Function at 0x10b7a10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1181961
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x9b8
push esi
push edi
mov dword [ebp - 0x984], ecx
mov byte [ebp - 0x6e0], 0x16
mov byte [ebp - 0x6df], 0xe3
mov byte [ebp - 0x6de], 0xc9
mov byte [ebp - 0x6dd], 0xe3
mov byte [ebp - 0x6dc], 0x5c
mov byte [ebp - 0x6db], 0xb
mov byte [ebp - 0x6da], 0xb8
mov byte [ebp - 0x6d9], 0x4d
mov byte [ebp - 0x6d8], 0x81
mov byte [ebp - 0x6d7], 0x7d
mov byte [ebp - 0x6d6], 0xf9
mov byte [ebp - 0x6d5], 0x2d
mov byte [ebp - 0x6d4], 0xf0
mov byte [ebp - 0x6d3], 2
mov byte [ebp - 0x6d2], 0x15
mov byte [ebp - 0x6d1], 0xae
mov byte [ebp - 0x30], 0xaa
mov byte [ebp - 0x2f], 0xc8
mov byte [ebp - 0x2e], 8
mov byte [ebp - 0x2d], 0x58
mov byte [ebp - 0x2c], 0x8f
mov byte [ebp - 0x2b], 0x7e
mov byte [ebp - 0x2a], 0xe0
mov byte [ebp - 0x29], 0x42
mov byte [ebp - 0x28], 0x85
mov byte [ebp - 0x27], 0xd2
mov byte [ebp - 0x26], 0xe1
mov byte [ebp - 0x25], 0xe9
mov byte [ebp - 0x24], 4
mov byte [ebp - 0x23], 0x34
mov byte [ebp - 0x22], 0xcf
mov byte [ebp - 0x21], 0xb3
mov byte [ebp - 0x27c], 0xa0
mov byte [ebp - 0x27b], 0x60
mov byte [ebp - 0x27a], 0x9b
mov byte [ebp - 0x279], 0xaf
mov byte [ebp - 0x278], 0x31
mov byte [ebp - 0x277], 0x14
mov byte [ebp - 0x276], 0x62
mov byte [ebp - 0x275], 0x4f
mov byte [ebp - 0x274], 0xbc
mov byte [ebp - 0x273], 0x68
mov byte [ebp - 0x272], 0x33
mov byte [ebp - 0x271], 0x11
mov byte [ebp - 0x270], 0x71
mov byte [ebp - 0x26f], 0x4a
mov byte [ebp - 0x26e], 0x69
mov byte [ebp - 0x26d], 0xad
mov byte [ebp - 0x48c], 0xa2
mov byte [ebp - 0x48b], 0xa0
mov byte [ebp - 0x48a], 0xd0
mov byte [ebp - 0x489], 0xeb
mov byte [ebp - 0x488], 0xe5
mov byte [ebp - 0x487], 0xb9
mov byte [ebp - 0x486], 0x33
mov byte [ebp - 0x485], 0x44
mov byte [ebp - 0x484], 0x87
mov byte [ebp - 0x483], 0xc0
mov byte [ebp - 0x482], 0x68
mov byte [ebp - 0x481], 0xb6
mov byte [ebp - 0x480], 0xb7
mov byte [ebp - 0x47f], 0x26
mov byte [ebp - 0x47e], 0x99
mov byte [ebp - 0x47d], 0xc7
mov byte [ebp - 0x20], 0x28
mov byte [ebp - 0x1f], 0x73
mov byte [ebp - 0x1e], 0x2a
mov byte [ebp - 0x1d], 0xc1
mov byte [ebp - 0x1c], 0x1f
mov byte [ebp - 0x1b], 0xf8
mov byte [ebp - 0x1a], 0xd2
mov byte [ebp - 0x19], 0x11
mov byte [ebp - 0x18], 0xba
mov byte [ebp - 0x17], 0x4b
mov byte [ebp - 0x16], 0
mov byte [ebp - 0x15], 0xa0
mov byte [ebp - 0x14], 0xc9
mov byte [ebp - 0x13], 0x3e
mov byte [ebp - 0x12], 0xc9
mov byte [ebp - 0x11], 0x3b
mov byte [ebp - 0x58], 2
mov byte [ebp - 0x57], 0x4d
mov byte [ebp - 0x56], 0xee
mov byte [ebp - 0x55], 0x41
mov byte [ebp - 0x54], 0x33
mov byte [ebp - 0x53], 0xe7
mov byte [ebp - 0x52], 0x11
mov byte [ebp - 0x51], 0xd3
mov byte [ebp - 0x50], 0x9d
mov byte [ebp - 0x4f], 0x69
mov byte [ebp - 0x4e], 0
mov byte [ebp - 0x4d], 8
mov byte [ebp - 0x4c], 0xc7
mov byte [ebp - 0x4b], 0x81
mov byte [ebp - 0x4a], 0xf3
mov byte [ebp - 0x49], 0x9f
mov byte [ebp - 0x6c0], 0
xor eax, eax
mov dword [ebp - 0x6bf], eax
mov dword [ebp - 0x6bb], eax
mov dword [ebp - 0x6b7], eax
mov word [ebp - 0x6b3], ax
mov byte [ebp - 0x6b1], al
mov dword [ebp - 0x48], 0xde94bba4
mov word [ebp - 0x44], 0x6d1
mov word [ebp - 0x42], 0x4d40
mov byte [ebp - 0x40], 0xa1
mov byte [ebp - 0x3f], 0x6a
mov byte [ebp - 0x3e], 0xbf
mov byte [ebp - 0x3d], 0xd5
mov byte [ebp - 0x3c], 1
mov byte [ebp - 0x3b], 0x79
mov byte [ebp - 0x3a], 0xd6
mov byte [ebp - 0x39], 0xac
mov dword [ebp - 0x708], 0x100
mov dword [ebp - 0x6b0], 0xefff
xor ecx, ecx
mov byte [ebp - 0x949], cl
lea edx, [ebp - 0x949]
push edx
lea ecx, [ebp - 0x6d0]
call fcn.01099550
mov dword [ebp - 4], 0
xor eax, eax
mov byte [ebp - 0x94a], al
