Function at 0x100b6930
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101f02fd
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x10252964]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 0x2c]
mov dword [esi + 0x2fc], eax
mov al, byte [ebp + 0x28]
mov byte [esi + 0x300], al
call fcn.100baaa0
call fcn.1007b410
mov ebx, eax
call fcn.1007b520
cmp byte [ebp + 8], 0
mov edx, 0x601
mov edi, 0x10044b20
mov dword [ebp - 0x3c], 0x602
movzx ecx, word [eax + 6]
mov eax, ecx
mov dword [ebp - 0x38], eax
jne 0x100b76f1
cmp cx, dx
jb 0x100b6d3d
cmp byte [ebp + 0x28], 0
jne 0x100b6d3d
movzx eax, word [0x1026332d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b69f0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x2e8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0
push 0x100aa850
push ecx
lea ecx, [esi + 0x1e4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026332f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6a70
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 1
push 0x100aeda0
push eax
lea ecx, [esi + 0x1e4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263331]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6af0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x2ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 2
push 0x100aa880
push eax
lea ecx, [esi + 0x1e4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263333]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6b70
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x2f0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 3
push 0x100aede0
push eax
lea ecx, [esi + 0x1e4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263335]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6bf0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x2f4]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 4
push 0x100a9470
push ecx
lea ecx, [esi + 0xc4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263337]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6c70
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x2f8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 5
push 0x100ae5d0
push eax
lea ecx, [esi + 0xc4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026332d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6cf0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x2e8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 6
push 0x100aa850
push ecx
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
jmp 0x100b7039
movzx eax, word [0x1026332d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6d71
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x2e8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 7
push 0x100aa850
push ecx
lea ecx, [esi + 4]
call fcn.100be850
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10044c38
cmp edx, 0x10
jb 0x100b6dfa
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 8
cmp edx, 0x1000
jb 0x100b6de9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100ba891
push edx
push ecx
call fcn.101c1346
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1026332f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6e30
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 9
push 0x100aeda0
push eax
lea ecx, [esi + 4]
call fcn.100be850
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10044c38
cmp edx, 0x10
jb 0x100b6eb9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xa
cmp edx, 0x1000
jb 0x100b6ea8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100ba896
push edx
push ecx
call fcn.101c1346
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x10263331]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6ef0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x2ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xb
push 0x100aa880
push eax
lea ecx, [esi + 4]
call fcn.100be850
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10044c38
cmp edx, 0x10
jb 0x100b6f79
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xc
cmp edx, 0x1000
jb 0x100b6f68
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100ba89b
push edx
push ecx
call fcn.101c1346
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x10263333]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6fb0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x2f0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xd
push 0x100aede0
push eax
lea ecx, [esi + 4]
call fcn.100be850
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10044c38
cmp edx, 0x10
jb 0x100b7039
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xe
cmp edx, 0x1000
jb 0x100b7028
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100ba8a0
push edx
push ecx
call fcn.101c1346
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
cmp ax, word [ebp - 0x3c]
jae 0x100b71cc
movzx eax, word [0x10263335]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7080
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x2f4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xf
push 0x100a9470
push eax
lea ecx, [esi + 4]
call fcn.100be850
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10044c38
cmp edx, 0x10
jb 0x100b7109
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x10
cmp edx, 0x1000
jb 0x100b70f8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100ba8a5
push edx
push ecx
call fcn.101c1346
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x10263337]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7140
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x2f8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x11
push 0x100ae5d0
push eax
lea ecx, [esi + 4]
call fcn.100be850
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10044c38
cmp edx, 0x10
jb 0x100b71c9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x12
cmp edx, 0x1000
jb 0x100b71b8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100ba8aa
push edx
push ecx
call fcn.101c1346
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
mov ecx, 0x601
cmp ax, cx
jb 0x100b73e5
cmp byte [ebp + 0x28], 0
jne 0x100b73e5
movzx eax, word [0x1026333b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7218
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1c0]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x13
push 0x100ab070
push ecx
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026333d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7297
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x14
push 0x100ab1d0
push eax
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026333f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7316
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1c4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x15
push 0x100ab110
push eax
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263341]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7395
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x16
push 0x100ab170
push eax
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
jmp 0x100b76e9
movzx eax, word [0x1026333b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7420
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x17
push 0x100ab070
push eax
lea ecx, [esi + 4]
call fcn.100be850
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10044c38
cmp edx, 0x10
jb 0x100b74a9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x18
cmp edx, 0x1000
jb 0x100b7498
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100ba8af
push edx
push ecx
call fcn.101c1346
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1026333d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b74e0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x19
push 0x100ab1d0
push eax
lea ecx, [esi + 4]
call fcn.100be850
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10044c38
cmp edx, 0x10
jb 0x100b7569
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1a
cmp edx, 0x1000
jb 0x100b7558
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100ba8b4
push edx
push ecx
call fcn.101c1346
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1026333f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b75a0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1c4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x1b
push 0x100ab110
push eax
lea ecx, [esi + 4]
