Function at 0x10af670
Capabilities:
Parse pe header

Disassembly:
push 0x778
mov eax, 0x10dda8c
call fcn.010b53fd
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
xor ebx, ebx
push ebx
push ebx
push 1
push ebx
mov dword [ebp - 0x430], ebx
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
push 0x8001
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [ebp - 0x42c], ebx
mov dword [ebp - 0x428], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x3dc], ebx
mov dword [ebp - 0x3d8], ebx
mov dword [ebp - 0x3f0], ebx
mov dword [ebp - 0x3ec], ebx
mov dword [ebp - 0x468], ebx
mov dword [ebp - 0x464], ebx
mov dword [ebp - 0x424], ebx
mov dword [ebp - 0x420], ebx
mov dword [ebp - 0x440], ebx
mov dword [ebp - 0x43c], ebx
mov dword [ebp - 0x3d4], ebx
mov dword [ebp - 0x3d0], ebx
mov dword [ebp - 0x3e8], ebx
mov dword [ebp - 0x3e4], ebx
mov dword [ebp - 0x448], ebx
mov dword [ebp - 0x444], ebx
mov dword [ebp - 0x458], ebx
mov dword [ebp - 0x454], ebx
mov dword [ebp - 0x450], ebx
mov dword [ebp - 0x44c], ebx
push 0x102f6c8
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0xa
call fcn.01033a48
push 4
mov byte [ebp - 4], 0xb
mov byte [ebp - 0x3dd], bl
call fcn.010b2945
pop ecx
mov dword [ebp - 0x3c8], eax
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x10af767
mov ecx, eax
call fcn.0103e6b5
jmp 0x10af769
xor eax, eax
push eax
lea ecx, [ebp - 0x414]
mov byte [ebp - 4], 0xb
call fcn.0109c558
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0xd
call fcn.01058439
mov ecx, dword [ebp - 0x410]
mov byte [ebp - 4], 0xb
cmp ecx, ebx
je 0x10af79c
call fcn.0103d6e8
push ebx
push ebx
mov byte [ebp - 4], 0xe
call dword [sym.imp.ole32.dll_CoInitializeEx]
cmp eax, ebx
push ebx
jge 0x10af7e1
push 8
lea ecx, [ebp - 0x84]
call fcn.01033bfc
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0xf
call fcn.010907af
push 0x10de07c
lea eax, [ebp - 0x578]
push eax
call fcn.010b4e4c
push ebx
push ebx
push ebx
lea eax, [ebp - 0x494]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
push 4
call fcn.010ad178
push ebx
push esi
push ebx
mov ecx, 0x10f3e40
call fcn.010ad384
cmp eax, ebx
jge 0x10af840
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 9
lea ecx, [ebp - 0x84]
call fcn.01033bfc
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x5b4]
mov byte [ebp - 4], 0x10
call fcn.010907af
push 0x10de07c
lea eax, [ebp - 0x5b4]
jmp 0x10af7db
push 0x1f4
call fcn.010b2945
pop ecx
mov ecx, eax
mov dword [ebp - 0x3c8], ecx
mov byte [ebp - 4], 0x11
cmp ecx, ebx
je 0x10af862
call fcn.0103b6e6
jmp 0x10af864
xor eax, eax
push eax
lea ecx, [ebp - 0x414]
mov byte [ebp - 4], 0xe
call fcn.0103ecb4
push eax
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x12
call fcn.01058439
mov ecx, dword [ebp - 0x410]
mov byte [ebp - 4], 0xe
cmp ecx, ebx
je 0x10af897
call fcn.0103d6e8
mov eax, dword [ebp - 0x424]
push 0xffffffffffffffff
add eax, 0x48
push ebx
push eax
lea ecx, [ebp - 0xfc]
call fcn.0103365f
call fcn.0103c082
push 0x33c
call fcn.010b2945
pop ecx
mov ecx, eax
mov dword [ebp - 0x3c8], ecx
mov byte [ebp - 4], 0x13
cmp ecx, ebx
je 0x10af8d6
call fcn.01049694
jmp 0x10af8d8
xor eax, eax
push eax
lea ecx, [ebp - 0x414]
mov byte [ebp - 4], 0xe
call fcn.0104a5a7
push eax
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x14
call fcn.01058439
mov ecx, dword [ebp - 0x410]
mov byte [ebp - 4], 0xe
cmp ecx, ebx
je 0x10af90b
call fcn.0103d6e8
lea ecx, [ebp - 0xa8]
call fcn.01033230
mov byte [ebp - 4], 0x15
cmp edi, ebx
je 0x10af92a
push edi
lea ecx, [ebp - 0xa8]
call fcn.0103389a
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.0104a9f9
mov eax, dword [ebp - 0x3dc]
cmp byte [eax + 0xfc], bl
je 0x10afa41
lea ecx, [ebp - 0x12c]
call fcn.01033ca5
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x16
call fcn.01045dcd
cmp dword [ebp - 0x58], 8
mov eax, dword [ebp - 0x6c]
jae 0x10af973
lea eax, [ebp - 0x6c]
push eax
push 0x100c648
call fcn.010b57ed
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.01032f16
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x15
call fcn.01033453
push ebx
push 1
lea ecx, [ebp - 0xa8]
call fcn.01032f16
push ebx
push 1
lea ecx, [ebp - 0xfc]
call fcn.01032f16
mov ecx, dword [ebp - 0x3e4]
mov byte [ebp - 4], 6
cmp ecx, ebx
je 0x10af9c9
