Function at 0x10e2240
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x11b58e9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1b1c
call sub.ntdll.dll__chkstk
push esi
push edi
mov dword [ebp - 0x1938], ecx
lea eax, [ebp - 0x684]
push eax
lea ecx, [ebp - 0x680]
push ecx
lea edx, [ebp - 0x688]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x1938]
call fcn.010dcf20
lea edx, [ebp - 0x680]
push edx
lea eax, [ebp - 0x688]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x1938]
call fcn.010de350
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x14]
push ecx
mov edx, dword [eax + 0x10]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x1938]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp - 0x1938]
mov ecx, dword [eax + 0x18]
mov edx, dword [edx]
mov eax, dword [edx + 0x24]
call eax
push eax
call fcn.010d05e0
mov dword [ebp - 0x66c], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
push edx
mov eax, dword [ecx + 0x18]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
call fcn.010d05e0
mov dword [ebp - 0x18], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
call fcn.010d0510
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x1938]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp - 0x1938]
mov ecx, dword [eax + 0x18]
mov edx, dword [edx]
mov eax, dword [edx + 0x24]
call eax
push eax
call fcn.010d0510
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 5
je 0x10e2408
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xc
je 0x10e2408
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xa
je 0x10e2408
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 6
je 0x10e2408
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 7
je 0x10e2408
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 8
je 0x10e2408
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 9
jne 0x10e2419
push 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
jmp 0x10e2428
push 1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x193c], eax
mov ecx, dword [ebp - 0x193c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x193c]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10e24c1
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0xffffffff
jne 0x10e24c1
call fcn.010946d0
mov dword [ebp - 0x68c], eax
mov edx, dword [ebp - 0x66c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x66c]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x1940], eax
mov eax, dword [ebp - 0x66c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x1940]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1940]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp - 0x68c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x68c]
mov edx, dword [eax]
call edx
push 0
mov eax, dword [ebp - 0x34]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x34]
mov eax, dword [edx + 0x3c]
call eax
test eax, eax
je 0x10e252e
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x34]
mov eax, dword [edx + 0x40]
call eax
push 8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
call fcn.010947d0
mov dword [ebp - 0x1944], eax
push 0xd10
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100c880
mov ecx, dword [ebp - 0x1944]
push ecx
mov edx, dword [ebp - 0x1944]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10e4b94
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x194c], eax
mov dword [ebp - 0x1948], edx
mov eax, dword [ebp - 0x194c]
or eax, dword [ebp - 0x1948]
jne 0x10e25a2
call fcn.010947d0
mov dword [ebp - 0x1950], eax
push 0xd16
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cdbc
mov ecx, dword [ebp - 0x1950]
push ecx
mov edx, dword [ebp - 0x1950]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
push 0x20
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x20]
call edx
xor eax, eax
jmp 0x10e4b94
mov eax, dword [ebp - 0x34]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x34]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x1954], eax
mov ecx, dword [ebp - 0x1954]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1954]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x66c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov ecx, dword [ebp - 0x66c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x67c], eax
mov dword [ebp - 0x678], edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x668], eax
call fcn.010946d0
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x66c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x28]
call eax
mov word [ebp - 0x10], ax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x670], 0
mov dword [ebp - 0x1c], 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x40]
call eax
movzx ecx, ax
movzx edx, word [ebp - 0x10]
cmp ecx, edx
jne 0x10e26a7
push 1
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x1c], 1
call fcn.010947d0
mov dword [ebp - 0x1958], eax
push 0xd32
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cd9c
mov ecx, dword [ebp - 0x1958]
push ecx
mov edx, dword [ebp - 0x1958]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [0x100cd8c]
mov dword [ebp - 0x894], edx
mov eax, dword [0x100cd90]
mov dword [ebp - 0x890], eax
mov ecx, dword [0x100cd94]
mov dword [ebp - 0x88c], ecx
mov dx, word [0x100cd98]
mov word [ebp - 0x888], dx
push 0x1f2
push 0
lea eax, [ebp - 0x886]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
movzx ecx, word [ebp - 0x10]
push ecx
push 0x10060bc
lea edx, [ebp - 0x894]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
push 0
push 0x80
push 3
push 0
push 1
push 0xc0000000
lea eax, [ebp - 0x894]
push eax
call fcn.01091ef0
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 0xffffffff
jne 0x10e27a9
call fcn.010947d0
mov dword [ebp - 0x195c], eax
movzx ecx, word [ebp - 0x10]
push ecx
push 0xd3e
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cd5c
mov edx, dword [ebp - 0x195c]
push edx
mov eax, dword [ebp - 0x195c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0x10
jmp 0x10e27b5
mov eax, dword [ebp - 0x690]
push eax
call fcn.01092350
mov dword [ebp - 0x4c], 0
mov ecx, dword [ebp - 0x67c]
cmp ecx, dword [ebp - 0x464]
jne 0x10e27dc
mov edx, dword [ebp - 0x678]
cmp edx, dword [ebp - 0x460]
je 0x10e3115
mov dword [ebp - 0x8a0], 0
