Function at 0x10108c00
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc6c
mov eax, dword [0x10358f40]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0x100
push 0
mov eax, dword [0x1035a980]
add eax, 0x7919
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x100
push 0
mov ecx, dword [0x1035a980]
add ecx, 0x7e1c
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x400
push 0
mov edx, dword [0x1035a980]
add edx, 0x7a1c
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x458
call fcn.10238d8b
add esp, 4
mov dword [ebp - 0x7d8], eax
cmp dword [ebp - 0x7d8], 0
je 0x10108c95
mov ecx, dword [ebp - 0x7d8]
call fcn.101adc50
mov dword [ebp - 0x7dc], eax
jmp 0x10108c9f
mov dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x7dc]
mov dword [0x103605c0], eax
mov ecx, dword [0x1035a980]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0xa70], edx
push ecx
mov esi, esp
lea eax, [ebp - 0xf4]
push eax
mov ecx, 0x102a3518
call fcn.10124b00
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbbc]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xa58], eax
lea ecx, [ebp - 0xa58]
push ecx
mov ecx, 0x10360ff8
call fcn.10077a60
mov dword [ebp - 0xa5c], eax
lea edx, [ebp - 0xdc]
push edx
mov ecx, dword [ebp - 0xa5c]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xa68], eax
push ecx
mov esi, esp
lea eax, [ebp - 0xc4]
push eax
mov ecx, 0x102a3364
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbec]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xa60], eax
lea ecx, [ebp - 0xa60]
push ecx
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xa64], eax
lea edx, [ebp - 0xac]
push edx
mov ecx, dword [ebp - 0xa64]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xa6c], eax
mov eax, dword [ebp - 0xa68]
push eax
mov ecx, dword [ebp - 0xa6c]
push ecx
call dword [ebp - 0xa70]
add esp, 8
mov edx, dword [eax + 1]
mov eax, dword [edx]
mov dword [ebp - 0xa74], eax
mov ecx, dword [0x1035a980]
mov edx, dword [ebp - 0xa74]
mov dword [ecx + 0x6fc4], edx
lea ecx, [ebp - 0xac]
call fcn.10073110
lea ecx, [ebp - 0xc4]
call fcn.10073110
lea ecx, [ebp - 0xdc]
call fcn.10073110
lea ecx, [ebp - 0xf4]
call fcn.10073110
nop
mov eax, dword [0x1035a980]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0xa88], ecx
lea edx, [ebp - 0x13c]
push edx
mov ecx, 0x102b519c
call fcn.10123f00
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xa80], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x124]
push eax
mov ecx, 0x102a34e8
call fcn.10123780
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbf0]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xa78], eax
lea ecx, [ebp - 0xa78]
push ecx
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xa7c], eax
lea edx, [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 0xa7c]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xa84], eax
mov eax, dword [ebp - 0xa80]
push eax
mov ecx, dword [ebp - 0xa84]
push ecx
call dword [ebp - 0xa88]
add esp, 8
mov edx, dword [eax + 1]
mov eax, dword [edx]
mov dword [ebp - 0x8dc], eax
lea ecx, [ebp - 0x1c]
call fcn.10073110
lea ecx, [ebp - 0x124]
call fcn.10073110
lea ecx, [ebp - 0x13c]
call fcn.10073110
nop
mov ecx, dword [0x1035a980]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0xaa4], edx
push ecx
mov esi, esp
lea eax, [ebp - 0x19c]
push eax
mov ecx, 0x102b40f8
call fcn.10123b40
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbf4]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xa8c], eax
lea ecx, [ebp - 0xa8c]
push ecx
mov ecx, 0x10360ff8
call fcn.10077a60
mov dword [ebp - 0xa90], eax
lea edx, [ebp - 0x184]
push edx
mov ecx, dword [ebp - 0xa90]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xa9c], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x16c]
push eax
mov ecx, 0x102a337c
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbf8]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xa94], eax
lea ecx, [ebp - 0xa94]
push ecx
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xa98], eax
lea edx, [ebp - 0x154]
push edx
mov ecx, dword [ebp - 0xa98]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xaa0], eax
mov eax, dword [ebp - 0xa9c]
push eax
mov ecx, dword [ebp - 0xaa0]
push ecx
call dword [ebp - 0xaa4]
add esp, 8
mov dword [ebp - 0xa14], eax
lea ecx, [ebp - 0x154]
call fcn.10073110
lea ecx, [ebp - 0x16c]
call fcn.10073110
lea ecx, [ebp - 0x184]
call fcn.10073110
lea ecx, [ebp - 0x19c]
call fcn.10073110
nop
mov edx, dword [0x1035a980]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0xac0], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x10c]
push ecx
mov ecx, 0x102b4128
call fcn.101233c0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbfc]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xaa8], eax
lea edx, [ebp - 0xaa8]
push edx
mov ecx, 0x10360ff8
call fcn.10077a60
mov dword [ebp - 0xaac], eax
lea eax, [ebp - 0x1e4]
push eax
mov ecx, dword [ebp - 0xaac]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xab8], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x1cc]
push ecx
mov ecx, 0x102a337c
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc00]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xab0], eax
lea edx, [ebp - 0xab0]
push edx
