Function at 0x1000ae30
Capabilities:
Inspect section memory permissions
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002e910
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1bec
call fcn.1002ac40
mov eax, dword [0x1003800c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x1bcc], esi
mov dword [ebp - 0x1bc0], esi
mov dword [ebp - 0x1bc4], 0
xor eax, eax
mov dword [ebp - 0x1bb4], eax
mov dword [ebp - 0x1bbc], eax
xor ebx, ebx
mov dword [ebp - 0x1bb0], ebx
mov dword [ebp - 0x1bd0], ebx
mov dword [ebp - 0x1bc4], eax
xor edi, edi
mov dword [ebp - 0x1ba8], edi
mov dword [ebp - 0x1bd4], edi
mov dword [ebp - 0x1bc4], eax
mov dword [ebp - 0x1bb8], eax
mov dword [ebp - 0x1bd8], eax
mov dword [ebp - 0x1bc8], eax
mov dword [ebp - 0x1bc4], eax
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x1be0]
call fcn.10016b30
lea eax, [ebp - 0x1bfc]
push eax
lea ecx, [ebp - 0x1be0]
call fcn.100169e0
lea ecx, [ebp - 0x1be0]
call fcn.1000e050
mov dword [ebp - 4], 0xffffffff
jmp 0x1000af55
lea ecx, [ebp - 0x9a4]
call fcn.10016bd0
push eax
mov dl, byte [0x100390a2]
lea ecx, [ebp - 0x98c]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x974]
call fcn.10016bd0
push eax
mov dl, byte [0x10038ea1]
lea ecx, [ebp - 0x95c]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038ca9]
push eax
lea ecx, [ebp - 0x944]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x92c]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x914]
call fcn.10016bd0
push eax
mov dl, byte [0x10038e27]
lea ecx, [ebp - 0x8fc]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x8e4]
call fcn.10016bd0
push eax
mov dl, byte [0x10038d24]
lea ecx, [ebp - 0x8cc]
call fcn.10017060
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x8b4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x89c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x884]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x86c]
call fcn.10017090
add esp, 4
mov ecx, eax
call fcn.10016b70
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x1003a81c], eax
test eax, eax
je 0x1000b2bd
push 1
mov ecx, 0x1003a6e4
call fcn.10016b80
mov bl, byte [eax]
push 5
mov ecx, 0x1003a714
call fcn.10016b80
mov al, byte [eax]
mov byte [ebp - 0x1ba9], al
push 1
mov ecx, 0x1003a6e4
call fcn.10016b80
mov al, byte [eax]
mov dword [ebp - 0x1bc0], eax
push 5
mov ecx, 0x1003a714
call fcn.10016b80
mov esi, eax
movsx ecx, byte [0x10039127]
push ecx
call fcn.10020396
add esp, 4
push eax
lea ecx, [ebp - 0x854]
call fcn.10016bd0
push eax
push ebx
lea ecx, [ebp - 0x83c]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x824]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x80c]
call fcn.10016bd0
push eax
mov dl, byte [0x10038f25]
lea ecx, [ebp - 0x7f4]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x7dc]
call fcn.10016bd0
push eax
mov dl, byte [ebp - 0x1ba9]
lea ecx, [ebp - 0x7c4]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x7ac]
call fcn.10016bd0
push eax
movzx eax, byte [str.jjsjjphI]
push eax
movzx eax, byte [str.bmBjbfbphA]
push eax
lea ecx, [ebp - 0x794]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x77c]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x764]
call fcn.10016bd0
push eax
movsx eax, byte [0x10038ba0]
push eax
call fcn.10020396
add esp, 4
push eax
lea ecx, [ebp - 0x3bc]
call fcn.10016bd0
push eax
push dword [ebp - 0x1bc0]
lea ecx, [ebp - 0x734]
call fcn.10016bd0
push eax
mov dl, byte [esi]
lea ecx, [ebp - 0x71c]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x704]
call fcn.10016bd0
push eax
movsx eax, byte [0x10038d24]
push eax
call fcn.10020396
add esp, 4
mov dl, al
lea ecx, [ebp - 0x6ec]
call fcn.10017060
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x6d4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x6bc]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x6a4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x68c]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x674]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x65c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x644]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x62c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x614]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x5fc]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x5e4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x5cc]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x5b4]
call fcn.100170b0
add esp, 4
mov ecx, eax
call fcn.10016b70
push eax
push dword [0x1003a81c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
mov ecx, 0x1fffffff
mov ebx, dword [ebp - 0x1bb0]
jmp 0x1000b634
lea ecx, [ebp - 0x59c]
call fcn.10016bd0
push eax
mov dl, byte [0x100390a2]
lea ecx, [ebp - 0x584]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x56c]
call fcn.10016bd0
push eax
mov dl, byte [0x10038ea1]
lea ecx, [ebp - 0x554]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038ca9]
push eax
lea ecx, [ebp - 0x53c]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x524]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x50c]
call fcn.10016bd0
push eax
mov dl, byte [0x10038e27]
lea ecx, [ebp - 0x4f4]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x4dc]
call fcn.10016bd0
push eax
mov dl, byte [0x10038d24]
lea ecx, [ebp - 0x4c4]
call fcn.10017060
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x4ac]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x494]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x47c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x464]
