Function at 0x10e8780
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x1d90
call sub.ntdll.dll__chkstk
push ebx
push esi
push edi
mov dword [ebp - 0x1ca4], ecx
cmp dword [ebp + 0xc], 0
jne 0x10e87ae
cmp dword [ebp + 0x10], 0
jne 0x10e87ae
mov eax, 1
jmp 0x10ed796
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
call fcn.01165ea0
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x2c]
shl eax, 0x14
cdq
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
call fcn.0108d4a0
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x20], 0xffffffff
call fcn.010905a0
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x2c], 0
call fcn.01117e60
mov dword [ebp - 0x64], eax
call fcn.011434b0
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x74], 0xc
mov dword [ebp - 0x34], 0xc
mov dword [ebp - 0x54], 0
mov dword [ebp - 8], 0
cmp dword [ebp + 0xc], 0
je 0x10e8880
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x24]
call edx
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x54], eax
cmp dword [ebp + 0x10], 0
je 0x10e88a6
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 8], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10e8901
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 1
jne 0x10e8901
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1ca8], eax
mov ecx, dword [ebp - 0x1ca8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1ca8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10e8901
mov dword [ebp - 4], 1
mov dword [ebp - 0x18], 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10e8920
mov dword [ebp - 0x18], 1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
jne 0x10e8942
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10e89b4
mov ecx, dword [ebp + 0x30]
push ecx
push 0
push 0
push 0
push 0x2a
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
push 0x1001464
push 0x1001464
call fcn.0108ddc0
mov edx, dword [ebp - 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc]
mov edx, dword [eax]
call edx
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xc]
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xc]
mov eax, dword [edx + 8]
call eax
mov ecx, dword [ebp - 0x64]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x64]
mov eax, dword [edx]
call eax
mov ecx, dword [ebp - 0x64]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x64]
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x64]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x64]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 0x14], 0
je 0x10e8a45
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x44]
call eax
add esi, eax
adc edi, edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
add eax, 0x100000
adc edx, 0
mov dword [ebp - 0x1cb0], esi
mov dword [ebp - 0x1cac], edi
mov dword [ebp - 0x1cb8], eax
mov dword [ebp - 0x1cb4], edx
mov ecx, dword [ebp - 0x1cac]
cmp ecx, dword [ebp - 0x1cb4]
jl 0x10e8a43
jg 0x10e8a3c
mov edx, dword [ebp - 0x1cb0]
cmp edx, dword [ebp - 0x1cb8]
jbe 0x10e8a43
mov dword [ebp - 0x10], 1
jmp 0x10e8ab9
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
add eax, 0x100000
adc edx, 0
mov dword [ebp - 0x1cc0], esi
mov dword [ebp - 0x1cbc], edi
mov dword [ebp - 0x1cc8], eax
mov dword [ebp - 0x1cc4], edx
mov ecx, dword [ebp - 0x1cbc]
cmp ecx, dword [ebp - 0x1cc4]
jl 0x10e8ab9
jg 0x10e8ab2
mov edx, dword [ebp - 0x1cc0]
cmp edx, dword [ebp - 0x1cc8]
jbe 0x10e8ab9
mov dword [ebp - 0x10], 1
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
mov ecx, dword [ebp - 0x30]
xor esi, esi
push esi
push ecx
push edx
push eax
call sub.ntdll.dll__allmul
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
cmp dword [ebp + 0x2c], 1
jne 0x10e8bf7
mov word [ebp - 0x280], 0
push 0x206
push 0
lea edx, [ebp - 0x27e]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x100
push 0
push 0x1190828
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov edx, dword [ebp - 0x44]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100c304
push 0x1190828
call sub.ntdll.dll_swprintf
add esp, 0x10
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x28]
call edx
movzx eax, ax
cmp eax, 0x2a
jne 0x10e8bb4
mov ecx, dword [ebp - 0x44]
push ecx
push 0x100c2e4
push 0x1190828
call sub.ntdll.dll_swprintf
add esp, 0xc
push 0x1190828
mov edx, dword [ebp + 0x1c]
push edx
push 0x1005770
lea eax, [ebp - 0x280]
push eax
call sub.ntdll.dll_swprintf
add esp, 0x10
lea ecx, [ebp - 0x280]
push ecx
call fcn.0110ba50
test eax, eax
jne 0x10e8bf7
push 0x2c
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x20]
call edx
xor eax, eax
jmp 0x10ed796
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 1
je 0x10ea19c
cmp dword [ebp + 0x14], 0
je 0x10e8f70
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0xffffffff
jne 0x10e8c6c
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx]
call eax
push 0x40
push 0
lea ecx, [ebp - 0x2c0]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x2c0], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x2a0], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x20]
call eax
add esi, eax
adc edi, edx
mov dword [ebp - 0x2a8], esi
mov dword [ebp - 0x2a4], edi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x20]
call eax
add esi, eax
adc edi, edx
push edi
push esi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x20]
call eax
add esi, eax
adc edi, edx
push edi
push esi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x2a4]
push edx
mov eax, dword [ebp - 0x2a8]
push eax
call fcn.0110d210
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
push 0
mov edx, dword [ebp + 0xc]
push edx
call fcn.0110d180
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x29e], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x29c], eax
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x2c0]
push edx
mov eax, dword [ebp - 0x64]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x64]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x10e8df9
xor eax, eax
jmp 0x10ed796
mov ecx, dword [ebp + 0xc]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
jne 0x10e8e85
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
push 6
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x1ccc], eax
push 0x1bb
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b7f8
mov ecx, dword [ebp - 0x1ccc]
push ecx
mov edx, dword [ebp - 0x1ccc]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10ed796
push 0x9c4
call fcn.0108d6a0
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10e8f49
call fcn.010906a0
mov dword [ebp - 0x1cd0], eax
push 0x1c4
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0x1cd0]
push ecx
mov edx, dword [ebp - 0x1cd0]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0x1ca4]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x78]
call edx
test eax, eax
je 0x10e8f70
push 0x17
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
xor eax, eax
jmp 0x10ed796
cmp dword [ebp + 0x10], 0
je 0x10ea197
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 0
mov word [ebp - 0x314], 0
xor ecx, ecx
mov dword [ebp - 0x312], ecx
mov dword [ebp - 0x30e], ecx
mov dword [ebp - 0x30a], ecx
mov dword [ebp - 0x306], ecx
mov word [ebp - 0x302], cx
mov word [ebp - 0x300], 0
xor edx, edx
mov dword [ebp - 0x2fe], edx
mov dword [ebp - 0x2fa], edx
mov dword [ebp - 0x2f6], edx
mov dword [ebp - 0x2f2], edx
mov word [ebp - 0x2ee], dx
mov dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x2ec]
add eax, 1
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x2710
jbe 0x10e90c5
push 0
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x1cd4], eax
push 0x1e7
push 0x100c22c
call fcn.010e8660
push eax
push 0x100c2b8
mov ecx, dword [ebp - 0x1cd4]
push ecx
mov edx, dword [ebp - 0x1cd4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov eax, 1
jmp 0x10ed796
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110b1c0
test eax, eax
je 0x10e9149
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], edx
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x1c], eax
mov dword [ebp + 0x10], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x2c], 1
jmp 0x10e96b5
cmp dword [ebp - 0x10], 0
jne 0x10e96b5
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x18]
call eax
cmp dword [ebp - 0x20], 0xffffffff
jne 0x10e91a2
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx]
call eax
push 0x40
push 0
lea ecx, [ebp - 0x370]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x44]
call edx
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
add esi, 0x100000
adc edi, 0
mov dword [ebp - 0x1cdc], esi
mov dword [ebp - 0x1cd8], edi
mov ecx, dword [ebp - 0x1cd8]
cmp ecx, dword [ebp - 0x6c]
jg 0x10e9254
jl 0x10e9204
mov edx, dword [ebp - 0x1cdc]
cmp edx, dword [ebp - 0x70]
ja 0x10e9254
push 0x111111
