Function at 0x11589f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1182dad
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x10b9c
call sub.ntdll.dll__chkstk
push esi
mov dword [ebp - 0x10b04], ecx
mov eax, dword [ebp - 0x10b04]
cmp dword [eax + 0x41a0], 0
je 0x1158a34
mov eax, 1
jmp 0x115a63e
mov ecx, dword [ebp - 0x10b04]
add ecx, 0xb8
mov dword [ebp - 0x82c], ecx
mov word [ebp - 0x80c], 0
push 0x7fe
push 0
lea edx, [ebp - 0x80a]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
push 0x1012ae8
lea eax, [ebp - 0x80c]
push eax
call sub.ntdll.dll_swprintf
add esp, 8
mov dword [ebp - 0x818], 0
mov dword [ebp - 0x810], 0
xor ecx, ecx
mov byte [ebp - 0x10ac5], cl
lea edx, [ebp - 0x10ac5]
push edx
lea ecx, [ebp - 0x828]
call fcn.01099550
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x4198]
push ecx
push 0
mov ecx, dword [ebp + 0xc]
call fcn.0117c8a0
call fcn.0108d4a0
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x834], 0
mov dword [ebp - 0x830], 0
jmp 0x1158b04
mov edx, dword [ebp - 0x834]
add edx, 1
mov eax, dword [ebp - 0x830]
adc eax, 0
mov dword [ebp - 0x834], edx
mov dword [ebp - 0x830], eax
mov ecx, dword [ebp + 8]
call fcn.010973b0
xor ecx, ecx
mov dword [ebp - 0x10b0c], eax
mov dword [ebp - 0x10b08], ecx
mov edx, dword [ebp - 0x830]
cmp edx, dword [ebp - 0x10b08]
jg 0x115a4ff
jl 0x1158b40
mov eax, dword [ebp - 0x834]
cmp eax, dword [ebp - 0x10b0c]
jae 0x115a4ff
mov ecx, dword [ebp - 0x10b04]
cmp dword [ecx + 0x34], 0
je 0x1158c8d
call fcn.0108d4a0
sub eax, dword [ebp - 0x814]
cmp eax, 0x3e8
jb 0x1158c8d
mov ecx, dword [ebp + 8]
call fcn.010973b0
xor edx, edx
mov dword [ebp - 0xc8cc], eax
mov dword [ebp - 0xc8c8], edx
mov eax, dword [ebp - 0x834]
add eax, 1
mov ecx, dword [ebp - 0x830]
adc ecx, 0
mov dword [ebp - 0x10b14], eax
mov dword [ebp - 0x10b10], ecx
fild qword [ebp - 0x10b14]
fild qword [ebp - 0xc8cc]
fdivp st(1)
fmul qword [0x10061d0]
call fcn.01116030
mov dword [ebp - 0xc998], eax
mov word [ebp - 0xc994], 0
push 0xc6
push 0
lea edx, [ebp - 0xc992]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0xc998]
push eax
mov ecx, dword [ebp - 0xc8c8]
push ecx
mov edx, dword [ebp - 0xc8cc]
push edx
mov eax, dword [ebp - 0x834]
add eax, 1
mov ecx, dword [ebp - 0x830]
adc ecx, 0
push ecx
push eax
push 0x10125b0
lea edx, [ebp - 0xc994]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x1c
lea eax, [ebp - 0xc994]
push eax
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [ecx + 0x30]
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x30]
mov edx, dword [edx]
mov eax, dword [edx + 0x38]
call eax
mov ecx, dword [ebp - 0xc998]
push ecx
push 0x1010e00
lea edx, [ebp - 0xc994]
push edx
call sub.ntdll.dll_swprintf
add esp, 0xc
mov eax, dword [ebp - 0xc998]
push eax
mov ecx, dword [ebp - 0x10b04]
call fcn.0115f800
lea ecx, [ebp - 0xc994]
push ecx
mov edx, dword [ebp - 0x10b04]
mov eax, dword [edx + 0x30]
mov ecx, dword [ebp - 0x10b04]
mov ecx, dword [ecx + 0x30]
mov edx, dword [eax]
mov eax, dword [edx + 0x3c]
call eax
call fcn.0108d4a0
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [ecx + 0x30]
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x30]
mov edx, dword [edx]
mov eax, dword [edx + 0x78]
call eax
test eax, eax
je 0x1158d23
push 0x17
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [ecx + 0x30]
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x30]
mov edx, dword [edx]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x10b18], eax
push 0x385
push 0x1012a84
call fcn.011563d0
push eax
push 0x100b148
mov ecx, dword [ebp - 0x10b18]
push ecx
mov edx, dword [ebp - 0x10b18]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov dword [ebp - 0x10acc], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10acc]
jmp 0x115a63e
mov dword [ebp - 0x818], 0
mov edx, dword [ebp - 0x834]
push edx
mov ecx, dword [ebp + 8]
call fcn.011293f0
mov ecx, dword [eax]
mov dword [ebp - 0x4854], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x4850], edx
cmp dword [ebp - 0x4854], 6
jne 0x1158d5f
cmp dword [ebp - 0x4850], 0
je 0x1158d71
cmp dword [ebp - 0x4854], 1
jne 0x1158d76
cmp dword [ebp - 0x4850], 0
jne 0x1158d76
jmp 0x1158ae6
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x88b4]
