Function at 0x1000a350
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x114
mov eax, dword [ebp + 8]
push ebx
lea ecx, [eax + 0xbfa]
push esi
push edi
mov ebx, eax
mov dword [esp + 0xac], ecx
cmp eax, ecx
ja case.0x1000b3c0.23075
mov edi, dword [esp + 0x2c]
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x70]
jmp 0x1000a390
mov ecx, dword [ebp + 0xc]
cmp ebx, 0x54b8
ja 0x1000ab72
je 0x1000aae8
cmp ebx, 0x37b6
ja 0x1000a724
je 0x1000a714
cmp ebx, 0x3649
ja 0x1000a592
je 0x1000a578
lea eax, [ebx - 0x172f]
cmp eax, 0xdb
ja case.0x1000b3c0.22857
xchg esi, esp
adc byte [eax], al
add byte [edi], cl
mov dh, 0x80
and byte [ebp + 0x24ff1000], dh
jmp dword [eax*4 + 0x1000b50c]
jl 0x1000a430
movzx eax, byte [eax + 0x1000b520]
jmp dword [eax*4 + 0x1000b50c]
jl 0x1000a430
lds eax, [edi + 0x24848baf]
les eax, [eax]
add byte [eax], al
mov ecx, 0x2001
mov word [eax + 0x18], cx
mov word [eax + 0xc], cx
mov word [eax], cx
xor ecx, ecx
mov word [eax + 0x1a], cx
mov word [eax + 0xe], cx
mov word [eax + 2], cx
jmp case.0x1000b3c0.22857
cmp dword [esp + 0xb8], 0
jne 0x1000a47b
mov ecx, 0x7f86
mov eax, ecx
sub eax, 0x7f86
je 0x1000a444
sub eax, 0x40
jne 0x1000a470
call 0x7b3d1975
popfd
inc ecx
invalid
imul ebx, dword [ebp - 0x744638bf], 0x44
and al, 0x1c
mov eax, dword [esp + 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
ffree st(5)
dec esp
dec ecx
jl 0x1000a3d5
inc ebp
sbb al, 0x83
cmp bh, bh
jne 0x1000a468
mov eax, 0x1956
cmp eax, eax
je 0x1000b4db
add eax, 0x33
cmp eax, 0x1956
jbe 0x1000a458
mov dword [esp + 0x1c], 1
add ecx, 0x40
cmp ecx, 0x7fc6
jbe 0x1000a426
mov ecx, dword [esp + 0xb8]
add ecx, 3
mov dword [esp + 0xc4], ecx
jmp case.0x1000b3c0.22857
inc edx
insd dword es:[edi], dx
and dword [eax], edi
test eax, 0x2569b9
add bl, ch
add ecx, dword [ebp - 0x3e74ffb7]
mov eax, ecx
sub eax, 0x2569
je 0x1000a4be
sub eax, 0x1a
jne 0x1000a4cb
mov dh, byte [eax + 0x76]
int3
inc ebp
les esp, [edi + 0x44c700d8]
and al, 0x1c
add byte [eax], al
add byte [eax], al
add ecx, 0x1a
cmp ecx, 0x2583
jbe 0x1000a4a0
mov ecx, dword [esp + 0x78]
lea eax, [ecx - 1]
mov dword [esp + 0xc0], eax
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
cmp eax, 1
jne 0x1000a4f6
cmp ecx, 0x354
jae 0x1000a50b
cmp eax, 2
jne case.0x1000b3c0.22857
cmp ecx, 0x250
jb case.0x1000b3c0.22857
mov eax, 0x4ad6
cmp eax, eax
je 0x1000b4fd
add eax, 0x1e
cmp eax, 0x4ad6
jbe 0x1000a512
jmp case.0x1000b3c0.22857
lea edx, [esp + 0xc]
push edx
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x90]
push ecx
mov dword [esp + 0x94], 0xe002025
call fcn.1002d520
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov edx, dword [ebp + 0x14]
