Function at 0x1151fd0
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, 0x1a98
call fcn.01178910
push esi
mov esi, dword [ebx + 0xc]
push edi
mov ecx, 0x388
lea edi, [ebp - 0xe38]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x10]
mov eax, dword [ecx + 0x144]
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], edx
cmp eax, edx
je 0x1152024
cmp byte [eax], 0x59
jne 0x1152024
mov dword [ebp - 0xa2c], edx
mov eax, dword [ecx + 0x10]
mov esi, dword [ebx + 8]
cmp eax, edx
je 0x1152044
push 0x14
push eax
mov eax, dword [esi + 0x8890]
push 0xffffffffffffffff
push eax
call fcn.0102e5d0
mov dword [ebp - 0xc], eax
jmp 0x1152047
mov dword [ebp - 0xc], edx
mov edi, dword [ebx + 0x10]
mov eax, dword [edi + 0x13c]
test eax, eax
je 0x1152066
cmp byte [eax], 0x59
jne 0x1152066
lea ecx, [ebp - 0xe38]
push ecx
push esi
call fcn.0103c770
mov eax, dword [edi + 0x1b8]
test eax, eax
je 0x1152093
cmp dword [ebp - 0xcb4], 0
jne 0x1152085
test dword [ebp - 0xd70], 0x200
jne 0x1152093
lea edx, [ebp - 0xe38]
push edx
push eax
push esi
call fcn.0113e970
xor esi, esi
cmp dword [ebx + 0x18], esi
je 0x1153292
mov ecx, dword [edi + 0xac]
mov eax, dword [ebp - 0xce4]
mov dword [ebp - 8], eax
cmp ecx, esi
je 0x1152695
mov eax, dword [edi + 0xa4]
mov dword [ebp - 0xce4], esi
mov dword [ebp - 0xca0], esi
mov dword [ebp - 0xc9c], esi
cmp eax, esi
je 0x11520f5
mov al, byte [eax]
test al, al
je 0x11520f5
cmp al, 0x59
je 0x11520e3
cmp al, 0x79
je 0x11520e3
cmp al, 0x4e
jne 0x11520ef
mov dword [ebp - 0xce4], 0x20
jmp 0x11520f5
mov dword [ebp - 0xce4], esi
mov eax, dword [edi + 0xa8]
cmp eax, esi
je 0x1152127
mov al, byte [eax]
test al, al
je 0x1152127
cmp al, 0x59
je 0x1152111
cmp al, 0x79
je 0x1152111
cmp al, 0x4e
jne 0x115211d
or dword [ebp - 0xce4], 0x80
jmp 0x1152127
and dword [ebp - 0xce4], 0xffffff7f
mov eax, dword [edi + 0x94]
mov edx, 0xfffffffd
cmp eax, esi
je 0x1152157
mov al, byte [eax]
test al, al
je 0x1152157
cmp al, 0x59
je 0x1152148
cmp al, 0x79
je 0x1152148
cmp al, 0x4e
jne 0x1152151
or dword [ebp - 0xce4], 2
jmp 0x1152157
and dword [ebp - 0xce4], edx
mov cl, byte [ecx]
test cl, cl
je 0x1152182
cmp cl, 0x59
je 0x115216c
cmp cl, 0x79
je 0x115216c
cmp cl, 0x4e
jne 0x1152178
or dword [ebp - 0xce4], 0x200
jmp 0x1152182
and dword [ebp - 0xce4], 0xfffffdff
mov eax, dword [edi + 0xb0]
cmp eax, esi
je 0x11521ae
mov al, byte [eax]
test al, al
je 0x11521ae
cmp al, 0x59
je 0x115219e
cmp al, 0x79
je 0x115219e
cmp al, 0x4e
jne 0x11521a7
or dword [ebp - 0xce4], 1
jmp 0x11521ae
and dword [ebp - 0xce4], 0xfffffffe
mov eax, dword [edi + 0xb4]
cmp eax, esi
je 0x11521dd
mov al, byte [eax]
test al, al
je 0x11521dd
cmp al, 0x59
je 0x11521ca
cmp al, 0x79
je 0x11521ca
cmp al, 0x4e
jne 0x11521d7
mov edx, 2
or dword [ebp - 0xce4], edx
jmp 0x11521e2
and dword [ebp - 0xce4], edx
mov edx, 2
mov eax, dword [edi + 0xb8]
cmp eax, esi
je 0x1152214
mov al, byte [eax]
test al, al
je 0x1152214
cmp al, 0x59
je 0x11521fe
cmp al, 0x79
je 0x11521fe
cmp al, 0x4e
jne 0x115220a
or dword [ebp - 0xce4], 0x400
jmp 0x1152214
and dword [ebp - 0xce4], 0xfffffbff
mov eax, dword [edi + 0xbc]
cmp eax, esi
je 0x1152246
mov al, byte [eax]
test al, al
je 0x1152246
cmp al, 0x59
je 0x1152230
cmp al, 0x79
je 0x1152230
cmp al, 0x4e
jne 0x115223c
or dword [ebp - 0xce4], 0x800
jmp 0x1152246
and dword [ebp - 0xce4], 0xfffff7ff
mov eax, dword [edi + 0xc0]
