Function at 0x1003bb00
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x101a506c]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x102529a4], 1
jne 0x1003bb58
push 0x1006fd30
push 0x413efe
push 0xe8
call fcn.100ca7d0
push 0x1006fd50
push 0x4140d9
push 0xe8
call fcn.100ca7d0
push 0x1006fd50
push 0x41412e
push 0xe8
call fcn.100ca7d0
add esp, 0x24
push ebx
push esi
push edi
push 0x1003bad0
push 0x7818d4
push 0xe8
call fcn.100ca7d0
push 0x1003bad0
push 0x7801a8
push 0xe8
call fcn.100ca7d0
push 0x1003bad0
push 0x782ce4
push 0xe8
call fcn.100ca7d0
push 0x1003bad0
push 0x7830be
push 0xe8
call fcn.100ca7d0
push 0x1003bad0
push 0x784b4a
push 0xe8
call fcn.100ca7d0
push 0x1003bad0
push 0x77fcad
push 0xe8
call fcn.100ca7d0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0x48
push eax
push 0x40
push 4
push 0x417035
call esi
lea eax, [ebp - 8]
mov dword [0x417035], 0
push eax
push dword [ebp - 8]
push 4
push 0x417035
call esi
push 0x1003ba30
push 0x7eea69
push 0xe8
call fcn.100ca7d0
push 0x1003bab0
push 0x77fda4
push 0xe9
call fcn.100ca7d0
push 0x1003ba90
push 0x77fd87
push 0xe9
call fcn.100ca7d0
push 0x1003b750
push 0x77f7ee
push 0xe8
call fcn.100ca7d0
add esp, 0x30
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77e936
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1003bc9e
mov eax, 0x77e936
mov dword [eax], 0xc85a
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x77e936
call esi
test eax, eax
jne 0x1003bca0
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e94b
mov bl, 0x18
call esi
test eax, eax
je 0x1003bcde
mov eax, 0x77e94b
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e94b
call esi
test eax, eax
jne 0x1003bce0
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e94d
mov bl, 0x18
call esi
test eax, eax
je 0x1003bd1e
mov eax, 0x77e94d
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e94d
call esi
test eax, eax
jne 0x1003bd20
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e959
mov bl, 0x75
call esi
test eax, eax
je 0x1003bd5e
mov eax, 0x77e959
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e959
call esi
test eax, eax
jne 0x1003bd60
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e965
mov bl, 0x82
call esi
test eax, eax
je 0x1003bd9e
mov eax, 0x77e965
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e965
call esi
test eax, eax
jne 0x1003bda0
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x77e97f
call esi
test eax, eax
je 0x1003bde0
mov eax, 0x77e97f
mov dword [eax], 0xc85a
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x77e97f
call esi
test eax, eax
jne 0x1003bde2
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e997
mov bl, 0x18
call esi
test eax, eax
je 0x1003be20
mov eax, 0x77e997
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e997
call esi
test eax, eax
jne 0x1003be22
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e999
mov bl, 0x18
call esi
test eax, eax
je 0x1003be60
mov eax, 0x77e999
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e999
call esi
test eax, eax
jne 0x1003be62
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e9a5
mov bl, 0xac
call esi
test eax, eax
je 0x1003bea0
mov eax, 0x77e9a5
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e9a5
call esi
test eax, eax
jne 0x1003bea2
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e9b5
mov bl, 0x82
call esi
test eax, eax
je 0x1003bee0
mov eax, 0x77e9b5
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e9b5
call esi
test eax, eax
jne 0x1003bee2
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x77e9d2
call esi
test eax, eax
je 0x1003bf22
mov eax, 0x77e9d2
mov dword [eax], 0xc85a
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x77e9d2
call esi
test eax, eax
jne 0x1003bf24
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e9ea
mov bl, 0x18
call esi
test eax, eax
je 0x1003bf62
mov eax, 0x77e9ea
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e9ea
call esi
test eax, eax
jne 0x1003bf64
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e9ec
mov bl, 0x18
call esi
test eax, eax
je 0x1003bfa2
mov eax, 0x77e9ec
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e9ec
call esi
test eax, eax
jne 0x1003bfa4
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e9f7
mov bl, 0xed
call esi
test eax, eax
je 0x1003bfe2
mov eax, 0x77e9f7
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e9f7
call esi
test eax, eax
jne 0x1003bfe4
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea07
mov bl, 0x82
call esi
test eax, eax
je 0x1003c022
mov eax, 0x77ea07
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea07
call esi
test eax, eax
jne 0x1003c024
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x77ea24
call esi
test eax, eax
je 0x1003c064
mov eax, 0x77ea24
mov dword [eax], 0xc85a
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x77ea24
call esi
test eax, eax
jne 0x1003c066
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea3c
mov bl, 0x18
call esi
test eax, eax
je 0x1003c0a4
mov eax, 0x77ea3c
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea3c
call esi
test eax, eax
jne 0x1003c0a6
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea3e
mov bl, 0x18
call esi
test eax, eax
je 0x1003c0e4
mov eax, 0x77ea3e
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea3e
call esi
test eax, eax
jne 0x1003c0e6
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea4a
mov bl, 0x24
call esi
test eax, eax
je 0x1003c124
mov eax, 0x77ea4a
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea4a
call esi
test eax, eax
jne 0x1003c126
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea59
