Function at 0x1002a2c0
Capabilities:
Encrypt data using dpapi
Parse credit card information

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10039816
mov eax, dword fs:[0]
push eax
sub esp, 0x118
mov eax, dword [0x100a2bb4]
xor eax, ebp
mov dword [ebp - 0x18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x48], ebx
cmp dword [ebp + 0x10], 0
je 0x1003ef84
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0xac], edi
mov ecx, dword [esi]
mov edx, dword [esi + 4]
test ecx, ecx
je 0x1002a329
mov eax, edx
add edx, 0x18
add edi, dword [eax + 4]
sub ecx, 1
jne 0x1002a316
mov dword [ebp - 0xac], edi
mov dword [ebp - 0x58], edi
shl edi, 2
push edi
call dword [sym.imp.MSDART.DLL_mpMalloc]
add esp, 4
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x50], 0
test eax, eax
je 0x1003efd6
push edi
push 0
push eax
mov dword [ebp - 4], 0
call sub.msvcrt.dll_memset
lea ecx, [ebx + 0x28]
add esp, 0xc
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002a367
mov eax, dword [ebp - 0x48]
sub ecx, edx
sar ecx, 1
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0xc8], eax
lea ebx, [ecx + 9]
mov dword [ebp - 0x1c], ebx
lock inc dword [eax]
mov byte [ebp - 4], 1
xor edx, edx
mov ebx, dword [ebp - 0xc8]
add ebx, 0x42c
mov dword [ebp - 0xa4], ebx
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
test ecx, ecx
je 0x1002a3bb
add eax, 4
cmp dword [eax], 0
jbe 0x1003f028
mov eax, dword [ebp - 0xc8]
xor edx, edx
add eax, 0x480
mov dword [ebp - 0x90], eax
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test ecx, ecx
je 0x1002a3e9
add eax, 4
lea ebx, [ebx]
cmp dword [eax], 0
jbe 0x1003f039
mov eax, dword [ebp - 0xcc]
xor ecx, ecx
mov dword [ebp - 0x7c], eax
mov edx, dword [eax]
mov edi, dword [eax + 4]
mov dword [ebp - 0x40], edi
test edx, edx
je 0x1002a40c
lea eax, [edi + 4]
cmp dword [eax], 0
jbe 0x1003f04a
mov esi, dword [ebx + 4]
lea eax, [ebp - 0xcc]
mov ecx, dword [ebx]
xor ebx, ebx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x98], ebx
test ecx, ecx
je 0x1003f078
mov eax, esi
jmp 0x1002a440
cmp dword [esi + 4], 0
jbe 0x1003f05b
test eax, eax
je 0x1003f091
mov ebx, dword [eax]
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x8c], 0
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], 0
test ecx, ecx
je 0x1003f0b9
lea ecx, [ecx]
mov esi, dword [ebp - 0x24]
cmp dword [esi + 4], 0
mov esi, dword [ebp - 0x38]
jbe 0x1003f098
test eax, eax
je 0x1003f0d9
mov eax, dword [eax]
xor ecx, ecx
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x70], ecx
test edx, edx
je 0x1003f0f7
mov eax, edi
cmp dword [edi + 4], 0
jbe 0x1003f0e0
test eax, eax
je 0x1003f111
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
cmp byte [ebp + 0x14], 0
mov dword [ebp - 0x60], 0
jne 0x1003f118
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1002ab20
inc ecx
mov dword [ebp - 0x1c], ecx
lea esp, [esp]
test ebx, ebx
je 0x1002ab20
mov eax, dword [ebp - 0x6c]
cmp word [eax + 0x24], 0
lea ecx, [eax + 0x24]
mov dword [ebp - 0x20], ecx
je 0x1002a522
mov edi, dword [eax + 4]
test edi, edi
jns 0x1002a580
mov edi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp eax, dword [esi + 4]
jae 0x1002a8fc
add ebx, 0x1e
cmp dword [ebp - 0x80], 0
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x94], ebx
je 0x1002a564
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp eax, dword [edx + 4]
jae 0x1002a939
add dword [ebp - 0x80], 0x34
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp eax, dword [edi + 4]
jae 0x1002a977
add dword [ebp - 0x6c], 0x34
inc dword [ebp - 0x60]
mov ecx, dword [ebp - 0x1c]
jmp 0x1002a500
lea edx, [esi + 8]
mov ecx, 0x1000444c
mov esi, 0xc
lea ecx, [ecx]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x1002bb54
add ecx, 4
add edx, 4
sub esi, 4
jae 0x1002a590
xor eax, eax
test eax, eax
jne 0x1003f1cc
mov cl, 1
mov eax, dword [ebx + 4]
mov byte [ebp - 0x51], cl
mov dword [ebp - 0x30], eax
test edi, edi
js 0x1002a5cb
test dword [ebx + 8], 0x400
je 0x1003f1d3
test cl, cl
je 0x1002a5e3
cmp dword [ebp + 0xc], 0
je 0x1003f207
cmp byte [ebp + 0x14], 0
jne 0x1003f244
lea eax, [ebx + 0xc]
xor ebx, ebx
mov dword [ebp - 0xb0], eax
xor edi, edi
movzx eax, word [eax]
mov dword [ebp - 0xa8], eax
lea esp, [esp]
mov eax, dword [ebp - 0x38]
mov esi, 0xc
mov edx, dword [edi + 0x100a3ba0]
add eax, 8
mov ecx, dword [eax]
cmp ecx, dword [edx]
jne 0x1002a8d2
add eax, 4
add edx, 4
sub esi, 4
jae 0x1002a611
xor eax, eax
test eax, eax
jne 0x1002a637
mov eax, dword [ebp - 0x30]
cmp eax, dword [edi + 0x100a3ba8]
je 0x1002a665
add edi, 0x14
inc ebx
cmp edi, 0x1b8
jb 0x1002a600
mov esi, dword [ebp - 0xa8]
movzx eax, si
cmp eax, 8
jne 0x1003f2a7
mov eax, dword [0x100a23b0]
mov edi, dword [eax + 4]
add edi, 0x100a23b0
jmp 0x1002a66f
lea eax, [ebx + ebx*4]
mov edi, dword [eax*4 + 0x100a3bb0]
mov dword [ebp - 0xb8], 0
test edi, edi
je 0x1003f648
cmp byte [ebp + 0x18], 0
mov ebx, dword [ebp - 0x30]
je 0x1002a6a5
cmp byte [ebp - 0x51], 0
je 0x1002a6a5
cmp ebx, 9
je 0x1002a9af
cmp ebx, 0xa0
je 0x1002a9af
mov eax, dword [edi]
lea ecx, [ebp - 0xb8]
push ecx
push dword [ebp - 0x20]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x100a663c]
mov ecx, edi
call esi
mov esi, eax
mov dword [ebp - 0x50], esi
test esi, esi
js 0x1003f46f
mov eax, dword [edi]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x100a663c]
mov ecx, edi
call esi
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
mov edx, ecx
lea esi, [edx + 2]
jmp 0x1002a6f0
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x1002a6f0
movzx eax, word [ecx]
sub edx, esi
sar edx, 1