cmp eax, esi
je 0x1152272
mov al, byte [eax]
test al, al
je 0x1152272
cmp al, 0x59
je 0x1152262
cmp al, 0x79
je 0x1152262
cmp al, 0x4e
jne 0x115226b
or dword [ebp - 0xce4], 0x40
jmp 0x1152272
and dword [ebp - 0xce4], 0xffffffbf
mov eax, dword [edi + 0xc4]
cmp eax, esi
je 0x115229e
mov al, byte [eax]
test al, al
je 0x115229e
cmp al, 0x59
je 0x115228e
cmp al, 0x79
je 0x115228e
cmp al, 0x4e
jne 0x1152297
or dword [ebp - 0xce4], 4
jmp 0x115229e
and dword [ebp - 0xce4], 0xfffffffb
mov eax, dword [edi + 0xf0]
cmp eax, esi
je 0x11522d0
mov al, byte [eax]
test al, al
je 0x11522d0
cmp al, 0x59
je 0x11522ba
cmp al, 0x79
je 0x11522ba
cmp al, 0x4e
jne 0x11522c6
or dword [ebp - 0xce4], 0x1000
jmp 0x11522d0
and dword [ebp - 0xce4], 0xffffefff
mov eax, dword [edi + 0xf4]
cmp eax, esi
je 0x1152302
mov al, byte [eax]
test al, al
je 0x1152302
cmp al, 0x59
je 0x11522ec
cmp al, 0x79
je 0x11522ec
cmp al, 0x4e
jne 0x11522f8
or dword [ebp - 0xce4], 0x10000000
jmp 0x1152302
and dword [ebp - 0xce4], 0xefffffff
mov eax, dword [edi + 0xf8]
cmp eax, esi
je 0x115232c
mov al, byte [eax]
test al, al
je 0x115232c
cmp al, 0x59
je 0x115231e
cmp al, 0x79
je 0x115231e
cmp al, 0x4e
jne 0x1152326
mov dword [ebp - 0xca0], edx
jmp 0x115232c
mov dword [ebp - 0xca0], esi
mov esi, dword [ebx + 8]
test byte [ebp - 0xce4], dl
je 0x1152349
mov ecx, dword [esi]
xor eax, eax
mov dword [ecx + 0xa48], eax
mov ecx, dword [esi]
mov dword [ecx + 0xa4c], eax
mov eax, dword [edi + 0xfc]
test eax, eax
je 0x115237b
mov al, byte [eax]
test al, al
je 0x115237b
cmp al, 0x59
je 0x1152365
cmp al, 0x79
je 0x1152365
cmp al, 0x4e
jne 0x1152371
or dword [ebp - 0xce4], 0x2000
jmp 0x115237b
and dword [ebp - 0xce4], 0xffffdfff
mov eax, dword [edi + 0x104]
test eax, eax
je 0x11523ad
mov al, byte [eax]
test al, al
je 0x11523ad
cmp al, 0x59
je 0x1152397
cmp al, 0x79
je 0x1152397
cmp al, 0x4e
jne 0x11523a3
or dword [ebp - 0xce4], 0x10000
jmp 0x11523ad
and dword [ebp - 0xce4], 0xfffeffff
mov ecx, dword [edi + 0x108]
test ecx, ecx
je 0x11523df
mov al, byte [ecx]
test al, al
je 0x11523df
cmp al, 0x59
je 0x11523c9
cmp al, 0x79
je 0x11523c9
cmp al, 0x4e
jne 0x11523d5
or dword [ebp - 0xce4], 0x100000
jmp 0x11523df
and dword [ebp - 0xce4], 0xffefffff
mov eax, dword [edi + 0xc8]
test eax, eax
je 0x1152411
mov al, byte [eax]
test al, al
je 0x1152411
cmp al, 0x59
je 0x11523fb
cmp al, 0x79
je 0x11523fb
cmp al, 0x4e
jne 0x1152407
or dword [ebp - 0xce4], 0x8000000
jmp 0x1152411
and dword [ebp - 0xce4], 0xf7ffffff
mov eax, dword [edi + 0xcc]
test eax, eax
je 0x1152443
mov al, byte [eax]
test al, al
je 0x1152443
cmp al, 0x59
je 0x115242d
cmp al, 0x79
je 0x115242d
cmp al, 0x4e
jne 0x1152439
or dword [ebp - 0xce4], 0x400000
jmp 0x1152443
and dword [ebp - 0xce4], 0xffbfffff
mov eax, dword [edi + 0xd0]
test eax, eax
je 0x1152475
mov al, byte [eax]
test al, al
je 0x1152475
cmp al, 0x59
je 0x115245f
cmp al, 0x79
je 0x115245f
cmp al, 0x4e
jne 0x115246b
or dword [ebp - 0xce4], 0x2000000
jmp 0x1152475
and dword [ebp - 0xce4], 0xfdffffff
mov eax, dword [edi + 0xd4]
test eax, eax
je 0x11524a7
mov al, byte [eax]
test al, al
je 0x11524a7
cmp al, 0x59
je 0x1152491
cmp al, 0x79
je 0x1152491
cmp al, 0x4e
jne 0x115249d
or dword [ebp - 0xce4], 0x800000
jmp 0x11524a7
and dword [ebp - 0xce4], 0xff7fffff
mov eax, dword [edi + 0xd8]
test eax, eax
je 0x11524d3
mov al, byte [eax]
test al, al