mov bl, 0x82
call esi
test eax, eax
je 0x1003c164
mov eax, 0x77ea59
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea59
call esi
test eax, eax
jne 0x1003c166
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x77ea76
call esi
test eax, eax
je 0x1003c1a6
mov eax, 0x77ea76
mov dword [eax], 0xc85a
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x77ea76
call esi
test eax, eax
jne 0x1003c1a8
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea8e
mov bl, 0x18
call esi
test eax, eax
je 0x1003c1e6
mov eax, 0x77ea8e
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea8e
call esi
test eax, eax
jne 0x1003c1e8
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea90
mov bl, 0x18
call esi
test eax, eax
je 0x1003c226
mov eax, 0x77ea90
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea90
call esi
test eax, eax
jne 0x1003c228
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea9c
mov bl, 0x5b
call esi
test eax, eax
je 0x1003c266
mov eax, 0x77ea9c
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea9c
call esi
test eax, eax
jne 0x1003c268
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77eaac
mov bl, 0x82
call esi
test eax, eax
je 0x1003c2a6
mov eax, 0x77eaac
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77eaac
call esi
test eax, eax
jne 0x1003c2a8
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x7801da
mov bl, 4
call esi
test eax, eax
je 0x1003c2e6
mov eax, 0x7801da
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x7801da
call esi
test eax, eax
jne 0x1003c2e8
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x7801de
mov bl, 0x2a
call esi
test eax, eax
je 0x1003c326
mov eax, 0x7801de
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x7801de
call esi
test eax, eax
jne 0x1003c328
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x780218
mov bl, 2
call esi
test eax, eax
je 0x1003c366
mov eax, 0x780218
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x780218
call esi
test eax, eax
jne 0x1003c368
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x78023c
mov bl, 0x38
call esi
test eax, eax
je 0x1003c3a6
mov eax, 0x78023c
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x78023c
call esi
test eax, eax
jne 0x1003c3a8
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x78190e
mov bl, 4
call esi
test eax, eax
je 0x1003c3e6
mov eax, 0x78190e
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x78190e
call esi
test eax, eax
jne 0x1003c3e8
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x781912
mov bl, 0x2a
call esi
test eax, eax
je 0x1003c426
mov eax, 0x781912
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x781912
call esi
test eax, eax
jne 0x1003c428
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x78194f
mov bl, 2
call esi
test eax, eax
je 0x1003c466
mov eax, 0x78194f
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x78194f
call esi
test eax, eax
jne 0x1003c468
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x781975
mov bl, 0x38
call esi
test eax, eax
je 0x1003c4a6
mov eax, 0x781975
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x781975
call esi
test eax, eax
jne 0x1003c4a8
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x7830f0
mov bl, 4
call esi
test eax, eax
je 0x1003c4e6
mov eax, 0x7830f0
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x7830f0
call esi
test eax, eax
jne 0x1003c4e8
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x7830f4
mov bl, 0x2a
call esi
test eax, eax
je 0x1003c526
mov eax, 0x7830f4
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x7830f4
call esi
test eax, eax
jne 0x1003c528
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x783131
mov bl, 2
call esi
test eax, eax
je 0x1003c566
mov eax, 0x783131
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x783131
call esi
test eax, eax
jne 0x1003c568
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x783157
mov bl, 0x38
call esi
test eax, eax
je 0x1003c5a6
mov eax, 0x783157
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x783157
call esi
test eax, eax
jne 0x1003c5a8
call edi
lea eax, [ebp - 8]
mov byte [ebp - 0xd], 4
push eax
push 0x40
push 1
push 0x782d16
mov dword [ebp - 8], 0
call esi
mov ebx, 0x782d16
test eax, eax
je 0x1003c5e7
mov al, byte [ebp - 0xd]
mov byte [ebx], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push ebx
call esi
test eax, eax
jne 0x1003c5e9
call edi
lea eax, [ebp - 8]
mov byte [ebp - 0xd], 0x2a
push eax
push 0x40
push 1
push 0x782d1a
mov dword [ebp - 8], 0
call esi
mov ecx, 0x782d1a
test eax, eax
je 0x1003c628
mov al, byte [ebp - 0xd]
mov byte [ecx], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push ecx
call esi
test eax, eax
jne 0x1003c62a
call edi
lea eax, [ebp - 8]
mov byte [ebp - 0xd], 2
push eax
push 0x40
push 1
push 0x782d57
mov dword [ebp - 8], 0
call esi
mov ecx, 0x782d57
test eax, eax
je 0x1003c669
mov al, byte [ebp - 0xd]
mov byte [ecx], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push ecx
call esi
test eax, eax
jne 0x1003c66b
call edi
lea eax, [ebp - 8]
mov byte [ebp - 0xd], 0x38
push eax
push 0x40
push 1
push 0x782d7e
mov dword [ebp - 8], 0
call esi
mov ecx, 0x782d7e
test eax, eax
je 0x1003c6aa
mov al, byte [ebp - 0xd]
mov byte [ecx], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push ecx
call esi
test eax, eax
jne 0x1003c6ac
call edi
lea eax, [ebp - 8]
mov byte [ebp - 0xd], 4
push eax
push 0x40
push 1
push 0x782d16
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x1003c6ea
mov al, byte [ebp - 0xd]
mov byte [ebx], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x782d16
call esi
test eax, eax
