Function at 0x10df550
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x11b588c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1540
call sub.ntdll.dll__chkstk
push esi
push edi
mov dword [ebp - 0x1334], ecx
call fcn.01094820
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x68]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x10df5c1
mov ecx, dword [ebp - 0x1334]
call fcn.010d9a20
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x10df5c1
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x1334]
call fcn.010e2240
jmp 0x10e2078
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x78]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x1334]
call fcn.010dcf20
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x78]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x1334]
call fcn.010de350
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x14]
push ecx
mov edx, dword [eax + 0x10]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x1334]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp - 0x1334]
mov ecx, dword [eax + 0x18]
mov edx, dword [edx]
mov eax, dword [edx + 0x24]
call eax
push eax
call fcn.010d05e0
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
push edx
mov eax, dword [ecx + 0x18]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
call fcn.010d05e0
mov dword [ebp - 0x18], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
call fcn.010d0510
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x1334]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp - 0x1334]
mov ecx, dword [eax + 0x18]
mov edx, dword [edx]
mov eax, dword [edx + 0x24]
call eax
push eax
call fcn.010d0510
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 5
je 0x10df74b
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xc
je 0x10df74b
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xa
je 0x10df74b
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 6
je 0x10df74b
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 7
je 0x10df74b
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 8
je 0x10df74b
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 9
jne 0x10df75c
push 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
jmp 0x10df76b
push 1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x68]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x10df7bf
call fcn.01094820
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x1334]
call fcn.010d9a20
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x10df7bf
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10df7bf
push 0x31
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
xor eax, eax
jmp 0x10e2078
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1338], eax
mov ecx, dword [ebp - 0x1338]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1338]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10df84c
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0xffffffff
jne 0x10df84c
call fcn.010946d0
mov dword [ebp - 0x84], eax
mov edx, dword [ebp - 0x54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x54]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x133c], eax
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x133c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x133c]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp - 0x84]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x84]
mov edx, dword [eax]
call edx
push 0
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x28]
mov eax, dword [edx + 0x3c]
call eax
test eax, eax
je 0x10df8b9
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x28]
mov eax, dword [edx + 0x40]
call eax
push 8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
call fcn.010947d0
mov dword [ebp - 0x1340], eax
push 0xa0e
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100c880
mov ecx, dword [ebp - 0x1340]
push ecx
mov edx, dword [ebp - 0x1340]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10e2078
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x1348], eax
mov dword [ebp - 0x1344], edx
mov eax, dword [ebp - 0x1348]
or eax, dword [ebp - 0x1344]
jne 0x10df92d
call fcn.010947d0
mov dword [ebp - 0x134c], eax
push 0xa14
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cdbc
mov ecx, dword [ebp - 0x134c]
push ecx
mov edx, dword [ebp - 0x134c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
push 0x20
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x20]
call edx
xor eax, eax
jmp 0x10e2078
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x28]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x1350], eax
mov ecx, dword [ebp - 0x1350]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1350]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x50], eax
call fcn.010946d0
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x28]
call eax
mov word [ebp - 0x10], ax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x1c], 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x40]
call eax
movzx ecx, ax
movzx edx, word [ebp - 0x10]
cmp ecx, edx
jne 0x10dfa0e
push 1
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x1c], 1
call fcn.010947d0
mov dword [ebp - 0x1354], eax
push 0xa30
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cd9c
mov ecx, dword [ebp - 0x1354]
push ecx
mov edx, dword [ebp - 0x1354]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [0x100cd8c]
mov dword [ebp - 0x28c], edx
mov eax, dword [0x100cd90]
mov dword [ebp - 0x288], eax
mov ecx, dword [0x100cd94]
mov dword [ebp - 0x284], ecx
mov dx, word [0x100cd98]
mov word [ebp - 0x280], dx
push 0x1f2
push 0
lea eax, [ebp - 0x27e]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
movzx ecx, word [ebp - 0x10]
push ecx
push 0x10060bc
lea edx, [ebp - 0x28c]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
push 0
push 0x80
push 3
push 0
push 1
push 0xc0000000
lea eax, [ebp - 0x28c]
push eax
call fcn.01091ef0
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xffffffff
jne 0x10dfb10
call fcn.010947d0
mov dword [ebp - 0x1358], eax
movzx ecx, word [ebp - 0x10]
push ecx
push 0xa3c
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cd5c
mov edx, dword [ebp - 0x1358]
push edx
mov eax, dword [ebp - 0x1358]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0x10
jmp 0x10dfb1c
mov eax, dword [ebp - 0x88]
push eax
call fcn.01092350
mov dword [ebp - 0x3c], 0
mov ecx, dword [ebp - 0x64]
cmp ecx, dword [ebp - 0x4c]
jne 0x10dfb37
mov edx, dword [ebp - 0x60]
cmp edx, dword [ebp - 0x48]
je 0x10e0449
