Function at 0x1000507d
Capabilities:
Get system information on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword [ebp + 8]
sub esp, 0x344
push ebx
mov ebx, ecx
push esi
mov esi, dword [ebp + 0xc]
push edi
xor edi, edi
mov dword [ebx + 0x20], eax
mov dword [ebx], 0x1000154c
mov dword [ebx + 8], edi
mov dword [ebx + 0x18], edi
mov dword [ebx + 0x1c], edi
mov eax, dword [esi + 4]
mov dword [ebx + 0x24], eax
mov eax, dword [esi + 0xc]
mov dword [ebx + 0x2c], eax
mov eax, dword [esi + 0x24]
mov dword [ebx + 0x30], eax
mov eax, dword [esi + 0x24]
mov dword [ebx + 0x34], eax
mov eax, dword [esi]
mov dword [ebx + 0x3c], eax
mov eax, dword [esi + 0x20]
push 0x21
mov dword [ebx + 0x40], eax
lea eax, [ebx + 0xa0]
mov dword [ebx + 0x48], edi
mov dword [ebx + 0x4c], edi
mov dword [ebx + 0x50], edi
mov dword [ebx + 0x54], edi
mov dword [ebx + 0x58], edi
mov dword [ebx + 0x5c], edi
mov dword [ebx + 0x60], edi
mov dword [ebx + 0x64], edi
mov dword [ebx + 0x68], edi
mov dword [ebx + 0x70], edi
mov dword [ebx + 0x74], edi
mov dword [ebx + 0x9c], edi
pop ecx
mov dword [eax], edi
lea eax, [eax + 0xc]
mov dword [eax - 8], edi
mov dword [eax - 4], edi
sub ecx, 1
jne 0x100050fd
lea eax, [esp + 0x32c]
mov dword [ebx + 0x230], edi
mov dword [ebx + 0x234], edi
mov dword [ebx + 0x278], edi
push eax
mov dword [ebx + 0x27c], edi
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetSystemInfo]
mov eax, dword [esp + 0x330]
mov ecx, 0xa0007
mov dword [ebx + 0x6c], eax
mov eax, dword [esi + 0xc]
mov dword [ebx + 0x2c], eax
mov eax, dword [ebx + 0x24]
push 2
pop edx
cmp eax, ecx
ja 0x100051c2
je 0x1000649d
sub eax, 0xa0001
je 0x100064fc
sub eax, 1
je 0x1000649d
sub eax, 1
je 0x100064fc
sub eax, 1
je 0x1000649d
sub eax, edx
je 0x100064fc
mov eax, dword [0x1002100c]
cmp eax, 0x1002100c
je 0x10006916
test byte [eax + 0x1c], 1
je 0x10006916
cmp byte [eax + 0x19], 2
jb 0x10006916
push dword [eax + 0x14]
mov edx, 0x100034a0
push dword [eax + 0x10]
push 0xa
pop ecx
call fcn.100039e7
jmp 0x10006916
cmp eax, 0xa0009
je 0x100064fc
cmp eax, 0xa000a
je 0x1000649d
cmp eax, 0xb0008
jbe 0x10005186
cmp eax, 0xb000b
jbe 0x10005ea1
cmp eax, 0xb000f
je 0x1000586e
cmp eax, 0xb0010
jne 0x10005186
mov ecx, fcn.10017f70
mov dword [ebx + 0x28], 6
mov eax, fcn.10017ff0
mov dword [esp + 0x10], fcn.10018150
mov dword [esp + 0x14], fcn.10017650
mov dword [esp + 0x18], 0x10017800
mov dword [esp + 0x1c], 0x100177d0
mov dword [esp + 0x20], 0x10017890
mov dword [esp + 0x24], 0x10017570
mov dword [esp + 0x28], 0x100173f0
mov dword [esp + 0x2c], 0x100173c0
mov dword [esp + 0x30], 0x10017c20
mov dword [esp + 0x34], 0x10017ca0
mov dword [esp + 0x38], 0x10017cd0
mov dword [esp + 0x3c], 0x10017c60
mov dword [esp + 0x40], 0x10017d50
mov dword [esp + 0x44], fcn.10017860
mov dword [esp + 0x48], 0x100174e0
mov dword [esp + 0x4c], 0x10017510
mov dword [esp + 0x50], 0x10017540
mov dword [esp + 0x54], 0x10017450
mov dword [esp + 0x58], 0x10017420
mov dword [esp + 0x5c], 0x10017d80
mov dword [esp + 0x60], 0x10017dc0
mov dword [esp + 0x64], fcn.10017740
mov dword [esp + 0x68], 0x100176b0
mov dword [esp + 0x6c], 0x100174b0
mov dword [esp + 0x70], 0x10017df0
mov dword [esp + 0x74], 0x10017e30
mov dword [esp + 0x78], 0x100175c0
