Function at 0x10058f80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x1008e8e8
mov eax, dword fs:[0]
push eax
sub esp, 0x8e8
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x8e0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [section..data]
xor eax, esp
push eax
lea eax, [esp + 0x8fc]
mov dword fs:[0], eax
mov eax, dword [esp + 0x90c]
mov dword [esp + 0x84], 0
mov dword [esp + 0x8c], eax
mov dword [esp + 0x48], eax
xor eax, eax
mov dword [esp + 0x580], 0
mov dword [esp + 0x584], 0
mov dword [esp + 0x584], 7
mov dword [esp + 0x580], 0
mov word [esp + 0x570], ax
mov dword [esp + 0x904], 1
mov dword [esp + 0x6b0], 0x330032
mov dword [esp + 0x6b4], 0x350034
mov dword [esp + 0x6b8], 0x610053
mov dword [esp + 0x6bc], 0x650066
mov dword [esp + 0x6c0], 0x720054
mov dword [esp + 0x6c4], 0x790061
mov dword [esp + 0x6c8], 0x65002e
mov dword [esp + 0x6cc], 0x650078
mov word [esp + 0x6d0], ax
mov dword [esp + 0x6d4], 0x330032
mov dword [esp + 0x6d8], 0x350034
mov dword [esp + 0x6dc], 0x540052
mov dword [esp + 0x6e0], 0x720050
mov dword [esp + 0x6e4], 0x74006f
mov dword [esp + 0x6e8], 0x630065
mov dword [esp + 0x6ec], 0x2e0074
mov dword [esp + 0x6f0], 0x780065
mov dword [esp + 0x6f4], 0x65
mov dword [esp + 0x60c], 0x510051
mov dword [esp + 0x610], 0x430050
mov dword [esp + 0x614], 0x540052
mov dword [esp + 0x618], 0x2e0050
mov dword [esp + 0x61c], 0x780065
mov dword [esp + 0x620], 0x65
mov dword [esp + 0x658], 0x510051
mov dword [esp + 0x65c], 0x430050
mov dword [esp + 0x660], 0x720054
mov dword [esp + 0x664], 0x790061
mov dword [esp + 0x668], 0x65002e
mov dword [esp + 0x66c], 0x650078
mov word [esp + 0x670], ax
mov dword [esp + 0x59c], 0x360033
mov dword [esp + 0x5a0], 0x730030
mov dword [esp + 0x5a4], 0x2e0064
mov dword [esp + 0x5a8], 0x780065
mov dword [esp + 0x5ac], 0x65
mov dword [esp + 0x588], 0x360033
mov dword [esp + 0x58c], 0x720030
mov dword [esp + 0x590], 0x2e0070
mov dword [esp + 0x594], 0x780065
mov dword [esp + 0x598], 0x65
mov dword [esp + 0x624], 0x360033
mov dword [esp + 0x628], 0x740030
mov dword [esp + 0x62c], 0x610072
mov dword [esp + 0x630], 0x2e0079
mov dword [esp + 0x634], 0x780065
mov dword [esp + 0x638], 0x65
mov dword [esp + 0x5dc], 0x610042
mov dword [esp + 0x5e0], 0x640069
mov dword [esp + 0x5e4], 0x410075
mov dword [esp + 0x5e8], 0x2e006e
mov dword [esp + 0x5ec], 0x780065
mov dword [esp + 0x5f0], 0x65
mov dword [esp + 0x690], 0x610042
mov dword [esp + 0x694], 0x640069
mov dword [esp + 0x698], 0x410075
mov dword [esp + 0x69c], 0x53006e
mov dword [esp + 0x6a0], 0x630076
mov dword [esp + 0x6a4], 0x65002e
mov dword [esp + 0x6a8], 0x650078
mov word [esp + 0x6ac], ax
mov dword [esp + 0x5f4], 0x610042
mov dword [esp + 0x5f8], 0x640069
mov dword [esp + 0x5fc], 0x530075
mov dword [esp + 0x600], 0x2e0064
mov dword [esp + 0x604], 0x780065
mov dword [esp + 0x608], 0x65
mov dword [esp + 0x7c4], 0x610042
mov dword [esp + 0x7c8], 0x640069
mov dword [esp + 0x7cc], 0x530075
mov dword [esp + 0x7d0], 0x540064
mov dword [esp + 0x7d4], 0x610072
mov dword [esp + 0x7d8], 0x2e0079
mov dword [esp + 0x7dc], 0x780065
mov dword [esp + 0x7e0], 0x65
mov dword [esp + 0x63c], 0x78006b
mov dword [esp + 0x640], 0x730065
mov dword [esp + 0x644], 0x6f0063
mov dword [esp + 0x648], 0x650072
mov dword [esp + 0x64c], 0x65002e
mov dword [esp + 0x650], 0x650078
mov word [esp + 0x654], ax
mov dword [esp + 0x5c4], 0x78006b
mov dword [esp + 0x5c8], 0x740065
mov dword [esp + 0x5cc], 0x610072
mov dword [esp + 0x5d0], 0x2e0079
mov dword [esp + 0x5d4], 0x780065
mov dword [esp + 0x5d8], 0x65
mov dword [esp + 0x5b0], 0x53004b
mov dword [esp + 0x5b4], 0x660061
mov dword [esp + 0x5b8], 0x2e0065
mov dword [esp + 0x5bc], 0x780065
mov dword [esp + 0x5c0], 0x65
mov dword [esp + 0x674], 0x53004b
mov dword [esp + 0x678], 0x660061