jne 0x1003c6ec
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x782d1a
mov bl, 0x2a
call esi
test eax, eax
je 0x1003c72a
mov eax, 0x782d1a
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x782d1a
call esi
test eax, eax
jne 0x1003c72c
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x782d57
mov bl, 2
call esi
test eax, eax
je 0x1003c76a
mov eax, 0x782d57
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x782d57
call esi
test eax, eax
jne 0x1003c76c
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x782d7e
mov bl, 0x38
call esi
test eax, eax
je 0x1003c7aa
mov eax, 0x782d7e
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x782d7e
call esi
test eax, eax
jne 0x1003c7ac
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x784b6e
mov bl, 4
call esi
test eax, eax
je 0x1003c7ea
mov eax, 0x784b6e
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x784b6e
call esi
test eax, eax
jne 0x1003c7ec
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x784b72
mov bl, 0x2a
call esi
test eax, eax
je 0x1003c82a
mov eax, 0x784b72
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x784b72
call esi
test eax, eax
jne 0x1003c82c
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x784baf
mov bl, 2
call esi
test eax, eax
je 0x1003c86a
mov eax, 0x784baf
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x784baf
call esi
test eax, eax
jne 0x1003c86c
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x784bd6
mov bl, 0x38
call esi
test eax, eax
je 0x1003c8aa
mov eax, 0x784bd6
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x784bd6
call esi
test eax, eax
jne 0x1003c8ac
call edi
push 0x1003b990
push 0x78e6d6
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x78e70a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x78e74a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x78e79c
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x78e7e2
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x7f65a6
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x7f65e6
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7f6638
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7f66a2
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7f66fa
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x80c848
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x80c87c
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x80c8bc
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x80c90e
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x80c954
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x845956
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84598a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8459c7
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x845a10
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x845a4f
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x7c6bcc
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7c6c06
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7c6c49
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7c6c98
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x7c6cdd
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x7c7d0c
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7c7d46
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7c7d89
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7c7dd8
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7c7e1d
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b990
push 0x850966
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x85099a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8509d7
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x850a20
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x850a5f
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x852476
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x8524aa
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8524e7
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x852530
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x85256f
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x8540b6
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8540ea
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x854127
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x854170
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8541af
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x868052
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x86808c
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8680d5
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x868130
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x86817b
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x87f886
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x87f8ba
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x87f8f7
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x87f940
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x87f97f
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x882f52
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x882f8c
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x882fd5
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x883030
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x88307b
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b990
push 0x893102
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x89313c
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x893185
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8931e0
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x89322b