add esp, 0xc
push 4
push eax
add cl, byte [ebx - 0x3b7cebab]
or al, 0x6a
add al, 0x50
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.10017ba0
mov edx, dword [esp + 0x20]
add esp, 0x10
mov dword [esp + 0xb8], eax
jmp case.0x1000b3c0.22857
push edi
or esi, dword [edx + eax*8 + 0x2a]
xor eax, eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
jmp case.0x1000b3c0.22857
lea eax, [ebx - 0x3692]
cmp eax, 0xdb
ja case.0x1000b3c0.22857
movzx eax, byte [eax + 0x1000b610]
jmp dword [eax*4 + 0x1000b5fc]
jb 0x1000a550
fisubr dword [eax + edi*8 - 0x5f]
add byte [eax + 0x14], ah
adc byte [0xfff], dh
mov dword [esp + 0xb0], eax
jmp case.0x1000b3c0.22857
pop ecx
leave
push edi
mov cs, word ds:[ebx - 0x44efdbac]
insd dword es:[edi], dx
aaa
add byte [eax], al
jmp case.0x1000b3c0.22857
cmp esp, dword [ebp - 0x7438e4ad]
dec ebp
adc al, 0x80
cmp dword [eax], eax
je case.0x1000b3c0.22857
mov esi, 0x56d2
xor ecx, ecx
mov eax, esi
sub eax, 0x56d2
je 0x1000a613
sub eax, 0x39
jne 0x1000a649
cmp cl, 0x79
aad 0xb5
call fcn.10021ce0
xor ecx, ecx
jmp 0x1000a649
push esi
adc bl, byte [ebx - 0x73c6494a]
and al, 0x94
add byte [eax], al
add byte [edi + 9], dh
cmp dword [esp + 0x90], ecx
jbe 0x1000a637
mov dword [esp + 0x90], 0x57
jmp 0x1000a642
mov dword [esp + 0x90], 0x8f
mov dword [esp + 0x94], ecx
add esi, 0x39
cmp esi, 0x570b
jbe 0x1000a5f7
mov esi, dword [esp + 0x70]
mov edx, dword [esp + 0x10]
jmp case.0x1000b3c0.22857
salc
les ebp, [ebp + 0xe]
ret 0x9c8b
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x1c], eax
jmp case.0x1000b3c0.22857
cmp ebx, 0x534b
ja 0x1000a9fc
je 0x1000a95c
cmp ebx, 0x52b9
ja 0x1000a819
je 0x1000a76c
cmp ebx, 0x37ff
je case.0x1000b3c0.23075
cmp ebx, 0x5270
jne case.0x1000b3c0.22857
mov ecx, dword [esp + 0xac]
mov dword [esp + 0x7c], ecx
jmp case.0x1000b3c0.22857
mov edx, dword [esp + 0xac]
push 0x100336d8
lea ecx, [esp + 0x72]
mov dword [esp + 0x84], edx
push ecx
lea edx, [esp + 0x38]
xor eax, eax
push edx
mov dword [esp + 0x3c], 0x40003
mov dword [esp + 0x40], 0x60005
mov dword [esp + 0x44], 0x80007
mov dword [esp + 0x48], 0xa0009
mov dword [esp + 0x4c], 0xd000b
mov dword [esp + 0x50], 0x11000f
mov dword [esp + 0x54], 0x170013
mov dword [esp + 0x58], 0x1f001b
mov dword [esp + 0x5c], 0x2b0023
mov dword [esp + 0x60], 0x3b0033
mov dword [esp + 0x64], 0x530043
mov dword [esp + 0x68], 0x730063
mov dword [esp + 0x6c], 0xa30083
mov dword [esp + 0x70], 0xe300c3
mov dword [esp + 0x74], 0x102
mov word [esp + 0x78], ax
call fcn.1002d4e0
mov edx, dword [esp + 0x1c]
add esp, 0xc
jmp case.0x1000b3c0.22857
cmp ebx, 0x5302
jne case.0x1000b3c0.22857