call fcn.0103d6e8
mov ecx, dword [ebp - 0x3d0]
mov byte [ebp - 4], 5
cmp ecx, ebx
je 0x10af9dc
call fcn.0103d6e8
mov ecx, dword [ebp - 0x43c]
mov byte [ebp - 4], 4
cmp ecx, ebx
je 0x10af9ef
call fcn.0103d6e8
mov ecx, dword [ebp - 0x420]
mov byte [ebp - 4], 3
cmp ecx, ebx
je 0x10afa02
call fcn.0103d6e8
mov ecx, dword [ebp - 0x3ec]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x10afa15
call fcn.0103d6e8
mov ecx, dword [ebp - 0x3d8]
mov byte [ebp - 4], bl
cmp ecx, ebx
je 0x10afa27
call fcn.0103d6e8
mov ecx, dword [ebp - 0x428]
or dword [ebp - 4], 0xffffffff
cmp ecx, ebx
je 0x10afa3a
call fcn.0103d6e8
xor eax, eax
jmp 0x10b2733
push 0x10
call fcn.010b2945
pop ecx
mov ecx, eax
mov dword [ebp - 0x3c8], ecx
xor edi, edi
mov byte [ebp - 4], 0x17
cmp ecx, ebx
je 0x10afa6b
push 0x102f668
push ebx
inc edi
push edi
push ebx
call fcn.010a45eb
jmp 0x10afa6e
xor eax, eax
inc edi
push eax
lea ecx, [ebp - 0x414]
mov byte [ebp - 4], 0x15
call fcn.0109c558
push eax
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x18
call fcn.01058439
mov ecx, dword [ebp - 0x410]
mov byte [ebp - 4], 0x15
cmp ecx, ebx
je 0x10afaa1
call fcn.0103d6e8
push 0x10
call fcn.010b2945
pop ecx
mov ecx, eax
mov dword [ebp - 0x3c8], ecx
mov byte [ebp - 4], 0x19
cmp ecx, ebx
je 0x10afac8
push 0x102f608
push ebx
push edi
push ebx
call fcn.010a45eb
jmp 0x10afaca
xor eax, eax
push eax
lea ecx, [ebp - 0x414]
mov byte [ebp - 4], 0x15
call fcn.0109c558
push eax
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x1a
call fcn.01058439
mov ecx, dword [ebp - 0x410]
mov byte [ebp - 4], 0x15
cmp ecx, ebx
je 0x10afafd
call fcn.0103d6e8
mov eax, dword [ebp - 0x3dc]
cmp byte [eax + 0x101], bl
mov eax, dword [ebp - 0x458]
je 0x10afb49
cmp byte [eax + 0xc], bl
jne 0x10afb2c
mov eax, dword [ebp - 0x450]
cmp byte [eax + 0xc], bl
jne 0x10afb2c
lea ecx, [ebp - 0x458]
jmp 0x10afc4b
push ebx
push edi
lea ecx, [ebp - 0x58c]
call fcn.01033bfc
push 0x10de07c
lea eax, [ebp - 0x58c]
jmp 0x10af7db
cmp byte [eax + 0xc], bl
je 0x10afb6b
push ebx
push edi
lea ecx, [ebp - 0x5a0]
call fcn.01033bfc
push 0x10de07c
lea eax, [ebp - 0x5a0]
jmp 0x10af7db
mov eax, dword [ebp - 0x450]
cmp byte [eax + 0xc], bl
je 0x10afc45
push ebx
push edi
lea ecx, [ebp - 0xa8]
call fcn.01032f16
push ebx
push edi
lea ecx, [ebp - 0xfc]
call fcn.01032f16
mov ecx, dword [ebp - 0x44c]
mov byte [ebp - 4], 9
cmp ecx, ebx
je 0x10afba7
call fcn.0103d6e8
mov ecx, dword [ebp - 0x454]
mov byte [ebp - 4], 8
cmp ecx, ebx
je 0x10afbba
call fcn.0103d6e8
mov ecx, dword [ebp - 0x3e4]
mov byte [ebp - 4], 6
cmp ecx, ebx
je 0x10afbcd
call fcn.0103d6e8
mov ecx, dword [ebp - 0x3d0]
mov byte [ebp - 4], 5
cmp ecx, ebx
je 0x10afbe0
call fcn.0103d6e8
mov ecx, dword [ebp - 0x43c]
mov byte [ebp - 4], 4
cmp ecx, ebx
je 0x10afbf3
call fcn.0103d6e8
mov ecx, dword [ebp - 0x420]
mov byte [ebp - 4], 3
cmp ecx, ebx
je 0x10afc06
call fcn.0103d6e8
mov ecx, dword [ebp - 0x3ec]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x10afc19
call fcn.0103d6e8
mov ecx, dword [ebp - 0x3d8]
mov byte [ebp - 4], bl
cmp ecx, ebx
je 0x10afc2b
call fcn.0103d6e8
mov ecx, dword [ebp - 0x428]
or dword [ebp - 4], 0xffffffff
cmp ecx, ebx
je 0x10afc3e
call fcn.0103d6e8
mov eax, edi
jmp 0x10b2733
lea ecx, [ebp - 0x450]
call fcn.010a43a1
push 0x126c
call fcn.010b2945
pop ecx
mov ecx, eax
mov dword [ebp - 0x3c8], ecx
mov byte [ebp - 4], 0x1b
cmp ecx, ebx
je 0x10afc8d
lea eax, [ebp - 0x42c]
push eax
mov eax, dword [ebp - 0x3dc]
movzx edx, byte [eax + 0x100]
push edx
add eax, 0xc4
push eax
call fcn.0103f918
jmp 0x10afc8f
xor eax, eax
push eax
lea ecx, [ebp - 0x414]
mov byte [ebp - 4], 0x15
call fcn.0109c558
push eax
lea ecx, [ebp - 0x3f0]
mov byte [ebp - 4], 0x1c
call fcn.01058439
mov ecx, dword [ebp - 0x410]
mov byte [ebp - 4], 0x15
cmp ecx, ebx
je 0x10afcc2
call fcn.0103d6e8
mov eax, dword [ebp - 0x3dc]
cmp byte [eax + 0xff], bl
je 0x10afce9
lea ecx, [eax + 0xc4]
push ebx
push ecx
mov ecx, dword [ebp - 0x3f0]
add eax, 0xe0
push eax
call fcn.0103ed45
push ebx
push edi
lea ecx, [ebp - 0xa8]
call fcn.01032f16
mov eax, dword [ebp - 0x3dc]
cmp byte [eax + 0xfd], bl
mov ecx, dword [ebp - 0x3f0]
mov esi, eax
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x460], esi
mov dword [ebp - 0x3c0], ecx