mov dword [esp + 0x7c], 0x10017680
mov dword [esp + 0x80], 0x100176e0
mov dword [esp + 0x84], 0x10017770
mov dword [esp + 0x88], fcn.100179e0
mov dword [esp + 0x8c], 0x10017ed0
mov dword [esp + 0x90], 0x10017f00
mov dword [esp + 0x94], 0x10017950
mov dword [esp + 0x98], 0x10017980
mov dword [esp + 0x9c], 0x100178c0
mov dword [esp + 0xa0], 0x10017bc0
mov dword [esp + 0xa4], 0x10017b90
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], fcn.100180d0
mov dword [esp + 0xb0], 0x100177a0
mov dword [esp + 0xb4], 0x10017480
mov dword [esp + 0xb8], 0x100178f0
mov dword [esp + 0xbc], 0x10017920
mov dword [esp + 0xc0], 0x10017a90
mov dword [esp + 0xc4], 0x10017ac0
mov dword [esp + 0xc8], 0x10017a30
mov dword [esp + 0xcc], 0x10017bf0
mov dword [esp + 0xd0], fcn.10017b30
mov dword [esp + 0xd4], 0x10017b60
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], 0x10018050
mov dword [esp + 0xe0], fcn.10017e60
mov dword [esp + 0xe4], fcn.10017ea0
mov dword [esp + 0xe8], 0x10018190
mov dword [esp + 0xec], 0x10018280
mov dword [esp + 0xf0], 0x100182e0
mov dword [esp + 0xf4], 0x10018310
mov dword [esp + 0xf8], fcn.10018370
mov dword [esp + 0xfc], 0x100183a0
mov dword [esp + 0x100], 0x100183d0
mov dword [esp + 0x104], 0x10018460
mov dword [esp + 0x108], 0x100184f0
mov dword [esp + 0x10c], 0x10018520
mov dword [esp + 0x110], 0x10018550
mov dword [esp + 0x114], 0x10018580
mov dword [esp + 0x118], 0x100185b0
mov dword [esp + 0x11c], 0x10018610
mov dword [esp + 0x120], 0x10018670
mov dword [esp + 0x124], 0x100186a0
mov dword [esp + 0x128], 0x100186d0
mov dword [esp + 0x12c], 0x10018700
mov dword [esp + 0x130], 0x10018730
mov dword [esp + 0x134], 0x100187c0
mov dword [esp + 0x138], 0x10018850
mov dword [esp + 0x13c], 0x10018880
mov dword [esp + 0x140], 0x100188b0
mov dword [esp + 0x144], 0x100188e0
mov dword [esp + 0x148], 0x10018910
mov dword [esp + 0x14c], 0x10018970
mov dword [esp + 0x150], 0x100189d0
mov dword [esp + 0x154], 0x10018a00
mov dword [esp + 0x158], 0x10018a60
mov dword [esp + 0x15c], 0x10018ac0
mov dword [esp + 0x160], 0x10018b20
mov dword [esp + 0x164], 0x10018b80
mov dword [esp + 0x168], 0x10018c10
mov dword [esp + 0x16c], 0x10018ca0
mov dword [esp + 0x170], 0x10018cd0
mov dword [esp + 0x174], 0x10018d00
mov dword [esp + 0x178], 0x10018d30
mov dword [esp + 0x17c], 0x10018d60
mov dword [esp + 0x180], 0x10018d90
mov dword [esp + 0x184], 0x10018dc0
mov dword [esp + 0x188], 0x10018df0
mov dword [esp + 0x18c], 0x10018e20
mov dword [esp + 0x190], 0x10018e80
mov dword [esp + 0x194], 0x10018eb0
mov dword [esp + 0x198], 0x10018ee0
mov dword [esp + 0x19c], 0x10018f20
mov dword [esp + 0x1a0], 0x10017a60
mov dword [esp + 0x1a4], eax
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], 0x10019260
mov dword [esp + 0x1b0], 0x10019290
mov dword [esp + 0x1b4], edi
mov dword [esp + 0x1b8], 0x10018f50
mov dword [esp + 0x1bc], 0x10018f80
mov dword [esp + 0x1c0], 0x10018fb0
mov dword [esp + 0x1c4], fcn.10019020
mov dword [esp + 0x1c8], 0x10019060
mov dword [esp + 0x1cc], 0x10019090
mov dword [esp + 0x1d0], 0x100190c0
mov dword [esp + 0x1d4], fcn.10019120
mov dword [esp + 0x1d8], 0x10019350
mov dword [esp + 0x1dc], 0x100193b0
mov dword [esp + 0x1e0], edi
