Function at 0x100b3e70
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0x660
mov eax, 0x1012ecb7
call fcn.1011094a
mov esi, ecx
mov dword [ebp - 0x244], esi
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x270], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x248], eax
mov eax, ebx
mov dword [ebp - 0x2cc], esi
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x258], eax
call fcn.10094144
push pe_nt_image_headers32
mov eax, dword [eax + 0x9c]
mov dword [ebp - 0xa8], eax
call fcn.1003a3c0
mov edi, eax
pop ecx
mov dword [ebp - 0x290], edi
mov dword [ebp - 4], ebx
test edi, edi
je 0x100b40a1
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xf0]
push esi
call fcn.1003a3c0
push esi
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 1
mov dword [ebp - 0x258], 1
call fcn.1003a3c0
push esi
lea ecx, [ebp - 0x2a8]
mov dword [ebp - 4], 2
mov dword [ebp - 0x258], 3
mov dword [ebp - 0x268], ebx
call fcn.1003a3c0
push esi
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 4], 3
mov dword [ebp - 0x258], 7
call fcn.1003a3c0
push esi
lea ecx, [ebp - 0x3bc]
mov dword [ebp - 4], 4
mov dword [ebp - 0x258], 0xf
call fcn.1003a3c0
push esi
lea ecx, [ebp - 0x434]
mov dword [ebp - 4], 5
mov dword [ebp - 0x258], 0x1f
call fcn.1003a3c0
push esi
lea ecx, [ebp - 0x3ec]
mov dword [ebp - 4], 6
mov dword [ebp - 0x258], 0x3f
call fcn.1003a3c0
push esi
lea ecx, [ebp - 0x3d4]
mov dword [ebp - 4], 7
mov dword [ebp - 0x258], 0x7f
call fcn.1003a3c0
push esi
lea ecx, [ebp - 0x39c]
mov dword [ebp - 4], 8
mov dword [ebp - 0x258], 0xff
call fcn.1003a3c0
push esi
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 9
mov dword [ebp - 0x258], 0x1ff
call fcn.1003a3c0
mov eax, 0x3ff
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0xf0]
push eax
push ebx
push ebx
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0xa8]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call fcn.10099c28
pop ecx
pop ecx
push edx
push eax
lea eax, [ebp - 0x2a8]
mov ecx, edi
push eax
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.100e520d
mov esi, dword [ebp - 0x244]
mov edi, eax
jmp 0x100b40a3
mov edi, ebx
mov dword [ebp - 0x260], edi
mov dword [ebp - 0x24c], edi
mov dword [ebp - 4], 0x15
mov eax, dword [ebp - 0x22c]
test eax, 0x200
je 0x100b40dc
and eax, 0xfffffdff
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x22c], eax
call fcn.1001524d
mov eax, dword [ebp - 0x22c]
test eax, 0x100
je 0x100b40ff
and eax, 0xfffffeff
lea ecx, [ebp - 0x39c]
mov dword [ebp - 0x22c], eax
call fcn.1001524d
mov eax, dword [ebp - 0x22c]
test al, al
jns 0x100b411f
and eax, 0xffffff7f
lea ecx, [ebp - 0x3d4]
mov dword [ebp - 0x22c], eax
call fcn.1001524d
mov eax, dword [ebp - 0x22c]
test al, 0x40
je 0x100b413d
and eax, 0xffffffbf
lea ecx, [ebp - 0x3ec]
mov dword [ebp - 0x22c], eax
call fcn.1001524d
mov eax, dword [ebp - 0x22c]
test al, 0x20
je 0x100b415b
and eax, 0xffffffdf
lea ecx, [ebp - 0x434]
mov dword [ebp - 0x22c], eax
call fcn.1001524d
mov eax, dword [ebp - 0x22c]
test al, 0x10
je 0x100b4179
and eax, 0xffffffef
lea ecx, [ebp - 0x3bc]
mov dword [ebp - 0x22c], eax
call fcn.1001524d
mov eax, dword [ebp - 0x22c]
test al, 8
je 0x100b4197
and eax, 0xfffffff7
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x22c], eax
call fcn.1001524d
mov eax, dword [ebp - 0x22c]
test al, 4
je 0x100b41b5
and eax, 0xfffffffb
lea ecx, [ebp - 0x2a8]
mov dword [ebp - 0x22c], eax
call fcn.1001524d
mov eax, dword [ebp - 0x22c]
test al, 2
je 0x100b41d3
and eax, 0xfffffffd
lea ecx, [ebp - 0x288]
mov dword [ebp - 0x22c], eax
call fcn.1001524d
mov eax, dword [ebp - 0x22c]
mov byte [ebp - 4], 0x1f
test al, 1
je 0x100b41ef
and eax, 0xfffffffe
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x22c], eax
call fcn.1001524d
mov eax, dword [esi + 4]
lea ecx, [ebp - 0xa4]
add eax, 0x18
mov dword [ebp - 0x94], ebx
push eax
mov dword [ebp - 0x90], ebx
call fcn.1003a3c0
or dword [ebp - 0x22c], 0x8000
mov eax, dword [ebp - 0x25c]
lea ecx, [ebp - 0x2c]
xorps xmm0, xmm0
mov byte [ebp - 4], 0x20
movlpd qword [ebp - 0x2c], xmm0
mov dword [eax], 0x1f7
call fcn.1003a3c0
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x21
push ecx
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x48], ebx
mov eax, dword [eax]
mov esi, dword [eax]
mov ecx, esi
call dword [0x1014488c]
mov ecx, dword [ebp - 0x250]
call esi
mov esi, dword [eax]
mov dword [ebp - 0x264], esi
mov dword [eax], ebx
mov dword [ebp - 0x240], esi
cmp dword [ebp - 0x234], 0
mov byte [ebp - 4], 0x22
je 0x100b4297
push dword [ebp - 0x234]
lea ecx, [ebp - 0x234]
call fcn.1003a3c0
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x100b42f0
sub eax, ebx
je 0x100b42d2
dec eax
sub eax, 1
je 0x100b42cd
sub eax, 1
je 0x100b42cd
sub eax, 1
je 0x100b42c6
dec eax
sub eax, 1
je 0x100b42bf
mov ebx, 0xdb
jmp 0x100b42d2
mov ebx, 0xda
jmp 0x100b42d2
mov ebx, 0xe3
jmp 0x100b42d2
mov ebx, 0xce
mov eax, dword [ebp - 0x25c]
mov dword [eax], ebx
lea eax, [ebp - 0x2c]
mov ebx, dword [ebp - 0x238]
mov ecx, ebx
push eax
call fcn.1003a3c0
jmp 0x100b457a
mov eax, dword [ebp - 0x244]
lea ecx, [ebp - 0xc0]
push 0x1014a0f1
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x268], eax
call fcn.1003a3c0
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x23
push eax
mov ecx, esi
call fcn.100404b6
mov ecx, dword [ebp - 0x244]
push eax
call fcn.1003a3c0
test eax, eax
je 0x100b4635
mov eax, dword [ebp - 0x248]
cmp dword [eax + 0x10], ebx
je 0x100b4354
push eax
lea ecx, [ebp - 0xc0]
call fcn.1003a3c0
jmp 0x100b4635
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
lea eax, [ebp - 0x21]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x44]
mov byte [ebp - 0x21], bl
push eax
lea eax, [ebp - 0xc0]
mov byte [ebp - 0x22d], bl
push eax
lea eax, [ebp - 0x22d]