call fcn.01146fd0
mov byte [ebp - 4], 1
push 0
lea eax, [ebp - 0x88b4]
push eax
mov ecx, dword [ebp - 0x4850]
push ecx
mov edx, dword [ebp - 0x4854]
push edx
mov ecx, dword [ebp - 0x82c]
call fcn.011623b0
test eax, eax
jne 0x1158e54
call fcn.010906a0
mov dword [ebp - 0x10b1c], eax
mov eax, dword [ebp - 0x4850]
push eax
mov ecx, dword [ebp - 0x4854]
push ecx
push 0x39a
push 0x1012a84
call fcn.011563d0
push eax
push 0x10122f8
mov edx, dword [ebp - 0x10b1c]
push edx
mov eax, dword [ebp - 0x10b1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0x14
push 0xd2
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x30]
mov edx, dword [ebp - 0x10b04]
mov eax, dword [edx + 0x30]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10ad0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10ad0]
jmp 0x115a63e
mov byte [ebp - 0xc8c4], 0
push 0x3fff
push 0
lea ecx, [ebp - 0xc8c3]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov byte [ebp - 0x484c], 0
push 0x3fff
push 0
lea edx, [ebp - 0x484b]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x41a4]
push ecx
lea ecx, [ebp - 0x88b4]
call fcn.011814c0
push eax
lea edx, [ebp - 0xc8c4]
push edx
call sub.ntdll.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x41a4]
push ecx
lea edx, [ebp - 0xc8c4]
push edx
lea eax, [ebp - 0x484c]
push eax
call sub.ntdll.dll_memcpy
add esp, 0xc
lea ecx, [ebp - 0xc8c4]
mov dword [ebp - 0x84c], ecx
lea edx, [ebp - 0x484c]
mov dword [ebp - 0x88c0], edx
mov eax, dword [ebp - 0x84c]
movzx ecx, word [eax + 0x14]
mov dword [ebp - 0x88bc], ecx
mov edx, dword [ebp - 0x84c]
movzx eax, word [edx + 0x14]
push eax
mov ecx, dword [ebp - 0x84c]
push ecx
mov edx, dword [ebp - 0x88c0]
push edx
call sub.ntdll.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x84c]
movzx ecx, word [eax + 0x14]
mov edx, dword [ebp - 0x88c0]
mov dword [edx + 0x18], ecx
xor eax, eax
mov byte [ebp - 0x10ad1], al
lea ecx, [ebp - 0x10ad1]
push ecx
lea ecx, [ebp - 0x844]
call fcn.01099550
mov byte [ebp - 4], 2
mov dword [ebp - 0x4858], 0
lea ecx, [ebp - 0x88b4]
call fcn.01147830
lea ecx, [ebp - 0x88b4]
call fcn.01147ea0
mov dword [ebp - 0x848], eax
cmp dword [ebp - 0x848], 0
je 0x1159e8e
mov edx, dword [ebp - 0x848]
movzx eax, byte [edx + 8]
test eax, eax
jne 0x115900c
mov ecx, dword [ebp - 0x88c0]
add ecx, dword [ebp - 0x88bc]
mov dword [ebp - 0xc9c8], ecx
mov edx, dword [ebp - 0x848]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x848]
push ecx
mov edx, dword [ebp - 0xc9c8]
push edx
call sub.ntdll.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x848]
mov ecx, dword [ebp - 0x88bc]
add ecx, dword [eax + 4]
mov dword [ebp - 0x88bc], ecx
mov edx, dword [ebp - 0x88c0]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp - 0x848]
add eax, dword [ecx + 4]
mov edx, dword [ebp - 0x88c0]
mov dword [edx + 0x18], eax
lea ecx, [ebp - 0x88b4]
call fcn.01148000
mov dword [ebp - 0x848], eax
jmp 0x1158f79
lea ecx, [ebp - 0xc9b4]
call fcn.011611f0
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x848]
push eax
lea ecx, [ebp - 0xc9b4]
call fcn.01161320
test eax, eax
jne 0x11590f7
call fcn.010906a0
mov dword [ebp - 0x10b20], eax
mov ecx, dword [ebp - 0x848]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x4850]
push eax
mov ecx, dword [ebp - 0x4854]
push ecx
push 0x3c1
push 0x1012a84
call fcn.011563d0
push eax
push 0x1012398
mov edx, dword [ebp - 0x10b20]
push edx
mov eax, dword [ebp - 0x10b20]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0x18
push 0xd3
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x30]
mov edx, dword [ebp - 0x10b04]
mov eax, dword [edx + 0x30]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10ad8], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc9b4]
call fcn.01161230
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10ad8]
jmp 0x115a63e
xor ecx, ecx
mov byte [ebp - 0x10ad9], cl
lea edx, [ebp - 0x10ad9]
push edx
lea ecx, [ebp - 0xc9c4]
call fcn.01099550
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xc9b4]
call fcn.011615a0
mov dword [ebp - 0xc99c], eax
mov dword [ebp - 0xc9cc], 0
jmp 0x1159141
mov eax, dword [ebp - 0xc9cc]
add eax, 1
mov dword [ebp - 0xc9cc], eax
mov ecx, dword [ebp - 0xc9cc]
