Function at 0x10ed7b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xd60
push ebx
push esi
push edi
mov dword [ebp - 0xc9c], ecx
cmp dword [ebp + 0xc], 0
jne 0x10ed7da
cmp dword [ebp + 0x10], 0
jne 0x10ed7da
mov eax, 1
jmp 0x10f20d6
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
call fcn.01165ea0
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0x2c]
shl eax, 0x14
cdq
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], edx
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
call fcn.0108d4a0
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x18], 0xffffffff
call fcn.010905a0
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x24], 0
call fcn.01117e60
mov dword [ebp - 0x5c], eax
call fcn.011434b0
mov dword [ebp - 8], eax
mov dword [ebp - 0x6c], 0xc
mov dword [ebp - 0x2c], 0xc
mov dword [ebp - 0x4c], 0
mov dword [ebp - 4], 0
cmp dword [ebp + 0xc], 0
je 0x10ed8ac
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x24]
call edx
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp + 0x10], 0
je 0x10ed8d2
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
jne 0x10ed8f4
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10ed966
mov ecx, dword [ebp + 0x30]
push ecx
push 0
push 0
push 0
push 0x2a
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
push 0x1001464
push 0x1001464
call fcn.0108ddc0
mov edx, dword [ebp - 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 8]
mov edx, dword [eax]
call edx
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 8]
call eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx]
call eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 0x14], 0
je 0x10ed9f7
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x44]
call eax
add esi, eax
adc edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
add eax, 0x100000
adc edx, 0
mov dword [ebp - 0xca4], esi
mov dword [ebp - 0xca0], edi
mov dword [ebp - 0xcac], eax
mov dword [ebp - 0xca8], edx
mov ecx, dword [ebp - 0xca0]
cmp ecx, dword [ebp - 0xca8]
jl 0x10ed9f5
jg 0x10ed9ee
mov edx, dword [ebp - 0xca4]
cmp edx, dword [ebp - 0xcac]
jbe 0x10ed9f5
mov dword [ebp - 0xc], 1
jmp 0x10eda6b
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
add eax, 0x100000
adc edx, 0
mov dword [ebp - 0xcb4], esi
mov dword [ebp - 0xcb0], edi
mov dword [ebp - 0xcbc], eax
mov dword [ebp - 0xcb8], edx
mov ecx, dword [ebp - 0xcb0]
cmp ecx, dword [ebp - 0xcb8]
jl 0x10eda6b
jg 0x10eda64
mov edx, dword [ebp - 0xcb4]
cmp edx, dword [ebp - 0xcbc]
jbe 0x10eda6b
mov dword [ebp - 0xc], 1
cmp dword [ebp + 0x2c], 1
jne 0x10edb85
mov word [ebp - 0x278], 0
push 0x206
push 0
lea eax, [ebp - 0x276]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
push 0x100
push 0
push 0x1190928
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x18]
call eax
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov edx, dword [ebp - 0x3c]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100c304
push 0x1190928
call sub.ntdll.dll_swprintf
add esp, 0x10
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x28]
call edx
movzx eax, ax
cmp eax, 0x2a
jne 0x10edb42
mov ecx, dword [ebp - 0x3c]
push ecx
push 0x100c2e4
push 0x1190928
call sub.ntdll.dll_swprintf
add esp, 0xc
push 0x1190928
mov edx, dword [ebp + 0x20]
push edx
push 0x1005770
lea eax, [ebp - 0x278]
push eax
call sub.ntdll.dll_swprintf
add esp, 0x10
lea ecx, [ebp - 0x278]
push ecx
call fcn.0110ba50
test eax, eax
jne 0x10edb85
push 0x2c
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x20]
call edx
xor eax, eax
jmp 0x10f20d6
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
mov ecx, dword [ebp - 0x28]
xor esi, esi
push esi
push ecx
push edx
push eax
call sub.ntdll.dll__allmul
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x24]
call edx
cmp eax, 1
je 0x10ef36b
cmp dword [ebp + 0x14], 0
je 0x10ee18a
mov dword [ebp - 0x300], 0
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x2ac], 0
mov eax, dword [ebp + 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [ebp - 0x300]
sub esi, eax
mov edi, dword [ebp - 0x2fc]
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
push edx
push eax
call fcn.0110ac00
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0
je 0x10edc93
mov eax, dword [ebp - 0x2ac]
cdq
add eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
adc ecx, edx
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
mov ecx, dword [ebp - 0x300]
sub ecx, eax
mov eax, dword [ebp - 0x2fc]
sbb eax, edx
push eax
push ecx
call fcn.0110ac00
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], edx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x20]
call eax
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0x2ac]
cdq
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x2b8], ecx
mov dword [ebp - 0x2b4], esi
xor edx, edx
mov dword [ebp - 0x2a0], edx
mov dword [ebp - 0x29c], edx
mov dword [ebp - 0x298], edx
mov dword [ebp - 0x294], edx
mov dword [ebp - 0x290], edx
mov dword [ebp - 0x28c], edx
mov dword [ebp - 0x288], edx
mov dword [ebp - 0x284], edx
mov dword [ebp - 0x280], edx
mov dword [ebp - 0x27c], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2a0], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x30]
call edx
mov word [ebp - 0x280], ax
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], edx
mov ecx, dword [ebp - 0x300]
mov dword [ebp - 0x290], ecx
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x28c], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x27c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0xffffffff
jne 0x10eddf8
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
lea edx, [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx]
call eax
mov ecx, dword [ebp - 0x294]
push ecx
mov edx, dword [ebp - 0x298]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xb0]
call eax
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x2a0]
push edx
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x38]
call eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10ede88
mov ecx, dword [ebp - 0x2fc]
push ecx
mov edx, dword [ebp - 0x300]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x80]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
je 0x10ede86
mov ecx, dword [ebp - 0x2fc]
push ecx
mov edx, dword [ebp - 0x300]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x9c]
call eax
jmp 0x10ede8f
xor eax, eax
jmp 0x10f20d6
push 0x40
push 0
lea ecx, [ebp - 0x2f8]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x2f8], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x2d8], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
add eax, dword [ebp - 0x2b8]
adc edx, dword [ebp - 0x2b4]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], edx
mov ecx, dword [ebp - 0x2dc]
push ecx
mov edx, dword [ebp - 0x2e0]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp - 0x2dc]
push ecx
mov edx, dword [ebp - 0x2e0]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x2dc]
push edx
mov eax, dword [ebp - 0x2e0]
push eax
call fcn.0110d210
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
push 0
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110d180
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x2d6], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x2d4], eax
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x2f8]
push edx
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x10edfe7
xor eax, eax
jmp 0x10f20d6
mov ecx, dword [ebp + 0x10]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
jne 0x10ee0a2
cmp dword [ebp + 0xc], 0
je 0x10ee030
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
push 6
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0xcc0], eax
push 0x754