xor esi, esi
test ax, ax
je 0x1002a724
mov edi, 0x3d
mov edi, edi
lea ecx, [ecx + 2]
cmp di, ax
je 0x1003f54a
movzx eax, word [ecx]
test ax, ax
jne 0x1002a710
mov ecx, dword [ebp - 0x1c]
lea eax, [esi + edx]
inc ecx
add ecx, eax
mov al, byte [ebp - 0x51]
mov dword [ebp - 0x1c], ecx
test al, al
je 0x1002a758
cmp ebx, 0xf8
je 0x1002b4b9
cmp ebx, 0xc8
je 0x1002b4b9
cmp ebx, 0x3f
je 0x1002b4b9
cmp dword [ebp + 0xc], 0
je 0x1003f550
mov edx, dword [ebp - 0xb8]
test edx, edx
je 0x1002a786
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002a771
sub ecx, esi
sar ecx, 1
add dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x60]
mov ebx, dword [ebp - 0xdc]
mov dword [ebx + eax*4], edx
mov ebx, 8
mov eax, dword [ebp - 0xb0]
cmp bx, word [eax]
jne 0x1002a845
test edx, edx
je 0x1002a83b
movzx eax, word [edx]
xor ebx, ebx
mov ecx, eax
mov dword [ebp - 0x30], ebx
xor esi, esi
mov dword [ebp - 0xa8], ecx
xor edi, edi
mov dword [ebp - 0x20], esi
test cx, cx
je 0x1003f58c
jmp 0x1002a7d3
mov esi, dword [ebp - 0x20]
movzx eax, cx
lea edx, [edx + 2]
cmp eax, 0x3d
jbe 0x1002a8af
mov eax, dword [ebp - 0x30]
movzx esi, cx
movzx ecx, word [edx]
test cx, cx
jne 0x1002a7d0
cmp dword [ebp - 0x20], 0
jne 0x1002b9c0
test eax, eax
jne 0x1002b9c0
test edi, edi
jne 0x1002b9c0
test ebx, ebx
jne 0x1002b9c0
push dword [ebp - 0xa8]
call dword [sym.imp.msvcrt.dll_iswspace]
add esp, 4
test eax, eax
jne 0x1003f5a2
push esi
call dword [sym.imp.msvcrt.dll_iswspace]
add esp, 4
test eax, eax
jne 0x1003f5a2
xor eax, eax
mov ecx, dword [ebp - 0x1c]
add ecx, eax
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x98]
mov esi, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x98], eax
cmp eax, dword [esi + 4]
jae 0x1002ba16
mov ebx, dword [ebp - 0x34]
add ebx, 0x1e
cmp dword [ebp - 0x80], 0
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x94], ebx
je 0x1002a890
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp eax, dword [edx + 4]
jae 0x1002ba4f
add dword [ebp - 0x80], 0x34
mov eax, dword [ebp - 0x70]
mov edi, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x70], eax
cmp eax, dword [edi + 4]
jae 0x1002ba8b
add dword [ebp - 0x6c], 0x34
inc dword [ebp - 0x60]
jmp 0x1002a4f0
add eax, 0xffffffde
cmp eax, 0x1b
ja case.0x1002a8c2.35
movzx eax, byte [eax + 0x1002bbbc]
jmp dword [eax*4 + 0x1002bba8]
inc esi
mov dword [ebp - 0x20], esi
jmp case.0x1002a8c2.35
cmp cl, byte [edx]
jne 0x1002a8f2
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x1002a8f2
mov cl, byte [eax + 2]
cmp cl, byte [edx + 2]
jne 0x1002a8f2
mov al, byte [eax + 3]
cmp al, byte [edx + 3]
je 0x1002a626
sbb eax, eax
or eax, 1
jmp 0x1002a628
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa0], eax
cmp eax, dword [ecx]
jb 0x1002b914
xor esi, esi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x98], esi
xor ebx, ebx
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x38], esi
jmp 0x1002a53b
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x8c], eax
cmp eax, dword [ecx]
jb 0x1002b932
xor edx, edx
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x84], edx
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x24], edx
jmp 0x1002a564
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x7c]
inc ecx
mov dword [ebp - 0x78], ecx
cmp ecx, dword [eax]
jb 0x1002b953
xor edi, edi
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x40], edi
jmp 0x1002a578
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
jmp 0x1002a7e5
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push dword [ebp - 0x20]
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov esi, eax
test esi, esi
js 0x1003f330
mov esi, dword [ebp - 0xe4]
mov ax, word [ebp - 0xec]
mov byte [ebp - 4], 2
cmp ax, 8
jne 0x1003f467
test esi, esi
je 0x1003f467
push 0
push esi
mov dword [ebp - 0x50], 0
call dword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
push eax
push esi
call dword [sym.imp.DPAPI.dll_CryptUnprotectMemory]
test eax, eax
je 0x1003f39d
mov ebx, dword [esi]
push ebx
push 0
call dword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov dword [ebp - 0xa8], eax
test eax, eax
je 0x1003f347
push ebx
lea ecx, [esi + 4]
push ecx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
push dword [ebp - 0xe4]
call dword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
test eax, eax
je 0x1002aa5b
mov byte [esi], 0
lea esi, [esi + 1]
sub eax, 1
jne 0x1002aa50
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [ebp - 0x50]
mov eax, 8
mov word [ebp - 0xec], ax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xe4], eax
mov ebx, dword [ebp - 0x30]
test byte [0x100a4750], 2
jne 0x1003f3dc
test esi, esi
js 0x1003f3fc
mov eax, dword [edi]
lea ecx, [ebp - 0xb8]
push ecx
lea ecx, [ebp - 0xec]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x100a663c]
mov ecx, edi
call esi
push dword [ebp - 0xe4]
mov esi, eax
mov dword [ebp - 0x50], esi
call dword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
mov ecx, dword [ebp - 0xe4]
cmp word [ecx], 0
je 0x1002aae9
test eax, eax
je 0x1002aae9
xor edx, edx
dec eax
mov word [ecx], dx
add ecx, 2
cmp word [ecx], dx
jne 0x1002aad7
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 1
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1002a6c5
lea esi, [ecx + 1]
lea eax, [esi + esi]
mov dword [ebp - 0x4c], esi
push eax
call dword [sym.imp.MSDART.DLL_mpMalloc]
mov ecx, eax
add esp, 4
mov eax, dword [ebp + 0x10]
mov dword [eax], ecx
test ecx, ecx
je 0x1003f676
xor eax, eax
mov dword [ebp - 0x3c], ecx
mov word [ecx], ax
mov eax, dword [ebp - 0x48]
add eax, 0x28
