Function at 0x100e41f0
Capabilities:
Get common file path
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x394
mov eax, dword [0x101dc354]
xor eax, esp
mov dword [esp + 0x390], eax
push ebx
push esi
push edi
xor ebx, ebx
lea ecx, [esp + 0xbc]
xor edi, edi
mov dword [esp + 0x60], ebx
inc edi
mov dword [esp + 0x48], ebx
push edi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x78], ebx
call fcn.100e06da
or dword [esp + 0xb0], 0xffffffff
lea ecx, [esp + 0xdc]
or dword [esp + 0xb4], 0xffffffff
mov eax, 0xffff
or dword [esp + 0xb8], 0xffffffff
mov esi, ebx
push edi
mov dword [esp + 0x48], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0xa0], edi
mov dword [esp + 0x9c], edi
mov dword [esp + 0x98], 0xb
mov dword [esp + 0x28], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0xac], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x44], ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x24], ebx
call fcn.100e07c8
lea ecx, [esp + 0x128]
call fcn.100e0712
lea eax, [esp + 0x7c]
mov edx, 0x10009654
push eax
xor ecx, ecx
call fcn.100b063a
test eax, eax
jne 0x100e4332
cmp dword [esp + 0x7c], edi
jne 0x100e4332
push 0x10029720
push ebx
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x10
jmp 0x100e5fe3
lea ecx, [esp + 0x5b]
mov byte [esp + 0x5b], bl
call fcn.100f34c2
test eax, eax
js 0x100e436c
cmp byte [esp + 0x5b], bl
je 0x100e436c
push 0x1002976c
push ebx
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x10
call fcn.10110bf7
mov ebx, 0x80004004
jmp 0x100e5fe3
mov ecx, 0x101dc3a0
call fcn.100ec635
cmp dword [ebp + 8], ebx
je 0x100e4385
push 8
mov edx, edi
pop ecx
call fcn.100e652d
lea edx, [esp + 0x40]
mov ecx, 0x100297a4
call fcn.100ed86c
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e43af
push 0x100297c8
push edi
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
xor edx, edx
lea ecx, [esp + 0x8c]
call fcn.100b17da
xor edx, edx
lea ecx, [esp + 0xa8]
call fcn.100e9668
cmp dword [esp + 0x8c], ebx
jne 0x100e43db
cmp dword [esp + 0x7c], 2
jne 0x100e43df
mov dword [esp + 0x20], edi
mov ecx, dword [0x101dca50]
call fcn.101038f9
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e4406
push 0x100297e8
push edi
push eax
push 0x2000000
call fcn.100ab973
add esp, 0x10
push 2
pop edx
xor ecx, ecx
call fcn.100e681d
lea eax, [esp + 0x90]
mov edx, 0x1002982c
push eax
xor ecx, ecx
call fcn.100b063a
test eax, eax
jne 0x100e444f
cmp dword [esp + 0x90], ebx
je 0x100e444f
push 0x10029848
push edi
mov edi, 0x800f0830
push edi
push 0x2000000
call fcn.100ab973
add esp, 0x10
jmp 0x100e56a2
mov edx, 0x101dea48
lea ecx, [esp + 0x60]
call fcn.100f9b3c
mov ecx, dword [0x101dea48]
call fcn.100e6048
push eax
push dword [esp + 0x64]
push 0x100298a8
push ebx
push ebx
push 0x4000000
call fcn.100ab973
mov ecx, dword [0x101dca50]
lea eax, [esp + 0xac]
add esp, 0x18
push eax
lea eax, [esp + 0x9c]
push eax
lea eax, [esp + 0xa4]
push eax
call fcn.10102e9c
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e44c0
push 0x100298f4
push edi
push eax
push 0x2000000
call fcn.100ab973
add esp, 0x10
push dword [esp + 0x94]
mov edx, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
call fcn.101054ed
lea edx, [esp + 0xa4]
lea ecx, [esp + 0x2c]
call fcn.100e2fef
mov edi, eax
test edi, edi
jns 0x100e44fc
push 0x1002992c
push 1
jmp 0x100e443c
mov ecx, dword [esp + 0x2c]
call fcn.100e6048
push eax
push 0x1002995c
push ebx
push ebx
mov edi, 0x4000000
push edi
call fcn.100ab973
add esp, 0x14
call fcn.100e30a9
mov edx, dword [esp + 0x2c]
xor ecx, ecx
push ebx
mov dword [esp + 0x20], eax
call fcn.101058be
push 8
pop ecx
call fcn.100e63fa
test eax, eax
je 0x100e454c
push 0x10029980
push ebx
push ebx
push edi
call fcn.100ab973
add esp, 0x10
xor ecx, ecx
call fcn.100e2545
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e456c
push 0x100299a4
push 1
push eax
push edi
call fcn.100ab973
add esp, 0x10
push 0x100299c4
push ebx
push ebx
push edi
call fcn.100ab973
add esp, 0x10
xor edx, edx
xor ecx, ecx
call fcn.101090e1
mov edi, eax
test edi, edi
jns 0x100e4595
push 0x100299f4
jmp 0x100e44f5
push 0x10029a28
push ebx
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x10
lea eax, [esp + 0x3c]
mov edx, 0x1002f190
xor ecx, ecx
push eax
call fcn.1011dc71
mov edi, eax
test edi, edi
jns 0x100e45ca
push 0x10029a58
jmp 0x100e44f5
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx]
mov esi, dword [eax]
lea eax, [esp + 0x38]
push eax
push 0x1002f368
push ecx
mov ecx, esi
call dword [0x101e07c0]
call esi
mov edi, eax
test edi, edi
jns 0x100e4609
push 0x10029a78
push 1
push edi