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x1ce0], eax
push 0x200
push 0x100c22c
call fcn.010e8660
push eax
push 0x100c29c
mov ecx, dword [ebp - 0x1ce0]
push ecx
mov edx, dword [ebp - 0x1ce0]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10ed796
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x44]
call edx
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, dword [ebp - 0x70]
sbb edi, dword [ebp - 0x6c]
mov dword [ebp - 0x330], esi
mov dword [ebp - 0x32c], edi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
mov dword [ebp - 0x328], esi
mov dword [ebp - 0x324], edi
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub eax, dword [ebp - 0x328]
sbb edx, dword [ebp - 0x324]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], edx
js 0x10e9344
jg 0x10e92e8
cmp dword [ebp - 0x2e0], 0
jbe 0x10e9344
mov ecx, dword [ebp - 0x2e0]
add ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x2dc]
adc edx, dword [ebp - 0x6c]
mov dword [ebp - 0x1ce8], ecx
mov dword [ebp - 0x1ce4], edx
mov eax, dword [ebp - 0x1ce4]
cmp eax, dword [ebp - 0x32c]
jg 0x10e9344
jl 0x10e9324
mov ecx, dword [ebp - 0x1ce8]
cmp ecx, dword [ebp - 0x330]
ja 0x10e9344
mov edx, dword [ebp - 0x2e0]
add edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x2dc]
adc eax, dword [ebp - 0x6c]
mov dword [ebp - 0x2e0], edx
mov dword [ebp - 0x2dc], eax
jmp 0x10e935c
mov ecx, dword [ebp - 0x330]
mov dword [ebp - 0x2e0], ecx
mov edx, dword [ebp - 0x32c]
mov dword [ebp - 0x2dc], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x370], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x30]
call edx
mov word [ebp - 0x350], ax
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
add eax, dword [ebp - 0x2e0]
adc edx, dword [ebp - 0x2dc]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x31c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [ebp - 0x320]
sub esi, eax
mov edi, dword [ebp - 0x31c]
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0
je 0x10e943c
mov eax, dword [ebp - 0x2e8]
cdq
mov ecx, dword [ebp - 0x320]
sub ecx, eax
mov eax, dword [ebp - 0x31c]
sbb eax, edx
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x31c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [ebp - 0x320]
sub ecx, eax
mov eax, dword [ebp - 0x31c]
sbb eax, edx
mov dword [ebp - 0x2d0], ecx
mov dword [ebp - 0x2cc], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
sub eax, dword [ebp - 0x2d0]
sbb edx, dword [ebp - 0x2cc]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0x318], ecx
mov edx, dword [ebp - 0x2c4]
push edx
mov eax, dword [ebp - 0x2c8]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp - 0x2c4]
push ecx
mov edx, dword [ebp - 0x2c8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
push 0
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110d180
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0x2e4], ecx
mov edx, dword [ebp - 0x318]
cmp edx, dword [ebp - 0x2e4]
je 0x10e965f
mov dword [ebp - 0x2e8], 0
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [ebp - 0x320]
sub esi, eax
mov edi, dword [ebp - 0x31c]
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
cdq
mov ecx, dword [ebp - 0x2d0]
sub ecx, eax
mov eax, dword [ebp - 0x2cc]
sbb eax, edx
mov dword [ebp - 0x2d0], ecx
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2e8]
cdq
mov ecx, dword [ebp - 0x320]
sub ecx, eax
mov eax, dword [ebp - 0x31c]
sbb eax, edx
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x31c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0x2e8]
cdq
add ecx, eax
adc esi, edx
mov dword [ebp - 0x2c8], ecx
mov dword [ebp - 0x2c4], esi
mov edx, dword [ebp - 0x2c4]
push edx
mov eax, dword [ebp - 0x2c8]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp - 0x2c4]
push ecx
mov edx, dword [ebp - 0x2c8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
push 0
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110d180
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0x2e4], ecx
mov edx, dword [ebp - 0x2c8]
mov dword [ebp - 0x358], edx
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x354], eax
mov cx, word [ebp - 0x2e4]
mov word [ebp - 0x34e], cx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x24]
call edx
mov dword [ebp - 0x34c], eax
push 0
mov eax, dword [ebp + 0x30]
push eax
lea ecx, [ebp - 0x370]
push ecx
mov edx, dword [ebp - 0x64]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x64]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x10], 0
jne 0x10e989e
cmp dword [ebp - 0x1c], 0
je 0x10e989e
mov eax, dword [ebp - 0x2d8]
or eax, dword [ebp - 0x2d4]
jne 0x10e989e
xor ecx, ecx
mov dword [ebp - 0x398], ecx
mov dword [ebp - 0x394], ecx
mov dword [ebp - 0x390], ecx
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0x388], ecx
mov dword [ebp - 0x384], ecx
mov dword [ebp - 0x380], ecx
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0x378], ecx
mov dword [ebp - 0x374], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x378], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x37c], edx
mov ecx, dword [ebp - 0x320]
mov dword [ebp - 0x388], ecx
mov edx, dword [ebp - 0x31c]
mov dword [ebp - 0x384], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x38c]
push ecx
mov edx, dword [ebp - 0x390]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xb0]
call eax
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x398]
push edx
mov eax, dword [ebp - 0x64]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x64]
mov eax, dword [edx + 0x38]
call eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10e9827
mov ecx, dword [ebp - 0x31c]
push ecx
mov edx, dword [ebp - 0x320]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x80]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
je 0x10e9825
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x9c]
call eax
jmp 0x10e989e
mov ecx, dword [ebp + 0x10]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
push 0x9c4
call fcn.0108d6a0
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x64]
call eax
mov dword [ebp - 0x39c], eax
mov ecx, dword [ebp + 0x30]
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x28]
call edx
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
mov eax, dword [ebp - 0x39c]
push eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
cmp dword [ebp - 0x10], 0
jne 0x10e9fe1
cmp dword [ebp - 0x1c], 0
je 0x10e98bc
mov ecx, dword [ebp - 0x2d8]
or ecx, dword [ebp - 0x2d4]
je 0x10e98ce
mov edx, dword [ebp - 0x2d8]
or edx, dword [ebp - 0x2d4]
je 0x10e9fe1
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0xffffffff
jne 0x10e9923
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx]
call eax
push 0x40
push 0
lea ecx, [ebp - 0x3e0]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x3e0], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3d4], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x3c0], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3cc], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x3bc], eax
mov ecx, dword [ebp - 0x2d8]
or ecx, dword [ebp - 0x2d4]
jne 0x10e9a26
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x44]
call edx
add eax, dword [ebp - 0x2d0]
adc edx, dword [ebp - 0x2cc]
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x2d0]
adc edx, dword [ebp - 0x2cc]
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x2d0]
adc edx, dword [ebp - 0x2cc]
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
jmp 0x10e9aa1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x2d8]
adc edx, dword [ebp - 0x2d4]
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x2d8]
adc edx, dword [ebp - 0x2d4]
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x2d8]
adc edx, dword [ebp - 0x2d4]
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
push 0
mov edx, dword [ebp + 0xc]
push edx
call fcn.0110d180
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x3be], ax
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x3e0]
push edx
mov eax, dword [ebp - 0x64]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x64]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x10e9b07
jmp 0x10ea197
mov ecx, dword [ebp - 0x2d8]
or ecx, dword [ebp - 0x2d4]
je 0x10e9b4c
cmp dword [ebp - 8], 0
je 0x10e9b4c
push 1
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0xb8]
call edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x9c]
call eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10e9c09
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
cmp dword [ebp + 0x10], 0
je 0x10e9bbc
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
push 6
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x1cec], eax
push 0x297
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b7f8
mov ecx, dword [ebp - 0x1cec]
push ecx