push eax
push 0x10004488
push 0x10004478
push 0
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x3c]
push eax
push esi
push ecx
call fcn.1002caf0
mov eax, dword [ebp - 0xa4]
xor edi, edi
xor edx, edx
mov dword [ebp - 0xa0], edi
add esp, 0x20
mov dword [ebp - 0x98], edx
mov ecx, dword [eax]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x9c], ebx
test ecx, ecx
je 0x1003f6e5
mov eax, ebx
lea ecx, [ecx]
cmp dword [ebx + 4], edx
jbe 0x1003f6c8
test eax, eax
je 0x1003f6fe
mov edx, dword [eax]
mov eax, dword [ebp - 0x90]
xor esi, esi
mov dword [ebp - 0x94], edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x8c], esi
mov ebx, dword [eax + 4]
mov ecx, dword [eax]
xor eax, eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], eax
test ecx, ecx
je 0x1003f722
mov eax, ebx
lea ebx, [ebx]
cmp dword [ebx + 4], 0
jbe 0x1003f705
test eax, eax
je 0x1003f739
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
xor esi, esi
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x78], esi
mov ebx, dword [eax + 4]
mov ecx, dword [eax]
xor eax, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], eax
test ecx, ecx
je 0x1003f757
mov eax, ebx
lea esp, [esp]
cmp dword [ebx + 4], 0
jbe 0x1003f740
test eax, eax
je 0x1003f765
mov ecx, dword [eax]
mov esi, dword [ebp - 0x4c]
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x60], 0
test edx, edx
je 0x1003f7bf
xor edx, edx
test esi, esi
je 0x1003f76c
cmp esi, 0x7fffffff
ja 0x1003f76c
mov ebx, dword [ebp - 0x3c]
test edx, edx
js 0x1003f787
mov eax, esi
xor edx, edx
mov ecx, ebx
test eax, eax
je 0x1003f782
jmp 0x1002ac90
cmp word [ecx], dx
jne 0x1003f776
test eax, eax
je 0x1003f782
mov ecx, esi
sub ecx, eax
mov dword [ebp - 0x108], ecx
test edx, edx
js 0x1002adb8
mov eax, esi
lea edi, [ebx + ecx*2]
sub eax, ecx
mov dword [ebp - 0x114], edi
mov dword [ebp - 0x120], eax
cmp eax, 1
jbe 0x1003f78e
mov dword [ebp - 0x48], 0
mov edx, edi
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], eax
test eax, eax
je 0x1002ad3a
sub ecx, esi
mov dword [ebp - 0x20], 0x1000445c
lea ebx, [eax + 0x7ffffffe]
mov dword [ebp - 0x2c], eax
add ecx, ebx
sub dword [ebp - 0x20], edi
mov ebx, dword [ebp - 0x3c]
mov dword [ebp - 0xb0], ecx
test ecx, ecx
je 0x1002ad3a
mov ecx, dword [ebp - 0x20]
movzx ecx, word [ecx + edx]
test cx, cx
je 0x1002ad3a
dec dword [ebp - 0x2c]
inc dword [ebp - 0x28]
mov word [edx], cx
add edx, 2
mov ecx, dword [ebp - 0xb0]
dec ecx
cmp dword [ebp - 0x2c], 0
mov dword [ebp - 0xb0], ecx
jne 0x1002ad06
jmp 0x1003f79b
cmp dword [ebp - 0x2c], 0
je 0x1003f79b
mov ecx, dword [ebp - 0x28]
xor esi, esi
lea edi, [edi + ecx*2]
sub eax, ecx
mov word [edx], si
mov ecx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x4c]
mov dword [ebp - 0x114], edi
mov dword [ebp - 0x120], eax
test ecx, ecx
js 0x1003f7ae
mov ebx, edi
mov esi, eax
mov dword [ebp - 0x3c], ebx
jmp 0x1002adb5
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x20], 0
je 0x1003fa1b
mov edi, dword [ebp - 0x28]
xor ebx, ebx
lea eax, [eax + edi*2]
mov word [edx], bx
sub ecx, edi
mov edx, dword [ebp - 0xa8]
mov ebx, dword [ebp - 0x3c]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xf8], ecx
test edx, edx
js 0x1003fa31
mov ebx, eax
mov esi, ecx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x4c], esi
mov edx, dword [ebp - 0x1c]
jmp 0x1002adc0
mov ecx, dword [ebp - 0x24]
test edx, edx
je 0x1002b427
mov edi, dword [ebp - 0x60]
mov eax, dword [ebp - 0xdc]
mov edi, dword [eax + edi*4]
mov dword [ebp - 0x58], edi
test edi, edi
jne 0x1002ae5b
mov edi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x40]
inc edi
mov dword [ebp - 0x98], edi
cmp edi, dword [eax + 4]
jae 0x1002b32f
add edx, 0x1e
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x94], edx
test eax, eax
je 0x1002ae33
mov esi, dword [ebp - 0x34]
mov edi, dword [ebp - 0x84]
inc edi
mov dword [ebp - 0x84], edi
cmp edi, dword [esi + 4]
mov esi, dword [ebp - 0x4c]
jae 0x1002b36c
add eax, 0x34
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x80], eax
test ecx, ecx
je 0x1002ae53
mov eax, dword [ebp - 0x70]
mov edi, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x70], eax
cmp eax, dword [edi + 4]
jae 0x1002b3a7
add ecx, 0x34
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x6c], ecx
inc dword [ebp - 0x60]
jmp 0x1002adc3
mov edx, dword [ebp - 0x40]
mov ecx, 0x1000444c
add edx, 8
mov dword [ebp - 0xb0], 0xc
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x1002bb7e
add ecx, 4
add edx, 4
sub dword [ebp - 0xb0], 4
jae 0x1002ae70
xor eax, eax
test eax, eax
jne 0x1003f7c7
mov dword [ebp - 0xb0], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 4]
mov dword [ebp - 0xa8], ecx
mov ecx, dword [eax]
test ebx, ebx
je 0x1002aeef
test ecx, ecx
je 0x1002aeef
test esi, esi
je 0x1002aeef
cmp esi, 1
jbe 0x1002aeea
mov edi, 0x3d
movzx eax, word [ecx]
lea ecx, [ecx + 2]
test ax, ax
je 0x1002aee7
cmp eax, 0x3d
je 0x1003f7d6
dec esi
mov word [ebx], ax
add ebx, 2
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x3c], ebx
cmp esi, 1
ja 0x1002aec1
mov edi, dword [ebp - 0x58]
xor eax, eax
mov word [ebx], ax
xor ecx, ecx
test esi, esi
je 0x1003f7f1
cmp esi, 0x7fffffff
ja 0x1003f7f1
test ecx, ecx
js 0x1003f80c
mov eax, esi
xor ecx, ecx
mov edx, ebx
test eax, eax
je 0x1003f807
jmp 0x1002af20
cmp word [edx], cx
jne 0x1003f7fb
test eax, eax
je 0x1003f807
mov edx, esi
sub edx, eax
mov dword [ebp - 0xfc], edx
test ecx, ecx
js 0x1002affb
mov ecx, esi
lea eax, [ebx + edx*2]
sub ecx, edx
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xf0], ecx
cmp ecx, 1