mov dword [esp + 0x67c], 0x540065
mov dword [esp + 0x680], 0x610072
mov dword [esp + 0x684], 0x2e0079
mov dword [esp + 0x688], 0x780065
mov dword [esp + 0x68c], 0x65
mov dword [esp + 0x750], 0x690048
mov dword [esp + 0x754], 0x730070
mov dword [esp + 0x758], 0x720054
mov dword [esp + 0x75c], 0x790061
mov dword [esp + 0x760], 0x65002e
mov dword [esp + 0x764], 0x650078
mov word [esp + 0x768], ax
mov dword [esp + 0x76c], 0x510051
mov dword [esp + 0x770], 0x720042
mov dword [esp + 0x774], 0x77006f
mov dword [esp + 0x778], 0x650073
mov dword [esp + 0x77c], 0x2e0072
mov dword [esp + 0x780], 0x780065
mov dword [esp + 0x784], 0x65
mov dword [esp + 0x788], 0x730054
mov dword [esp + 0x78c], 0x650053
mov dword [esp + 0x790], 0x760072
mov dword [esp + 0x794], 0x630069
mov dword [esp + 0x798], 0x2e0065
mov dword [esp + 0x79c], 0x780065
mov dword [esp + 0x7a0], 0x65
mov dword [esp + 0x824], 0x330032
mov dword [esp + 0x828], 0x350034
mov dword [esp + 0x82c], 0x780045
mov dword [esp + 0x830], 0x6c0070
mov dword [esp + 0x834], 0x72006f
mov dword [esp + 0x838], 0x720065
mov dword [esp + 0x83c], 0x65002e
mov dword [esp + 0x840], 0x650078
mov word [esp + 0x844], ax
mov dword [esp + 0x708], 0x360033
mov dword [esp + 0x70c], 0x730030
mov dword [esp + 0x710], 0x2e0065
mov dword [esp + 0x714], 0x780065
mov dword [esp + 0x718], 0x65
mov dword [esp + 0x848], 0x6f0053
mov dword [esp + 0x84c], 0x6f0067
mov dword [esp + 0x850], 0x450075
mov dword [esp + 0x854], 0x700078
mov dword [esp + 0x858], 0x6f006c
mov dword [esp + 0x85c], 0x650072
mov dword [esp + 0x860], 0x2e0072
mov dword [esp + 0x864], 0x780065
mov dword [esp + 0x868], 0x65
mov dword [esp + 0x71c], 0x680063
mov dword [esp + 0x720], 0x6f0072
mov dword [esp + 0x724], 0x65006d
mov dword [esp + 0x728], 0x65002e
mov dword [esp + 0x72c], 0x650078
mov word [esp + 0x730], ax
xorps xmm0, xmm0
mov dword [esp + 0x558], eax
movq qword [esp + 0x550], xmm0
mov dword [esp + 0x8c0], 0x720050
mov dword [esp + 0x8c4], 0x74006f
mov dword [esp + 0x8c8], 0x630065
mov dword [esp + 0x8cc], 0x5f0074
mov dword [esp + 0x8d0], 0x330032
mov dword [esp + 0x8d4], 0x350034
mov dword [esp + 0x8d8], 0x780045
mov dword [esp + 0x8dc], 0x6c0070
mov dword [esp + 0x8e0], 0x72006f
mov dword [esp + 0x8e4], 0x720065
mov dword [esp + 0x8e8], 0x65002e
mov dword [esp + 0x8ec], 0x650078
mov word [esp + 0x8f0], ax
mov dword [esp + 0x890], 0x680053
mov dword [esp + 0x894], 0x650069
mov dword [esp + 0x898], 0x64006c
mov dword [esp + 0x89c], 0x32005f
mov dword [esp + 0x8a0], 0x340033
mov dword [esp + 0x8a4], 0x450035
mov dword [esp + 0x8a8], 0x700078
mov dword [esp + 0x8ac], 0x6f006c
mov dword [esp + 0x8b0], 0x650072
mov dword [esp + 0x8b4], 0x2e0072
mov dword [esp + 0x8b8], 0x780065
mov dword [esp + 0x8bc], 0x65
mov dword [esp + 0x7e4], 0x330032
mov dword [esp + 0x7e8], 0x350034
mov dword [esp + 0x7ec], 0x610053
mov dword [esp + 0x7f0], 0x650066
mov dword [esp + 0x7f4], 0x760053
mov dword [esp + 0x7f8], 0x2e0063
mov dword [esp + 0x7fc], 0x780065
mov dword [esp + 0x800], 0x65
mov dword [esp + 0x804], 0x330032
mov dword [esp + 0x808], 0x350034
mov dword [esp + 0x80c], 0x6f0053
mov dword [esp + 0x810], 0x740066
mov dword [esp + 0x814], 0x760053
mov dword [esp + 0x818], 0x2e0063
mov dword [esp + 0x81c], 0x780065
mov dword [esp + 0x820], 0x65
mov dword [esp + 0x86c], 0x330032
mov dword [esp + 0x870], 0x350034
mov dword [esp + 0x874], 0x690050
mov dword [esp + 0x878], 0x79006e
mov dword [esp + 0x87c], 0x6e0069
mov dword [esp + 0x880], 0x760053
mov dword [esp + 0x884], 0x2e0063
mov dword [esp + 0x888], 0x780065
mov dword [esp + 0x88c], 0x65
mov dword [esp + 0x7a4], 0x6f0053
mov dword [esp + 0x7a8], 0x6f0067
mov dword [esp + 0x7ac], 0x430075
mov dword [esp + 0x7b0], 0x6f006c
mov dword [esp + 0x7b4], 0x640075
