Function at 0xe77310
Capabilities:
Get common file path
Get startup folder
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0xf14cf4
mov eax, dword fs:[0]
push eax
sub esp, 0x580
mov eax, dword [0xf387a0]
xor eax, esp
mov dword [esp + 0x578], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0xf387a0]
xor eax, esp
push eax
lea eax, [esp + 0x594]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x5a4]
xor ebx, ebx
push ebp
mov dword [esp + 0x2c], ebx
call fcn.00e78e30
test al, al
je 0xe78dfc
mov byte [esp + 0x1e], 1
call fcn.00e76970
push eax
call fcn.00e71310
mov esi, ebp
mov dword [esp + 0x80], eax
call fcn.00e7b250
call fcn.00e7bfb0
lea esi, [esp + 0xec]
call fcn.00e7daa0
mov dword [esp + 0x59c], ebx
call fcn.00e76970
inc dword [eax + 0x3c]
mov ecx, dword [ebp + 0x10]
sub ecx, dword [ebp + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x18], ebx
je 0xe77595
mov dword [esp + 0x14], ebx
jmp 0xe773d0
cmp dword [esp + 0x18], eax
jb 0xe773db
call fcn.00ebb554
mov eax, dword [ebp + 0xc]
add eax, dword [esp + 0x14]
mov edi, 0x10
cmp dword [eax + 0x18], edi
jb 0xe773f1
mov esi, dword [eax + 4]
jmp 0xe773f4
lea esi, [eax + 4]
mov eax, esi
mov dword [esp + 0xe8], 0xf
mov dword [esp + 0xe4], ebx
mov byte [esp + 0xd4], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0xe77412
sub eax, edx
push eax
push esi
lea ecx, [esp + 0xd8]
call fcn.00e511b0
push ebx
lea esi, [esp + 0xd4]
mov ecx, ebp
mov byte [esp + 0x5a0], 1
call fcn.00e7ad80
cmp dword [esp + 0xe8], edi
mov edi, dword [esp + 0xd4]
jae 0xe77457
lea edi, [esp + 0xd4]
lea eax, [esp + 0x15c]
push eax
call fcn.00e8bc10
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x5b8], 2
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x110]
mov esi, 0xf
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.00e51680
lea eax, [esp + 0x178]
push eax
lea edi, [esp + 0x4c]
call fcn.00e7bc10
mov edi, 0x10
cmp dword [esp + 0x44], edi
jb 0xe774bc
mov ecx, dword [esp + 0x30]
push ecx
call fcn.00eb98f8
add esp, 4
cmp dword [esp + 0x1ac], edi
jb 0xe774d5
mov edx, dword [esp + 0x198]
push edx
call fcn.00eb98f8
add esp, 4
mov dword [esp + 0x1ac], esi
mov dword [esp + 0x1a8], ebx
mov byte [esp + 0x198], bl
cmp dword [esp + 0x190], edi
jb 0xe77503
mov eax, dword [esp + 0x17c]
push eax
call fcn.00eb98f8
add esp, 4
mov dword [esp + 0x190], esi
mov dword [esp + 0x18c], ebx
mov byte [esp + 0x17c], bl
cmp dword [esp + 0x174], edi
jb 0xe77531
mov ecx, dword [esp + 0x160]
push ecx
call fcn.00eb98f8
add esp, 4
mov byte [esp + 0x59c], bl
mov dword [esp + 0x174], esi
mov dword [esp + 0x170], ebx
mov byte [esp + 0x160], bl
cmp dword [esp + 0xe8], edi
jb 0xe77566
mov edx, dword [esp + 0xd4]
push edx
call fcn.00eb98f8
add esp, 4
mov ecx, dword [ebp + 0x10]
sub ecx, dword [ebp + 0xc]
mov esi, dword [esp + 0x18]
add dword [esp + 0x14], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc esi
add eax, edx
mov dword [esp + 0x18], esi
cmp esi, eax
jb 0xe773d0
call fcn.00e7bfb0
mov esi, dword [eax + 4]
call fcn.00e7bfb0
mov edi, dword [eax]
lea eax, [esi - 1]
cmp eax, edi
jle 0xe775ba
call fcn.00e6e4b0
sub esi, edi
xor edx, edx
div esi
add edx, edi
jmp 0xe775bc
mov edx, edi
imul edx, edx, 0x3e8
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [ebp + 0xf4], bl
je 0xe775db
call fcn.00e76970
mov esi, dword [eax + 0x7c]
jmp 0xe775e3
call fcn.00e76970
mov esi, dword [eax + 0x78]
call fcn.00e6e4b0
cdq
xor eax, edx
sub eax, edx
cdq
mov ecx, 0x3e8
idiv ecx
cmp esi, edx
jle 0xe78ddc
cmp byte [ebp + 0xf4], bl
je 0xe7781c
lea esi, [ebp + 0xd8]
push 1
mov ecx, ebp
call fcn.00e7ad80
cmp dword [esi + 0x18], 0x10
jb 0xe77623
mov edi, dword [esi + 4]
jmp 0xe77626
lea edi, [esi + 4]
lea edx, [esp + 0x29c]
push edx
call fcn.00e8bc10
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x5b8], 3
