Function at 0x10bf510
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x11b56b1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x9bc
push esi
push edi
mov dword [ebp - 0x984], ecx
mov byte [ebp - 0x6d0], 0x16
mov byte [ebp - 0x6cf], 0xe3
mov byte [ebp - 0x6ce], 0xc9
mov byte [ebp - 0x6cd], 0xe3
mov byte [ebp - 0x6cc], 0x5c
mov byte [ebp - 0x6cb], 0xb
mov byte [ebp - 0x6ca], 0xb8
mov byte [ebp - 0x6c9], 0x4d
mov byte [ebp - 0x6c8], 0x81
mov byte [ebp - 0x6c7], 0x7d
mov byte [ebp - 0x6c6], 0xf9
mov byte [ebp - 0x6c5], 0x2d
mov byte [ebp - 0x6c4], 0xf0
mov byte [ebp - 0x6c3], 2
mov byte [ebp - 0x6c2], 0x15
mov byte [ebp - 0x6c1], 0xae
mov byte [ebp - 0x30], 0xaa
mov byte [ebp - 0x2f], 0xc8
mov byte [ebp - 0x2e], 8
mov byte [ebp - 0x2d], 0x58
mov byte [ebp - 0x2c], 0x8f
mov byte [ebp - 0x2b], 0x7e
mov byte [ebp - 0x2a], pe_nt_image_headers32
mov byte [ebp - 0x29], 0x42
mov byte [ebp - 0x28], 0x85
mov byte [ebp - 0x27], 0xd2
mov byte [ebp - 0x26], 0xe1
mov byte [ebp - 0x25], 0xe9
mov byte [ebp - 0x24], 4
mov byte [ebp - 0x23], 0x34
mov byte [ebp - 0x22], 0xcf
mov byte [ebp - 0x21], 0xb3
mov byte [ebp - 0x26c], 0xa0
mov byte [ebp - 0x26b], 0x60
mov byte [ebp - 0x26a], 0x9b
mov byte [ebp - 0x269], 0xaf
mov byte [ebp - 0x268], 0x31
mov byte [ebp - 0x267], 0x14
mov byte [ebp - 0x266], 0x62
mov byte [ebp - 0x265], 0x4f
mov byte [ebp - 0x264], 0xbc
mov byte [ebp - 0x263], 0x68
mov byte [ebp - 0x262], 0x33
mov byte [ebp - 0x261], 0x11
mov byte [ebp - 0x260], 0x71
mov byte [ebp - 0x25f], 0x4a
mov byte [ebp - 0x25e], 0x69
mov byte [ebp - 0x25d], 0xad
mov byte [ebp - 0x47c], 0xa2
mov byte [ebp - 0x47b], 0xa0
mov byte [ebp - 0x47a], 0xd0
mov byte [ebp - 0x479], 0xeb
mov byte [ebp - 0x478], 0xe5
mov byte [ebp - 0x477], 0xb9
mov byte [ebp - 0x476], 0x33
mov byte [ebp - 0x475], 0x44
mov byte [ebp - 0x474], 0x87
mov byte [ebp - 0x473], 0xc0
mov byte [ebp - 0x472], 0x68
mov byte [ebp - 0x471], 0xb6
mov byte [ebp - 0x470], 0xb7
mov byte [ebp - 0x46f], 0x26
mov byte [ebp - 0x46e], 0x99
mov byte [ebp - 0x46d], 0xc7
mov byte [ebp - 0x20], 0x28
mov byte [ebp - 0x1f], 0x73
mov byte [ebp - 0x1e], 0x2a
mov byte [ebp - 0x1d], 0xc1
mov byte [ebp - 0x1c], 0x1f
mov byte [ebp - 0x1b], 0xf8
mov byte [ebp - 0x1a], 0xd2
mov byte [ebp - 0x19], 0x11
mov byte [ebp - 0x18], 0xba
mov byte [ebp - 0x17], 0x4b
mov byte [ebp - 0x16], 0
mov byte [ebp - 0x15], 0xa0
mov byte [ebp - 0x14], 0xc9
mov byte [ebp - 0x13], 0x3e
mov byte [ebp - 0x12], 0xc9
mov byte [ebp - 0x11], 0x3b
mov byte [ebp - 0x58], 2
mov byte [ebp - 0x57], 0x4d
mov byte [ebp - 0x56], 0xee
mov byte [ebp - 0x55], 0x41
mov byte [ebp - 0x54], 0x33
mov byte [ebp - 0x53], 0xe7
mov byte [ebp - 0x52], 0x11
mov byte [ebp - 0x51], 0xd3
mov byte [ebp - 0x50], 0x9d
mov byte [ebp - 0x4f], 0x69
mov byte [ebp - 0x4e], 0
mov byte [ebp - 0x4d], 8
mov byte [ebp - 0x4c], 0xc7
mov byte [ebp - 0x4b], 0x81
mov byte [ebp - 0x4a], 0xf3
mov byte [ebp - 0x49], 0x9f
mov byte [ebp - 0x6b0], 0
xor eax, eax
mov dword [ebp - 0x6af], eax
mov dword [ebp - 0x6ab], eax
mov dword [ebp - 0x6a7], eax
mov word [ebp - 0x6a3], ax
mov byte [ebp - 0x6a1], al
mov dword [ebp - 0x48], 0xde94bba4
mov word [ebp - 0x44], 0x6d1
mov word [ebp - 0x42], 0x4d40
mov byte [ebp - 0x40], 0xa1
mov byte [ebp - 0x3f], 0x6a
mov byte [ebp - 0x3e], 0xbf
mov byte [ebp - 0x3d], 0xd5
mov byte [ebp - 0x3c], 1
mov byte [ebp - 0x3b], 0x79
mov byte [ebp - 0x3a], 0xd6
mov byte [ebp - 0x39], 0xac
mov dword [ebp - 0x6f8], 0x100
mov dword [ebp - 0x6a0], 0xefff
xor ecx, ecx
mov byte [ebp - 0x949], cl
lea edx, [ebp - 0x949]
push edx
lea ecx, [ebp - 0x6c0]
call fcn.010c29f0
mov dword [ebp - 4], 0
xor eax, eax
mov byte [ebp - 0x94a], al
lea ecx, [ebp - 0x94a]
push ecx
lea ecx, [ebp - 0x6e0]
call fcn.010c29f0
mov byte [ebp - 4], 1
xor edx, edx
