Function at 0x1000ffc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xe4
mov eax, dword [0x1003a084]
xor eax, esp
mov dword [esp + 0xe0], eax
push ebx
push esi
push edi
mov ebx, edx
mov dword [esp + 0x44], ebx
mov eax, dword [ebp + 0x48]
mov dword [esp + 0x98], eax
mov eax, dword [ebp + 0x40]
mov dword [esp + 0x94], eax
mov eax, dword [ebp + 0x38]
mov dword [esp + 0x90], eax
mov eax, dword [ebp + 0x30]
mov dword [esp + 0x8c], eax
mov eax, dword [ebp + 0x28]
mov dword [esp + 0x88], eax
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x84], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x9c], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xa0], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0xb8], eax
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0xa4], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0xa8], eax
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0xac], eax
mov eax, dword [ebp + 0x34]
mov dword [esp + 0xb0], eax
xor esi, esi
mov eax, dword [ebp + 0x3c]
mov dword [esp + 0xb4], eax
mov eax, dword [ebp + 0x44]
push 0x30
mov dword [esp + 0x3c], eax
lea eax, [esp + 0xc0]
push esi
push eax
mov dword [esp + 0x20], 0x80004005
mov dword [esp + 0x58], 0
mov dword [esp + 0x2c], esi
mov dword [esp + 0x54], esi
call sub.msvcrt.dll_memset
xor ecx, ecx
xor eax, eax
add esp, 0xc
mov dword [esp + 0x10], ecx
xor edi, edi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x40], ecx
mov edx, 0x1000
mov dword [esp + 0x68], ecx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], ecx
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x80], ecx
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x7c], eax
test ebx, ebx
je 0x10010d8c
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x10010d8c
cmp dword [esp + 0x9c], ecx
je 0x10010d8c
cmp dword [esp + 0xa0], ecx
je 0x10010d8c
cmp dword [esp + 0xa4], ecx
je 0x10010d8c
cmp dword [esp + 0x84], ecx
je 0x10010d8c
cmp dword [esp + 0xa8], ecx
je 0x10010d8c
cmp dword [esp + 0x88], ecx
je 0x10010d8c
cmp dword [esp + 0xac], ecx
je 0x10010d8c
cmp dword [esp + 0x8c], ecx
je 0x10010d8c
cmp dword [esp + 0xb0], ecx
je 0x10010d8c
cmp dword [esp + 0x90], ecx
je 0x10010d8c
cmp dword [esp + 0xb4], ecx
je 0x10010d8c
cmp dword [esp + 0x94], ecx
je 0x10010d8c
cmp dword [esp + 0x38], ecx
je 0x10010d8c
cmp dword [esp + 0x98], ecx
je 0x10010d8c
mov ebx, dword [esp + 0x24]
test ebx, ebx
je 0x10010313
lea esi, [eax + 0x20]
mov ecx, ebx
mov eax, esi
nop
test word [eax], dx
je 0x100101e6
inc edi
add eax, 0x2c
sub ecx, 1
jne 0x100101e0
test edi, edi
je 0x10010313
cmp edi, 0x3ffffff
ja 0x10010389
mov ebx, edi
shl ebx, 6
push ebx
call dword [sym.imp.MSDART.DLL_mpMalloc]
mov ecx, eax
add esp, 4
mov dword [esp + 0x10], ecx
test ecx, ecx
je 0x1001038f
push ebx
push 0
push ecx
call sub.msvcrt.dll_memset
mov ecx, dword [esp + 0x1c]
lea eax, [edi + edi*2]
shl eax, 4
mov ebx, ecx
add esp, 0xc
lea edx, [ecx + edi*8]
add eax, edx
mov dword [esp + 0x48], edx
mov dword [esp + 0x1c], eax
lea ecx, [edx + 4]
mov edx, dword [esp + 0x24]
lea eax, [eax + edi*4]
xor edi, edi
mov dword [esp + 0x40], eax
mov eax, 0x1000
lea esp, [esp]
test word [esi], ax
je 0x100102ca
mov eax, dword [esi + 8]
and al, 1
movzx eax, al
neg eax
sbb eax, eax
inc edi
not eax
and eax, ebx
add ebx, 8
mov dword [ecx - 4], eax
