Function at 0x10d6500
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1181ba9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x4e5c
call sub.ntdll.dll__chkstk
push esi
push edi
mov dword [ebp - 0x4b7c], ecx
push 1
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x6c], 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x14]
push edx
mov eax, dword [ecx + 0x10]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0x4b7c]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp - 0x4b7c]
mov ecx, dword [ecx + 0x18]
mov edx, dword [eax]
mov eax, dword [edx + 0x24]
call eax
push eax
call fcn.010c47a0
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
push edx
mov eax, dword [ecx + 0x18]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
call fcn.010c47a0
mov dword [ebp - 0x48], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x4b7c]
mov ecx, dword [eax + 0x18]
mov edx, dword [ebp - 0x4b7c]
mov eax, dword [edx + 0x18]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x24]
call eax
push eax
call fcn.010c46d0
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0x4b7c]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp - 0x4b7c]
mov ecx, dword [ecx + 0x18]
mov edx, dword [eax]
mov eax, dword [edx + 0x24]
call eax
push eax
call fcn.010c46d0
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
call fcn.010c46d0
mov dword [ebp - 0xcc], eax
mov edx, dword [ebp - 0xcc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xcc]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x70], eax
push 0
mov eax, dword [ebp - 0xcc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [edx + 0x3c]
call eax
test eax, eax
je 0x10d66ae
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [edx + 0x40]
call eax
push 8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x4b80], eax
push 0xd69
push 0x100add4
call fcn.010cda00
push eax
push 0x100b4c0
mov ecx, dword [ebp - 0x4b80]
push ecx
mov edx, dword [ebp - 0x4b80]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10db3e1
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2c]
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ecx + 4]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x5c], 0
cmp dword [ebp - 0xc4], 0
je 0x10d7073
mov eax, dword [ebp - 0x9c]
cmp dword [eax + 0xc], 0
je 0x10d67fb
mov dword [ebp - 0xe0], 0
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xe4], eax
jmp 0x10d675d
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
je 0x10d67be
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xe4]
mov eax, dword [edx + 0x3c]
call eax
movzx ecx, al
test ecx, ecx
je 0x10d67bc
call fcn.010905a0
mov dword [ebp - 0xe8], eax
mov edx, dword [ebp - 0xe4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x28]
call edx
push eax
mov eax, dword [ebp - 0xe8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xe8]
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 0xe0], 1
jmp 0x10d6744
cmp dword [ebp - 0xe0], 0
je 0x10d67fb
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [edx + 8]
call eax
push 0
push 0
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [edx + 0x2c]
call eax
push 0x3e8
call fcn.0108d6a0
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xd4], eax
jmp 0x10d682f
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
je 0x10d6869
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd4]
mov eax, dword [edx + 0x70]
call eax
test eax, eax
je 0x10d6867
push 0
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd4]
mov eax, dword [edx + 0xc8]
call eax
jmp 0x10d6816
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010cbea0
call fcn.0108d4a0
push eax
call fcn.01115ff3
add esp, 4
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xc8], eax
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4b84], eax
mov ecx, dword [ebp - 0x4b84]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4b84]
mov eax, dword [edx + 0x58]
call eax
mov ecx, eax
mov eax, 0x25800000
xor edx, edx
div ecx
xor edx, edx
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], edx
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0xa8]
je 0x10d692f
call fcn.010d41d0
test eax, eax
jne 0x10d692f
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x4b8c], eax
mov dword [ebp - 0x4b88], edx
mov ecx, dword [ebp - 0x4b88]
cmp ecx, dword [ebp - 0xd8]
jl 0x10d6944
jg 0x10d692f
mov edx, dword [ebp - 0x4b8c]
cmp edx, dword [ebp - 0xdc]
jb 0x10d6944
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x70]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10d7006
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
add eax, dword [ebp - 0xdc]
adc edx, dword [ebp - 0xd8]
push edx
push eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x80]
call eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x20]
call eax
sub eax, dword [ebp - 0xdc]
sbb edx, dword [ebp - 0xd8]
push edx
push eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x44]
call eax
sub eax, dword [ebp - 0xdc]
sbb edx, dword [ebp - 0xd8]
push edx
push eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4b90], eax
push 0
mov ecx, dword [ebp - 0x4b90]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4b90]
mov eax, dword [edx + 0x44]
call eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x1c], edx
xor esi, esi
mov edx, dword [ebp - 0x48]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x48]
mov edx, dword [eax + 0xc]
call edx
add eax, 0x166
mov dword [eax], esi
mov dword [eax + 4], esi
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
mov dword [ebp - 0x1a0], 0
jmp 0x10d6a56
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 8
jae 0x10d6aac
call fcn.01116007
mov dword [ebp - 0x4b94], eax
fild dword [ebp - 0x4b94]
fdiv qword [0x1008a50]
fmul qword [0x1008a48]
fadd qword [0x1008a40]
fistp qword [ebp - 0x4b9c]
mov si, word [ebp - 0x4b9c]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0xc]
call eax
mov ecx, dword [ebp - 0x1a0]
mov word [eax + ecx*2 + 0x166], si
jmp 0x10d6a47
push 0xa5
push 0
lea edx, [ebp - 0x19c]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x19c], eax
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0xdc]
sub edx, 1
mov eax, dword [ebp - 0xd8]
sbb eax, 0
mov dword [ebp - 0x194], edx
mov dword [ebp - 0x190], eax
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4ba0], eax
mov ecx, dword [ebp - 0x4ba0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4ba0]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4ba4], eax
mov ecx, dword [ebp - 0x4ba4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4ba4]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10d6bd7
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4ba8], eax
mov ecx, dword [ebp - 0x4ba8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4ba8]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4bac], eax
mov ecx, dword [ebp - 0x4bac]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4bac]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10d6bd7
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4bb0], eax
mov ecx, dword [ebp - 0x4bb0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4bb0]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4bb4], eax
mov ecx, dword [ebp - 0x4bb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4bb4]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10d6bd7
mov dword [ebp - 0xfe], 1
jmp 0x10d6bf0
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0xfe], eax
mov dword [ebp - 0x182], 1
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x6c]
call eax
mov dword [ebp - 0x186], eax
mov dword [ebp - 0x18a], 1
mov word [ebp - 0x18c], 0x2a
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0xfa], ax
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x3c]
call eax
mov byte [ebp - 0xf8], al
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x2c]
call eax
push eax
lea ecx, [ebp - 0x17e]
push ecx
call sub.ntdll.dll_swprintf
add esp, 8
mov edx, dword [ebp - 0xcc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xcc]
mov edx, dword [eax + 0x20]
call edx
push eax
mov eax, dword [ebp - 0xcc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0xac], eax
lea ecx, [ebp - 0xb0]
push ecx
lea edx, [ebp - 0x19c]
push edx
mov eax, dword [ebp - 0xac]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xac]
mov eax, dword [edx + 0x24]
call eax
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x34]
call eax
push edx
push eax
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x98]
call eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4bb8], eax
mov ecx, dword [ebp - 0x4bb8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4bb8]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4bbc], eax
mov ecx, dword [ebp - 0x4bbc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4bbc]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10d7004
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x1a4], eax
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x1a8], eax
push 0x176
push 0
lea ecx, [ebp - 0x324]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, 0x5d
mov esi, dword [ebp - 0x1a4]
lea edi, [ebp - 0x324]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edx, dword [ebp - 0xa8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa8]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x4bc0], eax
mov eax, dword [ebp - 0x4bc0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4bc0]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10d6e38
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ecx + 0x156]
mov dword [ebp - 0x1ce], edx
mov eax, dword [ebp - 0x1a8]
mov cx, word [eax + 0x15a]
mov word [ebp - 0x1ca], cx
mov edx, dword [ebp - 0x1a8]
mov ax, word [edx + 0x15c]
mov word [ebp - 0x1c8], ax
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ecx + 0x15e]
mov dword [ebp - 0x1c6], edx
mov eax, dword [ecx + 0x162]
mov dword [ebp - 0x1c2], eax
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ecx + 0xee]
mov dword [ebp - 0x236], edx
jmp 0x10d6fd2
mov eax, dword [ebp - 0xa8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4bc4], eax
mov ecx, dword [ebp - 0x4bc4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4bc4]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10d6fd2
mov byte [ebp - 0x334], 0x28
mov byte [ebp - 0x333], 0x73
mov byte [ebp - 0x332], 0x2a
mov byte [ebp - 0x331], 0xc1
mov byte [ebp - 0x330], 0x1f
mov byte [ebp - 0x32f], 0xf8
mov byte [ebp - 0x32e], 0xd2
mov byte [ebp - 0x32d], 0x11
mov byte [ebp - 0x32c], 0xba
mov byte [ebp - 0x32b], 0x4b
mov byte [ebp - 0x32a], 0
mov byte [ebp - 0x329], 0xa0
mov byte [ebp - 0x328], 0xc9
mov byte [ebp - 0x327], 0x3e
mov byte [ebp - 0x326], 0xc9
mov byte [ebp - 0x325], 0x3b
mov ecx, dword [ebp - 0x334]
mov dword [ebp - 0x1ce], ecx
mov edx, dword [ebp - 0x330]
mov dword [ebp - 0x1ca], edx
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x1c6], eax
mov ecx, dword [ebp - 0x328]
mov dword [ebp - 0x1c2], ecx
mov dword [ebp - 0x236], 1
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xb0]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x22e], eax
mov dword [ebp - 0x22a], edx
mov eax, dword [ebp - 0xb0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x226], eax