mov dword [esp + 0x7b8], 0x65002e
mov dword [esp + 0x7bc], 0x650078
mov word [esp + 0x7c0], ax
mov dword [esp + 0x734], 0x6f0053
mov dword [esp + 0x738], 0x6f0067
mov dword [esp + 0x73c], 0x530075
mov dword [esp + 0x740], 0x630076
mov dword [esp + 0x744], 0x65002e
mov dword [esp + 0x748], 0x650078
mov word [esp + 0x74c], ax
mov dword [esp + 0x6f8], 0x710071
mov dword [esp + 0x6fc], 0x65002e
mov dword [esp + 0x700], 0x650078
mov word [esp + 0x704], ax
mov dword [esp + 0x550], eax
mov dword [esp + 0x554], eax
mov dword [esp + 0x558], eax
mov byte [esp + 0x904], 2
mov dword [esp + 0x2c], eax
mov dword [esp + 0x14], 1
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], eax
mov word [esp + 0x18], ax
cmp word [esp + 0x6b0], ax
jne 0x100599c0
xor ecx, ecx
jmp 0x100599df
lea ecx, [esp + 0x6b0]
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100599d0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x6b4]
push eax
lea ecx, [esp + 0x20]
call fcn.10003000
mov byte [esp + 0x904], 3
xor eax, eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
cmp word [esp + 0x6d4], ax
jne 0x10059a2e
xor ecx, ecx
jmp 0x10059a4f
lea ecx, [esp + 0x6d4]
lea edx, [ecx + 2]
jmp 0x10059a40
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10059a40
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x6d8]
push eax
lea ecx, [esp + 0x38]
call fcn.10003000
mov byte [esp + 0x904], 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 5
cmp dword [esp + 0x44], 8
mov ebx, dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete_void__]
jb 0x10059a98
push dword [esp + 0x30]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x2c], 8
jb 0x10059ac7
push dword [esp + 0x18]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x28], 0
mov word [esp + 0x18], ax
mov dword [esp + 0x4c], 2
mov dword [esp + 0x64], 7
mov dword [esp + 0x60], eax
mov word [esp + 0x50], ax
cmp word [esp + 0x60c], ax
jne 0x10059b0d
xor ecx, ecx
jmp 0x10059b26
lea ecx, [esp + 0x60c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10059b17
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x610]
push eax
lea ecx, [esp + 0x58]
call fcn.10003000
mov byte [esp + 0x904], 7
xor eax, eax
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x7c], 7
mov dword [esp + 0x78], 0
mov word [esp + 0x68], ax
cmp word [esp + 0x658], ax
jne 0x10059b75
xor ecx, ecx
jmp 0x10059b8f
lea ecx, [esp + 0x658]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10059b80
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x65c]
push eax
lea ecx, [esp + 0x70]
call fcn.10003000
mov byte [esp + 0x904], 8
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 9
cmp dword [esp + 0x7c], 8
jb 0x10059bd2
push dword [esp + 0x68]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x7c], 7
mov dword [esp + 0x78], 0
mov word [esp + 0x68], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x64], 8
jb 0x10059c01
push dword [esp + 0x50]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x64], 7
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x60], 0
mov word [esp + 0x50], ax
mov dword [esp + 0x14], 3
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], eax
mov word [esp + 0x18], ax
cmp word [esp + 0x624], ax
jne 0x10059c47
xor ecx, ecx
jmp 0x10059c60
lea ecx, [esp + 0x624]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10059c51
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x628]
push eax
lea ecx, [esp + 0x20]
call fcn.10003000
mov byte [esp + 0x904], 0xb
xor eax, eax
push eax
mov dword [esp + 0x44], 0
lea ecx, [esp + 0x34]
mov dword [esp + 0x48], 0
push 0x10093b18
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], 0
mov word [esp + 0x38], ax
call fcn.10003000
mov byte [esp + 0x904], 0xc
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 0xd
cmp dword [esp + 0x44], 8
jb 0x10059ce1