mov dword [ebp - 0x89c], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0x1938]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp - 0x1938]
mov ecx, dword [ecx + 0x18]
mov edx, dword [eax]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x1960], eax
mov ecx, dword [ebp - 0x1960]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1960]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x898], 0
je 0x10e2916
mov ecx, dword [ebp - 0x898]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x898]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x1964], eax
mov ecx, dword [ebp - 0x1964]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1964]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x8a0], 0
je 0x10e28d0
mov ecx, dword [ebp - 0x8a0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x8a0]
mov eax, dword [edx + 0x64]
call eax
test eax, eax
je 0x10e289c
mov ecx, dword [ebp - 0x8a0]
mov dword [ebp - 0x89c], ecx
jmp 0x10e28d0
mov edx, dword [ebp - 0x898]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x898]
mov edx, dword [eax + 0x3c]
call edx
mov dword [ebp - 0x1968], eax
mov eax, dword [ebp - 0x1968]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1968]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x8a0], eax
jmp 0x10e286e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x1938]
mov ecx, dword [eax + 0x18]
mov edx, dword [ebp - 0x1938]
mov eax, dword [edx + 0x18]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x196c], eax
mov ecx, dword [ebp - 0x196c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x196c]
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 0x898], eax
jmp 0x10e282f
mov ecx, dword [ebp - 0x89c]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x898], 0
je 0x10e29f7
mov ecx, dword [ebp - 0x898]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x898]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x1970], eax
mov ecx, dword [ebp - 0x1970]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1970]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x8a0], 0
je 0x10e29d9
mov ecx, dword [ebp - 0x8a0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x8a0]
mov eax, dword [edx + 0x64]
call eax
test eax, eax
je 0x10e29a5
mov ecx, dword [ebp - 0x8a0]
mov dword [ebp - 0x8a4], ecx
jmp 0x10e29d9
mov edx, dword [ebp - 0x898]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x898]
mov edx, dword [eax + 0x3c]
call edx
mov dword [ebp - 0x1974], eax
mov eax, dword [ebp - 0x1974]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1974]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x8a0], eax
jmp 0x10e2977
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
mov edx, dword [edx]
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 0x898], eax
jmp 0x10e2938
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
push edx
mov eax, dword [ecx + 0x18]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x14]
push edx
mov eax, dword [ecx + 0x10]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
call fcn.010e2090
test eax, eax
jne 0x10e3115
cmp dword [ebp - 0x89c], 0
je 0x10e3115
call fcn.01123d90
mov dword [ebp - 0x8ac], eax
mov byte [ebp - 0x9d0], 0
xor ecx, ecx
mov dword [ebp - 0x9cf], ecx
mov dword [ebp - 0x9cb], ecx
mov dword [ebp - 0x9c7], ecx
mov dword [ebp - 0x9c3], ecx
mov dword [ebp - 0x9bf], ecx
mov dword [ebp - 0x9bb], ecx
mov dword [ebp - 0x9b7], ecx
mov dword [ebp - 0x9b3], ecx
mov edx, dword [ebp - 0x66c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x66c]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x1978], eax
mov eax, dword [ebp - 0x1978]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1978]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10e2b3d
mov byte [ebp - 0x9d0], 1
mov ecx, dword [ebp - 0x66c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x197c]
mov eax, dword [edx + 0x8c]
call eax
mov ecx, dword [eax]
mov dword [ebp - 0x9bf], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x9bb], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x9b7], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x9b3], edx
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x16a
mov ecx, dword [eax]
mov dword [ebp - 0x9cf], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x9cb], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x9c7], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x9c3], edx
jmp 0x10e2bc8
mov byte [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x66c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1980], eax
mov ecx, dword [ebp - 0x1980]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1980]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x9c7], eax
mov ecx, dword [ebp - 0x66c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1984], eax
mov ecx, dword [ebp - 0x1984]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1984]
mov eax, dword [edx + 0x58]
call eax
mov esi, eax
xor edi, edi
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
push edi
push esi
push edx
push eax
call sub.ntdll.dll__allmul
mov dword [ebp - 0x9cf], eax
mov dword [ebp - 0x9cb], edx
call fcn.010946d0
mov dword [ebp - 0x8a8], eax
mov word [ebp - 0x9ac], 0
push 0xfe
push 0
lea ecx, [ebp - 0x9aa]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x89c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x89c]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x1988], eax
mov eax, dword [ebp - 0x89c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x89c]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x1988]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1988]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x80
lea ecx, [ebp - 0x9ac]
push ecx
mov edx, dword [ebp - 0x8a8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8a8]
mov edx, dword [eax + 0x2c]
call edx
mov word [ebp - 0xbd4], 0
push 0x1fe
push 0
lea eax, [ebp - 0xbd2]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x89c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x89c]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x198c], eax
mov ecx, dword [ebp - 0x198c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x198c]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10e2e02
lea ecx, [ebp - 0xbd4]
add ecx, 0xfffffffe
