fcn.10044eec
push 4
lea ecx, [ebp - 0x94]
lea ebx, [edi + 0x18c]
mov eax, dword [ebx]
push ecx
mov ecx, ebx
call dword [eax + 4]
lea eax, [ebp - 0x94]
push eax
push 0x100058d8
push 2
call fcn.100390c1
cmp byte [ebp + 0xc], 0
je 0x100347d5
lea eax, [edi + 0x484]
cmp dword [eax], 0
mov dword [ebp - 0x89c], eax
je 0x100347d5
mov ecx, eax
call fcn.10044eec
mov ecx, ebx
mov esi, eax
call fcn.10044eec
lea edx, [esi + 0x88]
push edx
mov ecx, eax
call fcn.10044eec
test eax, eax
je 0x100347d5
mov ecx, dword [ebp - 0x89c]
call fcn.10044eec
mov ecx, ebx
mov esi, eax
call fcn.10044eec
lea ecx, [esi + 0x88]
push ecx
push eax
push 0x10005940
push 0x29
lea ecx, [ebp - 0x894]
call fcn.10044eec
mov esi, eax
push 0x100629b4
lea eax, [ebp - 0x50c]
mov ecx, 0xe2
lea edi, [ebp - 0x50c]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.10044eec
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.10044eec
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 1
mov dword [ebp - 0x6c], 0x10005310
call fcn.10055f10
jmp 0x100347fc
xor ebx, ebx
lea ecx, [ebp - 0x924]
call fcn.10056ee6
xor eax, eax
push 0x100059ec
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.10044eec
lea eax, [ebp - 0x924]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 6
call fcn.10055fe7
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.10044eec
lea ecx, [ebp - 0x924]
mov esi, ebx
call fcn.10044eec
test eax, eax
jle 0x10034988
lea ecx, [ebp - 0x68]
call fcn.10055e9f
lea eax, [ebp - 0x68]
push eax
push esi
lea ecx, [ebp - 0x924]
mov byte [ebp - 4], 7
call fcn.10044eec
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0xdc]
call fcn.1005654f
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x84], ebx
mov word [ebp - 0x94], ax
push 1
lea eax, [ebp - 0x48]
push eax
push 0x10068e90
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xa
call fcn.1005658a
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
test al, al
je 0x100348f2
lea eax, [ebp - 0x48]
push eax
push 0x10005a20
push 2
call fcn.100391cc
jmp 0x10034936
push 1
lea eax, [ebp - 0x94]
push eax
push 0x10069088
lea ecx, [ebp - 0xdc]
call fcn.1005658a
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x48]
push eax
push 0x10005a88
push 2
call fcn.10039231
push 4
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x48]
push eax
mov ecx, edi
call fcn.10037e21
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.10044eec
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 7
mov dword [ebp - 0xdc], 0x10005310
call fcn.10055f10
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 5
call fcn.10055f10
lea ecx, [ebp - 0x924]
inc esi
call fcn.10044eec
cmp esi, eax
jl 0x10034866
xor eax, eax
mov dword [ebp - 0x124], 7
mov dword [ebp - 0x128], ebx
mov word [ebp - 0x138], ax
lea ecx, [ebp - 0x944]
mov byte [ebp - 4], 0xb
call fcn.10056ee6
xor eax, eax
push 0x10005aec
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.10044eec
lea eax, [ebp - 0x944]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0xd
call fcn.10055fe7
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
call fcn.10044eec
lea ecx, [ebp - 0x944]
call fcn.10044eec
mov esi, eax
test esi, esi
je 0x10034d1c
mov dword [ebp - 0x89c], ebx
jle 0x10034cea
lea ecx, [ebp - 0x68]
call fcn.10055e9f
lea eax, [ebp - 0x68]
push eax
push ebx
lea ecx, [ebp - 0x944]
mov byte [ebp - 4], 0xe
call fcn.10044eec
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xf
call fcn.1005654f
push 1
lea eax, [ebp - 0x48]
push eax
push 0x10068e90
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x10
call fcn.1005658a
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
push ebx
lea eax, [ebp - 0x48]
push eax
push 0x1006914c
call fcn.10044eec
test eax, eax
jne 0x10034abb
lea ecx, [edi + 0x3c4]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x10005b28
push 2
call fcn.1003929c
jmp 0x10034b13
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x8a0]
lea ebx, [edi + 0x3d4]
push eax
mov ecx, ebx
call fcn.10044eec
mov eax, dword [edi + 0x3d8]
cmp eax, dword [ebp - 0x8a0]
lea eax, [ebp - 0x48]
push eax
jne 0x10034b05
lea eax, [ebp - 0x8b0]
push eax
mov ecx, ebx
call fcn.10044eec
lea eax, [ebp - 0x48]
push eax
push 0x10005bd0
push 2
call fcn.1003932c
jmp 0x10034b11
push 0x10005c50
push 2
call fcn.10039391
xor ebx, ebx
cmp esi, 1
jne 0x10034b33
lea ecx, [edi + 0x39c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
push 0x10005d38
jmp 0x10034c27
xor eax, eax
push 0x10005d8c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.10044eec
push ebx
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x11
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 0x10
call fcn.10044eec
test bl, bl
je 0x10034c89
cmp dword [0x1006917c], 8
mov eax, dword [0x10069168]
jae 0x10034b98
mov eax, 0x10069168
push dword [0x10069178]
xor ebx, ebx
push eax
push dword [ebp - 0x128]
lea ecx, [ebp - 0x138]
push ebx
call fcn.10044eec
test eax, eax
je 0x10034c59
push ebx
push 0x10068ffc
lea eax, [ebp - 0x138]
push eax
call fcn.10044eec
test eax, eax
je 0x10034c59
cmp dword [0x10069198], 8
mov eax, dword [0x10069184]
jae 0x10034be8
mov eax, 0x10069184
push dword [0x10069194]
lea ecx, [ebp - 0x138]
push eax
push dword [ebp - 0x128]
push ebx
call fcn.10044eec
test eax, eax
je 0x10034c22
push ebx
push 0x10069018
lea eax, [ebp - 0x138]
push eax
call fcn.10044eec
test eax, eax
je 0x10034c22
push 0x10005ea0
jmp 0x10034c27
push 0x10005e48
xor eax, eax
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], ax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 7
call fcn.10044eec
lea eax, [ebp - 0x2c]
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.10044eec
jmp 0x10034c8b
lea ebx, [edi + 0x39c]
mov ecx, ebx
call fcn.10044eec
cmp dword [eax + 0x10], 0
je 0x10034c75
cmp dword [edi + 0x3bc], 4
je 0x10034cd3
mov eax, dword [ebx]
push 4