mov dword [ecx + 0x20], 8
mov eax, dword [esi - 0x20]
mov dword [ecx], eax
mov eax, dword [esi - 0x1c]
mov dword [ecx + 4], eax
mov eax, dword [esi - 0x18]
mov dword [ecx + 8], eax
mov eax, dword [esi - 0x14]
mov dword [ecx + 0xc], eax
mov eax, dword [esi - 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [esi - 0xc]
mov dword [ecx + 0x14], eax
mov ax, word [esi]
mov word [ecx + 0x28], ax
movzx eax, byte [esi + 2]
mov byte [ecx + 0x2a], al
movzx eax, byte [esi + 3]
mov byte [ecx + 0x2b], al
mov eax, 0x1000
mov dword [ecx + 0x24], 0
add ecx, 0x30
add esi, 0x2c
sub edx, 1
jne 0x10010260
mov ecx, dword [esp + 0x44]
push dword [esp + 0x48]
push edi
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x1003b29c]
call esi
mov ebx, eax
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x14], ebx
test ebx, ebx
jns 0x1001030f
cmp edi, dword [esp + 0x24]
je 0x10010d96
cmp ebx, 0x80040e21
jne 0x10010d96
mov ebx, dword [esp + 0x24]
mov eax, ebx
sub eax, edi
cmp eax, 0x5555555
ja 0x10010d7c
lea eax, [eax + eax*2]
shl eax, 4
push eax
call dword [sym.imp.MSDART.DLL_mpMalloc]
mov esi, eax
add esp, 4
mov dword [esp + 0x20], esi
test esi, esi
je 0x10010d82
xor edx, edx
mov dword [esp + 0x18], edx
test ebx, ebx
je 0x10010873
mov edi, dword [esp + 0x5c]
add esi, 4
mov ebx, dword [esp + 0x48]
add edi, 0x23
mov eax, dword [esp + 0x24]
add ebx, 0x20
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], eax
mov dword [esp + 0x78], 0xbfff
movzx ecx, word [edi - 3]
test ecx, 0x2000
je 0x1001039e
mov ecx, 4
jmp 0x100104d2
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0x8007000e
xor esi, esi
jmp 0x10010daa
mov eax, ecx
and eax, 0xffff0fff
add eax, 0xfffffffe
cmp eax, 0x88
ja case.0x100103b6.15
movzx eax, byte [eax + 0x10011234]
jmp dword [eax*4 + 0x10011214]
mov ecx, 2
jmp 0x100104d2
mov ecx, 8
jmp 0x100104d2
mov ecx, 0x10
jmp 0x100104d2
mov ecx, 1
jmp 0x100104d2
mov ecx, 0x13
jmp 0x100104d2
mov ecx, 6
jmp 0x100104d2
test ecx, 0x4000
je 0x100104cf
mov eax, dword [edi - 0x23]
and ecx, 0xfff
mov dword [esp + 0xc0], eax
mov eax, dword [edi - 0x1f]
mov dword [esp + 0xc4], eax
mov eax, dword [edi - 0x1b]
mov dword [esp + 0xc8], eax
mov eax, dword [edi - 0x17]
mov dword [esp + 0xcc], eax
mov eax, dword [edi - 0x13]
mov dword [esp + 0xd0], eax
mov eax, dword [edi - 0xf]
mov dword [esp + 0xd4], eax
movzx eax, byte [edi - 1]
mov byte [esp + 0xea], al
movzx eax, byte [edi]
mov byte [esp + 0xeb], al
mov eax, dword [esp + 0x44]
mov word [esp + 0xe8], cx
lea ecx, [esp + 0xbc]
push ecx
push 1
mov esi, dword [eax]
push eax
mov dword [esp + 0xf0], 0
mov esi, dword [esi + 0xc]
mov ecx, esi
call dword [0x1003b29c]
call esi
mov esi, dword [esp + 0x34]
mov dword [esp + 0x14], eax
test eax, eax
js 0x100104c7
movzx edx, word [edi - 3]
mov ecx, dword [esp + 0xd8]
and edx, 0xffff0fff
sub edx, 0x81
je 0x100104c0
sub edx, 1
mov edx, dword [esp + 0x18]
jne 0x100104d2
add ecx, 2
jmp 0x100104d2
mov edx, dword [esp + 0x18]
inc ecx
jmp 0x100104d2
mov edx, dword [esp + 0x18]
xor ecx, ecx
jmp 0x100104d2
mov ecx, dword [edi - 0xb]
movzx eax, word [edi - 3]
test eax, 0x1000
je 0x100105b5
cmp dword [ebx], 0
jne 0x100105a8
test byte [edi + 5], 1
jne 0x100105a8
and eax, 0xffff0fff
add eax, 0xfffffff8
cmp eax, 0x83
ja case.0x1001050a.10
movzx eax, byte [eax + 0x100112dc]
