Function at 0x347dccb9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x149c
call fcn.347eae3e
mov eax, dword [0x347765c8]
xor eax, esp
mov dword [esp + 0x1498], eax
mov edx, dword [0x347efae8]
push ebx
mov ebx, dword [esp + 0x14b4]
push ebp
mov ebp, dword [esp + 0x14ac]
xor eax, eax
push esi
push edi
mov edi, dword [esp + 0x14bc]
push eax
or ecx, 0xffffffff
mov dword [esp + 0x4c], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
push 0x208
mov dword [esp + 0x20], ecx
mov dword [esp + 0x18], ecx
lea eax, [esp + 0xe98]
push eax
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x14c4]
push ecx
mov dword [esp + 0x30], 1
mov eax, dword [edx + 0x14]
push ebp
call eax
mov esi, eax
test esi, esi
jl 0x347dde34
mov esi, dword [esp + 0x14b8]
mov edx, dword [0x347efae8]
mov eax, dword [edx + 0x18c]
lea ecx, [esp + 0x50]
push ecx
push 0x347712a0
push 0x3477128c
push esi
push ebp
call eax
test eax, eax
jl 0x347dde7a
cmp dword [esp + 0x50], 0
jne 0x347dcdc3
mov ecx, dword [0x347efae8]
mov edx, dword [ecx + 0x108]
push ebp
call edx
mov ecx, dword [0x347efae8]
mov edx, dword [ecx + 0x104]
push 0
push 0
push 0
push 0xffffdddf
push 0
push 0
lea eax, [esp + 0xea8]
push eax
push ebp
call edx
mov eax, 0xffffb1b7
jmp 0x347dde7a
mov eax, dword [0x347ed1ec]
push eax
call fcn.347c5233
and dword [esp + 0x14c4], 0xf
mov dword [0x347ed1cc], 0xffffffff
jne 0x347dcdef
mov dword [esp + 0x14c4], 4
jmp 0x347dce04
mov ecx, dword [esp + 0x14c4]
push ecx
call fcn.347b0309
test eax, eax
je 0x347dde75
mov eax, dword [0x347efae8]
mov ecx, dword [eax + 0x198]
lea edx, [esp + 0x78]
push edx
push esi
call ecx
test eax, eax
jl 0x347dde7a
test dword [esp + 0x78], 0x80000
je 0x347dce33
mov eax, 0xffffb0ab
jmp 0x347dde7a
mov edx, dword [0x347efae8]
mov eax, dword [edx + 0x228]
mov ecx, dword [eax + esi*4]
mov eax, dword [ecx + 0xcc]
test eax, 0x10000
je 0x347dce59
mov eax, 0xffffb0a4
jmp 0x347dde7a
and eax, 0x6000
test edi, edi
mov dword [esp + 0x34], eax
je 0x347dd872
cmp word [edi], 0
je 0x347dd872
push 7
push 0x34775c54
push edi
call fcn.34776d37
add esp, 0xc
test eax, eax
jne 0x347dce8b
add edi, 0xe
xor ebx, ebx
xor esi, esi
lea eax, [edi + 4]
lea esp, [esp]
movzx ecx, word [eax - 4]
cmp cx, bx
je 0x347dcf01
cmp cx, 0x2f
je 0x347dcf01
movzx ecx, word [eax - 2]
cmp cx, bx
je 0x347dceef
cmp cx, 0x2f
je 0x347dceef
movzx ecx, word [eax]
cmp cx, bx
je 0x347dcef4
cmp cx, 0x2f
je 0x347dcef4
movzx ecx, word [eax + 2]
cmp cx, bx
je 0x347dcef9
cmp cx, 0x2f
je 0x347dcef9
movzx ecx, word [eax + 4]
cmp cx, bx
je 0x347dcefe
cmp cx, 0x2f
je 0x347dcefe
add esi, 5
add eax, 0xa
cmp esi, 0x104
jb 0x347dce95
jmp 0x347dcf01
add esi, 1
jmp 0x347dcf01
add esi, 2
jmp 0x347dcf01
add esi, 3
jmp 0x347dcf01
add esi, 4
lea edx, [esi + esi]
push edx
lea eax, [esp + 0x109c]
