Function at 0x1000c580
Capabilities:
Authenticate hmac
Get number of processors
Get process heap flags
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x180
mov esi, esp
mov dword [esi + 0x168], ebp
mov dword [esi + 0x94], ecx
mov dword [esi + 0xc0], esp
mov dword [esi + 0x16c], esp
mov dword [esi + 0x178], 0xffffffff
mov dword [esi + 0x174], 0x1003be00
mov eax, dword fs:[0]
mov dword [esi + 0x170], eax
lea eax, [esi + 0x170]
mov dword fs:[0], eax
push eax
sub esp, 0x30
mov dword [esi + 0xb4], esp
mov eax, 0x91ad824f
mov ecx, 0xa271ea9b
mov dword [esi + 0xa8], ecx
mov dword [esi + 0x6c], eax
mov edx, 0x36288606
mov edi, 0xc360d6b6
mov ecx, 0xa271ea9b
mov eax, 0xfdc2ed2d
mov dword [esi + 0x30], ecx
lea ecx, [esi + 0x40]
mov dword [esi + 0x2c], 0
mov ebx, dword [esi + 0x2c]
mov ebx, dword [esi + 0xa8]
mov dword [esi + 0x74], ebx
mov ebx, dword [esi + 0x6c]
mov dword [esi + 0x70], ebx
mov dword [esi + 0x7c], edi
mov dword [esi + 0x78], edx
mov ebx, dword [esi + 0x30]
mov dword [esi + 0x44], ebx
mov dword [esi + 0x38], eax
mov dword [esi + 0x40], eax
mov dword [esi + 0x3c], edi
mov dword [esi + 0x4c], edi
mov dword [esi + 0x2c], edx
mov dword [esi + 0x48], edx
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x70], xmm0
mov eax, dword [esi + 0xb4]
mov dword [eax + 0x18], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 0xf
mov byte [eax + 0x18], 0
lea ebx, [eax + 0x18]
lea eax, [esi + 0x70]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0xc4], ebx
jbe 0x1000c6c3
mov edi, eax
test eax, eax
js 0x1002184e
mov dword [esi + 0xb8], eax
or edi, 0xf
js 0x1000c6e3
cmp edi, 0x17
mov ecx, 0x16
cmovae ecx, edi
lea eax, [ecx + 1]
cmp ecx, 0xfff
jae 0x1000c6ed
push eax
mov edi, ecx
call fcn.102e53ba
mov ecx, edi
add esp, 4
mov ebx, eax
jmp 0x1000c704
mov edi, dword [esi + 0xb4]
mov dword [edi + 0x28], eax
push eax
lea ecx, [esi + 0x70]
push ecx
push ebx
mov ebx, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx + 0x18], 0
jmp 0x1000c731
mov eax, Ordinal_2
mov edi, Ordinal_2
add eax, 0x23
push eax
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov ecx, edi
mov edi, dword [esi + 0xb4]
mov eax, dword [esi + 0xb8]
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
push eax
lea eax, [esi + 0x70]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 0xb8]
mov byte [ebx + eax], 0
mov dword [edi + 0x18], ebx
mov ebx, edi
mov eax, 0xbfa0b240
mov ecx, 0xdb1f84ee
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x3658e94e
mov ecx, 0xc360d6b6
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [edi], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
lea edi, [esi + 0x10]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000c7d6
test eax, eax
js 0x10021867
mov dword [esi + 0xb8], eax
mov ecx, eax
or ecx, 0xf
js 0x1000c7ef
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
cmp edx, 0xfff
jb 0x1000c828
mov dword [esi + 0x98], ecx
jmp 0x1000c7fe
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
jmp 0x1000c87c
mov eax, Ordinal_2
mov dword [esi + 0x98], Ordinal_2
add eax, 0x23
mov byte [esi + 0xd9], 1
mov dword [esi + 0x178], 0
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000c84a
mov dword [esi + 0x98], edx
mov byte [esi + 0xd9], 1
mov dword [esi + 0x178], 0
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x10]
mov ebx, dword [esi + 0xb4]
mov ecx, dword [esi + 0x98]
mov edx, dword [esi + 0xb8]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 0xb8]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov byte [ebx + 0x30], 0
mov byte [esi + 0xd9], 0
mov dword [esi + 0x178], 0
mov ecx, dword [esi + 0x94]
call fcn.100245d0
mov esp, dword [esi + 0xc0]
mov dword [esi + 0xa0], esp
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x10], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x1c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x18], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi + 0x98], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x10]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0xac], edi
jbe 0x1000c96a
test eax, eax
js 0x10021844
mov edi, eax
or edi, 0xf
mov dword [esi + 0xb4], eax
js 0x1000c989
cmp edi, 0x17
mov edx, 0x16
cmovae edx, edi
lea ecx, [edx + 1]
cmp edx, 0xfff
jae 0x1000c993
mov dword [esi + 0x178], 0xffffffff
push ecx
mov edi, edx
call fcn.102e53ba
mov ecx, edi
add esp, 4
mov ebx, eax
jmp 0x1000c9b4
mov ecx, ebx
mov ebx, dword [esi + 0x98]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000c9e1
mov ecx, Ordinal_2
mov edi, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov ecx, edi
mov edi, dword [esi + 0x98]
mov eax, dword [esi + 0xb4]
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
push eax
lea eax, [esi + 0x10]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 0xb4]
mov byte [ebx + eax], 0
mov dword [edi + 0x18], ebx
mov eax, 0xbca0b240
mov ecx, 0xf7189ef5
mov dword [esi + 0x74], ecx
mov dword [esi + 0x70], eax
mov eax, 0x435af268
mov ecx, 0xa705a2c5
mov dword [esi + 0x7c], ecx
mov dword [esi + 0x78], eax
mov eax, 0xf902ebcf
mov edi, 0x737ce341
mov dword [esi + 0xb4], eax
mov ebx, 0x77f8a108
mov edx, 0xbb8f574c
xor eax, eax
lea ecx, [esi + 0x40]
mov dword [esi + 0x84], edi
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x80], eax
mov dword [esi + 0x8c], edx
mov dword [esi + 0x88], ebx
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
mov dword [esi + 0xc0], edi
mov dword [esi + 0x54], edi
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x50], eax
mov dword [esi + 0xb8], edx
mov dword [esi + 0x5c], edx
mov dword [esi + 0xc4], ebx
mov dword [esi + 0x58], ebx
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x70], xmm0
movaps xmm0, xmmword [esi + 0x80]
xorps xmm0, xmmword [ecx + 0x10]
movaps xmmword [esi + 0x80], xmm0
mov ebx, dword [esi + 0x98]
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea edi, [esi + 0x70]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000cafb
test eax, eax
js 0x1002187d
mov dword [esi], eax
mov ecx, eax
or ecx, 0xf
js 0x1000cb1b
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 1
cmp edx, 0xfff
jb 0x1000cb51
mov dword [esi + 4], ecx
jmp 0x1000cb27
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 1
jmp 0x1000cb8d
mov eax, Ordinal_2
mov dword [esi + 4], Ordinal_2
add eax, 0x23
mov byte [esi + 0xda], 1
mov dword [esi + 0x178], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000cb66
mov dword [esi + 4], edx
mov byte [esi + 0xda], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x70]
mov ebx, dword [esi + 0x98]
mov ecx, dword [esi + 4]
mov edx, dword [esi]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 4]
mov byte [ebx + 0x30], 1
mov byte [esi + 0xda], 0
call fcn.100245d0
mov esp, dword [esi + 0xa0]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi + 0x98], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0xac], edi
jbe 0x1000cc56
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi], eax
js 0x1000cc77
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 4], edi
cmp edi, 0xfff
jb 0x1000cca4
mov edi, ebx
jmp 0x1000cc81
mov ecx, ebx
mov ebx, dword [esi + 0x98]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
mov edi, ebx
jmp 0x1000cce5
mov ecx, Ordinal_2
mov edi, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov eax, edi
jmp 0x1000ccbc
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov ebx, eax
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x98]
mov edi, dword [esi]
mov dword [ecx + 0x28], edi
mov dword [ecx + 0x2c], eax
push edi
lea eax, [esi + 0x70]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov edi, dword [esi + 0x98]
mov dword [edi + 0x18], ebx
lea ebx, [esi + 0x10]
mov eax, 0xbca0b240
mov ecx, 0xf11e9eee
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x5049f472
mov ecx, 0xc360d6d3
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [edi], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000cd8b
test eax, eax
js 0x10021893
mov dword [esi], eax
mov ecx, eax
or ecx, 0xf
js 0x1000cdab
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 2
cmp edx, 0xfff
jb 0x1000cde1
mov dword [esi + 4], ecx
jmp 0x1000cdb7
mov dword [edi + 0x10], eax
push eax
push ebx
push edi
mov ebx, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
mov dword [esi + 0x178], 2
jmp 0x1000ce1f
mov eax, Ordinal_2
mov dword [esi + 4], Ordinal_2
add eax, 0x23
mov byte [esi + 0xdb], 1
mov dword [esi + 0x178], 2
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000cdf6
mov dword [esi + 4], edx
mov byte [esi + 0xdb], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x10]
mov ecx, dword [esi + 4]
mov ebx, dword [esi + 0x98]
mov edx, dword [esi]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov edi, ebx
mov eax, dword [esi + 0x94]
lea ecx, [eax + 8]
mov byte [edi + 0x30], 0
mov byte [esi + 0xdb], 0
call fcn.100245d0
mov esp, dword [esi + 0xa0]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x10], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x1c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x18], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi + 0x98], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x10]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0xac], edi
jbe 0x1000cefc
test eax, eax
js 0x10021844
mov edi, eax
or edi, 0xf
mov dword [esi], eax
js 0x1000cf1b
cmp edi, 0x17
mov edx, 0x16
cmovae edx, edi
lea ecx, [edx + 1]
cmp edx, 0xfff
jae 0x1000cf25
mov dword [esi + 0x178], 0xffffffff
push ecx
mov edi, edx
call fcn.102e53ba
mov ecx, edi
add esp, 4
mov ebx, eax
jmp 0x1000cf46
mov ecx, ebx
mov ebx, dword [esi + 0x98]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000cf6b
mov ecx, Ordinal_2
mov edi, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov ecx, edi
mov edi, dword [esi + 0x98]
mov eax, dword [esi]
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
push eax
lea eax, [esi + 0x10]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi]
mov byte [ebx + eax], 0
mov dword [edi + 0x18], ebx
mov eax, 0xbba0b240
mov ecx, 0xc70586f2
mov dword [esi + 0x74], ecx
mov dword [esi + 0x70], eax
mov eax, 0x5847c574
mov ecx, 0xa60cb9c5
mov dword [esi + 0x7c], ecx
mov dword [esi + 0x78], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x80], eax
mov edi, dword [esi + 0xc0]
mov dword [esi + 0x84], edi
mov ebx, dword [esi + 0xc4]
mov dword [esi + 0x88], ebx
mov edx, dword [esi + 0xb8]
mov dword [esi + 0x8c], edx
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
