Function at 0x10006020
Capabilities:
Inspect section memory permissions
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1bf4
call fcn.1001bb80
mov eax, dword [0x10033650]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x1b9c], 0
mov dword [ebp - 0x1b98], 0
mov dword [ebp - 0x1ba4], 0
mov dword [ebp - 0x1ba0], 0
mov dword [ebp - 0x1bb0], 0
mov dword [ebp - 0x1bac], 0
mov dword [ebp - 0x1ba8], 0
mov dword [ebp - 0x1bb4], 0
lea ecx, [ebp - 0x9dc]
call fcn.100180e0
push eax
mov eax, 1
shl eax, 2
movzx ecx, byte [eax + 0x10032b40]
push ecx
lea ecx, [ebp - 0x9c4]
call fcn.100180e0
push eax
mov edx, 1
shl edx, 1
movzx eax, byte [edx + 0x10032bc0]
push eax
lea ecx, [ebp - 0x9ac]
call fcn.100180e0
push eax
mov ecx, 1
shl ecx, 0
movzx edx, byte [ecx + 0x10032580]
push edx
lea ecx, [ebp - 0x994]
call fcn.100180e0
push eax
mov eax, 1
shl eax, 3
movzx ecx, byte [eax + str.dRdVzkdzd]
push ecx
lea edx, [ebp - 0x97c]
push edx
call fcn.10017880
add esp, 0xc
push eax
mov eax, 1
shl eax, 2
movzx ecx, byte [eax + str.GgrggwIIgZZ]
push ecx
lea ecx, [ebp - 0x964]
call fcn.100180e0
push eax
lea edx, [ebp - 0x94c]
push edx
call fcn.10017850
add esp, 0xc
push eax
lea eax, [ebp - 0x934]
push eax
call fcn.10017830
add esp, 0xc
push eax
lea ecx, [ebp - 0x91c]
push ecx
call fcn.10017850
add esp, 0xc
push eax
lea edx, [ebp - 0x904]
push edx
call fcn.10017830
add esp, 0xc
push eax
lea eax, [ebp - 0x8ec]
push eax
call fcn.10017850
add esp, 0xc
push eax
lea ecx, [ebp - 0x8d4]
push ecx
call fcn.10017830
add esp, 0xc
push eax
lea edx, [ebp - 0x8bc]
push edx
call fcn.10017850
add esp, 0xc
push eax
lea eax, [ebp - 0x8a4]
push eax
call fcn.10017830
add esp, 0xc
mov ecx, eax
call fcn.100185e0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x100340a8], eax
cmp dword [0x100340a8], 0
je 0x10006551
push 2
mov ecx, 0x10033fe8
call fcn.10018260
movsx ecx, byte [eax]
push ecx
call fcn.10020301
add esp, 4
push eax
lea ecx, [ebp - 0x88c]
call fcn.100180e0
or dword [ebp - 0x1b9c], 1
push eax
lea edx, [ebp - 0x874]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b9c], 2
push eax
lea ecx, [ebp - 0x85c]
call fcn.100180e0
or dword [ebp - 0x1b9c], 4
push eax
mov eax, 1
imul ecx, eax, 3
movzx edx, byte [ecx + 0x10032a80]
push edx
lea eax, [ebp - 0x844]
push eax
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1b9c], 8
push eax
lea ecx, [ebp - 0x82c]
call fcn.100180e0
or dword [ebp - 0x1b9c], 0x10
push eax
mov ecx, 1
imul edx, ecx, 0
movzx eax, byte [edx + 0x10032200]
push eax
lea ecx, [ebp - 0x814]
push ecx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1b9c], 0x20
push eax
lea ecx, [ebp - 0x7fc]
call fcn.100180e0
or dword [ebp - 0x1b9c], 0x40
push eax
mov edx, 1
imul eax, edx, 3
movzx ecx, byte [eax + 0x10032340]
push ecx
lea ecx, [ebp - 0x7e4]
call fcn.100180e0
or dword [ebp - 0x1b9c], 0x80
push eax
push 1
mov ecx, 0x10034018
call fcn.10018260
mov dl, byte [eax]
movzx eax, dl
push eax
mov ecx, 1
shl ecx, 2
movzx edx, byte [ecx + str.fbPFbPWwbZIQo]
push edx
lea ecx, [ebp - 0x7cc]
call fcn.100180e0
or dword [ebp - 0x1b9c], 0x100
push eax
lea ecx, [ebp - 0x7b4]
call fcn.100180e0
or dword [ebp - 0x1b9c], 0x200
push eax
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ecx + 0x10032800]
push edx
call fcn.10020301
add esp, 4
push eax
mov eax, 1
imul ecx, eax, 6
movzx edx, byte [ecx + 0x10032a80]
push edx
lea ecx, [ebp - 0x79c]
call fcn.100180e0
or dword [ebp - 0x1b9c], 0x400
push eax
mov eax, 1
imul ecx, eax, 3
movzx edx, byte [ecx + 0x10032340]
push edx
lea ecx, [ebp - 0x784]
call fcn.100180e0
or dword [ebp - 0x1b9c], 0x800
push eax
lea eax, [ebp - 0x3c4]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b9c], 0x1000
push eax
lea ecx, [ebp - 0x754]
call fcn.100180e0
or dword [ebp - 0x1b9c], 0x2000
push eax
mov ecx, 1
shl ecx, 3
movsx edx, byte [ecx + str.GgrggwIIgZZ]
push edx
call fcn.10020301
add esp, 4
push eax
lea eax, [ebp - 0x73c]
push eax
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1b9c], 0x4000
push eax
lea ecx, [ebp - 0x724]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b9c], 0x8000
push eax
lea edx, [ebp - 0x70c]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b9c], 0x10000
push eax
lea eax, [ebp - 0x6f4]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b9c], 0x20000
push eax
lea ecx, [ebp - 0x6dc]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b9c], 0x40000
push eax
lea edx, [ebp - 0x6c4]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b9c], 0x80000
push eax
lea eax, [ebp - 0x6ac]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b9c], 0x100000
push eax
lea ecx, [ebp - 0x694]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b9c], 0x200000
push eax
lea edx, [ebp - 0x67c]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b9c], 0x400000
push eax
lea eax, [ebp - 0x664]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b9c], 0x800000
push eax
lea ecx, [ebp - 0x64c]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b9c], 0x1000000
push eax
lea edx, [ebp - 0x634]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b9c], 0x2000000
push eax
lea eax, [ebp - 0x61c]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b9c], 0x4000000
push eax
lea ecx, [ebp - 0x604]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b9c], 0x8000000
push eax
lea edx, [ebp - 0x5ec]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b9c], 0x10000000
mov ecx, eax
call fcn.100185e0
push eax
mov eax, dword [0x100340a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x1bc8], eax
jmp 0x10006aa3
lea ecx, [ebp - 0x5d4]
call fcn.100180e0
or dword [ebp - 0x1b9c], 0x20000000
push eax
mov ecx, 1
shl ecx, 2
movzx edx, byte [ecx + 0x10032b40]
push edx
lea ecx, [ebp - 0x5bc]
call fcn.100180e0
or dword [ebp - 0x1b9c], 0x40000000
push eax
mov eax, 1
shl eax, 1
movzx ecx, byte [eax + 0x10032bc0]
push ecx
lea ecx, [ebp - 0x5a4]
call fcn.100180e0
or dword [ebp - 0x1b9c], 0x80000000
push eax
mov edx, 1
shl edx, 0
movzx eax, byte [edx + 0x10032580]
push eax
lea ecx, [ebp - 0x58c]
call fcn.100180e0
or dword [ebp - 0x1b98], 1
push eax
mov ecx, 1
shl ecx, 3
movzx edx, byte [ecx + str.dRdVzkdzd]
push edx
lea eax, [ebp - 0x574]
push eax
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1b98], 2
push eax
mov ecx, 1
shl ecx, 2
movzx edx, byte [ecx + str.GgrggwIIgZZ]
push edx
lea ecx, [ebp - 0x55c]
call fcn.100180e0
or dword [ebp - 0x1b98], 4
push eax
lea eax, [ebp - 0x544]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b98], 8
push eax
lea ecx, [ebp - 0x52c]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b98], 0x10
push eax
lea edx, [ebp - 0x514]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b98], 0x20
push eax
lea eax, [ebp - 0x4fc]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b98], 0x40
push eax
lea ecx, [ebp - 0x4e4]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b98], 0x80
push eax
lea edx, [ebp - 0x4cc]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b98], 0x100
push eax
lea eax, [ebp - 0x4b4]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b98], 0x200
push eax
lea ecx, [ebp - 0x49c]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b98], 0x400
mov ecx, eax
call fcn.100185e0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x100340a8], eax
cmp dword [0x100340a8], 0
je 0x10006a8d
push 2
mov ecx, 0x10033fe8
call fcn.10018260
movsx edx, byte [eax]
push edx
call fcn.10020301
add esp, 4
push eax
lea ecx, [ebp - 0x484]
call fcn.100180e0
or dword [ebp - 0x1b98], 0x800
push eax
lea eax, [ebp - 0x46c]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b98], 0x1000
push eax
lea ecx, [ebp - 0x454]
call fcn.100180e0
or dword [ebp - 0x1b98], 0x2000
push eax
mov ecx, 1
imul edx, ecx, 3
movzx eax, byte [edx + 0x10032a80]