cmp ecx, dword [ebp - 0xc99c]
jae 0x1159c7d
mov edx, dword [ebp - 0xc9cc]
push edx
lea ecx, [ebp - 0xc9b4]
call fcn.01161610
mov dword [ebp - 0xc9d0], eax
mov eax, dword [ebp - 0xc9d0]
mov dword [ebp - 0x10b24], eax
mov ecx, dword [ebp - 0x10b24]
mov edx, dword [ebp - 0x10b24]
mov eax, dword [ecx]
and eax, dword [edx + 4]
cmp eax, 0xffffffff
jne 0x11591ca
mov ecx, dword [ebp - 0xc9d0]
mov edx, dword [ecx]
mov dword [ebp - 0xc9e4], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xc9e0], eax
mov ecx, dword [ebp - 0xc9d0]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0xc9dc], edx
lea eax, [ebp - 0xc9e4]
push eax
lea ecx, [ebp - 0xc9c4]
call fcn.01094c50
jmp 0x1159132
mov ecx, dword [ebp - 0xc9d0]
push ecx
mov ecx, dword [ebp - 0x10b04]
call fcn.0115fda0
test eax, eax
jne 0x11591fa
cmp dword [ebp - 0x4854], 7
jne 0x1159c2e
cmp dword [ebp - 0x4850], 0
jne 0x1159c2e
mov dword [ebp - 0x818], 1
mov dword [ebp - 0xca38], 0
mov dword [ebp - 0xc9fc], 0
mov dword [ebp - 0xc9f8], 0
mov dword [ebp - 0xca14], 0
mov dword [ebp - 0xca10], 0
cmp dword [ebp - 0x4854], 7
jne 0x115927c
cmp dword [ebp - 0x4850], 0
jne 0x115927c
mov edx, dword [ebp - 0xc9d0]
mov eax, dword [edx]
mov dword [ebp - 0xca14], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xca10], ecx
mov edx, dword [ebp - 0xc9d0]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0xc9fc], eax
mov ecx, dword [edx + 0x14]
mov dword [ebp - 0xc9f8], ecx
jmp 0x1159857
mov edx, dword [ebp - 0x10b04]
mov eax, dword [ebp - 0xc9d0]
mov dword [ebp - 0x10b28], edx
mov dword [ebp - 0x10b2c], eax
mov ecx, dword [ebp - 0x10b28]
mov edx, dword [ebp - 0x10b2c]
mov eax, dword [ecx + 0x4184]
cmp eax, dword [edx + 4]
jg 0x1159358
jl 0x11592cb
mov ecx, dword [ebp - 0x10b28]
mov edx, dword [ebp - 0x10b2c]
mov eax, dword [ecx + 0x4180]
cmp eax, dword [edx]
ja 0x1159358
mov ecx, dword [ebp - 0xc9d0]
mov edx, dword [ebp - 0xc9d0]
mov eax, dword [ecx]
add eax, dword [edx + 0x10]
mov ecx, dword [ecx + 4]
adc ecx, dword [edx + 0x14]
mov edx, dword [ebp - 0x10b04]
mov dword [ebp - 0x10b34], eax
mov dword [ebp - 0x10b30], ecx
mov dword [ebp - 0x10b38], edx
mov eax, dword [ebp - 0x10b38]
mov ecx, dword [ebp - 0x10b30]
cmp ecx, dword [eax + 0x418c]
jg 0x1159358
jl 0x1159324
mov edx, dword [ebp - 0x10b38]
mov eax, dword [ebp - 0x10b34]
cmp eax, dword [edx + 0x4188]
ja 0x1159358
mov ecx, dword [ebp - 0xc9d0]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0xc9fc], edx
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0xc9f8], eax
mov ecx, dword [ebp - 0xc9d0]
mov edx, dword [ecx]
mov dword [ebp - 0xca14], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xca10], eax
jmp 0x1159857
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [ebp - 0xc9d0]
mov dword [ebp - 0x10b3c], ecx
mov dword [ebp - 0x10b40], edx
mov eax, dword [ebp - 0x10b3c]
mov ecx, dword [ebp - 0x10b40]
mov edx, dword [eax + 0x4184]
cmp edx, dword [ecx + 4]
jg 0x11594e2
jl 0x11593a7
mov eax, dword [ebp - 0x10b3c]
mov ecx, dword [ebp - 0x10b40]
mov edx, dword [eax + 0x4180]
cmp edx, dword [ecx]
ja 0x11594e2
mov eax, dword [ebp - 0xc9d0]
mov ecx, dword [ebp - 0x10b04]
mov dword [ebp - 0x10b44], eax
mov dword [ebp - 0x10b48], ecx
mov edx, dword [ebp - 0x10b44]
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [edx + 4]
cmp ecx, dword [eax + 0x418c]
jg 0x11594e2
jl 0x11593f6
mov edx, dword [ebp - 0x10b44]
mov eax, dword [ebp - 0x10b48]
mov ecx, dword [edx]
cmp ecx, dword [eax + 0x4188]
jae 0x11594e2
mov edx, dword [ebp - 0xc9d0]
mov eax, dword [ebp - 0xc9d0]
mov ecx, dword [edx]
add ecx, dword [eax + 0x10]
mov edx, dword [edx + 4]
adc edx, dword [eax + 0x14]
mov eax, dword [ebp - 0x10b04]
mov dword [ebp - 0x10b50], ecx
mov dword [ebp - 0x10b4c], edx
mov dword [ebp - 0x10b54], eax
mov ecx, dword [ebp - 0x10b54]
mov edx, dword [ebp - 0x10b4c]
cmp edx, dword [ecx + 0x418c]
jl 0x11594e2
jg 0x1159457
mov eax, dword [ebp - 0x10b54]
mov ecx, dword [ebp - 0x10b50]
cmp ecx, dword [eax + 0x4188]
jbe 0x11594e2
mov edx, dword [ebp - 0x10b04]
mov eax, dword [ebp - 0xc9d0]
mov ecx, dword [edx + 0x4188]
sub ecx, dword [eax]
mov edx, dword [edx + 0x418c]
sbb edx, dword [eax + 4]
mov dword [ebp - 0xc9fc], ecx
mov dword [ebp - 0xc9f8], edx