je 0x11524d3
cmp al, 0x59
je 0x11524c3
cmp al, 0x79
je 0x11524c3
cmp al, 0x4e
jne 0x11524cc
or dword [ebp - 0xce4], 8
jmp 0x11524d3
and dword [ebp - 0xce4], 0xfffffff7
mov eax, dword [edi + 0xdc]
test eax, eax
je 0x1152505
mov al, byte [eax]
test al, al
je 0x1152505
cmp al, 0x59
je 0x11524ef
cmp al, 0x79
je 0x11524ef
cmp al, 0x4e
jne 0x11524fb
or dword [ebp - 0xce4], 0x4000000
jmp 0x1152505
and dword [ebp - 0xce4], 0xfbffffff
mov eax, dword [edi + 0xe0]
test eax, eax
je 0x1152537
mov al, byte [eax]
test al, al
je 0x1152537
cmp al, 0x59
je 0x1152521
cmp al, 0x79
je 0x1152521
cmp al, 0x4e
jne 0x115252d
or dword [ebp - 0xce4], 0x20000000
jmp 0x1152537
and dword [ebp - 0xce4], 0xdfffffff
mov eax, dword [edi + 0xe4]
test eax, eax
je 0x1152563
mov al, byte [eax]
test al, al
je 0x1152563
cmp al, 0x59
je 0x1152553
cmp al, 0x79
je 0x1152553
cmp al, 0x4e
jne 0x115255c
or dword [ebp - 0xca0], 1
jmp 0x1152563
and dword [ebp - 0xca0], 0xfffffffe
mov eax, dword [edi + 0xe8]
test eax, eax
je 0x115258f
mov al, byte [eax]
test al, al
je 0x115258f
cmp al, 0x59
je 0x115257f
cmp al, 0x79
je 0x115257f
cmp al, 0x4e
jne 0x1152588
or dword [ebp - 0xca0], 4
jmp 0x115258f
and dword [ebp - 0xca0], 0xfffffffb
mov eax, dword [edi + 0x208]
test eax, eax
je 0x11525ba
mov al, byte [eax]
test al, al
je 0x11525ba
cmp al, 0x59
je 0x11525ab
cmp al, 0x79
je 0x11525ab
cmp al, 0x4e
jne 0x11525b3
or dword [ebp - 0xc9c], edx
jmp 0x11525ba
and dword [ebp - 0xc9c], 0xfffffffd
test ecx, ecx
je 0x11525d2
mov al, byte [ecx]
cmp al, 0x47
je 0x11525c8
cmp al, 0x67
jne 0x11525d2
or dword [ebp - 0xce4], 0x1100000
mov ecx, dword [edi + 0x100]
test ecx, ecx
je 0x1152630
mov al, byte [ecx]
cmp al, 0x59
je 0x11525ea
cmp al, 0x79
je 0x11525ea
cmp al, 0x4e
jne 0x1152613
mov eax, dword [edi + 0x10c]
test eax, eax
je 0x1152607
push 0x10222c8
push eax
call dword [sym.imp.msvcrt.dll__stricmp]
add esp, 8
test eax, eax
je 0x1152626
or dword [ebp - 0xce4], 0x4000
jmp 0x1152630
push 0x10222c0
push ecx
call dword [sym.imp.msvcrt.dll__stricmp]
add esp, 8
test eax, eax
jne 0x1152630
or dword [ebp - 0xce4], 0x8000
mov eax, dword [edi + 0x10c]
test eax, eax
je 0x1152657
push 0x10222b8
push eax
call dword [sym.imp.msvcrt.dll__stricmp]
add esp, 8
test eax, eax
jne 0x1152657
or dword [ebp - 0xce4], 0x200000
test dword [ebp - 0xce4], 0x8000
je 0x1152674
mov edx, dword [esi]
push 1
add edx, 0xa38
push edx
call dword [sym.imp.KERNEL32.DLL_InterlockedExchange]
mov eax, dword [ebp - 0xce4]
test eax, 0x10000
je 0x1152698
test eax, 0xc000
je 0x1152698
or eax, 0x100000
mov dword [ebp - 0xce4], eax
jmp 0x1152698
mov esi, dword [ebx + 8]
mov ecx, dword [ebp - 8]
test cl, 4
jne 0x11526b3
test byte [ebp - 0xce4], 4
je 0x11526b3
mov dword [ebp - 0x144], 1
test ecx, 0x8000
jne 0x11526e6
test eax, 0x8000
je 0x11526e6
push 4
lea eax, [ebp - 4]
push eax
push 4
push 0x10215f8
push 0x1014d6c
push connect
push esi
mov dword [ebp - 4], 1
call fcn.010b2fe0
cmp dword [edi + 0xac], 0
je 0x1152730
cmp dword [edi + 0xb4], 0
je 0x1152730
mov eax, dword [edi + 0xec]
and dword [ebp - 0xcac], 0xfffff7ff
test eax, eax
je 0x1152730
mov al, byte [eax]
cmp al, 0x41
jb 0x115271e
cmp al, 0x5a
ja 0x115271e
movsx eax, al
add eax, 0x20
jmp 0x1152721
movsx eax, al
cmp eax, 0x79
jne 0x1152730
or dword [ebp - 0xcac], 0x800
mov ecx, dword [ebp - 0xce4]
cmp ecx, 0x100
jle 0x1152746
or ecx, 0x100