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x110]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00e51680
lea ecx, [esp + 0x2b8]
push ecx
lea edi, [esp + 0x248]
call fcn.00e7bc10
lea edx, [esp + 0x2f4]
push edx
mov byte [esp + 0x5a0], 4
call fcn.00e5cbf0
and dword [esp + 0x8c], 0xfffffe00
mov dword [esp + 0x90], ebx
push 0xffffffffffffffff
push ebx
mov eax, edi
push eax
lea ecx, [esp + 0x340]
mov byte [esp + 0x5a8], 7
call fcn.00e51680
mov eax, dword [esp + 0x338]
mov edi, 0x10
cmp dword [esp + 0x34c], edi
jae 0xe776d2
lea eax, [esp + 0x338]
mov ecx, dword [esp + 0x348]
push 1
lea edx, [esp + 0x88]
push edx
add ecx, eax
push ecx
push eax
lea eax, [esp + 0x304]
push eax
call fcn.00e5cce0
test al, al
je 0xe777b6
push str.data
lea ecx, [esp + 0x88]
push ecx
mov ecx, 0xf2ae9c
call fcn.00e67310
push str.dstlink
push eax
mov ecx, 0xf2aea7
call fcn.00e67310
push eax
lea ecx, [esp + 0x30]
call fcn.00e66440
push 0xffffffffffffffff
push ebx
push eax
mov ecx, esi
mov byte [esp + 0x5a8], 8
call fcn.00e51680
mov byte [esp + 0x59c], 7
cmp dword [esp + 0x44], edi
jb 0xe7775b
mov edx, dword [esp + 0x30]
push edx
call fcn.00eb98f8
add esp, 4
push str.data
lea eax, [esp + 0x88]
push eax
mov ecx, 0xf2ae9c
call fcn.00e67310
push str.clickid
push eax
mov ecx, 0xf2aeaf
call fcn.00e67310
push eax
lea ecx, [esp + 0x30]
call fcn.00e66440
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x100]
mov byte [esp + 0x5a8], 9
call fcn.00e51680
cmp dword [esp + 0x44], edi
jb 0xe777b6
mov ecx, dword [esp + 0x30]
push ecx
call fcn.00eb98f8
add esp, 4
lea eax, [esp + 0x84]
mov byte [esp + 0x59c], 5
call fcn.00e66220
lea edi, [esp + 0x2f4]
call fcn.00e71870
cmp dword [esp + 0x240], 0x10
jb 0xe777f0
mov edx, dword [esp + 0x22c]
push edx
call fcn.00eb98f8
add esp, 4
lea esi, [esp + 0x29c]
mov dword [esp + 0x240], 0xf
mov dword [esp + 0x23c], ebx
mov byte [esp + 0x22c], bl
mov byte [esp + 0x59c], bl
call fcn.00e7bba0
mov ecx, dword [ebp + 0x28]
sub ecx, dword [ebp + 0x24]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x14], ebx
je 0xe77a42
mov dword [esp + 0x18], ebx
mov ecx, dword [ebp + 0x28]
sub ecx, dword [ebp + 0x24]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp dword [esp + 0x14], ecx
jb 0xe77867
call fcn.00ebb554
mov eax, dword [ebp + 0x24]
add eax, dword [esp + 0x18]
cmp dword [eax + 0x18], 0x10
jb 0xe77879
mov esi, dword [eax + 4]
jmp 0xe7787c
lea esi, [eax + 4]
mov eax, esi
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0xe778a0
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x148]
call fcn.00e511b0
push 1
lea esi, [esp + 0x144]
mov ecx, ebp
mov byte [esp + 0x5a0], 0xa
call fcn.00e7ad80
cmp dword [esp + 0x158], 0x10
mov edi, dword [esp + 0x144]
jae 0xe778e7
lea edi, [esp + 0x144]
lea edx, [esp + 0x15c]
push edx
call fcn.00e8bc10
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x5b8], 0xb
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x110]
mov esi, 0xf
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00e51680
lea ecx, [esp + 0x178]
push ecx
lea edi, [esp + 0x4c]
call fcn.00e7bc10
mov edi, 0x10
cmp dword [esp + 0x44], edi
jb 0xe7794c
mov edx, dword [esp + 0x30]
push edx
call fcn.00eb98f8
add esp, 4
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esp + 0x1ac], edi
jb 0xe7796d
mov eax, dword [esp + 0x198]
push eax
call fcn.00eb98f8
add esp, 4
mov dword [esp + 0x1ac], esi
mov dword [esp + 0x1a8], ebx
mov byte [esp + 0x198], bl
cmp dword [esp + 0x190], edi
jb 0xe7799b
mov ecx, dword [esp + 0x17c]
push ecx
call fcn.00eb98f8
add esp, 4
mov dword [esp + 0x190], esi
mov dword [esp + 0x18c], ebx
mov byte [esp + 0x17c], bl
cmp dword [esp + 0x174], edi
jb 0xe779c9
mov edx, dword [esp + 0x160]
push edx
call fcn.00eb98f8
add esp, 4