mov eax, dword [ebp - 0xc9d0]
mov ecx, dword [eax]
mov dword [ebp - 0xca14], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0xca10], edx
mov dword [ebp - 0xca38], 1
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x4188]
mov dword [ebp - 0xca0c], ecx
mov edx, dword [eax + 0x418c]
mov dword [ebp - 0xca08], edx
mov eax, dword [ebp - 0xc9d0]
mov ecx, dword [eax + 0x10]
sub ecx, dword [ebp - 0xc9fc]
mov edx, dword [eax + 0x14]
sbb edx, dword [ebp - 0xc9f8]
mov dword [ebp - 0xca04], ecx
jmp 0x1159857
mov eax, dword [ebp - 0xc9d0]
mov ecx, dword [ebp - 0x10b04]
mov dword [ebp - 0x10b58], eax
mov dword [ebp - 0x10b5c], ecx
mov edx, dword [ebp - 0x10b58]
mov eax, dword [ebp - 0x10b5c]
mov ecx, dword [edx + 4]
cmp ecx, dword [eax + 0x4184]
jg 0x11596a4
jl 0x1159531
mov edx, dword [ebp - 0x10b58]
mov eax, dword [ebp - 0x10b5c]
mov ecx, dword [edx]
cmp ecx, dword [eax + 0x4180]
jae 0x11596a4
mov edx, dword [ebp - 0xc9d0]
mov eax, dword [ebp - 0xc9d0]
mov ecx, dword [edx]
add ecx, dword [eax + 0x10]
mov edx, dword [edx + 4]
adc edx, dword [eax + 0x14]
mov eax, dword [ebp - 0x10b04]
mov dword [ebp - 0x10b60], eax
mov dword [ebp - 0x10b68], ecx
mov dword [ebp - 0x10b64], edx
mov ecx, dword [ebp - 0x10b60]
mov edx, dword [ecx + 0x4184]
cmp edx, dword [ebp - 0x10b64]
jg 0x11596a4
jl 0x1159592
mov eax, dword [ebp - 0x10b60]
mov ecx, dword [eax + 0x4180]
cmp ecx, dword [ebp - 0x10b68]
jae 0x11596a4
mov edx, dword [ebp - 0xc9d0]
mov eax, dword [ebp - 0xc9d0]
mov ecx, dword [edx]
add ecx, dword [eax + 0x10]
mov edx, dword [edx + 4]
adc edx, dword [eax + 0x14]
mov eax, dword [ebp - 0x10b04]
mov dword [ebp - 0x10b70], ecx
mov dword [ebp - 0x10b6c], edx
mov dword [ebp - 0x10b74], eax
mov ecx, dword [ebp - 0x10b74]
mov edx, dword [ebp - 0x10b6c]
cmp edx, dword [ecx + 0x418c]
jg 0x11596a4
jl 0x11595f3
mov eax, dword [ebp - 0x10b74]
mov ecx, dword [ebp - 0x10b70]
cmp ecx, dword [eax + 0x4188]
ja 0x11596a4
mov edx, dword [ebp - 0xc9d0]
mov eax, dword [ebp - 0xc9d0]
mov ecx, dword [edx]
add ecx, dword [eax + 0x10]
mov edx, dword [edx + 4]
adc edx, dword [eax + 0x14]
mov eax, dword [ebp - 0x10b04]
sub ecx, dword [eax + 0x4180]
sbb edx, dword [eax + 0x4184]
mov dword [ebp - 0xc9fc], ecx
mov dword [ebp - 0xc9f8], edx
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [ecx + 0x4180]
mov dword [ebp - 0xca14], edx
mov eax, dword [ecx + 0x4184]
mov dword [ebp - 0xca10], eax
mov ecx, dword [ebp - 0xc9d0]
mov edx, dword [ebp - 0x10b04]
mov eax, dword [ecx]
add eax, dword [edx + 0x4190]
mov ecx, dword [ecx + 4]
adc ecx, dword [edx + 0x4194]
mov dword [ebp - 0xca4c], eax
mov dword [ebp - 0xca48], ecx
mov edx, dword [ebp - 0xc9d0]
mov eax, dword [edx + 0x10]
sub eax, dword [ebp - 0xc9fc]
mov ecx, dword [edx + 0x14]
sbb ecx, dword [ebp - 0xc9f8]
mov dword [ebp - 0xca44], eax
lea edx, [ebp - 0xca4c]
push edx
lea ecx, [ebp - 0xc9c4]
call fcn.01094c50
jmp 0x1159857
mov eax, dword [ebp - 0xc9d0]
mov ecx, dword [ebp - 0x10b04]
mov dword [ebp - 0x10b78], eax
mov dword [ebp - 0x10b7c], ecx
mov edx, dword [ebp - 0x10b78]
mov eax, dword [ebp - 0x10b7c]
mov ecx, dword [edx + 4]
cmp ecx, dword [eax + 0x4184]
jg 0x1159857
jl 0x11596f3
mov edx, dword [ebp - 0x10b78]
mov eax, dword [ebp - 0x10b7c]
mov ecx, dword [edx]
cmp ecx, dword [eax + 0x4180]
jae 0x1159857
mov edx, dword [ebp - 0xc9d0]
mov eax, dword [ebp - 0xc9d0]
mov ecx, dword [edx]
add ecx, dword [eax + 0x10]
mov edx, dword [edx + 4]
adc edx, dword [eax + 0x14]
mov eax, dword [ebp - 0x10b04]
mov dword [ebp - 0x10b84], ecx
mov dword [ebp - 0x10b80], edx
mov dword [ebp - 0x10b88], eax
mov ecx, dword [ebp - 0x10b88]
mov edx, dword [ebp - 0x10b80]
cmp edx, dword [ecx + 0x418c]
jl 0x1159857
jg 0x1159754
mov eax, dword [ebp - 0x10b88]
mov ecx, dword [ebp - 0x10b84]
cmp ecx, dword [eax + 0x4188]
jbe 0x1159857
mov edx, dword [ebp - 0x10b04]
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [edx + 0x4188]
sub ecx, dword [eax + 0x4180]
mov edx, dword [edx + 0x418c]
sbb edx, dword [eax + 0x4184]
mov dword [ebp - 0xc9fc], ecx
mov dword [ebp - 0xc9f8], edx
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x4180]
mov dword [ebp - 0xca14], ecx
mov edx, dword [eax + 0x4184]
mov dword [ebp - 0xca10], edx
