Function at 0x116f5b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x118322e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x10b94
call sub.ntdll.dll__chkstk
push esi
mov dword [ebp - 0x10b48], ecx
mov eax, dword [ebp - 0x10b48]
add eax, 0x1e0
mov dword [ebp - 0x82c], eax
mov word [ebp - 0x80c], 0
push 0x7fe
push 0
lea ecx, [ebp - 0x80a]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x10b48]
add edx, 0x2a
push edx
push 0x1012600
lea eax, [ebp - 0x80c]
push eax
call sub.ntdll.dll_swprintf
add esp, 0xc
mov dword [ebp - 0x818], 0
mov dword [ebp - 0x810], 0
xor ecx, ecx
mov byte [ebp - 0x10b05], cl
lea edx, [ebp - 0x10b05]
push edx
lea ecx, [ebp - 0x828]
call fcn.01099550
mov dword [ebp - 4], 0
call fcn.0108d4a0
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x834], 0
mov dword [ebp - 0x830], 0
jmp 0x116f69d
mov eax, dword [ebp - 0x834]
add eax, 1
mov ecx, dword [ebp - 0x830]
adc ecx, 0
mov dword [ebp - 0x834], eax
mov dword [ebp - 0x830], ecx
mov ecx, dword [ebp + 8]
call fcn.010973b0
xor edx, edx
mov dword [ebp - 0x10b50], eax
mov dword [ebp - 0x10b4c], edx
mov eax, dword [ebp - 0x830]
cmp eax, dword [ebp - 0x10b4c]
jg 0x1170f80
jl 0x116f6d9
mov ecx, dword [ebp - 0x834]
cmp ecx, dword [ebp - 0x10b50]
jae 0x1170f80
mov edx, dword [ebp - 0x10b48]
cmp dword [edx + 0x134], 0
je 0x116f837
call fcn.0108d4a0
sub eax, dword [ebp - 0x814]
cmp eax, 0x3e8
jb 0x116f837
mov ecx, dword [ebp + 8]
call fcn.010973b0
xor ecx, ecx
mov dword [ebp - 0xc8cc], eax
mov dword [ebp - 0xc8c8], ecx
mov edx, dword [ebp - 0x834]
add edx, 1
mov eax, dword [ebp - 0x830]
adc eax, 0
mov dword [ebp - 0x10b58], edx
mov dword [ebp - 0x10b54], eax
fild qword [ebp - 0x10b58]
fild qword [ebp - 0xc8cc]
fdivp st(1)
fmul qword [0x10061d0]
call fcn.01116030
mov dword [ebp - 0xc998], eax
mov word [ebp - 0xc994], 0
push 0xc6
push 0
lea ecx, [ebp - 0xc992]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0xc998]
push edx
mov eax, dword [ebp - 0xc8c8]
push eax
mov ecx, dword [ebp - 0xc8cc]
push ecx
mov edx, dword [ebp - 0x834]
add edx, 1
mov eax, dword [ebp - 0x830]
adc eax, 0
push eax
push edx
push 0x10125b0
lea ecx, [ebp - 0xc994]
push ecx
call sub.ntdll.dll_swprintf
add esp, 0x1c
lea edx, [ebp - 0xc994]
push edx
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [eax + 0x130]
mov edx, dword [ebp - 0x10b48]
mov eax, dword [edx + 0x130]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x38]
call eax
mov ecx, dword [ebp - 0xc998]
push ecx
push 0x1010e00
lea edx, [ebp - 0xc994]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
mov eax, dword [ebp - 0xc998]
push eax
mov ecx, dword [ebp - 0x10b48]
call fcn.011775c0
lea ecx, [ebp - 0xc994]
push ecx
mov edx, dword [ebp - 0x10b48]
mov eax, dword [edx + 0x130]
mov ecx, dword [ebp - 0x10b48]
mov ecx, dword [ecx + 0x130]
mov edx, dword [eax]
mov eax, dword [edx + 0x3c]
call eax
call fcn.0108d4a0
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x10b48]
mov edx, dword [ecx + 0x130]
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [eax + 0x130]
mov edx, dword [edx]
mov eax, dword [edx + 0x78]
call eax
test eax, eax
je 0x116f8d9
push 0x17
mov ecx, dword [ebp - 0x10b48]
mov edx, dword [ecx + 0x130]
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [eax + 0x130]
mov edx, dword [edx]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x10b5c], eax
push 0x3ed
push 0x1014c8c
call fcn.0116c8e0
push eax
push 0x100b148
mov ecx, dword [ebp - 0x10b5c]
push ecx
mov edx, dword [ebp - 0x10b5c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov dword [ebp - 0x10b0c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10b0c]
jmp 0x11710c9
mov dword [ebp - 0x818], 0
mov edx, dword [ebp - 0x834]
push edx
mov ecx, dword [ebp + 8]
call fcn.011293f0
mov ecx, dword [eax]
mov dword [ebp - 0x4854], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x4850], edx