mov edx, dword [ebp - 0x1cec]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10ed796
push 0x9c4
call fcn.0108d6a0
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
cmp dword [ebp + 0x10], 0
je 0x10e9c66
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10e9cf8
call fcn.010906a0
mov dword [ebp - 0x1cf0], eax
push 0x2a3
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0x1cf0]
push ecx
mov edx, dword [ebp - 0x1cf0]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0x1ca4]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
mov edx, dword [ebp - 0x2d8]
or edx, dword [ebp - 0x2d4]
jne 0x10e9da1
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10e9d9c
call fcn.010906a0
mov dword [ebp - 0x1cf4], eax
push 0x2ab
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0x1cf4]
push ecx
mov edx, dword [ebp - 0x1cf4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0x1ca4]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
jmp 0x10e9e2a
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ax, word [ebp + 0x24]
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10e9e2a
call fcn.010906a0
mov dword [ebp - 0x1cf8], eax
push 0x2b4
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0x1cf8]
push ecx
mov edx, dword [ebp - 0x1cf8]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0x1ca4]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
cmp dword [ebp - 0x2c], 0
je 0x10e9e69
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
mov dx, word [ebp + 0x24]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x8c]
call eax
push 0
mov ecx, dword [ebp + 0x18]
push ecx
call fcn.010c2e90
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x78]
call edx
test eax, eax
je 0x10e9e8e
push 0x17
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10ea197
cmp dword [ebp - 0x1c], 0
je 0x10e9fdc
mov ecx, dword [ebp - 0x2d8]
or ecx, dword [ebp - 0x2d4]
jne 0x10e9fdc
mov dword [ebp - 0x3e8], 0
mov dword [ebp - 0x3e4], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov edx, dword [ebp + 0x30]
push edx
push 0x1190828
lea eax, [ebp - 0x3e8]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x50]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x20]
call edx
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, 0x100000
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110ac40
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x30]
xor edx, edx
push edx
push ecx
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call sub.ntdll.dll__alldiv
add esi, eax
adc edi, edx
add esi, 1
adc edi, 0
push edi
push esi
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x98]
call edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x60]
sub ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x5c]
sbb edx, dword [ebp - 0x3e4]
mov eax, dword [ebp - 0x30]
xor ebx, ebx
push ebx
push eax
push edx
push ecx
call sub.ntdll.dll__aulldiv
sub esi, eax
sbb edi, edx
sub esi, 1
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x98]
call eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x78]
call eax
test eax, eax
je 0x10e9fdc
push 0x17
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10ea197
jmp 0x10ea15d
cmp dword [ebp - 0x10], 0
je 0x10ea15d
mov ecx, dword [ebp - 0x2d8]
or ecx, dword [ebp - 0x2d4]
jne 0x10ea15d
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
cmp dword [ebp + 0x10], 0
je 0x10ea05e
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov dword [ebp - 0x3f0], 0
mov dword [ebp - 0x3ec], 0
mov eax, dword [ebp + 0x30]
push eax
push 0x1190828
lea ecx, [ebp - 0x3f0]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, 0x100000
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110ac40
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x30]
xor edx, edx
push edx
push ecx
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call sub.ntdll.dll__alldiv
add esi, eax
adc edi, edx
add esi, 1
adc edi, 0
push edi
push esi
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x98]
call edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x60]
sub ecx, dword [ebp - 0x3f0]
mov edx, dword [ebp - 0x5c]
sbb edx, dword [ebp - 0x3ec]
mov eax, dword [ebp - 0x30]
xor ebx, ebx
push ebx
push eax
push edx
push ecx
call sub.ntdll.dll__aulldiv
sub esi, eax
sbb edi, edx
sub esi, 1
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x98]
call eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x78]
call eax
test eax, eax
je 0x10ea17f
push 0x17
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10ea197
mov ecx, dword [ebp - 0x2d8]
or ecx, dword [ebp - 0x2d4]
jne 0x10ea197
cmp dword [ebp - 0x1c], 0
jne 0x10e905a
jmp 0x10ed793
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x24]
call edx
cmp eax, 1
jne 0x10ebc1a
cmp dword [ebp + 0x14], 0
je 0x10ea665
cmp dword [ebp - 4], 0
jne 0x10ea217
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0xffffffff
jne 0x10ea217
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx]
call eax
push 0x148
push 0
lea ecx, [ebp - 0x538]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x538], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x52c], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x50c], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x524], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x51c], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x20]
call eax
add esi, eax
adc edi, edx
mov dword [ebp - 0x518], esi
mov dword [ebp - 0x514], edi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x510], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1cfc], eax
mov ecx, dword [ebp - 0x1cfc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1cfc]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0x508], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1d00], eax
mov ecx, dword [ebp - 0x1d00]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d00]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0x50a], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0x506]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x20]
call eax
add esi, eax
adc edi, edx
sub esi, 1
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x20]
call eax
add esi, eax
adc edi, edx
push edi
push esi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
cmp dword [ebp - 4], 0
je 0x10ea4bc
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0xffffffff
je 0x10ea3fb
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x540], 0
mov dword [ebp - 0x53c], 0
lea ecx, [ebp - 0x540]
push ecx
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp - 0x52c]
push eax
mov ecx, dword [ebp - 0x530]
push ecx
mov edx, dword [ebp - 0x524]
push edx
mov eax, dword [ebp - 0x528]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x514]
push ecx
mov edx, dword [ebp - 0x518]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb800
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10ea4b7
mov ecx, dword [ebp - 0x53c]
push ecx
mov edx, dword [ebp - 0x540]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp - 0x540]
sub ecx, 1
mov edx, dword [ebp - 0x53c]
sbb edx, 0
push edx
push ecx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
jmp 0x10ea63e
push 0
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x538]
push edx
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xc]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10ea637
mov ecx, dword [ebp + 0xc]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
jne 0x10ea571
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
push 6
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x1d04], eax
push 0x333
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b7f8
mov ecx, dword [ebp - 0x1d04]
push ecx
mov edx, dword [ebp - 0x1d04]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10ed796
push 0x9c4
call fcn.0108d6a0
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10ea635
call fcn.010906a0
mov dword [ebp - 0x1d08], eax
push 0x33c
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0x1d08]
push ecx
mov edx, dword [ebp - 0x1d08]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0x1ca4]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
jmp 0x10ea63e
xor eax, eax
jmp 0x10ed796
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x78]
call edx
test eax, eax
je 0x10ea665
push 0x17
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
xor eax, eax
jmp 0x10ed796
cmp dword [ebp + 0x10], 0
je 0x10ebc15
mov dword [ebp - 0x568], 0
mov dword [ebp - 0x598], 0
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x5a0], 0
mov dword [ebp - 0x59c], 0
mov dword [ebp - 0x550], 0
mov dword [ebp - 0x54c], 0
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x554], 0
mov dword [ebp - 0x560], 0
mov dword [ebp - 0x55c], 0
mov word [ebp - 0x594], 0
xor ecx, ecx
mov dword [ebp - 0x592], ecx