jmp dword [eax*4 + 0x100112c0]
mov eax, dword [esp + 0x10]
xor ecx, ecx
mov esi, dword [esp + 0x70]
add esi, dword [eax + edx*8]
mov dword [esp + 0x70], esi
jmp 0x1001057e
mov eax, dword [esp + 0x10]
xor ecx, ecx
mov esi, dword [esp + 0x60]
add esi, dword [eax + edx*8]
mov dword [esp + 0x60], esi
jmp 0x1001057e
mov eax, dword [esp + 0x10]
xor ecx, ecx
mov esi, dword [esp + 0x74]
add esi, dword [eax + edx*8]
mov dword [esp + 0x74], esi
jmp 0x1001057e
mov eax, dword [esp + 0x10]
xor ecx, ecx
mov esi, dword [esp + 0x64]
add esi, dword [eax + edx*8]
mov dword [esp + 0x64], esi
jmp 0x1001057e
mov eax, dword [esp + 0x10]
xor ecx, ecx
mov esi, dword [esp + 0x3c]
add esi, dword [eax + edx*8]
mov dword [esp + 0x3c], esi
jmp 0x1001057e
xor ecx, ecx
jmp 0x1001057e
mov eax, dword [esp + 0x10]
mov eax, dword [eax + edx*8]
imul ecx, eax
mov eax, dword [esp + 0x1c]
add ecx, 8
mov esi, dword [esp + 0x68]
mov dword [eax + edx*4], ecx
mov eax, dword [esp + 0x40]
mov dword [eax + edx*4], esi
inc edx
mov esi, dword [esp + 0x34]
add ebx, 0x30
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x68]
jmp case.0x10010643.10
inc edx
add ebx, 0x30
mov dword [esp + 0x18], edx
jmp 0x1001067a
mov eax, dword [edi + 5]
mov edx, dword [esp + 0x68]
and al, 1
movzx eax, al
neg eax
sbb eax, eax
not eax
and eax, edx
mov dword [esi - 4], eax
mov dword [esi + 0x20], ecx
mov eax, dword [edi - 0x23]
mov dword [esi], eax
mov eax, dword [edi - 0x1f]
mov dword [esi + 4], eax
mov eax, dword [edi - 0x1b]
mov dword [esi + 8], eax
mov eax, dword [edi - 0x17]
mov dword [esi + 0xc], eax
mov eax, dword [edi - 0x13]
mov dword [esi + 0x10], eax
mov eax, dword [edi - 0xf]
mov dword [esi + 0x14], eax
mov ax, word [edi - 3]
and ax, word [esp + 0x78]
mov word [esi + 0x28], ax
movzx eax, byte [edi - 1]
mov byte [esi + 0x2a], al
movzx eax, byte [edi]
mov byte [esi + 0x2b], al
add esi, 0x30
test byte [edi + 5], 1
mov dword [esp + 0x34], esi
jne 0x1001067a
movzx eax, word [edi - 3]
test eax, 0x2000
je 0x1001062d
inc dword [esp + 0x80]
jmp case.0x10010643.10
and eax, 0xffff0fff
add eax, 0xfffffff8
cmp eax, 0x82
ja case.0x10010643.10
movzx eax, byte [eax + 0x10011378]
jmp dword [eax*4 + 0x10011360]
inc dword [esp + 0x70]
jmp case.0x10010643.10
inc dword [esp + 0x74]
jmp case.0x10010643.10
inc dword [esp + 0x60]
jmp case.0x10010643.10
inc dword [esp + 0x64]
jmp case.0x10010643.10
inc dword [esp + 0x3c]
test ecx, ecx
je 0x1001067a
add ecx, edx
mov edx, 8
call fcn.10015d30
mov dword [esp + 0x68], eax
mov edx, dword [esp + 0x18]
add edi, 0x2c
sub dword [esp + 0x30], 1
jne 0x10010373
mov eax, dword [esp + 0x70]
test eax, eax
je 0x100106dd
lea edi, [eax*4]
cmp eax, 0x3fffffff
ja 0x100106ba
mov eax, dword [0x1003a494]
push edi
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0xc]
mov ecx, esi
call dword [0x1003b29c]
call esi
jmp 0x100106bc
xor eax, eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x50], eax
mov dword [ecx], eax
test eax, eax
je 0x10010d9a
push edi
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x74]
test eax, eax
je 0x1001072c
mov edi, eax
shl edi, 4
cmp eax, 0xfffffff
ja 0x10010709
mov eax, dword [0x1003a494]
push edi
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0xc]
mov ecx, esi
call dword [0x1003b29c]
call esi
jmp 0x1001070b