mov byte [ebp - 0x94b], dl
lea eax, [ebp - 0x94b]
push eax
lea ecx, [ebp - 0x69c]
call fcn.010c29f0
mov byte [ebp - 4], 2
mov dword [ebp - 0x6fc], 0
jmp 0x10bf82f
mov ecx, dword [ebp - 0x6fc]
add ecx, 1
mov dword [ebp - 0x6fc], ecx
mov ecx, dword [ebp - 0x984]
add ecx, 8
call fcn.01098d80
cmp dword [ebp - 0x6fc], eax
jae 0x10bf911
mov edx, dword [ebp - 0x6fc]
push edx
mov ecx, dword [ebp - 0x984]
add ecx, 8
call fcn.01173a20
mov eax, dword [eax]
mov dword [ebp - 0x700], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x700]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xb
je 0x10bf90c
mov ecx, dword [ebp - 0x700]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x700]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xc
je 0x10bf90c
mov ecx, dword [ebp - 0x700]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x700]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x700]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x700]
mov eax, dword [edx + 0x58]
call eax
mov dword [eax + 8], esi
mov dword [eax + 0xc], edi
mov ecx, dword [ebp - 0x700]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x700]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x700]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x700]
mov eax, dword [edx + 0x58]
call eax
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], edi
lea ecx, [ebp - 0x700]
push ecx
lea ecx, [ebp - 0x69c]
call fcn.0109a220
jmp 0x10bf820
call fcn.010948f0
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x984]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x984]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x988], eax
mov eax, dword [ebp - 0x988]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x988]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x38]
mov eax, dword [edx]
call eax
test eax, eax
jne 0x10bf99b
mov dword [ebp - 0x950], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x69c]
call fcn.01176b30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e0]
call fcn.010c28e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c0]
call fcn.010c28e0
mov eax, dword [ebp - 0x950]
jmp 0x10c0a41
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x258], 0
push 0x1f8
push 0
lea ecx, [ebp - 0x254]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x38]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38]
mov edx, dword [eax + 4]
call edx
mov ecx, 0x80
mov esi, eax
lea edi, [ebp - 0x25c]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x244]
or eax, dword [ebp - 0x240]
jne 0x10bfac7
mov ecx, dword [ebp - 0x23c]
or ecx, dword [ebp - 0x238]
jne 0x10bfac7
mov edx, dword [0x1009850]
mov dword [ebp - 0x25c], edx
mov eax, dword [0x1009854]
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x240], 0
mov ecx, dword [ebp - 0x984]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x984]
mov ecx, dword [eax + 4]
mov edx, dword [edx]
mov eax, dword [edx + 0x1c]
call eax
sub eax, 1
sbb edx, 0
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], edx
mov dword [ebp - 0x254], 0x10000
mov dword [ebp - 0x214], 2
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x250], 0x5c
mov dword [ebp - 0x234], 0x22
mov dword [ebp - 0x230], 0
mov ecx, dword [ebp - 0x984]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x984]
mov ecx, dword [eax + 4]
mov edx, dword [edx]
mov eax, dword [edx + 0x1c]
call eax
sub eax, 4
sbb edx, 0
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], edx
jmp 0x10bfc2f
mov dword [ebp - 0x704], 0
jmp 0x10bfae2
mov ecx, dword [ebp - 0x704]
add ecx, 1
mov dword [ebp - 0x704], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38]
mov edx, dword [eax + 0x10]
call edx
cmp dword [ebp - 0x704], eax
jae 0x10bfc2f
mov byte [ebp - 0x784], 0
xor eax, eax
mov dword [ebp - 0x783], eax