cmp dword [ebp - 0x4854], 7
jne 0x116f915
cmp dword [ebp - 0x4850], 0
je 0x116f927
cmp dword [ebp - 0x4854], 1
jne 0x116f92c
cmp dword [ebp - 0x4850], 0
jne 0x116f92c
jmp 0x116f67f
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x88b4]
call fcn.01146fd0
mov byte [ebp - 4], 1
push 0
lea eax, [ebp - 0x88b4]
push eax
mov ecx, dword [ebp - 0x4850]
push ecx
mov edx, dword [ebp - 0x4854]
push edx
mov ecx, dword [ebp - 0x82c]
call fcn.011623b0
test eax, eax
jne 0x116fa10
call fcn.010906a0
mov dword [ebp - 0x10b60], eax
mov eax, dword [ebp - 0x4850]
push eax
mov ecx, dword [ebp - 0x4854]
push ecx
push 0x3fd
push 0x1014c8c
call fcn.0116c8e0
push eax
push 0x10122f8
mov edx, dword [ebp - 0x10b60]
push edx
mov eax, dword [ebp - 0x10b60]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0x14
push 0xd2
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [eax + 0x130]
mov edx, dword [ebp - 0x10b48]
mov eax, dword [edx + 0x130]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10b10], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10b10]
jmp 0x11710c9
mov byte [ebp - 0xc8c4], 0
push 0x3fff
push 0
lea ecx, [ebp - 0xc8c3]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov byte [ebp - 0x484c], 0
push 0x3fff
push 0
lea edx, [ebp - 0x484b]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [eax + 0x4320]
push ecx
lea ecx, [ebp - 0x88b4]
call fcn.011814c0
push eax
lea edx, [ebp - 0xc8c4]
push edx
call sub.ntdll.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [eax + 0x4320]
push ecx
lea edx, [ebp - 0xc8c4]
push edx
lea eax, [ebp - 0x484c]
push eax
call sub.ntdll.dll_memcpy
add esp, 0xc
lea ecx, [ebp - 0xc8c4]
mov dword [ebp - 0x84c], ecx
lea edx, [ebp - 0x484c]
mov dword [ebp - 0x88c0], edx
mov eax, dword [ebp - 0x84c]
movzx ecx, word [eax + 0x14]
mov dword [ebp - 0x88bc], ecx
mov edx, dword [ebp - 0x84c]
movzx eax, word [edx + 0x14]
push eax
mov ecx, dword [ebp - 0x84c]
push ecx
mov edx, dword [ebp - 0x88c0]
push edx
call sub.ntdll.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x84c]
movzx ecx, word [eax + 0x14]
mov edx, dword [ebp - 0x88c0]
mov dword [edx + 0x18], ecx
xor eax, eax
mov byte [ebp - 0x10b11], al
lea ecx, [ebp - 0x10b11]
push ecx
lea ecx, [ebp - 0x844]
call fcn.01099550
mov byte [ebp - 4], 2
mov dword [ebp - 0x4858], 0
lea ecx, [ebp - 0x88b4]
call fcn.01147830
lea ecx, [ebp - 0x88b4]
call fcn.01147ea0
mov dword [ebp - 0x848], eax
cmp dword [ebp - 0x848], 0
je 0x117081c
mov edx, dword [ebp - 0x848]
movzx eax, byte [edx + 8]
test eax, eax
jne 0x116fbc8
mov ecx, dword [ebp - 0x88c0]
add ecx, dword [ebp - 0x88bc]
mov dword [ebp - 0xc9cc], ecx
mov edx, dword [ebp - 0x848]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x848]
push ecx
mov edx, dword [ebp - 0xc9cc]
push edx
call sub.ntdll.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x848]
mov ecx, dword [ebp - 0x88bc]
add ecx, dword [eax + 4]
mov dword [ebp - 0x88bc], ecx
mov edx, dword [ebp - 0x88c0]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp - 0x848]
add eax, dword [ecx + 4]
mov edx, dword [ebp - 0x88c0]
mov dword [edx + 0x18], eax
lea ecx, [ebp - 0x88b4]
call fcn.01148000
mov dword [ebp - 0x848], eax
jmp 0x116fb35
lea ecx, [ebp - 0xc9b8]
call fcn.011611f0
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x848]
push eax
lea ecx, [ebp - 0xc9b8]
call fcn.01161320
test eax, eax
jne 0x116fcb9
call fcn.010906a0
mov dword [ebp - 0x10b64], eax
mov ecx, dword [ebp - 0x848]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x4850]
push eax
mov ecx, dword [ebp - 0x4854]
push ecx
push 0x424
push 0x1014c8c
call fcn.0116c8e0
push eax
push 0x1012398
mov edx, dword [ebp - 0x10b64]
push edx
mov eax, dword [ebp - 0x10b64]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0x18
push 0xd3
