Function at 0x1011d500
Capabilities:
Check for peb ntglobalflag flag
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x510
mov edi, ecx
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x101622a0
mov eax, dword fs:[0]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov dword fs:[0], eax
mov esi, dword [ebp + 0x58]
mov ebx, dword [ebp + 0x60]
add ecx, 4
mov dword [ebp - 0x5c], ecx
call fcn.100f3f80
mov dword [edi + 0x24], 0x100f0480
mov dword [edi + 0x28], fcn.1011fb80
mov dword [edi + 0x30], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x35], 0
mov dword [edi + 0x31], 0
mov dword [edi], 0x103589cc
mov eax, dword [ebp + 0x68]
mov dword [edi + 0x44], eax
mov ecx, dword [ebp + 0x64]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [edi + 0x48], eax
mov dword [edi + 0x4c], ecx
mov dword [edi + 0x50], 0
mov dword [edi + 0x60], 0
mov dword [edi + 0x64], 0
movsd xmm0, qword [ebx + 0x10]
movsd qword [edi + 0x60], xmm0
movups xmm0, xmmword [ebx]
movups xmmword [edi + 0x50], xmm0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
mov ecx, dword [ebp + 0x5c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [edi + 0x68], eax
mov dword [edi + 0x6c], ecx
mov dword [edi + 0x70], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0x84], 0
movsd xmm0, qword [esi + 0x10]
movsd qword [edi + 0x80], xmm0
movups xmm0, xmmword [esi]
movups xmmword [edi + 0x70], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp + 0x54]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [edi + 0x88], eax
mov dword [edi + 0x8c], ecx
mov dword [edi + 0x90], 0
mov dword [edi + 0xa0], 0
mov dword [edi + 0xa4], 0
mov eax, dword [ebp + 0x50]
movsd xmm0, qword [eax + 0x10]
movsd qword [edi + 0xa0], xmm0
movups xmm0, xmmword [eax]
movups xmmword [edi + 0x90], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp + 0x4c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [edi + 0xa8], eax
mov dword [edi + 0xac], ecx
mov dword [edi + 0xb0], 0
mov dword [edi + 0xc0], 0
mov dword [edi + 0xc4], 0
mov eax, dword [ebp + 0x48]
movsd xmm0, qword [eax + 0x10]
movsd qword [edi + 0xc0], xmm0
movups xmm0, xmmword [eax]
movups xmmword [edi + 0xb0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp + 0x44]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [edi + 0xc8], eax
mov dword [edi + 0xcc], ecx
mov dword [edi + 0xd0], 0
mov dword [edi + 0xe0], 0
mov dword [edi + 0xe4], 0
mov eax, dword [ebp + 0x40]
movsd xmm0, qword [eax + 0x10]
movsd qword [edi + 0xe0], xmm0
movups xmm0, xmmword [eax]
movups xmmword [edi + 0xd0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp + 0x3c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [edi + 0xe8], eax
mov dword [edi + 0xec], ecx
mov dword [edi + 0xf0], 0
mov dword [edi + 0x100], 0
mov dword [edi + 0x104], 0
mov eax, dword [ebp + 0x38]
movsd xmm0, qword [eax + 0x10]
movsd qword [edi + 0x100], xmm0
movups xmm0, xmmword [eax]
movups xmmword [edi + 0xf0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp + 0x34]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [edi + 0x108], eax
mov dword [edi + 0x10c], ecx
mov dword [edi + 0x110], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 0
mov eax, dword [ebp + 0x30]
movsd xmm0, qword [eax + 0x10]
movsd qword [edi + 0x120], xmm0
movups xmm0, xmmword [eax]
movups xmmword [edi + 0x110], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [edi + 0x128], eax
mov dword [edi + 0x12c], ecx
mov dword [edi + 0x130], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0x144], 0
mov eax, dword [ebp + 0x28]
movsd xmm0, qword [eax + 0x10]
movsd qword [edi + 0x140], xmm0
movups xmm0, xmmword [eax]
movups xmmword [edi + 0x130], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp + 0x24]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [edi + 0x148], eax
mov dword [edi + 0x14c], ecx
mov dword [edi + 0x150], 0
mov dword [edi + 0x160], 0
mov dword [edi + 0x164], 0
mov eax, dword [ebp + 0x20]
movsd xmm0, qword [eax + 0x10]
movsd qword [edi + 0x160], xmm0
movups xmm0, xmmword [eax]
movups xmmword [edi + 0x150], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax]
mov dword [edi + 0x168], eax
mov dword [edi + 0x170], 0
mov dword [edi + 0x180], 0
mov dword [edi + 0x184], 0
mov eax, dword [ebp + 0x18]
movsd xmm0, qword [eax + 0x10]
movsd qword [edi + 0x180], xmm0
movups xmm0, xmmword [eax]
movups xmmword [edi + 0x170], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [edi + 0x188], eax
lea eax, [edi + 0x190]
mov dword [edi + 0x190], 0
mov dword [edi + 0x1a0], 0