mov dword [esi + 0x54], edi
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x50], eax
mov dword [esi + 0x5c], edx
mov dword [esi + 0x58], ebx
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x70], xmm0
movaps xmm0, xmmword [esi + 0x80]
xorps xmm0, xmmword [ecx + 0x10]
movaps xmmword [esi + 0x80], xmm0
mov ebx, dword [esi + 0x98]
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea edi, [esi + 0x70]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000d06b
test eax, eax
js 0x100218a9
mov ecx, eax
or ecx, 0xf
mov dword [esi], eax
js 0x1000d08b
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea edx, [edi + 1]
mov dword [esi + 0x178], 3
cmp edi, 0xfff
jb 0x1000d0c1
mov dword [esi + 4], ecx
jmp 0x1000d097
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 3
jmp 0x1000d0fd
mov edx, Ordinal_2
mov dword [esi + 4], Ordinal_2
add edx, 0x23
mov byte [esi + 0xdc], 1
mov dword [esi + 0x178], 3
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000d0d6
mov dword [esi + 4], edi
mov byte [esi + 0xdc], 1
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov ebx, dword [esi + 0x98]
mov ecx, dword [esi]
mov dword [ebx + 0x10], ecx
mov eax, dword [esi + 4]
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x70]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0xc]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xdc], 0
call fcn.100245d0
mov esp, dword [esi + 0xa0]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x10], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x1c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x18], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi + 0x98], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x10]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0xac], edi
jbe 0x1000d1da
test eax, eax
js 0x10021844
mov edi, eax
or edi, 0xf
mov dword [esi], eax
js 0x1000d1f9
cmp edi, 0x17
mov edx, 0x16
cmovae edx, edi
lea ecx, [edx + 1]
cmp edx, 0xfff
jae 0x1000d203
mov dword [esi + 0x178], 0xffffffff
push ecx
mov edi, edx
call fcn.102e53ba
mov ecx, edi
add esp, 4
mov ebx, eax
jmp 0x1000d224
mov ecx, ebx
mov ebx, dword [esi + 0x98]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000d249
mov ecx, Ordinal_2
mov edi, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov ecx, edi
mov edi, dword [esi + 0x98]
mov eax, dword [esi]
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
push eax
lea eax, [esi + 0x10]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi]
mov byte [ebx + eax], 0
mov dword [edi + 0x18], ebx
mov eax, 0xa8a0b240
mov ecx, 0xc61882f5
mov dword [esi + 0x74], ecx
mov dword [esi + 0x70], eax
mov eax, 0x5847c563
mov ecx, 0xb012b7c0
mov dword [esi + 0x7c], ecx
mov dword [esi + 0x78], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x80], eax
mov edi, dword [esi + 0xc0]
mov dword [esi + 0x84], edi
mov ebx, dword [esi + 0xc4]
mov dword [esi + 0x88], ebx
mov edx, dword [esi + 0xb8]
mov dword [esi + 0x8c], edx
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
mov dword [esi + 0x54], edi
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x50], eax
mov dword [esi + 0x5c], edx
mov dword [esi + 0x58], ebx
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x70], xmm0
movaps xmm0, xmmword [esi + 0x80]
xorps xmm0, xmmword [ecx + 0x10]
movaps xmmword [esi + 0x80], xmm0
mov ebx, dword [esi + 0x98]
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea edi, [esi + 0x70]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000d349
test eax, eax
js 0x100218bf
mov dword [esi], eax
mov ecx, eax
or ecx, 0xf
js 0x1000d369
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 4
cmp edx, 0xfff
jb 0x1000d39f
mov dword [esi + 4], ecx
jmp 0x1000d375
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 4
jmp 0x1000d3db
mov eax, Ordinal_2
mov dword [esi + 4], Ordinal_2
add eax, 0x23
mov byte [esi + 0xdd], 1
mov dword [esi + 0x178], 4
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000d3b4
mov dword [esi + 4], edx
mov byte [esi + 0xdd], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x70]
mov ebx, dword [esi + 0x98]
mov ecx, dword [esi + 4]
mov edx, dword [esi]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x10]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xdd], 0
call fcn.100245d0
mov esp, dword [esi + 0xa0]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi + 0x98], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0xac], edi
jbe 0x1000d4a4
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi], eax
js 0x1000d4c5
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 4], edi
cmp edi, 0xfff
jb 0x1000d4f2
mov edi, ebx
jmp 0x1000d4cf
mov ecx, ebx
mov ebx, dword [esi + 0x98]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
mov edi, ebx
jmp 0x1000d533
mov ecx, Ordinal_2
mov edi, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov eax, edi
jmp 0x1000d50a
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov ebx, eax
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x98]
mov edi, dword [esi]
mov dword [ecx + 0x28], edi
mov dword [ecx + 0x2c], eax
push edi
lea eax, [esi + 0x70]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov edi, dword [esi + 0x98]
mov dword [edi + 0x18], ebx
lea ebx, [esi + 0x10]
mov eax, 0xafa0b240
mov ecx, 0xc3149cfe
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x5849d46a
mov ecx, 0xc360a5dd
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [edi], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000d5d9
test eax, eax
js 0x100218d5
mov dword [esi], eax
mov ecx, eax
or ecx, 0xf
js 0x1000d5f9
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 5
cmp edx, 0xfff
jb 0x1000d62f
mov dword [esi + 4], ecx
jmp 0x1000d605
mov dword [edi + 0x10], eax
push eax
push ebx
push edi
mov ebx, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
mov dword [esi + 0x178], 5
jmp 0x1000d66d
mov eax, Ordinal_2
mov dword [esi + 4], Ordinal_2
add eax, 0x23
mov byte [esi + 0xde], 1
mov dword [esi + 0x178], 5
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000d644
mov dword [esi + 4], edx
mov byte [esi + 0xde], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
mov ecx, dword [esi]
mov eax, dword [esi + 4]
mov ebx, dword [esi + 0x98]
mov dword [ebx + 0x10], ecx
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov edi, ebx
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x14]
mov byte [edi + 0x30], 0
mov byte [esi + 0xde], 0
call fcn.100245d0
mov esp, dword [esi + 0xa0]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi + 0x98], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0xac], edi
jbe 0x1000d74c
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi], eax
js 0x1000d76b
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 4], edi
cmp edi, 0xfff
jae 0x1000d775
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov eax, dword [esi + 4]
jmp 0x1000d796
mov ecx, ebx
mov ebx, dword [esi + 0x98]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000d7bb
mov ecx, Ordinal_2
mov ebx, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov eax, ebx
mov ebx, dword [esi + 0x98]
mov ecx, dword [esi]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
push ecx
lea eax, [esi + 0x70]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
lea edi, [esi + 0x10]
mov eax, 0xbca0b240
mov ecx, 0xcd1da8ff
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x3628ed65
mov ecx, 0xc360d6b6
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000d861
test eax, eax
js 0x100218eb
mov ecx, eax
or ecx, 0xf
mov dword [esi], eax
js 0x1000d881
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea edx, [edi + 1]
mov dword [esi + 0x178], 6
cmp edi, 0xfff
jb 0x1000d8b7
mov dword [esi + 4], ecx
jmp 0x1000d88d
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 6
jmp 0x1000d8f3
mov edx, Ordinal_2
mov dword [esi + 4], Ordinal_2
add edx, 0x23
mov byte [esi + 0xdf], 1
mov dword [esi + 0x178], 6
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000d8cc
mov dword [esi + 4], edi
mov byte [esi + 0xdf], 1
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov ebx, dword [esi + 0x98]
mov ecx, dword [esi]
mov dword [ebx + 0x10], ecx
mov eax, dword [esi + 4]
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x18]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xdf], 0
call fcn.100245d0
mov esp, dword [esi + 0xa0]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi + 0x98], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0xac], edi
jbe 0x1000d9d0
test eax, eax
js 0x10021844
mov dword [esi], eax
mov ebx, eax
or ebx, 0xf
js 0x1000d9ef
cmp ebx, 0x17
mov edx, 0x16
cmovae edx, ebx
lea eax, [edx + 1]
cmp edx, 0xfff
jae 0x1000d9f9
mov dword [esi + 0x178], 0xffffffff
push eax
mov edi, edx
call fcn.102e53ba
mov ecx, edi
add esp, 4
mov edi, eax
jmp 0x1000da1a
mov ecx, ebx
mov ebx, dword [esi + 0x98]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000da3f
mov eax, Ordinal_2
mov ebx, Ordinal_2
add eax, 0x23
mov dword [esi + 0x178], 0xffffffff
push eax
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov ecx, ebx
mov ebx, dword [esi + 0x98]
mov eax, dword [esi]
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], ecx
push eax
lea eax, [esi + 0x70]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
lea edi, [esi + 0x10]
mov eax, 0xb4a0b240
mov ecx, 0xcc188cf5
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x7251f26f
mov ecx, 0xc30bb5c3
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000dae5
test eax, eax
js 0x10021901
mov ecx, eax
or ecx, 0xf
mov dword [esi], eax
js 0x1000db05
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea edx, [edi + 1]
mov dword [esi + 0x178], 7
cmp edi, 0xfff
jb 0x1000db3b
mov dword [esi + 4], ecx
jmp 0x1000db11
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 7
jmp 0x1000db77
mov edx, Ordinal_2
mov dword [esi + 4], Ordinal_2
add edx, 0x23
mov byte [esi + 0xe0], 1
mov dword [esi + 0x178], 7
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000db50
mov dword [esi + 4], edi
mov byte [esi + 0xe0], 1
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov ebx, dword [esi + 0x98]
mov ecx, dword [esi]
mov dword [ebx + 0x10], ecx
mov eax, dword [esi + 4]
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x1c]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xe0], 0
call fcn.100245d0
mov esp, dword [esi + 0xa0]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi + 0x98], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0xac], edi