lea ecx, [ebp - 0x48]
push ecx
mov ecx, ebx
call dword [eax + 4]
xor ebx, ebx
jmp 0x10034b29
xor ebx, ebx
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0xdc], 0x10005310
call fcn.10055f10
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.10044eec
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xc
call fcn.10055f10
mov eax, dword [ebp - 0x89c]
inc eax
mov dword [ebp - 0x89c], eax
cmp eax, esi
jge 0x10034cec
mov ebx, eax
jmp 0x10034a1b
push 0x10005db0
push 0x21
lea ecx, [ebp - 0x894]
call fcn.10044eec
jmp 0x100347b5
xor ebx, ebx
lea ecx, [edi + 0x39c]
call fcn.10044eec
cmp dword [eax + 0x10], ebx
je 0x10034d05
cmp dword [edi + 0x3bc], 4
je 0x10034d1c
push 0x10005f48
push 0x21
lea ecx, [ebp - 0x894]
call fcn.10044eec
jmp 0x100347b5
lea ecx, [ebp - 0x934]
call fcn.10056ee6
xor eax, eax
push 0x10005fe0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.10044eec
lea eax, [ebp - 0x934]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x13
call fcn.10055fe7
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x12
call fcn.10044eec
lea ecx, [ebp - 0x934]
mov esi, ebx
call fcn.10044eec
test eax, eax
jle 0x10034edb
lea ebx, [edi + 0x400]
lea ecx, [ebp - 0x68]
call fcn.10055e9f
lea eax, [ebp - 0x68]
push eax
push esi
lea ecx, [ebp - 0x934]
mov byte [ebp - 4], 0x14
call fcn.10044eec
and dword [ebp - 0x38], 0
xor eax, eax
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x15
call fcn.1005654f
push 1
lea eax, [ebp - 0x48]
push eax
push 0x10068e90
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x16
call fcn.1005658a
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x8a0]
push eax
mov ecx, ebx
call fcn.10044eec
mov eax, dword [edi + 0x404]
cmp eax, dword [ebp - 0x8a0]
lea eax, [ebp - 0x48]
push eax
jne 0x10034e88
lea eax, [ebp - 0x89c]
push eax
lea ecx, [edi + 0x3d4]
call fcn.10044eec
mov eax, dword [edi + 0x3d8]
cmp eax, dword [ebp - 0x89c]
lea eax, [ebp - 0x48]
jne 0x10034e79
push 0
push eax
push 0x1006914c
call fcn.10044eec
test eax, eax
lea eax, [ebp - 0x48]
push eax
jne 0x10034e59
push 0x10006020
push 2
call fcn.100393f6
jmp 0x10034e94
lea eax, [ebp - 0x8b0]
push eax
mov ecx, ebx
call fcn.10044eec
lea eax, [ebp - 0x48]
push eax
push 0x10006120
push 2
call fcn.10032a65
jmp 0x10034e94
push eax
push 0x100061a0
push 2
call fcn.1003945b
jmp 0x10034e94
push 0x100062c0
push 2
call fcn.100394c3
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x15
mov dword [ebp - 0xdc], 0x10005310
call fcn.10055f10
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10044eec
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x12
call fcn.10055f10
lea ecx, [ebp - 0x934]
inc esi
call fcn.10044eec
cmp esi, eax
jl 0x10034d8c
xor ebx, ebx
lea ecx, [ebp - 0x914]
call fcn.10056ee6
xor eax, eax
push 0x100063a8
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.10044eec
lea eax, [ebp - 0x914]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x18
call fcn.10055fe7
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.10044eec
lea ecx, [ebp - 0x914]
call fcn.10044eec
test eax, eax
jle 0x100351fb
lea esi, [edi + 0x30]
mov dword [ebp - 0x8b4], esi
lea ecx, [ebp - 0xd8]
call fcn.10055e9f
lea eax, [ebp - 0xd8]
push eax
push ebx
lea ecx, [ebp - 0x914]
mov byte [ebp - 4], 0x19
call fcn.10044eec
and dword [ebp - 0x1c], 0
xor eax, eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x1a
call fcn.1005654f
push 1
lea eax, [ebp - 0x2c]
push eax
push 0x10068e90
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x1b
call fcn.1005658a
lea ecx, [ebp - 0x3c]
call fcn.10056ee6
lea eax, [ebp - 0x3c]
push eax
push 0x100691f4
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x1c
call fcn.10055fe7
lea eax, [ebp - 0x895]
push eax
lea eax, [ebp - 0x89a]
push eax
lea ecx, [ebp - 0x78]
call fcn.10037aef
mov byte [ebp - 0x4c], 0
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x1d
call fcn.1003a1e6
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x8b0]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1e
call fcn.10044eec
lea ecx, [ebp - 0x168]
call fcn.10037b97
push 0
push 1
lea ecx, [ebp - 0x184]
call fcn.10044eec
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x1c
call fcn.10037b97
mov eax, dword [ebp - 0x8b0]
add eax, 0x24
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x8a0], eax
xor esi, esi
call fcn.10044eec
test eax, eax
jle 0x1003519b
mov edi, dword [ebp - 0x8a0]
lea ecx, [ebp - 0x68]
call fcn.10055e9f
lea eax, [ebp - 0x68]
push eax
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x1f
call fcn.10044eec
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0xb8]
call fcn.1005654f
and dword [ebp - 0x84], 0
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x80], ecx
mov word [ebp - 0x94], ax
and dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], ecx
mov word [ebp - 0xf8], ax
push 1
lea eax, [ebp - 0x94]
push eax
push 0x10068e90
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x22
call fcn.1005658a
lea eax, [ebp - 0x94]
push eax
call fcn.10044eec
test al, al
je 0x100350f9
lea eax, [ebp - 0x94]
push eax
push 0x10005a20
push 2
call fcn.100391cc
jmp 0x10035147
push 1
lea eax, [ebp - 0xf8]
push eax
push 0x10069088
lea ecx, [ebp - 0xb8]
call fcn.1005658a
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x94]
push eax
push 0x100063d8
push 2
call fcn.10039574
push 4
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x94]
push eax
mov ecx, edi
call fcn.10037e21
push 0
push 1
lea ecx, [ebp - 0xf8]
call fcn.10044eec
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.10044eec
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0xb8], 0x10005310
call fcn.10055f10
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x1c
call fcn.10055f10
lea ecx, [ebp - 0x3c]
inc esi
call fcn.10044eec
cmp esi, eax
jl 0x10035066
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x1b