mov dword [edi + 0x1a4], 0
mov ecx, dword [ebp + 0x10]
movsd xmm0, qword [ecx + 0x10]
movsd qword [edi + 0x1a0], xmm0
movups xmm0, xmmword [ecx]
movups xmmword [edi + 0x190], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1bc], 0
mov dword [edi + 0x1c0], 0x1011fd40
mov dword [edi + 0x1c4], 0x10120050
mov dword [edi + 0x1c8], 0x100e3240
mov dword [edi + 0x1cc], 0x100e3250
mov dword [edi + 0x1d0], 0
mov dword [edi + 0x1d4], 0
mov byte [edi + 0x1d8], 0
mov dword [edi + 0x1dc], 0
mov dword [ebp - 0x168], 0xf
mov dword [ebp - 0x16c], 0xa
mov dword [ebp - 0x17c], 0x73616c63
mov dword [ebp - 0x178], 0x61635f73
mov word [ebp - 0x174], 0x7473
mov byte [ebp - 0x172], 0
movups xmm0, xmmword [ebp - 0x17c]
movups xmmword [ebp - 0x1bc], xmm0
movsd xmm1, qword [ebp - 0x16c]
movsd qword [ebp - 0x1ac], xmm1
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
mov byte [ebp - 0x17c], 0
mov dword [ebp - 0x1a4], 0x10120360
mov dword [ebp - 0x1a0], 0x10120360
mov dword [ebp - 0x19c], 0xffffffff
movsd qword [ebp - 0x50c], xmm1
movups xmmword [ebp - 0x51c], xmm0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0xf
mov byte [ebp - 0x1bc], 0
movsd xmm0, qword [ebp - 0x1a4]
movsd qword [ebp - 0x504], xmm0
mov dword [ebp - 0x4fc], 0xffffffff
mov esi, dword [edi + 0x1a0]
cmp dword [edi + 0x1a4], 0x10
mov edx, eax
jb 0x1011da8f
mov edx, dword [edi + 0x190]
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0xf
mov byte [ebp - 0x164], 0
cmp esi, 0xf
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x180], eax
jbe 0x1011daf2
test esi, esi
js 0x1011f775
mov ecx, esi
or ecx, 0xf
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], edx
js 0x1011db13
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea eax, [edi + 1]
cmp edi, 0xfff
jb 0x1011db46
mov dword [ebp - 0x24], ecx
jmp 0x1011db1f
mov dword [ebp - 0x154], esi
lea eax, [ebp - 0x164]
push esi
push edx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebp + esi - 0x164], 0
jmp 0x1011db8f
mov eax, Ordinal_2
mov dword [ebp - 0x24], Ordinal_2
add eax, 0x23
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x10], 2
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
add esi, 0x23
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x1011db62
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x10], 2
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x154], edi
mov dword [ebp - 0x150], ecx
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + edi], 0
mov dword [ebp - 0x164], esi
mov edi, dword [ebp - 0x2c]
movsd xmm0, qword [ebp - 0x154]
movsd qword [ebp - 0x338], xmm0
movups xmm1, xmmword [ebp - 0x164]
movups xmmword [ebp - 0x348], xmm1
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0xf
mov byte [ebp - 0x164], 0
mov dword [ebp - 0x330], 0x101203a0
mov dword [ebp - 0x32c], 0x101203a0
mov dword [ebp - 0x328], 0xffffffff
movups xmmword [ebp - 0x4f8], xmm1
movsd qword [ebp - 0x4e8], xmm0
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x334], 0xf
mov byte [ebp - 0x348], 0
movsd xmm0, qword [ebp - 0x330]
movsd qword [ebp - 0x4e0], xmm0
mov dword [ebp - 0x4d8], 0xffffffff
mov esi, dword [edi + 0x180]
cmp dword [edi + 0x184], 0x10
jb 0x1011dc41
mov edx, dword [edi + 0x170]
jmp 0x1011dc47
lea edx, [edi + 0x170]
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0xf
mov byte [ebp - 0x14c], 0
cmp esi, 0xf
jbe 0x1011dca8
test esi, esi
js 0x1011f788
mov ecx, esi
or ecx, 0xf
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], edx
js 0x1011dcc9
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea eax, [edi + 1]
mov dword [ebp - 0x10], 3
cmp edi, 0xfff
jb 0x1011dcfc
mov dword [ebp - 0x20], ecx
jmp 0x1011dcd5
mov dword [ebp - 0x13c], esi
lea eax, [ebp - 0x14c]
push esi
push edx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebp + esi - 0x14c], 0
jmp 0x1011dd3e
mov eax, Ordinal_2
mov dword [ebp - 0x20], Ordinal_2
add eax, 0x23
mov dword [ebp - 0x54], 2
mov dword [ebp - 0x10], 3
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
add esi, 0x23
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x1011dd11
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x54], 2
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x13c], edi
mov dword [ebp - 0x138], ecx
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + edi], 0
mov dword [ebp - 0x14c], esi
mov edi, dword [ebp - 0x2c]
movsd xmm0, qword [ebp - 0x13c]
movsd qword [ebp - 0x314], xmm0
movups xmm1, xmmword [ebp - 0x14c]
movups xmmword [ebp - 0x324], xmm1
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0xf