mov byte [esp + 0x59c], bl
mov dword [esp + 0x174], esi
mov dword [esp + 0x170], ebx
mov byte [esp + 0x160], bl
cmp dword [esp + 0x158], edi
jb 0xe779fe
mov eax, dword [esp + 0x144]
push eax
call fcn.00eb98f8
add esp, 4
mov ecx, dword [ebp + 0x28]
sub ecx, dword [ebp + 0x24]
add dword [esp + 0x18], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov dword [esp + 0x158], esi
mov esi, dword [esp + 0x14]
mov ecx, edx
shr ecx, 0x1f
inc esi
add ecx, edx
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
mov dword [esp + 0x14], esi
cmp esi, ecx
jb 0xe77843
cmp dword [esp + 0x80], 2
mov byte [esp + 0x1f], bl
je 0xe77cc8
cmp dword [ebp + 0xf8], 1
je 0xe77cc8
call fcn.00e76970
mov esi, dword [eax + 0x84]
call fcn.00e6e4b0
cdq
xor eax, edx
sub eax, edx
cdq
mov ecx, 0x3e8
idiv ecx
cmp esi, edx
jle 0xe77cc8
mov ecx, dword [ebp + 0x70]
sub ecx, dword [ebp + 0x6c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov byte [esp + 0x1f], 1
mov dword [esp + 0x14], ebx
je 0xe77cc8
mov dword [esp + 0x18], ebx
mov ecx, dword [ebp + 0x70]
sub ecx, dword [ebp + 0x6c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp dword [esp + 0x14], ecx
jb 0xe77ad6
call fcn.00ebb554
mov eax, dword [ebp + 0x6c]
add eax, dword [esp + 0x18]
cmp dword [eax + 0x18], 0x10
jb 0xe77ae8
mov esi, dword [eax + 4]
jmp 0xe77aeb
lea esi, [eax + 4]
mov eax, esi
mov dword [esp + 0x13c], 0xf
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0xe77b10
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x12c]
call fcn.00e511b0
push 1
lea esi, [esp + 0x128]
mov ecx, ebp
mov byte [esp + 0x5a0], 0xc
call fcn.00e7ad80
cmp dword [esp + 0x13c], 0x10
mov edi, dword [esp + 0x128]
jae 0xe77b57
lea edi, [esp + 0x128]
lea edx, [esp + 0x244]
push edx
call fcn.00e8bc10
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x5b8], 0xd
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x110]
mov esi, 0xf
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00e51680
lea ecx, [esp + 0x260]
push ecx
lea edi, [esp + 0xd4]
call fcn.00e7bc10
mov edi, 0x10
cmp dword [esp + 0xcc], edi
jb 0xe77bc5
mov edx, dword [esp + 0xb8]
push edx
call fcn.00eb98f8
add esp, 4
mov dword [esp + 0xcc], esi
mov dword [esp + 0xc8], ebx
mov byte [esp + 0xb8], bl
cmp dword [esp + 0x294], edi
jb 0xe77bf3
mov eax, dword [esp + 0x280]
push eax
call fcn.00eb98f8
add esp, 4
mov dword [esp + 0x294], esi
mov dword [esp + 0x290], ebx
mov byte [esp + 0x280], bl
cmp dword [esp + 0x278], edi
jb 0xe77c21
mov ecx, dword [esp + 0x264]
push ecx
call fcn.00eb98f8
add esp, 4
mov dword [esp + 0x278], esi
mov dword [esp + 0x274], ebx
mov byte [esp + 0x264], bl
cmp dword [esp + 0x25c], edi
jb 0xe77c4f
mov edx, dword [esp + 0x248]
push edx
call fcn.00eb98f8
add esp, 4
mov byte [esp + 0x59c], bl
mov dword [esp + 0x25c], esi
mov dword [esp + 0x258], ebx
mov byte [esp + 0x248], bl
cmp dword [esp + 0x13c], edi
jb 0xe77c84
mov eax, dword [esp + 0x128]
push eax
call fcn.00eb98f8
add esp, 4
mov ecx, dword [ebp + 0x70]
sub ecx, dword [ebp + 0x6c]
add dword [esp + 0x18], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov dword [esp + 0x13c], esi
mov esi, dword [esp + 0x14]
mov ecx, edx
shr ecx, 0x1f
inc esi
add ecx, edx
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
mov dword [esp + 0x14], esi
cmp esi, ecx
jb 0xe77ab2
cmp dword [ebp + 0xfc], 1
jne 0xe78171
mov ecx, dword [ebp + 0x40]
sub ecx, dword [ebp + 0x3c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x14], ebx
je 0xe77f0f
mov dword [esp + 0x18], ebx
lea esp, [esp]
mov ecx, dword [ebp + 0x40]
sub ecx, dword [ebp + 0x3c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp dword [esp + 0x14], ecx
jb 0xe77d24
call fcn.00ebb554
mov eax, dword [ebp + 0x3c]
add eax, dword [esp + 0x18]
cmp dword [eax + 0x18], 0x10
jb 0xe77d36