call fcn.10056f01
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x11c], 0x10005310
call fcn.10055f10
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.10044eec
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x17
call fcn.10055f10
lea ecx, [ebp - 0x914]
inc ebx
call fcn.10044eec
mov esi, dword [ebp - 0x8b4]
cmp ebx, eax
jl 0x10034f4c
mov edi, dword [ebp - 0x8a4]
lea ecx, [ebp - 0xa74]
call fcn.10055e9f
and dword [ebp - 0x1c], 0
xor eax, eax
push 0x1000645c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.10044eec
push 0
lea eax, [ebp - 0xa74]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x24
call fcn.100560d0
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 0x23
call fcn.10044eec
test bl, bl
je 0x10035445
lea eax, [ebp - 0xa74]
push eax
lea ecx, [ebp - 0x6c]
call fcn.1005654f
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0xe4], 7
mov dword [ebp - 0xe8], ebx
mov word [ebp - 0xf8], ax
push ebx
lea eax, [ebp - 0xf8]
push eax
push 0x10068fa8
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x26
call fcn.1005658a
test al, al
je 0x100352b6
push 4
lea eax, [ebp - 0xf8]
push eax
lea ecx, [edi + 0x5c]
call fcn.10044eec
xor eax, eax
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
push ebx
lea eax, [ebp - 0x48]
push eax
push 0x100690dc
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x27
call fcn.1005658a
test al, al
je 0x10035336
cmp dword [ebp - 0x38], 0
je 0x10035336
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.10044eec
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x28
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x27
call fcn.10044eec
lea ecx, [edi + 0x9c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x10006490
push 2
call fcn.100395e5
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x84], ebx
mov word [ebp - 0x94], ax
mov dword [ebp - 0x18], ecx
push 0x100064e4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.10044eec
push ebx
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0x89c], 1
call fcn.1005658a
test al, al
je 0x10035397
cmp dword [ebp - 0x84], 0
je 0x10035397
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0x29
call fcn.10044eec
test bl, bl
je 0x10035408
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.10044eec
push eax
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x2b
call fcn.10044eec
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x29
call fcn.10044eec
lea ecx, [edi + 0x6c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x94]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x94]
push eax
push 0x100064f8
push 2
call fcn.1003964a
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.10044eec
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10044eec
push 0
push 1
lea ecx, [ebp - 0xf8]
call fcn.10044eec
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x6c], 0x10005310
call fcn.10055f10
lea ecx, [ebp - 0x9f4]
call fcn.10055e9f
and dword [ebp - 0x1c], 0
xor eax, eax
push 0x10006554
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.10044eec
push 0
lea eax, [ebp - 0x9f4]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x2d
call fcn.100560d0
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 0x2c
call fcn.10044eec
test bl, bl
je 0x10035931
lea eax, [ebp - 0x9f4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.1005654f
push 7
pop ecx
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
mov dword [ebp - 0x18], ecx
push 0x100054b4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.10044eec
push ebx
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x30
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.10044eec
push 4
pop esi
test bl, bl
je 0x10035531
lea ecx, [edi + 0x28c]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x10006580
push 2
call fcn.100396af
and dword [ebp - 0x1c], 0
xor eax, eax
push 0x100054cc
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.10044eec
push 0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x31
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.10044eec
test bl, bl
je 0x1003559b
lea ecx, [edi + 0x2b4]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x100065c0
push 2
call fcn.10039714
and dword [ebp - 0x1c], 0
xor eax, eax
push 0x10005538
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.10044eec
push 0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x32
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.10044eec
test bl, bl
je 0x100356c6
cmp dword [0x1006917c], 8
mov eax, dword [0x10069168]
jae 0x100355fc
mov eax, 0x10069168
push dword [0x10069178]
xor ebx, ebx
push eax
push dword [ebp - 0x38]
lea ecx, [ebp - 0x48]
push ebx
call fcn.10044eec
test eax, eax
je 0x1003567d
push ebx
push 0x10068ffc
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
test eax, eax
je 0x1003567d
push 0x10069184
lea ecx, [ebp - 0x48]
call fcn.10044eec
test eax, eax
je 0x10035653
push ebx
push 0x10069018
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
test eax, eax
je 0x10035653
push 0x10006688
jmp 0x10035658
push 0x10006640
lea ecx, [ebp - 0x114]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
lea ecx, [ebp - 0x114]
push ebx
push 1
call fcn.10044eec
jmp 0x100356c8
lea ecx, [edi + 0x2dc]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
xor eax, eax
push 0x10006600
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.10044eec
lea eax, [ebp - 0x2c]
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
jmp 0x10035673
xor ebx, ebx
push 0x10005550
lea ecx, [ebp - 0x114]
call fcn.10044eec
push ebx
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x33
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x114]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.10044eec
test bl, bl
je 0x100357a2
push 0x10069168
lea ecx, [ebp - 0x48]
call fcn.10044eec
test eax, eax
je 0x1003575f
push 0