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x8812a2
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x8812dc
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x881325
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x881380
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8813cb
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x879ee2
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x879f1c
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x879f65
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x879fc0
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x87a00b
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x8747b6
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8747f0
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x87483c
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x8748a0
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8748f2
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x8781bc
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8781f0
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x878230
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x878282
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x8782c8
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x84d01a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84d05a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84d0ac
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84d116
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84d16e
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b990
push 0x84a546
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84a57a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84a5ba
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84a60c
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84a652
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x82ca22
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x82cb4b
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x82cb00
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x82caa5
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x82ca5c
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x841e49
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x841e7d
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x841eba
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x841f03
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x841f42
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x84f406
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84f43a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84f477
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x84f4c0
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84f4ff
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x857946
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x85797a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8579b7
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x857a00
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x857a3f
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x8567e6
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x85681a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x856857
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8568a0
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8568df
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b990
push 0x836ef6
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x836f2a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x836f67
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x836fb0
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x836fef
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x7d55a6
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x7d55da
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7d5617
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7d5660
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7d569f
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x8470a6
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8470da
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x847117
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x847160
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84719f
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x7d1786
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7d17ba
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7d17f7
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x7d1840
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7d187f
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x7cb6f6
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7cb72a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7cb767
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x7cb7b0
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x7cb7ef
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x843826
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84385a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x843897
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8438e0
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x84391f
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b990
push 0x83ea46
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x83ea7a
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x83eab7
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x83eb00
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x83eb3f
push 0xe8
call fcn.100ca7d0
push 0x1003b990
push 0x8643b6