push 0x2000000
call fcn.100ab973
add esp, 0x10
mov esi, ebx
jmp 0x100e56a2
push ebx
xor edx, edx
xor ecx, ecx
call fcn.10108c91
xor ecx, ecx
mov edx, 0x1002f008
cmp ecx, eax
lea eax, [esp + 0x34]
push eax
sbb esi, esi
neg esi
mov dword [esp + 0x14], esi
call fcn.1011dc71
mov edi, eax
test edi, edi
jns 0x100e463b
push 0x10029aa0
jmp 0x100e45f2
push 2
pop ecx
call fcn.100e63fa
test eax, eax
jne 0x100e466b
call fcn.100e3d8c
xor esi, esi
mov edi, eax
inc esi
test edi, edi
jns 0x100e466e
push 0x10029ac4
push esi
push edi
push 0x4000000
call fcn.100ab973
add esp, 0x10
jmp 0x100e466e
xor esi, esi
inc esi
cmp dword [0x101dc9c8], ebx
je 0x100e4692
lea edx, [esp + 0x30]
xor ecx, ecx
call fcn.101099e1
mov edi, eax
test edi, edi
jns 0x100e4696
push 0x10029aec
push esi
jmp 0x100e45f4
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x2c], 0x64
mov dword [0x101dea28], esi
jne 0x100e46d6
push 0x10029b18
push ebx
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov dword [esp + 0x54], esi
xor ecx, ecx
call fcn.100fc3d6
or dword [esp + 0x2c], 0xffffffff
xor edx, edx
or ecx, 0xffffffff
call fcn.100e6582
jmp 0x100e4602
mov eax, dword [esp + 0x2c]
and eax, 0x3fff
cmp eax, 0x32
jne 0x100e48c0
mov edx, ebx
mov dword [esp + 0x50], ebx
jmp 0x100e47a1
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx]
mov esi, dword [eax + 0xc]
lea eax, [esp + 0x4c]
push eax
push edx
push ebx
push 0xa
push ecx
mov ecx, esi
call dword [0x101e07c0]
call esi
xor esi, esi
mov edi, eax
inc esi
test edi, edi
js 0x100e487b
mov eax, dword [esp + 0x4c]
mov ecx, eax
and ecx, 0xffff0000
movzx eax, ax
mov dword [esp + 0x4c], eax
test ecx, 0x10000
je 0x100e4754
push 0x10029bcc
push ebx
push ebx
push 0x4000000
mov dword [esp + 0x54], esi
call fcn.100ab973
mov eax, dword [esp + 0x5c]
add esp, 0x10
cmp eax, 6
je 0x100e4850
cmp eax, 0xb
je 0x100e4822
cmp eax, 0xc
je 0x100e47ff
cmp eax, 8
je 0x100e47e2
cmp eax, 4
je 0x100e47e2
cmp eax, 0xa
je 0x100e47b1
cmp eax, 7
je 0x100e47b1
push eax
push 0x10029ddc
push ebx
push ebx
push 0x4000000
call fcn.100ab973
mov edx, dword [esp + 0x64]
add esp, 0x14
inc edx
mov dword [esp + 0x50], edx
cmp dword [esp + 0x4c], 3
jne 0x100e46f3
jmp 0x100e4893
xor edx, edx
mov ecx, esi
call fcn.100e3518
push dword [esp + 0x4c]
mov eax, 0x80004005
push dword [esp + 0x54]
mov edi, eax
push 0x10029d90
push esi
push eax
push 0x2000000
call fcn.100ab973
add esp, 0x18
push 0x14
pop eax
jmp 0x100e4846
push eax
push dword [esp + 0x54]
push 0x10029d40
push ebx
push ebx
push 0x4000000
call fcn.100ab973
mov edi, 0x80004005
jmp 0x100e47da
push dword [esp + 0x50]
mov eax, 0x800f0922
push 0x10029cd0
push esi
push eax
push 0x2000000
mov edi, eax
call fcn.100ab973
mov eax, 0x10000a
jmp 0x100e4843
push dword [esp + 0x50]
mov eax, 0x800f0921
push 0x10029c68
push esi
push eax
push 0x2000000
mov edi, eax
call fcn.100ab973
mov eax, 0x8000a
add esp, 0x14
mov dword [esp + 0x2c], eax
xor edx, edx
mov ecx, eax
jmp 0x100e4874
push dword [esp + 0x50]
push 0x10029c00
push esi
push 0x80004005
push 0x2000000
call fcn.100ab973
add esp, 0x14
mov dword [esp + 0x2c], ebx
xor edx, edx
xor ecx, ecx
call fcn.100e6582
jmp 0x100e4893
push dword [esp + 0x50]
push 0x10029b70
push esi
push edi
push 0x2000000
call fcn.100ab973
add esp, 0x14
mov eax, dword [esp + 0x2c]
and eax, 0x3fff
cmp eax, 0x32
jne 0x100e48c0
push 0x10029e04
push ebx
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov dword [esp + 0x54], esi
mov edi, ebx
jmp 0x100e46c2
cmp dword [esp + 0x2c], ebx
je 0x100e48ca
cmp eax, esi
jne 0x100e492d
lea ecx, [esp + 0xa0]
call fcn.10106d1d
mov edi, eax
test edi, edi
jns 0x100e48e6
push 0x10029e28
jmp 0x100e468c
cmp dword [esp + 0xa0], ebx
jne 0x100e492d
test dword [esp + 0x2c], 0xffff0000
je 0x100e4900
mov eax, 0x10004
jmp 0x100e4920
cmp dword [esp + 0xa4], ebx
je 0x100e491d
mov ecx, 0x10001
mov eax, ecx
mov edx, ecx
xor ecx, ecx
mov dword [esp + 0x1c], eax
call fcn.100e3471
push 4
pop eax
xor edx, edx
mov dword [esp + 0x2c], eax
mov ecx, eax
call fcn.100e6582
push 8
pop ecx
call fcn.100e63fa
test eax, eax
je 0x100e4a82
mov ecx, dword [esp + 0x2c]
mov eax, ecx
and eax, 0xffff3fff
je 0x100e4b18
cmp eax, esi
je 0x100e4ada
add eax, 0xfffffffe
cmp eax, 2
ja 0x100e4a49
push 0x10029f40
mov eax, 0x800f0923
push esi
mov edi, eax
push eax
push 0x2000000
call fcn.100ab973
mov eax, 0x10000a
add esp, 0x10
xor edx, edx
mov dword [esp + 0x2c], eax
mov ecx, eax
call fcn.100e6582
mov esi, dword [esp + 0x10]
or dword [0x101dc4a0], 0xffffffff
mov dword [esp + 0x14], ebx
mov edx, dword [esp + 0x2c]
or ecx, 0xffffffff
push ebx
