Function at 0x100953bf
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x2b0
mov eax, 0x10128370
call fcn.1011094a
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x278], eax
xor eax, eax
push 0x4c
push eax
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x1f4]
push eax
mov dword [ebp - 0x1f8], ebx
mov dword [ebp - 0x200], edi
mov dword [ebp - 0x27c], edi
call sub.VCRUNTIME140.dll_memset
push ebx
call fcn.10094deb
add esp, 0x10
lea ecx, [ebp - 0x1f4]
push eax
call fcn.1004cb7f
xor eax, eax
mov dword [ebp - 0x18], 0xf
xor esi, esi
mov dword [ebp - 4], eax
inc esi
mov dword [ebp - 0x1c], eax
mov dword [edi], esi
mov byte [ebp - 0x2c], al
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 2
push eax
call fcn.1003a3c0
pop ecx
push esi
push esi
lea eax, [ebp - 0x1fc]
push ebx
push eax
call fcn.100b9a6f
add esp, 0x10
mov esi, dword [eax]
and dword [eax], 0
mov dword [ebp - 0x25c], esi
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 3
call fcn.1004cf68
test esi, esi
jne 0x1009562e
push 0x101e2a68
mov dword [edi], 0xd
call sub.MSVCP140.dll__Mtx_lock
pop ecx
push eax
call fcn.1003a3c0
pop ecx
mov edi, 0x1014a0f1
lea ecx, [ebp - 0x21c]
push edi
call fcn.1003a3c0
push edi
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 4
call fcn.1003a3c0
mov esi, str.kOperatingConfig
mov byte [ebp - 4], 5
push esi
lea ecx, [ebp - 0x78]
call fcn.1003a3c0
lea eax, [ebp - 0x21c]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.100e1c13
add esp, 0xc
mov dword [ebp - 0x1f8], eax
lea ecx, [ebp - 0x78]
call fcn.1001524d
lea ecx, [ebp - 0x23c]
call fcn.1001524d
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 3
call fcn.1001524d
cmp dword [ebp - 0x1f8], 0
je 0x100955ad
push edi
lea ecx, [ebp - 0x78]
call fcn.1003a3c0
push edi
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 7
call fcn.1003a3c0
push esi
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 8
call fcn.1003a3c0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.100e1c13
add esp, 0xc
cmp dword [ebx + 0x14], 0x10
jb 0x1009556d
mov ebx, dword [ebx]
mov esi, dword [eax]
push ebx
push str.VerifyAndBuildFrom
push str._s:_Invalid_data_in_Operating_Config_file__s
mov ecx, dword [esi + 0x24]
push edi
push eax
call dword [0x1014488c]
call dword [esi + 0x24]
add esp, 0x14
lea ecx, [ebp - 0x21c]
call fcn.1001524d
lea ecx, [ebp - 0x23c]
call fcn.1001524d
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 3
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
pop ecx
lea eax, [ebp - 0x1f8]
push eax
call fcn.100934d1
mov ebx, dword [ebp - 0x204]
pop ecx
mov ecx, eax
mov eax, dword [ecx]
and dword [ecx], 0
cmp dword [ebp - 0x1f8], 0
mov dword [ebx], eax
je 0x100955ee
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0x1f8]
call fcn.1003a3c0
lea ecx, [ebp - 0x25c]
call fcn.1004cf68
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x1009560d
inc eax
push eax
push dword [ebp - 0x2c]
call fcn.1003a3c0
pop ecx
pop ecx
and dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.1004cfa6
mov eax, ebx
jmp 0x10096497
mov ecx, esi
call fcn.10034710
xor ebx, ebx
lea ecx, [ebp - 0x78]
push eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
call fcn.1003a3c0
mov ecx, esi
mov byte [ebp - 4], 0xa
call fcn.10015993
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
call fcn.1003a3c0
xor eax, eax
mov byte [ebp - 4], 0xb
lea edi, [ebp - 0x84]
stosd dword es:[edi], eax
push 0x20
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.1003a3c0
mov edx, eax
pop ecx
mov dword [ebp - 0x220], edx
mov byte [ebp - 4], 0xc
test edx, edx
je 0x1009569f
push 8
pop ecx
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2c]
mov ecx, edx
push eax