jbe 0x1000dc54
test eax, eax
js 0x10021844
mov dword [esi], eax
mov ebx, eax
or ebx, 0xf
js 0x1000dc73
cmp ebx, 0x17
mov edx, 0x16
cmovae edx, ebx
lea eax, [edx + 1]
cmp edx, 0xfff
jae 0x1000dc7d
mov dword [esi + 0x178], 0xffffffff
push eax
mov edi, edx
call fcn.102e53ba
mov ecx, edi
add esp, 4
mov edi, eax
jmp 0x1000dc9e
mov ecx, ebx
mov ebx, dword [esi + 0x98]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000dcc3
mov eax, Ordinal_2
mov ebx, Ordinal_2
add eax, 0x23
mov dword [esi + 0x178], 0xffffffff
push eax
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov ecx, ebx
mov ebx, dword [esi + 0x98]
mov eax, dword [esi]
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], ecx
push eax
lea eax, [esi + 0x70]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
lea edi, [esi + 0x10]
mov eax, 0xbba0b240
mov ecx, 0xf10599fa
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x3658e972
mov ecx, 0xc360d6b6
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000dd69
test eax, eax
js 0x10021917
mov dword [esi], eax
mov ecx, eax
or ecx, 0xf
js 0x1000dd89
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 8
cmp edx, 0xfff
jb 0x1000ddbf
mov dword [esi + 4], ecx
jmp 0x1000dd95
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 8
jmp 0x1000ddfb
mov eax, Ordinal_2
mov dword [esi + 4], Ordinal_2
add eax, 0x23
mov byte [esi + 0xe1], 1
mov dword [esi + 0x178], 8
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000ddd4
mov dword [esi + 4], edx
mov byte [esi + 0xe1], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x10]
mov ebx, dword [esi + 0x98]
mov ecx, dword [esi + 4]
mov edx, dword [esi]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x20]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xe1], 0
call fcn.100245d0
mov esp, dword [esi + 0xa0]
mov dword [esi + 0xac], esp
push eax
sub esp, 0x30
mov ebx, esp
mov edx, 0xfdb68344
mov edi, 0xa271ea9b
xor eax, eax
lea ecx, [esi + 0x40]
mov dword [esi + 0xa0], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x98], edx
mov dword [esi + 0x10], edx
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x1c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x18], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x10]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1000dee8
test eax, eax
js 0x10021844
mov dword [esi + 4], eax
mov edi, eax
or edi, 0xf
js 0x1000df03
cmp edi, 0x17
mov ecx, 0x16
cmovae ecx, edi
lea eax, [ecx + 1]
cmp ecx, 0xfff
jae 0x1000df0d
mov dword [esi + 0x178], 0xffffffff
push eax
mov edi, ecx
call fcn.102e53ba
mov ecx, edi
add esp, 4
mov ebx, eax
jmp 0x1000df2e
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000df51
mov eax, Ordinal_2
mov edi, Ordinal_2
add eax, 0x23
mov dword [esi + 0x178], 0xffffffff
push eax
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov ecx, edi
mov edi, dword [esi]
mov eax, dword [esi + 4]
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
push eax
lea eax, [esi + 0x10]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [ebx + eax], 0
mov dword [edi + 0x18], ebx
mov eax, 0x9983b240
mov ecx, 0xc11f8bed
mov dword [esi + 0x74], ecx
mov dword [esi + 0x70], eax
mov eax, 0x4e6de263
mov ecx, 0xaa0fbac6
mov dword [esi + 0x7c], ecx
mov dword [esi + 0x78], eax
mov ebx, 0xf902ebbb
mov edx, 0x737ce341
xor eax, eax
lea ecx, [esi + 0x40]
mov dword [esi + 0xa4], edx
mov dword [esi + 0x84], edx
mov dword [esi + 0x80], ebx
mov edx, dword [esi + 0xc4]
mov dword [esi + 0x88], edx
mov edi, dword [esi + 0xb8]
mov dword [esi + 0x8c], edi
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
mov eax, dword [esi + 0xc0]
mov dword [esi + 0x54], eax
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x50], eax
mov dword [esi + 0x5c], edi
mov dword [esi + 0x58], edx
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x70], xmm0
movaps xmm0, xmmword [esi + 0x80]
xorps xmm0, xmmword [ecx + 0x10]
movaps xmmword [esi + 0x80], xmm0
mov eax, dword [esi]
mov dword [eax], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea edi, [esi + 0x70]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0xc], ebx
jbe 0x1000e05b
test eax, eax
js 0x1002192d
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x1000e07d
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 9
cmp edx, 0xfff
jb 0x1000e0b3
mov dword [esi + 8], ecx
jmp 0x1000e089
mov ebx, dword [esi]
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 9
jmp 0x1000e0ed
mov eax, Ordinal_2
mov dword [esi + 8], Ordinal_2
add eax, 0x23
mov byte [esi + 0xe2], 1
mov dword [esi + 0x178], 9
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000e0c8
mov dword [esi + 8], edx
mov byte [esi + 0xe2], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x70]
mov ebx, dword [esi]
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x24]
mov dword [ebx + 0x30], 0
mov byte [esi + 0xe2], 0
call fcn.10024890
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1000e1ca
test eax, eax
js 0x10021844
mov edi, eax
or edi, 0xf
mov dword [esi + 4], eax
js 0x1000e1e5
cmp edi, 0x17
mov edx, 0x16
cmovae edx, edi
lea ecx, [edx + 1]
cmp edx, 0xfff
jae 0x1000e1ef
mov dword [esi + 0x178], 0xffffffff
push ecx
mov edi, edx
call fcn.102e53ba
mov ecx, edi
add esp, 4
mov ebx, eax
jmp 0x1000e210
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000e233
mov ecx, Ordinal_2
mov edi, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov ecx, edi
mov edi, dword [esi]
mov eax, dword [esi + 4]
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
push eax
lea eax, [esi + 0x70]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [ebx + eax], 0
mov dword [edi + 0x18], ebx
lea ebx, [esi + 0x10]
mov eax, 0xb5a0b240
mov ecx, 0xcd229ef2
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov edi, 0x364ce873
mov edx, 0xc360d6b6
xor eax, eax
lea ecx, [esi + 0x40]
mov dword [esi + 0xd4], edx
mov dword [esi + 0x1c], edx
mov dword [esi + 0x18], edi
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov eax, dword [esi]
mov dword [eax], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ecx, ebx
mov ebx, eax
cmp eax, 0xf
mov dword [esi + 0x154], edi
jbe 0x1000e2ec
test ebx, ebx
js 0x10021943
mov ecx, ebx
or ecx, 0xf
mov dword [esi + 4], ebx
js 0x1000e30e
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0xa
cmp edx, 0xfff
jb 0x1000e344
mov dword [esi + 8], ecx
jmp 0x1000e31a
mov edi, dword [esi]
mov dword [edi + 0x10], ebx
push ebx
push ecx
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
mov dword [esi + 0x178], 0xa
mov ebx, edi
jmp 0x1000e37e
mov eax, Ordinal_2
mov dword [esi + 8], Ordinal_2
add eax, 0x23
mov byte [esi + 0xe3], 1
mov dword [esi + 0x178], 0xa
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000e359
mov dword [esi + 8], edx
mov byte [esi + 0xe3], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x10]
mov ebx, dword [esi]
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x28]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xe3], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x10], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x1c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x18], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x10]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1000e458
test eax, eax
js 0x10021844
mov dword [esi + 4], eax
mov ebx, eax
or ebx, 0xf
js 0x1000e473
cmp ebx, 0x17
mov edx, 0x16
cmovae edx, ebx
lea eax, [edx + 1]
cmp edx, 0xfff
jae 0x1000e47d
mov dword [esi + 0x178], 0xffffffff
push eax
mov edi, edx
call fcn.102e53ba
mov ecx, edi
add esp, 4
mov edi, eax
jmp 0x1000e49e
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000e4c1
mov eax, Ordinal_2
mov ebx, Ordinal_2
add eax, 0x23
mov dword [esi + 0x178], 0xffffffff
push eax
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov ecx, ebx
mov ebx, dword [esi]
mov eax, dword [esi + 4]
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], ecx
push eax
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
mov eax, 0xb9a0b240
mov ecx, 0xe9068be9
mov dword [esi + 0x74], ecx
mov dword [esi + 0x70], eax
mov eax, 0x5f6aff63
mov ecx, 0xaa2cb2d8
mov dword [esi + 0x7c], ecx
mov dword [esi + 0x78], eax
mov eax, 0xf9029fbc
mov ecx, 0x737ce341
mov dword [esi + 0x84], ecx
mov dword [esi + 0x80], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov edx, dword [esi + 0xc4]
mov dword [esi + 0x88], edx
mov edi, dword [esi + 0xb8]
mov dword [esi + 0x8c], edi
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
mov eax, dword [esi + 0xc0]
mov dword [esi + 0x54], eax
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x50], eax
mov dword [esi + 0x5c], edi
mov dword [esi + 0x58], edx
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x70], xmm0
movaps xmm0, xmmword [esi + 0x80]
xorps xmm0, xmmword [ecx + 0x10]
movaps xmmword [esi + 0x80], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea edi, [esi + 0x70]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000e5c0
test eax, eax
js 0x10021959
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x1000e5e0
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0xb
cmp edx, 0xfff
jb 0x1000e616
mov dword [esi + 8], ecx
jmp 0x1000e5ec
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0xb
jmp 0x1000e650
mov eax, Ordinal_2
mov dword [esi + 8], Ordinal_2
add eax, 0x23
mov byte [esi + 0xe4], 1
mov dword [esi + 0x178], 0xb
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000e62b
mov dword [esi + 8], edx
mov byte [esi + 0xe4], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
mov ebx, dword [esi]
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x10], ecx
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x70]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x2c]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xe4], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x10], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x1c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x18], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x10]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1000e72c
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x1000e747
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 8], edi
cmp edi, 0xfff
jae 0x1000e751
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov eax, dword [esi + 8]
jmp 0x1000e772
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000e795
mov ecx, Ordinal_2
mov ebx, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov eax, ebx