call fcn.100be850
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10044c38
cmp edx, 0x10
jb 0x100b7629
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1c
cmp edx, 0x1000
jb 0x100b7618
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100ba8b9
push edx
push ecx
call fcn.101c1346
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x10263341]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7660
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x1d
push 0x100ab170
push eax
lea ecx, [esi + 4]
call fcn.100be850
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10044c38
cmp edx, 0x10
jb 0x100b76e9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1e
cmp edx, 0x1000
jb 0x100b76d8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100ba8be
push edx
push ecx
call fcn.101c1346
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
mov edx, 0x601
cmp byte [ebp + 0x10], 0
je 0x100b7c38
cmp ax, dx
jb 0x100b79c0
movzx eax, word [0x102633b3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7738
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x3d8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x1f
push 0x100abcb0
push ecx
lea ecx, [esi + 0x184]
call fcn.100be850
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x10044c38
cmp edx, 0x10
jb 0x100b77c4
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x20
cmp edx, 0x1000
jb 0x100b77b3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100ba8c3
push edx
push ecx
call fcn.101c1346
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x102633b5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b77f8
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x3dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x21
push 0x100ac1e0
push eax
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633b7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7877
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x3e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x22
push 0x100aaa70
push eax
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263411]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b78f6
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x460]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x23
push 0x100abdb0
push eax
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263413]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7975
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x464]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x24
push 0x100ac040
push eax
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633b3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b79f4
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x3d8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x25
push 0x100abcb0
push ecx
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633b5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7a70
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x3dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x26
push 0x100ac1e0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633b7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7af0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x3e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x27
push 0x100aaa70
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263411]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7b70
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x460]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x28
push 0x100abdb0
push ecx
lea ecx, [esi + 0x34]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263413]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7bf0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x464]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x29
push 0x100ac040
push eax
lea ecx, [esi + 0x34]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
cmp byte [ebp + 0xc], 0
jne 0x100b7c51
cmp byte [ebp + 0x20], 0
jne 0x100b7c51
mov al, byte [ebp + 0x14]
test al, al
je 0x100b7ef1
jmp 0x100b7c57
cmp byte [ebp + 0x14], 0
je 0x100b7c6f
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push 0x100be5c0
push 4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExA]
mov eax, dword [ebp - 0x38]
mov ecx, 0x601
cmp ax, cx
jb 0x100b7def
cmp byte [ebp + 0x28], 0
jne 0x100b7def
cmp byte [ebp + 0x24], 0
je 0x100b7d0f
cmp ax, word [ebp - 0x3c]
jae 0x100b7d0f
movzx eax, word [0x1026336b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x208]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x2a
push 0x100a9bf0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026336d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
mov dword [ebp - 4], 0x2b
jmp 0x100b7ec2
movzx eax, word [0x1026336b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7d43
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x208]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x2c
push 0x100a9bf0
push ecx
lea ecx, [esi + 0xf4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026336d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7dc2
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
mov dword [ebp - 4], 0x2d
lea ecx, [esi + 0xf4]
jmp 0x100b7ec5
movzx eax, word [0x1026336b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7e23
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x208]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x2e
push 0x100a9bf0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026336d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7ea0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
mov dword [ebp - 4], 0x2f
lea ecx, [esi + 4]
push dword [ebx + 0x20c]
lea eax, [ebp - 0x30]
push 0x100aa1d0
push eax
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
cmp byte [ebp + 0xc], 0
jne 0x100b7f04
mov al, byte [ebp + 0x14]
cmp byte [ebp + 0x10], 0
jne 0x100b7f04
test al, al
jne 0x100b7f04
cmp byte [ebp + 0x18], al
je 0x100b8593
mov ecx, dword [esi + 0x2fc]
mov eax, 0x601
cmp word [ebp - 0x38], ax
movzx eax, word [0x1026334d]
push eax
jb 0x100b8308
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7f47
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1cc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x30
push 0x100ab8a0
push ecx
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026334f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7fc6
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x31
push 0x100aba40
push eax
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263351]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8045
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x308]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x32
push 0x100ab270
push eax
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026334d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b80c4
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x33
push 0x100ab8a0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026334f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8140
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x34
push 0x100aba40
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263351]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b81c0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x308]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x35
push 0x100ab270
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
mov eax, dword [ebp - 0x3c]
cmp word [ebp - 0x38], ax
jb 0x100b8478
movzx eax, word [0x1026334b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8250
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1d8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x39
push 0x100abb80
push ecx
lea ecx, [esi + 0x154]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263349]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b82d0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1d8]
mov dword [ebp - 4], 0x3a
lea ecx, [esi + 0x154]
push 0x100ab710
jmp 0x100b8460
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8330
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x36
push 0x100ab8a0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026334f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b83b0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x37
