Function at 0x10db400
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1181c18
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa58
push esi
push edi
mov dword [ebp - 0x990], ecx
push 1
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0x990]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp - 0x990]
mov ecx, dword [ecx + 0x18]
mov edx, dword [eax]
mov eax, dword [edx + 0x24]
call eax
push eax
call fcn.010c46d0
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
call fcn.010c46d0
mov dword [ebp - 0xf8], eax
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0xec], 0
mov ecx, dword [ebp - 0xd8]
push ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xf8]
mov edx, dword [eax + 4]
call edx
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xe0]
mov eax, dword [edx + 8]
call eax
push 0
push 0
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xe0]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10db576
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10db576
push 6
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x994], eax
push 0x1258
push 0x100add4
call fcn.010cda00
push eax
push 0x100bed4
mov ecx, dword [ebp - 0x994]
push ecx
mov edx, dword [ebp - 0x994]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10de080
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xe0]
mov edx, dword [eax]
call edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x20]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0x1c], 0
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0x998]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x998]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x99c], eax
mov ecx, dword [ebp - 0x99c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x99c]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0xe8], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0xe4], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0xe8], 0
jne 0x10db66e
mov edx, dword [ebp - 0xd8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xd8]
mov edx, dword [eax + 0x30]
call edx
test eax, eax
jne 0x10db66e
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov ecx, dword [ebp - 0x990]
call fcn.010d5f80
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x14], 1
mov edx, dword [ebp - 0xe8]
push edx
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x64]
call eax
mov dword [ebp - 0x24], 0
cmp dword [ebp - 0xf0], 0
je 0x10dbd5a
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x9a4], esi
mov dword [ebp - 0x9a0], edi
mov dword [ebp - 0x9ac], eax
mov dword [ebp - 0x9a8], edx
mov ecx, dword [ebp - 0x9a0]
cmp ecx, dword [ebp - 0x9a8]
ja 0x10db72c
jb 0x10db6dc
mov edx, dword [ebp - 0x9a4]
cmp edx, dword [ebp - 0x9ac]
jae 0x10db72c
call fcn.010906a0
mov dword [ebp - 0x9b0], eax
push 0x1277
push 0x100add4
call fcn.010cda00
push eax
push 0x100be3c
mov eax, dword [ebp - 0x9b0]
push eax
mov ecx, dword [ebp - 0x9b0]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
push 0xd6
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
xor eax, eax
jmp 0x10de080
push 0x60
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
push 0x30
push 0
lea ecx, [ebp - 0x17c]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x17c], 0xffffffff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x178], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x16c], edx
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x15c], 0
lea ecx, [ebp - 0x17c]
push ecx
lea ecx, [ebp - 0x14c]
call fcn.01109a30
mov dword [ebp - 4], 0
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x14c]
call fcn.01109a80
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10db83c
push 4
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
push 0x64
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x974], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14c]
call fcn.01133540
mov eax, dword [ebp - 0x974]
jmp 0x10de080
cmp dword [ebp - 0x1c], 0
je 0x10dbd43
push 4
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
push 0x100bdf8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x38]
call eax
mov dword [ebp - 0x180], 0x100b700
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xbc]
call eax
mov dword [ebp - 0x1a0], eax
xor ecx, ecx
mov byte [ebp - 0x975], cl
lea edx, [ebp - 0x975]
push edx
mov eax, dword [ebp - 0x1a0]
push eax
lea ecx, [ebp - 0x19c]
call fcn.01086de0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x180]
push ecx
lea ecx, [ebp - 0x19c]
call fcn.0109a620
lea ecx, [ebp - 0x19c]
call fcn.01086e30
push eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0xb8]
call edx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x19c]
call fcn.01086e10
push 0
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10db927
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x990]
call fcn.010d5f80
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
push eax
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x64]
call eax
push 0
push 0
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10db9c9
push 6
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0x9b4], eax
push 0x12ac
push 0x100add4
call fcn.010cda00
push eax
push 0x100bed4
mov ecx, dword [ebp - 0x9b4]
push ecx
mov edx, dword [ebp - 0x9b4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov dword [ebp - 0x97c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14c]
call fcn.01133540
mov eax, dword [ebp - 0x97c]
jmp 0x10de080
push 0x9c4
call fcn.0108d6a0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x990]
call fcn.010d6440
mov dword [ebp - 0x188], eax
mov ecx, dword [ebp - 0x188]