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b7f8
mov ecx, dword [ebp - 0xcc0]
push ecx
mov edx, dword [ebp - 0xcc0]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10f20d6
push 0x9c4
call fcn.0108d6a0
lea edx, [ebp - 0x18]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
test eax, eax
jne 0x10ee163
call fcn.010906a0
mov dword [ebp - 0xcc4], eax
push 0x75d
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0xcc4]
push ecx
mov edx, dword [ebp - 0xcc4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0xc9c]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x78]
call edx
test eax, eax
je 0x10ee18a
push 0x17
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
xor eax, eax
jmp 0x10f20d6
cmp dword [ebp + 0xc], 0
je 0x10ef366
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 0
mov word [ebp - 0x354], 0
xor ecx, ecx
mov dword [ebp - 0x352], ecx
mov dword [ebp - 0x34e], ecx
mov dword [ebp - 0x34a], ecx
mov dword [ebp - 0x346], ecx
mov word [ebp - 0x342], cx
mov word [ebp - 0x340], 0
xor edx, edx
mov dword [ebp - 0x33e], edx
mov dword [ebp - 0x33a], edx
mov dword [ebp - 0x336], edx
mov dword [ebp - 0x332], edx
mov word [ebp - 0x32e], dx
mov dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
add eax, 1
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x2710
jbe 0x10ee2f3
push 0
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0xcc8], eax
push 0x783
push 0x100c22c
call fcn.010e8660
push eax
push 0x100c2b8
mov ecx, dword [ebp - 0xcc8]
push ecx
mov edx, dword [ebp - 0xcc8]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov eax, 1
jmp 0x10f20d6
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax + 0x18]
call edx
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov eax, dword [ebp + 0xc]
push eax
call fcn.0110b1c0
test eax, eax
je 0x10ee4dd
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], edx
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
sub esi, eax
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0
je 0x10ee477
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
sub eax, dword [ebp - 0x328]
cdq
add eax, dword [ebp - 0x368]
mov ecx, dword [ebp - 0x364]
adc ecx, edx
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
mov ecx, dword [ebp - 0x368]
sub ecx, eax
mov eax, dword [ebp - 0x364]
sbb eax, edx
mov edx, dword [ebp - 0x318]
sub edx, ecx
mov ecx, dword [ebp - 0x314]
sbb ecx, eax
mov dword [ebp - 0x318], edx
mov dword [ebp - 0x314], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
mov ecx, dword [ebp - 0x368]
sub ecx, eax
mov eax, dword [ebp - 0x364]
sbb eax, edx
push eax
push ecx
call fcn.0110ac00
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0xc], 0
mov dword [ebp + 0xc], 0
mov dword [ebp - 0x24], 1
jmp 0x10ee9cc
cmp dword [ebp - 0xc], 0
jne 0x10ee9cc
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0xffffffff
jne 0x10ee53c
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx]
call eax
push 0x40
push 0
lea ecx, [ebp - 0x3a8]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x44]
call edx
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
add esi, 0x100000
adc edi, 0
mov dword [ebp - 0xcd0], esi
mov dword [ebp - 0xccc], edi
mov ecx, dword [ebp - 0xccc]
cmp ecx, dword [ebp - 0x64]
jg 0x10ee5ee
jl 0x10ee59e
mov edx, dword [ebp - 0xcd0]
cmp edx, dword [ebp - 0x68]
ja 0x10ee5ee
push 0x111111
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0xcd4], eax
push 0x7ab
push 0x100c22c
call fcn.010e8660
push eax
push 0x100c29c
mov ecx, dword [ebp - 0xcd4]
push ecx
mov edx, dword [ebp - 0xcd4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10f20d6
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x44]
call edx
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, dword [ebp - 0x68]
sbb edi, dword [ebp - 0x64]
mov dword [ebp - 0x320], esi
mov dword [ebp - 0x31c], edi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
sub eax, dword [ebp - 0x320]
sbb edx, dword [ebp - 0x31c]
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x304], edx
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x3a8], edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x388], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
add eax, dword [ebp - 0x308]
adc edx, dword [ebp - 0x304]
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [ebp - 0x368]
sub esi, eax
mov edi, dword [ebp - 0x364]
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
push edx
push eax
call fcn.0110ac00
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0
je 0x10ee72c
mov eax, dword [ebp - 0x328]
cdq
add eax, dword [ebp - 0x368]
mov ecx, dword [ebp - 0x364]
adc ecx, edx
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
mov ecx, dword [ebp - 0x368]
sub ecx, eax
mov eax, dword [ebp - 0x364]
sbb eax, edx
push eax
push ecx
call fcn.0110ac00
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
sub eax, dword [ebp - 0x310]
sbb edx, dword [ebp - 0x30c]
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x304], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0x358], ecx
mov edx, dword [ebp - 0x304]
push edx
mov eax, dword [ebp - 0x308]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp - 0x304]
push ecx
mov edx, dword [ebp - 0x308]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
push 0
mov edx, dword [ebp + 0xc]
push edx
call fcn.0110d180
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0x324], ecx
mov edx, dword [ebp - 0x358]
cmp edx, dword [ebp - 0x324]
je 0x10ee976
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [ebp - 0x368]
sub esi, eax
mov edi, dword [ebp - 0x364]
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
push edx
push eax
call fcn.0110ac00
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0
je 0x10ee88e
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
sub ecx, dword [ebp - 0x328]
mov dword [ebp - 0x328], ecx
mov eax, dword [ebp - 0x328]
cdq
mov ecx, dword [ebp - 0x310]
sub ecx, eax
mov eax, dword [ebp - 0x30c]
sbb eax, edx
mov dword [ebp - 0x310], ecx
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x328]
cdq
add eax, dword [ebp - 0x368]
mov ecx, dword [ebp - 0x364]
adc ecx, edx
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x44]
call edx
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0x328]
cdq
add ecx, eax
adc esi, edx
mov dword [ebp - 0x308], ecx
mov dword [ebp - 0x304], esi
mov edx, dword [ebp - 0x304]
push edx
mov eax, dword [ebp - 0x308]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp - 0x304]
push ecx
mov edx, dword [ebp - 0x308]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
push 0
mov edx, dword [ebp + 0xc]
push edx
call fcn.0110d180
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0x324], ecx
mov edx, dword [ebp - 0x308]
mov dword [ebp - 0x390], edx
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x38c], eax
mov cx, word [ebp - 0x324]
mov word [ebp - 0x386], cx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x24]
call edx
mov dword [ebp - 0x384], eax
push 0
mov eax, dword [ebp + 0x30]
push eax
lea ecx, [ebp - 0x3a8]
push ecx
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0xc], 0
jne 0x10ef1aa
mov eax, dword [ebp - 0x318]
or eax, dword [ebp - 0x314]
jne 0x10eea00
cmp dword [ebp - 0x14], 0
je 0x10ef1aa
mov ecx, dword [ebp - 0x318]
or ecx, dword [ebp - 0x314]
jne 0x10ef1aa
xor edx, edx
mov dword [ebp - 0x3d0], edx
mov dword [ebp - 0x3cc], edx
mov dword [ebp - 0x3c8], edx
mov dword [ebp - 0x3c4], edx
mov dword [ebp - 0x3c0], edx
mov dword [ebp - 0x3bc], edx
mov dword [ebp - 0x3b8], edx
mov dword [ebp - 0x3b4], edx
mov dword [ebp - 0x3b0], edx
mov dword [ebp - 0x3ac], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x3d0], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x30]