call fcn.10017090
add esp, 4
mov ecx, eax
call fcn.10016b70
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x1003a81c], eax
test eax, eax
je 0x1000b622
push 1
mov ecx, 0x1003a6e4
call fcn.10016b80
mov bl, byte [eax]
push 5
mov ecx, 0x1003a714
call fcn.10016b80
mov al, byte [eax]
mov byte [ebp - 0x1ba9], al
push 1
mov ecx, 0x1003a6e4
call fcn.10016b80
mov al, byte [eax]
mov dword [ebp - 0x1bc0], eax
push 5
mov ecx, 0x1003a714
call fcn.10016b80
mov esi, eax
movsx ecx, byte [0x10039127]
push ecx
call fcn.10020396
add esp, 4
push eax
lea ecx, [ebp - 0x44c]
call fcn.10016bd0
push eax
push ebx
lea ecx, [ebp - 0x434]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x41c]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x404]
call fcn.10016bd0
push eax
mov dl, byte [0x10038f25]
lea ecx, [ebp - 0x3ec]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x3d4]
call fcn.10016bd0
push eax
mov dl, byte [ebp - 0x1ba9]
lea ecx, [ebp - 0x2c]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x3a4]
call fcn.10016bd0
push eax
movzx eax, byte [str.jjsjjphI]
push eax
movzx eax, byte [str.bmBjbfbphA]
push eax
lea ecx, [ebp - 0x38c]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x374]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x35c]
call fcn.10016bd0
push eax
movsx eax, byte [0x10038ba0]
push eax
call fcn.10020396
add esp, 4
push eax
lea ecx, [ebp - 0x344]
call fcn.10016bd0
push eax
push dword [ebp - 0x1bc0]
lea ecx, [ebp - 0x32c]
call fcn.10016bd0
push eax
mov dl, byte [esi]
lea ecx, [ebp - 0x314]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x2fc]
call fcn.10016bd0
push eax
movsx eax, byte [0x10038d24]
push eax
call fcn.10020396
add esp, 4
mov dl, al
lea ecx, [ebp - 0x2e4]
call fcn.10017060
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x2cc]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x2b4]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x29c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x284]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x26c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x254]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x23c]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x224]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x20c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1f4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1dc]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1c4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1ac]
call fcn.100170b0
add esp, 4
mov ecx, eax
call fcn.10016b70
push eax
push dword [0x1003a81c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
or eax, 0xffffffff
mov ebx, 0xff
mov dword [ebp - 0x1bb0], ebx
jmp 0x1000b629
xor edx, edx
mov eax, 0x7ff
mov dword [ebp - 0x1bb4], eax
mov ecx, 0xe0000000
mov dword [ebp - 0x1bbc], ecx
lea eax, [ebp - 0x1bf8]
push eax
push 0x18
push dword [ebp - 0x1bcc]
call edx
test eax, eax
sete byte [ebp - 0x1ba9]
test bl, bl
jns 0x1000b66f
and ebx, 0xffffff7f
mov dword [ebp - 0x1bb0], ebx
lea ecx, [ebp - 0x1ac]
call fcn.10002716
test bl, 0x40
je 0x1000b688
and ebx, 0xffffffbf
mov dword [ebp - 0x1bb0], ebx
lea ecx, [ebp - 0x1c4]
call fcn.10002716
test bl, 0x20
je 0x1000b6a1
and ebx, 0xffffffdf
mov dword [ebp - 0x1bb0], ebx
lea ecx, [ebp - 0x1dc]
call fcn.10002716
test bl, 0x10
je 0x1000b6ba
and ebx, 0xffffffef
mov dword [ebp - 0x1bb0], ebx
lea ecx, [ebp - 0x1f4]
call fcn.10002716
test bl, 8
je 0x1000b6d3
and ebx, 0xfffffff7
mov dword [ebp - 0x1bb0], ebx
lea ecx, [ebp - 0x20c]
call fcn.10002716
test bl, 4
je 0x1000b6ec
and ebx, 0xfffffffb
mov dword [ebp - 0x1bb0], ebx
lea ecx, [ebp - 0x224]
call fcn.10002716
test bl, 2
je 0x1000b705
and ebx, 0xfffffffd
mov dword [ebp - 0x1bb0], ebx
lea ecx, [ebp - 0x23c]
call fcn.10002716
test bl, 1
je 0x1000b71e
and ebx, 0xfffffffe
mov dword [ebp - 0x1bb0], ebx
lea ecx, [ebp - 0x254]
call fcn.10002716
mov ebx, dword [ebp - 0x1bb4]
test ebx, ebx
jns 0x1000b739
and ebx, 0x7fffffff
lea ecx, [ebp - 0x26c]
call fcn.10002716
test ebx, 0x40000000
je 0x1000b752
and ebx, 0xbfffffff
lea ecx, [ebp - 0x284]
call fcn.10002716
test ebx, 0x20000000
je 0x1000b76b
and ebx, 0xdfffffff
lea ecx, [ebp - 0x29c]
call fcn.10002716
test ebx, 0x10000000
je 0x1000b784
and ebx, 0xefffffff
lea ecx, [ebp - 0x2b4]
call fcn.10002716
test ebx, 0x8000000
je 0x1000b79d
and ebx, 0xf7ffffff
lea ecx, [ebp - 0x2cc]
call fcn.10002716
test ebx, 0x4000000
je 0x1000b7b6
and ebx, 0xfbffffff
lea ecx, [ebp - 0x2e4]
call fcn.10002716
test ebx, 0x2000000
je 0x1000b7cf
and ebx, 0xfdffffff
lea ecx, [ebp - 0x2fc]
call fcn.10002716
test ebx, 0x1000000
je 0x1000b7e8
and ebx, 0xfeffffff
lea ecx, [ebp - 0x314]
call fcn.10002716
test ebx, 0x800000
je 0x1000b801
and ebx, 0xff7fffff
lea ecx, [ebp - 0x32c]
call fcn.10002716
test ebx, 0x400000
je 0x1000b81a
and ebx, 0xffbfffff
lea ecx, [ebp - 0x344]
call fcn.10002716
test ebx, 0x200000
je 0x1000b833
and ebx, 0xffdfffff
lea ecx, [ebp - 0x35c]
call fcn.10002716
test ebx, 0x100000
je 0x1000b84c
and ebx, 0xffefffff
lea ecx, [ebp - 0x374]
call fcn.10002716
test ebx, 0x80000
je 0x1000b865
and ebx, 0xfff7ffff
lea ecx, [ebp - 0x38c]
call fcn.10002716
test ebx, 0x40000
je 0x1000b87e
and ebx, 0xfffbffff
lea ecx, [ebp - 0x3a4]
call fcn.10002716
test ebx, 0x20000
je 0x1000b894
and ebx, 0xfffdffff
lea ecx, [ebp - 0x2c]