mov dword [esp + 0x1e4], edi
mov dword [esp + 0x1e8], edi
mov dword [esp + 0x1ec], edi
mov dword [esp + 0x1f0], edi
mov dword [esp + 0x1f4], edi
mov dword [esp + 0x1f8], edi
mov dword [esp + 0x1fc], edi
mov dword [esp + 0x200], 0x100192f0
mov dword [esp + 0x204], 0x100193e0
mov dword [esp + 0x208], 0x10019410
mov dword [esp + 0x20c], 0x10019440
mov dword [esp + 0x210], 0x10019470
mov dword [esp + 0x214], 0x100194a0
mov dword [esp + 0x218], 0x100194d0
mov dword [esp + 0x21c], 0x10019620
mov dword [esp + 0x220], 0x10019190
mov dword [esp + 0x224], 0x10019160
mov dword [esp + 0x228], 0x100191c0
mov dword [esp + 0x22c], fcn.10019220
mov dword [esp + 0x230], 0x10019530
mov dword [esp + 0x234], 0x10019560
mov dword [esp + 0x238], 0x10019590
mov dword [esp + 0x23c], 0x100195c0
mov dword [esp + 0x240], 0x100195f0
mov dword [esp + 0x244], 0x10019500
mov dword [esp + 0x248], 0x10019650
mov dword [esp + 0x24c], 0x10019680
mov dword [esp + 0x250], 0x100196b0
mov dword [esp + 0x254], 0x100196e0
mov dword [esp + 0x258], edi
mov dword [esp + 0x25c], edi
mov dword [esp + 0x260], edi
mov dword [esp + 0x264], edi
mov dword [esp + 0x268], 0x10019710
mov dword [esp + 0x26c], 0x10019740
mov dword [esp + 0x270], 0x10017d10
mov dword [esp + 0x274], 0x100197b0
mov dword [esp + 0x278], 0x10019770
mov dword [esp + 0x27c], edi
mov dword [esp + 0x280], edi
mov dword [esp + 0x284], edi
mov dword [esp + 0x288], edi
mov dword [esp + 0x28c], edi
mov ecx, 0xa4
mov dword [esp + 0x290], edi
mov dword [esp + 0x294], edi
mov dword [esp + 0x298], edi
mov dword [esp + 0x29c], edi
mov edi, dword [esi + 0x10]
lea esi, [esp + 0x10]
jmp 0x1000690f
mov ecx, fcn.10017f70
mov dword [ebx + 0x28], 5
mov eax, fcn.10017ff0
mov dword [esp + 0x10], fcn.10018150
mov dword [esp + 0x14], fcn.10017650
mov dword [esp + 0x18], 0x10017800
mov dword [esp + 0x1c], 0x100177d0
mov dword [esp + 0x20], 0x10017890
mov dword [esp + 0x24], 0x10017570
mov dword [esp + 0x28], 0x100173f0
mov dword [esp + 0x2c], 0x100173c0
mov dword [esp + 0x30], 0x10017c20
mov dword [esp + 0x34], 0x10017ca0
mov dword [esp + 0x38], 0x10017cd0
mov dword [esp + 0x3c], 0x10017c60
mov dword [esp + 0x40], 0x10017d50
mov dword [esp + 0x44], fcn.10017860
mov dword [esp + 0x48], 0x100174e0
mov dword [esp + 0x4c], 0x10017510
mov dword [esp + 0x50], 0x10017540
mov dword [esp + 0x54], 0x10017450
mov dword [esp + 0x58], 0x10017420
mov dword [esp + 0x5c], 0x10017d80
mov dword [esp + 0x60], 0x10017dc0
mov dword [esp + 0x64], fcn.10017740
mov dword [esp + 0x68], 0x100176b0
mov dword [esp + 0x6c], 0x100174b0
mov dword [esp + 0x70], 0x10017df0
mov dword [esp + 0x74], 0x10017e30
mov dword [esp + 0x78], 0x100175c0
mov dword [esp + 0x7c], 0x10017680
mov dword [esp + 0x80], 0x100176e0
mov dword [esp + 0x84], 0x10017770
mov dword [esp + 0x88], fcn.100179e0
mov dword [esp + 0x8c], 0x10017ed0
mov dword [esp + 0x90], 0x10017f00
mov dword [esp + 0x94], 0x10017950
mov dword [esp + 0x98], 0x10017980
mov dword [esp + 0x9c], 0x100178c0
mov dword [esp + 0xa0], 0x10017bc0
mov dword [esp + 0xa4], 0x10017b90
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], fcn.100180d0
mov dword [esp + 0xb0], 0x100177a0
mov dword [esp + 0xb4], 0x10017480
mov dword [esp + 0xb8], 0x100178f0
