Function at 0x1003ba40
Capabilities:
Parse pe header

Disassembly:
mov ecx, dword [esp + 0x20]
sub esp, 0x114
lea eax, [esp + 0x138]
lea edx, [esp + 0x14]
push ebx
push ebp
push esi
push edi
push eax
push ecx
push edx
call fcn.10050ed2
mov al, byte [esp + 0x138]
mov esi, dword [esp + 0x134]
add esp, 0xc
test al, al
je 0x1003ba96
lea eax, [esp + 0x24]
push eax
push esi
call fcn.1003df40
mov edi, dword [esp + 0x138]
add esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
add edi, eax
jmp 0x1003ba9d
mov edi, dword [esp + 0x130]
mov ebp, dword [esp + 0x138]
xor eax, eax
cmp ebp, eax
mov dword [esp + 0x20], edi
jne 0x1003bad3
cmp dword [esp + 0x13c], eax
jne 0x1003bad3
cmp dword [esp + 0x140], eax
jne 0x1003bad3
mov ecx, 0xb4
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], ecx
jmp 0x1003badf
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0x134]
mov dword [esp + 0x1c], eax
mov al, byte [esp + eax + 0x24]
test al, al
je 0x1003df2e
cmp al, 0x20
jne 0x1003bafd
add edi, 4
cmp al, 0xa
jne 0x1003bb0d
mov edi, dword [esp + 0x20]
add ebx, 0xb
jmp 0x1003df1a
cmp al, 0x61
je 0x1003de48
cmp al, 0x41
je 0x1003de48
cmp al, 0x62
je 0x1003dd5a
cmp al, 0x42
je 0x1003dd5a
cmp al, 0x38
je 0x1003dd5a
cmp al, 0x63
je 0x1003dc6c
cmp al, 0x43
je 0x1003dc6c
cmp al, 0x64
je 0x1003db80
cmp al, 0x44
je 0x1003db80
cmp al, 0x65
je 0x1003db09
cmp al, 0x45
je 0x1003db09
cmp al, 0x66
je 0x1003da41
cmp al, 0x46
je 0x1003da41
cmp al, 0x67
je 0x1003d94e
cmp al, 0x47
je 0x1003d94e
cmp al, 0x68
je 0x1003d8de
cmp al, 0x48
je 0x1003d8de
cmp al, 0x69
je 0x1003d7e3
cmp al, 0x49
je 0x1003d7e3
cmp al, 0x31
je 0x1003d7e3
cmp al, 0x6a
je 0x1003d71a
cmp al, 0x4a
je 0x1003d71a
cmp al, 0x6b
je 0x1003d622
cmp al, 0x4b
je 0x1003d622
cmp al, 0x6c
je 0x1003d582
cmp al, 0x4c
je 0x1003d582
cmp al, 0x6d
je 0x1003d4ab
cmp al, 0x4d
je 0x1003d4ab
cmp al, 0x6e
je 0x1003d45f
cmp al, 0x4e
je 0x1003d45f
cmp al, 0x6f
je 0x1003d392
cmp al, 0x4f
je 0x1003d392
cmp al, 0x30
je 0x1003d392
cmp al, 0x70
je 0x1003d2a9
cmp al, 0x50
je 0x1003d2a9
cmp al, 0x71
je 0x1003d12a
cmp al, 0x51
je 0x1003d12a
cmp al, 0x72
je 0x1003d007
cmp al, 0x52
je 0x1003d007
cmp al, 0x73
je 0x1003cf44
cmp al, 0x53
je 0x1003cf44
cmp al, 0x35
je 0x1003cf44
cmp al, 0x74
je 0x1003ce9a
cmp al, 0x54
je 0x1003ce9a
cmp al, 0x75
je 0x1003cdf8
cmp al, 0x55
je 0x1003cdf8
cmp al, 0x76
je 0x1003cd32
cmp al, 0x56
je 0x1003cd32
cmp al, 0x77
je 0x1003cc5b
cmp al, 0x57
je 0x1003cc5b
cmp al, 0x78
je 0x1003cb63
cmp al, 0x58
je 0x1003cb63
cmp al, 0x79
je 0x1003cac8
cmp al, 0x59
je 0x1003cac8
cmp al, 0x7a
je 0x1003c9d4
cmp al, 0x5a
je 0x1003c9d4
cmp al, 0x32
je 0x1003c9d4
cmp al, 0x33
jne 0x1003bd7a
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 3]
push 3
lea eax, [edi + 1]
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
push 4
lea ecx, [ebx + 5]
jmp 0x1003d7b2
cmp al, 0x34
jne 0x1003be4d
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 5
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 2
lea eax, [ebx + 5]
push 3
lea ecx, [edi + 3]
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 3]
push 2
lea edx, [edi + 2]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
lea eax, [ebx + 1]
push 3
push 1
push eax
lea eax, [edi + 1]
mov ecx, esi
push eax
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 5
lea eax, [ebx + 1]
push 1
push eax
lea eax, [edi + 4]
push eax
jmp 0x1003df10
cmp al, 0x36
jne 0x1003bec7
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
lea eax, [ebx + 3]
push 1
push 2
push eax
lea edx, [edi + 2]
jmp 0x1003d9bf
cmp al, 0x37
jne 0x1003bfbf
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 3
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x18]
push 0
push 0xff
push edx
mov edx, dword [esp + 0x20]
lea eax, [ebx + 3]
push edx
mov edx, dword [esp + 0x20]
push edx
push 2
lea ecx, [edi + 1]
push 5
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 2
lea eax, [ebx + 5]
push 3
lea ecx, [edi + 3]
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 1]
push 4
lea eax, [edi + 1]
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea eax, [ebx + 3]
push 2
lea ecx, [edi + 2]
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 4
lea ecx, [ebx + 2]
push 1
push ecx
jmp 0x1003df0c
cmp al, 0x39
jne 0x1003c08d
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 3]
push 2
lea edx, [edi + 2]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 5]
push 4
lea eax, [edi + 1]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
lea eax, [ebx + 2]
push 2
jmp 0x1003de1b
cmp al, 0x2e
jne 0x1003c0ed
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 3
lea eax, [ebx + 4]
push 3
lea ecx, [edi + 1]
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 5]
