Function at 0x10017e11
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1380
call fcn.10035f70
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
push ebx
push esi
lea edx, [eax + 0x1d88]
mov esi, eax
push edi
mov dword [ebp - 0x80], esi
mov dword [ebp - 0xc0], edx
cmp eax, edx
ja case.0x100181ca.32487
mov ebx, dword [ebp - 0x7c]
jmp 0x10016d87
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x30]
mov edi, dword [ebp - 0x28]
cmp esi, 0x79fb
ja 0x100178f9
je 0x100178d0
cmp esi, 0x6753
ja 0x100174d2
je 0x100174b0
cmp esi, 0x3293
ja 0x10017194
je 0x1001713a
cmp esi, 0x1e10
ja 0x100170bb
je case.0x100181ca.32487
mov eax, esi
sub eax, 0x1d98
je 0x10017095
sub eax, 0x3c
jne case.0x10017735.30988
mov edi, 0xa78
mov dword [ebp - 0x34], edi
cmp edi, 0xb06
ja 0x10016ecc
je 0x10016e80
mov eax, edi
sub eax, 0xa78
je 0x10016e63
sub eax, 0x47
jne 0x1001707a
mov eax, dword [ebp - 0x94]
push 0x92f
lea ecx, [ebp - 0xa4b]
add eax, 0x830
push 0
push ecx
mov dword [ebp - 0x98], eax
mov byte [ebp - 0xa4c], 0
call fcn.1002f460
add esp, 0xc
lea edx, [ebp - 0x137c]
push edx
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa4c]
push ecx
call fcn.10029fc0
add esp, 0xc
jmp 0x1001707a
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 0xbc]
mov dword [ebp - 0x94], eax
add eax, 0x18
mov dword [ebp - 0xd0], eax
jmp 0x1001707a
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ebp + 0x10]
call fcn.10008120
test al, al
jne 0x1001707a
mov ecx, 0x337a
jmp 0x10016ea0
mov eax, ecx
sub eax, 0x337a
je 0x10016eb8
sub eax, 0x54
jne 0x10016ebc
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [ebp - 8], 0
add ecx, 0x54
cmp ecx, 0x33ce
jbe 0x10016ea0
jmp 0x1001707a
mov eax, edi
sub eax, 0xb4d
je 0x1001704e
sub eax, 0x47
jne 0x1001707a
cmp dword [ebp - 0xcc], eax
jne 0x1001707a
mov ecx, dword [ebp - 0x98]
mov ebx, 0x5ed2
mov eax, ebx
sub eax, 0x5ed2
je 0x1001701b
sub eax, 0x47
jne 0x1001703a
cmp byte [ecx], 2
jne 0x1001703a
cmp byte [ecx + 0x58], 0x25
jne 0x1001703a
cmp byte [ecx + 0x59], 0x2f
jne 0x1001703a
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp + 0x18]
mov esi, 0xf5
lea ebx, [ebx]
mov eax, esi
sub eax, 0xf5
je 0x10016f71
sub eax, 0x5a
je 0x10017014
sub eax, 0x5a
jne 0x10016fa0
mov al, byte [ecx + 0x16]
test al, al
je 0x10016fa0
movzx eax, al
push eax
push str.Found_Extension:_Joliet_Level__d
call fcn.1001dd70
add esp, 8
jmp 0x10016f97
mov eax, dword [ebp - 0x98]
movsx eax, byte [eax + 0x5a]
sub eax, 0x40
je 0x10016fb0
sub eax, 3
je 0x10016fc3
sub eax, 2
je 0x10016fd6
push str.Supplementary_Volume_Descriptor_found__but_not_Joliet
call fcn.1001dd70
add esp, 4
mov edx, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x94]
add esi, 0x5a
cmp esi, 0x1a9
jbe 0x10016f40
jmp 0x10017031
mov eax, 0x691a
cmp eax, eax
je 0x10016feb
add eax, 0x42
cmp eax, 0x691a
jbe 0x10016fb7
mov eax, 0x1825
cmp eax, eax
je 0x10016ffb
add eax, 0x43
cmp eax, 0x1825
jbe 0x10016fca
mov eax, 0x2004
cmp eax, eax
je 0x1001700b
add eax, 0x31
cmp eax, 0x2004
jbe 0x10016fdd
jmp 0x10016f8a
test byte [edx], 1
je 0x10017014
mov byte [ecx + 0x16], 1
mov esi, 0x14f
jmp 0x10016fa0
test byte [edx], 2
je 0x10017014
mov byte [ecx + 0x16], 2
mov esi, 0x14f
jmp 0x10016fa0
test byte [edx], 4
je 0x10017014
mov byte [ecx + 0x16], 3
mov esi, 0x14f
jmp 0x10016fa0
mov edi, dword [ebp - 0x98]
mov ecx, 0x206
lea esi, [ebp - 0x137c]
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x98]
add ebx, 0x47
cmp ebx, 0x5f19
jbe 0x10016ef9
mov ebx, dword [ebp - 0x7c]
jmp 0x1001707a