push eax
call fcn.100e1984
mov ecx, eax
call fcn.100e13a0
push eax
mov ecx, esi
call fcn.100404b6
mov ecx, dword [ebp - 0x244]
push eax
call fcn.1003a3c0
mov dword [ebp - 0x248], eax
test eax, eax
je 0x100b45c8
push eax
call fcn.1003a3c0
mov ecx, dword [ebp - 0x25c]
mov dword [esp], 0x101e2a68
mov dword [ecx], eax
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x2a8]
push ebx
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x25
call fcn.1003a3c0
mov eax, dword [ebp - 0x244]
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x26
push dword [eax + 8]
call fcn.1003a3c0
lea eax, [ebp - 0x2a8]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0xf0]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0xf0]
mov ebx, eax
call fcn.1001524d
lea ecx, [ebp - 0x288]
call fcn.1001524d
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x24
call fcn.1001524d
test ebx, ebx
je 0x100b4530
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x2a8]
push ebx
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x28
call fcn.1003a3c0
mov eax, dword [ebp - 0x244]
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x29
push dword [eax + 8]
call fcn.1003a3c0
lea eax, [ebp - 0x2a8]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0xf0]
push eax
call fcn.100e1c13
mov ebx, eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x328]
mov dword [ebp - 0x28c], ebx
push eax
call fcn.100b1a60
add esp, 0x14
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x2b
jb 0x100b44de
mov eax, dword [eax]
mov ebx, dword [ebx]
push str.ValidateAndGetLatestSPForAppsByInstaller
push str._s_:_Failed_to_fetch_access_token
push eax
push dword [ebp - 0x28c]
mov ecx, dword [ebx + 0x24]
call dword [0x1014488c]
call dword [ebx + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x328]
call fcn.1001524d
lea ecx, [ebp - 0xf0]
call fcn.1001524d
lea ecx, [ebp - 0x288]
call fcn.1001524d
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x24
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
mov ebx, dword [ebp - 0x238]
lea eax, [ebp - 0x2c]
pop ecx
push eax
mov ecx, ebx
call fcn.1003a3c0
mov eax, dword [ebp - 0x30]
cmp eax, 0x10
jb 0x100b4560
inc eax
push eax
push dword [ebp - 0x44]
call fcn.1003a3c0
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x30], 0xf
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x44], al
call fcn.1001524d
test esi, esi
je 0x100b458a
push esi
lea ecx, [ebp - 0x240]
call fcn.1003a3c0
lea eax, [ebp - 0x2c]
push eax
mov ecx, eax
call fcn.1003a3c0
mov eax, dword [ebp - 0x90]
cmp eax, 0x10
jb 0x100b45af
inc eax
push eax
push dword [ebp - 0xa4]
call fcn.1003a3c0
pop ecx
pop ecx
test edi, edi
je 0x100b6756
push edi
lea ecx, [ebp - 0x24c]
call fcn.1003a3c0
jmp 0x100b6756
cmp byte [ebp - 0x21], 0
je 0x100b4621
mov edi, dword [ebp - 0x250]
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x234]
push ecx
mov eax, dword [edi]
mov esi, dword [eax]
mov ecx, esi
call dword [0x1014488c]
mov ecx, edi
call esi
push eax
lea ecx, [ebp - 0x240]
call fcn.1003a3c0
cmp dword [ebp - 0x234], 0
je 0x100b4615
push dword [ebp - 0x234]
lea ecx, [ebp - 0x234]
call fcn.1003a3c0
mov esi, dword [ebp - 0x240]
mov dword [ebp - 0x264], esi
mov eax, dword [ebp - 0x30]
cmp eax, 0x10
jb 0x100b4635
inc eax
push eax
push dword [ebp - 0x44]
call fcn.1003a3c0
pop ecx
pop ecx
xor eax, eax
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x244]
mov byte [ebp - 4], 0x2c
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x38]
mov dword [ebp - 0x234], ecx
mov ecx, dword [ebp - 0x254]
mov dword [ebp - 0x8c], ebx
mov edi, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [ebp - 0x248], edi
mov dword [ebp - 0x23c], ecx
cmp edi, ecx
je 0x100b483c
mov esi, dword [ebp - 0x22c]
push 1
lea eax, [ebp - 0x8c]
push eax
sub esp, 0x18
mov ecx, esp
push edi
call fcn.1003a3c0
mov ecx, dword [ebp - 0x234]
mov eax, dword [ecx]
lea ecx, [ebp - 0x254]
push ecx
mov edi, dword [eax + 8]
mov ecx, edi
call dword [0x1014488c]
mov ecx, dword [ebp - 0x234]
call edi
mov edi, dword [eax]
mov dword [eax], ebx
mov dword [ebp - 0x228], edi
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x2d
call fcn.100a6222
push 0x1014a0f1
lea ecx, [ebp - 0x44]
call fcn.1003a3c0
cmp dword [ebp - 0x8c], 0
mov byte [ebp - 4], 0x2e
jne 0x100b470b
test edi, edi
je 0x100b470b
mov ecx, edi
call fcn.100a7cb7
mov ecx, eax
call fcn.10034710
push eax
lea ecx, [ebp - 0x44]
call fcn.1003a3c0
mov edi, dword [ebp - 0x248]
lea ecx, [ebp - 0x4ac]
push edi
call fcn.1001b01e
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [ebp - 0x44c]
mov dword [ebp - 0x43c], ebx
mov dword [ebp - 0x438], ebx
call fcn.1003a3c0
or esi, 0x10000
lea eax, [ebp - 0x4ac]
push eax
lea ecx, [ebp - 0x524]
call fcn.1003a3c0
lea eax, [ebp - 0x44c]
push eax
lea ecx, [ebp - 0x4c4]
call fcn.1003a3c0
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x248], eax
push ecx
cmp eax, dword [ebp - 0x18]
je 0x100b47a1
mov ecx, eax
call fcn.1001b01e
mov ecx, dword [ebp - 0x248]
lea eax, [ebp - 0x4c4]
push eax
add ecx, 0x60
call fcn.1003a3c0
add dword [ebp - 0x1c], 0x78
jmp 0x100b47aa
push eax
lea ecx, [ebp - 0x20]
call fcn.100a7da8
lea ecx, [ebp - 0x4c4]
call fcn.1001524d
lea ecx, [ebp - 0x524]
call fcn.1001cd30
mov eax, dword [ebp - 0x438]
cmp eax, 0x10
jb 0x100b47da
inc eax
push eax
push dword [ebp - 0x44c]
call fcn.1003a3c0
pop ecx
pop ecx
lea ecx, [ebp - 0x4ac]
mov dword [ebp - 0x43c], ebx
mov dword [ebp - 0x438], 0xf
mov byte [ebp - 0x44c], bl
call fcn.1001cd30
lea ecx, [ebp - 0x44]
call fcn.1001524d
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0x2c
call fcn.100a6222
add edi, 0x60
mov dword [ebp - 0x248], edi
cmp edi, dword [ebp - 0x23c]
jne 0x100b4687
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x22c], esi