mov dword [esp + 0xbc], 0x10017920
mov dword [esp + 0xc0], 0x10017a90
mov dword [esp + 0xc4], 0x10017ac0
mov dword [esp + 0xc8], 0x10017a30
mov dword [esp + 0xcc], 0x10017bf0
mov dword [esp + 0xd0], fcn.10017b30
mov dword [esp + 0xd4], 0x10017b60
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], 0x10018050
mov dword [esp + 0xe0], fcn.10017e60
mov dword [esp + 0xe4], fcn.10017ea0
mov dword [esp + 0xe8], 0x10018190
mov dword [esp + 0xec], 0x10018250
mov dword [esp + 0xf0], 0x100182e0
mov dword [esp + 0xf4], 0x10018310
mov dword [esp + 0xf8], fcn.10018370
mov dword [esp + 0xfc], 0x100183a0
mov dword [esp + 0x100], 0x100183d0
mov dword [esp + 0x104], 0x10018460
mov dword [esp + 0x108], 0x100184f0
mov dword [esp + 0x10c], 0x10018520
mov dword [esp + 0x110], 0x10018550
mov dword [esp + 0x114], 0x10018580
mov dword [esp + 0x118], 0x100185b0
mov dword [esp + 0x11c], 0x10018610
mov dword [esp + 0x120], 0x10018670
mov dword [esp + 0x124], 0x100186a0
mov dword [esp + 0x128], 0x100186d0
mov dword [esp + 0x12c], 0x10018700
mov dword [esp + 0x130], 0x10018730
mov dword [esp + 0x134], 0x100187c0
mov dword [esp + 0x138], 0x10018850
mov dword [esp + 0x13c], 0x10018880
mov dword [esp + 0x140], 0x100188b0
mov dword [esp + 0x144], 0x100188e0
mov dword [esp + 0x1b4], edi
mov dword [esp + 0x1e0], edi
mov dword [esp + 0x1e4], edi
mov dword [esp + 0x1e8], edi
mov dword [esp + 0x1ec], edi
mov dword [esp + 0x1f0], edi
mov dword [esp + 0x1f4], edi
mov dword [esp + 0x1f8], edi
mov dword [esp + 0x1fc], edi
mov dword [esp + 0x258], edi
mov dword [esp + 0x25c], edi
mov dword [esp + 0x260], edi
mov dword [esp + 0x264], edi
mov edi, dword [esi + 0x10]
lea esi, [esp + 0x10]
mov dword [esp + 0x1a8], ecx
mov ecx, 0x9b
mov dword [esp + 0x148], 0x10018910
mov dword [esp + 0x14c], 0x10018970
mov dword [esp + 0x150], 0x100189d0
mov dword [esp + 0x154], 0x10018a00
mov dword [esp + 0x158], 0x10018a60
mov dword [esp + 0x15c], 0x10018ac0
mov dword [esp + 0x160], 0x10018b20
mov dword [esp + 0x164], 0x10018b80
mov dword [esp + 0x168], 0x10018c10
mov dword [esp + 0x16c], 0x10018ca0
mov dword [esp + 0x170], 0x10018cd0
mov dword [esp + 0x174], 0x10018d00
mov dword [esp + 0x178], 0x10018d30
mov dword [esp + 0x17c], 0x10018d60
mov dword [esp + 0x180], 0x10018d90
mov dword [esp + 0x184], 0x10018dc0
mov dword [esp + 0x188], 0x10018df0
mov dword [esp + 0x18c], 0x10018e20
mov dword [esp + 0x190], 0x10018e50
mov dword [esp + 0x194], 0x10018eb0
mov dword [esp + 0x198], 0x10018ee0
mov dword [esp + 0x19c], 0x10018f20
mov dword [esp + 0x1a0], 0x10017a60
mov dword [esp + 0x1a4], eax
mov dword [esp + 0x1ac], 0x10019260
mov dword [esp + 0x1b0], 0x10019290
mov dword [esp + 0x1b8], 0x10018f50
mov dword [esp + 0x1bc], 0x10018f80
mov dword [esp + 0x1c0], 0x10018fb0
mov dword [esp + 0x1c4], fcn.10019020
mov dword [esp + 0x1c8], 0x10019060
mov dword [esp + 0x1cc], 0x10019090
mov dword [esp + 0x1d0], 0x100190c0
mov dword [esp + 0x1d4], fcn.10019120
mov dword [esp + 0x1d8], 0x10019350
mov dword [esp + 0x1dc], 0x100193b0
mov dword [esp + 0x200], 0x100192f0
mov dword [esp + 0x204], 0x100193e0
mov dword [esp + 0x208], 0x10019410
mov dword [esp + 0x20c], 0x10019440
mov dword [esp + 0x210], 0x10019470
mov dword [esp + 0x214], 0x100194a0