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
mov eax, 0xa8a0b240
mov ecx, 0xc11e86f5
mov dword [esi + 0x74], ecx
mov dword [esi + 0x70], eax
mov eax, 0x4046cf6d
mov ecx, 0xac14b8d3
mov dword [esi + 0x7c], ecx
mov dword [esi + 0x78], eax
mov eax, 0x9a4392bd
mov ecx, 0xf8622
mov dword [esi + 0x84], ecx
mov dword [esi + 0x80], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov edx, dword [esi + 0xc4]
mov dword [esi + 0x88], edx
mov edi, dword [esi + 0xb8]
mov dword [esi + 0x8c], edi
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
mov eax, dword [esi + 0xc0]
mov dword [esi + 0x54], eax
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x50], eax
mov dword [esi + 0x5c], edi
mov dword [esi + 0x58], edx
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x70], xmm0
movaps xmm0, xmmword [esi + 0x80]
xorps xmm0, xmmword [ecx + 0x10]
movaps xmmword [esi + 0x80], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea edi, [esi + 0x70]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000e894
test eax, eax
js 0x1002196f
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x1000e8b4
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0xc
cmp edx, 0xfff
jb 0x1000e8ea
mov dword [esi + 8], ecx
jmp 0x1000e8c0
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0xc
jmp 0x1000e924
mov eax, Ordinal_2
mov dword [esi + 8], Ordinal_2
add eax, 0x23
mov byte [esi + 0xe5], 1
mov dword [esi + 0x178], 0xc
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000e8ff
mov dword [esi + 8], edx
mov byte [esi + 0xe5], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x70]
mov ebx, dword [esi]
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x30]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xe5], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1000e9ea
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x1000ea07
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 8], edi
cmp edi, 0xfff
jb 0x1000ea34
mov edi, ebx
jmp 0x1000ea11
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
mov edi, ebx
jmp 0x1000ea6e
mov ecx, Ordinal_2
mov edi, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov eax, edi
jmp 0x1000ea4c
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov ebx, eax
mov eax, dword [esi + 8]
mov ecx, dword [esi]
mov edi, dword [esi + 4]
mov dword [ecx + 0x28], edi
mov dword [ecx + 0x2c], eax
push edi
lea eax, [esi + 0x70]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov edi, dword [esi]
mov dword [edi + 0x18], ebx
lea ebx, [esi + 0x10]
mov eax, 0xbea0b240
mov ecx, 0xd61f8bf7
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x3628e167
mov ecx, 0xc360d6b6
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [edi], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000eb15
test eax, eax
js 0x10021985
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x1000eb35
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0xd
cmp edx, 0xfff
jb 0x1000eb6b
mov dword [esi + 8], ecx
jmp 0x1000eb41
mov dword [edi + 0x10], eax
push eax
push ebx
push edi
mov ebx, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
mov dword [esi + 0x178], 0xd
jmp 0x1000eba7
mov eax, Ordinal_2
mov dword [esi + 8], Ordinal_2
add eax, 0x23
mov byte [esi + 0xe6], 1
mov dword [esi + 0x178], 0xd
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000eb80
mov dword [esi + 8], edx
mov byte [esi + 0xe6], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x10]
mov ecx, dword [esi + 8]
mov ebx, dword [esi]
mov edx, dword [esi + 4]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov edi, ebx
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x34]
mov byte [edi + 0x30], 0
mov byte [esi + 0xe6], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
mov eax, dword [esi + 0x94]
mov dword [eax + 0x38], 0
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x10], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x1c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x18], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x10]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1000ec90
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x1000ecab
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 8], edi
cmp edi, 0xfff
jae 0x1000ecb5
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov eax, dword [esi + 8]
jmp 0x1000ecd6
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000ecf9
mov ecx, Ordinal_2
mov ebx, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov eax, ebx
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
mov eax, 0xb2a0b240
mov ecx, 0xc43e9eee
mov dword [esi + 0x74], ecx
mov dword [esi + 0x70], eax
mov eax, 0x414def50
mov ecx, 0xac12a4f7
mov dword [esi + 0x7c], ecx
mov dword [esi + 0x78], eax
mov eax, 0xf90298b8
mov ecx, 0x737ce341
mov dword [esi + 0x84], ecx
mov dword [esi + 0x80], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov edx, dword [esi + 0xc4]
mov dword [esi + 0x88], edx
mov edi, dword [esi + 0xb8]
mov dword [esi + 0x8c], edi
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
mov eax, dword [esi + 0xc0]
mov dword [esi + 0x54], eax
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x50], eax
mov dword [esi + 0x5c], edi
mov dword [esi + 0x58], edx
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x70], xmm0
movaps xmm0, xmmword [esi + 0x80]
xorps xmm0, xmmword [ecx + 0x10]
movaps xmmword [esi + 0x80], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea edi, [esi + 0x70]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000edf8
test eax, eax
js 0x1002199b
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x1000ee18
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0xe
cmp edx, 0xfff
jb 0x1000ee4e
mov dword [esi + 8], ecx
jmp 0x1000ee24
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0xe
jmp 0x1000ee88
mov eax, Ordinal_2
mov dword [esi + 8], Ordinal_2
add eax, 0x23
mov byte [esi + 0xe7], 1
mov dword [esi + 0x178], 0xe
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000ee63
mov dword [esi + 8], edx
mov byte [esi + 0xe7], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x70]
mov ebx, dword [esi]
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x3c]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xe7], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
mov edx, 0x9cad814b
mov edi, 0xa271eaef
xor eax, eax
lea ecx, [esi + 0x40]
mov dword [esi + 0xb0], edi
mov dword [esi + 0x74], edi
mov dword [esi + 8], edx
mov dword [esi + 0x70], edx
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1000ef58
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x1000ef75
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 0x68], edi
cmp edi, 0xfff
jb 0x1000efa2
mov edi, ebx
jmp 0x1000ef7f
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
mov edi, ebx
jmp 0x1000efdc
mov ecx, Ordinal_2
mov edi, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov eax, edi
jmp 0x1000efba
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov ebx, eax
mov eax, dword [esi + 0x68]
mov ecx, dword [esi]
mov edi, dword [esi + 4]
mov dword [ecx + 0x28], edi
mov dword [ecx + 0x2c], eax
push edi
lea eax, [esi + 0x70]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov edi, dword [esi]
mov dword [edi + 0x18], ebx
lea ebx, [esi + 0x10]
mov eax, 0x91a4b240
mov ecx, 0xc70199da
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x577af265
mov ecx, 0xc30fbfc2
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [edi], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000f083
test eax, eax
js 0x100219b1
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x1000f0a3
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0xf
cmp edx, 0xfff
jb 0x1000f0d9
mov dword [esi + 0x68], ecx
jmp 0x1000f0af
mov dword [edi + 0x10], eax
push eax
push ebx
push edi
mov ebx, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
mov dword [esi + 0x178], 0xf
jmp 0x1000f115
mov eax, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add eax, 0x23
mov byte [esi + 0xe8], 1
mov dword [esi + 0x178], 0xf
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000f0ee
mov dword [esi + 0x68], edx
mov byte [esi + 0xe8], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x10]
mov ecx, dword [esi + 0x68]
mov ebx, dword [esi]
mov edx, dword [esi + 4]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov edi, ebx
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x40]
mov dword [edi + 0x30], 0x3fe28f5c
mov byte [esi + 0xe8], 0
call fcn.10024b50
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xb0]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 8]
mov dword [esi + 0x10], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x1c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x18], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x10]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1000f1f2
test eax, eax
js 0x10021844
mov edi, eax
or edi, 0xf
mov dword [esi + 4], eax
js 0x1000f20d
cmp edi, 0x17
mov edx, 0x16
cmovae edx, edi
lea ecx, [edx + 1]
cmp edx, 0xfff
jae 0x1000f217
mov dword [esi + 0x178], 0xffffffff
push ecx
mov edi, edx
call fcn.102e53ba
mov ecx, edi
add esp, 4
mov ebx, eax
jmp 0x1000f238
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000f25b
mov ecx, Ordinal_2
mov edi, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov ecx, edi
mov edi, dword [esi]
mov eax, dword [esi + 4]
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
push eax
lea eax, [esi + 0x10]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [ebx + eax], 0
mov dword [edi + 0x18], ebx
mov eax, 0x91a4b240
mov ecx, 0xca128fc9
mov dword [esi + 0x74], ecx
mov dword [esi + 0x70], eax
mov eax, 0x534ff467
mov ecx, 0xa60dbfe2
mov dword [esi + 0x7c], ecx
mov dword [esi + 0x78], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x80], eax
mov edi, dword [esi + 0xc0]
mov dword [esi + 0x84], edi
mov ebx, dword [esi + 0xc4]
mov dword [esi + 0x88], ebx
mov edx, dword [esi + 0xb8]
mov dword [esi + 0x8c], edx
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
mov dword [esi + 0x54], edi
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x50], eax
mov dword [esi + 0x5c], edx
mov dword [esi + 0x58], ebx
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x70], xmm0
movaps xmm0, xmmword [esi + 0x80]
xorps xmm0, xmmword [ecx + 0x10]
movaps xmmword [esi + 0x80], xmm0
mov ebx, dword [esi]
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea edi, [esi + 0x70]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000f358