call fcn.101058be
mov ecx, dword [esp + 0x2c]
call fcn.100e3ac3
test edi, edi
jns 0x100e49d0
cmp dword [esp + 0x60], 0
jne 0x100e49d0
mov edx, dword [0x101dea48]
mov ecx, edi
call fcn.100fe49f
mov dword [esp + 0x60], edi
cmp dword [esp + 0x20], 0
je 0x100e49e5
test dword [esp + 0x2c], 0xffff0000
jne 0x100e52d7
push 2
pop ecx
call fcn.100e63fa
test eax, eax
je 0x100e4a05
mov eax, dword [esp + 0x2c]
and eax, 0x3fff
je 0x100e4a05
cmp eax, 1
jne 0x100e52fa
mov ecx, dword [esp + 0x2c]
test ecx, 0x3fff
jne 0x100e4c0b
mov edx, ecx
or ecx, 0xffffffff
push 1
call fcn.101058be
cmp dword [esp + 0x2c], 0
jne 0x100e4bad
test esi, esi
jne 0x100e4b78
xor eax, eax
inc eax
mov dword [esp + 0x2c], eax
mov ecx, eax
xor edx, edx
call fcn.100e6582
jmp 0x100e499e
and ecx, 0x3fff
cmp ecx, 4
jne 0x100e4a6e
push 0x10029fc8
push ebx
push ebx
push 0x4000000
call fcn.100ab973
mov dword [esp + 0x34], esi
jmp 0x100e45ff
push 0x1002a048
push ebx
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x100e4b3b
and eax, 0xffff3fff
cmp eax, esi
jne 0x100e4aa6
mov esi, dword [esp + 0x10]
test esi, esi
je 0x100e4b3f
xor esi, esi
inc esi
xor ecx, ecx
call fcn.10105df9
test eax, eax
je 0x100e498f
xor ecx, ecx
call fcn.10104b15
cmp dword [esp + 0x2c], 0xffffffff
je 0x100e498f
mov dword [esp + 0x28], esi
mov edi, 0x800f0920
push 0x1002a160
jmp 0x100e468c
push 0x10029ec8
mov eax, 0x800f0923
push esi
mov edi, eax
push eax
push 0x2000000
call fcn.100ab973
mov esi, dword [esp + 0x20]
add esp, 0x10
mov ecx, esi
neg ecx
sbb ecx, ecx
and ecx, 0x4ffec
add ecx, 0x14
mov dword [esp + 0x2c], ecx
xor edx, edx
call fcn.100e6582
jmp 0x100e4993
push 0x10029e60
mov eax, 0x800f0923
push esi
mov edi, eax
push eax
push 0x2000000
call fcn.100ab973
add esp, 0x10
push 0x14
pop eax
jmp 0x100e4982
mov esi, dword [esp + 0x10]
mov edx, 0x1002a0b0
mov ecx, 0x1002a0f4
call fcn.100e3b83
mov edi, eax
test edi, edi
jns 0x100e4aa3
push 0x1002a124
push 1
push edi
push 0x2000000
call fcn.100ab973
add esp, 0x10
push 0x14
pop eax
mov dword [esp + 0x2c], eax
mov ecx, eax
jmp 0x100e4b0c
mov ecx, dword [esp + 0x30]
xor edx, edx
call fcn.1011d365
mov edi, eax
test edi, edi
js 0x100e5311
push dword [esp + 0x30]
xor edx, edx
xor ecx, ecx
call fcn.10109db3
xor ecx, ecx
mov edi, eax
test edi, edi
setns cl
dec ecx
and ecx, 0x13
inc ecx
jmp 0x100e5183
mov ecx, dword [esp + 0x2c]
cmp ecx, 0x50000
je 0x100e4beb
cmp ecx, 0x90000
je 0x100e4beb
cmp ecx, 0x110000
jne 0x100e4c0b
push dword [esp + 0x30]
xor edx, edx
xor ecx, ecx
inc edx
call fcn.1010a828
mov edi, eax
test edi, edi
js 0x100e5331
mov eax, 0x10003
jmp 0x100e4a37
push dword [esp + 0x30]
xor edx, edx
xor ecx, ecx
inc edx
call fcn.1010a828
mov edi, eax
test edi, edi
js 0x100e5338
push 0x14
pop eax
jmp 0x100e4a37
mov eax, dword [esp + 0x2c]
xor esi, esi
and eax, 0x3fff
inc esi
cmp eax, esi
jne 0x100e4d4d
push 2
pop ecx
call fcn.100e63fa
test eax, eax
jne 0x100e4c63
push 4
pop ecx
call fcn.100e63fa
test eax, eax
jne 0x100e4c63
xor ecx, ecx
call fcn.100fb0b3
test eax, eax
je 0x100e4c65
push 0x1002a2f4
push ebx
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov dword [esp + 0x44], 1
jmp 0x100e569e
mov esi, ebx
mov ecx, dword [esp + 0x2c]
xor edx, edx
mov eax, ecx
inc edx
and eax, 0xffff3fff
cmp eax, edx
jne 0x100e4cf4
push edx
push dword [esp + 0x34]
lea eax, [esp + 0x80]
mov edx, ecx
push eax
lea eax, [esp + 0x50]
xor ecx, ecx
push eax
lea eax, [esp + 0x80]
inc ecx
push eax
push ebx
call fcn.100e2694
cmp dword [esp + 0x70], 0
mov edi, eax
jne 0x100e4cd2
mov esi, dword [esp + 0x10]
xor ecx, ecx
test esi, esi
sete cl
lea ecx, [ecx*2 + 2]
xor edx, edx
mov dword [esp + 0x2c], ecx
call fcn.100e6582
cmp dword [esp + 0x44], 0
je 0x100e499e
jmp 0x100e569e
test esi, esi
jne 0x100e533f
cmp dword [esp + 0x78], esi
je 0x100e4cea
mov eax, 0x50000
jmp 0x100e52c1
mov eax, 0x10004
jmp 0x100e52c1
cmp eax, 0x110001
jne 0x100e4d4a
push edx
push dword [esp + 0x34]
lea eax, [esp + 0x80]
xor ecx, ecx
push eax
lea eax, [esp + 0x50]
inc ecx
push eax
lea eax, [esp + 0x80]
push eax
push edx
mov edx, dword [esp + 0x44]
call fcn.100e2694
cmp dword [esp + 0x70], 0
mov edi, eax
jne 0x100e5349
mov esi, dword [esp + 0x10]
mov ecx, esi
neg ecx
sbb ecx, ecx
and ecx, 0xffffc
add ecx, 0x10004
jmp 0x100e4cb7
xor esi, esi
inc esi
mov ecx, dword [esp + 0x2c]
mov eax, ecx
and eax, 0x3fff
cmp eax, 2
jne 0x100e4e16
mov edx, ecx
or ecx, 0xffffffff
push esi
call fcn.101058be
cmp dword [esp + 0x2c], 2
jne 0x100e4d91
push dword [esp + 0x30]
xor edx, edx
xor ecx, ecx
call fcn.1010a828
mov edi, eax
test edi, edi
js 0x100e535d
push 3