mov dword [esp + 0x218], 0x100194d0
mov dword [esp + 0x21c], 0x10019620
mov dword [esp + 0x220], 0x10019190
mov dword [esp + 0x224], 0x10019160
mov dword [esp + 0x228], 0x100191c0
mov dword [esp + 0x22c], fcn.10019220
mov dword [esp + 0x230], 0x10019530
mov dword [esp + 0x234], 0x10019560
mov dword [esp + 0x238], 0x10019590
mov dword [esp + 0x23c], 0x100195c0
mov dword [esp + 0x240], 0x100195f0
mov dword [esp + 0x244], 0x10019500
mov dword [esp + 0x248], 0x10019650
mov dword [esp + 0x24c], 0x10019680
mov dword [esp + 0x250], 0x100196b0
mov dword [esp + 0x254], 0x100196e0
mov dword [esp + 0x268], 0x10019710
mov dword [esp + 0x26c], 0x10019740
mov dword [esp + 0x270], 0x10017d10
mov dword [esp + 0x274], 0x100197b0
mov dword [esp + 0x278], 0x10019770
jmp 0x1000690f
mov ecx, 0x10017f30
mov dword [ebx + 0x28], 4
mov eax, fcn.10017ff0
mov dword [esp + 0x10], 0x10018110
mov dword [esp + 0x14], 0x10017620
mov dword [esp + 0x18], 0x10017800
mov dword [esp + 0x1c], 0x100177d0
mov dword [esp + 0x20], 0x10017890
mov dword [esp + 0x24], 0x10017570
mov dword [esp + 0x28], 0x100173f0
mov dword [esp + 0x2c], 0x100173c0
mov dword [esp + 0x30], 0x10017c20
mov dword [esp + 0x34], 0x10017ca0
mov dword [esp + 0x38], 0x10017cd0
mov dword [esp + 0x3c], 0x10017c60
mov dword [esp + 0x40], 0x10017d50
mov dword [esp + 0x44], 0x10017830
mov dword [esp + 0x48], 0x100174e0
mov dword [esp + 0x4c], 0x10017510
mov dword [esp + 0x50], 0x10017540
mov dword [esp + 0x54], 0x10017450
mov dword [esp + 0x58], 0x10017420
mov dword [esp + 0x5c], 0x10017d80
mov dword [esp + 0x60], 0x10017dc0
mov dword [esp + 0x64], 0x10017710
mov dword [esp + 0x68], 0x100176b0
mov dword [esp + 0x6c], 0x100174b0
mov dword [esp + 0x70], 0x10017df0
mov dword [esp + 0x74], 0x10017e30
mov dword [esp + 0x78], 0x100175c0
mov dword [esp + 0x7c], 0x10017680
mov dword [esp + 0x80], 0x100176e0
mov dword [esp + 0x84], 0x10017770
mov dword [esp + 0x88], fcn.100179e0
mov dword [esp + 0x8c], 0x10017ed0
mov dword [esp + 0x90], 0x10017f00
mov dword [esp + 0x94], 0x10017950
mov dword [esp + 0x98], 0x10017980
mov dword [esp + 0x9c], 0x100178c0
mov dword [esp + 0xa0], 0x10017bc0
mov dword [esp + 0xa4], 0x10017b90
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], 0x10018090
mov dword [esp + 0xb0], 0x100177a0
mov dword [esp + 0xb4], 0x10017480
mov dword [esp + 0xb8], 0x100178f0
mov dword [esp + 0xbc], 0x10017920
mov dword [esp + 0xc0], 0x10017a90
mov dword [esp + 0xc4], 0x10017ac0
mov dword [esp + 0xc8], 0x10017a30
mov dword [esp + 0xcc], 0x10017bf0
mov dword [esp + 0xd0], 0x10017b00
mov dword [esp + 0xd4], 0x10017b60
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], 0x10018050
mov dword [esp + 0xe0], fcn.10017e60
mov dword [esp + 0xe4], fcn.10017ea0
mov dword [esp + 0xe8], 0x10018190
mov dword [esp + 0xec], 0x10018220
mov dword [esp + 0xf0], 0x100182e0
mov dword [esp + 0xf4], 0x10018310
mov dword [esp + 0xf8], fcn.10018370
mov dword [esp + 0xfc], 0x100183a0
mov dword [esp + 0x100], 0x100183d0
mov dword [esp + 0x104], 0x10018460
mov dword [esp + 0x108], 0x100184f0
mov dword [esp + 0x10c], 0x10018520
mov dword [esp + 0x110], 0x10018550
mov dword [esp + 0x114], 0x10018580
mov dword [esp + 0x118], 0x100185b0