jmp 0x1152762
mov al, byte [ebp - 0xce4]
test al, 0x20
je 0x1152768
test al, 2
jne 0x115275c
or ecx, 0x40204
jmp 0x1152762
or ecx, 0x3e47
mov dword [ebp - 0xce4], ecx
test ecx, ecx
jne 0x1152775
mov ecx, dword [ebp - 8]
mov dword [ebp - 0xce4], ecx
mov eax, dword [esi]
cmp dword [eax + 0xa50], 0
je 0x1152796
and ecx, 0xfffe3fff
mov dword [ebp - 0xce4], ecx
mov dword [eax + 0xa38], 0
mov eax, dword [ebp - 0xce4]
cmp eax, dword [ebp - 8]
je 0x11527b1
mov ecx, dword [ebp - 0xcac]
mov edx, dword [esi]
push ecx
push eax
push edx
call fcn.010cc370
mov eax, dword [esi]
xor ecx, ecx
cmp dword [eax + 0xa48], ecx
mov eax, 0x1000
je 0x11527d0
test dword [ebp - 0xd70], eax
jne 0x11527d0
or dword [ebp - 0xd70], eax
mov dword [ebp - 0xe24], ecx
test dword [ebp - 0xd70], eax
je 0x11527f8
or dword [ebp - 0xce4], 4
test byte [ebp - 0xce4], 2
jne 0x11527f8
mov dword [ebp - 0xe24], 1
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x115281b
mov al, byte [eax]
cmp al, 0x59
je 0x1152809
cmp al, 0x79
jne 0x1152815
mov dword [ebp - 0x584], 1
jmp 0x115281b
mov dword [ebp - 0x584], ecx
mov esi, dword [edi + 0x1c]
cmp esi, ecx
je 0x115284a
push 0x105
push ecx
lea ecx, [ebp - 0x558]
push ecx
call sub.msvcrt.dll_memset
push 0x103
lea edx, [ebp - 0x558]
push esi
push edx
call dword [sym.imp.msvcrt.dll_strncpy]
add esp, 0x18
mov esi, dword [edi + 0x50]
test esi, esi
je 0x1152a0c
push 0x20a
lea eax, [ebp - 0x1048]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x20a
lea ecx, [ebp - 0x1678]
push 0
push ecx
call sub.msvcrt.dll_memset
push 0x20a
lea edx, [ebp - 0x1258]
push 0
push edx
call sub.msvcrt.dll_memset
push 0x20a
lea eax, [ebp - 0x1888]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x20a
lea ecx, [ebp - 0x1468]
push 0
push ecx
call sub.msvcrt.dll_memset
push 0x20a
lea edx, [ebp - 0x1a98]
push 0
push edx
call sub.msvcrt.dll_memset
mov eax, edi
mov eax, dword [eax + 0x68]
add esp, 0x48
test eax, eax
je 0x11528ed
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
cmp dword [edx + 0xa68], 0
je 0x11528ed
mov edi, eax
mov esi, 1
jmp 0x11529a0
mov eax, dword [ebx + 0x10]
mov eax, dword [eax + 0x54]
mov edi, esi
test eax, eax
je 0x115299e
push eax
push 0x100c25c
lea ecx, [ebp - 0x1678]
push 0x103
push ecx
call fcn.0102aaf0
mov esi, dword [ebx + 0x10]
mov eax, dword [esi + 0x58]
add esp, 0x10
test eax, eax
je 0x115299e
push eax
push 0x100c25c
lea edx, [ebp - 0x1258]
push 0x103
push edx
call fcn.0102aaf0
mov eax, dword [esi + 0x5c]
add esp, 0x10
test eax, eax
je 0x115299e
push eax
push 0x100c25c
lea eax, [ebp - 0x1888]
push 0x103
push eax
call fcn.0102aaf0
mov eax, dword [esi + 0x60]
add esp, 0x10
test eax, eax
je 0x115299e
push eax
push 0x100c25c
lea ecx, [ebp - 0x1468]
push 0x103
push ecx
call fcn.0102aaf0
mov eax, dword [esi + 0x64]
add esp, 0x10
test eax, eax
je 0x115299e
push eax
push 0x100c25c
lea edx, [ebp - 0x1a98]
push 0x103
push edx
call fcn.0102aaf0
add esp, 0x10
xor esi, esi
push edi
push 0x100c25c
lea eax, [ebp - 0x1048]
push 0x103
push eax
call fcn.0102aaf0
add esp, 0x10
test esi, esi
je 0x11529d7
mov edx, dword [ebx + 8]
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x1048]
push ecx
push 1
push edx
jmp 0x1152a07
lea eax, [ebp - 0x1a98]
push eax
lea ecx, [ebp - 0x1468]
push ecx
lea edx, [ebp - 0x1888]
push edx
lea eax, [ebp - 0x1258]
push eax
mov eax, dword [ebx + 8]
lea ecx, [ebp - 0x1678]