call fcn.10002716
test ebx, 0x10000
je 0x1000b8ad
and ebx, 0xfffeffff
lea ecx, [ebp - 0x3d4]
call fcn.10002716
test ebx, 0x8000
je 0x1000b8c6
and ebx, 0xffff7fff
lea ecx, [ebp - 0x3ec]
call fcn.10002716
test ebx, 0x4000
je 0x1000b8df
and ebx, 0xffffbfff
lea ecx, [ebp - 0x404]
call fcn.10002716
test ebx, 0x2000
je 0x1000b8f8
and ebx, 0xffffdfff
lea ecx, [ebp - 0x41c]
call fcn.10002716
test ebx, 0x1000
je 0x1000b911
and ebx, 0xffffefff
lea ecx, [ebp - 0x434]
call fcn.10002716
test ebx, 0x800
je 0x1000b92a
and ebx, 0xfffff7ff
lea ecx, [ebp - 0x44c]
call fcn.10002716
test ebx, 0x400
je 0x1000b943
and ebx, 0xfffffbff
lea ecx, [ebp - 0x464]
call fcn.10002716
test ebx, 0x200
je 0x1000b95c
and ebx, 0xfffffdff
lea ecx, [ebp - 0x47c]
call fcn.10002716
test ebx, 0x100
je 0x1000b975
and ebx, 0xfffffeff
lea ecx, [ebp - 0x494]
call fcn.10002716
test bl, bl
jns 0x1000b98a
and ebx, 0xffffff7f
lea ecx, [ebp - 0x4ac]
call fcn.10002716
test bl, 0x40
je 0x1000b99d
and ebx, 0xffffffbf
lea ecx, [ebp - 0x4c4]
call fcn.10002716
test bl, 0x20
je 0x1000b9b0
and ebx, 0xffffffdf
lea ecx, [ebp - 0x4dc]
call fcn.10002716
test bl, 0x10
je 0x1000b9c3
and ebx, 0xffffffef
lea ecx, [ebp - 0x4f4]
call fcn.10002716
test bl, 8
je 0x1000b9d6
and ebx, 0xfffffff7
lea ecx, [ebp - 0x50c]
call fcn.10002716
test bl, 4
je 0x1000b9e9
and ebx, 0xfffffffb
lea ecx, [ebp - 0x524]
call fcn.10002716
test bl, 2
je 0x1000b9fc
and ebx, 0xfffffffd
lea ecx, [ebp - 0x53c]
call fcn.10002716
test bl, 1
je 0x1000ba0c
lea ecx, [ebp - 0x554]
call fcn.10002716
mov ebx, dword [ebp - 0x1bbc]
test ebx, ebx
jns 0x1000ba27
and ebx, 0x7fffffff
lea ecx, [ebp - 0x56c]
call fcn.10002716
test ebx, 0x40000000
je 0x1000ba40
and ebx, 0xbfffffff
lea ecx, [ebp - 0x584]
call fcn.10002716
test ebx, 0x20000000
je 0x1000ba59
and ebx, 0xdfffffff
lea ecx, [ebp - 0x59c]
call fcn.10002716
test ebx, 0x10000000
je 0x1000ba72
and ebx, 0xefffffff
lea ecx, [ebp - 0x5b4]
call fcn.10002716
test ebx, 0x8000000
je 0x1000ba8b
and ebx, 0xf7ffffff
lea ecx, [ebp - 0x5cc]
call fcn.10002716
test ebx, 0x4000000
je 0x1000baa4
and ebx, 0xfbffffff
lea ecx, [ebp - 0x5e4]
call fcn.10002716
test ebx, 0x2000000
je 0x1000babd
and ebx, 0xfdffffff
lea ecx, [ebp - 0x5fc]
call fcn.10002716
test ebx, 0x1000000
je 0x1000bad6
and ebx, 0xfeffffff
lea ecx, [ebp - 0x614]
call fcn.10002716
test ebx, 0x800000
je 0x1000baef
and ebx, 0xff7fffff
lea ecx, [ebp - 0x62c]
call fcn.10002716
test ebx, 0x400000
je 0x1000bb08
and ebx, 0xffbfffff
lea ecx, [ebp - 0x644]
call fcn.10002716
test ebx, 0x200000
je 0x1000bb21
and ebx, 0xffdfffff
lea ecx, [ebp - 0x65c]
call fcn.10002716
test ebx, 0x100000
je 0x1000bb3a
and ebx, 0xffefffff
lea ecx, [ebp - 0x674]
call fcn.10002716
test ebx, 0x80000
je 0x1000bb53
and ebx, 0xfff7ffff
lea ecx, [ebp - 0x68c]
call fcn.10002716
test ebx, 0x40000
je 0x1000bb6c
and ebx, 0xfffbffff
lea ecx, [ebp - 0x6a4]
call fcn.10002716
test ebx, 0x20000
je 0x1000bb85
and ebx, 0xfffdffff
lea ecx, [ebp - 0x6bc]
call fcn.10002716
test ebx, 0x10000
je 0x1000bb9e
and ebx, 0xfffeffff
lea ecx, [ebp - 0x6d4]
call fcn.10002716
test ebx, 0x8000
je 0x1000bbb7
and ebx, 0xffff7fff
lea ecx, [ebp - 0x6ec]
call fcn.10002716
test ebx, 0x4000
je 0x1000bbd0
and ebx, 0xffffbfff
lea ecx, [ebp - 0x704]
call fcn.10002716
test ebx, 0x2000
je 0x1000bbe9
and ebx, 0xffffdfff
lea ecx, [ebp - 0x71c]
call fcn.10002716
test ebx, 0x1000
je 0x1000bc02
and ebx, 0xffffefff
lea ecx, [ebp - 0x734]
call fcn.10002716
test ebx, 0x800
je 0x1000bc1b
and ebx, 0xfffff7ff
lea ecx, [ebp - 0x3bc]
call fcn.10002716
test ebx, 0x400
je 0x1000bc34
and ebx, 0xfffffbff
lea ecx, [ebp - 0x764]
call fcn.10002716
test ebx, 0x200
je 0x1000bc4d
and ebx, 0xfffffdff
lea ecx, [ebp - 0x77c]
call fcn.10002716
test ebx, 0x100
je 0x1000bc66
and ebx, 0xfffffeff
lea ecx, [ebp - 0x794]
call fcn.10002716
test bl, bl
jns 0x1000bc7b
and ebx, 0xffffff7f
lea ecx, [ebp - 0x7ac]
call fcn.10002716
test bl, 0x40
je 0x1000bc8e
and ebx, 0xffffffbf
lea ecx, [ebp - 0x7c4]
call fcn.10002716
test bl, 0x20
je 0x1000bca1
and ebx, 0xffffffdf
lea ecx, [ebp - 0x7dc]
call fcn.10002716
test bl, 0x10
je 0x1000bcb4
and ebx, 0xffffffef
lea ecx, [ebp - 0x7f4]
call fcn.10002716
test bl, 8
je 0x1000bcc7
and ebx, 0xfffffff7
lea ecx, [ebp - 0x80c]
call fcn.10002716
test bl, 4
je 0x1000bcda
and ebx, 0xfffffffb
lea ecx, [ebp - 0x824]
call fcn.10002716
test bl, 2
je 0x1000bced
and ebx, 0xfffffffd
lea ecx, [ebp - 0x83c]
call fcn.10002716
test bl, 1
je 0x1000bcfd
lea ecx, [ebp - 0x854]
call fcn.10002716
lea ecx, [ebp - 0x86c]
call fcn.10002716
lea ecx, [ebp - 0x884]
call fcn.10002716
lea ecx, [ebp - 0x89c]
call fcn.10002716
lea ecx, [ebp - 0x8b4]
call fcn.10002716
lea ecx, [ebp - 0x8cc]
call fcn.10002716
lea ecx, [ebp - 0x8e4]
call fcn.10002716
lea ecx, [ebp - 0x8fc]
call fcn.10002716
lea ecx, [ebp - 0x914]
call fcn.10002716
lea ecx, [ebp - 0x92c]
call fcn.10002716
lea ecx, [ebp - 0x944]
call fcn.10002716
lea ecx, [ebp - 0x95c]
call fcn.10002716
lea ecx, [ebp - 0x974]
call fcn.10002716
lea ecx, [ebp - 0x98c]
call fcn.10002716
lea ecx, [ebp - 0x9a4]
call fcn.10002716
cmp byte [ebp - 0x1ba9], 0
je 0x1000bda7
xor eax, eax
jmp 0x1000e020
mov eax, dword [ebp - 0x1be6]
imul eax, dword [ebp - 0x1be8]
movzx eax, ax
mov ecx, eax
cmp eax, 1
jne 0x1000bdd0
mov dword [ebp - 0x1bb8], eax
mov dword [ebp - 0x1bb4], 0x30
jmp 0x1000be23
cmp eax, 4
ja 0x1000bdeb
mov dword [ebp - 0x1bb8], 4
mov dword [ebp - 0x1bb4], 0x68
jmp 0x1000be23