push eax
lea ecx, [ebp - 0x43c]
push ecx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1b98], 0x4000
push eax
lea ecx, [ebp - 0x424]
call fcn.100180e0
or dword [ebp - 0x1b98], 0x8000
push eax
mov edx, 1
imul eax, edx, 0
movzx ecx, byte [eax + 0x10032200]
push ecx
lea edx, [ebp - 0x40c]
push edx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1b98], 0x10000
push eax
lea ecx, [ebp - 0x3f4]
call fcn.100180e0
or dword [ebp - 0x1b98], 0x20000
push eax
mov eax, 1
imul ecx, eax, 3
movzx edx, byte [ecx + 0x10032340]
push edx
lea ecx, [ebp - 0x3dc]
call fcn.100180e0
or dword [ebp - 0x1b98], 0x40000
push eax
push 1
mov ecx, 0x10034018
call fcn.10018260
mov al, byte [eax]
movzx ecx, al
push ecx
mov edx, 1
shl edx, 2
movzx eax, byte [edx + str.fbPFbPWwbZIQo]
push eax
lea ecx, [ebp - 0x1c]
call fcn.100180e0
or dword [ebp - 0x1b98], 0x80000
push eax
lea ecx, [ebp - 0x3ac]
call fcn.100180e0
or dword [ebp - 0x1b98], 0x100000
push eax
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [edx + 0x10032800]
push eax
call fcn.10020301
add esp, 4
push eax
mov ecx, 1
imul edx, ecx, 6
movzx eax, byte [edx + 0x10032a80]
push eax
lea ecx, [ebp - 0x394]
call fcn.100180e0
or dword [ebp - 0x1b98], 0x200000
push eax
mov ecx, 1
imul edx, ecx, 3
movzx eax, byte [edx + 0x10032340]
push eax
lea ecx, [ebp - 0x37c]
call fcn.100180e0
or dword [ebp - 0x1b98], 0x400000
push eax
lea ecx, [ebp - 0x364]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b98], 0x800000
push eax
lea ecx, [ebp - 0x34c]
call fcn.100180e0
or dword [ebp - 0x1b98], 0x1000000
push eax
mov edx, 1
shl edx, 3
movsx eax, byte [edx + str.GgrggwIIgZZ]
push eax
call fcn.10020301
add esp, 4
push eax
lea ecx, [ebp - 0x334]
push ecx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1b98], 0x2000000
push eax
lea edx, [ebp - 0x31c]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b98], 0x4000000
push eax
lea eax, [ebp - 0x304]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b98], 0x8000000
push eax
lea ecx, [ebp - 0x2ec]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b98], 0x10000000
push eax
lea edx, [ebp - 0x2d4]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1b98], 0x20000000
push eax
lea eax, [ebp - 0x2bc]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b98], 0x40000000
push eax
lea ecx, [ebp - 0x2a4]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1b98], 0x80000000
push eax
lea edx, [ebp - 0x28c]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba4], 1
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba4], 2
push eax
lea ecx, [ebp - 0x25c]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba4], 4
push eax
lea edx, [ebp - 0x244]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba4], 8
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba4], 0x10
push eax
lea ecx, [ebp - 0x214]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba4], 0x20
push eax
lea edx, [ebp - 0x1fc]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba4], 0x40
push eax
lea eax, [ebp - 0x1e4]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba4], 0x80
mov ecx, eax
call fcn.100185e0
push eax
mov ecx, dword [0x100340a8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x1bc4], eax
jmp 0x10006a97
mov dword [ebp - 0x1bc4], 0
mov edx, dword [ebp - 0x1bc4]
mov dword [ebp - 0x1bc8], edx
lea eax, [ebp - 0x1bf4]
push eax
push 0x18
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 0x1bc8]
test eax, eax
jne 0x10006ac6
mov dword [ebp - 0x1bcc], 1
jmp 0x10006ad0
mov dword [ebp - 0x1bcc], 0
mov dl, byte [ebp - 0x1bcc]
mov byte [ebp - 0x1bbd], dl
mov eax, dword [ebp - 0x1ba4]
and eax, 0x80
je 0x10006afe
and dword [ebp - 0x1ba4], 0xffffff7f
lea ecx, [ebp - 0x1e4]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba4]
and ecx, 0x40
je 0x10006b1b
and dword [ebp - 0x1ba4], 0xffffffbf
lea ecx, [ebp - 0x1fc]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba4]
and edx, 0x20
je 0x10006b38
and dword [ebp - 0x1ba4], 0xffffffdf
lea ecx, [ebp - 0x214]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba4]
and eax, 0x10
je 0x10006b55
and dword [ebp - 0x1ba4], 0xffffffef
lea ecx, [ebp - 0x22c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba4]
and ecx, 8
je 0x10006b72
and dword [ebp - 0x1ba4], 0xfffffff7
lea ecx, [ebp - 0x244]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba4]
and edx, 4
je 0x10006b8f
and dword [ebp - 0x1ba4], 0xfffffffb
lea ecx, [ebp - 0x25c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba4]
and eax, 2
je 0x10006bac
and dword [ebp - 0x1ba4], 0xfffffffd
lea ecx, [ebp - 0x274]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba4]
and ecx, 1
je 0x10006bc9
and dword [ebp - 0x1ba4], 0xfffffffe
lea ecx, [ebp - 0x28c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b98]
and edx, 0x80000000
je 0x10006bec
and dword [ebp - 0x1b98], 0x7fffffff
lea ecx, [ebp - 0x2a4]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b98]
and eax, 0x40000000
je 0x10006c0e
and dword [ebp - 0x1b98], 0xbfffffff
lea ecx, [ebp - 0x2bc]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b98]
and ecx, 0x20000000
je 0x10006c31
and dword [ebp - 0x1b98], 0xdfffffff
lea ecx, [ebp - 0x2d4]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b98]
and edx, 0x10000000
je 0x10006c54
and dword [ebp - 0x1b98], 0xefffffff
lea ecx, [ebp - 0x2ec]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b98]
and eax, 0x8000000
je 0x10006c76
and dword [ebp - 0x1b98], 0xf7ffffff
lea ecx, [ebp - 0x304]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b98]
and ecx, 0x4000000
je 0x10006c99
and dword [ebp - 0x1b98], 0xfbffffff
lea ecx, [ebp - 0x31c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b98]
and edx, 0x2000000
je 0x10006cbc
and dword [ebp - 0x1b98], 0xfdffffff
lea ecx, [ebp - 0x334]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b98]
and eax, 0x1000000
je 0x10006cde
and dword [ebp - 0x1b98], 0xfeffffff
lea ecx, [ebp - 0x34c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b98]
and ecx, 0x800000
je 0x10006d01
and dword [ebp - 0x1b98], 0xff7fffff
lea ecx, [ebp - 0x364]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b98]
and edx, 0x400000
je 0x10006d24
and dword [ebp - 0x1b98], 0xffbfffff
lea ecx, [ebp - 0x37c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b98]
and eax, 0x200000
je 0x10006d46
and dword [ebp - 0x1b98], 0xffdfffff
lea ecx, [ebp - 0x394]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b98]
and ecx, 0x100000
je 0x10006d69
and dword [ebp - 0x1b98], 0xffefffff
lea ecx, [ebp - 0x3ac]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b98]
and edx, 0x80000
je 0x10006d89
and dword [ebp - 0x1b98], 0xfff7ffff
lea ecx, [ebp - 0x1c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b98]
and eax, 0x40000
je 0x10006dab
and dword [ebp - 0x1b98], 0xfffbffff
lea ecx, [ebp - 0x3dc]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b98]
and ecx, 0x20000
je 0x10006dce
and dword [ebp - 0x1b98], 0xfffdffff
lea ecx, [ebp - 0x3f4]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b98]
and edx, 0x10000
je 0x10006df1
and dword [ebp - 0x1b98], 0xfffeffff
lea ecx, [ebp - 0x40c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b98]
and eax, 0x8000
je 0x10006e13
and dword [ebp - 0x1b98], 0xffff7fff
lea ecx, [ebp - 0x424]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b98]
and ecx, 0x4000
je 0x10006e36
and dword [ebp - 0x1b98], 0xffffbfff
lea ecx, [ebp - 0x43c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b98]
and edx, 0x2000
je 0x10006e59
and dword [ebp - 0x1b98], 0xffffdfff
lea ecx, [ebp - 0x454]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b98]
and eax, 0x1000
je 0x10006e7b
and dword [ebp - 0x1b98], 0xffffefff
lea ecx, [ebp - 0x46c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b98]