mov esi, dword [eax + 4]
jmp 0xe77d39
lea esi, [eax + 4]
mov eax, esi
mov dword [esp + 0x120], 0xf
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0xe77d57
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x110]
call fcn.00e511b0
push 1
lea esi, [esp + 0x10c]
mov ecx, ebp
mov byte [esp + 0x5a0], 0xe
call fcn.00e7ad80
cmp dword [esp + 0x120], 0x10
mov edi, dword [esp + 0x10c]
jae 0xe77d9e
lea edi, [esp + 0x10c]
lea edx, [esp + 0x1b4]
push edx
call fcn.00e8bc10
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x5b8], 0xf
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x110]
mov esi, 0xf
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00e51680
lea ecx, [esp + 0x1d0]
push ecx
lea edi, [esp + 0xb4]
call fcn.00e7bc10
mov edi, 0x10
cmp dword [esp + 0xac], edi
jb 0xe77e0c
mov edx, dword [esp + 0x98]
push edx
call fcn.00eb98f8
add esp, 4
mov dword [esp + 0xac], esi
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
cmp dword [esp + 0x204], edi
jb 0xe77e3a
mov eax, dword [esp + 0x1f0]
push eax
call fcn.00eb98f8
add esp, 4
mov dword [esp + 0x204], esi
mov dword [esp + 0x200], ebx
mov byte [esp + 0x1f0], bl
cmp dword [esp + 0x1e8], edi
jb 0xe77e68
mov ecx, dword [esp + 0x1d4]
push ecx
call fcn.00eb98f8
add esp, 4
mov dword [esp + 0x1e8], esi
mov dword [esp + 0x1e4], ebx
mov byte [esp + 0x1d4], bl
cmp dword [esp + 0x1cc], edi
jb 0xe77e96
mov edx, dword [esp + 0x1b8]
push edx
call fcn.00eb98f8
add esp, 4
mov byte [esp + 0x59c], bl
mov dword [esp + 0x1cc], esi
mov dword [esp + 0x1c8], ebx
mov byte [esp + 0x1b8], bl
cmp dword [esp + 0x120], edi
jb 0xe77ecb
mov eax, dword [esp + 0x10c]
push eax
call fcn.00eb98f8
add esp, 4
mov ecx, dword [ebp + 0x40]
sub ecx, dword [ebp + 0x3c]
add dword [esp + 0x18], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov dword [esp + 0x120], esi
mov esi, dword [esp + 0x14]
mov ecx, edx
shr ecx, 0x1f
inc esi
add ecx, edx
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
mov dword [esp + 0x14], esi
cmp esi, ecx
jb 0xe77d00
cmp dword [ebp + 0xfc], 1
jne 0xe78171
mov ecx, dword [ebp + 0x58]
sub ecx, dword [ebp + 0x54]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0xe78171
call fcn.00e76970
mov esi, dword [eax + 0x80]
call fcn.00e6e4b0
cdq
xor eax, edx
sub eax, edx
cdq
mov ecx, 0x3e8
idiv ecx
cmp esi, edx
jle 0xe78171
mov ecx, dword [ebp + 0x58]
sub ecx, dword [ebp + 0x54]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x14], ebx
je 0xe78701
mov dword [esp + 0x18], ebx
jmp 0xe77f90
mov ecx, dword [ebp + 0x58]
sub ecx, dword [ebp + 0x54]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp dword [esp + 0x14], ecx
jb 0xe77fb4
call fcn.00ebb554
mov eax, dword [ebp + 0x54]
add eax, dword [esp + 0x18]
cmp dword [eax + 0x18], 0x10
jb 0xe77fc6
mov esi, dword [eax + 4]
jmp 0xe77fc9
lea esi, [eax + 4]
mov eax, esi
mov dword [esp + 0xe8], 0xf
mov dword [esp + 0xe4], ebx
mov byte [esp + 0xd4], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0xe77fe7
sub eax, edx
push eax
push esi
lea ecx, [esp + 0xd8]
call fcn.00e511b0
push 1
lea esi, [esp + 0xd4]
mov ecx, ebp
mov byte [esp + 0x5a0], 0x10
call fcn.00e7ad80
cmp dword [esp + 0xe8], 0x10
mov edi, dword [esp + 0xd4]
jae 0xe7802e
lea edi, [esp + 0xd4]
lea edx, [esp + 0x1b4]
push edx
call fcn.00e8bc10
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x5b8], 0x11
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x110]
mov esi, 0xf
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00e51680
lea ecx, [esp + 0x1d0]
push ecx
lea edi, [esp + 0x4c]
call fcn.00e7bc10
mov edi, 0x10
cmp dword [esp + 0x44], edi
jb 0xe78093
mov edx, dword [esp + 0x30]
push edx
call fcn.00eb98f8
add esp, 4
cmp dword [esp + 0x204], edi
jb 0xe780ac
mov eax, dword [esp + 0x1f0]
push eax
call fcn.00eb98f8