mov eax, dword [ebp - 0xc9d0]
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [eax]
add edx, dword [ecx + 0x4190]
mov eax, dword [eax + 4]
adc eax, dword [ecx + 0x4194]
mov dword [ebp - 0xca5c], edx
mov dword [ebp - 0xca58], eax
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [ebp - 0xc9d0]
mov eax, dword [ecx + 0x4180]
sub eax, dword [edx]
mov ecx, dword [ecx + 0x4184]
sbb ecx, dword [edx + 4]
mov dword [ebp - 0xca54], eax
lea edx, [ebp - 0xca5c]
push edx
lea ecx, [ebp - 0xc9c4]
call fcn.01094c50
mov dword [ebp - 0xca38], 1
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x4188]
mov dword [ebp - 0xca0c], ecx
mov edx, dword [eax + 0x418c]
mov dword [ebp - 0xca08], edx
mov eax, dword [ebp - 0xc9d0]
mov ecx, dword [ebp - 0xc9d0]
mov edx, dword [eax]
add edx, dword [ecx + 0x10]
mov eax, dword [eax + 4]
adc eax, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x10b04]
sub edx, dword [ecx + 0x4188]
sbb eax, dword [ecx + 0x418c]
mov dword [ebp - 0xca04], edx
xor edx, edx
mov byte [ebp - 0x10ada], dl
lea eax, [ebp - 0x10ada]
push eax
lea ecx, [ebp - 0xc9f4]
call fcn.01099550
mov byte [ebp - 4], 5
cmp dword [ebp - 0x810], 0
jne 0x115999b
push 0
lea ecx, [ebp - 0xc9f4]
push ecx
mov edx, dword [ebp - 0xc9f8]
push edx
mov eax, dword [ebp - 0xc9fc]
push eax
mov ecx, dword [ebp - 0x10b04]
add ecx, 0x40
call fcn.0117da00
test eax, eax
jne 0x1159996
lea ecx, [ebp - 0x80c]
push ecx
mov edx, dword [ebp - 0x10b04]
mov eax, dword [edx + 0x30]
mov ecx, dword [ebp - 0x10b04]
mov ecx, dword [ecx + 0x30]
mov edx, dword [eax]
mov eax, dword [edx + 0x34]
call eax
call fcn.010906a0
mov dword [ebp - 0x10b8c], eax
push 0x41b
push 0x1012a84
call fcn.011563d0
push eax
push 0x101257c
mov ecx, dword [ebp - 0x10b8c]
push ecx
mov edx, dword [ebp - 0x10b8c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
push 0xd7
mov edx, dword [ebp - 0x10b04]
mov eax, dword [edx + 0x30]
mov ecx, dword [ebp - 0x10b04]
mov ecx, dword [ecx + 0x30]
mov edx, dword [eax]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10ae0], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xc9f4]
call fcn.01155040
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc9c4]
call fcn.01155040
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc9b4]
call fcn.01161230
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10ae0]
jmp 0x115a63e
jmp 0x1159ae4
lea ecx, [ebp - 0xc9c4]
call fcn.01129490
test eax, eax
jbe 0x11599d0
lea ecx, [ebp - 0xc9c4]
call fcn.01129490
sub eax, 1
push eax
lea ecx, [ebp - 0xc9c4]
call fcn.01086d40
push eax
lea ecx, [ebp - 0xc9f4]
call fcn.01094c50
push 1
lea ecx, [ebp - 0xc9f4]
push ecx
mov edx, dword [ebp - 0xc9f8]
push edx
mov eax, dword [ebp - 0xc9fc]
push eax
mov ecx, dword [ebp - 0x10b04]
add ecx, 0x40
call fcn.0117da00
test eax, eax
jne 0x1159ae4
lea ecx, [ebp - 0x80c]
push ecx
mov edx, dword [ebp - 0x10b04]
mov eax, dword [edx + 0x30]
mov ecx, dword [ebp - 0x10b04]
mov ecx, dword [ecx + 0x30]
mov edx, dword [eax]
mov eax, dword [edx + 0x34]
call eax
call fcn.010906a0
mov dword [ebp - 0x10b90], eax
push 0x42a
push 0x1012a84
call fcn.011563d0
push eax
push 0x101257c
mov ecx, dword [ebp - 0x10b90]
push ecx
mov edx, dword [ebp - 0x10b90]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
push 0xd7
mov edx, dword [ebp - 0x10b04]
mov eax, dword [edx + 0x30]
mov ecx, dword [ebp - 0x10b04]
mov ecx, dword [ecx + 0x30]
mov edx, dword [eax]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10ae4], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xc9f4]
call fcn.01155040
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc9c4]
call fcn.01155040
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc9b4]
call fcn.01161230
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10ae4]
jmp 0x115a63e
mov dword [ebp - 0xca60], 0
jmp 0x1159aff
mov ecx, dword [ebp - 0xca60]
add ecx, 1
mov dword [ebp - 0xca60], ecx
lea ecx, [ebp - 0xc9f4]
call fcn.01129490
cmp dword [ebp - 0xca60], eax
jae 0x1159b66
mov edx, dword [ebp - 0xca60]
push edx
lea ecx, [ebp - 0xc9f4]
call fcn.01086d40
mov dword [ebp - 0xca64], eax
mov eax, dword [ebp - 0xca64]
push eax
lea ecx, [ebp - 0xc9c4]
call fcn.01094c50
mov ecx, dword [ebp - 0xca64]