mov dword [ebp - 0x77f], eax
mov dword [ebp - 0x77b], eax
mov word [ebp - 0x777], ax
mov byte [ebp - 0x775], al
push 0x70
push 0
lea ecx, [ebp - 0x774]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x704]
push edx
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x38]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x788], eax
mov ecx, dword [ebp - 0x788]
add ecx, 0x68
mov edx, dword [ecx]
mov dword [ebp - 0x784], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x780], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x77c], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x778], eax
mov ecx, dword [ebp - 0x788]
add ecx, 0x78
mov edx, dword [ecx]
mov dword [ebp - 0x774], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x770], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x76c], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x768], eax
mov ecx, dword [ebp - 0x788]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x764], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x760], eax
mov ecx, dword [ebp - 0x788]
mov edx, dword [ebp - 0x788]
mov eax, dword [ecx + 0x10]
add eax, dword [edx + 8]
mov ecx, dword [ecx + 0x14]
adc ecx, dword [edx + 0xc]
sub eax, 1
sbb ecx, 0
mov dword [ebp - 0x75c], eax
mov dword [ebp - 0x758], ecx
mov edx, dword [ebp - 0x788]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x754], eax
mov ecx, dword [edx + 0x1c]
mov dword [ebp - 0x750], ecx
mov esi, dword [ebp - 0x788]
add esi, 0x20
mov ecx, 0x12
lea edi, [ebp - 0x74c]
rep movsd dword es:[edi], dword [esi]
lea edx, [ebp - 0x784]
push edx
lea ecx, [ebp - 0x6c0]
call fcn.010c29c0
jmp 0x10bfad3
call fcn.0108fc30
push eax
call fcn.0114afc4
add esp, 4
mov dword [ebp - 0x78c], 0
jmp 0x10bfc58
mov eax, dword [ebp - 0x78c]
add eax, 1
mov dword [ebp - 0x78c], eax
lea ecx, [ebp - 0x69c]
call fcn.01098d80
cmp dword [ebp - 0x78c], eax
jae 0x10c02a3
mov dword [ebp - 0x814], 0
mov ecx, dword [ebp - 0x78c]
push ecx
lea ecx, [ebp - 0x69c]
call fcn.01173a20
mov edx, dword [eax]
mov dword [ebp - 0x810], edx
mov byte [ebp - 0x80c], 0
xor eax, eax
mov dword [ebp - 0x80b], eax
mov dword [ebp - 0x807], eax
mov dword [ebp - 0x803], eax
mov word [ebp - 0x7ff], ax
mov byte [ebp - 0x7fd], al
push 0x70
push 0
lea ecx, [ebp - 0x7fc]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x6c0]
call fcn.01113960
mov dword [ebp - 0x818], eax
jmp 0x10bfcf3
mov edx, dword [ebp - 0x818]
add edx, 0x80
mov dword [ebp - 0x818], edx
lea ecx, [ebp - 0x6c0]
call fcn.01199380
cmp dword [ebp - 0x818], eax
je 0x10bff2b
mov eax, dword [ebp - 0x818]
mov dword [ebp - 0x81c], eax
mov ecx, dword [ebp - 0x810]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x810]
mov eax, dword [edx + 0x58]
call eax
add eax, 0x78
mov ecx, dword [ebp - 0x81c]
add ecx, 0x10
mov dword [ebp - 0x98c], 0x10
mov dword [ebp - 0x990], eax
mov dword [ebp - 0x994], ecx
jmp 0x10bfd74
mov edx, dword [ebp - 0x990]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x994]
cmp dword [ecx], eax
jne 0x10bfd8a
sub dword [ebp - 0x98c], 4
add dword [ebp - 0x990], 4
add dword [ebp - 0x994], 4
cmp dword [ebp - 0x98c], 4
jae 0x10bfd4d
cmp dword [ebp - 0x98c], 0
je 0x10bfe60
mov edx, dword [ebp - 0x990]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x994]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x998], edx
jne 0x10bfe6c
sub dword [ebp - 0x98c], 1
add dword [ebp - 0x990], 1
add dword [ebp - 0x994], 1
cmp dword [ebp - 0x98c], 0
je 0x10bfe60
mov eax, dword [ebp - 0x990]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x994]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x998], eax
jne 0x10bfe6c
sub dword [ebp - 0x98c], 1
add dword [ebp - 0x990], 1
add dword [ebp - 0x994], 1
cmp dword [ebp - 0x98c], 0
je 0x10bfe60