mov byte [ebp - 0x14c], 0
mov dword [ebp - 0x30c], 0x101203e0
mov dword [ebp - 0x308], 0x101203e0
mov dword [ebp - 0x304], 0xffffffff
movups xmmword [ebp - 0x4d4], xmm1
movsd qword [ebp - 0x4c4], xmm0
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x310], 0xf
mov byte [ebp - 0x324], 0
movsd xmm0, qword [ebp - 0x30c]
movsd qword [ebp - 0x4bc], xmm0
mov dword [ebp - 0x4b4], 0xffffffff
mov esi, dword [edi + 0x160]
cmp dword [edi + 0x164], 0x10
jb 0x1011ddf0
mov edx, dword [edi + 0x150]
jmp 0x1011ddf6
lea edx, [edi + 0x150]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
cmp esi, 0xf
jbe 0x1011de57
test esi, esi
js 0x1011f79b
mov ecx, esi
or ecx, 0xf
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], edx
js 0x1011de78
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea eax, [edi + 1]
mov dword [ebp - 0x10], 4
cmp edi, 0xfff
jb 0x1011deab
mov dword [ebp - 0x20], ecx
jmp 0x1011de84
mov dword [ebp - 0x124], esi
lea eax, [ebp - 0x134]
push esi
push edx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebp + esi - 0x134], 0
jmp 0x1011deed
mov eax, Ordinal_2
mov dword [ebp - 0x20], Ordinal_2
add eax, 0x23
mov dword [ebp - 0x50], 3
mov dword [ebp - 0x10], 4
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
add esi, 0x23
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x1011dec0
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x50], 3
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x124], edi
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x120], ecx
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + edi], 0
mov dword [ebp - 0x134], esi
mov edi, dword [ebp - 0x2c]
movsd xmm0, qword [ebp - 0x124]
movsd qword [ebp - 0x2f0], xmm0
movups xmm1, xmmword [ebp - 0x134]
movups xmmword [ebp - 0x300], xmm1
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
mov dword [ebp - 0x2e8], 0x10120420
mov dword [ebp - 0x2e4], 0x10120420
mov dword [ebp - 0x2e0], 0xffffffff
movups xmmword [ebp - 0x4b0], xmm1
movsd qword [ebp - 0x4a0], xmm0
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2ec], 0xf
mov byte [ebp - 0x300], 0
movsd xmm0, qword [ebp - 0x2e8]
movsd qword [ebp - 0x498], xmm0
mov dword [ebp - 0x490], 0xffffffff
mov esi, dword [edi + 0x140]
cmp dword [edi + 0x144], 0x10
jb 0x1011df9f
mov edx, dword [edi + 0x130]
jmp 0x1011dfa5
lea edx, [edi + 0x130]
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0xf
mov byte [ebp - 0x11c], 0
cmp esi, 0xf
jbe 0x1011e006
test esi, esi
js 0x1011f7ae
mov ecx, esi
or ecx, 0xf
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], edx
js 0x1011e027
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea eax, [edi + 1]
mov dword [ebp - 0x10], 5
cmp edi, 0xfff
jb 0x1011e05a
mov dword [ebp - 0x20], ecx
jmp 0x1011e033
mov dword [ebp - 0x10c], esi
lea eax, [ebp - 0x11c]
push esi
push edx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebp + esi - 0x11c], 0
jmp 0x1011e09c
mov eax, Ordinal_2
mov dword [ebp - 0x20], Ordinal_2
add eax, 0x23
mov dword [ebp - 0x4c], 4
mov dword [ebp - 0x10], 5
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
add esi, 0x23
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x1011e06f
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x4c], 4
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x10c], edi
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x108], ecx
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + edi], 0
mov dword [ebp - 0x11c], esi
mov edi, dword [ebp - 0x2c]
movsd xmm0, qword [ebp - 0x10c]
movsd qword [ebp - 0x2cc], xmm0
movups xmm1, xmmword [ebp - 0x11c]
movups xmmword [ebp - 0x2dc], xmm1
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0xf
mov byte [ebp - 0x11c], 0
mov dword [ebp - 0x2c4], 0x10120460
mov dword [ebp - 0x2c0], 0x10120460
mov dword [ebp - 0x2bc], 0xffffffff
movups xmmword [ebp - 0x48c], xmm1
movsd qword [ebp - 0x47c], xmm0
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2c8], 0xf
mov byte [ebp - 0x2dc], 0
movsd xmm0, qword [ebp - 0x2c4]
movsd qword [ebp - 0x474], xmm0
mov dword [ebp - 0x46c], 0xffffffff
mov esi, dword [edi + 0x120]
cmp dword [edi + 0x124], 0x10
jb 0x1011e14e
mov edx, dword [edi + 0x110]
jmp 0x1011e154
lea edx, [edi + 0x110]
mov dword [ebp - 0x104], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], 0
cmp esi, 0xf
jbe 0x1011e1b5
test esi, esi
js 0x1011f7c1
mov ecx, esi
or ecx, 0xf
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], edx
js 0x1011e1d6
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea eax, [edi + 1]