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [eax + 0x130]
mov edx, dword [ebp - 0x10b48]
mov eax, dword [edx + 0x130]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10b18], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc9b8]
call fcn.01161230
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10b18]
jmp 0x11710c9
xor ecx, ecx
mov byte [ebp - 0x10b19], cl
lea edx, [ebp - 0x10b19]
push edx
lea ecx, [ebp - 0xc9c8]
call fcn.01099550
mov byte [ebp - 4], 4
mov dword [ebp - 0xc9a0], 0
lea ecx, [ebp - 0xc9b8]
call fcn.011615a0
mov dword [ebp - 0xc99c], eax
mov dword [ebp - 0xc9d0], 0
jmp 0x116fd0d
mov eax, dword [ebp - 0xc9d0]
add eax, 1
mov dword [ebp - 0xc9d0], eax
mov ecx, dword [ebp - 0xc9d0]
cmp ecx, dword [ebp - 0xc99c]
jae 0x117059c
mov edx, dword [ebp - 0xc9d0]
push edx
lea ecx, [ebp - 0xc9b8]
call fcn.01161610
mov dword [ebp - 0xc9d4], eax
mov eax, dword [ebp - 0xc9d4]
mov dword [ebp - 0x10b68], eax
mov ecx, dword [ebp - 0x10b68]
mov edx, dword [ebp - 0x10b68]
mov eax, dword [ecx]
and eax, dword [edx + 4]
cmp eax, 0xffffffff
jne 0x116fe4c
mov ecx, dword [ebp - 0xc9d4]
mov edx, dword [ecx]
mov dword [ebp - 0xc9e4], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xc9e0], eax
mov ecx, dword [ebp - 0xc9d4]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0xc9dc], edx
lea eax, [ebp - 0xc9e4]
push eax
lea ecx, [ebp - 0xc9c8]
call fcn.01094c50
mov ecx, dword [ebp - 0x10b48]
cmp dword [ecx + 0x42a8], 0
je 0x116fe47
mov edx, dword [ebp - 0x848]
cmp dword [edx], 0x80
jne 0x116fe47
cmp dword [ebp + 0x10], 0
je 0x116fe47
mov eax, dword [ebp - 0x10b48]
cmp dword [eax + 0x134], 0
je 0x116fe47
lea ecx, [ebp - 0xca04]
call fcn.01155b50
mov byte [ebp - 4], 5
mov dword [ebp - 0xc9fc], 0xffffffff
mov dword [ebp - 0xc9f8], 0xffffffff
mov ecx, dword [ebp - 0xc9fc]
mov dword [ebp - 0xca04], ecx
mov edx, dword [ebp - 0xc9f8]
mov dword [ebp - 0xca00], edx
lea eax, [ebp - 0xc9e4]
push eax
lea ecx, [ebp - 0xc9f4]
call fcn.01094c50
lea ecx, [ebp - 0xca04]
push ecx
mov ecx, dword [ebp - 0x10b48]
add ecx, 0x42b0
call fcn.01160e70
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xca04]
call fcn.0114b0a0
jmp 0x116fcfe
mov edx, dword [ebp - 0xc9d4]
mov eax, dword [ebp - 0xc9d4]
mov ecx, dword [edx]
add ecx, dword [eax + 0x10]
mov edx, dword [edx + 4]
adc edx, dword [eax + 0x14]
mov eax, dword [ebp - 0x10b48]
mov dword [ebp - 0x10b70], ecx
mov dword [ebp - 0x10b6c], edx
mov dword [ebp - 0x10b74], eax
mov ecx, dword [ebp - 0x10b74]
mov edx, dword [ebp - 0x10b6c]
cmp edx, dword [ecx + 0x1dc]
jl 0x11704ad
jg 0x116fead
mov eax, dword [ebp - 0x10b74]
mov ecx, dword [ebp - 0x10b70]
cmp ecx, dword [eax + 0x1d8]
jbe 0x11704ad
mov dword [ebp - 0xc9a0], 1
mov dword [ebp - 0x818], 1
mov dword [ebp - 0xca1c], 0
mov dword [ebp - 0xca18], 0
mov dword [ebp - 0xca24], 0
mov dword [ebp - 0xca20], 0
mov edx, dword [ebp - 0xc9d4]
mov eax, dword [ebp - 0x10b48]
mov dword [ebp - 0x10b78], edx
mov dword [ebp - 0x10b7c], eax
mov ecx, dword [ebp - 0x10b78]
mov edx, dword [ebp - 0x10b7c]
mov eax, dword [ecx + 4]
cmp eax, dword [edx + 0x1dc]
jl 0x116ff64
jg 0x116ff30
mov ecx, dword [ebp - 0x10b78]
mov edx, dword [ebp - 0x10b7c]
mov eax, dword [ecx]
cmp eax, dword [edx + 0x1d8]
jb 0x116ff64
mov ecx, dword [ebp - 0xc9d4]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0xca1c], edx
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0xca18], eax
mov ecx, dword [ebp - 0xc9d4]
mov edx, dword [ecx]
mov dword [ebp - 0xca24], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xca20], eax
jmp 0x11700b0
mov ecx, dword [ebp - 0xc9d4]
mov edx, dword [ebp - 0xc9d4]
mov eax, dword [ecx]
add eax, dword [edx + 0x10]
mov ecx, dword [ecx + 4]
adc ecx, dword [edx + 0x14]
mov edx, dword [ebp - 0x10b48]
sub eax, dword [edx + 0x1d8]
sbb ecx, dword [edx + 0x1dc]
mov dword [ebp - 0xca1c], eax