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0x1334]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp - 0x1334]
mov ecx, dword [ecx + 0x18]
mov edx, dword [eax]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x135c], eax
mov ecx, dword [ebp - 0x135c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x135c]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0
je 0x10dfc71
mov ecx, dword [ebp - 0x290]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x290]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x1360], eax
mov ecx, dword [ebp - 0x1360]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1360]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0
je 0x10dfc2b
mov ecx, dword [ebp - 0x298]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x298]
mov eax, dword [edx + 0x64]
call eax
test eax, eax
je 0x10dfbf7
mov ecx, dword [ebp - 0x298]
mov dword [ebp - 0x294], ecx
jmp 0x10dfc2b
mov edx, dword [ebp - 0x290]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x290]
mov edx, dword [eax + 0x3c]
call edx
mov dword [ebp - 0x1364], eax
mov eax, dword [ebp - 0x1364]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1364]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x298], eax
jmp 0x10dfbc9
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x1334]
mov ecx, dword [eax + 0x18]
mov edx, dword [ebp - 0x1334]
mov eax, dword [edx + 0x18]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x1368], eax
mov ecx, dword [ebp - 0x1368]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1368]
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 0x290], eax
jmp 0x10dfb8a
mov ecx, dword [ebp - 0x294]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0
je 0x10dfd52
mov ecx, dword [ebp - 0x290]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x290]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x136c], eax
mov ecx, dword [ebp - 0x136c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x136c]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0
je 0x10dfd34
mov ecx, dword [ebp - 0x298]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x298]
mov eax, dword [edx + 0x64]
call eax
test eax, eax
je 0x10dfd00
mov ecx, dword [ebp - 0x298]
mov dword [ebp - 0x29c], ecx
jmp 0x10dfd34
mov edx, dword [ebp - 0x290]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x290]
mov edx, dword [eax + 0x3c]
call edx
mov dword [ebp - 0x1370], eax
mov eax, dword [ebp - 0x1370]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1370]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x298], eax
jmp 0x10dfcd2
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
mov edx, dword [edx]
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 0x290], eax
jmp 0x10dfc93
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
push edx
mov eax, dword [ecx + 0x18]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x14]
push edx
mov eax, dword [ecx + 0x10]
push eax
mov ecx, dword [ebp - 0x38]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
call fcn.010e2090
test eax, eax
jne 0x10e0449
cmp dword [ebp - 0x294], 0
je 0x10e0449
call fcn.01123d90
mov dword [ebp - 0x2a4], eax
mov byte [ebp - 0x3c8], 0
xor ecx, ecx
mov dword [ebp - 0x3c7], ecx
mov dword [ebp - 0x3c3], ecx
mov dword [ebp - 0x3bf], ecx
mov dword [ebp - 0x3bb], ecx
mov dword [ebp - 0x3b7], ecx
mov dword [ebp - 0x3b3], ecx
mov dword [ebp - 0x3af], ecx
mov dword [ebp - 0x3ab], ecx
mov edx, dword [ebp - 0x54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x54]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x1374], eax
mov eax, dword [ebp - 0x1374]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1374]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10dfe89
mov byte [ebp - 0x3c8], 1
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1378], eax
mov ecx, dword [ebp - 0x1378]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1378]
mov eax, dword [edx + 0x8c]
call eax
mov ecx, dword [eax]
mov dword [ebp - 0x3b7], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x3b3], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x3af], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x3ab], edx
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x16a
mov ecx, dword [eax]
mov dword [ebp - 0x3c7], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x3c3], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x3bf], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x3bb], edx
jmp 0x10dff08
mov byte [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x137c], eax
mov ecx, dword [ebp - 0x137c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x137c]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x3bf], eax
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1380], eax
mov ecx, dword [ebp - 0x1380]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1380]
mov eax, dword [edx + 0x58]
call eax
mov esi, eax
xor edi, edi
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
push edi
push esi
push edx
push eax
call sub.ntdll.dll__allmul
mov dword [ebp - 0x3c7], eax
mov dword [ebp - 0x3c3], edx
call fcn.010946d0
mov dword [ebp - 0x2a0], eax
mov word [ebp - 0x3a4], 0
push 0xfe
push 0
lea ecx, [ebp - 0x3a2]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x294]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x294]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x1384], eax
mov eax, dword [ebp - 0x294]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x294]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x1384]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1384]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x80
lea ecx, [ebp - 0x3a4]
push ecx
mov edx, dword [ebp - 0x2a0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [eax + 0x2c]
call edx
mov word [ebp - 0x5cc], 0
push 0x1fe
push 0
lea eax, [ebp - 0x5ca]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x294]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x294]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1388], eax
mov ecx, dword [ebp - 0x1388]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1388]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10e0142
lea ecx, [ebp - 0x5cc]
add ecx, 0xfffffffe
mov dword [ebp - 0x138c], ecx
mov edx, dword [ebp - 0x138c]
mov ax, word [edx + 2]
mov word [ebp - 0x138e], ax
add dword [ebp - 0x138c], 2
cmp word [ebp - 0x138e], 0
jne 0x10dfff5
mov edi, dword [ebp - 0x138c]
mov ecx, dword [0x100a8ac]
mov dword [edi], ecx
mov edx, dword [0x100a8b0]
mov dword [edi + 4], edx
mov eax, dword [0x100a8b4]
mov dword [edi + 8], eax