jmp 0x100e52c0
cmp dword [esp + 0x2c], 0x110002
jne 0x100e4de1
mov ecx, dword [esp + 0x30]
xor edx, edx
call fcn.1011d365
mov edi, eax
test edi, edi
js 0x100e5364
push dword [esp + 0x30]
mov edx, esi
xor ecx, ecx
call fcn.10109db3
mov edi, eax
test edi, edi
jns 0x100e4dd3
xor edx, edx
mov ecx, esi
call fcn.100e3518
mov ecx, 0x200014
jmp 0x100e4dd8
mov ecx, 0x110001
mov dword [esp + 0x2c], ecx
jmp 0x100e52c7
cmp dword [esp + 0x2c], 0xa0002
jne 0x100e4e16
push dword [esp + 0x30]
xor ecx, ecx
push 2
pop edx
call fcn.1010a828
mov edi, eax
test edi, edi
js 0x100e536b
xor edx, edx
mov ecx, esi
call fcn.100e3518
mov eax, 0x200014
jmp 0x100e52c1
mov ecx, dword [esp + 0x2c]
mov eax, ecx
and eax, 0x3fff
cmp eax, 3
jne 0x100e4f08
mov edx, ecx
or ecx, 0xffffffff
push 2
call fcn.101058be
cmp dword [esp + 0x2c], 3
jne 0x100e4eab
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x100e4e7f
cmp dword [esp + 0x20], 0
jne 0x100e4e7f
cmp dword [esp + 0xa8], 0
jne 0x100e4e7f
lea eax, [esp + 0x44]
or edx, 0xffffffff
push eax
call fcn.10108d1a
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e4e7f
push 0x1002a450
push esi
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
push 4
pop eax
xor edx, edx
mov dword [esp + 0x2c], eax
mov ecx, eax
call fcn.100e6582
cmp dword [esp + 0x44], 0
je 0x100e52ce
push 0x1002a47c
push ebx
push ebx
push 0x4000000
jmp 0x100e52ed
cmp dword [esp + 0x2c], 0x10003
jne 0x100e4f08
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x100e4ee6
lea eax, [esp + 0x44]
or edx, 0xffffffff
push eax
call fcn.10108d1a
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e4ee6
push 0x1002a450
push esi
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov eax, 0x10004
xor edx, edx
mov ecx, eax
mov dword [esp + 0x2c], eax
call fcn.100e6582
cmp dword [esp + 0x44], 0
jne 0x100e569e
jmp 0x100e52ce
mov eax, dword [esp + 0x2c]
and eax, 0x3fff
cmp eax, 4
jne 0x100e513f
mov ecx, dword [esp + 0x4c]
mov eax, ebx
jmp 0x100e503e
push eax
push 0x1002a4a8
push ebx
push ebx
push 0x4000000
call fcn.100ab973
mov ecx, dword [esp + 0x4c]
add esp, 0x14
mov dword [esp + 0x4c], ebx
mov eax, dword [ecx]
mov esi, dword [eax + 0xc]
lea eax, [esp + 0x4c]
push eax
push dword [esp + 0x1c]
push ebx
push 0xa
push ecx
mov ecx, esi
call dword [0x101e07c0]
call esi
mov edi, eax
test edi, edi
js 0x100e53bf
mov eax, dword [esp + 0x4c]
mov esi, eax
movzx ecx, ax
and esi, 0xffff0000
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x4c], ecx
cmp eax, 0x10001
je 0x100e4f8d
cmp eax, 0x10003
jne 0x100e4fc2
cmp ecx, 0xb
jne 0x100e4f96
xor ecx, ecx
jmp 0x100e4fa3
cmp ecx, 6
je 0x100e4fae
mov dword [esp + 0x48], ebx
lea ecx, [esp + 0x48]
mov edx, eax
call fcn.10106df9
mov eax, dword [esp + 0x1c]
movzx eax, ax
xor ecx, ecx
mov edx, eax
mov dword [esp + 0x1c], eax
call fcn.100e3471
mov ecx, dword [esp + 0x4c]
test esi, 0x10000
je 0x100e4fea
push 0x1002a4e8
push ebx
push ebx
push 0x4000000
mov dword [esp + 0x54], 1
call fcn.100ab973
mov ecx, dword [esp + 0x5c]
add esp, 0x10
test esi, 0x20000
je 0x100e500a
push 0x1002a534
push ebx
push ebx
push 0x4000000
call fcn.100ab973
mov ecx, dword [esp + 0x5c]
add esp, 0x10
cmp ecx, 6
je 0x100e5372
cmp ecx, 0xb
je 0x100e50d0
cmp ecx, 0xc
je 0x100e50ac
cmp ecx, 8
je 0x100e5089
cmp ecx, 4
je 0x100e5089
cmp ecx, 0xa
je 0x100e5050
cmp ecx, 7
je 0x100e5050
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
cmp ecx, 3
jne 0x100e4f25
jmp 0x100e5106
xor ecx, ecx
xor edx, edx
inc ecx
call fcn.100e3518
push dword [esp + 0x4c]
mov eax, 0x80004005
push dword [esp + 0x1c]
mov edi, eax
push 0x1002a768
push 1
push eax
push 0x2000000
call fcn.100ab973
add esp, 0x18
push 0x14
pop esi
mov dword [esp + 0x2c], esi
mov ecx, esi
jmp 0x100e50fb
push ecx
push dword [esp + 0x1c]
push 0x1002a728
push ebx
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x18
mov edi, 0x80004005
push 0x14
pop eax
jmp 0x100e50f5
push dword [esp + 0x18]
mov eax, 0x800f0922
push 0x1002a6b8
push 1
push eax
push 0x2000000
mov edi, eax
call fcn.100ab973
mov eax, 0x10000a
jmp 0x100e50f2
push dword [esp + 0x18]
mov eax, 0x800f0921
push 0x1002a658
push 1
push eax
push 0x2000000
mov edi, eax
call fcn.100ab973
mov eax, 0x8000a
add esp, 0x14
mov dword [esp + 0x2c], eax
mov ecx, eax
xor edx, edx
call fcn.100e6582
mov ecx, dword [esp + 0x4c]
cmp dword [esp + 0x2c], 4
jne 0x100e5114
push 0x1e
jmp 0x100e52c0
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x10]
and eax, 0x3fff
cmp eax, 4
jne 0x100e499e
push ecx
push 0x1002a7f0
mov eax, 0x800f0922
push 1
mov edi, eax
push eax
jmp 0x100e52b1
cmp dword [esp + 0x2c], 0x8000a