push dword [esp + 0x30]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x2c], 8
jb 0x10059d10
push dword [esp + 0x18]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x28], 0
mov word [esp + 0x18], ax
mov dword [esp + 0x4c], 4
mov dword [esp + 0x64], 7
mov dword [esp + 0x60], eax
mov word [esp + 0x50], ax
cmp word [esp + 0x59c], ax
jne 0x10059d56
xor ecx, ecx
jmp 0x10059d6f
lea ecx, [esp + 0x59c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10059d60
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5a0]
push eax
lea ecx, [esp + 0x58]
call fcn.10003000
mov byte [esp + 0x904], 0xf
xor eax, eax
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x7c], 7
mov dword [esp + 0x78], 0
mov word [esp + 0x68], ax
cmp word [esp + 0x588], ax
jne 0x10059dbe
xor ecx, ecx
jmp 0x10059ddf
lea ecx, [esp + 0x588]
lea edx, [ecx + 2]
jmp 0x10059dd0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10059dd0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x58c]
push eax
lea ecx, [esp + 0x70]
call fcn.10003000
mov byte [esp + 0x904], 0x10
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 0x11
cmp dword [esp + 0x7c], 8
jb 0x10059e22
push dword [esp + 0x68]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x7c], 7
mov dword [esp + 0x78], 0
mov word [esp + 0x68], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x64], 8
jb 0x10059e51
push dword [esp + 0x50]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x64], 7
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x60], 0
mov word [esp + 0x50], ax
mov dword [esp + 0x14], 5
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], eax
mov word [esp + 0x18], ax
cmp word [esp + 0x63c], ax
jne 0x10059e97
xor ecx, ecx
jmp 0x10059eb0
lea ecx, [esp + 0x63c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10059ea1
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x640]
push eax
lea ecx, [esp + 0x20]
call fcn.10003000
mov byte [esp + 0x904], 0x13
xor eax, eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
cmp word [esp + 0x5c4], ax
jne 0x10059eff
xor ecx, ecx
jmp 0x10059f1f
lea ecx, [esp + 0x5c4]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10059f10
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5c8]
push eax
lea ecx, [esp + 0x38]
call fcn.10003000
mov byte [esp + 0x904], 0x14
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 0x15
cmp dword [esp + 0x44], 8
jb 0x10059f62
push dword [esp + 0x30]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x2c], 8
jb 0x10059f91
push dword [esp + 0x18]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x28], 0
mov word [esp + 0x18], ax
mov dword [esp + 0x4c], 6
mov dword [esp + 0x64], 7
mov dword [esp + 0x60], eax
mov word [esp + 0x50], ax
cmp word [esp + 0x5b0], ax
jne 0x10059fd7
xor ecx, ecx
jmp 0x10059ff0
lea ecx, [esp + 0x5b0]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10059fe1
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5b4]
push eax
lea ecx, [esp + 0x58]
call fcn.10003000
mov byte [esp + 0x904], 0x17
xor eax, eax
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x7c], 7
mov dword [esp + 0x78], 0
mov word [esp + 0x68], ax
cmp word [esp + 0x674], ax
jne 0x1005a03f
xor ecx, ecx
jmp 0x1005a05f
lea ecx, [esp + 0x674]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1005a050
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x678]
push eax
lea ecx, [esp + 0x70]
call fcn.10003000
mov byte [esp + 0x904], 0x18
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 0x19
cmp dword [esp + 0x7c], 8
jb 0x1005a0a2
push dword [esp + 0x68]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x7c], 7
mov dword [esp + 0x78], 0
mov word [esp + 0x68], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x64], 8
jb 0x1005a0d1
push dword [esp + 0x50]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x64], 7