and ecx, 0x800
je 0x10006e9e
and dword [ebp - 0x1b98], 0xfffff7ff
lea ecx, [ebp - 0x484]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b98]
and edx, 0x400
je 0x10006ec1
and dword [ebp - 0x1b98], 0xfffffbff
lea ecx, [ebp - 0x49c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b98]
and eax, 0x200
je 0x10006ee3
and dword [ebp - 0x1b98], 0xfffffdff
lea ecx, [ebp - 0x4b4]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b98]
and ecx, 0x100
je 0x10006f06
and dword [ebp - 0x1b98], 0xfffffeff
lea ecx, [ebp - 0x4cc]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b98]
and edx, 0x80
je 0x10006f29
and dword [ebp - 0x1b98], 0xffffff7f
lea ecx, [ebp - 0x4e4]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b98]
and eax, 0x40
je 0x10006f46
and dword [ebp - 0x1b98], 0xffffffbf
lea ecx, [ebp - 0x4fc]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b98]
and ecx, 0x20
je 0x10006f63
and dword [ebp - 0x1b98], 0xffffffdf
lea ecx, [ebp - 0x514]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b98]
and edx, 0x10
je 0x10006f80
and dword [ebp - 0x1b98], 0xffffffef
lea ecx, [ebp - 0x52c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b98]
and eax, 8
je 0x10006f9d
and dword [ebp - 0x1b98], 0xfffffff7
lea ecx, [ebp - 0x544]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b98]
and ecx, 4
je 0x10006fba
and dword [ebp - 0x1b98], 0xfffffffb
lea ecx, [ebp - 0x55c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b98]
and edx, 2
je 0x10006fd7
and dword [ebp - 0x1b98], 0xfffffffd
lea ecx, [ebp - 0x574]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b98]
and eax, 1
je 0x10006ff4
and dword [ebp - 0x1b98], 0xfffffffe
lea ecx, [ebp - 0x58c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b9c]
and ecx, 0x80000000
je 0x10007017
and dword [ebp - 0x1b9c], 0x7fffffff
lea ecx, [ebp - 0x5a4]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b9c]
and edx, 0x40000000
je 0x1000703a
and dword [ebp - 0x1b9c], 0xbfffffff
lea ecx, [ebp - 0x5bc]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b9c]
and eax, 0x20000000
je 0x1000705c
and dword [ebp - 0x1b9c], 0xdfffffff
lea ecx, [ebp - 0x5d4]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b9c]
and ecx, 0x10000000
je 0x1000707f
and dword [ebp - 0x1b9c], 0xefffffff
lea ecx, [ebp - 0x5ec]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b9c]
and edx, 0x8000000
je 0x100070a2
and dword [ebp - 0x1b9c], 0xf7ffffff
lea ecx, [ebp - 0x604]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b9c]
and eax, 0x4000000
je 0x100070c4
and dword [ebp - 0x1b9c], 0xfbffffff
lea ecx, [ebp - 0x61c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b9c]
and ecx, 0x2000000
je 0x100070e7
and dword [ebp - 0x1b9c], 0xfdffffff
lea ecx, [ebp - 0x634]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b9c]
and edx, 0x1000000
je 0x1000710a
and dword [ebp - 0x1b9c], 0xfeffffff
lea ecx, [ebp - 0x64c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b9c]
and eax, 0x800000
je 0x1000712c
and dword [ebp - 0x1b9c], 0xff7fffff
lea ecx, [ebp - 0x664]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b9c]
and ecx, 0x400000
je 0x1000714f
and dword [ebp - 0x1b9c], 0xffbfffff
lea ecx, [ebp - 0x67c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b9c]
and edx, 0x200000
je 0x10007172
and dword [ebp - 0x1b9c], 0xffdfffff
lea ecx, [ebp - 0x694]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b9c]
and eax, 0x100000
je 0x10007194
and dword [ebp - 0x1b9c], 0xffefffff
lea ecx, [ebp - 0x6ac]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b9c]
and ecx, 0x80000
je 0x100071b7
and dword [ebp - 0x1b9c], 0xfff7ffff
lea ecx, [ebp - 0x6c4]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b9c]
and edx, 0x40000
je 0x100071da
and dword [ebp - 0x1b9c], 0xfffbffff
lea ecx, [ebp - 0x6dc]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b9c]
and eax, 0x20000
je 0x100071fc
and dword [ebp - 0x1b9c], 0xfffdffff
lea ecx, [ebp - 0x6f4]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b9c]
and ecx, 0x10000
je 0x1000721f
and dword [ebp - 0x1b9c], 0xfffeffff
lea ecx, [ebp - 0x70c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b9c]
and edx, 0x8000
je 0x10007242
and dword [ebp - 0x1b9c], 0xffff7fff
lea ecx, [ebp - 0x724]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b9c]
and eax, 0x4000
je 0x10007264
and dword [ebp - 0x1b9c], 0xffffbfff
lea ecx, [ebp - 0x73c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b9c]
and ecx, 0x2000
je 0x10007287
and dword [ebp - 0x1b9c], 0xffffdfff
lea ecx, [ebp - 0x754]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b9c]
and edx, 0x1000
je 0x100072aa
and dword [ebp - 0x1b9c], 0xffffefff
lea ecx, [ebp - 0x3c4]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b9c]
and eax, 0x800
je 0x100072cc
and dword [ebp - 0x1b9c], 0xfffff7ff
lea ecx, [ebp - 0x784]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b9c]
and ecx, 0x400
je 0x100072ef
and dword [ebp - 0x1b9c], 0xfffffbff
lea ecx, [ebp - 0x79c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b9c]
and edx, 0x200
je 0x10007312
and dword [ebp - 0x1b9c], 0xfffffdff
lea ecx, [ebp - 0x7b4]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b9c]
and eax, 0x100
je 0x10007334
and dword [ebp - 0x1b9c], 0xfffffeff
lea ecx, [ebp - 0x7cc]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b9c]
and ecx, 0x80
je 0x10007357
and dword [ebp - 0x1b9c], 0xffffff7f
lea ecx, [ebp - 0x7e4]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b9c]
and edx, 0x40
je 0x10007374
and dword [ebp - 0x1b9c], 0xffffffbf
lea ecx, [ebp - 0x7fc]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b9c]
and eax, 0x20
je 0x10007391
and dword [ebp - 0x1b9c], 0xffffffdf
lea ecx, [ebp - 0x814]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b9c]
and ecx, 0x10
je 0x100073ae
and dword [ebp - 0x1b9c], 0xffffffef
lea ecx, [ebp - 0x82c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b9c]
and edx, 8
je 0x100073cb
and dword [ebp - 0x1b9c], 0xfffffff7
lea ecx, [ebp - 0x844]
call fcn.10004b6a
mov eax, dword [ebp - 0x1b9c]
and eax, 4
je 0x100073e8
and dword [ebp - 0x1b9c], 0xfffffffb
lea ecx, [ebp - 0x85c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1b9c]
and ecx, 2
je 0x10007405
and dword [ebp - 0x1b9c], 0xfffffffd
lea ecx, [ebp - 0x874]
call fcn.10004b6a
mov edx, dword [ebp - 0x1b9c]
and edx, 1
je 0x10007422
and dword [ebp - 0x1b9c], 0xfffffffe
lea ecx, [ebp - 0x88c]
call fcn.10004b6a
lea ecx, [ebp - 0x8a4]
call fcn.10004b6a
lea ecx, [ebp - 0x8bc]
call fcn.10004b6a
lea ecx, [ebp - 0x8d4]
call fcn.10004b6a
lea ecx, [ebp - 0x8ec]
call fcn.10004b6a
lea ecx, [ebp - 0x904]
call fcn.10004b6a
lea ecx, [ebp - 0x91c]
call fcn.10004b6a
lea ecx, [ebp - 0x934]
call fcn.10004b6a
lea ecx, [ebp - 0x94c]
call fcn.10004b6a
lea ecx, [ebp - 0x964]
call fcn.10004b6a
lea ecx, [ebp - 0x97c]
call fcn.10004b6a
lea ecx, [ebp - 0x994]
call fcn.10004b6a
lea ecx, [ebp - 0x9ac]
call fcn.10004b6a
lea ecx, [ebp - 0x9c4]
call fcn.10004b6a
lea ecx, [ebp - 0x9dc]
call fcn.10004b6a
movzx eax, byte [ebp - 0x1bbd]
test eax, eax
je 0x100074ce
xor eax, eax
jmp 0x1000a547
movzx ecx, word [ebp - 0x1be4]
movzx edx, word [ebp - 0x1be2]
imul ecx, edx
mov word [ebp - 0x1bb8], cx
movzx eax, word [ebp - 0x1bb8]
cmp eax, 1
jne 0x10007500
mov ecx, 1
mov word [ebp - 0x1bb8], cx
jmp 0x10007574
movzx edx, word [ebp - 0x1bb8]
cmp edx, 4
jg 0x1000751a
mov eax, 4
mov word [ebp - 0x1bb8], ax
jmp 0x10007574
movzx ecx, word [ebp - 0x1bb8]
cmp ecx, 8
jg 0x10007534
mov edx, 8
mov word [ebp - 0x1bb8], dx
jmp 0x10007574
movzx eax, word [ebp - 0x1bb8]
cmp eax, 0x10
jg 0x1000754e
mov ecx, 0x10
mov word [ebp - 0x1bb8], cx
jmp 0x10007574
movzx edx, word [ebp - 0x1bb8]
cmp edx, 0x18
jg 0x10007568