call edx
mov word [ebp - 0x3b0], ax
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], edx
mov ecx, dword [ebp - 0x368]
mov dword [ebp - 0x3c0], ecx
mov edx, dword [ebp - 0x364]
mov dword [ebp - 0x3bc], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x3ac], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x18]
call eax
cmp dword [ebp - 0x18], 0xffffffff
jne 0x10eeb0a
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx]
call eax
mov ecx, dword [ebp - 0x3c4]
push ecx
mov edx, dword [ebp - 0x3c8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xb0]
call eax
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x3d0]
push edx
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x38]
call eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10eeb9a
mov ecx, dword [ebp - 0x364]
push ecx
mov edx, dword [ebp - 0x368]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x80]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
je 0x10eeb98
mov ecx, dword [ebp - 0x364]
push ecx
mov edx, dword [ebp - 0x368]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x9c]
call eax
jmp 0x10eec11
mov ecx, dword [ebp + 0x10]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
push 0x9c4
call fcn.0108d6a0
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x64]
call eax
mov dword [ebp - 0x3d4], eax
mov ecx, dword [ebp + 0x30]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x28]
call edx
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
mov eax, dword [ebp - 0x3d4]
push eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
cmp dword [ebp - 0x14], 0
je 0x10ef1aa
push 0x40
push 0
lea ecx, [ebp - 0x418]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x418], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x40c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x3f8], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x404], edx
mov ecx, dword [ebp - 0x318]
or ecx, dword [ebp - 0x314]
jne 0x10eecff
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x44]
call edx
add eax, dword [ebp - 0x310]
adc edx, dword [ebp - 0x30c]
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x310]
adc edx, dword [ebp - 0x30c]
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x84]
call eax
jmp 0x10eed6e
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x318]
adc edx, dword [ebp - 0x314]
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x318]
adc edx, dword [ebp - 0x314]
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x3fc]
push edx
mov eax, dword [ebp - 0x400]
push eax
call fcn.0110d210
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
push 0
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110d180
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x3f6], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x3f4], eax
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x418]
push edx
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10eee23
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
push 0
mov edx, dword [ebp + 0x10]
push edx
call fcn.0110d180
mov eax, dword [ebp - 0x318]
or eax, dword [ebp - 0x314]
je 0x10eee68
cmp dword [ebp - 0x4c], 0
je 0x10eee68
push 1
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xb8]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x9c]
call eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10eef25
cmp dword [ebp + 0xc], 0
je 0x10eeeb3
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
lea edx, [ebp - 0x18]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
push 6
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0xcd8], eax
push 0x846
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b7f8
mov ecx, dword [ebp - 0xcd8]
push ecx
mov edx, dword [ebp - 0xcd8]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10f20d6
push 0x9c4
call fcn.0108d6a0
cmp dword [ebp + 0xc], 0
je 0x10eef5d
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
test eax, eax
jne 0x10ef014
call fcn.010906a0
mov dword [ebp - 0xcdc], eax
push 0x851
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0xcdc]
push ecx
mov edx, dword [ebp - 0xcdc]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0xc9c]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
mov edx, dword [ebp - 0x318]
or edx, dword [ebp - 0x314]
jne 0x10ef0bd
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
test eax, eax
jne 0x10ef0b8
call fcn.010906a0
mov dword [ebp - 0xce0], eax
push 0x859
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0xce0]
push ecx
mov edx, dword [ebp - 0xce0]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0xc9c]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
jmp 0x10ef146
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ax, word [ebp + 0x24]
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
test eax, eax
jne 0x10ef146
call fcn.010906a0
mov dword [ebp - 0xce4], eax
push 0x862
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0xce4]
push ecx
mov edx, dword [ebp - 0xce4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0xc9c]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
cmp dword [ebp - 0x24], 0
je 0x10ef185
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
mov dx, word [ebp + 0x24]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x8c]
call eax
push 0
mov ecx, dword [ebp + 0x18]
push ecx
call fcn.010c2e90
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x78]
call edx
test eax, eax
je 0x10ef1aa
push 0x17
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10ef366
cmp dword [ebp - 0xc], 0
jne 0x10ef1ba
cmp dword [ebp - 0x14], 0
je 0x10ef32c
mov ecx, dword [ebp - 0x318]
or ecx, dword [ebp - 0x314]
jne 0x10ef32c
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
cmp dword [ebp + 0xc], 0
je 0x10ef208
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x41c], 0
mov eax, dword [ebp + 0x30]
push eax
push 0x1190928
lea ecx, [ebp - 0x420]
push ecx
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x48]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, 0x100000
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.0110ac40
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp - 0x420]
mov edx, dword [ebp - 0x54]
sbb edx, dword [ebp - 0x41c]
mov eax, dword [ebp - 0x28]
xor ebx, ebx
push ebx
push eax
push edx
push ecx
call sub.ntdll.dll__aulldiv
sub esi, eax
sbb edi, edx
sub esi, 1
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x98]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x28]
xor edx, edx
push edx
push ecx
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x58]
push ecx
call sub.ntdll.dll__alldiv
add esi, eax
adc edi, edx
add esi, 1
adc edi, 0
push edi
push esi
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x98]
call edx
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x78]
call eax
test eax, eax
je 0x10ef34e
push 0x17
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10ef366
cmp dword [ebp - 0x14], 0
je 0x10ef366
mov ecx, dword [ebp - 0x318]
or ecx, dword [ebp - 0x314]
je 0x10ee288
jmp 0x10f20d3
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x34]
call edx
mov ecx, dword [ebp - 0x28]
xor esi, esi
push esi
push ecx
push edx
push eax
call sub.ntdll.dll__allmul
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x24]
call edx
cmp eax, 1
jne 0x10f09f8
cmp dword [ebp + 0x14], 0
je 0x10ef9aa
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x46c], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x460], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x30]
call edx
mov word [ebp - 0x438], ax
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], edx
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [ebp - 0x430]
sub ecx, eax
mov eax, dword [ebp - 0x42c]
sbb eax, edx