add esp, 4
mov dword [esp + 0x204], esi
mov dword [esp + 0x200], ebx
mov byte [esp + 0x1f0], bl
cmp dword [esp + 0x1e8], edi
jb 0xe780da
mov ecx, dword [esp + 0x1d4]
push ecx
call fcn.00eb98f8
add esp, 4
mov dword [esp + 0x1e8], esi
mov dword [esp + 0x1e4], ebx
mov byte [esp + 0x1d4], bl
cmp dword [esp + 0x1cc], edi
jb 0xe78108
mov edx, dword [esp + 0x1b8]
push edx
call fcn.00eb98f8
add esp, 4
mov byte [esp + 0x59c], bl
mov dword [esp + 0x1cc], esi
mov dword [esp + 0x1c8], ebx
mov byte [esp + 0x1b8], bl
cmp dword [esp + 0xe8], edi
jb 0xe7813d
mov eax, dword [esp + 0xd4]
push eax
call fcn.00eb98f8
add esp, 4
mov ecx, dword [ebp + 0x58]
sub ecx, dword [ebp + 0x54]
mov esi, dword [esp + 0x14]
add dword [esp + 0x18], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
inc esi
add ecx, edx
mov dword [esp + 0x14], esi
cmp esi, ecx
jb 0xe77f90
jmp 0xe78701
cmp byte [ebp + 0xf4], bl
je 0xe78183
cmp byte [esp + 0x1f], bl
je 0xe78ddc
mov eax, dword [0xf3b830]
cmp eax, ebx
jne 0xe7822c
mov byte [esp + 0x1e], bl
call fcn.00e6c9e0
push 0x11c
call fcn.00eb9980
add esp, 4
cmp eax, ebx
je 0xe781b4
mov dword [eax], ebx
mov dword [eax + 8], ebx
mov dword [eax + 4], ebx
jmp 0xe781b6
xor eax, eax
mov dword [0xf3b830], eax
cmp eax, ebx
je 0xe78243
lea ecx, [esp + 0x48]
call fcn.00e7a7b0
mov esi, 0x10
mov byte [esp + 0x59c], 0x12
cmp dword [eax + 0x18], esi
jb 0xe781e3
mov eax, dword [eax + 4]
jmp 0xe781e6
add eax, 4
mov ecx, dword [0xf3b830]
push str.WebKit.dll
push eax
call fcn.00e6cca0
mov byte [esp + 0x59c], bl
cmp dword [esp + 0x60], esi
jb 0xe78211
mov edx, dword [esp + 0x4c]
push edx
call fcn.00eb98f8
add esp, 4
mov eax, dword [0xf3b830]
mov dword [esp + 0x60], 0xf
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x4c], bl
cmp eax, ebx
je 0xe78248
jmp 0xe78231
mov esi, 0x10
push str.xxxbbbfffccc
push eax
call fcn.00e6ce30
mov dword [0xf3b7f0], eax
jmp 0xe7824d
mov esi, 0x10
mov eax, dword [0xf3b7f0]
cmp eax, ebx
je 0xe78699
call eax
mov edx, dword [eax]
mov dword [0xf3b7ec], eax
mov ecx, eax
mov eax, dword [edx]
call eax
call fcn.00e7c040
lea ecx, [esp + 0x48]
call fcn.00e7a7b0
mov byte [esp + 0x59c], 0x13
cmp dword [eax + 0x18], esi
jb 0xe78284
mov eax, dword [eax + 4]
jmp 0xe78287
add eax, 4
mov ecx, dword [0xf3b7ec]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x34]
call eax
mov byte [esp + 0x59c], bl
cmp dword [esp + 0x60], esi
jb 0xe782af
mov ecx, dword [esp + 0x4c]
push ecx
call fcn.00eb98f8
add esp, 4
call fcn.00e76970
mov esi, dword [eax + 0x34]
call fcn.00e76970
movzx eax, word [eax + 0xf6]
mov ecx, dword [0xf3b7ec]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x20
movzx eax, ax
push esi
push eax
call edx
mov ecx, dword [0xf3b7ec]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
push 1
call edx
push 0x206
lea ecx, [esp + 0x38a]
xor eax, eax
push ebx
push ecx
mov word [esp + 0x390], ax
call fcn.00ec1460
add esp, 0xc
push 1
push 0x23
lea edx, [esp + 0x38c]
push edx
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push str.LocalAppData
lea eax, [esp + 0x388]
push 0x104
push eax
call fcn.00eb9664
add esp, 0xc
xor ecx, ecx
lea eax, [esp + 0x384]
mov word [esp + 0xd4], cx
mov dword [esp + 0xe8], 7
mov dword [esp + 0xe4], ebx
lea ecx, [eax + 2]
mov edi, edi
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0xe78360
sub eax, ecx
sar eax, 1
push eax
lea edx, [esp + 0x388]
push edx
lea ecx, [esp + 0xd8]
call fcn.00e51cc0
push 1
push 0xf24acc
lea esi, [esp + 0xd8]
mov byte [esp + 0x5a4], 0x14
call fcn.00e5b3b0
call fcn.00e76970
lea esi, [esp + 0x48]
call fcn.00e7da70
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xdc]
mov byte [esp + 0x5a8], 0x15
call fcn.00e5b6f0
mov edi, 8
mov byte [esp + 0x59c], 0x14
cmp dword [esp + 0x60], edi
jb 0xe783e5
mov eax, dword [esp + 0x4c]