push 0x10068ffc
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
test eax, eax
je 0x1003575f
push 0x10069184
lea ecx, [ebp - 0x48]
call fcn.10044eec
test eax, eax
je 0x10035758
push 0
push 0x10069018
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
test eax, eax
je 0x10035758
push 0x10006788
jmp 0x1003577e
push 0x10006740
jmp 0x1003577e
lea ecx, [edi + 0x2ec]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x10006700
lea ecx, [ebp - 0x114]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x114]
call fcn.10044eec
push 0x10006800
lea ecx, [ebp - 0x114]
call fcn.10044eec
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x34
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x114]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.10044eec
test bl, bl
je 0x100357fe
lea ecx, [edi + 0x2fc]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x10006820
push 2
call fcn.10039779
push 0x10006864
lea ecx, [ebp - 0x114]
call fcn.10044eec
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x35
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x114]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.10044eec
test bl, bl
je 0x1003585a
lea ecx, [edi + 0x324]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x10006888
push 2
call fcn.10032b8b
push 0x100054e4
lea ecx, [ebp - 0x114]
call fcn.10044eec
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x36
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x114]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.10044eec
test bl, bl
je 0x100358b6
lea ecx, [edi + 0x34c]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x100068cc
push 2
call fcn.100397de
push 0x100054fc
lea ecx, [ebp - 0x114]
call fcn.10044eec
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x37
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x114]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.10044eec
test bl, bl
je 0x10035912
lea ecx, [edi + 0x374]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x10006908
push 2
call fcn.10032b8b
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10044eec
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x6c], 0x10005310
call fcn.10055f10
lea ecx, [ebp - 0xa34]
call fcn.10055e9f
push 0x1000694c
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x38
call fcn.10044eec
push 0
lea ecx, [ebp - 0xa34]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x39
call fcn.100560d0
push 0
push 1
lea ecx, [ebp - 0x114]
mov bl, al
mov byte [ebp - 4], 0x38
call fcn.10044eec
test bl, bl
je 0x10035efb
lea eax, [ebp - 0xa34]
push eax
lea ecx, [ebp - 0x6c]
call fcn.1005654f
push 0
push 0
lea ecx, [ebp - 0x114]
call fcn.10044eec
mov bh, byte [ebp + 0xc]
mov byte [ebp - 4], 0x3b
test bh, bh
jne 0x10035a02
push 0x1000697c
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push 0
lea ecx, [ebp - 0x114]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x3c
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0xb0]
mov bl, al
mov byte [ebp - 4], 0x3b
call fcn.10044eec
test bl, bl
je 0x10035a02
push 4
lea eax, [ebp - 0x114]
push eax
lea ecx, [edi + 0x1ec]
call fcn.10044eec
push 0
push 0
lea ecx, [ebp - 0x48]
call fcn.10044eec
push 0x1000531c
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x3d
call fcn.10044eec
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x3e
mov dword [ebp - 0x89c], 2
call fcn.1005658a
test al, al
je 0x10035a4d
cmp dword [ebp - 0x38], 0
je 0x10035a4d
mov bl, 1
jmp 0x10035a4f
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0x3d
call fcn.10044eec
test bl, bl
je 0x10035ac5
push 0
push 0x10068ffc
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
test eax, eax
jne 0x10035b1e
lea ecx, [edi + 0x224]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x10006988
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.10044eec
mov esi, 0x10069018
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.10044eec
push 0x10006a50
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x3f
call fcn.10044eec
push 0
lea ecx, [ebp - 0x94]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x40
mov dword [ebp - 0x89c], 4
call fcn.1005658a
test al, al
je 0x10035b7b
cmp dword [ebp - 0x84], 0
je 0x10035b7b
mov bl, 1
jmp 0x10035b7d
push 0
mov esi, 0x10069018
push esi
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
test eax, eax
jne 0x10035aca
lea ecx, [edi + 0x224]
push 4
lea edx, [ebp - 0x895]
mov byte [ebp - 0x895], al
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push 0x100069f8
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.10044eec
jmp 0x10035aca
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0x3f
call fcn.10044eec
test bl, bl
je 0x10035caa
push 0
push 0x10068ffc
lea eax, [ebp - 0x94]
push eax
call fcn.10044eec
test eax, eax
jne 0x10035c54
lea ecx, [edi + 0x214]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x10006a78
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.10044eec
lea ecx, [edi + 0x1ec]
call fcn.10044eec
cmp dword [eax], 0
jne 0x10035caa
push 0x10006ad8
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.10044eec
lea ecx, [edi + 0x224]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 0
call dword [eax + 4]
jmp 0x10035caa
push 0
push esi
lea eax, [ebp - 0x94]
push eax
call fcn.10044eec
test eax, eax
jne 0x10035caa
lea ecx, [edi + 0x214]
push 4
lea edx, [ebp - 0x895]
mov byte [ebp - 0x895], al
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push 0x10006bc8
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push 0
push 0
lea ecx, [ebp - 0xf8]
call fcn.10044eec
push 0x10006c28
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x41
call fcn.10044eec
push 0
lea ecx, [ebp - 0xf8]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x42
mov dword [ebp - 0x89c], 8
call fcn.1005658a
test al, al
je 0x10035cfe
cmp dword [ebp - 0xe8], 0