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1003b9e0
push 0x8643ea
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x864427
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x864470
push 0xe8
call fcn.100ca7d0
push 0x1003b9e0
push 0x8644af
push 0xe8
call fcn.100ca7d0
push 0x1003b950
push 0x425468
push 0xe9
call fcn.100ca7d0
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7f31c2
call esi
lea eax, [ebp - 8]
mov dword [0x7f31c2], 0x700003
push eax
push dword [ebp - 8]
push 4
push 0x7f31c2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7f3202
call esi
lea eax, [ebp - 8]
mov dword [0x7f3202], 0x700003
push eax
push dword [ebp - 8]
push 4
push 0x7f3202
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7f3242
call esi
lea eax, [ebp - 8]
mov dword [0x7f3242], 0x700003
push eax
push dword [ebp - 8]
push 4
push 0x7f3242
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7f3281
call esi
lea eax, [ebp - 8]
mov dword [0x7f3281], 0x700003
push eax
push dword [ebp - 8]
push 4
push 0x7f3281
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7f32c1
call esi
lea eax, [ebp - 8]
mov dword [0x7f32c1], 0x700003
push eax
push dword [ebp - 8]
push 4
push 0x7f32c1
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7f3301
call esi
lea eax, [ebp - 8]
mov dword [0x7f3301], 0x700003
push eax
push dword [ebp - 8]
push 4
push 0x7f3301
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa3ba
call esi
mov eax, 0x7aa3ba
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa3ba
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa39c
call esi
mov eax, 0x7aa39c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa39c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa9b3
call esi
mov eax, 0x7aa9b3
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa9b3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x40a7ef
call esi
mov eax, 0x40a7ef
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x40a7ef
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x40a87e
call esi
mov eax, 0x40a87e
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x40a87e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x85af21
call esi
lea eax, [ebp - 8]
mov byte [0x85af21], 0x19
push eax
push dword [ebp - 8]
push 1
push 0x85af21
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78ddf4
call esi
lea eax, [ebp - 8]
mov byte [0x78ddf4], 0x3c
push eax
push dword [ebp - 8]
push 1
push 0x78ddf4
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db7b0
call esi
mov eax, 0x7db7b0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db7b0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db812
call esi
mov eax, 0x7db812
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db812
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db874
call esi
mov eax, 0x7db874
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db874
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db8e0
call esi
mov eax, 0x7db8e0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db8e0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db959
call esi
mov eax, 0x7db959
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db959
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db9a2
call esi
mov eax, 0x7db9a2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db9a2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7dba20
call esi
mov eax, 0x7dba20
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7dba20
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7dba69
call esi
mov eax, 0x7dba69
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7dba69
call esi
push 5
call fcn.100eea5f
mov dword [eax], 0x90909090
mov edx, eax
push 5
mov ecx, 0x6e899d
mov byte [eax + 4], 0x90
call fcn.100c9f30
push 5
call fcn.100eea5f
push 5
mov edx, eax
mov ecx, 0x7126fa
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9f30
push 5
call fcn.100eea5f
push 5
mov edx, eax
mov ecx, 0x5b768f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9f30
push 5
call fcn.100eea5f
push 5
mov edx, eax
mov ecx, 0x5b770c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9f30
add esp, 0x20
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0x8583f9
call esi
mov eax, 0x8583f9
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 8
push 0x8583f9
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0x858752
call esi
mov eax, 0x858752
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 8
push 0x858752
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0xf6
push 0x85875f
call esi
push 0xf6
push 0x90
push 0x85875f
call fcn.1013cb70
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xf6
push 0x85875f
call esi
mov byte [ebp - 0xd], 5
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x832c46
call esi
mov ebx, 0x832c46
test eax, eax
je 0x1003da85
mov al, byte [ebp - 0xd]
mov byte [ebx], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push ebx
call esi
test eax, eax
jne 0x1003da87
call edi
cmp dword [0x102529a4], 1
jne 0x1003dac3
lea eax, [ebp - 8]
push eax
push 0x40
push 0x52
push 0x8684f0
call esi
push 0x52
push 0x90
push 0x8684f0
call fcn.1013cb70
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x52
push 0x8684f0
call esi
cmp dword [0x10252a94], 1
jne 0x1003e111
push 0x832897
push 0x832862
push 0xe9
call fcn.100ca7d0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x832cf2
call esi
mov eax, 0x832cf2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x832cf2
call esi
lea eax, [ebp - 8]
mov byte [ebp - 0xd], 5
push eax
push 0x40
push 1
push 0x832c46
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x1003db53
