Function at 0x102104d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xcac
mov eax, dword [0x104d5404]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x809]
call fcn.10223470
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xa90], eax
lea ecx, [ebp - 0xdc]
push ecx
lea ecx, [ebp - 0x7fd]
call fcn.10223450
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xa94], eax
mov edx, dword [ebp - 0xa90]
push edx
mov eax, dword [ebp - 0xa94]
push eax
mov ecx, 0x104d6420
call fcn.10319a70
mov dword [ebp - 0xa98], eax
mov ecx, dword [0x104d6618]
mov edx, dword [ebp - 0xa98]
mov dword [ecx + 0x118], edx
lea ecx, [ebp - 0xdc]
call fcn.1017a170
lea ecx, [ebp - 0xf4]
call fcn.1017a170
mov ecx, dword [0x104d6618]
call fcn.1022b6a0
push 0x100
push 0
mov eax, dword [0x104d6d90]
add eax, 0x7919
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x100
push 0
mov ecx, dword [0x104d6d90]
add ecx, 0x7e1c
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x400
push 0
mov edx, dword [0x104d6d90]
add edx, 0x7a1c
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x458
call fcn.10353519
add esp, 4
mov dword [ebp - 0x810], eax
cmp dword [ebp - 0x810], 0
je 0x102105f4
mov ecx, dword [ebp - 0x810]
call fcn.102b62f0
mov dword [ebp - 0x814], eax
jmp 0x102105fe
mov dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x814]
mov dword [0x104dcac0], eax
mov ecx, dword [0x104d6d90]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0xab4], edx
push ecx
mov esi, esp
lea eax, [ebp - 0x154]
push eax
mov ecx, 0x103ce4b8
call fcn.1022d7f0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xbf4]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xa9c], eax
lea ecx, [ebp - 0xa9c]
push ecx
mov ecx, 0x104ddaf8
call fcn.101826f0
mov dword [ebp - 0xaa0], eax
lea edx, [ebp - 0x13c]
push edx
mov ecx, dword [ebp - 0xaa0]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xaac], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x103bd784
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc24]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xaa4], eax
lea ecx, [ebp - 0xaa4]
push ecx
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xaa8], eax
lea edx, [ebp - 0x10c]
push edx
mov ecx, dword [ebp - 0xaa8]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp - 0xaac]
push eax
mov ecx, dword [ebp - 0xab0]
push ecx
call dword [ebp - 0xab4]
add esp, 8
mov edx, dword [eax + 1]
mov eax, dword [edx]
mov dword [ebp - 0xab8], eax
mov ecx, dword [0x104d6d90]
mov edx, dword [ebp - 0xab8]
mov dword [ecx + 0x6fc4], edx
lea ecx, [ebp - 0x10c]
call fcn.1017a170
lea ecx, [ebp - 0x1c]
call fcn.1017a170
lea ecx, [ebp - 0x13c]
call fcn.1017a170
lea ecx, [ebp - 0x154]
call fcn.1017a170
mov eax, dword [0x104d6d90]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0xacc], ecx
lea edx, [ebp - 0x19c]
push edx
mov ecx, 0x103cf4a4
call fcn.1022ccb0
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xac4], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x184]
push eax
mov ecx, 0x103ce488
call fcn.1022c530
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc28]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xabc], eax
lea ecx, [ebp - 0xabc]
push ecx
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xac0], eax
lea edx, [ebp - 0x16c]
push edx
mov ecx, dword [ebp - 0xac0]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xac8], eax
mov eax, dword [ebp - 0xac4]
push eax
mov ecx, dword [ebp - 0xac8]
push ecx
call dword [ebp - 0xacc]
add esp, 8
mov edx, dword [eax + 1]
mov eax, dword [edx]
mov dword [ebp - 0x918], eax
lea ecx, [ebp - 0x16c]
call fcn.1017a170
lea ecx, [ebp - 0x184]
call fcn.1017a170
lea ecx, [ebp - 0x19c]
call fcn.1017a170
mov ecx, dword [0x104d6d90]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0xae8], edx
push ecx
mov esi, esp
lea eax, [ebp - 0x1fc]
push eax
mov ecx, 0x103ce520
call fcn.1022c8f0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc2c]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xad0], eax
lea ecx, [ebp - 0xad0]
push ecx
mov ecx, 0x104ddaf8
call fcn.101826f0
mov dword [ebp - 0xad4], eax
lea edx, [ebp - 0x1e4]
push edx
mov ecx, dword [ebp - 0xad4]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xae0], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x1cc]
push eax
mov ecx, 0x103bd79c
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc30]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xad8], eax
lea ecx, [ebp - 0xad8]
push ecx
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xadc], eax
lea edx, [ebp - 0x1b4]
push edx
mov ecx, dword [ebp - 0xadc]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xae4], eax
mov eax, dword [ebp - 0xae0]
push eax
mov ecx, dword [ebp - 0xae4]
push ecx
call dword [ebp - 0xae8]
add esp, 8
mov dword [ebp - 0xa4c], eax
lea ecx, [ebp - 0x1b4]
call fcn.1017a170
lea ecx, [ebp - 0x1cc]
call fcn.1017a170
lea ecx, [ebp - 0x1e4]
call fcn.1017a170
lea ecx, [ebp - 0x1fc]
call fcn.1017a170
mov edx, dword [0x104d6d90]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0xb04], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x25c]
push ecx
mov ecx, 0x103ce550
call fcn.1022c170
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc34]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xaec], eax