sete byte [ebp - 0x3c2]
mov dword [ebp - 0x470], ebx
mov dword [ebp - 0x46c], ebx
mov dword [ebp - 0x438], ebx
mov dword [ebp - 0x434], ebx
mov dword [ebp - 0x414], ebx
mov dword [ebp - 0x410], ebx
mov byte [ebp - 4], 0x2d
mov byte [ebp - 0x3c9], 1
mov byte [ebp - 0x3c3], bl
cmp byte [ebp - 0x3c9], bl
je 0x10afecd
mov byte [ebp - 0x3c9], bl
lea ecx, [ebp - 0x70]
cmp byte [ebp - 0x3c2], bl
je 0x10afda3
push 0x102f558
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push edi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x2e
call fcn.0103f3bb
push ebx
push edi
lea ecx, [ebp - 0x70]
call fcn.01032f16
jmp 0x10afe23
push 0x102f4b0
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push edi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x2f
call fcn.0103f3bb
push ebx
push edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2d
call fcn.01032f16
push 0x30
call fcn.010b2945
pop ecx
mov dword [ebp - 0x3c8], eax
mov byte [ebp - 4], 0x30
cmp eax, ebx
je 0x10afdee
mov ecx, eax
call fcn.01033ca5
jmp 0x10afdf0
xor eax, eax
push eax
lea ecx, [ebp - 0x4f4]
mov byte [ebp - 4], 0x2d
call fcn.0109c558
push eax
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x31
call fcn.01058439
mov ecx, dword [ebp - 0x4f0]
mov byte [ebp - 4], 0x2d
cmp ecx, ebx
je 0x10afe23
call fcn.0103d6e8
mov byte [ebp - 4], 0x32
cmp byte [esi + 0x284], bl
je 0x10b002e
push 0x102f480
call fcn.010b57ed
lea eax, [esi + 0x288]
cmp dword [eax + 0x18], 8
pop ecx
mov dword [ebp - 0x3c8], eax
jb 0x10afe55
mov eax, dword [eax + 4]
jmp 0x10afe58
add eax, 4
push eax
push 0x102f430
call fcn.010b57ed
lea edi, [esi + 0x2a4]
cmp dword [edi + 0x18], 8
pop ecx
pop ecx
jb 0x10afe76
mov eax, dword [edi + 4]
jmp 0x10afe79
lea eax, [edi + 4]
push eax
push 0x102f3e0
call fcn.010b57ed
add esi, 0x2c0
cmp dword [esi + 0x18], 8
pop ecx
pop ecx
jb 0x10afe97
mov eax, dword [esi + 4]
jmp 0x10afe9a
lea eax, [esi + 4]
push eax
push 0x102f388
call fcn.010b57ed
pop ecx
pop ecx
push esi
push edi
push dword [ebp - 0x3c8]
lea eax, [ebp - 0x3f0]
push eax
call fcn.0103e47f
push 0x102f338
call fcn.010b57ed
xor edi, edi
pop ecx
mov byte [ebp - 4], 0x2d
inc edi
mov ecx, dword [ebp - 0x3c0]
call fcn.0103ef29
push 0x10015b4
lea ecx, [ebp - 0x40c]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push edi
lea eax, [ebp - 0x40c]
push eax
mov byte [ebp - 4], 0xc5
call fcn.0103f3bb
push ebx
push edi
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x2d
call fcn.01032f16
push 0x102f2d8
lea ecx, [ebp - 0xe0]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push edi
lea eax, [ebp - 0xe0]
push eax
mov byte [ebp - 4], 0xc6
call fcn.0103f3bb
push ebx
push edi
lea ecx, [ebp - 0xe0]
call fcn.01032f16
mov ecx, 0x10f3e40
call fcn.010ad630
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x410]
mov byte [ebp - 4], 0x2c
cmp ecx, ebx
je 0x10aff67
call fcn.0103d6e8
mov ecx, dword [ebp - 0x434]
mov byte [ebp - 4], 0x2b
cmp ecx, ebx
je 0x10aff7a
call fcn.0103d6e8
mov ecx, dword [ebp - 0x46c]
mov byte [ebp - 4], 0xb
cmp ecx, ebx
je 0x10aff8d
call fcn.0103d6e8
push ebx
push edi
lea ecx, [ebp - 0xfc]
call fcn.01032f16
mov ecx, dword [ebp - 0x44c]
mov byte [ebp - 4], 9
cmp ecx, ebx
je 0x10affad
call fcn.0103d6e8
mov ecx, dword [ebp - 0x454]
mov byte [ebp - 4], 8
cmp ecx, ebx
je 0x10affc0
call fcn.0103d6e8
mov ecx, dword [ebp - 0x444]
mov byte [ebp - 4], 7
cmp ecx, ebx
je 0x10affd3
call fcn.0103d6e8
mov ecx, dword [ebp - 0x3e4]
mov byte [ebp - 4], 6
cmp ecx, ebx
je 0x10affe6
call fcn.0103d6e8
mov ecx, dword [ebp - 0x3d0]
mov byte [ebp - 4], 5
cmp ecx, ebx
je 0x10afff9
call fcn.0103d6e8
mov ecx, dword [ebp - 0x43c]
mov byte [ebp - 4], 4
cmp ecx, ebx
je 0x10b000c
call fcn.0103d6e8
mov ecx, dword [ebp - 0x420]
mov byte [ebp - 4], 3
cmp ecx, ebx
je 0x10b001f
call fcn.0103d6e8
mov ecx, dword [ebp - 0x464]
mov byte [ebp - 4], 2
jmp 0x10af9f9
push 0x102f280
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push edi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x33
call fcn.0103f3bb
push ebx
push edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push 0x10015b4
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push edi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x34
call fcn.0103f3bb
push ebx
push edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
cmp dword [esi + 0xc0], 8
jb 0x10b009d
mov eax, dword [esi + 0xac]
jmp 0x10b00a3
lea eax, [esi + 0xac]
push eax
push 0x102f238
push dword [ebp - 0x3c0]
call fcn.0103f3fe
add esp, 0xc
cmp dword [esi + 0x88], 8
jb 0x10b00c5
mov eax, dword [esi + 0x74]
jmp 0x10b00c8
lea eax, [esi + 0x74]
push eax
push 0x102f1f0
push dword [ebp - 0x3c0]
call fcn.0103f3fe
lea eax, [esi + 0x8c]
add esp, 0xc
cmp dword [eax + 0x18], 8
jb 0x10b00ed
mov eax, dword [eax + 4]
jmp 0x10b00f0
add eax, 4
push eax
push 0x102f1a8
push dword [ebp - 0x3c0]
call fcn.0103f3fe
add esp, 0xc
push 0x10015b4
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push edi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x35
call fcn.0103f3bb
push ebx
push edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
cmp byte [ebp - 0x3c2], bl
jne 0x10b01c6
push 0x102f280
call fcn.010b57ed
mov dword [esp], 0x10015b4
call fcn.010b57ed
lea eax, [esi + 0xc4]
cmp dword [eax + 0x18], 8
pop ecx
jb 0x10b0167
mov eax, dword [eax + 4]
jmp 0x10b016a
add eax, 4
push eax
push 0x102f160
call fcn.010b57ed
cmp dword [esi + 0xc0], 8
pop ecx
pop ecx
jb 0x10b0188
mov eax, dword [esi + 0xac]
jmp 0x10b018e
lea eax, [esi + 0xac]
push eax
push 0x102f238
call fcn.010b57ed
cmp dword [esi + 0x88], 8
pop ecx
pop ecx
jb 0x10b01a9
mov eax, dword [esi + 0x74]
jmp 0x10b01ac
lea eax, [esi + 0x74]
push eax
push 0x102f1f0
call fcn.010b57ed
push 0x10015b4
call fcn.010b57ed
add esp, 0xc
jmp 0x10b021a
push 0x6c
call fcn.010b2945
pop ecx
mov ecx, eax
mov dword [ebp - 0x3c8], ecx
mov byte [ebp - 4], 0x36
cmp ecx, ebx
je 0x10b01e5
call fcn.010af56a
jmp 0x10b01e7
xor eax, eax
push eax
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 4], 0x32
call fcn.010af38e
push eax
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x37
call fcn.01058439
mov ecx, dword [ebp - 0x4d8]
mov byte [ebp - 4], 0x32
cmp ecx, ebx
je 0x10b021a
call fcn.0103d6e8
push dword [ebp - 0x424]
lea eax, [ebp - 0x3f0]
push eax
call fcn.010535cf
mov esi, 0x10015b4
push esi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push edi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x38
call fcn.0103f3bb
push ebx
push edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push 0x102f100
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push edi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x39
call fcn.0103f3bb
push ebx
push edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push 0xc
call fcn.010b2945
pop ecx
mov ecx, eax
mov dword [ebp - 0x3c8], ecx
mov byte [ebp - 4], 0x3a
cmp ecx, ebx
je 0x10b02aa
call fcn.0103ba8f
jmp 0x10b02ac
xor eax, eax
push eax
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x32
call fcn.0109c558
push eax
lea ecx, [ebp - 0x440]
mov byte [ebp - 4], 0x3b
call fcn.01058439
mov ecx, dword [ebp - 0x4e8]
mov byte [ebp - 4], 0x32
cmp ecx, ebx
je 0x10b02df
call fcn.0103d6e8
mov eax, dword [ebp - 0x440]
add eax, 4
push eax
lea eax, [ebp - 0x40c]
push eax
call fcn.010343c8
cmp dword [eax + 0x18], 8
mov byte [ebp - 4], 0x3c
jb 0x10b0304
mov eax, dword [eax + 4]
jmp 0x10b0307
add eax, 4
push eax
push 0x102f0c4
push dword [ebp - 0x3c0]
call fcn.0103f3fe
add esp, 0xc
push ebx
push edi
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x32
call fcn.01032f16
mov eax, dword [ebp - 0x440]
add eax, 8
push eax
lea eax, [ebp - 0x40c]
push eax
call fcn.0103b8ca
cmp dword [eax + 0x18], 8
mov byte [ebp - 4], 0x3d
jb 0x10b0351
mov eax, dword [eax + 4]
jmp 0x10b0354
add eax, 4
push eax
push 0x102f084
push dword [ebp - 0x3c0]
call fcn.0103f3fe
add esp, 0xc
push ebx
push edi
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push esi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push edi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x3e
call fcn.0103f3bb
push ebx
push edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push esi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push edi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x3f
call fcn.0103f3bb
push ebx
push edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push 0x102f010
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push edi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x40
call fcn.0103f3bb
push ebx
push edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push esi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push edi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x41
call fcn.0103f3bb
push ebx
push edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
cmp byte [ebp - 0x3c2], bl
jne 0x10b043c
push 0x102efc0
call fcn.010b57ed
pop ecx
push 0x74
call fcn.010b2945
pop ecx
mov ecx, eax
mov dword [ebp - 0x3c8], ecx
mov byte [ebp - 4], 0x42
cmp ecx, ebx
je 0x10b0470
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x42c]
push eax
call fcn.0108e70c
jmp 0x10b0472
xor eax, eax
push eax
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], 0x32
call fcn.0109c558
push eax
lea ecx, [ebp - 0x3d4]
mov byte [ebp - 4], 0x43
call fcn.01058439
mov ecx, dword [ebp - 0x4c0]
mov byte [ebp - 4], 0x32
cmp ecx, ebx
je 0x10b04a5
call fcn.0103d6e8
cmp byte [ebp - 0x3c2], bl
jne 0x10b05a1
mov ecx, dword [ebp - 0x3d4]
add ecx, 0x24
mov byte [ebp - 0x3c1], bl
call fcn.01035126
push eax
push 0x102ef60
call fcn.010b57ed
mov esi, dword [ebp - 0x3d4]
pop ecx
pop ecx
add esi, 0x34
mov ecx, esi
call fcn.01035126
test eax, eax
je 0x10b0501
mov ecx, esi
call fcn.01035126
push eax
push 0x102eee0
call fcn.010b57ed
pop ecx
pop ecx
mov byte [ebp - 0x3c1], 1
mov esi, dword [ebp - 0x3d4]
add esi, 0x44
mov ecx, esi
call fcn.01035126
test eax, eax
je 0x10b0530
mov ecx, esi
call fcn.01035126
push eax
push 0x102ee50
call fcn.010b57ed
pop ecx
pop ecx
mov byte [ebp - 0x3c1], 1
mov esi, dword [ebp - 0x3d4]
add esi, 0x54
mov ecx, esi
call fcn.01035126
test eax, eax
je 0x10b055f
mov ecx, esi
call fcn.01035126
push eax
push 0x102ee00
call fcn.010b57ed
pop ecx
pop ecx
mov byte [ebp - 0x3c1], 1
mov esi, dword [ebp - 0x3d4]
add esi, 0x64
mov ecx, esi
call fcn.01035126
test eax, eax
je 0x10b058e
mov ecx, esi
call fcn.01035126
push eax
push 0x102ed98
call fcn.010b57ed
pop ecx
pop ecx
mov byte [ebp - 0x3c1], 1
cmp byte [ebp - 0x3c1], bl
je 0x10b05a1
push 0x102ed20
call fcn.010b57ed
pop ecx
mov eax, dword [ebp - 0x3dc]
cmp byte [eax + 0xff], bl
jne 0x10b062c
mov eax, dword [ebp - 0x3d4]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + 0x14]
cmp dword [eax + 0x78], ebx
je 0x10b062c
push 0x102ec80
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
xor esi, esi
inc esi
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x44
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
mov eax, dword [ebp - 0x3d4]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x3dc]
add eax, 0x64
add ecx, 0x158
push eax
call fcn.01033880
mov eax, dword [ebp - 0x3dc]
mov ecx, dword [ebp - 0x3c0]
add eax, 0x158
push eax
call fcn.0103f557
jmp 0x10b062f
xor esi, esi
inc esi
mov edi, dword [ebp - 0x3d4]
lea ecx, [edi + 0x34]
call fcn.01035126
test eax, eax
jne 0x10b1e3a
lea ecx, [edi + 0x44]
call fcn.01035126
test eax, eax
jne 0x10b1e3a
mov edi, 0x10015b4
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x46
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x47
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push 0x102ec10
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x48
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x49
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x4a
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push 0x102eb90
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x4c
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x4d
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
cmp byte [ebp - 0x3c2], bl
jne 0x10b07cd
push 0x102eb38
call fcn.010b57ed
pop ecx
push 0x178
call fcn.010b2945
pop ecx
mov ecx, eax
mov dword [ebp - 0x3c8], ecx
mov byte [ebp - 4], 0x4e
cmp ecx, ebx
je 0x10b0812
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x440]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x42c]
push eax
call fcn.0109ed5e
jmp 0x10b0814
xor eax, eax
push eax
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 4], 0x32
call fcn.0109c558
push eax
lea ecx, [ebp - 0x3e8]
mov byte [ebp - 4], 0x4f
call fcn.01058439
mov ecx, dword [ebp - 0x4c8]
mov byte [ebp - 4], 0x32
cmp ecx, ebx
je 0x10b0847
call fcn.0103d6e8
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x50
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push 0x102eac0