mov dword [ebp - 0x222], edx
xor ecx, ecx
mov dword [ebp - 0x1be], ecx
mov dword [ebp - 0x1ba], ecx
mov dword [ebp - 0x1b6], ecx
mov dword [ebp - 0x1b2], ecx
mov dword [ebp - 0x338], 0
jmp 0x10d6f89
mov edx, dword [ebp - 0x338]
add edx, 1
mov dword [ebp - 0x338], edx
cmp dword [ebp - 0x338], 8
jae 0x10d6fd2
call fcn.01116007
mov dword [ebp - 0x4bc8], eax
fild dword [ebp - 0x4bc8]
fdiv qword [0x1008a50]
fmul qword [0x1008a48]
fadd qword [0x1008a40]
fistp qword [ebp - 0x4bd0]
mov ax, word [ebp - 0x4bd0]
mov ecx, dword [ebp - 0x338]
mov word [ebp + ecx*2 - 0x1be], ax
jmp 0x10d6f7a
lea edx, [ebp - 0x324]
push edx
mov eax, dword [ebp - 0xb0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x10]
call eax
push 0
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x88]
call eax
jmp 0x10d7018
push 1
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0xc8]
call eax
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0xa8]
je 0x10d7073
call fcn.010d41d0
test eax, eax
jne 0x10d7073
mov edx, dword [ebp - 0xa8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa8]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x4bd8], eax
mov dword [ebp - 0x4bd4], edx
mov eax, dword [ebp - 0x4bd4]
cmp eax, dword [ebp - 0xd8]
jl 0x10d7073
jg 0x10d7069
mov ecx, dword [ebp - 0x4bd8]
cmp ecx, dword [ebp - 0xdc]
jb 0x10d7073
mov dword [ebp - 0x98], 1
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x20]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x64], 0
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x60]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4bdc], eax
mov ecx, dword [ebp - 0x4bdc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4bdc]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4be0], eax
mov ecx, dword [ebp - 0x4be0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4be0]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0xa4], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x58], 0
mov ecx, dword [ebp - 0x9c]
cmp dword [ecx + 8], 0
je 0x10d7134
mov edx, dword [ebp - 0x9c]
cmp dword [edx + 4], 0
je 0x10d7134
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010d5de0
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x58], 1
jmp 0x10d7181
cmp dword [ebp - 0xa4], 0
jne 0x10d7181
mov edx, dword [ebp - 0x70]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x70]
mov edx, dword [eax + 0x30]
call edx
test eax, eax
jne 0x10d7181
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010d5f80
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x58], 1
mov edx, dword [ebp - 0xa4]
push edx
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x70]
mov eax, dword [edx + 0x64]
call eax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], edx
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x4c], edx
mov esi, dword [ebp + 8]
mov ecx, 0xc
lea edi, [ebp - 0x3c]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x90], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x4be8], esi
mov dword [ebp - 0x4be4], edi
mov dword [ebp - 0x4bf0], eax
mov dword [ebp - 0x4bec], edx
mov ecx, dword [ebp - 0x4be4]
cmp ecx, dword [ebp - 0x4bec]
jg 0x10d72af
jl 0x10d725f
mov edx, dword [ebp - 0x4be8]
cmp edx, dword [ebp - 0x4bf0]
ja 0x10d72af
call fcn.010906a0
mov dword [ebp - 0x4bf4], eax
push 0xe3c
push 0x100add4
call fcn.010cda00
push eax
push 0x100be3c
mov eax, dword [ebp - 0x4bf4]
push eax
mov ecx, dword [ebp - 0x4bf4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
push 0xd6
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
xor eax, eax
jmp 0x10db3e1
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x4bfc], eax
mov dword [ebp - 0x4bf8], edx
mov ecx, dword [ebp - 0x4bfc]
or ecx, dword [ebp - 0x4bf8]
jne 0x10d7323
call fcn.010906a0
mov dword [ebp - 0x4c00], eax
push 0xe43
push 0x100add4
call fcn.010cda00
push eax
push 0x100b978
mov edx, dword [ebp - 0x4c00]
push edx
mov eax, dword [ebp - 0x4c00]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
push 0x20
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
xor eax, eax
jmp 0x10db3e1
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], edx
mov ecx, dword [ebp - 0xcc]
push ecx
mov edx, dword [ebp - 0x48]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x48]
mov edx, dword [eax + 4]
call edx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x33c], 0
jmp 0x10d736b
mov eax, dword [ebp - 0x33c]
add eax, 1
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 2
jge 0x10db386
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x33c], 1
jne 0x10d7798
cmp dword [ebp - 0xb0], 0
je 0x10d7798
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 1
jne 0x10d7798
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x60]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4c04], eax
mov ecx, dword [ebp - 0x4c04]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c04]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10d7798
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4c08], eax
mov ecx, dword [ebp - 0x4c08]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c08]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10d7798
mov dword [ebp - 0x408], 0xffffffff
call fcn.010905a0
mov dword [ebp - 0x344], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4c0c], eax
mov ecx, dword [ebp - 0x4c0c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c0c]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4c10], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4c10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c10]
mov eax, dword [edx + 0x28]
call eax
push eax
lea ecx, [ebp - 0x408]
push ecx
mov edx, dword [ebp - 0x344]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x344]
mov edx, dword [eax]
call edx
test eax, eax
jne 0x10d7572
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4c14], eax
mov ecx, dword [ebp - 0x4c14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c14]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4c18], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4c18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c18]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x344]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x344]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4c1c], eax
mov ecx, dword [ebp - 0x4c1c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c1c]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4c20], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4c20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c20]
mov eax, dword [edx + 0x28]
call eax
push eax
lea ecx, [ebp - 0x408]
push ecx
mov edx, dword [ebp - 0x344]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x344]
mov edx, dword [eax]
call edx
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4c24], eax
mov ecx, dword [ebp - 0x4c24]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c24]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4c28], eax
push 0
lea ecx, [ebp - 0x350]
push ecx
lea edx, [ebp - 0x40c]
push edx
lea eax, [ebp - 0x358]
push eax
lea ecx, [ebp - 0x34c]
push ecx
mov edx, dword [ebp - 0x4c28]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4c28]
mov edx, dword [eax + 0x18]
call edx
push 0xa8
push 0
lea eax, [ebp - 0x404]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4c2c], eax
mov ecx, dword [ebp - 0x4c2c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c2c]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x404], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x364], ax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x38]
call eax
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 0x3e8], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0x3f8], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x3f0], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x2c]
call eax
mov ecx, 0x20
mov esi, eax
lea edi, [ebp - 0x3e4]
rep movsd dword es:[edi], dword [esi]
mov cx, word [ebp - 0x358]
mov word [ebp - 0x362], cx
mov dx, word [ebp - 0x40c]
mov word [ebp - 0x360], dx
call fcn.011434b0
mov dword [ebp - 0x340], eax
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x404]
push ecx
mov edx, dword [ebp - 0x340]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x340]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0
je 0x10d774f
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x4b7c]
call fcn.010cc510
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4c30], eax
mov ecx, dword [ebp - 0x4c30]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c30]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4c34], eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x48]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x48]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp - 0x4c34]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4c34]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x2a
mov ecx, dword [ebp - 0x4b7c]
call fcn.010c9ea0
mov ecx, dword [ebp - 0x408]
push ecx
mov edx, dword [ebp - 0x344]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x344]
mov edx, dword [eax + 8]
call edx
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4c38], eax
push 0
push 0
mov ecx, dword [ebp - 0x4c38]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c38]
mov eax, dword [edx + 0x2c]
call eax
jmp 0x10d8418
cmp dword [ebp - 0xc0], 0
jne 0x10d77ed
cmp dword [ebp - 0x94], 5
je 0x10d77ed
cmp dword [ebp - 0x94], 4
je 0x10d77ed
cmp dword [ebp - 0x94], 0xc
je 0x10d77ed
cmp dword [ebp - 0x94], 0xa
je 0x10d77ed
cmp dword [ebp - 0x94], 6
je 0x10d77ed
cmp dword [ebp - 0x94], 7
je 0x10d77ed
cmp dword [ebp - 0x94], 8
je 0x10d77ed
cmp dword [ebp - 0x94], 9
jne 0x10d78db
push 0x60
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
push 0x30
push 0
lea ecx, [ebp - 0x48c]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x48c], 0xffffffff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x488], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x47c], edx
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x474], eax
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x470], ecx
mov edx, dword [ebp - 0xb4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xb4]
mov edx, dword [eax + 0x44]
call edx
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x480], edx
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x464], eax
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x460], ecx
mov edx, dword [ebp - 0xb4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xb4]
mov edx, dword [eax + 0x78]
call edx
mov dword [ebp - 0x46c], eax
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x45c]
call fcn.01109a30
mov dword [ebp - 4], 0
mov ecx, dword [ebp + 0xc]
push ecx
lea ecx, [ebp - 0x45c]
call fcn.01109a80
mov dword [ebp - 0x64], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x45c]
call fcn.01133540
jmp 0x10d8418
cmp dword [ebp - 0x94], 1
jne 0x10d7e44
push 0x60
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x28]
call edx
call fcn.011434b0
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4c40], esi
mov dword [ebp - 0x4c3c], edi
mov dword [ebp - 0x4c48], eax
mov dword [ebp - 0x4c44], edx
mov ecx, dword [ebp - 0x4c3c]
cmp ecx, dword [ebp - 0x4c44]