je 0x10035cfe
mov bl, 1
jmp 0x10035d00
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0x41
call fcn.10044eec
test bl, bl
je 0x10035dad
push 0
push 0x10068ffc
lea eax, [ebp - 0xf8]
push eax
call fcn.10044eec
test eax, eax
jne 0x10035d57
lea ecx, [edi + 0x204]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x10006c40
jmp 0x10035d89
push 0
push esi
lea eax, [ebp - 0xf8]
push eax
call fcn.10044eec
test eax, eax
jne 0x10035dad
lea ecx, [edi + 0x204]
push 4
lea edx, [ebp - 0x895]
mov byte [ebp - 0x895], al
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push 0x10006ca0
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push 0
push 0
lea ecx, [ebp - 0x2c]
call fcn.10044eec
push 0x10006d00
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x43
call fcn.10044eec
push 0
lea ecx, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x44
mov dword [ebp - 0x89c], 0x10
call fcn.1005658a
test al, al
je 0x10035df8
cmp dword [ebp - 0x1c], 0
je 0x10035df8
mov bl, 1
jmp 0x10035dfa
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0x43
call fcn.10044eec
test bl, bl
je 0x10035ea1
push 0
push 0x10068ffc
lea eax, [ebp - 0x2c]
push eax
call fcn.10044eec
test eax, eax
jne 0x10035e4e
lea ecx, [edi + 0x23c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x10006d18
jmp 0x10035e7d
push 0
push esi
lea eax, [ebp - 0x2c]
push eax
call fcn.10044eec
test eax, eax
jne 0x10035ea1
lea ecx, [edi + 0x23c]
push 4
lea edx, [ebp - 0x895]
mov byte [ebp - 0x895], al
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push 0x10006d80
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.10044eec
push 0
push 1
lea ecx, [ebp - 0xf8]
call fcn.10044eec
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.10044eec
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10044eec
push 0
push 1
lea ecx, [ebp - 0x114]
call fcn.10044eec
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x6c], 0x10005310
call fcn.10055f10
jmp 0x10035efe
mov bh, byte [ebp + 0xc]
lea ecx, [ebp - 0x9b4]
call fcn.10055e9f
push 0x10006dd8
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x45
call fcn.10044eec
push 0
lea ecx, [ebp - 0x9b4]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x46
call fcn.100560d0
push 0
push 1
lea ecx, [ebp - 0xb0]
mov bl, al
mov byte [ebp - 4], 0x45
call fcn.10044eec
test bl, bl
je 0x10036056
lea eax, [ebp - 0x9b4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.1005654f
push 0
push 0
lea ecx, [ebp - 0x48]
call fcn.10044eec
push 0
lea eax, [ebp - 0x48]
push eax
push 0x10069088
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x48
call fcn.1005658a
cmp dword [ebp - 0x38], 0
je 0x10036037
push 0
mov esi, 0x100027ec
push esi
push 0x100691a0
lea eax, [ebp - 0x48]
push eax
call fcn.1002a48b
push 0
push esi
push 0x100691bc
lea eax, [ebp - 0x48]
push eax
call fcn.1002a48b
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
lea ecx, [edi + 0xf4]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x19
sete al
xor esi, esi
test al, al
je 0x1003600e
cmp esi, ecx
jae 0x10036003
cmp dword [ebp - 0x34], 8
mov eax, dword [ebp - 0x48]
jae 0x10035fef
lea eax, [ebp - 0x48]
movzx eax, word [eax + esi*2]
push eax
call fcn.10044eec
inc esi
test al, al
je 0x1003600e
mov ecx, dword [ebp - 0x38]
jmp 0x10035fdf
test al, al
je 0x1003600e
push 0x10006e08
jmp 0x10036013
push 0x10006e70
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10044eec
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x45
mov dword [ebp - 0x6c], 0x10005310
call fcn.10055f10
test bh, bh
jne 0x100361ba
lea ecx, [ebp - 0x68]
call fcn.10055e9f
push 0x10006f00
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x49
call fcn.10044eec
push 0
lea ecx, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x4a
call fcn.100560d0
push 0
push 1
lea ecx, [ebp - 0xb0]
mov bl, al
mov byte [ebp - 4], 0x49
call fcn.10044eec
test bl, bl
je 0x100361ae
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0xdc]
call fcn.1005654f
xor ebx, ebx
push ebx
push ebx
lea ecx, [ebp - 0xf8]
call fcn.10044eec
push 0x10006f44
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x4c
call fcn.10044eec
push ebx
lea ecx, [ebp - 0xf8]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x4d
mov dword [ebp - 0x89c], 0x20
call fcn.1005658a
test al, al
je 0x1003610f
cmp dword [ebp - 0xe8], ebx
je 0x1003610f
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0x4c
call fcn.10044eec
test bl, bl
je 0x10036186
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.10044eec
push eax
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x4e
call fcn.10044eec
push 0
push 1
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x4c
call fcn.10044eec
lea ecx, [edi + 0x164]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0xf8]
push edx
call dword [eax + 4]
lea eax, [ebp - 0xf8]
push eax
push 0x10006f58
push 2
call fcn.10039843
push 0
push 1
lea ecx, [ebp - 0xf8]
call fcn.10044eec
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x49
mov dword [ebp - 0xdc], 0x10005310
call fcn.10055f10
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x45
call fcn.10055f10
mov ebx, 0x100055bc
push ebx
lea ecx, [ebp - 0x114]
call fcn.10044eec
mov esi, eax
push ebx
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x4f
call fcn.10044eec
push 4
push 1
xor ebx, ebx
push ebx
push esi
push eax
lea eax, [ebp - 0x8f4]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x50
call fcn.100377cd
push ebx
push 1
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x45
call fcn.10044eec
mov ebx, 0x100056d8
push ebx
lea ecx, [ebp - 0x2c]
call fcn.10044eec
mov esi, eax
push ebx
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x51
call fcn.10044eec
push 4
xor ebx, ebx
inc ebx
push ebx
push ebx
push esi
push eax
lea eax, [ebp - 0x8f4]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x52
call fcn.100377cd
