Function at 0x10091e20
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x10172e9c
mov eax, dword fs:[0]
push eax
sub esp, 0x218
mov eax, dword [0x101b01e4]
xor eax, esp
mov dword [esp + 0x214], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x101b01e4]
xor eax, esp
push eax
lea eax, [esp + 0x22c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x23c]
mov edx, dword [esp + 0x24c]
mov esi, dword [esp + 0x250]
mov ebp, ecx
mov ecx, dword [esp + 0x244]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x258]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x260]
mov dword [esp + 0x28], ecx
xor ebx, ebx
mov ecx, ebp
mov dword [esp + 0x64], ebp
mov dword [esp + 0x34], esi
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], edx
mov dword [esp + 0x18], ebx
call fcn.10033b60
lea edi, [ebp + 4]
mov ecx, edi
mov dword [esp + 0x234], ebx
call fcn.1009f900
mov dword [ebp + 0x1c], 0x10186754
mov dword [ebp + 0x20], 0x1018675c
mov dword [ebp + 0x24], 0x10186764
mov dword [ebp + 0x28], 0x10184a1c
mov dword [edi], 0x10186908
mov dword [ebp], 0x10186860
mov dword [ebp + 0x1c], 0x10186858
mov dword [ebp + 0x20], 0x10186850
mov dword [ebp + 0x24], 0x10186830
mov dword [ebp + 0x28], 0x10186824
lea edi, [ebp + 0x2c]
mov ecx, 0x2da
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x24]
push 0x114a
lea eax, [ebp + 0xb94]
push ecx
push eax
call fcn.1014a220
mov esi, dword [esp + 0x34]
lea edi, [ebp + 0x1cde]
mov ecx, 0xd
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.KERNEL32.DLL_InitializeCriticalSection]
add esp, 0xc
lea edx, [ebp + 0x1d18]
mov edi, 0x1018458c
push edx
mov dword [ebp + 0x1d14], edi
call esi
lea ecx, [ebp + 0x1d30]
mov byte [esp + 0x234], 2
call fcn.100ec346
mov dword [ebp + 0x1d5c], 1
mov word [ebp + 0x1d63], 3
mov dword [ebp + 0x1d65], ebx
mov dword [ebp + 0x1d69], ebx
mov word [ebp + 0x1d6d], bx
mov dword [ebp + 0x1d6f], ebx
mov byte [ebp + 0x1d60], 0x54
mov byte [ebp + 0x1d61], 0x50
mov byte [ebp + 0x1d62], 0x54
mov dword [ebp + 0x1d73], ebx
mov dword [ebp + 0x1d77], ebx
mov dword [ebp + 0x1d7b], ebx
mov dword [ebp + 0x1d7f], ebx
mov dword [ebp + 0x1d83], ebx
mov dword [ebp + 0x1d87], ebx
mov dword [ebp + 0x1d8b], ebx
mov dword [ebp + 0x1d8f], ebx
mov dword [ebp + 0x1d93], ebx
mov dword [ebp + 0x1d98], 0x10186784
mov dword [ebp + 0x1d9c], edi
lea eax, [ebp + 0x1da0]
push eax
call esi
mov byte [ebp + 0x1db8], bl
lea ecx, [ebp + 0x1dc4]
mov dword [ebp + 0x1dbc], 0x10186784
push ecx
mov dword [ebp + 0x1dc0], edi
call esi
mov byte [ebp + 0x1ddc], bl
lea edx, [ebp + 0x1de8]
mov dword [ebp + 0x1de0], 0x10186784
push edx
mov dword [ebp + 0x1de4], edi
call esi
mov byte [ebp + 0x1e00], bl
mov byte [ebp + 0x1e04], bl
mov dword [ebp + 0x1e08], ebx
mov dword [ebp + 0x1e0c], ebx
mov dword [ebp + 0x1e10], ebx
mov dword [ebp + 0x1e14], ebx
mov dword [ebp + 0x1e1c], ebx
mov dword [ebp + 0x1e20], ebx
mov dword [ebp + 0x1e24], ebx
mov dword [ebp + 0x1e2c], ebx
mov dword [ebp + 0x1e30], ebx
mov dword [ebp + 0x1e34], ebx
lea eax, [ebp + 0x1e44]
mov dword [ebp + 0x1e38], 0x10185b2c
push eax
mov dword [ebp + 0x1e40], edi
call esi
mov dword [ebp + 0x1e60], ebx
mov dword [ebp + 0x1e64], ebx
mov ecx, dword [esp + 0x240]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x248]
mov dword [ebp + 0x1e68], ecx
lea ecx, [ebp + 0x1e78]
mov byte [esp + 0x234], 9
mov dword [ebp + 0x1e6c], edx
mov dword [ebp + 0x1e70], eax
call fcn.10125a16
lea ecx, [ebp + 0x20e0]
mov byte [esp + 0x234], 0xa
call fcn.101251c7
mov dword [ebp + 0x2198], ebx
mov dword [ebp + 0x219c], ebx
lea ecx, [ebp + 0x21a8]
mov dword [ebp + 0x21a0], 0x10186784
push ecx
mov dword [ebp + 0x21a4], edi
call esi
mov byte [ebp + 0x21c0], bl
lea edx, [ebp + 0x21cc]
mov dword [ebp + 0x21c4], 0x10186784
push edx
mov dword [ebp + 0x21c8], edi
call esi
mov byte [ebp + 0x21e4], bl
lea eax, [ebp + 0x21f0]
mov dword [ebp + 0x21e8], 0x10186784
push eax
mov dword [ebp + 0x21ec], edi
call esi
mov byte [ebp + 0x2208], bl
lea ecx, [ebp + 0x2214]
mov dword [ebp + 0x220c], 0x10186784
mov dword [ebp + 0x2210], edi
push ecx
call esi
mov byte [ebp + 0x222c], 1
mov byte [ebp + 0x2230], bl
mov byte [ebp + 0x2231], bl
mov dl, byte [ebp + 0x2236]