jl 0x10d7c68
jg 0x10d7964
mov edx, dword [ebp - 0x4c40]
cmp edx, dword [ebp - 0x4c48]
jb 0x10d7c68
push 0x50
push 0
lea eax, [ebp - 0x4e4]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x4e4], ecx
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x4cc], edx
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x4d8], ecx
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x4c0], eax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4ac], eax
mov dword [ebp - 0x4a8], edx
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 0x4a0], edx
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x4d4], eax
mov dword [ebp - 0x4d0], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0x4b4], ecx
mov edx, dword [ebp - 0xb4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xb4]
mov edx, dword [eax + 0x30]
call edx
movzx eax, ax
cdq
push edx
push eax
mov eax, dword [ebp - 0x4a8]
push eax
mov ecx, dword [ebp - 0x4ac]
push ecx
call sub.ntdll.dll__alldiv
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], edx
mov edx, dword [ebp - 0x48]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x48]
mov edx, dword [eax + 0x60]
call edx
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x49c], 1
push 0
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x4e4]
push ecx
mov edx, dword [ebp - 0x490]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x490]
mov edx, dword [eax + 0x38]
call edx
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x10d7c63
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4c50], eax
mov dword [ebp - 0x4c4c], edx
mov ecx, dword [ebp - 0x4c4c]
cmp ecx, dword [ebp - 0x4a8]
jl 0x10d7c63
jg 0x10d7af0
mov edx, dword [ebp - 0x4c50]
cmp edx, dword [ebp - 0x4ac]
jbe 0x10d7c63
push 0x148
push 0
lea eax, [ebp - 0x62c]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x62c], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x624], ecx
mov edx, dword [eax + 0x1c]
mov dword [ebp - 0x620], edx
mov eax, dword [ebp - 0xb4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x618], edx
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x614], eax
mov dword [ebp - 0x610], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x60c], eax
mov dword [ebp - 0x608], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x600], ax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x604], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4c54], eax
mov ecx, dword [ebp - 0x4c54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c54]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0x5fc], ax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4c58], eax
mov ecx, dword [ebp - 0x4c58]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c58]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0x5fe], ax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0x5fa]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
push 0
push 0
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x62c]
push ecx
mov edx, dword [ebp - 0x490]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x490]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x64], eax
jmp 0x10d7e06
push 0x148
push 0
lea eax, [ebp - 0x774]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x774], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x76c], ecx
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x768], edx
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x748], ax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x764], eax
mov dword [ebp - 0x760], edx
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x75c], eax
mov dword [ebp - 0x758], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x754], eax
mov dword [ebp - 0x750], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x74c], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4c5c], eax
mov ecx, dword [ebp - 0x4c5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c5c]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0x744], ax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4c60], eax
mov ecx, dword [ebp - 0x4c60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c60]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0x746], ax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0x742]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x640], eax
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x63c], ecx
mov edx, dword [ebp - 0xb8]
mov dword [ebp - 0x638], edx
mov dword [ebp - 0x634], 1
push 0
push 0
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x774]
push ecx
mov edx, dword [ebp - 0x490]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x490]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x10d7e3f
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp - 0xb8]
push ecx
mov edx, dword [ebp - 0xbc]
push edx
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x490]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x490]
mov eax, dword [edx + 0x28]
call eax
jmp 0x10d8418
cmp dword [ebp - 0x94], 2
je 0x10d7e63
cmp dword [ebp - 0x94], 3
je 0x10d7e63
cmp dword [ebp - 0x94], 0
jne 0x10d8418
push 0x60
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
call fcn.01117e60
mov dword [ebp - 0x788], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x20]
call eax
sub esi, eax
sbb edi, edx
mov dword [ebp - 0x77c], esi
mov dword [ebp - 0x778], edi
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4c64], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4c68], eax
mov ecx, dword [ebp - 0x4c68]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c68]
mov eax, dword [edx + 0x54]
call eax
mov esi, eax
mov ecx, dword [ebp - 0x4c64]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c64]
mov eax, dword [edx + 0x50]
call eax
imul eax, esi
xor ecx, ecx
mov dword [ebp - 0x784], eax
mov dword [ebp - 0x780], ecx
cmp dword [ebp - 0x778], 0
jl 0x10d7f42
jg 0x10d7f24
cmp dword [ebp - 0x77c], 0
jb 0x10d7f42
mov edx, dword [ebp - 0x778]
cmp edx, dword [ebp - 0x780]
jl 0x10d7f58
jg 0x10d7f42
mov eax, dword [ebp - 0x77c]
cmp eax, dword [ebp - 0x784]
jb 0x10d7f58
cmp dword [ebp - 0x94], 2
je 0x10d7f58
cmp dword [ebp - 0x94], 3
jne 0x10d8106
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4c70], esi
mov dword [ebp - 0x4c6c], edi
mov dword [ebp - 0x4c78], eax
mov dword [ebp - 0x4c74], edx
mov ecx, dword [ebp - 0x4c6c]
cmp ecx, dword [ebp - 0x4c74]
jg 0x10d8002
jl 0x10d7fb2
mov edx, dword [ebp - 0x4c70]
cmp edx, dword [ebp - 0x4c78]
jae 0x10d8002
call fcn.010906a0
mov dword [ebp - 0x4c7c], eax
push 0xedc
push 0x100add4
call fcn.010cda00
push eax
push 0x100be3c
mov eax, dword [ebp - 0x4c7c]
push eax
mov ecx, dword [ebp - 0x4c7c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
push 0xd6
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
xor eax, eax
jmp 0x10db3e1
push 0x48
push 0
lea ecx, [ebp - 0x7d4]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x7d4], 0xffffffff
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x7d0], edx
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x7bc], eax
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x7cc], ecx
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x7c8], edx
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x7b4], eax
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x7b0], ecx
mov edx, dword [ebp - 0xb4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xb4]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x7a4], eax
mov dword [ebp - 0x7a0], edx
mov eax, dword [ebp - 0xb4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x79c], eax
mov dword [ebp - 0x798], edx
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x7c4], eax
mov dword [ebp - 0x7c0], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x7ac], eax
mov dword [ebp - 0x794], 1
push 0
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x7d4]
push edx
mov eax, dword [ebp - 0x788]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x788]
mov eax, dword [edx + 0x30]
call eax
mov dword [ebp - 0x64], eax
jmp 0x10d83df
cmp dword [ebp - 0x94], 0
jne 0x10d83df
mov dword [ebp - 0x7d8], 1
cmp dword [ebp - 0xa8], 0
je 0x10d82d4
cmp dword [ebp - 0x5c], 0
je 0x10d82d4
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4c80], eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4c84], eax
mov ecx, dword [ebp - 0x4c84]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c84]
mov eax, dword [edx + 0x28]
call eax
mov esi, eax
mov ecx, dword [ebp - 0x4c80]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c80]
mov eax, dword [edx + 0x28]
call eax
cmp eax, esi
jne 0x10d8239
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x4c8c], esi
mov dword [ebp - 0x4c88], edi
mov dword [ebp - 0x4c94], eax
mov dword [ebp - 0x4c90], edx
mov ecx, dword [ebp - 0x4c8c]
cmp ecx, dword [ebp - 0x4c94]
jne 0x10d8239
mov edx, dword [ebp - 0x4c88]
cmp edx, dword [ebp - 0x4c90]
jne 0x10d8239
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x70]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10d8239
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x60]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4c98], eax
mov ecx, dword [ebp - 0x4c98]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c98]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10d8239
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x7d8], 0
jmp 0x10d82d4
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4c9c], eax
mov ecx, dword [ebp - 0x4c9c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c9c]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10d82d4
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4ca0], eax
mov ecx, dword [ebp - 0x4ca0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4ca0]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10d82d4
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4ca4], eax
mov ecx, dword [ebp - 0x4ca4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4ca4]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10d82d4
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x7d8], 0
cmp dword [ebp - 0x7d8], 0
je 0x10d83df
push 0x40
push 0
lea ecx, [ebp - 0x81c]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x81c], edx
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x7f4], eax
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x814], ecx
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x810], edx
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x7ec], eax
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x7e8], ecx
mov edx, dword [ebp - 0xb4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xb4]
mov edx, dword [eax + 0x30]
call edx
mov word [ebp - 0x7fc], ax
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x7fa], ax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x80c], eax
mov dword [ebp - 0x808], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x804], eax
mov dword [ebp - 0x800], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x7f8], eax
mov dword [ebp - 0x7e4], 1
push 0
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x81c]
push edx
mov eax, dword [ebp - 0x788]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x788]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x10d8418