mov dword [ebp - 0x1990], ecx
mov edx, dword [ebp - 0x1990]
mov ax, word [edx + 2]
mov word [ebp - 0x1992], ax
add dword [ebp - 0x1990], 2
cmp word [ebp - 0x1992], 0
jne 0x10e2cb5
mov edi, dword [ebp - 0x1990]
mov ecx, dword [0x100a8ac]
mov dword [edi], ecx
mov edx, dword [0x100a8b0]
mov dword [edi + 4], edx
mov eax, dword [0x100a8b4]
mov dword [edi + 8], eax
mov ecx, dword [0x100a8b8]
mov dword [edi + 0xc], ecx
mov edx, dword [0x100a8bc]
mov dword [edi + 0x10], edx
mov ax, word [0x100a8c0]
mov word [edi + 0x14], ax
lea ecx, [ebp - 0x9ac]
mov dword [ebp - 0x1998], ecx
mov edx, dword [ebp - 0x1998]
mov dword [ebp - 0x199c], edx
mov eax, dword [ebp - 0x1998]
mov cx, word [eax]
mov word [ebp - 0x199e], cx
add dword [ebp - 0x1998], 2
cmp word [ebp - 0x199e], 0
jne 0x10e2d2a
mov edx, dword [ebp - 0x1998]
sub edx, dword [ebp - 0x199c]
mov eax, dword [ebp - 0x199c]
mov dword [ebp - 0x19a4], eax
mov dword [ebp - 0x19a8], edx
lea ecx, [ebp - 0xbd4]
add ecx, 0xfffffffe
mov dword [ebp - 0x19ac], ecx
mov edx, dword [ebp - 0x19ac]
mov ax, word [edx + 2]
mov word [ebp - 0x19ae], ax
add dword [ebp - 0x19ac], 2
cmp word [ebp - 0x19ae], 0
jne 0x10e2d78
mov edi, dword [ebp - 0x19ac]
mov esi, dword [ebp - 0x19a4]
mov edx, dword [ebp - 0x19a8]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0xbd4]
add eax, 0xfffffffe
mov dword [ebp - 0x19b4], eax
mov ecx, dword [ebp - 0x19b4]
mov dx, word [ecx + 2]
mov word [ebp - 0x19b6], dx
add dword [ebp - 0x19b4], 2
cmp word [ebp - 0x19b6], 0
jne 0x10e2dc9
mov edi, dword [ebp - 0x19b4]
mov ecx, 0xc
mov esi, 0x100a87c
rep movsd dword es:[edi], dword [esi]
jmp 0x10e2f78
lea eax, [ebp - 0xbd4]
add eax, 0xfffffffe
mov dword [ebp - 0x19bc], eax
mov ecx, dword [ebp - 0x19bc]
mov dx, word [ecx + 2]
mov word [ebp - 0x19be], dx
add dword [ebp - 0x19bc], 2
cmp word [ebp - 0x19be], 0
jne 0x10e2e11
mov edi, dword [ebp - 0x19bc]
mov eax, dword [0x100a8ac]
mov dword [edi], eax
mov ecx, dword [0x100a8b0]
mov dword [edi + 4], ecx
mov edx, dword [0x100a8b4]
mov dword [edi + 8], edx
mov eax, dword [0x100a8b8]
mov dword [edi + 0xc], eax
mov ecx, dword [0x100a8bc]
mov dword [edi + 0x10], ecx
mov dx, word [0x100a8c0]
mov word [edi + 0x14], dx
lea eax, [ebp - 0x9ac]
mov dword [ebp - 0x19c4], eax
mov ecx, dword [ebp - 0x19c4]
mov dword [ebp - 0x19c8], ecx
mov edx, dword [ebp - 0x19c4]
mov ax, word [edx]
mov word [ebp - 0x19ca], ax
add dword [ebp - 0x19c4], 2
cmp word [ebp - 0x19ca], 0
jne 0x10e2e86
mov ecx, dword [ebp - 0x19c4]
sub ecx, dword [ebp - 0x19c8]
mov edx, dword [ebp - 0x19c8]
mov dword [ebp - 0x19d0], edx
mov dword [ebp - 0x19d4], ecx
lea eax, [ebp - 0xbd4]
add eax, 0xfffffffe
mov dword [ebp - 0x19d8], eax
mov ecx, dword [ebp - 0x19d8]
mov dx, word [ecx + 2]
mov word [ebp - 0x19da], dx
add dword [ebp - 0x19d8], 2
cmp word [ebp - 0x19da], 0
jne 0x10e2ed4
mov edi, dword [ebp - 0x19d8]
mov esi, dword [ebp - 0x19d0]
mov eax, dword [ebp - 0x19d4]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0xbd4]
add ecx, 0xfffffffe
mov dword [ebp - 0x19e0], ecx
mov edx, dword [ebp - 0x19e0]
mov ax, word [edx + 2]
mov word [ebp - 0x19e2], ax
add dword [ebp - 0x19e0], 2
cmp word [ebp - 0x19e2], 0
jne 0x10e2f25
mov edi, dword [ebp - 0x19e0]
mov ecx, dword [0x100a838]
mov dword [edi], ecx
mov edx, dword [0x100a83c]
mov dword [edi + 4], edx
mov eax, dword [0x100a840]
mov dword [edi + 8], eax
mov ecx, dword [0x100a844]
mov dword [edi + 0xc], ecx
mov edx, dword [0x100a848]
mov dword [edi + 0x10], edx
push 0x100a7f4
mov eax, dword [ebp - 0x8ac]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8ac]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [ebp - 0xbd4]
push ecx
push 0x100a7f4
mov edx, dword [ebp - 0x8ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8ac]
mov edx, dword [eax + 0xc]
call edx
mov eax, dword [ebp - 0x66c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10e304d
lea ecx, [ebp - 0x9d0]
push ecx
push 0x100a7f4
mov edx, dword [ebp - 0x8ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8ac]
mov edx, dword [eax + 4]
call edx
movzx eax, al
test eax, eax
jne 0x10e304d
lea ecx, [ebp - 0x9d0]
push ecx
push 0x100a7f4
mov edx, dword [ebp - 0x8ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8ac]
mov edx, dword [eax + 0x20]
call edx
movzx eax, al
test eax, eax
jne 0x10e304d
call fcn.010947d0
mov dword [ebp - 0x19e8], eax
push 0xdaa
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100a8f8
mov ecx, dword [ebp - 0x19e8]
push ecx
mov edx, dword [ebp - 0x19e8]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x66c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x66c]
mov edx, dword [eax + 0x64]
call edx
test eax, eax
je 0x10e30eb
lea eax, [ebp - 0x9d0]
push eax
push 0x100a7f4
mov ecx, dword [ebp - 0x8ac]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x8ac]
mov eax, dword [edx + 8]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10e30eb
lea edx, [ebp - 0x9d0]
push edx
push 0x100a7f4
mov eax, dword [ebp - 0x8ac]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8ac]
mov eax, dword [edx + 0x24]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10e30eb
call fcn.010947d0
mov dword [ebp - 0x19ec], eax
push 0xdb5
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100a8f8
mov edx, dword [ebp - 0x19ec]
push edx
mov eax, dword [ebp - 0x19ec]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
push 0x100a7f4
mov eax, dword [ebp - 0x8ac]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8ac]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [ebp - 0x8ac]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x8ac]
mov eax, dword [edx]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x40]
call eax
movzx ecx, ax
movzx edx, word [ebp - 0x10]
cmp ecx, edx
jne 0x10e329a
mov word [ebp - 0xdd4], 0
push 0x1fe
push 0
lea eax, [ebp - 0xdd2]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov word [ebp - 0xfd4], 0
push 0x1fe
push 0
lea ecx, [ebp - 0xfd2]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
movzx edx, word [ebp - 0x10]
push edx
push 0x100cd38
lea eax, [ebp - 0xdd4]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
movzx ecx, word [ebp - 0x10]
push ecx
push 0x100cd14
lea edx, [ebp - 0xfd4]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea eax, [ebp - 0xdd4]