lea edx, [ebp - 0xaec]
push edx
mov ecx, 0x104ddaf8
call fcn.101826f0
mov dword [ebp - 0xaf0], eax
lea eax, [ebp - 0x244]
push eax
mov ecx, dword [ebp - 0xaf0]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xafc], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x124]
push ecx
mov ecx, 0x103bd79c
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc38]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xaf4], eax
lea edx, [ebp - 0xaf4]
push edx
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xaf8], eax
lea eax, [ebp - 0x214]
push eax
mov ecx, dword [ebp - 0xaf8]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xb00], eax
mov ecx, dword [ebp - 0xafc]
push ecx
mov edx, dword [ebp - 0xb00]
push edx
call dword [ebp - 0xb04]
add esp, 8
mov dword [ebp - 0xa50], eax
lea ecx, [ebp - 0x214]
call fcn.1017a170
lea ecx, [ebp - 0x124]
call fcn.1017a170
lea ecx, [ebp - 0x244]
call fcn.1017a170
lea ecx, [ebp - 0x25c]
call fcn.1017a170
mov eax, dword [0x104d6d90]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0xb20], ecx
push ecx
mov esi, esp
lea edx, [ebp - 0x2bc]
push edx
mov ecx, 0x103ce55c
call fcn.1018fba0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc3c]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xb08], eax
lea eax, [ebp - 0xb08]
push eax
mov ecx, 0x104ddaf8
call fcn.101826f0
mov dword [ebp - 0xb0c], eax
lea ecx, [ebp - 0x2a4]
push ecx
mov ecx, dword [ebp - 0xb0c]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xb18], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x28c]
push edx
mov ecx, 0x103bd79c
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc40]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xb10], eax
lea eax, [ebp - 0xb10]
push eax
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xb14], eax
lea ecx, [ebp - 0x274]
push ecx
mov ecx, dword [ebp - 0xb14]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xb1c], eax
mov edx, dword [ebp - 0xb18]
push edx
mov eax, dword [ebp - 0xb1c]
push eax
call dword [ebp - 0xb20]
add esp, 8
mov dword [ebp - 0xa58], eax
lea ecx, [ebp - 0x274]
call fcn.1017a170
lea ecx, [ebp - 0x28c]
call fcn.1017a170
lea ecx, [ebp - 0x2a4]
call fcn.1017a170
lea ecx, [ebp - 0x2bc]
call fcn.1017a170
mov ecx, dword [0x104d6d90]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0xb3c], edx
push ecx
mov esi, esp
lea eax, [ebp - 0x31c]
push eax
mov ecx, 0x103ce58c
call fcn.1022c8f0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc44]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xb28], eax
lea ecx, [ebp - 0xb28]
push ecx
mov ecx, 0x104ddaf8
call fcn.101826f0
mov dword [ebp - 0xb2c], eax
lea edx, [ebp - 0x304]
push edx
mov ecx, dword [ebp - 0xb2c]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xb38], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x2ec]
push eax
mov ecx, 0x103bd79c
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc48]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xb30], eax
lea ecx, [ebp - 0xb30]
push ecx
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xb34], eax
lea edx, [ebp - 0x2d4]
push edx
mov ecx, dword [ebp - 0xb34]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x9ac], eax
mov eax, dword [ebp - 0xb38]
push eax
mov ecx, dword [ebp - 0x9ac]
push ecx
call dword [ebp - 0xb3c]
add esp, 8
mov dword [ebp - 0xa54], eax
lea ecx, [ebp - 0x2d4]
call fcn.1017a170
lea ecx, [ebp - 0x2ec]
call fcn.1017a170
lea ecx, [ebp - 0x304]
call fcn.1017a170
lea ecx, [ebp - 0x31c]
call fcn.1017a170
mov edx, dword [0x104d6d90]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0xb50], eax
lea ecx, [ebp - 0x364]
push ecx
mov ecx, 0x103cf398
call fcn.1022cfb0
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xb48], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x34c]
push edx
mov ecx, 0x103bd79c
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc4c]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xb40], eax
lea eax, [ebp - 0xb40]
push eax
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xb44], eax
lea ecx, [ebp - 0x334]
push ecx
mov ecx, dword [ebp - 0xb44]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xb4c], eax
mov edx, dword [ebp - 0xb48]
push edx
mov eax, dword [ebp - 0xb4c]
push eax
call dword [ebp - 0xb50]
add esp, 8
mov dword [ebp - 0xc50], eax
lea ecx, [ebp - 0x334]
call fcn.1017a170
lea ecx, [ebp - 0x34c]
call fcn.1017a170
lea ecx, [ebp - 0x364]
call fcn.1017a170
mov ecx, dword [0x104d6d90]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0xb6c], edx
push ecx
mov esi, esp
lea eax, [ebp - 0x3c4]
push eax
mov ecx, 0x103ce5f4
call fcn.1018fc60
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc54]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xb54], eax
lea ecx, [ebp - 0xb54]
push ecx
mov ecx, 0x104ddaf8
call fcn.101826f0
mov dword [ebp - 0xb58], eax
lea edx, [ebp - 0x3ac]
push edx
mov ecx, dword [ebp - 0xb58]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xb64], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x394]
push eax
mov ecx, 0x103bd79c
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc58]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xb5c], eax
lea ecx, [ebp - 0xb5c]
push ecx