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x60], 0
mov word [esp + 0x50], ax
mov dword [esp + 0x14], 7
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], eax
mov word [esp + 0x18], ax
cmp word [esp + 0x5dc], ax
jne 0x1005a117
xor ecx, ecx
jmp 0x1005a130
lea ecx, [esp + 0x5dc]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1005a121
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5e0]
push eax
lea ecx, [esp + 0x20]
call fcn.10003000
mov byte [esp + 0x904], 0x1b
xor eax, eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
cmp word [esp + 0x690], ax
jne 0x1005a17f
xor ecx, ecx
jmp 0x1005a19f
lea ecx, [esp + 0x690]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1005a190
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x694]
push eax
lea ecx, [esp + 0x38]
call fcn.10003000
mov byte [esp + 0x904], 0x1c
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 0x1d
cmp dword [esp + 0x44], 8
jb 0x1005a1e2
push dword [esp + 0x30]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x2c], 8
jb 0x1005a211
push dword [esp + 0x18]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x28], 0
mov word [esp + 0x18], ax
mov dword [esp + 0x4c], 8
mov dword [esp + 0x64], 7
mov dword [esp + 0x60], eax
mov word [esp + 0x50], ax
cmp word [esp + 0x5f4], ax
jne 0x1005a257
xor ecx, ecx
jmp 0x1005a270
lea ecx, [esp + 0x5f4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1005a261
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5f8]
push eax
lea ecx, [esp + 0x58]
call fcn.10003000
mov byte [esp + 0x904], 0x1f
lea eax, [esp + 0x7c4]
push eax
lea ecx, [esp + 0x6c]
call fcn.10002f90
mov byte [esp + 0x904], 0x20
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x4c]
call fcn.10058cf0
lea eax, [esp + 0x750]
mov dword [esp + 0x14], 9
push eax
lea ecx, [esp + 0x1c]
call fcn.10002f90
mov byte [esp + 0x904], 0x21
lea ecx, [esp + 0x30]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x22
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x14]
call fcn.10058cf0
push 0x10093b18
lea ecx, [esp + 0x488]
mov dword [esp + 0x484], 0xa
call fcn.10002f90
mov byte [esp + 0x904], 0x23
lea ecx, [esp + 0x49c]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x24
lea eax, [esp + 0x480]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x480]
call fcn.10058cf0
push 0x10093b18
lea ecx, [esp + 0xe0]
mov dword [esp + 0xdc], 0xb
call fcn.10002f90
mov byte [esp + 0x904], 0x25
lea ecx, [esp + 0xf4]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x26
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0xd8]
call fcn.10058cf0
push 0x10093b18
lea ecx, [esp + 0x114]
mov dword [esp + 0x110], 0xc
call fcn.10002f90
mov byte [esp + 0x904], 0x27
push 0x10093b18
lea ecx, [esp + 0x12c]
call fcn.10002f90
mov byte [esp + 0x904], 0x28
lea eax, [esp + 0x10c]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x10c]
call fcn.10058cf0
lea eax, [esp + 0x8c0]
mov dword [esp + 0x2e0], 0xd
push eax
lea ecx, [esp + 0x2e8]
call fcn.10002f90
mov byte [esp + 0x904], 0x29
lea ecx, [esp + 0x2fc]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x2a
lea eax, [esp + 0x2e0]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x2e0]
call fcn.10058cf0
lea eax, [esp + 0x7e4]
mov dword [esp + 0x418], 0xe
push eax
lea ecx, [esp + 0x420]
call fcn.10002f90
mov byte [esp + 0x904], 0x2b
lea ecx, [esp + 0x434]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x2c
lea eax, [esp + 0x418]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x418]
call fcn.10058cf0
lea eax, [esp + 0x804]
mov dword [esp + 0x348], 0xf
push eax
lea ecx, [esp + 0x350]
call fcn.10002f90
mov byte [esp + 0x904], 0x2d
lea ecx, [esp + 0x364]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x2e
lea eax, [esp + 0x348]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x348]