push eax
call fcn.010922c0
test eax, eax
jne 0x10e31e8
call fcn.010947d0
mov dword [ebp - 0x19f0], eax
push 0xe31
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100ccf8
mov ecx, dword [ebp - 0x19f0]
push ecx
mov edx, dword [ebp - 0x19f0]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
lea edx, [ebp - 0xfd4]
push edx
call fcn.010922c0
test eax, eax
jne 0x10e322f
call fcn.010947d0
mov dword [ebp - 0x19f4], eax
push 0xe36
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100ccdc
mov eax, dword [ebp - 0x19f4]
push eax
mov ecx, dword [ebp - 0x19f4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
mov cx, word [ebp - 0x10]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x14]
call eax
mov cx, word [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x10]
call edx
test eax, eax
jne 0x10e329a
call fcn.010947d0
mov dword [ebp - 0x19f8], eax
movzx eax, word [ebp - 0x10]
push eax
push 0xe3c
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100ccb0
mov ecx, dword [ebp - 0x19f8]
push ecx
mov edx, dword [ebp - 0x19f8]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0x10
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x18]
call edx
push eax
mov ecx, dword [ebp - 0x1938]
call fcn.010d7180
test eax, eax
je 0x10e32c2
mov ecx, dword [ebp - 0x1938]
call fcn.010d64f0
push 0
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov ecx, dword [ebp - 0x1938]
call fcn.010d58b0
test eax, eax
jne 0x10e331d
call fcn.010947d0
mov dword [ebp - 0x19fc], eax
push 0xe48
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cb04
mov eax, dword [ebp - 0x19fc]
push eax
mov ecx, dword [ebp - 0x19fc]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
xor eax, eax
jmp 0x10e4b94
lea ecx, [ebp - 0x50]
call fcn.01114a50
mov dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
push edx
mov eax, dword [ecx + 0x18]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x14]
push ecx
mov edx, dword [eax + 0x10]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
lea ecx, [ebp - 0x50]
call fcn.01114f60
test eax, eax
jne 0x10e3393
call fcn.010947d0
mov dword [ebp - 0x1a00], eax
push 0xe4f
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cad4
mov edx, dword [ebp - 0x1a00]
push edx
mov eax, dword [ebp - 0x1a00]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
mov word [ebp - 0x664], 0
push 0xfe
push 0
lea eax, [ebp - 0x662]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov word [ebp - 0x564], 0
push 0xfe
push 0
lea ecx, [ebp - 0x562]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
push 0x100
lea edx, [ebp - 0x664]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x24]
call eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x664]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x38]
push eax
push 0x80
lea ecx, [ebp - 0x564]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x2c]
call edx
mov word [ebp - 0x45c], 0
push 0x3fe
push 0
lea eax, [ebp - 0x45a]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x564]
push ecx
push 0x100cde8
lea edx, [ebp - 0x45c]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea eax, [ebp - 0x45c]
push eax
call fcn.010922c0
cmp dword [ebp - 0x668], 1
jne 0x10e356b
mov dword [ebp - 0xfd8], 0
lea ecx, [ebp - 0xfd8]
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x670]
push eax
mov cx, word [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x66c]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x678]
push ecx
mov edx, dword [ebp - 0x67c]
push edx
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [ebp - 0x464]
push ecx
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x44]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x1938]
call fcn.010dcf20
test eax, eax
jne 0x10e352a
mov dword [ebp - 0x1918], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.01092b10
mov eax, dword [ebp - 0x1918]
jmp 0x10e4b94
cmp dword [ebp - 0xfd8], 0
je 0x10e3566
push 0x64
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x191c], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.01092b10
mov eax, dword [ebp - 0x191c]
jmp 0x10e4b94
jmp 0x10e379d
cmp dword [ebp - 0x668], 5
je 0x10e35b7
cmp dword [ebp - 0x668], 4
je 0x10e35b7
cmp dword [ebp - 0x668], 0xc
je 0x10e35b7
cmp dword [ebp - 0x668], 0xa
je 0x10e35b7
cmp dword [ebp - 0x668], 6
je 0x10e35b7
cmp dword [ebp - 0x668], 7
je 0x10e35b7
cmp dword [ebp - 0x668], 8
je 0x10e35b7
cmp dword [ebp - 0x668], 9
jne 0x10e36f8
push 0x60
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
mov cx, word [ebp - 0x10]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x1060], 0xffffffff
mov ecx, dword [ebp - 0x460]
push ecx
mov edx, dword [ebp - 0x464]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
lea edx, [ebp - 0x1060]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx]
call eax
push 0x30
push 0
lea ecx, [ebp - 0x105c]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x105c], 0xffffffff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x1058], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x104c], edx
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x1044], eax
mov ecx, dword [ebp - 0x678]
mov dword [ebp - 0x1040], ecx
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x1054], edx
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1050], eax
mov ecx, dword [ebp - 0x464]
mov dword [ebp - 0x1034], ecx
mov edx, dword [ebp - 0x460]
mov dword [ebp - 0x1030], edx
mov eax, dword [ebp - 0x66c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x103c], eax
lea ecx, [ebp - 0x105c]
push ecx
lea ecx, [ebp - 0x102c]
call fcn.0111e550
mov byte [ebp - 4], 1
push 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x24]
call edx
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x102c]
call fcn.0111e5a0
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x1060]
push ecx
call fcn.01092350
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x102c]
call fcn.01092b10
jmp 0x10e379d
cmp dword [ebp - 0x668], 2
je 0x10e3717
cmp dword [ebp - 0x668], 3
je 0x10e3717
cmp dword [ebp - 0x668], 0
jne 0x10e379d
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x670]
push eax
mov cx, word [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x66c]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x678]