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp - 0xb8]
push ecx
mov edx, dword [ebp - 0xbc]
push edx
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x788]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x788]
mov eax, dword [edx + 0x28]
call eax
cmp dword [ebp - 0x64], 0
je 0x10d8443
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
push edx
mov eax, dword [ecx + 0x18]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
call fcn.010c3440
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010ca2a0
test eax, eax
jne 0x10d8491
call fcn.010906a0
mov dword [ebp - 0x4ca8], eax
push 0xf2c
push 0x100add4
call fcn.010cda00
push eax
push 0x100be20
mov edx, dword [ebp - 0x4ca8]
push edx
mov eax, dword [ebp - 0x4ca8]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
push 4
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
cmp dword [ebp - 0x64], 0
je 0x10db249
push 0x100bdf8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x38]
call eax
mov dword [ebp - 0x820], 0x100b700
cmp dword [ebp - 0x6c], 0
je 0x10d8555
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xbc]
call eax
mov dword [ebp - 0x834], eax
xor ecx, ecx
mov byte [ebp - 0x4b55], cl
lea edx, [ebp - 0x4b55]
push edx
mov eax, dword [ebp - 0x834]
push eax
lea ecx, [ebp - 0x830]
call fcn.01086de0
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x820]
push ecx
lea ecx, [ebp - 0x830]
call fcn.0109a620
lea ecx, [ebp - 0x830]
call fcn.01086e30
push eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0xb8]
call edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x830]
call fcn.01086e10
mov dword [ebp - 0x6c], 0
push 0
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
je 0x10d85a4
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010d5800
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 8]
cmp edx, dword [ecx + 0xc]
je 0x10d8615
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x70]
mov eax, dword [edx + 0x54]
call eax
mov dword [ebp - 0x83c], eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x70]
mov eax, dword [edx + 0x50]
call eax
mov dword [ebp - 0x838], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x838]
push ecx
mov edx, dword [ebp - 0x83c]
push edx
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010d5be0
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x70]
call eax
test eax, eax
je 0x10d8650
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x70]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10d8650
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010d61f0
push 0
push 0
mov edx, dword [ebp - 0xcc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xcc]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
jne 0x10d86b8
push 6
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x4cac], eax
push 0xf5a
push 0x100add4
call fcn.010cda00
push eax
push 0x100bdd8
mov ecx, dword [ebp - 0x4cac]
push ecx
mov edx, dword [ebp - 0x4cac]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10db3e1
push 0x9c4
call fcn.0108d6a0
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x4b7c]
call fcn.010c9ea0
test eax, eax
jne 0x10d8730
call fcn.010906a0
mov dword [ebp - 0x4cb0], eax
push 0xf61
push 0x100add4
call fcn.010cda00
push eax
push 0x100bdb4
mov ecx, dword [ebp - 0x4cb0]
push ecx
mov edx, dword [ebp - 0x4cb0]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
push 0x32
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 8]
call edx
cmp dword [ebp - 0xc4], 0
je 0x10d8767
cmp dword [ebp - 0x33c], 0
jne 0x10d8767
mov eax, dword [ebp - 0x98]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010cbf70
mov edx, dword [ebp - 0x48]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x48]
mov edx, dword [eax + 0x18]
call edx
push eax
mov ecx, dword [ebp - 0x4b7c]
call fcn.010caf50
test eax, eax
je 0x10d8798
cmp dword [ebp - 0x33c], 0
jne 0x10d8798
mov ecx, dword [ebp - 0x4b7c]
call fcn.010ca340
mov eax, dword [ebp - 0xb4]
push eax
mov ecx, dword [ebp - 0xd0]
push ecx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010cc440
test eax, eax
je 0x10d87bf
mov dword [ebp - 0xc4], 1
cmp dword [ebp - 0xc4], 0
je 0x10d8835
mov edx, dword [ebp - 0xc4]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0xcc]
push ecx
mov edx, dword [ebp - 0x60]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010c9780
test eax, eax
jne 0x10d8833
call fcn.010906a0
mov dword [ebp - 0x4cb4], eax
push 0xf78
push 0x100add4
call fcn.010cda00
push eax
push 0x100a7f8
mov eax, dword [ebp - 0x4cb4]
push eax
mov ecx, dword [ebp - 0x4cb4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
push 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10d88a3
mov ecx, dword [ebp - 0xc4]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0xcc]
push eax
mov ecx, dword [ebp - 0xd0]
push ecx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010c9780
test eax, eax
jne 0x10d88a3
call fcn.010906a0
mov dword [ebp - 0x4cb8], eax
push 0xf81
push 0x100add4
call fcn.010cda00
push eax
push 0x100a7f8
mov edx, dword [ebp - 0x4cb8]
push edx
mov eax, dword [ebp - 0x4cb8]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
push 0
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
cmp dword [ebp - 0x58], 0
je 0x10d88cd
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010d6440
mov dword [ebp - 0x840], eax
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0xa4], eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x60]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4cbc], eax
mov ecx, dword [ebp - 0x4cbc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4cbc]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10d8942
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x70]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10d8942
mov ecx, dword [ebp - 0xb8]
push ecx
mov edx, dword [ebp - 0xbc]
push edx
mov eax, dword [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x8c]
push ecx
mov edx, dword [ebp - 0x48]
push edx
mov eax, dword [ebp - 0xa4]
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010df760
mov eax, dword [ebp - 0x60]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x60]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4cc0], eax
mov ecx, dword [ebp - 0x4cc0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4cc0]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10d89a0
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4cc4], eax
mov ecx, dword [ebp - 0x4cc4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4cc4]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10daf61
cmp dword [ebp - 0xc4], 0
je 0x10daf61
mov dword [ebp - 0x848], 0xffffffff
call fcn.010905a0
mov dword [ebp - 0x844], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4cc8], eax
mov ecx, dword [ebp - 0x4cc8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4cc8]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4ccc], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4ccc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4ccc]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x844]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x844]
mov eax, dword [edx + 0x18]
call eax
test eax, eax
jne 0x10d8a33
call fcn.0108d160
mov dword [ebp - 0x848], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4cd0], eax
mov ecx, dword [ebp - 0x4cd0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4cd0]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4cd4], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4cd4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4cd4]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x844]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x844]
mov eax, dword [edx + 0xc]
call eax
test eax, eax
jne 0x10d8ab2
call fcn.0108d160
mov dword [ebp - 0x848], eax
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4cd8], eax
mov ecx, dword [ebp - 0x4cd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4cd8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10da4ca
call fcn.01098690
mov dword [ebp - 0x854], eax
cmp dword [ebp - 0x854], 0
jne 0x10d8b31
call fcn.010906a0
mov dword [ebp - 0x4cdc], eax
push 0xfaa
push 0x100add4
call fcn.010cda00
push eax
push 0x100bd98
mov ecx, dword [ebp - 0x4cdc]
push ecx
mov edx, dword [ebp - 0x4cdc]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x854]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x854]
mov edx, dword [eax + 4]
call edx
test eax, eax
jne 0x10d8b7f
call fcn.010906a0
mov dword [ebp - 0x4ce0], eax
push 0xfae
push 0x100add4
call fcn.010cda00
push eax
push 0x100bd80
mov eax, dword [ebp - 0x4ce0]
push eax
mov ecx, dword [ebp - 0x4ce0]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
mov dword [ebp - 0x84c], 0
mov dword [ebp - 0x850], 0
mov ecx, dword [ebp - 0x854]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x854]
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 0x858], eax
jmp 0x10d8bc7
mov ecx, dword [ebp - 0x854]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x854]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x858], eax
cmp dword [ebp - 0x858], 0
je 0x10d8d9d
cmp dword [ebp - 0x84c], 0
jne 0x10d8d9d
mov ecx, dword [ebp - 0x858]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x858]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x85c], eax
jmp 0x10d8c15
mov ecx, dword [ebp - 0x858]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x858]
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 0x85c], eax
cmp dword [ebp - 0x85c], 0
je 0x10d8d98
cmp dword [ebp - 0x84c], 0
jne 0x10d8d98
mov ecx, dword [ebp - 0x85c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x85c]
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [ebp + 8]
cmp eax, dword [ecx + 0xc]
jne 0x10d8d93
mov edx, dword [ebp - 0x85c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x85c]
mov edx, dword [eax + 0x3c]
call edx
mov dword [ebp - 0x864], eax
cmp dword [ebp - 0x864], 0
jne 0x10d8c72
jmp 0x10d8bfc
mov eax, dword [ebp - 0x864]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x864]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x860], eax
jmp 0x10d8ca6
mov ecx, dword [ebp - 0x864]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x864]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x860], eax
cmp dword [ebp - 0x860], 0
je 0x10d8d93
cmp dword [ebp - 0x84c], 0
jne 0x10d8d93
mov ecx, dword [ebp - 0x860]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x860]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x4ce8], esi
mov dword [ebp - 0x4ce4], edi
mov dword [ebp - 0x4cf0], eax
mov dword [ebp - 0x4cec], edx
mov ecx, dword [ebp - 0x4ce8]
cmp ecx, dword [ebp - 0x4cf0]
jne 0x10d8d24
mov edx, dword [ebp - 0x4ce4]
cmp edx, dword [ebp - 0x4cec]
jne 0x10d8d24
mov eax, dword [ebp - 0x860]
mov dword [ebp - 0x84c], eax
mov ecx, dword [ebp - 0x860]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x860]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa0]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x4cf8], esi
mov dword [ebp - 0x4cf4], edi
mov dword [ebp - 0x4d00], eax
mov dword [ebp - 0x4cfc], edx
mov ecx, dword [ebp - 0x4cf8]
cmp ecx, dword [ebp - 0x4d00]
jne 0x10d8d8e