mov dword [ebp + 0x2232], ebx
mov byte [ebp + 0x2237], bl
mov dword [ebp + 0x2238], ebx
mov word [ebp + 0x223c], bx
mov dword [ebp + 0x223e], ebx
mov word [ebp + 0x2242], bx
mov dword [ebp + 0x2244], ebx
mov word [ebp + 0x2248], bx
and dl, 0xf1
or dl, 0x11
mov byte [ebp + 0x2236], dl
mov dword [ebp + 0x2250], ebx
mov word [ebp + 0x2254], bx
mov dword [ebp + 0x2256], ebx
mov word [ebp + 0x225a], bx
mov eax, 0xf
mov dword [ebp + 0x2274], eax
mov dword [ebp + 0x2270], ebx
mov byte [ebp + 0x2260], bl
mov dword [ebp + 0x2290], eax
mov dword [ebp + 0x228c], ebx
mov byte [ebp + 0x227c], bl
mov dword [ebp + 0x2294], ebx
mov dword [ebp + 0x2298], ebx
lea eax, [ebp + 0x22ac]
mov dword [ebp + 0x22a0], 0x10185b2c
push eax
mov dword [ebp + 0x22a8], edi
call esi
mov dword [ebp + 0x22c8], ebx
mov dword [ebp + 0x22cc], ebx
lea ecx, [ebp + 0x22d8]
mov dword [ebp + 0x22d0], 0x10186784
push ecx
mov dword [ebp + 0x22d4], edi
call esi
lea edx, [ebp + 0x22fc]
mov dword [ebp + 0x22f4], 0x10186784
push edx
mov dword [ebp + 0x22f8], edi
call esi
mov dword [ebp + 0x2314], ebx
mov dword [ebp + 0x2318], ebx
mov dword [ebp + 0x2320], ebx
lea eax, [ebp + 0x232c]
mov dword [ebp + 0x2324], 0x10186784
push eax
mov dword [ebp + 0x2328], edi
call esi
mov byte [ebp + 0x2344], bl
mov dword [ebp + 0x2348], ebx
mov dword [ebp + 0x234c], ebx
mov dword [ebp + 0x2350], ebx
mov dword [ebp + 0x2354], ebx
mov dword [ebp + 0x2358], ebx
mov dword [ebp + 0x235c], ebx
mov dword [ebp + 0x2360], ebx
mov dword [ebp + 0x2364], ebx
mov dword [ebp + 0x2368], ebx
mov dword [ebp + 0x236c], ebx
mov dword [ebp + 0x2370], ebx
mov dword [ebp + 0x2374], ebx
mov dword [ebp + 0x2378], ebx
mov dword [ebp + 0x237c], ebx
lea ecx, [ebp + 0x2388]
mov dword [ebp + 0x2380], 0x10186784
push ecx
mov dword [ebp + 0x2384], edi
call esi
mov dword [ebp + 0x23a4], ebx
mov dword [ebp + 0x23a8], ebx
lea edx, [ebp + 0x23b4]
mov dword [ebp + 0x23ac], 0x10186784
push edx
mov dword [ebp + 0x23b0], edi
call esi
lea eax, [ebp + 0x23d8]
mov dword [ebp + 0x23d0], 0x10186784
push eax
mov dword [ebp + 0x23d4], edi
call esi
mov cl, byte [esp + 0x25c]
mov edx, dword [esp + 0x30]
mov byte [ebp + 0x2408], cl
lea ecx, [ebp + 0x240c]
push edx
mov byte [esp + 0x238], 0x18
mov byte [ebp + 0x23f4], 1
mov dword [ebp + 0x23f8], ebx
mov dword [ebp + 0x2400], ebx
mov dword [ebp + 0x2404], ebx
mov byte [ebp + 0x2409], bl
mov byte [ebp + 0x240a], bl
mov byte [ebp + 0x240b], bl
call fcn.10010a20
mov byte [ebp + 0x2530], bl
lea eax, [ebp + 0x253c]
mov dword [ebp + 0x2534], 0x10186784
push eax
mov dword [ebp + 0x2538], edi
call esi
mov byte [ebp + 0x2554], bl
mov dword [ebp + 0x255c], ebx
mov dword [ebp + 0x2578], 0xf
mov dword [ebp + 0x2574], ebx
mov byte [ebp + 0x2564], bl
lea ecx, [ebp + 0x2584]
mov dword [ebp + 0x257c], 0x10186784
push ecx
mov dword [ebp + 0x2580], edi
call esi
lea ecx, [ebp + 0x25a8]
mov byte [esp + 0x234], 0x1c
mov byte [ebp + 0x25a0], bl
call fcn.1000a580
mov byte [ebp + 0x2618], bl
mov byte [ebp + 0x2619], bl
mov dword [ebp + 0x261c], ebx
mov byte [ebp + 0x2624], bl
lea edx, [ebp + 0x2634]
mov dword [ebp + 0x2628], 0x10185b2c
push edx
mov dword [ebp + 0x2630], edi
call esi
mov dword [ebp + 0x2650], ebx
mov dword [ebp + 0x2654], ebx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [ebp + 0x2658]
mov byte [esp + 0x238], 0x1e
call fcn.1003a0a0
lea eax, [ebp + 0x2680]
mov dword [ebp + 0x2678], 0x10186784
push eax
mov dword [ebp + 0x267c], edi
call esi
mov byte [ebp + 0x2698], bl
mov byte [esp + 0x234], 0x20
mov byte [ebp + 0x269c], bl
lea eax, [ebp + 0x2410]
push eax
call fcn.100e4bfc
push 0x1260
mov dword [ebp + 0x26a0], eax
call fcn.1014979e
add esp, 8
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x234], 0x21
je 0x100924ee
mov ecx, dword [ebp + 0x26a0]
mov edx, dword [esp + 0x20]
push ecx
push edx
mov edx, dword [esp + 0x2c]
lea ecx, [ebp + 0x24]
push ecx
mov ecx, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push ecx
mov ecx, eax
call fcn.100cd530
jmp 0x100924f0
xor eax, eax
mov dword [ebp + 0x26a4], eax
mov byte [ebp + 0x26a8], bl
mov byte [ebp + 0x26a9], bl
mov byte [ebp + 0x26aa], 1
mov byte [ebp + 0x26ab], 1
mov byte [ebp + 0x26ac], bl
mov byte [ebp + 0x26ad], bl