jbe 0x1003f813
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x44], ecx
test ecx, ecx
je 0x1002afba
mov dword [ebp - 0x2c], eax
mov eax, ecx
sub eax, esi
mov dword [ebp - 0x44], ecx
add eax, 0x7ffffffe
add edx, eax
mov eax, 0x10004460
sub eax, dword [ebp - 0xd0]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x48], edx
lea esp, [esp]
test edx, edx
je 0x1002afba
mov edx, dword [ebp - 0xf0]
movzx eax, word [edx + eax]
test ax, ax
jne 0x1002b305
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x44], 0
je 0x1003f820
mov edx, dword [ebp - 0x28]
xor ebx, ebx
sub ecx, edx
mov word [eax], bx
mov eax, dword [ebp - 0xd0]
mov ebx, dword [ebp - 0x3c]
mov dword [ebp - 0xf0], ecx
lea eax, [eax + edx*2]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0xd0], eax
test edx, edx
js 0x1003f833
mov ebx, eax
mov esi, ecx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x4c], esi
cmp dword [ebp - 0xb0], 0
je 0x1002b029
mov eax, dword [ebp - 0xa8]
cmp eax, 0xf8
je 0x1002b611
cmp eax, 0xc8
je 0x1002b611
cmp eax, 0x3f
je 0x1002b611
mov eax, dword [ebp - 0x1c]
mov ecx, 8
cmp cx, word [eax + 0xc]
jne 0x1002b500
mov edx, edi
mov dword [ebp - 0x44], edx
test ebx, ebx
je 0x1002b156
test esi, esi
je 0x1002b156
xor eax, eax
mov dword [ebp - 0xb4], edi
xor ecx, ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], eax
movzx eax, word [edi]
mov ecx, eax
mov dword [ebp - 0xc4], ecx
test cx, cx
je 0x1003f8f0
mov edi, dword [ebp - 0x28]
mov ebx, edi
mov esi, ebx
jmp 0x1002b080
movzx eax, cx
lea edx, [edx + 2]
cmp eax, 0x3d
jbe 0x1002b2e5
movzx eax, cx
movzx ecx, word [edx]
mov dword [ebp - 0xb4], eax
test cx, cx
jne 0x1002b080
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x48], esi
cmp dword [ebp - 0x48], 0
mov esi, dword [ebp - 0x4c]
mov dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x58]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x3c]
jne 0x1002b9c8
cmp dword [ebp - 0x20], 0
jne 0x1002b9c8
test eax, eax
jne 0x1002b9c8
cmp dword [ebp - 0x2c], eax
jne 0x1002b9c8
push dword [ebp - 0xc4]
call dword [sym.imp.msvcrt.dll_iswspace]
add esp, 4
test eax, eax
jne 0x1003f909
push dword [ebp - 0xb4]
call dword [sym.imp.msvcrt.dll_iswspace]
add esp, 4
test eax, eax
jne 0x1003f909
mov edx, dword [ebp - 0x44]
xor ecx, ecx
mov dword [ebp - 0x20], ecx
cmp esi, 1
jbe 0x1002b149
jmp 0x1002b120
movzx eax, word [edx]
lea edx, [edx + 2]
test ax, ax
je 0x1002b146
cmp eax, 0x22
je 0x1003f919
dec esi
mov word [ebx], ax
add ebx, 2
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x3c], ebx
cmp esi, 1
ja 0x1002b120
mov ecx, dword [ebp - 0x20]
test ecx, ecx
jne 0x1002b9f6
xor eax, eax
mov word [ebx], ax
cmp dword [ebp - 0xb0], 0
je 0x1002b179
mov eax, dword [ebp - 0xa8]
cmp eax, 9
je 0x1002b3da
cmp eax, 0xa0
je 0x1002b3da
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x40]
mov edi, dword [ebp - 0x98]
inc edi
mov dword [ebp - 0x98], edi
cmp edi, dword [ebx + 4]
mov ebx, dword [ebp - 0x3c]
jae 0x1002baba
add edx, 0x1e
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x94], edx
test eax, eax
je 0x1002b1d3
mov ebx, dword [ebp - 0x34]
mov edi, dword [ebp - 0x84]
inc edi
mov dword [ebp - 0x84], edi
cmp edi, dword [ebx + 4]
mov ebx, dword [ebp - 0x3c]
jae 0x1002baf3
add eax, 0x34
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x80], eax
test ecx, ecx
je 0x1002b1f3
mov eax, dword [ebp - 0x70]
mov edi, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x70], eax
cmp eax, dword [edi + 4]
jae 0x1002bb2c
add ecx, 0x34
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x6c], ecx
inc dword [ebp - 0x60]
test edx, edx
je 0x1002b427
xor ecx, ecx
test esi, esi
je 0x1003f9df
cmp esi, 0x7fffffff
ja 0x1003f9df
test ecx, ecx
js 0x1003fa01
mov eax, esi
xor ecx, ecx
mov edx, ebx
test eax, eax
je 0x1003f9f5
lea ebx, [ebx]
cmp word [edx], cx
jne 0x1003f9e9
test eax, eax
je 0x1003f9f5
mov edi, esi
sub edi, eax
mov edx, dword [ebp - 0x1c]
test ecx, ecx
mov dword [ebp - 0x11c], edi
mov ecx, dword [ebp - 0x24]
js 0x1002adc3
mov ecx, esi
lea eax, [ebx + edi*2]
sub ecx, edi
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xf8], ecx
cmp ecx, 1
jbe 0x1003fa08
mov dword [ebp - 0xa8], 0
mov edx, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x20], ecx
test ecx, ecx
je 0x1002ad7a
mov eax, ecx
mov dword [ebp - 0x20], ecx
sub eax, esi
add eax, 0x7ffffffe
add edi, eax
mov eax, 0x1000445c
sub eax, edx
mov dword [ebp - 0xc4], eax
mov edi, edi
test edi, edi
je 0x1002ad74
movzx eax, word [edx + eax]
test ax, ax
je 0x1002ad74
inc dword [ebp - 0x28]
dec edi
mov word [edx], ax
add edx, 2
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
test eax, eax
mov eax, dword [ebp - 0xc4]
jne 0x1002b2b0
jmp 0x1003fa15
add eax, 0xffffffde
cmp eax, 0x1b
ja case.0x1002b2f8.35
movzx eax, byte [eax + 0x1002bbec]
jmp dword [eax*4 + 0x1002bbd8]
inc esi
jmp case.0x1002b2f8.35
mov edx, dword [ebp - 0x2c]
dec dword [ebp - 0x44]
inc dword [ebp - 0x28]
mov word [edx], ax
mov eax, edx
mov edx, dword [ebp - 0x48]
add eax, 2
dec edx
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x44], 0
mov dword [ebp - 0x48], edx
jne 0x1002afa0
jmp 0x1003f820
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa0], eax
cmp eax, dword [edx]
jb 0x1002b96e
xor eax, eax
mov dword [ebp - 0xa0], 0
xor edx, edx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], edx
jmp 0x1002adfe
mov eax, dword [ebp - 0x8c]
mov edi, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x8c], eax
cmp eax, dword [edi]
jb 0x1002b98c
xor eax, eax
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
jmp 0x1002ae2d