mov eax, 0x18
mov word [ebp - 0x1bb8], ax
jmp 0x10007574
mov ecx, 0x20
mov word [ebp - 0x1bb8], cx
movzx edx, word [ebp - 0x1bb8]
cmp edx, 0x18
jge 0x10008d39
lea ecx, [ebp - 0x139c]
call fcn.100180e0
push eax
mov eax, 1
imul ecx, eax, 0
movzx edx, byte [ecx + 0x10032b40]
push edx
lea ecx, [ebp - 0x1384]
call fcn.100180e0
push eax
mov eax, 1
shl eax, 0
movzx ecx, byte [eax + 0x10032bc0]
push ecx
lea edx, [ebp - 0x136c]
push edx
call fcn.10017880
add esp, 0xc
push eax
lea ecx, [ebp - 0x1354]
call fcn.100180e0
push eax
mov eax, 1
imul ecx, eax, 3
movzx edx, byte [ecx + 0x10032780]
push edx
lea eax, [ebp - 0x133c]
push eax
call fcn.10017880
add esp, 0xc
push eax
lea ecx, [ebp - 0x1324]
call fcn.100180e0
push eax
mov ecx, 1
imul edx, ecx, 7
movzx eax, byte [edx + 0x10032340]
push eax
lea ecx, [ebp - 0x130c]
push ecx
call fcn.10017880
add esp, 0xc
push eax
lea ecx, [ebp - 0x12f4]
call fcn.100180e0
push eax
push 0
mov ecx, 0x10034060
call fcn.10018260
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0x12dc]
call fcn.100180e0
push eax
mov ecx, 1
imul edx, ecx, 5
movzx eax, byte [edx + 0x10032a00]
push eax
lea ecx, [ebp - 0x12c4]
call fcn.100180e0
push eax
mov ecx, 1
shl ecx, 3
movzx edx, byte [ecx + 0x10032340]
push edx
lea eax, [ebp - 0x12ac]
push eax
call fcn.10017880
add esp, 0xc
push eax
mov ecx, 1
shl ecx, 3
movzx edx, byte [ecx + 0x10032680]
push edx
lea ecx, [ebp - 0x1294]
call fcn.100180e0
push eax
lea eax, [ebp - 0x127c]
push eax
call fcn.10017850
add esp, 0xc
push eax
lea ecx, [ebp - 0x1264]
push ecx
call fcn.10017830
add esp, 0xc
push eax
lea edx, [ebp - 0x124c]
push edx
call fcn.10017850
add esp, 0xc
push eax
lea eax, [ebp - 0x1234]
push eax
call fcn.10017830
add esp, 0xc
push eax
lea ecx, [ebp - 0x121c]
push ecx
call fcn.10017850
add esp, 0xc
push eax
lea edx, [ebp - 0x1204]
push edx
call fcn.10017830
add esp, 0xc
push eax
lea eax, [ebp - 0x11ec]
push eax
call fcn.10017830
add esp, 0xc
push eax
lea ecx, [ebp - 0x11d4]
push ecx
call fcn.10017830
add esp, 0xc
push eax
lea edx, [ebp - 0x11bc]
push edx
call fcn.10017830
add esp, 0xc
push eax
lea eax, [ebp - 0x11a4]
push eax
call fcn.10017850
add esp, 0xc
push eax
lea ecx, [ebp - 0x118c]
push ecx
call fcn.10017830
add esp, 0xc
mov ecx, eax
call fcn.100185e0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x100340a8], eax
cmp dword [0x100340a8], 0
je 0x10007b01
lea ecx, [ebp - 0x1174]
call fcn.100180e0
or dword [ebp - 0x1ba4], 0x100
push eax
mov edx, 1
imul eax, edx, 0
movzx ecx, byte [eax + 0x10032200]
push ecx
mov edx, 1
shl edx, 0
movzx eax, byte [edx + 0x10032800]
push eax
lea ecx, [ebp - 0x115c]
call fcn.100180e0
or dword [ebp - 0x1ba4], 0x200
push eax
lea ecx, [ebp - 0x1144]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba4], 0x400
push eax
mov edx, 1
imul eax, edx, 0
movzx ecx, byte [eax + 0x10032780]
push ecx
lea ecx, [ebp - 0x112c]
call fcn.100180e0
or dword [ebp - 0x1ba4], 0x800
push eax
mov edx, 1
imul eax, edx, 3
movzx ecx, byte [eax + 0x10032780]
push ecx
lea ecx, [ebp - 0x1114]
call fcn.100180e0
or dword [ebp - 0x1ba4], 0x1000
push eax
lea ecx, [ebp - 0x10fc]
call fcn.100180e0
or dword [ebp - 0x1ba4], 0x2000
push eax
mov edx, 1
imul eax, edx, 6
movsx ecx, byte [eax + section..data]
push ecx
call fcn.10020301
add esp, 4
push eax
lea edx, [ebp - 0x10e4]
push edx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1ba4], 0x4000
push eax
lea ecx, [ebp - 0x10cc]
call fcn.100180e0
or dword [ebp - 0x1ba4], 0x8000
push eax
mov eax, 1
imul ecx, eax, 0
movzx edx, byte [ecx + 0x10032780]
push edx
lea eax, [ebp - 0x10b4]
push eax
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1ba4], 0x10000
push eax
mov ecx, 1
imul edx, ecx, 6
movzx eax, byte [edx + section..data]
push eax
lea ecx, [ebp - 0x109c]
call fcn.100180e0
or dword [ebp - 0x1ba4], 0x20000
push eax
mov ecx, 1
imul edx, ecx, 0
movzx eax, byte [edx + 0x10032200]
push eax
lea ecx, [ebp - 0x1084]
call fcn.100180e0
or dword [ebp - 0x1ba4], 0x40000
push eax
lea ecx, [ebp - 0x106c]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba4], 0x80000
push eax
lea ecx, [ebp - 0x1054]
call fcn.100180e0
or dword [ebp - 0x1ba4], 0x100000
push eax
mov edx, 1
shl edx, 0
movzx eax, byte [edx + 0x10032800]
push eax
lea ecx, [ebp - 0x103c]
call fcn.100180e0
or dword [ebp - 0x1ba4], 0x200000
push eax
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [edx + 0x10032780]
push eax
call fcn.10020301
add esp, 4
push eax
lea ecx, [ebp - 0x1024]
push ecx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1ba4], 0x400000
push eax
lea edx, [ebp - 0x100c]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba4], 0x800000
push eax
lea eax, [ebp - 0xff4]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba4], 0x1000000
push eax
lea ecx, [ebp - 0xfdc]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba4], 0x2000000
push eax
lea edx, [ebp - 0xfc4]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba4], 0x4000000
push eax
lea eax, [ebp - 0xfac]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba4], 0x8000000
push eax
lea ecx, [ebp - 0xf94]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba4], 0x10000000
push eax
lea edx, [ebp - 0xf7c]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba4], 0x20000000
push eax
lea eax, [ebp - 0xf64]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba4], 0x40000000
push eax
lea ecx, [ebp - 0xf4c]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba4], 0x80000000
push eax
lea edx, [ebp - 0xf34]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba0], 1
push eax
lea eax, [ebp - 0xf1c]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba0], 2
push eax
lea ecx, [ebp - 0xf04]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba0], 4
push eax
lea edx, [ebp - 0xeec]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba0], 8
push eax
lea eax, [ebp - 0xed4]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba0], 0x10
mov ecx, eax
call fcn.100185e0
push eax
mov ecx, dword [0x100340a8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x1bd4], eax
jmp 0x1000816a
lea ecx, [ebp - 0xebc]
call fcn.100180e0
or dword [ebp - 0x1ba0], 0x20
push eax
mov edx, 1
imul eax, edx, 0
movzx ecx, byte [eax + 0x10032b40]
push ecx
lea ecx, [ebp - 0xea4]
call fcn.100180e0
or dword [ebp - 0x1ba0], 0x40
push eax
mov edx, 1
shl edx, 0
movzx eax, byte [edx + 0x10032bc0]
push eax
lea ecx, [ebp - 0xe8c]
push ecx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1ba0], 0x80
push eax
lea ecx, [ebp - 0xe74]
call fcn.100180e0
or dword [ebp - 0x1ba0], 0x100
push eax
mov edx, 1
imul eax, edx, 3
movzx ecx, byte [eax + 0x10032780]
push ecx
lea edx, [ebp - 0xe5c]
push edx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1ba0], 0x200
push eax
lea ecx, [ebp - 0xe44]
call fcn.100180e0
or dword [ebp - 0x1ba0], 0x400
push eax
mov eax, 1
imul ecx, eax, 7
movzx edx, byte [ecx + 0x10032340]
push edx
lea eax, [ebp - 0xe2c]
push eax
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1ba0], 0x800
push eax
lea ecx, [ebp - 0xe14]
call fcn.100180e0
or dword [ebp - 0x1ba0], 0x1000
push eax
push 0
mov ecx, 0x10034060
call fcn.10018260
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xdfc]
call fcn.100180e0
or dword [ebp - 0x1ba0], 0x2000
push eax
mov eax, 1
imul ecx, eax, 5
movzx edx, byte [ecx + 0x10032a00]
push edx
lea ecx, [ebp - 0xde4]
call fcn.100180e0
or dword [ebp - 0x1ba0], 0x4000
push eax
mov eax, 1
shl eax, 3
movzx ecx, byte [eax + 0x10032340]
push ecx
lea edx, [ebp - 0xdcc]
push edx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1ba0], 0x8000
push eax
mov eax, 1
shl eax, 3
movzx ecx, byte [eax + 0x10032680]
push ecx
lea ecx, [ebp - 0xdb4]
call fcn.100180e0
or dword [ebp - 0x1ba0], 0x10000
push eax