mov dword [ebp - 0x58e], ecx
mov dword [ebp - 0x58a], ecx
mov dword [ebp - 0x586], ecx
mov word [ebp - 0x582], cx
mov word [ebp - 0x580], 0
xor edx, edx
mov dword [ebp - 0x57e], edx
mov dword [ebp - 0x57a], edx
mov dword [ebp - 0x576], edx
mov dword [ebp - 0x572], edx
mov word [ebp - 0x56e], dx
mov dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x56c]
add eax, 1
mov dword [ebp - 0x56c], eax
cmp dword [ebp - 0x56c], 0x2710
jbe 0x10ea7ba
push 0
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x1d0c], eax
push 0x362
push 0x100c22c
call fcn.010e8660
push eax
push 0x100c2b8
mov ecx, dword [ebp - 0x1d0c]
push ecx
mov edx, dword [ebp - 0x1d0c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov eax, 1
jmp 0x10ed796
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110b1c0
test eax, eax
je 0x10ea98c
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x558], eax
mov dword [ebp - 0x554], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
mov word [ebp - 0x5a4], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1d10], eax
mov ecx, dword [ebp - 0x1d10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d10]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x5b4], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x5ac], edx
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 4], 0
je 0x10ea980
mov cx, word [ebp - 0x5a4]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x10]
call edx
push 0
push 1
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x2c]
call eax
push 0xbb8
call fcn.0108d6a0
push 0
mov ecx, dword [ebp + 0x18]
push ecx
call fcn.010c2e90
mov dword [ebp - 0x5b8], 0
push 0x64
call fcn.0108d6a0
mov edx, dword [ebp - 0x5b8]
push edx
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 8]
call eax
mov word [ebp - 0x9b8], 0
push 0x3fe
push 0
lea ecx, [ebp - 0x9b6]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x5ac]
push edx
mov eax, dword [ebp - 0x5b0]
push eax
mov ecx, dword [ebp - 0x5b4]
push ecx
push 0x200
lea edx, [ebp - 0x9b8]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10ea949
jmp 0x10ea967
mov ecx, dword [ebp - 0x5b8]
mov edx, dword [ebp - 0x5b8]
add edx, 1
mov dword [ebp - 0x5b8], edx
cmp ecx, 0x64
jl 0x10ea8db
push 0
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x28]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
mov dword [ebp + 0x10], 0
jmp 0x10eae08
cmp dword [ebp - 0x10], 0
jne 0x10eae08
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x18]
call eax
cmp dword [ebp - 0x20], 0xffffffff
jne 0x10ea9e5
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
add esi, 0x100000
adc edi, 0
mov dword [ebp - 0x1d18], esi
mov dword [ebp - 0x1d14], edi
mov ecx, dword [ebp - 0x1d14]
cmp ecx, dword [ebp - 0x6c]
jg 0x10eaa84
jl 0x10eaa34
mov edx, dword [ebp - 0x1d18]
cmp edx, dword [ebp - 0x70]
ja 0x10eaa84
push 0x111111
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x1d1c], eax
push 0x390
push 0x100c22c
call fcn.010e8660
push eax
push 0x100c29c
mov ecx, dword [ebp - 0x1d1c]
push ecx
mov edx, dword [ebp - 0x1d1c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10ed796
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x44]
call edx
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, dword [ebp - 0x70]
sbb edi, dword [ebp - 0x6c]
mov dword [ebp - 0x9c8], esi
mov dword [ebp - 0x9c4], edi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
mov dword [ebp - 0x9c0], esi
mov dword [ebp - 0x9bc], edi
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub eax, dword [ebp - 0x9c0]
sbb edx, dword [ebp - 0x9bc]
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x55c], edx
js 0x10eab74
jg 0x10eab18
cmp dword [ebp - 0x560], 0
jbe 0x10eab74
mov ecx, dword [ebp - 0x560]
add ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x55c]
adc edx, dword [ebp - 0x6c]
mov dword [ebp - 0x1d24], ecx
mov dword [ebp - 0x1d20], edx
mov eax, dword [ebp - 0x1d20]
cmp eax, dword [ebp - 0x9c4]
jg 0x10eab74
jl 0x10eab54
mov ecx, dword [ebp - 0x1d24]
cmp ecx, dword [ebp - 0x9c8]
ja 0x10eab74
mov edx, dword [ebp - 0x560]
add edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x55c]
adc eax, dword [ebp - 0x6c]
mov dword [ebp - 0x560], edx
mov dword [ebp - 0x55c], eax
jmp 0x10eab8c
mov ecx, dword [ebp - 0x9c8]
mov dword [ebp - 0x560], ecx
mov edx, dword [ebp - 0x9c4]
mov dword [ebp - 0x55c], edx
push 0x148
push 0
lea eax, [ebp - 0xb10]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0xb10], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xb08], eax
mov dword [ebp - 0xb04], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0xae4], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0xb00], eax
mov dword [ebp - 0xafc], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xaf8], eax
mov dword [ebp - 0xaf4], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
add eax, dword [ebp - 0x560]
adc edx, dword [ebp - 0x55c]
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [ebp - 0x5a0]
sub esi, eax
mov edi, dword [ebp - 0x59c]
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
je 0x10eac9b
mov eax, dword [ebp - 0x568]
cdq
mov ecx, dword [ebp - 0x5a0]
sub ecx, eax
mov eax, dword [ebp - 0x59c]
sbb eax, edx
mov dword [ebp - 0x5a0], ecx
mov dword [ebp - 0x59c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [ebp - 0x5a0]
sub ecx, eax
mov eax, dword [ebp - 0x59c]
sbb eax, edx
mov dword [ebp - 0x550], ecx
mov dword [ebp - 0x54c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
sub eax, dword [ebp - 0x550]
sbb edx, dword [ebp - 0x54c]
mov dword [ebp - 0x548], eax
mov dword [ebp - 0x544], edx
mov ecx, dword [ebp - 0x548]
mov dword [ebp - 0xaf0], ecx
mov edx, dword [ebp - 0x544]
mov dword [ebp - 0xaec], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0xae8], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1d28], eax
mov ecx, dword [ebp - 0x1d28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d28]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0xae0], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1d2c], eax
mov ecx, dword [ebp - 0x1d2c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d2c]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0xae2], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0xade]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
push 0
push 0
mov eax, dword [ebp + 0x30]
push eax
lea ecx, [ebp - 0xb10]
push ecx
mov edx, dword [ebp - 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10eae08
mov eax, dword [ebp - 0xaf0]
sub eax, 1
mov ecx, dword [ebp - 0xaec]
sbb ecx, 0
push ecx
push eax
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x84]
call edx
mov eax, dword [ebp - 0xaec]
push eax
mov ecx, dword [ebp - 0xaf0]
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0xa8]
call edx
cmp dword [ebp - 0x10], 0
jne 0x10eb04f
cmp dword [ebp - 0x1c], 0
je 0x10eb04f
mov eax, dword [ebp - 0x558]
or eax, dword [ebp - 0x554]
jne 0x10eb04f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0xb40], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0xb18], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xb28], eax
mov dword [ebp - 0xb24], edx
mov ecx, dword [ebp - 0x5a0]
mov dword [ebp - 0xb30], ecx
mov edx, dword [ebp - 0x59c]
mov dword [ebp - 0xb2c], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xb38], eax
mov dword [ebp - 0xb34], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0xb20], eax
mov dword [ebp - 0xb1c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0xb14], eax
mov ecx, dword [ebp - 0xb34]
push ecx
mov edx, dword [ebp - 0xb38]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xb0]
call eax
push 0
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0xb40]
push edx
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xc]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10eaf57
mov ecx, dword [ebp - 0x59c]
push ecx
mov edx, dword [ebp - 0x5a0]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x80]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
je 0x10eaf55
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x9c]
call eax
jmp 0x10eafce
mov ecx, dword [ebp + 0x10]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
push 0x9c4
call fcn.0108d6a0
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x64]
call eax
mov dword [ebp - 0xb94], eax
mov ecx, dword [ebp + 0x30]
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x28]
call edx
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
mov eax, dword [ebp - 0xb94]
push eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
cmp dword [ebp - 0x1c], 0
je 0x10eb04f
cmp dword [ebp - 4], 0
je 0x10eb04f
mov ecx, dword [ebp + 0x10]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
push 0xbb8
call fcn.0108d6a0
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