mov edx, dword [ebp - 0x4cf4]
cmp edx, dword [ebp - 0x4cfc]
jne 0x10d8d8e
mov eax, dword [ebp - 0x860]
mov dword [ebp - 0x850], eax
jmp 0x10d8c8d
jmp 0x10d8bfc
jmp 0x10d8bae
cmp dword [ebp - 0x84c], 0
je 0x10d8f91
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d04], eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d08], eax
mov ecx, dword [ebp - 0x4d08]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d08]
mov eax, dword [edx + 0x28]
call eax
mov esi, eax
mov ecx, dword [ebp - 0x4d04]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d04]
mov eax, dword [edx + 0x28]
call eax
cmp eax, esi
jne 0x10d8f30
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x4d10], esi
mov dword [ebp - 0x4d0c], edi
mov dword [ebp - 0x4d18], eax
mov dword [ebp - 0x4d14], edx
mov ecx, dword [ebp - 0x4d10]
cmp ecx, dword [ebp - 0x4d18]
jne 0x10d8f30
mov edx, dword [ebp - 0x4d0c]
cmp edx, dword [ebp - 0x4d14]
jne 0x10d8f30
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x70]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10d8f30
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x60]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4d1c], eax
mov ecx, dword [ebp - 0x4d1c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d1c]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10d8f30
cmp dword [ebp - 0x33c], 1
jne 0x10d8f30
mov ecx, dword [ebp - 0x84c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x84c]
mov eax, dword [edx + 0x58]
call eax
mov esi, eax
add esi, 0x68
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x58]
call eax
add eax, 0x68
mov ecx, dword [esi]
mov dword [eax], ecx
mov edx, dword [esi + 4]
mov dword [eax + 4], edx
mov ecx, dword [esi + 8]
mov dword [eax + 8], ecx
mov edx, dword [esi + 0xc]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x84c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x84c]
mov eax, dword [edx + 0x58]
call eax
mov esi, eax
add esi, 0x78
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x58]
call eax
add eax, 0x78
mov ecx, dword [esi]
mov dword [eax], ecx
mov edx, dword [esi + 4]
mov dword [eax + 4], edx
mov ecx, dword [esi + 8]
mov dword [eax + 8], ecx
mov edx, dword [esi + 0xc]
mov dword [eax + 0xc], edx
jmp 0x10d8f91
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x868], ax
mov ecx, dword [ebp - 0x84c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x84c]
mov eax, dword [edx + 0xc]
call eax
push eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
test ecx, ecx
jne 0x10d8f91
mov dx, word [ebp - 0x868]
push edx
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x94]
call eax
cmp dword [ebp - 0x850], 0
je 0x10d8fc1
mov ecx, dword [ebp - 0x850]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x850]
mov eax, dword [edx + 0xc]
call eax
push eax
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa0]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x64]
call eax
test eax, eax
jne 0x10d9002
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x58]
call eax
cmp dword [eax], 1
je 0x10d9002
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x24]
call eax
test eax, eax
je 0x10d9002
cmp dword [ebp - 0x33c], 1
jne 0x10d9fe1
mov dword [ebp - 0x86c], 0
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x60]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4d20], eax
mov ecx, dword [ebp - 0x4d20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d20]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10d9602
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x60]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4d24], eax
mov ecx, dword [ebp - 0x4d24]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d24]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10d9602
mov word [ebp - 0x96c], 0
push 0xfe
push 0
lea ecx, [ebp - 0x96a]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x970], 0
mov word [ebp - 0xa74], 0
push 0xfe
push 0
lea edx, [ebp - 0xa72]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d28], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4d28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d28]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x80
lea ecx, [ebp - 0xa74]
push ecx
mov edx, dword [ebp - 0x844]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x844]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
je 0x10d910b
jmp 0x10d9179
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d2c], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4d2c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d2c]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x844]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x844]
mov eax, dword [edx + 0x54]
call eax
push 0x64
call fcn.0108d6a0
mov ecx, dword [ebp - 0x970]
mov edx, dword [ebp - 0x970]
add edx, 1
mov dword [ebp - 0x970], edx
cmp ecx, 0x64
jl 0x10d90b0
cmp dword [ebp - 0x970], 0x64
jl 0x10d91c0
call fcn.010906a0
mov dword [ebp - 0x4d30], eax
push 0xffe
push 0x100add4
call fcn.010cda00
push eax
push 0x100bd64
mov eax, dword [ebp - 0x4d30]
push eax
mov ecx, dword [ebp - 0x4d30]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
xor eax, eax
jmp 0x10db3e1
mov dword [ebp - 0x970], 0
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d34], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4d34]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d34]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x80
lea ecx, [ebp - 0x96c]
push ecx
mov edx, dword [ebp - 0x844]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x844]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
je 0x10d9225
jmp 0x10d9293
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d38], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4d38]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d38]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x844]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x844]
mov eax, dword [edx + 0x54]
call eax
push 0x64
call fcn.0108d6a0
mov ecx, dword [ebp - 0x970]
mov edx, dword [ebp - 0x970]
add edx, 1
mov dword [ebp - 0x970], edx
cmp ecx, 0x64
jl 0x10d91ca
cmp dword [ebp - 0x970], 0x64
jl 0x10d92da
call fcn.010906a0
mov dword [ebp - 0x4d3c], eax
push 0x100e
push 0x100add4
call fcn.010cda00
push eax
push 0x100adb8
mov eax, dword [ebp - 0x4d3c]
push eax
mov ecx, dword [ebp - 0x4d3c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
xor eax, eax
jmp 0x10db3e1
push 0
mov ecx, dword [ebp - 0x4b7c]
call fcn.010cd930
test eax, eax
je 0x10d947d
mov word [ebp - 0x1674], 0
push 0x1fe
push 0
lea ecx, [ebp - 0x1672]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov word [ebp - 0xc74], 0
push 0x1fe
push 0
lea edx, [ebp - 0xc72]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
lea eax, [ebp - 0x96c]
push eax
push 0x1007418
lea ecx, [ebp - 0x1674]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea edx, [ebp - 0x1674]
push edx
call fcn.0108f990
cmp eax, 0xffffffff
je 0x10d9365
lea eax, [ebp - 0x1674]
push eax
call fcn.0108fb30
push 0x100bd50
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100bd30
lea edx, [ebp - 0xc74]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
lea eax, [ebp - 0xc74]
push eax
call fcn.0108f990
cmp eax, 0xffffffff
jne 0x10d93de
call fcn.010906a0
mov dword [ebp - 0x4d40], eax
push 0x1023
push 0x100add4
call fcn.010cda00
push eax
push 0x100bd10
mov ecx, dword [ebp - 0x4d40]
push ecx
mov edx, dword [ebp - 0x4d40]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10db3e1
lea ecx, [ebp - 0x1474]
call fcn.0117e330
mov dword [ebp - 4], 2
lea edx, [ebp - 0x1674]
push edx
lea eax, [ebp - 0xc74]
push eax
lea ecx, [ebp - 0x1474]
call fcn.01108d00
test eax, eax
jne 0x10d946b
call fcn.010906a0
mov dword [ebp - 0x4d44], eax
push 0x102b
push 0x100add4
call fcn.010cda00
push eax
push 0x100bcf8
mov ecx, dword [ebp - 0x4d44]
push ecx
mov edx, dword [ebp - 0x4d44]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov dword [ebp - 0x4b5c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1474]
call fcn.01133540
mov eax, dword [ebp - 0x4b5c]
jmp 0x10db3e1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1474]
call fcn.01133540
mov edx, dword [ebp - 0xa0]
push edx
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x5c]
push ecx
mov edx, dword [ebp - 0xa8]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010cc860
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x86c], 0
je 0x10d95fd
mov word [ebp - 0x1874], 0
push 0x1fe
push 0
lea eax, [ebp - 0x1872]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x96c]
push ecx
push 0x1007a6c
lea edx, [ebp - 0x1874]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea eax, [ebp - 0x1874]
push eax
call fcn.0108f990
cmp eax, 0xffffffff
jne 0x10d95fd
push 0x200
push 0
lea ecx, [ebp - 0x1874]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
lea edx, [ebp - 0x96c]
push edx
push 0x1007a48
lea eax, [ebp - 0x1874]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
push 0
lea ecx, [ebp - 0x1874]
push ecx
call fcn.010901a0
test eax, eax
jne 0x10d9555
lea edx, [ebp - 0x1874]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010ccef0
lea ecx, [ebp - 0x2274]
call fcn.0117e330
mov dword [ebp - 4], 3
mov word [ebp - 0x1a74], 0
push 0x1fe
push 0
lea eax, [ebp - 0x1a72]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
push 0x200
push 0
lea ecx, [ebp - 0x1874]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
lea edx, [ebp - 0x96c]
push edx
push 0x10074b8
lea eax, [ebp - 0x1874]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
lea ecx, [ebp - 0x96c]
push ecx
push 0x1007470
lea edx, [ebp - 0x1a74]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea eax, [ebp - 0x1a74]
push eax
lea ecx, [ebp - 0x1874]
push ecx
lea ecx, [ebp - 0x2274]
call fcn.01108d00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2274]
call fcn.01133540
jmp 0x10d9fe1
mov edx, dword [ebp - 0x60]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x60]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x4d48], eax
mov eax, dword [ebp - 0x4d48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4d48]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10d9fe1
mov dword [ebp - 0x3250], 0xffffffff
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d4c], eax
push 0
lea ecx, [ebp - 0x324c]
push ecx
lea edx, [ebp - 0x2680]
push edx
lea eax, [ebp - 0x3248]
push eax
lea ecx, [ebp - 0x288c]
push ecx
mov edx, dword [ebp - 0x4d4c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4d4c]
mov edx, dword [eax + 0x18]
call edx
push 0
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x88]
call eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x20]
mov dword [ebp - 0x2478], edx
call fcn.01117e60
mov dword [ebp - 0x3090], eax
push 0xb0
push 0
lea eax, [ebp - 0x3244]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d50], eax
mov ecx, dword [ebp - 0x4d50]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d50]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x3244], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x323c], eax
mov dword [ebp - 0x3238], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x3234], eax
mov dword [ebp - 0x3230], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x38]