mov dword [ebp - 0x10], 6
cmp edi, 0xfff
jb 0x1011e209
mov dword [ebp - 0x24], ecx
jmp 0x1011e1e2
mov dword [ebp - 0xf4], esi
lea eax, [ebp - 0x104]
push esi
push edx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebp + esi - 0x104], 0
jmp 0x1011e24b
mov eax, Ordinal_2
mov dword [ebp - 0x24], Ordinal_2
add eax, 0x23
mov dword [ebp - 0x48], 5
mov dword [ebp - 0x10], 6
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
add esi, 0x23
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x1011e21e
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x48], 5
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xf4], edi
mov dword [ebp - 0xf0], ecx
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + edi], 0
mov dword [ebp - 0x104], esi
mov edi, dword [ebp - 0x2c]
movsd xmm0, qword [ebp - 0xf4]
movsd qword [ebp - 0x2a8], xmm0
movups xmm1, xmmword [ebp - 0x104]
movups xmmword [ebp - 0x2b8], xmm1
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], 0
mov dword [ebp - 0x2a0], 0x101204a0
mov dword [ebp - 0x29c], 0x101204a0
mov dword [ebp - 0x298], 0xffffffff
movups xmmword [ebp - 0x468], xmm1
movsd qword [ebp - 0x458], xmm0
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0xf
mov byte [ebp - 0x2b8], 0
movsd xmm0, qword [ebp - 0x2a0]
movsd qword [ebp - 0x450], xmm0
mov dword [ebp - 0x448], 0xffffffff
mov esi, dword [edi + 0x100]
cmp dword [edi + 0x104], 0x10
jb 0x1011e2fd
mov edx, dword [edi + 0xf0]
jmp 0x1011e303
lea edx, [edi + 0xf0]
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
cmp esi, 0xf
jbe 0x1011e364
test esi, esi
js 0x1011f7d4
mov ecx, esi
or ecx, 0xf
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], edx
js 0x1011e385
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea eax, [edi + 1]
mov dword [ebp - 0x10], 7
cmp edi, 0xfff
jb 0x1011e3b8
mov dword [ebp - 0x20], ecx
jmp 0x1011e391
mov dword [ebp - 0xdc], esi
lea eax, [ebp - 0xec]
push esi
push edx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebp + esi - 0xec], 0
jmp 0x1011e3fa
mov eax, Ordinal_2
mov dword [ebp - 0x20], Ordinal_2
add eax, 0x23
mov dword [ebp - 0x44], 6
mov dword [ebp - 0x10], 7
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
add esi, 0x23
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x1011e3cd
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x44], 6
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0xdc], edi
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0xd8], ecx
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + edi], 0
mov dword [ebp - 0xec], esi
mov edi, dword [ebp - 0x2c]
movsd xmm0, qword [ebp - 0xdc]
movsd qword [ebp - 0x284], xmm0
movups xmm1, xmmword [ebp - 0xec]
movups xmmword [ebp - 0x294], xmm1
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
mov dword [ebp - 0x27c], 0x101204e0
mov dword [ebp - 0x278], 0x101204e0
mov dword [ebp - 0x274], 0xffffffff
movups xmmword [ebp - 0x444], xmm1
movsd qword [ebp - 0x434], xmm0
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x280], 0xf
mov byte [ebp - 0x294], 0
movsd xmm0, qword [ebp - 0x27c]
movsd qword [ebp - 0x42c], xmm0
mov dword [ebp - 0x424], 0xffffffff
mov esi, dword [edi + 0xe0]
cmp dword [edi + 0xe4], 0x10
jb 0x1011e4ac
mov edx, dword [edi + 0xd0]
jmp 0x1011e4b2
lea edx, [edi + 0xd0]
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
cmp esi, 0xf
jbe 0x1011e513
test esi, esi
js 0x1011f7e7
mov ecx, esi
or ecx, 0xf
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], edx
js 0x1011e534
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea eax, [edi + 1]
mov dword [ebp - 0x10], 8
cmp edi, 0xfff
jb 0x1011e567
mov dword [ebp - 0x20], ecx
jmp 0x1011e540
mov dword [ebp - 0xc4], esi
lea eax, [ebp - 0xd4]
push esi
push edx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebp + esi - 0xd4], 0
jmp 0x1011e5a9
mov eax, Ordinal_2
mov dword [ebp - 0x20], Ordinal_2
add eax, 0x23
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x10], 8
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
add esi, 0x23
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x1011e57c
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x40], 7
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0xc4], edi
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0xc0], ecx
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + edi], 0
mov dword [ebp - 0xd4], esi
mov edi, dword [ebp - 0x2c]
movsd xmm0, qword [ebp - 0xc4]
movsd qword [ebp - 0x260], xmm0
movups xmm1, xmmword [ebp - 0xd4]
movups xmmword [ebp - 0x270], xmm1