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x51
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x52
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
cmp byte [ebp - 0x3c2], bl
jne 0x10b09fc
push 0x102ea70
call fcn.010b57ed
pop ecx
push 0x102ea10
call fcn.010b57ed
pop ecx
mov dword [ebp - 4], 0x2d
mov byte [ebp - 4], 0x75
cmp byte [ebp - 0x3c2], bl
je 0x10b1758
mov byte [ebp - 0x3c4], 1
cmp byte [ebp - 0x3c4], bl
je 0x10b0e8f
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x76
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x77
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push 0x102e988
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x78
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x79
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push 0x34
call fcn.010b2945
pop ecx
mov ecx, eax
mov dword [ebp - 0x3c8], ecx
mov byte [ebp - 4], 0x7a
cmp ecx, ebx
je 0x10b0b97
lea eax, [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x3f0]
push eax
call fcn.010a4800
jmp 0x10b0b99
mov eax, dword [ebp - 0x3dc]
cmp byte [eax + 0x101], bl
jne 0x10b08ee
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x53
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x54
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push 0x102e900
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x55
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x56
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
lea eax, [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x3f0]
push eax
call fcn.01051a09
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x57
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x58
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push 0x102e878
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x59
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x32
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x5a
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
call fcn.01032f16
jmp 0x10b08ee
xor eax, eax
push eax
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x75
call fcn.0109c558
push eax
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0x7b
call fcn.01058439
mov ecx, dword [ebp - 0x4b4]
mov byte [ebp - 4], 0x75
cmp ecx, ebx
je 0x10b0bcc
call fcn.0103d6e8
mov eax, dword [ebp - 0x448]
add eax, 0x24
push eax
lea ecx, [ebp - 0x468]
call fcn.01058439
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x7c
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push 0x102e7f0
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x7d
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x7e
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x7f
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x80
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push 0x102e788
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x81
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x82
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push 0x102e6f0
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x83
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
cmp dword [ebp - 0x438], ebx
je 0x10b0d9e
mov eax, dword [ebp - 0x438]
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x10b0d9e
mov ecx, dword [ebp - 0x438]
push ebx
push 7
call fcn.010ad1bc
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x438]
call fcn.010a43a1
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x468]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [ebp - 0x448]
call fcn.010a3f4a
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x102e670
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x84
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x85
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push 0x102e608
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x86
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x87
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
mov eax, dword [ebp - 0x448]
mov cl, byte [eax + 0x2d]
mov byte [eax + 0x2d], bl
mov byte [ebp - 0x3c4], cl
cmp byte [eax + 0x2c], bl
je 0x10b0fcf
mov byte [ebp - 0x3c9], 1
mov byte [ebp - 0x3c3], 1
cmp byte [ebp - 0x3dd], bl
je 0x10b192c
mov eax, dword [ebp - 0x3d4]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + 0x14]
add eax, 0x9c