lea edx, [ebp - 0xd9c]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba0], 0x20000
push eax
lea eax, [ebp - 0xd84]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba0], 0x40000
push eax
lea ecx, [ebp - 0xd6c]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba0], 0x80000
push eax
lea edx, [ebp - 0xd54]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba0], 0x100000
push eax
lea eax, [ebp - 0xd3c]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba0], 0x200000
push eax
lea ecx, [ebp - 0xd24]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba0], 0x400000
push eax
lea edx, [ebp - 0xd0c]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba0], 0x800000
push eax
lea eax, [ebp - 0xcf4]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba0], 0x1000000
push eax
lea ecx, [ebp - 0xcdc]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba0], 0x2000000
push eax
lea edx, [ebp - 0xcc4]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba0], 0x4000000
push eax
lea eax, [ebp - 0xcac]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba0], 0x8000000
mov ecx, eax
call fcn.100185e0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x100340a8], eax
cmp dword [0x100340a8], 0
je 0x10008154
lea ecx, [ebp - 0xc94]
call fcn.100180e0
or dword [ebp - 0x1ba0], 0x10000000
push eax
mov ecx, 1
imul edx, ecx, 0
movzx eax, byte [edx + 0x10032200]
push eax
mov ecx, 1
shl ecx, 0
movzx edx, byte [ecx + 0x10032800]
push edx
lea ecx, [ebp - 0xc7c]
call fcn.100180e0
or dword [ebp - 0x1ba0], 0x20000000
push eax
lea eax, [ebp - 0xc64]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba0], 0x40000000
push eax
mov ecx, 1
imul edx, ecx, 0
movzx eax, byte [edx + 0x10032780]
push eax
lea ecx, [ebp - 0xc4c]
call fcn.100180e0
or dword [ebp - 0x1ba0], 0x80000000
push eax
mov ecx, 1
imul edx, ecx, 3
movzx eax, byte [edx + 0x10032780]
push eax
lea ecx, [ebp - 0xc34]
call fcn.100180e0
or dword [ebp - 0x1bb0], 1
push eax
lea ecx, [ebp - 0xc1c]
call fcn.100180e0
or dword [ebp - 0x1bb0], 2
push eax
mov ecx, 1
imul edx, ecx, 6
movsx eax, byte [edx + section..data]
push eax
call fcn.10020301
add esp, 4
push eax
lea ecx, [ebp - 0xc04]
push ecx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1bb0], 4
push eax
lea ecx, [ebp - 0xbec]
call fcn.100180e0
or dword [ebp - 0x1bb0], 8
push eax
mov edx, 1
imul eax, edx, 0
movzx ecx, byte [eax + 0x10032780]
push ecx
lea edx, [ebp - 0xbd4]
push edx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1bb0], 0x10
push eax
mov eax, 1
imul ecx, eax, 6
movzx edx, byte [ecx + section..data]
push edx
lea ecx, [ebp - 0xbbc]
call fcn.100180e0
or dword [ebp - 0x1bb0], 0x20
push eax
mov eax, 1
imul ecx, eax, 0
movzx edx, byte [ecx + 0x10032200]
push edx
lea ecx, [ebp - 0xba4]
call fcn.100180e0
or dword [ebp - 0x1bb0], 0x40
push eax
lea eax, [ebp - 0xb8c]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bb0], 0x80
push eax
lea ecx, [ebp - 0xb74]
call fcn.100180e0
or dword [ebp - 0x1bb0], 0x100
push eax
mov ecx, 1
shl ecx, 0
movzx edx, byte [ecx + 0x10032800]
push edx
lea ecx, [ebp - 0xb5c]
call fcn.100180e0
or dword [ebp - 0x1bb0], 0x200
push eax
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ecx + 0x10032780]
push edx
call fcn.10020301
add esp, 4
push eax
lea eax, [ebp - 0xb44]
push eax
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1bb0], 0x400
push eax
lea ecx, [ebp - 0xb2c]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bb0], 0x800
push eax
lea edx, [ebp - 0xb14]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb0], 0x1000
push eax
lea eax, [ebp - 0xafc]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb0], 0x2000
push eax
lea ecx, [ebp - 0xae4]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb0], 0x4000
push eax
lea edx, [ebp - 0xacc]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bb0], 0x8000
push eax
lea eax, [ebp - 0xab4]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb0], 0x10000
push eax
lea ecx, [ebp - 0xa9c]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb0], 0x20000
push eax
lea edx, [ebp - 0xa84]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb0], 0x40000
push eax
lea eax, [ebp - 0xa6c]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bb0], 0x80000
push eax
lea ecx, [ebp - 0xa54]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb0], 0x100000
push eax
lea edx, [ebp - 0xa3c]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bb0], 0x200000
push eax
lea eax, [ebp - 0xa24]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb0], 0x400000
push eax
lea ecx, [ebp - 0xa0c]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bb0], 0x800000
push eax
lea edx, [ebp - 0x9f4]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb0], 0x1000000
mov ecx, eax
call fcn.100185e0
push eax
mov eax, dword [0x100340a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x1bd0], eax
jmp 0x1000815e
mov dword [ebp - 0x1bd0], 0
mov ecx, dword [ebp - 0x1bd0]
mov dword [ebp - 0x1bd4], ecx
movzx ecx, word [ebp - 0x1bb8]
mov edx, 1
shl edx, cl
lea eax, [edx*4 + 0x28]
push eax
push 0x40
call dword [ebp - 0x1bd4]
mov dword [ebp - 0x1bbc], eax
mov ecx, dword [ebp - 0x1bb0]
and ecx, 0x1000000
je 0x100081b1
and dword [ebp - 0x1bb0], 0xfeffffff
lea ecx, [ebp - 0x9f4]
call fcn.10004b6a
mov edx, dword [ebp - 0x1bb0]
and edx, 0x800000
je 0x100081d4
and dword [ebp - 0x1bb0], 0xff7fffff
lea ecx, [ebp - 0xa0c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1bb0]
and eax, 0x400000
je 0x100081f6
and dword [ebp - 0x1bb0], 0xffbfffff
lea ecx, [ebp - 0xa24]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1bb0]
and ecx, 0x200000
je 0x10008219
and dword [ebp - 0x1bb0], 0xffdfffff
lea ecx, [ebp - 0xa3c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1bb0]
and edx, 0x100000
je 0x1000823c
and dword [ebp - 0x1bb0], 0xffefffff
lea ecx, [ebp - 0xa54]
call fcn.10004b6a
mov eax, dword [ebp - 0x1bb0]
and eax, 0x80000
je 0x1000825e
and dword [ebp - 0x1bb0], 0xfff7ffff
lea ecx, [ebp - 0xa6c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1bb0]
and ecx, 0x40000
je 0x10008281
and dword [ebp - 0x1bb0], 0xfffbffff
lea ecx, [ebp - 0xa84]
call fcn.10004b6a
mov edx, dword [ebp - 0x1bb0]
and edx, 0x20000
je 0x100082a4
and dword [ebp - 0x1bb0], 0xfffdffff
lea ecx, [ebp - 0xa9c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1bb0]
and eax, 0x10000
je 0x100082c6
and dword [ebp - 0x1bb0], 0xfffeffff
lea ecx, [ebp - 0xab4]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1bb0]
and ecx, 0x8000
je 0x100082e9
and dword [ebp - 0x1bb0], 0xffff7fff
lea ecx, [ebp - 0xacc]
call fcn.10004b6a
mov edx, dword [ebp - 0x1bb0]
and edx, 0x4000
je 0x1000830c
and dword [ebp - 0x1bb0], 0xffffbfff
lea ecx, [ebp - 0xae4]
call fcn.10004b6a
mov eax, dword [ebp - 0x1bb0]
and eax, 0x2000
je 0x1000832e
and dword [ebp - 0x1bb0], 0xffffdfff
lea ecx, [ebp - 0xafc]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1bb0]
and ecx, 0x1000
je 0x10008351
and dword [ebp - 0x1bb0], 0xffffefff
lea ecx, [ebp - 0xb14]
call fcn.10004b6a
mov edx, dword [ebp - 0x1bb0]
and edx, 0x800
je 0x10008374
and dword [ebp - 0x1bb0], 0xfffff7ff
lea ecx, [ebp - 0xb2c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1bb0]
and eax, 0x400
je 0x10008396
and dword [ebp - 0x1bb0], 0xfffffbff
lea ecx, [ebp - 0xb44]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1bb0]
and ecx, 0x200
je 0x100083b9
and dword [ebp - 0x1bb0], 0xfffffdff
lea ecx, [ebp - 0xb5c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1bb0]
and edx, 0x100
je 0x100083dc
and dword [ebp - 0x1bb0], 0xfffffeff
lea ecx, [ebp - 0xb74]
call fcn.10004b6a
mov eax, dword [ebp - 0x1bb0]
and eax, 0x80
je 0x100083fe
and dword [ebp - 0x1bb0], 0xffffff7f
lea ecx, [ebp - 0xb8c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1bb0]