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xab4], eax
lea eax, [ebp - 0x1b4]
push eax
mov ecx, dword [ebp - 0xab4]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xabc], eax
mov ecx, dword [ebp - 0xab8]
push ecx
mov edx, dword [ebp - 0xabc]
push edx
call dword [ebp - 0xac0]
add esp, 8
mov dword [ebp - 0xa18], eax
lea ecx, [ebp - 0x1b4]
call fcn.10073110
lea ecx, [ebp - 0x1cc]
call fcn.10073110
lea ecx, [ebp - 0x1e4]
call fcn.10073110
lea ecx, [ebp - 0x10c]
call fcn.10073110
nop
mov eax, dword [0x1035a980]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0xadc], ecx
push ecx
mov esi, esp
lea edx, [ebp - 0x25c]
push edx
mov ecx, 0x102b4134
call fcn.100854b0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc04]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xac4], eax
lea eax, [ebp - 0xac4]
push eax
mov ecx, 0x10360ff8
call fcn.10077a60
mov dword [ebp - 0xac8], eax
lea ecx, [ebp - 0x244]
push ecx
mov ecx, dword [ebp - 0xac8]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xad4], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x22c]
push edx
mov ecx, 0x102a337c
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc08]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xacc], eax
lea eax, [ebp - 0xacc]
push eax
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xad0], eax
lea ecx, [ebp - 0x214]
push ecx
mov ecx, dword [ebp - 0xad0]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xad8], eax
mov edx, dword [ebp - 0xad4]
push edx
mov eax, dword [ebp - 0xad8]
push eax
call dword [ebp - 0xadc]
add esp, 8
mov dword [ebp - 0xa20], eax
lea ecx, [ebp - 0x214]
call fcn.10073110
lea ecx, [ebp - 0x22c]
call fcn.10073110
lea ecx, [ebp - 0x244]
call fcn.10073110
lea ecx, [ebp - 0x25c]
call fcn.10073110
nop
mov ecx, dword [0x1035a980]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0xafc], edx
push ecx
mov esi, esp
lea eax, [ebp - 0x2bc]
push eax
mov ecx, 0x102b4164
call fcn.10123b40
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc0c]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xae0], eax
lea ecx, [ebp - 0xae0]
push ecx
mov ecx, 0x10360ff8
call fcn.10077a60
mov dword [ebp - 0xae4], eax
lea edx, [ebp - 0x2a4]
push edx
mov ecx, dword [ebp - 0xae4]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xaf4], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x28c]
push eax
mov ecx, 0x102a337c
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc10]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xaec], eax
lea ecx, [ebp - 0xaec]
push ecx
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xaf0], eax
lea edx, [ebp - 0x274]
push edx
mov ecx, dword [ebp - 0xaf0]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xaf8], eax
mov eax, dword [ebp - 0xaf4]
push eax
mov ecx, dword [ebp - 0xaf8]
push ecx
call dword [ebp - 0xafc]
add esp, 8
mov dword [ebp - 0xa1c], eax
lea ecx, [ebp - 0x274]
call fcn.10073110
lea ecx, [ebp - 0x28c]
call fcn.10073110
lea ecx, [ebp - 0x2a4]
call fcn.10073110
lea ecx, [ebp - 0x2bc]
call fcn.10073110
nop
mov edx, dword [0x1035a980]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0xb0c], eax
lea ecx, [ebp - 0x304]
push ecx
mov ecx, 0x102b5090
call fcn.10124200
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0x978], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x2ec]
push edx
mov ecx, 0x102a337c
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc14]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xb00], eax
lea eax, [ebp - 0xb00]
push eax
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xb04], eax
lea ecx, [ebp - 0x2d4]
push ecx
mov ecx, dword [ebp - 0xb04]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xb08], eax
mov edx, dword [ebp - 0x978]
push edx
mov eax, dword [ebp - 0xb08]
push eax
call dword [ebp - 0xb0c]
add esp, 8
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x2d4]
call fcn.10073110
lea ecx, [ebp - 0x2ec]
call fcn.10073110
lea ecx, [ebp - 0x304]
call fcn.10073110
nop
mov ecx, dword [0x1035a980]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0xb28], edx
push ecx
mov esi, esp
lea eax, [ebp - 0x364]
push eax
mov ecx, 0x102b41cc
call fcn.10085570
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc1c]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xb10], eax
lea ecx, [ebp - 0xb10]
push ecx
mov ecx, 0x10360ff8
call fcn.10077a60
mov dword [ebp - 0xb14], eax
lea edx, [ebp - 0x34c]
push edx
mov ecx, dword [ebp - 0xb14]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xb20], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x334]
push eax
mov ecx, 0x102a337c
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc20]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xb18], eax
lea ecx, [ebp - 0xb18]
push ecx
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xb1c], eax
lea edx, [ebp - 0x31c]
push edx
mov ecx, dword [ebp - 0xb1c]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0xb20]
push eax
mov ecx, dword [ebp - 0xb24]
push ecx
call dword [ebp - 0xb28]
add esp, 8
mov dword [ebp - 0xa2c], eax
lea ecx, [ebp - 0x31c]
call fcn.10073110
lea ecx, [ebp - 0x334]
call fcn.10073110
lea ecx, [ebp - 0x34c]
call fcn.10073110
lea ecx, [ebp - 0x364]
call fcn.10073110
nop