mov esi, dword [ebp - 0x264]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x228], eax
xor eax, eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
push 0x1014a0f1
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x32
call fcn.1003a3c0
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0x33
push eax
mov ecx, esi
call fcn.100404b6
push eax
call fcn.1003a3c0
pop ecx
pop ecx
test al, al
jne 0x100b48af
cmp dword [ebp - 0xc4], 0x10
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xc8], ebx
cmovae eax, dword [ebp - 0xd8]
mov byte [eax], bl
push 0x134
lea eax, [ebp - 0x224]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x328]
mov byte [ebp - 0x22d], bl
push eax
call fcn.10099c68
add esp, 0x10
mov edi, eax
mov eax, dword [ebp - 0x244]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov eax, dword [eax + 4]
add eax, 0x18
push eax
call fcn.1003a3c0
or dword [ebp - 0x22c], 0x20000
push edi
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0x35
push eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov ecx, edi
call dword [0x1014488c]
mov ecx, dword [ebp - 0x228]
call edi
mov ecx, eax
call fcn.10055026
movzx eax, al
push eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov ecx, edi
call dword [0x1014488c]
mov ecx, dword [ebp - 0x228]
call edi
mov ecx, eax
call fcn.10055018
movzx eax, al
push eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov ecx, edi
call dword [0x1014488c]
mov ecx, dword [ebp - 0x228]
call edi
mov ecx, eax
call fcn.1005501f
movzx eax, al
push eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov ecx, edi
call dword [0x1014488c]
mov ecx, dword [ebp - 0x228]
call edi
mov ecx, eax
call fcn.100404c1
push eax
lea eax, [ebp - 0x22d]
push eax
call fcn.100e1984
mov ecx, eax
call fcn.100e2a17
push eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov ecx, edi
call dword [0x1014488c]
mov ecx, dword [ebp - 0x228]
call edi
mov ecx, eax
call fcn.100404df
push eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov ecx, edi
call dword [0x1014488c]
mov ecx, dword [ebp - 0x228]
call edi
mov ecx, eax
call fcn.10055011
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov ecx, edi
call dword [0x1014488c]
mov ecx, dword [ebp - 0x228]
call edi
mov ecx, eax
call fcn.100404b6
push eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov ecx, edi
call dword [0x1014488c]
mov ecx, dword [ebp - 0x228]
call edi
mov ecx, eax
call fcn.100403fe
push eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov ecx, edi
call dword [0x1014488c]
mov ecx, dword [ebp - 0x228]
call edi
mov ecx, eax
call fcn.10014f0c
push eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov ecx, edi
call dword [0x1014488c]
mov ecx, dword [ebp - 0x228]
call edi
mov ecx, eax
call fcn.100403fa
push eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov ecx, edi
call dword [0x1014488c]
mov ecx, dword [ebp - 0x228]
call edi
mov ecx, eax
call fcn.10034710
push eax
lea ecx, [ebp - 0x224]
call fcn.1005282a
mov eax, dword [ebp - 0x30]
cmp eax, 0x10
jb 0x100b4ad2
inc eax
push eax
push dword [ebp - 0x44]
call fcn.1003a3c0
pop ecx
pop ecx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 0x38
call fcn.1001524d
xor eax, eax
lea edi, [ebp - 0x88]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x228]
mov edi, dword [eax]
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x224]
push eax
mov ecx, dword [edi + 4]
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x88]
push eax
call dword [0x1014488c]
mov ecx, dword [ebp - 0x228]
call dword [edi + 4]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x39
test eax, eax
je 0x100b50d7
cmp eax, 4
jne 0x100b4dd7
mov edi, dword [ebp - 0x250]
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x254]
push ecx
mov eax, dword [edi]
mov esi, dword [eax]
mov ecx, esi
call dword [0x1014488c]
mov ecx, edi
call esi
push eax
lea ecx, [ebp - 0x240]
call fcn.1003a3c0
cmp dword [ebp - 0x254], 0
je 0x100b4b8b
push dword [ebp - 0x254]
lea ecx, [ebp - 0x254]
call fcn.1003a3c0
mov esi, dword [ebp - 0x240]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x264], esi
test esi, esi
je 0x100b4def
test eax, eax
jne 0x100b4def
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
mov edi, dword [ebp - 0x268]
lea eax, [ebp - 0x21]
push eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x3a
push eax
mov edi, dword [edi]
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x22d]
mov byte [ebp - 0x21], bl
push eax
mov byte [ebp - 0x22d], bl
call fcn.100e1984
mov ecx, eax
call fcn.100e13a0
push eax
mov ecx, esi
call fcn.100404b6
mov ecx, dword [edi + 0x18]
push eax
call dword [0x1014488c]
mov ecx, dword [ebp - 0x268]
call dword [edi + 0x18]
test eax, eax
je 0x100b4d09
push eax
call fcn.1003a3c0
pop ecx
mov ecx, dword [ebp - 0x25c]
mov dword [ecx], eax
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x238]
push eax
call fcn.1003a3c0
mov eax, dword [ebp - 0x30]
cmp eax, 0x10
jb 0x100b4c43
inc eax
push eax
push dword [ebp - 0x44]
call fcn.1003a3c0
pop ecx
pop ecx
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.10056572
lea ecx, [ebp - 0x224]
call fcn.1005295f
lea ecx, [ebp - 0xd8]
call fcn.1001524d
mov edi, dword [ebp - 0x20]
test edi, edi
je 0x100b4cb9
mov eax, dword [ebp - 0x1c]
cmp edi, eax
je 0x100b4c99
mov esi, eax
push ebx
mov ecx, edi
call fcn.1003a3c0
add edi, 0x78
cmp edi, esi
jne 0x100b4c81
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp - 0x264]
mov eax, dword [ebp - 0x18]
sub eax, edi
push 0x78
pop ecx
cdq
idiv ecx
imul eax, eax, 0x78
push eax
push edi
call fcn.1003a3c0
pop ecx
pop ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0xc0]
call fcn.1001524d
push esi
lea ecx, [ebp - 0x240]
call fcn.1003a3c0
lea eax, [ebp - 0x2c]
push eax
mov ecx, eax
call fcn.1003a3c0