mov ecx, dword [0x100a8b8]
mov dword [edi + 0xc], ecx
mov edx, dword [0x100a8bc]
mov dword [edi + 0x10], edx
mov ax, word [0x100a8c0]
mov word [edi + 0x14], ax
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 0x1394], ecx
mov edx, dword [ebp - 0x1394]
mov dword [ebp - 0x1398], edx
mov eax, dword [ebp - 0x1394]
mov cx, word [eax]
mov word [ebp - 0x139a], cx
add dword [ebp - 0x1394], 2
cmp word [ebp - 0x139a], 0
jne 0x10e006a
mov edx, dword [ebp - 0x1394]
sub edx, dword [ebp - 0x1398]
mov eax, dword [ebp - 0x1398]
mov dword [ebp - 0x13a0], eax
mov dword [ebp - 0x13a4], edx
lea ecx, [ebp - 0x5cc]
add ecx, 0xfffffffe
mov dword [ebp - 0x13a8], ecx
mov edx, dword [ebp - 0x13a8]
mov ax, word [edx + 2]
mov word [ebp - 0x13aa], ax
add dword [ebp - 0x13a8], 2
cmp word [ebp - 0x13aa], 0
jne 0x10e00b8
mov edi, dword [ebp - 0x13a8]
mov esi, dword [ebp - 0x13a0]
mov edx, dword [ebp - 0x13a4]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x5cc]
add eax, 0xfffffffe
mov dword [ebp - 0x13b0], eax
mov ecx, dword [ebp - 0x13b0]
mov dx, word [ecx + 2]
mov word [ebp - 0x13b2], dx
add dword [ebp - 0x13b0], 2
cmp word [ebp - 0x13b2], 0
jne 0x10e0109
mov edi, dword [ebp - 0x13b0]
mov ecx, 0xc
mov esi, 0x100a87c
rep movsd dword es:[edi], dword [esi]
jmp 0x10e02b8
lea eax, [ebp - 0x5cc]
add eax, 0xfffffffe
mov dword [ebp - 0x13b8], eax
mov ecx, dword [ebp - 0x13b8]
mov dx, word [ecx + 2]
mov word [ebp - 0x13ba], dx
add dword [ebp - 0x13b8], 2
cmp word [ebp - 0x13ba], 0
jne 0x10e0151
mov edi, dword [ebp - 0x13b8]
mov eax, dword [0x100a8ac]
mov dword [edi], eax
mov ecx, dword [0x100a8b0]
mov dword [edi + 4], ecx
mov edx, dword [0x100a8b4]
mov dword [edi + 8], edx
mov eax, dword [0x100a8b8]
mov dword [edi + 0xc], eax
mov ecx, dword [0x100a8bc]
mov dword [edi + 0x10], ecx
mov dx, word [0x100a8c0]
mov word [edi + 0x14], dx
lea eax, [ebp - 0x3a4]
mov dword [ebp - 0x13c0], eax
mov ecx, dword [ebp - 0x13c0]
mov dword [ebp - 0x13c4], ecx
mov edx, dword [ebp - 0x13c0]
mov ax, word [edx]
mov word [ebp - 0x13c6], ax
add dword [ebp - 0x13c0], 2
cmp word [ebp - 0x13c6], 0
jne 0x10e01c6
mov ecx, dword [ebp - 0x13c0]
sub ecx, dword [ebp - 0x13c4]
mov edx, dword [ebp - 0x13c4]
mov dword [ebp - 0x13cc], edx
mov dword [ebp - 0x13d0], ecx
lea eax, [ebp - 0x5cc]
add eax, 0xfffffffe
mov dword [ebp - 0x13d4], eax
mov ecx, dword [ebp - 0x13d4]
mov dx, word [ecx + 2]
mov word [ebp - 0x13d6], dx
add dword [ebp - 0x13d4], 2
cmp word [ebp - 0x13d6], 0
jne 0x10e0214
mov edi, dword [ebp - 0x13d4]
mov esi, dword [ebp - 0x13cc]
mov eax, dword [ebp - 0x13d0]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x5cc]
add ecx, 0xfffffffe
mov dword [ebp - 0x13dc], ecx
mov edx, dword [ebp - 0x13dc]
mov ax, word [edx + 2]
mov word [ebp - 0x13de], ax
add dword [ebp - 0x13dc], 2
cmp word [ebp - 0x13de], 0
jne 0x10e0265
mov edi, dword [ebp - 0x13dc]
mov ecx, dword [0x100a838]
mov dword [edi], ecx
mov edx, dword [0x100a83c]
mov dword [edi + 4], edx
mov eax, dword [0x100a840]
mov dword [edi + 8], eax
mov ecx, dword [0x100a844]
mov dword [edi + 0xc], ecx
mov edx, dword [0x100a848]
mov dword [edi + 0x10], edx
push 0x100a7f4
mov eax, dword [ebp - 0x2a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2a4]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [ebp - 0x5cc]
push ecx
push 0x100a7f4
mov edx, dword [ebp - 0x2a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [eax + 0xc]
call edx
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10e0387
lea ecx, [ebp - 0x3c8]
push ecx
push 0x100a7f4
mov edx, dword [ebp - 0x2a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [eax + 4]
call edx
movzx eax, al
test eax, eax
jne 0x10e0387
lea ecx, [ebp - 0x3c8]
push ecx
push 0x100a7f4
mov edx, dword [ebp - 0x2a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [eax + 0x20]
call edx
movzx eax, al
test eax, eax
jne 0x10e0387
call fcn.010947d0
mov dword [ebp - 0x13e4], eax
push 0xaac
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100a8f8
mov ecx, dword [ebp - 0x13e4]
push ecx
mov edx, dword [ebp - 0x13e4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x54]
mov edx, dword [eax + 0x64]
call edx
test eax, eax
je 0x10e041f
lea eax, [ebp - 0x3c8]
push eax
push 0x100a7f4
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2a4]
mov eax, dword [edx + 8]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10e041f
lea edx, [ebp - 0x3c8]
push edx
push 0x100a7f4
mov eax, dword [ebp - 0x2a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2a4]
mov eax, dword [edx + 0x24]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10e041f
call fcn.010947d0
mov dword [ebp - 0x13e8], eax
push 0xab7
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100a8f8
mov edx, dword [ebp - 0x13e8]
push edx
mov eax, dword [ebp - 0x13e8]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
push 0x100a7f4
mov eax, dword [ebp - 0x2a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2a4]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2a4]
mov eax, dword [edx]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x40]
call eax
movzx ecx, ax
movzx edx, word [ebp - 0x10]
cmp ecx, edx
jne 0x10e05ce
mov word [ebp - 0x7cc], 0
push 0x1fe
push 0
lea eax, [ebp - 0x7ca]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov word [ebp - 0x9cc], 0
push 0x1fe
push 0
lea ecx, [ebp - 0x9ca]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
movzx edx, word [ebp - 0x10]
push edx
push 0x100cd38
lea eax, [ebp - 0x7cc]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
movzx ecx, word [ebp - 0x10]
push ecx
push 0x100cd14
lea edx, [ebp - 0x9cc]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
lea eax, [ebp - 0x7cc]
push eax
call fcn.010922c0
test eax, eax
jne 0x10e051c
call fcn.010947d0
mov dword [ebp - 0x13ec], eax
push 0xb42
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100ccf8
mov ecx, dword [ebp - 0x13ec]
push ecx
mov edx, dword [ebp - 0x13ec]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
lea edx, [ebp - 0x9cc]
push edx
call fcn.010922c0
test eax, eax
jne 0x10e0563
call fcn.010947d0
mov dword [ebp - 0x13f0], eax
push 0xb47
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100ccdc
mov eax, dword [ebp - 0x13f0]
push eax
mov ecx, dword [ebp - 0x13f0]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
mov cx, word [ebp - 0x10]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x14]
call eax
mov cx, word [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x10]
call edx
test eax, eax
jne 0x10e05ce
call fcn.010947d0
mov dword [ebp - 0x13f4], eax