test eax, eax
js 0x100219c7
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x1000f378
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0x10
cmp edx, 0xfff
jb 0x1000f3ae
mov dword [esi + 0x68], ecx
jmp 0x1000f384
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0x10
jmp 0x1000f3e8
mov eax, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add eax, 0x23
mov byte [esi + 0xe9], 1
mov dword [esi + 0x178], 0x10
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000f3c3
mov dword [esi + 0x68], edx
mov byte [esi + 0xe9], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x70]
mov ebx, dword [esi]
mov ecx, dword [esi + 0x68]
mov edx, dword [esi + 4]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x44]
mov dword [ebx + 0x30], 0x3f000000
mov byte [esi + 0xe9], 0
call fcn.10024b50
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa0]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x98]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1000f4b4
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x1000f4d1
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 0x68], edi
cmp edi, 0xfff
jb 0x1000f4fe
mov edi, ebx
jmp 0x1000f4db
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
mov edi, ebx
jmp 0x1000f538
mov ecx, Ordinal_2
mov edi, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov eax, edi
jmp 0x1000f516
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov ebx, eax
mov eax, dword [esi + 0x68]
mov ecx, dword [esi]
mov edi, dword [esi + 4]
mov dword [ecx + 0x28], edi
mov dword [ecx + 0x2c], eax
push edi
lea eax, [esi + 0x70]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov edi, dword [esi]
mov dword [edi + 0x18], ebx
lea ebx, [esi + 0x10]
mov eax, 0xa9abb240
mov ecx, 0xf0149ae2
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x5a47f563
mov ecx, 0xc312b3c0
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [edi], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000f5df
test eax, eax
js 0x100219dd
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x1000f5ff
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0x11
cmp edx, 0xfff
jb 0x1000f635
mov dword [esi + 0x68], ecx
jmp 0x1000f60b
mov dword [edi + 0x10], eax
push eax
push ebx
push edi
mov ebx, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
mov dword [esi + 0x178], 0x11
jmp 0x1000f671
mov eax, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add eax, 0x23
mov byte [esi + 0xea], 1
mov dword [esi + 0x178], 0x11
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000f64a
mov dword [esi + 0x68], edx
mov byte [esi + 0xea], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
mov eax, dword [esi + 0x68]
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x10], ecx
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov edi, ebx
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x48]
mov dword [edi + 0x30], 0
mov byte [esi + 0xea], 0
call fcn.10024890
mov esp, dword [esi + 0xac]
mov eax, dword [esi + 0x94]
mov dword [eax + 0x4c], 0xc3b40000
mov dword [eax + 0x50], 0x43b40000
mov dword [eax + 0x54], 0x43340000
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0xc8], edi
jbe 0x1000f769
test eax, eax
js 0x10021844
mov dword [esi + 4], eax
mov edi, eax
or edi, 0xf
js 0x1000f784
cmp edi, 0x17
mov ecx, 0x16
cmovae ecx, edi
lea eax, [ecx + 1]
cmp ecx, 0xfff
jae 0x1000f78e
mov dword [esi + 0x178], 0xffffffff
push eax
mov edi, ecx
call fcn.102e53ba
mov ecx, edi
add esp, 4
mov ebx, eax
jmp 0x1000f7af
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000f7d2
mov eax, Ordinal_2
mov edi, Ordinal_2
add eax, 0x23
mov dword [esi + 0x178], 0xffffffff
push eax
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov ecx, edi
mov edi, dword [esi]
mov eax, dword [esi + 4]
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
push eax
lea eax, [esi + 0x70]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [ebx + eax], 0
mov dword [edi + 0x18], ebx
lea edi, [esi + 0x10]
mov eax, 0xb6a0b240
mov ecx, 0xc71783f5
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov ebx, 0x365ce944
mov edx, 0xc360d6b6
xor eax, eax
lea ecx, [esi + 0x40]
mov dword [esi + 0x90], edx
mov dword [esi + 0x1c], edx
mov dword [esi + 0x18], ebx
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov eax, dword [esi]
mov dword [eax], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 4], ebx
jbe 0x1000f884
test eax, eax
js 0x100219f3
mov ecx, eax
or ecx, 0xf
mov dword [esi + 0x68], eax
js 0x1000f8a6
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea edx, [edi + 1]
mov dword [esi + 0x178], 0x12
cmp edi, 0xfff
jb 0x1000f8dc
mov dword [esi + 0x34], ecx
jmp 0x1000f8b2
mov ebx, dword [esi]
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0x12
jmp 0x1000f916
mov edx, Ordinal_2
mov dword [esi + 0x34], Ordinal_2
add edx, 0x23
mov byte [esi + 0xeb], 1
mov dword [esi + 0x178], 0x12
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000f8f1
mov dword [esi + 0x34], edi
mov byte [esi + 0xeb], 1
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov ecx, dword [esi + 0x68]
mov ebx, dword [esi]
mov dword [ebx + 0x10], ecx
mov eax, dword [esi + 0x34]
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 0x68]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x58]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xeb], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0xc8], edi
jbe 0x1000f9f0
test eax, eax
js 0x10021844
mov dword [esi + 0x68], eax
mov ebx, eax
or ebx, 0xf
js 0x1000fa0b
cmp ebx, 0x17
mov edx, 0x16
cmovae edx, ebx
lea eax, [edx + 1]
cmp edx, 0xfff
jae 0x1000fa15
mov dword [esi + 0x178], 0xffffffff
push eax
mov edi, edx
call fcn.102e53ba
mov ecx, edi
add esp, 4
mov edi, eax
jmp 0x1000fa36
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000fa59
mov eax, Ordinal_2
mov ebx, Ordinal_2
add eax, 0x23
mov dword [esi + 0x178], 0xffffffff
push eax
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov ecx, ebx
mov ebx, dword [esi]
mov eax, dword [esi + 0x68]
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], ecx
push eax
lea eax, [esi + 0x70]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 0x68]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
lea edi, [esi + 0x10]
mov eax, 0xa9a0b240
mov ecx, 0xd01499fa
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, dword [esi + 4]
mov dword [esi + 0x18], eax
mov eax, dword [esi + 0x90]
mov dword [esi + 0x1c], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000fb02
test eax, eax
js 0x10021a09
mov ecx, eax
or ecx, 0xf
mov dword [esi + 4], eax
js 0x1000fb22
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea edx, [edi + 1]
mov dword [esi + 0x178], 0x13
cmp edi, 0xfff
jb 0x1000fb5b
mov dword [esi + 0x90], ecx
jmp 0x1000fb31
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0x13
jmp 0x1000fb9b
mov edx, Ordinal_2
mov dword [esi + 0x90], Ordinal_2
add edx, 0x23
mov byte [esi + 0xec], 1
mov dword [esi + 0x178], 0x13
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000fb73
mov dword [esi + 0x90], edi
mov byte [esi + 0xec], 1
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x10], ecx
mov eax, dword [esi + 0x90]
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x5c]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xec], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1000fc75
test eax, eax
js 0x10021844
mov dword [esi + 4], eax
mov ebx, eax
or ebx, 0xf
js 0x1000fc90
cmp ebx, 0x17
mov edx, 0x16
cmovae edx, ebx
lea eax, [edx + 1]
cmp edx, 0xfff
jae 0x1000fc9a
mov dword [esi + 0x178], 0xffffffff
push eax
mov edi, edx
call fcn.102e53ba
mov ecx, edi
add esp, 4
mov edi, eax
jmp 0x1000fcbb
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000fcde
mov eax, Ordinal_2
mov ebx, Ordinal_2
add eax, 0x23
mov dword [esi + 0x178], 0xffffffff
push eax
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov ecx, ebx
mov ebx, dword [esi]
mov eax, dword [esi + 4]
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], ecx
push eax
lea eax, [esi + 0x70]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
lea edi, [esi + 0x10]
mov eax, 0x8881b240
mov ecx, 0xcf1e9ee8
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x4249e351
mov ecx, 0xc312b3de
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1000fd85
test eax, eax
js 0x10021a1f
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x1000fda5
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0x14
cmp edx, 0xfff
jb 0x1000fddb
mov dword [esi + 0x68], ecx
jmp 0x1000fdb1
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0x14
jmp 0x1000fe15
mov eax, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add eax, 0x23
mov byte [esi + 0xed], 1
mov dword [esi + 0x178], 0x14
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000fdf0
mov dword [esi + 0x68], edx
mov byte [esi + 0xed], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov eax, dword [esi + 0x68]
mov dword [ebx + 0x10], ecx
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x60]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xed], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa0]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x98]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1000fef4
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x1000ff0f
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 0x68], edi
cmp edi, 0xfff
jae 0x1000ff19
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov eax, dword [esi + 0x68]
jmp 0x1000ff3a
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x1000ff5d
mov ecx, Ordinal_2
mov ebx, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov eax, ebx
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
push ecx
lea eax, [esi + 0x70]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
lea edi, [esi + 0x10]
mov eax, 0x9895b240
mov ecx, 0xc7199efa
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x4651d274
mov ecx, 0xc360d6d3
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x10010004
test eax, eax
js 0x10021a35
mov ecx, eax
or ecx, 0xf
mov dword [esi + 4], eax
js 0x10010024
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea edx, [edi + 1]
mov dword [esi + 0x178], 0x15
cmp edi, 0xfff
jb 0x1001005a
mov dword [esi + 0x68], ecx
jmp 0x10010030
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0x15
jmp 0x10010094
mov edx, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add edx, 0x23
mov byte [esi + 0xee], 1
mov dword [esi + 0x178], 0x15