cmp dword [ebp - 0x10], 0
jne 0x10eba5f
cmp dword [ebp - 0x1c], 0
je 0x10eb06d
mov ecx, dword [ebp - 0x558]
or ecx, dword [ebp - 0x554]
je 0x10eb07f
mov edx, dword [ebp - 0x558]
or edx, dword [ebp - 0x554]
je 0x10eba5f
push 0x148
push 0
lea eax, [ebp - 0xce0]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0xce0], edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xcd8], eax
mov dword [ebp - 0xcd4], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0xcb4], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0xcd0], eax
mov dword [ebp - 0xccc], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xcc8], eax
mov dword [ebp - 0xcc4], edx
mov ecx, dword [ebp - 0x558]
or ecx, dword [ebp - 0x554]
jne 0x10eb198
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x44]
call edx
add eax, dword [ebp - 0x550]
adc edx, dword [ebp - 0x54c]
mov dword [ebp - 0xcc0], eax
mov dword [ebp - 0xcbc], edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x550]
adc edx, dword [ebp - 0x54c]
sub eax, 1
sbb edx, 0
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x550]
adc edx, dword [ebp - 0x54c]
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
jmp 0x10eb219
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x558]
adc edx, dword [ebp - 0x554]
mov dword [ebp - 0xcc0], eax
mov dword [ebp - 0xcbc], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x558]
adc edx, dword [ebp - 0x554]
sub eax, 1
sbb edx, 0
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x558]
adc edx, dword [ebp - 0x554]
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0xcb8], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1d30], eax
mov ecx, dword [ebp - 0x1d30]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d30]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0xcb0], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1d34], eax
mov ecx, dword [ebp - 0x1d34]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d34]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0xcb2], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0xcae]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
mov eax, dword [ebp - 0x558]
or eax, dword [ebp - 0x554]
je 0x10eb2fe
cmp dword [ebp - 8], 0
je 0x10eb2fe
push 1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xb8]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x9c]
call eax
cmp dword [ebp - 4], 0
je 0x10eb4c6
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0xffffffff
je 0x10eb325
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0xce8], 0
mov dword [ebp - 0xce4], 0
lea ecx, [ebp - 0xce8]
push ecx
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp - 0xcd4]
push eax
mov ecx, dword [ebp - 0xcd8]
push ecx
mov edx, dword [ebp - 0xccc]
push edx
mov eax, dword [ebp - 0xcd0]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
push edx
push eax
mov ecx, dword [ebp - 0xcbc]
push ecx
mov edx, dword [ebp - 0xcc0]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb800
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10eb3e1
mov ecx, dword [ebp - 0xce4]
push ecx
mov edx, dword [ebp - 0xce8]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp - 0xce8]
sub ecx, 1
mov edx, dword [ebp - 0xce4]
sbb edx, 0
push edx
push ecx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
cmp dword [ebp - 0x2c], 0
je 0x10eb3fe
cmp dword [ebp - 0x1c], 0
jne 0x10eb3fe
push 0
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10eb40f
cmp dword [ebp - 0x2c], 0
jne 0x10eb40f
cmp dword [ebp - 0x1c], 0
jne 0x10eb40f
jmp 0x10ebc15
mov word [ebp - 0x10e8], 0
push 0x3fe
push 0
lea ecx, [ebp - 0x10e6]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp - 0xce0]
push eax
push 0x200
lea ecx, [ebp - 0x10e8]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
jne 0x10eb4c6
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ax, word [ebp + 0x24]
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10eb4c6
call fcn.010906a0
mov dword [ebp - 0x1d38], eax
push 0x433
push 0x100c22c
call fcn.010e8660
push eax
push 0x100bdb4
mov ecx, dword [ebp - 0x1d38]
push ecx
mov edx, dword [ebp - 0x1d38]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x10eb4ea
cmp dword [ebp - 0x2c], 0
je 0x10eb8e7
cmp dword [ebp - 0x1c], 0
jne 0x10eb8e7
cmp dword [ebp - 4], 0
je 0x10eb8e7
cmp dword [ebp - 0x2c], 0
je 0x10eb503
cmp dword [ebp - 0x1c], 0
jne 0x10eb503
cmp dword [ebp - 4], 0
je 0x10eb503
mov dword [ebp - 0x2c], 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x18]
call edx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x24], 0xffffffff
jne 0x10eb558
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx]
call eax
push 0
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0xce0]
push edx
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xc]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x10eb582
jmp 0x10ebc15
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10eb63f
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
cmp dword [ebp + 0x10], 0
je 0x10eb5f2
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
push 6
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x1d3c], eax
push 0x450
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b7f8
mov ecx, dword [ebp - 0x1d3c]
push ecx
mov edx, dword [ebp - 0x1d3c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10ed796
push 0x9c4
call fcn.0108d6a0
cmp dword [ebp - 0x2c], 0
je 0x10eb691
cmp dword [ebp - 0x18], 0
je 0x10eb67f
mov edx, dword [ebp - 0x1ca4]
add edx, 0x874
push edx
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x90]
call eax
push 0x100c250
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x38]
call eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
cmp dword [ebp + 0x10], 0
je 0x10eb6e4
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10eb776
call fcn.010906a0
mov dword [ebp - 0x1d40], eax
push 0x46e
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0x1d40]
push ecx
mov edx, dword [ebp - 0x1d40]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0x1ca4]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
mov edx, dword [ebp - 0x558]
or edx, dword [ebp - 0x554]
jne 0x10eb81f
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10eb81a
call fcn.010906a0
mov dword [ebp - 0x1d44], eax
push 0x476
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0x1d44]
push ecx
mov edx, dword [ebp - 0x1d44]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0x1ca4]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
jmp 0x10eb8a8
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ax, word [ebp + 0x24]
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10eb8a8
call fcn.010906a0
mov dword [ebp - 0x1d48], eax
push 0x47f
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0x1d48]
push ecx
mov edx, dword [ebp - 0x1d48]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0x1ca4]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
cmp dword [ebp - 0x2c], 0
je 0x10eb8e7
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
mov dx, word [ebp + 0x24]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x8c]
call eax
push 0
mov ecx, dword [ebp + 0x18]
push ecx
call fcn.010c2e90
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x78]
call edx
test eax, eax
je 0x10eb90c
push 0x17
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10ebc15
cmp dword [ebp - 0x1c], 0
je 0x10eba5a
mov ecx, dword [ebp - 0x558]
or ecx, dword [ebp - 0x554]
jne 0x10eba5a
mov dword [ebp - 0x10f0], 0
mov dword [ebp - 0x10ec], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov edx, dword [ebp + 0x30]
push edx
push 0x1190828
lea eax, [ebp - 0x10f0]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x50]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x20]
call edx
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, 0x100000
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110ac40
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x30]
xor edx, edx
push edx
push ecx
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call sub.ntdll.dll__alldiv
add esi, eax
adc edi, edx
add esi, 1
adc edi, 0
push edi
push esi
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x98]
call edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x60]
sub ecx, dword [ebp - 0x10f0]
mov edx, dword [ebp - 0x5c]
sbb edx, dword [ebp - 0x10ec]
mov eax, dword [ebp - 0x30]
xor ebx, ebx
push ebx
push eax
push edx
push ecx
call sub.ntdll.dll__aulldiv
sub esi, eax
sbb edi, edx
sub esi, 1
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x98]
call eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x78]
call eax
test eax, eax
je 0x10eba5a
push 0x17
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10ebc15
jmp 0x10ebbdb
cmp dword [ebp - 0x10], 0
je 0x10ebbdb