movzx eax, word [ebp - 0x10]
push eax
push 0xb4d
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100ccb0
mov ecx, dword [ebp - 0x13f4]
push ecx
mov edx, dword [ebp - 0x13f4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0x10
cmp dword [ebp - 0x50], 1
jne 0x10e0667
mov dword [ebp - 0x9d0], 0
lea edx, [ebp - 0x9d0]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x58]
push ecx
mov dx, word [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x60]
push edx
mov eax, dword [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x1334]
call fcn.010dcf20
test eax, eax
jne 0x10e0640
xor eax, eax
jmp 0x10e2078
cmp dword [ebp - 0x9d0], 0
je 0x10e0662
push 0x64
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov eax, 1
jmp 0x10e2078
jmp 0x10e088c
cmp dword [ebp - 0x50], 5
je 0x10e0695
cmp dword [ebp - 0x50], 0xc
je 0x10e0695
cmp dword [ebp - 0x50], 0xa
je 0x10e0695
cmp dword [ebp - 0x50], 6
je 0x10e0695
cmp dword [ebp - 0x50], 7
je 0x10e0695
cmp dword [ebp - 0x50], 8
je 0x10e0695
cmp dword [ebp - 0x50], 9
jne 0x10e07c4
push 0x60
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
mov cx, word [ebp - 0x10]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0xa58], 0xffffffff
mov ecx, dword [ebp - 0x48]
push ecx
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
lea edx, [ebp - 0xa58]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx]
call eax
push 0x30
push 0
lea ecx, [ebp - 0xa54]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0xa54], 0xffffffff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0xa50], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0xa44], edx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xa3c], eax
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0xa38], ecx
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0xa4c], edx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xa48], eax
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0xa2c], ecx
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xa28], edx
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0xa34], eax
lea ecx, [ebp - 0xa54]
push ecx
lea ecx, [ebp - 0xa24]
call fcn.0111e550
mov dword [ebp - 4], 0
push 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x24]
call edx
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0xa24]
call fcn.0111e5a0
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0xa58]
push ecx
call fcn.01092350
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa24]
call fcn.01092b10
jmp 0x10e088c
cmp dword [ebp - 0x50], 2
je 0x10e07d6
cmp dword [ebp - 0x50], 3
je 0x10e07d6
cmp dword [ebp - 0x50], 0
jne 0x10e082f
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x58]
push eax
mov cx, word [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x54]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
mov edx, dword [ebp - 0x64]
push edx
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [ebp - 0x34]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x1334]
call fcn.010de350
test eax, eax
jne 0x10e082d
xor eax, eax
jmp 0x10e2078
jmp 0x10e088c
cmp dword [ebp - 0x50], 4
jne 0x10e088c
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x58]
push ecx
mov dx, word [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x60]
push edx
mov eax, dword [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x1334]
call fcn.010df190
test eax, eax
jne 0x10e088c
xor eax, eax
jmp 0x10e2078
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xa64], eax
mov dword [ebp - 0xa60], edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa68]
push ecx
mov edx, dword [ebp - 0xa60]
push edx
mov eax, dword [ebp - 0xa64]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
call fcn.010cb6e0
cmp dword [ebp - 0x24], 0
jne 0x10e09fe
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x4c]
jne 0x10e08f7
mov ecx, dword [ebp - 0x60]
cmp ecx, dword [ebp - 0x48]
je 0x10e09fe
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x13f8], eax
mov eax, dword [ebp + 8]
add eax, 0x24
push eax
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x13f8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x13f8]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1334]
call fcn.010d79a0
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x13fc], eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp - 0x13fc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x13fc]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1334]
call fcn.010d79a0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x14]
push edx
mov eax, dword [ecx + 0x10]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
push edx
mov eax, dword [ecx + 0x18]
push eax
mov ecx, dword [ebp - 0x38]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
call fcn.010e2090
test eax, eax
jne 0x10e09fe
call fcn.010947d0
mov dword [ebp - 0x1400], eax
push 0xbbc
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cc84
mov ecx, dword [ebp - 0x1400]
push ecx
mov edx, dword [ebp - 0x1400]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
push 0x25
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x20]
call edx
xor eax, eax
jmp 0x10e2078
push 4
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
cmp dword [ebp - 0x24], 0
je 0x10e1122
push 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp - 0x1c], 0
je 0x10e0a4c
call fcn.010e21b0
test eax, eax
jne 0x10e0a4c
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x28]
mov eax, dword [edx + 0x34]
call eax
push 0x1f4
call fcn.0108fe30
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1404], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1408], eax
mov ecx, dword [ebp - 0x1408]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1408]
mov eax, dword [edx + 0x28]
call eax
mov esi, eax
mov ecx, dword [ebp - 0x1404]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1404]
mov eax, dword [edx + 0x28]
call eax
cmp eax, esi
jne 0x10e0c64
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x140c], eax
mov ecx, dword [ebp - 0x140c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x140c]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10e0c64
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x58]
call eax
cmp dword [eax + 0x78], 0
jne 0x10e0c64
call fcn.010948f0
mov dword [ebp - 0xa74], eax
mov dword [ebp - 0xa70], 0
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1410], eax
mov ecx, dword [ebp - 0x1410]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1410]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0xa74]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa74]