push 0x10033698
lea ecx, [esp + 0x72]
push ecx
lea edx, [esp + 0x38]
mov eax, 0x44
push edx
mov dword [esp + 0x3c], 0x100010
mov dword [esp + 0x40], 0x100010
mov dword [esp + 0x44], 0x100010
mov dword [esp + 0x48], 0x100010
mov dword [esp + 0x4c], 0x110011
mov dword [esp + 0x50], 0x110011
mov dword [esp + 0x54], 0x120012
mov dword [esp + 0x58], 0x120012
mov dword [esp + 0x5c], 0x130013
mov dword [esp + 0x60], 0x130013
mov dword [esp + 0x64], 0x140014
mov dword [esp + 0x68], 0x140014
mov dword [esp + 0x6c], 0x150015
mov dword [esp + 0x70], 0x150015
mov dword [esp + 0x74], 0x4e0010
mov word [esp + 0x78], ax
call fcn.1002d4e0
add esp, 0xc
xor eax, eax
push 0x10033658
lea edx, [esp + 0x74]
mov dword [esp + 0x70], eax
push edx
lea eax, [esp + 0x38]
push eax
mov dword [esp + 0x3c], 0x20001
mov dword [esp + 0x40], 0x40003
mov dword [esp + 0x44], 0x70005
mov dword [esp + 0x48], 0xd0009
mov dword [esp + 0x4c], 0x190011
mov dword [esp + 0x50], 0x310021
mov dword [esp + 0x54], 0x610041
mov dword [esp + 0x58], 0xc10081
mov dword [esp + 0x5c], 0x1810101
mov dword [esp + 0x60], 0x3010201
mov dword [esp + 0x64], 0x6010401
mov dword [esp + 0x68], 0xc010801
mov dword [esp + 0x6c], 0x18011001
mov dword [esp + 0x70], 0x30012001
mov dword [esp + 0x74], 0x60014001
call fcn.1002d4e0
mov edx, dword [esp + 0x1c]
add esp, 0xc
jmp case.0x1000b3c0.22857
push 0x10033618
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x38]
push ecx
mov dword [esp + 0x3c], 0x100010
mov dword [esp + 0x40], 0x100010
mov dword [esp + 0x44], 0x110011
mov dword [esp + 0x48], 0x120012
mov dword [esp + 0x4c], 0x130013
mov dword [esp + 0x50], 0x140014
mov dword [esp + 0x54], 0x150015
mov dword [esp + 0x58], 0x160016
mov dword [esp + 0x5c], 0x170017
mov dword [esp + 0x60], 0x180018
mov dword [esp + 0x64], 0x190019
mov dword [esp + 0x68], 0x1a001a
mov dword [esp + 0x6c], 0x1b001b
mov dword [esp + 0x70], 0x1c001c
mov dword [esp + 0x74], 0x1d001d
mov dword [esp + 0x78], 0x400040
call fcn.1002d4e0
mov edx, dword [esp + 0x1c]
add esp, 0xc
jmp case.0x1000b3c0.22857
lea eax, [ebx - 0x5394]
cmp eax, 0xdb
ja case.0x1000b3c0.22857
movzx eax, byte [eax + 0x1000b700]
jmp dword [eax*4 + 0x1000b6ec]
mov ecx, dword [ebp + 0x20]
mov eax, dword [ecx]
mov dword [esp + 0x20], eax
jmp case.0x1000b3c0.22857
mov eax, 0xf
mov edi, edi
cmp word [esp + eax*2 + 0xc8], 0
jne 0x1000aa4a
dec eax
cmp eax, 1
jae 0x1000aa30
mov dword [esp + 0x28], eax
jmp case.0x1000b3c0.22857
mov dword [esp + 0x28], eax
mov ebx, 0x546f
jmp case.0x1000b3c0.22857
xor ecx, ecx
mov ax, cx
movzx ecx, ax
mov eax, ecx
shl ecx, 0x10
or eax, ecx
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], eax