mov byte [ebp + 0x26ae], bl
mov byte [ebp + 0x26af], bl
mov dword [ebp + 0x26b0], ebx
mov byte [ebp + 0x26b4], bl
mov byte [ebp + 0x26b5], bl
mov byte [ebp + 0x26b6], bl
lea ecx, [ebp + 0x26b8]
mov byte [esp + 0x234], 0x20
call fcn.100e6dce
mov dword [ebp + 0x26e4], ebx
mov byte [ebp + 0x26e8], 1
mov byte [ebp + 0x26e9], bl
mov dword [ebp + 0x26ec], ebx
mov byte [ebp + 0x26f0], 1
mov byte [ebp + 0x26fc], bl
mov dword [ebp + 0x2700], ebx
mov byte [ebp + 0x2704], bl
mov dword [ebp + 0x2708], ebx
mov dword [ebp + 0x270c], ebx
lea edx, [ebp + 0x271c]
mov dword [ebp + 0x2710], 0x10185b2c
push edx
mov dword [ebp + 0x2718], edi
call esi
mov dword [ebp + 0x2738], ebx
mov dword [ebp + 0x273c], ebx
lea eax, [ebp + 0x274c]
mov dword [ebp + 0x2740], 0x10185b2c
push eax
mov dword [ebp + 0x2748], edi
call esi
mov dword [ebp + 0x2768], ebx
mov dword [ebp + 0x276c], ebx
lea ecx, [ebp + 0x277c]
mov dword [ebp + 0x2770], 0x10185b2c
push ecx
mov dword [ebp + 0x2778], edi
call esi
mov dword [ebp + 0x2798], ebx
mov dword [ebp + 0x279c], ebx
lea edx, [ebp + 0x27a8]
mov dword [ebp + 0x27a0], 0x10186784
push edx
mov dword [ebp + 0x27a4], edi
call esi
mov byte [ebp + 0x27c0], bl
lea eax, [ebp + 0x27cc]
mov dword [ebp + 0x27c4], 0x10186784
push eax
mov dword [ebp + 0x27c8], edi
call esi
mov byte [ebp + 0x27e4], bl
lea ecx, [ebp + 0x27f0]
mov dword [ebp + 0x27e8], 0x10186784
push ecx
mov dword [ebp + 0x27ec], edi
call esi
mov dword [ebp + 0x2808], ebx
lea edx, [ebp + 0x2814]
mov dword [ebp + 0x280c], 0x10186784
push edx
mov dword [ebp + 0x2810], edi
call esi
mov dword [ebp + 0x282c], ebx
mov dword [ebp + 0x2830], 0x10186784
mov dword [ebp + 0x2834], edi
lea eax, [ebp + 0x2838]
push eax
call esi
mov dword [ebp + 0x2850], ebx
lea ecx, [ebp + 0x285c]
mov dword [ebp + 0x2854], 0x10186784
push ecx
mov dword [ebp + 0x2858], edi
call esi
mov dword [ebp + 0x2874], ebx
lea edx, [ebp + 0x2880]
mov dword [ebp + 0x2878], 0x10186784
push edx
mov dword [ebp + 0x287c], edi
call esi
mov dword [ebp + 0x2898], ebx
lea eax, [ebp + 0x28a4]
mov dword [ebp + 0x289c], 0x10186784
push eax
mov dword [ebp + 0x28a0], edi
call esi
mov byte [ebp + 0x28bc], bl
lea ecx, [ebp + 0x28c8]
mov dword [ebp + 0x28c0], 0x10186784
push ecx
mov dword [ebp + 0x28c4], edi
call esi
mov word [ebp + 0x28e0], bx
lea edx, [ebp + 0x28ec]
mov dword [ebp + 0x28e4], 0x10186784
push edx
mov dword [ebp + 0x28e8], edi
call esi
mov byte [ebp + 0x2904], bl
lea eax, [ebp + 0x2910]
mov dword [ebp + 0x2908], 0x10186784
push eax
mov dword [ebp + 0x290c], edi
call esi
mov byte [ebp + 0x2928], bl
lea ecx, [ebp + 0x2934]
mov dword [ebp + 0x292c], 0x10186784
push ecx
mov dword [ebp + 0x2930], edi
call esi
mov dword [ebp + 0x294c], ebx
lea edx, [ebp + 0x2958]
mov dword [ebp + 0x2950], 0x10186784
push edx
mov dword [ebp + 0x2954], edi
call esi
mov byte [ebp + 0x2970], bl
lea eax, [ebp + 0x297c]
mov dword [ebp + 0x2974], 0x10186784
push eax
mov dword [ebp + 0x2978], edi
call esi
mov byte [ebp + 0x2994], bl
lea ecx, [ebp + 0x29a4]
mov dword [ebp + 0x2998], 0x10185b2c
push ecx
mov dword [ebp + 0x29a0], edi
call esi
mov dword [ebp + 0x29c0], ebx
mov dword [ebp + 0x29c4], ebx
lea edx, [ebp + 0x29d0]
mov dword [ebp + 0x29c8], 0x10186784
push edx
mov dword [ebp + 0x29cc], edi
call esi
mov word [ebp + 0x29e8], bx
lea eax, [ebp + 0x29f4]
mov dword [ebp + 0x29ec], 0x10186784
push eax
mov dword [ebp + 0x29f0], edi
call esi
mov word [ebp + 0x2a0c], bx
lea ecx, [ebp + 0x2a18]
mov dword [ebp + 0x2a10], 0x10186784
push ecx
mov dword [ebp + 0x2a14], edi
call esi
mov word [ebp + 0x2a30], bx
lea edx, [ebp + 0x2a3c]
mov dword [ebp + 0x2a34], 0x10186784
push edx
mov dword [ebp + 0x2a38], edi
call esi
mov word [ebp + 0x2a54], bx
lea eax, [ebp + 0x2a60]
mov dword [ebp + 0x2a58], 0x10186784
push eax
mov dword [ebp + 0x2a5c], edi
call esi
mov dword [ebp + 0x2a78], ebx
lea ecx, [ebp + 0x2a84]
mov dword [ebp + 0x2a7c], 0x10186784
push ecx
mov dword [ebp + 0x2a80], edi
call esi
mov dword [ebp + 0x2a9c], ebx
lea edx, [ebp + 0x2aa8]
mov dword [ebp + 0x2aa0], 0x10186784
push edx
mov dword [ebp + 0x2aa4], edi
call esi
mov dword [ebp + 0x2ac0], ebx
lea eax, [ebp + 0x2acc]
mov dword [ebp + 0x2ac4], 0x10186784