mov ecx, dword [ebp - 0x990]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x994]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x998], ecx
jne 0x10bfe6c
sub dword [ebp - 0x98c], 1
add dword [ebp - 0x990], 1
add dword [ebp - 0x994], 1
cmp dword [ebp - 0x98c], 0
je 0x10bfe60
mov edx, dword [ebp - 0x990]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x994]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x998], edx
jne 0x10bfe6c
mov dword [ebp - 0x99c], 0
jmp 0x10bfe89
mov dword [ebp - 0x99c], 1
cmp dword [ebp - 0x998], 0
jg 0x10bfe89
mov dword [ebp - 0x99c], 0xffffffff
mov eax, dword [ebp - 0x99c]
mov dword [ebp - 0x9a0], eax
cmp dword [ebp - 0x9a0], 0
jne 0x10bff26
mov esi, dword [ebp - 0x81c]
mov ecx, 0x20
lea edi, [ebp - 0x80c]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x810]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x810]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x7ec], eax
mov dword [ebp - 0x7e8], edx
mov ecx, dword [ebp - 0x810]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x810]
mov eax, dword [edx + 0x58]
call eax
mov esi, eax
mov ecx, dword [ebp - 0x810]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x810]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [esi + 0x10]
add ecx, dword [eax + 8]
mov edx, dword [esi + 0x14]
adc edx, dword [eax + 0xc]
sub ecx, 1
sbb edx, 0
mov dword [ebp - 0x7e4], ecx
mov dword [ebp - 0x7e0], edx
mov dword [ebp - 0x814], 1
jmp 0x10bff2b
jmp 0x10bfce1
cmp dword [ebp - 0x814], 0
jne 0x10c028c
mov eax, dword [ebp - 0x810]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x810]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xb
je 0x10c028c
mov ecx, dword [ebp - 0x810]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x810]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xc
je 0x10c028c
mov byte [ebp - 0x8ac], 0
xor ecx, ecx
mov dword [ebp - 0x8ab], ecx
mov dword [ebp - 0x8a7], ecx
mov dword [ebp - 0x8a3], ecx
mov word [ebp - 0x89f], cx
mov byte [ebp - 0x89d], cl
push 0x70
push 0
lea edx, [ebp - 0x89c]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x810]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x810]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [eax + 8]
mov dword [ebp - 0x88c], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x888], edx
mov eax, dword [ebp - 0x810]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x810]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [eax + 0x10]
add ecx, dword [ebp - 0x88c]
mov edx, dword [eax + 0x14]
adc edx, dword [ebp - 0x888]
sub ecx, 1
sbb edx, 0
mov dword [ebp - 0x884], ecx
mov dword [ebp - 0x880], edx
mov eax, dword [ebp - 0x810]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x810]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x87c], ecx
mov edx, dword [eax + 0x1c]
mov dword [ebp - 0x878], edx
mov eax, dword [ebp - 0x810]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x810]
mov eax, dword [edx + 0x58]
call eax
add eax, 0x20
mov ecx, 0x12
mov esi, eax
lea edi, [ebp - 0x874]
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
mov dword [ebp - 0x82c], ecx
mov dword [ebp - 0x828], ecx
mov dword [ebp - 0x824], ecx
mov dword [ebp - 0x820], ecx
mov dword [ebp - 0x8b0], 0
jmp 0x10c0086
mov edx, dword [ebp - 0x8b0]
add edx, 1
mov dword [ebp - 0x8b0], edx
cmp dword [ebp - 0x8b0], 8
jae 0x10c00cf
call fcn.0114afd8
mov dword [ebp - 0x9a4], eax
fild dword [ebp - 0x9a4]
fdiv qword [0x1009848]
fmul qword [0x1009840]
fadd qword [0x1009838]
fistp qword [ebp - 0x9ac]
mov ax, word [ebp - 0x9ac]
mov ecx, dword [ebp - 0x8b0]
mov word [ebp + ecx*2 - 0x82c], ax
jmp 0x10c0077
mov edx, dword [ebp - 0x82c]
mov dword [ebp - 0x89c], edx
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x898], eax
mov ecx, dword [ebp - 0x824]
mov dword [ebp - 0x894], ecx