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x7c]
inc ecx
mov dword [ebp - 0x78], ecx
cmp ecx, dword [eax]
jb 0x1002b9aa
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x30], eax
xor ecx, ecx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
jmp 0x1002ae4d
inc dword [ebp - 0x20]
jmp case.0x1002b2f8.35
or eax, 0xffffffff
cmp word [edi], 0
je 0x1002b3f5
test eax, eax
je 0x1002b3f5
xor ecx, ecx
dec eax
mov word [edi], cx
add edi, 2
cmp word [edi], cx
jne 0x1002b3e3
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x6c]
mov ebx, dword [ebp - 0x9c]
mov esi, dword [ebp - 0x4c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x40], ebx
jmp 0x1002b182
cmp word [ebx - 2], 0x3b
jne 0x1002b434
xor eax, eax
mov word [ebx - 2], ax
mov esi, dword [ebp - 0xc8]
test esi, esi
je 0x1002b44c
or eax, 0xffffffff
lock xadd dword [esi], eax
dec eax
je 0x1003fa45
mov ebx, dword [ebp - 0x50]
mov eax, dword [ebp - 0xac]
xor esi, esi
cmp esi, eax
jae 0x1002b47d
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax + esi*4]
test eax, eax
jne 0x1002b471
mov eax, dword [ebp - 0xac]
inc esi
jmp 0x1002b457
push eax
call dword [sym.imp.MSDART.DLL_mpFree]
add esp, 4
jmp 0x1002b468
push dword [ebp - 0xdc]
call dword [sym.imp.MSDART.DLL_mpFree]
add esp, 4
test byte [0x100a4750], 2
jne 0x1003fa69
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.10037870
mov esp, ebp
pop ebp
ret 0x14
mov edx, dword [ebp - 0xb8]
mov esi, edx
movzx eax, word [edx]
test ax, ax
je 0x1002a786
mov ebx, dword [ebp - 0x1c]
test ax, ax
je 0x1002b605
mov ecx, esi
lea edi, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002b4e0
sub ecx, edi
inc ebx
sar ecx, 1
add ebx, ecx
mov dword [ebp - 0x1c], ebx
lea esi, [esi + ecx*2]
add esi, 2
movzx eax, word [esi]
jmp 0x1002b4d0
xor ecx, ecx
test esi, esi
je 0x1003f939
cmp esi, 0x7fffffff
ja 0x1003f939
test ecx, ecx
js 0x1003f954
mov eax, esi
xor ecx, ecx
mov edx, ebx
test eax, eax
je 0x1003f94f
lea esp, [esp]
cmp word [edx], cx
jne 0x1003f943
test eax, eax
je 0x1003f94f
mov edx, esi
sub edx, eax
mov dword [ebp - 0x118], edx
test ecx, ecx
js 0x1002b156
mov ecx, esi
lea eax, [ebx + edx*2]
sub ecx, edx
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x124], ecx
cmp ecx, 1
jbe 0x1003f95b
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], eax
test ecx, ecx
je 0x1002b8d4
mov dword [ebp - 0x28], eax
add edx, 0x7ffffffe
mov eax, ecx
mov dword [ebp - 0x2c], ecx
sub eax, esi
add eax, edx
mov edx, edi
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0xd8]
sub edx, eax
mov dword [ebp - 0xc4], edx
mov edx, dword [ebp - 0x28]
cmp dword [ebp - 0x48], 0
je 0x1002b8d4
mov eax, dword [ebp - 0xc4]
movzx eax, word [eax + edx]
mov dword [ebp - 0xb4], eax
test ax, ax
mov eax, dword [ebp - 0xd8]
je 0x1002b8d4
mov eax, dword [ebp - 0xb4]
dec dword [ebp - 0x2c]
dec dword [ebp - 0x48]
inc dword [ebp - 0x44]
mov word [edx], ax
add edx, 2
cmp dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x28], edx
jne 0x1002b5b3
jmp 0x1003f972
mov ecx, dword [ebp - 0x1c]
dec ecx
mov dword [ebp - 0x1c], ecx
jmp 0x1002a786
mov eax, edi
mov dword [ebp - 0x44], eax
jmp 0x1002b663
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x2c], 0
je 0x1003f8cc
mov edx, dword [ebp - 0x20]
xor ebx, ebx
sub ecx, edx
mov word [eax], bx
mov eax, dword [ebp - 0xd4]
mov ebx, dword [ebp - 0x3c]
mov dword [ebp - 0x110], ecx
lea eax, [eax + edx*2]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xd4], eax
test edx, edx
js 0x1003f8df
mov ebx, eax
mov esi, ecx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x4c], esi
lea esp, [esp]
mov eax, dword [ebp - 0x44]
cmp word [eax], 0
je 0x1002b156
mov edx, eax
lea ecx, [edx + 2]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x1002b672
sub edx, ecx
xor ecx, ecx
sar edx, 1
mov dword [ebp - 0xb4], edx
test esi, esi
je 0x1003f844
cmp esi, 0x7fffffff
ja 0x1003f844
test ecx, ecx
js 0x1003f85f
mov ecx, esi
mov dword [ebp - 0x58], 0
mov eax, ebx
test ecx, ecx
je 0x1003f85a
jmp 0x1002b6c0
cmp word [eax], 0
jne 0x1003f84e
test ecx, ecx
je 0x1003f85a
mov eax, esi
sub eax, ecx
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x100], eax
mov dword [ebp - 0x20], eax
test ecx, ecx
js 0x1002b7ca
lea ecx, [ebx + eax*2]
mov dword [ebp - 0xbc], ecx
mov ecx, esi
sub ecx, eax
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0xf4], ecx
cmp ecx, 1
jbe 0x1003f866
mov eax, ecx
mov dword [ebp - 0x58], 0
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x2c], 0
test eax, eax
je 0x1002b784
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
add edx, 0x7ffffffe
sub eax, esi
add eax, edx
mov edx, dword [ebp - 0xb4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x44]
sub eax, ecx
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x28]
lea ebx, [ebx]
cmp dword [ebp - 0x20], 0
je 0x1002b784
mov eax, dword [ebp - 0xf4]
movzx eax, word [eax + ecx]
test ax, ax
je 0x1002b781
dec dword [ebp - 0x20]
inc dword [ebp - 0x2c]
mov word [ecx], ax
add ecx, 2
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
test eax, eax
jne 0x1002b750
jmp 0x1003f873
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x1003f873
mov eax, dword [ebp - 0x2c]
xor ebx, ebx
mov word [ecx], bx
mov ecx, dword [ebp - 0xbc]
mov ebx, dword [ebp - 0x3c]
lea ecx, [ecx + eax*2]
mov dword [ebp - 0xbc], ecx
mov ecx, dword [ebp - 0x48]
sub ecx, eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xf4], ecx
test eax, eax
js 0x1003f886
mov ebx, dword [ebp - 0xbc]
mov esi, ecx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x4c], esi