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xb60], eax
lea edx, [ebp - 0x37c]
push edx
mov ecx, dword [ebp - 0xb60]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xb68], eax
mov eax, dword [ebp - 0xb64]
push eax
mov ecx, dword [ebp - 0xb68]
push ecx
call dword [ebp - 0xb6c]
add esp, 8
mov dword [ebp - 0xa64], eax
lea ecx, [ebp - 0x37c]
call fcn.1017a170
lea ecx, [ebp - 0x394]
call fcn.1017a170
lea ecx, [ebp - 0x3ac]
call fcn.1017a170
lea ecx, [ebp - 0x3c4]
call fcn.1017a170
mov edx, dword [0x104d6d90]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0xb88], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x424]
push ecx
mov ecx, 0x103ce60c
call fcn.1022c830
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc5c]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xb70], eax
lea edx, [ebp - 0xb70]
push edx
mov ecx, 0x104ddaf8
call fcn.101826f0
mov dword [ebp - 0xb74], eax
lea eax, [ebp - 0x40c]
push eax
mov ecx, dword [ebp - 0xb74]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xb80], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x3f4]
push ecx
mov ecx, 0x103bd79c
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc60]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xb78], eax
lea edx, [ebp - 0xb78]
push edx
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xb7c], eax
lea eax, [ebp - 0x3dc]
push eax
mov ecx, dword [ebp - 0xb7c]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xb84], eax
mov ecx, dword [ebp - 0xb80]
push ecx
mov edx, dword [ebp - 0xb84]
push edx
call dword [ebp - 0xb88]
add esp, 8
mov dword [ebp - 0xc64], eax
lea ecx, [ebp - 0x3dc]
call fcn.1017a170
lea ecx, [ebp - 0x3f4]
call fcn.1017a170
lea ecx, [ebp - 0x40c]
call fcn.1017a170
lea ecx, [ebp - 0x424]
call fcn.1017a170
mov eax, dword [0x104d6d90]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0xb9c], ecx
lea edx, [ebp - 0x454]
push edx
mov ecx, 0x103cf458
call fcn.1022cfb0
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xb94], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x43c]
push eax
mov ecx, 0x103bd79c
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc68]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xb8c], eax
lea ecx, [ebp - 0xb8c]
push ecx
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xb90], eax
lea edx, [ebp - 0xc4]
push edx
mov ecx, dword [ebp - 0xb90]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xb98], eax
mov eax, dword [ebp - 0xb94]
push eax
mov ecx, dword [ebp - 0xb98]
push ecx
call dword [ebp - 0xb9c]
add esp, 8
mov dword [ebp - 0xa60], eax
lea ecx, [ebp - 0xc4]
call fcn.1017a170
lea ecx, [ebp - 0x43c]
call fcn.1017a170
lea ecx, [ebp - 0x454]
call fcn.1017a170
mov edx, dword [0x104d6d90]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0xbb0], eax
lea ecx, [ebp - 0x49c]
push ecx
mov ecx, 0x103cf2c0
call fcn.1022d2b0
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xba8], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x484]
push edx
mov ecx, 0x103bd79c
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc6c]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xba0], eax
lea eax, [ebp - 0xba0]
push eax
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xba4], eax
lea ecx, [ebp - 0x46c]
push ecx
mov ecx, dword [ebp - 0xba4]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xbac], eax
mov edx, dword [ebp - 0xba8]
push edx
mov eax, dword [ebp - 0xbac]
push eax
call dword [ebp - 0xbb0]
add esp, 8
mov dword [ebp - 0xa70], eax
lea ecx, [ebp - 0x46c]
call fcn.1017a170
lea ecx, [ebp - 0x484]
call fcn.1017a170
lea ecx, [ebp - 0x49c]
call fcn.1017a170
mov ecx, dword [0x104d6d90]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0xbc4], edx
lea eax, [ebp - 0x4e4]
push eax
mov ecx, 0x103cf320
call fcn.1022d070
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xbbc], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x4cc]
push ecx
mov ecx, 0x103bd784
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc70]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xbb4], eax
lea edx, [ebp - 0xbb4]
push edx
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xbb8], eax
lea eax, [ebp - 0x4b4]
push eax
mov ecx, dword [ebp - 0xbb8]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xbc0], eax
mov ecx, dword [ebp - 0xbbc]
push ecx
mov edx, dword [ebp - 0xbc0]
push edx
call dword [ebp - 0xbc4]
add esp, 8
mov dword [ebp - 0xc74], eax
lea ecx, [ebp - 0x4b4]
call fcn.1017a170
lea ecx, [ebp - 0x4cc]
call fcn.1017a170
lea ecx, [ebp - 0x4e4]
call fcn.1017a170
mov eax, dword [0x104d6d90]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0xbd8], ecx
lea edx, [ebp - 0x52c]
push edx
mov ecx, 0x103cf428
call fcn.1018fba0
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xbd0], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x514]
push eax
mov ecx, 0x103bd79c
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc78]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xbc8], eax
lea ecx, [ebp - 0xbc8]
push ecx
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xbcc], eax
lea edx, [ebp - 0x4fc]
push edx
mov ecx, dword [ebp - 0xbcc]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xbd4], eax
mov eax, dword [ebp - 0xbd0]
push eax