mov edx, dword [ebp - 0x820]
mov dword [ebp - 0x890], edx
mov eax, dword [ebp - 0x810]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x810]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [eax]
mov dword [ebp - 0x9b0], ecx
cmp dword [ebp - 0x9b0], 6
ja case.default.0x10c012d
mov edx, dword [ebp - 0x9b0]
jmp dword [edx*4 + 0x10c0a54]
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x8ac], eax
mov ecx, dword [ebp - 0x478]
mov dword [ebp - 0x8a8], ecx
mov edx, dword [ebp - 0x474]
mov dword [ebp - 0x8a4], edx
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x8a0], eax
jmp case.default.0x10c012d
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x8ac], ecx
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x8a8], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x8a4], eax
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8a0], ecx
jmp case.default.0x10c012d
mov edx, dword [ebp - 0x6d0]
mov dword [ebp - 0x8ac], edx
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x8a8], eax
mov ecx, dword [ebp - 0x6c8]
mov dword [ebp - 0x8a4], ecx
mov edx, dword [ebp - 0x6c4]
mov dword [ebp - 0x8a0], edx
jmp case.default.0x10c012d
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x8ac], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x8a8], ecx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x8a4], edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x8a0], eax
jmp case.default.0x10c012d
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x8ac], ecx
mov edx, dword [ebp - 0x268]
mov dword [ebp - 0x8a8], edx
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x8a4], eax
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x8a0], ecx
jmp case.default.0x10c012d
mov edx, dword [ebp - 0x47c]
mov dword [ebp - 0x8ac], edx
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x8a8], eax
mov ecx, dword [ebp - 0x474]
mov dword [ebp - 0x8a4], ecx
mov edx, dword [ebp - 0x470]
mov dword [ebp - 0x8a0], edx
jmp case.default.0x10c012d
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x8ac], eax
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x8a8], ecx
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x8a4], edx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x8a0], eax
lea ecx, [ebp - 0x8ac]
push ecx
lea ecx, [ebp - 0x6e0]
call fcn.010c29c0
jmp 0x10c029e
lea edx, [ebp - 0x80c]
push edx
lea ecx, [ebp - 0x6e0]
call fcn.010c29c0
jmp 0x10bfc49
mov dword [ebp - 0x6f4], 0x4000
mov eax, dword [ebp - 0x6f4]
push eax
call fcn.0108d7a0
add esp, 4
mov dword [ebp - 0x954], eax
mov ecx, dword [ebp - 0x954]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x6f4]
push edx
push 0
mov eax, dword [ebp - 0x34]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x8b4], 0
jmp 0x10c02fb
mov ecx, dword [ebp - 0x8b4]
add ecx, 1
mov dword [ebp - 0x8b4], ecx
lea ecx, [ebp - 0x6e0]
call fcn.010c2950
cmp dword [ebp - 0x8b4], eax
jae 0x10c034a
mov edx, dword [ebp - 0x8b4]
push edx
lea ecx, [ebp - 0x6e0]
call fcn.010c2990
mov ecx, 0x20
mov esi, eax
lea edi, [ebp - 0x934]
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x8b4]
shl edi, 7
add edi, dword [ebp - 0x34]
mov ecx, 0x20
lea esi, [ebp - 0x934]
rep movsd dword es:[edi], dword [esi]
jmp 0x10c02ec
push 0xffffffffffffffff
mov eax, dword [ebp - 0x6f4]
push eax
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x984]
call fcn.010bf4a0
xor eax, 0xffffffff
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x6f4]
cdq
and edx, 0x1ff
add eax, edx
sar eax, 9
cdq
push edx
push eax
mov edx, dword [ebp - 0x210]
push edx
mov eax, dword [ebp - 0x214]
push eax
mov ecx, dword [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0x984]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x984]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x10c0447