mov eax, dword [edx]
call eax
test eax, eax
je 0x10e0c64
mov ecx, dword [ebp - 0xa74]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa74]
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 0xa78], eax
mov dword [ebp - 0xa7c], 0
jmp 0x10e0b71
mov ecx, dword [ebp - 0xa7c]
add ecx, 1
mov dword [ebp - 0xa7c], ecx
mov edx, dword [ebp - 0xa7c]
cmp edx, dword [ebp - 0xa78]
jae 0x10e0c64
cmp dword [ebp - 0xa70], 0
jne 0x10e0c64
mov eax, dword [ebp - 0xa7c]
push eax
mov ecx, dword [ebp - 0xa74]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa74]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0xa80], eax
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [ebp - 0xa80]
mov dword [ebp - 0x1414], ecx
mov dword [ebp - 0x141c], eax
mov dword [ebp - 0x1418], edx
mov edx, dword [ebp - 0x1414]
mov eax, dword [edx + 8]
cmp eax, dword [ebp - 0x141c]
jne 0x10e0c5f
mov ecx, dword [ebp - 0x1414]
mov edx, dword [ecx + 0xc]
cmp edx, dword [ebp - 0x1418]
jne 0x10e0c5f
mov esi, dword [ebp - 0xa80]
add esi, 0x78
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x58]
call eax
add eax, 0x78
mov ecx, dword [esi]
mov dword [eax], ecx
mov edx, dword [esi + 4]
mov dword [eax + 4], edx
mov ecx, dword [esi + 8]
mov dword [eax + 8], ecx
mov edx, dword [esi + 0xc]
mov dword [eax + 0xc], edx
mov esi, dword [ebp - 0xa80]
add esi, 0x68
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x58]
call eax
add eax, 0x68
mov ecx, dword [esi]
mov dword [eax], ecx
mov edx, dword [esi + 4]
mov dword [eax + 4], edx
mov ecx, dword [esi + 8]
mov dword [eax + 8], ecx
mov edx, dword [esi + 0xc]
mov dword [eax + 0xc], edx
mov dword [ebp - 0xa70], 1
jmp 0x10e0b62
mov eax, dword [ebp - 0x54]
push eax
push 0
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x28]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10e0d14
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1420], eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp - 0x1420]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1420]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1334]
call fcn.010d79a0
push 6
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
call fcn.010947d0
mov dword [ebp - 0x1424], eax
push 0xbeb
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cc58
mov ecx, dword [ebp - 0x1424]
push ecx
mov edx, dword [ebp - 0x1424]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10e2078
push 0x9c4
call fcn.0108fe30
cmp dword [ebp - 0x1c], 0
je 0x10e0d4e
mov edx, dword [ebp - 0x1334]
add edx, 0x878
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x94]
call eax
push 0x100cc18
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0xa84], 0x100cb60
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xc0]
call eax
mov dword [ebp - 0xa98], eax
xor ecx, ecx
mov byte [ebp - 0x1325], cl
lea edx, [ebp - 0x1325]
push edx
mov eax, dword [ebp - 0xa98]
push eax
lea ecx, [ebp - 0xa94]
call fcn.01089110
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0xa84]
push ecx
lea ecx, [ebp - 0xa94]
call fcn.0109e490
lea ecx, [ebp - 0xa94]
call fcn.01089160
push eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0xbc]
call edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa94]
call fcn.01089140
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1428], eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp - 0x1428]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1428]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1334]
call fcn.010d79a0
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
jne 0x10e0ee4
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x28]
call edx
push eax
mov ecx, dword [ebp - 0x1334]
call fcn.010d5fd0
test eax, eax
jne 0x10e0ee4
cmp dword [ebp - 0x1c], 0
jne 0x10e0edd
call fcn.010947d0
mov dword [ebp - 0x142c], eax
push 0xc0e
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cb30
mov eax, dword [ebp - 0x142c]
push eax
mov ecx, dword [ebp - 0x142c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
mov ecx, dword [ebp - 0x1334]
call fcn.010d64f0
push 0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x1334]
call fcn.010d58b0
xor eax, eax
jmp 0x10e2078
push 0x32
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
push eax
mov ecx, dword [ebp - 0x1334]
call fcn.010d7180
test eax, eax
je 0x10e0f1b
mov ecx, dword [ebp - 0x1334]
call fcn.010d64f0
push 0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x1334]
call fcn.010d58b0
test eax, eax
jne 0x10e0f76
call fcn.010947d0
mov dword [ebp - 0x1430], eax
push 0xc2a
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cb04
mov ecx, dword [ebp - 0x1430]
push ecx
mov edx, dword [ebp - 0x1430]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10e2078
lea ecx, [ebp - 0xa6c]
call fcn.01114a50
mov dword [ebp - 4], 2
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x1c]
push eax
mov ecx, dword [edx + 0x18]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x14]
push edx
mov eax, dword [ecx + 0x10]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
lea ecx, [ebp - 0xa6c]
call fcn.01114f60
test eax, eax
jne 0x10e0ff2
call fcn.010947d0
mov dword [ebp - 0x1434], eax
push 0xc31
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cad4
mov eax, dword [ebp - 0x1434]
push eax
mov ecx, dword [ebp - 0x1434]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
push 0
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.010cb0a0
test eax, eax
jne 0x10e106e
call fcn.010947d0
mov dword [ebp - 0x1438], eax
push 0xc37
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100ca98
mov edx, dword [ebp - 0x1438]
push edx
mov eax, dword [ebp - 0x1438]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
push 0x18
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x132c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa6c]
call fcn.01092b10
mov eax, dword [ebp - 0x132c]
jmp 0x10e2078
cmp dword [ebp - 0x1c], 0
jne 0x10e1086
push 0x1004afc
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x3c]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xc0]
call eax
mov dword [ebp - 0xaac], eax
xor ecx, ecx
mov byte [ebp - 0x132d], cl
lea edx, [ebp - 0x132d]
push edx
mov eax, dword [ebp - 0xaac]
push eax
lea ecx, [ebp - 0xaa8]
call fcn.01089110
mov byte [ebp - 4], 3
push 0x1001464
lea ecx, [ebp - 0xaa8]
call fcn.0109e490
lea ecx, [ebp - 0xaa8]
call fcn.01089160
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xbc]
call eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xaa8]
call fcn.01089140
push 0x64
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa6c]