push edi
push eax
call sub.msvcr80.dll_memcpy
add esp, 0xc
cmp esi, 0x103
jb 0x347dcf23
mov esi, 0x103
push 0x2f
push edi
mov word [esp + esi*2 + 0x10a0], bx
call fcn.347dc415
cmp eax, ebx
jne 0x347dcf41
mov word [esp + 0xa80], bx
jmp 0x347dcf55
push 0x104
lea ecx, [esp + 0xa84]
push ecx
push eax
call dword [sym.imp.MSO.dll_Ordinal_6877]
mov edi, dword [esp + 0x14b8]
lea edx, [esp + 0x14]
push edx
push 0x10
lea eax, [esp + 0xc4]
push eax
push 1
push ebx
push edi
push ebp
call fcn.347a316f
mov esi, eax
cmp esi, ebx
jl 0x347dde34
push ebx
push ebx
lea ecx, [esp + 0x34]
push ecx
push ebx
lea edx, [esp + 0x4c]
push edx
lea eax, [esp + 0xd0]
push eax
push edi
push ebp
call fcn.347ad41a
mov esi, eax
cmp esi, ebx
jl 0x347dde34
lea ecx, [esp + 0x14]
push ecx
push 4
lea edx, [esp + 0x84]
push edx
push 6
push ebx
push edi
push ebp
call fcn.347a316f
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov ecx, dword [0x347efae8]
mov edx, dword [ecx + 0x60]
push 0x400000
push 0x34772638
lea eax, [esp + 0x20]
push eax
push edi
push ebp
call edx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov ecx, dword [esp + 0x18]
mov edx, dword [0x347efae8]
push ebx
push 0x18
lea eax, [esp + 0x5c]
push eax
mov eax, dword [edx + 0xbc]
push 0x34772894
push ecx
push ebp
call eax
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x18]
push ebx
push 0x18
lea edx, [esp + 0x5c]
push edx
push 0x347740c0
mov dword [esp + 0x80], ecx
mov ecx, dword [0x347efae8]
mov edx, dword [ecx + 0xbc]
push eax
push ebp
call edx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x18]
push ebx
push 0x18
lea ecx, [esp + 0x5c]
push ecx
push 0x34773230
mov dword [esp + 0xa0], eax
mov eax, dword [0x347efae8]
mov ecx, dword [eax + 0xbc]
push edx
push ebp
call ecx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov eax, dword [0x347efae8]
mov ecx, dword [eax + 0x60]
push 0x400000
push 0x34772528
lea edx, [esp + 0x18]
push edx
push edi
push ebp
call ecx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov edx, dword [esp + 0x10]
mov eax, dword [0x347efae8]
mov ecx, dword [eax + 0x74]
push 0x34772894
push edx
push ebp
call ecx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov eax, dword [esp + 0x10]
mov ecx, dword [0x347efae8]
push ebx
push 0x18
lea edx, [esp + 0x5c]
push edx
mov edx, dword [ecx + 0xbc]
push 0x34772bd8
push eax
push ebp
call edx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x10]
push ebx
push 0x18
lea ecx, [esp + 0x5c]
push ecx
push 0x34772bc4
mov dword [esp + 0x7c], eax
mov eax, dword [0x347efae8]
mov ecx, dword [eax + 0xbc]
push edx
push ebp
call ecx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0x10]
push ebx
push 0x18
lea eax, [esp + 0x5c]
push eax
push 0x34772cb0
mov dword [esp + 0x9c], edx
mov edx, dword [0x347efae8]