jne 0x100e518c
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
mov esi, dword [eax + 0x30]
lea eax, [esp + 0x74]
push eax
push ebx
push ebx
push 1
push ecx
mov ecx, esi
call dword [0x101e07c0]
call esi
mov edi, eax
test edi, edi
js 0x100e53df
mov esi, dword [esp + 0x10]
mov ecx, esi
neg ecx
sbb ecx, ecx
and ecx, 0x8ffec
add ecx, 0x14
mov dword [esp + 0x2c], ecx
jmp 0x100e4a3d
cmp dword [esp + 0x2c], 0x10000a
jne 0x100e5232
cmp dword [esp + 0x10], 0
je 0x100e51c6
xor edx, edx
xor ecx, ecx
call fcn.1010622d
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e51c6
push 0x1002a8a0
push esi
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
mov esi, dword [eax + 0x30]
lea eax, [esp + 0x74]
push eax
push ebx
push ebx
push 1
push ecx
mov ecx, esi
call dword [0x101e07c0]
call esi
mov edi, eax
test edi, edi
js 0x100e53df
mov esi, dword [esp + 0x10]
mov eax, 0x1002a8e0
test esi, esi
jne 0x100e51ff
mov eax, 0x1002a960
xor ebx, ebx
test esi, esi
push eax
setne bl
xor eax, eax
push eax
push eax
push 0x4000000
add ebx, 0x110001
call fcn.100ab973
add esp, 0x10
mov dword [esp + 0x2c], ebx
xor edx, edx
mov ecx, ebx
call fcn.100e6582
xor ebx, ebx
jmp 0x100e499e
cmp eax, 0x14
jne 0x100e5292
cmp dword [esp + 0x2c], eax
jne 0x100e5412
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0x4c]
push eax
push 4
lea eax, [esp + 0x74]
xor edx, edx
push eax
lea eax, [esp + 0xc8]
push eax
call fcn.100f792c
mov dword [esp + 0x48], eax
test eax, eax
js 0x100e53ec
cmp dword [esp + 0x4c], 4
jne 0x100e5412
push 0x1002a9e0
push ebx
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov eax, 0x10000a
jmp 0x100e52c1
mov ecx, dword [esp + 0x2c]
cmp ecx, 0x1e
je 0x100e5562
mov edi, 0x800f0925
call fcn.100e6048
push eax
push 0x1002acb0
push esi
push edi
push 0x2000000
call fcn.100ab973
add esp, 0x14
push 0x14
pop eax
mov dword [esp + 0x2c], eax
mov ecx, eax
xor edx, edx
call fcn.100e6582
mov esi, dword [esp + 0x10]
jmp 0x100e499e
test edi, edi
js 0x100e52e0
mov edi, 0x80070643
push 0x1002a198
push 1
push edi
push 0x2000000
call fcn.100ab973
add esp, 0x10
jmp 0x100e569e
xor ecx, ecx
call fcn.1010637c
mov dword [esp + 0x80], 1
jmp 0x100e569e
push 0x1002a210
xor esi, esi
inc esi
push esi
push edi
push 0x2000000
call fcn.100ab973
add esp, 0x10
mov dword [esp + 0x44], esi
jmp 0x100e569e
push 0x1002a2a0
jmp 0x100e5316
push 0x1002a258
jmp 0x100e5316
push 0x1002a334
jmp 0x100e4c47
mov eax, 0x1002a354
test esi, esi
jne 0x100e5357
mov eax, 0x1002a38c
push eax
jmp 0x100e4c47
push 0x1002a3bc
jmp 0x100e5319
push 0x1002a210
jmp 0x100e5319
push 0x1002a400
jmp 0x100e5319
push dword [esp + 0x18]
xor esi, esi
mov edi, 0x2000000
push 0x1002a578
inc esi
push esi
push 0x80004005
push edi
call fcn.100ab973
add esp, 0x14
mov dword [esp + 0x2c], esi
xor edx, edx
mov ecx, esi
call fcn.100e6582
push 0x1002a5e0
push esi
mov dword [esp + 0x2c], esi
mov esi, 0x80004004
push esi
push edi
call fcn.100ab973
add esp, 0x10
mov edi, esi
jmp 0x100e569e
push dword [esp + 0x18]
xor esi, esi
push 0x1002a7a8
inc esi
push esi
push edi
push 0x2000000
call fcn.100ab973
add esp, 0x14
jmp 0x100e5328
xor esi, esi
inc esi
push 0x1002a838
jmp 0x100e44f5
push 0x1002a9b0
push esi
push eax
push 0x4000000
call fcn.100ab973
mov eax, 0x200014
add esp, 0x10
xor edx, edx
mov dword [esp + 0x2c], eax
mov ecx, eax
call fcn.100e6582
cmp dword [esp + 0x2c], 0x200014
jne 0x100e548e
push 0x1002aa30
push ebx
push ebx
push 0x4000000
call fcn.100ab973
mov ecx, dword [esp + 0x44]
add esp, 0x10
mov eax, dword [ecx]
mov esi, dword [eax + 0x30]
lea eax, [esp + 0x74]
push eax
push ebx
push ebx
push 2
push ecx
mov ecx, esi
call dword [0x101e07c0]
call esi
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e546e
push 0x1002aa70
xor esi, esi
inc esi
push esi
push eax
push 0x2000000
call fcn.100ab973
add esp, 0x10
jmp 0x100e5491
xor ecx, ecx
call fcn.100e3350
xor esi, esi
mov dword [esp + 0x48], eax
inc esi
test eax, eax
jns 0x100e5491
push 0x1002aab0
push esi
push eax
push 0x4000000
jmp 0x100e5464
xor esi, esi
inc esi
lea ecx, [esp + 0xbc]
call fcn.10108f82
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e54b9
push 0x1002aaf8
push esi
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
xor edx, edx
mov ecx, esi
call fcn.1010622d
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e54de
push 0x1002ab40
push esi
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
cmp dword [esp + 0x6c], 0
jne 0x100e54f7
push ebx
push esi
xor edx, edx
xor ecx, ecx
call fcn.10107710
xor ecx, ecx
call fcn.10106402
cmp dword [esp + 0x10], 0