lea ecx, [ebp - 0x94a]
push ecx
lea ecx, [ebp - 0x6f0]
call fcn.01099550
mov byte [ebp - 4], 1
xor edx, edx
mov byte [ebp - 0x94b], dl
lea eax, [ebp - 0x94b]
push eax
lea ecx, [ebp - 0x6ac]
call fcn.01099550
mov byte [ebp - 4], 2
mov dword [ebp - 0x70c], 0
jmp 0x10b7d2f
mov ecx, dword [ebp - 0x70c]
add ecx, 1
mov dword [ebp - 0x70c], ecx
mov ecx, dword [ebp - 0x984]
add ecx, 8
call fcn.010c2980
cmp dword [ebp - 0x70c], eax
jae 0x10b7e11
mov edx, dword [ebp - 0x70c]
push edx
mov ecx, dword [ebp - 0x984]
add ecx, 8
call fcn.010fdf70
mov eax, dword [eax]
mov dword [ebp - 0x710], eax
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x710]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xb
je 0x10b7e0c
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x710]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xc
je 0x10b7e0c
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x710]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x710]
mov eax, dword [edx + 0x58]
call eax
mov dword [eax + 8], esi
mov dword [eax + 0xc], edi
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x710]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x710]
mov eax, dword [edx + 0x58]
call eax
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], edi
lea ecx, [ebp - 0x710]
push ecx
lea ecx, [ebp - 0x6ac]
call fcn.010c29c0
jmp 0x10b7d20
call fcn.010907c0
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x984]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x984]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x988], eax
mov eax, dword [ebp - 0x988]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x988]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x38]
mov eax, dword [edx]
call eax
test eax, eax
jne 0x10b7e9b
mov dword [ebp - 0x950], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6ac]
call fcn.010ac7d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6f0]
call fcn.010baad0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6d0]
call fcn.010baad0
mov eax, dword [ebp - 0x950]
jmp 0x10b8e6b
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x268], 0
push 0x1f8
push 0
lea ecx, [ebp - 0x264]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x38]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38]
mov edx, dword [eax + 4]
call edx
mov ecx, 0x80
mov esi, eax
lea edi, [ebp - 0x26c]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x254]
or eax, dword [ebp - 0x250]
jne 0x10b7fc7
mov ecx, dword [ebp - 0x24c]
or ecx, dword [ebp - 0x248]
jne 0x10b7fc7
mov edx, dword [0x1008a58]
mov dword [ebp - 0x26c], edx
mov eax, dword [0x1008a5c]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x254], 1
mov dword [ebp - 0x250], 0
mov ecx, dword [ebp - 0x984]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x984]
mov ecx, dword [eax + 4]
mov edx, dword [edx]
mov eax, dword [edx + 0x1c]
call eax
sub eax, 1
sbb edx, 0
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x248], edx
mov dword [ebp - 0x264], 0x10000
mov dword [ebp - 0x224], 2
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x260], 0x5c
mov dword [ebp - 0x244], 0x22
mov dword [ebp - 0x240], 0
mov ecx, dword [ebp - 0x984]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x984]
mov ecx, dword [eax + 4]
mov edx, dword [edx]
mov eax, dword [edx + 0x1c]
call eax
sub eax, 4
sbb edx, 0
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], edx
jmp 0x10b812f
mov dword [ebp - 0x714], 0
jmp 0x10b7fe2
mov ecx, dword [ebp - 0x714]
add ecx, 1
mov dword [ebp - 0x714], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38]
mov edx, dword [eax + 0xc]
call edx
cmp dword [ebp - 0x714], eax