call fcn.01092b10
jmp 0x10e11b2
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x143c], eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp - 0x54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x54]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp - 0x143c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x143c]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1334]
call fcn.010d79a0
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1440], eax
mov ecx, dword [ebp + 8]
add ecx, 0x24
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp - 0x1440]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1440]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x1334]
call fcn.010d79a0
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10e11fe
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1444], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x1444]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1444]
mov eax, dword [edx + 0x28]
call eax
push eax
call fcn.010ce9d0
mov ecx, dword [ebp - 0x64]
cmp ecx, dword [ebp - 0x4c]
jne 0x10e1212
mov edx, dword [ebp - 0x60]
cmp edx, dword [ebp - 0x48]
je 0x10e2073
cmp dword [ebp - 0x3c], 0
je 0x10e2073
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x64]
call eax
test eax, eax
je 0x10e1a61
mov dword [ebp - 0xdec], 0
mov dword [ebp - 0xcc4], 0
call fcn.0109c520
mov dword [ebp - 0xff0], eax
mov ecx, dword [ebp - 0xff0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xff0]
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1448], eax
mov ecx, dword [ebp - 0xff0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xff0]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x144c], eax
mov ecx, dword [ebp - 0x1448]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1448]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x144c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x144c]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xab8], eax
mov ecx, dword [ebp - 0xab8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xab8]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x1450], eax
mov ecx, dword [ebp - 0x1450]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1450]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xcc4], eax
cmp dword [ebp - 0xcc4], 0
je 0x10e1398
mov ecx, dword [ebp - 0xcc4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcc4]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x1458], esi
mov dword [ebp - 0x1454], edi
mov dword [ebp - 0x1460], eax
mov dword [ebp - 0x145c], edx
mov ecx, dword [ebp - 0x1458]
cmp ecx, dword [ebp - 0x1460]
jne 0x10e1361
mov edx, dword [ebp - 0x1454]
cmp edx, dword [ebp - 0x145c]
jne 0x10e1361
mov eax, dword [ebp - 0xcc4]
mov dword [ebp - 0xdec], eax
jmp 0x10e1398
mov ecx, dword [ebp - 0xab8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xab8]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x1464], eax
mov ecx, dword [ebp - 0x1464]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1464]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xcc4], eax
jmp 0x10e12ee
call fcn.01123d90
mov dword [ebp - 0xcc0], eax
mov byte [ebp - 0xde8], 0
xor ecx, ecx
mov dword [ebp - 0xde7], ecx
mov dword [ebp - 0xde3], ecx
mov dword [ebp - 0xddf], ecx
mov dword [ebp - 0xddb], ecx
mov dword [ebp - 0xdd7], ecx
mov dword [ebp - 0xdd3], ecx
mov dword [ebp - 0xdcf], ecx
mov dword [ebp - 0xdcb], ecx
mov edx, dword [ebp - 0x54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x54]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x1468], eax
mov eax, dword [ebp - 0x1468]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1468]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10e14a3
mov byte [ebp - 0xde8], 1
mov ecx, dword [ebp - 0xdec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xdec]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x146c], eax
mov ecx, dword [ebp - 0x146c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x146c]
mov eax, dword [edx + 0x8c]
call eax
mov ecx, dword [eax]
mov dword [ebp - 0xdd7], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0xdd3], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0xdcf], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0xdcb], edx
mov eax, dword [ebp - 0xdec]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xdec]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x16a
mov ecx, dword [eax]
mov dword [ebp - 0xde7], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0xde3], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0xddf], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0xddb], edx
jmp 0x10e1534
mov byte [ebp - 0xde8], 0
mov eax, dword [ebp - 0xdec]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xdec]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1470], eax
mov ecx, dword [ebp - 0x1470]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1470]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0xddf], eax
mov ecx, dword [ebp - 0xdec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xdec]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1474], eax
mov ecx, dword [ebp - 0x1474]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1474]
mov eax, dword [edx + 0x58]
call eax
mov esi, eax
xor edi, edi
mov ecx, dword [ebp - 0xdec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xdec]
mov eax, dword [edx + 0x1c]
call eax
push edi
push esi
push edx
push eax
call sub.ntdll.dll__allmul
mov dword [ebp - 0xde7], eax
mov dword [ebp - 0xde3], edx
call fcn.010946d0
mov dword [ebp - 0xab0], eax
mov word [ebp - 0xdc4], 0
push 0xfe
push 0
lea ecx, [ebp - 0xdc2]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0xdec]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xdec]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x1478], eax
mov eax, dword [ebp - 0xdec]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xdec]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x1478]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1478]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x80
lea ecx, [ebp - 0xdc4]
push ecx
mov edx, dword [ebp - 0xab0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xab0]
mov edx, dword [eax + 0x2c]
call edx
mov word [ebp - 0xcbc], 0
push 0x1fe
push 0
lea eax, [ebp - 0xcba]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
lea ecx, [ebp - 0xdc4]
push ecx
push 0x10085b8
lea edx, [ebp - 0xcbc]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
push 0
push 0x80
push 3
push 0
push 7