mov eax, dword [ebp - 0x90]
cmp eax, 0x10
jb 0x100b4cf5
inc eax
push eax
push dword [ebp - 0xa4]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x260]
test eax, eax
je 0x100b6750
push eax
jmp 0x100b6745
cmp byte [ebp - 0x21], 0
je 0x100b4d62
mov edi, dword [ebp - 0x250]
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x250]
push ecx
mov eax, dword [edi]
mov esi, dword [eax]
mov ecx, esi
call dword [0x1014488c]
mov ecx, edi
call esi
push eax
lea ecx, [ebp - 0x240]
call fcn.1003a3c0
cmp dword [ebp - 0x250], 0
je 0x100b4d56
push dword [ebp - 0x250]
lea ecx, [ebp - 0x250]
call fcn.1003a3c0
mov esi, dword [ebp - 0x240]
mov dword [ebp - 0x264], esi
mov eax, dword [ebp - 0x228]
mov edi, dword [eax]
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x224]
push eax
mov ecx, dword [edi + 4]
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x390]
push eax
call dword [0x1014488c]
mov ecx, dword [ebp - 0x228]
call dword [edi + 4]
lea ecx, [ebp - 0x88]
cmp ecx, eax
je 0x100b4db1
mov byte [ebp - 0x23c], bl
push dword [ebp - 0x23c]
push eax
call fcn.1003a3c0
lea ecx, [ebp - 0x390]
call fcn.10056572
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x39
cmp eax, 0x10
jb 0x100b4dd4
inc eax
push eax
push dword [ebp - 0x44]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x100b50d7
cmp eax, 0xd
ja case.0x100b4de8.8
jmp dword [eax*4 + 0x100b6760]
sub eax, ebx
je 0x100b4e25
dec eax
sub eax, 1
je 0x100b4e1e
sub eax, 1
je 0x100b4e1e
sub eax, 1
je 0x100b4e17
dec eax
sub eax, 1
je 0x100b4e10
mov ecx, 0xdb
jmp 0x100b4e27
mov ecx, 0xda
jmp 0x100b4e27
mov ecx, 0xe3
jmp 0x100b4e27
mov ecx, 0xce
jmp 0x100b4e27
mov ecx, ebx
mov eax, dword [ebp - 0x25c]
mov dword [eax], ecx
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x238]
push eax
call fcn.1003a3c0
lea ecx, [ebp - 0x88]
call fcn.10056572
lea ecx, [ebp - 0x224]
call fcn.1005295f
lea ecx, [ebp - 0xd8]
call fcn.1001524d
mov edi, dword [ebp - 0x20]
test edi, edi
je 0x100b50bf
mov eax, dword [ebp - 0x1c]
cmp edi, eax
je 0x100b509f
mov esi, eax
push ebx
mov ecx, edi
call fcn.1003a3c0
add edi, 0x78
cmp edi, esi
jne 0x100b4e77
jmp 0x100b5096
mov eax, 0xc9
jmp 0x100b4ec9
mov eax, 0xcb
jmp 0x100b4ec9
push 0x6e
pop eax
jmp 0x100b4ec9
push 0x68
jmp 0x100b4e9b
push 0x67
jmp 0x100b4e9b
mov eax, 0xca
jmp 0x100b4ec9
push 0x66
jmp 0x100b4e9b
push 0x6a
jmp 0x100b4e9b
mov eax, ebx
jmp 0x100b4ec9
mov eax, 0xf7
jmp 0x100b4ec9
push 0x6d
jmp 0x100b4e9b
mov eax, 0xcc
mov ecx, dword [ebp - 0x25c]
push 0x101e2a68
mov dword [ecx], eax
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
mov edi, 0x1014a0f1
lea ecx, [ebp - 0x2c4]
push edi
call fcn.1003a3c0
push edi
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x3b
call fcn.1003a3c0
mov eax, dword [ebp - 0x244]
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x3c
push dword [eax + 8]
call fcn.1003a3c0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x288]
mov edi, eax
call fcn.1001524d
lea ecx, [ebp - 0x2a8]
call fcn.1001524d
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x39
call fcn.1001524d
test edi, edi
je 0x100b503c
mov edi, 0x1014a0f1
lea ecx, [ebp - 0x2c4]
push edi
call fcn.1003a3c0
push edi
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x3e
call fcn.1003a3c0
mov eax, dword [ebp - 0x244]
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x3f
push dword [eax + 8]
call fcn.1003a3c0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x40
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.100e1c13
mov edi, eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x328]
mov dword [ebp - 0x23c], edi
push eax
call fcn.100b19f2
add esp, 0x14
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x41
jb 0x100b4fea
mov eax, dword [eax]
mov edi, dword [edi]
push str.ValidateAndGetLatestSPForAppsByInstaller
push str._s_:_Error_fetching_latest_ASNP
push eax
push dword [ebp - 0x23c]
mov ecx, dword [edi + 0x24]
call dword [0x1014488c]
call dword [edi + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x328]
call fcn.1001524d
lea ecx, [ebp - 0x288]
call fcn.1001524d
lea ecx, [ebp - 0x2a8]
call fcn.1001524d
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x39
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
pop ecx
mov ecx, dword [ebp - 0x238]
lea eax, [ebp - 0x2c]
push eax
call fcn.1003a3c0
lea ecx, [ebp - 0x88]
call fcn.10056572
lea ecx, [ebp - 0x224]
call fcn.1005295f
lea ecx, [ebp - 0xd8]
call fcn.1001524d
mov edi, dword [ebp - 0x20]
test edi, edi
je 0x100b50bf
mov eax, dword [ebp - 0x1c]
cmp edi, eax
je 0x100b509f
mov esi, eax
push ebx
mov ecx, edi
call fcn.1003a3c0
add edi, 0x78
cmp edi, esi
jne 0x100b5087
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp - 0x264]
mov eax, dword [ebp - 0x18]
sub eax, edi
push 0x78
pop ecx
cdq
idiv ecx
imul eax, eax, 0x78
push eax
push edi
call fcn.1003a3c0
pop ecx
pop ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0xc0]
call fcn.1001524d
test esi, esi
je 0x100b4cd0
jmp 0x100b4cc4
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x88]
mov edi, dword [ebp - 0x260]
mov dword [ebp - 0x290], ecx
mov dword [ebp - 0x254], eax
cmp eax, ecx
je 0x100b6676
push 0xf8
call fcn.1003a3c0
pop ecx
mov dword [ebp - 0x23c], eax
mov byte [ebp - 4], 0x42
test eax, eax
je 0x100b5147
push 0xf8
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x254]
add esp, 0xc
mov ecx, dword [ecx + 0x4c]
call fcn.10056619
mov ecx, dword [ebp - 0x23c]
push eax
call fcn.1005689d
mov dword [ebp - 0x228], eax
jmp 0x100b514f
mov eax, ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x250], eax
push dword [ebp - 0x254]
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x43
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
call fcn.1003a3c0
mov eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x44]