mov eax, dword [ebp - 0x44]
lea eax, [eax + edx*2]
add eax, 2
mov dword [ebp - 0x44], eax
cmp word [eax], 0
je 0x1002b156
xor ecx, ecx
test esi, esi
je 0x1003f896
cmp esi, 0x7fffffff
ja 0x1003f896
test ecx, ecx
js 0x1003f8b8
mov eax, esi
xor ecx, ecx
mov edx, ebx
test eax, eax
je 0x1003f8ac
lea esp, [esp]
cmp word [edx], cx
jne 0x1003f8a0
test eax, eax
je 0x1003f8ac
mov edx, esi
sub edx, eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x10c], edx
test ecx, ecx
js 0x1002b663
mov ecx, esi
lea eax, [ebx + edx*2]
sub ecx, edx
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x110], ecx
cmp ecx, 1
jbe 0x1003f8bf
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x2c], ecx
test ecx, ecx
je 0x1002b61b
mov dword [ebp - 0x28], eax
mov eax, ecx
sub eax, esi
mov dword [ebp - 0x2c], ecx
add eax, 0x7ffffffe
add edx, eax
mov eax, 0x10004464
sub eax, dword [ebp - 0xd4]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x58], edx
test edx, edx
je 0x1002b61b
mov edx, dword [ebp - 0xb4]
movzx eax, word [edx + eax]
test ax, ax
je 0x1002b618
mov edx, dword [ebp - 0x28]
dec dword [ebp - 0x2c]
inc dword [ebp - 0x20]
mov word [edx], ax
mov eax, edx
mov edx, dword [ebp - 0x58]
add eax, 2
dec edx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x2c], 0
mov dword [ebp - 0x58], edx
jne 0x1002b893
jmp 0x1003f8cc
cmp dword [ebp - 0x2c], 0
mov edx, dword [ebp - 0x28]
je 0x1003f972
xor ebx, ebx
mov word [edx], bx
mov edx, dword [ebp - 0x44]
sub ecx, edx
mov dword [ebp - 0x124], ecx
lea eax, [eax + edx*2]
mov edx, dword [ebp - 0x58]
mov dword [ebp - 0xd8], eax
test edx, edx
js 0x1003f984
mov ebx, eax
mov esi, ecx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x4c], esi
jmp 0x1002b156
mov ebx, dword [esi + 0x18]
add esi, 0x18
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x38], esi
jmp 0x1002a53b
mov eax, dword [edx + 0x18]
add edx, 0x18
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x24], edx
jmp 0x1002a564
mov eax, dword [edi + 0x18]
add edi, 0x18
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x40], edi
jmp 0x1002a578
mov edi, dword [ebp - 0x40]
add edi, 0x18
xor edx, edx
mov dword [ebp - 0x98], edx
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x9c], edi
mov edx, dword [edi]
jmp 0x1002adfe
mov edi, dword [ebp - 0x34]
add edi, 0x18
xor eax, eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x88], edi
mov eax, dword [edi]
jmp 0x1002ae2d
mov ecx, dword [edi + 0x18]
add edi, 0x18
xor eax, eax
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], eax
jmp 0x1002ae4d
lea eax, [edi + 2]
jmp 0x1002a83d
lea ecx, [eax + 2]
mov dword [ebp - 0x20], ecx
test ecx, ecx
je 0x1002b113
cmp esi, 1
jbe 0x1002b149
mov eax, 0x22
mov word [ebx], ax
add ebx, 2
dec esi
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x4c], esi
jmp 0x1002b113
cmp esi, 1
jbe 0x1002b151
mov eax, 0x22
mov word [ebx], ax
add ebx, 2
dec esi
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x4c], esi
jmp 0x1002b151
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa0], eax
cmp eax, dword [edx]
jae 0x1003f5ac
mov ebx, dword [esi + 0x18]
add esi, 0x18
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x38], esi
jmp 0x1002a864
mov eax, dword [ebp - 0x8c]
mov edi, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x8c], eax
cmp eax, dword [edi]
jae 0x1003f5c3
mov eax, dword [edx + 0x18]
add edx, 0x18
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x24], edx
jmp 0x1002a890
mov eax, dword [ebp - 0x7c]
inc dword [ebp - 0x78]
mov ecx, dword [ebp - 0x78]
cmp ecx, dword [eax]
mov ecx, dword [ebp - 0x1c]
jae 0x1003f5dd
mov eax, dword [edi + 0x18]
add edi, 0x18
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x40], edi
jmp 0x1002a8a7
mov edx, dword [ebp - 0xa0]
mov edi, dword [ebp - 0xa4]
inc edx
mov dword [ebp - 0xa0], edx
cmp edx, dword [edi]
jae 0x1003f995
mov edi, dword [ebp - 0x40]
add edi, 0x18
xor edx, edx
mov dword [ebp - 0x98], edx
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x9c], edi
mov edx, dword [edi]
jmp 0x1002b1a1
mov eax, dword [ebp - 0x8c]
mov edi, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x8c], eax
cmp eax, dword [edi]
jae 0x1003f9b1
mov edi, dword [ebp - 0x34]
add edi, 0x18
xor eax, eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x88], edi
mov eax, dword [edi]
jmp 0x1002b1cd
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x7c]
inc ecx
mov dword [ebp - 0x78], ecx
cmp ecx, dword [eax]
jae 0x1003f9cd
mov ecx, dword [edi + 0x18]
add edi, 0x18
mov dword [ebp - 0x30], edi
xor eax, eax
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], eax
jmp 0x1002b1ed
cmp al, byte [edx]
jne 0x1002bb74
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x1002bb74
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x1002bb74
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x1002a5a5
sbb eax, eax
or eax, 1
jmp 0x1002a5a7
cmp al, byte [edx]
jne 0x1002bb9e
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x1002bb9e
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x1002bb9e
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x1002ae89
sbb eax, eax
or eax, 1
jmp 0x1002ae8b
mov eax, dword [0x100a4750]
test al, 2
je 0x1003efcc
push 0x5a0
mov edx, 0x10013df8
mov ecx, 0x80004003
call fcn.10051341
mov eax, dword [0x100a4750]
add esp, 4
test al, 2
je 0x1003efcc
mov ecx, dword [0x100aa138]
mov edx, 0x168009
push 0x80004003
push 0x10013e68
call fcn.1005682f
jmp 0x1002b49b
mov eax, 0x80004003
jmp 0x1002b49b
mov eax, dword [0x100a4750]
test al, 2
je 0x1003f01e
push 0x5aa
mov edx, 0x10013df8
mov ecx, 0x8007000e