jae 0x10b812f
mov byte [ebp - 0x794], 0
xor eax, eax
mov dword [ebp - 0x793], eax
mov dword [ebp - 0x78f], eax
mov dword [ebp - 0x78b], eax
mov word [ebp - 0x787], ax
mov byte [ebp - 0x785], al
push 0x70
push 0
lea ecx, [ebp - 0x784]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x714]
push edx
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x38]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x798], eax
mov ecx, dword [ebp - 0x798]
add ecx, 0x68
mov edx, dword [ecx]
mov dword [ebp - 0x794], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x790], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x78c], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x788], eax
mov ecx, dword [ebp - 0x798]
add ecx, 0x78
mov edx, dword [ecx]
mov dword [ebp - 0x784], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x780], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x77c], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x778], eax
mov ecx, dword [ebp - 0x798]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x774], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x798]
mov edx, dword [ebp - 0x798]
mov eax, dword [ecx + 0x10]
add eax, dword [edx + 8]
mov ecx, dword [ecx + 0x14]
adc ecx, dword [edx + 0xc]
sub eax, 1
sbb ecx, 0
mov dword [ebp - 0x76c], eax
mov dword [ebp - 0x768], ecx
mov edx, dword [ebp - 0x798]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x764], eax
mov ecx, dword [edx + 0x1c]
mov dword [ebp - 0x760], ecx
mov esi, dword [ebp - 0x798]
add esi, 0x20
mov ecx, 0x12
lea edi, [ebp - 0x75c]
rep movsd dword es:[edi], dword [esi]
lea edx, [ebp - 0x794]
push edx
lea ecx, [ebp - 0x6d0]
call fcn.010babb0
jmp 0x10b7fd3
call fcn.0108d4a0
push eax
call fcn.01115ff3
add esp, 4
mov dword [ebp - 0x79c], 0
jmp 0x10b8158
mov eax, dword [ebp - 0x79c]
add eax, 1
mov dword [ebp - 0x79c], eax
lea ecx, [ebp - 0x6ac]
call fcn.010c2980
cmp dword [ebp - 0x79c], eax
jae 0x10b86f5
mov dword [ebp - 0x824], 0
mov ecx, dword [ebp - 0x79c]
push ecx
lea ecx, [ebp - 0x6ac]
call fcn.010fdf70
mov edx, dword [eax]
mov dword [ebp - 0x820], edx
mov byte [ebp - 0x81c], 0
xor eax, eax
mov dword [ebp - 0x81b], eax
mov dword [ebp - 0x817], eax
mov dword [ebp - 0x813], eax
mov word [ebp - 0x80f], ax
mov byte [ebp - 0x80d], al
push 0x70
push 0
lea ecx, [ebp - 0x80c]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x6d0]
call fcn.01087050
mov dword [ebp - 0x828], eax
jmp 0x10b81f3
mov edx, dword [ebp - 0x828]
add edx, 0x80
mov dword [ebp - 0x828], edx
lea ecx, [ebp - 0x6d0]
call fcn.0113fd60
cmp dword [ebp - 0x828], eax
je 0x10b837d
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x82c], eax
mov ecx, dword [ebp - 0x820]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x820]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [ebp - 0x82c]
mov dword [ebp - 0x98c], ecx
mov dword [ebp - 0x990], eax
mov edx, dword [ebp - 0x98c]
mov eax, dword [ebp - 0x990]
mov ecx, dword [edx + 0x20]
cmp ecx, dword [eax + 8]
jne 0x10b8378
mov edx, dword [ebp - 0x98c]
mov eax, dword [ebp - 0x990]
mov ecx, dword [edx + 0x24]
cmp ecx, dword [eax + 0xc]
jne 0x10b8378
mov edx, dword [ebp - 0x820]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x820]
mov edx, dword [eax + 0x58]
call edx
mov esi, eax
mov eax, dword [ebp - 0x820]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x820]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [esi + 0x10]
add ecx, dword [eax + 8]
mov edx, dword [esi + 0x14]
adc edx, dword [eax + 0xc]
sub ecx, 1
sbb edx, 0
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x994], eax
mov dword [ebp - 0x99c], ecx
mov dword [ebp - 0x998], edx