mov dword [ebp - 0xe8], ecx
mov edx, dword [ebp - 0xe8]
cmp edx, dword [ebp - 0x20]
je 0x10dba0b
cmp dword [ebp - 0xe8], 0
jne 0x10dba3a
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10dba3a
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x990]
call fcn.010d5f80
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x184], eax
jmp 0x10dba78
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
je 0x10dbcbe
mov ecx, dword [ebp - 0x184]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x184]
mov eax, dword [edx + 0x3c]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10dbaa1
jmp 0x10dba5f
mov edx, dword [ebp - 0x18c]
mov dword [ebp - 0x9b8], edx
mov eax, dword [ebp - 0x9b8]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov ecx, dword [ebp - 0x990]
call fcn.010f7930
mov dword [ebp - 0x1b0], eax
mov edx, dword [ebp - 0x18c]
add edx, 1
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x184]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x184]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
je 0x10dbb2a
mov ecx, dword [ebp - 0x184]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x184]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x184]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x184]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x990]
call fcn.010d5800
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 8]
cmp edx, dword [ecx + 0xc]
je 0x10dbbb3
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x54]
call eax
mov dword [ebp - 0x1c4], eax
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x50]
call eax
mov dword [ebp - 0x1c0], eax
mov ecx, dword [ebp - 0x184]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x184]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x1c0]
push ecx
mov edx, dword [ebp - 0x1c4]
push edx
mov eax, dword [ebp - 0x184]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x184]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x990]
call fcn.010d5be0
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x184]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x184]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp - 0x184]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x184]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x990]
call fcn.010c9ea0
test eax, eax
jne 0x10dbc2d
call fcn.010906a0
mov dword [ebp - 0x9bc], eax
push 0x12d4
push 0x100add4
call fcn.010cda00
push eax
push 0x100bdb4
mov ecx, dword [ebp - 0x9bc]
push ecx
mov edx, dword [ebp - 0x9bc]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x1b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1b0]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x184]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x184]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1b8], edx
mov ecx, dword [ebp - 0x1b8]
push ecx
mov edx, dword [ebp - 0x1bc]
push edx
mov eax, dword [ebp - 0x1a8]
push eax
mov ecx, dword [ebp - 0x1ac]
push ecx
mov edx, dword [ebp - 0x184]
push edx
mov eax, dword [ebp - 0xe8]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x990]
call fcn.010df760
push 0x100bb1c
mov eax, dword [ebp - 0x184]
push eax
call fcn.010ff2e0
jmp 0x10dba5f
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xbc]
call eax
mov dword [ebp - 0x1d8], eax
xor ecx, ecx
mov byte [ebp - 0x97d], cl
lea edx, [ebp - 0x97d]
push edx
mov eax, dword [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x1d4]
call fcn.01086de0
mov byte [ebp - 4], 2
push 0x1001464
lea ecx, [ebp - 0x1d4]
call fcn.0109a620
lea ecx, [ebp - 0x1d4]
call fcn.01086e30
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xb8]
call eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1d4]
call fcn.01086e10
push 0x32
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14c]
call fcn.01133540
jmp 0x10ddd43
xor ecx, ecx
mov byte [ebp - 0x97e], cl
lea edx, [ebp - 0x97e]
push edx
lea ecx, [ebp - 0x204]
call fcn.01099550
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1f0], eax
jmp 0x10dbda3
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0
je 0x10dbe70
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x388], 0
push 0x16e
push 0
lea ecx, [ebp - 0x384]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x1f0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1f0]
mov edx, dword [eax + 0xc]
call edx
mov ecx, 0x5d
mov esi, eax
lea edi, [ebp - 0x38c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0x1f0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1f0]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xb
je 0x10dbe28
lea ecx, [ebp - 0x38c]
push ecx
lea ecx, [ebp - 0x204]
call fcn.010bae60
mov edx, dword [ebp - 0x1f0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1f0]
mov edx, dword [eax + 0x64]
call edx
test eax, eax
je 0x10dbe4b
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0x1f0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1f0]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10dbe6b
mov ecx, dword [ebp - 0x1f0]
mov dword [ebp - 0x28], ecx
jmp 0x10dbd90
mov dword [ebp - 0x1e4], 0xffffffff
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x390], 0
jmp 0x10dbeb3
mov edx, dword [ebp - 0x390]
add edx, 1
mov dword [ebp - 0x390], edx
lea ecx, [ebp - 0x204]
call fcn.010badf0
cmp dword [ebp - 0x390], eax
jae 0x10dbf4d
mov eax, dword [ebp - 0x390]
push eax
lea ecx, [ebp - 0x204]
call fcn.010bae30
cmp dword [eax + 0xb5], 0
je 0x10dbf09
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x1e4], ecx
mov edx, dword [ebp - 0x390]
push edx
lea ecx, [ebp - 0x204]
call fcn.010bae30