call fcn.10051341
mov eax, dword [0x100a4750]
add esp, 4
test al, 2
je 0x1003f01e
mov ecx, dword [0x100aa138]
mov edx, 0x16a809
push 0x8007000e
push 0x10013e68
call fcn.1005682f
jmp 0x1002b49b
mov eax, 0x8007000e
jmp 0x1002b49b
inc edx
add eax, 0x18
cmp edx, ecx
jb 0x1002a3b2
jmp 0x1002a3bb
inc edx
add eax, 0x18
cmp edx, ecx
jb 0x1002a3e0
jmp 0x1002a3e9
inc ecx
add eax, 0x18
cmp ecx, edx
jb 0x1002a403
jmp 0x1002a40c
add esi, 0x18
inc ebx
mov dword [ebp - 0xa0], ebx
mov eax, esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x9c], esi
cmp ebx, ecx
jb 0x1002a440
xor eax, eax
xor esi, esi
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], eax
xor ebx, ebx
jmp 0x1002a454
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x8c]
add eax, 0x18
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x8c], ecx
jb 0x1002a490
xor eax, eax
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
jmp 0x1002a4aa
xor eax, eax
jmp 0x1002a4aa
add edi, 0x18
inc ecx
mov dword [ebp - 0x78], ecx
mov eax, edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x74], edi
cmp ecx, edx
jb 0x1002a4c2
xor edi, edi
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
jmp 0x1002a4d9
xor eax, eax
jmp 0x1002a4d6
cmp dword [ebp + 0xc], 0
je 0x1002a4ea
test ebx, ebx
je 0x1003f15c
cmp dword [ebx + 4], 0xb
jne 0x1003f1a7
lea ecx, [esi + 8]
mov edx, 0x1000444c
call fcn.1003020b
test eax, eax
je 0x1003f1a7
mov ecx, dword [ebp - 0x6c]
movzx eax, word [ecx + 0x24]
test ax, ax
je 0x1003f155
cmp eax, 0xb
jne 0x1003f1c3
cmp word [ecx + 0x2c], 0xffff
jne 0x1003f1c3
mov dword [ebp + 0xc], 1
lea ecx, [ebp - 0xa4]
call fcn.1004a086
lea ecx, [ebp - 0x90]
call fcn.1004a086
lea ecx, [ebp - 0x7c]
call fcn.1004a086
mov edi, dword [ebp - 0x74]
mov edx, dword [ebp - 0x88]
mov ebx, dword [ebp - 0x94]
mov esi, dword [ebp - 0x9c]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], esi
jmp 0x1002a4ed
lea ecx, [ebp - 0xa4]
call fcn.100378c3
mov ebx, dword [ebp - 0x94]
mov esi, dword [ebp - 0x9c]
jmp 0x1003f122
mov dword [ebp + 0xc], 0
jmp 0x1003f15c
xor cl, cl
jmp 0x1002a5b1
lea ecx, [ebp - 0xa4]
call fcn.1004a1ed
mov edi, dword [ebp - 0x74]
mov edx, dword [ebp - 0x88]
mov ebx, dword [ebp - 0x94]
mov esi, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], esi
jmp 0x1002a500
cmp eax, 9
jne 0x1002a5d9
lea ecx, [ebp - 0xa4]
call fcn.1004a1ed
mov edi, dword [ebp - 0x74]
mov edx, dword [ebp - 0x88]
mov ebx, dword [ebp - 0x94]
mov esi, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], esi
jmp 0x1002a500
cmp eax, 0xf8
je 0x1003f273
cmp eax, 0x3c
je 0x1003f273
cmp eax, 0x40
je 0x1003f273
cmp eax, 0xc8
je 0x1003f273
cmp eax, 0x42
je 0x1003f273
cmp eax, 0x11c
je 0x1003f273
cmp eax, 0xba
jne 0x1002a5e3
lea ecx, [ebp - 0xa4]
call fcn.1004a1ed
mov edi, dword [ebp - 0x74]
mov edx, dword [ebp - 0x88]
mov ebx, dword [ebp - 0x94]
mov esi, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], esi
jmp 0x1002a500
add eax, 0xfffffffe
cmp eax, 9
ja case.0x1003f2b6.4
movzx eax, byte [eax + 0x1003fa9c]
jmp dword [eax*4 + 0x1003fa88]
mov eax, dword [0x100a3aac]
mov edi, dword [eax + 4]
add edi, 0x100a3aac
jmp 0x1002a66f
mov eax, dword [0x100a3a78]
mov edi, dword [eax + 4]
add edi, 0x100a3a78
jmp 0x1002a66f
mov eax, dword [0x100a3a8c]
mov edi, dword [eax + 4]
add edi, 0x100a3a8c
jmp 0x1002a66f
push 0x10
push 0x1300000
push dword [0x100a3570]
call dword [sym.imp.MSDART.DLL_MpHeapAlloc]
add esp, 0xc
test eax, eax
je 0x1003f329
push ecx
push esi
mov ecx, eax
call fcn.1007c036
test eax, eax
je 0x1003f329
mov ecx, dword [eax]
mov edi, dword [ecx + 4]
add edi, eax
jmp 0x1002a66f
xor edi, edi
jmp 0x1002a66f
mov eax, 0xa
mov dword [ebp - 0xe4], esi
mov word [ebp - 0xec], ax
jmp 0x1002a9e3
push dword [ebp - 0xe4]
call dword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
test eax, eax
je 0x1003f362
mov byte [esi], 0
lea esi, [esi + 1]
sub eax, 1
jne 0x1003f357
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test byte [0x100a4750], 2
mov esi, 0x8007000e
mov dword [ebp - 0x50], esi
je 0x1002aa83
push 0xa7
mov edx, 0x10004a28
mov ecx, esi
call fcn.10051341
add esp, 4
jmp 0x1002aa83
test byte [0x100a4750], 2
je 0x1003f3cf
cmp dword [0x100aa40c], 0
je 0x1003f3cf
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x100aa40c]
push eax
mov eax, dword [0x100aa100]
push 0x2b000
push eax
call fcn.10056748
add esp, 0x10
mov esi, 0x80004005
mov dword [ebp - 0x50], esi
jmp 0x1002aa86
mov ecx, dword [0x100aa100]
mov edx, 0x2c009
push esi
push 0x10004a88
call fcn.1005682f
mov esi, eax
mov dword [ebp - 0x50], esi
jmp 0x1002aa93
test byte [0x100a4750], 2
mov ebx, dword [ebp - 0x50]
je 0x1003f43b
push 0x616
mov edx, 0x10013df8
mov ecx, ebx
call fcn.10051341
add esp, 4
test byte [0x100a4750], 2
je 0x1003f43b
mov ecx, dword [0x100aa138]
mov edx, 0x185809
push ebx
push 0x10013e68
call fcn.1005682f
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1003f44f
mov ebx, 0x8007000e
mov ecx, dword [ebp - 0xc8]
test ecx, ecx
je 0x1002b44f
call fcn.1002bc08
jmp 0x1002b44f
mov esi, dword [ebp - 0x50]
jmp 0x1002ab0a
mov eax, dword [ebp - 0xb0]
xor edx, edx
mov ecx, 0x1000489c
movzx eax, word [eax]
push eax
call fcn.1007c330
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x1003f516
mov ecx, dword [ebx]
lea eax, [ebp - 0xb8]
push eax
push dword [ebp - 0x20]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x100a663c]
mov ecx, ebx
call esi
mov esi, eax
mov dword [ebp - 0x50], esi
test esi, esi
jns 0x1003f4fd
mov eax, dword [0x100a4750]
mov ebx, esi
test al, 2
je 0x1003f44f
push 0x636
mov edx, 0x10013df8
mov ecx, ebx