push eax
mov dword [ebp + 0x2ac8], edi
call esi
mov dword [ebp + 0x2ae4], ebx
lea ecx, [ebp + 0x2af0]
mov dword [ebp + 0x2ae8], 0x10186784
push ecx
mov dword [ebp + 0x2aec], edi
call esi
mov dword [ebp + 0x2b08], ebx
lea edx, [ebp + 0x2b14]
mov dword [ebp + 0x2b0c], 0x10186784
push edx
mov dword [ebp + 0x2b10], edi
call esi
mov dword [ebp + 0x2b2c], ebx
lea eax, [ebp + 0x2b38]
mov dword [ebp + 0x2b30], 0x10186784
push eax
mov dword [ebp + 0x2b34], edi
call esi
mov dword [ebp + 0x2b50], ebx
lea ecx, [ebp + 0x2b5c]
mov dword [ebp + 0x2b54], 0x10186784
push ecx
mov dword [ebp + 0x2b58], edi
call esi
mov dword [ebp + 0x2b74], ebx
mov dword [ebp + 0x2b78], 0x10186784
mov dword [ebp + 0x2b7c], edi
lea edx, [ebp + 0x2b80]
push edx
call esi
mov dword [ebp + 0x2b98], ebx
lea eax, [ebp + 0x2ba4]
mov dword [ebp + 0x2b9c], 0x10186784
push eax
mov dword [ebp + 0x2ba0], edi
call esi
mov byte [ebp + 0x2bbc], bl
lea ecx, [ebp + 0x2bc8]
mov dword [ebp + 0x2bc0], 0x10186784
push ecx
mov dword [ebp + 0x2bc4], edi
call esi
mov dword [ebp + 0x2be0], ebx
lea edx, [ebp + 0x2bec]
mov dword [ebp + 0x2be4], 0x10186784
push edx
mov dword [ebp + 0x2be8], edi
call esi
mov word [ebp + 0x2c04], bx
lea eax, [ebp + 0x2c10]
mov dword [ebp + 0x2c08], 0x10186784
push eax
mov dword [ebp + 0x2c0c], edi
call esi
mov word [ebp + 0x2c28], bx
lea ecx, [ebp + 0x2c34]
mov dword [ebp + 0x2c2c], 0x10186784
push ecx
mov dword [ebp + 0x2c30], edi
call esi
mov word [ebp + 0x2c4c], bx
lea edx, [ebp + 0x2c58]
mov dword [ebp + 0x2c50], 0x10186784
push edx
mov dword [ebp + 0x2c54], edi
call esi
mov word [ebp + 0x2c70], bx
lea eax, [ebp + 0x2c7c]
mov dword [ebp + 0x2c74], 0x10186784
push eax
mov dword [ebp + 0x2c78], edi
call esi
mov word [ebp + 0x2c94], bx
lea ecx, [ebp + 0x2ca0]
mov dword [ebp + 0x2c98], 0x10186784
push ecx
mov dword [ebp + 0x2c9c], edi
call esi
mov word [ebp + 0x2cb8], bx
lea edx, [ebp + 0x2cc4]
mov dword [ebp + 0x2cbc], 0x10186784
push edx
mov dword [ebp + 0x2cc0], edi
call esi
mov word [ebp + 0x2cdc], bx
lea eax, [ebp + 0x2ce8]
mov dword [ebp + 0x2ce0], 0x10186784
push eax
mov dword [ebp + 0x2ce4], edi
call esi
mov word [ebp + 0x2d00], bx
lea ecx, [ebp + 0x2d0c]
mov dword [ebp + 0x2d04], 0x10186784
push ecx
mov dword [ebp + 0x2d08], edi
call esi
mov word [ebp + 0x2d24], bx
lea edx, [ebp + 0x2d30]
mov dword [ebp + 0x2d28], 0x10186784
push edx
mov dword [ebp + 0x2d2c], edi
call esi
mov word [ebp + 0x2d48], bx
lea eax, [ebp + 0x2d54]
mov dword [ebp + 0x2d4c], 0x10186784
push eax
mov dword [ebp + 0x2d50], edi
call esi
mov word [ebp + 0x2d6c], bx
lea ecx, [ebp + 0x2d78]
mov dword [ebp + 0x2d70], 0x10186784
push ecx
mov dword [ebp + 0x2d74], edi
call esi
mov word [ebp + 0x2d90], bx
lea edx, [ebp + 0x2d9c]
mov dword [ebp + 0x2d94], 0x10186784
push edx
mov dword [ebp + 0x2d98], edi
call esi
mov word [ebp + 0x2db4], bx
lea eax, [ebp + 0x2dc0]
mov dword [ebp + 0x2db8], 0x10186784
push eax
mov dword [ebp + 0x2dbc], edi
call esi
mov word [ebp + 0x2dd8], bx
lea ecx, [ebp + 0x2de4]
mov dword [ebp + 0x2ddc], 0x10186784
push ecx
mov dword [ebp + 0x2de0], edi
call esi
mov word [ebp + 0x2dfc], bx
lea edx, [ebp + 0x2e08]
mov dword [ebp + 0x2e00], 0x10186784
push edx
mov dword [ebp + 0x2e04], edi
call esi
mov word [ebp + 0x2e20], bx
lea eax, [ebp + 0x2e2c]
mov dword [ebp + 0x2e24], 0x10186784
push eax
mov dword [ebp + 0x2e28], edi
call esi
mov word [ebp + 0x2e44], bx
lea ecx, [ebp + 0x2e50]
mov dword [ebp + 0x2e48], 0x10186784
push ecx
mov dword [ebp + 0x2e4c], edi
call esi
mov word [ebp + 0x2e68], bx
lea edx, [ebp + 0x2e74]
mov dword [ebp + 0x2e6c], 0x10186784
push edx
mov dword [ebp + 0x2e70], edi
call esi
mov word [ebp + 0x2e8c], bx
lea eax, [ebp + 0x2e98]
mov dword [ebp + 0x2e90], 0x10186784
push eax
mov dword [ebp + 0x2e94], edi
call esi
mov word [ebp + 0x2eb0], bx
mov dword [ebp + 0x2eb4], ebx
mov dword [ebp + 0x2eb8], edi
lea ecx, [ebp + 0x2ebc]
push ecx
call esi
lea edx, [ebp + 0x2ed8]
push edx
mov dword [ebp + 0x2ed4], edi
call esi
lea ecx, [ebp + 0x2ef0]
mov byte [esp + 0x234], 0x59
call fcn.1000a580
mov dword [ebp + 0x2f78], 0xf
mov dword [ebp + 0x2f74], ebx
mov byte [ebp + 0x2f64], bl
lea eax, [ebp + 0x2f84]