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
mov dword [ebp - 0x258], 0x10120520
mov dword [ebp - 0x254], 0x10120520
mov dword [ebp - 0x250], 0xffffffff
movups xmmword [ebp - 0x420], xmm1
movsd qword [ebp - 0x410], xmm0
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x25c], 0xf
mov byte [ebp - 0x270], 0
movsd xmm0, qword [ebp - 0x258]
movsd qword [ebp - 0x408], xmm0
mov dword [ebp - 0x400], 0xffffffff
mov esi, dword [edi + 0xc0]
cmp dword [edi + 0xc4], 0x10
jb 0x1011e65b
mov edx, dword [edi + 0xb0]
jmp 0x1011e661
lea edx, [edi + 0xb0]
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
cmp esi, 0xf
jbe 0x1011e6c2
test esi, esi
js 0x1011f7fa
mov ecx, esi
or ecx, 0xf
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], edx
js 0x1011e6e3
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea eax, [edi + 1]
mov dword [ebp - 0x10], 9
cmp edi, 0xfff
jb 0x1011e716
mov dword [ebp - 0x20], ecx
jmp 0x1011e6ef
mov dword [ebp - 0xac], esi
lea eax, [ebp - 0xbc]
push esi
push edx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebp + esi - 0xbc], 0
jmp 0x1011e758
mov eax, Ordinal_2
mov dword [ebp - 0x20], Ordinal_2
add eax, 0x23
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0x10], 9
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
add esi, 0x23
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x1011e72b
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x3c], 8
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xa8], ecx
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + edi], 0
mov dword [ebp - 0xbc], esi
mov edi, dword [ebp - 0x2c]
movsd xmm0, qword [ebp - 0xac]
movsd qword [ebp - 0x23c], xmm0
movups xmm1, xmmword [ebp - 0xbc]
movups xmmword [ebp - 0x24c], xmm1
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0x234], 0x10120560
mov dword [ebp - 0x230], 0x10120560
mov dword [ebp - 0x22c], 0xffffffff
movups xmmword [ebp - 0x3fc], xmm1
movsd qword [ebp - 0x3ec], xmm0
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0xf
mov byte [ebp - 0x24c], 0
movsd xmm0, qword [ebp - 0x234]
movsd qword [ebp - 0x3e4], xmm0
mov dword [ebp - 0x3dc], 0xffffffff
mov esi, dword [edi + 0xa0]
cmp dword [edi + 0xa4], 0x10
jb 0x1011e80a
mov edx, dword [edi + 0x90]
jmp 0x1011e810
lea edx, [edi + 0x90]
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp esi, 0xf
jbe 0x1011e871
test esi, esi
js 0x1011f80d
mov ecx, esi
or ecx, 0xf
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], edx
js 0x1011e892
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea eax, [edi + 1]
mov dword [ebp - 0x10], 0xa
cmp edi, 0xfff
jb 0x1011e8c5
mov dword [ebp - 0x24], ecx
jmp 0x1011e89e
mov dword [ebp - 0x94], esi
lea eax, [ebp - 0xa4]
push esi
push edx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebp + esi - 0xa4], 0
jmp 0x1011e907
mov eax, Ordinal_2
mov dword [ebp - 0x24], Ordinal_2
add eax, 0x23
mov dword [ebp - 0x38], 9
mov dword [ebp - 0x10], 0xa
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
add esi, 0x23
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x1011e8da
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x38], 9
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x94], edi
mov dword [ebp - 0x90], ecx
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + edi], 0
mov dword [ebp - 0xa4], esi
mov edi, dword [ebp - 0x2c]
movsd xmm0, qword [ebp - 0x94]
movsd qword [ebp - 0x218], xmm0
movups xmm1, xmmword [ebp - 0xa4]
movups xmmword [ebp - 0x228], xmm1
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
mov dword [ebp - 0x210], 0x101205a0
mov dword [ebp - 0x20c], 0x101205a0
mov dword [ebp - 0x208], 0xffffffff
movups xmmword [ebp - 0x3d8], xmm1
movsd qword [ebp - 0x3c8], xmm0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0xf
mov byte [ebp - 0x228], 0
movsd xmm0, qword [ebp - 0x210]
movsd qword [ebp - 0x3c0], xmm0
mov dword [ebp - 0x3b8], 0xffffffff
mov esi, dword [edi + 0x80]
cmp dword [edi + 0x84], 0x10
jb 0x1011e9b6
mov edx, dword [edi + 0x70]
jmp 0x1011e9b9
lea edx, [edi + 0x70]
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp esi, 0xf
jbe 0x1011ea14
test esi, esi
js 0x1011f820
mov ecx, esi
or ecx, 0xf
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], edx
js 0x1011ea32
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea eax, [edi + 1]
mov dword [ebp - 0x10], 0xb
cmp edi, 0xfff
jb 0x1011ea65
mov dword [ebp - 0x20], ecx
jmp 0x1011ea3e
mov dword [ebp - 0x7c], esi
lea eax, [ebp - 0x8c]
push esi
push edx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebp + esi - 0x8c], 0