call eax
mov dword [ebp - 0x322c], eax
mov dword [ebp - 0x3228], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x31a4], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x31a0], ax
mov cx, word [ebp - 0x3248]
mov word [ebp - 0x319e], cx
mov dx, word [ebp - 0x2680]
mov word [ebp - 0x319c], dx
mov eax, dword [ebp - 0x2478]
mov dword [ebp - 0x3198], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x4d54], eax
lea ecx, [ebp - 0x3224]
mov dword [ebp - 0x4d58], ecx
mov edx, dword [ebp - 0x4d58]
mov dword [ebp - 0x4d5c], edx
mov eax, dword [ebp - 0x4d54]
mov cx, word [eax]
mov word [ebp - 0x4d5e], cx
mov edx, dword [ebp - 0x4d58]
mov ax, word [ebp - 0x4d5e]
mov word [edx], ax
mov ecx, dword [ebp - 0x4d54]
add ecx, 2
mov dword [ebp - 0x4d54], ecx
mov edx, dword [ebp - 0x4d58]
add edx, 2
mov dword [ebp - 0x4d58], edx
cmp word [ebp - 0x4d5e], 0
jne 0x10d97ae
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d64], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4d64]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d64]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x844]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x844]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d68], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4d68]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d68]
mov eax, dword [edx + 0x28]
call eax
push eax
lea ecx, [ebp - 0x3250]
push ecx
mov edx, dword [ebp - 0x844]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x844]
mov edx, dword [eax]
call edx
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x3244]
push ecx
mov edx, dword [ebp - 0x3090]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3090]
mov edx, dword [eax + 0x14]
call edx
test eax, eax
jne 0x10d98fc
call fcn.010906a0
mov dword [ebp - 0x4d6c], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x64]
call eax
push eax
push 0x106f
push 0x100add4
call fcn.010cda00
push eax
push 0x100bcc8
mov ecx, dword [ebp - 0x4d6c]
push ecx
mov edx, dword [ebp - 0x4d6c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0x10
xor eax, eax
jmp 0x10db3e1
mov edx, dword [ebp - 0x3250]
push edx
mov eax, dword [ebp - 0x844]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x844]
mov eax, dword [edx + 8]
call eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d70], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4d70]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d70]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x844]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x844]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4d74], eax
push 0
push 0
mov ecx, dword [ebp - 0x4d74]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d74]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x2684], 0
mov word [ebp - 0x2884], 0
push 0xfe
push 0
lea ecx, [ebp - 0x2882]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x48]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x48]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x4d78], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4d78]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d78]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x80
lea ecx, [ebp - 0x2884]
push ecx
mov edx, dword [ebp - 0x844]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x844]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
je 0x10d9a0d
jmp 0x10d9a7b
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d7c], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4d7c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d7c]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x844]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x844]
mov eax, dword [edx + 0x54]
call eax
push 0x64
call fcn.0108d6a0
mov ecx, dword [ebp - 0x2684]
mov edx, dword [ebp - 0x2684]
add edx, 1
mov dword [ebp - 0x2684], edx
cmp ecx, 0x64
jl 0x10d99b2
cmp dword [ebp - 0x2684], 0x64
jl 0x10d9abb
call fcn.010906a0
mov dword [ebp - 0x4d80], eax
push 0x1084
push 0x100add4
call fcn.010cda00
push eax
push 0x100bd64
mov eax, dword [ebp - 0x4d80]
push eax
mov ecx, dword [ebp - 0x4d80]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
push 0xbb8
call fcn.0108d6a0
mov word [ebp - 0x3194], 0
push 0xfe
push 0
lea ecx, [ebp - 0x3192]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov word [ebp - 0x2784], 0
push 0xfe
push 0
lea edx, [ebp - 0x2782]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d84], eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4d84]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d84]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x80
lea ecx, [ebp - 0x3194]
push ecx
mov edx, dword [ebp - 0x844]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x844]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
jne 0x10d9b93
call fcn.010906a0
mov dword [ebp - 0x4d88], eax
push 0x108f
push 0x100add4
call fcn.010cda00
push eax
push 0x100bca4
mov eax, dword [ebp - 0x4d88]
push eax
mov ecx, dword [ebp - 0x4d88]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d8c], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4d8c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d8c]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x80
lea ecx, [ebp - 0x2784]
push ecx
mov edx, dword [ebp - 0x844]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x844]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
jne 0x10d9c23
call fcn.010906a0
mov dword [ebp - 0x4d90], eax
push 0x1094
push 0x100add4
call fcn.010cda00
push eax
push 0x100bc7c
mov eax, dword [ebp - 0x4d90]
push eax
mov ecx, dword [ebp - 0x4d90]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
mov word [ebp - 0x2474], 0
push 0x1fe
push 0
lea ecx, [ebp - 0x2472]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov word [ebp - 0x267c], 0
push 0x1fe
push 0
lea edx, [ebp - 0x267a]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x100bc58
lea eax, [ebp - 0x3194]
push eax
push 0x100783c
lea ecx, [ebp - 0x2474]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0x10
lea edx, [ebp - 0x2784]
push edx
push 0x10075f4
lea eax, [ebp - 0x267c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
push 0
lea ecx, [ebp - 0x267c]
push ecx
call fcn.010901a0
test eax, eax
jne 0x10d9ccb
lea edx, [ebp - 0x267c]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010ccef0
test eax, eax
jne 0x10d9ccb
xor eax, eax
jmp 0x10db3e1
push 0x200
push 0
lea eax, [ebp - 0x267c]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x2784]
push ecx
push 0x10075c8
lea edx, [ebp - 0x267c]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
push 0
lea eax, [ebp - 0x267c]
push eax
call fcn.010901a0
test eax, eax
jne 0x10d9d2b
lea ecx, [ebp - 0x267c]
push ecx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010ccef0
test eax, eax
jne 0x10d9d2b
xor eax, eax
jmp 0x10db3e1
push 0x200
push 0
lea edx, [ebp - 0x267c]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
lea eax, [ebp - 0x2784]
push eax
push 0x1007590
lea ecx, [ebp - 0x267c]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0xc
push 0
lea edx, [ebp - 0x267c]
push edx
call fcn.010901a0
test eax, eax
jne 0x10d9d8b
lea eax, [ebp - 0x267c]
push eax
mov ecx, dword [ebp - 0x4b7c]
call fcn.010ccef0
test eax, eax
jne 0x10d9d8b
xor eax, eax
jmp 0x10db3e1
push 0x200
push 0
lea ecx, [ebp - 0x267c]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
lea edx, [ebp - 0x2784]
push edx
push 0x1007550
lea eax, [ebp - 0x267c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
push 0
lea ecx, [ebp - 0x267c]
push ecx
call fcn.010901a0
test eax, eax
jne 0x10d9deb
lea edx, [ebp - 0x267c]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010ccef0
test eax, eax
jne 0x10d9deb
xor eax, eax
jmp 0x10db3e1
lea ecx, [ebp - 0x308c]
call fcn.0117e330
mov dword [ebp - 4], 4
lea eax, [ebp - 0x267c]
push eax
lea ecx, [ebp - 0x2474]
push ecx
lea ecx, [ebp - 0x308c]
call fcn.01108c50
test eax, eax
jne 0x10d9e41
mov dword [ebp - 0x4b60], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x308c]
call fcn.01133540
mov eax, dword [ebp - 0x4b60]
jmp 0x10db3e1
push 0x200
push 0
lea edx, [ebp - 0x2474]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x200
push 0
lea eax, [ebp - 0x267c]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
push 0x100bc18
lea ecx, [ebp - 0x2784]
push ecx
push 0x100783c
lea edx, [ebp - 0x2474]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
lea eax, [ebp - 0x2784]
push eax
push 0x1007470
lea ecx, [ebp - 0x267c]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea edx, [ebp - 0x267c]
push edx
lea eax, [ebp - 0x2474]
push eax
lea ecx, [ebp - 0x308c]
call fcn.01108d00
test eax, eax
jne 0x10d9eec
mov dword [ebp - 0x4b64], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x308c]
call fcn.01133540
mov eax, dword [ebp - 0x4b64]
jmp 0x10db3e1
push 0x200
push 0
lea ecx, [ebp - 0x2474]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x200
push 0
lea edx, [ebp - 0x267c]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x100bd50
lea eax, [ebp - 0x3194]
push eax
push 0x1007714
lea ecx, [ebp - 0x2474]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0x10
lea edx, [ebp - 0x2784]
push edx
push 0x1007418
lea eax, [ebp - 0x267c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
lea ecx, [ebp - 0x267c]
push ecx
lea edx, [ebp - 0x2474]
push edx
lea ecx, [ebp - 0x308c]
call fcn.01108d00
test eax, eax
jne 0x10d9f97
mov dword [ebp - 0x4b68], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x308c]
call fcn.01133540
mov eax, dword [ebp - 0x4b68]
jmp 0x10db3e1
lea eax, [ebp - 0x2474]
push eax
call fcn.0108fb30
mov ecx, dword [ebp - 0xa0]
push ecx
mov edx, dword [ebp - 0x48]
push edx
push 0
push 0
mov ecx, dword [ebp - 0x4b7c]
call fcn.010cc860
mov dword [ebp - 0x86c], eax
lea eax, [ebp - 0x2474]
push eax
call fcn.0108fb30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x308c]
call fcn.01133540
cmp dword [ebp - 0x33c], 0
jne 0x10da4aa
lea ecx, [ebp - 0x3468]
call fcn.010ff410
mov dword [ebp - 4], 5
mov word [ebp - 0x357c], 0
push 0xfe
push 0
lea ecx, [ebp - 0x357a]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov word [ebp - 0x3464], 0
push 0x1fe
push 0
lea edx, [ebp - 0x3462]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x3260], 0
xor eax, eax
mov dword [ebp - 0x325c], eax
mov dword [ebp - 0x3258], eax
mov dword [ebp - 0x3254], eax
mov dword [ebp - 0x3478], 0
xor ecx, ecx
mov dword [ebp - 0x3474], ecx
mov dword [ebp - 0x3470], ecx
mov dword [ebp - 0x346c], ecx
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [eax + 0xc]
call edx
mov dword [ebp - 0x3260], eax
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d94], eax
mov ecx, dword [ebp - 0x4d94]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d94]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x3254], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x3478], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d98], eax
mov ecx, dword [ebp - 0x4d98]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d98]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x346c], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4d9c], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4d9c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d9c]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x80