mov ecx, dword [ebp - 0x994]
mov edx, dword [ecx + 0x28]
cmp edx, dword [ebp - 0x99c]
jne 0x10b8378
mov eax, dword [ebp - 0x994]
mov ecx, dword [eax + 0x2c]
cmp ecx, dword [ebp - 0x998]
jne 0x10b8378
mov esi, dword [ebp - 0x82c]
mov ecx, 0x20
lea edi, [ebp - 0x81c]
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp - 0x820]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x820]
mov edx, dword [eax + 0x58]
call edx
add eax, 0x78
mov ecx, dword [eax]
mov dword [ebp - 0x80c], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x808], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x804], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x800], edx
mov eax, dword [ebp - 0x820]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x820]
mov eax, dword [edx + 0x58]
call eax
add eax, 0x68
mov ecx, dword [eax]
mov dword [ebp - 0x81c], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x818], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x814], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x810], edx
mov dword [ebp - 0x824], 1
jmp 0x10b837d
jmp 0x10b81e1
cmp dword [ebp - 0x824], 0
jne 0x10b86de
mov eax, dword [ebp - 0x820]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x820]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xb
je 0x10b86de
mov ecx, dword [ebp - 0x820]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x820]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xc
je 0x10b86de
mov byte [ebp - 0x8bc], 0
xor ecx, ecx
mov dword [ebp - 0x8bb], ecx
mov dword [ebp - 0x8b7], ecx
mov dword [ebp - 0x8b3], ecx
mov word [ebp - 0x8af], cx
mov byte [ebp - 0x8ad], cl
push 0x70
push 0
lea edx, [ebp - 0x8ac]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x820]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x820]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [eax + 8]
mov dword [ebp - 0x89c], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x898], edx
mov eax, dword [ebp - 0x820]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x820]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [eax + 0x10]
add ecx, dword [ebp - 0x89c]
mov edx, dword [eax + 0x14]
adc edx, dword [ebp - 0x898]
sub ecx, 1
sbb edx, 0
mov dword [ebp - 0x894], ecx
mov dword [ebp - 0x890], edx
mov eax, dword [ebp - 0x820]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x820]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x88c], ecx
mov edx, dword [eax + 0x1c]
mov dword [ebp - 0x888], edx
mov eax, dword [ebp - 0x820]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x820]
mov eax, dword [edx + 0x58]
call eax
add eax, 0x20
mov ecx, 0x12
mov esi, eax
lea edi, [ebp - 0x884]
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
mov dword [ebp - 0x83c], ecx
mov dword [ebp - 0x838], ecx
mov dword [ebp - 0x834], ecx
mov dword [ebp - 0x830], ecx
mov dword [ebp - 0x8c0], 0
jmp 0x10b84d8
mov edx, dword [ebp - 0x8c0]
add edx, 1
mov dword [ebp - 0x8c0], edx
cmp dword [ebp - 0x8c0], 8
jae 0x10b8521
call fcn.01116007
mov dword [ebp - 0x9a0], eax
fild dword [ebp - 0x9a0]
fdiv qword [0x1008a50]
fmul qword [0x1008a48]
fadd qword [0x1008a40]
fistp qword [ebp - 0x9a8]
mov ax, word [ebp - 0x9a8]
mov ecx, dword [ebp - 0x8c0]
mov word [ebp + ecx*2 - 0x83c], ax
jmp 0x10b84c9
mov edx, dword [ebp - 0x83c]
mov dword [ebp - 0x8ac], edx
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0x8a8], eax
mov ecx, dword [ebp - 0x834]
mov dword [ebp - 0x8a4], ecx
mov edx, dword [ebp - 0x830]
mov dword [ebp - 0x8a0], edx
mov eax, dword [ebp - 0x820]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x820]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [eax]
mov dword [ebp - 0x9ac], ecx