jmp 0x1011eaa1
mov eax, Ordinal_2
mov dword [ebp - 0x20], Ordinal_2
add eax, 0x23
mov dword [ebp - 0x34], 0xa
mov dword [ebp - 0x10], 0xb
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
add esi, 0x23
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x1011ea7a
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x34], 0xa
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x7c], edi
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x78], ecx
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + edi], 0
mov dword [ebp - 0x8c], esi
mov edi, dword [ebp - 0x2c]
movsd xmm0, qword [ebp - 0x7c]
movsd qword [ebp - 0x1f4], xmm0
movups xmm1, xmmword [ebp - 0x8c]
movups xmmword [ebp - 0x204], xmm1
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
mov dword [ebp - 0x1ec], 0x101205e0
mov dword [ebp - 0x1e8], 0x101205e0
mov dword [ebp - 0x1e4], 0xffffffff
movups xmmword [ebp - 0x3b4], xmm1
movsd qword [ebp - 0x3a4], xmm0
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1f0], 0xf
mov byte [ebp - 0x204], 0
movsd xmm0, qword [ebp - 0x1ec]
movsd qword [ebp - 0x39c], xmm0
mov dword [ebp - 0x394], 0xffffffff
mov esi, dword [edi + 0x60]
cmp dword [edi + 0x64], 0x10
jb 0x1011eb41
mov edx, dword [edi + 0x50]
jmp 0x1011eb44
lea edx, [edi + 0x50]
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp esi, 0xf
jbe 0x1011eb99
test esi, esi
js 0x1011f833
mov ecx, esi
or ecx, 0xf
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], edx
js 0x1011ebb1
cmp ecx, 0x17
mov edi, 0x16
cmovae edi, ecx
lea eax, [edi + 1]
mov dword [ebp - 0x10], 0xc
cmp edi, 0xfff
jb 0x1011ebe4
mov dword [ebp - 0x20], ecx
jmp 0x1011ebbd
mov dword [ebp - 0x64], esi
lea eax, [ebp - 0x74]
push esi
push edx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebp + esi - 0x74], 0
jmp 0x1011ec1d
mov eax, Ordinal_2
mov dword [ebp - 0x20], Ordinal_2
add eax, 0x23
mov dword [ebp - 0x30], 0xb
mov dword [ebp - 0x10], 0xc
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
add esi, 0x23
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x1011ebf9
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x30], 0xb
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x60], ecx
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + edi], 0
mov dword [ebp - 0x74], esi
mov edi, dword [ebp - 0x2c]
movsd xmm0, qword [ebp - 0x64]
movsd qword [ebp - 0x1d0], xmm0
movups xmm1, xmmword [ebp - 0x74]
movups xmmword [ebp - 0x1e0], xmm1
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
mov dword [ebp - 0x1c8], 0x10120620
mov dword [ebp - 0x1c4], 0x10120620
mov dword [ebp - 0x1c0], 0xffffffff
movups xmmword [ebp - 0x390], xmm1
movsd qword [ebp - 0x380], xmm0
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1cc], 0xf
mov byte [ebp - 0x1e0], 0
movsd xmm0, qword [ebp - 0x1c8]
movsd qword [ebp - 0x378], xmm0
mov dword [ebp - 0x370], 0xffffffff
mov edi, dword [edi + 0x44]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov esi, eax
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x184], 0xf
mov byte [ebp - 0x198], 0
cmp eax, 0xf
jbe 0x1011ed0e
test esi, esi
js 0x1011f846
mov ecx, esi
or ecx, 0xf
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], edi
js 0x1011ed46
cmp ecx, 0x17
mov edx, 0x16
cmovae edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 0x10], 0xd
cmp edx, 0xfff
jb 0x1011ed72
mov dword [ebp - 0x20], ecx
jmp 0x1011ed52
mov dword [ebp - 0x188], esi
lea eax, [ebp - 0x198]
push esi
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebp + esi - 0x198], 0
mov esi, dword [ebp - 0x198]
mov edi, dword [ebp - 0x188]
mov eax, 0xf
mov edx, dword [ebp - 0x184]
jmp 0x1011ed9e
mov eax, Ordinal_2
mov dword [ebp - 0x20], Ordinal_2
add eax, 0x23
mov dword [ebp - 0x10], 0xd
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
add esi, 0x23
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x1011ed80
mov dword [ebp - 0x20], edx
push eax
call fcn.102e53ba
add esp, 4
mov esi, eax
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + edi], 0
mov eax, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18c]
mov dword [ebp - 0x360], ecx
movsd xmm0, qword [ebp - 0x194]
movsd qword [ebp - 0x368], xmm0
mov dword [ebp - 0x36c], esi
mov dword [ebp - 0x35c], edi
mov dword [ebp - 0x358], edx
mov dword [ebp - 0x354], 0x1010b880
mov dword [ebp - 0x350], 0x1010b880
mov dword [ebp - 0x34c], 0xffffffff
cmp eax, 0x10
jb 0x1011ee22
mov ecx, dword [ebp - 0x1e0]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011ee18
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1cc], 0xf