mov eax, dword [edx + 0xbc]
push ecx
push ebp
call eax
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x10]
push ebx
push 0x18
lea edx, [esp + 0x5c]
push edx
push 0x34772bf0
mov dword [esp + 0x94], ecx
mov ecx, dword [0x347efae8]
mov edx, dword [ecx + 0xbc]
push eax
push ebp
call edx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x10]
push ebx
push 0x18
lea ecx, [esp + 0x5c]
push ecx
push 0x34772864
mov dword [esp + 0x90], eax
mov eax, dword [0x347efae8]
mov ecx, dword [eax + 0xbc]
push edx
push ebp
call ecx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x18]
mov ecx, dword [0x347efae8]
push ebx
push 0x80000000
push eax
mov dword [esp + 0x44], edx
mov edx, dword [ecx + 0x84]
push ebp
mov dword [esp + 0x40], 1
call edx
mov esi, eax
cmp esi, ebx
jl 0x347dd7fb
mov edx, dword [esp + 0x70]
push ebx
push ebx
lea eax, [esp + 0x1c]
push eax
mov eax, dword [esp + 0x24]
push 0x10
lea ecx, [esp + 0xac]
push ecx
mov ecx, dword [0x347efae8]
push edx
mov edx, dword [ecx + 0x88]
push eax
push ebp
mov dword [esp + 0x3c], ebx
call edx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov edx, dword [esp + 0x90]
push ebx
push ebx
lea eax, [esp + 0x1c]
push eax
mov eax, dword [esp + 0x24]
push 0x208
lea ecx, [esp + 0x12b0]
push ecx
mov ecx, dword [0x347efae8]
push edx
mov edx, dword [ecx + 0x88]
push eax
push ebp
call edx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x1098]
push ecx
lea edx, [esp + 0x12a4]
shr eax, 1
push edx
mov word [esp + eax*2 + 0x12a8], bx
call fcn.34776ce7
add esp, 8
test eax, eax
jne 0x347dd7d4
mov dword [esp + 0x40], 1
lea ecx, [ecx]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x347efae8]
push 1
push 0x10
lea eax, [esp + 0xa4]
push eax
mov eax, dword [edx + 0x9c]
push ecx
push ebp
call eax
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov ecx, dword [0x347ed1c4]
imul ecx, ecx, 0x3e8
mov eax, 0x10624dd3
mul ecx
xor edi, edi
shr edx, 5
je 0x347dd33f
mov edx, dword [esp + 0x10]
mov eax, dword [0x347efae8]
mov ecx, dword [eax + 0xa0]
push 1
push edx
push ebp
call ecx
mov esi, eax
cmp esi, 0xfffffbae
je 0x347dd317
cmp esi, 0xfffffbaf
je 0x347dd317
cmp esi, 0xfffffbb2
jne 0x347dd33f
push 0x1f4
call dword [sym.imp.kernel32.dll_Sleep]
mov edx, dword [0x347ed1c4]
imul edx, edx, 0x3e8
mov eax, 0x10624dd3
mul edx
add edi, 1
shr edx, 5
cmp edi, edx
jb 0x347dd2e8
cmp esi, ebx
jl 0x347dd7c8
mov ecx, dword [esp + 0x10]
mov edx, dword [0x347efae8]
push 1
push 0x10
lea eax, [esp + 0xa4]
push eax
mov eax, dword [edx + 0x9c]
push ecx
push ebp
call eax
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov ecx, dword [esp + 0x10]
mov edx, dword [0x347efae8]
mov eax, dword [edx + 0xa4]
push 3
push ecx
push ebp
call eax
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov edx, dword [esp + 0x10]