push 0x100aba40
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263351]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8430
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x308]
mov dword [ebp - 4], 0x38
lea ecx, [esi + 4]
push 0x100ab270
lea eax, [ebp - 0x30]
push eax
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026334b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b84b0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1d8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3b
push 0x100abb80
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263349]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8530
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x1c8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3c
push 0x100ab710
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
cmp byte [ebp + 0x18], 0
je 0x100b8593
mov ecx, esi
call fcn.100bc9e0
mov ecx, esi
call fcn.100b1d40
mov ecx, esi
call fcn.100bae60
push 0x1b8
push 0
push 0x10263465
call fcn.101d82a0
add esp, 0xc
cmp byte [ebp + 0xc], 0
jne 0x100b85b7
cmp byte [ebp + 0x20], 0
je 0x100b88cf
mov ecx, dword [esi + 0x2fc]
mov eax, 0x601
cmp word [ebp - 0x38], ax
movzx eax, word [0x10263383]
push eax
jb 0x100b86d4
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8600
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x378]
lea eax, [esi + 0xf4]
mov dword [ebp - 4], 0x3d
push 0x100a96e0
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x14], eax
push ecx
mov ecx, eax
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263385]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8684
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x37c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3e
push 0x100a9ab0
push eax
lea ecx, [esi + 0xf4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
jmp 0x100b87d1
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8700
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x378]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3f
push 0x100a96e0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263385]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8780
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x37c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x40
push 0x100a9ab0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
lea eax, [esi + 0xf4]
mov dword [ebp - 0x14], eax
movzx eax, word [0x10263387]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8805
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x380]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x41
push 0x100a9820
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263389]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8881
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x384]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x42
push 0x100a9970
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
cmp byte [ebp + 0xc], 0
jne 0x100b88e2
cmp byte [ebp + 0x14], 0
lea eax, [esi + 0xf4]
mov dword [ebp - 0x14], eax
je 0x100b9950
mov eax, 0x601
cmp word [ebp - 0x38], ax
jb 0x100b8da1
cmp byte [ebp + 0x28], 0
jne 0x100b8da1
cmp byte [ebp + 0x24], 0
lea edi, [esi + 0xf4]
jne 0x100b899b
movzx eax, word [0x1026336f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x354]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x43
push 0x100aefd0
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263371]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x358]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x44
push 0x100ac880
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263373]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x35c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x45
push 0x100ae7d0
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263377]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x364]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x46
push 0x100ae6a0
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263379]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x368]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x47
push 0x100aad90
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263375]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x360]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x48
push 0x100ae990
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026337b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
mov dword [ebp - 4], 0x49
push dword [ebx + 0x36c]
lea eax, [ebp - 0x30]
mov ecx, edi
push 0x100aaee0
push eax
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263369]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x350]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4a
push 0x100aac60
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026337d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x214]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4b
push 0x100a9590
push eax
lea ecx, [esi + 0x124]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263357]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x314]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4c
push 0x100aa6f0
push eax
lea ecx, [esi + 0x124]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026335b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x31c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4d
push 0x100aa080
lea edi, [esi + 0x1b4]
push eax
mov ecx, edi
call fcn.100be850
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.10076960
movzx eax, word [0x1026335f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x324]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4e
push 0x100ac850
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263361]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x328]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4f
push 0x100ac310
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263363]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x32c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x50
push 0x100ac460
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263365]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x330]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x51
push 0x100aa950
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263367]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x334]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x52
push 0x100aeea0
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
lea edi, [esi + 4]
jmp 0x100b9467
cmp byte [ebp + 0x24], 0
jne 0x100b8ea8
movzx eax, word [0x1026336f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8de0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x354]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x53
push 0x100aefd0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263371]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8e60
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x358]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x54
push 0x100ac880
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263373]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8ee0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x35c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x55
push 0x100ae7d0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263377]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8f60
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x364]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x56
push 0x100ae6a0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263379]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b8fe0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x368]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x57
push 0x100aad90
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263375]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b9060
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x360]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x58
push 0x100ae990
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026337b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b90e0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x36c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x59