xor eax, eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x28], eax
mov dword [ecx], eax
test eax, eax
je 0x10010d9a
push edi
push 0
push eax
call fcn.10030782
add esp, 0xc
mov eax, dword [esp + 0x60]
test eax, eax
je 0x1001077d
lea edi, [eax*4]
cmp eax, 0x3fffffff
ja 0x1001075a
mov eax, dword [0x1003a494]
push edi
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0xc]
mov ecx, esi
call dword [0x1003b29c]
call esi
jmp 0x1001075c
xor eax, eax
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x54], eax
mov dword [ecx], eax
test eax, eax
je 0x10010d9a
push edi
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x64]
test eax, eax
je 0x100107ce
lea edi, [eax*4]
cmp eax, 0x3fffffff
ja 0x100107ab
mov eax, dword [0x1003a494]
push edi
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0xc]
mov ecx, esi
call dword [0x1003b29c]
call esi
jmp 0x100107ad
xor eax, eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x58], eax
mov dword [ecx], eax
test eax, eax
je 0x10010d9a
push edi
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x1001081d
mov edi, eax
shl edi, 4
cmp eax, 0xfffffff
ja 0x100107fa
mov eax, dword [0x1003a494]
push edi
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0xc]
mov ecx, esi
call dword [0x1003b29c]
call esi
jmp 0x100107fc
xor eax, eax
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x2c], eax
mov dword [ecx], eax
test eax, eax
je 0x10010d9a
push edi
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x80]
test eax, eax
je 0x1001086f
mov edi, eax
shl edi, 4
cmp eax, 0xfffffff
ja 0x1001084c
mov eax, dword [0x1003a494]
push edi
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0xc]
mov ecx, esi
call dword [0x1003b29c]
call esi
jmp 0x1001084e
xor eax, eax
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x7c], eax
mov dword [ecx], eax
test eax, eax
je 0x10010d9a
push edi
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov ebx, dword [esp + 0x24]
push dword [esp + 0x68]
call dword [sym.imp.MSDART.DLL_mpMalloc]
mov esi, eax
add esp, 4
mov dword [esp + 0x6c], esi
test esi, esi
je 0x10010d9a
xor edi, edi
test ebx, ebx
je 0x100108ca
mov ecx, dword [esp + 0x5c]
mov edx, ebx
mov eax, dword [esp + 0x20]
add ecx, 0x28
mov ebx, 0x1000
test word [ecx - 8], bx
jne 0x100108be
test byte [ecx], 1
jne 0x100108b3
add dword [eax], esi
mov dword [eax + 0x28], 0
inc edi
add eax, 0x30
add ecx, 0x2c
sub edx, 1
jne 0x100108a6
mov ebx, dword [esp + 0x24]
mov ecx, dword [esp + 0x44]
push dword [esp + 0x20]
push edi
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x1003b29c]
call esi
mov ecx, dword [esp + 0x4c]
test ecx, ecx
jne 0x1001090a
cmp dword [esp + 0x18], ecx
je 0x10010902
cmp eax, 0x80040e21
jne 0x10010902
mov dword [esp + 0x14], 0x40eda
jmp 0x10010948
mov esi, eax
mov dword [esp + 0x14], esi
jmp 0x10010940
cmp ecx, 0x40eda
jne 0x10010918
mov dword [esp + 0x14], ecx
jmp 0x10010948
cmp ecx, 0x80040e21
jne 0x1001093c
cmp eax, 0x40eda
je 0x100108f8
test eax, eax
jne 0x1001092f
test edi, edi
jne 0x100108f8
mov dword [esp + 0x14], 0x80040e21
jmp 0x10010da2
mov esi, dword [esp + 0x14]
test esi, esi
js 0x10010da2
test ebx, ebx
je 0x10010cca
mov eax, dword [esp + 0x10]
mov esi, eax
mov ebx, dword [esp + 0x20]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x18], ebx
add ecx, 0x28
mov ebx, dword [esp + 0x24]