cmp eax, 8
ja 0x1000be06
mov dword [ebp - 0x1bb8], 8
mov dword [ebp - 0x1bb4], 0x428
jmp 0x1000be23
cmp eax, 0x10
ja 0x1000cf7a
mov dword [ebp - 0x1bb8], 0x10
mov dword [ebp - 0x1bb4], 0x40028
push 6
mov ecx, 0x1003a714
call fcn.10016b80
mov bl, byte [eax]
push 2
mov ecx, 0x1003a714
call fcn.10016b80
mov esi, eax
lea ecx, [ebp - 0x1364]
call fcn.10016bd0
push eax
movzx ecx, byte [0x100390a5]
push ecx
movzx ecx, byte [0x10038ea1]
push ecx
lea ecx, [ebp - 0x134c]
call fcn.10016bd0
push eax
movzx eax, byte [0x10038a20]
push eax
lea ecx, [ebp - 0x1334]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x131c]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x1304]
call fcn.10016bd0
push eax
mov dl, bl
lea ecx, [ebp - 0x12ec]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x12d4]
call fcn.10016bd0
push eax
movzx eax, byte [0x10038f63]
push eax
lea ecx, [ebp - 0x12bc]
call fcn.10016bd0
push eax
mov dl, byte [0x10038b22]
lea ecx, [ebp - 0x12a4]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x128c]
call fcn.10016bd0
push eax
mov dl, byte [esi]
lea ecx, [ebp - 0x1274]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x125c]
call fcn.10016bd0
push eax
mov dl, byte [0x10039268]
lea ecx, [ebp - 0x1244]
call fcn.10017060
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x122c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1214]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x11fc]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x11e4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x11cc]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x11b4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x119c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1184]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x116c]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1154]
call fcn.10017090
add esp, 4
mov ecx, eax
call fcn.10016b70
push eax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
mov dword [0x1003a81c], eax
test eax, eax
je 0x1000c20c
mov esi, dword [ebp - 0x1bb0]
or esi, 0x100
lea ecx, [ebp - 0x113c]
call fcn.10016bd0
push eax
mov dl, byte [0x10038f25]
lea ecx, [ebp - 0x1124]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038ba0]
push eax
lea ecx, [ebp - 0x110c]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x10f4]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x10dc]
call fcn.10016bd0
push eax
mov dl, byte [0x10038a24]
lea ecx, [ebp - 0x10c4]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038a24]
push eax
lea ecx, [ebp - 0x10ac]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x1094]
call fcn.100170b0
add esp, 4
push eax
movsx eax, byte [0x10038fe3]
push eax
call fcn.10020396
add esp, 4
push eax
lea ecx, [ebp - 0x107c]
call fcn.10016bd0
push eax
movzx eax, byte [0x10038a24]
push eax
lea ecx, [ebp - 0x1064]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x104c]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x1034]
call fcn.10016bd0
push eax
mov dl, byte [0x10038fe3]
lea ecx, [ebp - 0x101c]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038f22]
push eax
lea ecx, [ebp - 0x1004]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0xfec]
call fcn.100170b0
add esp, 4
push eax
movzx eax, byte [0x10038ba0]
push eax
lea ecx, [ebp - 0xfd4]
call fcn.10016bd0
push eax
lea ecx, [ebp - 0xfbc]
call fcn.10016bd0
push eax
movsx eax, byte [0x10038a20]
push eax
call fcn.10020396
add esp, 4
mov dl, al
lea ecx, [ebp - 0xfa4]
call fcn.10017060
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xf8c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xf74]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xf5c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xf44]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xf2c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xf14]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xefc]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xee4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xecc]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xeb4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xe9c]
call fcn.10017090
add esp, 4
mov ecx, eax
call fcn.10016b70
push eax
push dword [0x1003a81c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
or esi, 0xfffffe00
mov dword [ebp - 0x1bb0], esi
mov ebx, 0x1f
jmp 0x1000c5eb
push 6
mov ecx, 0x1003a714
call fcn.10016b80
mov bl, byte [eax]
push 2
mov ecx, 0x1003a714
call fcn.10016b80
mov esi, eax
lea ecx, [ebp - 0xe84]
call fcn.10016bd0
push eax
movzx ecx, byte [0x100390a5]
push ecx
movzx ecx, byte [0x10038ea1]
push ecx
lea ecx, [ebp - 0xe6c]
call fcn.10016bd0
push eax
movzx eax, byte [0x10038a20]
push eax
lea ecx, [ebp - 0xe54]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0xe3c]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0xe24]
call fcn.10016bd0
push eax
mov dl, bl
lea ecx, [ebp - 0xe0c]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0xdf4]
call fcn.10016bd0
push eax
movzx eax, byte [0x10038f63]
push eax
lea ecx, [ebp - 0xddc]
call fcn.10016bd0
push eax
mov dl, byte [0x10038b22]
lea ecx, [ebp - 0xdc4]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0xdac]
call fcn.10016bd0
push eax
mov dl, byte [esi]
lea ecx, [ebp - 0xd94]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0xd7c]
call fcn.10016bd0
push eax
mov dl, byte [0x10039268]
lea ecx, [ebp - 0xd64]
call fcn.10017060