lea ecx, [ebp - 0x357c]
push ecx
mov edx, dword [ebp - 0x844]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x844]
mov edx, dword [eax + 0x2c]
call edx
lea eax, [ebp - 0x357c]
push eax
push 0x10079f0
lea ecx, [ebp - 0x3464]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0xc
mov edx, dword [ebp - 0x60]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x60]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x4da0], eax
mov eax, dword [ebp - 0x4da0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4da0]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10da1f9
push 2
lea ecx, [ebp - 0x3478]
push ecx
lea edx, [ebp - 0x3260]
push edx
push 0x100bbfc
lea eax, [ebp - 0x3464]
push eax
lea ecx, [ebp - 0x3468]
call fcn.01101e20
test eax, eax
jne 0x10da1f4
call fcn.010906a0
mov dword [ebp - 0x4da4], eax
push 0x1104
push 0x100add4
call fcn.010cda00
push eax
push 0x100bbd4
mov ecx, dword [ebp - 0x4da4]
push ecx
mov edx, dword [ebp - 0x4da4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
jmp 0x10da2c7
mov edx, dword [ebp - 0xb4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xb4]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x4da8], eax
mov eax, dword [ebp - 0x4da8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4da8]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10da2c7
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4dac], eax
mov ecx, dword [ebp - 0x4dac]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4dac]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x3580], eax
lea ecx, [ebp - 0x3580]
mov dword [ebp - 0x325c], ecx
push 3
lea edx, [ebp - 0x3478]
push edx
lea eax, [ebp - 0x3260]
push eax
push 0x100bbfc
lea ecx, [ebp - 0x3464]
push ecx
lea ecx, [ebp - 0x3468]
call fcn.01101e20
test eax, eax
jne 0x10da2c7
call fcn.010906a0
mov dword [ebp - 0x4db0], eax
push 0x110e
push 0x100add4
call fcn.010cda00
push eax
push 0x100bbd4
mov edx, dword [ebp - 0x4db0]
push edx
mov eax, dword [ebp - 0x4db0]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
mov eax, dword [ebp - 0xb4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4db4], eax
mov ecx, dword [ebp - 0x4db4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4db4]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10da43c
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x3584], eax
mov dword [ebp - 0x3588], 0
cmp dword [ebp - 0x3584], 0
je 0x10da340
mov ecx, dword [ebp - 0x3584]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3584]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x3588], eax
jmp 0x10da35b
mov ecx, dword [ebp - 0x3584]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3584]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x3588], eax
cmp dword [ebp - 0x3588], 0
je 0x10da380
mov ecx, dword [ebp - 0x3588]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3588]
mov eax, dword [edx + 0x58]
call eax
cmp dword [eax], 6
jne 0x10da37e
jmp 0x10da380
jmp 0x10da342
cmp dword [ebp - 0x3588], 0
je 0x10da3de
push 1
mov ecx, dword [ebp - 0x48]
push ecx
mov edx, dword [ebp - 0x3588]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010ccfd0
test eax, eax
jne 0x10da3dc
call fcn.010906a0
mov dword [ebp - 0x4db8], eax
push 0x1124
push 0x100add4
call fcn.010cda00
push eax
push 0x100bbb4
mov eax, dword [ebp - 0x4db8]
push eax
mov ecx, dword [ebp - 0x4db8]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
jmp 0x10da43a
cmp dword [ebp - 0xa8], 0
je 0x10da43a
push 1
mov ecx, dword [ebp - 0x48]
push ecx
mov edx, dword [ebp - 0xa8]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010ccfd0
test eax, eax
jne 0x10da43a
call fcn.010906a0
mov dword [ebp - 0x4dbc], eax
push 0x112b
push 0x100add4
call fcn.010cda00
push eax
push 0x100bbb4
mov eax, dword [ebp - 0x4dbc]
push eax
mov ecx, dword [ebp - 0x4dbc]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
jmp 0x10da498
cmp dword [ebp - 0xa8], 0
je 0x10da498
push 1
mov ecx, dword [ebp - 0x48]
push ecx
mov edx, dword [ebp - 0xa8]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010ccfd0
test eax, eax
jne 0x10da498
call fcn.010906a0
mov dword [ebp - 0x4dc0], eax
push 0x1136
push 0x100add4
call fcn.010cda00
push eax
push 0x100bbb4
mov eax, dword [ebp - 0x4dc0]
push eax
mov ecx, dword [ebp - 0x4dc0]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3468]
call fcn.01133540
cmp dword [ebp - 0x854], 0
je 0x10da4c5
mov ecx, dword [ebp - 0x854]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x854]
mov eax, dword [edx]
call eax
jmp 0x10daf5c
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x60]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4dc4], eax
mov ecx, dword [ebp - 0x4dc4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4dc4]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10daf5c
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4dc8], eax
mov ecx, dword [ebp - 0x4dc8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4dc8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10daf5c
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x64]
call eax
test eax, eax
jne 0x10da552
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x70]
call eax
test eax, eax
je 0x10dac27
call fcn.010905a0
mov dword [ebp - 0x3790], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4dcc], eax
mov ecx, dword [ebp - 0x4dcc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4dcc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4dd0], eax
push 0
lea ecx, [ebp - 0x3dd0]
push ecx
lea edx, [ebp - 0x4800]
push edx
lea eax, [ebp - 0x3dd4]
push eax
lea ecx, [ebp - 0x3bcc]
push ecx
mov edx, dword [ebp - 0x4dd0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4dd0]
mov edx, dword [eax + 0x18]
call edx
mov word [ebp - 0x3dcc], 0
push 0x1fe
push 0
lea eax, [ebp - 0x3dca]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov word [ebp - 0x47fc], 0
push 0x1fe
push 0
lea ecx, [ebp - 0x47fa]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [eax + 0x14]
call edx
mov dword [ebp - 0x4dd4], eax
mov eax, dword [ebp - 0x4dd4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4dd4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4dd8], eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4dd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4dd8]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x100
lea ecx, [ebp - 0x3dcc]
push ecx
mov edx, dword [ebp - 0x3790]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3790]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
jne 0x10da6a1
call fcn.010906a0
mov dword [ebp - 0x4ddc], eax
push 0x1152
push 0x100add4
call fcn.010cda00
push eax
push 0x100bca4
mov eax, dword [ebp - 0x4ddc]
push eax
mov ecx, dword [ebp - 0x4ddc]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4de0], eax
mov ecx, dword [ebp - 0x4de0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4de0]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4de4], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4de4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4de4]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x100
lea ecx, [ebp - 0x47fc]
push ecx
mov edx, dword [ebp - 0x3790]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3790]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
jne 0x10da74a
call fcn.010906a0
mov dword [ebp - 0x4de8], eax
push 0x1158
push 0x100add4
call fcn.010cda00
push eax
push 0x100bc7c
mov eax, dword [ebp - 0x4de8]
push eax
mov ecx, dword [ebp - 0x4de8]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
mov word [ebp - 0x3994], 0
push 0x1fe
push 0
lea ecx, [ebp - 0x3992]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov word [ebp - 0x3b94], 0
push 0x1fe
push 0
lea edx, [ebp - 0x3b92]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x100785c
lea eax, [ebp - 0x3dcc]
push eax
push 0x100783c
lea ecx, [ebp - 0x3994]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0x10
lea edx, [ebp - 0x47fc]
push edx
push 0x1007818
lea eax, [ebp - 0x3b94]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
push 0
lea ecx, [ebp - 0x3b94]
push ecx
call fcn.010901a0
test eax, eax
jne 0x10da7f2
lea edx, [ebp - 0x3b94]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010ccef0
test eax, eax
jne 0x10da7f2
xor eax, eax
jmp 0x10db3e1
lea ecx, [ebp - 0x45d4]
call fcn.0117e330
mov dword [ebp - 4], 6
lea eax, [ebp - 0x3b94]
push eax
lea ecx, [ebp - 0x3994]
push ecx
lea ecx, [ebp - 0x45d4]
call fcn.01108c50
test eax, eax
jne 0x10da848
mov dword [ebp - 0x4b6c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x45d4]
call fcn.01133540
mov eax, dword [ebp - 0x4b6c]
jmp 0x10db3e1
push 0x200
push 0
lea edx, [ebp - 0x3994]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x200
push 0
lea eax, [ebp - 0x3b94]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
push 0x10077d0
lea ecx, [ebp - 0x47fc]
push ecx
push 0x100783c
lea edx, [ebp - 0x3994]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
lea eax, [ebp - 0x47fc]
push eax
push 0x100bb88
lea ecx, [ebp - 0x3b94]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea edx, [ebp - 0x3b94]
push edx
lea eax, [ebp - 0x3994]
push eax
lea ecx, [ebp - 0x45d4]
call fcn.01108d00
test eax, eax
jne 0x10da8f3
mov dword [ebp - 0x4b70], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x45d4]
call fcn.01133540
mov eax, dword [ebp - 0x4b70]
jmp 0x10db3e1
push 0x200
push 0
lea ecx, [ebp - 0x3994]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x200
push 0
lea edx, [ebp - 0x3b94]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x100bd50
lea eax, [ebp - 0x3dcc]
push eax
push 0x1007714
lea ecx, [ebp - 0x3994]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0x10
lea edx, [ebp - 0x47fc]
push edx
push 0x10076e8
lea eax, [ebp - 0x3b94]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
lea ecx, [ebp - 0x3b94]
push ecx
lea edx, [ebp - 0x3994]
push edx
lea ecx, [ebp - 0x45d4]
call fcn.01108d00
test eax, eax
jne 0x10da99e
mov dword [ebp - 0x4b74], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x45d4]
call fcn.01133540
mov eax, dword [ebp - 0x4b74]
jmp 0x10db3e1
lea eax, [ebp - 0x3994]
push eax
call fcn.0108fb30
mov word [ebp - 0x378c], 0
push 0x1fe
push 0
lea ecx, [ebp - 0x378a]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
lea edx, [ebp - 0x47fc]
push edx
push 0x10073f8
lea eax, [ebp - 0x378c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4dec], eax
mov ecx, dword [ebp - 0x4dec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4dec]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4df0], eax
mov ecx, dword [ebp - 0x4df0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4df0]
mov eax, dword [edx + 0x28]
call eax
push eax
lea ecx, [ebp - 0x45fc]
call fcn.01105360
mov byte [ebp - 4], 7
push 0
mov ecx, dword [ebp - 0x4b7c]
call fcn.010cd930
test eax, eax
je 0x10daab9
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4df4], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4df8], eax
mov ecx, dword [ebp - 0x78]
push ecx
mov edx, dword [ebp - 0x7c]
push edx