lea edi, [eax + 4]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x78], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x34], ecx
lea edx, [eax + 0x2c]
add eax, 0x20
mov dword [esp + 0x30], edx
mov dword [esp + 0x44], eax
lea ebx, [ebx]
mov edx, 0x1000
test word [ecx - 8], dx
mov edx, dword [esp + 0x30]
je 0x10010b89
cmp dword [eax], 0
jne 0x100109c1
test byte [ecx], 1
jne 0x100109c1
mov ebx, 0x6000
test word [edx], bx
mov ebx, dword [esp + 0x18]
je 0x100109e4
mov dword [eax], 8
add dword [esp + 0x1c], 4
add eax, 0x30
add edx, 0x30
mov dword [esp + 0x44], eax
add esi, 8
mov dword [esp + 0x30], edx
add edi, 8
add dword [esp + 0x40], 4
jmp 0x10010cb8
mov eax, dword [esp + 0x40]
mov ebx, dword [esp + 0x6c]
mov ecx, dword [eax]
mov eax, dword [esi]
mov dword [ebx + ecx], eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
mov dword [ebx + ecx + 4], eax
movzx eax, word [edx]
mov ebx, dword [esp + 0x18]
and eax, 0xffff0fff
add eax, 0xfffffff8
cmp eax, 0x82
ja case.0x10010a24.10
movzx eax, byte [eax + 0x10011414]
jmp dword [eax*4 + 0x100113fc]
xor ecx, ecx
cmp dword [esi], ecx
jbe 0x10010a95
mov ebx, dword [esp + 0x50]
mov eax, dword [edi]
mov eax, dword [eax + ecx*4]
inc ecx
mov dword [ebx], eax
add ebx, 4
cmp ecx, dword [esi]
jb 0x10010a35
mov dword [esp + 0x50], ebx
jmp 0x10010a91
xor ebx, ebx
mov dword [esp + 0x4c], ebx
cmp dword [esi], ebx
jbe 0x10010a91
xor edx, edx
mov ecx, dword [edi]
mov ebx, dword [esp + 0x28]
add ecx, edx
add edx, 0x10
mov eax, dword [ecx]
mov dword [ebx], eax
mov eax, dword [ecx + 4]
mov dword [ebx + 4], eax
mov eax, dword [ecx + 8]
mov dword [ebx + 8], eax
mov eax, dword [ecx + 0xc]
mov ecx, ebx
mov ebx, dword [esp + 0x4c]
inc ebx
mov dword [esp + 0x4c], ebx
mov dword [ecx + 0xc], eax
add ecx, 0x10
mov dword [esp + 0x28], ecx
cmp ebx, dword [esi]
jb 0x10010a56
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x44]
add edx, 0x30
add dword [esp + 0x1c], 4
add eax, 0x30
mov ecx, dword [esp + 0x34]
add esi, 8
add edi, 8
mov dword [esp + 0x44], eax
add dword [esp + 0x40], 4
mov dword [esp + 0x30], edx
jmp 0x10010cb8
xor ecx, ecx
cmp dword [esi], ecx
jbe 0x10010a95
mov ebx, dword [esp + 0x54]
lea ebx, [ebx]
mov eax, dword [edi]
mov eax, dword [eax + ecx*4]
inc ecx
mov dword [ebx], eax
add ebx, 4
cmp ecx, dword [esi]
jb 0x10010ad0
mov dword [esp + 0x54], ebx
jmp 0x10010a91
xor ecx, ecx
cmp dword [esi], ecx
jbe 0x10010a95
mov edx, dword [esp + 0x58]
nop
mov eax, dword [edi]
mov eax, dword [eax + ecx*4]
inc ecx
mov dword [edx], eax
add edx, 4
cmp ecx, dword [esi]
jb 0x10010af0
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0x30]
jmp 0x10010a95
xor ebx, ebx
mov dword [esp + 0x4c], ebx
cmp dword [esi], ebx
jbe 0x10010a91
xor edx, edx
lea esp, [esp]
mov ecx, dword [edi]
mov ebx, dword [esp + 0x2c]
add ecx, edx
add edx, 0x10
mov eax, dword [ecx]
mov dword [ebx], eax
mov eax, dword [ecx + 4]
mov dword [ebx + 4], eax
mov eax, dword [ecx + 8]
mov dword [ebx + 8], eax
mov eax, dword [ecx + 0xc]
mov ecx, ebx
mov ebx, dword [esp + 0x4c]
inc ebx
mov dword [esp + 0x4c], ebx
mov dword [ecx + 0xc], eax
add ecx, 0x10
mov dword [esp + 0x2c], ecx
cmp ebx, dword [esi]
jb 0x10010b20
jmp 0x10010a8d
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x6c]
add ecx, 8
mov eax, dword [eax]
sub eax, 8
push eax