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov dword [esp + 0x18], 0x10
mov dword [esp + 0x24], 0
test ecx, ecx
je case.0x1000b3c0.22857
mov edx, dword [esp + 0x24]
mov eax, dword [ebp + 0x10]
movzx eax, word [eax + edx*2]
inc word [esp + eax*2 + 0xc8]
lea eax, [esp + eax*2 + 0xc8]
inc edx
cmp edx, ecx
jb 0x1000aac0
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x10]
jmp case.0x1000b3c0.22857
mov eax, dword [esp + 0x28]
cmp dword [esp + 0x20], eax
jbe 0x1000aaf6
mov dword [esp + 0x20], eax
test eax, eax
jne case.0x1000b3c0.22857
mov edi, edi
cmp eax, 0xf5
ja case.0x1000ab0e.1
movzx ecx, byte [eax + 0x1000b7f8]
jmp dword [ecx*4 + 0x1000b7dc]
mov word [esp + 0x14], 0x140
jmp case.0x1000ab0e.1
mov edx, dword [ebp + 0xc]
mov ecx, dword [edx]
mov edx, dword [esp + 0x14]
mov dword [ecx], edx
jmp 0x1000ab52
mov ecx, dword [ebp + 0x20]
mov dword [ecx], 1
jmp case.0x1000ab0e.1
mov dword [esp + 0x1c], 0
jmp case.0x1000ab0e.1
mov ecx, dword [ebp + 0xc]
xor edx, edx
mov word [esp + 0x16], dx
mov edx, dword [ecx]
mov ecx, dword [esp + 0x14]
mov dword [edx], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [esp + 0x10]
add dword [ecx], 4
add eax, 0x31
lea ecx, [eax + 0x18dd]
cmp ecx, 0x19d2
jbe 0x1000ab00
jmp case.0x1000b3c0.22857
cmp ebx, 0x5792
ja 0x1000aeae
je 0x1000ae96
cmp ebx, 0x5625
ja 0x1000acf7
je 0x1000acc6
lea eax, [ebx - 0x5501]
cmp eax, 0xdb
ja case.0x1000b3c0.22857
movzx eax, byte [eax + 0x1000b904]
jmp dword [eax*4 + 0x1000b8f0]
mov dword [esp + 0x18], 1
lea ecx, [ecx]
mov ecx, 0x315f
mov eax, ecx
sub eax, 0x315f
je 0x1000abf0
sub eax, 0x3e
jne 0x1000ac04
test edi, edi
jns 0x1000ac04
mov eax, 0x56ac
cmp eax, eax
je 0x1000b4f3
add eax, 0x12
cmp eax, 0x56ac
jbe 0x1000abde
jmp 0x1000ac04
mov eax, dword [esp + 0x18]
movzx eax, word [esp + eax*2 + 0xc8]
add edi, edi
sub edi, eax
mov dword [esp + 0x2c], edi
add ecx, 0x3e
cmp ecx, 0x319d
jbe 0x1000abc5
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
cmp eax, 0xf
jbe 0x1000abc0
jmp case.0x1000b3c0.22857
mov eax, dword [esp + 0x84]
cmp dword [esp + 0x20], eax
jae 0x1000ac33
mov dword [esp + 0x20], eax
mov edi, 1
mov dword [esp + 0x2c], edi
jmp case.0x1000b3c0.22857
mov ecx, dword [esp + 0x28]
mov eax, 1
mov dword [esp + 0x84], eax
cmp ecx, eax
jbe 0x1000ac6c
cmp word [esp + eax*2 + 0xc8], 0
jne 0x1000ac65
inc eax
cmp eax, ecx
jb 0x1000ac55
mov dword [esp + 0x84], eax
mov ebx, 0x5501
jmp case.0x1000b3c0.22857
test edi, edi
jle 0x1000acb7
mov ecx, dword [ebp + 0x14]
cmp dword [ecx], 0
je 0x1000ac89
cmp dword [esp + 0x28], 1
je 0x1000acb7
mov ecx, 0x7e4e
mov edi, edi
mov eax, ecx