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x390]
push eax
lea ecx, [ebp - 0x204]
call fcn.010bae30
cmp dword [eax + 0xb9], 0
je 0x10dbf48
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x214], ecx
mov edx, dword [ebp - 0x390]
push edx
lea ecx, [ebp - 0x204]
call fcn.010bae30
mov dword [ebp - 0x1ec], eax
jmp 0x10dbea4
lea ecx, [ebp - 0x204]
call fcn.010badf0
cmp eax, 3
jbe 0x10dbfaa
cmp dword [ebp - 0x1e4], 3
jl 0x10dbf7c
lea ecx, [ebp - 0x204]
call fcn.010badf0
sub eax, 4
cmp dword [ebp - 0x1e4], eax
jbe 0x10dbfa8
mov dword [ebp - 0x214], 0xffffffff
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1ec], 0
mov ecx, dword [ebp - 0x1ec]
mov dword [ebp - 0x210], ecx
jmp 0x10dbfd6
mov dword [ebp - 0x214], 0xffffffff
mov edx, dword [ebp - 0x214]
mov dword [ebp - 0x1e4], edx
mov dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x210], eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1e0], 0
jmp 0x10dc014
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
je 0x10dc04a
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x3c]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10dc039
jmp 0x10dbffb
mov edx, dword [ebp - 0x1e0]
add edx, 1
mov dword [ebp - 0x1e0], edx
jmp 0x10dbffb
mov dword [ebp - 0x1f4], 0
mov eax, 0x64
cdq
idiv dword [ebp - 0x1e0]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1dc], eax
jmp 0x10dc0ae
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
je 0x10ddd31
mov dword [ebp - 0x1f4], 0
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x3c]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10dc0e1
jmp 0x10dc095
mov edx, dword [ebp - 0x20c]
mov dword [ebp - 0x9c0], edx
mov eax, dword [ebp - 0x9c0]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov ecx, dword [ebp - 0x990]
call fcn.010f7930
mov dword [ebp - 0x3a4], eax
mov edx, dword [ebp - 0x20c]
add edx, 1
mov dword [ebp - 0x20c], edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x30]
call eax
mov esi, eax
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x30]
call eax
cmp esi, eax
jne 0x10dc1bc
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x70]
call eax
push eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xf4]
call eax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x64]
call eax
push eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xec]
call eax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x68]
call eax
push eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xf0]
call eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x30]
call eax
mov esi, eax
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x30]
call eax
cmp esi, eax
jne 0x10dc279
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x58]
call eax
mov ecx, 0x22
mov esi, eax
lea edi, [ebp - 0x434]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [eax]
mov dword [ebp - 0x434], ecx
mov edx, dword [ebp - 0x3a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [eax + 0x58]
call edx
add eax, 0x68
mov ecx, dword [eax]
mov dword [ebp - 0x3cc], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x3c8], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x3c4], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x3c0], edx
lea eax, [ebp - 0x434]
push eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xe8]
call eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x100]
call eax
test eax, eax
je 0x10dc29f
mov ecx, dword [ebp - 0x1dc]
mov dword [ebp - 0xec], ecx
mov edx, dword [ebp - 0x1dc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [eax + 0xfc]
call edx
test eax, eax
jne 0x10dc2d7
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x100]
call eax
test eax, eax
je 0x10dc3d1
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x9c4], eax
mov ecx, dword [ebp - 0x9c4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9c4]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10dc3cc
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x9c8], eax
mov ecx, dword [ebp - 0x9c8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9c8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10dc3cc
cmp dword [ebp - 0x1e4], 0xffffffff
je 0x10dc3cc
cmp dword [ebp - 0x214], 0xffffffff
je 0x10dc3cc
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xfc]
call eax
test eax, eax
je 0x10dc390
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x3a4], ecx
mov edx, dword [ebp - 0x20c]
sub edx, 1
mov dword [ebp - 0x20c], edx
mov dword [ebp - 0x1f4], 1
jmp 0x10dc3cc
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x100]
call eax
test eax, eax
je 0x10dc3cc
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x3a4], ecx
mov edx, dword [ebp - 0x20c]
sub edx, 1
mov dword [ebp - 0x20c], edx
mov dword [ebp - 0x1f4], 1
jmp 0x10dc683
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x9cc], eax
mov ecx, dword [ebp - 0x9cc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9cc]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10dc683
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x9d0], eax
mov ecx, dword [ebp - 0x9d0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9d0]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10dc683
cmp dword [ebp - 0x1e4], 0xffffffff
je 0x10dc683
cmp dword [ebp - 0x214], 0xffffffff
je 0x10dc683
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x64]
call eax
test eax, eax
jne 0x10dc47b
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10dc4f2
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x9d4], ecx
mov edx, dword [ebp - 0x9d4]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x990]
call fcn.010f7930