push 0
push ebx
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push 0
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x45
call fcn.10044eec
mov ebx, 0x10005830
push ebx
lea ecx, [ebp - 0xf8]
call fcn.10044eec
mov esi, eax
push ebx
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x53
call fcn.10044eec
push 4
push 1
xor ebx, ebx
push ebx
push esi
mov byte [ebp - 4], 0x54
push eax
lea eax, [ebp - 0x8f4]
push eax
mov ecx, edi
call fcn.100377cd
push ebx
push 1
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x45
call fcn.10044eec
mov ebx, 0x10005844
push ebx
lea ecx, [ebp - 0x94]
call fcn.10044eec
mov esi, eax
push ebx
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x55
call fcn.10044eec
push 4
push 1
xor ebx, ebx
push ebx
push esi
push eax
lea eax, [ebp - 0x8f4]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x56
call fcn.100377cd
push ebx
push 1
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x45
call fcn.10044eec
push 0x100055d4
lea ecx, [ebp - 0x48]
call fcn.10044eec
mov esi, eax
push 0x100055e8
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x57
call fcn.10044eec
push 4
push 1
push 1
push esi
push eax
lea eax, [ebp - 0x8f4]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x58
call fcn.100377cd
push ebx
push 1
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x45
call fcn.10044eec
mov ebx, 0x100053f4
push ebx
lea ecx, [ebp - 0xd4]
call fcn.10044eec
mov esi, eax
mov byte [ebp - 4], 0x59
push ebx
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push 4
xor ebx, ebx
push ebx
push 1
push esi
push eax
lea eax, [ebp - 0x8f4]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x5a
call fcn.100377cd
push ebx
push 1
lea ecx, [ebp - 0xb0]
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x45
call fcn.10044eec
lea ecx, [ebp - 0xa94]
call fcn.10055e9f
push 0x10006fe0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x5b
call fcn.10044eec
push ebx
lea ecx, [ebp - 0xa94]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x5c
call fcn.100560d0
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x5b
call fcn.10044eec
test bl, bl
je 0x10036907
lea eax, [ebp - 0xa94]
push eax
lea ecx, [ebp - 0xdc]
call fcn.1005654f
xor ebx, ebx
push ebx
push ebx
lea ecx, [ebp - 0x48]
call fcn.10044eec
push ebx
push ebx
lea ecx, [ebp - 0x94]
call fcn.10044eec
push ebx
push ebx
lea ecx, [ebp - 0xf8]
call fcn.10044eec
push ebx
push ebx
lea ecx, [ebp - 0x114]
call fcn.10044eec
push ebx
push ebx
lea ecx, [ebp - 0x2c]
call fcn.10044eec
push 0x10007018
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x62
call fcn.10044eec
push ebx
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x63
mov dword [ebp - 0x89c], 0x40
call fcn.1005658a
test al, al
je 0x100364bc
cmp dword [ebp - 0x38], ebx
je 0x100364bc
mov bl, 1
push 0x62
pop esi
push 0
push 1
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.10044eec
test bl, bl
je 0x1003655e
xor ebx, ebx
push ebx
push 0x10069018
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
test eax, eax
jne 0x10036529
lea ecx, [edi + 0x24c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], bl
call dword [eax + 4]
push 0x10007038
lea ecx, [ebp - 0x64]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.10044eec
jmp 0x10036560
push ebx
push 0x10068ffc
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
test eax, eax
jne 0x10036560
lea ecx, [edi + 0x24c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x10007090
jmp 0x1003650a
xor ebx, ebx
push 0x100070ec
lea ecx, [ebp - 0x64]
call fcn.10044eec
push ebx
lea ecx, [ebp - 0x94]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x64
mov dword [ebp - 0x89c], 0x80
call fcn.1005658a
test al, al
je 0x1003659e
cmp dword [ebp - 0x84], 0
je 0x1003659e
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.10044eec
test bl, bl
je 0x10036643
xor ebx, ebx
push ebx
push 0x10069018
lea eax, [ebp - 0x94]
push eax
call fcn.10044eec
test eax, eax
jne 0x1003660b
lea ecx, [edi + 0x25c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], bl
call dword [eax + 4]
push 0x10007108
lea ecx, [ebp - 0x64]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.10044eec
jmp 0x10036645
push ebx
push 0x10068ffc
lea eax, [ebp - 0x94]
push eax
call fcn.10044eec
test eax, eax
jne 0x10036645
lea ecx, [edi + 0x25c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x10007160
jmp 0x100365ec
xor ebx, ebx
push 0x100071b8
lea ecx, [ebp - 0x64]
call fcn.10044eec
push ebx
lea ecx, [ebp - 0xf8]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x65
mov dword [ebp - 0x89c], 0x100
call fcn.1005658a
test al, al
je 0x10036683
cmp dword [ebp - 0xe8], 0
je 0x10036683
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.10044eec
test bl, bl
je 0x10036728
xor ebx, ebx
push ebx
push 0x10069018
lea eax, [ebp - 0xf8]
push eax
call fcn.10044eec
test eax, eax
jne 0x100366f0
lea ecx, [edi + 0x26c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], bl
call dword [eax + 4]
push 0x100071d8
lea ecx, [ebp - 0x64]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.10044eec
jmp 0x1003672a
push ebx
push 0x10068ffc
lea eax, [ebp - 0xf8]
push eax
call fcn.10044eec
test eax, eax
jne 0x1003672a
lea ecx, [edi + 0x26c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x10007230
jmp 0x100366d1
xor ebx, ebx
push 0x10007288
lea ecx, [ebp - 0x64]
call fcn.10044eec
push ebx
lea ecx, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x66
mov dword [ebp - 0x89c], 0x200
call fcn.1005658a
test al, al
je 0x10036762
cmp dword [ebp - 0x1c], 0
je 0x10036762
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.10044eec
test bl, bl
je 0x10036801
xor ebx, ebx
push ebx
push 0x10069018
lea eax, [ebp - 0x2c]
push eax
call fcn.10044eec
test eax, eax
jne 0x100367cc
lea ecx, [edi + 0x27c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], bl