push ecx
mov edx, dword [ebp - 0x67c]
push edx
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [ebp - 0x464]
push ecx
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x44]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x1938]
call fcn.010de350
test eax, eax
jne 0x10e379d
mov dword [ebp - 0x1920], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.01092b10
mov eax, dword [ebp - 0x1920]
jmp 0x10e4b94
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x106c], eax
mov dword [ebp - 0x1068], edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x1070], eax
mov ecx, dword [ebp - 0x1070]
push ecx
mov edx, dword [ebp - 0x1068]
push edx
mov eax, dword [ebp - 0x106c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
call fcn.010cb6e0
cmp dword [ebp - 0x30], 0
jne 0x10e393e
mov eax, dword [ebp - 0x67c]
cmp eax, dword [ebp - 0x464]
jne 0x10e3814
mov ecx, dword [ebp - 0x678]
cmp ecx, dword [ebp - 0x460]
je 0x10e393e
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x1a04], eax
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp - 0x66c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x1a04]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a04]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1938]
call fcn.010d79a0
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1a08], eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp - 0x1a08]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1a08]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1938]
call fcn.010d79a0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x14]
push edx
mov eax, dword [ecx + 0x10]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
push edx
mov eax, dword [ecx + 0x18]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
call fcn.010e2090
test eax, eax
jne 0x10e393e
call fcn.010947d0
mov dword [ebp - 0x1a0c], eax
push 0xeb6
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cc84
mov ecx, dword [ebp - 0x1a0c]
push ecx
mov edx, dword [ebp - 0x1a0c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
push 0x25
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x1924], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.01092b10
mov eax, dword [ebp - 0x1924]
jmp 0x10e4b94
push 4
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
cmp dword [ebp - 0x30], 0
je 0x10e3bf4
push 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp - 0x1c], 0
je 0x10e398c
call fcn.010e21b0
test eax, eax
jne 0x10e398c
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x34]
mov eax, dword [edx + 0x34]
call eax
push 0x1f4
call fcn.0108fe30
cmp dword [ebp - 0x1c], 0
je 0x10e39bc
mov ecx, dword [ebp - 0x1938]
add ecx, 0x878
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x94]
call eax
push 0x100cc18
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x1074], 0x100cb60
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xc0]
call eax
mov dword [ebp - 0x1088], eax
xor ecx, ecx
mov byte [ebp - 0x1925], cl
lea edx, [ebp - 0x1925]
push edx
mov eax, dword [ebp - 0x1088]
push eax
lea ecx, [ebp - 0x1084]
call fcn.01089110
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1074]
push ecx
lea ecx, [ebp - 0x1084]
call fcn.0109e490
lea ecx, [ebp - 0x1084]
call fcn.01089160
push eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0xbc]
call edx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1084]
call fcn.01089140
mov eax, dword [ebp - 0x66c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
jne 0x10e3a7a
push 0
push 0
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x34]
mov eax, dword [edx + 0x2c]
call eax
jmp 0x10e3a87
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x34]
mov eax, dword [edx + 0x34]
call eax
push 0x9c4
call fcn.0108fe30
push 0
mov ecx, dword [ebp - 0x34]
push ecx
call fcn.010cb0a0
test eax, eax
jne 0x10e3b0a
call fcn.010947d0
mov dword [ebp - 0x1a10], eax
push 0xf09
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100ca98
mov edx, dword [ebp - 0x1a10]
push edx
mov eax, dword [ebp - 0x1a10]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
push 0x18
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x192c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.01092b10
mov eax, dword [ebp - 0x192c]
jmp 0x10e4b94
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1a14], eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp - 0x1a14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1a14]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1938]
call fcn.010d79a0
cmp dword [ebp - 0x1c], 0
jne 0x10e3b6a
push 0x1004afc
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x3c]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xc0]
call eax
mov dword [ebp - 0x109c], eax
xor ecx, ecx
mov byte [ebp - 0x192d], cl
lea edx, [ebp - 0x192d]
push edx
mov eax, dword [ebp - 0x109c]
push eax
lea ecx, [ebp - 0x1098]
call fcn.01089110
mov byte [ebp - 4], 3
push 0x1001464
lea ecx, [ebp - 0x1098]
call fcn.0109e490
lea ecx, [ebp - 0x1098]
call fcn.01089160
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xbc]
call eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1098]
call fcn.01089140
push 0x64
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
jmp 0x10e3c8a
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1a18], eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp - 0x66c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x66c]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp - 0x1a18]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1a18]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1938]
call fcn.010d79a0
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1a1c], eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp - 0x1a1c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1a1c]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1938]
call fcn.010d79a0
mov ecx, dword [ebp - 0x66c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10e3cdc
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1a20], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x1a20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a20]
mov eax, dword [edx + 0x28]
call eax
push eax
call fcn.010ce9d0
mov ecx, dword [ebp - 0x67c]
cmp ecx, dword [ebp - 0x464]