mov dword [ebp - 0xca18], ecx
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [eax + 0x1d8]
mov dword [ebp - 0xca24], ecx
mov edx, dword [eax + 0x1dc]
mov dword [ebp - 0xca20], edx
mov eax, dword [ebp - 0xc9d4]
mov ecx, dword [eax]
mov dword [ebp - 0xca54], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0xca50], edx
mov eax, dword [ebp - 0xc9d4]
mov ecx, dword [eax + 0x10]
sub ecx, dword [ebp - 0xca1c]
mov edx, dword [eax + 0x14]
sbb edx, dword [ebp - 0xca18]
mov dword [ebp - 0xca4c], ecx
lea eax, [ebp - 0xca54]
push eax
lea ecx, [ebp - 0xc9c8]
call fcn.01094c50
mov ecx, dword [ebp - 0x10b48]
cmp dword [ecx + 0x42a8], 0
je 0x11700b0
mov edx, dword [ebp - 0x848]
cmp dword [edx], 0x80
jne 0x11700b0
cmp dword [ebp + 0x10], 0
je 0x11700b0
mov eax, dword [ebp - 0x10b48]
cmp dword [eax + 0x134], 0
je 0x11700b0
lea ecx, [ebp - 0xca74]
call fcn.01155b50
mov byte [ebp - 4], 6
mov dword [ebp - 0xca6c], 0xffffffff
mov dword [ebp - 0xca68], 0xffffffff
mov ecx, dword [ebp - 0xca6c]
mov dword [ebp - 0xca74], ecx
mov edx, dword [ebp - 0xca68]
mov dword [ebp - 0xca70], edx
lea eax, [ebp - 0xca54]
push eax
lea ecx, [ebp - 0xca64]
call fcn.01094c50
lea ecx, [ebp - 0xca74]
push ecx
mov ecx, dword [ebp - 0x10b48]
add ecx, 0x42b0
call fcn.01160e70
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xca74]
call fcn.0114b0a0
xor edx, edx
mov byte [ebp - 0x10b1a], dl
lea eax, [ebp - 0x10b1a]
push eax
lea ecx, [ebp - 0xca14]
call fcn.01099550
mov byte [ebp - 4], 7
cmp dword [ebp - 0x810], 0
jne 0x1170203
push 0
lea ecx, [ebp - 0xca14]
push ecx
mov edx, dword [ebp - 0xca18]
push edx
mov eax, dword [ebp - 0xca1c]
push eax
mov ecx, dword [ebp - 0x10b48]
add ecx, 0x140
call fcn.0117da00
test eax, eax
jne 0x11701fe
lea ecx, [ebp - 0x80c]
push ecx
mov edx, dword [ebp - 0x10b48]
mov eax, dword [edx + 0x130]
mov ecx, dword [ebp - 0x10b48]
mov ecx, dword [ecx + 0x130]
mov edx, dword [eax]
mov eax, dword [edx + 0x34]
call eax
call fcn.010906a0
mov dword [ebp - 0x10b80], eax
push 0x466
push 0x1014c8c
call fcn.0116c8e0
push eax
push 0x101257c
mov ecx, dword [ebp - 0x10b80]
push ecx
mov edx, dword [ebp - 0x10b80]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
push 0xd7
mov edx, dword [ebp - 0x10b48]
mov eax, dword [edx + 0x130]
mov ecx, dword [ebp - 0x10b48]
mov ecx, dword [ecx + 0x130]
mov edx, dword [eax]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10b20], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xca14]
call fcn.01155040
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc9c8]
call fcn.01155040
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc9b8]
call fcn.01161230
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10b20]
jmp 0x11710c9
jmp 0x117035b
lea ecx, [ebp - 0xc9c8]
call fcn.01129490
test eax, eax
jbe 0x1170238
lea ecx, [ebp - 0xc9c8]
call fcn.01129490
sub eax, 1
push eax
lea ecx, [ebp - 0xc9c8]
call fcn.01086d40
push eax
lea ecx, [ebp - 0xca14]
call fcn.01094c50
push 1
lea ecx, [ebp - 0xca14]
push ecx
mov edx, dword [ebp - 0xca18]
push edx
mov eax, dword [ebp - 0xca1c]
push eax
mov ecx, dword [ebp - 0x10b48]
add ecx, 0x140
call fcn.0117da00
test eax, eax
jne 0x117035b
lea ecx, [ebp - 0x80c]
push ecx
mov edx, dword [ebp - 0x10b48]
mov eax, dword [edx + 0x130]
mov ecx, dword [ebp - 0x10b48]
mov ecx, dword [ecx + 0x130]
mov edx, dword [eax]
mov eax, dword [edx + 0x34]
call eax
call fcn.010906a0
mov dword [ebp - 0x10b84], eax
push 0x475
push 0x1014c8c
call fcn.0116c8e0
push eax
push 0x101257c
mov ecx, dword [ebp - 0x10b84]
push ecx
mov edx, dword [ebp - 0x10b84]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
push 0xd7
mov edx, dword [ebp - 0x10b48]
mov eax, dword [edx + 0x130]
mov ecx, dword [ebp - 0x10b48]
mov ecx, dword [ecx + 0x130]
mov edx, dword [eax]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10b24], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xca14]