mov dword [ebp + 0x2f7c], 0x101867c0
push eax
mov dword [ebp + 0x2f80], edi
call esi
mov dword [ebp + 0x2fb4], 0xf
mov dword [ebp + 0x2fb0], ebx
mov byte [ebp + 0x2fa0], bl
mov dword [ebp + 0x2fb8], ebx
mov byte [ebp + 0x2fbc], bl
mov byte [ebp + 0x2fbd], bl
mov byte [ebp + 0x2fbe], bl
lea ecx, [ebp + 0x2fc8]
mov dword [ebp + 0x2fc0], 0x10186784
push ecx
mov dword [ebp + 0x2fc4], edi
call esi
mov byte [ebp + 0x2fe0], bl
lea edx, [ebp + 0x2fec]
mov dword [ebp + 0x2fe4], 0x10186784
push edx
mov dword [ebp + 0x2fe8], edi
call esi
mov byte [ebp + 0x3004], bl
mov byte [ebp + 0x3008], bl
mov byte [ebp + 0x3009], bl
mov dword [ebp + 0x3010], ebx
mov dword [ebp + 0x3014], ebx
lea eax, [ebp + 0x3020]
mov dword [ebp + 0x3018], 0x10186784
push eax
mov dword [ebp + 0x301c], edi
call esi
mov byte [ebp + 0x3038], bl
lea ecx, [ebp + 0x3044]
mov dword [ebp + 0x303c], 0x10186784
push ecx
mov dword [ebp + 0x3040], edi
call esi
mov byte [ebp + 0x305c], bl
lea edx, [ebp + 0x3068]
mov dword [ebp + 0x3060], 0x10186784
push edx
mov dword [ebp + 0x3064], edi
call esi
mov byte [ebp + 0x3080], bl
lea eax, [ebp + 0x3088]
push eax
mov dword [ebp + 0x3084], edi
call esi
lea ecx, [ebp + 0x30a4]
push ecx
mov dword [ebp + 0x30a0], edi
call esi
mov dword [ebp + 0x30bc], ebx
mov byte [esp + 0x234], 0x63
mov dword [ebp + 0x30c0], ebx
mov dword [ebp + 0x30c4], ebx
mov dword [ebp + 0x30c8], ebx
mov dword [ebp + 0x30cc], ebx
or esi, 0xffffffff
mov dword [ebp + 0x30d0], esi
mov dword [ebp + 0x30d8], ebx
mov dword [ebp + 0x30dc], ebx
mov dword [ebp + 0x30e0], ebx
mov dword [ebp + 0x30e8], ebx
mov dword [ebp + 0x30ec], ebx
mov dword [ebp + 0x30f0], ebx
mov dword [ebp + 0x30f4], ebx
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea ecx, [ebp + 0x3150]
mov dword [ebp + 0x30f8], eax
mov byte [ebp + 0x3104], bl
mov dword [ebp + 0x3108], ebx
mov dword [ebp + 0x310c], ebx
mov dword [ebp + 0x3110], ebx
mov dword [ebp + 0x3114], ebx
mov dword [ebp + 0x3118], ebx
mov dword [ebp + 0x3120], ebx
mov dword [ebp + 0x3124], ebx
mov dword [ebp + 0x3128], ebx
mov dword [ebp + 0x312c], ebx
mov dword [ebp + 0x3130], ebx
mov dword [ebp + 0x3134], ebx
mov dword [ebp + 0x3138], ebx
mov dword [ebp + 0x313c], ebx
mov dword [ebp + 0x3140], ebx
mov dword [ebp + 0x3144], ebx
mov dword [ebp + 0x3148], ebx
mov dword [ebp + 0x314c], ebx
call fcn.100536c0
mov dword [ebp + 0x3210], ebx
mov dword [ebp + 0x3214], ebx
mov byte [ebp + 0x3218], bl
mov dword [ebp + 0x321c], ebx
mov dword [ebp + 0x3220], ebx
mov dword [ebp + 0x3224], ebx
mov dword [ebp + 0x3228], ebx
mov dword [ebp + 0x322c], ebx
mov dword [ebp + 0x3230], ebx
mov dword [ebp + 0x3234], ebx
mov dword [ebp + 0x3238], esi
lea esi, [ebp + 0x27a8]
push esi
mov byte [esp + 0x238], 0x64
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
push esi
mov byte [ebp + 0x27c0], 1
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
lea esi, [ebp + 0x1b9e]
mov eax, esi
mov dword [esp + 0x88], 0xf
mov dword [esp + 0x84], ebx
mov byte [esp + 0x74], bl
lea edi, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x10092ef4
sub eax, edi
push eax
push esi
lea ecx, [esp + 0x78]
call fcn.10001fe0
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x78]
push edx
lea ecx, [ebp + 0x225c]
mov byte [esp + 0x240], 0x65
call fcn.10001ec0
cmp dword [esp + 0x88], 0x10
mov byte [esp + 0x234], 0x64
jb 0x10092f44
mov eax, dword [esp + 0x74]
push eax
call fcn.10149646
add esp, 4
lea esi, [ebp + 0x1bbe]
mov eax, esi
mov dword [esp + 0xc0], 0xf
mov dword [esp + 0xbc], ebx
mov byte [esp + 0xac], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x10092f68
sub eax, edx
push eax
push esi
lea ecx, [esp + 0xb0]
call fcn.10001fe0
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0xb0]
push ecx
lea ecx, [ebp + 0x2278]
mov byte [esp + 0x240], 0x66
call fcn.10001ec0
mov edi, 0x10
cmp dword [esp + 0xc0], edi
mov byte [esp + 0x234], 0x64
jb 0x10092fc5
mov edx, dword [esp + 0xac]
push edx
call fcn.10149646
add esp, 4
lea esi, [ebp + 0x871]
mov eax, esi
mov dword [esp + 0xe4], 0xf
mov dword [esp + 0xe0], ebx
mov byte [esp + 0xd0], bl
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x10092ff0
sub eax, edx
push eax
push esi
lea ecx, [esp + 0xd4]