mov dword [esp + 0x64], esi
mov dword [esp + 0x54], esi
je 0x100e5531
mov ecx, dword [esp + 0x30]
mov edx, esi
call fcn.1011d365
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e5531
push 0x1002ab74
push esi
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov dword [esp + 0x44], esi
cmp dword [esp + 0x6c], 0
je 0x100e554c
push ebx
push ebx
xor edx, edx
or ecx, 0xffffffff
call fcn.1010573a
mov dword [esp + 0x54], ebx
mov dword [esp + 0x44], esi
mov esi, dword [esp + 0x14]
test edi, edi
js 0x100e56a2
mov edi, 0x80070643
jmp 0x100e56a2
cmp dword [esp + 0x10], 0
je 0x100e55a8
push 0x1002abb0
push ebx
push ebx
push 0x4000000
call fcn.100ab973
mov ecx, dword [esp + 0x40]
add esp, 0x10
mov edx, esi
call fcn.1011d365
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e55a8
push 0x1002ab74
push esi
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov dword [esp + 0x44], esi
lea ecx, [esp + 0x128]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], esi
mov dword [esp + 0x54], esi
call fcn.1011b7e3
push 0x208
lea eax, [esp + 0x194]
push ebx
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
lea ecx, [esp + 0x5c]
call fcn.100b2180
lea ecx, [esp + 0x50]
call fcn.100b2180
push 0x104
lea eax, [esp + 0x194]
push eax
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetWindowsDirectoryW]
test eax, eax
jne 0x100e561d
test edi, edi
jns 0x100e568a
push 0x1002abf0
push esi
push edi
push 0x4000000
call fcn.100ab973
add esp, 0x10
jmp 0x100e568a
lea eax, [esp + 0x190]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.100a7590
lea ecx, [esp + 0x50]
test eax, eax
js 0x100e568e
call fcn.100b15f5
test eax, eax
js 0x100e568a
mov edx, dword [esp + 0x50]
lea ecx, [esp + 0x5c]
push 0x1002ac38
call fcn.100a9500
test eax, eax
js 0x100e568a
mov ecx, dword [esp + 0x5c]
xor edx, edx
call fcn.100b7fb2
test eax, eax
je 0x100e568a
mov ecx, dword [esp + 0x5c]
call fcn.100ee831
test eax, eax
js 0x100e568a
push dword [esp + 0x5c]
push 0x1002ac80
push ebx
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x14
lea ecx, [esp + 0x50]
mov edi, ebx
call fcn.100b3ca0
lea ecx, [esp + 0x5c]
call fcn.100b3ca0
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x2c]
call fcn.100e3ac3
cmp dword [esp + 0x60], 0
jge 0x100e56b6
mov edi, dword [esp + 0x60]
cmp dword [0x101dea28], 0
je 0x100e596f
test edi, edi
jns 0x100e596f
mov ecx, dword [esp + 0x2c]
cmp ecx, 0xffffffff
je 0x100e5973
mov eax, ecx
and eax, 0x3fff
cmp eax, 0x14
je 0x100e5973
cmp dword [esp + 0x20], 0
jne 0x100e5973
cmp dword [esp + 0x24], 0
jne 0x100e5973
cmp dword [esp + 0x80], 0
jne 0x100e5973
push ebx
push ebx
xor edx, edx
call fcn.10105e70
test eax, eax
je 0x100e5724
cmp dword [esp + 0x28], 0
je 0x100e596f
mov eax, dword [esp + 0x2c]
mov ecx, 0x8000a
and eax, 0xffff3fff
mov dword [esp + 0x28], ebx
cmp eax, ecx
ja 0x100e5875
je 0x100e583d
cmp eax, 0x64
ja 0x100e57d4
je 0x100e576c
test eax, eax
je 0x100e57c3
cmp eax, 1
je 0x100e57b2
jbe 0x100e58b0
cmp eax, 4
jbe 0x100e57a1
cmp eax, 0x32
jne 0x100e58b0
push 0x1002ad08
push 1
push 0x80004005
push 0x2000000
call fcn.100ab973
or dword [esp + 0x3c], 0xffffffff
add esp, 0x10
xor edx, edx
or ecx, 0xffffffff
call fcn.100e6582
mov dword [esp + 0x54], 1
jmp 0x100e498f
push 0x1002ae38
push 1
push 0x80004005
jmp 0x100e4970
push 0x1002adc8
push 1
push 0x80004005
jmp 0x100e4ae8
push 0x1002ad50
push 1
push 0x80004005
jmp 0x100e4b26
sub eax, 0x10003
je 0x100e581d
sub eax, 1
je 0x100e5813
sub eax, 0x3fffc
jne 0x100e58b0
push 0x1002af78
push 1
push 0x80004005
push 0x2000000
call fcn.100ab973
add esp, 0x10
xor ecx, ecx
xor edx, edx
inc ecx
call fcn.100e3518
jmp 0x100e4b33
push 0x1002b168
jmp 0x100e5940
push 0x1002b118
push 1
push 0x80004005
push 0x2000000
call fcn.100ab973
mov eax, 0x10004
jmp 0x100e497f
push 0x1002aec0
push 1
push 0x80004005
push 0x2000000
call fcn.100ab973
add esp, 0x10
xor ecx, ecx
xor edx, edx
inc ecx
call fcn.100e3518
mov esi, dword [esp + 0x10]
mov ecx, esi
neg ecx
sbb ecx, ecx
and ecx, 0x8ffec
jmp 0x100e4b05
sub eax, 0x90000
je 0x100e57eb
sub eax, 0x10002
je 0x100e5968
sub eax, 0x60008
je 0x100e593b
sub eax, 0x28
je 0x100e576c
sub eax, 0xffce
je 0x100e590e
sub eax, 1
je 0x100e58d0
sub eax, 1
je 0x100e58c9
push 0x1002b1b0
push ebx
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x10
jmp 0x100e595e
push 0x1002b070
jmp 0x100e5940
push 0x1002b020
push 1
push 0x80004005
push 0x2000000
call fcn.100ab973
add esp, 0x10
xor ecx, ecx
xor edx, edx
inc ecx
call fcn.100e3518
mov esi, dword [esp + 0x10]
mov ecx, esi
neg ecx
sbb ecx, ecx
and ecx, 0xffe9ffee
add ecx, 0x200014