add eax, 0x18
mov byte [ebp - 4], 0x44
push eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
call fcn.1003a3c0
mov dword [ebp - 0x6c], ebx
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x68], ebx
mov ebx, dword [ebp - 0x254]
mov byte [ebp - 4], 0x45
lea eax, [ebx + 0x30]
push eax
call fcn.1003a3c0
mov al, byte [ebx + 0x48]
mov byte [ebp - 4], 0x46
mov byte [ebp - 0x2ac], al
call fcn.100e1984
mov ecx, eax
call fcn.10016ada
sub esp, 0x18
mov ecx, eax
mov ebx, esp
mov dword [ebp - 0x26c], esp
call fcn.100404c1
push eax
mov ecx, ebx
call fcn.1003a3c0
mov ecx, dword [ebp - 0x228]
sub esp, 0x18
mov byte [ebp - 4], 0x47
mov ebx, esp
call fcn.10057143
mov ecx, eax
call fcn.100404b6
push eax
mov ecx, ebx
call fcn.1003a3c0
mov byte [ebp - 4], 0x46
call fcn.100e9452
add esp, 0x30
test al, al
jne 0x100b54db
mov eax, dword [ebp - 0x25c]
push 0x101e2a68
mov dword [eax], 0xd8
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x2c4]
push ebx
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x48
call fcn.1003a3c0
mov eax, dword [ebp - 0x244]
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x49
push dword [eax + 8]
call fcn.1003a3c0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x288]
mov ebx, eax
call fcn.1001524d
lea ecx, [ebp - 0x2a8]
call fcn.1001524d
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x46
call fcn.1001524d
test ebx, ebx
je 0x100b5388
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x2c4]
push ebx
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x4b
call fcn.1003a3c0
mov eax, dword [ebp - 0x244]
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x4c
push dword [eax + 8]
call fcn.1003a3c0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x4d
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.100e1c13
push dword [ebp - 0x25c]
mov ebx, eax
lea eax, [ebp - 0x328]
push eax
mov dword [ebp - 0x23c], ebx
call fcn.10070d1d
add esp, 0x14
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x4e
jb 0x100b5336
mov eax, dword [eax]
mov ebx, dword [ebx]
push str.ValidateAndGetLatestSPForAppsByInstaller
push str._s_:_Runtime_mode_mismatch
push eax
push dword [ebp - 0x23c]
mov ecx, dword [ebx + 0x24]
call dword [0x1014488c]
call dword [ebx + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x328]
call fcn.1001524d
lea ecx, [ebp - 0x288]
call fcn.1001524d
lea ecx, [ebp - 0x2a8]
call fcn.1001524d
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x46
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
pop ecx
mov ecx, dword [ebp - 0x238]
lea eax, [ebp - 0x2c]
push eax
call fcn.1003a3c0
mov eax, dword [ebp - 0x68]
cmp eax, 0x10
jb 0x100b53b6
inc eax
push eax
push dword [ebp - 0x7c]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x30]
xor ebx, ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], bl
cmp eax, 0x10
jb 0x100b53d9
inc eax
push eax
push dword [ebp - 0x44]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x50]
cmp eax, 0x10
jb 0x100b53ed
inc eax
push eax
push dword [ebp - 0x64]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], bl
test eax, eax
je 0x100b5410
push eax
lea ecx, [ebp - 0x250]
call fcn.1003a3c0
lea ecx, [ebp - 0x88]
call fcn.10056572
lea ecx, [ebp - 0x224]
call fcn.1005295f
lea ecx, [ebp - 0xd8]
call fcn.1001524d
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x234], ecx
test ecx, ecx
je 0x100b5492
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
je 0x100b546d
mov esi, ecx
mov edi, eax
push ebx
mov ecx, esi
call fcn.1003a3c0
add esi, 0x78
cmp esi, edi
jne 0x100b5449
mov ecx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x264]
mov edi, dword [ebp - 0x260]
mov dword [ebp - 0x234], ecx
mov eax, dword [ebp - 0x18]
sub eax, ecx
push 0x78
pop ecx
cdq
idiv ecx
imul eax, eax, 0x78
push eax
push dword [ebp - 0x234]
call fcn.1003a3c0
pop ecx
pop ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0xc0]
call fcn.1001524d
test esi, esi
je 0x100b54ad
push esi
lea ecx, [ebp - 0x240]
call fcn.1003a3c0
lea eax, [ebp - 0x2c]
push eax
mov ecx, eax
call fcn.1003a3c0
mov eax, dword [ebp - 0x90]
cmp eax, 0x10
jb 0x100b6740
inc eax
push eax
push dword [ebp - 0xa4]
call fcn.1003a3c0
pop ecx
pop ecx
jmp 0x100b6740
call fcn.100e1984
mov ecx, eax
call fcn.100e0be8
sub esp, 0x18
mov dword [ebp - 0x26c], esp
test al, al
je 0x100b57aa
xor eax, eax
mov ebx, esp
mov byte [ebp - 0x22d], al
lea eax, [ebp - 0x22d]
push eax
call fcn.100e1984
mov ecx, eax
call fcn.100e2a17
push eax
mov ecx, ebx
call fcn.1003a3c0
mov ecx, dword [ebp - 0x228]
sub esp, 0x18
mov byte [ebp - 4], 0x4f
mov ebx, esp
call fcn.10057143
mov ecx, eax
call fcn.100404ba
push eax
mov ecx, ebx
call fcn.1003a3c0
mov byte [ebp - 4], 0x46
call fcn.100e9452
add esp, 0x30
test al, al
jne 0x100b5a4d
mov eax, dword [ebp - 0x25c]
push 0x101e2a68
mov dword [eax], 0xd4
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x2c4]
push ebx
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x50
call fcn.1003a3c0
mov eax, dword [ebp - 0x244]
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x51
push dword [eax + 8]
call fcn.1003a3c0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x288]
mov ebx, eax
call fcn.1001524d
lea ecx, [ebp - 0x2a8]
call fcn.1001524d
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x46
call fcn.1001524d
test ebx, ebx
je 0x100b56cd
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x2c4]
push ebx
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x53
call fcn.1003a3c0
mov eax, dword [ebp - 0x244]
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x54
push dword [eax + 8]
call fcn.1003a3c0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x55
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.100e1c13
push dword [ebp - 0x25c]
mov ebx, eax
lea eax, [ebp - 0x328]