mov edx, dword [0x1035a980]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0xb44], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x3c4]
push ecx
mov ecx, 0x102b41e4
call fcn.10123a80
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc24]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xb2c], eax
lea edx, [ebp - 0xb2c]
push edx
mov ecx, 0x10360ff8
call fcn.10077a60
mov dword [ebp - 0xb30], eax
lea eax, [ebp - 0x3ac]
push eax
mov ecx, dword [ebp - 0xb30]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xb3c], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x394]
push ecx
mov ecx, 0x102a337c
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc28]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xb34], eax
lea edx, [ebp - 0xb34]
push edx
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xb38], eax
lea eax, [ebp - 0x37c]
push eax
mov ecx, dword [ebp - 0xb38]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xb40], eax
mov ecx, dword [ebp - 0xb3c]
push ecx
mov edx, dword [ebp - 0xb40]
push edx
call dword [ebp - 0xb44]
add esp, 8
mov dword [ebp - 0xc2c], eax
lea ecx, [ebp - 0x37c]
call fcn.10073110
lea ecx, [ebp - 0x394]
call fcn.10073110
lea ecx, [ebp - 0x3ac]
call fcn.10073110
lea ecx, [ebp - 0x3c4]
call fcn.10073110
nop
mov eax, dword [0x1035a980]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0xb58], ecx
lea edx, [ebp - 0x3f4]
push edx
mov ecx, 0x102b5150
call fcn.10124200
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xb50], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x94]
push eax
mov ecx, 0x102a337c
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc30]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xb48], eax
lea ecx, [ebp - 0xb48]
push ecx
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xb4c], eax
lea edx, [ebp - 0x3dc]
push edx
mov ecx, dword [ebp - 0xb4c]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xb54], eax
mov eax, dword [ebp - 0xb50]
push eax
mov ecx, dword [ebp - 0xb54]
push ecx
call dword [ebp - 0xb58]
add esp, 8
mov dword [ebp - 0xa28], eax
lea ecx, [ebp - 0x3dc]
call fcn.10073110
lea ecx, [ebp - 0x94]
call fcn.10073110
lea ecx, [ebp - 0x3f4]
call fcn.10073110
nop
mov edx, dword [0x1035a980]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0xb6c], eax
lea ecx, [ebp - 0x43c]
push ecx
mov ecx, 0x102b4fb0
call fcn.101245c0
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xb64], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x424]
push edx
mov ecx, 0x102a337c
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc34]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xb5c], eax
lea eax, [ebp - 0xb5c]
push eax
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xb60], eax
lea ecx, [ebp - 0x40c]
push ecx
mov ecx, dword [ebp - 0xb60]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xb68], eax
mov edx, dword [ebp - 0xb64]
push edx
mov eax, dword [ebp - 0xb68]
push eax
call dword [ebp - 0xb6c]
add esp, 8
mov dword [ebp - 0xa38], eax
lea ecx, [ebp - 0x40c]
call fcn.10073110
lea ecx, [ebp - 0x424]
call fcn.10073110
lea ecx, [ebp - 0x43c]
call fcn.10073110
nop
mov ecx, dword [0x1035a980]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0xb80], edx
lea eax, [ebp - 0x484]
push eax
mov ecx, 0x102b5010
call fcn.10124380
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xb78], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x46c]
push ecx
mov ecx, 0x102a3364
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc38]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xb70], eax
lea edx, [ebp - 0xb70]
push edx
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xb74], eax
lea eax, [ebp - 0x454]
push eax
mov ecx, dword [ebp - 0xb74]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xb7c], eax
mov ecx, dword [ebp - 0xb78]
push ecx
mov edx, dword [ebp - 0xb7c]
push edx
call dword [ebp - 0xb80]
add esp, 8
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x454]
call fcn.10073110
lea ecx, [ebp - 0x46c]
call fcn.10073110
lea ecx, [ebp - 0x484]
call fcn.10073110
nop
mov eax, dword [0x1035a980]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0xb94], ecx
lea edx, [ebp - 0x4cc]
push edx
mov ecx, 0x102b5120
call fcn.100854b0
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xb8c], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x4b4]
push eax
mov ecx, 0x102a337c
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc40]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xb84], eax
lea ecx, [ebp - 0xb84]
push ecx
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xb88], eax
lea edx, [ebp - 0x49c]
push edx
mov ecx, dword [ebp - 0xb88]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xb90], eax
mov eax, dword [ebp - 0xb8c]
push eax
mov ecx, dword [ebp - 0xb90]
push ecx
call dword [ebp - 0xb94]
add esp, 8
mov dword [ebp - 0xa24], eax
lea ecx, [ebp - 0x49c]
call fcn.10073110
lea ecx, [ebp - 0x4b4]
call fcn.10073110
lea ecx, [ebp - 0x4cc]
call fcn.10073110
nop
mov edx, dword [0x1035a980]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0x7e4], eax
lea ecx, [ebp - 0x514]
push ecx
mov ecx, 0x102b50e0
call fcn.10123fc0
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xba0], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x4fc]