jmp 0x100e4b08
push 0x1002afc8
push 1
push 0x80004005
push 0x2000000
call fcn.100ab973
add esp, 0x10
xor ecx, ecx
xor edx, edx
inc ecx
call fcn.100e3518
mov eax, 0x10003
jmp 0x100e4982
push 0x1002af20
push 1
push 0x80004005
push 0x2000000
call fcn.100ab973
add esp, 0x10
xor ecx, ecx
xor edx, edx
inc ecx
call fcn.100e3518
mov eax, 0x200014
jmp 0x100e4982
push 0x1002b0c0
jmp 0x100e5940
mov ecx, dword [esp + 0x2c]
push ebx
push ebx
xor edx, edx
call fcn.1010573a
test edi, edi
jns 0x100e5994
cmp dword [esp + 0x60], 0
jne 0x100e5994
mov edx, dword [0x101dea48]
mov ecx, edi
call fcn.100fe49f
test esi, esi
je 0x100e59a0
mov dword [esp + 0x44], 1
push 2
pop ecx
call fcn.100e63fa
test eax, eax
je 0x100e5a8b
push 0x10009154
push ebx
push 2
call dword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_OpenEventW]
mov esi, eax
test esi, esi
je 0x100e59e1
push 0x1002b20c
push ebx
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x10
push esi
call dword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_SetEvent]
jmp 0x100e5a14
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
test eax, eax
jle 0x100e59f3
movzx eax, ax
or eax, 0x80070000
push eax
push 0x1002b238
push ebx
push ebx
push 0x4000000
mov dword [esp + 0x5c], eax
call fcn.100ab973
add esp, 0x14
mov dword [esp + 0x44], 1
test esi, esi
je 0x100e5a24
cmp esi, 0xffffffff
je 0x100e5a24
push esi
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
cmp dword [esp + 0x44], 0
mov esi, 0x4000000
jne 0x100e5a77
push 0x1002b26c
push ebx
push ebx
push esi
mov dword [esp + 0x90], ebx
call fcn.100ab973
add esp, 0x10
xor edx, edx
push 2
pop ecx
call fcn.100e652d
call fcn.100e3d8c
mov edi, eax
test edi, edi
jns 0x100e5a6d
push 0x10029ac4
push 1
push edi
push esi
call fcn.100ab973
add esp, 0x10
call fcn.100b17a5
jmp 0x100e498f
push 0x1002b28c
push ebx
push ebx
push esi
call fcn.100ab973
add esp, 0x10
mov edi, ebx
jmp 0x100e5a90
mov esi, 0x4000000
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x100e5ab6
call fcn.10108c7e
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e5ab6
push 0x1002b2a8
push 1
push eax
push esi
call fcn.100ab973
add esp, 0x10
cmp dword [esp + 0x64], 0
je 0x100e5bbe
push ebx
lea ecx, [esp + 0x68]
call fcn.1011f4fb
push ebx
lea ecx, [esp + 0xf4]
call fcn.1011f4b1
lea ecx, [esp + 0x64]
call fcn.1011f535
lea ecx, [esp + 0xf0]
call fcn.1011f654
lea ecx, [esp + 0xac]
call fcn.100e312a
mov eax, dword [0x101dca50]
cmp dword [eax + 0xc4], ebx
je 0x100e5b20
push 0x1002b2d0
push ebx
push ebx
push esi
call fcn.100ab973
add esp, 0x10
mov ecx, 0x800f0845
xor edx, edx
push ebx
jmp 0x100e5b30
push dword [esp + 0xac]
lea edx, [esp + 0xc0]
mov ecx, edi
call fcn.100fdd2f
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e5b52
push 0x1002b328
push 1
push eax
push 0x2000000
call fcn.100ab973
add esp, 0x10
xor edx, edx
xor ecx, ecx
call fcn.100fe49f
xor edx, edx
xor ecx, ecx
call fcn.10108baa
cmp dword [esp + 0x44], 0
je 0x100e5b9a
cmp dword [esp + 0x6c], 0
je 0x100e5b76
push 4
jmp 0x100e5b91
mov eax, dword [esp + 0x2c]
and eax, 0x3fff
cmp eax, 0x14
jne 0x100e5b8f
mov ecx, 0x100032
mov dword [esp + 0x2c], ecx
jmp 0x100e5ba2
push 0x32
pop eax
mov dword [esp + 0x2c], eax
mov ecx, eax
jmp 0x100e5ba2
or dword [esp + 0x2c], 0xffffffff
or ecx, 0xffffffff
xor edx, edx
call fcn.100e6582
lea ecx, [esp + 0xf0]
call fcn.100e098f
lea ecx, [esp + 0x64]
call fcn.100e09c0
call fcn.1010a213
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x100e5bdb
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x101e07c0]
call esi
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x100e5bf3
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x101e07c0]
call esi
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x100e5c0b
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x101e07c0]
call esi
mov ecx, dword [0x101dca50]
lea eax, [esp + 0xbc]
push eax
push dword [esp + 0x48]
push edi
call fcn.10103a74
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e5c40
push 0x1002b37c
push 1
push eax
push 0x2000000
call fcn.100ab973
add esp, 0x10
cmp dword [esp + 0x44], 0
je 0x100e5c5b
mov esi, dword [0x101dc9e8]
test esi, esi
je 0x100e5c5b
mov ecx, esi
call dword [0x101e07c0]
call esi
cmp dword [esp + 0x54], 0
jne 0x100e5c6b
call fcn.100fb3dc
test eax, eax
je 0x100e5c70
xor eax, eax
inc eax
jmp 0x100e5c72
mov eax, ebx
mov esi, 0x4000000
test eax, eax
je 0x100e5d06
cmp dword [esp + 0x44], 0
jne 0x100e5ced
push 0x1002b3bc
push ebx
push ebx
push esi
mov dword [esp + 0x74], ebx
call fcn.100ab973
mov ecx, dword [0x101dca50]
add esp, 0x10