push 1
lea edx, [edi + 2]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
add edi, 5
jmp 0x1003df1a
cmp al, 0x2c
jne 0x1003c14d
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 4
lea eax, [ebx + 4]
push 3
lea ecx, [edi + 1]
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 2
lea ecx, [ebx + 5]
push 1
lea edx, [edi + 2]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
add edi, 5
jmp 0x1003df1a
cmp al, 0x3a
jne 0x1003c1dc
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 6
lea eax, [ebx + 1]
push 3
lea ecx, [edi + 1]
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
push 1
lea edx, [ebx + 2]
lea eax, [edi + 2]
push 1
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 5]
push 1
lea eax, [edi + 2]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
add edi, 5
jmp 0x1003df1a
cmp al, 0x21
jne 0x1003c268
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 7
push 3
lea eax, [edi + 1]
push ebx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 3
lea ecx, [ebx + 1]
lea eax, [edi + 2]
push 1
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 5]
push 1
lea eax, [edi + 2]
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
add edi, 5
jmp 0x1003df1a
cmp al, 0x2f
jne 0x1003c394
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 2
push 3
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 2
lea edx, [ebx + 2]
push 4
push edx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 0
push 0xff
push ecx
mov ecx, dword [esp + 0x1c]
push edx
push ecx
push 2
lea edx, [ebx + 4]
lea eax, [edi + 1]
push 4
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 0
push 0xff
push ecx
mov ecx, dword [esp + 0x1c]
push edx
push ecx
push 2
lea edx, [ebx + 6]
lea eax, [edi + 2]
push 3
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 2
lea edx, [ebx + 1]
push 1
lea eax, [edi + 1]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 2
lea edx, [ebx + 3]
push 1
lea eax, [edi + 2]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 2
lea edx, [ebx + 5]
push 1
lea eax, [edi + 3]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
add edi, 5
jmp 0x1003df1a
cmp al, 0x28
jne 0x1003c4e6
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 0
push 0xff
push ecx
mov ecx, dword [esp + 0x1c]
push edx
push ecx
push 1
lea eax, [edi + 1]
push 4
push ebx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push 0
push 0xff
push edx
mov edx, dword [esp + 0x1c]
push ecx
push edx
lea eax, [ebx + 1]
push 2
push 5
push eax
push edi
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 2
lea eax, [ebx + 3]
push 3
push eax
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 2
lea ecx, [ebx + 5]
push 5
push ecx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 1
lea edx, [ebx + 7]
push 4
lea eax, [edi + 1]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
push 0
push 0xff
lea ecx, [edi + 2]
push eax
mov edx, dword [esp + 0x148]
lea eax, [ebx + 1]
push edx
push ebp
push 1
push 2
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 4
lea edx, [ebx + 2]
push 1
lea eax, [edi + 1]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 6]
push 2
lea eax, [edi + 2]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
add edi, 5
jmp 0x1003df1a
cmp al, 0x29
jne 0x1003c635
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 1
push 4
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 0
push 0xff
push ecx
mov ecx, dword [esp + 0x1c]
push edx
push ecx
lea eax, [ebx + 1]
push 2
push 5
push eax
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 2
lea edx, [ebx + 3]
push 3
lea eax, [edi + 2]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 2
lea ecx, [ebx + 5]
push 5
push ecx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 1
lea edx, [ebx + 7]
push 4
push edx
push edi
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
lea ecx, [edi + 1]
push eax
push edx
push ebp
push 1
lea eax, [ebx + 1]
push 2
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 4
lea edx, [ebx + 2]
push 1
lea eax, [edi + 3]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
push 2
lea eax, [ebx + 6]
mov ecx, esi
push eax
lea eax, [edi + 1]
push eax
call fcn.1003b9f0
add edi, 5
jmp 0x1003df1a
cmp al, 0x5b
jne 0x1003c735
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 3
push 5
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 2
lea ecx, [ebx + 3]
push 3
push ecx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 3
lea edx, [ebx + 5]
push 5
push edx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 3
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 4
lea ecx, [ebx + 2]
push 1
lea eax, [edi + 1]
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 6]
push 3
lea eax, [edi + 1]