mov ecx, dword [ebp - 0xbd4]
push ecx
call dword [ebp - 0xbd8]
add esp, 8
mov dword [ebp - 0xa5c], eax
lea ecx, [ebp - 0x4fc]
call fcn.1017a170
lea ecx, [ebp - 0x514]
call fcn.1017a170
lea ecx, [ebp - 0x52c]
call fcn.1017a170
mov edx, dword [0x104d6d90]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0x820], eax
lea ecx, [ebp - 0x574]
push ecx
mov ecx, 0x103cf3e8
call fcn.1022cd70
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0x818], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x55c]
push edx
mov ecx, 0x103ce3c0
call fcn.1022c5f0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc7c]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xbdc], eax
lea eax, [ebp - 0xbdc]
push eax
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xbe0], eax
lea ecx, [ebp - 0x544]
push ecx
mov ecx, dword [ebp - 0xbe0]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x81c], eax
mov edx, dword [ebp - 0x818]
push edx
mov eax, dword [ebp - 0x81c]
push eax
call dword [ebp - 0x820]
add esp, 8
mov dword [ebp - 0xa68], eax
lea ecx, [ebp - 0x544]
call fcn.1017a170
lea ecx, [ebp - 0x55c]
call fcn.1017a170
lea ecx, [ebp - 0x574]
call fcn.1017a170
mov ecx, dword [0x104d6d90]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x834], edx
lea eax, [ebp - 0x5bc]
push eax
mov ecx, 0x103cf4e0
call fcn.1022d730
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0x82c], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x5a4]
push ecx
mov ecx, 0x103bd784
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc80]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x824], eax
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0x828], eax
lea eax, [ebp - 0x58c]
push eax
mov ecx, dword [ebp - 0x828]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x830], eax
mov ecx, dword [ebp - 0x82c]
push ecx
mov edx, dword [ebp - 0x830]
push edx
call dword [ebp - 0x834]
add esp, 8
mov dword [ebp - 0xa6c], eax
lea ecx, [ebp - 0x58c]
call fcn.1017a170
lea ecx, [ebp - 0x5a4]
call fcn.1017a170
lea ecx, [ebp - 0x5bc]
call fcn.1017a170
lea eax, [ebp - 0x5d4]
push eax
mov ecx, 0x103cecb8
call fcn.1022c3b0
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0x838], eax
mov ecx, dword [ebp - 0x838]
push ecx
mov ecx, dword [0x104d6cec]
call fcn.1017df90
mov dword [ebp - 0x8e8], eax
lea ecx, [ebp - 0x5d4]
call fcn.1017a170
lea edx, [ebp - 0x5ec]
push edx
mov ecx, 0x103cecd0
call fcn.1022ce30
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x83c]
push eax
mov ecx, dword [0x104d6cec]
call fcn.1017df90
mov dword [ebp - 0x8e0], eax
lea ecx, [ebp - 0x5ec]
call fcn.1017a170
lea ecx, [ebp - 0x604]
push ecx
mov ecx, 0x103ced18
call fcn.1018fd20
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0x840], eax
mov edx, dword [ebp - 0x840]
push edx
mov ecx, dword [0x104d6cec]
call fcn.1017df90
mov dword [ebp - 0x8b0], eax
lea ecx, [ebp - 0x604]
call fcn.1017a170
lea eax, [ebp - 0x844]
push eax
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6db8
call fcn.10223540
lea ecx, [ebp - 0x844]
call fcn.102267b0
lea ecx, [ebp - 0x848]
push ecx
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6dec
call fcn.10223540
lea ecx, [ebp - 0x848]
call fcn.102267b0
lea edx, [ebp - 0x84c]
push edx
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6dbc
call fcn.10223540
lea ecx, [ebp - 0x84c]
call fcn.102267b0
lea eax, [ebp - 0x850]
push eax
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6dc0
call fcn.10223540
lea ecx, [ebp - 0x850]
call fcn.102267b0
lea ecx, [ebp - 0x854]
push ecx
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6e14
call fcn.10223540
lea ecx, [ebp - 0x854]
call fcn.102267b0
lea edx, [ebp - 0x858]
push edx
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6dcc
call fcn.10223540
lea ecx, [ebp - 0x858]
call fcn.102267b0
lea eax, [ebp - 0x85c]
push eax
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6dd0
call fcn.10223540
lea ecx, [ebp - 0x85c]
call fcn.102267b0
lea ecx, [ebp - 0x860]
push ecx
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6dd8
call fcn.10223540
lea ecx, [ebp - 0x860]
call fcn.102267b0
lea edx, [ebp - 0x864]
push edx
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6ddc
call fcn.10223540
lea ecx, [ebp - 0x864]
call fcn.102267b0
lea eax, [ebp - 0x868]
push eax
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6de0
call fcn.10223540
lea ecx, [ebp - 0x868]
call fcn.102267b0
lea ecx, [ebp - 0x86c]
push ecx
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6de8
call fcn.10223540
lea ecx, [ebp - 0x86c]
call fcn.102267b0
lea edx, [ebp - 0x870]
push edx
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6de4
call fcn.10223540
lea ecx, [ebp - 0x870]
call fcn.102267b0
lea eax, [ebp - 0x874]
push eax
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6db4
call fcn.10223540
lea ecx, [ebp - 0x874]
call fcn.102267b0
lea ecx, [ebp - 0x878]
push ecx
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6dc8
call fcn.10223540
lea ecx, [ebp - 0x878]
call fcn.102267b0
lea edx, [ebp - 0x87c]
push edx
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6e10
call fcn.10223540
lea ecx, [ebp - 0x87c]
call fcn.102267b0
lea eax, [ebp - 0x880]
push eax
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6dc4