mov edx, dword [ebp - 0x10b04]
mov eax, dword [ecx]
sub eax, dword [edx + 0x4190]
mov ecx, dword [ecx + 4]
sbb ecx, dword [edx + 0x4194]
mov edx, dword [ebp - 0xca64]
mov dword [edx], eax
mov dword [edx + 4], ecx
jmp 0x1159af0
cmp dword [ebp - 0xca38], 0
je 0x1159bab
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [ebp - 0xca0c]
add ecx, dword [eax + 0x4190]
mov edx, dword [ebp - 0xca08]
adc edx, dword [eax + 0x4194]
mov dword [ebp - 0xca0c], ecx
mov dword [ebp - 0xca08], edx
lea eax, [ebp - 0xca0c]
push eax
lea ecx, [ebp - 0xc9c4]
call fcn.01094c50
lea ecx, [ebp - 0xca34]
call fcn.01155b50
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xca14]
mov dword [ebp - 0xca34], ecx
mov edx, dword [ebp - 0xca10]
mov dword [ebp - 0xca30], edx
mov eax, dword [ebp - 0xc9fc]
mov dword [ebp - 0xca2c], eax
mov ecx, dword [ebp - 0xc9f8]
mov dword [ebp - 0xca28], ecx
lea edx, [ebp - 0xc9f4]
push edx
lea ecx, [ebp - 0xca24]
call fcn.011550b0
lea eax, [ebp - 0xca34]
push eax
lea ecx, [ebp - 0x844]
call fcn.01160e70
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xca34]
call fcn.0114b0a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xc9f4]
call fcn.01155040
jmp 0x1159c78
mov ecx, dword [ebp - 0xc9d0]
mov edx, dword [ebp - 0x10b04]
mov eax, dword [ecx]
add eax, dword [edx + 0x4190]
mov ecx, dword [ecx + 4]
adc ecx, dword [edx + 0x4194]
mov dword [ebp - 0xca74], eax
mov dword [ebp - 0xca70], ecx
mov edx, dword [ebp - 0xc9d0]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0xca6c], eax
lea ecx, [ebp - 0xca74]
push ecx
lea ecx, [ebp - 0xc9c4]
call fcn.01094c50
jmp 0x1159132
mov edx, dword [ebp - 0x10b04]
mov dword [ebp - 0x10b94], edx
mov eax, dword [ebp - 0x10b94]
cmp dword [eax + 0x4130], 0xffffffff
jne 0x1159d03
mov ecx, dword [ebp - 0x10b94]
cmp dword [ecx + 0x4134], 0xfeffffff
jne 0x1159d03
mov edx, dword [ebp - 0x4854]
or edx, dword [ebp - 0x4850]
jne 0x1159d03
mov eax, dword [ebp - 0x848]
cmp dword [eax], 0x80
jne 0x1159d03
lea ecx, [ebp - 0xc9c4]
call fcn.01129490
test eax, eax
jbe 0x1159d03
push 0
lea ecx, [ebp - 0xc9c4]
call fcn.01086d40
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [eax]
mov dword [ecx + 0x4130], edx
mov eax, dword [eax + 4]
mov dword [ecx + 0x4134], eax
mov dword [ebp - 0x4858], 1
push 0x80000
call fcn.0108b3e0
add esp, 4
mov dword [ebp - 0x10ae8], eax
mov ecx, dword [ebp - 0x10ae8]
mov dword [ebp - 0xca80], ecx
push 0x80000
push 0
mov edx, dword [ebp - 0xca80]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
lea eax, [ebp - 0xc9c4]
push eax
mov ecx, dword [ebp - 0x10b04]
call fcn.0115aee0
mov ecx, dword [ebp - 0xca80]
push ecx
lea edx, [ebp - 0xc9c4]
push edx
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [ebp - 0x10b04]
call fcn.0115b0c0
mov ecx, dword [ebp - 0xca80]
mov dword [ebp - 0xca7c], ecx
mov edx, dword [ebp - 0x88c0]
add edx, dword [ebp - 0x88bc]
mov dword [ebp - 0xca78], edx
mov eax, dword [ebp - 0x88c0]
mov ecx, dword [eax + 0x18]
mov edx, dword [ebp - 0xca7c]
add ecx, dword [edx + 4]
mov eax, dword [ebp - 0x10b04]
cmp ecx, dword [eax + 0x41a4]
ja 0x1159dca
mov ecx, dword [ebp - 0xca7c]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0xca80]
push eax
mov ecx, dword [ebp - 0xca78]
push ecx
call sub.ntdll.dll_memcpy
add esp, 0xc
jmp 0x1159e0f
call fcn.010906a0
mov dword [ebp - 0x10b98], eax
mov edx, dword [ebp - 0x4850]
push edx
mov eax, dword [ebp - 0x4854]
push eax
push 0x463
push 0x1012a84
call fcn.011563d0
push eax
push 0x1012558
mov ecx, dword [ebp - 0x10b98]
push ecx
mov edx, dword [ebp - 0x10b98]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0x14
mov edx, dword [ebp - 0xca7c]
mov eax, dword [ebp - 0x88bc]
add eax, dword [edx + 4]
mov dword [ebp - 0x88bc], eax
mov ecx, dword [ebp - 0x88c0]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp - 0xca7c]
add edx, dword [eax + 4]
mov ecx, dword [ebp - 0x88c0]
mov dword [ecx + 0x18], edx
mov edx, dword [ebp - 0xca80]
mov dword [ebp - 0x10aec], edx
mov eax, dword [ebp - 0x10aec]
push eax
call fcn.0108b400
add esp, 4
lea ecx, [ebp - 0x88b4]
call fcn.01148000
mov dword [ebp - 0x848], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc9c4]
call fcn.01155040
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc9b4]