mov dword [esp + 0x11c], 0x10018610
mov dword [esp + 0x120], 0x10018670
mov dword [esp + 0x124], 0x100186a0
mov dword [esp + 0x128], 0x100186d0
mov dword [esp + 0x12c], 0x10018700
mov dword [esp + 0x130], 0x10018730
mov dword [esp + 0x134], 0x10018790
mov dword [esp + 0x138], 0x10018820
mov dword [esp + 0x13c], 0x10018880
mov dword [esp + 0x140], 0x100188b0
mov dword [esp + 0x144], 0x100188e0
mov dword [esp + 0x1b4], edi
mov dword [esp + 0x1e0], edi
mov dword [esp + 0x1e4], edi
mov dword [esp + 0x1e8], edi
mov dword [esp + 0x1ec], edi
mov dword [esp + 0x1f0], edi
mov dword [esp + 0x1f4], edi
mov dword [esp + 0x1f8], edi
mov dword [esp + 0x1fc], edi
mov dword [esp + 0x258], edi
mov dword [esp + 0x25c], edi
mov dword [esp + 0x260], edi
mov dword [esp + 0x264], edi
mov edi, dword [esi + 0x10]
lea esi, [esp + 0x10]
mov dword [esp + 0x1a8], ecx
mov ecx, 0x96
mov dword [esp + 0x148], 0x10018910
mov dword [esp + 0x14c], 0x10018940
mov dword [esp + 0x150], 0x100189a0
mov dword [esp + 0x154], 0x10018a00
mov dword [esp + 0x158], 0x10018a30
mov dword [esp + 0x15c], 0x10018a90
mov dword [esp + 0x160], 0x10018af0
mov dword [esp + 0x164], 0x10018b50
mov dword [esp + 0x168], 0x10018be0
mov dword [esp + 0x16c], 0x10018c70
mov dword [esp + 0x170], 0x10018cd0
mov dword [esp + 0x174], 0x10018d00
mov dword [esp + 0x178], 0x10018d30
mov dword [esp + 0x17c], 0x10018d60
mov dword [esp + 0x180], 0x10018d90
mov dword [esp + 0x184], 0x10018dc0
mov dword [esp + 0x188], 0x10018df0
mov dword [esp + 0x18c], 0x10018e20
mov dword [esp + 0x190], 0x10018e50
mov dword [esp + 0x194], 0x10018eb0
mov dword [esp + 0x198], 0x10018ee0
mov dword [esp + 0x19c], 0x10018f20
mov dword [esp + 0x1a0], 0x10017a60
mov dword [esp + 0x1a4], eax
mov dword [esp + 0x1ac], 0x10019260
mov dword [esp + 0x1b0], 0x10019290
mov dword [esp + 0x1b8], 0x10018f50
mov dword [esp + 0x1bc], 0x10018f80
mov dword [esp + 0x1c0], 0x10018fb0
mov dword [esp + 0x1c4], 0x10018ff0
mov dword [esp + 0x1c8], 0x10019060
mov dword [esp + 0x1cc], 0x10019090
mov dword [esp + 0x1d0], 0x100190c0
mov dword [esp + 0x1d4], 0x100190f0
mov dword [esp + 0x1d8], 0x10019320
mov dword [esp + 0x1dc], 0x10019380
mov dword [esp + 0x200], 0x100192c0
mov dword [esp + 0x204], 0x100193e0
mov dword [esp + 0x208], 0x10019410
mov dword [esp + 0x20c], 0x10019440
mov dword [esp + 0x210], 0x10019470
mov dword [esp + 0x214], 0x100194a0
mov dword [esp + 0x218], 0x100194d0
mov dword [esp + 0x21c], 0x10019620
mov dword [esp + 0x220], 0x10019190
mov dword [esp + 0x224], 0x10019160
mov dword [esp + 0x228], 0x100191c0
mov dword [esp + 0x22c], 0x100191f0
mov dword [esp + 0x230], 0x10019530
mov dword [esp + 0x234], 0x10019560
mov dword [esp + 0x238], 0x10019590
mov dword [esp + 0x23c], 0x100195c0
mov dword [esp + 0x240], 0x100195f0
mov dword [esp + 0x244], 0x10019500
mov dword [esp + 0x248], 0x10019650
mov dword [esp + 0x24c], 0x10019680
mov dword [esp + 0x250], 0x100196b0
mov dword [esp + 0x254], 0x100196e0
jmp 0x1000690f
mov dword [ebx + 0x28], 3
mov edi, dword [esi + 0x10]
lea esi, [esp + 0x10]
mov dword [esp + 0xec], 0x100181f0
mov dword [esp + 0x104], 0x10018430
mov dword [esp + 0x108], 0x100184c0
mov dword [esp + 0x134], 0x10018790
mov dword [esp + 0x138], 0x10018820