call fcn.10223540
lea ecx, [ebp - 0x880]
call fcn.102267b0
lea ecx, [ebp - 0x884]
push ecx
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6dd4
call fcn.10223540
lea ecx, [ebp - 0x884]
call fcn.102267b0
lea edx, [ebp - 0x888]
push edx
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6df0
call fcn.10223540
lea ecx, [ebp - 0x888]
call fcn.102267b0
lea eax, [ebp - 0x88c]
push eax
call fcn.10225860
add esp, 4
push eax
mov ecx, 0x104d6dfc
call fcn.10223540
lea ecx, [ebp - 0x88c]
call fcn.102267b0
mov ecx, 0x104d6dec
call fcn.1017aec0
mov dword [ebp - 0x894], eax
mov ecx, dword [0x104d6cf8]
mov dword [ebp - 0x890], ecx
mov edx, dword [ebp - 0x890]
push edx
mov ecx, dword [ebp - 0x894]
call fcn.10229dc0
mov ecx, 0x104d6dbc
call fcn.1017aec0
mov dword [ebp - 0x89c], eax
mov eax, dword [0x104d6d0c]
mov dword [ebp - 0x898], eax
mov ecx, dword [ebp - 0x898]
push ecx
mov ecx, dword [ebp - 0x89c]
call fcn.10229dc0
mov ecx, 0x104d6dc4
call fcn.1017aec0
mov dword [ebp - 0x8a4], eax
mov edx, dword [0x104d6cdc]
mov dword [ebp - 0x8a0], edx
mov eax, dword [ebp - 0x8a0]
push eax
mov ecx, dword [ebp - 0x8a4]
call fcn.10229dc0
mov ecx, 0x104d6dc0
call fcn.1017aec0
mov dword [ebp - 0x8ac], eax
mov ecx, dword [0x104d6ce0]
mov dword [ebp - 0x8a8], ecx
mov edx, dword [ebp - 0x8a8]
push edx
mov ecx, dword [ebp - 0x8ac]
call fcn.10229dc0
mov ecx, 0x104d6e14
call fcn.1017aec0
mov dword [ebp - 0x8b4], eax
mov eax, dword [ebp - 0x8b0]
push eax
mov ecx, dword [ebp - 0x8b4]
call fcn.10229dc0
mov ecx, 0x104d6dcc
call fcn.1017aec0
mov dword [ebp - 0x8bc], eax
mov ecx, dword [0x104d6d2c]
mov dword [ebp - 0x8b8], ecx
mov edx, dword [ebp - 0x8b8]
push edx
mov ecx, dword [ebp - 0x8bc]
call fcn.10229dc0
mov ecx, 0x104d6dd0
call fcn.1017aec0
mov dword [ebp - 0x8c4], eax
mov eax, dword [0x104d6d10]
mov dword [ebp - 0x8c0], eax
mov ecx, dword [ebp - 0x8c0]
push ecx
mov ecx, dword [ebp - 0x8c4]
call fcn.10229dc0
mov ecx, 0x104d6dd8
call fcn.1017aec0
mov dword [ebp - 0x8cc], eax
mov edx, dword [0x104d6d40]
mov dword [ebp - 0x8c8], edx
mov eax, dword [ebp - 0x8c8]
push eax
mov ecx, dword [ebp - 0x8cc]
call fcn.10229dc0
mov ecx, 0x104d6ddc
call fcn.1017aec0
mov dword [ebp - 0x8d4], eax
mov ecx, dword [0x104d6d3c]
mov dword [ebp - 0x8d0], ecx
mov edx, dword [ebp - 0x8d0]
push edx
mov ecx, dword [ebp - 0x8d4]
call fcn.10229dc0
mov ecx, 0x104d6de0
call fcn.1017aec0
mov dword [ebp - 0x8dc], eax
mov eax, dword [0x104d6cf8]
mov edx, dword [eax]
mov ecx, dword [0x104d6cf8]
mov eax, dword [edx + 0xac]
call eax
mov dword [ebp - 0x8d8], eax
mov ecx, dword [ebp - 0x8d8]
push ecx
mov ecx, dword [ebp - 0x8dc]
call fcn.10229dc0
mov ecx, 0x104d6de8
call fcn.1017aec0
mov dword [ebp - 0x8e4], eax
mov edx, dword [ebp - 0x8e0]
push edx
mov ecx, dword [ebp - 0x8e4]
call fcn.10229dc0
mov ecx, 0x104d6de4
call fcn.1017aec0
mov dword [ebp - 0x8ec], eax
mov eax, dword [ebp - 0x8e8]
push eax
mov ecx, dword [ebp - 0x8ec]
call fcn.10229dc0
mov ecx, 0x104d6dc8
call fcn.1017aec0
mov dword [ebp - 0x8f4], eax
mov ecx, dword [0x104d6d1c]
mov dword [ebp - 0x8f0], ecx
mov edx, dword [ebp - 0x8f0]
push edx
mov ecx, dword [ebp - 0x8f4]
call fcn.10229dc0
mov ecx, 0x104d6e10
call fcn.1017aec0
mov dword [ebp - 0x8fc], eax
mov eax, dword [0x104d6ce8]
mov dword [ebp - 0x8f8], eax
mov ecx, dword [ebp - 0x8f8]
push ecx
mov ecx, dword [ebp - 0x8fc]
call fcn.10229dc0
mov ecx, 0x104d6dd4
call fcn.1017aec0
mov dword [ebp - 0x904], eax
mov edx, dword [0x104d6d18]
mov dword [ebp - 0x900], edx
mov eax, dword [ebp - 0x900]
push eax
mov ecx, dword [ebp - 0x904]
call fcn.10229dc0
mov ecx, 0x104d6db8
call fcn.1017aec0
mov dword [ebp - 0x90c], eax
mov ecx, dword [0x104d6d90]
mov edx, dword [ecx + 0x6fc4]
add edx, 8
mov dword [ebp - 0x908], edx
mov eax, dword [ebp - 0x908]
push eax
mov ecx, dword [ebp - 0x90c]
call fcn.10229dc0
mov ecx, 0x104d6df0
call fcn.1017aec0
mov dword [ebp - 0x914], eax
mov ecx, dword [0x104d6cfc]
mov dword [ebp - 0x910], ecx
mov edx, dword [ebp - 0x910]
push edx
mov ecx, dword [ebp - 0x914]
call fcn.10229dc0
mov ecx, 0x104d6dfc
call fcn.1017aec0
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x918]
push eax
mov ecx, dword [ebp - 0x91c]
call fcn.10229dc0
mov ecx, 0x104d6dbc
call fcn.1017aec0
mov dword [ebp - 0x928], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x61c]
push ecx
mov ecx, 0x103cf8a8
call fcn.1022c770
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc84]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x920], eax
lea edx, [ebp - 0x920]
push edx
mov ecx, 0x104ddb00
call fcn.1018e420
mov eax, dword [eax]
mov dword [ebp - 0x924], eax
push 0x10213ae0
mov ecx, dword [ebp - 0x924]
push ecx
mov ecx, dword [ebp - 0x928]
call fcn.10223620
lea ecx, [ebp - 0x61c]
call fcn.1017a170
mov ecx, 0x104d6dc4
call fcn.1017aec0
mov dword [ebp - 0x934], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x634]
push edx
mov ecx, 0x103cf61c
call fcn.1018fba0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc88]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x92c], eax
lea eax, [ebp - 0x92c]
push eax
mov ecx, 0x104ddb00
call fcn.1018e420
mov ecx, dword [eax]
mov dword [ebp - 0x930], ecx
push 0x10218d40
mov edx, dword [ebp - 0x930]
push edx