push 0x102e5c0
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.010377ae
add esp, 0xc
push 0x102e518
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xa3
call fcn.01033a48
cmp dword [ebp - 0x74], 8
mov ecx, dword [ebp - 0x88]
mov byte [ebp - 4], 0xa4
jae 0x10b0ee8
lea ecx, [ebp - 0x88]
cmp dword [ebp - 0x58], 8
mov eax, dword [ebp - 0x6c]
jae 0x10b0ef4
lea eax, [ebp - 0x6c]
push 0x201031
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, esi
jne 0x10b0fba
mov edi, 0x102e4e0
push edi
lea ecx, [ebp - 0x40c]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x40c]
push eax
mov byte [ebp - 4], 0xa5
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0xa4
call fcn.01032f16
push 0x102e4a8
lea ecx, [ebp - 0x40c]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x40c]
push eax
mov byte [ebp - 4], 0xa6
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0xa4
call fcn.01032f16
push edi
lea ecx, [ebp - 0x40c]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x40c]
push eax
mov byte [ebp - 4], 0xa7
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0xa4
call fcn.01032f16
push 0x102e488
push ebx
call fcn.0103e621
push ebx
push esi
lea ecx, [ebp - 0x70]
call fcn.01032f16
lea ecx, [ebp - 0x8c]
jmp 0x10b1921
mov eax, dword [ebp - 0x448]
cmp byte [eax + 0x2e], bl
je 0x10b1742
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x88
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x89
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push 0x102e408
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x8a
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x8b
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push 0xe74
call fcn.010b2945
pop ecx
mov dword [ebp - 0x3c8], eax
mov byte [ebp - 4], 0x8c
cmp eax, ebx
je 0x10b10e5
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x4e4]
push eax
call fcn.0109d3ad
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ecx + 0x1c]
mov edx, dword [edx + 0x1c]
or dword [ebp - 0x430], esi
add ecx, 0x2c
push ecx
mov ecx, dword [ebp - 0x3c8]
push eax
add edx, 0x14
push edx
mov byte [ebp - 4], 0x8d
call fcn.010af5cc
jmp 0x10b10e7
xor eax, eax
push eax
lea ecx, [ebp - 0x41c]
mov dword [ebp - 4], 0x8e
call fcn.010af3c1
test byte [ebp - 0x430], 1
mov dword [ebp - 4], 0x90
je 0x10b1120
mov ecx, dword [ebp - 0x4e0]
and dword [ebp - 0x430], 0xfffffffe
cmp ecx, ebx
je 0x10b1120
call fcn.0103d6e8
mov eax, dword [ebp - 0x3d4]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x41c]
push ebx
cmp byte [eax + 5], bl
je 0x10b113e
push 0x14
jmp 0x10b1140
push 0x13
call fcn.0109bec7
lea ecx, [ebp - 0x3bc]
call fcn.0109face
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x91
call fcn.0109769b
mov eax, dword [ebp - 0x448]
mov byte [ebp - 4], 0x92
cmp byte [eax + 0x2f], bl
jne 0x10b118a
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x41c]
push ebx
push 0x11
call fcn.0109bec7
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x41c]
push eax
mov eax, dword [ebp - 0x3dc]
push dword [eax + 0x1ac]
lea eax, [ebp - 0x784]
push eax
call fcn.0109fd0a
push eax
lea ecx, [ebp - 0x3bc]
mov byte [ebp - 4], 0x93
call fcn.010af63f
lea ecx, [ebp - 0x784]
mov byte [ebp - 4], 0x92
call fcn.0109f97b
push 7
pop eax
cmp dword [ebp - 0x33c], eax
je 0x10b121e
cmp dword [ebp - 0x2a8], eax
je 0x10b121e
cmp dword [ebp - 0x33c], esi
je 0x10b1216
cmp dword [ebp - 0x2a8], esi
je 0x10b1216
cmp dword [ebp - 0x33c], 8
je 0x10b1203
cmp dword [ebp - 0x2a8], 8
jne 0x10b120a
mov byte [ebp - 0x3dd], 1
mov dword [ebp - 0x214], 9
jmp 0x10b1224
mov dword [ebp - 0x214], esi
jmp 0x10b1224
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
dec eax
je 0x10b14f5
sub eax, 6
je 0x10b1395
dec eax
dec eax
jne 0x10b1655
mov ecx, dword [ebp - 0x41c]
push ebx
push 0xb
call fcn.0109bec7
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x3e8]
call fcn.0109cdc2
mov byte [ebp - 0x3c1], 1
cmp byte [ebp - 0x3c1], bl
je 0x10b1655
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x41c]
push eax
mov byte [ebp - 4], 0x9c
call fcn.0109e5a5
mov byte [ebp - 0x3c1], bl
mov dword [ebp - 4], 0x92
jmp 0x10b1388
xor esi, esi
inc esi
mov edi, 0x10015b4
jmp 0x10b1269
mov ecx, dword [ebp - 0x41c]
push ebx
push 0xa
call fcn.0109bec7