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xd4c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xd34]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xd1c]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xd04]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xcec]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xcd4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xcbc]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xca4]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xc8c]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xc74]
call fcn.10017090
add esp, 4
mov ecx, eax
call fcn.10016b70
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x1003a81c], eax
test eax, eax
je 0x1000c5e4
lea ecx, [ebp - 0xc5c]
call fcn.10016bd0
push eax
mov dl, byte [0x10038f25]
lea ecx, [ebp - 0xc44]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038ba0]
push eax
lea ecx, [ebp - 0xc2c]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0xc14]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0xbfc]
call fcn.10016bd0
push eax
mov dl, byte [0x10038a24]
lea ecx, [ebp - 0xbe4]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038a24]
push eax
lea ecx, [ebp - 0xbcc]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0xbb4]
call fcn.100170b0
add esp, 4
push eax
movsx eax, byte [0x10038fe3]
push eax
call fcn.10020396
add esp, 4
push eax
lea ecx, [ebp - 0xb9c]
call fcn.10016bd0
push eax
movzx eax, byte [0x10038a24]
push eax
lea ecx, [ebp - 0xb84]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0xb6c]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0xb54]
call fcn.10016bd0
push eax
mov dl, byte [0x10038fe3]
lea ecx, [ebp - 0xb3c]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038f22]
push eax
lea ecx, [ebp - 0xb24]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0xb0c]
call fcn.100170b0
add esp, 4
push eax
movzx eax, byte [0x10038ba0]
push eax
lea ecx, [ebp - 0xaf4]
call fcn.10016bd0
push eax
lea ecx, [ebp - 0xadc]
call fcn.10016bd0
push eax
movsx eax, byte [0x10038a20]
push eax
call fcn.10020396
add esp, 4
mov dl, al
lea ecx, [ebp - 0xac4]
call fcn.10017060
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xaac]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xa94]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xa7c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xa64]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xa4c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xa34]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xa1c]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0xa04]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x9ec]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x9d4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x9bc]
call fcn.10017090
add esp, 4
mov ecx, eax
call fcn.10016b70
push eax
push dword [0x1003a81c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, 0xffffffe0
mov edi, 0x1ffffff
mov dword [ebp - 0x1ba8], edi
jmp 0x1000c5eb
xor eax, eax
mov ebx, 0xfffffe0
push dword [ebp - 0x1bb4]
push 0x40
call eax
mov esi, eax
mov eax, dword [ebp - 0x1ba8]
test eax, 0x1000000
je 0x1000c620
and eax, 0xfeffffff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0x9bc]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x800000
je 0x1000c643
and eax, 0xff7fffff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0x9d4]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x400000
je 0x1000c666
and eax, 0xffbfffff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0x9ec]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x200000
je 0x1000c689
and eax, 0xffdfffff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xa04]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x100000
je 0x1000c6ac
and eax, 0xffefffff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xa1c]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x80000
je 0x1000c6cf
and eax, 0xfff7ffff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xa34]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x40000
je 0x1000c6f2
and eax, 0xfffbffff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xa4c]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x20000
je 0x1000c715
and eax, 0xfffdffff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xa64]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x10000
je 0x1000c738
and eax, 0xfffeffff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xa7c]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x8000
je 0x1000c75b
and eax, 0xffff7fff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xa94]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x4000
je 0x1000c77e
and eax, 0xffffbfff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xaac]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x2000
je 0x1000c7a1
and eax, 0xffffdfff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xac4]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x1000
je 0x1000c7c4
and eax, 0xffffefff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xadc]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x800
je 0x1000c7e7
and eax, 0xfffff7ff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xaf4]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x400
je 0x1000c80a
and eax, 0xfffffbff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xb0c]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x200
je 0x1000c82d