cmp dword [ecx + 0x2c], ebx
jbe 0x100e5cb8
mov edx, dword [esp + 0x2c]
push ebx
push 4
pop ecx
call fcn.101058be
mov ecx, dword [0x101dca50]
lea eax, [esp + 0x64]
push eax
call fcn.1010472a
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e5cdc
push eax
push 0x1002b3e0
push 1
push eax
push esi
call fcn.100ab973
add esp, 0x14
cmp dword [esp + 0x64], 0
je 0x100e5d06
mov dword [esp + 0x44], 1
jmp 0x100e5d02
push 0x1002b418
push ebx
push ebx
push esi
call fcn.100ab973
add esp, 0x10
mov edi, 0x80070bc2
mov dword [esp + 0x54], ebx
lea edx, [esp + 0x54]
lea ecx, [esp + 0x44]
call fcn.100e340a
mov dword [esp + 0x48], eax
cmp eax, 0xf0833
je 0x100e5d25
cmp eax, 0xf0803
jne 0x100e5d27
mov edi, eax
mov eax, dword [esp + 0x44]
test eax, eax
je 0x100e5d56
cmp dword [esp + 0x54], 0
je 0x100e5d4e
push 0x32
pop eax
xor edx, edx
mov dword [esp + 0x2c], eax
mov ecx, eax
call fcn.100e6582
mov eax, dword [esp + 0x44]
mov dword [esp + 0x54], ebx
test eax, eax
jne 0x100e5dfd
cmp edi, 0xf0833
je 0x100e5dfd
cmp edi, 0xf0803
je 0x100e5dfd
xor ecx, ecx
call fcn.100fb621
test eax, eax
je 0x100e5dfd
cmp dword [esp + 0x20], 0
je 0x100e5d9d
push 0x1002b490
push ebx
push ebx
push esi
call fcn.100ab973
add esp, 0x10
xor ecx, ecx
call fcn.100fc3d6
jmp 0x100e5dfd
push 0x1002b4f0
push ebx
push ebx
push esi
mov dword [esp + 0x74], ebx
call fcn.100ab973
add esp, 0x10
xor edx, edx
push 0x64
pop eax
mov ecx, eax
mov dword [esp + 0x2c], eax
call fcn.100e6582
mov edx, dword [esp + 0x2c]
or ecx, 0xffffffff
push ebx
call fcn.101058be
lea eax, [esp + 0x64]
push eax
push ebx
call sym.cbscore.dll_CbsCoreServiceIdleProcessing
push dword [esp + 0x64]
push 0x1002b520
push 1
push eax
push esi
call fcn.100ab973
or dword [esp + 0x40], 0xffffffff
add esp, 0x14
xor edx, edx
or ecx, 0xffffffff
call fcn.100e6582
push 2
pop ecx
call fcn.100e63fa
test eax, eax
je 0x100e5e59
cmp dword [esp + 0x44], 0
je 0x100e5e59
mov ecx, 0x101dc3a0
call fcn.100ec63f
cmp dword [0x101dc3ac], ebx
jg 0x100e5e59
mov ecx, dword [0x101dc3a8]
mov esi, 0x2710
jl 0x100e5e33
cmp ecx, esi
jae 0x100e5e59
mov eax, esi
sub eax, ecx
push eax
push 0x1002b54c
push ebx
push ebx
push 0x4000000
call fcn.100ab973
sub esi, dword [0x101dc3a8]
add esp, 0x14
push esi
call dword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
call fcn.10104a6c
lea ecx, [esp + 0x128]
call fcn.1011b195
mov esi, dword [esp + 0x20]
test esi, esi
jne 0x100e5ec7
cmp dword [esp + 0x44], esi
je 0x100e5ebb
cmp edi, 0x80070bc9
je 0x100e5ebb
cmp edi, 0x80070bc2
je 0x100e5ebb
cmp edi, 0xf0833
je 0x100e5ebb
cmp edi, 0xf0803
je 0x100e5ebb
mov eax, 0x1002b584
test edi, edi
js 0x100e5ea6
mov eax, 0x1002b5b4
push eax
push ebx
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov edi, 0x80070bc2
cmp dword [esp + 0x24], 0
je 0x100e5ec7
mov edi, 0x80004004
push 0x1002b5f0
push 1
push edi
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov edx, 0x1002b610
xor ecx, ecx
call fcn.100fe758
xor edx, edx
xor ecx, ecx
call fcn.100f7df0
cmp dword [esp + 0x44], 0
je 0x100e5efd
call sym.cbscore.dll_SetRebootInProgressFlag
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x100e5f3b
call fcn.100ed776
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e5f27
push 0x1002b634
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov eax, dword [esp + 0x40]
test eax, eax
je 0x100e5f3b
cmp eax, 0xffffffff
je 0x100e5f3b
push eax
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
cmp dword [esp + 0x54], 0
jne 0x100e5f46
test esi, esi
je 0x100e5f6a
xor ecx, ecx
call fcn.100e2de0
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e5f6a
push 0x1002b654
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
cmp dword [esp + 0x44], 0
jne 0x100e5fe1
xor edx, edx
xor ecx, ecx
call fcn.100e681d
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetSystemTimeAsFileTime]
mov eax, dword [esp + 0x64]
mov edx, 0x1002b6a8
mov dword [esp + 0x80], eax
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
mov eax, dword [esp + 0x68]
mov dword [esp + 0x84], eax
lea eax, [esp + 0x80]
push eax
push 0x1002b674
push ebx
call fcn.100e7afc
mov dword [esp + 0x48], eax
test eax, eax
jns 0x100e5fd5
push 0x1002b744
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov ecx, dword [0x101dca50]
push ebx
call fcn.10104568
mov ebx, edi
lea ecx, [esp + 0x128]
call fcn.1011ae9c
lea ecx, [esp + 0xdc]
call fcn.100e0a75
lea ecx, [esp + 0xb0]
call fcn.100e09e4
lea ecx, [esp + 0xbc]
call fcn.100e098a
mov ecx, dword [esp + 0x39c]
mov eax, ebx
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100b88c0
mov esp, ebp
pop ebp
ret 4