push 0xc0000000
lea eax, [ebp - 0xcbc]
push eax
call fcn.01091ef0
mov dword [ebp - 0xab4], eax
cmp dword [ebp - 0xab4], 0xffffffff
je 0x10e165e
mov dword [ebp - 0xff4], 0
push 0
lea ecx, [ebp - 0xff4]
push ecx
push 0
push 0
push 0
push 0
push 0x56c008
mov edx, dword [ebp - 0xab4]
push edx
call fcn.010927b0
mov eax, dword [ebp - 0xab4]
push eax
call fcn.01092350
mov word [ebp - 0xfec], 0
push 0x1fe
push 0
lea ecx, [ebp - 0xfea]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x147c], eax
mov eax, dword [ebp - 0x147c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x147c]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10e1807
lea ecx, [ebp - 0xfec]
add ecx, 0xfffffffe
mov dword [ebp - 0x1480], ecx
mov edx, dword [ebp - 0x1480]
mov ax, word [edx + 2]
mov word [ebp - 0x1482], ax
add dword [ebp - 0x1480], 2
cmp word [ebp - 0x1482], 0
jne 0x10e16ba
mov edi, dword [ebp - 0x1480]
mov ecx, dword [0x100a8ac]
mov dword [edi], ecx
mov edx, dword [0x100a8b0]
mov dword [edi + 4], edx
mov eax, dword [0x100a8b4]
mov dword [edi + 8], eax
mov ecx, dword [0x100a8b8]
mov dword [edi + 0xc], ecx
mov edx, dword [0x100a8bc]
mov dword [edi + 0x10], edx
mov ax, word [0x100a8c0]
mov word [edi + 0x14], ax
lea ecx, [ebp - 0xdc4]
mov dword [ebp - 0x1488], ecx
mov edx, dword [ebp - 0x1488]
mov dword [ebp - 0x148c], edx
mov eax, dword [ebp - 0x1488]
mov cx, word [eax]
mov word [ebp - 0x148e], cx
add dword [ebp - 0x1488], 2
cmp word [ebp - 0x148e], 0
jne 0x10e172f
mov edx, dword [ebp - 0x1488]
sub edx, dword [ebp - 0x148c]
mov eax, dword [ebp - 0x148c]
mov dword [ebp - 0x1494], eax
mov dword [ebp - 0x1498], edx
lea ecx, [ebp - 0xfec]
add ecx, 0xfffffffe
mov dword [ebp - 0x149c], ecx
mov edx, dword [ebp - 0x149c]
mov ax, word [edx + 2]
mov word [ebp - 0x149e], ax
add dword [ebp - 0x149c], 2
cmp word [ebp - 0x149e], 0
jne 0x10e177d
mov edi, dword [ebp - 0x149c]
mov esi, dword [ebp - 0x1494]
mov edx, dword [ebp - 0x1498]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0xfec]
add eax, 0xfffffffe
mov dword [ebp - 0x14a4], eax
mov ecx, dword [ebp - 0x14a4]
mov dx, word [ecx + 2]
mov word [ebp - 0x14a6], dx
add dword [ebp - 0x14a4], 2
cmp word [ebp - 0x14a6], 0
jne 0x10e17ce
mov edi, dword [ebp - 0x14a4]
mov ecx, 0xc
mov esi, 0x100a87c
rep movsd dword es:[edi], dword [esi]
jmp 0x10e197d
lea eax, [ebp - 0xfec]
add eax, 0xfffffffe
mov dword [ebp - 0x14ac], eax
mov ecx, dword [ebp - 0x14ac]
mov dx, word [ecx + 2]
mov word [ebp - 0x14ae], dx
add dword [ebp - 0x14ac], 2
cmp word [ebp - 0x14ae], 0
jne 0x10e1816
mov edi, dword [ebp - 0x14ac]
mov eax, dword [0x100a8ac]
mov dword [edi], eax
mov ecx, dword [0x100a8b0]
mov dword [edi + 4], ecx
mov edx, dword [0x100a8b4]
mov dword [edi + 8], edx
mov eax, dword [0x100a8b8]
mov dword [edi + 0xc], eax
mov ecx, dword [0x100a8bc]
mov dword [edi + 0x10], ecx
mov dx, word [0x100a8c0]
mov word [edi + 0x14], dx
lea eax, [ebp - 0xdc4]
mov dword [ebp - 0x14b4], eax
mov ecx, dword [ebp - 0x14b4]
mov dword [ebp - 0x14b8], ecx
mov edx, dword [ebp - 0x14b4]
mov ax, word [edx]
mov word [ebp - 0x14ba], ax
add dword [ebp - 0x14b4], 2
cmp word [ebp - 0x14ba], 0
jne 0x10e188b
mov ecx, dword [ebp - 0x14b4]
sub ecx, dword [ebp - 0x14b8]
mov edx, dword [ebp - 0x14b8]
mov dword [ebp - 0x14c0], edx
mov dword [ebp - 0x14c4], ecx
lea eax, [ebp - 0xfec]
add eax, 0xfffffffe
mov dword [ebp - 0x14c8], eax
mov ecx, dword [ebp - 0x14c8]
mov dx, word [ecx + 2]
mov word [ebp - 0x14ca], dx
add dword [ebp - 0x14c8], 2
cmp word [ebp - 0x14ca], 0
jne 0x10e18d9
mov edi, dword [ebp - 0x14c8]
mov esi, dword [ebp - 0x14c0]
mov eax, dword [ebp - 0x14c4]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0xfec]
add ecx, 0xfffffffe
mov dword [ebp - 0x14d0], ecx
mov edx, dword [ebp - 0x14d0]
mov ax, word [edx + 2]
mov word [ebp - 0x14d2], ax
add dword [ebp - 0x14d0], 2
cmp word [ebp - 0x14d2], 0
jne 0x10e192a
mov edi, dword [ebp - 0x14d0]
mov ecx, dword [0x100a838]
mov dword [edi], ecx
mov edx, dword [0x100a83c]
mov dword [edi + 4], edx
mov eax, dword [0x100a840]
mov dword [edi + 8], eax
mov ecx, dword [0x100a844]
mov dword [edi + 0xc], ecx
mov edx, dword [0x100a848]
mov dword [edi + 0x10], edx
push 0x100a7f4
mov eax, dword [ebp - 0xcc0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xcc0]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [ebp - 0xfec]
push ecx
push 0x100a7f4
mov edx, dword [ebp - 0xcc0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xcc0]
mov edx, dword [eax + 0xc]
call edx
lea eax, [ebp - 0xde8]
push eax
push 0x100a7f4
mov ecx, dword [ebp - 0xcc0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcc0]
mov eax, dword [edx + 8]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10e1a37
lea edx, [ebp - 0xde8]
push edx
push 0x100a7f4
mov eax, dword [ebp - 0xcc0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xcc0]
mov eax, dword [edx + 0x24]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10e1a37
call fcn.010947d0
mov dword [ebp - 0x14d8], eax
push 0xca4
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100a8f8
mov edx, dword [ebp - 0x14d8]
push edx
mov eax, dword [ebp - 0x14d8]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
push 0x100a7f4
mov eax, dword [ebp - 0xcc0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xcc0]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [ebp - 0xcc0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcc0]
mov eax, dword [edx]
call eax
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10e2073
call fcn.01123d90
mov dword [ebp - 0xffc], eax
mov byte [ebp - 0x1120], 0
xor ecx, ecx
mov dword [ebp - 0x111f], ecx
mov dword [ebp - 0x111b], ecx
mov dword [ebp - 0x1117], ecx
mov dword [ebp - 0x1113], ecx
mov dword [ebp - 0x110f], ecx
mov dword [ebp - 0x110b], ecx
mov dword [ebp - 0x1107], ecx
mov dword [ebp - 0x1103], ecx
mov edx, dword [ebp - 0x54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x54]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x14dc], eax
mov eax, dword [ebp - 0x14dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14dc]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10e1b72
mov byte [ebp - 0x1120], 1
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x14e0], eax
mov ecx, dword [ebp - 0x14e0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14e0]
mov eax, dword [edx + 0x8c]
call eax
mov ecx, dword [eax]
mov dword [ebp - 0x110f], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x110b], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1107], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x1103], edx