push eax
call fcn.00eb98f8
add esp, 4
push 0xa
push str.ck_cg.txt
lea esi, [esp + 0xd8]
call fcn.00e5b3b0
call fcn.00e76970
lea esi, [esp + 0x68]
mov ecx, eax
call fcn.00e7da50
mov byte [esp + 0x59c], 0x16
mov ecx, dword [esp + 0x78]
sub ecx, dword [esp + 0x74]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
je 0xe784cc
lea edx, [esp + 0x94]
push edx
mov ecx, 0xf2b2fc
call fcn.00ea2270
mov byte [esp + 0x59c], 0x17
mov ecx, dword [esp + 0x78]
sub ecx, dword [esp + 0x74]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x28], 1
jne 0xe78475
call fcn.00ebb554
mov ecx, dword [esp + 0x74]
push ecx
lea edx, [esp + 0x4c]
push edx
call fcn.00ea2440
mov dword [esp + 0x59c], 0x18
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x28], 3
cmp dword [esp + 0xb0], edi
jae 0xe784ae
lea eax, [esp + 0x9c]
mov edi, dword [esp + 0xac]
push eax
mov eax, dword [esp + 0x64]
lea ecx, [esp + 0x50]
call fcn.00e5bd60
mov byte [esp + 0x27], 1
test eax, eax
je 0xe784d0
mov byte [esp + 0x27], bl
test byte [esp + 0x28], 2
mov edi, vtable.LString.0
je 0xe78512
and dword [esp + 0x28], 0xfffffffd
dec dword [0xf3bc40]
cmp dword [esp + 0x64], 8
mov dword [esp + 0x48], edi
jb 0xe784ff
mov eax, dword [esp + 0x50]
push eax
call fcn.00eb98f8
add esp, 4
xor ecx, ecx
mov dword [esp + 0x64], 7
mov dword [esp + 0x60], ebx
mov word [esp + 0x50], cx
mov dword [esp + 0x59c], 0x16
test byte [esp + 0x28], 1
je 0xe7854b
dec dword [0xf3bc40]
cmp dword [esp + 0xb0], 8
mov dword [esp + 0x94], edi
jb 0xe7854b
mov edx, dword [esp + 0x9c]
push edx
call fcn.00eb98f8
add esp, 4
cmp byte [esp + 0x27], bl
je 0xe7859a
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x4c]
push ecx
call fcn.00ea2440
lea esi, [esp + 0x48]
mov byte [esp + 0x59c], 0x19
call fcn.00e99cf0
mov byte [esp + 0x59c], 0x16
dec dword [0xf3bc40]
cmp dword [esp + 0x64], 8
mov dword [esp + 0x48], edi
jb 0xe7859a
mov edx, dword [esp + 0x50]
push edx
call fcn.00eb98f8
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0xf4]
xor eax, eax
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], ebx
push edx
mov word [ecx + 4], ax
call fcn.00e51940
lea edi, [esp + 0x228]
call fcn.00e532e0
add esp, 0x1c
mov byte [esp + 0x59c], 0x1a
mov eax, dword [esp + 0x210]
mov esi, 0x10
cmp dword [esp + 0x224], esi
jae 0xe785f6
lea eax, [esp + 0x210]
mov ecx, dword [0xf3b7ec]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x28]
call eax
cmp dword [esp + 0x224], esi
jb 0xe7861d
mov ecx, dword [esp + 0x210]
push ecx
call fcn.00eb98f8
add esp, 4
mov eax, dword [esp + 0x74]
mov dword [esp + 0x224], 0xf
mov dword [esp + 0x220], ebx
mov byte [esp + 0x210], bl
cmp eax, ebx
je 0xe7865c
mov edx, dword [esp + 0x20]
mov edi, dword [esp + 0x78]
push edx
call fcn.00e54560
mov eax, dword [esp + 0x78]
add esp, 4
push eax
call fcn.00eb98f8
add esp, 4
mov ecx, dword [esp + 0x68]
push ecx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
call fcn.00eb98f8
add esp, 4
mov byte [esp + 0x59c], bl
cmp dword [esp + 0xe8], 8
jb 0xe78699
mov edx, dword [esp + 0xd4]
push edx
call fcn.00eb98f8
add esp, 4
push 1
lea esi, [ebp + 0xd8]
mov ecx, ebp
call fcn.00e7ad80
call fcn.00e7c0e0
mov edi, eax
call fcn.00e8c190
test al, al
je 0xe786c7
call fcn.00e7c0e0
mov eax, dword [eax]
push ebx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
push ebx
push ebx
push ebx
lea eax, [esp + 0x38]
push eax
call esi
test eax, eax
je 0xe78701
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
lea ecx, [esp + 0x2c]
push ecx
call edi
lea edx, [esp + 0x2c]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageW]
push ebx
push ebx
push ebx
lea eax, [esp + 0x38]
push eax
call esi
test eax, eax
jne 0xe786e1
cmp byte [esp + 0x1f], bl
je 0xe78ddc
mov ecx, dword [ebp + 0x88]