call fcn.100584cb
mov ecx, eax
jmp 0x100956a1
mov ecx, ebx
push ecx
mov eax, esp
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x1fc], ebx
mov dword [eax], ecx
lea ecx, [ebp - 0x84]
call fcn.1003a3c0
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0xf
call fcn.1004cf41
push 0x2c
lea eax, [ebp - 0x178]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1f4]
push 1
push ebx
call fcn.1003a3c0
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x25c], ebx
push eax
push ecx
mov eax, esp
lea ecx, [ebp - 0x178]
mov dword [eax], esi
call fcn.10058635
push 0x10
pop ebx
lea eax, [ebp - 0x178]
mov byte [ebp - 4], bl
push eax
lea ecx, [ebp - 0x84]
call fcn.100587a0
test eax, eax
je 0x1009592b
mov eax, dword [ebp - 0x200]
push 0x101e2a68
mov dword [eax], 0xd
call sub.MSVCP140.dll__Mtx_lock
pop ecx
push eax
call fcn.1003a3c0
pop ecx
mov edi, 0x1014a0f1
lea ecx, [ebp - 0x254]
push edi
call fcn.1003a3c0
push edi
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x11
call fcn.1003a3c0
mov esi, str.kOperatingConfig
mov byte [ebp - 4], 0x12
push esi
lea ecx, [ebp - 0x21c]
call fcn.1003a3c0
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.100e1c13
add esp, 0xc
mov dword [ebp - 0x1fc], eax
lea ecx, [ebp - 0x21c]
call fcn.1001524d
lea ecx, [ebp - 0x23c]
call fcn.1001524d
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], bl
call fcn.1001524d
cmp dword [ebp - 0x1fc], 0
je 0x1009586d
push edi
lea ecx, [ebp - 0x23c]
call fcn.1003a3c0
push edi
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x14
call fcn.1003a3c0
push esi
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x15
call fcn.1003a3c0
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.100e1c13
mov ecx, dword [ebp - 0x1f8]
add esp, 0xc
cmp dword [ecx + 0x14], ebx
jb 0x1009582b
mov ecx, dword [ecx]
mov esi, dword [eax]
push ecx
push str.VerifyAndBuildFrom
push str._s:_Operating_Config_file__s_validation_failed
mov ecx, dword [esi + 0x24]
push edi
push eax
call dword [0x1014488c]
call dword [esi + 0x24]
add esp, 0x14
lea ecx, [ebp - 0x254]
call fcn.1001524d
lea ecx, [ebp - 0x21c]
call fcn.1001524d
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], bl
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
pop ecx
lea eax, [ebp - 0x1f8]
push eax
call fcn.100934d1
mov esi, dword [ebp - 0x204]
pop ecx
mov ecx, dword [eax]
and dword [eax], 0
cmp dword [ebp - 0x1f8], 0
mov dword [esi], ecx
je 0x100958ac
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0x1f8]
call fcn.1003a3c0
lea ecx, [ebp - 0x178]
call fcn.1004d204
lea ecx, [ebp - 0x84]
call fcn.100586a3
mov eax, dword [ebp - 0x34]
cmp eax, ebx
jb 0x100958d5
inc eax
push eax
push dword [ebp - 0x48]
call fcn.1003a3c0
pop ecx
pop ecx
and dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
cmp eax, ebx
jb 0x100958f7
inc eax
push eax
push dword [ebp - 0x78]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x18]
cmp eax, ebx
jb 0x1009590a
inc eax
push eax
push dword [ebp - 0x2c]
call fcn.1003a3c0
pop ecx
pop ecx
and dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.1004cfa6
mov eax, esi
jmp 0x10096497
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x2d]
call fcn.1005a89e
push 8
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x17
lea edi, [ebp - 0xec]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0xec]
call fcn.100826dd
push 6
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x18
lea edi, [ebp - 0x9c]
rep stosd dword es:[edi], eax
push eax
lea ecx, [ebp - 0x9c]
call fcn.10082bd8
and dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x1a
call fcn.100859e0
mov edi, eax
mov dword [ebp - 0x1fc], edi
cmp dword [ebp - 0xa0], ebx
lea eax, [ebp - 0x60]
mov esi, dword [edi]
lea ecx, [ebp - 0xb4]
cmovae ecx, dword [ebp - 0xb4]
push eax
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x1b
mov esi, dword [esi + 4]
push eax
mov eax, dword [ebp - 0xa4]
add eax, ecx
push eax
push ecx
mov ecx, esi
call dword [0x1014488c]
mov ecx, edi
call esi
test al, al
jne 0x10095bc7
mov eax, dword [ebp - 0x200]
push 0x101e2a68
mov dword [eax], 0xd
call sub.MSVCP140.dll__Mtx_lock
pop ecx
push eax
call fcn.1003a3c0
pop ecx
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x23c]
push ebx
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x1c
call fcn.1003a3c0
mov esi, str.kOperatingConfig
mov byte [ebp - 4], 0x1d
push esi
lea ecx, [ebp - 0x254]
call fcn.1003a3c0
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.100e1c13
add esp, 0xc
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x254]
call fcn.1001524d
lea ecx, [ebp - 0x21c]
call fcn.1001524d
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x1b
call fcn.1001524d
cmp dword [ebp - 0x200], 0
je 0x10095b2d
push ebx
lea ecx, [ebp - 0x23c]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x1f
call fcn.1003a3c0
push esi
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x20
call fcn.1003a3c0
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.100e1c13
mov ecx, dword [ebp - 0x1f8]
add esp, 0xc
cmp dword [ecx + 0x14], 0x10
jb 0x10095aea
mov ecx, dword [ecx]
mov esi, dword [eax]
push ecx
push str.VerifyAndBuildFrom
push str._s:_JSON_parsing_error_of_payload_of_Operating_Config_file__s
mov ecx, dword [esi + 0x24]
push ebx
push eax
call dword [0x1014488c]
call dword [esi + 0x24]
add esp, 0x14
lea ecx, [ebp - 0x254]
call fcn.1001524d
lea ecx, [ebp - 0x21c]
call fcn.1001524d
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x1b
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
pop ecx
lea eax, [ebp - 0x1f8]
push eax
call fcn.100934d1
mov esi, dword [ebp - 0x204]
pop ecx
mov ecx, dword [eax]
and dword [eax], 0
cmp dword [ebp - 0x1f8], 0
mov dword [esi], ecx
je 0x10095b6c
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0x1f8]
call fcn.1003a3c0
test edi, edi
je 0x10095b7c
push edi
lea ecx, [ebp - 0x1fc]
call fcn.1003a3c0
mov eax, dword [ebp - 0x4c]
push 0x10
pop ebx
cmp eax, ebx
jb 0x10095b92
inc eax
push eax
push dword [ebp - 0x60]
call fcn.1003a3c0
pop ecx
pop ecx
and dword [ebp - 0x50], 0
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
call fcn.10082ec8
lea ecx, [ebp - 0xec]
call fcn.10082df3
lea ecx, [ebp - 0xb4]
call fcn.1001524d
jmp 0x100958ac
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x254]
push ebx
call fcn.10082b43
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0x22
push eax
push 0x1014aee8
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x9c]
call fcn.1003a3c0
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x23
push ecx
mov ecx, eax
call fcn.10083ffb
lea ecx, [ebp - 0x274]
call fcn.10082ec8
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x26
call fcn.10082ec8
push ebx
lea ecx, [ebp - 0x21c]
call fcn.10082b43
lea eax, [ebp - 0x21c]
mov byte [ebp - 4], 0x27
push eax
push str.npdId
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.1003a3c0
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x28
push ecx
mov ecx, eax
call fcn.10083ffb
lea ecx, [ebp - 0x23c]
call fcn.10082ec8
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x2b
call fcn.10082ec8
push ebx
lea ecx, [ebp - 0x254]
call fcn.10082b43
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0x2c
push eax
push str.nglAppId
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x9c]
call fcn.1003a3c0
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x2d
push ecx
mov ecx, eax
call fcn.10083ffb
lea ecx, [ebp - 0x274]
call fcn.10082ec8
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x30
call fcn.10082ec8
push 0
lea ecx, [ebp - 0x21c]
call fcn.1003a3c0
lea eax, [ebp - 0x21c]
mov byte [ebp - 4], 0x31
push eax
push str.npdPrecedence
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.1003a3c0
mov ecx, eax
mov byte [ebp - 4], 0x32
call fcn.100842a6
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x284], eax
call fcn.10082ec8
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x30
call fcn.10082ec8
push ebx
lea ecx, [ebp - 0x21c]
call fcn.10082b43
lea eax, [ebp - 0x21c]
mov byte [ebp - 4], 0x33
push eax
push str.deploymentMode
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.1003a3c0
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x34
push ecx
mov ecx, eax
call fcn.10083ffb
lea ecx, [ebp - 0x23c]
call fcn.10082ec8
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x37
call fcn.10082ec8
push 0
lea ecx, [ebp - 0x254]
call fcn.1003a3c0
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0x38
push eax
push str.overrideDevice
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x9c]
call fcn.1003a3c0
mov ecx, eax
mov byte [ebp - 4], 0x39
call fcn.10083b22
lea ecx, [ebp - 0x274]
mov byte [ebp - 0x258], al
call fcn.10082ec8
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x37
call fcn.10082ec8
push str.name
lea ecx, [ebp - 0x14c]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x3a
call fcn.10082b43
push str.branding
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x3b
call fcn.1003a3c0
lea ecx, [ebp - 0x254]
push ecx
lea ecx, [ebp - 0x14c]
push ecx
lea ecx, [ebp - 0x2bc]
push ecx
mov ecx, eax
call fcn.1003a3c0
lea ecx, [ebp - 0x2a4]
mov byte [ebp - 4], 0x3c
push ecx
mov ecx, eax
call fcn.10083ffb
push eax
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x3d
call fcn.10092e5b
lea ecx, [ebp - 0x2a4]
call fcn.1001524d
lea ecx, [ebp - 0x2bc]
call fcn.10082ec8
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x41
call fcn.10082ec8
push str.FRL_CONNECTED
lea ecx, [ebp - 0xcc]
call fcn.1003a3c0
test eax, eax
je 0x100960b6
push str.FRL_LAN
lea ecx, [ebp - 0xcc]
call fcn.1003a3c0
test eax, eax
je 0x100960b6
push str.FRL_ISOLATED
lea ecx, [ebp - 0xcc]
call fcn.1003a3c0
test eax, eax
je 0x100960b6
push str.NAMED_USER_EDUCATION_LAB
lea ecx, [ebp - 0xcc]
call fcn.1003a3c0
test eax, eax
je 0x100960b6
mov eax, dword [ebp - 0x200]
push 0x101e2a68
mov dword [eax], 0xd
call sub.MSVCP140.dll__Mtx_lock
pop ecx
push eax
call fcn.1003a3c0
pop ecx
push ebx
lea ecx, [ebp - 0x274]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x42
call fcn.1003a3c0
mov esi, str.kOperatingConfig
mov byte [ebp - 4], 0x43
push esi
lea ecx, [ebp - 0x21c]
call fcn.1003a3c0
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.100e1c13
add esp, 0xc
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x21c]
call fcn.1001524d
lea ecx, [ebp - 0x23c]
call fcn.1001524d
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x41
call fcn.1001524d
cmp dword [ebp - 0x200], 0
je 0x10096025
push ebx
lea ecx, [ebp - 0x23c]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x45
call fcn.1003a3c0
push esi
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x46
call fcn.1003a3c0
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 0x47
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.100e1c13
mov ecx, dword [ebp - 0x1f8]
add esp, 0xc
cmp dword [ecx + 0x14], 0x10
jb 0x10095fe2
mov ecx, dword [ecx]
mov esi, dword [eax]
push ecx
push str.VerifyAndBuildFrom
push str._s:_Invalid_mode_in_Operating_Config_file__s
mov ecx, dword [esi + 0x24]
push ebx
push eax
call dword [0x1014488c]