push 0x100aaee0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263369]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b9160
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x350]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5a
push 0x100aac60
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026337d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b91e0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x214]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5b
push 0x100a9590
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263357]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b9260
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.1007e870
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x314]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5c
push 0x100aa6f0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026335b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
test eax, eax
lea ecx, [ebp - 0x2c]
cmovne edi, eax
push edi
call fcn.10074890
mov dword [ebp - 0x30], 0x10044c38
push dword [ebx + 0x31c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5d
push 0x100aa080
lea edi, [esi + 4]
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026335f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x324]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5e
push 0x100ac850
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263361]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x328]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5f
push 0x100ac310
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263363]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x32c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x60
push 0x100ac460
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263365]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x330]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x61
push 0x100aa950
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263367]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x334]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x62
push 0x100aeea0
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
mov eax, dword [ebp - 0x3c]
cmp word [ebp - 0x38], ax
jb 0x100b953e
cmp byte [ebp + 0x24], 0
je 0x100b9510
movzx eax, word [0x1026336f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x354]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x30]
push 0x100aefd0
push eax
mov dword [ebp - 4], 0x63
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263371]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x358]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x30]
push 0x100ac880
push eax
mov dword [ebp - 4], 0x64
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263359]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
mov dword [ebp - 4], 0x65
lea ecx, [esi + 0x154]
jmp 0x100b95fd
cmp byte [ebp + 0x24], 0
je 0x100b95d8
movzx eax, word [0x1026336f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x354]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x66
push 0x100aefd0
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263371]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x358]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x67
push 0x100ac880
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263359]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
mov dword [ebp - 4], 0x68
mov ecx, edi
push dword [ebx + 0x318]
lea eax, [ebp - 0x30]
push 0x100a9f30
push eax
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026335d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x320]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x69
push 0x100ac820
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026338f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x390]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6a
push 0x100af800
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263391]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x394]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6b
push 0x100af4f0
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263393]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x398]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6c
push 0x100af180
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263395]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x39c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6d
push 0x100af950
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026339b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x3a8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6e
push 0x100af3a0
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026339d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x3ac]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6f
push 0x100af680
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263397]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x3a0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x70
push 0x100af180
push eax
mov ecx, edi
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263399]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x3a4]
mov dword [ebp - 4], 0x71
push 0x100af2d0
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
cmp byte [ebp + 0x1c], 0
jne 0x100b994a
movzx eax, word [0x1026345b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x2e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x72
push 0x100ac5b0
push eax
lea ecx, [esi + 0x94]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026345d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x2e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x73
push 0x100ac6f0
push eax
lea ecx, [esi + 0x94]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
cmp byte [ebp + 0xc], 0
jne 0x100b995a
cmp byte [ebp + 0x20], 0
je 0x100ba865
movzx eax, word [0x10263423]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x484]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x74
push 0x100acdc0
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263429]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x490]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x75
push 0x100ad9f0
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263437]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4ac]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x76
push 0x100ade30
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026343f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4bc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x77
push 0x100ae1f0
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263443]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
mov dword [ebp - 4], 0x78
push dword [ebx + 0x4c4]
lea eax, [ebp - 0x30]
push 0x100ad280
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026344b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x79
push 0x100ad3e0
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026344f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7a
push 0x100ad550
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263453]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7b
push 0x100ad6d0
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263455]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x2c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7c
push 0x100aca20
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026341d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x478]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7d
push 0x100acb30
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026341f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x47c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7e
push 0x100acf10
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263421]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x480]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7f
push 0x100acc70
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263425]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x488]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x80
push 0x100ad910
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263427]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