mov ecx, dword [ebp - 0x558]
or ecx, dword [ebp - 0x554]
jne 0x10ebbdb
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
cmp dword [ebp + 0x10], 0
je 0x10ebadc
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov dword [ebp - 0x10f8], 0
mov dword [ebp - 0x10f4], 0
mov eax, dword [ebp + 0x30]
push eax
push 0x1190828
lea ecx, [ebp - 0x10f8]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, 0x100000
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110ac40
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x30]
xor edx, edx
push edx
push ecx
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call sub.ntdll.dll__alldiv
add esi, eax
adc edi, edx
add esi, 1
adc edi, 0
push edi
push esi
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x98]
call edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x60]
sub ecx, dword [ebp - 0x10f8]
mov edx, dword [ebp - 0x5c]
sbb edx, dword [ebp - 0x10f4]
mov eax, dword [ebp - 0x30]
xor ebx, ebx
push ebx
push eax
push edx
push ecx
call sub.ntdll.dll__aulldiv
sub esi, eax
sbb edi, edx
sub esi, 1
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x98]
call eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x78]
call eax
test eax, eax
je 0x10ebbfd
push 0x17
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10ebc15
mov ecx, dword [ebp - 0x558]
or ecx, dword [ebp - 0x554]
jne 0x10ebc15
cmp dword [ebp - 0x1c], 0
jne 0x10ea74f
jmp 0x10ed793
cmp dword [ebp + 0x14], 0
je 0x10ec0cd
cmp dword [ebp - 4], 0
jne 0x10ebc7f
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x18]
call edx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x24], 0xffffffff
jne 0x10ebc7f
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx]
call eax
push 0x148
push 0
lea ecx, [ebp - 0x1240]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x1240], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x1238], eax
mov dword [ebp - 0x1234], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x1214], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x1230], eax
mov dword [ebp - 0x122c], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x1228], eax
mov dword [ebp - 0x1224], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x20]
call eax
add esi, eax
adc edi, edx
mov dword [ebp - 0x1220], esi
mov dword [ebp - 0x121c], edi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x1218], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1d4c], eax
mov ecx, dword [ebp - 0x1d4c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d4c]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0x1210], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1d50], eax
mov ecx, dword [ebp - 0x1d50]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d50]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0x1212], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0x120e]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x20]
call eax
add esi, eax
adc edi, edx
sub esi, 1
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x20]
call eax
add esi, eax
adc edi, edx
push edi
push esi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
cmp dword [ebp - 4], 0
je 0x10ebf24
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0xffffffff
je 0x10ebe63
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x1248], 0
mov dword [ebp - 0x1244], 0
lea ecx, [ebp - 0x1248]
push ecx
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp - 0x1234]
push eax
mov ecx, dword [ebp - 0x1238]
push ecx
mov edx, dword [ebp - 0x122c]
push edx
mov eax, dword [ebp - 0x1230]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x121c]
push ecx
mov edx, dword [ebp - 0x1220]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb800
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10ebf1f
mov ecx, dword [ebp - 0x1244]
push ecx
mov edx, dword [ebp - 0x1248]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp - 0x1248]
sub ecx, 1
mov edx, dword [ebp - 0x1244]
sbb edx, 0
push edx
push ecx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
jmp 0x10ec0a6
push 0
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x1240]
push edx
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xc]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10ec09f
mov ecx, dword [ebp + 0xc]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
jne 0x10ebfd9
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
push 6
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x1d54], eax
push 0x4fb
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b7f8
mov ecx, dword [ebp - 0x1d54]
push ecx
mov edx, dword [ebp - 0x1d54]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10ed796
push 0x9c4
call fcn.0108d6a0
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10ec09d
call fcn.010906a0
mov dword [ebp - 0x1d58], eax
push 0x504
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0x1d58]
push ecx
mov edx, dword [ebp - 0x1d58]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0x1ca4]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
jmp 0x10ec0a6
xor eax, eax
jmp 0x10ed796
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x78]
call edx
test eax, eax
je 0x10ec0cd
push 0x17
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
xor eax, eax
jmp 0x10ed796
cmp dword [ebp + 0x10], 0
je 0x10ed793
mov dword [ebp - 0x1270], 0
mov dword [ebp - 0x12a0], 0
mov dword [ebp - 0x126c], 0
mov dword [ebp - 0x12a8], 0
mov dword [ebp - 0x12a4], 0
mov dword [ebp - 0x1258], 0
mov dword [ebp - 0x1254], 0
mov dword [ebp - 0x1250], 0
mov dword [ebp - 0x124c], 0
mov dword [ebp - 0x1260], 0
mov dword [ebp - 0x125c], 0
mov dword [ebp - 0x1268], 0
mov dword [ebp - 0x1264], 0
mov word [ebp - 0x129c], 0
xor ecx, ecx
mov dword [ebp - 0x129a], ecx
mov dword [ebp - 0x1296], ecx
mov dword [ebp - 0x1292], ecx
mov dword [ebp - 0x128e], ecx
mov word [ebp - 0x128a], cx
mov word [ebp - 0x1288], 0
xor edx, edx
mov dword [ebp - 0x1286], edx
mov dword [ebp - 0x1282], edx
mov dword [ebp - 0x127e], edx
mov dword [ebp - 0x127a], edx
mov word [ebp - 0x1276], dx
mov dword [ebp - 0x1274], 0
mov eax, dword [ebp - 0x1274]
add eax, 1
mov dword [ebp - 0x1274], eax
cmp dword [ebp - 0x1274], 0x2710
jbe 0x10ec222
push 0
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x1d5c], eax
push 0x52b
push 0x100c22c
call fcn.010e8660
push eax
push 0x100c2b8
mov ecx, dword [ebp - 0x1d5c]
push ecx
mov edx, dword [ebp - 0x1d5c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov eax, 1
jmp 0x10ed796
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110b1c0
test eax, eax
je 0x10ec3f7
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x1260], eax
mov dword [ebp - 0x125c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
mov word [ebp - 0x12ac], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1d60], eax
mov ecx, dword [ebp - 0x1d60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d60]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x12bc], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x12b8], eax
mov dword [ebp - 0x12b4], edx
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 4], 0
je 0x10ec3eb
mov cx, word [ebp - 0x12ac]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x10]
call edx
push 0
push 1
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x2c]
call eax
push 0xbb8
call fcn.0108d6a0
push 0
mov ecx, dword [ebp + 0x18]
push ecx
call fcn.010c2e90
mov dword [ebp - 0x12c0], 0
push 0x64
call fcn.0108d6a0
mov edx, dword [ebp - 0x12c0]
push edx
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 8]
call eax
mov word [ebp - 0x16c0], 0
push 0x3fe
push 0
lea ecx, [ebp - 0x16be]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x12b4]
push edx
mov eax, dword [ebp - 0x12b8]
push eax
mov ecx, dword [ebp - 0x12bc]
push ecx
push 0x200
lea edx, [ebp - 0x16c0]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10ec3b4
jmp 0x10ec3d2
mov ecx, dword [ebp - 0x12c0]
mov edx, dword [ebp - 0x12c0]
add edx, 1
mov dword [ebp - 0x12c0], edx
cmp ecx, 0x64
jl 0x10ec346
push 0
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x28]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
mov dword [ebp + 0x10], 0
jmp 0x10ec963
cmp dword [ebp - 0x10], 0
jne 0x10ec963
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x18]
call eax
cmp dword [ebp - 0x20], 0xffffffff
jne 0x10ec450
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx]
call eax
push 0x40
push 0
lea ecx, [ebp - 0x1710]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x44]
call edx
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
add esi, 0x100000
adc edi, 0
mov dword [ebp - 0x1d68], esi
mov dword [ebp - 0x1d64], edi
mov ecx, dword [ebp - 0x1d64]
cmp ecx, dword [ebp - 0x6c]
jg 0x10ec502
jl 0x10ec4b2
mov edx, dword [ebp - 0x1d68]
cmp edx, dword [ebp - 0x70]