mov eax, dword [0x347efae8]
push 1
push 0x10
lea ecx, [esp + 0xa4]
push ecx
mov ecx, dword [eax + 0x9c]
push edx
push ebp
call ecx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov edx, dword [0x347ed1c4]
imul edx, edx, 0x3e8
mov eax, 0x10624dd3
mul edx
xor edi, edi
shr edx, 5
je 0x347dd42f
lea esp, [esp]
mov eax, dword [esp + 0x10]
mov ecx, dword [0x347efae8]
mov edx, dword [ecx + 0xa0]
push 1
push eax
push ebp
call edx
mov esi, eax
cmp esi, 0xfffffbae
je 0x347dd407
cmp esi, 0xfffffbaf
je 0x347dd407
cmp esi, 0xfffffbb2
jne 0x347dd42f
push 0x1f4
call dword [sym.imp.kernel32.dll_Sleep]
mov ecx, dword [0x347ed1c4]
imul ecx, ecx, 0x3e8
mov eax, 0x10624dd3
mul ecx
add edi, 1
shr edx, 5
cmp edi, edx
jb 0x347dd3d7
cmp esi, ebx
mov dword [esp + 0x1c], ebx
jl 0x347dd795
mov ecx, dword [esp + 0x38]
push ebx
push ebx
lea edx, [esp + 0x1c]
push edx
mov edx, dword [esp + 0x1c]
push 0x10
lea eax, [esp + 0xdc]
push eax
mov eax, dword [0x347efae8]
push ecx
mov ecx, dword [eax + 0x88]
push edx
push ebp
call ecx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
cmp dword [esp + 0x2c], ebx
jne 0x347dd50a
mov eax, 0x10
lea ecx, [esp + 0xcc]
lea edx, [esp + 0xbc]
mov esi, dword [edx]
cmp esi, dword [ecx]
jne 0x347dd4a3
sub eax, 4
add ecx, 4
add edx, 4
cmp eax, 4
jae 0x347dd48b
cmp eax, ebx
je 0x347dd500
movzx edi, byte [ecx]
movzx esi, byte [edx]
sub esi, edi
jne 0x347dd4f2
sub eax, 1
add ecx, 1
add edx, 1
cmp eax, ebx
je 0x347dd500
movzx edi, byte [ecx]
movzx esi, byte [edx]
sub esi, edi
jne 0x347dd4f2
sub eax, 1
add ecx, 1
add edx, 1
cmp eax, ebx
je 0x347dd500
movzx edi, byte [ecx]
movzx esi, byte [edx]
sub esi, edi
jne 0x347dd4f2
sub eax, 1
add ecx, 1
add edx, 1
cmp eax, ebx
je 0x347dd500
movzx eax, byte [ecx]
movzx esi, byte [edx]
sub esi, eax
je 0x347dd500
cmp esi, ebx
mov eax, 1
jg 0x347dd502
or eax, 0xffffffff
jmp 0x347dd502
xor eax, eax
cmp eax, ebx
je 0x347dd770
cmp word [esp + 0xa80], bx
je 0x347dd61d
mov eax, dword [esp + 0x8c]
push ebx
push ebx
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x1c]
push 0x208
lea edx, [esp + 0x888]
push edx
mov edx, dword [0x347efae8]
push eax
mov eax, dword [edx + 0x88]
push ecx
push ebp
call eax
mov esi, eax
cmp esi, ebx
jl 0x347dde34
jne 0x347dd591
mov ecx, dword [esp + 0x14]
push 0x5c
lea edx, [esp + 0x87c]
shr ecx, 1
push edx
mov word [esp + ecx*2 + 0x880], bx
call fcn.347dc415
cmp eax, ebx
jne 0x347dd57c
lea eax, [esp + 0x878]
lea ecx, [esp + 0xa80]
push ecx
push eax
call fcn.34776ce7
add esp, 8
test eax, eax
je 0x347dd60e
mov ecx, dword [esp + 0x6c]
push ebx
push ebx
lea edx, [esp + 0x1c]
push edx
mov edx, dword [esp + 0x1c]
push 0x208
lea eax, [esp + 0x888]
push eax
mov eax, dword [0x347efae8]
push ecx
mov ecx, dword [eax + 0x88]