push edx
mov ecx, 0x102a3420
call fcn.10123840
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc44]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xb98], eax
lea eax, [ebp - 0xb98]
push eax
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xb9c], eax
lea ecx, [ebp - 0x4e4]
push ecx
mov ecx, dword [ebp - 0xb9c]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x7e0], eax
mov edx, dword [ebp - 0xba0]
push edx
mov eax, dword [ebp - 0x7e0]
push eax
call dword [ebp - 0x7e4]
add esp, 8
mov dword [ebp - 0xa30], eax
lea ecx, [ebp - 0x4e4]
call fcn.10073110
lea ecx, [ebp - 0x4fc]
call fcn.10073110
lea ecx, [ebp - 0x514]
call fcn.10073110
nop
mov ecx, dword [0x1035a980]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x7f8], edx
lea eax, [ebp - 0x55c]
push eax
mov ecx, 0x102b51d8
call fcn.10124a40
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0x7f0], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x544]
push ecx
mov ecx, 0x102a3364
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc48]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x7e8], eax
lea edx, [ebp - 0x7e8]
push edx
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0x7ec], eax
lea eax, [ebp - 0x52c]
push eax
mov ecx, dword [ebp - 0x7ec]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x7f4], eax
mov ecx, dword [ebp - 0x7f0]
push ecx
mov edx, dword [ebp - 0x7f4]
push edx
call dword [ebp - 0x7f8]
add esp, 8
mov dword [ebp - 0xa34], eax
lea ecx, [ebp - 0x52c]
call fcn.10073110
lea ecx, [ebp - 0x544]
call fcn.10073110
lea ecx, [ebp - 0x55c]
call fcn.10073110
nop
lea eax, [ebp - 0x574]
push eax
mov ecx, 0x102b49a8
call fcn.10123600
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0x7fc], eax
mov ecx, dword [ebp - 0x7fc]
push ecx
mov ecx, dword [0x1035a8ec]
call fcn.100732b0
mov dword [ebp - 0x8ac], eax
lea ecx, [ebp - 0x574]
call fcn.10073110
nop
lea edx, [ebp - 0x58c]
push edx
mov ecx, 0x102b49c0
call fcn.10124080
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x800]
push eax
mov ecx, dword [0x1035a8ec]
call fcn.100732b0
mov dword [ebp - 0x8a4], eax
lea ecx, [ebp - 0x58c]
call fcn.10073110
nop
lea ecx, [ebp - 0x5a4]
push ecx
mov ecx, 0x102b4a08
call fcn.10085630
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0x804], eax
mov edx, dword [ebp - 0x804]
push edx
mov ecx, dword [0x1035a8ec]
call fcn.100732b0
mov dword [ebp - 0x874], eax
lea ecx, [ebp - 0x5a4]
call fcn.10073110
nop
lea eax, [ebp - 0x808]
push eax
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9a8
call fcn.1011a0e0
lea ecx, [ebp - 0x808]
call fcn.1011daa0
nop
lea ecx, [ebp - 0x80c]
push ecx
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9dc
call fcn.1011a0e0
lea ecx, [ebp - 0x80c]
call fcn.1011daa0
nop
lea edx, [ebp - 0x810]
push edx
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9ac
call fcn.1011a0e0
lea ecx, [ebp - 0x810]
call fcn.1011daa0
nop
lea eax, [ebp - 0x814]
push eax
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9b0
call fcn.1011a0e0
lea ecx, [ebp - 0x814]
call fcn.1011daa0
nop
lea ecx, [ebp - 0x818]
push ecx
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035aa00
call fcn.1011a0e0
lea ecx, [ebp - 0x818]
call fcn.1011daa0
nop
lea edx, [ebp - 0x81c]
push edx
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9bc
call fcn.1011a0e0
lea ecx, [ebp - 0x81c]
call fcn.1011daa0
nop
lea eax, [ebp - 0x820]
push eax
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9c0
call fcn.1011a0e0
lea ecx, [ebp - 0x820]
call fcn.1011daa0
nop
lea ecx, [ebp - 0x824]
push ecx
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9c8
call fcn.1011a0e0
lea ecx, [ebp - 0x824]
call fcn.1011daa0
nop
lea edx, [ebp - 0x828]
push edx
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9cc
call fcn.1011a0e0
lea ecx, [ebp - 0x828]
call fcn.1011daa0
nop
lea eax, [ebp - 0x82c]
push eax
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9d0
call fcn.1011a0e0
lea ecx, [ebp - 0x82c]
call fcn.1011daa0
nop
lea ecx, [ebp - 0x830]
push ecx
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9d8
call fcn.1011a0e0
lea ecx, [ebp - 0x830]
call fcn.1011daa0
nop
lea edx, [ebp - 0x834]
push edx
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9d4
call fcn.1011a0e0
lea ecx, [ebp - 0x834]
call fcn.1011daa0
nop
lea eax, [ebp - 0x838]
push eax
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9a4
call fcn.1011a0e0
lea ecx, [ebp - 0x838]
call fcn.1011daa0
nop
lea ecx, [ebp - 0x83c]
push ecx
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9b8
call fcn.1011a0e0
lea ecx, [ebp - 0x83c]
call fcn.1011daa0
nop
lea edx, [ebp - 0x840]
push edx
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9fc
call fcn.1011a0e0
lea ecx, [ebp - 0x840]
call fcn.1011daa0
nop
lea eax, [ebp - 0x844]
push eax
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9b4
call fcn.1011a0e0
lea ecx, [ebp - 0x844]
call fcn.1011daa0
nop
lea ecx, [ebp - 0x848]
push ecx
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9c4
call fcn.1011a0e0
lea ecx, [ebp - 0x848]
call fcn.1011daa0
nop
lea edx, [ebp - 0x84c]
push edx
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9e0
call fcn.1011a0e0
lea ecx, [ebp - 0x84c]