call fcn.10001fe0
movzx eax, word [ebp + 0x971]
push eax
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x17c]
call fcn.10007390
cmp dword [esp + 0xe4], edi
mov edx, dword [eax]
mov dword [ebp + 0x2250], edx
movzx eax, word [eax + 4]
mov word [ebp + 0x2254], ax
jb 0x10093051
mov ecx, dword [esp + 0xd0]
push ecx
call fcn.10149646
add esp, 4
lea esi, [ebp + 0xb98]
mov eax, esi
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x10093075
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x94]
call fcn.10001fe0
movzx edx, word [ebp + 0x1b9c]
push edx
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x182]
call fcn.10007390
cmp dword [esp + 0xa4], edi
mov ecx, dword [eax]
mov dword [ebp + 0x2256], ecx
movzx edx, word [eax + 4]
mov word [ebp + 0x225a], dx
jb 0x100930d6
mov eax, dword [esp + 0x90]
push eax
call fcn.10149646
add esp, 4
mov eax, dword [ebp + 0xb94]
cmp eax, 3
ja case.0x100930e1.0
jmp dword [eax*4 + 0x10093a58]
mov dword [ebp + 0x224c], 6
jmp 0x10093116
mov dword [ebp + 0x224c], 4
jmp 0x10093116
mov dword [ebp + 0x224c], 3
jmp 0x10093116
mov dword [ebp + 0x224c], 1
lea esi, [ebp + 0x2388]
push esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
push esi
mov byte [ebp + 0x23a0], bl
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
push ebx
call fcn.10149d08
add esp, 4
lea esi, [ebp + 0x22d8]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
push esi
mov dword [ebp + 0x22f0], edi
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
lea esi, [ebp + 0x242c]
push esi
call fcn.100f0f55
add esp, 4
cmp byte [esp + 0x25c], 2
jne 0x100931f6
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
mov dword [ebp + 0x2358], ecx
mov edx, dword [eax + 4]
mov dword [ebp + 0x235c], edx
mov ecx, dword [eax + 8]
mov dword [ebp + 0x2360], ecx
mov edx, dword [eax + 0xc]
lea edi, [ebp + 0x30a0]
mov dword [ebp + 0x2364], edx
mov eax, dword [eax + 0x10]
mov dword [esp + 0x6c], edi
add edi, 4
push edi
mov dword [ebp + 0x2368], eax
mov dword [esp + 0x6c], 0x1018442c
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
push 0xffffffffffffffff
push ebx
push esi
lea ecx, [ebp + 0x2560]
mov byte [esp + 0x240], 0x67
call fcn.10001ec0
push edi
mov byte [esp + 0x238], 0x64
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov ecx, dword [esp + 0x264]
mov dword [ebp + 0x2eb4], ecx
jmp 0x1009334d
lea eax, [ebp + 0x30a0]
lea edi, [eax + 4]
push edi
mov dword [esp + 0xc8], 0x1018442c
mov dword [esp + 0xcc], eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
push 0x10185a3c
lea edx, [esp + 0x184]
push esi
push edx
mov byte [esp + 0x240], 0x68
call fcn.10002a70
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x2560]
mov byte [esp + 0x240], 0x69
call fcn.10001ec0
cmp dword [esp + 0x198], 0x10
jb 0x10093267
mov eax, dword [esp + 0x184]
push eax
call fcn.10149646
add esp, 4
push edi
mov byte [esp + 0x238], 0x64
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
xor eax, eax
jmp 0x10093280
cmp byte [eax + ebp + 0x24fd], bl
jne 0x10093296
add eax, 1
cmp eax, 0x14
jb 0x10093280
jmp 0x1009334d
mov ecx, dword [ebp + 0x24f5]
or ecx, dword [ebp + 0x24f9]
je 0x1009334d
mov edx, dword [ebp + 0x24fd]
mov dword [ebp + 0x2358], edx
mov eax, dword [ebp + 0x2501]
mov dword [ebp + 0x235c], eax
mov ecx, dword [ebp + 0x2505]
mov dword [ebp + 0x2360], ecx
mov edx, dword [ebp + 0x2509]
mov dword [ebp + 0x2364], edx
mov eax, dword [ebp + 0x250d]
mov dword [ebp + 0x2368], eax
mov ecx, dword [ebp + 0x24fd]
mov dword [ebp + 0x2ef0], ecx
mov edx, dword [ebp + 0x2501]
mov dword [ebp + 0x2ef4], edx
mov eax, dword [ebp + 0x2505]
mov dword [ebp + 0x2ef8], eax
mov ecx, dword [ebp + 0x2509]
mov dword [ebp + 0x2efc], ecx
mov edx, dword [ebp + 0x250d]
mov dword [ebp + 0x2f00], edx
mov eax, dword [ebp + 0x24f5]
mov dword [ebp + 0x2f18], eax
mov ecx, dword [ebp + 0x24f9]
push 0xffffffffffffffff
push ebx
lea eax, [ebp + 0x2410]
mov dword [ebp + 0x2f1c], ecx
push eax
lea ecx, [ebp + 0x2f60]
call fcn.10001ec0
push esi
call fcn.100ec1a0
add esp, 4
test al, al
je 0x10093467
push esi
call fcn.100ec1f4
add esp, 4
test al, al
je 0x1009344c
cmp byte [esp + 0x25c], 2
je 0x10093467
lea edx, [esp + 0x19c]
push edx
mov ecx, ebp