jne 0x10e3cfc
mov edx, dword [ebp - 0x678]
cmp edx, dword [ebp - 0x460]
je 0x10e4b75
cmp dword [ebp - 0x4c], 0
je 0x10e4b75
mov eax, dword [ebp - 0x66c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x64]
call eax
test eax, eax
je 0x10e4557
mov dword [ebp - 0x13dc], 0
mov dword [ebp - 0x12b4], 0
call fcn.0109c520
mov dword [ebp - 0x15e0], eax
mov ecx, dword [ebp - 0x15e0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15e0]
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1a24], eax
mov ecx, dword [ebp - 0x15e0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15e0]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x1a28], eax
mov ecx, dword [ebp - 0x1a24]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a24]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1a28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a28]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x10a8], eax
mov ecx, dword [ebp - 0x10a8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10a8]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x1a2c], eax
mov ecx, dword [ebp - 0x1a2c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a2c]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x12b4], eax
cmp dword [ebp - 0x12b4], 0
je 0x10e3e88
mov ecx, dword [ebp - 0x12b4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x12b4]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x1a34], esi
mov dword [ebp - 0x1a30], edi
mov dword [ebp - 0x1a3c], eax
mov dword [ebp - 0x1a38], edx
mov ecx, dword [ebp - 0x1a34]
cmp ecx, dword [ebp - 0x1a3c]
jne 0x10e3e51
mov edx, dword [ebp - 0x1a30]
cmp edx, dword [ebp - 0x1a38]
jne 0x10e3e51
mov eax, dword [ebp - 0x12b4]
mov dword [ebp - 0x13dc], eax
jmp 0x10e3e88
mov ecx, dword [ebp - 0x10a8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10a8]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x1a40], eax
mov ecx, dword [ebp - 0x1a40]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a40]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x12b4], eax
jmp 0x10e3dde
call fcn.01123d90
mov dword [ebp - 0x12b0], eax
mov byte [ebp - 0x13d8], 0
xor ecx, ecx
mov dword [ebp - 0x13d7], ecx
mov dword [ebp - 0x13d3], ecx
mov dword [ebp - 0x13cf], ecx
mov dword [ebp - 0x13cb], ecx
mov dword [ebp - 0x13c7], ecx
mov dword [ebp - 0x13c3], ecx
mov dword [ebp - 0x13bf], ecx
mov dword [ebp - 0x13bb], ecx
mov edx, dword [ebp - 0x66c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x66c]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x1a44], eax
mov eax, dword [ebp - 0x1a44]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1a44]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10e3f99
mov byte [ebp - 0x13d8], 1
mov ecx, dword [ebp - 0x13dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x13dc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1a48], eax
mov ecx, dword [ebp - 0x1a48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a48]
mov eax, dword [edx + 0x8c]
call eax
mov ecx, dword [eax]
mov dword [ebp - 0x13c7], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x13c3], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x13bf], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x13bb], edx
mov eax, dword [ebp - 0x13dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x13dc]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x16a
mov ecx, dword [eax]
mov dword [ebp - 0x13d7], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x13d3], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x13cf], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x13cb], edx
jmp 0x10e402a
mov byte [ebp - 0x13d8], 0
mov eax, dword [ebp - 0x13dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x13dc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1a4c], eax
mov ecx, dword [ebp - 0x1a4c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a4c]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x13cf], eax
mov ecx, dword [ebp - 0x13dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x13dc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1a50], eax
mov ecx, dword [ebp - 0x1a50]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a50]
mov eax, dword [edx + 0x58]
call eax
mov esi, eax
xor edi, edi
mov ecx, dword [ebp - 0x13dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x13dc]
mov eax, dword [edx + 0x1c]
call eax
push edi
push esi
push edx
push eax
call sub.ntdll.dll__allmul
mov dword [ebp - 0x13d7], eax
mov dword [ebp - 0x13d3], edx
call fcn.010946d0
mov dword [ebp - 0x10a0], eax
mov word [ebp - 0x13b4], 0
push 0xfe
push 0
lea ecx, [ebp - 0x13b2]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x13dc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x13dc]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x1a54], eax
mov eax, dword [ebp - 0x13dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x13dc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x1a54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a54]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x80
lea ecx, [ebp - 0x13b4]
push ecx
mov edx, dword [ebp - 0x10a0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10a0]
mov edx, dword [eax + 0x2c]
call edx
mov word [ebp - 0x12ac], 0
push 0x1fe
push 0
lea eax, [ebp - 0x12aa]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x13b4]
push ecx
push 0x10085b8
lea edx, [ebp - 0x12ac]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
push 0
push 0x80
push 3
push 0
push 7
push 0xc0000000
lea eax, [ebp - 0x12ac]
push eax
call fcn.01091ef0
mov dword [ebp - 0x10a4], eax
cmp dword [ebp - 0x10a4], 0xffffffff
je 0x10e4154
mov dword [ebp - 0x15e4], 0
push 0
lea ecx, [ebp - 0x15e4]
push ecx
push 0
push 0
push 0
push 0
push 0x56c008
mov edx, dword [ebp - 0x10a4]
push edx
call fcn.010927b0
mov eax, dword [ebp - 0x10a4]
push eax
call fcn.01092350
mov word [ebp - 0x15dc], 0
push 0x1fe
push 0
lea ecx, [ebp - 0x15da]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x1a58], eax
mov eax, dword [ebp - 0x1a58]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1a58]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10e42fd
lea ecx, [ebp - 0x15dc]
add ecx, 0xfffffffe
mov dword [ebp - 0x1a5c], ecx
mov edx, dword [ebp - 0x1a5c]