call fcn.1011daa0
nop
lea eax, [ebp - 0x850]
push eax
call fcn.1011c8b0
add esp, 4
push eax
mov ecx, 0x1035a9ec
call fcn.1011a0e0
lea ecx, [ebp - 0x850]
call fcn.1011daa0
nop
mov ecx, 0x1035a9dc
call fcn.100700d0
mov dword [ebp - 0x858], eax
mov ecx, dword [0x1035a8f8]
mov dword [ebp - 0x854], ecx
mov edx, dword [ebp - 0x854]
push edx
mov ecx, dword [ebp - 0x858]
call fcn.10120df0
mov ecx, 0x1035a9ac
call fcn.100700d0
mov dword [ebp - 0x860], eax
mov eax, dword [0x1035a90c]
mov dword [ebp - 0x85c], eax
mov ecx, dword [ebp - 0x85c]
push ecx
mov ecx, dword [ebp - 0x860]
call fcn.10120df0
mov ecx, 0x1035a9b4
call fcn.100700d0
mov dword [ebp - 0x868], eax
mov edx, dword [0x1035a8dc]
mov dword [ebp - 0x864], edx
mov eax, dword [ebp - 0x864]
push eax
mov ecx, dword [ebp - 0x868]
call fcn.10120df0
mov ecx, 0x1035a9b0
call fcn.100700d0
mov dword [ebp - 0x870], eax
mov ecx, dword [0x1035a8e0]
mov dword [ebp - 0x86c], ecx
mov edx, dword [ebp - 0x86c]
push edx
mov ecx, dword [ebp - 0x870]
call fcn.10120df0
mov ecx, 0x1035aa00
call fcn.100700d0
mov dword [ebp - 0x878], eax
mov eax, dword [ebp - 0x874]
push eax
mov ecx, dword [ebp - 0x878]
call fcn.10120df0
mov ecx, 0x1035a9bc
call fcn.100700d0
mov dword [ebp - 0x880], eax
mov ecx, dword [0x1035a92c]
mov dword [ebp - 0x87c], ecx
mov edx, dword [ebp - 0x87c]
push edx
mov ecx, dword [ebp - 0x880]
call fcn.10120df0
mov ecx, 0x1035a9c0
call fcn.100700d0
mov dword [ebp - 0x888], eax
mov eax, dword [0x1035a910]
mov dword [ebp - 0x884], eax
mov ecx, dword [ebp - 0x884]
push ecx
mov ecx, dword [ebp - 0x888]
call fcn.10120df0
mov ecx, 0x1035a9c8
call fcn.100700d0
mov dword [ebp - 0x890], eax
mov edx, dword [0x1035a940]
mov dword [ebp - 0x88c], edx
mov eax, dword [ebp - 0x88c]
push eax
mov ecx, dword [ebp - 0x890]
call fcn.10120df0
mov ecx, 0x1035a9cc
call fcn.100700d0
mov dword [ebp - 0x898], eax
mov ecx, dword [0x1035a93c]
mov dword [ebp - 0x894], ecx
mov edx, dword [ebp - 0x894]
push edx
mov ecx, dword [ebp - 0x898]
call fcn.10120df0
mov ecx, 0x1035a9d0
call fcn.100700d0
mov dword [ebp - 0x8a0], eax
mov eax, dword [0x1035a8f8]
mov edx, dword [eax]
mov ecx, dword [0x1035a8f8]
mov eax, dword [edx + 0xac]
call eax
mov dword [ebp - 0x89c], eax
mov ecx, dword [ebp - 0x89c]
push ecx
mov ecx, dword [ebp - 0x8a0]
call fcn.10120df0
mov ecx, 0x1035a9d8
call fcn.100700d0
mov dword [ebp - 0x8a8], eax
mov edx, dword [ebp - 0x8a4]
push edx
mov ecx, dword [ebp - 0x8a8]
call fcn.10120df0
mov ecx, 0x1035a9d4
call fcn.100700d0
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x8ac]
push eax
mov ecx, dword [ebp - 0x8b0]
call fcn.10120df0
mov ecx, 0x1035a9b8
call fcn.100700d0
mov dword [ebp - 0x8b8], eax
mov ecx, dword [0x1035a91c]
mov dword [ebp - 0x8b4], ecx
mov edx, dword [ebp - 0x8b4]
push edx
mov ecx, dword [ebp - 0x8b8]
call fcn.10120df0
mov ecx, 0x1035a9fc
call fcn.100700d0
mov dword [ebp - 0x8c0], eax
mov eax, dword [0x1035a8e8]
mov dword [ebp - 0x8bc], eax
mov ecx, dword [ebp - 0x8bc]
push ecx
mov ecx, dword [ebp - 0x8c0]
call fcn.10120df0
mov ecx, 0x1035a9c4
call fcn.100700d0
mov dword [ebp - 0x8c8], eax
mov edx, dword [0x1035a918]
mov dword [ebp - 0x8c4], edx
mov eax, dword [ebp - 0x8c4]
push eax
mov ecx, dword [ebp - 0x8c8]
call fcn.10120df0
mov ecx, 0x1035a9a8
call fcn.100700d0
mov dword [ebp - 0x8d0], eax
mov ecx, dword [0x1035a980]
mov edx, dword [ecx + 0x6fc4]
add edx, 8
mov dword [ebp - 0x8cc], edx
mov eax, dword [ebp - 0x8cc]
push eax
mov ecx, dword [ebp - 0x8d0]
call fcn.10120df0
mov ecx, 0x1035a9e0
call fcn.100700d0
mov dword [ebp - 0x8d8], eax
mov ecx, dword [0x1035a8fc]
mov dword [ebp - 0x8d4], ecx
mov edx, dword [ebp - 0x8d4]
push edx
mov ecx, dword [ebp - 0x8d8]
call fcn.10120df0
mov ecx, 0x1035a9ec
call fcn.100700d0
mov dword [ebp - 0x8e0], eax
mov eax, dword [ebp - 0x8dc]
push eax
mov ecx, dword [ebp - 0x8e0]
call fcn.10120df0
nop
mov ecx, 0x1035a9ac
call fcn.100700d0
mov dword [ebp - 0x8ec], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x5bc]
push ecx
mov ecx, 0x102b5580
call fcn.101239c0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc4c]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x8e4], eax
lea edx, [ebp - 0x8e4]
push edx
mov ecx, 0x10361000
call fcn.10083c60
mov eax, dword [eax]
mov dword [ebp - 0x8e8], eax
push 0x1010c200
mov ecx, dword [ebp - 0x8e8]
push ecx
mov ecx, dword [ebp - 0x8ec]
call fcn.1011a290
lea ecx, [ebp - 0x5bc]
call fcn.10073110
nop
mov ecx, 0x1035a9b4
call fcn.100700d0
mov dword [ebp - 0x8f8], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x5d4]
push edx
mov ecx, 0x102b5304
call fcn.100854b0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc50]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x8f0], eax
lea eax, [ebp - 0x8f0]
push eax
mov ecx, 0x10361000
call fcn.10083c60
mov ecx, dword [eax]
mov dword [ebp - 0x8f4], ecx
push 0x1010fb70
mov edx, dword [ebp - 0x8f4]
push edx
mov ecx, dword [ebp - 0x8f8]
call fcn.1011a290
lea ecx, [ebp - 0x5d4]
call fcn.10073110
nop
mov ecx, 0x1035a9b4
call fcn.100700d0
mov dword [ebp - 0x904], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x5ec]
push eax
mov ecx, 0x102b5368
call fcn.10079020