and ecx, 0x40
je 0x1000841b
and dword [ebp - 0x1bb0], 0xffffffbf
lea ecx, [ebp - 0xba4]
call fcn.10004b6a
mov edx, dword [ebp - 0x1bb0]
and edx, 0x20
je 0x10008438
and dword [ebp - 0x1bb0], 0xffffffdf
lea ecx, [ebp - 0xbbc]
call fcn.10004b6a
mov eax, dword [ebp - 0x1bb0]
and eax, 0x10
je 0x10008455
and dword [ebp - 0x1bb0], 0xffffffef
lea ecx, [ebp - 0xbd4]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1bb0]
and ecx, 8
je 0x10008472
and dword [ebp - 0x1bb0], 0xfffffff7
lea ecx, [ebp - 0xbec]
call fcn.10004b6a
mov edx, dword [ebp - 0x1bb0]
and edx, 4
je 0x1000848f
and dword [ebp - 0x1bb0], 0xfffffffb
lea ecx, [ebp - 0xc04]
call fcn.10004b6a
mov eax, dword [ebp - 0x1bb0]
and eax, 2
je 0x100084ac
and dword [ebp - 0x1bb0], 0xfffffffd
lea ecx, [ebp - 0xc1c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1bb0]
and ecx, 1
je 0x100084c9
and dword [ebp - 0x1bb0], 0xfffffffe
lea ecx, [ebp - 0xc34]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba0]
and edx, 0x80000000
je 0x100084ec
and dword [ebp - 0x1ba0], 0x7fffffff
lea ecx, [ebp - 0xc4c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba0]
and eax, 0x40000000
je 0x1000850e
and dword [ebp - 0x1ba0], 0xbfffffff
lea ecx, [ebp - 0xc64]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba0]
and ecx, 0x20000000
je 0x10008531
and dword [ebp - 0x1ba0], 0xdfffffff
lea ecx, [ebp - 0xc7c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba0]
and edx, 0x10000000
je 0x10008554
and dword [ebp - 0x1ba0], 0xefffffff
lea ecx, [ebp - 0xc94]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba0]
and eax, 0x8000000
je 0x10008576
and dword [ebp - 0x1ba0], 0xf7ffffff
lea ecx, [ebp - 0xcac]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba0]
and ecx, 0x4000000
je 0x10008599
and dword [ebp - 0x1ba0], 0xfbffffff
lea ecx, [ebp - 0xcc4]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba0]
and edx, 0x2000000
je 0x100085bc
and dword [ebp - 0x1ba0], 0xfdffffff
lea ecx, [ebp - 0xcdc]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba0]
and eax, 0x1000000
je 0x100085de
and dword [ebp - 0x1ba0], 0xfeffffff
lea ecx, [ebp - 0xcf4]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba0]
and ecx, 0x800000
je 0x10008601
and dword [ebp - 0x1ba0], 0xff7fffff
lea ecx, [ebp - 0xd0c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba0]
and edx, 0x400000
je 0x10008624
and dword [ebp - 0x1ba0], 0xffbfffff
lea ecx, [ebp - 0xd24]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba0]
and eax, 0x200000
je 0x10008646
and dword [ebp - 0x1ba0], 0xffdfffff
lea ecx, [ebp - 0xd3c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba0]
and ecx, 0x100000
je 0x10008669
and dword [ebp - 0x1ba0], 0xffefffff
lea ecx, [ebp - 0xd54]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba0]
and edx, 0x80000
je 0x1000868c
and dword [ebp - 0x1ba0], 0xfff7ffff
lea ecx, [ebp - 0xd6c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba0]
and eax, 0x40000
je 0x100086ae
and dword [ebp - 0x1ba0], 0xfffbffff
lea ecx, [ebp - 0xd84]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba0]
and ecx, 0x20000
je 0x100086d1
and dword [ebp - 0x1ba0], 0xfffdffff
lea ecx, [ebp - 0xd9c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba0]
and edx, 0x10000
je 0x100086f4
and dword [ebp - 0x1ba0], 0xfffeffff
lea ecx, [ebp - 0xdb4]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba0]
and eax, 0x8000
je 0x10008716
and dword [ebp - 0x1ba0], 0xffff7fff
lea ecx, [ebp - 0xdcc]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba0]
and ecx, 0x4000
je 0x10008739
and dword [ebp - 0x1ba0], 0xffffbfff
lea ecx, [ebp - 0xde4]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba0]
and edx, 0x2000
je 0x1000875c
and dword [ebp - 0x1ba0], 0xffffdfff
lea ecx, [ebp - 0xdfc]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba0]
and eax, 0x1000
je 0x1000877e
lea ecx, [ebp - 0x76c]
call fcn.100180e0
push eax
mov ecx, 1
imul edx, ecx, 0
movzx eax, byte [edx + 0x10032b40]
push eax
lea ecx, [ebp - 0x1cc]
call fcn.100180e0
push eax
mov ecx, 1
shl ecx, 0
movzx edx, byte [ecx + 0x10032bc0]
push edx
lea eax, [ebp - 0x1b4]
push eax
call fcn.10017880
add esp, 0xc
push eax
lea ecx, [ebp - 0x19c]
call fcn.100180e0
push eax
mov ecx, 1
imul edx, ecx, 3
movzx eax, byte [edx + 0x10032780]
push eax
lea ecx, [ebp - 0x184]
push ecx
call fcn.10017880
add esp, 0xc
push eax
lea ecx, [ebp - 0x16c]
call fcn.100180e0
push eax
mov edx, 1
imul eax, edx, 7
movzx ecx, byte [eax + 0x10032340]
push ecx
lea edx, [ebp - 0x154]
push edx
call fcn.10017880
add esp, 0xc
push eax
lea ecx, [ebp - 0x13c]
call fcn.100180e0
push eax
push 0
mov ecx, 0x10034060
call fcn.10018260
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0x124]
call fcn.100180e0
push eax
mov edx, 1
imul eax, edx, 5
movzx ecx, byte [eax + 0x10032a00]
push ecx
lea ecx, [ebp - 0x10c]
call fcn.100180e0
push eax
mov edx, 1
shl edx, 3
movzx eax, byte [edx + 0x10032340]
push eax
lea ecx, [ebp - 0xf4]
push ecx
call fcn.10017880
add esp, 0xc
push eax
mov edx, 1
shl edx, 3
movzx eax, byte [edx + 0x10032680]
push eax
lea ecx, [ebp - 0xdc]
call fcn.100180e0
push eax
lea ecx, [ebp - 0xc4]
push ecx
call fcn.10017850
add esp, 0xc
push eax
lea edx, [ebp - 0xac]
push edx
call fcn.10017830
add esp, 0xc
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.10017850
add esp, 0xc
push eax
lea ecx, [ebp - 0x7c]
push ecx
call fcn.10017830
add esp, 0xc
push eax
lea edx, [ebp - 0x64]
push edx
call fcn.10017850
add esp, 0xc
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10017830
add esp, 0xc
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.10017830
add esp, 0xc
push eax
lea edx, [ebp - 0x1b94]
push edx
call fcn.10017830
add esp, 0xc
push eax
lea eax, [ebp - 0x1b7c]
push eax
call fcn.10017830
add esp, 0xc
push eax
lea ecx, [ebp - 0x1b64]
push ecx
call fcn.10017850
add esp, 0xc
push eax
lea edx, [ebp - 0x1b4c]
push edx
call fcn.10017830
add esp, 0xc
mov ecx, eax
call fcn.100185e0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x100340a8], eax
cmp dword [0x100340a8], 0
je 0x100092a4
lea ecx, [ebp - 0x1b34]
call fcn.100180e0
or dword [ebp - 0x1bb0], 0x2000000
push eax
mov eax, 1
imul ecx, eax, 0
movzx edx, byte [ecx + 0x10032200]
push edx
mov eax, 1
shl eax, 0
movzx ecx, byte [eax + 0x10032800]
push ecx
lea ecx, [ebp - 0x1b1c]
call fcn.100180e0
or dword [ebp - 0x1bb0], 0x4000000
push eax
lea edx, [ebp - 0x1b04]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bb0], 0x8000000
push eax
mov eax, 1
imul ecx, eax, 0
movzx edx, byte [ecx + 0x10032780]
push edx
lea ecx, [ebp - 0x1aec]
call fcn.100180e0
or dword [ebp - 0x1bb0], 0x10000000
push eax
mov eax, 1
imul ecx, eax, 3
movzx edx, byte [ecx + 0x10032780]
push edx
lea ecx, [ebp - 0x1ad4]
call fcn.100180e0
or dword [ebp - 0x1bb0], 0x20000000
push eax
lea ecx, [ebp - 0x1abc]
call fcn.100180e0
or dword [ebp - 0x1bb0], 0x40000000
push eax
mov eax, 1
imul ecx, eax, 6
movsx edx, byte [ecx + section..data]
push edx
call fcn.10020301
add esp, 4
push eax
lea eax, [ebp - 0x1aa4]
push eax
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1bb0], 0x80000000
push eax
lea ecx, [ebp - 0x1a8c]
call fcn.100180e0
or dword [ebp - 0x1bac], 1
push eax
mov ecx, 1
imul edx, ecx, 0
movzx eax, byte [edx + 0x10032780]
push eax
lea ecx, [ebp - 0x1a74]
push ecx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1bac], 2
push eax
mov edx, 1
imul eax, edx, 6
movzx ecx, byte [eax + section..data]
push ecx
lea ecx, [ebp - 0x1a5c]
call fcn.100180e0
or dword [ebp - 0x1bac], 4
push eax
mov edx, 1
imul eax, edx, 0
movzx ecx, byte [eax + 0x10032200]
push ecx
lea ecx, [ebp - 0x1a44]
call fcn.100180e0
or dword [ebp - 0x1bac], 8
push eax