mov ecx, dword [ebp - 0x934]
call fcn.10223620
lea ecx, [ebp - 0x634]
call fcn.1017a170
mov ecx, 0x104d6dc4
call fcn.1017aec0
mov dword [ebp - 0x940], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x64c]
push eax
mov ecx, 0x103cf690
call fcn.10183c70
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc8c]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x938], eax
lea ecx, [ebp - 0x938]
push ecx
mov ecx, 0x104ddb00
call fcn.1018e420
mov edx, dword [eax]
mov dword [ebp - 0x93c], edx
push 0x10214cd0
mov eax, dword [ebp - 0x93c]
push eax
mov ecx, dword [ebp - 0x940]
call fcn.10223620
lea ecx, [ebp - 0x64c]
call fcn.1017a170
mov ecx, 0x104d6dc4
call fcn.1017aec0
mov dword [ebp - 0x94c], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x664]
push ecx
mov ecx, 0x103cf7d4
call fcn.1018fae0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc90]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x944], eax
lea edx, [ebp - 0x944]
push edx
mov ecx, 0x104ddb00
call fcn.1018e420
mov eax, dword [eax]
mov dword [ebp - 0x948], eax
push 0x10216670
mov ecx, dword [ebp - 0x948]
push ecx
mov ecx, dword [ebp - 0x94c]
call fcn.10223620
lea ecx, [ebp - 0x664]
call fcn.1017a170
mov ecx, 0x104d6dec
call fcn.1017aec0
mov dword [ebp - 0x958], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x67c]
push edx
mov ecx, 0x103cf6d4
call fcn.1022c470
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc94]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x950], eax
lea eax, [ebp - 0x950]
push eax
mov ecx, 0x104ddb00
call fcn.1018e420
mov ecx, dword [eax]
mov dword [ebp - 0x954], ecx
push 0x1021fcb0
mov edx, dword [ebp - 0x954]
push edx
mov ecx, dword [ebp - 0x958]
call fcn.10223620
lea ecx, [ebp - 0x67c]
call fcn.1017a170
mov ecx, 0x104d6dec
call fcn.1017aec0
mov dword [ebp - 0x964], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x694]
push eax
mov ecx, 0x103cf6f4
call fcn.1022c6b0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc98]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x95c], eax
lea ecx, [ebp - 0x95c]
push ecx
mov ecx, 0x104ddb00
call fcn.1018e420
mov edx, dword [eax]
mov dword [ebp - 0x960], edx
push 0x1021fee0
mov eax, dword [ebp - 0x960]
push eax
mov ecx, dword [ebp - 0x964]
call fcn.10223620
lea ecx, [ebp - 0x694]
call fcn.1017a170
mov ecx, 0x104d6dec
call fcn.1017aec0
mov dword [ebp - 0x970], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x6ac]
push ecx
mov ecx, 0x103cf71c
call fcn.1022d8b0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc9c]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x968], eax
lea edx, [ebp - 0x968]
push edx
mov ecx, 0x104ddb00
call fcn.1018e420
mov eax, dword [eax]
mov dword [ebp - 0x96c], eax
push 0x10220100
mov ecx, dword [ebp - 0x96c]
push ecx
mov ecx, dword [ebp - 0x970]
call fcn.10223620
lea ecx, [ebp - 0x6ac]
call fcn.1017a170
mov ecx, 0x104d6dec
call fcn.1017aec0
mov dword [ebp - 0x97c], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x6c4]
push edx
mov ecx, 0x103cf76c
call fcn.1022cbf0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xca0]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x974], eax
lea eax, [ebp - 0x974]
push eax
mov ecx, 0x104ddb00
call fcn.1018e420
mov ecx, dword [eax]
mov dword [ebp - 0x978], ecx
push 0x102143c0
mov edx, dword [ebp - 0x978]
push edx
mov ecx, dword [ebp - 0x97c]
call fcn.10223620
lea ecx, [ebp - 0x6c4]
call fcn.1017a170
mov ecx, 0x104d6e14
call fcn.1017aec0
mov dword [ebp - 0x988], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x6dc]
push eax
mov ecx, 0x103cf7a4
call fcn.1018fba0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xca4]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x980], eax
lea ecx, [ebp - 0x980]
push ecx
mov ecx, 0x104ddb00
call fcn.1018e420
mov edx, dword [eax]
mov dword [ebp - 0x984], edx
push 0x10219940
mov eax, dword [ebp - 0x984]
push eax
mov ecx, dword [ebp - 0x988]
call fcn.10223620
lea ecx, [ebp - 0x6dc]
call fcn.1017a170
mov ecx, 0x104d6dc0
call fcn.1017aec0
mov dword [ebp - 0x994], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x6f4]
push ecx
mov ecx, 0x103cf7f8
call fcn.1022c770
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xca8]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x98c], eax
lea edx, [ebp - 0x98c]
push edx
mov ecx, 0x104ddb00
call fcn.1018e420
mov eax, dword [eax]
mov dword [ebp - 0x990], eax
push 0x10219910
mov ecx, dword [ebp - 0x990]
push ecx
mov ecx, dword [ebp - 0x994]
call fcn.10223620
lea ecx, [ebp - 0x6f4]
call fcn.1017a170
mov ecx, 0x104d6dc0
call fcn.1017aec0
mov dword [ebp - 0x9a0], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x70c]
push edx
mov ecx, 0x103cf824
call fcn.1022c6b0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xbe4]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x998], eax
lea eax, [ebp - 0x998]
push eax
mov ecx, 0x104ddb00
call fcn.1018e420
mov ecx, dword [eax]
mov dword [ebp - 0x99c], ecx
push 0x1021e300
mov edx, dword [ebp - 0x99c]
push edx
mov ecx, dword [ebp - 0x9a0]
call fcn.10223620
lea ecx, [ebp - 0x70c]
call fcn.1017a170
mov ecx, 0x104d6dc0
call fcn.1017aec0
mov dword [ebp - 0xb24], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x724]
push eax
mov ecx, 0x103cf84c
call fcn.1022c530