push ecx
lea edx, [ebp - 0x1048]
push edx
push 1
push eax
call fcn.010606a0
mov edi, dword [ebx + 0x10]
mov esi, dword [edi + 0x6c]
test esi, esi
je 0x1152b28
mov ecx, dword [ebx + 0x10]
mov eax, dword [ecx + 0x84]
xor edi, edi
mov dword [ebp - 4], 1
test eax, eax
je 0x1152a44
mov edx, dword [ebx + 8]
mov ecx, dword [edx]
cmp dword [ecx + 0xa68], edi
je 0x1152a44
mov esi, eax
mov edi, 1
mov edx, dword [ebx + 8]
mov eax, dword [edx]
add eax, 0xa7c
jne 0x1152a54
test esi, esi
jmp 0x1152a65
test esi, esi
je 0x1152a67
push esi
push eax
call dword [sym.imp.msvcrt.dll__stricmp]
add esp, 8
test eax, eax
je 0x1152abb
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
push 0x105
add ecx, 0xa7c
push 0
push ecx
call sub.msvcrt.dll_memset
mov edx, dword [ebx + 8]
mov eax, dword [edx]
add esp, 0xc
add eax, 0xa7c
je 0x1152aa2
test esi, esi
je 0x1152aa2
push 0x103
push esi
push eax
call dword [sym.imp.msvcrt.dll_strncpy]
add esp, 0xc
mov eax, dword [ebx + 8]
push esi
push 0x1018e74
push 0x1014dd4
push connect
push eax
call fcn.010b32a0
mov esi, dword [ebx + 8]
test edi, edi
jne 0x1152b0e
mov edi, dword [ebx + 0x10]
mov edx, dword [edi + 0x70]
lea ecx, [ebp - 4]
push ecx
push edx
push esi
call fcn.0103caf0
mov ecx, dword [edi + 0x74]
lea eax, [ebp - 4]
push eax
push ecx
push esi
call fcn.0103caf0
mov eax, dword [edi + 0x78]
lea edx, [ebp - 4]
push edx
push eax
push esi
call fcn.0103caf0
mov edx, dword [edi + 0x7c]
lea ecx, [ebp - 4]
push ecx
push edx
push esi
call fcn.0103caf0
mov ecx, dword [edi + 0x80]
lea eax, [ebp - 4]
push eax
push ecx
push esi
call fcn.0103caf0
mov edx, dword [esi]
mov eax, dword [ebp - 4]
mov edi, dword [ebx + 0x10]
mov dword [edx + 0x109c], eax
mov ecx, dword [esi]
mov dword [ecx + 0x10a0], 0
mov esi, dword [edi + 0x20]
test esi, esi
je 0x1152b58
push 0x105
lea edx, [ebp - 0x453]
push 0
push edx
call sub.msvcrt.dll_memset
push 0x103
lea eax, [ebp - 0x453]
push esi
push eax
call dword [sym.imp.msvcrt.dll_strncpy]
add esp, 0x18
mov esi, dword [edi + 0x24]
test esi, esi
je 0x1152b88
push 0x105
lea ecx, [ebp - 0x34e]
push 0
push ecx
call sub.msvcrt.dll_memset
push 0x103
lea edx, [ebp - 0x34e]
push esi
push edx
call dword [sym.imp.msvcrt.dll_strncpy]
add esp, 0x18
mov esi, dword [edi + 0x44]
test esi, esi
je 0x1152bb2
push 0x41
lea eax, [ebp - 0x5c7]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x3f
lea ecx, [ebp - 0x5c7]
push esi
push ecx
call dword [sym.imp.msvcrt.dll_strncpy]
add esp, 0x18
mov esi, dword [edi + 0x48]
test esi, esi
je 0x1152be2
push 0x105
lea edx, [ebp - 0x6cc]
push 0
push edx
call sub.msvcrt.dll_memset
push 0x103
lea eax, [ebp - 0x6cc]
push esi
push eax
call dword [sym.imp.msvcrt.dll_strncpy]
add esp, 0x18
mov eax, dword [edi + 0x8c]
test eax, eax
je 0x1152bf5
movsx ecx, byte [eax]
mov dword [ebp - 0xce0], ecx
cmp dword [edi + 0x150], 0
jne 0x1152c07
cmp dword [edi + 0x158], 0
je 0x1152c11
mov edx, dword [ebx + 8]
push edi
push edx
call fcn.010b6580
mov eax, dword [edi + 0x88]
xor ecx, ecx
cmp eax, ecx
jne 0x1152c2b
mov eax, dword [edi + 0x110]
cmp eax, ecx
je 0x1152d98
cmp byte [eax], 0x2d
je 0x1152c5d
push eax
call fcn.01029c50
mov dword [ebp - 0xcb4], eax
mov ecx, dword [ebp - 0xcb4]
test ecx, ecx
je 0x1152c63
mov eax, 0xc22e4507
mul ecx
shr edx, 0x10
imul edx, edx, 0x15180
mov eax, ecx
sub eax, edx
jne 0x1152c63
dec ecx
mov dword [ebp - 0xcb4], ecx