ja 0x10ec502
push 0x111111
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x1d6c], eax
push 0x55e
push 0x100c22c
call fcn.010e8660
push eax
push 0x100c29c
mov ecx, dword [ebp - 0x1d6c]
push ecx
mov edx, dword [ebp - 0x1d6c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10ed796
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x44]
call edx
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, dword [ebp - 0x70]
sbb edi, dword [ebp - 0x6c]
mov dword [ebp - 0x16d0], esi
mov dword [ebp - 0x16cc], edi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
mov dword [ebp - 0x16c8], esi
mov dword [ebp - 0x16c4], edi
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub eax, dword [ebp - 0x16c8]
sbb edx, dword [ebp - 0x16c4]
mov dword [ebp - 0x1268], eax
mov dword [ebp - 0x1264], edx
js 0x10ec5f2
jg 0x10ec596
cmp dword [ebp - 0x1268], 0
jbe 0x10ec5f2
mov ecx, dword [ebp - 0x1268]
add ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x1264]
adc edx, dword [ebp - 0x6c]
mov dword [ebp - 0x1d74], ecx
mov dword [ebp - 0x1d70], edx
mov eax, dword [ebp - 0x1d70]
cmp eax, dword [ebp - 0x16cc]
jg 0x10ec5f2
jl 0x10ec5d2
mov ecx, dword [ebp - 0x1d74]
cmp ecx, dword [ebp - 0x16d0]
ja 0x10ec5f2
mov edx, dword [ebp - 0x1268]
add edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x1264]
adc eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1268], edx
mov dword [ebp - 0x1264], eax
jmp 0x10ec60a
mov ecx, dword [ebp - 0x16d0]
mov dword [ebp - 0x1268], ecx
mov edx, dword [ebp - 0x16cc]
mov dword [ebp - 0x1264], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1710], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x30]
call edx
mov word [ebp - 0x16f0], ax
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x1700], eax
mov dword [ebp - 0x16fc], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x1708], eax
mov dword [ebp - 0x1704], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
add eax, dword [ebp - 0x1268]
adc edx, dword [ebp - 0x1264]
mov dword [ebp - 0x12a8], eax
mov dword [ebp - 0x12a4], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [ebp - 0x12a8]
sub esi, eax
mov edi, dword [ebp - 0x12a4]
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
mov dword [ebp - 0x1270], eax
cmp dword [ebp - 0x1270], 0
je 0x10ec6ea
mov eax, dword [ebp - 0x1270]
cdq
mov ecx, dword [ebp - 0x12a8]
sub ecx, eax
mov eax, dword [ebp - 0x12a4]
sbb eax, edx
mov dword [ebp - 0x12a8], ecx
mov dword [ebp - 0x12a4], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [ebp - 0x12a8]
sub ecx, eax
mov eax, dword [ebp - 0x12a4]
sbb eax, edx
mov dword [ebp - 0x1258], ecx
mov dword [ebp - 0x1254], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
sub eax, dword [ebp - 0x1258]
sbb edx, dword [ebp - 0x1254]
mov dword [ebp - 0x1250], eax
mov dword [ebp - 0x124c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0x12a0], ecx
mov edx, dword [ebp - 0x124c]
push edx
mov eax, dword [ebp - 0x1250]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp - 0x124c]
push ecx
mov edx, dword [ebp - 0x1250]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
push 0
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110d180
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0x126c], ecx
mov edx, dword [ebp - 0x12a0]
cmp edx, dword [ebp - 0x126c]
je 0x10ec90d
mov dword [ebp - 0x1270], 0
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [ebp - 0x12a8]
sub esi, eax
mov edi, dword [ebp - 0x12a4]
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
mov dword [ebp - 0x1270], eax
mov eax, dword [ebp - 0x1270]
cdq
mov ecx, dword [ebp - 0x1258]
sub ecx, eax
mov eax, dword [ebp - 0x1254]
sbb eax, edx
mov dword [ebp - 0x1258], ecx
mov dword [ebp - 0x1254], eax
mov eax, dword [ebp - 0x1270]
cdq
mov ecx, dword [ebp - 0x12a8]
sub ecx, eax
mov eax, dword [ebp - 0x12a4]
sbb eax, edx
mov dword [ebp - 0x12a8], ecx
mov dword [ebp - 0x12a4], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0x1270]
cdq
add ecx, eax
adc esi, edx
mov dword [ebp - 0x1250], ecx
mov dword [ebp - 0x124c], esi
mov edx, dword [ebp - 0x124c]
push edx
mov eax, dword [ebp - 0x1250]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp - 0x124c]
push ecx
mov edx, dword [ebp - 0x1250]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
push 0
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110d180
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0x126c], ecx
mov edx, dword [ebp - 0x1250]
mov dword [ebp - 0x16f8], edx
mov eax, dword [ebp - 0x124c]
mov dword [ebp - 0x16f4], eax
mov cx, word [ebp - 0x126c]
mov word [ebp - 0x16ee], cx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x24]
call edx
mov dword [ebp - 0x16ec], eax
push 0
mov eax, dword [ebp + 0x30]
push eax
lea ecx, [ebp - 0x1710]
push ecx
mov edx, dword [ebp - 0x64]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x64]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x10], 0
jne 0x10ecbcd
cmp dword [ebp - 0x1c], 0
je 0x10ecbcd
mov eax, dword [ebp - 0x1260]
or eax, dword [ebp - 0x125c]
jne 0x10ecbcd
xor ecx, ecx
mov dword [ebp - 0x1738], ecx
mov dword [ebp - 0x1734], ecx
mov dword [ebp - 0x1730], ecx
mov dword [ebp - 0x172c], ecx
mov dword [ebp - 0x1728], ecx
mov dword [ebp - 0x1724], ecx
mov dword [ebp - 0x1720], ecx
mov dword [ebp - 0x171c], ecx
mov dword [ebp - 0x1718], ecx
mov dword [ebp - 0x1714], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x1738], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x1718], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x1720], eax
mov dword [ebp - 0x171c], edx
mov ecx, dword [ebp - 0x12a8]
mov dword [ebp - 0x1728], ecx
mov edx, dword [ebp - 0x12a4]
mov dword [ebp - 0x1724], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x1730], eax
mov dword [ebp - 0x172c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x1714], eax
mov ecx, dword [ebp - 0x172c]
push ecx
mov edx, dword [ebp - 0x1730]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xb0]
call eax
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x1738]
push edx
mov eax, dword [ebp - 0x64]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x64]
mov eax, dword [edx + 0x38]
call eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10ecad5
mov ecx, dword [ebp - 0x12a4]
push ecx
mov edx, dword [ebp - 0x12a8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x80]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
je 0x10ecad3
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x9c]
call eax
jmp 0x10ecb4c
mov ecx, dword [ebp + 0x10]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
push 0x9c4
call fcn.0108d6a0
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x64]
call eax
mov dword [ebp - 0x173c], eax
mov ecx, dword [ebp + 0x30]
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x28]
call edx
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
mov eax, dword [ebp - 0x173c]
push eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
cmp dword [ebp - 0x1c], 0
je 0x10ecbcd
cmp dword [ebp - 4], 0
je 0x10ecbcd
mov ecx, dword [ebp + 0x10]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
push 0xbb8
call fcn.0108d6a0
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
cmp dword [ebp - 0x10], 0
jne 0x10ed5dd
cmp dword [ebp - 0x1c], 0
je 0x10ecbeb
mov ecx, dword [ebp - 0x1260]
or ecx, dword [ebp - 0x125c]
je 0x10ecbfd
mov edx, dword [ebp - 0x1260]
or edx, dword [ebp - 0x125c]
je 0x10ed5dd
push 0x148
push 0
lea eax, [ebp - 0x1888]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1888], edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x1880], eax
mov dword [ebp - 0x187c], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x185c], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x1878], eax
mov dword [ebp - 0x1874], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x1870], eax
mov dword [ebp - 0x186c], edx
mov ecx, dword [ebp - 0x1260]
or ecx, dword [ebp - 0x125c]
jne 0x10ecd16
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x44]
call edx
add eax, dword [ebp - 0x1258]
adc edx, dword [ebp - 0x1254]
mov dword [ebp - 0x1868], eax
mov dword [ebp - 0x1864], edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x1258]
adc edx, dword [ebp - 0x1254]
sub eax, 1
sbb edx, 0
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x1258]
adc edx, dword [ebp - 0x1254]
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
jmp 0x10ecd97
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x1260]
adc edx, dword [ebp - 0x125c]
mov dword [ebp - 0x1868], eax
mov dword [ebp - 0x1864], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x1260]
adc edx, dword [ebp - 0x125c]
sub eax, 1
sbb edx, 0
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x1260]
adc edx, dword [ebp - 0x125c]