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1001006f
mov dword [esi + 0x68], edi
mov byte [esi + 0xee], 1
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x10], ecx
mov eax, dword [esi + 0x68]
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x64]
mov dword [ebx + 0x30], 0
mov byte [esi + 0xee], 0
call fcn.10024890
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa0]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x98]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x10010176
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x10010191
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 0x68], edi
cmp edi, 0xfff
jae 0x1001019b
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov eax, dword [esi + 0x68]
jmp 0x100101bc
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x100101df
mov ecx, Ordinal_2
mov ebx, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov eax, ebx
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
push ecx
lea eax, [esi + 0x70]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
lea edi, [esi + 0x10]
mov eax, 0x9c90b240
mov ecx, 0xc73584f2
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x4241f568
mov ecx, 0xc360d6cf
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x10010286
test eax, eax
js 0x10021a4b
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x100102a6
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0x16
cmp edx, 0xfff
jb 0x100102dc
mov dword [esi + 0x68], ecx
jmp 0x100102b2
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0x16
jmp 0x10010316
mov eax, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add eax, 0x23
mov byte [esi + 0xef], 1
mov dword [esi + 0x178], 0x16
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x100102f1
mov dword [esi + 0x68], edx
mov byte [esi + 0xef], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov eax, dword [esi + 0x68]
mov dword [ebx + 0x10], ecx
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x68]
mov dword [ebx + 0x30], 0x64
mov byte [esi + 0xef], 0
call fcn.10024890
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa0]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x98]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x100103f8
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x10010413
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 0x68], edi
cmp edi, 0xfff
jae 0x1001041d
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov eax, dword [esi + 0x68]
jmp 0x1001043e
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x10010461
mov ecx, Ordinal_2
mov ebx, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov eax, ebx
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
push ecx
lea eax, [esi + 0x70]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
lea edi, [esi + 0x10]
mov eax, 0x9c90b240
mov ecx, 0xc73d84f2
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x5e5ce168
mov ecx, 0xc360d6b6
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x10010508
test eax, eax
js 0x10021a61
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x10010528
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0x17
cmp edx, 0xfff
jb 0x1001055e
mov dword [esi + 0x68], ecx
jmp 0x10010534
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0x17
jmp 0x10010598
mov eax, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add eax, 0x23
mov byte [esi + 0xf0], 1
mov dword [esi + 0x178], 0x17
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x10010573
mov dword [esi + 0x68], edx
mov byte [esi + 0xf0], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
mov ebx, dword [esi]
mov eax, dword [esi + 0x68]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x10], ecx
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x6c]
mov dword [ebx + 0x30], 0x32
mov byte [esi + 0xf0], 0
call fcn.10024890
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa0]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x98]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1001067a
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x10010695
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 0x68], edi
cmp edi, 0xfff
jae 0x1001069f
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov eax, dword [esi + 0x68]
jmp 0x100106c0
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x100106e3
mov ecx, Ordinal_2
mov ebx, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov eax, ebx
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
push ecx
lea eax, [esi + 0x70]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
lea edi, [esi + 0x10]
mov eax, 0x9c90b240
mov ecx, 0xcb2684f2
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x3640f262
mov ecx, 0xc360d6b6
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x1001078a
test eax, eax
js 0x10021a77
mov ecx, eax
or ecx, 0xf
mov dword [esi + 4], eax
js 0x100107aa
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea edx, [edi + 1]
mov dword [esi + 0x178], 0x18
cmp edi, 0xfff
jb 0x100107e0
mov dword [esi + 0x68], ecx
jmp 0x100107b6
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0x18
jmp 0x1001081a
mov edx, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add edx, 0x23
mov byte [esi + 0xf1], 1
mov dword [esi + 0x178], 0x18
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x100107f5
mov dword [esi + 0x68], edi
mov byte [esi + 0xf1], 1
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x10], ecx
mov eax, dword [esi + 0x68]
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x70]
mov dword [ebx + 0x30], 0x32
mov byte [esi + 0xf1], 0
call fcn.10024890
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa0]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x98]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x100108fc
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x10010917
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 0x68], edi
cmp edi, 0xfff
jae 0x10010921
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov eax, dword [esi + 0x68]
jmp 0x10010942
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x10010965
mov ecx, Ordinal_2
mov ebx, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov eax, ebx
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
push ecx
lea eax, [esi + 0x70]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
lea edi, [esi + 0x10]
mov eax, 0x9c90b240
mov ecx, 0xd22284f2
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x364ce363
mov ecx, 0xc360d6b6
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x10010a0c
test eax, eax
js 0x10021a8d
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x10010a2c
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0x19
cmp edx, 0xfff
jb 0x10010a62
mov dword [esi + 0x68], ecx
jmp 0x10010a38
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0x19
jmp 0x10010a9c
mov eax, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add eax, 0x23
mov byte [esi + 0xf2], 1
mov dword [esi + 0x178], 0x19
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x10010a77
mov dword [esi + 0x68], edx
mov byte [esi + 0xf2], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x10]
mov ebx, dword [esi]
mov ecx, dword [esi + 0x68]
mov edx, dword [esi + 4]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x74]
mov dword [ebx + 0x30], 0x258
mov byte [esi + 0xf2], 0
call fcn.10024890
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x10], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x1c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x18], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x10]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x10010b7b
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x10010b96
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 0x68], edi
cmp edi, 0xfff
jae 0x10010ba0
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov eax, dword [esi + 0x68]
jmp 0x10010bc1
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x10010be4
mov ecx, Ordinal_2
mov ebx, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov eax, ebx
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
mov eax, 0xbba0b240
mov ecx, 0xc71298f4
mov dword [esi + 0x74], ecx
mov dword [esi + 0x70], eax
mov eax, 0x4547f445
mov ecx, 0xaa01bec5
mov dword [esi + 0x7c], ecx
mov dword [esi + 0x78], eax
mov eax, 0xf902ebbd
mov ecx, 0x737ce341
mov dword [esi + 0x84], ecx
mov dword [esi + 0x80], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov edx, dword [esi + 0xc4]
mov dword [esi + 0x88], edx
mov edi, dword [esi + 0xb8]
mov dword [esi + 0x8c], edi
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
mov eax, dword [esi + 0xc0]
mov dword [esi + 0x54], eax
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x50], eax
mov dword [esi + 0x5c], edi
mov dword [esi + 0x58], edx
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x70], xmm0
movaps xmm0, xmmword [esi + 0x80]
xorps xmm0, xmmword [ecx + 0x10]
movaps xmmword [esi + 0x80], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea edi, [esi + 0x70]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x10010ce3
test eax, eax
js 0x10021aa3
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x10010d03
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0x1a
cmp edx, 0xfff
jb 0x10010d39
mov dword [esi + 0x68], ecx
jmp 0x10010d0f
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0x1a
jmp 0x10010d73
mov eax, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add eax, 0x23
mov byte [esi + 0xf3], 1
mov dword [esi + 0x178], 0x1a
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x10010d4e
mov dword [esi + 0x68], edx
mov byte [esi + 0xf3], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x70]
mov ebx, dword [esi]
mov ecx, dword [esi + 0x68]
mov edx, dword [esi + 4]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x78]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xf3], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x10010e36
test eax, eax
js 0x10021844
mov dword [esi + 4], eax
mov edx, eax
or edx, 0xf
js 0x10010e53
cmp edx, 0x17
mov ebx, 0x16
cmovae ebx, edx
lea eax, [ebx + 1]
cmp ebx, 0xfff
jb 0x10010e7e
mov edi, edx
jmp 0x10010e5d
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
mov edi, ebx
jmp 0x10010eb9
mov eax, Ordinal_2
mov edi, Ordinal_2
add eax, 0x23
mov dword [esi + 0x178], 0xffffffff
push eax
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
jmp 0x10010e95
mov edi, ebx
mov dword [esi + 0x178], 0xffffffff
push eax