mov byte [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x60]
cmp eax, 0x10
jb 0x1011ee75
mov ecx, dword [ebp - 0x74]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011ee6b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov eax, dword [ebp - 0x1f0]
cmp eax, 0x10
jb 0x1011eeb3
mov ecx, dword [ebp - 0x204]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011eea9
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1f0], 0xf
mov byte [ebp - 0x204], 0
mov eax, dword [ebp - 0x78]
cmp eax, 0x10
jb 0x1011ef09
mov ecx, dword [ebp - 0x8c]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011eeff
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov eax, dword [ebp - 0x214]
cmp eax, 0x10
jb 0x1011ef47
mov ecx, dword [ebp - 0x228]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011ef3d
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0xf
mov byte [ebp - 0x228], 0
mov eax, dword [ebp - 0x90]
cmp eax, 0x10
jb 0x1011efa0
mov ecx, dword [ebp - 0xa4]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011ef96
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov eax, dword [ebp - 0x238]
cmp eax, 0x10
jb 0x1011efde
mov ecx, dword [ebp - 0x24c]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011efd4
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0xf
mov byte [ebp - 0x24c], 0
mov eax, dword [ebp - 0xa8]
cmp eax, 0x10
jb 0x1011f037
mov ecx, dword [ebp - 0xbc]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f02d
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov eax, dword [ebp - 0x25c]
cmp eax, 0x10
jb 0x1011f075
mov ecx, dword [ebp - 0x270]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f06b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x25c], 0xf
mov byte [ebp - 0x270], 0
mov eax, dword [ebp - 0xc0]
cmp eax, 0x10
jb 0x1011f0ce
mov ecx, dword [ebp - 0xd4]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f0c4
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov eax, dword [ebp - 0x280]
cmp eax, 0x10
jb 0x1011f10c
mov ecx, dword [ebp - 0x294]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f102
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x280], 0xf
mov byte [ebp - 0x294], 0
mov eax, dword [ebp - 0xd8]
cmp eax, 0x10
jb 0x1011f165
mov ecx, dword [ebp - 0xec]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f15b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov eax, dword [ebp - 0x2a4]
cmp eax, 0x10
jb 0x1011f1a3
mov ecx, dword [ebp - 0x2b8]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f199
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0xf
mov byte [ebp - 0x2b8], 0
mov eax, dword [ebp - 0xf0]
cmp eax, 0x10
jb 0x1011f1fc
mov ecx, dword [ebp - 0x104]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f1f2
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov eax, dword [ebp - 0x2c8]
cmp eax, 0x10
jb 0x1011f23a
mov ecx, dword [ebp - 0x2dc]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f230
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2c8], 0xf
mov byte [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x108]
cmp eax, 0x10
jb 0x1011f293
mov ecx, dword [ebp - 0x11c]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f289
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov eax, dword [ebp - 0x2ec]
cmp eax, 0x10
jb 0x1011f2d1
mov ecx, dword [ebp - 0x300]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f2c7
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2ec], 0xf
mov byte [ebp - 0x300], 0
mov eax, dword [ebp - 0x120]
cmp eax, 0x10
jb 0x1011f32a
mov ecx, dword [ebp - 0x134]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f320
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov eax, dword [ebp - 0x310]
cmp eax, 0x10
jb 0x1011f368
mov ecx, dword [ebp - 0x324]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f35e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x310], 0xf
mov byte [ebp - 0x324], 0
mov eax, dword [ebp - 0x138]
cmp eax, 0x10
jb 0x1011f3c1
mov ecx, dword [ebp - 0x14c]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f3b7
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov eax, dword [ebp - 0x334]
cmp eax, 0x10
jb 0x1011f3ff
mov ecx, dword [ebp - 0x348]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f3f5
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x334], 0xf
mov byte [ebp - 0x348], 0
mov eax, dword [ebp - 0x150]
cmp eax, 0x10
jb 0x1011f458
mov ecx, dword [ebp - 0x164]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f44e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov eax, dword [ebp - 0x1a8]