sub ecx, dword [ebp + 0x84]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [esp + 0x14], ebx
je 0xe788ac
mov dword [esp + 0x18], ebx
jmp 0xe78740
mov ecx, dword [ebp + 0x88]
sub ecx, dword [ebp + 0x84]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x14], eax
jb 0xe7876a
call fcn.00ebb554
mov eax, dword [ebp + 0x84]
add eax, dword [esp + 0x18]
mov edi, 0x10
cmp dword [eax + 0x18], edi
jb 0xe78783
mov esi, dword [eax + 4]
jmp 0xe78786
lea esi, [eax + 4]
mov eax, esi
mov dword [esp + 0xe8], 0xf
mov dword [esp + 0xe4], ebx
mov byte [esp + 0xd4], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0xe787a4
sub eax, edx
push eax
push esi
lea ecx, [esp + 0xd8]
call fcn.00e511b0
push 1
lea esi, [esp + 0xd4]
mov ecx, ebp
mov byte [esp + 0x5a0], 0x1b
call fcn.00e7ad80
cmp dword [esp + 0xe8], edi
mov edi, dword [esp + 0xd4]
jae 0xe787ea
lea edi, [esp + 0xd4]
lea ecx, [esp + 0x29c]
push ecx
call fcn.00e8bc10
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x5b8], 0x1c
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x110]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.00e51680
lea eax, [esp + 0x2b8]
push eax
lea edi, [esp + 0x4c]
call fcn.00e7bc10
cmp dword [esp + 0x44], 0x10
jb 0xe7884a
mov ecx, dword [esp + 0x30]
push ecx
call fcn.00eb98f8
add esp, 4
lea esi, [esp + 0x29c]
call fcn.00e7bba0
mov byte [esp + 0x59c], bl
cmp dword [esp + 0xe8], 0x10
jb 0xe78877
mov edx, dword [esp + 0xd4]
push edx
call fcn.00eb98f8
add esp, 4
mov ecx, dword [ebp + 0x88]
sub ecx, dword [ebp + 0x84]
mov esi, dword [esp + 0x14]
add dword [esp + 0x18], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc esi
add eax, edx
mov dword [esp + 0x14], esi
cmp esi, eax
jb 0xe78740
call fcn.00e76970
mov esi, dword [eax + 0x88]
call fcn.00e6e4b0
cdq
xor eax, edx
sub eax, edx
cdq
mov ecx, 0x3e8
idiv ecx
cmp esi, edx
jle 0xe78ddc
mov ecx, dword [ebp + 0xa0]
sub ecx, dword [ebp + 0x9c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x14], ebx
je 0xe78a6c
mov dword [esp + 0x18], ebx
mov edi, edi
mov ecx, dword [ebp + 0xa0]
sub ecx, dword [ebp + 0x9c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp dword [esp + 0x14], ecx
jb 0xe7892a
call fcn.00ebb554
mov eax, dword [ebp + 0x9c]
add eax, dword [esp + 0x18]
mov edi, 0x10
cmp dword [eax + 0x18], edi
jb 0xe78943
mov esi, dword [eax + 4]
jmp 0xe78946
lea esi, [eax + 4]
mov eax, esi
mov dword [esp + 0xe8], 0xf
mov dword [esp + 0xe4], ebx
mov byte [esp + 0xd4], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0xe78964
sub eax, edx
push eax
push esi
lea ecx, [esp + 0xd8]
call fcn.00e511b0
push 1
lea esi, [esp + 0xd4]
mov ecx, ebp
mov byte [esp + 0x5a0], 0x1d
call fcn.00e7ad80
cmp dword [esp + 0xe8], edi
mov edi, dword [esp + 0xd4]
jae 0xe789aa
lea edi, [esp + 0xd4]
lea edx, [esp + 0x29c]
push edx
call fcn.00e8bc10
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x5b8], 0x1e
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x110]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00e51680
lea ecx, [esp + 0x2b8]
push ecx
lea edi, [esp + 0x4c]
call fcn.00e7bc10
cmp dword [esp + 0x44], 0x10
jb 0xe78a0a
mov edx, dword [esp + 0x30]
push edx
call fcn.00eb98f8
add esp, 4
lea esi, [esp + 0x29c]
call fcn.00e7bba0
mov byte [esp + 0x59c], bl
cmp dword [esp + 0xe8], 0x10
jb 0xe78a37
mov eax, dword [esp + 0xd4]
push eax
call fcn.00eb98f8
add esp, 4
mov ecx, dword [ebp + 0xa0]
sub ecx, dword [ebp + 0x9c]
mov esi, dword [esp + 0x14]
add dword [esp + 0x18], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
inc esi
add ecx, edx
mov dword [esp + 0x14], esi
cmp esi, ecx
jb 0xe78900
call fcn.00e6e4b0
xor edx, edx
mov ecx, 0x1b58
div ecx
add edx, 0xbb8
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp + 0xb8]
sub ecx, dword [ebp + 0xb4]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x14], ebx