call fcn.102e53ba
add esp, 4
mov ebx, eax
mov eax, edi
mov ecx, dword [esi]
mov edi, dword [esi + 4]
mov dword [ecx + 0x28], edi
mov dword [ecx + 0x2c], eax
push edi
lea eax, [esi + 0x70]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov edi, dword [esi]
mov dword [edi + 0x18], ebx
lea ebx, [esi + 0x10]
mov eax, 0xb5a0b240
mov ecx, 0xc33c9ef2
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x444ded74
mov ecx, 0xc360d6b6
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [edi], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x10010f60
test eax, eax
js 0x10021ab9
mov ecx, eax
or ecx, 0xf
mov dword [esi + 4], eax
js 0x10010f80
cmp ecx, 0x17
mov ebx, 0x16
cmovae ebx, ecx
lea edx, [ebx + 1]
mov dword [esi + 0x178], 0x1b
cmp ebx, 0xfff
jb 0x10010fb6
mov dword [esi + 0x68], ecx
jmp 0x10010f8c
mov dword [edi + 0x10], eax
push eax
push ebx
push edi
mov ebx, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
mov dword [esi + 0x178], 0x1b
jmp 0x10010ff2
mov edx, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add edx, 0x23
mov byte [esi + 0xf4], 1
mov dword [esi + 0x178], 0x1b
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x10010fcb
mov dword [esi + 0x68], ebx
mov byte [esi + 0xf4], 1
push edx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov ecx, dword [esi + 4]
mov ebx, dword [esi]
mov dword [ebx + 0x10], ecx
mov eax, dword [esi + 0x68]
mov dword [ebx + 0x14], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov edi, ebx
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x7c]
mov byte [edi + 0x30], 0
mov byte [esi + 0xf4], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x100110ce
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x100110e9
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 0x68], edi
cmp edi, 0xfff
jae 0x100110f3
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov eax, dword [esi + 0x68]
jmp 0x10011114
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x10011137
mov ecx, Ordinal_2
mov ebx, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov eax, ebx
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
push ecx
lea eax, [esi + 0x70]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
lea edi, [esi + 0x10]
mov eax, 0xb9a0b240
mov ecx, 0xc51087fa
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x4449cb63
mov ecx, 0xc312b3dd
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x100111de
test eax, eax
js 0x10021acf
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x100111fe
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0x1c
cmp edx, 0xfff
jb 0x10011234
mov dword [esi + 0x68], ecx
jmp 0x1001120a
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0x1c
jmp 0x1001126e
mov eax, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add eax, 0x23
mov byte [esi + 0xf5], 1
mov dword [esi + 0x178], 0x1c
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x10011249
mov dword [esi + 0x68], edx
mov byte [esi + 0xf5], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x10]
mov ebx, dword [esi]
mov ecx, dword [esi + 0x68]
mov edx, dword [esi + 4]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x80]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xf5], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x10], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x1c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x18], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x10]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1001134d
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x10011368
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 0x68], edi
cmp edi, 0xfff
jae 0x10011372
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov eax, dword [esi + 0x68]
jmp 0x10011393
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x100113b6
mov ecx, Ordinal_2
mov ebx, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov eax, ebx
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
mov eax, 0xada0b240
mov ecx, 0xcb158fe9
mov dword [esi + 0x74], ecx
mov dword [esi + 0x70], eax
mov eax, 0x446ff265
mov ecx, 0xa701b8d3
mov dword [esi + 0x7c], ecx
mov dword [esi + 0x78], eax
mov eax, 0xf90298aa
mov ecx, 0x737ce341
mov dword [esi + 0x84], ecx
mov dword [esi + 0x80], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov edx, dword [esi + 0xc4]
mov dword [esi + 0x88], edx
mov edi, dword [esi + 0xb8]
mov dword [esi + 0x8c], edi
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
mov eax, dword [esi + 0xc0]
mov dword [esi + 0x54], eax
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x50], eax
mov dword [esi + 0x5c], edi
mov dword [esi + 0x58], edx
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x70], xmm0
movaps xmm0, xmmword [esi + 0x80]
xorps xmm0, xmmword [ecx + 0x10]
movaps xmmword [esi + 0x80], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea edi, [esi + 0x70]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x100114b5
test eax, eax
js 0x10021ae5
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x100114d5
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0x1d
cmp edx, 0xfff
jb 0x1001150b
mov dword [esi + 0x68], ecx
jmp 0x100114e1
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0x1d
jmp 0x10011545
mov eax, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add eax, 0x23
mov byte [esi + 0xf6], 1
mov dword [esi + 0x178], 0x1d
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x10011520
mov dword [esi + 0x68], edx
mov byte [esi + 0xf6], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x70]
mov ebx, dword [esi]
mov ecx, dword [esi + 0x68]
mov edx, dword [esi + 4]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x84]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xf6], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x70], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x7c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x78], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x70], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x70]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x1001160e
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x1001162b
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 0x68], edi
cmp edi, 0xfff
jb 0x10011658
mov edi, ebx
jmp 0x10011635
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
mov edi, ebx
jmp 0x10011692
mov ecx, Ordinal_2
mov edi, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
mov eax, edi
jmp 0x10011670
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov ebx, eax
mov eax, dword [esi + 0x68]
mov ecx, dword [esi]
mov edi, dword [esi + 4]
mov dword [ecx + 0x28], edi
mov dword [ecx + 0x2c], eax
push edi
lea eax, [esi + 0x70]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov edi, dword [esi]
mov dword [edi + 0x18], ebx
lea ebx, [esi + 0x10]
mov eax, 0x8f85b240
mov ecx, 0xc61084fe
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0x5b41d263
mov ecx, 0xc313a4d3
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x10], xmm0
mov dword [edi], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x10011739
test eax, eax
js 0x10021afb
mov dword [esi + 4], eax
mov ecx, eax
or ecx, 0xf
js 0x10011759
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [esi + 0x178], 0x1e
cmp edx, 0xfff
jb 0x1001178f
mov dword [esi + 0x68], ecx
jmp 0x10011765
mov dword [edi + 0x10], eax
push eax
push ebx
push edi
mov ebx, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
mov dword [esi + 0x178], 0x1e
jmp 0x100117cb
mov eax, Ordinal_2
mov dword [esi + 0x68], Ordinal_2
add eax, 0x23
mov byte [esi + 0xf7], 1
mov dword [esi + 0x178], 0x1e
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
add edi, 0x23
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x100117a4
mov dword [esi + 0x68], edx
mov byte [esi + 0xf7], 1
push eax
call fcn.102e53ba
add esp, 4
mov edi, eax
lea eax, [esi + 0x10]
mov ecx, dword [esi + 0x68]
mov ebx, dword [esi]
mov edx, dword [esi + 4]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx], edi
mov edi, ebx
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x88]
mov byte [edi + 0x30], 0
mov byte [esi + 0xf7], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x10], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x1c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x18], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x10]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x100118aa
test eax, eax
js 0x10021844
mov ebx, eax
or ebx, 0xf
mov dword [esi + 4], eax
js 0x100118c5
cmp ebx, 0x17
mov edi, 0x16
cmovae edi, ebx
lea ecx, [edi + 1]
mov dword [esi + 0x68], edi
cmp edi, 0xfff
jae 0x100118cf
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
mov edi, eax
mov eax, dword [esi + 0x68]
jmp 0x100118f0
mov ecx, ebx
mov ebx, dword [esi]
mov dword [ebx + 0x28], eax
push eax
push ecx
push edi
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi + 0x18], 0
jmp 0x10011913
mov ecx, Ordinal_2
mov ebx, Ordinal_2
add ecx, 0x23
mov dword [esi + 0x178], 0xffffffff
push ecx
call fcn.102e53ba
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov eax, ebx
mov ebx, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
push ecx
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [edi + eax], 0
mov dword [ebx + 0x18], edi
mov eax, 0xb5a0b240
mov ecx, 0xe41586f4
mov dword [esi + 0x74], ecx
mov dword [esi + 0x70], eax
mov eax, 0x774df46f
mov ecx, 0xa20dbfd8
mov dword [esi + 0x7c], ecx
mov dword [esi + 0x78], eax
mov eax, 0x976d82bb
mov ecx, 0x737ce341
mov dword [esi + 0x84], ecx
mov dword [esi + 0x80], eax
xor eax, eax
lea ecx, [esi + 0x40]
mov edx, dword [esi + 0xc4]
mov dword [esi + 0x88], edx
mov edi, dword [esi + 0xb8]
mov dword [esi + 0x8c], edi
mov eax, dword [esi + 0x30]
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x48], eax
mov eax, dword [esi + 0xc0]
mov dword [esi + 0x54], eax
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x50], eax
mov dword [esi + 0x5c], edi
mov dword [esi + 0x58], edx
movaps xmm0, xmmword [esi + 0x70]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0x70], xmm0
movaps xmm0, xmmword [esi + 0x80]
xorps xmm0, xmmword [ecx + 0x10]
movaps xmmword [esi + 0x80], xmm0
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea edi, [esi + 0x70]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
jbe 0x10011a12
test eax, eax
js 0x10021b11
mov ecx, eax
or ecx, 0xf
mov dword [esi + 4], eax
js 0x10011a32
mov dword [ebx + 0x10], eax
push eax
push edi
push ebx