sub eax, 0x7e4e
je 0x1000aca4
sub eax, 0x51
je case.0x1000b3c0.23075
jmp 0x1000acac
mov dword [esp + 0x1c], 0xffffffff
add ecx, 0x51
cmp ecx, 0x7e9f
jbe 0x1000ac90
xor eax, eax
mov word [esp + 0x102], ax
jmp case.0x1000b3c0.22857
mov eax, 1
jmp 0x1000acd0
mov cx, word [esp + eax*2 + 0x100]
add cx, word [esp + eax*2 + 0xc8]
inc eax
mov word [esp + eax*2 + 0x100], cx
cmp eax, 0xf
jb 0x1000acd0
mov dword [esp + 0x18], eax
jmp case.0x1000b3c0.22857
lea eax, [ebx - 0x566e]
cmp eax, 0xdb
ja case.0x1000b3c0.22857
movzx eax, byte [eax + 0x1000b9f4]
jmp dword [eax*4 + 0x1000b9e0]
mov eax, dword [ebp + 0x1c]
xor ecx, ecx
mov dword [esp + 0x24], ecx
cmp dword [eax], ecx
jbe case.0x1000b3c0.22857
mov eax, dword [ebp + 0x10]
cmp word [eax + ecx*2], 0
je 0x1000ad5e
movzx edx, word [eax + ecx*2]
movzx eax, word [esp + edx*2 + 0x100]
mov edx, dword [ebp + 0x18]
mov word [edx + eax*2], cx
mov eax, dword [ebp + 0x10]
movzx eax, word [eax + ecx*2]
inc word [esp + eax*2 + 0x100]
mov edx, dword [esp + 0x10]
lea eax, [esp + eax*2 + 0x100]
mov eax, dword [ebp + 0x1c]
inc ecx
cmp ecx, dword [eax]
jb 0x1000ad27
mov dword [esp + 0x24], ecx
jmp case.0x1000b3c0.22857
mov ecx, dword [ebp + 0x14]
mov eax, dword [ecx]
sub eax, 0
je 0x1000adb0
dec eax
je 0x1000adf4
mov ecx, 0x64ac
mov eax, ecx
sub eax, 0x64ac
je 0x1000ae6f
sub eax, 0x26
je 0x1000ae62
sub eax, 0x26
jne 0x1000ae77
mov dword [esp + 0xa8], 0xffffffff
jmp 0x1000ae77
mov ecx, 0x15e9
mov eax, ecx
sub eax, 0x15e9
je 0x1000addb
sub eax, 0x21
je 0x1000adce
sub eax, 0x21
je case.0x1000ad0f.22272
jmp 0x1000ade9
mov dword [esp + 0xa8], 0x13
jmp 0x1000ade9
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], eax
add ecx, 0x21
cmp ecx, 0x162b
jbe 0x1000adb5
xor eax, eax
cmp eax, 0xb8
ja case.0x1000ae04.1
movzx ecx, byte [eax + 0x1000bae8]
jmp dword [ecx*4 + 0x1000bad0]
mov dword [esp + 0x80], 0x10033698
jmp case.0x1000ae04.1
mov dword [esp + 0x7c], 0x100336d8
jmp case.0x1000ae04.1
sub dword [esp + 0x80], 0x202
jmp case.0x1000ae04.1
sub dword [esp + 0x7c], 0x202
add eax, 0x2e
lea ecx, [eax + 0x5daf]
cmp ecx, 0x5e67
jbe 0x1000adf6
jmp 0x1000ad7c
mov dword [esp + 0xa8], 0x100
mov ebx, 0x5700
jmp case.0x1000b3c0.22857
mov dword [esp + 0x80], 0x10033618
jmp 0x1000ae77
mov dword [esp + 0x7c], 0x10033658
add ecx, 0x26
cmp ecx, 0x64f8
jbe 0x1000ad81
jmp case.0x1000b3c0.22857
xor edx, edx
mov dword [esp + 0x10], edx
jmp case.0x1000b3c0.22857
mov eax, dword [esp + 0x84]
mov dword [esp + 0x24], 0
mov dword [esp + 0x18], eax
jmp case.0x1000b3c0.22857
cmp ebx, 0x58ff
ja 0x1000b3a8
je 0x1000af20
lea eax, [ebx - 0x57db]
cmp eax, 0xdb
ja case.0x1000b3c0.22857