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4df4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4df4]
mov eax, dword [edx + 0x14]
call eax
push eax
mov ecx, dword [ebp - 0x4df8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4df8]
mov eax, dword [edx + 0x28]
call eax
push eax
lea ecx, [ebp - 0x45fc]
call fcn.01107bf0
jmp 0x10dab84
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x4e00], eax
mov dword [ebp - 0x4dfc], edx
mov ecx, dword [ebp - 0x4e00]
cmp ecx, dword [ebp - 0x7c]
jne 0x10daae8
mov edx, dword [ebp - 0x4dfc]
cmp edx, dword [ebp - 0x78]
je 0x10daafc
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x4e08], eax
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x4e04], ecx
jmp 0x10dab15
mov edx, dword [ebp - 0x48]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x48]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x4e08], eax
mov dword [ebp - 0x4e04], edx
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4e0c], eax
mov ecx, dword [ebp - 0x4e0c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e0c]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4e10], eax
mov ecx, dword [ebp - 0x4e04]
push ecx
mov edx, dword [ebp - 0x4e08]
push edx
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4e10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e10]
mov eax, dword [edx + 0x14]
call eax
push eax
lea ecx, [ebp - 0x378c]
push ecx
lea ecx, [ebp - 0x45fc]
call fcn.01107090
push 0x30
push 0
lea edx, [ebp - 0x3bc4]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x4b7c]
mov ecx, dword [eax + 0x18]
mov edx, dword [ebp - 0x4b7c]
mov eax, dword [edx + 0x18]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x3bc0], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4e14], eax
mov ecx, dword [ebp - 0x4e14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e14]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x3bbc], eax
mov dword [ebp - 0x3ba4], 2
push 0
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x3bc4]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010e0f10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x45fc]
call fcn.01133540
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x45d4]
call fcn.01133540
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x4e1c], esi
mov dword [ebp - 0x4e18], edi
mov dword [ebp - 0x4e24], eax
mov dword [ebp - 0x4e20], edx
mov ecx, dword [ebp - 0x4e1c]
cmp ecx, dword [ebp - 0x4e24]
jne 0x10dac83
mov edx, dword [ebp - 0x4e18]
cmp edx, dword [ebp - 0x4e20]
je 0x10daf48
call fcn.010905a0
mov dword [ebp - 0x4808], eax
lea ecx, [ebp - 0x4a20]
call fcn.010ff410
mov dword [ebp - 4], 8
mov word [ebp - 0x4b34], 0
push 0xfe
push 0
lea eax, [ebp - 0x4b32]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4e28], eax
mov ecx, dword [ebp - 0x4e28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e28]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4e2c], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4e2c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e2c]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x80
lea ecx, [ebp - 0x4b34]
push ecx
mov edx, dword [ebp - 0x4808]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4808]
mov edx, dword [eax + 0x2c]
call edx
mov word [ebp - 0x4a1c], 0
push 0x1fe
push 0
lea eax, [ebp - 0x4a1a]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4e30], eax
mov ecx, dword [ebp - 0x4e30]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e30]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4e34], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4e34]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e34]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x4808]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4808]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4e38], eax
mov ecx, dword [ebp - 0x4e38]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e38]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4e3c], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4e3c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e3c]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x4808]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4808]
mov eax, dword [edx + 0xc]
call eax
lea ecx, [ebp - 0x4b34]
push ecx
push 0x100bb30
lea edx, [ebp - 0x4a1c]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
mov dword [ebp - 0x4818], 0
xor eax, eax
mov dword [ebp - 0x4814], eax
mov dword [ebp - 0x4810], eax
mov dword [ebp - 0x480c], eax
mov dword [ebp - 0x4a30], 0
xor ecx, ecx
mov dword [ebp - 0x4a2c], ecx
mov dword [ebp - 0x4a28], ecx
mov dword [ebp - 0x4a24], ecx
mov edx, dword [ebp - 0xb4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xb4]
mov edx, dword [eax + 0xc]
call edx
mov dword [ebp - 0x4818], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x4a30], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4e40], eax
mov ecx, dword [ebp - 0x4e40]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e40]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x4804], eax
lea ecx, [ebp - 0x4804]
mov dword [ebp - 0x4a2c], ecx
mov dword [ebp - 0x4a28], 4
push 0
mov edx, dword [ebp - 0x48]
push edx
mov eax, dword [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x4b7c]
call fcn.010ccfd0
test eax, eax
jne 0x10daf36
call fcn.010906a0
mov dword [ebp - 0x4e44], eax
push 0x11c9
push 0x100add4
call fcn.010cda00
push eax
push 0x100bbb4
mov ecx, dword [ebp - 0x4e44]
push ecx
mov edx, dword [ebp - 0x4e44]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a20]
call fcn.01133540
cmp dword [ebp - 0x48], 0
je 0x10daf5c
push 0x100bb1c
mov edx, dword [ebp - 0x48]
push edx
call fcn.010ff2e0
jmp 0x10db07f
cmp dword [ebp - 0xc4], 0
je 0x10db07f
cmp dword [ebp - 0x33c], 1
jne 0x10daff1
cmp dword [ebp - 0xb0], 0
je 0x10daff1
mov eax, dword [ebp - 0x60]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x60]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4e48], eax
mov ecx, dword [ebp - 0x4e48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e48]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10dafec
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x70]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10dafec
mov ecx, dword [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x44]
push edx
mov eax, dword [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x54]
push ecx
mov edx, dword [ebp - 0xb0]
push edx
mov eax, dword [ebp - 0xa4]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x3c]
push edx
mov ecx, dword [ebp - 0x4b7c]
call fcn.010df760
jmp 0x10db07f
lea ecx, [ebp - 0x4b38]
call fcn.010ff410
mov dword [ebp - 4], 9
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1c]
push ecx
mov edx, dword [eax + 0x18]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x14]
push eax
mov ecx, dword [edx + 0x10]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
lea ecx, [ebp - 0x4b38]
call fcn.010ff920
test eax, eax
jne 0x10db06d
call fcn.010906a0
mov dword [ebp - 0x4e4c], eax
push 0x11e4
push 0x100add4
call fcn.010cda00
push eax
push 0x100b670
mov ecx, dword [ebp - 0x4e4c]
push ecx
mov edx, dword [ebp - 0x4e4c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b38]
call fcn.01133540
mov edx, dword [ebp - 0x60]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x60]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x4e50], eax
mov eax, dword [ebp - 0xcc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x4e54], eax
mov ecx, dword [ebp - 0x4e54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e54]
mov eax, dword [edx + 0x28]
call eax
mov esi, eax
mov ecx, dword [ebp - 0x4e50]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e50]
mov eax, dword [edx + 0x28]
call eax
cmp eax, esi
jne 0x10db12e
push 0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0xcc]
push edx
mov eax, dword [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x4b7c]
call fcn.010c9780
test eax, eax
jne 0x10db12e
call fcn.010906a0
mov dword [ebp - 0x4e58], eax
push 0x11f0
push 0x100add4
call fcn.010cda00
push eax
push 0x100baec
mov ecx, dword [ebp - 0x4e58]
push ecx
mov edx, dword [ebp - 0x4e58]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x48]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x48]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x4e5c], eax
mov eax, dword [ebp - 0x4e5c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4e5c]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10db1ac
call fcn.010905a0
mov dword [ebp - 0x4b3c], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4e60], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x4e60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e60]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x4b3c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4b3c]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xbc]
call eax
mov dword [ebp - 0x4b50], eax
xor ecx, ecx
mov byte [ebp - 0x4b75], cl
lea edx, [ebp - 0x4b75]
push edx
mov eax, dword [ebp - 0x4b50]
push eax
lea ecx, [ebp - 0x4b4c]
call fcn.01086de0
mov dword [ebp - 4], 0xa
push 0x1001464
lea ecx, [ebp - 0x4b4c]
call fcn.0109a620
lea ecx, [ebp - 0x4b4c]
call fcn.01086e30
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xb8]
call eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b4c]
call fcn.01086e10
push 0x10049ac
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x38]
call eax
push 0x64
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp - 0xc4], 0
je 0x10db362
cmp dword [ebp - 0xb0], 0
je 0x10db362
cmp dword [ebp - 0x33c], 0
jne 0x10db362
mov ecx, dword [ebp - 0xb0]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0xb4], edx
mov eax, dword [ebp - 0xb4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4e64], eax
mov ecx, dword [ebp - 0x4e64]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e64]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x90], eax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], edx
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4e68], eax
mov ecx, dword [ebp - 0x4e68]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4e68]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x90]
mov dword [ecx + 8], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x8c]
mov dword [eax + 0x10], ecx
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x14], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xbc]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp - 0xb8]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xcc], eax
jmp 0x10db381
cmp dword [ebp - 0x33c], 1
jne 0x10db37f
mov ecx, dword [ebp - 0xac]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xac]
mov eax, dword [edx]
call eax
jmp 0x10db381
jmp 0x10db386
jmp 0x10d735c
cmp dword [ebp - 0x64], 1
jne 0x10db3c3
cmp dword [ebp - 0xc4], 0
je 0x10db3c3
cmp dword [ebp - 0xa0], 0
je 0x10db3c3
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa0]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4b54], eax
mov ecx, dword [ebp - 0x4b54]
push ecx
call fcn.010c34d0
cmp dword [ebp - 0xa0], 0
je 0x10db3de
mov edx, dword [ebp - 0xa0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa0]
mov edx, dword [eax]
call edx
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8