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x1860], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1d78], eax
mov ecx, dword [ebp - 0x1d78]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d78]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0x1858], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1d7c], eax
mov ecx, dword [ebp - 0x1d7c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d7c]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0x185a], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0x1856]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
mov eax, dword [ebp - 0x1260]
or eax, dword [ebp - 0x125c]
je 0x10ece7c
cmp dword [ebp - 8], 0
je 0x10ece7c
push 1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xb8]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x9c]
call eax
cmp dword [ebp - 4], 0
je 0x10ed044
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0xffffffff
je 0x10ecea3
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x1890], 0
mov dword [ebp - 0x188c], 0
lea ecx, [ebp - 0x1890]
push ecx
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp - 0x187c]
push eax
mov ecx, dword [ebp - 0x1880]
push ecx
mov edx, dword [ebp - 0x1874]
push edx
mov eax, dword [ebp - 0x1878]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x1864]
push ecx
mov edx, dword [ebp - 0x1868]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb800
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10ecf5f
mov ecx, dword [ebp - 0x188c]
push ecx
mov edx, dword [ebp - 0x1890]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp - 0x1890]
sub ecx, 1
mov edx, dword [ebp - 0x188c]
sbb edx, 0
push edx
push ecx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
cmp dword [ebp - 0x2c], 0
je 0x10ecf7c
cmp dword [ebp - 0x1c], 0
jne 0x10ecf7c
push 0
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10ecf8d
cmp dword [ebp - 0x2c], 0
jne 0x10ecf8d
cmp dword [ebp - 0x1c], 0
jne 0x10ecf8d
jmp 0x10ed793
mov word [ebp - 0x1c90], 0
push 0x3fe
push 0
lea ecx, [ebp - 0x1c8e]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp - 0x1888]
push eax
push 0x200
lea ecx, [ebp - 0x1c90]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
jne 0x10ed044
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ax, word [ebp + 0x24]
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10ed044
call fcn.010906a0
mov dword [ebp - 0x1d80], eax
push 0x60d
push 0x100c22c
call fcn.010e8660
push eax
push 0x100bdb4
mov ecx, dword [ebp - 0x1d80]
push ecx
mov edx, dword [ebp - 0x1d80]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x10ed068
cmp dword [ebp - 0x2c], 0
je 0x10ed465
cmp dword [ebp - 0x1c], 0
jne 0x10ed465
cmp dword [ebp - 4], 0
je 0x10ed465
cmp dword [ebp - 0x2c], 0
je 0x10ed081
cmp dword [ebp - 0x1c], 0
jne 0x10ed081
cmp dword [ebp - 4], 0
je 0x10ed081
mov dword [ebp - 0x2c], 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x18]
call edx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x24], 0xffffffff
jne 0x10ed0d6
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx]
call eax
push 0
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x1888]
push edx
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xc]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x10ed100
jmp 0x10ed793
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10ed1bd
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
cmp dword [ebp + 0x10], 0
je 0x10ed170
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
push 6
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x1d84], eax
push 0x62a
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b7f8
mov ecx, dword [ebp - 0x1d84]
push ecx
mov edx, dword [ebp - 0x1d84]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10ed796
push 0x9c4
call fcn.0108d6a0
cmp dword [ebp - 0x2c], 0
je 0x10ed20f
cmp dword [ebp - 0x18], 0
je 0x10ed1fd
mov edx, dword [ebp - 0x1ca4]
add edx, 0x874
push edx
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x90]
call eax
push 0x100c250
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x38]
call eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
cmp dword [ebp + 0x10], 0
je 0x10ed262
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10ed2f4
call fcn.010906a0
mov dword [ebp - 0x1d88], eax
push 0x648
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0x1d88]
push ecx
mov edx, dword [ebp - 0x1d88]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0x1ca4]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
mov edx, dword [ebp - 0x1260]
or edx, dword [ebp - 0x125c]
jne 0x10ed39d
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10ed398
call fcn.010906a0
mov dword [ebp - 0x1d8c], eax
push 0x651
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0x1d8c]
push ecx
mov edx, dword [ebp - 0x1d8c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0x1ca4]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
jmp 0x10ed426
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ax, word [ebp + 0x24]
push eax
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9ea0
test eax, eax
jne 0x10ed426
call fcn.010906a0
mov dword [ebp - 0x1d90], eax
push 0x65a
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0x1d90]
push ecx
mov edx, dword [ebp - 0x1d90]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0x1ca4]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
cmp dword [ebp - 0x2c], 0
je 0x10ed465
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010c9780
mov dx, word [ebp + 0x24]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x8c]
call eax
push 0
mov ecx, dword [ebp + 0x18]
push ecx
call fcn.010c2e90
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x78]
call edx
test eax, eax
je 0x10ed48a
push 0x17
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10ed793
cmp dword [ebp - 0x1c], 0
je 0x10ed5d8
mov ecx, dword [ebp - 0x1260]
or ecx, dword [ebp - 0x125c]
jne 0x10ed5d8
mov dword [ebp - 0x1c98], 0
mov dword [ebp - 0x1c94], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov edx, dword [ebp + 0x30]
push edx
push 0x1190828
lea eax, [ebp - 0x1c98]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x50]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x20]
call edx
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, 0x100000
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110ac40
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x30]
xor edx, edx
push edx
push ecx
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call sub.ntdll.dll__alldiv
add esi, eax
adc edi, edx
add esi, 1
adc edi, 0
push edi
push esi
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x98]
call edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x60]
sub ecx, dword [ebp - 0x1c98]
mov edx, dword [ebp - 0x5c]
sbb edx, dword [ebp - 0x1c94]
mov eax, dword [ebp - 0x30]
xor ebx, ebx
push ebx
push eax
push edx
push ecx
call sub.ntdll.dll__aulldiv
sub esi, eax
sbb edi, edx
sub esi, 1
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x98]
call eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x78]
call eax
test eax, eax
je 0x10ed5d8
push 0x17
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10ed793
jmp 0x10ed759
cmp dword [ebp - 0x10], 0
je 0x10ed759
mov ecx, dword [ebp - 0x1260]
or ecx, dword [ebp - 0x125c]
jne 0x10ed759
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
cmp dword [ebp + 0x10], 0
je 0x10ed65a
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0x1ca4]
call fcn.010cb770
mov dword [ebp - 0x1ca0], 0
mov dword [ebp - 0x1c9c], 0
mov eax, dword [ebp + 0x30]
push eax
push 0x1190828
lea ecx, [ebp - 0x1ca0]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, 0x100000
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110ac40
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x30]
xor edx, edx
push edx
push ecx
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call sub.ntdll.dll__alldiv
add esi, eax
adc edi, edx
add esi, 1
adc edi, 0
push edi
push esi
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x98]
call edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x60]
sub ecx, dword [ebp - 0x1ca0]
mov edx, dword [ebp - 0x5c]
sbb edx, dword [ebp - 0x1c9c]
mov eax, dword [ebp - 0x30]
xor ebx, ebx
push ebx
push eax
push edx
push ecx
call sub.ntdll.dll__aulldiv
sub esi, eax
sbb edi, edx
sub esi, 1
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x98]
call eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x78]
call eax
test eax, eax
je 0x10ed77b
push 0x17
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10ed793
mov ecx, dword [ebp - 0x1260]
or ecx, dword [ebp - 0x125c]
jne 0x10ed793
cmp dword [ebp - 0x1c], 0
jne 0x10ec1b7
mov eax, dword [ebp - 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x2c