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc54]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x8fc], eax
lea ecx, [ebp - 0x8fc]
push ecx
mov ecx, 0x10361000
call fcn.10083c60
mov edx, dword [eax]
mov dword [ebp - 0x900], edx
push 0x1010d410
mov eax, dword [ebp - 0x900]
push eax
mov ecx, dword [ebp - 0x904]
call fcn.1011a290
lea ecx, [ebp - 0x5ec]
call fcn.10073110
nop
mov ecx, 0x1035a9b4
call fcn.100700d0
mov dword [ebp - 0x908], eax
push 0x1010ec60
push 0x15
mov ecx, dword [ebp - 0x908]
call fcn.1011a290
nop
mov ecx, 0x1035a9dc
call fcn.100700d0
mov dword [ebp - 0x914], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x604]
push ecx
mov ecx, 0x102b53ac
call fcn.101236c0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc58]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x90c], eax
lea edx, [ebp - 0x90c]
push edx
mov ecx, 0x10361000
call fcn.10083c60
mov eax, dword [eax]
mov dword [ebp - 0x910], eax
push 0x101167d0
mov ecx, dword [ebp - 0x910]
push ecx
mov ecx, dword [ebp - 0x914]
call fcn.1011a290
lea ecx, [ebp - 0x604]
call fcn.10073110
nop
mov ecx, 0x1035a9dc
call fcn.100700d0
mov dword [ebp - 0x920], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x61c]
push edx
mov ecx, 0x102b53cc
call fcn.10123900
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc5c]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x918], eax
lea eax, [ebp - 0x918]
push eax
mov ecx, 0x10361000
call fcn.10083c60
mov ecx, dword [eax]
mov dword [ebp - 0x91c], ecx
push 0x10116a10
mov edx, dword [ebp - 0x91c]
push edx
mov ecx, dword [ebp - 0x920]
call fcn.1011a290
lea ecx, [ebp - 0x61c]
call fcn.10073110
nop
mov ecx, 0x1035a9dc
call fcn.100700d0
mov dword [ebp - 0x92c], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x634]
push eax
mov ecx, 0x102b53f4
call fcn.10124bc0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc60]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x924], eax
lea ecx, [ebp - 0x924]
push ecx
mov ecx, 0x10361000
call fcn.10083c60
mov edx, dword [eax]
mov dword [ebp - 0x928], edx
push 0x10116c30
mov eax, dword [ebp - 0x928]
push eax
mov ecx, dword [ebp - 0x92c]
call fcn.1011a290
lea ecx, [ebp - 0x634]
call fcn.10073110
nop
mov ecx, 0x1035a9dc
call fcn.100700d0
mov dword [ebp - 0x938], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x64c]
push ecx
mov ecx, 0x102b5444
call fcn.10123e40
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc64]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x930], eax
lea edx, [ebp - 0x930]
push edx
mov ecx, 0x10361000
call fcn.10083c60
mov eax, dword [eax]
mov dword [ebp - 0x934], eax
push 0x1010caf0
mov ecx, dword [ebp - 0x934]
push ecx
mov ecx, dword [ebp - 0x938]
call fcn.1011a290
lea ecx, [ebp - 0x64c]
call fcn.10073110
nop
mov ecx, 0x1035aa00
call fcn.100700d0
mov dword [ebp - 0x944], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x664]
push edx
mov ecx, 0x102b547c
call fcn.100854b0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc68]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x93c], eax
lea eax, [ebp - 0x93c]
push eax
mov ecx, 0x10361000
call fcn.10083c60
mov ecx, dword [eax]
mov dword [ebp - 0x940], ecx
push 0x10110780
mov edx, dword [ebp - 0x940]
push edx
mov ecx, dword [ebp - 0x944]
call fcn.1011a290
lea ecx, [ebp - 0x664]
call fcn.10073110
nop
mov ecx, 0x1035a9b0
call fcn.100700d0
mov dword [ebp - 0x950], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x67c]
push eax
mov ecx, 0x102b54ac
call fcn.100853f0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xba4]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x948], eax
lea ecx, [ebp - 0x948]
push ecx
mov ecx, 0x10361000
call fcn.10083c60
mov edx, dword [eax]
mov dword [ebp - 0x94c], edx
push 0x1010dd80
mov eax, dword [ebp - 0x94c]
push eax
mov ecx, dword [ebp - 0x950]
call fcn.1011a290
lea ecx, [ebp - 0x67c]
call fcn.10073110
nop
mov ecx, 0x1035a9b0
call fcn.100700d0
mov dword [ebp - 0x95c], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x694]
push ecx
mov ecx, 0x102b54d0
call fcn.101239c0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xba8]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x954], eax
lea edx, [ebp - 0x954]
push edx
mov ecx, 0x10361000
call fcn.10083c60
mov eax, dword [eax]
mov dword [ebp - 0x958], eax
push 0x10110750
mov ecx, dword [ebp - 0x958]
push ecx
mov ecx, dword [ebp - 0x95c]
call fcn.1011a290
lea ecx, [ebp - 0x694]
call fcn.10073110
nop
mov ecx, 0x1035a9b0
call fcn.100700d0
mov dword [ebp - 0x968], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x6ac]
push edx
mov ecx, 0x102b54fc
call fcn.10123900
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbac]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x960], eax
lea eax, [ebp - 0x960]
push eax
mov ecx, 0x10361000
call fcn.10083c60
mov ecx, dword [eax]
mov dword [ebp - 0x964], ecx
push 0x10114e00
mov edx, dword [ebp - 0x964]
push edx
mov ecx, dword [ebp - 0x968]
call fcn.1011a290
lea ecx, [ebp - 0x6ac]
call fcn.10073110
nop
mov ecx, 0x1035a9b0
call fcn.100700d0
mov dword [ebp - 0x974], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x6c4]
push eax
mov ecx, 0x102b5524
call fcn.10123780
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbb0]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x96c], eax