push edx
push ebp
call ecx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
jne 0x347dd770
mov edx, dword [esp + 0x14]
push 0x5c
lea eax, [esp + 0x87c]
shr edx, 1
push eax
mov word [esp + edx*2 + 0x880], bx
call fcn.347dc415
cmp eax, ebx
jne 0x347dd5f5
lea eax, [esp + 0x878]
lea ecx, [esp + 0xa80]
push ecx
push eax
call fcn.34776ce7
add esp, 8
test eax, eax
jne 0x347dd770
mov eax, 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x4c], eax
jmp 0x347dd625
mov dword [esp + 0x1c], 1
mov ecx, dword [esp + 0x84]
push ebx
push ebx
lea edx, [esp + 0x1c]
push edx
mov edx, dword [esp + 0x1c]
push 2
lea eax, [esp + 0x54]
push eax
mov eax, dword [0x347efae8]
push ecx
mov ecx, dword [eax + 0x88]
push edx
push ebp
call ecx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
cmp esi, 0x3ec
jne 0x347dd664
mov dword [esp + 0x44], ebx
mov ecx, dword [esp + 0x80]
push ebx
push ebx
lea edx, [esp + 0x1c]
push edx
mov edx, dword [esp + 0x1c]
push 4
lea eax, [esp + 0x98]
push eax
mov eax, dword [0x347efae8]
push ecx
mov ecx, dword [eax + 0x88]
push edx
push ebp
call ecx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
cmp dword [esp + 0x30], ebx
je 0x347dd6ad
cmp dword [esp + 0x88], ebx
jne 0x347dd770
test byte [esp + 0x44], 0xf
jne 0x347dd770
mov edi, dword [esp + 0x14b8]
lea edx, [esp + 0x14]
push edx
push 4
lea eax, [esp + 0x28]
push eax
push 0x18
push ebx
lea ecx, [esp + 0xb0]
push ecx
push edi
push ebp
call fcn.347c8c64
mov esi, eax
cmp esi, ebx
jl 0x347dde34
cmp esi, 0x3ec
jne 0x347dd6f5
mov dword [esp + 0x20], ebx
jmp 0x347dd770
cmp dword [esp + 0x20], ebx
je 0x347dd770
mov ecx, dword [esp + 0x38]
push ebx
push ebx
lea edx, [esp + 0x1c]
push edx
mov edx, dword [esp + 0x1c]
push 0x10
lea eax, [esp + 0xcc]
push eax
mov eax, dword [0x347efae8]
push ecx
mov ecx, dword [eax + 0x88]
push edx
push ebp
call ecx
mov esi, eax
cmp esi, ebx
jl 0x347dde34
cmp dword [esp + 0x34], ebx
je 0x347dd7f7
lea edx, [esp + 0x74]
push edx
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0xa0]
push ecx
lea edx, [esp + 0xc8]
push edx
push edi
push ebp
call fcn.347b839b
mov esi, eax
cmp esi, ebx
jl 0x347dde34
cmp dword [esp + 0x74], ebx
jne 0x347dd7f7
mov eax, dword [esp + 0x10]
mov ecx, dword [0x347efae8]
mov edx, dword [ecx + 0x84]
push ebx
push 1
push eax
push ebp
mov dword [esp + 0x2c], ebx
call edx
mov esi, eax
cmp esi, ebx
jge 0x347dd43b
cmp esi, 0xfffff9bf
je 0x347dd7a9
cmp esi, 0xfffff9bd
jne 0x347dde34
cmp dword [esp + 0x7c], ebx
jne 0x347dd7be
cmp dword [esp + 0x30], ebx
je 0x347dd7be
mov dword [esp + 0x30], ebx
jmp 0x347dd2a4
mov dword [esp + 0x30], 1
jmp 0x347dd7d4
cmp esi, 0xfffff9bf
jne 0x347dde34
mov eax, dword [esp + 0x18]
mov ecx, dword [0x347efae8]
mov edx, dword [ecx + 0x84]
push ebx
push 1
push eax
push ebp
call edx