mov al, byte [ebp - 0xd]
mov byte [ebx], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x832c46
call esi
test eax, eax
jne 0x1003db55
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x830c79
mov bl, 0x22
call esi
test eax, eax
je 0x1003db93
mov eax, 0x830c79
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x830c79
call esi
test eax, eax
jne 0x1003db95
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x830c88
mov bl, 0x5e
call esi
test eax, eax
je 0x1003dbd3
mov eax, 0x830c88
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x830c88
call esi
test eax, eax
jne 0x1003dbd5
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x830c9a
mov bl, 0x8b
call esi
test eax, eax
je 0x1003dc13
mov eax, 0x830c9a
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x830c9a
call esi
test eax, eax
jne 0x1003dc15
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x830c6d
mov bl, 0x94
call esi
test eax, eax
je 0x1003dc53
mov eax, 0x830c6d
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x830c6d
call esi
test eax, eax
jne 0x1003dc55
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x830cb8
mov bl, 0x1d
call esi
test eax, eax
je 0x1003dc93
mov eax, 0x830cb8
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x830cb8
call esi
test eax, eax
jne 0x1003dc95
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x830cc7
mov bl, 0x54
call esi
test eax, eax
je 0x1003dcd3
mov eax, 0x830cc7
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x830cc7
call esi
test eax, eax
jne 0x1003dcd5
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x830cd6
mov bl, 0x7c
call esi
test eax, eax
je 0x1003dd13
mov eax, 0x830cd6
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x830cd6
call esi
test eax, eax
jne 0x1003dd15
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x830cac
mov bl, 0x80
call esi
test eax, eax
je 0x1003dd53
mov eax, 0x830cac
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x830cac
call esi
test eax, eax
jne 0x1003dd55
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x830c33
mov bl, 0x1e
call esi
test eax, eax
je 0x1003dd93
mov eax, 0x830c33
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x830c33
call esi
test eax, eax
jne 0x1003dd95
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x830cf4
mov bl, 0x19
call esi
test eax, eax
je 0x1003ddd3
mov eax, 0x830cf4
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x830cf4
call esi
test eax, eax
jne 0x1003ddd5
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x830d03
mov bl, 0x45
call esi
test eax, eax
je 0x1003de13
mov eax, 0x830d03
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x830d03
call esi
test eax, eax
jne 0x1003de15
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x830d11
mov bl, 0x68
call esi
test eax, eax
je 0x1003de53
mov eax, 0x830d11
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x830d11
call esi
test eax, eax
jne 0x1003de55
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x830ce8
mov bl, 0x6c
call esi
test eax, eax
je 0x1003de93
mov eax, 0x830ce8
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x830ce8
call esi
test eax, eax
jne 0x1003de95
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x830d49
call esi
test eax, eax
je 0x1003ded5
mov eax, 0x830d49
mov dword [eax], 0x1f4
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x830d49
call esi
test eax, eax
jne 0x1003ded7
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x832445
call esi
test eax, eax
je 0x1003df17
mov eax, 0x832445
mov dword [eax], 0xdc
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x832445
call esi
test eax, eax
jne 0x1003df19
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x830d66
call esi
lea eax, [ebp - 8]
mov byte [0x830d66], 0x21
push eax
push dword [ebp - 8]
push 1
push 0x830d66
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x830d69
call esi
lea eax, [ebp - 8]
mov byte [0x830d69], 0x37
push eax
push dword [ebp - 8]
push 1
push 0x830d69
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x830e57
call esi
lea eax, [ebp - 8]
mov byte [0x830e57], 0x21
push eax
push dword [ebp - 8]
push 1
push 0x830e57
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x83245d
call esi
lea eax, [ebp - 8]
mov byte [0x83245d], 0x21
push eax
push dword [ebp - 8]
push 1
push 0x83245d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x830ed5
call esi
lea eax, [ebp - 8]
mov byte [0x830ed5], 0x21
push eax
push dword [ebp - 8]
push 1
push 0x830ed5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x830fd8
call esi
lea eax, [ebp - 8]
mov byte [0x830fd8], 0x21
push eax
push dword [ebp - 8]
push 1
push 0x830fd8
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x8325d4
call esi
mov eax, 0x8325d4
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x8325d4
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x832639
call esi
mov eax, 0x832639
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x832639
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x83268f
call esi
mov eax, 0x83268f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x83268f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x8326d7
call esi
mov eax, 0x8326d7
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x8326d7
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x832757
call esi
mov eax, 0x832757
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x832757
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x832794
call esi
mov eax, 0x832794
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x832794
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100ee3f1
mov esp, ebp
pop ebp
ret