and eax, 0xfffffdff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xb24]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test eax, 0x100
je 0x1000c850
and eax, 0xfffffeff
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xb3c]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test al, al
jns 0x1000c870
and eax, 0xffffff7f
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xb54]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test al, 0x40
je 0x1000c88e
and eax, 0xffffffbf
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xb6c]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test al, 0x20
je 0x1000c8ac
and eax, 0xffffffdf
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xb84]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test al, 0x10
je 0x1000c8ca
and eax, 0xffffffef
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xb9c]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test al, 8
je 0x1000c8e8
and eax, 0xfffffff7
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xbb4]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test al, 4
je 0x1000c906
and eax, 0xfffffffb
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xbcc]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test al, 2
je 0x1000c924
and eax, 0xfffffffd
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xbe4]
call fcn.10002716
mov eax, dword [ebp - 0x1ba8]
test al, 1
je 0x1000c933
lea ecx, [ebp - 0xbfc]
call fcn.10002716
test ebx, ebx
jns 0x1000c948
and ebx, 0x7fffffff
lea ecx, [ebp - 0xc14]
call fcn.10002716
test ebx, 0x40000000
je 0x1000c961
and ebx, 0xbfffffff
lea ecx, [ebp - 0xc2c]
call fcn.10002716
test ebx, 0x20000000
je 0x1000c97a
and ebx, 0xdfffffff
lea ecx, [ebp - 0xc44]
call fcn.10002716
test ebx, 0x10000000
je 0x1000c993
and ebx, 0xefffffff
lea ecx, [ebp - 0xc5c]
call fcn.10002716
test ebx, 0x8000000
je 0x1000c9ac
and ebx, 0xf7ffffff
lea ecx, [ebp - 0xc74]
call fcn.10002716
test ebx, 0x4000000
je 0x1000c9c5
and ebx, 0xfbffffff
lea ecx, [ebp - 0xc8c]
call fcn.10002716
test ebx, 0x2000000
je 0x1000c9de
and ebx, 0xfdffffff
lea ecx, [ebp - 0xca4]
call fcn.10002716
test ebx, 0x1000000
je 0x1000c9f7
and ebx, 0xfeffffff
lea ecx, [ebp - 0xcbc]
call fcn.10002716
test ebx, 0x800000
je 0x1000ca10
and ebx, 0xff7fffff
lea ecx, [ebp - 0xcd4]
call fcn.10002716
test ebx, 0x400000
je 0x1000ca29
and ebx, 0xffbfffff
lea ecx, [ebp - 0xcec]
call fcn.10002716
test ebx, 0x200000
je 0x1000ca42
and ebx, 0xffdfffff
lea ecx, [ebp - 0xd04]
call fcn.10002716
test ebx, 0x100000
je 0x1000ca5b
and ebx, 0xffefffff
lea ecx, [ebp - 0xd1c]
call fcn.10002716
test ebx, 0x80000
je 0x1000ca74
and ebx, 0xfff7ffff
lea ecx, [ebp - 0xd34]
call fcn.10002716
test ebx, 0x40000
je 0x1000ca8d
and ebx, 0xfffbffff
lea ecx, [ebp - 0xd4c]
call fcn.10002716
test ebx, 0x20000
je 0x1000caa6
and ebx, 0xfffdffff
lea ecx, [ebp - 0xd64]
call fcn.10002716
test ebx, 0x10000
je 0x1000cabf
and ebx, 0xfffeffff
lea ecx, [ebp - 0xd7c]
call fcn.10002716
test ebx, 0x8000
je 0x1000cad8
and ebx, 0xffff7fff
lea ecx, [ebp - 0xd94]
call fcn.10002716
test ebx, 0x4000
je 0x1000caf1
and ebx, 0xffffbfff
lea ecx, [ebp - 0xdac]
call fcn.10002716
test ebx, 0x2000
je 0x1000cb0a
and ebx, 0xffffdfff
lea ecx, [ebp - 0xdc4]
call fcn.10002716
test ebx, 0x1000
je 0x1000cb23
and ebx, 0xffffefff
lea ecx, [ebp - 0xddc]
call fcn.10002716
test ebx, 0x800
je 0x1000cb3c
and ebx, 0xfffff7ff
lea ecx, [ebp - 0xdf4]
call fcn.10002716
test ebx, 0x400
je 0x1000cb55
mov ax, 0x18
cmp ax, cx
sbb eax, eax
and eax, 8
add eax, 0x18
movzx eax, ax
mov dword [ebp - 0x1bc0], eax
push 6
mov ecx, 0x1003a714
call fcn.10016b80
mov bl, byte [eax]
push 2
mov ecx, 0x1003a714
call fcn.10016b80
mov esi, eax
lea ecx, [ebp - 0x74c]
call fcn.10016bd0
push eax
movzx ecx, byte [0x100390a5]
push ecx
movzx ecx, byte [0x10038ea1]
push ecx
lea ecx, [ebp - 0x194]
call fcn.10016bd0
push eax
movzx eax, byte [0x10038a20]
push eax
lea ecx, [ebp - 0x17c]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x164]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x14c]
call fcn.10016bd0
push eax
mov dl, bl
lea ecx, [ebp - 0x134]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x11c]
call fcn.10016bd0
push eax
movzx eax, byte [0x10038f63]
push eax
lea ecx, [ebp - 0x104]
call fcn.10016bd0
push eax
mov dl, byte [0x10038b22]
lea ecx, [ebp - 0xec]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0xd4]
call fcn.10016bd0
push eax
mov dl, byte [esi]
lea ecx, [ebp - 0xbc]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0xa4]
call fcn.10016bd0
push eax
mov dl, byte [0x10039268]
lea ecx, [ebp - 0x8c]
call fcn.10017060
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x5c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1ba4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1b8c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1b74]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1b5c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1b44]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1b2c]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1b14]
call fcn.10017090
add esp, 4
mov ecx, eax
call fcn.10016b70
push eax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
mov dword [0x1003a81c], eax
test eax, eax
je 0x1000d361
lea ecx, [ebp - 0x1afc]
call fcn.10016bd0
push eax
mov dl, byte [0x10038f25]
lea ecx, [ebp - 0x1ae4]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038ba0]
push eax