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x94]
push 1
push 0x800
push 0x11
lea edx, [ebp - 0x137c]
push edx
push eax
mov byte [ecx + 0x16], 0
call fcn.10005270
add esp, 0x14
mov dword [ebp - 0xcc], eax
add edi, 0x47
mov dword [ebp - 0x34], edi
cmp edi, 0xb94
jbe 0x10016df3
mov byte [ebp - 8], 1
jmp case.0x10017735.30988
cmp dword [ebp + 0x10], 0
jne case.0x10017735.30988
mov eax, 0x340f
cmp eax, eax
je 0x10018260
add eax, 0x23
cmp eax, 0x340f
jbe 0x100170a6
jmp case.0x10017735.30988
mov eax, esi
sub eax, 0x321b
je 0x100170db
sub eax, 0x3c
jne case.0x10017735.30988
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 4], eax
jmp case.0x10017735.30988
mov eax, dword [ebp + 0x10]
cmp dword [eax + 0x1c], 0
ja 0x10017126
jb 0x100170ec
cmp dword [eax + 0x18], 0
ja 0x10017126
mov esi, 0x45bd
mov eax, esi
sub eax, 0x45bd
je 0x10017113
sub eax, 0x4f
je 0x1001710a
sub eax, 0x4f
je case.0x100181ca.32487
jmp 0x1001711b
mov dword [ebp - 8], 0
jmp 0x1001711b
mov eax, dword [ebp + 0x10]
call fcn.10027600
add esi, 0x4f
cmp esi, 0x465b
jbe 0x100170f1
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 8]
mov esi, dword [ebp - 0x80]
mov dword [ebp - 0xa0], eax
jmp case.0x10017735.30988
mov ecx, dword [ebp + 0x10]
cmp dword [ecx + 0x24], 0
je case.0x10017735.30988
mov edx, dword [ebp - 0xc4]
mov edi, dword [ebp + 0x10]
mov ecx, 0x329b
mov eax, ecx
sub eax, 0x329b
je 0x10017168
sub eax, 0x28
jne 0x1001717e
add dword [edi + 0x24], edx
jmp 0x1001717e
mov eax, dword [edi + 0x24]
movzx edx, word [eax + 0x28]
movzx eax, byte [eax + 0x13]
lea edx, [edx + eax + 0x2f]
shr edx, 2
add edx, edx
add edx, edx
add ecx, 0x28
cmp ecx, 0x32c3
jbe 0x10017155
mov dword [ebp - 0xc4], edx
jmp case.0x10017735.30988
cmp esi, 0x3347
ja 0x10017491
je 0x10017450
mov eax, esi
sub eax, 0x32cf
je 0x1001738f
sub eax, 0x3c
jne case.0x10017735.30988
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 0x24]
test eax, eax
je 0x10017380
push 0x101
call fcn.10011d30
add esp, 4
test eax, eax
jne 0x10017380
mov edx, dword [ebp - 0xb4]
mov edi, dword [ebp + 0x10]
mov ecx, 0x691a
mov dword [ebp - 0x34], ecx
cmp ecx, 0x69c2
ja 0x1001734b
je 0x10017249
mov eax, ecx
sub eax, 0x691a
je 0x10017228
sub eax, 0x54
jne 0x10017362
sub dword [edi + 0x18], edx
sbb dword [edi + 0x1c], eax
mov eax, dword [edi + 0x24]
mov al, byte [eax + 0x12]
shr al, 1
and al, 1
mov byte [edi + 4], al
jmp 0x10017362
mov eax, dword [edi + 0x24]
movzx edx, word [eax + 0x28]
movzx eax, byte [eax + 0x13]
lea edx, [edx + eax + 0x2f]
shr edx, 2
add edx, edx
add edx, edx
mov dword [ebp - 0xb4], edx
jmp 0x10017362
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x24]
mov dl, byte [ecx + 0x12]
shr dl, 3
and dl, 1
mov byte [eax + 5], dl
mov ebx, 0x3791
xor edi, edi
cmp edi, 0x7c
ja case.0x10017272.1
movzx eax, byte [edi + 0x100182a8]
jmp dword [eax*4 + 0x10018290]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x24]
mov edx, dword [ecx + 0x18]
mov ecx, dword [ebp - 0xa0]
add edx, dword [ecx + 0x218]
push 1
push edx
lea edx, [eax + 0x28]
call fcn.10020e90
add esp, 8
test eax, eax
je case.0x10017272.1
mov esi, 0x5493
mov eax, esi
sub eax, 0x5493
je 0x100172bd
sub eax, 0x29
je case.0x100181ca.32487
jmp 0x100172cc
mov eax, dword [ebp + 0x10]
call fcn.10027600
mov dword [ebp - 8], 0
add esi, 0x29
cmp esi, 0x54bc
jbe 0x100172a9
jmp case.0x10017272.1
mov esi, dword [ebp + 0x10]
mov eax, dword [esi + 0x24]
movzx ecx, word [eax + 0x28]
mov edx, dword [ebp - 0xbc]
lea eax, [ecx + eax + 0x2a]
push edx