mov dword [esp + 0x1a4], 0x10018020
mov dword [esp + 0x1a8], 0x10017fb0
push 0x67
jmp 0x1000653f
mov dword [ebx + 0x28], edx
mov edi, dword [esi + 0x10]
lea esi, [esp + 0x10]
mov dword [esp + 0xec], 0x100181c0
mov dword [esp + 0x104], 0x10018400
mov dword [esp + 0x108], 0x10018490
mov dword [esp + 0x134], 0x10018760
mov dword [esp + 0x138], 0x100187f0
push 0x65
mov dword [esp + 0x4c], 0x100174e0
mov dword [esp + 0x48], 0x10017830
mov dword [esp + 0x44], 0x10017d50
mov dword [esp + 0x40], 0x10017c60
mov dword [esp + 0x3c], 0x10017cd0
mov dword [esp + 0x38], 0x10017ca0
mov dword [esp + 0x34], 0x10017c20
mov dword [esp + 0x30], 0x100173c0
mov dword [esp + 0x2c], 0x100173f0
mov dword [esp + 0x28], 0x10017570
mov dword [esp + 0x24], 0x10017890
mov dword [esp + 0x20], 0x100177d0
mov dword [esp + 0x1c], 0x10017800
mov dword [esp + 0x18], 0x10017620
mov dword [esp + 0x14], 0x10018110
mov dword [esp + 0x9c], 0x10017980
mov dword [esp + 0x98], 0x10017950
mov dword [esp + 0x94], 0x10017f00
mov dword [esp + 0x90], 0x10017ed0
mov dword [esp + 0x8c], 0x100179b0
mov dword [esp + 0x88], 0x10017770
mov dword [esp + 0x84], 0x100176e0
mov dword [esp + 0x80], 0x10017680
mov dword [esp + 0x7c], 0x100175c0
mov dword [esp + 0x78], 0x10017e30
mov dword [esp + 0x74], 0x10017df0
mov dword [esp + 0x70], 0x100174b0
mov dword [esp + 0x6c], 0x100176b0
mov dword [esp + 0x68], 0x10017710
mov dword [esp + 0x64], 0x10017dc0
mov dword [esp + 0x60], 0x10017d80
mov dword [esp + 0x5c], 0x10017420
mov dword [esp + 0x58], 0x10017450
mov dword [esp + 0x54], 0x10017540
mov dword [esp + 0x50], 0x10017510
mov dword [esp + 0xec], 0x10018190
mov dword [esp + 0xe8], fcn.10017ea0
mov dword [esp + 0xe4], fcn.10017e60
mov dword [esp + 0xe0], 0x10018050
mov dword [esp + 0xdc], fcn.10017ff0
mov dword [esp + 0xd8], 0x10017b60
mov dword [esp + 0xd4], 0x10017b00
mov dword [esp + 0xd0], 0x10017bf0
mov dword [esp + 0xcc], 0x10017a30
mov dword [esp + 0xc8], 0x10017ac0
mov dword [esp + 0xc4], 0x10017a90
mov dword [esp + 0xc0], 0x10017920
mov dword [esp + 0xbc], 0x100178f0
mov dword [esp + 0xb8], 0x10017480
mov dword [esp + 0xb4], 0x100177a0
mov dword [esp + 0xb0], 0x10018090
mov dword [esp + 0xac], 0x10017f30
mov dword [esp + 0xa8], 0x10017b90
mov dword [esp + 0xa4], 0x10017bc0
mov dword [esp + 0xa0], 0x100178c0
mov dword [esp + 0x150], 0x10018940
mov dword [esp + 0x14c], 0x10018910
mov dword [esp + 0x148], 0x100188e0
mov dword [esp + 0x144], 0x100188b0
mov dword [esp + 0x140], 0x10018880
mov dword [esp + 0x134], 0x10018730
mov dword [esp + 0x130], 0x10018700
mov dword [esp + 0x12c], 0x100186d0
mov dword [esp + 0x128], 0x100186a0
mov dword [esp + 0x124], 0x10018640
mov dword [esp + 0x120], 0x100185e0
mov dword [esp + 0x11c], 0x100185b0
mov dword [esp + 0x118], 0x10018580
mov dword [esp + 0x114], 0x10018550
mov dword [esp + 0x110], 0x10018520
mov dword [esp + 0x104], 0x100183d0
mov dword [esp + 0x100], 0x100183a0
mov dword [esp + 0xfc], 0x10018340
mov dword [esp + 0xf8], 0x10018310
mov dword [esp + 0xf4], 0x100182b0
pop ecx
mov dword [esp + 0x1a0], 0x10017a60
mov dword [esp + 0x19c], 0x10018f20
mov dword [esp + 0x198], 0x10018ee0
mov dword [esp + 0x194], 0x10018eb0
mov dword [esp + 0x190], 0x10018e50