mov eax, dword [esp + 0x44]
push dword [edi]
mov eax, dword [eax]
add eax, ecx
push eax
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x3c]
add esp, 0xc
jmp 0x10010a95
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x10010b99
cmp eax, 4
jne case.0x10010c23.10
test byte [ecx], 1
jne case.0x10010c23.10
movzx eax, word [ebx + 0x2c]
test eax, 0x2000
je 0x10010c09
test eax, 0x4000
je 0x10010bc0
mov dword [ebx + 0x20], 8
jmp case.0x10010c23.10
mov ecx, eax
call fcn.1002b8e0
movzx eax, ax
mov ecx, 0xffff
cmp ax, cx
jne 0x10010bea
mov eax, dword [ebx]
mov dword [ebx + 0x20], 8
push dword [eax]
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
jmp 0x10010ca9
mov ecx, dword [esp + 0x7c]
or eax, 0x2000
mov word [ecx], ax
mov eax, dword [ebx]
mov eax, dword [eax]
mov dword [ecx + 8], eax
add ecx, 0x10
mov dword [esp + 0x7c], ecx
jmp 0x10010ca9
and eax, 0xffff0fff
add eax, 0xfffffff8
cmp eax, 0x82
ja case.0x10010c23.10
movzx eax, byte [eax + 0x100114b0]
jmp dword [eax*4 + 0x10011498]
mov eax, dword [ebx]
mov edx, dword [esp + 0x50]
add dword [esp + 0x50], 4
mov eax, dword [eax]
mov dword [edx], eax
jmp case.0x10010c23.10
mov ecx, dword [ebx]
mov edx, dword [esp + 0x28]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov eax, dword [ecx + 0xc]
mov ecx, edx
mov dword [ecx + 0xc], eax
add ecx, 0x10
mov dword [esp + 0x28], ecx
jmp 0x10010ca9
mov eax, dword [ebx]
mov ecx, dword [esp + 0x54]
add dword [esp + 0x54], 4
mov eax, dword [eax]
mov dword [ecx], eax
jmp 0x10010ca9
mov eax, dword [ebx]
mov edx, dword [esp + 0x58]
add dword [esp + 0x58], 4
mov eax, dword [eax]
mov dword [edx], eax
jmp case.0x10010c23.10
mov ecx, dword [ebx]
mov edx, dword [esp + 0x2c]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov eax, dword [ecx + 0xc]
mov ecx, edx
mov dword [ecx + 0xc], eax
add ecx, 0x10
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x44]
add ebx, 0x30
mov dword [esp + 0x18], ebx
add ecx, 0x2c
sub dword [esp + 0x78], 1
mov dword [esp + 0x34], ecx
jne 0x10010990
push 0x3c
call dword [sym.imp.MSDART.DLL_mpMalloc]
add esp, 4
mov dword [esp + 0x78], eax
test eax, eax
je 0x10010d9a
mov ecx, eax
call fcn.10026910
test eax, eax
je 0x10010d9a
mov ecx, dword [esp + 0x6c]
push dword [esp + 0xa0]
mov ebx, dword [esp + 0x6c]
mov dword [eax + 0x24], ecx
mov ecx, dword [eax]
push 0x10004a60
push eax
mov dword [eax + 0xc], 5
mov esi, dword [ecx]
mov ecx, esi
mov dword [eax + 0x18], ebx
call dword [0x1003b29c]
call esi
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xa4]
mov dword [eax], ebx
mov eax, dword [esp + 0x70]
mov dword [ecx], eax
mov ecx, dword [esp + 0xa8]
mov eax, dword [esp + 0x74]
mov dword [ecx], eax
mov ecx, dword [esp + 0xac]
mov eax, dword [esp + 0x60]
mov dword [ecx], eax
mov ecx, dword [esp + 0xb0]
mov eax, dword [esp + 0x64]
mov dword [ecx], eax
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0x3c]
mov dword [ecx], eax
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x80]
mov dword [ecx], eax
jmp 0x100110dd
xor esi, esi
mov dword [esp + 0x20], esi
mov dword [esp + 0x14], 0x8007000e
jmp 0x10010da6
mov dword [esp + 0x14], 0x80004005
jmp 0x10010daa
xor esi, esi
jmp 0x10010da6
mov dword [esp + 0x14], 0x8007000e
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
cmp dword [esp + 0x24], 0
jbe 0x10010fd5