cmp eax, 0x10
jb 0x1011f496
mov ecx, dword [ebp - 0x1bc]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f48c
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0xf
mov byte [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x168]
cmp eax, 0x10
jb 0x1011f4ef
mov ecx, dword [ebp - 0x17c]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1011f4e5
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.102e53ef
add esp, 8
lea edx, [ebp - 0x51c]
mov dword [ebp - 0x10], 1
nop dword [eax]
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x24], edx
push edx
lea eax, [ebp - 0x1bc]
push eax
call fcn.100f6bd0
mov edx, dword [ebp - 0x24]
add edx, 0x24
lea eax, [ebp - 0x348]
cmp edx, eax
jne 0x1011f500
call fcn.100f0cb0
mov esi, eax
mov edi, dword [ebp - 0x5c]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x18]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x30]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x48]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x60]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x78]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x90]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0xa8]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0xc0]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0xd8]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0xf0]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x108]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x120]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x138]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x150]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x168]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x180]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x198]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x1b0]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x1c8]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x1e0]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x1f8]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x210]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x228]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x240]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x258]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x270]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x288]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x2a0]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x2b8]
mov ecx, edi
push eax
call fcn.100f10c0
lea eax, [esi + 0x2d0]
mov ecx, edi
push eax
call fcn.100f10c0
add esi, 0x2e8
mov ecx, edi
push esi
call fcn.100f10c0
mov ecx, dword [ebp - 0x2c]
call fcn.10120660
mov ecx, dword [ebp - 0x2c]
mov byte [ecx + 0x38], al
lea edx, [ebp - 0x51c]
lea esi, [ebp - 0x348]
jmp 0x1011f728
push ebx
push ecx
call fcn.102e53ef
add esp, 8
lea edx, [ebp - 0x51c]
mov dword [esi - 0x14], 0
mov dword [esi - 0x10], 0xf
mov byte [esi - 0x24], 0
mov esi, edi
cmp edi, edx
je 0x1011f756
lea edi, [esi - 0x24]
mov eax, dword [esi - 0x10]
cmp eax, 0x10
jb 0x1011f710
mov ecx, dword [edi]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jb 0x1011f700
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1011f76f
add eax, 0x24
mov ebx, eax
mov ecx, edx
jmp 0x1011f700
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, dword [ebp - 0x2c]
add esp, 0x510
pop esi
pop edi
pop ebx
pop ebp
ret 0x68
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x10], 2
call fcn.10025990
mov dword [ebp - 0x54], 2
mov dword [ebp - 0x10], 3
call fcn.10025990
mov dword [ebp - 0x50], 3
mov dword [ebp - 0x10], 4
call fcn.10025990
mov dword [ebp - 0x4c], 4
mov dword [ebp - 0x10], 5
call fcn.10025990
mov dword [ebp - 0x48], 5
mov dword [ebp - 0x10], 6
call fcn.10025990
mov dword [ebp - 0x44], 6
mov dword [ebp - 0x10], 7
call fcn.10025990
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x10], 8
call fcn.10025990
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0x10], 9
call fcn.10025990
mov dword [ebp - 0x38], 9
mov dword [ebp - 0x10], 0xa
call fcn.10025990
mov dword [ebp - 0x34], 0xa
mov dword [ebp - 0x10], 0xb
call fcn.10025990
mov dword [ebp - 0x30], 0xb
mov dword [ebp - 0x10], 0xc
call fcn.10025990
mov dword [ebp - 0x10], 0xd
call fcn.10025990
nop word cs:[eax + eax]
nop dword [eax]
push ebp
sub esp, 0xc
add ebp, 0xc
lea ecx, [ebp - 0x1e0]
call fcn.10023b10
lea ecx, [ebp - 0x74]
call fcn.10023b10
mov dword [ebp - 0x30], 0xc
add esp, 0xc
pop ebp
ret