call fcn.01155040
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc9c8]
call fcn.01155040
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc9b8]
call fcn.01161230
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10b24]
jmp 0x11710c9
mov dword [ebp - 0xca78], 0
jmp 0x1170376
mov ecx, dword [ebp - 0xca78]
add ecx, 1
mov dword [ebp - 0xca78], ecx
lea ecx, [ebp - 0xca14]
call fcn.01129490
cmp dword [ebp - 0xca78], eax
jae 0x11703a9
mov edx, dword [ebp - 0xca78]
push edx
lea ecx, [ebp - 0xca14]
call fcn.01086d40
push eax
lea ecx, [ebp - 0xc9c8]
call fcn.01094c50
jmp 0x1170367
lea ecx, [ebp - 0xca44]
call fcn.01155b50
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0xca24]
mov dword [ebp - 0xca44], eax
mov ecx, dword [ebp - 0xca20]
mov dword [ebp - 0xca40], ecx
mov edx, dword [ebp - 0xca1c]
mov dword [ebp - 0xca3c], edx
mov eax, dword [ebp - 0xca18]
mov dword [ebp - 0xca38], eax
lea ecx, [ebp - 0xca14]
push ecx
lea ecx, [ebp - 0xca34]
call fcn.011550b0
mov edx, dword [ebp - 0x10b48]
cmp dword [edx + 0x42a8], 0
je 0x117042e
mov eax, dword [ebp - 0x10b48]
cmp dword [eax + 0x134], 0
jne 0x117042e
cmp dword [ebp + 0x10], 0
je 0x117042e
mov ecx, dword [ebp - 0x848]
cmp dword [ecx], 0x80
jne 0x117042e
jmp 0x1170440
lea edx, [ebp - 0xca44]
push edx
lea ecx, [ebp - 0x844]
call fcn.01160e70
mov eax, dword [ebp - 0x10b48]
cmp dword [eax + 0x42a8], 0
je 0x117048a
mov ecx, dword [ebp - 0x848]
cmp dword [ecx], 0x80
jne 0x117048a
cmp dword [ebp + 0x10], 0
je 0x117048a
mov edx, dword [ebp - 0x10b48]
cmp dword [edx + 0x134], 0
je 0x117048a
lea eax, [ebp - 0xca44]
push eax
mov ecx, dword [ebp - 0x10b48]
add ecx, 0x42b0
call fcn.01160e70
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xca44]
call fcn.0114b0a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xca14]
call fcn.01155040
jmp 0x1170597
mov ecx, dword [ebp - 0xc9d4]
mov edx, dword [ecx]
mov dword [ebp - 0xca8c], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xca88], eax
mov ecx, dword [ebp - 0xc9d4]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0xca84], edx
lea eax, [ebp - 0xca8c]
push eax
lea ecx, [ebp - 0xc9c8]
call fcn.01094c50
mov ecx, dword [ebp - 0x10b48]
cmp dword [ecx + 0x42a8], 0
je 0x1170597
mov edx, dword [ebp - 0x848]
cmp dword [edx], 0x80
jne 0x1170597
cmp dword [ebp + 0x10], 0
je 0x1170597
mov eax, dword [ebp - 0x10b48]
cmp dword [eax + 0x134], 0
je 0x1170597
lea ecx, [ebp - 0xcaac]
call fcn.01155b50
mov byte [ebp - 4], 9
mov dword [ebp - 0xcaa4], 0xffffffff
mov dword [ebp - 0xcaa0], 0xffffffff
mov ecx, dword [ebp - 0xcaa4]
mov dword [ebp - 0xcaac], ecx
mov edx, dword [ebp - 0xcaa0]
mov dword [ebp - 0xcaa8], edx
lea eax, [ebp - 0xca8c]
push eax
lea ecx, [ebp - 0xca9c]
call fcn.01094c50
lea ecx, [ebp - 0xcaac]
push ecx
mov ecx, dword [ebp - 0x10b48]
add ecx, 0x42b0
call fcn.01160e70
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xcaac]
call fcn.0114b0a0
jmp 0x116fcfe
mov edx, dword [ebp - 0x10b48]
mov dword [ebp - 0x10b88], edx
mov eax, dword [ebp - 0x10b88]
cmp dword [eax + 0x425c], 0
jg 0x1170621
jl 0x11705c8
mov ecx, dword [ebp - 0x10b88]
cmp dword [ecx + 0x4258], 0
jae 0x1170621
mov edx, dword [ebp - 0x4854]
or edx, dword [ebp - 0x4850]
jne 0x1170621
mov eax, dword [ebp - 0x848]
cmp dword [eax], 0x80
jne 0x1170621
lea ecx, [ebp - 0xc9c8]
call fcn.01129490
test eax, eax
jbe 0x1170621
push 0
lea ecx, [ebp - 0xc9c8]
call fcn.01086d40
mov ecx, dword [ebp - 0x10b48]
mov edx, dword [eax]
mov dword [ecx + 0x4258], edx
mov eax, dword [eax + 4]
mov dword [ecx + 0x425c], eax
mov dword [ebp - 0x4858], 1
cmp dword [ebp - 0xc9a0], 0
jne 0x1170691
mov ecx, dword [ebp - 0x88c0]
add ecx, dword [ebp - 0x88bc]
mov dword [ebp - 0xcab0], ecx
mov edx, dword [ebp - 0x848]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x848]