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x16a
mov ecx, dword [eax]
mov dword [ebp - 0x111f], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x111b], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1117], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x1113], edx
jmp 0x10e1bf1
mov byte [ebp - 0x1120], 0
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x14e4], eax
mov ecx, dword [ebp - 0x14e4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14e4]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x1117], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x14e8], eax
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14e8]
mov eax, dword [edx + 0x58]
call eax
mov esi, eax
xor edi, edi
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
push edi
push esi
push edx
push eax
call sub.ntdll.dll__allmul
mov dword [ebp - 0x111f], eax
mov dword [ebp - 0x111b], edx
call fcn.010946d0
mov dword [ebp - 0xff8], eax
mov word [ebp - 0x10fc], 0
push 0xfe
push 0
lea ecx, [ebp - 0x10fa]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x14ec], eax
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x14ec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14ec]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x80
lea ecx, [ebp - 0x10fc]
push ecx
mov edx, dword [ebp - 0xff8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xff8]
mov edx, dword [eax + 0x2c]
call edx
mov word [ebp - 0x1324], 0
push 0x1fe
push 0
lea eax, [ebp - 0x1322]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x14f0], eax
mov ecx, dword [ebp - 0x14f0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14f0]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10e1e19
lea ecx, [ebp - 0x1324]
add ecx, 0xfffffffe
mov dword [ebp - 0x14f4], ecx
mov edx, dword [ebp - 0x14f4]
mov ax, word [edx + 2]
mov word [ebp - 0x14f6], ax
add dword [ebp - 0x14f4], 2
cmp word [ebp - 0x14f6], 0
jne 0x10e1ccc
mov edi, dword [ebp - 0x14f4]
mov ecx, dword [0x100a8ac]
mov dword [edi], ecx
mov edx, dword [0x100a8b0]
mov dword [edi + 4], edx
mov eax, dword [0x100a8b4]
mov dword [edi + 8], eax
mov ecx, dword [0x100a8b8]
mov dword [edi + 0xc], ecx
mov edx, dword [0x100a8bc]
mov dword [edi + 0x10], edx
mov ax, word [0x100a8c0]
mov word [edi + 0x14], ax
lea ecx, [ebp - 0x10fc]
mov dword [ebp - 0x14fc], ecx
mov edx, dword [ebp - 0x14fc]
mov dword [ebp - 0x1500], edx
mov eax, dword [ebp - 0x14fc]
mov cx, word [eax]
mov word [ebp - 0x1502], cx
add dword [ebp - 0x14fc], 2
cmp word [ebp - 0x1502], 0
jne 0x10e1d41
mov edx, dword [ebp - 0x14fc]
sub edx, dword [ebp - 0x1500]
mov eax, dword [ebp - 0x1500]
mov dword [ebp - 0x1508], eax
mov dword [ebp - 0x150c], edx
lea ecx, [ebp - 0x1324]
add ecx, 0xfffffffe
mov dword [ebp - 0x1510], ecx
mov edx, dword [ebp - 0x1510]
mov ax, word [edx + 2]
mov word [ebp - 0x1512], ax
add dword [ebp - 0x1510], 2
cmp word [ebp - 0x1512], 0
jne 0x10e1d8f
mov edi, dword [ebp - 0x1510]
mov esi, dword [ebp - 0x1508]
mov edx, dword [ebp - 0x150c]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x1324]
add eax, 0xfffffffe
mov dword [ebp - 0x1518], eax
mov ecx, dword [ebp - 0x1518]
mov dx, word [ecx + 2]
mov word [ebp - 0x151a], dx
add dword [ebp - 0x1518], 2
cmp word [ebp - 0x151a], 0
jne 0x10e1de0
mov edi, dword [ebp - 0x1518]
mov ecx, 0xc
mov esi, 0x100a87c
rep movsd dword es:[edi], dword [esi]
jmp 0x10e1f8f
lea eax, [ebp - 0x1324]
add eax, 0xfffffffe
mov dword [ebp - 0x1520], eax
mov ecx, dword [ebp - 0x1520]
mov dx, word [ecx + 2]
mov word [ebp - 0x1522], dx
add dword [ebp - 0x1520], 2
cmp word [ebp - 0x1522], 0
jne 0x10e1e28
mov edi, dword [ebp - 0x1520]
mov eax, dword [0x100a8ac]
mov dword [edi], eax
mov ecx, dword [0x100a8b0]
mov dword [edi + 4], ecx
mov edx, dword [0x100a8b4]
mov dword [edi + 8], edx
mov eax, dword [0x100a8b8]
mov dword [edi + 0xc], eax
mov ecx, dword [0x100a8bc]
mov dword [edi + 0x10], ecx
mov dx, word [0x100a8c0]
mov word [edi + 0x14], dx
lea eax, [ebp - 0x10fc]
mov dword [ebp - 0x1528], eax
mov ecx, dword [ebp - 0x1528]
mov dword [ebp - 0x152c], ecx
mov edx, dword [ebp - 0x1528]
mov ax, word [edx]
mov word [ebp - 0x152e], ax
add dword [ebp - 0x1528], 2
cmp word [ebp - 0x152e], 0
jne 0x10e1e9d
mov ecx, dword [ebp - 0x1528]
sub ecx, dword [ebp - 0x152c]
mov edx, dword [ebp - 0x152c]
mov dword [ebp - 0x1534], edx
mov dword [ebp - 0x1538], ecx
lea eax, [ebp - 0x1324]
add eax, 0xfffffffe
mov dword [ebp - 0x153c], eax
mov ecx, dword [ebp - 0x153c]
mov dx, word [ecx + 2]
mov word [ebp - 0x153e], dx
add dword [ebp - 0x153c], 2
cmp word [ebp - 0x153e], 0
jne 0x10e1eeb
mov edi, dword [ebp - 0x153c]
mov esi, dword [ebp - 0x1534]
mov eax, dword [ebp - 0x1538]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x1324]
add ecx, 0xfffffffe
mov dword [ebp - 0x1544], ecx
mov edx, dword [ebp - 0x1544]
mov ax, word [edx + 2]
mov word [ebp - 0x1546], ax
add dword [ebp - 0x1544], 2
cmp word [ebp - 0x1546], 0
jne 0x10e1f3c
mov edi, dword [ebp - 0x1544]
mov ecx, dword [0x100a838]
mov dword [edi], ecx
mov edx, dword [0x100a83c]
mov dword [edi + 4], edx
mov eax, dword [0x100a840]
mov dword [edi + 8], eax
mov ecx, dword [0x100a844]
mov dword [edi + 0xc], ecx
mov edx, dword [0x100a848]
mov dword [edi + 0x10], edx
push 0x100a7f4
mov eax, dword [ebp - 0xffc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xffc]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [ebp - 0x1324]
push ecx
push 0x100a7f4
mov edx, dword [ebp - 0xffc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xffc]
mov edx, dword [eax + 0xc]
call edx
lea eax, [ebp - 0x1120]
push eax
push 0x100a7f4
mov ecx, dword [ebp - 0xffc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xffc]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10e2049
lea edx, [ebp - 0x1120]
push edx
push 0x100a7f4
mov eax, dword [ebp - 0xffc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xffc]
mov eax, dword [edx + 0x20]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10e2049
call fcn.010947d0
mov dword [ebp - 0x154c], eax
push 0xcd5
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100a8f8
mov edx, dword [ebp - 0x154c]
push edx
mov eax, dword [ebp - 0x154c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
push 0x100a7f4
mov eax, dword [ebp - 0xffc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xffc]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [ebp - 0xffc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xffc]
mov eax, dword [edx]
call eax
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8