cmp dword [ebp - 0x9ac], 6
ja case.default.0x10b857f
mov edx, dword [ebp - 0x9ac]
jmp dword [edx*4 + 0x10b8e80]
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x8bc], eax
mov ecx, dword [ebp - 0x488]
mov dword [ebp - 0x8b8], ecx
mov edx, dword [ebp - 0x484]
mov dword [ebp - 0x8b4], edx
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x8b0], eax
jmp case.default.0x10b857f
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x8bc], ecx
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x8b8], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x8b4], eax
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8b0], ecx
jmp case.default.0x10b857f
mov edx, dword [ebp - 0x6e0]
mov dword [ebp - 0x8bc], edx
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x8b8], eax
mov ecx, dword [ebp - 0x6d8]
mov dword [ebp - 0x8b4], ecx
mov edx, dword [ebp - 0x6d4]
mov dword [ebp - 0x8b0], edx
jmp case.default.0x10b857f
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x8bc], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x8b8], ecx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x8b4], edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x8b0], eax
jmp case.default.0x10b857f
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x8bc], ecx
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x8b8], edx
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x8b4], eax
mov ecx, dword [ebp - 0x270]
mov dword [ebp - 0x8b0], ecx
jmp case.default.0x10b857f
mov edx, dword [ebp - 0x48c]
mov dword [ebp - 0x8bc], edx
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x8b8], eax
mov ecx, dword [ebp - 0x484]
mov dword [ebp - 0x8b4], ecx
mov edx, dword [ebp - 0x480]
mov dword [ebp - 0x8b0], edx
jmp case.default.0x10b857f
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x8bc], eax
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x8b8], ecx
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x8b4], edx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x8b0], eax
lea ecx, [ebp - 0x8bc]
push ecx
lea ecx, [ebp - 0x6f0]
call fcn.010babb0
jmp 0x10b86f0
lea edx, [ebp - 0x81c]
push edx
lea ecx, [ebp - 0x6f0]
call fcn.010babb0
jmp 0x10b8149
mov dword [ebp - 0x704], 0x4000
mov eax, dword [ebp - 0x704]
push eax
call fcn.0108b3e0
add esp, 4
mov dword [ebp - 0x954], eax
mov ecx, dword [ebp - 0x954]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x704]
push edx
push 0
mov eax, dword [ebp - 0x34]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x8c4], 0
jmp 0x10b874d
mov ecx, dword [ebp - 0x8c4]
add ecx, 1
mov dword [ebp - 0x8c4], ecx
lea ecx, [ebp - 0x6f0]
call fcn.010bab40
cmp dword [ebp - 0x8c4], eax
jae 0x10b879c
mov edx, dword [ebp - 0x8c4]
push edx
lea ecx, [ebp - 0x6f0]
call fcn.010bab80
mov ecx, 0x20
mov esi, eax
lea edi, [ebp - 0x944]
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x8c4]
shl edi, 7
add edi, dword [ebp - 0x34]
mov ecx, 0x20
lea esi, [ebp - 0x944]
rep movsd dword es:[edi], dword [esi]
jmp 0x10b873e
push 0xffffffffffffffff
mov eax, dword [ebp - 0x704]
push eax
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x984]
call fcn.010b79a0
xor eax, 0xffffffff
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x704]
cdq
and edx, 0x1ff
add eax, edx
sar eax, 9
cdq
push edx
push eax
mov edx, dword [ebp - 0x220]
push edx
mov eax, dword [ebp - 0x224]
push eax
mov ecx, dword [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0x984]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x984]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x10b8899
call fcn.010906a0
mov dword [ebp - 0x9b0], eax
push 0xc51
push 0x1008784
call fcn.010b34a0