lea ecx, [ebp - 0x96c]
push ecx
mov ecx, 0x10361000
call fcn.10083c60
mov edx, dword [eax]
mov dword [ebp - 0x970], edx
push 0x10115220
mov eax, dword [ebp - 0x970]
push eax
mov ecx, dword [ebp - 0x974]
call fcn.1011a290
lea ecx, [ebp - 0x6c4]
call fcn.10073110
nop
mov ecx, 0x1035a9b0
call fcn.100700d0
mov dword [ebp - 0x980], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x6dc]
push ecx
mov ecx, 0x102b5548
call fcn.10123d80
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbb4]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xae8], eax
lea edx, [ebp - 0xae8]
push edx
mov ecx, 0x10361000
call fcn.10083c60
mov eax, dword [eax]
mov dword [ebp - 0x97c], eax
push 0x10111e70
mov ecx, dword [ebp - 0x97c]
push ecx
mov ecx, dword [ebp - 0x980]
call fcn.1011a290
lea ecx, [ebp - 0x6dc]
call fcn.10073110
nop
mov ecx, 0x1035a9bc
call fcn.100700d0
mov dword [ebp - 0x98c], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x6f4]
push edx
mov ecx, 0x102b55ac
call fcn.100853f0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbb8]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x984], eax
lea eax, [ebp - 0x984]
push eax
mov ecx, 0x10361000
call fcn.10083c60
mov ecx, dword [eax]
mov dword [ebp - 0x988], ecx
push 0x10114820
mov edx, dword [ebp - 0x988]
push edx
mov ecx, dword [ebp - 0x98c]
call fcn.1011a290
lea ecx, [ebp - 0x6f4]
call fcn.10073110
nop
mov ecx, 0x1035a9a8
call fcn.100700d0
mov dword [ebp - 0x998], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x70c]
push eax
mov ecx, 0x102b55d0
call fcn.10123840
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xc6c]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x990], eax
lea ecx, [ebp - 0x990]
push ecx
mov ecx, 0x10361000
call fcn.10083c60
mov edx, dword [eax]
mov dword [ebp - 0x994], edx
push 0x1010cbd0
mov eax, dword [ebp - 0x994]
push eax
mov ecx, dword [ebp - 0x998]
call fcn.1011a290
lea ecx, [ebp - 0x70c]
call fcn.10073110
nop
mov ecx, 0x1035a9a8
call fcn.100700d0
mov dword [ebp - 0x9a4], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x724]
push ecx
mov ecx, 0x102b55f8
call fcn.10123780
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbc0]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x99c], eax
lea edx, [ebp - 0x99c]
push edx
mov ecx, 0x10361000
call fcn.10083c60
mov eax, dword [eax]
mov dword [ebp - 0x9a0], eax
push 0x1010cf20
mov ecx, dword [ebp - 0x9a0]
push ecx
mov ecx, dword [ebp - 0x9a4]
call fcn.1011a290
lea ecx, [ebp - 0x724]
call fcn.10073110
nop
mov ecx, 0x1035a9c0
call fcn.100700d0
mov dword [ebp - 0x9b0], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x73c]
push edx
mov ecx, 0x102b561c
call fcn.100854b0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbc4]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x9a8], eax
lea eax, [ebp - 0x9a8]
push eax
mov ecx, 0x10361000
call fcn.10083c60
mov ecx, dword [eax]
mov dword [ebp - 0x9ac], ecx
push 0x10115a00
mov edx, dword [ebp - 0x9ac]
push edx
mov ecx, dword [ebp - 0x9b0]
call fcn.1011a290
lea ecx, [ebp - 0x73c]
call fcn.10073110
nop
mov ecx, 0x1035a9cc
call fcn.100700d0
mov dword [ebp - 0x9bc], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x754]
push eax
mov ecx, 0x102b52ac
call fcn.10123b40
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbc8]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x9b4], eax
lea ecx, [ebp - 0x9b4]
push ecx
mov ecx, 0x10361000
call fcn.10083c60
mov edx, dword [eax]
mov dword [ebp - 0x9b8], edx
push 0x1010dc80
mov eax, dword [ebp - 0x9b8]
push eax
mov ecx, dword [ebp - 0x9bc]
call fcn.1011a290
lea ecx, [ebp - 0x754]
call fcn.10073110
nop
mov ecx, 0x1035a9c8
call fcn.100700d0
mov dword [ebp - 0x9c8], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x76c]
push ecx
mov ecx, 0x102b564c
call fcn.100853f0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbcc]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x9c0], eax
lea edx, [ebp - 0x9c0]
push edx
mov ecx, 0x10361000
call fcn.10083c60
mov eax, dword [eax]
mov dword [ebp - 0x9c4], eax
push 0x1010d800
mov ecx, dword [ebp - 0x9c4]
push ecx
mov ecx, dword [ebp - 0x9c8]
call fcn.1011a290
lea ecx, [ebp - 0x76c]
call fcn.10073110
nop
mov ecx, 0x1035a9c8
call fcn.100700d0
mov dword [ebp - 0x9d4], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x784]
push edx
mov ecx, 0x102b5670
call fcn.10123900
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbd0]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x9cc], eax
lea eax, [ebp - 0x9cc]
push eax
mov ecx, 0x10361000
call fcn.10083c60
mov ecx, dword [eax]
mov dword [ebp - 0x9d0], ecx
push 0x1010da40
mov edx, dword [ebp - 0x9d0]
push edx
mov ecx, dword [ebp - 0x9d4]
call fcn.1011a290
lea ecx, [ebp - 0x784]
call fcn.10073110
nop
mov ecx, 0x1035a9d0
call fcn.100700d0
mov dword [ebp - 0x9e0], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x79c]
push eax
mov ecx, 0x102b5698
call fcn.10123b40
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbd4]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x9d8], eax
lea ecx, [ebp - 0x9d8]
push ecx
mov ecx, 0x10361000
call fcn.10083c60
mov edx, dword [eax]
mov dword [ebp - 0x9dc], edx
push 0x10116360
mov eax, dword [ebp - 0x9dc]