lea edx, [ebp - 0x1a2c]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bac], 0x10
push eax
lea ecx, [ebp - 0x1a14]
call fcn.100180e0
or dword [ebp - 0x1bac], 0x20
push eax
mov eax, 1
shl eax, 0
movzx ecx, byte [eax + 0x10032800]
push ecx
lea ecx, [ebp - 0x19fc]
call fcn.100180e0
or dword [ebp - 0x1bac], 0x40
push eax
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [eax + 0x10032780]
push ecx
call fcn.10020301
add esp, 4
push eax
lea edx, [ebp - 0x19e4]
push edx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1bac], 0x80
push eax
lea eax, [ebp - 0x19cc]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bac], 0x100
push eax
lea ecx, [ebp - 0x19b4]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bac], 0x200
push eax
lea edx, [ebp - 0x199c]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bac], 0x400
push eax
lea eax, [ebp - 0x1984]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bac], 0x800
push eax
lea ecx, [ebp - 0x196c]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bac], 0x1000
push eax
lea edx, [ebp - 0x1954]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bac], 0x2000
push eax
lea eax, [ebp - 0x193c]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bac], 0x4000
push eax
lea ecx, [ebp - 0x1924]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bac], 0x8000
push eax
lea edx, [ebp - 0x190c]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bac], 0x10000
push eax
lea eax, [ebp - 0x18f4]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bac], 0x20000
push eax
lea ecx, [ebp - 0x18dc]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bac], 0x40000
push eax
lea edx, [ebp - 0x18c4]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bac], 0x80000
push eax
lea eax, [ebp - 0x18ac]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bac], 0x100000
push eax
lea ecx, [ebp - 0x1894]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bac], 0x200000
mov ecx, eax
call fcn.100185e0
push eax
mov edx, dword [0x100340a8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x1bdc], eax
jmp 0x100098ff
lea ecx, [ebp - 0x187c]
call fcn.100180e0
or dword [ebp - 0x1bac], 0x400000
push eax
mov eax, 1
imul ecx, eax, 0
movzx edx, byte [ecx + 0x10032b40]
push edx
lea ecx, [ebp - 0x1864]
call fcn.100180e0
or dword [ebp - 0x1bac], 0x800000
push eax
mov eax, 1
shl eax, 0
movzx ecx, byte [eax + 0x10032bc0]
push ecx
lea edx, [ebp - 0x184c]
push edx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1bac], 0x1000000
push eax
lea ecx, [ebp - 0x1834]
call fcn.100180e0
or dword [ebp - 0x1bac], 0x2000000
push eax
mov eax, 1
imul ecx, eax, 3
movzx edx, byte [ecx + 0x10032780]
push edx
lea eax, [ebp - 0x181c]
push eax
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1bac], 0x4000000
push eax
lea ecx, [ebp - 0x1804]
call fcn.100180e0
or dword [ebp - 0x1bac], 0x8000000
push eax
mov ecx, 1
imul edx, ecx, 7
movzx eax, byte [edx + 0x10032340]
push eax
lea ecx, [ebp - 0x17ec]
push ecx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1bac], 0x10000000
push eax
lea ecx, [ebp - 0x17d4]
call fcn.100180e0
or dword [ebp - 0x1bac], 0x20000000
push eax
push 0
mov ecx, 0x10034060
call fcn.10018260
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0x17bc]
call fcn.100180e0
or dword [ebp - 0x1bac], 0x40000000
push eax
mov ecx, 1
imul edx, ecx, 5
movzx eax, byte [edx + 0x10032a00]
push eax
lea ecx, [ebp - 0x17a4]
call fcn.100180e0
or dword [ebp - 0x1bac], 0x80000000
push eax
mov ecx, 1
shl ecx, 3
movzx edx, byte [ecx + 0x10032340]
push edx
lea eax, [ebp - 0x178c]
push eax
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1ba8], 1
push eax
mov ecx, 1
shl ecx, 3
movzx edx, byte [ecx + 0x10032680]
push edx
lea ecx, [ebp - 0x1774]
call fcn.100180e0
or dword [ebp - 0x1ba8], 2
push eax
lea eax, [ebp - 0x175c]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba8], 4
push eax
lea ecx, [ebp - 0x1744]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba8], 8
push eax
lea edx, [ebp - 0x172c]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba8], 0x10
push eax
lea eax, [ebp - 0x1714]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba8], 0x20
push eax
lea ecx, [ebp - 0x16fc]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba8], 0x40
push eax
lea edx, [ebp - 0x16e4]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba8], 0x80
push eax
lea eax, [ebp - 0x16cc]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba8], 0x100
push eax
lea ecx, [ebp - 0x16b4]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba8], 0x200
push eax
lea edx, [ebp - 0x169c]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba8], 0x400
push eax
lea eax, [ebp - 0x1684]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba8], 0x800
push eax
lea ecx, [ebp - 0x166c]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba8], 0x1000
mov ecx, eax
call fcn.100185e0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x100340a8], eax
cmp dword [0x100340a8], 0
je 0x100098e9
lea ecx, [ebp - 0x1654]
call fcn.100180e0
or dword [ebp - 0x1ba8], 0x2000
push eax
mov edx, 1
imul eax, edx, 0
movzx ecx, byte [eax + 0x10032200]
push ecx
mov edx, 1
shl edx, 0
movzx eax, byte [edx + 0x10032800]
push eax
lea ecx, [ebp - 0x163c]
call fcn.100180e0
or dword [ebp - 0x1ba8], 0x4000
push eax
lea ecx, [ebp - 0x1624]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba8], 0x8000
push eax
mov edx, 1
imul eax, edx, 0
movzx ecx, byte [eax + 0x10032780]
push ecx
lea ecx, [ebp - 0x160c]
call fcn.100180e0
or dword [ebp - 0x1ba8], 0x10000
push eax
mov edx, 1
imul eax, edx, 3
movzx ecx, byte [eax + 0x10032780]
push ecx
lea ecx, [ebp - 0x15f4]
call fcn.100180e0
or dword [ebp - 0x1ba8], 0x20000
push eax
lea ecx, [ebp - 0x15dc]
call fcn.100180e0
or dword [ebp - 0x1ba8], 0x40000
push eax
mov edx, 1
imul eax, edx, 6
movsx ecx, byte [eax + section..data]
push ecx
call fcn.10020301
add esp, 4
push eax
lea edx, [ebp - 0x15c4]
push edx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1ba8], 0x80000
push eax
lea ecx, [ebp - 0x15ac]
call fcn.100180e0
or dword [ebp - 0x1ba8], 0x100000
push eax
mov eax, 1
imul ecx, eax, 0
movzx edx, byte [ecx + 0x10032780]
push edx
lea eax, [ebp - 0x1594]
push eax
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1ba8], 0x200000
push eax
mov ecx, 1
imul edx, ecx, 6
movzx eax, byte [edx + section..data]
push eax
lea ecx, [ebp - 0x157c]
call fcn.100180e0
or dword [ebp - 0x1ba8], 0x400000
push eax
mov ecx, 1
imul edx, ecx, 0
movzx eax, byte [edx + 0x10032200]
push eax
lea ecx, [ebp - 0x1564]
call fcn.100180e0
or dword [ebp - 0x1ba8], 0x800000
push eax
lea ecx, [ebp - 0x154c]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba8], 0x1000000
push eax
lea ecx, [ebp - 0x1534]
call fcn.100180e0
or dword [ebp - 0x1ba8], 0x2000000
push eax
mov edx, 1
shl edx, 0
movzx eax, byte [edx + 0x10032800]
push eax
lea ecx, [ebp - 0x151c]
call fcn.100180e0
or dword [ebp - 0x1ba8], 0x4000000
push eax
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [edx + 0x10032780]
push eax
call fcn.10020301
add esp, 4
push eax
lea ecx, [ebp - 0x1504]
push ecx
call fcn.10017880
add esp, 0xc
or dword [ebp - 0x1ba8], 0x8000000
push eax
lea edx, [ebp - 0x14ec]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1ba8], 0x10000000
push eax
lea eax, [ebp - 0x14d4]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba8], 0x20000000
push eax
lea ecx, [ebp - 0x14bc]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba8], 0x40000000
push eax
lea edx, [ebp - 0x14a4]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1ba8], 0x80000000
push eax
lea eax, [ebp - 0x148c]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bb4], 1
push eax
lea ecx, [ebp - 0x1474]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb4], 2
push eax