mov esi, eax
cmp esi, ebx
jge 0x347dd1fa
jmp 0x347dd7fb
cmp esi, ebx
jge 0x347dd807
cmp esi, 0xfffff9bd
jne 0x347dde34
mov eax, dword [esp + 0x18]
mov ecx, dword [0x347efae8]
mov edx, dword [ecx + 0x68]
push eax
push ebp
call edx
mov eax, dword [esp + 0x10]
mov ecx, dword [0x347efae8]
or esi, 0xffffffff
push eax
mov dword [esp + 0x1c], esi
mov edx, dword [ecx + 0x68]
push ebp
call edx
cmp dword [esp + 0x1c], ebx
mov dword [esp + 0x10], esi
jne 0x347dd92f
cmp dword [esp + 0x40], ebx
jne 0x347dd84e
mov eax, 0xffffb12b
jmp 0x347dde7a
cmp word [esp + 0xa80], bx
je 0x347dd868
cmp dword [esp + 0x4c], ebx
jne 0x347dd868
mov eax, 0xffffb12a
jmp 0x347dde7a
mov eax, 0xffffb12c
jmp 0x347dde7a
test ebx, ebx
je 0x347dde75
mov eax, 0x10
mov ecx, 0x34774184
mov edx, ebx
nop
mov esi, dword [edx]
cmp esi, dword [ecx]
jne 0x347dd89f
sub eax, 4
add ecx, 4
add edx, 4
cmp eax, 4
jae 0x347dd887
test eax, eax
je 0x347dd8fc
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x347dd8ee
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x347dd8fc
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x347dd8ee
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x347dd8fc
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x347dd8ee
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x347dd8fc
movzx esi, byte [edx]
movzx eax, byte [ecx]
sub esi, eax
je 0x347dd8fc
test esi, esi
mov eax, 1
jg 0x347dd8fe
or eax, 0xffffffff
jmp 0x347dd8fe
xor eax, eax
test eax, eax
je 0x347dde75
mov ecx, dword [ebx]
mov edx, dword [ebx + 4]
mov eax, dword [ebx + 8]
mov dword [esp + 0x9c], ecx
mov ecx, dword [ebx + 0xc]
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], ecx
xor ebx, ebx
lea edx, [esp + 0xdc]
push edx
call fcn.347d9559
mov ecx, dword [0x347ed1ec]
lea eax, [esp + 0xdc]
push ecx
mov dword [esp + 0x4c], eax
mov word [0x347ef2c0], bx
call fcn.347c5233
mov edx, dword [0x347ed1ec]
mov dword [edx + 0x18], ebp
mov eax, dword [0x347ed1ec]
mov ecx, dword [0x347efae8]
mov edx, dword [ecx + 0xf8]
add eax, 0x14
push eax
push ebp
call edx
mov eax, dword [0x347ed1ec]
mov dword [eax + 0x1c], 0xc
mov eax, dword [0x347ed1ec]
mov ecx, dword [eax + 0x14]
cmp ecx, ebx
mov edx, dword [eax + 0x1c]
mov eax, dword [eax + 0x18]
je 0x347dd9ae
push ecx
push edx
push ebx
push 0xe
push eax
call fcn.347b6ac8
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov edi, dword [esp + 0x14b8]
lea ecx, [esp + 0x14]
push ecx
push 4
lea edx, [esp + 0x28]
push edx
push 0x18
push ebx
lea eax, [esp + 0xb0]
push eax
push edi
push ebp
call fcn.347c8c64
mov esi, eax
cmp esi, ebx
jl 0x347dde34
cmp esi, 0x3ec
jne 0x347dd9f3
mov dword [esp + 0x20], ebx
mov esi, 0xffffb13e
jmp 0x347dde34
cmp dword [esp + 0x20], ebx
jne 0x347dda03
mov esi, 0xffffb13e
jmp 0x347dde34
lea ecx, [esp + 0x14]