call dword [eax + 4]
push 0x100072b0
lea ecx, [ebp - 0x64]
call fcn.10044eec
push eax
push 2
call fcn.1003f07d
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.10044eec
jmp 0x10036803
push ebx
push 0x10068ffc
lea eax, [ebp - 0x2c]
push eax
call fcn.10044eec
test eax, eax
jne 0x10036803
lea ecx, [edi + 0x27c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x10007310
jmp 0x100367ad
xor ebx, ebx
push 0x10007370
lea ecx, [ebp - 0x64]
call fcn.10044eec
push ebx
lea ecx, [ebp - 0x114]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x67
mov dword [ebp - 0x89c], 0x400
call fcn.1005658a
test al, al
je 0x10036841
cmp dword [ebp - 0x104], 0
je 0x10036841
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.10044eec
test bl, bl
je 0x100368aa
push 0x3b
lea esi, [edi + 0x1b4]
push esi
lea eax, [ebp - 0x114]
push eax
call fcn.10031801
mov esi, dword [esi]
cmp esi, dword [edi + 0x1b8]
je 0x100368aa
mov ebx, 0x100691bc
jmp 0x10036885
push 1
push 0
mov ecx, esi
call fcn.10044eec
push 1
push ebx
push esi
call fcn.1002a3b1
test al, al
jne 0x1003687a
push esi
push 0x10007390
push 2
call fcn.100391cc
add esi, 0x1c
cmp esi, dword [edi + 0x1b8]
jne 0x10036885
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0x114]
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0xf8]
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.10044eec
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x5b
mov dword [ebp - 0xdc], 0x10005310
call fcn.10055f10
jmp 0x10036909
xor ebx, ebx
lea ecx, [ebp - 0x954]
call fcn.10056ee6
push 0x100073f4
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x68
call fcn.10044eec
lea ecx, [ebp - 0x954]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x69
call fcn.10055fe7
push ebx
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x68
call fcn.10044eec
push 1
lea eax, [edi + 0x42c]
push eax
lea eax, [ebp - 0x954]
push eax
call fcn.1003a757
lea ecx, [ebp - 0x904]
call fcn.10056ee6
push 0x10007424
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x6a
call fcn.10044eec
lea ecx, [ebp - 0x904]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x6b
call fcn.10055fe7
push ebx
push 1
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x6a
call fcn.10044eec
lea ecx, [ebp - 0xa54]
call fcn.10055e9f
lea ecx, [ebp - 0x904]
mov byte [ebp - 4], 0x6c
mov esi, ebx
call fcn.10044eec
test eax, eax
jle 0x10036baf
lea eax, [ebp - 0xa54]
push eax
push esi
lea ecx, [ebp - 0x904]
call fcn.10044eec
lea eax, [ebp - 0xa54]
push eax
lea ecx, [ebp - 0xdc]
call fcn.1005654f
push ebx
push ebx
lea ecx, [ebp - 0x114]
call fcn.10044eec
push 1
lea eax, [ebp - 0x114]
push eax
push 0x10068e90
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x6e
call fcn.1005658a
push ebx
push ebx
lea ecx, [ebp - 0x94]
call fcn.10044eec
push ebx
lea eax, [ebp - 0x94]
push eax
push 0x100690c0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x6f
call fcn.1005658a
test al, al
je 0x10036d79
push ebx
push 0x100690a4
lea eax, [ebp - 0x94]
push eax
call fcn.10044eec
test eax, eax
jne 0x10036a6e
mov dword [ebp - 0x8a8], 3
jmp 0x10036aca
push ebx
push 0x10068e58
lea eax, [ebp - 0x94]
push eax
call fcn.10044eec
test eax, eax
je 0x10036ac0
push ebx
push 0x10068e3c
lea eax, [ebp - 0x94]
push eax
call fcn.10044eec
test eax, eax
je 0x10036ac0
push ebx
push 0x10068e20
lea eax, [ebp - 0x94]
push eax
call fcn.10044eec
test eax, eax
jne 0x10036d5b
mov dword [ebp - 0x8a8], 1
jmp 0x10036aca
mov dword [ebp - 0x8a8], 2
push 0x10007548
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x8a2], bl
call fcn.10044eec
push ebx
lea ecx, [ebp - 0x94]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x70
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x6f
call fcn.10044eec
test bl, bl
je 0x10036b2c
xor ebx, ebx
push ebx
push 0x1000755c
lea eax, [ebp - 0x94]
push eax
call fcn.10044eec
test eax, eax
jne 0x10036b2e
mov byte [ebp - 0x8a2], 1
jmp 0x10036b2e
xor ebx, ebx
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x6c]
call fcn.10044eec
push eax
lea eax, [ebp - 0x8b0]
push eax
lea ecx, [edi + 0x43c]
mov byte [ebp - 4], 0x71
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0x6c]
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0x114]
call fcn.10044eec
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x6c
mov dword [ebp - 0xdc], 0x10005310
call fcn.10055f10
lea ecx, [ebp - 0x904]
inc esi
call fcn.10044eec
cmp esi, eax
jl 0x100369cc
lea ecx, [ebp - 0xa14]
call fcn.10055e9f
push 0x10007568
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x72
call fcn.10044eec
push ebx
lea ecx, [ebp - 0xa14]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x73
call fcn.100560d0
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x72
call fcn.10044eec
test bl, bl
je 0x10036d97
lea eax, [ebp - 0xa14]
push eax
lea ecx, [ebp - 0xdc]
call fcn.1005654f
xor ebx, ebx
push ebx
push ebx
lea ecx, [ebp - 0x48]
call fcn.10044eec
push 0x100075a8
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x75
call fcn.10044eec
push ebx
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x76
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x75
call fcn.10044eec
test bl, bl
je 0x10036c78
push 0xa
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
mov dword [edi + 0x474], eax
lea eax, [ebp - 0x48]
push eax
push 0x100075c0
push 2
call fcn.1002e0d4
push 0x10007644
lea ecx, [ebp - 0x64]
call fcn.10044eec
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x77
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x75
call fcn.10044eec
test bl, bl
je 0x10036cd2
push 0xa
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
mov dword [edi + 0x478], eax
lea eax, [ebp - 0x48]
push eax
push 0x10007660
push 2
call fcn.10039843
push 0x100076e8
lea ecx, [ebp - 0x64]
call fcn.10044eec
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x78