mov dword [ebp - 0x470], ecx
mov dword [ebp - 0x46c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
mov ecx, dword [ebp - 0x46c]
push ecx
mov edx, dword [ebp - 0x470]
push edx
call sub.ntdll.dll__allrem
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0
je 0x10ef4ca
mov eax, dword [ebp - 0x464]
cdq
push edx
push eax
call fcn.0110ac00
add eax, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x42c]
adc ecx, edx
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
mov ecx, dword [ebp - 0x430]
sub ecx, eax
mov eax, dword [ebp - 0x42c]
sbb eax, edx
push eax
push ecx
call fcn.0110ac00
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], edx
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x450], ecx
mov edx, dword [ebp - 0x42c]
mov dword [ebp - 0x44c], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x434], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x18]
call eax
cmp dword [ebp - 0x18], 0xffffffff
jne 0x10ef5a6
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx]
call eax
mov ecx, dword [ebp - 0x454]
push ecx
mov edx, dword [ebp - 0x458]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xb0]
call eax
push 0
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x460]
push edx
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10ef636
mov ecx, dword [ebp - 0x42c]
push ecx
mov edx, dword [ebp - 0x430]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x80]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
je 0x10ef636
mov ecx, dword [ebp - 0x42c]
push ecx
mov edx, dword [ebp - 0x430]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x9c]
call eax
cmp dword [ebp - 0x14], 0
je 0x10ef807
push 0x148
push 0
lea ecx, [ebp - 0x5b8]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x5b8], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x5ac], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x58c], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x5a8], eax
mov dword [ebp - 0x5a4], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x428]
adc edx, dword [ebp - 0x424]
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x594], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x590], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xce8], eax
mov ecx, dword [ebp - 0xce8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xce8]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0x588], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xcec], eax
mov ecx, dword [ebp - 0xcec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcec]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0x58a], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0x586]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
push 0
push 0
mov eax, dword [ebp + 0x30]
push eax
lea ecx, [ebp - 0x5b8]
push ecx
mov edx, dword [ebp - 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 8]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10ef807
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x428]
adc edx, dword [ebp - 0x424]
sub eax, 1
sbb edx, 0
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x428]
adc edx, dword [ebp - 0x424]
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
jne 0x10ef8c2
cmp dword [ebp + 0xc], 0
je 0x10ef850
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
push 6
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0xcf0], eax
push 0x8de
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b7f8
mov ecx, dword [ebp - 0xcf0]
push ecx
mov edx, dword [ebp - 0xcf0]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10f20d6
push 0x9c4
call fcn.0108d6a0
lea edx, [ebp - 0x18]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
test eax, eax
jne 0x10ef983
call fcn.010906a0
mov dword [ebp - 0xcf4], eax
push 0x8e7
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0xcf4]
push ecx
mov edx, dword [ebp - 0xcf4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0xc9c]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x78]
call edx
test eax, eax
je 0x10ef9aa
push 0x17
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
xor eax, eax
jmp 0x10f20d6
cmp dword [ebp + 0xc], 0
je 0x10f09f3
mov dword [ebp - 0x5bc], 0xffffffff
mov dword [ebp - 0x5d8], 0
mov dword [ebp - 0x608], 0
mov dword [ebp - 0x5d4], 0
mov dword [ebp - 0x5d0], 0
mov dword [ebp - 0x5cc], 0
mov dword [ebp - 0x5c8], 0
mov dword [ebp - 0x5c4], 0
mov dword [ebp - 0x618], 0
mov dword [ebp - 0x614], 0
mov dword [ebp - 0x610], 0
mov dword [ebp - 0x60c], 0
mov word [ebp - 0x604], 0
xor ecx, ecx
mov dword [ebp - 0x602], ecx
mov dword [ebp - 0x5fe], ecx
mov dword [ebp - 0x5fa], ecx
mov dword [ebp - 0x5f6], ecx
mov word [ebp - 0x5f2], cx
mov word [ebp - 0x5f0], 0
xor edx, edx
mov dword [ebp - 0x5ee], edx
mov dword [ebp - 0x5ea], edx
mov dword [ebp - 0x5e6], edx
mov dword [ebp - 0x5e2], edx
mov word [ebp - 0x5de], dx
mov dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x5dc]
add eax, 1
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 0x2710
jbe 0x10efaf5
push 0
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0xcf8], eax
push 0x909
push 0x100c22c
call fcn.010e8660
push eax
push 0x100c2b8
mov ecx, dword [ebp - 0xcf8]
push ecx
mov edx, dword [ebp - 0xcf8]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov eax, 1
jmp 0x10f20d6
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax + 0x18]
call edx
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov eax, dword [ebp + 0xc]
push eax
call fcn.0110b1c0
test eax, eax
je 0x10efc7f
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5cc], edx
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x60c], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [ebp - 0x610]
sub esi, eax
mov edi, dword [ebp - 0x60c]
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
push edx
push eax
call fcn.0110ac00
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 0
je 0x10efc19
mov eax, dword [ebp - 0x5d8]
cdq
add eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x60c]
adc ecx, edx
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x60c], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
mov ecx, dword [ebp - 0x610]
sub ecx, eax
mov eax, dword [ebp - 0x60c]
sbb eax, edx
push eax
push ecx
call fcn.0110ac00
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x5c4], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0xc], 0
mov dword [ebp + 0xc], 0
mov dword [ebp - 0x24], 1
jmp 0x10f0050
cmp dword [ebp - 0xc], 0
jne 0x10f0050
push 0x148
push 0
lea ecx, [ebp - 0x760]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x760], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x754], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x734], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x750], eax
mov dword [ebp - 0x74c], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x748], eax
mov dword [ebp - 0x744], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
add esi, 0x100000
adc edi, 0
mov dword [ebp - 0xd00], esi
mov dword [ebp - 0xcfc], edi
mov ecx, dword [ebp - 0xcfc]
cmp ecx, dword [ebp - 0x64]
jg 0x10efda9
jl 0x10efd59
mov edx, dword [ebp - 0xd00]
cmp edx, dword [ebp - 0x68]
ja 0x10efda9
push 0x111111
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0xd04], eax
push 0x930
push 0x100c22c
call fcn.010e8660
push eax
push 0x100c29c
mov ecx, dword [ebp - 0xd04]
push ecx
mov edx, dword [ebp - 0xd04]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10f20d6
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x44]
call edx
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, dword [ebp - 0x68]
sbb edi, dword [ebp - 0x64]
mov dword [ebp - 0x618], esi
mov dword [ebp - 0x614], edi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