call fcn.01161230
jmp 0x1158f79
cmp dword [ebp - 0x818], 0
jne 0x1159eba
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
jmp 0x1158ae6
mov ecx, dword [ebp - 0x88c0]
add ecx, dword [ebp - 0x88bc]
mov dword [ebp - 0x88b8], ecx
mov edx, dword [ebp - 0x88c0]
mov eax, dword [edx + 0x18]
add eax, 8
mov ecx, dword [ebp - 0x10b04]
cmp eax, dword [ecx + 0x41a4]
ja 0x1159ef9
mov edx, dword [ebp - 0x88b8]
mov dword [edx], 0xffffffff
mov dword [edx + 4], 0
mov eax, dword [ebp - 0x88c0]
mov ecx, dword [eax + 0x18]
add ecx, 8
mov edx, dword [ebp - 0x88c0]
mov dword [edx + 0x18], ecx
mov eax, dword [ebp - 0x88c0]
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [eax + 0x18]
cmp edx, dword [ecx + 0x41a4]
ja 0x1159f2f
mov dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x88c0]
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [eax + 0x18]
cmp edx, dword [ecx + 0x41a4]
jbe 0x115a18d
cmp dword [ebp - 0x810], 0
je 0x115a024
lea eax, [ebp - 0x80c]
push eax
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [ecx + 0x30]
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x30]
mov edx, dword [edx]
mov eax, dword [edx + 0x34]
call eax
call fcn.010906a0
mov dword [ebp - 0x10b9c], eax
mov ecx, dword [ebp - 0x4850]
push ecx
mov edx, dword [ebp - 0x4854]
push edx
push 0x486
push 0x1012a84
call fcn.011563d0
push eax
push 0x1012518
mov eax, dword [ebp - 0x10b9c]
push eax
mov ecx, dword [ebp - 0x10b9c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0x14
push 0xd7
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [ecx + 0x30]
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x30]
mov edx, dword [edx]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10af0], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10af0]
jmp 0x115a63e
cmp dword [ebp - 0x4858], 0
je 0x115a051
mov ecx, dword [ebp - 0x10b04]
mov dword [ecx + 0x4130], 0xffffffff
mov dword [ecx + 0x4134], 0xfeffffff
mov dword [ebp - 0x4858], 0
mov edx, dword [ebp - 0x834]
sub edx, 1
mov eax, dword [ebp - 0x830]
sbb eax, 0
mov dword [ebp - 0x834], edx
mov dword [ebp - 0x830], eax
mov dword [ebp - 0x810], 1
mov dword [ebp - 0xca84], 0
jmp 0x115a094
mov ecx, dword [ebp - 0xca84]
add ecx, 1
mov dword [ebp - 0xca84], ecx
lea ecx, [ebp - 0x844]
call fcn.011552e0
cmp dword [ebp - 0xca84], eax
jae 0x115a16a
mov edx, dword [ebp - 0xca84]
push edx
lea ecx, [ebp - 0x844]
call fcn.01155320
mov dword [ebp - 0xca88], eax
mov dword [ebp - 0xca8c], 0
jmp 0x115a0de
mov eax, dword [ebp - 0xca8c]
add eax, 1
mov dword [ebp - 0xca8c], eax
mov ecx, dword [ebp - 0xca88]
add ecx, 0x10
call fcn.01129490
cmp dword [ebp - 0xca8c], eax
jae 0x115a165
mov ecx, dword [ebp - 0xca8c]
push ecx
mov ecx, dword [ebp - 0xca88]
add ecx, 0x10
call fcn.01086d40
mov edx, dword [eax]
mov dword [ebp - 0xca9c], edx
mov ecx, dword [eax + 4]
mov dword [ebp - 0xca98], ecx
mov edx, dword [eax + 8]
mov dword [ebp - 0xca94], edx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xca90], eax
mov ecx, dword [ebp - 0xca94]
push ecx
mov edx, dword [ebp - 0x10b04]
mov eax, dword [ebp - 0xca9c]
add eax, dword [edx + 0x4190]
mov ecx, dword [ebp - 0xca98]
adc ecx, dword [edx + 0x4194]
push eax
mov ecx, dword [ebp - 0x10b04]
add ecx, 0x40
call fcn.0117cc80
jmp 0x115a0cf
jmp 0x115a085
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
jmp 0x1158ae6
mov edx, dword [ebp - 0x10b04]
cmp dword [edx + 0x34], 0
jne 0x115a4dc
mov byte [ebp - 0x10a9c], 0
push 0x3fff
push 0
lea eax, [ebp - 0x10a9b]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [ecx + 0x41a4]
push edx
lea eax, [ebp - 0x484c]
push eax
lea ecx, [ebp - 0x10a9c]
push ecx
call sub.ntdll.dll_memcpy
add esp, 0xc
lea edx, [ebp - 0x10a9c]
mov dword [ebp - 0x10aa0], edx
mov dword [ebp - 0x10aa4], 0
jmp 0x115a204
mov eax, dword [ebp - 0x10aa4]
add eax, 1
mov dword [ebp - 0x10aa4], eax
mov ecx, dword [ebp - 0x10aa0]
movzx edx, word [ecx + 6]
sub edx, 1
cmp dword [ebp - 0x10aa4], edx
jge 0x115a27b
mov eax, dword [ebp - 0x10aa4]
add eax, 1
shl eax, 9
mov ecx, dword [ebp - 0x10aa0]
movzx edx, word [ecx + 4]
add edx, dword [ebp - 0x10aa0]
mov ecx, dword [ebp - 0x10aa4]
mov esi, dword [ebp - 0x10aa0]
mov ax, word [esi + eax - 2]
mov word [edx + ecx*2 + 2], ax