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xbe8]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x9a4], eax
lea ecx, [ebp - 0x9a4]
push ecx
mov ecx, 0x104ddb00
call fcn.1018e420
mov edx, dword [eax]
mov dword [ebp - 0x9a8], edx
push 0x1021e710
mov eax, dword [ebp - 0x9a8]
push eax
mov ecx, dword [ebp - 0xb24]
call fcn.10223620
lea ecx, [ebp - 0x724]
call fcn.1017a170
mov ecx, 0x104d6dc0
call fcn.1017aec0
mov dword [ebp - 0x9b8], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x73c]
push ecx
mov ecx, 0x103cf870
call fcn.1022cb30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xbec]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x9b0], eax
lea edx, [ebp - 0x9b0]
push edx
mov ecx, 0x104ddb00
call fcn.1018e420
mov eax, dword [eax]
mov dword [ebp - 0x9b4], eax
push 0x1021afa0
mov ecx, dword [ebp - 0x9b4]
push ecx
mov ecx, dword [ebp - 0x9b8]
call fcn.10223620
lea ecx, [ebp - 0x73c]
call fcn.1017a170
mov ecx, 0x104d6dcc
call fcn.1017aec0
mov dword [ebp - 0x9c4], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x754]
push edx
mov ecx, 0x103cf8d4
call fcn.1018fae0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xbf0]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x9bc], eax
lea eax, [ebp - 0x9bc]
push eax
mov ecx, 0x104ddb00
call fcn.1018e420
mov ecx, dword [eax]
mov dword [ebp - 0x9c0], ecx
push 0x1021dd20
mov edx, dword [ebp - 0x9c0]
push edx
mov ecx, dword [ebp - 0x9c4]
call fcn.10223620
lea ecx, [ebp - 0x754]
call fcn.1017a170
mov ecx, 0x104d6db8
call fcn.1017aec0
mov dword [ebp - 0x9d0], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x76c]
push eax
mov ecx, 0x103cf8f8
call fcn.1022c5f0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xcac]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x9c8], eax
lea ecx, [ebp - 0x9c8]
push ecx
mov ecx, 0x104ddb00
call fcn.1018e420
mov edx, dword [eax]
mov dword [ebp - 0x9cc], edx
push 0x102144a0
mov eax, dword [ebp - 0x9cc]
push eax
mov ecx, dword [ebp - 0x9d0]
call fcn.10223620
lea ecx, [ebp - 0x76c]
call fcn.1017a170
mov ecx, 0x104d6db8
call fcn.1017aec0
mov dword [ebp - 0x9dc], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x784]
push ecx
mov ecx, 0x103cf920
call fcn.1022c530
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xbf8]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x9d4], eax
lea edx, [ebp - 0x9d4]
push edx
mov ecx, 0x104ddb00
call fcn.1018e420
mov eax, dword [eax]
mov dword [ebp - 0x9d8], eax
push 0x102147e0
mov ecx, dword [ebp - 0x9d8]
push ecx
mov ecx, dword [ebp - 0x9dc]
call fcn.10223620
lea ecx, [ebp - 0x784]
call fcn.1017a170
mov ecx, 0x104d6dd0
call fcn.1017aec0
mov dword [ebp - 0x9e8], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x79c]
push edx
mov ecx, 0x103cf944
call fcn.1018fba0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xbfc]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x9e0], eax
lea eax, [ebp - 0x9e0]
push eax
mov ecx, 0x104ddb00
call fcn.1018e420
mov ecx, dword [eax]
mov dword [ebp - 0x9e4], ecx
push 0x1021eef0
mov edx, dword [ebp - 0x9e4]
push edx
mov ecx, dword [ebp - 0x9e8]
call fcn.10223620
lea ecx, [ebp - 0x79c]
call fcn.1017a170
mov ecx, 0x104d6ddc
call fcn.1017aec0
mov dword [ebp - 0x9f4], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x7b4]
push eax
mov ecx, 0x103cf5c4
call fcn.1022c8f0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc00]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x9ec], eax
lea ecx, [ebp - 0x9ec]
push ecx
mov ecx, 0x104ddb00
call fcn.1018e420
mov edx, dword [eax]
mov dword [ebp - 0x9f0], edx
push 0x10215530
mov eax, dword [ebp - 0x9f0]
push eax
mov ecx, dword [ebp - 0x9f4]
call fcn.10223620
lea ecx, [ebp - 0x7b4]
call fcn.1017a170
mov ecx, 0x104d6dd8
call fcn.1017aec0
mov dword [ebp - 0xa00], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x7cc]
push ecx
mov ecx, 0x103cf974
call fcn.1018fae0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc04]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0x9f8], eax
lea edx, [ebp - 0x9f8]
push edx
mov ecx, 0x104ddb00
call fcn.1018e420
mov eax, dword [eax]
mov dword [ebp - 0x9fc], eax
push 0x102150c0
mov ecx, dword [ebp - 0x9fc]
push ecx
mov ecx, dword [ebp - 0xa00]
call fcn.10223620
lea ecx, [ebp - 0x7cc]
call fcn.1017a170
mov ecx, 0x104d6dd8
call fcn.1017aec0
mov dword [ebp - 0xa0c], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x7e4]
push edx
mov ecx, 0x103cf998
call fcn.1022c6b0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc08]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xa04], eax
lea eax, [ebp - 0xa04]
push eax
mov ecx, 0x104ddb00
call fcn.1018e420
mov ecx, dword [eax]
mov dword [ebp - 0xa08], ecx
push 0x10215300
mov edx, dword [ebp - 0xa08]
push edx
mov ecx, dword [ebp - 0xa0c]
call fcn.10223620
lea ecx, [ebp - 0x7e4]
call fcn.1017a170
mov ecx, 0x104d6de0
call fcn.1017aec0
mov dword [ebp - 0xa18], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x7fc]
push eax
mov ecx, 0x103cf9c0
call fcn.1022c8f0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc0c]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xa10], eax
lea ecx, [ebp - 0xa10]
push ecx
mov ecx, 0x104ddb00
call fcn.1018e420
mov edx, dword [eax]
mov dword [ebp - 0xa14], edx