mov dword [esp + 0x18c], 0x10018e20
mov dword [esp + 0x188], 0x10018df0
mov dword [esp + 0x184], 0x10018dc0
mov dword [esp + 0x180], 0x10018d90
mov dword [esp + 0x17c], 0x10018d60
mov dword [esp + 0x178], 0x10018d30
mov dword [esp + 0x174], 0x10018d00
mov dword [esp + 0x170], 0x10018cd0
mov dword [esp + 0x16c], 0x10018c40
mov dword [esp + 0x168], 0x10018bb0
mov dword [esp + 0x164], 0x10018b50
mov dword [esp + 0x160], 0x10018af0
mov dword [esp + 0x15c], 0x10018a90
mov dword [esp + 0x158], 0x10018a30
mov dword [esp + 0x154], 0x10018a00
mov dword [esp + 0x150], 0x100189a0
mov dword [ebx + 0x44], edi
rep movsd dword es:[edi], dword [esi]
xor edi, edi
mov dword [esp + 0x2d4], edi
lea esi, [esp + 0x2a8]
mov dword [esp + 0x2d8], edi
mov dword [esp + 0x2dc], edi
mov dword [esp + 0x2e0], edi
mov dword [esp + 0x2e4], edi
mov dword [esp + 0x2ec], edi
mov edi, dword [ebp + 0xc]
push 0x12
pop ecx
mov dword [esp + 0x2a8], 0x100197e0
mov edi, dword [edi + 0x1c]
mov dword [esp + 0x2ac], 0x10019870
mov dword [esp + 0x2b0], 0x100198a0
mov dword [esp + 0x2b4], 0x100198d0
mov dword [esp + 0x2b8], 0x10019900
mov dword [esp + 0x2bc], 0x10019840
mov dword [esp + 0x2c0], 0x10019930
mov dword [esp + 0x2c4], 0x10019990
mov dword [esp + 0x2c8], fcn.10019960
mov dword [esp + 0x2cc], 0x100199c0
mov dword [esp + 0x2d0], 0x100199f0
mov dword [esp + 0x2e8], 0x10019810
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp + 0xc]
push 0x38
push 0
mov eax, dword [edi + 0x18]
mov dword [ebx + 0x38], eax
lea eax, [ebx + 0x240]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [esp + 0x2f0]
push 0x38
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [esp + 0x2a0], 3
lea eax, [esp + 0x2a0]
mov dword [esp + 0x300], 4
mov dword [esp + 0x2fc], eax
lea ecx, [esp + 0x2f0]
mov eax, dword [ebx + 0x2c]
push ecx
push dword [ebx + 0x3c]
mov esi, dword [eax + 0x38]
mov ecx, esi
call dword [0x10022110]
call esi
mov esi, eax
test esi, esi
js 0x10006adb
mov eax, dword [esp + 0x304]
mov ecx, ebx
mov dword [ebx + 0x1c], eax
mov eax, dword [esp + 0x308]
mov dword [ebx + 0x50], eax
mov eax, dword [esp + 0x310]
mov dword [ebx + 0x54], eax
mov eax, dword [esp + 0x318]
mov dword [ebx + 0x58], eax
mov eax, dword [esp + 0x30c]
add eax, 0xfffffffc
mov dword [ebx + 0x5c], eax
mov eax, dword [esp + 0x314]
mov dword [ebx + 0x60], eax
mov eax, dword [esp + 0x31c]
mov dword [ebx + 0x64], eax
xor eax, eax
mov dword [ebx + 0x68], eax
mov dword [ebx + 0x74], eax
mov dword [ebx + 0x70], eax
call fcn.10011fec
mov ecx, ebx
call fcn.1002cf75
mov esi, eax
test esi, esi
js 0x10006adb
cmp dword [ebx + 0x28], 5
jg 0x10006ac7
push dword [edi + 0x10]
mov ecx, ebx
call fcn.10006ccd
mov eax, dword [edi + 0x2c]
pop edi
pop esi
mov dword [eax], 0x10019a20
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [0x1002100c]
cmp eax, 0x1002100c
je 0x10006b07
test byte [eax + 0x1c], 1
je 0x10006b07
cmp byte [eax + 0x19], 2
jb 0x10006b07
push esi
push dword [eax + 0x14]
mov edx, 0x100034a0
push dword [eax + 0x10]
push 0xb
pop ecx
call fcn.10003a05
push esi
mov ecx, ebx
call fcn.10010ac3
mov ecx, ebx
call fcn.10006d16
push 0x10020aa8
lea eax, [esp + 0x2a8]
mov dword [esp + 0x2a8], esi
push eax
call sub.msvcrt.dll__CxxThrowException
int3