push eax
mov ecx, dword [ebp - 0x9e0]
call fcn.1011a290
lea ecx, [ebp - 0x79c]
call fcn.10073110
nop
mov ecx, 0x1035a9d4
call fcn.100700d0
mov dword [ebp - 0x9ec], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x7b4]
push ecx
mov ecx, 0x102b56c8
call fcn.10085630
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbd8]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x9e4], eax
lea edx, [ebp - 0x9e4]
push edx
mov ecx, 0x10361000
call fcn.10083c60
mov eax, dword [eax]
mov dword [ebp - 0x9e8], eax
push 0x1010f7d0
mov ecx, dword [ebp - 0x9e8]
push ecx
mov ecx, dword [ebp - 0x9ec]
call fcn.1011a290
lea ecx, [ebp - 0x7b4]
call fcn.10073110
nop
mov ecx, 0x1035a9b8
call fcn.100700d0
mov dword [ebp - 0x9f8], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x7cc]
push edx
mov ecx, 0x102b56e8
call fcn.101236c0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbdc]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x9f0], eax
lea eax, [ebp - 0x9f0]
push eax
mov ecx, 0x10361000
call fcn.10083c60
mov ecx, dword [eax]
mov dword [ebp - 0x9f4], ecx
push 0x10111d80
mov edx, dword [ebp - 0x9f4]
push edx
mov ecx, dword [ebp - 0x9f8]
call fcn.1011a290
lea ecx, [ebp - 0x7cc]
call fcn.10073110
nop
mov ecx, 0x1035a9ec
call fcn.100700d0
mov dword [ebp - 0xa04], eax
push ecx
mov esi, esp
lea eax, [ebp - 0x34]
push eax
mov ecx, 0x102b5708
call fcn.10085630
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbe0]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0x9fc], eax
lea ecx, [ebp - 0x9fc]
push ecx
mov ecx, 0x10361000
call fcn.10083c60
mov edx, dword [eax]
mov dword [ebp - 0xa00], edx
push 0x10111320
mov eax, dword [ebp - 0xa00]
push eax
mov ecx, dword [ebp - 0xa04]
call fcn.1011a290
lea ecx, [ebp - 0x34]
call fcn.10073110
nop
mov ecx, 0x1035a9ec
call fcn.100700d0
mov dword [ebp - 0xa10], eax
push ecx
mov esi, esp
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, 0x102b5728
call fcn.10124b00
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbe4]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xa08], eax
lea edx, [ebp - 0xa08]
push edx
mov ecx, 0x10361000
call fcn.10083c60
mov eax, dword [eax]
mov dword [ebp - 0xa0c], eax
push 0x101117d0
mov ecx, dword [ebp - 0xa0c]
push ecx
mov ecx, dword [ebp - 0xa10]
call fcn.1011a290
lea ecx, [ebp - 0x4c]
call fcn.10073110
nop
mov edx, dword [ebp - 0xa14]
push edx
push 0x1010f100
mov ecx, 0x10359830
call fcn.1011c440
mov eax, dword [ebp - 0xa18]
push eax
push 0x1010f0e0
mov ecx, 0x10359830
call fcn.1011c440
mov ecx, dword [ebp - 0xa1c]
push ecx
push 0x1010f010
mov ecx, 0x10359830
call fcn.1011c440
mov edx, dword [ebp - 0xa20]
push edx
push 0x1010ec80
mov ecx, 0x10359830
call fcn.1011c440
mov eax, dword [ebp - 0xa24]
push eax
push 0x1010f540
mov ecx, 0x10359830
call fcn.1011c440
mov ecx, dword [ebp - 0xa28]
push ecx
push 0x1010f700
mov ecx, 0x10359830
call fcn.1011c440
mov edx, dword [ebp - 0xa2c]
push edx
push 0x1010ed90
mov ecx, 0x10359830
call fcn.1011c440
mov eax, dword [ebp - 0xa30]
push eax
push 0x10115380
mov ecx, 0x10359830
call fcn.1011c440
mov ecx, dword [ebp - 0xa34]
push ecx
push 0x101159c0
mov ecx, 0x10359830
call fcn.1011c440
mov edx, dword [ebp - 0xa38]
push edx
push 0x1010f450
mov ecx, 0x10359830
call fcn.1011c440
mov ecx, 0x10359830
call fcn.101226a0
nop
mov eax, dword [0x1035a980]
cmp dword [eax + 0x68], 0
je 0x1010b1f4
push 0x10111910
push 0xfffffffffffffffc
mov ecx, dword [0x1035a980]
mov edx, dword [ecx + 0x68]
push edx
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [ebp - 0xa3c], eax
mov eax, dword [0x1035a980]
mov ecx, dword [ebp - 0xa3c]
mov dword [eax + 0x6c], ecx
mov edx, dword [0x1035a980]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0xa50], eax
lea ecx, [ebp - 0x7c]
push ecx
mov ecx, 0x102b4df0
call fcn.10124080
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0xa48], eax
push ecx
mov esi, esp
lea edx, [ebp - 0x1fc]
push edx
mov ecx, 0x102a3364
call fcn.100790e0
mov ecx, eax
call fcn.100737d0
push eax
mov ecx, esi
call fcn.100776f0
lea ecx, [ebp - 0xbe8]
call fcn.10077730
mov ecx, eax
call fcn.100700d0
mov dword [ebp - 0xa40], eax
lea eax, [ebp - 0xa40]
push eax
mov ecx, 0x10361008
call fcn.10077a60
mov dword [ebp - 0xa44], eax
lea ecx, [ebp - 0x64]
push ecx
mov ecx, dword [ebp - 0xa44]
call fcn.10077dd0
mov ecx, eax
call fcn.100737d0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xa4c], eax
mov edx, dword [ebp - 0xa48]
push edx
mov eax, dword [ebp - 0xa4c]
push eax
call dword [ebp - 0xa50]
add esp, 8
add eax, 1
mov dword [ebp - 0x7d0], eax
lea ecx, [ebp - 0x64]
call fcn.10073110
lea ecx, [ebp - 0x1fc]
call fcn.10073110
lea ecx, [ebp - 0x7c]
call fcn.10073110
nop
mov dword [ebp - 0xa54], 0x11
mov dword [ebp - 0x7d4], 0
lea ecx, [ebp - 0x7d4]
push ecx
push 0x40
push 4
mov edx, dword [ebp - 0x7d0]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [ebp - 0x7d0]
mov ecx, dword [ebp - 0xa54]
mov dword [eax], ecx
lea edx, [ebp - 0x7d4]
push edx
mov eax, dword [ebp - 0x7d4]
push eax
push 4
mov ecx, dword [ebp - 0x7d0]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
call fcn.101141c0
nop
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.102390e8
mov esp, ebp
pop ebp
ret