push ecx
mov edx, dword [ebp - 0xcab0]
push edx
call sub.ntdll.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x848]
mov ecx, dword [ebp - 0x88bc]
add ecx, dword [eax + 4]
mov dword [ebp - 0x88bc], ecx
mov edx, dword [ebp - 0x88c0]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp - 0x848]
add eax, dword [ecx + 4]
mov edx, dword [ebp - 0x88c0]
mov dword [edx + 0x18], eax
jmp 0x11707e8
push 0x80000
call fcn.0108b3e0
add esp, 4
mov dword [ebp - 0x10b28], eax
mov eax, dword [ebp - 0x10b28]
mov dword [ebp - 0xcabc], eax
push 0x80000
push 0
mov ecx, dword [ebp - 0xcabc]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
lea edx, [ebp - 0xc9c8]
push edx
mov ecx, dword [ebp - 0x10b48]
call fcn.011722b0
mov eax, dword [ebp - 0xcabc]
push eax
lea ecx, [ebp - 0xc9c8]
push ecx
mov edx, dword [ebp - 0x848]
push edx
mov ecx, dword [ebp - 0x10b48]
call fcn.01172480
mov eax, dword [ebp - 0xcabc]
mov dword [ebp - 0xcab8], eax
mov ecx, dword [ebp - 0x88c0]
add ecx, dword [ebp - 0x88bc]
mov dword [ebp - 0xcab4], ecx
mov edx, dword [ebp - 0x88c0]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp - 0xcab8]
add eax, dword [ecx + 4]
mov edx, dword [ebp - 0x10b48]
cmp eax, dword [edx + 0x4320]
ja 0x1170758
mov eax, dword [ebp - 0xcab8]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0xcabc]
push edx
mov eax, dword [ebp - 0xcab4]
push eax
call sub.ntdll.dll_memcpy
add esp, 0xc
jmp 0x117079d
call fcn.010906a0
mov dword [ebp - 0x10b8c], eax
mov ecx, dword [ebp - 0x4850]
push ecx
mov edx, dword [ebp - 0x4854]
push edx
push 0x4c1
push 0x1014c8c
call fcn.0116c8e0
push eax
push 0x1012558
mov eax, dword [ebp - 0x10b8c]
push eax
mov ecx, dword [ebp - 0x10b8c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0x14
mov ecx, dword [ebp - 0xcab8]
mov edx, dword [ebp - 0x88bc]
add edx, dword [ecx + 4]
mov dword [ebp - 0x88bc], edx
mov eax, dword [ebp - 0x88c0]
mov ecx, dword [eax + 0x18]
mov edx, dword [ebp - 0xcab8]
add ecx, dword [edx + 4]
mov eax, dword [ebp - 0x88c0]
mov dword [eax + 0x18], ecx
mov ecx, dword [ebp - 0xcabc]
mov dword [ebp - 0x10b2c], ecx
mov edx, dword [ebp - 0x10b2c]
push edx
call fcn.0108b400
add esp, 4
lea ecx, [ebp - 0x88b4]
call fcn.01148000
mov dword [ebp - 0x848], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc9c8]
call fcn.01155040
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc9b8]
call fcn.01161230
jmp 0x116fb35
cmp dword [ebp - 0x818], 0
jne 0x1170848
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
jmp 0x116f67f
mov eax, dword [ebp - 0x88c0]
add eax, dword [ebp - 0x88bc]
mov dword [ebp - 0x88b8], eax
mov ecx, dword [ebp - 0x88c0]
mov edx, dword [ecx + 0x18]
add edx, 8
mov eax, dword [ebp - 0x10b48]
cmp edx, dword [eax + 0x4320]
ja 0x1170887
mov ecx, dword [ebp - 0x88b8]
mov dword [ecx], 0xffffffff
mov dword [ecx + 4], 0
mov edx, dword [ebp - 0x88c0]
mov eax, dword [edx + 0x18]
add eax, 8
mov ecx, dword [ebp - 0x88c0]
mov dword [ecx + 0x18], eax
mov edx, dword [ebp - 0x88c0]
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [edx + 0x18]
cmp ecx, dword [eax + 0x4320]
ja 0x11708bd
mov dword [ebp - 0x810], 0
mov edx, dword [ebp - 0x88c0]
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [edx + 0x18]
cmp ecx, dword [eax + 0x4320]
jbe 0x1170b11
cmp dword [ebp - 0x810], 0
je 0x11709c0
lea edx, [ebp - 0x80c]
push edx
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [eax + 0x130]
mov edx, dword [ebp - 0x10b48]
mov eax, dword [edx + 0x130]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
call fcn.010906a0
mov dword [ebp - 0x10b90], eax
mov ecx, dword [ebp - 0x4850]
push ecx
mov edx, dword [ebp - 0x4854]
push edx
push 0x4e3
push 0x1014c8c
call fcn.0116c8e0
push eax
push 0x1012518
mov eax, dword [ebp - 0x10b90]
push eax