mov ecx, dword [ebp - 0x10aa0]
movzx edx, word [ecx + 4]
mov eax, dword [ebp - 0x10aa4]
add eax, 1
shl eax, 9
mov ecx, dword [ebp - 0x10aa0]
mov esi, dword [ebp - 0x10aa0]
mov dx, word [esi + edx]
mov word [ecx + eax - 2], dx
jmp 0x115a1f5
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x41a4]
push ecx
lea edx, [ebp - 0x10a9c]
push edx
mov eax, dword [ebp - 0x4850]
push eax
mov ecx, dword [ebp - 0x4854]
push ecx
mov ecx, dword [ebp - 0x82c]
call fcn.01163100
test eax, eax
jne 0x115a34c
call fcn.010906a0
mov dword [ebp - 0x10ba0], eax
push 0x4b5
push 0x1012a84
call fcn.011563d0
push eax
push 0x10124fc
mov edx, dword [ebp - 0x10ba0]
push edx
mov eax, dword [ebp - 0x10ba0]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
push 0xd2
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x30]
mov edx, dword [ebp - 0x10b04]
mov eax, dword [edx + 0x30]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10af4], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10af4]
jmp 0x115a63e
cmp dword [ebp + 0x10], 0
jne 0x115a482
mov dword [ebp - 0x10aa8], 0
jmp 0x115a371
mov ecx, dword [ebp - 0x10aa8]
add ecx, 1
mov dword [ebp - 0x10aa8], ecx
lea ecx, [ebp - 0x844]
call fcn.011552e0
cmp dword [ebp - 0x10aa8], eax
jae 0x115a468
mov edx, dword [ebp - 0x10aa8]
push edx
lea ecx, [ebp - 0x844]
call fcn.01155320
mov dword [ebp - 0x10ab0], eax
mov eax, dword [ebp - 0x10ab0]
push eax
mov ecx, dword [ebp - 0x10b04]
call fcn.0115a660
mov dword [ebp - 0x10aac], eax
cmp dword [ebp - 0x10aac], 0
je 0x115a463
call fcn.010906a0
mov dword [ebp - 0x10ba4], eax
push 0x4c3
push 0x1012a84
call fcn.011563d0
push eax
push 0x10124e0
mov ecx, dword [ebp - 0x10ba4]
push ecx
mov edx, dword [ebp - 0x10ba4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x10aac]
push edx
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x30]
mov edx, dword [ebp - 0x10b04]
mov eax, dword [edx + 0x30]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10af8], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10af8]
jmp 0x115a63e
jmp 0x115a362
push 0
push 0
push 0xfeffffff
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x10b04]
call fcn.0115ac30
jmp 0x115a4dc
mov dword [ebp - 0x10ab4], 0
jmp 0x115a49d
mov ecx, dword [ebp - 0x10ab4]
add ecx, 1
mov dword [ebp - 0x10ab4], ecx
lea ecx, [ebp - 0x844]
call fcn.011552e0
cmp dword [ebp - 0x10ab4], eax
jae 0x115a4dc
mov edx, dword [ebp - 0x10ab4]
push edx
lea ecx, [ebp - 0x844]
call fcn.01155320
mov dword [ebp - 0x10ab8], eax
mov eax, dword [ebp - 0x10ab8]
push eax
lea ecx, [ebp - 0x828]
call fcn.01160e70
jmp 0x115a48e
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x844]
call fcn.01155270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88b4]
call fcn.011471e0
jmp 0x1158ae6
mov ecx, dword [ebp - 0x10b04]
cmp dword [ecx + 0x34], 0
jne 0x115a61c
cmp dword [ebp + 0x10], 0
je 0x115a61c
mov dword [ebp - 0x10abc], 0
jmp 0x115a534
mov edx, dword [ebp - 0x10abc]
add edx, 1
mov dword [ebp - 0x10abc], edx
lea ecx, [ebp - 0x828]
call fcn.011552e0
cmp dword [ebp - 0x10abc], eax
jae 0x115a604
mov eax, dword [ebp - 0x10abc]
push eax
lea ecx, [ebp - 0x828]
call fcn.01155320
mov dword [ebp - 0x10ac4], eax
mov ecx, dword [ebp - 0x10ac4]
push ecx
mov ecx, dword [ebp - 0x10b04]
call fcn.0115a660
mov dword [ebp - 0x10ac0], eax
cmp dword [ebp - 0x10ac0], 0
je 0x115a5ff
call fcn.010906a0
mov dword [ebp - 0x10ba8], eax
push 0x4e2
push 0x1012a84
call fcn.011563d0
push eax
push 0x10124e0
mov edx, dword [ebp - 0x10ba8]
push edx
mov eax, dword [ebp - 0x10ba8]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
mov eax, dword [ebp - 0x10ac0]
push eax
mov ecx, dword [ebp - 0x10b04]
mov edx, dword [ecx + 0x30]
mov eax, dword [ebp - 0x10b04]
mov ecx, dword [eax + 0x30]
mov edx, dword [edx]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x10afc], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10afc]
jmp 0x115a63e
jmp 0x115a525
push 0
push 0
push 0xfeffffff
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x10b04]
call fcn.0115ac30
mov dword [ebp - 0x10b00], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.01155270
mov eax, dword [ebp - 0x10b00]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 0xc