mov dword [ebp - 0x3a4], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 1
mov dword [ebp - 0x20c], ecx
cmp dword [ebp - 0x3a4], 0
jne 0x10dc4bd
jmp 0x10dc4f2
mov edx, dword [ebp - 0x3a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [eax + 0x64]
call edx
test eax, eax
jne 0x10dc4ed
mov eax, dword [ebp - 0x3a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
jne 0x10dc4ed
jmp 0x10dc4f2
jmp 0x10dc44d
cmp dword [ebp - 0x3a4], 0
je 0x10dc525
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x30]
call eax
push eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x94]
call eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x24]
call eax
test eax, eax
jne 0x10dc683
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x9dc], esi
mov dword [ebp - 0x9d8], edi
mov dword [ebp - 0x9e4], eax
mov dword [ebp - 0x9e0], edx
mov ecx, dword [ebp - 0x9dc]
cmp ecx, dword [ebp - 0x9e4]
jne 0x10dc5a2
mov edx, dword [ebp - 0x9d8]
cmp edx, dword [ebp - 0x9e0]
je 0x10dc683
mov eax, dword [ebp - 0x1dc]
push eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x20]
call eax
push edx
push eax
call fcn.0110d210
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x9ec], esi
mov dword [ebp - 0x9e8], edi
mov dword [ebp - 0x9f4], eax
mov dword [ebp - 0x9f0], edx
mov ecx, dword [ebp - 0x9e8]
cmp ecx, dword [ebp - 0x9f0]
jl 0x10dc62f
jg 0x10dc623
mov edx, dword [ebp - 0x9ec]
cmp edx, dword [ebp - 0x9f4]
jbe 0x10dc62f
mov dword [ebp - 0x9f8], 1
jmp 0x10dc639
mov dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0x9f8]
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
mov edx, dword [ebp - 0x438]
push edx
mov eax, dword [ebp - 0x1dc]
push eax
call fcn.0110d180
cmp dword [ebp - 0xf4], 0
je 0x10dcb68
cmp dword [ebp - 0x28], 0
je 0x10dcb68
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x28]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xa00], esi
mov dword [ebp - 0x9fc], edi
mov dword [ebp - 0xa08], eax
mov dword [ebp - 0xa04], edx
mov ecx, dword [ebp - 0xa00]
cmp ecx, dword [ebp - 0xa08]
jne 0x10dcb68
mov edx, dword [ebp - 0x9fc]
cmp edx, dword [ebp - 0xa04]
jne 0x10dcb68
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10dcb68
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10dcb68
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xfc]
call eax
test eax, eax
jne 0x10dc762
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x100]
call eax
test eax, eax
je 0x10dcb68
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x58]
call eax
mov ecx, eax
mov eax, 0x6400000
xor edx, edx
div ecx
xor edx, edx
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], edx
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x468], edx
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x448], edx
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x528], 0
mov dword [ebp - 0x450], 0
mov dword [ebp - 0x470], 0
call fcn.01117e60
mov dword [ebp - 0x474], eax
mov ecx, dword [ebp - 0x46c]
add ecx, dword [ebp - 0x444]
mov edx, dword [ebp - 0x468]
adc edx, dword [ebp - 0x440]
mov dword [ebp - 0x46c], ecx
mov dword [ebp - 0x468], edx
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x50]
call eax
mov esi, eax
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x54]
call eax
imul esi, eax
mov dword [ebp - 0x460], esi
mov eax, dword [ebp - 0x460]
cdq
push edx
push eax
mov ecx, dword [ebp - 0x468]
push ecx
mov edx, dword [ebp - 0x46c]
push edx
call sub.ntdll.dll__allrem
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0
jle 0x10dc8c4
mov eax, dword [ebp - 0x460]
sub eax, dword [ebp - 0x454]
cdq
add eax, dword [ebp - 0x46c]
mov ecx, dword [ebp - 0x468]
adc ecx, edx
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x468], ecx
mov edx, dword [ebp - 0x468]
push edx
mov eax, dword [ebp - 0x46c]
push eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x80]
call eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x20]
call eax
mov ecx, dword [ebp - 0x46c]
sub ecx, dword [ebp - 0x44c]
mov esi, dword [ebp - 0x468]
sbb esi, dword [ebp - 0x448]
sub eax, ecx
sbb edx, esi
push edx
push eax
mov edx, dword [ebp - 0x1dc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [eax + 0x84]
call edx
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x20]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xa8]
call eax
push 0xb0
push 0
lea ecx, [ebp - 0x524]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
push 0
lea edx, [ebp - 0x470]
push edx
lea eax, [ebp - 0x450]
push eax
lea ecx, [ebp - 0x528]
push ecx
lea edx, [ebp - 0x45c]
push edx
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x524], eax
mov word [ebp - 0x480], 2
mov dword [ebp - 0x484], 0
mov ecx, dword [ebp - 0x44c]
mov dword [ebp - 0x50c], ecx
mov edx, dword [ebp - 0x448]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x51c], eax
mov ecx, dword [ebp - 0x448]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x444]
mov dword [ebp - 0x514], edx
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x510], eax
mov cx, word [ebp - 0x528]
mov word [ebp - 0x47e], cx
mov dx, word [ebp - 0x450]
mov word [ebp - 0x47c], dx
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x524]
push ecx
mov edx, dword [ebp - 0x474]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x474]
mov edx, dword [eax + 0x14]
call edx
test eax, eax
jne 0x10dca96
call fcn.010906a0
mov dword [ebp - 0xa0c], eax
push 0x13a5
push 0x100add4
call fcn.010cda00
push eax
push 0x100beb0
mov eax, dword [ebp - 0xa0c]
push eax
mov ecx, dword [ebp - 0xa0c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
mov dword [ebp - 0x1c], 0
jmp 0x10ddd31