call fcn.10051341
mov eax, dword [0x100a4750]
add esp, 4
test al, 2
je 0x1003f44f
mov ecx, dword [0x100aa138]
mov edx, 0x18d809
push ebx
push 0x10013e68
call fcn.1005682f
jmp 0x1003f44f
mov eax, dword [ebx]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x100a663c]
mov ecx, ebx
call esi
mov ebx, dword [ebp - 0x30]
jmp 0x1002a6cd
test byte [0x100a4750], 2
je 0x1003f540
mov ecx, dword [0x100aa138]
mov edx, 0x18e809
push 0x80004005
push 0x10013e68
call fcn.1005682f
mov ebx, eax
jmp 0x1003f44f
mov ebx, 0x80004005
jmp 0x1003f44f
inc esi
jmp 0x1002a71c
cmp ebx, 0xa0
jne 0x1002a762
test al, al
je 0x1002a762
mov ecx, dword [ebp - 0xb8]
call fcn.100831b0
mov edx, eax
mov ecx, edx
mov dword [ebp - 0xb8], edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1003f57c
jmp 0x1002a77c
mov eax, 2
jmp 0x1002a83d
inc edi
jmp case.0x1002a8c2.35
inc ebx
jmp case.0x1002a8c2.35
mov eax, 2
jmp 0x1002a83d
xor eax, eax
xor esi, esi
mov dword [ebp - 0xa0], eax
xor ebx, ebx
mov dword [ebp - 0x98], eax
jmp 0x1002ba41
xor edx, edx
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x84], edx
mov dword [ebp - 0x80], edx
jmp 0x1002ba7d
xor edi, edi
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
jmp 0x1002baaf
test byte [0x100a4750], 2
je 0x1003f540
mov ecx, dword [0x100aa138]
mov edx, 0x191009
push 0x80004005
push 0x10013e68
call fcn.1005682f
mov ebx, eax
jmp 0x1003f44f
mov eax, dword [0x100a4750]
test al, 2
je 0x1003f44a
push 0x683
mov edx, 0x10013df8
mov ecx, 0x8007000e
call fcn.10051341
mov eax, dword [0x100a4750]
add esp, 4
test al, 2
je 0x1003f44a
mov ecx, dword [0x100aa138]
mov edx, 0x1a0c09
push 0x8007000e
push 0x10013e68
call fcn.1005682f
mov ebx, eax
jmp 0x1003f44f
add ebx, 0x18
inc edi
mov dword [ebp - 0xa0], edi
mov eax, ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x9c], ebx
cmp edi, ecx
jb 0x1002aba0
xor edx, edx
xor eax, eax
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], edx
xor edx, edx
jmp 0x1002abb3
add ebx, 0x18
inc esi
mov dword [ebp - 0x8c], esi
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x88], ebx
cmp esi, ecx
jb 0x1002abf0
xor eax, eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
xor eax, eax
jmp 0x1002ac04
add ebx, 0x18
inc esi
mov dword [ebp - 0x78], esi
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x74], ebx
cmp esi, ecx
jb 0x1002ac30
xor eax, eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
xor ecx, ecx
jmp 0x1002ac44
mov edx, 0x80070057
jmp 0x1002ac72
add ecx, 2
sub eax, 1
jne 0x1002ac90
mov edx, 0x80070057
xor ecx, ecx
jmp 0x1002aca5
test ebx, ebx
jne 0x1002ad6b
jmp 0x1002adb8
mov ecx, dword [ebp - 0x28]
sub edx, 2
dec ecx
mov dword [ebp - 0x48], 0x8007007a
jmp 0x1002ad47
cmp ecx, 0x8007007a
jne 0x1002adb8
jmp 0x1002ad6b
mov ebx, dword [ebp - 0x3c]
jmp 0x1002adc3
mov dword [ebp - 0xb0], 0
jmp 0x1002ae9d
dec esi
mov word [ebx], di
add ebx, 2
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x3c], ebx
cmp esi, 1
je 0x1002aee7
jmp 0x1002aed5
mov ecx, 0x80070057
jmp 0x1002af05
add edx, 2
sub eax, 1
jne 0x1002af20
mov ecx, 0x80070057
xor edx, edx
jmp 0x1002af35
test ebx, ebx
jne 0x1002aff1
jmp 0x1002affb
mov edx, dword [ebp - 0x28]
sub eax, 2
dec edx
mov dword [ebp - 0x20], 0x8007007a
jmp 0x1002afc7
cmp edx, 0x8007007a
jne 0x1002affb
jmp 0x1002aff1
mov ecx, 0x80070057
jmp 0x1002b69d
add eax, 2
sub ecx, 1
jne 0x1002b6c0
mov ecx, 0x80070057
xor eax, eax
jmp 0x1002b6d9
test ebx, ebx
jne 0x1002b7bc
jmp 0x1002b7ca
mov eax, dword [ebp - 0x2c]
sub ecx, 2
dec eax
mov dword [ebp - 0x58], 0x8007007a
jmp 0x1002b78f
cmp eax, 0x8007007a
jne 0x1002b7ca
jmp 0x1002b7bc
mov ecx, 0x80070057
jmp 0x1002b7f6
add edx, 2
sub eax, 1
jne 0x1002b810
mov ecx, 0x80070057
xor edx, edx
jmp 0x1002b825
xor edx, edx
jmp 0x1002b828
test ebx, ebx
jne 0x1002b652
jmp 0x1002b660
mov edx, dword [ebp - 0x20]
sub eax, 2
dec edx
mov dword [ebp - 0x48], 0x8007007a
jmp 0x1002b628
cmp edx, 0x8007007a
jne 0x1002b660
jmp 0x1002b652
mov ecx, 2
mov dword [ebp - 0x20], ecx
jmp 0x1002b9d6
inc edi
jmp case.0x1002b2f8.35
inc ebx
jmp case.0x1002b2f8.35
mov edx, dword [ebp - 0x44]
mov ecx, 2
mov dword [ebp - 0x20], ecx
jmp 0x1002b9d6
mov ecx, 0x22
dec esi
mov word [ebx], cx
add ebx, 2
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x4c], esi
cmp esi, 1
je 0x1002b146
jmp 0x1002b134
mov ecx, 0x80070057
jmp 0x1002b516
add edx, 2
sub eax, 1
jne 0x1002b530
mov ecx, 0x80070057
xor edx, edx
jmp 0x1002b545
cmp word [edi], 0
je 0x1002b905
test ebx, ebx
jne 0x1002b905
jmp 0x1002b156
sub edx, 2
mov dword [ebp - 0x58], 0x8007007a
dec dword [ebp - 0x44]
jmp 0x1002b8e1
cmp edx, 0x8007007a
jne 0x1002b156
jmp 0x1002b905
xor edx, edx
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0x98], edx
jmp 0x1002b1a1
xor eax, eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
jmp 0x1002b1cd
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x74], eax
jmp 0x1002bb4c
mov ecx, 0x80070057
jmp 0x1002b214
add edx, 2
sub eax, 1
jne 0x1002b230
mov ecx, 0x80070057
xor edi, edi
jmp 0x1002b245
xor edi, edi
jmp 0x1002b248
test ebx, ebx
jne 0x1002adae
jmp 0x1002adc0
mov eax, dword [ebp - 0xc0]
mov edi, dword [ebp - 0x28]
sub edx, 2
dec edi
mov dword [ebp - 0xa8], 0x8007007a
jmp 0x1002ad87
cmp edx, 0x8007007a
mov edx, dword [ebp - 0x1c]
jne 0x1002adc0
jmp 0x1002adae
test esi, esi
je 0x1002b44c
mov ecx, esi
call fcn.1002bc37
push esi
push dword [0x100a3570]
call dword [sym.imp.MSDART.DLL_MpHeapFree]
add esp, 8
jmp 0x1002b44c
mov ecx, dword [0x100aa138]
mov edx, 0x1bcc09
push ebx
push 0x10013e68
call fcn.1005682f
mov ebx, eax
jmp 0x1002b499