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x178], 0x1f
jmp 0x10011aa2
mov eax, dword [esi + 0x94]
lea ecx, [eax + 0x8c]
mov byte [ebx + 0x30], 0
mov byte [esi + 0xf8], 0
call fcn.100245d0
mov esp, dword [esi + 0xac]
push eax
sub esp, 0x30
mov ebx, esp
xor eax, eax
lea ecx, [esi + 0x40]
mov eax, dword [esi + 0xa8]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x10], eax
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x1c], edx
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x18], eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x44], edi
mov edi, dword [esi + 0x38]
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edx
mov dword [esi + 0x48], eax
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [ecx]
lea edi, [ebx + 0x18]
movaps xmmword [esi + 0x10], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0xf
mov dword [esi], ebx
mov byte [ebx + 0x18], 0
lea ebx, [esi + 0x10]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x90], edi
jbe 0x10011b81
mov dword [esi + 0x178], 0xffffffff
call fcn.10025990
mov dword [esi + 0x178], 0xffffffff
call fcn.10025990
call fcn.10025990
mov byte [esi + 0xd9], 1
mov dword [esi + 0x178], 0
call fcn.10025990
mov byte [esi + 0xda], 1
mov dword [esi + 0x178], 1
call fcn.10025990
mov byte [esi + 0xdb], 1
mov dword [esi + 0x178], 2
call fcn.10025990
mov byte [esi + 0xdc], 1
mov dword [esi + 0x178], 3
call fcn.10025990
mov byte [esi + 0xdd], 1
mov dword [esi + 0x178], 4
call fcn.10025990
mov byte [esi + 0xde], 1
mov dword [esi + 0x178], 5
call fcn.10025990
mov byte [esi + 0xdf], 1
mov dword [esi + 0x178], 6
call fcn.10025990
mov byte [esi + 0xe0], 1
mov dword [esi + 0x178], 7
call fcn.10025990
mov byte [esi + 0xe1], 1
mov dword [esi + 0x178], 8
call fcn.10025990
mov byte [esi + 0xe2], 1
mov dword [esi + 0x178], 9
call fcn.10025990
mov byte [esi + 0xe3], 1
mov dword [esi + 0x178], 0xa
call fcn.10025990
mov byte [esi + 0xe4], 1
mov dword [esi + 0x178], 0xb
call fcn.10025990
mov byte [esi + 0xe5], 1
mov dword [esi + 0x178], 0xc
call fcn.10025990
mov byte [esi + 0xe6], 1
mov dword [esi + 0x178], 0xd
call fcn.10025990
mov byte [esi + 0xe7], 1
mov dword [esi + 0x178], 0xe
call fcn.10025990
mov byte [esi + 0xe8], 1
mov dword [esi + 0x178], 0xf
call fcn.10025990
mov byte [esi + 0xe9], 1
mov dword [esi + 0x178], 0x10
call fcn.10025990
mov byte [esi + 0xea], 1
mov dword [esi + 0x178], 0x11
call fcn.10025990
mov byte [esi + 0xeb], 1
mov dword [esi + 0x178], 0x12
call fcn.10025990
mov byte [esi + 0xec], 1
mov dword [esi + 0x178], 0x13
call fcn.10025990
mov byte [esi + 0xed], 1
mov dword [esi + 0x178], 0x14
call fcn.10025990
mov byte [esi + 0xee], 1
mov dword [esi + 0x178], 0x15
call fcn.10025990
mov byte [esi + 0xef], 1
mov dword [esi + 0x178], 0x16
call fcn.10025990
mov byte [esi + 0xf0], 1
mov dword [esi + 0x178], 0x17
call fcn.10025990
mov byte [esi + 0xf1], 1
mov dword [esi + 0x178], 0x18
call fcn.10025990
mov byte [esi + 0xf2], 1
mov dword [esi + 0x178], 0x19
call fcn.10025990
mov byte [esi + 0xf3], 1
mov dword [esi + 0x178], 0x1a
call fcn.10025990
mov byte [esi + 0xf4], 1
mov dword [esi + 0x178], 0x1b
call fcn.10025990
mov byte [esi + 0xf5], 1
mov dword [esi + 0x178], 0x1c
call fcn.10025990
mov byte [esi + 0xf6], 1
mov dword [esi + 0x178], 0x1d
call fcn.10025990
mov byte [esi + 0xf7], 1
mov dword [esi + 0x178], 0x1e
call fcn.10025990
mov byte [esi + 0xf8], 1
mov dword [esi + 0x178], 0x1f
call fcn.10025990
mov byte [esi + 0xf9], 1
mov dword [esi + 0x178], 0x20
call fcn.10025990
mov byte [esi + 0xfa], 1
mov dword [esi + 0x178], 0x21
call fcn.10025990
mov byte [esi + 0xfb], 1
mov dword [esi + 0x178], 0x22
call fcn.10025990
mov byte [esi + 0xfc], 1
mov dword [esi + 0x178], 0x23
call fcn.10025990
mov byte [esi + 0xfd], 1
mov dword [esi + 0x178], 0x24
call fcn.10025990
mov byte [esi + 0xfe], 1
mov dword [esi + 0x178], 0x25
call fcn.10025990
mov byte [esi + 0xff], 1
mov dword [esi + 0x178], 0x26
call fcn.10025990
mov byte [esi + 0x100], 1
mov dword [esi + 0x178], 0x27
call fcn.10025990
mov byte [esi + 0x101], 1
mov dword [esi + 0x178], 0x28
call fcn.10025990
mov byte [esi + 0x102], 1
mov dword [esi + 0x178], 0x29
call fcn.10025990
mov byte [esi + 0x103], 1
mov dword [esi + 0x178], 0x2a
call fcn.10025990
mov byte [esi + 0x104], 1
mov dword [esi + 0x178], 0x2b
call fcn.10025990
mov byte [esi + 0x105], 1
mov dword [esi + 0x178], 0x2c
call fcn.10025990
mov byte [esi + 0x106], 1
mov dword [esi + 0x178], 0x2d
call fcn.10025990
mov byte [esi + 0x107], 1
mov dword [esi + 0x178], 0x2e
call fcn.10025990
mov byte [esi + 0x108], 1
mov dword [esi + 0x178], 0x2f
call fcn.10025990
mov byte [esi + 0x109], 1
mov dword [esi + 0x178], 0x30
call fcn.10025990
mov byte [esi + 0x10a], 1
mov dword [esi + 0x178], 0x31
call fcn.10025990
mov byte [esi + 0x10b], 1
mov dword [esi + 0x178], 0x32
call fcn.10025990
mov byte [esi + 0x10c], 1
mov dword [esi + 0x178], 0x33
call fcn.10025990
mov byte [esi + 0x10d], 1
mov dword [esi + 0x178], 0x34
call fcn.10025990
mov byte [esi + 0x10e], 1
mov dword [esi + 0x178], 0x35
call fcn.10025990
mov byte [esi + 0x10f], 1
mov dword [esi + 0x178], 0x36
call fcn.10025990
mov byte [esi + 0x110], 1
mov dword [esi + 0x178], 0x37
call fcn.10025990
mov byte [esi + 0x111], 1
mov dword [esi + 0x178], 0x38
call fcn.10025990
mov byte [esi + 0x112], 1
mov dword [esi + 0x178], 0x39
call fcn.10025990
mov byte [esi + 0x113], 1
mov dword [esi + 0x178], 0x3a
call fcn.10025990
mov byte [esi + 0x114], 1
mov dword [esi + 0x178], 0x3b
call fcn.10025990
mov byte [esi + 0x115], 1
mov dword [esi + 0x178], 0x3c
call fcn.10025990
mov byte [esi + 0x116], 1
mov dword [esi + 0x178], 0x3d
call fcn.10025990
mov byte [esi + 0x117], 1
mov dword [esi + 0x178], 0x3e
call fcn.10025990
mov byte [esi + 0x118], 1
mov dword [esi + 0x178], 0x3f
call fcn.10025990
mov byte [esi + 0x119], 1
mov dword [esi + 0x178], 0x40
call fcn.10025990
mov byte [esi + 0x11a], 1
mov dword [esi + 0x178], 0x41
call fcn.10025990
mov byte [esi + 0x11b], 1
mov dword [esi + 0x178], 0x42
call fcn.10025990
mov byte [esi + 0x11c], 1
mov dword [esi + 0x178], 0x43
call fcn.10025990
mov byte [esi + 0x11d], 1
mov dword [esi + 0x178], 0x44
call fcn.10025990
mov byte [esi + 0x11e], 1
mov dword [esi + 0x178], 0x45
call fcn.10025990
mov byte [esi + 0x11f], 1
mov dword [esi + 0x178], 0x46
call fcn.10025990
mov byte [esi + 0x120], 1
mov dword [esi + 0x178], 0x47
call fcn.10025990
mov byte [esi + 0x121], 1
mov dword [esi + 0x178], 0x48
call fcn.10025990
mov byte [esi + 0x122], 1
mov dword [esi + 0x178], 0x49
call fcn.10025990
mov byte [esi + 0x123], 1
mov dword [esi + 0x178], 0x4a
call fcn.10025990
mov byte [esi + 0x124], 1
mov dword [esi + 0x178], 0x4b
call fcn.10025990
mov byte [esi + 0x125], 1
mov dword [esi + 0x178], 0x4c
call fcn.10025990
mov byte [esi + 0x126], 1
mov dword [esi + 0x178], 0x4d
call fcn.10025990
mov byte [esi + 0x127], 1
mov dword [esi + 0x178], 0x4e
call fcn.10025990
mov byte [esi + 0x128], 1
mov dword [esi + 0x178], 0x4f
call fcn.10025990
mov byte [esi + 0x129], 1
mov dword [esi + 0x178], 0x50
call fcn.10025990
mov byte [esi + 0x12a], 1
mov dword [esi + 0x178], 0x51
call fcn.10025990
mov byte [esi + 0x12b], 1
mov dword [esi + 0x178], 0x52
call fcn.10025990
mov byte [esi + 0x12c], 1
mov dword [esi + 0x178], 0x53
call fcn.10025990
mov byte [esi + 0x12d], 1
mov dword [esi + 0x178], 0x54
call fcn.10025990
mov byte [esi + 0x12e], 1
mov dword [esi + 0x178], 0x55
call fcn.10025990
mov byte [esi + 0x12f], 1
mov dword [esi + 0x178], 0x56
call fcn.10025990
mov byte [esi + 0x130], 1
mov dword [esi + 0x178], 0x57
call fcn.10025990
mov byte [esi + 0x131], 1
mov dword [esi + 0x178], 0x58
call fcn.10025990
mov byte [esi + 0x132], 1
mov dword [esi + 0x178], 0x59
call fcn.10025990
mov byte [esi + 0x134], 1
mov dword [esi + 0x178], 0x5a
call fcn.10025990
mov byte [esi + 0x133], 1
mov dword [esi + 0x178], 0x5b
call fcn.10025990
mov byte [esi + 0x136], 1
mov dword [esi + 0x178], 0x5c
call fcn.10025990
mov byte [esi + 0x135], 1
mov dword [esi + 0x178], 0x5d
call fcn.10025990
mov byte [esi + 0x137], 1
mov dword [esi + 0x178], 0x5e
call fcn.10025990
mov byte [esi + 0x138], 1
mov dword [esi + 0x178], 0x5f
call fcn.10025990
mov byte [esi + 0x139], 1
mov dword [esi + 0x178], 0x60
call fcn.10025990
mov byte [esi + 0x13a], 1
mov dword [esi + 0x178], 0x61
call fcn.10025990
mov byte [esi + 0x13b], 1
mov dword [esi + 0x178], 0x62
call fcn.10025990
mov byte [esi + 0x13c], 1
mov dword [esi + 0x178], 0x63
call fcn.10025990
mov byte [esi + 0x13d], 1
mov dword [esi + 0x178], 0x64
call fcn.10025990
mov byte [esi + 0x13e], 1
mov dword [esi + 0x178], 0x65
call fcn.10025990
mov byte [esi + 0x13f], 1
mov dword [esi + 0x178], 0x66
call fcn.10025990
mov byte [esi + 0x140], 1
mov dword [esi + 0x178], 0x67
call fcn.10025990
mov byte [esi + 0x141], 1
mov dword [esi + 0x178], 0x68
call fcn.10025990
mov byte [esi + 0x142], 1
mov dword [esi + 0x178], 0x69
call fcn.10025990
mov byte [esi + 0x143], 1
mov dword [esi + 0x178], 0x6a
call fcn.10025990
mov byte [esi + 0x144], 1
mov dword [esi + 0x178], 0x6b
call fcn.10025990
mov byte [esi + 0x145], 1
mov dword [esi + 0x178], 0x6c
call fcn.10025990
mov byte [esi + 0x146], 1
mov dword [esi + 0x178], 0x6d
call fcn.10025990
mov byte [esi + 0x147], 1
mov dword [esi + 0x178], 0x6e
call fcn.10025990
mov byte [esi + 0x148], 1
mov dword [esi + 0x178], 0x6f
call fcn.10025990
mov byte [esi + 0x149], 1
mov dword [esi + 0x178], 0x70
call fcn.10025990
mov byte [esi + 0x14a], 1
mov dword [esi + 0x178], 0x71
call fcn.10025990
mov byte [esi + 0x14b], 1
mov dword [esi + 0x178], 0x72
call fcn.10025990
mov byte [esi + 0x14c], 1
mov dword [esi + 0x178], 0x73
call fcn.10025990
mov byte [esi + 0x14d], 1
mov dword [esi + 0x178], 0x74
call fcn.10025990
mov byte [esi + 0x14e], 1
mov dword [esi + 0x178], 0x75
call fcn.10025990
mov byte [esi + 0x14f], 1
mov dword [esi + 0x178], 0x76
call fcn.10025990
mov byte [esi + 0x150], 1
mov dword [esi + 0x178], 0x77
call fcn.10025990
mov byte [esi + 0x151], 1
mov dword [esi + 0x178], pe_nt_image_headers32
call fcn.10025990
mov byte [esi + 0x152], 1
mov dword [esi + 0x178], 0x79
call fcn.10025990
mov byte [esi + 0x153], 1
mov dword [esi + 0x178], 0x7a
call fcn.10025990
nop dword [eax]
push ebp
sub esp, 0x74
lea esi, [ebp - 0x17c]
mov ebp, dword [esi + 0x168]
cmp byte [esi + 0x153], 1
jne 0x10022324
mov ecx, dword [esi + 0xc0]
call fcn.10023b10
add esp, 0x74
pop ebp
ret