push eax
mov dword [ebp - 0x23c], ebx
call fcn.10070d1d
add esp, 0x14
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x56
jb 0x100b567b
mov eax, dword [eax]
mov ebx, dword [ebx]
push str.ValidateAndGetLatestSPForAppsByInstaller
push str._s_:_Principal_mismatch
push eax
push dword [ebp - 0x23c]
mov ecx, dword [ebx + 0x24]
call dword [0x1014488c]
call dword [ebx + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x328]
call fcn.1001524d
lea ecx, [ebp - 0x288]
call fcn.1001524d
lea ecx, [ebp - 0x2a8]
call fcn.1001524d
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x46
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
pop ecx
mov ecx, dword [ebp - 0x238]
lea eax, [ebp - 0x2c]
push eax
call fcn.1003a3c0
mov eax, dword [ebp - 0x68]
cmp eax, 0x10
jb 0x100b56fb
inc eax
push eax
push dword [ebp - 0x7c]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x30]
xor ebx, ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], bl
cmp eax, 0x10
jb 0x100b571e
inc eax
push eax
push dword [ebp - 0x44]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x50]
cmp eax, 0x10
jb 0x100b5732
inc eax
push eax
push dword [ebp - 0x64]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], bl
test eax, eax
je 0x100b5755
push eax
lea ecx, [ebp - 0x250]
call fcn.1003a3c0
lea ecx, [ebp - 0x88]
call fcn.10056572
lea ecx, [ebp - 0x224]
call fcn.1005295f
lea ecx, [ebp - 0xd8]
call fcn.1001524d
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x234], ecx
test ecx, ecx
je 0x100b5492
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
je 0x100b546d
mov esi, ecx
mov edi, eax
push ebx
mov ecx, esi
call fcn.1003a3c0
add esi, 0x78
cmp esi, edi
jne 0x100b5796
jmp 0x100b5458
mov ecx, esp
xor eax, eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
lea eax, [ebp - 0xa4]
push eax
call fcn.1003a3c0
mov ecx, dword [ebp - 0x228]
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ebx, esp
call fcn.10057143
mov ecx, eax
call fcn.100403fa
push eax
mov ecx, ebx
call fcn.1003a3c0
mov byte [ebp - 4], 0x46
call fcn.100e9452
add esp, 0x30
test al, al
jne 0x100b5a4d
mov eax, dword [ebp - 0x25c]
push 0x101e2a68
mov dword [eax], 0xd3
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x2c4]
push ebx
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x58
call fcn.1003a3c0
mov eax, dword [ebp - 0x244]
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x59
push dword [eax + 8]
call fcn.1003a3c0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x5a
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x288]
mov ebx, eax
call fcn.1001524d
lea ecx, [ebp - 0x2a8]
call fcn.1001524d
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x46
call fcn.1001524d
test ebx, ebx
je 0x100b5970
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x2c4]
push ebx
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x5b
call fcn.1003a3c0
mov eax, dword [ebp - 0x244]
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x5c
push dword [eax + 8]
call fcn.1003a3c0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x5d
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.100e1c13
push dword [ebp - 0x25c]
mov ebx, eax
lea eax, [ebp - 0x328]
push eax
mov dword [ebp - 0x23c], ebx
call fcn.10070d1d
add esp, 0x14
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x5e
jb 0x100b591e
mov eax, dword [eax]
mov ebx, dword [ebx]
push str.ValidateAndGetLatestSPForAppsByInstaller
push str._s_:_DeviceId_mismatch
push eax
push dword [ebp - 0x23c]
mov ecx, dword [ebx + 0x24]
call dword [0x1014488c]
call dword [ebx + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x328]
call fcn.1001524d
lea ecx, [ebp - 0x288]
call fcn.1001524d
lea ecx, [ebp - 0x2a8]
call fcn.1001524d
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x46
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
pop ecx
mov ecx, dword [ebp - 0x238]
lea eax, [ebp - 0x2c]
push eax
call fcn.1003a3c0
mov eax, dword [ebp - 0x68]
cmp eax, 0x10
jb 0x100b599e
inc eax
push eax
push dword [ebp - 0x7c]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x30]
xor ebx, ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], bl
cmp eax, 0x10
jb 0x100b59c1
inc eax
push eax
push dword [ebp - 0x44]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x50]
cmp eax, 0x10
jb 0x100b59d5
inc eax
push eax
push dword [ebp - 0x64]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], bl
test eax, eax
je 0x100b59f8
push eax
lea ecx, [ebp - 0x250]
call fcn.1003a3c0
lea ecx, [ebp - 0x88]
call fcn.10056572
lea ecx, [ebp - 0x224]
call fcn.1005295f
lea ecx, [ebp - 0xd8]
call fcn.1001524d
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x234], ecx
test ecx, ecx
je 0x100b5492
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
je 0x100b546d
mov esi, ecx
mov edi, eax
push ebx
mov ecx, esi
call fcn.1003a3c0
add esi, 0x78
cmp esi, edi
jne 0x100b5a39
jmp 0x100b5458
mov ecx, dword [ebp - 0x228]
call fcn.10057143
mov ecx, eax
call fcn.100403d6
push edx
push eax
call fcn.10099c28
pop ecx
pop ecx
mov ecx, dword [ebp - 0x228]
mov ebx, eax
mov dword [ebp - 0x268], edx
call fcn.10057143
mov ecx, eax
call fcn.1004038f
mov ecx, dword [ebp - 0x228]
sub eax, ebx
mov ebx, edx
mov dword [ebp - 0x248], eax
sbb ebx, dword [ebp - 0x268]
call fcn.10057143
mov ecx, eax
call fcn.100403d6
add eax, dword [ebp - 0x248]
push pe_nt_image_headers32
adc edx, ebx
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x308], edx
mov byte [ebp - 4], 0x5f
call fcn.1003a3c0
pop ecx
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x374], eax
mov byte [ebp - 4], 0x60
test eax, eax
je 0x100b5d94
push 0x1014a0f1
lea ecx, [ebp - 0x288]
call fcn.1003a3c0
mov eax, dword [ebp - 0x22c]
xor ebx, ebx
mov ecx, dword [ebp - 0x228]
or eax, 0x800
mov byte [ebp - 4], 0x61