sub eax, dword [ebp - 0x618]
sbb edx, dword [ebp - 0x614]
add esi, eax
adc edi, edx
mov dword [ebp - 0x610], esi
mov dword [ebp - 0x60c], edi
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [ebp - 0x610]
sub esi, eax
mov edi, dword [ebp - 0x60c]
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
push edx
push eax
call fcn.0110ac00
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 0
je 0x10efe85
mov eax, dword [ebp - 0x5d8]
cdq
add eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x60c]
adc ecx, edx
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x60c], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
mov ecx, dword [ebp - 0x610]
sub ecx, eax
mov eax, dword [ebp - 0x60c]
sbb eax, edx
push eax
push ecx
call fcn.0110ac00
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x5c4], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
sub eax, dword [ebp - 0x5c8]
sbb edx, dword [ebp - 0x5c4]
mov dword [ebp - 0x740], eax
mov dword [ebp - 0x73c], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x738], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xd08], eax
mov ecx, dword [ebp - 0xd08]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd08]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0x730], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xd0c], eax
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd0c]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0x732], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0x72e]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0xffffffff
jne 0x10effcf
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx]
call eax
push 0
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x760]
push edx
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10f0050
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
sub eax, dword [ebp - 0x5c8]
sbb edx, dword [ebp - 0x5c4]
sub eax, 1
sbb edx, 0
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
sub eax, dword [ebp - 0x5c8]
sbb edx, dword [ebp - 0x5c4]
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
cmp dword [ebp - 0xc], 0
jne 0x10f0834
mov ecx, dword [ebp - 0x5d0]
or ecx, dword [ebp - 0x5cc]
jne 0x10f0084
cmp dword [ebp - 0x14], 0
je 0x10f0834
mov edx, dword [ebp - 0x5d0]
or edx, dword [ebp - 0x5cc]
jne 0x10f0834
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x790], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x30]
call edx
mov word [ebp - 0x768], ax
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x778], eax
mov dword [ebp - 0x774], edx
mov ecx, dword [ebp - 0x610]
mov dword [ebp - 0x780], ecx
mov edx, dword [ebp - 0x60c]
mov dword [ebp - 0x77c], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x784], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x76c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x764], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x18]
call eax
cmp dword [ebp - 0x5bc], 0xffffffff
jne 0x10f016f
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
lea eax, [ebp - 0x5bc]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx]
call eax
mov ecx, dword [ebp - 0x784]
push ecx
mov edx, dword [ebp - 0x788]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xb0]
call eax
push 0
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x790]
push edx
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10f0205
mov ecx, dword [ebp - 0x60c]
push ecx
mov edx, dword [ebp - 0x610]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x80]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
je 0x10f0200
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x9c]
call eax
jmp 0x10f02d0
mov ecx, dword [ebp + 0x10]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
push 0x9c4
call fcn.0108d6a0
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x64]
call eax
mov dword [ebp - 0x794], eax
cmp dword [ebp + 0xc], 0
je 0x10f026e
mov ecx, dword [ebp + 0x30]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x28]
call edx
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
cmp dword [ebp + 0x10], 0
je 0x10f02bc
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xd10], eax
lea ecx, [ebp - 0x5bc]
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp - 0xd10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xd10]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov ecx, dword [ebp - 0x794]
push ecx
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x20]
call edx
cmp dword [ebp - 0x14], 0
je 0x10f0834
push 0x148
push 0
lea eax, [ebp - 0x8e0]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x8e0], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x8d8], eax
mov dword [ebp - 0x8d4], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x8b4], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x8d0], eax
mov dword [ebp - 0x8cc], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x8c8], eax
mov dword [ebp - 0x8c4], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x5c8]
adc edx, dword [ebp - 0x5c4]
mov dword [ebp - 0x8c0], eax
mov dword [ebp - 0x8bc], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x8b8], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xd14], eax
mov ecx, dword [ebp - 0xd14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd14]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0x8b0], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xd18], eax
mov ecx, dword [ebp - 0xd18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd18]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0x8b2], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0x8ae]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
push 0
push 0
mov eax, dword [ebp + 0x30]
push eax
lea ecx, [ebp - 0x8e0]
push ecx
mov edx, dword [ebp - 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 8]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10f04a1
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x5c8]
adc edx, dword [ebp - 0x5c4]
sub eax, 1
sbb edx, 0
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x5c8]
adc edx, dword [ebp - 0x5c4]
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp - 0x5d0]
or ecx, dword [ebp - 0x5cc]
je 0x10f04ec
cmp dword [ebp - 0x14], 0
je 0x10f04ec
cmp dword [ebp - 0x4c], 0
je 0x10f04ec
push 1
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0xb8]
call edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x9c]
call eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10f05ac
cmp dword [ebp + 0xc], 0
je 0x10f0537
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
lea edx, [ebp - 0x5bc]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
push 6
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0xd1c], eax
push 0x9a0
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b7f8
mov ecx, dword [ebp - 0xd1c]
push ecx
mov edx, dword [ebp - 0xd1c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10f20d6
push 0x9c4
call fcn.0108d6a0
cmp dword [ebp + 0xc], 0
je 0x10f05e4
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
lea eax, [ebp - 0x5bc]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
test eax, eax
jne 0x10f069e
call fcn.010906a0
mov dword [ebp - 0xd20], eax
push 0x9ab
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0xd20]
push ecx
mov edx, dword [ebp - 0xd20]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0xc9c]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
mov edx, dword [ebp - 0x5d0]
or edx, dword [ebp - 0x5cc]
jne 0x10f0747
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
test eax, eax
jne 0x10f0742
call fcn.010906a0
mov dword [ebp - 0xd24], eax
push 0x9b4
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0xd24]
push ecx