mov dword [ebp - 4], 0x81
push dword [ebx + 0x48c]
lea eax, [ebp - 0x30]
push 0x100adbd0
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026342b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x494]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x82
push 0x100adae0
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026342d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x498]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x83
push 0x100ad790
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026342f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x49c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x84
push 0x100ad850
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263431]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4a0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x85
push 0x100adcb0
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263433]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4a4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x86
push 0x100adef0
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263435]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4a8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x87
push 0x100add70
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263441]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x88
push 0x100ad050
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263439]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4b0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x89
push 0x100adfb0
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026343b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
mov dword [ebp - 4], 0x8a
push dword [ebx + 0x4b4]
lea eax, [ebp - 0x30]
push 0x100ae310
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026343d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4b8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8b
push 0x100ae0d0
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263445]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4c8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8c
push 0x100ad100
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263447]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8d
push 0x100ad1c0
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263449]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8e
push 0x100ad330
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026344d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4d8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8f
push 0x100ad490
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263451]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x4e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x90
push 0x100ad610
push eax
lea ecx, [esi + 0x64]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
cmp byte [ebp + 0xc], 0
je 0x100ba865
mov eax, 0x601
cmp word [ebp - 0x38], ax
jb 0x100ba467
cmp byte [ebp + 0x28], 0
jne 0x100ba467
movzx eax, word [0x1026337f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x370]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x91
push 0x100aa550
push eax
lea ecx, [esi + 0xf4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026338b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x388]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x92
push 0x100ae430
push eax
lea ecx, [esi + 0xf4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263381]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x374]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x93
push 0x100aa620
push eax
lea ecx, [esi + 0xf4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026338d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x38c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x94
push 0x100ae500
push eax
lea ecx, [esi + 0xf4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633a1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
mov dword [ebp - 4], 0x95
push dword [ebx + 0x3b4]
lea eax, [ebp - 0x30]
push 0x100ae5f0
push eax
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633a3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x3b8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x96
push 0x100aecf0
push eax
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633a5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x3bc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x97
push 0x100aabb0
push eax
lea ecx, [esi + 0x184]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633cf]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x3f4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x98
push 0x100ab020
push eax
lea ecx, [esi + 0xc4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633d1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x3f8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x99
push 0x100aeb40
push eax
lea ecx, [esi + 0xc4]
call fcn.100be850
lea ecx, [ebp - 0x30]
jmp 0x100ba859
movzx eax, word [0x1026337f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x370]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9a
push 0x100aa550
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026338b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x388]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9b
push 0x100ae430
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263381]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x374]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9c
push 0x100aa620
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x1026338d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x38c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9d
push 0x100ae500
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633a1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
mov dword [ebp - 4], 0x9e
push dword [ebx + 0x3b4]
lea eax, [ebp - 0x30]
push 0x100ae5f0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633a3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x3b8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9f
push 0x100aecf0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633a5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x3bc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa0
push 0x100aabb0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633cf]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x3f4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa1
push 0x100ab020
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633d1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x3f8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa2
push 0x100aeb40
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263343]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x300]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa3
push 0x100ab320
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633a7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x3c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa4
push 0x100aeb90
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263345]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x304]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa5
push 0x100ab400
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x10263347]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x30]
call fcn.10074350
push dword [ebx + 0x1e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa6
push 0x100ab5b0
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
movzx eax, word [0x102633a9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100d4ea0
push eax
lea ecx, [ebp - 0x58]
call fcn.10074350
mov dword [ebp - 4], 0xa7
push dword [ebx + 0x3c4]
lea eax, [ebp - 0x58]
push 0x100aec40
push eax
lea ecx, [esi + 4]
call fcn.100be850
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0xffffffff
call fcn.10076960
mov ecx, esi
call fcn.100b1520
mov ecx, esi
call fcn.100b1690
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101c1860
mov esp, ebp
pop ebp
ret 0x28
call fcn.100f24b4
call fcn.100f24b4
call fcn.100f24b4
call fcn.100f24b4
call fcn.100f24b4
call fcn.100f24b4
call fcn.100f24b4
call fcn.100f24b4
call fcn.100f24b4
call fcn.100f24b4
call fcn.100f24b4
int3