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x310], ebx
call fcn.10057143
lea ecx, [ebp - 0x3a4]
push ecx
mov ecx, eax
call fcn.1003a3c0
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x22c]
mov ecx, dword [ebp - 0x228]
or eax, 0x1000
mov dword [ebp - 4], 0x62
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x258], eax
call fcn.10057143
lea ecx, [ebp - 0x384]
push ecx
mov ecx, eax
call fcn.1003a3c0
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x22c]
mov ecx, dword [ebp - 0x228]
or eax, 0x2000
mov dword [ebp - 4], 0x63
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x258], eax
call fcn.10057143
lea ecx, [ebp - 0x37c]
push ecx
mov ecx, eax
call fcn.1003a3c0
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x22c]
mov ecx, dword [ebp - 0x228]
or eax, 0x4000
mov dword [ebp - 4], 0x64
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x258], eax
call fcn.10057143
mov ecx, eax
call fcn.100403d6
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2d0], edx
call fcn.10057143
mov ecx, eax
call fcn.100403fa
mov ecx, dword [ebp - 0x268]
mov dword [ebp - 0x2ec], eax
mov ecx, dword [ecx]
call fcn.1003e505
mov ecx, dword [ebp - 0x248]
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x268], edx
mov ecx, dword [ecx]
call fcn.1003e50c
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x30c], eax
mov dword [ebp - 0x248], edx
mov ecx, dword [ecx]
call fcn.1003e50c
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x260], edx
call fcn.10057143
mov ecx, eax
call fcn.100403d6
push edx
push eax
call fcn.10099c28
pop ecx
pop ecx
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2fc], edx
call fcn.10034710
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2f4], eax
call fcn.1005714a
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2dc], eax
call fcn.1005716f
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], eax
call fcn.10015dc1
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2e0], eax
call fcn.10015dcc
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2d4], eax
call fcn.10015dc8
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2d8], eax
call fcn.10015dd3
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2c8], eax
call fcn.10015997
lea ecx, [ebp - 0x288]
push ecx
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0x310]
push dword [ebp - 0x2f0]
push dword [ebp - 0x2ec]
push ecx
lea ecx, [ebp - 0xa8]
push ecx
push dword [ebp - 0x268]
mov ecx, dword [ebp - 0x26c]
push dword [ebp - 0x2e4]
push dword [ebp - 0x248]
push dword [ebp - 0x30c]
push dword [ebp - 0x308]
push dword [ebp - 0x304]
push dword [ebp - 0x260]
push dword [ebp - 0x300]
push dword [ebp - 0x2fc]
push dword [ebp - 0x2f8]
push dword [ebp - 0x2f4]
push dword [ebp - 0x2dc]
push dword [ebp - 0x2e8]
push dword [ebp - 0x2e0]
push dword [ebp - 0x2d4]
push dword [ebp - 0x2d8]
push dword [ebp - 0x2c8]
push eax
call fcn.100e520d
mov dword [ebp - 0x248], eax
jmp 0x100b5d9e
xor ebx, ebx
mov eax, ebx
mov dword [ebp - 0x248], ebx
mov ecx, edi
mov edi, eax
mov dword [ebp - 0x260], edi
mov dword [ebp - 0x24c], edi
test ecx, ecx
je 0x100b5dbe
push ecx
lea ecx, [ebp - 0x24c]
call fcn.1003a3c0
mov eax, dword [ebp - 0x22c]
test eax, 0x4000
je 0x100b5deb
mov ecx, dword [ebp - 0x378]
and eax, 0xffffbfff
mov dword [ebp - 0x22c], eax
test ecx, ecx
je 0x100b5deb
call fcn.10033890
mov eax, dword [ebp - 0x22c]
test eax, 0x2000
je 0x100b5e12
mov ecx, dword [ebp - 0x380]
and eax, 0xffffdfff
mov dword [ebp - 0x22c], eax
test ecx, ecx
je 0x100b5e12
call fcn.10033890
mov eax, dword [ebp - 0x22c]
test eax, 0x1000
je 0x100b5e39
mov ecx, dword [ebp - 0x3a0]
and eax, 0xffffefff
mov dword [ebp - 0x22c], eax
test ecx, ecx
je 0x100b5e39
call fcn.10033890
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 4], 0x5f
test eax, 0x800
je 0x100b5e5d
and eax, 0xfffff7ff
lea ecx, [ebp - 0x288]
mov dword [ebp - 0x22c], eax
call fcn.1001524d
mov ecx, dword [ebp - 0x228]
call fcn.10057143
mov ecx, eax
call fcn.1004038f
cmp edx, ebx
jl 0x100b61cd
jg 0x100b5e81
cmp eax, ebx
jbe 0x100b61cd
mov eax, dword [ebp - 0x254]
mov ecx, dword [eax + 0x4c]
call fcn.10034710
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x26c], eax
call fcn.10057143
mov ecx, eax
call fcn.100403d6
push dword [ebp - 0x2ac]
mov ecx, eax
mov eax, dword [ebp - 0x234]
mov ebx, dword [eax]
xor eax, eax
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0x26c]
push edx
push ecx
mov ecx, dword [ebx + 0x10]
call dword [0x1014488c]
mov ecx, dword [ebp - 0x234]
call dword [ebx + 0x10]
mov dword [ebp - 0x8c], eax
test eax, eax
je 0x100b61cb
push eax
call fcn.1003a3c0
mov ecx, dword [ebp - 0x25c]
mov dword [esp], 0x101e2a68
mov dword [ecx], eax
call sub.MSVCP140.dll__Mtx_lock
pop ecx
push eax
call fcn.1003a3c0
pop ecx
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x2c4]
push ebx
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x69
call fcn.1003a3c0
mov edi, dword [ebp - 0x244]
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x6a
push dword [edi + 8]
call fcn.1003a3c0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x6b
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.100e1c13
add esp, 0xc
mov dword [ebp - 0x2ac], eax
lea ecx, [ebp - 0x288]
call fcn.1001524d
lea ecx, [ebp - 0x2a8]
call fcn.1001524d
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x5f
call fcn.1001524d
cmp dword [ebp - 0x2ac], 0
je 0x100b605d
push ebx
lea ecx, [ebp - 0x2c4]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x6c
call fcn.1003a3c0
push dword [edi + 8]
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x6d
call fcn.1003a3c0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x6e
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.100e1c13
add esp, 0xc