call fcn.10087e90
push eax
mov byte [esp + 0x238], 0x6a
call fcn.100ec22e
mov edi, 0x10
add esp, 4
cmp dword [esp + 0x1b4], edi
mov byte [esp + 0x234], 0x64
jb 0x100933c3
mov eax, dword [esp + 0x1a0]
push eax
call fcn.10149646
add esp, 4
lea ecx, [esp + 0x1b8]
push ecx
mov ecx, ebp
call fcn.10087e90
push eax
push esi
mov byte [esp + 0x23c], 0x6b
call fcn.100ec25b
add esp, 8
test al, al
sete byte [esp + 0x17]
cmp dword [esp + 0x1d0], edi
mov byte [esp + 0x234], 0x64
jb 0x1009340c
mov edx, dword [esp + 0x1bc]
push edx
call fcn.10149646
add esp, 4
cmp byte [esp + 0x17], bl
je 0x10093467
lea eax, [ebp + 0x30a0]
push eax
lea ecx, [esp + 0x60]
call fcn.100010c0
push 0xffffffffffffffff
push ebx
push esi
lea ecx, [ebp + 0x2560]
mov byte [esp + 0x240], 0x6c
call fcn.10001ec0
lea ecx, [esp + 0x5c]
mov byte [esp + 0x234], 0x64
call fcn.100010e0
jmp 0x10093467
lea edi, [ebp + 0x2388]
push edi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
push edi
mov byte [ebp + 0x23a0], 1
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
lea edi, [ebp + 0x2388]
push edi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov al, byte [ebp + 0x23a0]
push edi
mov byte [esp + 0x1b], al
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
cmp byte [esp + 0x17], bl
jne 0x100934d2
lea ecx, [esp + 0x1f0]
push ecx
mov ecx, ebp
call fcn.10087e90
cmp dword [esi + 0x18], 0x10
mov ecx, dword [esi + 0x14]
mov byte [esp + 0x234], 0x6d
mov dword [esp + 0x18], 1
jb 0x100934b8
mov edx, dword [esi + 4]
jmp 0x100934bb
lea edx, [esi + 4]
push ecx
push edx
mov edx, dword [eax + 0x14]
push edx
push ebx
mov ecx, eax
call fcn.1003a6a0
test eax, eax
mov byte [esp + 0x17], 1
jne 0x100934d6
mov byte [esp + 0x17], bl
test byte [esp + 0x18], 1
mov dword [esp + 0x234], 0x64
je 0x10093507
and dword [esp + 0x18], 0xfffffffe
cmp dword [esp + 0x208], 0x10
jb 0x10093507
mov eax, dword [esp + 0x1f4]
push eax
call fcn.10149646
add esp, 4
cmp byte [esp + 0x17], bl
je 0x1009362a
lea ecx, [esp + 0x1d4]
push ecx
mov ecx, ebp
call fcn.10087e90
or dword [esp + 0x18], 2
push eax
mov byte [esp + 0x238], 0x6e
call fcn.100ec1a0
add esp, 4
test al, al
je 0x1009356b
lea edx, [esp + 0xe8]
push edx
mov ecx, ebp
call fcn.10087e90
or dword [esp + 0x18], 4
push eax
mov dword [esp + 0x238], 0x6f
call fcn.100ec1f4
add esp, 4
test al, al
mov byte [esp + 0x17], 1
je 0x1009356f
mov byte [esp + 0x17], bl
test byte [esp + 0x18], 4
je 0x100935b1
and dword [esp + 0x18], 0xfffffffb
cmp dword [esp + 0x100], 0x10
jb 0x10093595
mov eax, dword [esp + 0xec]
push eax
call fcn.10149646
add esp, 4
mov edi, 0xf
mov dword [esp + 0x100], edi
mov dword [esp + 0xfc], ebx
mov byte [esp + 0xec], bl
jmp 0x100935b6
mov edi, 0xf
test byte [esp + 0x18], 2
mov dword [esp + 0x234], 0x64
je 0x100935e2
cmp dword [esp + 0x1ec], 0x10
jb 0x100935e2
mov ecx, dword [esp + 0x1d8]
push ecx
call fcn.10149646
add esp, 4
cmp byte [esp + 0x17], bl
je 0x1009362f
lea edi, [ebp + 0x30a0]
mov dword [esp + 0x58], edi
add edi, 4
push edi
mov dword [esp + 0x58], 0x1018442c
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
push 0xffffffffffffffff
push ebx
push esi
lea ecx, [ebp + 0x2560]
mov byte [esp + 0x240], 0x70
call fcn.10001ec0
push edi
mov byte [esp + 0x238], 0x64
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov edi, 0xf
push 0xffffffffffffffff
push ebx
lea eax, [ebp + 0x2560]
push eax
lea ecx, [esp + 0x164]
mov dword [esp + 0x17c], edi
mov dword [esp + 0x178], ebx
mov byte [esp + 0x168], bl
call fcn.10001ec0
lea edx, [esp + 0x120]
push edx
mov ecx, ebp
mov byte [esp + 0x238], 0x71
call fcn.10087e00
push 0xffffffffffffffff
push ebx
lea eax, [ebp + 0x2410]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x240], 0x72
mov dword [esp + 0x5c], edi
mov dword [esp + 0x58], ebx
mov byte [esp + 0x48], bl
call fcn.10001ec0
mov esi, 0x10
cmp dword [esp + 0x50], esi
jb 0x100936b0
mov eax, dword [esp + 0x3c]
push eax
call fcn.10149646
add esp, 4
cmp dword [esp + 0x138], esi
mov dword [esp + 0x50], edi
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
jb 0x100936d5
mov ecx, dword [esp + 0x124]
push ecx
call fcn.10149646
add esp, 4
cmp dword [esp + 0x170], esi
mov dword [esp + 0x138], edi