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x75
call fcn.10044eec
test bl, bl
je 0x10036d33
push 0xa
lea eax, [ebp - 0x48]
push eax
call fcn.10044eec
push eax
call fcn.10044eec
mov word [edi + 0x47c], ax
lea eax, [ebp - 0x48]
push eax
push 0x10007710
push 2
call fcn.10032bf0
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10044eec
mov esi, 0x10005310
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x72
mov dword [ebp - 0xdc], esi
call fcn.10055f10
jmp 0x10036d9c
lea eax, [ebp - 0x94]
push eax
push 0x10007460
push 0x21
lea ecx, [ebp - 0x894]
call fcn.10044eec
jmp 0x100347b5
lea eax, [ebp - 0x114]
push eax
push 0x100074d8
push 0x21
lea ecx, [ebp - 0x894]
call fcn.10044eec
jmp 0x100347b5
mov esi, 0x10005310
lea ecx, [ebp - 0x974]
call fcn.10055e9f
push 0x100077a0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x79
call fcn.10044eec
push 0
lea ecx, [ebp - 0x974]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x7a
call fcn.100560d0
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x79
call fcn.10044eec
test bl, bl
je 0x10036eab
lea eax, [ebp - 0x974]
push eax
lea ecx, [ebp - 0xdc]
call fcn.1005654f
xor ebx, ebx
push ebx
push ebx
lea ecx, [ebp - 0x2c]
call fcn.10044eec
push 0x100077c8
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x7c
call fcn.10044eec
push ebx
lea ecx, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x7d
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x7c
call fcn.10044eec
test bl, bl
je 0x10036e7c
call fcn.1003eff7
test al, al
je 0x10036e5e
lea eax, [ebp - 0x2c]
push eax
push 0x100077e0
push 2
call fcn.10039a6d
push 0
push 0x1000780c
lea eax, [ebp - 0x2c]
push eax
call fcn.10044eec
test eax, eax
jne 0x1003701b
and dword [edi + 0x470], eax
lea eax, [ebp - 0x974]
push eax
mov ecx, edi
call fcn.1003778b
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.10044eec
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x79
mov dword [ebp - 0xdc], esi
call fcn.10055f10
lea ecx, [ebp - 0x9d4]
call fcn.10055e9f
push 0x10007884
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x7e
call fcn.10044eec
push 0
lea ecx, [ebp - 0x9d4]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x7f
call fcn.100560d0
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x7e
call fcn.10044eec
test bl, bl
je 0x10037109
lea eax, [ebp - 0x9d4]
push eax
lea ecx, [ebp - 0xdc]
call fcn.1005654f
xor ebx, ebx
push ebx
push ebx
lea ecx, [ebp - 0xf8]
call fcn.10044eec
push ebx
push ebx
lea ecx, [ebp - 0x2c]
call fcn.10044eec
push 0x100078b0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x82
call fcn.10044eec
push ebx
lea ecx, [ebp - 0xf8]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x83
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x82
call fcn.10044eec
test bl, bl
je 0x10036fa1
call fcn.1003eff7
test al, al
je 0x10036f80
lea eax, [ebp - 0xf8]
push eax
push 0x100078c0
push 2
call fcn.10039b72
push 0
push 0x100078e4
lea eax, [ebp - 0xf8]
push eax
call fcn.10044eec
test eax, eax
jne 0x10037059
and dword [edi + 0x494], eax
push 0x10007930
lea ecx, [ebp - 0x64]
call fcn.10044eec
push 0
lea ecx, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x84
call fcn.1005658a
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x82
call fcn.10044eec
test bl, bl
je 0x100370d7
call fcn.1003eff7
test al, al
je 0x10036ff7
lea eax, [ebp - 0x2c]
push eax
push 0x1000794c
push 2
call fcn.10039c77
xor ebx, ebx
push ebx
push 0x100078e4
lea eax, [ebp - 0x2c]
push eax
call fcn.10044eec
test eax, eax
jne 0x1003709d
mov dword [edi + 0x498], ebx
jmp 0x100370d9
push 0
push 0x10007820
lea eax, [ebp - 0x2c]
push eax
call fcn.10044eec
test eax, eax
jne 0x1003703e
mov dword [edi + 0x470], 1
jmp 0x10036e7c
lea eax, [ebp - 0x2c]
push eax
push 0x10007840
push 0x2c
lea ecx, [ebp - 0x894]
call fcn.10044eec
jmp 0x100347b5
push 0
push 0x100078ec
lea eax, [ebp - 0xf8]
push eax
call fcn.10044eec
test eax, eax
jne 0x1003707f
mov dword [edi + 0x494], 1
jmp 0x10036fa1
lea eax, [ebp - 0xf8]
push eax
push 0x100078f4
push 0x2c
lea ecx, [ebp - 0x894]
call fcn.10044eec
jmp 0x100347b5
push ebx
push 0x100078ec
lea eax, [ebp - 0x2c]
push eax
call fcn.10044eec
test eax, eax
jne 0x100370bc
mov dword [edi + 0x498], 1
jmp 0x100370d9
lea eax, [ebp - 0x2c]
push eax
push 0x10007980
push 0x2c
lea ecx, [ebp - 0x894]
call fcn.10044eec
jmp 0x100347b5
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.10044eec
push ebx
push 1
lea ecx, [ebp - 0xf8]
call fcn.10044eec
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x7e
mov dword [ebp - 0xdc], esi
call fcn.10055f10
jmp 0x1003710b
xor ebx, ebx
lea ecx, [ebp - 0x9d4]
mov byte [edi + 0x480], 1
mov byte [ebp - 4], 0x79
call fcn.10055f10
lea ecx, [ebp - 0x974]
mov byte [ebp - 4], 0x72
call fcn.10055f10
lea ecx, [ebp - 0xa14]
mov byte [ebp - 4], 0x6c
call fcn.10055f10
lea ecx, [ebp - 0xa54]
mov byte [ebp - 4], 0x6a
call fcn.10055f10
lea ecx, [ebp - 0x904]
mov byte [ebp - 4], 0x68
call fcn.10056f01
lea ecx, [ebp - 0x954]
mov byte [ebp - 4], 0x5b
call fcn.10056f01
lea ecx, [ebp - 0xa94]
mov byte [ebp - 4], 0x45
call fcn.10055f10
lea ecx, [ebp - 0x9b4]
mov byte [ebp - 4], 0x38
call fcn.10055f10
lea ecx, [ebp - 0xa34]
mov byte [ebp - 4], 0x2c
call fcn.10055f10
lea ecx, [ebp - 0x9f4]
mov byte [ebp - 4], 0x23
call fcn.10055f10
lea ecx, [ebp - 0xa74]
mov byte [ebp - 4], 0x17
call fcn.10055f10
lea ecx, [ebp - 0x914]
mov byte [ebp - 4], 0x12
call fcn.10056f01
lea ecx, [ebp - 0x934]
mov byte [ebp - 4], 0xc
call fcn.10056f01
lea ecx, [ebp - 0x944]
mov byte [ebp - 4], 0xb
call fcn.10056f01
push ebx
push 1
lea ecx, [ebp - 0x138]
call fcn.10044eec
lea ecx, [ebp - 0x924]
mov byte [ebp - 4], 1
call fcn.10056f01
lea ecx, [ebp - 0x994]
mov byte [ebp - 4], bl
call fcn.10055f10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8f4]
call fcn.10056a71
call fcn.100455a8
ret 8