push eax
push 0x1008a0c
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x958], edx
mov eax, dword [ebp - 0x958]
push eax
call fcn.0108b400
add esp, 4
mov dword [ebp - 0x95c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6ac]
call fcn.010ac7d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6f0]
call fcn.010baad0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6d0]
call fcn.010baad0
mov eax, dword [ebp - 0x95c]
jmp 0x10b8e6b
xor ecx, ecx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x948], 0
jmp 0x10b88c2
mov edx, dword [ebp - 0x948]
add edx, 1
mov dword [ebp - 0x948], edx
cmp dword [ebp - 0x948], 8
jae 0x10b8908
call fcn.01116007
mov dword [ebp - 0x9b4], eax
fild dword [ebp - 0x9b4]
fdiv qword [0x1008a50]
fmul qword [0x1008a48]
fadd qword [0x1008a40]
fistp qword [ebp - 0x9bc]
mov ax, word [ebp - 0x9bc]
mov ecx, dword [ebp - 0x948]
mov word [ebp + ecx*2 - 0x68], ax
jmp 0x10b88b3
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x234], edx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x230], eax
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x22c], ecx
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x228], edx
mov dword [ebp - 0x21c], 0x80
mov dword [ebp - 0x218], 0x80
mov dword [ebp - 0x25c], 0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x260]
push eax
lea ecx, [ebp - 0x26c]
push ecx
mov ecx, dword [ebp - 0x984]
call fcn.010b79a0
xor eax, 0xffffffff
mov dword [ebp - 0x25c], eax
push 0
push 1
mov edx, dword [ebp - 0x250]
push edx
mov eax, dword [ebp - 0x254]
push eax
lea ecx, [ebp - 0x26c]
push ecx
mov edx, dword [ebp - 0x984]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x984]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x10b8a3c
call fcn.010906a0
mov dword [ebp - 0x9c0], eax
push 0xc69
push 0x1008784
call fcn.010b34a0
push eax
push 0x1008a0c
mov ecx, dword [ebp - 0x9c0]
push ecx
mov edx, dword [ebp - 0x9c0]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x960], edx
mov eax, dword [ebp - 0x960]
push eax
call fcn.0108b400
add esp, 4
mov dword [ebp - 0x964], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6ac]
call fcn.010ac7d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6f0]
call fcn.010baad0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6d0]
call fcn.010baad0
mov eax, dword [ebp - 0x964]
jmp 0x10b8e6b
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0x698], 0
push 0x1f8
push 0
lea ecx, [ebp - 0x694]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, 0x80
lea esi, [ebp - 0x26c]
lea edi, [ebp - 0x69c]
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp - 0x24c]
mov dword [ebp - 0x684], edx
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x680], eax
mov ecx, dword [ebp - 0x254]
mov dword [ebp - 0x67c], ecx
mov edx, dword [ebp - 0x250]
mov dword [ebp - 0x678], edx
mov eax, dword [ebp - 0x24c]
sub eax, 0x20
mov ecx, dword [ebp - 0x248]
sbb ecx, 0
mov dword [ebp - 0x654], eax
mov dword [ebp - 0x650], ecx
mov dword [ebp - 0x68c], 0
push 0xffffffffffffffff
mov edx, dword [ebp - 0x690]
push edx
lea eax, [ebp - 0x69c]
push eax
mov ecx, dword [ebp - 0x984]
call fcn.010b79a0
xor eax, 0xffffffff
mov dword [ebp - 0x68c], eax
push 0
push 1
mov ecx, dword [ebp - 0x248]
push ecx
mov edx, dword [ebp - 0x24c]
push edx
lea eax, [ebp - 0x69c]
push eax
mov ecx, dword [ebp - 0x984]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x984]
mov ecx, dword [eax + 4]
mov edx, dword [edx]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x10b8bc3
call fcn.010906a0
mov dword [ebp - 0x9c4], eax
push 0xc78
push 0x1008784
call fcn.010b34a0
push eax
push 0x1008a0c
mov ecx, dword [ebp - 0x9c4]