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x3d4]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
cmp byte [eax + 5], bl
mov byte [ebp - 0x3c4], 1
sete byte [ebp - 0x3c1]
cmp byte [ebp - 0x3c1], bl
je 0x10b1655
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x41c]
push eax
mov byte [ebp - 4], 0x94
call fcn.0109e5a5
mov byte [ebp - 0x3c1], bl
mov dword [ebp - 4], 0x92
jmp 0x10b14e8
xor esi, esi
inc esi
mov edi, 0x10015b4
jmp 0x10b13c9
mov ecx, dword [ebp - 0x41c]
push ebx
push 0xc
call fcn.0109bec7
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x3d4]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
cmp byte [eax + 5], bl
mov byte [ebp - 0x3c4], 1
sete byte [ebp - 0x3c1]
cmp byte [ebp - 0x3c1], bl
je 0x10b1655
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x41c]
push eax
mov byte [ebp - 4], 0x98
call fcn.0109e5a5
mov byte [ebp - 0x3c1], bl
mov dword [ebp - 4], 0x92
jmp 0x10b1648
xor esi, esi
inc esi
mov edi, 0x10015b4
jmp 0x10b1529
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x91
call fcn.01097619
lea ecx, [ebp - 0x3bc]
mov byte [ebp - 4], 0x90
call fcn.0109f97b
mov ecx, dword [ebp - 0x3e8]
call fcn.0109bef9
cmp al, bl
je 0x10b1697
mov ecx, dword [ebp - 0x41c]
push ebx
push 0xd
call fcn.0109bec7
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0xa0
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x90
call fcn.01032f16
push 0x102e108
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0xa1
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x90
call fcn.01032f16
push edi
lea ecx, [ebp - 0x70]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0xa2
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x70]
call fcn.01032f16
mov ecx, dword [ebp - 0x41c]
push ebx
push 0xe
call fcn.0109bec7
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x418]
mov byte [ebp - 4], 0x75
cmp ecx, ebx
je 0x10b1748
call fcn.0103d6e8
jmp 0x10b1748
mov byte [ebp - 0x3c4], bl
lea ecx, [ebp - 0x448]
call fcn.010a43a1
jmp 0x10b090c
push edi
lea ecx, [ebp - 0x40c]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x40c]
push eax
mov byte [ebp - 4], 0xa8
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push edi
lea ecx, [ebp - 0x40c]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x40c]
push eax
mov byte [ebp - 4], 0xa9
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push 0x102e088
lea ecx, [ebp - 0x40c]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x40c]
push eax
mov byte [ebp - 4], 0xaa
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push edi
lea ecx, [ebp - 0x40c]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x40c]
push eax
mov byte [ebp - 4], 0xab
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x75
call fcn.01032f16
mov ecx, dword [ebp - 0x460]
add ecx, 0x2dc
call fcn.01040d65
test eax, eax
je 0x10b1881
lea eax, [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea ecx, [ebp - 0x504]
call fcn.010a12c0
lea ecx, [ebp - 0x504]
mov byte [ebp - 4], 0xac
call fcn.010a3a08
lea ecx, [ebp - 0x504]
mov byte [ebp - 4], 0x75
call fcn.010a1499
jmp 0x10b188c
push 0x102e010
call fcn.010b57ed
pop ecx
push edi
lea ecx, [ebp - 0x40c]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x40c]
push eax
mov byte [ebp - 4], 0xad
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push 0x102df98
lea ecx, [ebp - 0x40c]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x40c]
push eax
mov byte [ebp - 4], 0xae
call fcn.0103f3bb
push ebx
push esi
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x75
call fcn.01032f16
push edi
lea ecx, [ebp - 0x40c]
call fcn.01033a48
mov ecx, dword [ebp - 0x3c0]
push esi
lea eax, [ebp - 0x40c]
push eax
mov byte [ebp - 4], 0xaf
call fcn.0103f3bb
lea ecx, [ebp - 0x40c]
push ebx
push esi
mov byte [ebp - 4], 0x75
call fcn.01032f16
push dword [ebp - 0x424]
lea eax, [ebp - 0x3f0]
push eax
call fcn.010535cf
mov dword [ebp - 4], 0x2d
jmp 0x10b2391
push ebx
push 0x22
lea ecx, [ebp - 0x84]
call fcn.01033bfc
push 0x102dbc0
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x45
call fcn.01033c5d
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x5c8]
call fcn.010907af
push 0x10de07c
lea eax, [ebp - 0x5c8]
jmp 0x10af7db
mov esi, dword [ebp - 0x460]
xor edi, edi
inc edi
jmp 0x10afd59
call fcn.010b5468
ret 0x10