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
add edi, 5
jmp 0x1003df1a
cmp al, 0x5d
jne 0x1003c826
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 3
push 5
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 2
lea edx, [ebx + 3]
push 3
lea eax, [edi + 2]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 3
lea ecx, [ebx + 5]
push 5
push ecx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
push 1
lea edx, [ebx + 1]
lea eax, [edi + 1]
push 3
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 4
lea edx, [ebx + 2]
push 1
lea eax, [edi + 3]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
push 3
jmp 0x1003c61e
cmp al, 0x2d
jne 0x1003c87c
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 3
lea ecx, [ebx + 2]
push 4
lea edx, [edi + 1]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 3]
push 2
lea eax, [edi + 2]
push edx
push eax
jmp 0x1003df10
cmp al, 0x5f
jne 0x1003c8ce
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 3
lea ecx, [ebx + 4]
push 6
push ecx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 5]
push 4
push ecx
lea edx, [edi + 1]
jmp 0x1003df0f
cmp al, 0x2b
jne 0x1003df1a
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 0
push 0xff
push ecx
mov ecx, dword [esp + 0x1c]
push edx
push ecx
push 2
lea eax, [edi + 2]
push 3
push ebx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 3
lea edx, [ebx + 2]
push 7
push edx
push edi
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 2
lea eax, [ebx + 5]
push 3
push eax
lea eax, [edi + 2]
mov ecx, esi
push eax
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 2
lea ecx, [ebx + 1]
lea eax, [edi + 3]
push 1
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 3]
push 5
lea edx, [edi + 1]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 2
lea edx, [ebx + 4]
push 1
lea eax, [edi + 3]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
add edi, 7
jmp 0x1003df1a
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
lea eax, [ebx + 3]
push 1
push 2
lea edx, [edi + 2]
push eax
push edx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 5]
push 4
lea eax, [edi + 1]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 2
lea eax, [ebx + 3]
push 1
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 2
lea ecx, [ebx + 2]
push 1
push ecx
jmp 0x1003df0c
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 3]
push 2
lea eax, [edi + 2]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 5]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
lea eax, [ebx + 1]
push 3
jmp 0x1003ce63
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 3]
push 2
lea edx, [edi + 2]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
push 0
push 0xff
push edx
mov edx, dword [esp + 0x148]
lea eax, [ebx + 1]
push edx
push ebp
push 2
lea ecx, [edi + 1]
push 1
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push edx
push ebp
push 2
lea eax, [ebx + 1]
lea ecx, [edi + 4]
push 1
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
lea eax, [ebx + 4]
push 2
push 1
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 2
lea eax, [ebx + 4]
push 1
push eax
lea eax, [edi + 4]
push eax
jmp 0x1003df10
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 7
push 7
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
push 1
lea edx, [ebx + 5]
lea eax, [edi + 1]
push 5
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
lea eax, [ebx + 1]
push 4
push 1
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 4
lea eax, [ebx + 1]
push 1
lea edx, [edi + 3]
push eax
push edx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 4
lea eax, [ebx + 1]
push 1
lea edx, [edi + 5]
push eax
push edx
mov ecx, esi
call fcn.1003b9f0
add edi, 7
jmp 0x1003df1a
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 6
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 0
push 0xff
push ecx
mov ecx, dword [esp + 0x1c]
push edx
push ecx
push 1
lea edx, [ebx + 6]
lea eax, [edi + 1]
push 4
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 5]
push 2
lea eax, [edi + 2]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
lea eax, [ebx + 1]
push 4
push 1
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 4
push 1
lea eax, [ebx + 1]
jmp 0x1003df0b
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 5]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
lea eax, [ebx + 1]
push 4
push 1
push eax
lea eax, [edi + 1]
mov ecx, esi
push eax
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 4
lea eax, [ebx + 1]
push 1
lea ecx, [edi + 4]
push eax
push ecx
jmp 0x1003df10
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 3
push 5
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push 0
push 0xff
push edx
mov edx, dword [esp + 0x1c]