mov eax, dword [edi + 0x10]
test eax, eax
je 0x1152c96
push 8
push 0x10222ac
push eax
call dword [sym.imp.msvcrt.dll__strnicmp]
add esp, 0xc
test eax, eax
je 0x1152c88
cmp dword [ebp - 0xc], 0x8f36e881
jne 0x1152c96
mov eax, 0x200
mov dword [ebp - 8], eax
mov dword [ebp - 0xce4], eax
test byte [ebp - 0xcac], 1
je 0x1152ca9
add dword [ebp - 0xcb4], 0x2a300
cmp dword [edi + 0x16c], 0
je 0x1152ce9
mov esi, dword [ebx + 8]
push 0x105
add esi, 0x12b50
push 0
push esi
call sub.msvcrt.dll_memset
mov eax, dword [edi + 0x16c]
add esp, 0xc
test esi, esi
je 0x1152ce9
test eax, eax
je 0x1152ce9
push 0x103
push eax
push esi
call dword [sym.imp.msvcrt.dll_strncpy]
add esp, 0xc
mov eax, dword [edi + 0x1a0]
test eax, eax
je 0x1152d38
mov esi, dword [ebx + 8]
add esi, 0x1536c
je 0x1152d0d
push eax
push esi
call dword [sym.imp.msvcrt.dll__stricmp]
add esp, 8
test eax, eax
je 0x1152d38
mov eax, dword [edi + 0x1a0]
test esi, esi
je 0x1152d28
test eax, eax
je 0x1152d28
push 0x3f
push eax
push esi
call dword [sym.imp.msvcrt.dll_strncpy]
add esp, 0xc
mov ecx, dword [edi + 0x1a0]
mov edx, dword [ebx + 8]
push ecx
push edx
call fcn.010b64e0
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
cmp dword [ecx + 0xa40], 0
je 0x1152d53
lea edx, [ebp - 0xe38]
push edx
push eax
call fcn.010b6360
mov eax, dword [ebp - 0xd70]
shr eax, 0x1d
push 0
and eax, 1
push eax
lea eax, [ebp - 0xe38]
push eax
push edi
call fcn.0103c990
mov esi, dword [edi + 0x118]
test esi, esi
je 0x1152ddd
mov eax, esi
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1152d80
sub eax, edx
push eax
push esi
call fcn.01029bc0
mov dword [ebp - 0x248], eax
jmp 0x1152de7
mov eax, dword [edi + 0x30]
cmp eax, ecx
je 0x1152c3c
push 8
push 0x10222a0
push eax
call fcn.01029340
test eax, eax
jne 0x1152c3c
mov eax, dword [edi + 0x30]
push 0x1022298
push eax
call fcn.01029980
test eax, eax
je 0x1152c3c
mov dword [ebp - 0xcb4], 0
jmp 0x1152c63
mov dword [ebp - 0x248], 0
mov eax, dword [edi + 0x114]
mov esi, dword [ebp - 0xce4]
test eax, eax
je 0x1152e2e
mov al, byte [eax]
cmp al, 0x49
je 0x1152e26
cmp al, 0x50
je 0x1152e18
cmp al, 0x59
je 0x1152e0d
and esi, 0xfffdffef
jmp 0x1152e5e
and esi, 0xfff9ffff
or esi, 0x10
jmp 0x1152e5e
and esi, 0xfffbffef
or esi, 0x20000
jmp 0x1152e5e
and esi, 0xfffdffef
jmp 0x1152e58
mov eax, dword [ebp - 8]
test al, 0x10
je 0x1152e3e
or esi, 0x10
mov dword [ebp - 0xce4], esi
test eax, 0x20000
je 0x1152e51
or esi, 0x20000
mov dword [ebp - 0xce4], esi
test eax, 0x40000
je 0x1152e64
or esi, 0x40000
mov dword [ebp - 0xce4], esi
mov edx, dword [edi + 0x130]
test edx, edx
je 0x1152ef6
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1152e77
sub eax, edi
push eax
push edx
call fcn.01029bc0
cmp eax, 0x65
jl 0x1152e98
or dword [ebp - 0xcac], 0x200
jmp 0x1152ea2
and dword [ebp - 0xcac], 0xfffffdff
cmp eax, 5
je 0x1152eb6
cmp eax, 0x69
je 0x1152eb6
cmp eax, 4
je 0x1152eb6
cmp eax, 0x68
jne 0x1152ef6
mov ecx, dword [ebx + 0x10]
mov eax, dword [ecx + 0x10]
or dword [ebp - 0xd70], 0x200
or esi, 0x80000
mov dword [ebp - 0xce4], esi
test eax, eax
je 0x1152ef6
push 0x1022290
push eax
call fcn.01029980
test eax, eax
je 0x1152ef6
mov edi, dword [ebx + 8]
mov edx, dword [edi]
mov dword [edx + 0xa44], 1
jmp 0x1152ef9
mov edi, dword [ebx + 8]
mov eax, dword [ebx + 0x10]
mov esi, dword [eax + 0x12c]
test esi, esi
je 0x1152f45
mov eax, esi