mov edx, dword [ebp - 0xd24]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0xc9c]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
jmp 0x10f07d0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ax, word [ebp + 0x24]
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
test eax, eax
jne 0x10f07d0
call fcn.010906a0
mov dword [ebp - 0xd28], eax
push 0x9bd
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0xd28]
push ecx
mov edx, dword [ebp - 0xd28]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0xc9c]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
cmp dword [ebp - 0x24], 0
je 0x10f080f
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
mov dx, word [ebp + 0x24]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x8c]
call eax
push 0
mov ecx, dword [ebp + 0x18]
push ecx
call fcn.010c2e90
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x78]
call edx
test eax, eax
je 0x10f0834
push 0x17
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10f09f3
cmp dword [ebp - 0xc], 0
jne 0x10f0844
cmp dword [ebp - 0x14], 0
je 0x10f09b9
mov ecx, dword [ebp - 0x5d0]
or ecx, dword [ebp - 0x5cc]
jne 0x10f09b9
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
cmp dword [ebp + 0xc], 0
je 0x10f0892
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
lea eax, [ebp - 0x5bc]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov dword [ebp - 0x8e8], 0
mov dword [ebp - 0x8e4], 0
mov eax, dword [ebp + 0x30]
push eax
push 0x1190928
lea ecx, [ebp - 0x8e8]
push ecx
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x48]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, 0x100000
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.0110ac40
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp - 0x8e8]
mov edx, dword [ebp - 0x54]
sbb edx, dword [ebp - 0x8e4]
mov eax, dword [ebp - 0x28]
xor ebx, ebx
push ebx
push eax
push edx
push ecx
call sub.ntdll.dll__aulldiv
sub esi, eax
sbb edi, edx
sub esi, 1
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x98]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x28]
xor edx, edx
push edx
push ecx
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x58]
push ecx
call sub.ntdll.dll__alldiv
add esi, eax
adc edi, edx
add esi, 1
adc edi, 0
push edi
push esi
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x98]
call edx
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x78]
call eax
test eax, eax
je 0x10f09db
push 0x17
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10f09f3
cmp dword [ebp - 0x14], 0
je 0x10f09f3
mov ecx, dword [ebp - 0x5d0]
or ecx, dword [ebp - 0x5cc]
je 0x10efa8a
jmp 0x10f20d3
cmp dword [ebp + 0x14], 0
je 0x10f0feb
push 0x30
push 0
lea edx, [ebp - 0x918]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x918], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x30]
call edx
mov word [ebp - 0x8f0], ax
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x900], eax
mov dword [ebp - 0x8fc], edx
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x928], 0
mov dword [ebp - 0x924], 0
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [ebp - 0x430]
sub ecx, eax
mov eax, dword [ebp - 0x42c]
sbb eax, edx
mov dword [ebp - 0x928], ecx
mov dword [ebp - 0x924], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
mov ecx, dword [ebp - 0x924]
push ecx
mov edx, dword [ebp - 0x928]
push edx
call sub.ntdll.dll__allrem
mov dword [ebp - 0x91c], eax
cmp dword [ebp - 0x91c], 0
je 0x10f0b0b
mov eax, dword [ebp - 0x91c]
cdq
push edx
push eax
call fcn.0110ac00
add eax, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x42c]
adc ecx, edx
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
mov ecx, dword [ebp - 0x430]
sub ecx, eax
mov eax, dword [ebp - 0x42c]
sbb eax, edx
push eax
push ecx
call fcn.0110ac00
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], edx
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x908], ecx
mov edx, dword [ebp - 0x42c]
mov dword [ebp - 0x904], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x910], eax
mov dword [ebp - 0x90c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x8f8], eax
mov dword [ebp - 0x8f4], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x8ec], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x18]
call eax
cmp dword [ebp - 0x18], 0xffffffff
jne 0x10f0be7
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx]
call eax
mov ecx, dword [ebp - 0x90c]
push ecx
mov edx, dword [ebp - 0x910]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xb0]
call eax
push 0
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0x918]
push edx
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10f0c77
mov ecx, dword [ebp - 0x42c]
push ecx
mov edx, dword [ebp - 0x430]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x80]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
je 0x10f0c77
mov ecx, dword [ebp - 0x42c]
push ecx
mov edx, dword [ebp - 0x430]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x9c]
call eax
cmp dword [ebp - 0x14], 0
je 0x10f0e48
push 0x148
push 0
lea ecx, [ebp - 0xa70]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0xa70], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xa68], eax
mov dword [ebp - 0xa64], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0xa44], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0xa60], eax
mov dword [ebp - 0xa5c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xa58], eax
mov dword [ebp - 0xa54], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x428]
adc edx, dword [ebp - 0x424]
mov dword [ebp - 0xa50], eax
mov dword [ebp - 0xa4c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0xa48], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xd2c], eax
mov ecx, dword [ebp - 0xd2c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd2c]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0xa40], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xd30], eax
mov ecx, dword [ebp - 0xd30]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd30]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0xa42], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0xa3e]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
push 0
push 0
mov eax, dword [ebp + 0x30]
push eax
lea ecx, [ebp - 0xa70]
push ecx
mov edx, dword [ebp - 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 8]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10f0e48
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x428]
adc edx, dword [ebp - 0x424]
sub eax, 1
sbb edx, 0
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0x428]
adc edx, dword [ebp - 0x424]
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
test eax, eax
jne 0x10f0f03
cmp dword [ebp + 0xc], 0
je 0x10f0e91
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
push 6
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0xd34], eax
push 0xa41
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b7f8
mov ecx, dword [ebp - 0xd34]
push ecx
mov edx, dword [ebp - 0xd34]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10f20d6
push 0x9c4
call fcn.0108d6a0
lea edx, [ebp - 0x18]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
test eax, eax
jne 0x10f0fc4
call fcn.010906a0
mov dword [ebp - 0xd38], eax
push 0xa4a
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0xd38]
push ecx
mov edx, dword [ebp - 0xd38]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0xc9c]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x78]
call edx
test eax, eax
je 0x10f0feb
push 0x17
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
xor eax, eax
jmp 0x10f20d6
cmp dword [ebp + 0xc], 0
je 0x10f20d3
mov dword [ebp - 0xa74], 0xffffffff
mov dword [ebp - 0xac0], 0
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0xa8c], 0