push 0xa5
push 0
lea ecx, [ebp - 0xd4]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x44c]
mov dword [ebp - 0xd4], edx
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 0x444]
mov dword [ebp - 0xcc], ecx
mov edx, dword [ebp - 0x440]
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0x36], 0
mov dword [ebp - 0xba], 1
mov dword [ebp - 0xc2], 1
mov word [ebp - 0x32], 2
mov byte [ebp - 0x30], 0xb
mov dword [ebp - 0x24], 1
push 0
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xc8]
call eax
push 0
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xbc]
call eax
push 0
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xf4]
call eax
push 0
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xec]
call eax
mov ecx, dword [ebp - 0x1e8]
add ecx, 1
mov dword [ebp - 0x1e8], ecx
mov edx, dword [ebp - 0x3a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], edx
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x3a8], edx
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x3a0], eax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x88]
call eax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x3c]
call eax
push eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xa0]
call eax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x70]
call eax
push eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xc8]
call eax
cmp dword [ebp - 0x3a0], 5
je 0x10dcc98
cmp dword [ebp - 0x3a0], 4
je 0x10dcc98
cmp dword [ebp - 0x3a0], 0xc
je 0x10dcc98
cmp dword [ebp - 0x3a0], 0xa
je 0x10dcc98
cmp dword [ebp - 0x3a0], 6
je 0x10dcc98
cmp dword [ebp - 0x3a0], 7
je 0x10dcc98
cmp dword [ebp - 0x3a0], 8
je 0x10dcc98
cmp dword [ebp - 0x3a0], 9
jne 0x10dcd88
mov ecx, dword [ebp - 0x208]
sub ecx, 2
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x28]
call edx
push 0x30
push 0
lea eax, [ebp - 0x5ac]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x5ac], 0xffffffff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x5a8], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x59c], ecx
mov edx, dword [ebp - 0x3ac]
mov dword [ebp - 0x594], edx
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x590], eax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x5a4], eax
mov dword [ebp - 0x5a0], edx
mov ecx, dword [ebp - 0x39c]
mov dword [ebp - 0x584], ecx
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0x580], edx
mov eax, dword [ebp - 0x3a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x58c], eax
lea ecx, [ebp - 0x5ac]
push ecx
lea ecx, [ebp - 0x57c]
call fcn.01109a30
mov byte [ebp - 4], 4
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x57c]
call fcn.01109a80
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x57c]
call fcn.01133540
jmp 0x10dd686
cmp dword [ebp - 0x3a0], 1
jne 0x10dd362
call fcn.011434b0
mov dword [ebp - 0x5b0], eax
mov eax, dword [ebp - 0x208]
sub eax, 2
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xa14], esi
mov dword [ebp - 0xa10], edi
mov dword [ebp - 0xa1c], eax
mov dword [ebp - 0xa18], edx
mov ecx, dword [ebp - 0xa10]
cmp ecx, dword [ebp - 0xa18]
jl 0x10dd159
jg 0x10dce1f
mov edx, dword [ebp - 0xa14]
cmp edx, dword [ebp - 0xa1c]
jb 0x10dd159
push 0x50
push 0
lea eax, [ebp - 0x604]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x604], ecx
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0x5ec], edx
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x5fc], eax
mov ecx, dword [ebp - 0x398]
mov dword [ebp - 0x5f8], ecx
mov edx, dword [ebp - 0x3ac]
mov dword [ebp - 0x5e4], edx
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x5e0], eax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x5cc], eax
mov dword [ebp - 0x5c8], edx
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x5c4], eax
mov dword [ebp - 0x5c0], edx
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x5f4], eax
mov dword [ebp - 0x5f0], edx
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0x5d4], ecx
mov edx, dword [ebp - 0x3a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [eax + 0x30]
call edx
movzx eax, ax
cdq
push edx
push eax
mov eax, dword [ebp - 0x5c8]
push eax
mov ecx, dword [ebp - 0x5cc]
push ecx
call sub.ntdll.dll__alldiv
mov dword [ebp - 0x5dc], eax
mov dword [ebp - 0x5d8], edx
mov edx, dword [ebp - 0x1dc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [eax + 0x60]
call edx
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5bc], 1
push 0
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x604]
push ecx
mov edx, dword [ebp - 0x5b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5b0]
mov edx, dword [eax + 0x38]
call edx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10dd154
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xa24], eax
mov dword [ebp - 0xa20], edx
mov ecx, dword [ebp - 0xa20]
cmp ecx, dword [ebp - 0x5c8]
jl 0x10dd154
jg 0x10dcfc0
mov edx, dword [ebp - 0xa24]
cmp edx, dword [ebp - 0x5cc]
jbe 0x10dd154
push 0x148
push 0
lea eax, [ebp - 0x74c]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x74c], edx
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp - 0x740], ecx
mov edx, dword [ebp - 0x3a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [eax + 0x44]
call edx
mov dword [ebp - 0x73c], eax
mov dword [ebp - 0x738], edx
mov eax, dword [ebp - 0x3a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x734], eax
mov dword [ebp - 0x730], edx
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x728], edx
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x720], ax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x724], eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xa28], eax