lea edx, [eax + 1]
jmp 0x1152f10
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1152f10
sub eax, edx
push eax
push esi
call fcn.01029bc0
add eax, 0xb179a800
cmp dword [ebp - 0xd68], 0
mov dword [edi + 0x157c8], eax
jne 0x1152f45
push 0x100ebb8
push edi
mov dword [ebp - 0xd68], eax
call fcn.0111b130
mov ecx, dword [ebx + 0x10]
mov ecx, dword [ecx + 0x128]
test ecx, ecx
je 0x1152f6d
lea eax, [edi + 0x15115]
test eax, eax
je 0x1152f6d
mov esi, dword [sym.imp.msvcrt.dll_strncpy]
push 0x3f
push ecx
push eax
call esi
add esp, 0xc
jmp 0x1152f73
mov esi, dword [sym.imp.msvcrt.dll_strncpy]
mov edx, dword [ebx + 0x10]
mov ecx, dword [edx + 0x198]
test ecx, ecx
je 0x1152f96
lea eax, [edi + 0x15156]
test eax, eax
je 0x1152f96
push 0x103
push ecx
push eax
call esi
add esp, 0xc
mov eax, dword [ebx + 0x10]
mov ecx, dword [eax + 0x19c]
test ecx, ecx
je 0x1152fb9
lea eax, [edi + 0x1525b]
test eax, eax
je 0x1152fb9
push 0x103
push ecx
push eax
call esi
add esp, 0xc
mov ecx, dword [ebx + 0x10]
mov eax, dword [ecx + 0x10]
test eax, eax
je 0x11530d6
cmp byte [eax], 0
je 0x11530d6
push eax
lea edx, [ebp - 0xcdc]
push edx
call fcn.01029380
test eax, eax
je 0x11530d6
mov eax, dword [ebx + 0x10]
mov ecx, dword [eax + 0x10]
push 0
push ecx
push edi
mov dword [ebp - 0x14], 1
call fcn.010b6780
push 0x51
push 8
call dword [sym.imp.KERNEL32.DLL_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.DLL_HeapAlloc]
mov esi, eax
mov dword [ebp - 0x10], esi
test esi, esi
je 0x115303b
mov edx, dword [ebx + 0x10]
mov eax, dword [edx + 0x10]
push 0x24
push eax
lea ecx, [esi + 0x29]
push ecx
call fcn.010295e0
push 0x24
lea edx, [ebp - 0xcdc]
push edx
lea eax, [esi + 4]
push eax
call fcn.010295e0
mov dword [esi], edi
mov esi, dword [ebx + 0x10]
mov ecx, dword [esi + 0x10]
push ecx
push edi
call fcn.010b6830
push 1
push edi
call fcn.010c9280
mov edx, dword [esi + 0x10]
xor eax, eax
push 0x24
mov dword [ebp - 0xcdc], eax
mov dword [ebp - 0xcd8], eax
mov dword [ebp - 0xcd4], eax
mov dword [ebp - 0xcd0], eax
mov dword [ebp - 0xccc], eax
mov dword [ebp - 0xcc8], eax
mov dword [ebp - 0xcc4], eax
mov dword [ebp - 0xcc0], eax
mov dword [ebp - 0xcbc], eax
mov byte [ebp - 0xcb8], al
push edx
lea eax, [ebp - 0xcdc]
push eax
call fcn.010295e0
test byte [ebp - 0xa00], 0x40
jne 0x11530d6
push 0x18
push edi
call fcn.010f30f0
mov esi, eax
test esi, esi
je 0x11530d6
mov ecx, dword [ebx + 0x10]
mov edx, dword [ecx + 0x10]
push edx
push esi
lea eax, [edi + 0x12a0c]
push 0
push eax
call fcn.01106c50
add esp, 0x10
push esi
call fcn.01047230
lea ecx, [ebp - 0xe38]
push ecx
call fcn.0103c7d0
mov esi, dword [ebx + 0x10]
mov eax, dword [esi + 0x11c]
test eax, eax
je 0x11530fb
cmp byte [eax], 0x59
jne 0x11530fb
or dword [ebp - 0xcac], 0x40
mov edx, dword [esi + 0x14c]
test edx, edx
je 0x1153129
mov eax, edx
lea esi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1153110
sub eax, esi
push eax
push edx
call fcn.01029bc0
mov esi, dword [ebx + 0x10]
mov dword [edi + 0x8884], eax
mov eax, dword [esi + 0x148]
test eax, eax
je 0x115315a
cmp byte [eax], 0x4e
jne 0x1153144
mov dword [edi + 0x8880], 0
jmp 0x115315a
push 0x102228c
push 0x1012e38
push eax
call fcn.0107df80
mov dword [edi + 0x8880], eax
mov edx, dword [esi + 0x138]
test edx, edx
je 0x1153192
mov eax, edx
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1153170
sub eax, esi