push ecx
push 0x208
lea edx, [esp + 0xc90]
push edx
push 0x1a
push ebx
lea eax, [esp + 0xb0]
push eax
push edi
push ebp
call fcn.347c8c64
cmp eax, ebx
jl 0x347dde2f
cmp eax, 0x3ec
je 0x347dde2f
mov eax, dword [0x347ed1ec]
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x14]
push edx
push 0x1fe
add eax, 0x21e
push eax
push 0x2a
shr ecx, 1
push ebx
mov word [esp + ecx*2 + 0xc9c], bx
lea ecx, [esp + 0xb0]
push ecx
push edi
push ebp
call fcn.347c8c64
cmp eax, ebx
jl 0x347dde2f
cmp eax, 0x3ec
jne 0x347dda86
xor eax, eax
mov dword [esp + 0x14], eax
jmp 0x347dda8a
mov eax, dword [esp + 0x14]
mov edx, dword [0x347ed1ec]
shr eax, 1
mov word [edx + eax*2 + 0x21e], bx
lea eax, [esp + 0x14]
push eax
push 0x208
push 0x347ef2c0
push 0x2b
push ebx
lea ecx, [esp + 0xb0]
push ecx
push edi
push ebp
call fcn.347c8c64
cmp eax, ebx
jl 0x347dde2f
cmp eax, 0x3ec
jne 0x347ddad2
xor eax, eax
mov dword [esp + 0x14], eax
jmp 0x347ddad6
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x14b0]
push 6
shr eax, 1
push edi
mov word [eax*2 + 0x347ef2c0], bx
call sym.acerep.dll_Ordinal_2095
mov esi, eax
cmp esi, ebx
jge 0x347ddb27
cmp esi, 0xffffb17b
jne 0x347dde34
call sym.acerep.dll_Ordinal_2099
mov esi, eax
cmp esi, ebx
jl 0x347dde34
call sym.acerep.dll_Ordinal_2096
push 6
push edi
call sym.acerep.dll_Ordinal_2095
mov esi, eax
cmp esi, ebx
jl 0x347dde34
mov edi, dword [0x347ed568]
mov eax, dword [esp + 0x9c]
mov edx, dword [edi + 0x40]
mov dword [edi + 0x2c], eax
mov ecx, dword [esp + 0xa0]
add edi, 0x2c
mov dword [edi + 4], ecx
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0xa4]
mov dword [edi + 8], edx
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov ecx, dword [0x347ed1cc]
mov edx, dword [0x347ed1ec]
push ecx
push 0x347db730
push edx
push ebx
lea eax, [esp + 0xc98]
push eax
mov ecx, eax
push ecx
mov dword [esp + 0x40], edi
call fcn.347c54b1
mov esi, eax
cmp esi, ebx
jl 0x347dde34
lea ebx, [edi + 0x68]
push ebx
lea edx, [esp + 0xe0]
push edx
push 1
push 0
lea eax, [esp + 0xea0]
mov dword [0x347ed584], 1
mov ecx, dword [edi + 0x14]
push eax
push ecx
mov dword [esp + 0x4c], ebx
call fcn.347d96c4
mov esi, eax
test esi, esi
jl 0x347dde34
push 0
push 0
lea edx, [esp + 0x34]
push edx
mov edx, dword [esp + 0xf8]
push 0
lea eax, [esp + 0x4c]
push eax
mov eax, dword [edi + 0x14]
lea ecx, [esp + 0xf0]
push ecx
push edx
push eax
call fcn.347ad41a
mov esi, eax
test esi, esi
jl 0x347dde34
cmp dword [esp + 0x2c], 0
je 0x347ddc65
mov ecx, dword [esp + 0xec]
mov edx, dword [edi + 0x14]
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push edx
call fcn.347ba88f
mov esi, eax
test esi, esi
jl 0x347dde34
mov ecx, dword [edi + 0x14]
push ebx
lea eax, [esp + 0xe0]
push eax
push ecx
call fcn.347d9596
mov ecx, dword [edi + 0x14]