call fcn.10058cf0
lea eax, [esp + 0x86c]
mov dword [esp + 0x140], 0x10
push eax
lea ecx, [esp + 0x148]
call fcn.10002f90
mov byte [esp + 0x904], 0x2f
lea ecx, [esp + 0x15c]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x30
lea eax, [esp + 0x140]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x140]
call fcn.10058cf0
lea eax, [esp + 0x7a4]
mov dword [esp + 0x174], 0x11
push eax
lea ecx, [esp + 0x17c]
call fcn.10002f90
mov byte [esp + 0x904], 0x31
lea ecx, [esp + 0x190]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x32
lea eax, [esp + 0x174]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x174]
call fcn.10058cf0
lea eax, [esp + 0x734]
mov dword [esp + 0x210], 0x12
push eax
lea ecx, [esp + 0x218]
call fcn.10002f90
mov byte [esp + 0x904], 0x33
lea ecx, [esp + 0x22c]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x34
lea eax, [esp + 0x210]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x210]
call fcn.10058cf0
lea eax, [esp + 0x890]
mov dword [esp + 0x2ac], 0x13
push eax
lea ecx, [esp + 0x2b4]
call fcn.10002f90
mov byte [esp + 0x904], 0x35
lea ecx, [esp + 0x2c8]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x36
lea eax, [esp + 0x2ac]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x2ac]
call fcn.10058cf0
lea eax, [esp + 0x6f8]
mov dword [esp + 0x314], 0x14
push eax
lea ecx, [esp + 0x31c]
call fcn.10002f90
mov byte [esp + 0x904], 0x37
lea ecx, [esp + 0x330]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x38
lea eax, [esp + 0x314]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x314]
call fcn.10058cf0
lea eax, [esp + 0x824]
mov dword [esp + 0x37c], 0x15
push eax
lea ecx, [esp + 0x384]
call fcn.10002f90
mov byte [esp + 0x904], 0x39
lea ecx, [esp + 0x398]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x3a
lea eax, [esp + 0x37c]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x37c]
call fcn.10058cf0
lea eax, [esp + 0x76c]
mov dword [esp + 0x3e4], 0x16
push eax
lea ecx, [esp + 0x3ec]
call fcn.10002f90
mov byte [esp + 0x904], 0x3b
lea ecx, [esp + 0x400]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x3c
lea eax, [esp + 0x3e4]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x3e4]
call fcn.10058cf0
lea eax, [esp + 0x848]
mov dword [esp + 0x44c], 0x17
push eax
lea ecx, [esp + 0x454]
call fcn.10002f90
mov byte [esp + 0x904], 0x3d
lea ecx, [esp + 0x468]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x3e
lea eax, [esp + 0x44c]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x44c]
call fcn.10058cf0
lea eax, [esp + 0x71c]
mov dword [esp + 0x4b4], 0x18
push eax
lea ecx, [esp + 0x4bc]
call fcn.10002f90
mov byte [esp + 0x904], 0x3f
lea ecx, [esp + 0x4d0]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x40
lea eax, [esp + 0x4b4]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x4b4]
call fcn.10058cf0
lea eax, [esp + 0x708]
mov dword [esp + 0x51c], 0x19
push eax
lea ecx, [esp + 0x524]
call fcn.10002f90
mov byte [esp + 0x904], 0x41
lea ecx, [esp + 0x538]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x42
lea eax, [esp + 0x51c]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x51c]
call fcn.10058cf0
lea eax, [esp + 0x788]
mov dword [esp + 0x278], 0x1a
push eax
lea ecx, [esp + 0x280]
call fcn.10002f90
mov byte [esp + 0x904], 0x43
lea ecx, [esp + 0x294]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x44
lea eax, [esp + 0x278]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x278]
call fcn.10058cf0
push str.iexplore.exe
lea ecx, [esp + 0x24c]
mov dword [esp + 0x248], 0x1b
call fcn.10002f90
mov byte [esp + 0x904], 0x45
lea ecx, [esp + 0x260]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x46
lea eax, [esp + 0x244]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x244]
call fcn.10058cf0