call fcn.010947d0
mov dword [ebp - 0x9b4], eax
push 0xc85
push 0x1009584
call fcn.010bacd0
push eax
push 0x1009808
mov ecx, dword [ebp - 0x9b4]
push ecx
mov edx, dword [ebp - 0x9b4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x958], edx
mov eax, dword [ebp - 0x958]
push eax
call fcn.0108d7c0
add esp, 4
mov dword [ebp - 0x95c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x69c]
call fcn.01176b30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e0]
call fcn.010c28e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c0]
call fcn.010c28e0
mov eax, dword [ebp - 0x95c]
jmp 0x10c0a41
cmp dword [ebp - 0x224], 0
jne 0x10c0502
xor ecx, ecx
mov dword [ebp - 0x944], ecx
mov dword [ebp - 0x940], ecx
mov dword [ebp - 0x93c], ecx
mov dword [ebp - 0x938], ecx
mov dword [ebp - 0x948], 0
jmp 0x10c0489
mov edx, dword [ebp - 0x948]
add edx, 1
mov dword [ebp - 0x948], edx
cmp dword [ebp - 0x948], 8
jae 0x10c04d2
call fcn.0114afd8
mov dword [ebp - 0x9b8], eax
fild dword [ebp - 0x9b8]
fdiv qword [0x1009848]
fmul qword [0x1009840]
fadd qword [0x1009838]
fistp qword [ebp - 0x9c0]
mov ax, word [ebp - 0x9c0]
mov ecx, dword [ebp - 0x948]
mov word [ebp + ecx*2 - 0x944], ax
jmp 0x10c047a
mov edx, dword [ebp - 0x944]
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0x940]
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x93c]
mov dword [ebp - 0x21c], ecx
mov edx, dword [ebp - 0x938]
mov dword [ebp - 0x218], edx
mov dword [ebp - 0x20c], 0x80
mov dword [ebp - 0x208], 0x80
mov dword [ebp - 0x24c], 0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x250]
push eax
lea ecx, [ebp - 0x25c]
push ecx
mov ecx, dword [ebp - 0x984]
call fcn.010bf4a0
xor eax, 0xffffffff
mov dword [ebp - 0x24c], eax
push 0
push 1
mov edx, dword [ebp - 0x240]
push edx
mov eax, dword [ebp - 0x244]
push eax
lea ecx, [ebp - 0x25c]
push ecx
mov edx, dword [ebp - 0x984]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x984]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x10c0612
call fcn.010947d0
mov dword [ebp - 0x9c4], eax
push 0xca0
push 0x1009584
call fcn.010bacd0
push eax
push 0x1009808
mov ecx, dword [ebp - 0x9c4]
push ecx
mov edx, dword [ebp - 0x9c4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x960], edx
mov eax, dword [ebp - 0x960]
push eax
call fcn.0108d7c0
add esp, 4
mov dword [ebp - 0x964], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x69c]
call fcn.01176b30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e0]
call fcn.010c28e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c0]
call fcn.010c28e0
mov eax, dword [ebp - 0x964]
jmp 0x10c0a41
mov dword [ebp - 0x68c], 0
mov dword [ebp - 0x688], 0
push 0x1f8
push 0
lea ecx, [ebp - 0x684]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, 0x80
lea esi, [ebp - 0x25c]
lea edi, [ebp - 0x68c]
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp - 0x23c]
mov dword [ebp - 0x674], edx
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x670], eax
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x66c], ecx
mov edx, dword [ebp - 0x240]
mov dword [ebp - 0x668], edx
mov eax, dword [ebp - 0x23c]
sub eax, 0x20
mov ecx, dword [ebp - 0x238]
sbb ecx, 0
mov dword [ebp - 0x644], eax
mov dword [ebp - 0x640], ecx
mov dword [ebp - 0x67c], 0
push 0xffffffffffffffff
mov edx, dword [ebp - 0x680]
push edx
lea eax, [ebp - 0x68c]
push eax
mov ecx, dword [ebp - 0x984]
call fcn.010bf4a0
xor eax, 0xffffffff
mov dword [ebp - 0x67c], eax
push 0
push 1
mov ecx, dword [ebp - 0x238]
push ecx
mov edx, dword [ebp - 0x23c]
push edx
lea eax, [ebp - 0x68c]
push eax
mov ecx, dword [ebp - 0x984]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x984]
mov ecx, dword [eax + 4]
mov edx, dword [edx]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x10c0799
call fcn.010947d0