movzx eax, byte [eax + 0x1000bbb8]
jmp dword [eax*4 + 0x1000bba4]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x74], 0
jmp case.0x1000b3c0.22857
mov ecx, dword [esp + 0x20]
mov eax, 1
shl eax, cl
mov dword [esp + 0x9c], 0xffffffff
mov dword [esp + 0x78], eax
jmp case.0x1000b3c0.22857
mov ecx, dword [ecx]
mov dword [esp + 0x8c], ecx
jmp case.0x1000b3c0.22857
mov eax, 0x484e
mov dword [esp + 0xb4], eax
lea esp, [esp]
cmp eax, 0x491a
ja 0x1000b0c3
je 0x1000b0ae
add eax, 0xffffb7b2
cmp eax, 0x99
ja case.0x1000af58.18511
movzx eax, byte [eax + 0x1000bca8]
jmp dword [eax*4 + 0x1000bc94]
mov ecx, dword [esp + 0xa0]
mov eax, 1
shl eax, cl
mov dword [esp + 0x98], eax
jmp case.0x1000af58.18511
mov ebx, dword [ebp + 0x18]
mov esi, dword [esp + 0x24]
movzx edx, word [ebx + esi*2]
mov ecx, dword [esp + 0xa8]
mov eax, edx
cmp eax, ecx
jge 0x1000afc0
mov ecx, 0x6a14
mov eax, ecx
sub eax, 0x6a14
je 0x1000afab
sub eax, 5
jne 0x1000afb0
mov word [esp + 0x16], dx
jmp 0x1000afb0
mov byte [esp + 0x14], 0
add ecx, 5
cmp ecx, 0x6a19
jbe 0x1000af96
jmp 0x1000b027
jle 0x1000aff9
mov ecx, 0x3c6a
cmp ecx, ecx
jne 0x1000afec
movzx eax, word [ebx + esi*2]
mov edx, dword [esp + 0x80]
add eax, eax
mov dl, byte [eax + edx]
mov byte [esp + 0x14], dl
mov edx, dword [esp + 0x7c]
mov ax, word [eax + edx]
mov word [esp + 0x16], ax
add ecx, 0x1f
cmp ecx, 0x3c6a
jbe 0x1000afc9
jmp 0x1000b027
mov ecx, 0x4c08
mov edi, edi
mov eax, ecx
sub eax, 0x4c08
je 0x1000b017
sub eax, 0xa
jne 0x1000b01c
xor edx, edx
mov word [esp + 0x16], dx
jmp 0x1000b01c
mov byte [esp + 0x14], 0x60
add ecx, 0xa
cmp ecx, 0x4c12
jbe 0x1000b000
mov ecx, dword [esp + 0x18]
sub ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x10]
mov esi, 1
shl esi, cl
mov dword [esp + 0x70], esi
jmp case.0x1000af58.18511
mov al, byte [esp + 0x18]
sub al, byte [esp + 0x74]
mov byte [esp + 0x15], al
jmp case.0x1000af58.18511
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x84], ecx
mov eax, 0x7ec0
cmp eax, eax
jne 0x1000b095
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0x98]
shr edx, cl
mov ecx, dword [esp + 0x14]
sub ebx, esi
mov dword [esp + 0x98], ebx
add edx, ebx
mov ebx, dword [esp + 0x8c]
mov dword [ebx + edx*4], ecx
mov edx, dword [esp + 0x10]
add eax, 0x4c
cmp eax, 0x7ec0
jbe 0x1000b069
cmp dword [esp + 0x98], 0
jne 0x1000b062
jmp case.0x1000af58.18511
mov ecx, dword [esp + 0x18]
dec ecx
mov esi, 1
shl esi, cl
mov dword [esp + 0x70], esi
jmp case.0x1000af58.18511
sub eax, 0x494d
je 0x1000b338
sub eax, 0x33
je 0x1000b2e2
sub eax, 0x33
jne case.0x1000af58.18511
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x18], eax
jbe case.0x1000af58.18511