mov ecx, dword [ebp - 0x10b90]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0x14
push 0xd7
mov ecx, dword [ebp - 0x10b48]
mov edx, dword [ecx + 0x130]
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [eax + 0x130]
mov edx, dword [edx]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10b30], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10b30]
jmp 0x11710c9
cmp dword [ebp - 0x4858], 0
je 0x11709ed
mov ecx, dword [ebp - 0x10b48]
mov dword [ecx + 0x4258], 0xffffffff
mov dword [ecx + 0x425c], 0xffffffff
mov dword [ebp - 0x4858], 0
mov edx, dword [ebp - 0x834]
sub edx, 1
mov eax, dword [ebp - 0x830]
sbb eax, 0
mov dword [ebp - 0x834], edx
mov dword [ebp - 0x830], eax
mov dword [ebp - 0x810], 1
mov dword [ebp - 0xcac0], 0
jmp 0x1170a30
mov ecx, dword [ebp - 0xcac0]
add ecx, 1
mov dword [ebp - 0xcac0], ecx
lea ecx, [ebp - 0x844]
call fcn.011552e0
cmp dword [ebp - 0xcac0], eax
jae 0x1170aee
mov edx, dword [ebp - 0xcac0]
push edx
lea ecx, [ebp - 0x844]
call fcn.01155320
mov dword [ebp - 0xcac4], eax
mov dword [ebp - 0xcac8], 0
jmp 0x1170a7a
mov eax, dword [ebp - 0xcac8]
add eax, 1
mov dword [ebp - 0xcac8], eax
mov ecx, dword [ebp - 0xcac4]
add ecx, 0x10
call fcn.01129490
cmp dword [ebp - 0xcac8], eax
jae 0x1170ae9
mov ecx, dword [ebp - 0xcac8]
push ecx
mov ecx, dword [ebp - 0xcac4]
add ecx, 0x10
call fcn.01086d40
mov edx, dword [eax]
mov dword [ebp - 0xcadc], edx
mov ecx, dword [eax + 4]
mov dword [ebp - 0xcad8], ecx
mov edx, dword [eax + 8]
mov dword [ebp - 0xcad4], edx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xcad0], eax
mov ecx, dword [ebp - 0xcad4]
push ecx
mov edx, dword [ebp - 0xcadc]
push edx
mov ecx, dword [ebp - 0x10b48]
add ecx, 0x140
call fcn.0117cc80
jmp 0x1170a6b
jmp 0x1170a21
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
jmp 0x116f67f
mov eax, dword [ebp - 0x10b48]
cmp dword [eax + 0x134], 0
jne 0x1170f5d
mov byte [ebp - 0x10adc], 0
push 0x3fff
push 0
lea ecx, [ebp - 0x10adb]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x10b48]
mov eax, dword [edx + 0x4320]
push eax
lea ecx, [ebp - 0x484c]
push ecx
lea edx, [ebp - 0x10adc]
push edx
call sub.ntdll.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x10adc]
mov dword [ebp - 0x10ae0], eax
mov dword [ebp - 0x10ae4], 0
jmp 0x1170b8b
mov ecx, dword [ebp - 0x10ae4]
add ecx, 1
mov dword [ebp - 0x10ae4], ecx
mov edx, dword [ebp - 0x10ae0]
movzx eax, word [edx + 6]
sub eax, 1
cmp dword [ebp - 0x10ae4], eax
jge 0x1170c02
mov ecx, dword [ebp - 0x10ae4]
add ecx, 1
shl ecx, 9
mov edx, dword [ebp - 0x10ae0]
movzx eax, word [edx + 4]
add eax, dword [ebp - 0x10ae0]
mov edx, dword [ebp - 0x10ae4]
mov esi, dword [ebp - 0x10ae0]
mov cx, word [esi + ecx - 2]
mov word [eax + edx*2 + 2], cx
mov edx, dword [ebp - 0x10ae0]
movzx eax, word [edx + 4]
mov ecx, dword [ebp - 0x10ae4]
add ecx, 1
shl ecx, 9
mov edx, dword [ebp - 0x10ae0]
mov esi, dword [ebp - 0x10ae0]
mov ax, word [esi + eax]
mov word [edx + ecx - 2], ax
jmp 0x1170b7c
mov ecx, dword [ebp - 0x10b48]
cmp dword [ecx + 0x42a8], 0
je 0x1170cf5
mov edx, dword [ebp - 0x10b48]
mov eax, dword [edx + 0x4320]
push eax
lea ecx, [ebp - 0x10adc]
push ecx
mov edx, dword [ebp - 0x4850]
push edx
mov eax, dword [ebp - 0x4854]
push eax
mov ecx, dword [ebp - 0x10b48]
add ecx, 0x42c0
call fcn.01163f50
test eax, eax
jne 0x1170cf0
call fcn.010906a0
mov dword [ebp - 0x10b94], eax
push 0x514
push 0x1014c8c
call fcn.0116c8e0
push eax
push 0x10124fc
mov ecx, dword [ebp - 0x10b94]
push ecx
mov edx, dword [ebp - 0x10b94]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
push 0xd2
mov edx, dword [ebp - 0x10b48]
mov eax, dword [edx + 0x130]
mov ecx, dword [ebp - 0x10b48]
mov ecx, dword [ecx + 0x130]
mov edx, dword [eax]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10b34], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10b34]
jmp 0x11710c9