push ecx
push edx
push 4
lea ecx, [ebx + 3]
lea eax, [edi + 1]
push 3
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 1]
push 3
lea eax, [edi + 1]
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 4
lea ecx, [ebx + 2]
push 1
lea edx, [edi + 2]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
add edi, 5
jmp 0x1003df1a
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
lea eax, [ebx + 3]
push 1
push 2
lea edx, [edi + 2]
push eax
push edx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 5]
push 4
lea eax, [edi + 1]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 2
jmp 0x1003da0c
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 3]
push 2
lea edx, [edi + 2]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
lea eax, [ebx + 2]
push 4
push 1
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push edx
push ebp
push 1
lea eax, [ebx + 2]
lea ecx, [edi + 4]
push 1
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 4]
push 2
lea eax, [edi + 3]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea eax, [ebx + 5]
push 1
push eax
lea eax, [edi + 4]
push eax
jmp 0x1003df10
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 0
push 0xff
push ecx
mov ecx, dword [esp + 0x1c]
push edx
push ecx
lea eax, [ebx + 5]
push 3
push 1
lea edx, [edi + 6]
push eax
push edx
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 0
push 0xff
push ecx
mov ecx, dword [esp + 0x1c]
push edx
push ecx
push 1
lea edx, [ebx + 7]
lea eax, [edi + 4]
push 3
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea eax, [ebx + 5]
push 4
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
push 0
push 0xff
lea eax, [ebx + 2]
push ecx
mov edx, dword [esp + 0x148]
mov ecx, esi
push edx
push ebp
push 3
push 1
push eax
lea eax, [edi + 1]
push eax
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 3
lea eax, [ebx + 2]
push 1
push eax
lea eax, [edi + 4]
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 4]
push 1
lea edx, [edi + 3]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 6]
push 1
lea eax, [edi + 5]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
add edi, 7
jmp 0x1003df1a
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 7
push 3
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 5
push 3
lea ecx, [edi + 3]
push ebx
push ecx
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
push 1
lea edx, [ebx + 1]
lea eax, [edi + 1]
push 4
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 3]
push 2
lea eax, [edi + 2]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
lea eax, [ebx + 2]
push 4
push 1
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 2
jmp 0x1003df06
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 5]
push 4
lea eax, [edi + 1]
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
lea eax, [ebx + 2]
push 3
push 1
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 3
lea eax, [ebx + 2]
push 1
lea ecx, [edi + 4]
push eax
push ecx
jmp 0x1003df10
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
push 1
lea edx, [ebx + 1]
lea eax, [edi + 1]
push 4
push edx
push eax
jmp 0x1003deba
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 7
push 7
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 5
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
lea eax, [ebx + 2]
push 4
push 1
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 4
lea eax, [ebx + 2]
push 1
lea ecx, [edi + 3]
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 4
lea eax, [ebx + 2]
push 1
lea ecx, [edi + 5]
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
add edi, 7
jmp 0x1003df1a
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 7
push 3
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 3
lea edx, [ebx + 4]
push 3
lea eax, [edi + 3]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 4
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 1
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 5]
push 4
lea eax, [edi + 1]
push ecx
push eax
jmp 0x1003df10
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
lea eax, [ebx + 3]
push 1
push 2
lea edx, [edi + 2]
push eax
push edx
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
lea eax, [ebx + 1]
push 5
push 1
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 3
lea eax, [ebx + 3]
lea ecx, [edi + 4]
push 1
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea eax, [ebx + 1]
push 1
push eax
lea eax, [edi + 4]
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 2]
push 1
lea eax, [edi + 3]
push edx
push eax
jmp 0x1003df10
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 5]
push 4
lea eax, [edi + 1]
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
push 1
lea ecx, [ebx + 4]