mov ecx, dword [ebp - 0xa28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa28]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0x71c], ax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xa2c], eax
mov ecx, dword [ebp - 0xa2c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa2c]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0x71e], ax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0x71a]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
push 0
push 0
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x74c]
push ecx
mov edx, dword [ebp - 0x5b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5b0]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x1c], eax
jmp 0x10dd31b
push 0x148
push 0
lea eax, [ebp - 0x894]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x894], edx
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x88c], eax
mov ecx, dword [ebp - 0x398]
mov dword [ebp - 0x888], ecx
mov edx, dword [ebp - 0x3a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [eax + 0x30]
call edx
mov word [ebp - 0x868], ax
mov eax, dword [ebp - 0x3a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x884], eax
mov dword [ebp - 0x880], edx
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x87c], eax
mov dword [ebp - 0x878], edx
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x874], eax
mov dword [ebp - 0x870], edx
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x86c], eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xa30], eax
mov ecx, dword [ebp - 0xa30]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa30]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0x864], ax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xa34], eax
mov ecx, dword [ebp - 0xa34]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa34]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0x866], ax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100b5c8
lea edx, [ebp - 0x862]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x760], eax
mov ecx, dword [ebp - 0x3ac]
mov dword [ebp - 0x75c], ecx
mov edx, dword [ebp - 0x3a8]
mov dword [ebp - 0x758], edx
mov dword [ebp - 0x754], 1
push 0
push 0
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x894]
push ecx
mov edx, dword [ebp - 0x5b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5b0]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10dd35d
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp - 0x3a8]
push ecx
mov edx, dword [ebp - 0x3ac]
push edx
mov eax, dword [ebp - 0xdc]
push eax
mov ecx, dword [ebp - 0x5b0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5b0]
mov eax, dword [edx + 0x28]
call eax
jmp 0x10dd686
cmp dword [ebp - 0x3a0], 2
je 0x10dd381
cmp dword [ebp - 0x3a0], 3
je 0x10dd381
cmp dword [ebp - 0x3a0], 0
jne 0x10dd686
mov ecx, dword [ebp - 0x208]
sub ecx, 2
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x28]
call edx
call fcn.01117e60
mov dword [ebp - 0x898], eax
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xa3c], esi
mov dword [ebp - 0xa38], edi
mov dword [ebp - 0xa44], eax
mov dword [ebp - 0xa40], edx
mov ecx, dword [ebp - 0xa3c]
cmp ecx, dword [ebp - 0xa44]
jne 0x10dd401
mov edx, dword [ebp - 0xa38]
cmp edx, dword [ebp - 0xa40]
je 0x10dd417
cmp dword [ebp - 0x3a0], 2
je 0x10dd417
cmp dword [ebp - 0x3a0], 3
jne 0x10dd524
push 0x48
push 0
lea eax, [ebp - 0x8e4]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x8e4], 0xffffffff
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x8e0], ecx
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0x8cc], edx
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x8dc], eax
mov ecx, dword [ebp - 0x398]
mov dword [ebp - 0x8d8], ecx
mov edx, dword [ebp - 0x3ac]
mov dword [ebp - 0x8c4], edx
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x8c0], eax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x8b4], eax
mov dword [ebp - 0x8b0], edx
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x8ac], eax
mov dword [ebp - 0x8a8], edx
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x8d4], eax
mov dword [ebp - 0x8d0], edx
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x8bc], eax
mov dword [ebp - 0x8a4], 1
push 0
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x8e4]
push edx
mov eax, dword [ebp - 0x898]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x898]
mov eax, dword [edx + 0x30]
call eax
mov dword [ebp - 0x1c], eax
jmp 0x10dd644
cmp dword [ebp - 0x3a0], 0
jne 0x10dd644
push 0x40
push 0
lea ecx, [ebp - 0x924]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x924], edx
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x8fc], eax
mov ecx, dword [ebp - 0x39c]
mov dword [ebp - 0x91c], ecx
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0x918], edx
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x8f4], eax
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp - 0x8f0], ecx
mov edx, dword [ebp - 0x3a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [eax + 0x30]
call edx
mov word [ebp - 0x904], ax
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x902], ax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x914], eax
mov dword [ebp - 0x910], edx
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x90c], eax
mov dword [ebp - 0x908], edx
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x900], eax
mov dword [ebp - 0x8ec], 1
push 0
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x924]
push edx
mov eax, dword [ebp - 0x898]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x898]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10dd686