jmp 0x1170dca
mov ecx, dword [ebp - 0x10b48]
mov edx, dword [ecx + 0x4320]
push edx
lea eax, [ebp - 0x10adc]
push eax
mov ecx, dword [ebp - 0x4850]
push ecx
mov edx, dword [ebp - 0x4854]
push edx
mov ecx, dword [ebp - 0x82c]
call fcn.01163100
test eax, eax
jne 0x1170dca
call fcn.010906a0
mov dword [ebp - 0x10b98], eax
push 0x51d
push 0x1014c8c
call fcn.0116c8e0
push eax
push 0x10124fc
mov eax, dword [ebp - 0x10b98]
push eax
mov ecx, dword [ebp - 0x10b98]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
push 0xd2
mov ecx, dword [ebp - 0x10b48]
mov edx, dword [ecx + 0x130]
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [eax + 0x130]
mov edx, dword [edx]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10b38], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10b38]
jmp 0x11710c9
cmp dword [ebp + 0x10], 0
jne 0x1170f03
mov dword [ebp - 0x10ae8], 0
jmp 0x1170def
mov ecx, dword [ebp - 0x10ae8]
add ecx, 1
mov dword [ebp - 0x10ae8], ecx
lea ecx, [ebp - 0x844]
call fcn.011552e0
cmp dword [ebp - 0x10ae8], eax
jae 0x1170eec
mov edx, dword [ebp - 0x10ae8]
push edx
lea ecx, [ebp - 0x844]
call fcn.01155320
mov dword [ebp - 0x10af0], eax
mov eax, dword [ebp - 0x10af0]
push eax
mov ecx, dword [ebp - 0x10b48]
call fcn.01171930
mov dword [ebp - 0x10aec], eax
cmp dword [ebp - 0x10aec], 0
je 0x1170ee7
call fcn.010906a0
mov dword [ebp - 0x10b9c], eax
push 0x52c
push 0x1014c8c
call fcn.0116c8e0
push eax
push 0x10124e0
mov ecx, dword [ebp - 0x10b9c]
push ecx
mov edx, dword [ebp - 0x10b9c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x10aec]
push edx
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [eax + 0x130]
mov edx, dword [ebp - 0x10b48]
mov eax, dword [edx + 0x130]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10b3c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10b3c]
jmp 0x11710c9
jmp 0x1170de0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x10b48]
call fcn.01172010
jmp 0x1170f5d
mov dword [ebp - 0x10af4], 0
jmp 0x1170f1e
mov ecx, dword [ebp - 0x10af4]
add ecx, 1
mov dword [ebp - 0x10af4], ecx
lea ecx, [ebp - 0x844]
call fcn.011552e0
cmp dword [ebp - 0x10af4], eax
jae 0x1170f5d
mov edx, dword [ebp - 0x10af4]
push edx
lea ecx, [ebp - 0x844]
call fcn.01155320
mov dword [ebp - 0x10af8], eax
mov eax, dword [ebp - 0x10af8]
push eax
lea ecx, [ebp - 0x828]
call fcn.01160e70
jmp 0x1170f0f
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
jmp 0x116f67f
mov ecx, dword [ebp - 0x10b48]
cmp dword [ecx + 0x134], 0
jne 0x11710a7
cmp dword [ebp + 0x10], 0
je 0x11710a7
mov dword [ebp - 0x10afc], 0
jmp 0x1170fb8
mov edx, dword [ebp - 0x10afc]
add edx, 1
mov dword [ebp - 0x10afc], edx
lea ecx, [ebp - 0x828]
call fcn.011552e0
cmp dword [ebp - 0x10afc], eax
jae 0x1171092
mov eax, dword [ebp - 0x10afc]
push eax
lea ecx, [ebp - 0x828]
call fcn.01155320
mov dword [ebp - 0x10b04], eax
mov ecx, dword [ebp - 0x10b04]
push ecx
mov ecx, dword [ebp - 0x10b48]
call fcn.01171930
mov dword [ebp - 0x10b00], eax
cmp dword [ebp - 0x10b00], 0
je 0x117108d
call fcn.010906a0
mov dword [ebp - 0x10ba0], eax
push 0x54b
push 0x1014c8c
call fcn.0116c8e0
push eax
push 0x10124e0
mov edx, dword [ebp - 0x10ba0]
push edx
mov eax, dword [ebp - 0x10ba0]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
mov eax, dword [ebp - 0x10b00]
push eax
mov ecx, dword [ebp - 0x10b48]
mov edx, dword [ecx + 0x130]
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [eax + 0x130]
mov edx, dword [edx]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10b40], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10b40]
jmp 0x11710c9
jmp 0x1170fa9
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x10b48]
call fcn.01172010
mov dword [ebp - 0x10b44], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10b44]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 0xc