lea ecx, [ebp - 0x1acc]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x1ab4]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x1a9c]
call fcn.10016bd0
push eax
mov dl, byte [0x10038a24]
lea ecx, [ebp - 0x1a84]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038a24]
push eax
lea ecx, [ebp - 0x1a6c]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x1a54]
call fcn.100170b0
add esp, 4
push eax
movsx eax, byte [0x10038fe3]
push eax
call fcn.10020396
add esp, 4
push eax
lea ecx, [ebp - 0x1a3c]
call fcn.10016bd0
push eax
movzx eax, byte [0x10038a24]
push eax
lea ecx, [ebp - 0x1a24]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x1a0c]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x19f4]
call fcn.10016bd0
push eax
mov dl, byte [0x10038fe3]
lea ecx, [ebp - 0x19dc]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038f22]
push eax
lea ecx, [ebp - 0x19c4]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x19ac]
call fcn.100170b0
add esp, 4
push eax
movzx eax, byte [0x10038ba0]
push eax
lea ecx, [ebp - 0x1994]
call fcn.10016bd0
push eax
lea ecx, [ebp - 0x197c]
call fcn.10016bd0
push eax
movsx eax, byte [0x10038a20]
push eax
call fcn.10020396
add esp, 4
mov dl, al
lea ecx, [ebp - 0x1964]
call fcn.10017060
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x194c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1934]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x191c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1904]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x18ec]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x18d4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x18bc]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x18a4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x188c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1874]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x185c]
call fcn.10017090
add esp, 4
mov ecx, eax
call fcn.10016b70
push eax
push dword [0x1003a81c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
mov edi, 0xfe000000
mov ecx, 0x3fffff
jmp 0x1000d751
push 6
mov ecx, 0x1003a714
call fcn.10016b80
mov bl, byte [eax]
push 2
mov ecx, 0x1003a714
call fcn.10016b80
mov esi, eax
lea ecx, [ebp - 0x1844]
call fcn.10016bd0
push eax
movzx ecx, byte [0x100390a5]
push ecx
movzx ecx, byte [0x10038ea1]
push ecx
lea ecx, [ebp - 0x182c]
call fcn.10016bd0
push eax
movzx eax, byte [0x10038a20]
push eax
lea ecx, [ebp - 0x1814]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x17fc]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x17e4]
call fcn.10016bd0
push eax
mov dl, bl
lea ecx, [ebp - 0x17cc]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x17b4]
call fcn.10016bd0
push eax
movzx eax, byte [0x10038f63]
push eax
lea ecx, [ebp - 0x179c]
call fcn.10016bd0
push eax
mov dl, byte [0x10038b22]
lea ecx, [ebp - 0x1784]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x176c]
call fcn.10016bd0
push eax
mov dl, byte [esi]
lea ecx, [ebp - 0x1754]
call fcn.10017060
add esp, 4
push eax
lea ecx, [ebp - 0x173c]
call fcn.10016bd0
push eax
mov dl, byte [0x10039268]
lea ecx, [ebp - 0x1724]
call fcn.10017060
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x170c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x16f4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x16dc]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x16c4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x16ac]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1694]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x167c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1664]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x164c]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1634]
call fcn.10017090
add esp, 4
mov ecx, eax
call fcn.10016b70
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x1003a81c], eax
test eax, eax
je 0x1000d73f
lea ecx, [ebp - 0x161c]
call fcn.10016bd0
push eax
mov dl, byte [0x10038f25]
lea ecx, [ebp - 0x1604]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038ba0]
push eax
lea ecx, [ebp - 0x15ec]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x15d4]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x15bc]
call fcn.10016bd0
push eax
mov dl, byte [0x10038a24]
lea ecx, [ebp - 0x15a4]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038a24]
push eax
lea ecx, [ebp - 0x158c]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x1574]
call fcn.100170b0
add esp, 4
push eax
movsx eax, byte [0x10038fe3]
push eax
call fcn.10020396
add esp, 4
push eax
lea ecx, [ebp - 0x155c]
call fcn.10016bd0
push eax
movzx eax, byte [0x10038a24]
push eax
lea ecx, [ebp - 0x1544]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x152c]
call fcn.100170b0
add esp, 4
push eax
lea ecx, [ebp - 0x1514]
call fcn.10016bd0
push eax
mov dl, byte [0x10038fe3]
lea ecx, [ebp - 0x14fc]
call fcn.10017060
add esp, 4
push eax
movzx eax, byte [0x10038f22]
push eax
lea ecx, [ebp - 0x14e4]
call fcn.10016bd0
mov edx, eax
lea ecx, [ebp - 0x14cc]
call fcn.100170b0
add esp, 4
push eax
movzx eax, byte [0x10038ba0]
push eax
lea ecx, [ebp - 0x14b4]
call fcn.10016bd0
push eax
lea ecx, [ebp - 0x149c]
call fcn.10016bd0
push eax
movsx eax, byte [0x10038a20]
push eax
call fcn.10020396
add esp, 4
mov dl, al
lea ecx, [ebp - 0x1484]
call fcn.10017060