mov dword [ebp - 0x9c8], eax
push 0xcaf
push 0x1009584
call fcn.010bacd0
push eax
push 0x1009808
mov ecx, dword [ebp - 0x9c8]
push ecx
mov edx, dword [ebp - 0x9c8]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x968], edx
mov eax, dword [ebp - 0x968]
push eax
call fcn.0108d7c0
add esp, 4
mov dword [ebp - 0x96c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x69c]
call fcn.01176b30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e0]
call fcn.010c28e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c0]
call fcn.010c28e0
mov eax, dword [ebp - 0x96c]
jmp 0x10c0a41
mov eax, dword [ebp - 0x6f4]
cdq
and edx, 0x1ff
add eax, edx
sar eax, 9
cdq
push edx
push eax
mov ecx, dword [ebp - 0x640]
push ecx
mov edx, dword [ebp - 0x644]
push edx
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x984]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x984]
mov ecx, dword [eax + 4]
mov edx, dword [edx]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x10c083a
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x970], ecx
mov edx, dword [ebp - 0x970]
push edx
call fcn.0108d7c0
add esp, 4
mov dword [ebp - 0x974], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x69c]
call fcn.01176b30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e0]
call fcn.010c28e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c0]
call fcn.010c28e0
mov eax, dword [ebp - 0x974]
jmp 0x10c0a41
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x978], eax
mov ecx, dword [ebp - 0x978]
push ecx
call fcn.0108d7c0
add esp, 4
mov byte [ebp - 0x6f0], 0
mov byte [ebp - 0x6ef], 0
mov byte [ebp - 0x6ee], 2
mov byte [ebp - 0x6ed], 0
mov byte [ebp - 0x6ec], 0xee
mov byte [ebp - 0x6eb], 0xff
mov byte [ebp - 0x6ea], 0xff
mov byte [ebp - 0x6e9], 0xff
mov byte [ebp - 0x6e8], 1
mov byte [ebp - 0x6e7], 0
mov byte [ebp - 0x6e6], 0
mov byte [ebp - 0x6e5], 0
mov byte [ebp - 0x6e4], 0xff
mov byte [ebp - 0x6e3], 0xff
mov byte [ebp - 0x6e2], 0xff
mov byte [ebp - 0x6e1], 0xff
mov byte [ebp - 0x46c], 0
push 0x1ff
push 0
lea edx, [ebp - 0x46b]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov byte [ebp - 0x48c], 0
xor eax, eax
mov dword [ebp - 0x48b], eax
mov dword [ebp - 0x487], eax
mov dword [ebp - 0x483], eax
mov word [ebp - 0x47f], ax
mov byte [ebp - 0x47d], al
push 0
push 1
push 0
push 0
lea ecx, [ebp - 0x46c]
push ecx
mov edx, dword [ebp - 0x984]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x984]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov eax, dword [edx + 0xc]
call eax
test eax, eax
jne 0x10c0978
mov dword [ebp - 0x97c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x69c]
call fcn.01176b30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e0]
call fcn.010c28e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c0]
call fcn.010c28e0
mov eax, dword [ebp - 0x97c]
jmp 0x10c0a41
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0x10], ecx
push 0x1fe
push 0
lea edx, [ebp - 0x46c]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2b4], eax
mov ecx, dword [ebp - 0x6f0]
mov dword [ebp - 0x2ae], ecx
mov edx, dword [ebp - 0x6ec]
mov dword [ebp - 0x2aa], edx
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x2a6], eax
mov ecx, dword [ebp - 0x6e4]
mov dword [ebp - 0x2a2], ecx
push 0
push 1
push 0
push 0
lea edx, [ebp - 0x46c]
push edx
mov eax, dword [ebp - 0x984]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x984]
mov eax, dword [edx + 4]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 0x980], 1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x69c]
call fcn.01176b30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e0]
call fcn.010c28e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c0]
call fcn.010c28e0
mov eax, dword [ebp - 0x980]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8