lea eax, [edi + 1]
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 3
lea ecx, [ebx + 2]
push 1
push ecx
jmp 0x1003df0c
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 3
push 5
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 0
push 0xff
push ecx
mov ecx, dword [esp + 0x1c]
push edx
push ecx
push 1
lea edx, [ebx + 3]
lea eax, [edi + 1]
push 3
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 3
lea eax, [ebx + 4]
push 5
push eax
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea eax, [ebx + 1]
push 3
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea eax, [ebx + 5]
push 3
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 3
lea eax, [ebx + 2]
push 1
lea ecx, [edi + 2]
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
add edi, 5
jmp 0x1003df1a
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push 0xff
push edx
push eax
push ecx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 3]
push 2
lea edx, [edi + 2]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
lea eax, [ebx + 1]
push 5
jmp 0x1003be16
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
lea eax, [ebx + 3]
push 1
push 1
push eax
lea edx, [edi + 3]
push edx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 5]
push 4
lea eax, [edi + 1]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 3
lea edx, [ebx + 2]
push 1
lea eax, [edi + 1]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 2
push 1
lea eax, [ebx + 3]
jmp 0x1003df0b
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 5
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 2
lea eax, [ebx + 5]
push 3
push eax
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 3]
push 3
lea edx, [edi + 2]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 4
lea edx, [ebx + 2]
push 1
lea eax, [edi + 1]
push edx
push eax
jmp 0x1003df10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 3]
push 3
lea edx, [edi + 2]
push ecx
push edx
jmp 0x1003dcff
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 7
push 5
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 0
push 0xff
push ecx
mov ecx, dword [esp + 0x1c]
push edx
push ecx
lea eax, [ebx + 1]
push 5
push 1
lea edx, [edi + 5]
push eax
push edx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push edx
push ebp
push 1
lea eax, [ebx + 1]
lea ecx, [edi + 1]
push 3
push eax
push ecx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 5]
push 3
lea eax, [edi + 1]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
lea eax, [ebx + 2]
push 3
push 1
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 3
jmp 0x1003df06
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 3
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 1
lea eax, [ebx + 3]
push 3
push eax
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0
push 0xff
push ecx
push edx
push eax
push 3
lea ecx, [ebx + 4]
push 6
push ecx
push edi
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push edx
push ecx
push ebp
push 1
lea edx, [ebx + 1]
lea eax, [edi + 1]
push 4
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 5]
push 4
lea eax, [edi + 1]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 3
lea edx, [ebx + 2]
push 1
lea eax, [edi + 1]
push edx
push eax
jmp 0x1003df10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 3]
push 2
lea edx, [edi + 2]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 1
lea edx, [ebx + 5]
push 4
lea eax, [edi + 1]
push edx
push eax
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
lea eax, [ebx + 2]
push 3
push 1
push eax
lea eax, [edi + 1]
mov ecx, esi
push eax
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 3
jmp 0x1003df06
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0
push 0xff
push eax
push ecx
push edx
push 7
push 6
push ebx
push edi
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
push 1
lea ecx, [ebx + 1]
lea eax, [edi + 1]
push 4
push ecx
push eax
mov ecx, esi
call fcn.1003b9f0
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x13c]
push 0
push 0xff
push edx
push eax
push ebp
push 1
lea ecx, [ebx + 3]
push 2
lea edx, [edi + 2]
push ecx
push edx
mov ecx, esi
call fcn.1003b9f0
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
push 0
push 0xff
push ecx
push edx
push ebp
lea eax, [ebx + 2]
push 4
push 1
push eax
lea eax, [edi + 1]
push eax
mov ecx, esi
call fcn.1003b9f0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
push 0
push 0xff
push eax
push ecx
push ebp
push 4
push 1
lea eax, [ebx + 2]
push eax
lea edx, [edi + 4]
push edx
mov ecx, esi
call fcn.1003b9f0
add edi, 6
mov eax, dword [esp + 0x1c]
inc eax
cmp eax, 0x100
mov dword [esp + 0x1c], eax
jb 0x1003baea
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x114
ret