mov edx, dword [esp + 0x5c]
lea ebx, [ecx + 4]
mov eax, dword [esp + 0x24]
mov edi, esi
mov esi, ecx
mov dword [esp + 0x2c], edi
mov ecx, dword [esp + 0x48]
add ecx, 0x20
mov dword [esp + 0x28], eax
add edx, 0x20
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x1c], edx
mov edi, edi
test byte [edx + 8], 1
jne 0x10010fc1
movzx eax, word [edx]
test eax, 0x1000
je 0x10010f20
cmp dword [esp + 0x10], 0
je 0x10010fbd
mov ecx, dword [ecx]
test ecx, ecx
je 0x10010e24
cmp ecx, 4
je 0x10010e24
mov ecx, dword [esp + 0x3c]
add esi, 8
add ecx, 0x30
add ebx, 8
mov dword [esp + 0x3c], ecx
jmp 0x10010fbd
cmp dword [ebx], 0
je case.0x10010e47.10
and eax, 0xffff0fff
add eax, 0xfffffff8
cmp eax, 0x82
ja case.0x10010e47.10
movzx eax, byte [eax + 0x10011548]
jmp dword [eax*4 + 0x10011534]
xor edi, edi
cmp dword [esi], edi
jbe 0x10010f06
jmp 0x10010e60
mov eax, dword [ebx]
push dword [eax + edi*4]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
inc edi
cmp edi, dword [esi]
jb 0x10010e60
jmp 0x10010f02
cmp dword [esi], 0
mov dword [esp + 0x38], 0
jbe case.0x10010e47.10
xor edi, edi
mov eax, dword [ebx]
add eax, edi
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x38]
add edi, 0x10
inc eax
mov dword [esp + 0x38], eax
cmp eax, dword [esi]
jb 0x10010e88
jmp 0x10010f02
xor ecx, ecx
mov dword [esp + 0x38], ecx
cmp dword [esi], ecx
jbe case.0x10010e47.10
nop
mov eax, dword [ebx]
mov edx, dword [eax + ecx*4]
test edx, edx
je 0x10010ecd
mov eax, dword [edx]
push edx
mov edi, dword [eax + 8]
mov ecx, edi
call dword [0x1003b29c]
call edi
mov ecx, dword [esp + 0x38]
inc ecx
mov dword [esp + 0x38], ecx
cmp ecx, dword [esi]
jb 0x10010eb0
jmp 0x10010f02
cmp dword [esi], 0
mov dword [esp + 0x38], 0
jbe case.0x10010e47.10
xor edi, edi
mov eax, dword [ebx]
add eax, edi
push eax
call dword [sym.imp.ole32.dll_PropVariantClear]
mov eax, dword [esp + 0x38]
add edi, 0x10
inc eax
mov dword [esp + 0x38], eax
cmp eax, dword [esi]
jb 0x10010ee7
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x3c]
add esi, 8
add ecx, 0x30
add ebx, 8
mov dword [esp + 0x3c], ecx
jmp 0x10010fbd
cmp dword [esp + 0x6c], 0
je 0x10010fbd
cmp dword [esp + 0x20], 0
je 0x10010fbd
mov ecx, dword [edi + 0x20]
test ecx, ecx
je 0x10010f42
cmp ecx, 4
jne case.0x10010f6b.10
test eax, 0x2000
je 0x10010f55
mov eax, dword [edi]
push dword [eax]
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
jmp 0x10010fae
and eax, 0xffff0fff
add eax, 0xfffffff8
cmp eax, 0x82
ja case.0x10010f6b.10
movzx eax, byte [eax + 0x100115e0]
jmp dword [eax*4 + 0x100115cc]
mov eax, dword [edi]
push dword [eax]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x10010fae
push dword [edi]
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10010fae
mov eax, dword [edi]
mov ecx, dword [eax]
test ecx, ecx
je case.0x10010f6b.10
mov eax, dword [ecx]
push ecx
mov edi, dword [eax + 8]
mov ecx, edi
call dword [0x1003b29c]
call edi
mov edi, dword [esp + 0x2c]
jmp 0x10010fae
push dword [edi]
call dword [sym.imp.ole32.dll_PropVariantClear]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x3c]
add edi, 0x30
mov dword [esp + 0x2c], edi
mov eax, dword [esp + 0x28]
add edx, 0x2c
sub eax, 1
mov dword [esp + 0x1c], edx
mov dword [esp + 0x28], eax
jne 0x10010de0
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x10010fe7
push eax