mov eax, dword [esp + 0xc0]
and eax, edx
mov dword [esp + 0xbc], eax
cmp eax, dword [esp + 0x9c]
je case.0x1000af58.18511
mov ebx, dword [esp + 0xa0]
mov esi, dword [esp + 0x74]
mov edx, 0x3260
jmp 0x1000b120
cmp edx, 0x3364
ja 0x1000b260
je 0x1000b219
lea eax, [edx - 0x3260]
cmp eax, 0xc3
ja case.0x1000b14a.12897
movzx ecx, byte [eax + 0x1000bd58]
jmp dword [ecx*4 + 0x1000bd44]
lea eax, [esi + ebx]
cmp eax, dword [esp + 0x28]
jae 0x1000b1b5
lea ebx, [ebx]
mov ecx, 0x7d88
lea edx, [esp + eax*2 + 0xc8]
lea esp, [esp]
mov eax, ecx
sub eax, 0x7d88
je 0x1000b198
sub eax, 0x40
je 0x1000b187
sub eax, 0x40
jne 0x1000b1a1
add edi, edi
jmp 0x1000b19d
test edi, edi
jle 0x1000b1b5
inc ebx
mov dword [esp + 0xa0], ebx
add edx, 2
jmp 0x1000b1a1
movzx eax, word [edx]
sub edi, eax
mov dword [esp + 0x2c], edi
add ecx, 0x40
cmp ecx, 0x7e08
jbe 0x1000b170
lea eax, [esi + ebx]
cmp eax, dword [esp + 0x28]
jb 0x1000b160
mov edx, 0x32e2
jmp case.0x1000b14a.12897
test esi, esi
jne 0x1000b1cb
mov esi, dword [esp + 0x20]
mov dword [esp + 0x74], esi
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x84]
lea ecx, [eax + ecx*4]
mov dword [esp + 0x8c], ecx
jmp case.0x1000b14a.12897
mov ebx, dword [esp + 0x18]
sub ebx, esi
mov edi, 1
mov ecx, ebx
shl edi, cl
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x2c], edi
jmp case.0x1000b14a.12897
mov eax, 1
mov ecx, ebx
shl eax, cl
add dword [esp + 0x78], eax
jmp case.0x1000b14a.12897
mov ecx, dword [ebp + 0x14]
mov eax, dword [ecx]
cmp eax, 1
jne 0x1000b22d
cmp dword [esp + 0x78], 0x354
jae 0x1000b244
cmp eax, 2
jne case.0x1000b14a.12897
cmp dword [esp + 0x78], 0x250
jb case.0x1000b14a.12897
mov eax, 0x533f
cmp eax, eax
je 0x1000b4fd
add eax, 0x64
cmp eax, 0x533f
jbe 0x1000b24b
jmp case.0x1000b14a.12897
mov eax, edx
sub eax, 0x33a5
je 0x1000b2b0
sub eax, 0x41
je 0x1000b296
sub eax, 0x41
jne case.0x1000b14a.12897
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [esp + 0x8c]
mov edi, dword [esp + 0x9c]
sub ecx, eax
sar ecx, 2
mov word [eax + edi*4 + 2], cx
mov edi, dword [esp + 0x2c]
jmp case.0x1000b14a.12897
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov edi, dword [esp + 0x9c]
mov al, byte [esp + 0x20]
mov byte [ecx + edi*4 + 1], al
mov edi, dword [esp + 0x2c]
jmp case.0x1000b14a.12897
mov ecx, dword [ebp + 0xc]
mov eax, dword [esp + 0xbc]
mov ecx, dword [ecx]
mov dword [esp + 0x9c], eax
mov byte [ecx + eax*4], bl
add edx, 0x41
cmp edx, 0x3427
jbe 0x1000b120
mov esi, dword [esp + 0x70]
mov edx, dword [esp + 0x10]
jmp case.0x1000af58.18511
mov eax, dword [esp + 0x18]
inc dword [esp + 0x24]
lea eax, [esp + eax*2 + 0xc8]