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp - 0x3a8]
push ecx
mov edx, dword [ebp - 0x3ac]
push edx
mov eax, dword [ebp - 0xdc]
push eax
mov ecx, dword [ebp - 0x898]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x898]
mov eax, dword [edx + 0x28]
call eax
cmp dword [ebp - 0x1c], 0
jne 0x10dd696
jmp 0x10ddd31
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x3a8]
push ecx
mov edx, dword [ebp - 0x3ac]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.010c3440
push 2
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x28]
call edx
push 0x100bdf8
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x38]
call eax
mov dword [ebp - 0x928], 0x100b700
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xbc]
call eax
mov dword [ebp - 0x93c], eax
xor ecx, ecx
mov byte [ebp - 0x97f], cl
lea edx, [ebp - 0x97f]
push edx
mov eax, dword [ebp - 0x93c]
push eax
lea ecx, [ebp - 0x938]
call fcn.01086de0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x928]
push ecx
lea ecx, [ebp - 0x938]
call fcn.0109a620
lea ecx, [ebp - 0x938]
call fcn.01086e30
push eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0xb8]
call edx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x938]
call fcn.01086e10
push 0
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x70]
call eax
test eax, eax
jne 0x10dd7a7
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0xf8]
call eax
test eax, eax
je 0x10dd7d7
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10dd7d7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0x990]
call fcn.010d61f0
mov edx, dword [ebp - 0x1dc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [eax + 0x60]
call edx
test eax, eax
je 0x10dd829
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x990]
call fcn.010d5800
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 8]
cmp edx, dword [ecx + 0xc]
je 0x10dd8b2
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x54]
call eax
mov dword [ebp - 0x944], eax
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x50]
call eax
mov dword [ebp - 0x940], eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x940]
push ecx
mov edx, dword [ebp - 0x944]
push edx
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x990]
call fcn.010d5be0
mov eax, dword [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x950], eax
mov ecx, dword [ebp - 0x950]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x950]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x94c], eax
mov dword [ebp - 0x948], 0
cmp dword [ebp - 0x94c], 0
je 0x10dd9c2
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x3c]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10dd937
mov edx, dword [ebp - 0x950]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x950]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x94c], eax
jmp 0x10dd8f5
mov eax, dword [ebp - 0x948]
cmp eax, dword [ebp - 0x1e8]
jl 0x10dd995
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x950]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x950]
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [ebp - 0x950]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x950]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x94c], eax
mov dword [ebp - 0x948], 0
jmp 0x10dd8f5
mov ecx, dword [ebp - 0x948]
add ecx, 1
mov dword [ebp - 0x948], ecx
mov edx, dword [ebp - 0x950]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x950]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x94c], eax
jmp 0x10dd8f5
push 0
push 0
mov eax, dword [ebp - 0x950]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x950]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10ddb33
mov ecx, dword [ebp - 0x950]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x950]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xa48], eax
mov ecx, dword [ebp - 0xa48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa48]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10ddac6
push 1
push 0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x950]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x950]
mov edx, dword [eax + 0x20]
call edx
push eax
mov ecx, dword [ebp - 0x990]
call fcn.010e3490
push 0
push 0
mov eax, dword [ebp - 0x950]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x950]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10ddac4
push 6
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
call fcn.010906a0
mov dword [ebp - 0xa4c], eax
push 0x14a5
push 0x100add4
call fcn.010cda00
push eax
push 0x100bed4
mov ecx, dword [ebp - 0xa4c]
push ecx
mov edx, dword [ebp - 0xa4c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov dword [ebp - 0x984], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x204]
call fcn.010babe0
mov eax, dword [ebp - 0x984]
jmp 0x10de080
jmp 0x10ddb33
push 6
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x20]
call edx
call fcn.010906a0
mov dword [ebp - 0xa50], eax
push 0x14ac
push 0x100add4
call fcn.010cda00
push eax
push 0x100bed4
mov eax, dword [ebp - 0xa50]
push eax
mov ecx, dword [ebp - 0xa50]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
mov dword [ebp - 0x988], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x204]
call fcn.010babe0
mov eax, dword [ebp - 0x988]
jmp 0x10de080
mov ecx, dword [ebp - 0x950]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x950]
mov eax, dword [edx]
call eax
push 0x9c4
call fcn.0108d6a0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x1dc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 0x1dc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [eax + 0x28]