call dword [sym.imp.MSDART.DLL_mpFree]
add esp, 4
mov ebx, dword [esp + 0x84]
mov edx, dword [ebx]
test edx, edx
je 0x10011010
mov eax, dword [0x1003a494]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x14]
mov ecx, esi
call dword [0x1003b29c]
call esi
mov dword [ebx], 0
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
test edx, edx
je 0x10011039
mov eax, dword [0x1003a494]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x14]
mov ecx, esi
call dword [0x1003b29c]
call esi
mov dword [ebx], 0
mov ebx, dword [esp + 0x8c]
mov edx, dword [ebx]
test edx, edx
je 0x10011062
mov eax, dword [0x1003a494]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x14]
mov ecx, esi
call dword [0x1003b29c]
call esi
mov dword [ebx], 0
mov ebx, dword [esp + 0x90]
mov edx, dword [ebx]
test edx, edx
je 0x1001108b
mov eax, dword [0x1003a494]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x14]
mov ecx, esi
call dword [0x1003b29c]
call esi
mov dword [ebx], 0
mov ebx, dword [esp + 0x94]
mov edx, dword [ebx]
test edx, edx
je 0x100110b4
mov eax, dword [0x1003a494]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x14]
mov ecx, esi
call dword [0x1003b29c]
call esi
mov dword [ebx], 0
mov ebx, dword [esp + 0x98]
mov edx, dword [ebx]
test edx, edx
je 0x100110dd
mov eax, dword [0x1003a494]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x14]
mov ecx, esi
call dword [0x1003b29c]
call esi
mov dword [ebx], 0
mov eax, dword [esp + 0x24]
xor ecx, ecx
test eax, eax
je 0x1001115f
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x5c]
add esi, 0x20
add edi, 0x20
lea edx, [ebx + 0x20]
lea esp, [esp]
mov eax, 0x1000
test word [edi], ax
mov eax, dword [esp + 0x24]
je 0x10011135
cmp dword [esp + 0x48], 0
je 0x10011130
mov ebx, dword [esp + 0x9c]
mov eax, dword [esi - 4]
mov dword [ebx + ecx*8], eax
mov eax, dword [esi]
mov dword [ebx + ecx*8 + 4], eax
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
add esi, 0x30
jmp 0x10011157
test ebx, ebx
je 0x10011154
mov ebx, dword [esp + 0x9c]
mov eax, dword [edx - 4]
mov dword [ebx + ecx*8], eax
mov eax, dword [edx]
mov dword [ebx + ecx*8 + 4], eax
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
add edx, 0x30
inc ecx
add edi, 0x2c
cmp ecx, eax
jb 0x10011100
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x10011175
push ecx
call dword [sym.imp.MSDART.DLL_mpFree]
mov eax, dword [esp + 0x28]
add esp, 4
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x100111f8
test eax, eax
je 0x100111ee
mov edi, dword [esp + 0x48]
lea edx, [ecx + 4]
mov ebx, dword [esp + 0x5c]
add edi, 0x20
mov dword [esp + 0x38], edx
add ebx, 0x20
mov ecx, 0x1000
jmp 0x100111a0
test word [ebx], cx
je 0x100111de
mov eax, dword [edi]
test eax, eax
je 0x100111b0
cmp eax, 4
jne 0x100111d0
mov eax, dword [0x1003a494]
push dword [edx]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x14]
mov ecx, esi
call dword [0x1003b29c]
call esi
mov edx, dword [esp + 0x38]
mov ecx, 0x1000
mov eax, dword [esp + 0x24]
add edi, 0x30
add edx, 8
mov dword [esp + 0x38], edx
add ebx, 0x2c
sub eax, 1
mov dword [esp + 0x24], eax
jne 0x100111a0
mov ecx, dword [esp + 0x10]
push ecx
call dword [sym.imp.MSDART.DLL_mpFree]
add esp, 4
mov ecx, dword [esp + 0xec]
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10037970
mov esp, ebp
pop ebp
ret 0x44