mov ebx, eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x328]
push eax
call fcn.100b1b3c
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x6f
jb 0x100b6010
mov eax, dword [eax]
mov edi, dword [ebx]
push str.ValidateAndGetLatestSPForAppsByInstaller
push str._s_:_Saving_ASNP_failed
push eax
mov ecx, dword [edi + 0x24]
push ebx
call dword [0x1014488c]
call dword [edi + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x328]
call fcn.1001524d
lea ecx, [ebp - 0x288]
call fcn.1001524d
lea ecx, [ebp - 0x2a8]
call fcn.1001524d
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x5f
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
pop ecx
mov ecx, dword [ebp - 0x238]
lea eax, [ebp - 0x2c]
push eax
call fcn.1003a3c0
mov eax, dword [ebp - 0x68]
push 0x10
pop edi
cmp eax, edi
jb 0x100b608d
inc eax
push eax
push dword [ebp - 0x7c]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x30]
xor ebx, ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], bl
cmp eax, edi
jb 0x100b60af
inc eax
push eax
push dword [ebp - 0x44]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x50]
cmp eax, edi
jb 0x100b60c2
inc eax
push eax
push dword [ebp - 0x64]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], bl
test eax, eax
je 0x100b60e5
push eax
lea ecx, [ebp - 0x250]
call fcn.1003a3c0
lea ecx, [ebp - 0x88]
call fcn.10056572
lea ecx, [ebp - 0x224]
call fcn.1005295f
lea ecx, [ebp - 0xd8]
call fcn.1001524d
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x234], ecx
test ecx, ecx
je 0x100b616b
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2ac], eax
cmp ecx, eax
je 0x100b6146
push ebx
call fcn.1003a3c0
mov ecx, dword [ebp - 0x234]
add ecx, 0x78
mov dword [ebp - 0x234], ecx
cmp ecx, dword [ebp - 0x2ac]
jne 0x100b6120
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x234], ecx
mov eax, dword [ebp - 0x18]
sub eax, ecx
push 0x78
pop ecx
cdq
idiv ecx
imul eax, eax, 0x78
push eax
push dword [ebp - 0x234]
call fcn.1003a3c0
pop ecx
pop ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0xc0]
call fcn.1001524d
test esi, esi
je 0x100b6186
push esi
lea ecx, [ebp - 0x240]
call fcn.1003a3c0
lea eax, [ebp - 0x2c]
push eax
mov ecx, eax
call fcn.1003a3c0
mov eax, dword [ebp - 0x90]
cmp eax, edi
jb 0x100b61aa
inc eax
push eax
push dword [ebp - 0xa4]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x248]
test eax, eax
je 0x100b61c0
push eax
lea ecx, [ebp - 0x24c]
call fcn.1003a3c0
mov eax, dword [ebp - 0x238]
jmp 0x100b6758
xor ebx, ebx
push 0x1014a0f1
lea ecx, [ebp - 0x288]
call fcn.1003a3c0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x70
push eax
lea ecx, [ebp - 0x370]
mov dword [ebp - 0x360], ebx
mov dword [ebp - 0x35c], ebx
call fcn.1003a3c0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x71
push eax
lea ecx, [ebp - 0x358]
mov dword [ebp - 0x348], ebx
mov dword [ebp - 0x344], ebx
call fcn.1003a3c0
or dword [ebp - 0x22c], 0x40000
lea eax, [ebp - 0x370]
push eax
lea ecx, [ebp - 0x340]
call fcn.1003a3c0
lea eax, [ebp - 0x358]
push eax
lea ecx, [ebp - 0x328]
call fcn.1003a3c0
push ecx
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x73
push ebx
call fcn.1003a3c0
mov eax, dword [ebp - 0x248]
lea ecx, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.100d6f26
mov dword [ebp - 0x26c], eax
lea eax, [ebp - 0x340]
mov byte [ebp - 4], 0x74
push eax
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.1003a3c0
push dword [ebp - 0x26c]
mov ecx, dword [eax]
add ecx, 0x40
call fcn.1003a3c0
lea ecx, [ebp - 0x654]
call fcn.1001d2df
lea ecx, [ebp - 0x66c]
call fcn.1001524d
lea ecx, [ebp - 0x328]
call fcn.1001524d
lea ecx, [ebp - 0x340]
call fcn.1001524d
mov eax, dword [ebp - 0x344]
cmp eax, 0x10
jb 0x100b62e6
inc eax
push eax
push dword [ebp - 0x358]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x35c]
cmp eax, 0x10
jb 0x100b6300
inc eax
push eax
push dword [ebp - 0x370]
call fcn.1003a3c0
pop ecx
pop ecx
lea ecx, [ebp - 0x288]
call fcn.1001524d
mov eax, dword [ebp - 0x68]
mov dword [ebp - 4], 0x46
cmp eax, 0x10
jb 0x100b6326
inc eax
push eax
push dword [ebp - 0x7c]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], bl
cmp eax, 0x10
jb 0x100b6347
inc eax
push eax
push dword [ebp - 0x44]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x50]
cmp eax, 0x10
jb 0x100b635b
inc eax
push eax
push dword [ebp - 0x64]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], bl
mov byte [ebp - 4], 0x39
test eax, eax
je 0x100b6382
push eax
lea ecx, [ebp - 0x250]
call fcn.1003a3c0
mov eax, dword [ebp - 0x254]
mov ecx, dword [ebp - 0x290]
add eax, 0x50
jmp 0x100b50ef
mov eax, dword [ebp - 0x25c]
mov ecx, dword [ebp - 0x238]
mov dword [eax], ebx
lea eax, [ebp - 0x2c]
push eax
call fcn.1003a3c0
lea ecx, [ebp - 0x88]
call fcn.10056572
lea ecx, [ebp - 0x224]
call fcn.1005295f
lea ecx, [ebp - 0xd8]
call fcn.1001524d
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x270], ecx
test ecx, ecx
je 0x100b670f
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
je 0x100b66ea
mov esi, ecx
mov edi, eax
push ebx
mov ecx, esi
call fcn.1003a3c0
add esi, 0x78
cmp esi, edi
jne 0x100b66c6
mov ecx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x264]
mov edi, dword [ebp - 0x260]
mov dword [ebp - 0x270], ecx
mov eax, dword [ebp - 0x18]
sub eax, ecx
push 0x78
pop ecx
cdq
idiv ecx
imul eax, eax, 0x78
push eax
push dword [ebp - 0x270]
call fcn.1003a3c0
pop ecx
pop ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0xc0]
call fcn.1001524d
test esi, esi
je 0x100b672a
push esi
lea ecx, [ebp - 0x240]
call fcn.1003a3c0
lea eax, [ebp - 0x2c]
push eax
mov ecx, eax
call fcn.1003a3c0
lea ecx, [ebp - 0xa4]
call fcn.1001524d
test edi, edi
je 0x100b6750
push edi
lea ecx, [ebp - 0x24c]
call fcn.1003a3c0
mov ebx, dword [ebp - 0x238]
mov eax, ebx
call fcn.10110897
ret 0x10