push eax
push edx
mov edx, dword [edi + 0x8890]
push 0xffffffffffffffff
push edx
call fcn.0102e5d0
mov esi, dword [ebx + 0x10]
mov dword [ebp - 0xd74], eax
mov edx, dword [esi + 0x134]
test edx, edx
je 0x11531c2
mov eax, edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x11531a1
sub eax, esi
push eax
push edx
call fcn.01029bc0
push eax
lea eax, [ebp - 0xe38]
push eax
push edi
call fcn.0103c620
mov esi, dword [ebx + 0x10]
test dword [ebp - 0xce4], 0x2000000
je 0x11531f3
mov eax, dword [esi + 0x17c]
test eax, eax
je 0x11531f3
mov ecx, dword [edi]
push 1
push eax
push 4
push ecx
call fcn.0105e9e0
cmp dword [ebp - 0x58], 0
jne 0x11531f3
push 4
push edi
call fcn.0105e960
mov eax, dword [esi + 0x174]
test eax, eax
je 0x115323e
test dword [ebp - 0xce4], 0x8000
jne 0x1153223
mov edx, dword [edi]
cmp dword [edx + 0xa38], 0
jne 0x1153223
cmp dword [ebp - 0x68], 0
je 0x115323e
mov dword [ebp - 0x68], 0
jmp 0x115323e
push 1
push eax
mov eax, dword [edi]
push 2
push eax
call fcn.0105e9e0
cmp dword [ebp - 0x68], 0
jne 0x115323e
push 2
push edi
call fcn.0105e960
mov eax, dword [esi + 0x168]
test eax, eax
je 0x1153292
test dword [ebp - 0xce4], 0x10000
je 0x1153277
mov ecx, dword [edi]
push 1
push eax
push 3
push ecx
call fcn.0105e9e0
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x115326d
cmp eax, 1
jne 0x1153292
push 3
push edi
call fcn.0105e960
jmp 0x1153292
cmp dword [ebp - 0x60], 0
je 0x1153292
mov edx, dword [edi]
mov eax, dword [edx]
push 1
push 0
push eax
call fcn.010d2d90
mov dword [ebp - 0x60], 0
mov ecx, dword [ebx + 8]
mov esi, dword [ecx]
cmp dword [esi + 0xa00], 0
mov dword [ebp - 0xc], esi
je 0x11532aa
or dword [ebp - 0xd70], 2
mov eax, dword [esi + 0x9fc]
test eax, eax
je 0x11532ba
mov dword [ebp - 0xc68], eax
cmp dword [ebx + 0x14], 0
je 0x11533b6
mov edx, dword [ebx + 0xc]
lea eax, [ebp - 0xe38]
mov edi, eax
mov ecx, 0xe20
sub edx, edi
mov edi, dword [eax + edx]
cmp edi, dword [eax]
jne 0x11532f3
sub ecx, 4
add eax, 4
cmp ecx, 4
jae 0x11532d6
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x14
lea eax, [esi + 0x9b4]
mov dword [ebp - 8], eax
test eax, eax
je 0x1153342
push eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov edi, dword [ebx + 0xc]
lea edx, [ebp - 0xe38]
push edx
push edi
push esi
call fcn.011511f0
mov eax, dword [ebp - 0xc]
mov ecx, 0x388
lea esi, [ebp - 0xe38]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [eax]
mov eax, dword [ebp - 8]
mov dword [ecx + 0x1e5e8], 1
test eax, eax
je 0x1153342
push eax
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
cmp dword [ebp - 0x14], 0
mov edi, dword [ebx + 8]
je 0x11533c6
mov eax, dword [edi]
mov eax, dword [eax]
mov edx, dword [eax + 0x3538]
push 0
push edx
push eax
call fcn.01113f20
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x11533c6
mov esi, dword [sym.imp.KERNEL32.DLL_CreateThread]
lea ecx, [ebp - 0x10]
push ecx
push 0
push eax
push 0x10f3fd0
push 0
push 0
call esi
test eax, eax
je 0x115338a
mov edx, dword [edi + 0x1c0]
push eax
call edx
mov eax, dword [edi]
lea ecx, [ebp - 0x10]
push ecx
push 0
push eax
push 0x1101660
push 0
push 0
call esi
test eax, eax
je 0x11533c6
mov edx, dword [edi + 0x1c0]
push eax
call edx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x14
mov edi, dword [ebx + 0xc]
mov ecx, 0x388
lea esi, [ebp - 0xe38]
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x14