push 0x10093b18
lea ecx, [esp + 0x1e4]
mov dword [esp + 0x1e0], 0x1c
call fcn.10002f90
mov byte [esp + 0x904], 0x47
lea ecx, [esp + 0x1f8]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x48
lea eax, [esp + 0x1dc]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x1dc]
call fcn.10058cf0
push 0x10093b18
lea ecx, [esp + 0x4f0]
mov dword [esp + 0x4ec], 0x1d
call fcn.10002f90
mov byte [esp + 0x904], 0x49
lea ecx, [esp + 0x504]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x4a
lea eax, [esp + 0x4e8]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x4e8]
call fcn.10058cf0
push 0x10093b18
lea ecx, [esp + 0x1b0]
mov dword [esp + 0x1ac], 0x1e
call fcn.10002f90
mov byte [esp + 0x904], 0x4b
lea ecx, [esp + 0x1c4]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x4c
lea eax, [esp + 0x1a8]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x1a8]
call fcn.10058cf0
push 0x10093b18
lea ecx, [esp + 0xac]
mov dword [esp + 0xa8], 0x1f
call fcn.10002f90
mov byte [esp + 0x904], 0x4d
lea ecx, [esp + 0xc0]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x4e
lea eax, [esp + 0xa4]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0xa4]
call fcn.10058cf0
push 0x10093b18
lea ecx, [esp + 0x3b8]
mov dword [esp + 0x3b4], 0x20
call fcn.10002f90
mov byte [esp + 0x904], 0x4f
lea ecx, [esp + 0x3cc]
push 0x10093b18
call fcn.10002f90
mov byte [esp + 0x904], 0x50
lea eax, [esp + 0x3b0]
push eax
lea ecx, [esp + 0x554]
call fcn.1005b950
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x3b0]
call fcn.10058cf0
xorps xmm0, xmm0
mov dword [esp + 0x564], 0
movq qword [esp + 0x55c], xmm0
mov dword [esp + 0x55c], 0
mov dword [esp + 0x560], 0
mov dword [esp + 0x564], 0
mov byte [esp + 0x904], 0x51
lea ecx, [esp + 0x55c]
call fcn.100636b0
xorps xmm0, xmm0
movq qword [esp + 0x568], xmm0
mov dword [esp + 0x568], 0
mov dword [esp + 0x56c], 0
call fcn.1005c000
mov dword [esp + 0x568], eax
mov byte [esp + 0x904], 0x56
xor ebp, ebp
mov eax, dword [esp + 0x560]
mov ecx, dword [esp + 0x55c]
sub eax, ecx
sar eax, 5
test eax, eax
je 0x1005ad43
xor edi, edi
jmp 0x1005ad00
lea esi, [edi + ecx]
mov ecx, esi
call fcn.1000a4e0
movzx eax, byte [0x100b042c]
push eax
push esi
push ecx
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0x578]
call fcn.1005c110
mov eax, dword [esp + 0x560]
lea edi, [edi + 0x20]
mov ecx, dword [esp + 0x55c]
inc ebp
sub eax, ecx
sar eax, 5
cmp ebp, eax
jb 0x1005ad00
mov ecx, dword [esp + 0x554]
mov eax, 0x4ec4ec4f
sub ecx, dword [esp + 0x550]
xor edi, edi
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1005adbb
xor ebp, ebp
jmp 0x1005ad70
mov esi, dword [esp + 0x550]
lea ecx, [esi + 4]
add ecx, ebp
call fcn.1000a4e0
lea ecx, [esi + 0x1c]
add ecx, ebp
call fcn.1000a4e0
inc edi
cmp dword [esi + ebp], edi
jne 0x1005ae62
mov ecx, dword [esp + 0x554]
mov eax, 0x4ec4ec4f
sub ecx, dword [esp + 0x550]
add ebp, 0x34
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x1005ad70
mov esi, dword [esp + 0x580]
cmp esi, 0x20
jae 0x1005adef
jmp 0x1005add0
push 1
push 0x10093a3c
lea ecx, [esp + 0x578]
call fcn.100067e0
mov esi, dword [esp + 0x580]
cmp esi, 0x20
jb 0x1005add0
mov ecx, dword [esp + 0x554]
mov eax, 0x4ec4ec4f
sub ecx, dword [esp + 0x550]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, esi
je 0x1005aeae
mov esi, dword [esp + 0x8c]
lea eax, [esp + 0x570]
push eax
mov ecx, esi
call fcn.10004920
mov dword [esp + 0x84], 1
mov byte [esp + 0x904], 0x5c
lea ecx, [esp + 0x568]
mov eax, dword [esp + 0x568]
push eax
push dword [eax]
lea eax, [esp + 0x98]
push eax
call fcn.1005bc10
jmp 0x1005b0c6
mov esi, dword [esp + 0x8c]
lea eax, [esp + 0x570]
push eax
mov ecx, esi
call fcn.10004920
mov dword [esp + 0x84], 1
mov byte [esp + 0x904], 0x58
lea ecx, [esp + 0x568]
mov eax, dword [esp + 0x568]
push eax
push dword [eax]