mov ecx, 0xffff
add word [eax], cx
jne case.0x1000af58.18511
mov eax, 0x199c
cmp eax, eax
jne 0x1000b32c
mov ecx, dword [esp + 0x28]
cmp dword [esp + 0x18], ecx
je 0x1000b39e
mov ebx, dword [esp + 0x24]
mov ecx, dword [ebp + 0x18]
movzx ecx, word [ecx + ebx*2]
mov ebx, dword [ebp + 0x10]
movzx ecx, word [ebx + ecx*2]
mov dword [esp + 0x18], ecx
add eax, 0xd
cmp eax, 0x199c
jbe 0x1000b306
jmp case.0x1000af58.18511
test edx, esi
je 0x1000b34a
lea esp, [esp]
shr esi, 1
test edx, esi
jne 0x1000b340
mov dword [esp + 0x70], esi
test esi, esi
je 0x1000b377
mov ecx, 0xc17
mov eax, ecx
sub eax, 0xc17
je 0x1000b365
sub eax, 0x64
jne 0x1000b36a
add edx, esi
jmp 0x1000b36a
lea eax, [esi - 1]
and edx, eax
add ecx, 0x64
cmp ecx, 0xc7b
jbe 0x1000b353
jmp 0x1000b379
xor edx, edx
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0xb4]
add eax, 0x33
mov dword [esp + 0xb4], eax
cmp eax, 0x49b3
jbe 0x1000af30
jmp 0x1000af20
mov ebx, 0x58ff
jmp case.0x1000b3c0.22857
lea eax, [ebx - 0x5948]
cmp eax, 0xdb
ja case.0x1000b3c0.22857
movzx eax, byte [eax + 0x1000be30]
jmp dword [eax*4 + 0x1000be1c]
mov eax, dword [esp + 0x78]
add eax, eax
add eax, eax
add dword [ecx], eax
mov ecx, dword [ebp + 0x20]
mov eax, dword [esp + 0x20]
mov dword [ecx], eax
jmp case.0x1000b3c0.22857
test edx, edx
je case.0x1000b3c0.22857
xor esi, esi
lea edi, [esi + 5]
lea esp, [esp]
cmp esi, 0x50
ja case.0x1000b400.1
movzx ecx, byte [esi + 0x1000bf24]
jmp dword [ecx*4 + 0x1000bf0c]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x14]
mov dword [eax + edx*4], ecx
jmp case.0x1000b400.1
mov dl, byte [esp + 0x18]
sub dl, byte [esp + 0x74]
mov byte [esp + 0x14], 0x40
mov byte [esp + 0x15], dl
jmp case.0x1000b400.1
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0xe8]
lea eax, [esp + 0xf8]
push eax
mov eax, dword [esp + 0xf8]
push ecx
mov ecx, dword [esp + 0xf8]
push edx
push eax
push ecx
call dword [sym.imp.OLEAUT32.dll_DllUnregisterServer]
jmp case.0x1000b400.1
push 8
lea edx, [esp + 0xf4]
push 0
push edx
call fcn.1002b7d0
add esp, 0xc
push 8
push 0
lea eax, [esp + 0xf0]
push eax
jmp 0x1000b498
xor ecx, ecx
push 8
push ecx
lea edx, [esp + 0x100]
mov word [esp + 0x1e], cx
push edx
call fcn.1002b7d0
add esp, 0xc
add esi, 0x14
dec edi
jne 0x1000b3f0
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x70]
mov edx, dword [esp + 0x10]
jmp case.0x1000b3c0.22857
mov dword [esp + 0x1c], 0
add ebx, 0x49
cmp ebx, dword [esp + 0xac]
jbe 0x1000a390
mov eax, dword [esp + 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov eax, dword [ebp + 0x14]
push ecx
call fcn.1002a960
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret