Function at 0x10011270
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10025900
mov eax, dword fs:[0]
push eax
sub esp, 0x368
mov eax, dword [0x10381040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x1037c9a0
mov ecx, dword [ebp + 8]
call fcn.10003980
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0
jne 0x100112be
xor al, al
jmp 0x1001206d
push str.MRGN
mov ecx, dword [ebp + 0xc]
call fcn.10003980
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
jne 0x100112e1
xor al, al
jmp 0x1001206d
push 0x1037c9b0
mov ecx, dword [ebp + 8]
call fcn.10003980
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jne 0x10011304
xor al, al
jmp 0x1001206d
push 0x1037c9b8
mov ecx, dword [ebp + 0xc]
call fcn.10003980
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0
jne 0x10011327
xor al, al
jmp 0x1001206d
push 0x1037c9c0
mov ecx, dword [ebp + 0xc]
call fcn.10003980
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0
jne 0x1001134a
xor al, al
jmp 0x1001206d
mov dword [ebp - 0x238], 0x2b
mov dword [ebp - 0x234], 0x42
mov dword [ebp - 0x230], 0x7a
mov dword [ebp - 0x22c], 0xa4
mov dword [ebp - 0x248], 0x3e
mov dword [ebp - 0x244], 0x76
mov dword [ebp - 0x240], 0x87
mov dword [ebp - 0x23c], 0xed
mov dword [ebp - 0x334], 4
mov byte [ebp - 0x2bc], 3
mov byte [ebp - 0x2bb], 7
mov byte [ebp - 0x2ba], 0x11
mov byte [ebp - 0x28], 7
mov byte [ebp - 0x27], 0xa
mov byte [ebp - 0x26], 0xb
mov byte [ebp - 0x25], 0x10
mov byte [ebp - 0x24], 0x12
mov byte [ebp - 0x23], 0x17
mov byte [ebp - 0x22], 0x19
mov byte [ebp - 0x21], 0x1c
mov byte [ebp - 0x20], 0x22
mov byte [ebp - 0x1f], 0x26
mov byte [ebp - 0x1e], 0x27
mov byte [ebp - 0x1d], 0x2a
mov byte [ebp - 0x1c], 0x2b
mov byte [ebp - 0x1b], 0x2c
mov byte [ebp - 0x1a], 0x2e
mov byte [ebp - 0x19], 0x30
mov byte [ebp - 0x18], 0x31
mov byte [ebp - 0x17], 0x32
mov byte [ebp - 0x16], 0x33
mov byte [ebp - 0x15], 0x34
mov byte [ebp - 0x14], 0x35
push pe_nt_image_headers32
push 0
lea eax, [ebp - 0x128]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push pe_nt_image_headers32
push 0
lea ecx, [ebp - 0x228]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x2d4], 0
jmp 0x10011454
mov edx, dword [ebp - 0x2d4]
add edx, 1
mov dword [ebp - 0x2d4], edx
cmp dword [ebp - 0x2d4], 3
jae 0x10011475
mov eax, dword [ebp - 0x2d4]
movzx ecx, byte [ebp + eax - 0x2bc]
mov byte [ebp + ecx - 0x128], 1
jmp 0x10011445
mov dword [ebp - 0x2d8], 0
jmp 0x10011490
mov edx, dword [ebp - 0x2d8]
add edx, 1
mov dword [ebp - 0x2d8], edx
cmp dword [ebp - 0x2d8], 0x15
jae 0x100114ae
mov eax, dword [ebp - 0x2d8]
movzx ecx, byte [ebp + eax - 0x28]
mov byte [ebp + ecx - 0x228], 1
jmp 0x10011481
lea ecx, [ebp - 0x2b8]
call fcn.100013f0
mov dword [ebp - 4], 0
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ebp + eax - 0x238]
mov dword [ebp - 0x2c0], ecx
push 0x3f
lea ecx, [ebp - 0x2b8]
call fcn.10006590
movzx edx, al
test edx, edx
jne 0x1001150d
mov byte [ebp - 0x271], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
call fcn.10006660
mov al, byte [ebp - 0x271]
jmp 0x1001206d
push 0x3f
lea ecx, [ebp - 0x2b8]
call fcn.10006590
movzx eax, al
test eax, eax
jne 0x10011545
mov byte [ebp - 0x272], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
call fcn.10006660
mov al, byte [ebp - 0x272]
jmp 0x1001206d
mov dword [ebp - 0x2dc], 0
jmp 0x10011560
mov ecx, dword [ebp - 0x2dc]
add ecx, 1
mov dword [ebp - 0x2dc], ecx
mov ecx, dword [ebp - 0x2f0]
add ecx, 0x18
call fcn.100066b0
cmp dword [ebp - 0x2dc], eax
jae 0x10011814
mov edx, dword [ebp - 0x2dc]
push edx
lea eax, [ebp - 0x35c]
push eax
mov ecx, dword [ebp - 0x2f0]
add ecx, 0x18
call fcn.10006690
mov ecx, eax
call fcn.10006600
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x2e0], 0
jmp 0x100115be
mov ecx, dword [ebp - 0x2e0]
add ecx, 1
mov dword [ebp - 0x2e0], ecx
cmp dword [ebp - 0x2e0], 0x10
jae 0x100116d4
imul edx, dword [ebp - 0x2e0], 0x14
add edx, dword [ebp - 0x330]
mov dword [ebp - 0x280], edx
mov eax, dword [ebp - 0x280]
movzx ecx, byte [eax + 0xf]
test ecx, ecx
jl 0x100116cf
mov edx, dword [ebp - 0x280]
movzx eax, byte [edx + 0xf]
cmp eax, 0x100
jge 0x100116cf
mov ecx, dword [ebp - 0x280]
movzx edx, byte [ecx + 0xf]
movzx eax, byte [ebp + edx - 0x128]
test eax, eax
je 0x100116cf
mov ecx, dword [ebp - 0x280]
cmp dword [ecx], 0
jbe 0x100116cf
mov edx, dword [ebp - 0x280]
cmp dword [edx], 0x40
je 0x100116cf
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
mov dword [ebp - 0x2e4], ecx
mov edx, dword [ebp - 0x2e4]
sub edx, 1
mov dword [ebp - 0x2e4], edx
mov eax, dword [ebp - 0x334]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
lea edx, [ebp - 0x248]
push edx
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x2b8]
push ecx
lea edx, [ebp - 0x2c0]
push edx
mov eax, dword [ebp - 0x2c0]
push eax
call fcn.100110d0
add esp, 0x1c
movzx ecx, al
test ecx, ecx
jne 0x100116be
mov byte [ebp - 0x273], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
call fcn.10006660
mov al, byte [ebp - 0x273]
jmp 0x1001206d
mov edx, dword [ebp - 0x2e4]
add edx, 1
mov eax, dword [ebp - 0x280]
mov dword [eax], edx
jmp 0x100115af
mov dword [ebp - 0x2e8], 0
jmp 0x100116ef
mov ecx, dword [ebp - 0x2e8]
add ecx, 1
mov dword [ebp - 0x2e8], ecx
cmp dword [ebp - 0x2e8], 0x40
jae 0x1001180f
mov edx, dword [ebp - 0x2e8]
shl edx, 5
mov eax, dword [ebp - 0x330]
lea ecx, [eax + edx + 0x140]
mov dword [ebp - 0x284], ecx
mov edx, dword [ebp - 0x284]
movzx eax, byte [edx + 0x1a]
test eax, eax
jl 0x1001180a
mov ecx, dword [ebp - 0x284]
movzx edx, byte [ecx + 0x1a]
cmp edx, 0x100
jge 0x1001180a
mov eax, dword [ebp - 0x284]
movzx ecx, byte [eax + 0x1a]
movzx edx, byte [ebp + ecx - 0x228]
test edx, edx
je 0x1001180a
mov eax, dword [ebp - 0x284]
cmp dword [eax], 0
jbe 0x1001180a
mov ecx, dword [ebp - 0x284]
cmp dword [ecx], 0x40
je 0x1001180a
mov edx, dword [ebp - 0x284]
mov eax, dword [edx]
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x2c4]
sub ecx, 1
mov dword [ebp - 0x2c4], ecx
mov edx, dword [ebp - 0x334]
push edx
lea eax, [ebp - 0x2c4]
push eax
lea ecx, [ebp - 0x248]
push ecx
lea edx, [ebp - 0x238]
push edx
lea eax, [ebp - 0x2b8]
push eax
lea ecx, [ebp - 0x2c0]
push ecx
mov edx, dword [ebp - 0x2c0]
push edx
call fcn.100110d0
add esp, 0x1c
movzx eax, al
test eax, eax
jne 0x100117f9
mov byte [ebp - 0x274], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
call fcn.10006660
mov al, byte [ebp - 0x274]
jmp 0x1001206d
mov ecx, dword [ebp - 0x2c4]
add ecx, 1
mov edx, dword [ebp - 0x284]
mov dword [edx], ecx
jmp 0x100116e0
jmp 0x10011551
mov dword [ebp - 0x294], 0
jmp 0x1001182f
mov eax, dword [ebp - 0x294]
add eax, 2
mov dword [ebp - 0x294], eax
lea ecx, [ebp - 0x2b8]
call fcn.100066b0
cmp dword [ebp - 0x294], eax
jae 0x1001191a
mov ecx, dword [ebp - 0x294]
push ecx
lea ecx, [ebp - 0x2b8]
call fcn.100067d0
mov dword [ebp - 0x338], eax
mov edx, dword [ebp - 0x294]
add edx, 1
push edx
lea ecx, [ebp - 0x2b8]
call fcn.100067d0
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x350]
push eax
mov ecx, dword [ebp - 0x300]
add ecx, 0x18
call fcn.100067d0
mov dword [ebp - 0x28c], eax
mov ecx, dword [ebp - 0x338]
push ecx
mov ecx, dword [ebp - 0x2f4]
add ecx, 0x18
call fcn.100067d0
mov dword [ebp - 0x298], eax
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x298]
mov ecx, dword [eax + 0xc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x298]
mov cx, word [eax + 0x12]
mov word [edx + 0x12], cx
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x298]
mov ecx, dword [eax]
mov dword [edx], ecx
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x298]
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x298]
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
xor edx, edx
mov eax, dword [ebp - 0x28c]
mov word [eax + 0x10], dx
jmp 0x10011820
mov dword [ebp - 0x2c8], 3
lea ecx, [ebp - 0x2b8]
call fcn.100066b0
shr eax, 1
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2cc]
xor edx, edx
div dword [ebp - 0x2c8]
mov dword [ebp - 0x2ac], eax
mov ecx, dword [ebp - 0x2ac]
imul ecx, dword [ebp - 0x2c8]
cmp ecx, dword [ebp - 0x2cc]
jne 0x1001196c
mov dword [ebp - 0x304], 0
jmp 0x10011976
mov dword [ebp - 0x304], 1
mov edx, dword [ebp - 0x2ac]
add edx, dword [ebp - 0x304]
mov dword [ebp - 0x2ac], edx
mov dword [ebp - 0x2fc], 0xdc
mov dword [ebp - 0x29c], 0
jmp 0x100119ad
mov eax, dword [ebp - 0x29c]
add eax, 1
mov dword [ebp - 0x29c], eax
mov ecx, dword [ebp - 0x29c]
cmp ecx, dword [ebp - 0x2ac]
jae 0x1001204e
push 0x960
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
jne 0x10011a00
mov byte [ebp - 0x275], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
call fcn.10006660
mov al, byte [ebp - 0x275]
jmp 0x1001206d
cmp dword [ebp - 0x29c], 0
jne 0x10011a15
mov dword [ebp - 0x308], 1
jmp 0x10011a1f
mov dword [ebp - 0x308], 0
mov dl, byte [ebp - 0x308]
mov byte [ebp - 0x269], dl
push 0x960
push 0
mov eax, dword [ebp - 0x260]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, 1
imul edx, ecx, 0x11
mov eax, dword [ebp - 0x260]
mov byte [eax + edx + 0x944], 1
movzx ecx, byte [ebp - 0x269]
test ecx, ecx
je 0x10011aa0
mov edx, 0x14
imul eax, edx, 0
mov ecx, dword [ebp - 0x260]
mov byte [ecx + eax + 0xf], 0xc
mov edx, 0x14
imul eax, edx, 0
mov ecx, dword [ebp - 0x260]
mov byte [ecx + eax + 0xe], 0
mov edx, 0x14
imul eax, edx, 0
mov ecx, dword [ebp - 0x260]
mov dword [ecx + eax + 8], 1
jmp 0x10011b0c
mov edx, 0x14
imul eax, edx, 0
mov ecx, dword [ebp - 0x260]
mov byte [ecx + eax + 0xf], 0xf
mov edx, 0x14
imul eax, edx, 0
mov ecx, dword [ebp - 0x260]
mov dword [ecx + eax + 4], 6
mov edx, 0x14
imul eax, edx, 0
mov ecx, dword [ebp - 0x260]
mov byte [ecx + eax + 0xe], 0
mov edx, 0x14
imul eax, edx, 0
mov ecx, dword [ebp - 0x260]
mov dword [ecx + eax + 8], 2
mov edx, 0x14
imul eax, edx, 0
mov ecx, dword [ebp - 0x260]
mov dx, word [ebp - 0x2fc]
mov word [ecx + eax + 0xc], dx
mov eax, dword [ebp - 0x29c]
imul eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x310], eax
mov ecx, dword [ebp - 0x310]
add ecx, dword [ebp - 0x2c8]
mov dword [ebp - 0x2d0], ecx
mov edx, dword [ebp - 0x2d0]
cmp edx, dword [ebp - 0x2cc]
jbe 0x10011b4d
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x30c], eax
jmp 0x10011b59
mov ecx, dword [ebp - 0x2d0]
mov dword [ebp - 0x30c], ecx
mov edx, dword [ebp - 0x30c]
mov dword [ebp - 0x2d0], edx
mov dword [ebp - 0x344], 0xe3f
mov dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x2a0], eax
jmp 0x10011b96
mov ecx, dword [ebp - 0x2a0]
add ecx, 1
mov dword [ebp - 0x2a0], ecx
mov edx, dword [ebp - 0x2a0]
cmp edx, dword [ebp - 0x2d0]
jae 0x10011f44
mov eax, dword [ebp - 0x2a0]
shl eax, 1
push eax
lea ecx, [ebp - 0x374]
push ecx
lea ecx, [ebp - 0x2b8]
call fcn.10006690
mov ecx, eax
call fcn.10006600
mov dword [ebp - 0x33c], eax
mov edx, dword [ebp - 0x2a0]
lea eax, [edx + edx + 1]
push eax
lea ecx, [ebp - 0x364]
push ecx
lea ecx, [ebp - 0x2b8]
call fcn.10006690
mov ecx, eax
call fcn.10006600
mov dword [ebp - 0x340], eax
mov edx, dword [ebp - 0x33c]
push edx
lea eax, [ebp - 0x36c]
push eax
mov ecx, dword [ebp - 0x2f4]
add ecx, 0x18
call fcn.10006690
mov ecx, eax
call fcn.10006600
mov dword [ebp - 0x268], eax
imul ecx, dword [ebp - 0x340], 5
add ecx, dword [ebp - 0x344]
mov dword [ebp - 0x34c], ecx
mov edx, dword [ebp - 0x268]
movzx eax, word [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x2f8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2f8]
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 0x354], eax
mov ecx, dword [ebp - 0x268]
mov dx, word [ecx + 0x10]
mov word [ebp - 0x2ec], dx
mov eax, dword [ebp - 0x268]
movzx ecx, word [eax + 0x12]
and ecx, 1
jne 0x10011c86
mov dword [ebp - 0x314], 1
jmp 0x10011c90
mov dword [ebp - 0x314], 0
mov dl, byte [ebp - 0x314]
mov byte [ebp - 0x276], dl
mov eax, dword [ebp - 0x268]
movzx ecx, word [eax + 0x12]
and ecx, 2
jne 0x10011cb7
mov dword [ebp - 0x318], 1
jmp 0x10011cc1
mov dword [ebp - 0x318], 0
mov dl, byte [ebp - 0x318]
mov byte [ebp - 0x277], dl
mov eax, dword [ebp - 0x268]
movzx ecx, word [eax + 0x12]
and ecx, 4
jne 0x10011ce8
mov dword [ebp - 0x31c], 1
jmp 0x10011cf2
mov dword [ebp - 0x31c], 0
mov dl, byte [ebp - 0x31c]
mov byte [ebp - 0x278], dl
mov eax, dword [ebp - 0x268]
movzx ecx, word [eax + 0x12]
and ecx, 8
jne 0x10011d19
mov dword [ebp - 0x320], 1
jmp 0x10011d23
mov dword [ebp - 0x320], 0
mov dl, byte [ebp - 0x320]
mov byte [ebp - 0x288], dl
mov eax, dword [ebp - 0x268]
movzx ecx, word [eax + 0x12]
and ecx, 0x10
jne 0x10011d4a
mov dword [ebp - 0x324], 1
jmp 0x10011d54
mov dword [ebp - 0x324], 0
mov dl, byte [ebp - 0x324]
mov byte [ebp - 0x279], dl
mov eax, dword [ebp - 0x268]
movzx ecx, word [eax + 0x12]
and ecx, 0x20
jne 0x10011d7b
mov dword [ebp - 0x328], 1
jmp 0x10011d85
mov dword [ebp - 0x328], 0
mov dl, byte [ebp - 0x328]
mov byte [ebp - 0x287], dl
movzx eax, word [ebp - 0x2ec]
mov dword [ebp - 0x264], eax
movzx ecx, byte [ebp - 0x276]
test ecx, ecx
jne 0x10011dbb
mov edx, dword [ebp - 0x264]
add edx, 0x10000
mov dword [ebp - 0x264], edx
movzx eax, byte [ebp - 0x277]
test eax, eax
jne 0x10011dd8
mov ecx, dword [ebp - 0x264]
add ecx, 0x20000
mov dword [ebp - 0x264], ecx
movzx edx, byte [ebp - 0x278]
test edx, edx
jne 0x10011df4
mov eax, dword [ebp - 0x264]
add eax, 0x40000
mov dword [ebp - 0x264], eax
movzx ecx, byte [ebp - 0x288]
test ecx, ecx
jne 0x10011e11
mov edx, dword [ebp - 0x264]
add edx, 0x80000
mov dword [ebp - 0x264], edx
movzx eax, byte [ebp - 0x279]
test eax, eax
jne 0x10011e2e
mov ecx, dword [ebp - 0x264]
add ecx, 0x100000
mov dword [ebp - 0x264], ecx
movzx edx, byte [ebp - 0x287]
test edx, edx
jne 0x10011e4a
mov eax, dword [ebp - 0x264]
add eax, 0x200000
mov dword [ebp - 0x264], eax
mov ecx, dword [ebp - 0x268]
mov edx, dword [ecx]
mov dword [ebp - 0x25c], edx
mov eax, dword [ebp - 0x268]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x258], ecx
mov edx, dword [ebp - 0x268]
mov eax, dword [edx + 8]
mov dword [ebp - 0x254], eax
mov ecx, dword [ebp - 0x268]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x250], edx
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x348], 5
mov dword [ebp - 0x2a8], 0
jmp 0x10011eb6
mov ecx, dword [ebp - 0x2a8]
add ecx, 1
mov dword [ebp - 0x2a8], ecx
mov edx, dword [ebp - 0x2a8]
cmp edx, dword [ebp - 0x348]
jae 0x10011f3f
mov eax, dword [ebp - 0x290]
shl eax, 5
mov ecx, dword [ebp - 0x260]
lea edx, [ecx + eax + 0x140]
mov dword [ebp - 0x2a4], edx
mov eax, dword [ebp - 0x2a4]
mov byte [eax + 0x1a], 0x2d
mov ecx, dword [ebp - 0x34c]
add ecx, dword [ebp - 0x2a8]
mov edx, dword [ebp - 0x2a4]
mov dword [edx + 0x10], ecx
xor eax, eax
mov ecx, dword [ebp - 0x2a4]
mov word [ecx + 0x18], ax
mov edx, dword [ebp - 0x2a4]
mov byte [edx + 0x1b], 7
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ebp + ecx*4 - 0x25c]
mov dword [eax + 0x14], edx
mov eax, dword [ebp - 0x290]
add eax, 1
mov dword [ebp - 0x290], eax
jmp 0x10011ea7
jmp 0x10011b87
mov ecx, dword [ebp - 0x290]
shl ecx, 5
mov edx, dword [ebp - 0x260]
lea eax, [edx + ecx + 0x140]
mov dword [ebp - 0x270], eax
movzx ecx, byte [ebp - 0x269]
test ecx, ecx
je 0x10011fae
mov edx, dword [ebp - 0x270]
mov byte [edx + 0x1a], 0x2d
mov eax, dword [ebp - 0x270]
mov dword [eax + 0x10], 6
mov ecx, dword [ebp - 0x270]
mov dx, word [ebp - 0x2fc]
mov word [ecx + 0x18], dx
mov eax, dword [ebp - 0x270]
mov byte [eax + 0x1b], 7
mov ecx, dword [ebp - 0x2ac]
mov edx, dword [ebp - 0x270]
mov dword [edx + 0x14], ecx
jmp 0x10011fed
mov eax, dword [ebp - 0x270]
mov byte [eax + 0x1a], 0x2d
mov ecx, dword [ebp - 0x270]
mov dword [ecx + 0x10], 6
mov edx, dword [ebp - 0x270]
mov ax, word [ebp - 0x2fc]
mov word [edx + 0x18], ax
mov ecx, dword [ebp - 0x270]
mov byte [ecx + 0x1b], 9
mov edx, dword [ebp - 0x270]
mov dword [edx + 0x14], 1
mov eax, dword [ebp - 0x290]
add eax, 1
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x260]
push ecx
mov ecx, dword [ebp - 0x32c]
add ecx, 0x18
call fcn.10006590
movzx edx, al
test edx, edx
jne 0x10012049
mov eax, dword [ebp - 0x260]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov byte [ebp - 0x286], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
call fcn.10006660
mov al, byte [ebp - 0x286]
jmp 0x1001206d
jmp 0x1001199e
mov byte [ebp - 0x285], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
call fcn.10006660
mov al, byte [ebp - 0x285]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10023e46
mov esp, ebp
pop ebp
ret