lea eax, [esp + 0x98]
push eax
call fcn.1005bc10
jmp 0x1005b0c6
test eax, eax
je 0x1005b045
xor esi, esi
xor ebx, ebx
mov dword [esp + 0x80], esi
cmp dword [esp + 0x584], 8
lea eax, [esp + 0x570]
mov ebp, dword [esp + 0x550]
cmovae eax, dword [esp + 0x570]
add ebp, esi
cmp dword [ebp + 0x14], 0
lea eax, [eax + ebx*2]
mov dword [esp + 0x88], eax
je 0x1005af6b
mov edi, dword [esp + 0x568]
lea eax, [ebp + 4]
push eax
lea ecx, [esp + 0x56c]
call fcn.10024050
mov esi, eax
cmp esi, dword [esp + 0x568]
je 0x1005af47
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x1005af25
mov eax, dword [eax]
push ecx
push eax
push dword [ebp + 0x14]
lea ecx, [ebp + 4]
push ecx
call fcn.100035f0
test eax, eax
js 0x1005af47
mov dword [esp + 0x9c], esi
lea eax, [esp + 0x9c]
jmp 0x1005af5c
mov eax, dword [esp + 0x568]
mov dword [esp + 0x98], eax
lea eax, [esp + 0x98]
mov esi, dword [esp + 0x80]
cmp dword [eax], edi
jne 0x1005aff7
mov eax, dword [esp + 0x88]
cmp word [eax], 0x31
je 0x1005b006
cmp dword [ebp + 0x2c], 0
je 0x1005b006
mov edi, dword [esp + 0x568]
lea ecx, [esp + 0x568]
add ebp, 0x1c
push ebp
call fcn.10024050
mov esi, eax
cmp esi, dword [esp + 0x568]
je 0x1005afd7
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x1005afb6
mov eax, dword [eax]
push ecx
push eax
push dword [ebp + 0x10]
push ecx
mov ecx, ebp
call fcn.100035f0
test eax, eax
js 0x1005afd7
mov dword [esp + 0xa0], esi
lea eax, [esp + 0xa0]
jmp 0x1005afec
mov eax, dword [esp + 0x568]
mov dword [esp + 0x90], eax
lea eax, [esp + 0x90]
mov esi, dword [esp + 0x80]
cmp dword [eax], edi
je 0x1005b006
mov eax, dword [esp + 0x88]
mov ecx, 0x31
mov word [eax], cx
mov ecx, dword [esp + 0x554]
mov eax, 0x4ec4ec4f
sub ecx, dword [esp + 0x550]
inc ebx
imul ecx
add esi, 0x34
sar edx, 4
mov eax, edx
mov dword [esp + 0x80], esi
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x1005aec1
mov esi, dword [esp + 0x580]
mov ebx, dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete_void__]
cmp esi, 1
jbe 0x1005b07f
cmp dword [esp + 0x584], 8
lea esi, [esp + 0x570]
cmovae esi, dword [esp + 0x570]
cmp word [esi + 2], 0x31
jne 0x1005b07f
call fcn.1005b780
test al, al
mov eax, 0x32
jne 0x1005b07b
mov eax, 0x33
mov word [esi + 2], ax
mov esi, dword [esp + 0x8c]
lea eax, [esp + 0x570]
push eax
mov ecx, esi
call fcn.10004920
mov dword [esp + 0x84], 1
mov byte [esp + 0x904], 0x60
lea ecx, [esp + 0x568]
mov eax, dword [esp + 0x568]
push eax
push dword [eax]
lea eax, [esp + 0x98]
push eax
call fcn.1005bc10
mov byte [esp + 0x904], 0x51
push dword [esp + 0x568]
call ebx
add esp, 4
mov byte [esp + 0x904], 2
cmp dword [esp + 0x55c], 0
je 0x1005b13e
lea ecx, [esp + 0x55c]
call dword [sym.imp.MSVCP120.dll_public:_void___thiscall_std::_Container_base0::_Orphan_all_void_]
push dword [esp + 0x48]
mov edx, dword [esp + 0x564]
push ecx
mov ecx, dword [esp + 0x564]
call fcn.1004d260
push dword [esp + 0x564]
call ebx
add esp, 0xc
mov dword [esp + 0x55c], 0
mov dword [esp + 0x560], 0
mov dword [esp + 0x564], 0
mov byte [esp + 0x904], 1
cmp dword [esp + 0x550], 0
je 0x1005b1a2
lea ecx, [esp + 0x550]
call dword [sym.imp.MSVCP120.dll_public:_void___thiscall_std::_Container_base0::_Orphan_all_void_]
push dword [esp + 0x48]
mov edx, dword [esp + 0x558]
push ecx
mov ecx, dword [esp + 0x558]
call fcn.1005c440
push dword [esp + 0x558]
call ebx
add esp, 0xc
mov dword [esp + 0x550], 0
mov dword [esp + 0x554], 0
mov dword [esp + 0x558], 0
mov byte [esp + 0x904], 0
cmp dword [esp + 0x584], 8
jb 0x1005b1c0
push dword [esp + 0x570]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x584], 7
mov dword [esp + 0x580], eax
mov word [esp + 0x570], ax
mov eax, esi
mov ecx, dword [esp + 0x8fc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x8e0]
xor ecx, esp
call fcn.10081b94
add esp, 0x8f4
ret 4