call dword [esi + 0x24]
add esp, 0x14
lea ecx, [ebp - 0x274]
call fcn.1001524d
lea ecx, [ebp - 0x21c]
call fcn.1001524d
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x41
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
pop ecx
lea eax, [ebp - 0x1f8]
push eax
call fcn.100934d1
mov esi, dword [ebp - 0x204]
pop ecx
mov ecx, dword [eax]
and dword [eax], 0
cmp dword [ebp - 0x1f8], 0
mov dword [esi], ecx
je 0x10096064
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0x1f8]
call fcn.1003a3c0
lea ecx, [ebp - 0x190]
call fcn.1001524d
lea ecx, [ebp - 0x1a8]
call fcn.1001524d
lea ecx, [ebp - 0x14c]
call fcn.1001524d
lea ecx, [ebp - 0xcc]
call fcn.1001524d
lea ecx, [ebp - 0x134]
call fcn.1001524d
lea ecx, [ebp - 0x11c]
call fcn.1001524d
lea ecx, [ebp - 0x104]
call fcn.1001524d
jmp 0x10095b6c
mov eax, dword [ebp - 0x200]
mov esi, 0xa4
xor ebx, ebx
push esi
mov dword [eax], ebx
call fcn.1003a3c0
pop ecx
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x28c], eax
mov byte [ebp - 4], 0x48
test eax, eax
je 0x100961a7
push esi
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
push 0x30
call fcn.1003a3c0
add esp, 0x10
mov dword [ebp - 0x224], eax
mov byte [ebp - 4], 0x49
test eax, eax
je 0x1009611a
lea ecx, [ebp - 0x1a8]
push ecx
mov ecx, eax
call fcn.1001a66a
mov dword [ebp - 0x200], eax
jmp 0x10096120
mov dword [ebp - 0x200], ebx
push dword [ebp - 0x258]
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x48
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.10093a9c
pop ecx
pop ecx
push ecx
mov ecx, dword [eax]
mov edx, esp
mov dword [eax], ebx
mov dword [edx], ecx
push 6
pop ebx
push ecx
mov ecx, dword [ebp - 0x200]
mov eax, esp
xor esi, esi
mov dword [ebp - 4], 0x4b
mov dword [ebp - 0x288], ebx
mov dword [ebp - 0x258], esi
mov dword [eax], ecx
lea eax, [ebp - 0xcc]
mov ecx, dword [ebp - 0x1f8]
push eax
push dword [ebp - 0x284]
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x78]
push eax
push ecx
mov ecx, dword [ebp - 0x280]
call fcn.10092f83
mov ecx, eax
jmp 0x100961b5
mov esi, dword [ebp - 0x258]
mov ecx, ebx
mov ebx, dword [ebp - 0x224]
mov eax, dword [ebp - 0x204]
or ebx, 1
mov dword [eax], ecx
test bl, 4
je 0x100961d5
and ebx, 0xfffffffb
test esi, esi
je 0x100961d5
push 1
mov ecx, esi
call fcn.1003a3c0
test bl, 2
je 0x100961e5
lea ecx, [ebp - 0x220]
call fcn.10093394
lea ecx, [ebp - 0x190]
call fcn.1001524d
lea ecx, [ebp - 0x1a8]
call fcn.1001524d
lea ecx, [ebp - 0x14c]
call fcn.1001524d
lea ecx, [ebp - 0xcc]
call fcn.1001524d
lea ecx, [ebp - 0x134]
call fcn.1001524d
lea ecx, [ebp - 0x11c]
call fcn.1001524d
lea ecx, [ebp - 0x104]
call fcn.1001524d
test edi, edi
je 0x10096242
push edi
lea ecx, [ebp - 0x1fc]
call fcn.1003a3c0
mov eax, dword [ebp - 0x4c]
push 0x10
pop ebx
cmp eax, ebx
jb 0x10096258
inc eax
push eax
push dword [ebp - 0x60]
call fcn.1003a3c0
pop ecx
pop ecx
and dword [ebp - 0x50], 0
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
call fcn.10082ec8
lea ecx, [ebp - 0xec]
call fcn.10082df3
lea ecx, [ebp - 0xb4]
call fcn.1001524d
lea ecx, [ebp - 0x178]
call fcn.1004d204
lea ecx, [ebp - 0x84]
call fcn.100586a3
mov eax, dword [ebp - 0x34]
cmp eax, ebx
jb 0x100962b1
inc eax
push eax
push dword [ebp - 0x48]
call fcn.1003a3c0
pop ecx
pop ecx
and dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
cmp eax, ebx
jb 0x100962d3
inc eax
push eax
push dword [ebp - 0x78]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x18]
cmp eax, ebx
jb 0x100962e6
inc eax
push eax
push dword [ebp - 0x2c]
call fcn.1003a3c0
pop ecx
pop ecx
and dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.1004cfa6
mov eax, dword [ebp - 0x204]
jmp 0x10096497
call fcn.10110897
ret