mov dword [ebp - 0xa88], 0
mov dword [ebp - 0xa84], 0
mov dword [ebp - 0xa80], 0
mov dword [ebp - 0xa7c], 0
mov dword [ebp - 0xad0], 0
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0xac8], 0
mov dword [ebp - 0xac4], 0
mov word [ebp - 0xabc], 0
xor ecx, ecx
mov dword [ebp - 0xaba], ecx
mov dword [ebp - 0xab6], ecx
mov dword [ebp - 0xab2], ecx
mov dword [ebp - 0xaae], ecx
mov word [ebp - 0xaaa], cx
mov word [ebp - 0xaa8], 0
xor edx, edx
mov dword [ebp - 0xaa6], edx
mov dword [ebp - 0xaa2], edx
mov dword [ebp - 0xa9e], edx
mov dword [ebp - 0xa9a], edx
mov word [ebp - 0xa96], dx
mov dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0xa94]
add eax, 1
mov dword [ebp - 0xa94], eax
cmp dword [ebp - 0xa94], 0x2710
jbe 0x10f1136
push 0
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0xd3c], eax
push 0xa6c
push 0x100c22c
call fcn.010e8660
push eax
push 0x100c2b8
mov ecx, dword [ebp - 0xd3c]
push ecx
mov edx, dword [ebp - 0xd3c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov eax, 1
jmp 0x10f20d6
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax + 0x18]
call edx
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov eax, dword [ebp + 0xc]
push eax
call fcn.0110b1c0
test eax, eax
je 0x10f12c0
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x44]
call edx
mov dword [ebp - 0xa88], eax
mov dword [ebp - 0xa84], edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xac8], eax
mov dword [ebp - 0xac4], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [ebp - 0xac8]
sub esi, eax
mov edi, dword [ebp - 0xac4]
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
push edx
push eax
call fcn.0110ac00
mov dword [ebp - 0xa8c], eax
cmp dword [ebp - 0xa8c], 0
je 0x10f125a
mov eax, dword [ebp - 0xa8c]
cdq
add eax, dword [ebp - 0xac8]
mov ecx, dword [ebp - 0xac4]
adc ecx, edx
mov dword [ebp - 0xac8], eax
mov dword [ebp - 0xac4], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
mov ecx, dword [ebp - 0xac8]
sub ecx, eax
mov eax, dword [ebp - 0xac4]
sbb eax, edx
push eax
push ecx
call fcn.0110ac00
mov dword [ebp - 0xa80], eax
mov dword [ebp - 0xa7c], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0xc], 0
mov dword [ebp + 0xc], 0
mov dword [ebp - 0x24], 1
jmp 0x10f178d
cmp dword [ebp - 0xc], 0
jne 0x10f178d
push 0x40
push 0
lea ecx, [ebp - 0xb10]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x44]
call edx
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
add esi, 0x100000
adc edi, 0
mov dword [ebp - 0xd44], esi
mov dword [ebp - 0xd40], edi
mov ecx, dword [ebp - 0xd40]
cmp ecx, dword [ebp - 0x64]
jg 0x10f137c
jl 0x10f132c
mov edx, dword [ebp - 0xd44]
cmp edx, dword [ebp - 0x68]
ja 0x10f137c
push 0x111111
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0xd48], eax
push 0xa8e
push 0x100c22c
call fcn.010e8660
push eax
push 0x100c29c
mov ecx, dword [ebp - 0xd48]
push ecx
mov edx, dword [ebp - 0xd48]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10f20d6
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x44]
call edx
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, dword [ebp - 0x68]
sbb edi, dword [ebp - 0x64]
mov dword [ebp - 0xad0], esi
mov dword [ebp - 0xacc], edi
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0xb10], edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0xaf0], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xb00], eax
mov dword [ebp - 0xafc], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xb08], eax
mov dword [ebp - 0xb04], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
sub eax, dword [ebp - 0xad0]
sbb edx, dword [ebp - 0xacc]
add esi, eax
adc edi, edx
mov dword [ebp - 0xac8], esi
mov dword [ebp - 0xac4], edi
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [ebp - 0xac8]
sub esi, eax
mov edi, dword [ebp - 0xac4]
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
push edx
push eax
call fcn.0110ac00
mov dword [ebp - 0xa8c], eax
cmp dword [ebp - 0xa8c], 0
je 0x10f14aa
mov eax, dword [ebp - 0xa8c]
cdq
add eax, dword [ebp - 0xac8]
mov ecx, dword [ebp - 0xac4]
adc ecx, edx
mov dword [ebp - 0xac8], eax
mov dword [ebp - 0xac4], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x1c]
call edx
mov ecx, dword [ebp - 0xac8]
sub ecx, eax
mov eax, dword [ebp - 0xac4]
sbb eax, edx
push eax
push ecx
call fcn.0110ac00
mov dword [ebp - 0xa80], eax
mov dword [ebp - 0xa7c], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0xac0], ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x44]
call edx
sub eax, dword [ebp - 0xa80]
sbb edx, dword [ebp - 0xa7c]
push edx
push eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
sub eax, dword [ebp - 0xa80]
sbb edx, dword [ebp - 0xa7c]
push edx
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
push 0
mov edx, dword [ebp + 0xc]
push edx
call fcn.0110d180
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0xa90], ecx
mov edx, dword [ebp - 0xac0]
cmp edx, dword [ebp - 0xa90]
je 0x10f16e1
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [ebp - 0xac8]
sub esi, eax
mov edi, dword [ebp - 0xac4]
sbb edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx eax, ax
cdq
push edx
push eax
push edi
push esi
call sub.ntdll.dll__allrem
push edx
push eax
call fcn.0110ac00
mov dword [ebp - 0xa8c], eax
cmp dword [ebp - 0xa8c], 0
je 0x10f1601
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
sub ecx, dword [ebp - 0xa8c]
mov dword [ebp - 0xa8c], ecx
mov eax, dword [ebp - 0xa8c]
cdq
mov ecx, dword [ebp - 0xa80]
sub ecx, eax
mov eax, dword [ebp - 0xa7c]
sbb eax, edx
mov dword [ebp - 0xa80], ecx
mov dword [ebp - 0xa7c], eax
mov eax, dword [ebp - 0xa8c]
cdq
add eax, dword [ebp - 0xac8]
mov ecx, dword [ebp - 0xac4]
adc ecx, edx
mov dword [ebp - 0xac8], eax
mov dword [ebp - 0xac4], ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x44]
call edx
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0xa8c]
cdq
add ecx, eax
adc esi, edx
push esi
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x84]
call edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0xa8c]
cdq
add ecx, eax
adc esi, edx
push esi
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0xa8]
call edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
push 0
mov edx, dword [ebp + 0xc]
push edx
call fcn.0110d180
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0xa90], ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x44]
call edx
mov dword [ebp - 0xaf8], eax
mov dword [ebp - 0xaf4], edx
mov ax, word [ebp - 0xa90]
mov word [ebp - 0xaee], ax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0xaec], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0xffffffff
jne 0x10f1770
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx]
call eax
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0xb10]
push edx
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0xc], 0
jne 0x10f1f14
mov ecx, dword [ebp - 0xa88]
or ecx, dword [ebp - 0xa84]
jne 0x10f17c1
cmp dword [ebp - 0x14], 0
je 0x10f1f14
mov edx, dword [ebp - 0xa88]
or edx, dword [ebp - 0xa84]
jne 0x10f1f14
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0xb40], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x30]
call edx
mov word [ebp - 0xb18], ax
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xb28], eax
mov dword [ebp - 0xb24], edx
mov ecx, dword [ebp - 0xac8]
mov dword [ebp - 0xb30], ecx
mov edx, dword [ebp - 0xac4]
mov dword [ebp - 0xb2c], edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xb38], eax
mov dword [ebp - 0xb34], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0xb20], eax
mov dword [ebp - 0xb1c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0xb14], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x18]
call eax
cmp dword [ebp - 0xa74], 0xffffffff
jne 0x10f18ac
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
lea eax, [ebp - 0xa74]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx]
call eax
mov ecx, dword [ebp - 0xb34]
push ecx
mov edx, dword [ebp - 0xb38]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xb0]
call eax
push 0
push 0
mov ecx, dword [ebp + 0x30]
push ecx
lea edx, [ebp - 0xb40]
push edx
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10f193f
mov ecx, dword [ebp - 0xac4]
push ecx
mov edx, dword [ebp - 0xac8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x80]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
je 0x10f193d
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x9c]
call eax
jmp 0x10f19b6
mov ecx, dword [ebp + 0x10]
push ecx
push 0
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x18]
mov edx, dword [eax + 0x2c]
call edx
push 0x9c4
call fcn.0108d6a0
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x64]
call eax
mov dword [ebp - 0xb44], eax
mov ecx, dword [ebp + 0x30]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x28]
call edx
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
mov eax, dword [ebp - 0xb44]
push eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
cmp dword [ebp - 0x14], 0
je 0x10f1f14
push 0x148
push 0
lea ecx, [ebp - 0xc90]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0xc90], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xc88], eax
mov dword [ebp - 0xc84], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0xc64], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0xc80], eax
mov dword [ebp - 0xc7c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xc78], eax
mov dword [ebp - 0xc74], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0xa80]
adc edx, dword [ebp - 0xa7c]
mov dword [ebp - 0xc70], eax
mov dword [ebp - 0xc6c], edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0xc68], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xd4c], eax
mov ecx, dword [ebp - 0xd4c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd4c]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0xc60], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xd50], eax
mov ecx, dword [ebp - 0xd50]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd50]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0xc62], ax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0xc5e]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
push 0
push 0
mov eax, dword [ebp + 0x30]
push eax
lea ecx, [ebp - 0xc90]
push ecx
mov edx, dword [ebp - 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 8]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10f1b87
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0xa80]
adc edx, dword [ebp - 0xa7c]
sub eax, 1
sbb edx, 0
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x44]
call eax
add eax, dword [ebp - 0xa80]
adc edx, dword [ebp - 0xa7c]
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0xa8]
call eax
mov ecx, dword [ebp - 0xa88]
or ecx, dword [ebp - 0xa84]
je 0x10f1bcc
cmp dword [ebp - 0x4c], 0
je 0x10f1bcc
push 1
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0xb8]
call edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x9c]
call eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10f1c8c
cmp dword [ebp + 0xc], 0
je 0x10f1c17
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
lea edx, [ebp - 0xa74]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
push 6
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0xd54], eax
push 0xb23
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b7f8
mov ecx, dword [ebp - 0xd54]
push ecx
mov edx, dword [ebp - 0xd54]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10f20d6
push 0x9c4
call fcn.0108d6a0
cmp dword [ebp + 0xc], 0
je 0x10f1cc4
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
lea eax, [ebp - 0xa74]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
test eax, eax
jne 0x10f1d7e
call fcn.010906a0
mov dword [ebp - 0xd58], eax
push 0xb2e
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0xd58]
push ecx
mov edx, dword [ebp - 0xd58]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0xc9c]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
mov edx, dword [ebp - 0xa88]
or edx, dword [ebp - 0xa84]
jne 0x10f1e27
mov eax, dword [ebp + 0x30]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
test eax, eax
jne 0x10f1e22
call fcn.010906a0
mov dword [ebp - 0xd5c], eax
push 0xb37
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0xd5c]
push ecx
mov edx, dword [ebp - 0xd5c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0xc9c]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
jmp 0x10f1eb0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ax, word [ebp + 0x24]
push eax
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9ea0
test eax, eax
jne 0x10f1eb0
call fcn.010906a0
mov dword [ebp - 0xd60], eax
push 0xb40
push 0x100c22c
call fcn.010e8660
push eax
push 0x100b6cc
mov ecx, dword [ebp - 0xd60]
push ecx
mov edx, dword [ebp - 0xd60]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov ecx, dword [ebp - 0xc9c]
call fcn.010ca340
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x28]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
cmp dword [ebp - 0x24], 0
je 0x10f1eef
push 0
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
mov ecx, dword [ebp - 0xc9c]
call fcn.010c9780
mov dx, word [ebp + 0x24]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x8c]
call eax
push 0
mov ecx, dword [ebp + 0x18]
push ecx
call fcn.010c2e90
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x30]
mov edx, dword [eax + 0x78]
call edx
test eax, eax
je 0x10f1f14
push 0x17
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10f20d3
cmp dword [ebp - 0xc], 0
jne 0x10f1f24
cmp dword [ebp - 0x14], 0
je 0x10f2099
mov ecx, dword [ebp - 0xa88]
or ecx, dword [ebp - 0xa84]
jne 0x10f2099
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
cmp dword [ebp + 0xc], 0
je 0x10f1f72
mov edx, dword [ebp + 8]
add edx, 0x24
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
lea eax, [ebp - 0xa74]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov ecx, dword [ebp - 0xc9c]
call fcn.010cb770
mov dword [ebp - 0xc98], 0
mov dword [ebp - 0xc94], 0
mov eax, dword [ebp + 0x30]
push eax
push 0x1190928
lea ecx, [ebp - 0xc98]
push ecx
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x48]
push edx
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
sub esi, eax
sbb edi, edx
sub esi, 0x100000
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.0110ac40
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp - 0xc98]
mov edx, dword [ebp - 0x54]
sbb edx, dword [ebp - 0xc94]
mov eax, dword [ebp - 0x28]
xor ebx, ebx
push ebx
push eax
push edx
push ecx
call sub.ntdll.dll__aulldiv
sub esi, eax
sbb edi, edx
sub esi, 1
sbb edi, 0
push edi
push esi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x98]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x28]
xor edx, edx
push edx
push ecx
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x58]
push ecx
call sub.ntdll.dll__alldiv
add esi, eax
adc edi, edx
add esi, 1
adc edi, 0
push edi
push esi
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax + 0x98]
call edx
mov eax, dword [ebp + 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x78]
call eax
test eax, eax
je 0x10f20bb
push 0x17
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0x30]
mov eax, dword [edx + 0x20]
call eax
jmp 0x10f20d3
cmp dword [ebp - 0x14], 0
je 0x10f20d3
mov ecx, dword [ebp - 0xa88]
or ecx, dword [ebp - 0xa84]
je 0x10f10cb
mov eax, dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x2c