call edx
push eax
mov ecx, dword [ebp - 0x990]
call fcn.010c9ea0
test eax, eax
jne 0x10ddbc9
call fcn.010906a0
mov dword [ebp - 0xa54], eax
push 0x14b9
push 0x100add4
call fcn.010cda00
push eax
push 0x100bdb4
mov eax, dword [ebp - 0xa54]
push eax
mov ecx, dword [ebp - 0xa54]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
push 0x32
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp - 0x14], 0
je 0x10ddc40
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x990]
call fcn.010d6440
mov dword [ebp - 0x954], eax
call fcn.010906a0
mov dword [ebp - 0xa58], eax
mov eax, dword [ebp - 0x954]
push eax
push 0x14c0
push 0x100add4
call fcn.010cda00
push eax
push 0x100be98
mov ecx, dword [ebp - 0xa58]
push ecx
mov edx, dword [ebp - 0xa58]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0x10
mov edx, dword [ebp - 0x954]
mov dword [ebp - 0xe8], edx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10ddca5
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10ddca5
mov ecx, dword [ebp - 0x3a8]
push ecx
mov edx, dword [ebp - 0x3ac]
push edx
mov eax, dword [ebp - 0x398]
push eax
mov ecx, dword [ebp - 0x39c]
push ecx
mov edx, dword [ebp - 0x1dc]
push edx
mov eax, dword [ebp - 0xe8]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x990]
call fcn.010df760
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xbc]
call eax
mov dword [ebp - 0x968], eax
xor ecx, ecx
mov byte [ebp - 0x989], cl
lea edx, [ebp - 0x989]
push edx
mov eax, dword [ebp - 0x968]
push eax
lea ecx, [ebp - 0x964]
call fcn.01086de0
mov byte [ebp - 4], 6
push 0x1001464
lea ecx, [ebp - 0x964]
call fcn.0109a620
lea ecx, [ebp - 0x964]
call fcn.01086e30
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xb8]
call eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x964]
call fcn.01086e10
push 0x100bb1c
mov ecx, dword [ebp - 0x1dc]
push ecx
call fcn.010ff2e0
jmp 0x10dc095
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x204]
call fcn.010babe0
cmp dword [ebp - 0x1c], 0
je 0x10de07d
lea edx, [ebp - 0xf8]
push edx
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x28]
call eax
push eax
call fcn.010fecf0
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10dde80
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10dde80
lea ecx, [ebp - 0x96c]
call fcn.010ff410
mov dword [ebp - 4], 7
cmp dword [ebp - 0x28], 0
je 0x10dde52
cmp dword [ebp - 0xec], 0
je 0x10dde52
mov ecx, dword [ebp - 0xec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xec]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x28]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x28]
call eax
push eax
lea ecx, [ebp - 0x96c]
call fcn.010ff920
test eax, eax
jne 0x10dde52
call fcn.010906a0
mov dword [ebp - 0xa5c], eax
push 0x14de
push 0x100add4
call fcn.010cda00
push eax
push 0x100b670
mov ecx, dword [ebp - 0xa5c]
push ecx
mov edx, dword [ebp - 0xa5c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
push 1
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0xf8]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov ecx, dword [ebp - 0x990]
call fcn.010c9780
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x96c]
call fcn.01133540
cmp dword [ebp - 0x24], 0
je 0x10ddfe1
mov dword [ebp - 0x970], 0
push 0
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xf8]
mov edx, dword [eax + 0x44]
call edx
lea eax, [ebp - 0x970]
push eax
lea ecx, [ebp - 0xd4]
push ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xf8]
mov edx, dword [eax + 0x24]
call edx
test eax, eax
jne 0x10ddf0c
call fcn.010906a0
mov dword [ebp - 0xa60], eax
push 0x14eb
push 0x100add4
call fcn.010cda00
push eax
push 0x100be74
mov eax, dword [ebp - 0xa60]
push eax
mov ecx, dword [ebp - 0xa60]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
xor eax, eax
jmp 0x10de080
push 1
mov ecx, dword [ebp - 0x970]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x970]
mov eax, dword [edx + 0xc8]
call eax
push 0
mov ecx, dword [ebp - 0x970]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x970]
mov eax, dword [edx + 0xc0]
call eax
push 1
mov ecx, dword [ebp - 0x970]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x970]
mov eax, dword [edx + 0xbc]
call eax
push 1
mov ecx, dword [ebp - 0x970]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x970]
mov eax, dword [edx + 0xf4]
call eax
push 0
mov ecx, dword [ebp - 0x970]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x970]
mov eax, dword [edx + 0xf0]
call eax
push 1
mov ecx, dword [ebp - 0x970]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x970]
mov eax, dword [edx + 0xec]
call eax
mov ecx, dword [ebp - 0x970]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x970]
mov eax, dword [edx + 0x58]
call eax
mov dword [eax], 1
push 0
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x44]
call eax
push 0
push 0
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x2c]
call eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0xd8]
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x990]
call fcn.010ac340
test eax, eax
jne 0x10de036
call fcn.010906a0
mov dword [ebp - 0xa64], eax
push 0x14fb
push 0x100add4
call fcn.010cda00
push eax
push 0x100be54
mov ecx, dword [ebp - 0xa64]
push ecx
mov edx, dword [ebp - 0xa64]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
cmp dword [ebp - 0xec], 0
je 0x10de050
push 0x100bb1c
mov edx, dword [ebp - 0xec]
push edx
call fcn.010ff2e0
mov eax, dword [ebp - 0xd8]
push eax
call fcn.010c34d0
push 0x10049ac
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x38]
call eax
push 0x64
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8