push ebx
lea edx, [esp + 0xe0]
push edx
push 1
push 0
lea eax, [esp + 0xea0]
push eax
push ecx
call fcn.347d96c4
mov esi, eax
test esi, esi
jl 0x347dde34
mov ecx, dword [0x3477418c]
mov edx, dword [0x34774184]
mov eax, dword [0x34774188]
mov dword [esp + 0xb4], ecx
mov ecx, dword [0x347ed1c4]
imul ecx, ecx, 0x3e8
mov dword [esp + 0xac], edx
mov edx, dword [0x34774190]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb8], edx
mov eax, 0x10624dd3
mul ecx
xor edi, edi
shr edx, 5
je 0x347ddd55
mov ebx, dword [esp + 0x1c]
neg ebx
sbb ebx, ebx
lea edx, [esp + 0xbc]
and ebx, edx
mov ecx, dword [esp + 0x14c4]
push ebx
lea eax, [esp + 0xa0]
push eax
mov eax, dword [esp + 0x10c]
push 0x34773668
push ecx
mov ecx, dword [esp + 0x104]
lea edx, [esp + 0xbc]
push edx
mov edx, dword [esp + 0x100]
push 0
push 1
push 1
push 1
push eax
mov eax, dword [esp + 0x4c]
push ecx
push edx
push eax
call fcn.347c3215
mov esi, eax
cmp esi, 0xfffffbae
je 0x347ddd29
cmp esi, 0xfffffbaf
je 0x347ddd29
cmp esi, 0xfffffbb2
jne 0x347ddd55
push 0x1f4
call dword [sym.imp.kernel32.dll_Sleep]
mov ecx, dword [0x347ed1c4]
imul ecx, ecx, 0x3e8
mov eax, 0x10624dd3
mul ecx
add edi, 1
shr edx, 5
cmp edi, edx
jb 0x347ddcc7
test esi, esi
jl 0x347dde34
mov ecx, dword [esp + 0x28]
lea edx, [esp + 0xac]
push edx
lea eax, [esp + 0xe0]
push eax
push ecx
call fcn.347dc012
mov esi, eax
test esi, esi
jl 0x347dde34
mov eax, dword [esp + 0x28]
lea edx, [esp + 0xdc]
push edx
push eax
call fcn.347dcb8b
mov esi, eax
test esi, esi
jl 0x347dde34
mov ecx, dword [0x347ed1ec]
mov edx, dword [esp + 0x34]
push edx
lea eax, [esp + 0xe0]
mov dword [ecx + 0x1c], 0x11
mov ecx, dword [esp + 0x28]
push eax
push ecx
call fcn.347d9596
mov edx, dword [0x347ed1ec]
push edx
call fcn.347c5718
call sym.acerep.dll_Ordinal_2096
mov edx, dword [esp + 0x14b8]
lea eax, [esp + 0x1f0]
push eax
lea ecx, [esp + 0xb0]
push ecx
push edx
push ebp
call fcn.3477e585
test eax, eax
jl 0x347dde2b
cmp dword [esp + 0x218], 3
jne 0x347dde2b
mov ecx, dword [0x347efae8]
mov edx, dword [ecx + 0x104]
push 0
push 0
push 3
push 0xffffddda
push 0
push 0
lea eax, [esp + 0x48e]
push eax
push ebp
call edx
mov eax, 0xffffb138
jmp 0x347dde7a
xor eax, eax
jmp 0x347dde7a
mov esi, 0xffffb145
mov eax, dword [0x347ed1ec]
mov dword [eax + 0x1c], 0x11
mov eax, dword [esp + 0x48]
test eax, eax
je 0x347dde61
cmp dword [eax + 0x10], 0xffffffff
je 0x347dde61
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
add ecx, 0x68
push ecx
push eax
push edx
call fcn.347d9596
mov eax, dword [0x347ed1ec]
push eax
call fcn.347c5718
call sym.acerep.dll_Ordinal_2096
mov eax, esi
jmp 0x347dde7a
mov eax, 0xfffffc15
mov ecx, dword [esp + 0x14a8]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.347ea89f
add esp, 0x149c
ret 0x18