push 0x1021f840
mov eax, dword [ebp - 0xa14]
push eax
mov ecx, dword [ebp - 0xa18]
call fcn.10223620
lea ecx, [ebp - 0x7fc]
call fcn.1017a170
mov ecx, 0x104d6de4
call fcn.1017aec0
mov dword [ebp - 0xa24], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x34]
push ecx
mov ecx, 0x103cf9f0
call fcn.1018fd20
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc10]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xa1c], eax
lea edx, [ebp - 0xa1c]
push edx
mov ecx, 0x104ddb00
call fcn.1018e420
mov eax, dword [eax]
mov dword [ebp - 0xa20], eax
push 0x10218b10
mov ecx, dword [ebp - 0xa20]
push ecx
mov ecx, dword [ebp - 0xa24]
call fcn.10223620
lea ecx, [ebp - 0x34]
call fcn.1017a170
mov ecx, 0x104d6dc8
call fcn.1017aec0
mov dword [ebp - 0xa30], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x4c]
push edx
mov ecx, 0x103cfa10
call fcn.1022c470
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc14]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xa28], eax
lea eax, [ebp - 0xa28]
push eax
mov ecx, 0x104ddb00
call fcn.1018e420
mov ecx, dword [eax]
mov dword [ebp - 0xa2c], ecx
push 0x1021aeb0
mov edx, dword [ebp - 0xa2c]
push edx
mov ecx, dword [ebp - 0xa30]
call fcn.10223620
lea ecx, [ebp - 0x4c]
call fcn.1017a170
mov ecx, 0x104d6dfc
call fcn.1017aec0
mov dword [ebp - 0xa3c], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x64]
push eax
mov ecx, 0x103cfa30
call fcn.1018fd20
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc18]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xa34], eax
lea ecx, [ebp - 0xa34]
push ecx
mov ecx, 0x104ddb00
call fcn.1018e420
mov edx, dword [eax]
mov dword [ebp - 0xa38], edx
push 0x1021a390
mov eax, dword [ebp - 0xa38]
push eax
mov ecx, dword [ebp - 0xa3c]
call fcn.10223620
lea ecx, [ebp - 0x64]
call fcn.1017a170
mov ecx, 0x104d6dfc
call fcn.1017aec0
mov dword [ebp - 0xa48], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x7c]
push ecx
mov ecx, 0x103cfa50
call fcn.1022d7f0
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc1c]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xa40], eax
lea edx, [ebp - 0xa40]
push edx
mov ecx, 0x104ddb00
call fcn.1018e420
mov eax, dword [eax]
mov dword [ebp - 0xa44], eax
push 0x1021a910
mov ecx, dword [ebp - 0xa44]
push ecx
mov ecx, dword [ebp - 0xa48]
call fcn.10223620
lea ecx, [ebp - 0x7c]
call fcn.1017a170
mov edx, dword [ebp - 0xa4c]
push edx
push 0x10216b10
mov ecx, 0x104d5c60
call fcn.102254c0
mov eax, dword [ebp - 0xa50]
push eax
push 0x10216af0
mov ecx, 0x104d5c60
call fcn.102254c0
mov ecx, dword [ebp - 0xa54]
push ecx
push 0x10216a20
mov ecx, 0x104d5c60
call fcn.102254c0
mov edx, dword [ebp - 0xa58]
push edx
push 0x10216690
mov ecx, 0x104d5c60
call fcn.102254c0
mov eax, dword [ebp - 0xa5c]
push eax
push 0x10216f40
mov ecx, 0x104d5c60
call fcn.102254c0
mov ecx, dword [ebp - 0xa60]
push ecx
push 0x10217100
mov ecx, 0x104d5c60
call fcn.102254c0
mov edx, dword [ebp - 0xa64]
push edx
push 0x102167a0
mov ecx, 0x104d5c60
call fcn.102254c0
mov eax, dword [ebp - 0xa68]
push eax
push 0x1021e870
mov ecx, 0x104d5c60
call fcn.102254c0
mov ecx, dword [ebp - 0xa6c]
push ecx
push 0x1021eeb0
mov ecx, 0x104d5c60
call fcn.102254c0
mov edx, dword [ebp - 0xa70]
push edx
push 0x10216e50
mov ecx, 0x104d5c60
call fcn.102254c0
mov ecx, 0x104d5c60
call fcn.1022b0e0
mov eax, dword [0x104d6d90]
cmp dword [eax + 0x68], 0
je 0x10212ae4
push 0x1021aa40
push 0xfffffffffffffffc
mov ecx, dword [0x104d6d90]
mov edx, dword [ecx + 0x68]
push edx
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [ebp - 0xa74], eax
mov eax, dword [0x104d6d90]
mov ecx, dword [ebp - 0xa74]
mov dword [eax + 0x6c], ecx
mov edx, dword [0x104d6d90]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0xa88], eax
lea ecx, [ebp - 0xac]
push ecx
mov ecx, 0x103cf100
call fcn.1022ce30
mov ecx, eax
call fcn.1017aed0
mov dword [ebp - 0xa80], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x22c]
push edx
mov ecx, 0x103bd784
call fcn.10183d30
mov ecx, eax
call fcn.1017aed0
push eax
mov ecx, esi
call fcn.10182380
lea ecx, [ebp - 0xc20]
call fcn.101823c0
mov ecx, eax
call fcn.1017aec0
mov dword [ebp - 0xa78], eax
lea eax, [ebp - 0xa78]
push eax
mov ecx, 0x104ddb08
call fcn.101826f0
mov dword [ebp - 0xa7c], eax
lea ecx, [ebp - 0x94]
push ecx
mov ecx, dword [ebp - 0xa7c]
call fcn.10182a60
mov ecx, eax
call fcn.1017aed0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xa84], eax
mov edx, dword [ebp - 0xa80]
push edx
mov eax, dword [ebp - 0xa84]
push eax
call dword [ebp - 0xa88]
add esp, 8
add eax, 1
mov dword [ebp - 0x808], eax
lea ecx, [ebp - 0x94]
call fcn.1017a170
lea ecx, [ebp - 0x22c]
call fcn.1017a170
lea ecx, [ebp - 0xac]
call fcn.1017a170
mov dword [ebp - 0xa8c], 0x11
mov dword [ebp - 0x804], 0
lea ecx, [ebp - 0x804]
push ecx
push 0x40
push 4
mov edx, dword [ebp - 0x808]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [ebp - 0x808]
mov ecx, dword [ebp - 0xa8c]
mov dword [eax], ecx
lea edx, [ebp - 0x804]
push edx
mov eax, dword [ebp - 0x804]
push eax
push 4
mov ecx, dword [ebp - 0x808]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
call fcn.1021d6d0
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10353876
mov esp, ebp
pop ebp
ret