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x146c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1454]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x143c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1424]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x140c]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x13f4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x13dc]
call fcn.100170b0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x13c4]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x13ac]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1394]
call fcn.10017090
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x137c]
call fcn.10017090
add esp, 4
mov ecx, eax
call fcn.10016b70
push eax
push dword [0x1003a81c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
or eax, 0xffffffff
mov dword [ebp - 0x1bb8], eax
mov eax, 0x3ff
mov dword [ebp - 0x1bc8], eax
jmp 0x1000d74c
xor edx, edx
mov eax, 0x1fff
mov dword [ebp - 0x1bb8], eax
mov ecx, 0xffc00000
mov dword [ebp - 0x1bbc], ecx
push 0x28
push 0x40
call edx
mov esi, eax
mov ebx, dword [ebp - 0x1bc8]
test ebx, 0x200
je 0x1000d77e
and ebx, 0xfffffdff
lea ecx, [ebp - 0x137c]
call fcn.10002716
test ebx, 0x100
je 0x1000d797
and ebx, 0xfffffeff
lea ecx, [ebp - 0x1394]
call fcn.10002716
test bl, bl
jns 0x1000d7ac
and ebx, 0xffffff7f
lea ecx, [ebp - 0x13ac]
call fcn.10002716
test bl, 0x40
je 0x1000d7bf
and ebx, 0xffffffbf
lea ecx, [ebp - 0x13c4]
call fcn.10002716
test bl, 0x20
je 0x1000d7d2
and ebx, 0xffffffdf
lea ecx, [ebp - 0x13dc]
call fcn.10002716
test bl, 0x10
je 0x1000d7e5
and ebx, 0xffffffef
lea ecx, [ebp - 0x13f4]
call fcn.10002716
test bl, 8
je 0x1000d7f8
and ebx, 0xfffffff7
lea ecx, [ebp - 0x140c]
call fcn.10002716
test bl, 4
je 0x1000d80b
and ebx, 0xfffffffb
lea ecx, [ebp - 0x1424]
call fcn.10002716
test bl, 2
je 0x1000d81e
and ebx, 0xfffffffd
lea ecx, [ebp - 0x143c]
call fcn.10002716
test bl, 1
je 0x1000d82e
lea ecx, [ebp - 0x1454]
call fcn.10002716
mov ebx, dword [ebp - 0x1bb8]
test ebx, ebx
jns 0x1000d849
and ebx, 0x7fffffff
lea ecx, [ebp - 0x146c]
call fcn.10002716
test ebx, 0x40000000
je 0x1000d862
and ebx, 0xbfffffff
lea ecx, [ebp - 0x1484]
call fcn.10002716
test ebx, 0x20000000
je 0x1000d87b
and ebx, 0xdfffffff
lea ecx, [ebp - 0x149c]
call fcn.10002716
test ebx, 0x10000000
je 0x1000d894
and ebx, 0xefffffff
lea ecx, [ebp - 0x14b4]
call fcn.10002716
test ebx, 0x8000000
je 0x1000d8ad
and ebx, 0xf7ffffff
lea ecx, [ebp - 0x14cc]
call fcn.10002716
test ebx, 0x4000000
je 0x1000d8c6
and ebx, 0xfbffffff
lea ecx, [ebp - 0x14e4]
call fcn.10002716
test ebx, 0x2000000
je 0x1000d8df
and ebx, 0xfdffffff
lea ecx, [ebp - 0x14fc]
call fcn.10002716
test ebx, 0x1000000
je 0x1000d8f8
and ebx, 0xfeffffff
lea ecx, [ebp - 0x1514]
call fcn.10002716
test ebx, 0x800000
je 0x1000d911
and ebx, 0xff7fffff
lea ecx, [ebp - 0x152c]
call fcn.10002716
test ebx, 0x400000
je 0x1000d92a
and ebx, 0xffbfffff
lea ecx, [ebp - 0x1544]
call fcn.10002716
test ebx, 0x200000
je 0x1000d943
and ebx, 0xffdfffff
lea ecx, [ebp - 0x155c]
call fcn.10002716
test ebx, 0x100000
je 0x1000d95c
and ebx, 0xffefffff
lea ecx, [ebp - 0x1574]
call fcn.10002716
test ebx, 0x80000
je 0x1000d975
and ebx, 0xfff7ffff
lea ecx, [ebp - 0x158c]
call fcn.10002716
test ebx, 0x40000
je 0x1000d98e
and ebx, 0xfffbffff
lea ecx, [ebp - 0x15a4]
call fcn.10002716
test ebx, 0x20000
je 0x1000d9a7
and ebx, 0xfffdffff
lea ecx, [ebp - 0x15bc]
call fcn.10002716
test ebx, 0x10000
je 0x1000d9c0
and ebx, 0xfffeffff
lea ecx, [ebp - 0x15d4]
call fcn.10002716
test ebx, 0x8000
je 0x1000d9d9
and ebx, 0xffff7fff
lea ecx, [ebp - 0x15ec]
call fcn.10002716
test ebx, 0x4000
je 0x1000d9f2
and ebx, 0xffffbfff
lea ecx, [ebp - 0x1604]
call fcn.10002716
test ebx, 0x2000
je 0x1000da0b
and ebx, 0xffffdfff
lea ecx, [ebp - 0x161c]
call fcn.10002716
test ebx, 0x1000
je 0x1000da24
and ebx, 0xffffefff
lea ecx, [ebp - 0x1634]
call fcn.10002716
test ebx, 0x800
je 0x1000da3d
and ebx, 0xfffff7ff
lea ecx, [ebp - 0x164c]
call fcn.10002716
test ebx, 0x400
je 0x1000da56
and ebx, 0xfffffbff
lea ecx, [ebp - 0x1664]
call fcn.10002716
test ebx, 0x200
je 0x1000da6f
and ebx, 0xfffffdff
lea ecx, [ebp - 0x167c]
call fcn.10002716
test ebx, 0x100
je 0x1000da88
and ebx, 0xfffffeff
lea ecx, [ebp - 0x1694]
call fcn.10002716
test bl, bl
jns 0x1000da9d
and ebx, 0xffffff7f
lea ecx, [ebp - 0x16ac]
call fcn.10002716
test bl, 0x40
je 0x1000dab0
and ebx, 0xffffffbf
lea ecx, [ebp - 0x16c4]
call fcn.10002716
test bl, 0x20
je 0x1000dac3
and ebx, 0xffffffdf
lea ecx, [ebp - 0x16dc]
call fcn.10002716
test bl, 0x10
je 0x1000dad6
and ebx, 0xffffffef
lea ecx, [ebp - 0x16f4]
call fcn.10002716
test bl, 8
je 0x1000dae9
and ebx, 0xfffffff7
lea ecx, [ebp - 0x170c]
call fcn.10002716
test bl, 4
je 0x1000dafc
and ebx, 0xfffffffb
lea ecx, [ebp - 0x1724]
call fcn.10002716
test bl, 2
je 0x1000db0f
and ebx, 0xfffffffd
lea ecx, [ebp - 0x173c]
call fcn.10002716
test bl, 1
je 0x1000db1f
lea ecx, [ebp - 0x1754]
call fcn.10002716
mov ebx, dword [ebp - 0x1bbc]
test ebx, ebx
jns 0x1000db3a
and ebx, 0x7fffffff
lea ecx, [ebp - 0x176c]
call fcn.10002716
test ebx, 0x40000000
je 0x1000db53
and ebx, 0xbfffffff
lea ecx, [ebp - 0x1784]
call fcn.10002716
test ebx, 0x20000000
je 0x1000db6c
and ebx, 0xdfffffff
lea ecx, [ebp - 0x179c]
call fcn.10002716
test ebx, 0x10000000
je 0x1000db85
and ebx, 0xefffffff
lea ecx, [ebp - 0x17b4]
call fcn.10002716
test ebx, 0x8000000
je 0x1000db9e
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1001c8e0
mov esp, ebp
pop ebp
ret