je 0xe78c20
mov dword [esp + 0x18], ebx
mov ecx, dword [ebp + 0xb8]
sub ecx, dword [ebp + 0xb4]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp dword [esp + 0x14], ecx
jb 0xe78ade
call fcn.00ebb554
mov eax, dword [ebp + 0xb4]
add eax, dword [esp + 0x18]
mov edi, 0x10
cmp dword [eax + 0x18], edi
jb 0xe78af7
mov esi, dword [eax + 4]
jmp 0xe78afa
lea esi, [eax + 4]
mov eax, esi
mov dword [esp + 0xe8], 0xf
mov dword [esp + 0xe4], ebx
mov byte [esp + 0xd4], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0xe78b18
sub eax, edx
push eax
push esi
lea ecx, [esp + 0xd8]
call fcn.00e511b0
push 1
lea esi, [esp + 0xd4]
mov ecx, ebp
mov byte [esp + 0x5a0], 0x1f
call fcn.00e7ad80
cmp dword [esp + 0xe8], edi
mov edi, dword [esp + 0xd4]
jae 0xe78b5e
lea edi, [esp + 0xd4]
lea edx, [esp + 0x29c]
push edx
call fcn.00e8bc10
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x5b8], 0x20
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x110]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00e51680
lea ecx, [esp + 0x2b8]
push ecx
lea edi, [esp + 0x4c]
call fcn.00e7bc10
cmp dword [esp + 0x44], 0x10
jb 0xe78bbe
mov edx, dword [esp + 0x30]
push edx
call fcn.00eb98f8
add esp, 4
lea esi, [esp + 0x29c]
call fcn.00e7bba0
mov byte [esp + 0x59c], bl
cmp dword [esp + 0xe8], 0x10
jb 0xe78beb
mov eax, dword [esp + 0xd4]
push eax
call fcn.00eb98f8
add esp, 4
mov ecx, dword [ebp + 0xb8]
sub ecx, dword [ebp + 0xb4]
mov esi, dword [esp + 0x14]
add dword [esp + 0x18], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
inc esi
add ecx, edx
mov dword [esp + 0x14], esi
cmp esi, ecx
jb 0xe78ab4
call fcn.00e6e4b0
xor edx, edx
mov ecx, 0xfa0
div ecx
add edx, 0x3e8
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp + 0xd0]
sub ecx, dword [ebp + 0xcc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x14], ebx
je 0xe78ddc
mov dword [esp + 0x18], ebx
jmp 0xe78c70
mov ecx, dword [ebp + 0xd0]
sub ecx, dword [ebp + 0xcc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp dword [esp + 0x14], ecx
jb 0xe78c9a
call fcn.00ebb554
mov eax, dword [ebp + 0xcc]
add eax, dword [esp + 0x18]
mov edi, 0x10
cmp dword [eax + 0x18], edi
jb 0xe78cb3
mov esi, dword [eax + 4]
jmp 0xe78cb6
lea esi, [eax + 4]
mov eax, esi
mov dword [esp + 0xe8], 0xf
mov dword [esp + 0xe4], ebx
mov byte [esp + 0xd4], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0xe78cd4
sub eax, edx
push eax
push esi
lea ecx, [esp + 0xd8]
call fcn.00e511b0
push 1
lea esi, [esp + 0xd4]
mov ecx, ebp
mov byte [esp + 0x5a0], 0x21
call fcn.00e7ad80
cmp dword [esp + 0xe8], edi
mov edi, dword [esp + 0xd4]
jae 0xe78d1a
lea edi, [esp + 0xd4]
lea edx, [esp + 0x29c]
push edx
call fcn.00e8bc10
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x5b8], 0x22
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x110]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00e51680
lea ecx, [esp + 0x2b8]
push ecx
lea edi, [esp + 0x4c]
call fcn.00e7bc10
cmp dword [esp + 0x44], 0x10
jb 0xe78d7a
mov edx, dword [esp + 0x30]
push edx
call fcn.00eb98f8
add esp, 4
lea esi, [esp + 0x29c]
call fcn.00e7bba0
mov byte [esp + 0x59c], bl
cmp dword [esp + 0xe8], 0x10
jb 0xe78da7
mov eax, dword [esp + 0xd4]
push eax
call fcn.00eb98f8
add esp, 4
mov ecx, dword [ebp + 0xd0]
sub ecx, dword [ebp + 0xcc]
mov esi, dword [esp + 0x14]
add dword [esp + 0x18], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
inc esi
add ecx, edx
mov dword [esp + 0x14], esi
cmp esi, ecx
jb 0xe78c70
cmp dword [esp + 0x104], 0x10
jb 0xe78df6
mov edx, dword [esp + 0xf0]
push edx
call fcn.00eb98f8
add esp, 4
mov al, byte [esp + 0x1e]
jmp 0xe78dfe
mov al, bl
mov ecx, dword [esp + 0x594]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x578]
xor ecx, esp
call fcn.00eb9637
add esp, 0x58c
ret 4