mov dword [esp + 0x134], ebx
mov byte [esp + 0x124], bl
mov byte [esp + 0x234], 0x64
jb 0x1009370b
mov edx, dword [esp + 0x15c]
push edx
call fcn.10149646
add esp, 4
push 0x37
lea eax, [ebp + 0x1d60]
push ebx
push eax
call fcn.10149460
mov edi, dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
add esp, 0xc
lea esi, [ebp + 0x23b4]
push esi
call edi
push esi
mov dword [ebp + 0x23cc], ebx
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
lea esi, [ebp + 0x23d8]
push esi
call edi
push esi
mov dword [ebp + 0x23f0], ebx
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
lea esi, [ebp + 0x2584]
push esi
call edi
push esi
mov dword [ebp + 0x259c], ebx
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
cmp dword [ebp + 0x24f1], ebx
je 0x10093784
lea esi, [ebp + 0x2fec]
push esi
call edi
push esi
mov byte [ebp + 0x3004], 1
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov byte [ebp + 0x30fc], bl
mov ax, word [ebp + 0x252e]
mov word [ebp + 0x30fe], ax
mov cx, word [ebp + 0x252e]
lea esi, [ebp + 0x24d4]
mov word [ebp + 0x3100], cx
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x100938cb
mov edx, dword [esi + 8]
sub edx, eax
je 0x100938cb
lea eax, [esp + 0x13c]
push eax
mov ecx, ebp
mov byte [ebp + 0x3103], 1
call fcn.10087e00
push eax
lea ecx, [esp + 0x210]
push ecx
mov byte [esp + 0x23c], 0x73
call fcn.100e56bc
add esp, 8
cmp dword [esp + 0x154], 0x10
mov byte [esp + 0x234], 0x75
jb 0x10093813
mov edx, dword [esp + 0x140]
push edx
call fcn.10149646
add esp, 4
lea eax, [esp + 0x20c]
mov edi, 0xf
push eax
mov dword [esp + 0x158], edi
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
call fcn.100ec1a0
add esp, 4
test al, al
jne 0x100938a0
lea ecx, [esp + 0x20c]
push esi
push ecx
mov byte [ebp + 0x3102], bl
call fcn.100f0d59
add esp, 8
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x214]
push edx
lea ecx, [esp + 0x110]
mov dword [esp + 0x128], edi
mov dword [esp + 0x124], ebx
mov byte [esp + 0x114], bl
call fcn.10001ec0
cmp dword [esp + 0x11c], 0x10
jb 0x100938a7
mov eax, dword [esp + 0x108]
push eax
call fcn.10149646
add esp, 4
jmp 0x100938a7
mov byte [ebp + 0x3102], 1
cmp dword [esp + 0x224], 0x10
mov byte [esp + 0x234], 0x64
jb 0x100938d1
mov ecx, dword [esp + 0x210]
push ecx
call fcn.10149646
add esp, 4
jmp 0x100938d1
mov byte [ebp + 0x3103], bl
push 0x388
mov byte [ebp + 0x25d8], 1
call fcn.1014979e
add esp, 4
mov dword [esp + 0x1c], eax
cmp eax, ebx
mov byte [esp + 0x234], 0x76
je 0x100938fe
mov ecx, eax
call fcn.1012f5fa
jmp 0x10093900
xor eax, eax
push 0x15c0
mov byte [esp + 0x238], 0x64
mov dword [ebp + 0x26f8], eax
call fcn.1014979e
add esp, 4
mov dword [esp + 0x1c], eax
cmp eax, ebx
mov byte [esp + 0x234], 0x77
je 0x1009396f
mov edx, dword [ebp + 0x26a0]
push ebx
lea ecx, [ebp + 0x1e04]
push ecx
push edx
mov edx, dword [ebp + 0x26f8]
lea ecx, [ebp + 0x1cde]
push ecx
lea ecx, [ebp + 0xb94]
push ecx
lea ecx, [ebp + 0x240c]
push ecx
mov ecx, dword [ebp + 0x26a4]
push ecx
push edx
lea ecx, [ebp + 4]
push ecx
mov ecx, dword [esp + 0x44]
push ecx
mov ecx, eax
call fcn.1004c4a0
jmp 0x10093971
xor eax, eax
mov dword [ebp + 0x26f4], eax
cmp dword [ebp + 0x2424], ebx
mov byte [esp + 0x234], 0x64
je 0x100939b2
mov ecx, dword [ebp + 0x26f8]
lea eax, [ebp + 0x20]
push eax
call fcn.1012cc4a
cmp byte [esp + 0x25c], 2
je 0x100939b2
mov edx, dword [ebp + 0x24ed]
mov ecx, dword [ebp + 0x26f8]
push edx
call fcn.1012d7fa
push 0x1c50
call fcn.1014979e
add esp, 4
mov dword [esp + 0x1c], eax
cmp eax, ebx
mov byte [esp + 0x234], 0x78
je 0x10093a0d
mov ecx, dword [esp + 0x2c]
push ebx
push 1
push ebx
lea edx, [ebp + 0x1cde]
push edx
lea edx, [ebp + 0x240c]
push edx
mov edx, dword [esp + 0x48]
push ecx
mov ecx, dword [ebp + 0x26f8]
push edx
lea edx, [ebp + 0x28]
push edx
mov edx, dword [ebp + 0x1e68]
push ecx
mov ecx, dword [ebp + 0x1e6c]
push edx
push ecx
mov ecx, eax
call fcn.1006d950
jmp 0x10093a0f
xor eax, eax
mov dword [ebp + 8], eax
lea eax, [ebp + 0x2410]
push eax
lea ecx, [ebp + 0x3150]
mov byte [esp + 0x238], 0x64
call fcn.10051e10
mov eax, ebp
mov ecx, dword [esp + 0x22c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x214]
xor ecx, esp
call fcn.10149c5e
add esp, 0x224
ret 0x2c