mov ax, word [edx + 2]
mov word [ebp - 0x1a5e], ax
add dword [ebp - 0x1a5c], 2
cmp word [ebp - 0x1a5e], 0
jne 0x10e41b0
mov edi, dword [ebp - 0x1a5c]
mov ecx, dword [0x100a8ac]
mov dword [edi], ecx
mov edx, dword [0x100a8b0]
mov dword [edi + 4], edx
mov eax, dword [0x100a8b4]
mov dword [edi + 8], eax
mov ecx, dword [0x100a8b8]
mov dword [edi + 0xc], ecx
mov edx, dword [0x100a8bc]
mov dword [edi + 0x10], edx
mov ax, word [0x100a8c0]
mov word [edi + 0x14], ax
lea ecx, [ebp - 0x13b4]
mov dword [ebp - 0x1a64], ecx
mov edx, dword [ebp - 0x1a64]
mov dword [ebp - 0x1a68], edx
mov eax, dword [ebp - 0x1a64]
mov cx, word [eax]
mov word [ebp - 0x1a6a], cx
add dword [ebp - 0x1a64], 2
cmp word [ebp - 0x1a6a], 0
jne 0x10e4225
mov edx, dword [ebp - 0x1a64]
sub edx, dword [ebp - 0x1a68]
mov eax, dword [ebp - 0x1a68]
mov dword [ebp - 0x1a70], eax
mov dword [ebp - 0x1a74], edx
lea ecx, [ebp - 0x15dc]
add ecx, 0xfffffffe
mov dword [ebp - 0x1a78], ecx
mov edx, dword [ebp - 0x1a78]
mov ax, word [edx + 2]
mov word [ebp - 0x1a7a], ax
add dword [ebp - 0x1a78], 2
cmp word [ebp - 0x1a7a], 0
jne 0x10e4273
mov edi, dword [ebp - 0x1a78]
mov esi, dword [ebp - 0x1a70]
mov edx, dword [ebp - 0x1a74]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x15dc]
add eax, 0xfffffffe
mov dword [ebp - 0x1a80], eax
mov ecx, dword [ebp - 0x1a80]
mov dx, word [ecx + 2]
mov word [ebp - 0x1a82], dx
add dword [ebp - 0x1a80], 2
cmp word [ebp - 0x1a82], 0
jne 0x10e42c4
mov edi, dword [ebp - 0x1a80]
mov ecx, 0xc
mov esi, 0x100a87c
rep movsd dword es:[edi], dword [esi]
jmp 0x10e4473
lea eax, [ebp - 0x15dc]
add eax, 0xfffffffe
mov dword [ebp - 0x1a88], eax
mov ecx, dword [ebp - 0x1a88]
mov dx, word [ecx + 2]
mov word [ebp - 0x1a8a], dx
add dword [ebp - 0x1a88], 2
cmp word [ebp - 0x1a8a], 0
jne 0x10e430c
mov edi, dword [ebp - 0x1a88]
mov eax, dword [0x100a8ac]
mov dword [edi], eax
mov ecx, dword [0x100a8b0]
mov dword [edi + 4], ecx
mov edx, dword [0x100a8b4]
mov dword [edi + 8], edx
mov eax, dword [0x100a8b8]
mov dword [edi + 0xc], eax
mov ecx, dword [0x100a8bc]
mov dword [edi + 0x10], ecx
mov dx, word [0x100a8c0]
mov word [edi + 0x14], dx
lea eax, [ebp - 0x13b4]
mov dword [ebp - 0x1a90], eax
mov ecx, dword [ebp - 0x1a90]
mov dword [ebp - 0x1a94], ecx
mov edx, dword [ebp - 0x1a90]
mov ax, word [edx]
mov word [ebp - 0x1a96], ax
add dword [ebp - 0x1a90], 2
cmp word [ebp - 0x1a96], 0
jne 0x10e4381
mov ecx, dword [ebp - 0x1a90]
sub ecx, dword [ebp - 0x1a94]
mov edx, dword [ebp - 0x1a94]
mov dword [ebp - 0x1a9c], edx
mov dword [ebp - 0x1aa0], ecx
lea eax, [ebp - 0x15dc]
add eax, 0xfffffffe
mov dword [ebp - 0x1aa4], eax
mov ecx, dword [ebp - 0x1aa4]
mov dx, word [ecx + 2]
mov word [ebp - 0x1aa6], dx
add dword [ebp - 0x1aa4], 2
cmp word [ebp - 0x1aa6], 0
jne 0x10e43cf
mov edi, dword [ebp - 0x1aa4]
mov esi, dword [ebp - 0x1a9c]
mov eax, dword [ebp - 0x1aa0]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x15dc]
add ecx, 0xfffffffe
mov dword [ebp - 0x1aac], ecx
mov edx, dword [ebp - 0x1aac]
mov ax, word [edx + 2]
mov word [ebp - 0x1aae], ax
add dword [ebp - 0x1aac], 2
cmp word [ebp - 0x1aae], 0
jne 0x10e4420
mov edi, dword [ebp - 0x1aac]
mov ecx, dword [0x100a838]
mov dword [edi], ecx
mov edx, dword [0x100a83c]
mov dword [edi + 4], edx
mov eax, dword [0x100a840]
mov dword [edi + 8], eax
mov ecx, dword [0x100a844]
mov dword [edi + 0xc], ecx
mov edx, dword [0x100a848]
mov dword [edi + 0x10], edx
push 0x100a7f4
mov eax, dword [ebp - 0x12b0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x12b0]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [ebp - 0x15dc]
push ecx
push 0x100a7f4
mov edx, dword [ebp - 0x12b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x12b0]
mov edx, dword [eax + 0xc]
call edx
lea eax, [ebp - 0x13d8]
push eax
push 0x100a7f4
mov ecx, dword [ebp - 0x12b0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x12b0]
mov eax, dword [edx + 8]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10e452d
lea edx, [ebp - 0x13d8]
push edx
push 0x100a7f4
mov eax, dword [ebp - 0x12b0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x12b0]
mov eax, dword [edx + 0x24]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10e452d
call fcn.010947d0
mov dword [ebp - 0x1ab4], eax
push 0xf77
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100a8f8
mov edx, dword [ebp - 0x1ab4]
push edx
mov eax, dword [ebp - 0x1ab4]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
push 0x100a7f4
mov eax, dword [ebp - 0x12b0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x12b0]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [ebp - 0x12b0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x12b0]
mov eax, dword [edx]
call eax
mov ecx, dword [ebp - 0x66c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x66c]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10e4b75
call fcn.01123d90
mov dword [ebp - 0x15ec], eax
mov byte [ebp - 0x1710], 0
xor ecx, ecx
mov dword [ebp - 0x170f], ecx
mov dword [ebp - 0x170b], ecx
mov dword [ebp - 0x1707], ecx
mov dword [ebp - 0x1703], ecx
mov dword [ebp - 0x16ff], ecx
mov dword [ebp - 0x16fb], ecx
mov dword [ebp - 0x16f7], ecx
mov dword [ebp - 0x16f3], ecx
mov edx, dword [ebp - 0x66c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x66c]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x1ab8], eax
mov eax, dword [ebp - 0x1ab8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1ab8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10e4674
mov byte [ebp - 0x1710], 1
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1abc], eax
mov ecx, dword [ebp - 0x1abc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1abc]
mov eax, dword [edx + 0x8c]
call eax
mov ecx, dword [eax]
mov dword [ebp - 0x16ff], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x16fb], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x16f7], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x16f3], edx
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x16a
mov ecx, dword [eax]
mov dword [ebp - 0x170f], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x170b], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1707], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x1703], edx
jmp 0x10e46f3
mov byte [ebp - 0x1710], 0