push ecx
mov edx, dword [ebp - 0x9c4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x968], edx
mov eax, dword [ebp - 0x968]
push eax
call fcn.0108b400
add esp, 4
mov dword [ebp - 0x96c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6ac]
call fcn.010ac7d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6f0]
call fcn.010baad0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6d0]
call fcn.010baad0
mov eax, dword [ebp - 0x96c]
jmp 0x10b8e6b
mov eax, dword [ebp - 0x704]
cdq
and edx, 0x1ff
add eax, edx
sar eax, 9
cdq
push edx
push eax
mov ecx, dword [ebp - 0x650]
push ecx
mov edx, dword [ebp - 0x654]
push edx
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x984]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x984]
mov ecx, dword [eax + 4]
mov edx, dword [edx]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x10b8c64
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x970], ecx
mov edx, dword [ebp - 0x970]
push edx
call fcn.0108b400
add esp, 4
mov dword [ebp - 0x974], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6ac]
call fcn.010ac7d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6f0]
call fcn.010baad0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6d0]
call fcn.010baad0
mov eax, dword [ebp - 0x974]
jmp 0x10b8e6b
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x978], eax
mov ecx, dword [ebp - 0x978]
push ecx
call fcn.0108b400
add esp, 4
mov byte [ebp - 0x700], 0
mov byte [ebp - 0x6ff], 0
mov byte [ebp - 0x6fe], 2
mov byte [ebp - 0x6fd], 0
mov byte [ebp - 0x6fc], 0xee
mov byte [ebp - 0x6fb], 0xff
mov byte [ebp - 0x6fa], 0xff
mov byte [ebp - 0x6f9], 0xff
mov byte [ebp - 0x6f8], 1
mov byte [ebp - 0x6f7], 0
mov byte [ebp - 0x6f6], 0
mov byte [ebp - 0x6f5], 0
mov byte [ebp - 0x6f4], 0xff
mov byte [ebp - 0x6f3], 0xff
mov byte [ebp - 0x6f2], 0xff
mov byte [ebp - 0x6f1], 0xff
mov byte [ebp - 0x47c], 0
push 0x1ff
push 0
lea edx, [ebp - 0x47b]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov byte [ebp - 0x49c], 0
xor eax, eax
mov dword [ebp - 0x49b], eax
mov dword [ebp - 0x497], eax
mov dword [ebp - 0x493], eax
mov word [ebp - 0x48f], ax
mov byte [ebp - 0x48d], al
push 0
push 1
push 0
push 0
lea ecx, [ebp - 0x47c]
push ecx
mov edx, dword [ebp - 0x984]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x984]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov eax, dword [edx + 0xc]
call eax
test eax, eax
jne 0x10b8da2
mov dword [ebp - 0x97c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6ac]
call fcn.010ac7d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6f0]
call fcn.010baad0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6d0]
call fcn.010baad0
mov eax, dword [ebp - 0x97c]
jmp 0x10b8e6b
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp - 0x10], ecx
push 0x1fe
push 0
lea edx, [ebp - 0x47c]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x700]
mov dword [ebp - 0x2be], ecx
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x2ba], edx
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x2b6], eax
mov ecx, dword [ebp - 0x6f4]
mov dword [ebp - 0x2b2], ecx
push 0
push 1
push 0
push 0
lea edx, [ebp - 0x47c]
push edx
mov eax, dword [ebp - 0x984]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x984]
mov eax, dword [edx + 4]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 0x980], 1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6ac]
call fcn.010ac7d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6f0]
call fcn.010baad0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6d0]
call fcn.010baad0
mov eax, dword [ebp - 0x980]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8