lea edx, [ebp - 0x145c]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb4], 4
push eax
lea eax, [ebp - 0x1444]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb4], 8
push eax
lea ecx, [ebp - 0x142c]
push ecx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bb4], 0x10
push eax
lea edx, [ebp - 0x1414]
push edx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb4], 0x20
push eax
lea eax, [ebp - 0x13fc]
push eax
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bb4], 0x40
push eax
lea ecx, [ebp - 0x13e4]
push ecx
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb4], 0x80
push eax
lea edx, [ebp - 0x13cc]
push edx
call fcn.10017850
add esp, 0xc
or dword [ebp - 0x1bb4], 0x100
push eax
lea eax, [ebp - 0x13b4]
push eax
call fcn.10017830
add esp, 0xc
or dword [ebp - 0x1bb4], 0x200
mov ecx, eax
call fcn.100185e0
push eax
mov ecx, dword [0x100340a8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x1bd8], eax
jmp 0x100098f3
mov dword [ebp - 0x1bd8], 0
mov edx, dword [ebp - 0x1bd8]
mov dword [ebp - 0x1bdc], edx
push 0x28
push 0x40
call dword [ebp - 0x1bdc]
mov dword [ebp - 0x1bbc], eax
mov eax, dword [ebp - 0x1bb4]
and eax, 0x200
je 0x10009931
and dword [ebp - 0x1bb4], 0xfffffdff
lea ecx, [ebp - 0x13b4]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1bb4]
and ecx, 0x100
je 0x10009954
and dword [ebp - 0x1bb4], 0xfffffeff
lea ecx, [ebp - 0x13cc]
call fcn.10004b6a
mov edx, dword [ebp - 0x1bb4]
and edx, 0x80
je 0x10009977
and dword [ebp - 0x1bb4], 0xffffff7f
lea ecx, [ebp - 0x13e4]
call fcn.10004b6a
mov eax, dword [ebp - 0x1bb4]
and eax, 0x40
je 0x10009994
and dword [ebp - 0x1bb4], 0xffffffbf
lea ecx, [ebp - 0x13fc]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1bb4]
and ecx, 0x20
je 0x100099b1
and dword [ebp - 0x1bb4], 0xffffffdf
lea ecx, [ebp - 0x1414]
call fcn.10004b6a
mov edx, dword [ebp - 0x1bb4]
and edx, 0x10
je 0x100099ce
and dword [ebp - 0x1bb4], 0xffffffef
lea ecx, [ebp - 0x142c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1bb4]
and eax, 8
je 0x100099eb
and dword [ebp - 0x1bb4], 0xfffffff7
lea ecx, [ebp - 0x1444]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1bb4]
and ecx, 4
je 0x10009a08
and dword [ebp - 0x1bb4], 0xfffffffb
lea ecx, [ebp - 0x145c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1bb4]
and edx, 2
je 0x10009a25
and dword [ebp - 0x1bb4], 0xfffffffd
lea ecx, [ebp - 0x1474]
call fcn.10004b6a
mov eax, dword [ebp - 0x1bb4]
and eax, 1
je 0x10009a42
and dword [ebp - 0x1bb4], 0xfffffffe
lea ecx, [ebp - 0x148c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba8]
and ecx, 0x80000000
je 0x10009a65
and dword [ebp - 0x1ba8], 0x7fffffff
lea ecx, [ebp - 0x14a4]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba8]
and edx, 0x40000000
je 0x10009a88
and dword [ebp - 0x1ba8], 0xbfffffff
lea ecx, [ebp - 0x14bc]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba8]
and eax, 0x20000000
je 0x10009aaa
and dword [ebp - 0x1ba8], 0xdfffffff
lea ecx, [ebp - 0x14d4]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba8]
and ecx, 0x10000000
je 0x10009acd
and dword [ebp - 0x1ba8], 0xefffffff
lea ecx, [ebp - 0x14ec]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba8]
and edx, 0x8000000
je 0x10009af0
and dword [ebp - 0x1ba8], 0xf7ffffff
lea ecx, [ebp - 0x1504]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba8]
and eax, 0x4000000
je 0x10009b12
and dword [ebp - 0x1ba8], 0xfbffffff
lea ecx, [ebp - 0x151c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba8]
and ecx, 0x2000000
je 0x10009b35
and dword [ebp - 0x1ba8], 0xfdffffff
lea ecx, [ebp - 0x1534]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba8]
and edx, 0x1000000
je 0x10009b58
and dword [ebp - 0x1ba8], 0xfeffffff
lea ecx, [ebp - 0x154c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba8]
and eax, 0x800000
je 0x10009b7a
and dword [ebp - 0x1ba8], 0xff7fffff
lea ecx, [ebp - 0x1564]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba8]
and ecx, 0x400000
je 0x10009b9d
and dword [ebp - 0x1ba8], 0xffbfffff
lea ecx, [ebp - 0x157c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba8]
and edx, 0x200000
je 0x10009bc0
and dword [ebp - 0x1ba8], 0xffdfffff
lea ecx, [ebp - 0x1594]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba8]
and eax, 0x100000
je 0x10009be2
and dword [ebp - 0x1ba8], 0xffefffff
lea ecx, [ebp - 0x15ac]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba8]
and ecx, 0x80000
je 0x10009c05
and dword [ebp - 0x1ba8], 0xfff7ffff
lea ecx, [ebp - 0x15c4]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba8]
and edx, 0x40000
je 0x10009c28
and dword [ebp - 0x1ba8], 0xfffbffff
lea ecx, [ebp - 0x15dc]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba8]
and eax, 0x20000
je 0x10009c4a
and dword [ebp - 0x1ba8], 0xfffdffff
lea ecx, [ebp - 0x15f4]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba8]
and ecx, 0x10000
je 0x10009c6d
and dword [ebp - 0x1ba8], 0xfffeffff
lea ecx, [ebp - 0x160c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba8]
and edx, 0x8000
je 0x10009c90
and dword [ebp - 0x1ba8], 0xffff7fff
lea ecx, [ebp - 0x1624]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba8]
and eax, 0x4000
je 0x10009cb2
and dword [ebp - 0x1ba8], 0xffffbfff
lea ecx, [ebp - 0x163c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba8]
and ecx, 0x2000
je 0x10009cd5
and dword [ebp - 0x1ba8], 0xffffdfff
lea ecx, [ebp - 0x1654]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba8]
and edx, 0x1000
je 0x10009cf8
and dword [ebp - 0x1ba8], 0xffffefff
lea ecx, [ebp - 0x166c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba8]
and eax, 0x800
je 0x10009d1a
and dword [ebp - 0x1ba8], 0xfffff7ff
lea ecx, [ebp - 0x1684]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba8]
and ecx, 0x400
je 0x10009d3d
and dword [ebp - 0x1ba8], 0xfffffbff
lea ecx, [ebp - 0x169c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba8]
and edx, 0x200
je 0x10009d60
and dword [ebp - 0x1ba8], 0xfffffdff
lea ecx, [ebp - 0x16b4]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba8]
and eax, 0x100
je 0x10009d82
and dword [ebp - 0x1ba8], 0xfffffeff
lea ecx, [ebp - 0x16cc]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba8]
and ecx, 0x80
je 0x10009da5
and dword [ebp - 0x1ba8], 0xffffff7f
lea ecx, [ebp - 0x16e4]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba8]
and edx, 0x40
je 0x10009dc2
and dword [ebp - 0x1ba8], 0xffffffbf
lea ecx, [ebp - 0x16fc]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba8]
and eax, 0x20
je 0x10009ddf
and dword [ebp - 0x1ba8], 0xffffffdf
lea ecx, [ebp - 0x1714]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba8]
and ecx, 0x10
je 0x10009dfc
and dword [ebp - 0x1ba8], 0xffffffef
lea ecx, [ebp - 0x172c]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba8]
and edx, 8
je 0x10009e19
and dword [ebp - 0x1ba8], 0xfffffff7
lea ecx, [ebp - 0x1744]
call fcn.10004b6a
mov eax, dword [ebp - 0x1ba8]
and eax, 4
je 0x10009e36
and dword [ebp - 0x1ba8], 0xfffffffb
lea ecx, [ebp - 0x175c]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1ba8]
and ecx, 2
je 0x10009e53
and dword [ebp - 0x1ba8], 0xfffffffd
lea ecx, [ebp - 0x1774]
call fcn.10004b6a
mov edx, dword [ebp - 0x1ba8]
and edx, 1
je 0x10009e70
and dword [ebp - 0x1ba8], 0xfffffffe
lea ecx, [ebp - 0x178c]
call fcn.10004b6a
mov eax, dword [ebp - 0x1bac]
and eax, 0x80000000
je 0x10009e92
and dword [ebp - 0x1bac], 0x7fffffff
lea ecx, [ebp - 0x17a4]
call fcn.10004b6a
mov ecx, dword [ebp - 0x1bac]
and ecx, 0x40000000
je 0x10009eb5
and dword [ebp - 0x1bac], 0xbfffffff
lea ecx, [ebp - 0x17bc]
call fcn.10004b6a
mov edx, dword [ebp - 0x1bac]
and edx, 0x20000000
je 0x10009ed8
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001b39e
mov esp, ebp
pop ebp
ret