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1ac0], eax
mov ecx, dword [ebp - 0x1ac0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1ac0]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x1707], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1ac4], eax
mov ecx, dword [ebp - 0x1ac4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1ac4]
mov eax, dword [edx + 0x58]
call eax
mov esi, eax
xor edi, edi
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
push edi
push esi
push edx
push eax
call sub.ntdll.dll__allmul
mov dword [ebp - 0x170f], eax
mov dword [ebp - 0x170b], edx
call fcn.010946d0
mov dword [ebp - 0x15e8], eax
mov word [ebp - 0x16ec], 0
push 0xfe
push 0
lea ecx, [ebp - 0x16ea]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x1ac8], eax
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x1ac8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1ac8]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x80
lea ecx, [ebp - 0x16ec]
push ecx
mov edx, dword [ebp - 0x15e8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x15e8]
mov edx, dword [eax + 0x2c]
call edx
mov word [ebp - 0x1914], 0
push 0x1fe
push 0
lea eax, [ebp - 0x1912]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1acc], eax
mov ecx, dword [ebp - 0x1acc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1acc]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10e491b
lea ecx, [ebp - 0x1914]
add ecx, 0xfffffffe
mov dword [ebp - 0x1ad0], ecx
mov edx, dword [ebp - 0x1ad0]
mov ax, word [edx + 2]
mov word [ebp - 0x1ad2], ax
add dword [ebp - 0x1ad0], 2
cmp word [ebp - 0x1ad2], 0
jne 0x10e47ce
mov edi, dword [ebp - 0x1ad0]
mov ecx, dword [0x100a8ac]
mov dword [edi], ecx
mov edx, dword [0x100a8b0]
mov dword [edi + 4], edx
mov eax, dword [0x100a8b4]
mov dword [edi + 8], eax
mov ecx, dword [0x100a8b8]
mov dword [edi + 0xc], ecx
mov edx, dword [0x100a8bc]
mov dword [edi + 0x10], edx
mov ax, word [0x100a8c0]
mov word [edi + 0x14], ax
lea ecx, [ebp - 0x16ec]
mov dword [ebp - 0x1ad8], ecx
mov edx, dword [ebp - 0x1ad8]
mov dword [ebp - 0x1adc], edx
mov eax, dword [ebp - 0x1ad8]
mov cx, word [eax]
mov word [ebp - 0x1ade], cx
add dword [ebp - 0x1ad8], 2
cmp word [ebp - 0x1ade], 0
jne 0x10e4843
mov edx, dword [ebp - 0x1ad8]
sub edx, dword [ebp - 0x1adc]
mov eax, dword [ebp - 0x1adc]
mov dword [ebp - 0x1ae4], eax
mov dword [ebp - 0x1ae8], edx
lea ecx, [ebp - 0x1914]
add ecx, 0xfffffffe
mov dword [ebp - 0x1aec], ecx
mov edx, dword [ebp - 0x1aec]
mov ax, word [edx + 2]
mov word [ebp - 0x1aee], ax
add dword [ebp - 0x1aec], 2
cmp word [ebp - 0x1aee], 0
jne 0x10e4891
mov edi, dword [ebp - 0x1aec]
mov esi, dword [ebp - 0x1ae4]
mov edx, dword [ebp - 0x1ae8]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x1914]
add eax, 0xfffffffe
mov dword [ebp - 0x1af4], eax
mov ecx, dword [ebp - 0x1af4]
mov dx, word [ecx + 2]
mov word [ebp - 0x1af6], dx
add dword [ebp - 0x1af4], 2
cmp word [ebp - 0x1af6], 0
jne 0x10e48e2
mov edi, dword [ebp - 0x1af4]
mov ecx, 0xc
mov esi, 0x100a87c
rep movsd dword es:[edi], dword [esi]
jmp 0x10e4a91
lea eax, [ebp - 0x1914]
add eax, 0xfffffffe
mov dword [ebp - 0x1afc], eax
mov ecx, dword [ebp - 0x1afc]
mov dx, word [ecx + 2]
mov word [ebp - 0x1afe], dx
add dword [ebp - 0x1afc], 2
cmp word [ebp - 0x1afe], 0
jne 0x10e492a
mov edi, dword [ebp - 0x1afc]
mov eax, dword [0x100a8ac]
mov dword [edi], eax
mov ecx, dword [0x100a8b0]
mov dword [edi + 4], ecx
mov edx, dword [0x100a8b4]
mov dword [edi + 8], edx
mov eax, dword [0x100a8b8]
mov dword [edi + 0xc], eax
mov ecx, dword [0x100a8bc]
mov dword [edi + 0x10], ecx
mov dx, word [0x100a8c0]
mov word [edi + 0x14], dx
lea eax, [ebp - 0x16ec]
mov dword [ebp - 0x1b04], eax
mov ecx, dword [ebp - 0x1b04]
mov dword [ebp - 0x1b08], ecx
mov edx, dword [ebp - 0x1b04]
mov ax, word [edx]
mov word [ebp - 0x1b0a], ax
add dword [ebp - 0x1b04], 2
cmp word [ebp - 0x1b0a], 0
jne 0x10e499f
mov ecx, dword [ebp - 0x1b04]
sub ecx, dword [ebp - 0x1b08]
mov edx, dword [ebp - 0x1b08]
mov dword [ebp - 0x1b10], edx
mov dword [ebp - 0x1b14], ecx
lea eax, [ebp - 0x1914]
add eax, 0xfffffffe
mov dword [ebp - 0x1b18], eax
mov ecx, dword [ebp - 0x1b18]
mov dx, word [ecx + 2]
mov word [ebp - 0x1b1a], dx
add dword [ebp - 0x1b18], 2
cmp word [ebp - 0x1b1a], 0
jne 0x10e49ed
mov edi, dword [ebp - 0x1b18]
mov esi, dword [ebp - 0x1b10]
mov eax, dword [ebp - 0x1b14]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x1914]
add ecx, 0xfffffffe
mov dword [ebp - 0x1b20], ecx
mov edx, dword [ebp - 0x1b20]
mov ax, word [edx + 2]
mov word [ebp - 0x1b22], ax
add dword [ebp - 0x1b20], 2
cmp word [ebp - 0x1b22], 0
jne 0x10e4a3e
mov edi, dword [ebp - 0x1b20]
mov ecx, dword [0x100a838]
mov dword [edi], ecx
mov edx, dword [0x100a83c]
mov dword [edi + 4], edx
mov eax, dword [0x100a840]
mov dword [edi + 8], eax
mov ecx, dword [0x100a844]
mov dword [edi + 0xc], ecx
mov edx, dword [0x100a848]
mov dword [edi + 0x10], edx
push 0x100a7f4
mov eax, dword [ebp - 0x15ec]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x15ec]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [ebp - 0x1914]
push ecx
push 0x100a7f4
mov edx, dword [ebp - 0x15ec]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [eax + 0xc]
call edx
lea eax, [ebp - 0x1710]
push eax
push 0x100a7f4
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15ec]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10e4b4b
lea edx, [ebp - 0x1710]
push edx
push 0x100a7f4
mov eax, dword [ebp - 0x15ec]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x15ec]
mov eax, dword [edx + 0x20]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10e4b4b
call fcn.010947d0
mov dword [ebp - 0x1b28], eax
push 0xfa8
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100a8f8
mov edx, dword [ebp - 0x1b28]
push edx
mov eax, dword [ebp - 0x1b28]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
push 0x100a7f4
mov eax, dword [ebp - 0x15ec]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x15ec]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15ec]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x1934], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.01092b10
mov eax, dword [ebp - 0x1934]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8