call fcn.10008e70
add esp, 4
mov dword [esi], eax
jmp case.0x10017272.1
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x24]
movzx edx, byte [ecx + 0x13]
mov dword [ebp - 0xbc], edx
jmp case.0x10017272.1
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
push ecx
call fcn.1002b00c
add esp, 4
jmp case.0x10017272.1
mov edx, dword [ebp + 0x10]
mov dword [edx], 0
add ebx, 0x1f
add edi, 0x1f
cmp ebx, 0x380d
jbe 0x10017262
mov ecx, dword [ebp - 0x34]
mov ebx, dword [ebp - 0x7c]
mov esi, dword [ebp - 0x80]
mov edx, dword [ebp - 0xb4]
mov edi, dword [ebp + 0x10]
jmp 0x10017362
mov eax, ecx
sub eax, 0x6a16
je 0x1001735f
sub eax, 0x54
je case.0x100181ca.32487
jmp 0x10017362
mov dword [ebp - 8], edi
add ecx, 0x54
mov dword [ebp - 0x34], ecx
cmp ecx, 0x6a6a
jbe 0x100171f0
mov eax, edi
call fcn.10027600
jmp case.0x10017735.30988
mov edi, dword [ebp + 0x10]
mov eax, edi
call fcn.10027600
jmp case.0x10017735.30988
mov eax, dword [ebp + 0x10]
cmp dword [eax + 0x24], 0
jne case.0x10017735.30988
mov ecx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xd4]
mov ebx, dword [ebp + 0x10]
xor esi, esi
lea edi, [esi + 4]
cmp esi, 0x69
ja case.0x100173c0.1
movzx edx, byte [esi + 0x1001833c]
jmp dword [edx*4 + 0x10018328]
cmp dword [ebx + 0x20], 0
jne 0x100173df
mov eax, dword [ebp - 0xd8]
push eax
call fcn.1002b086
add esp, 4
mov dword [ebx + 0x20], eax
mov edx, dword [ebx + 0x10]
mov ecx, dword [ebp - 0xa4]
add edx, dword [ebx + 0xc]
push ecx
mov ecx, dword [ebp - 0xa0]
push edx
mov edx, dword [ebx + 0x20]
call fcn.10020e90
mov ecx, dword [ebp - 0xa4]
add esp, 8
jmp case.0x100173c0.1
mov edx, ecx
shl edx, 0xb
mov dword [ebp - 0xd8], edx
jmp case.0x100173c0.1
test eax, eax
jne 0x1001741f
mov edx, dword [ebx + 0x20]
mov dword [ebx + 0x24], edx
jmp case.0x100173c0.1
mov dword [ebx + 0x24], 0
jmp case.0x100173c0.1
mov ecx, dword [ebx + 0x14]
sub ecx, dword [ebx + 0x10]
inc ecx
mov dword [ebp - 0xa4], ecx
add esi, 0x23
dec edi
jne 0x100173b0
mov ebx, dword [ebp - 0x7c]
mov esi, dword [ebp - 0x80]
mov dword [ebp - 0xd4], eax
jmp case.0x10017735.30988
mov ecx, 0x74f0
mov eax, ecx
sub eax, 0x74f0
je 0x10017469
sub eax, 0xd
je case.0x100181ca.32487
jmp 0x10017470
mov dword [ebp - 8], 0
add ecx, 0xd
cmp ecx, 0x74fd
jbe 0x10017455
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x18], eax
jbe case.0x10017735.30988
mov ecx, eax
mov dword [ebp - 0x18], ecx
jmp case.0x10017735.30988
cmp esi, 0x6717
jne case.0x10017735.30988
xor eax, eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
jmp case.0x10017735.30988
mov eax, dword [ebp + 0x10]
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0xac], eax
jmp case.0x10017735.30988
cmp esi, 0x78cf
ja 0x1001771d
je 0x1001760d
cmp esi, 0x6807
ja 0x100175de
je 0x100175d0
mov eax, esi
sub eax, 0x678f
je 0x100175a7
sub eax, 0x3c
jne case.0x10017735.30988
mov edi, dword [ebp - 0xac]
push 2
push edi
call fcn.1002b046
mov ecx, eax
add esp, 8
mov dword [ebp - 0xa8], ecx
test ecx, ecx
jne 0x10017540
mov eax, 0x3068
cmp eax, eax
je 0x1001826e
add eax, 0x2a
cmp eax, 0x3068
jbe 0x10017530
push edi
push ecx
mov ecx, dword [ebp + 0x10]
push 0xffffffffffffffff
push ecx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, edi
je case.0x10017735.30988
mov edi, dword [ebp - 0xa8]
mov esi, 0x6c96
jmp 0x10017570
mov eax, esi
sub eax, 0x6c96
je 0x10017584
sub eax, 0x32
je case.0x100181ca.32487
jmp 0x10017594
push edi
call fcn.1002b00c
add esp, 4
mov dword [ebp - 8], 0
add esi, 0x32
cmp esi, 0x6cc8
jbe 0x10017570
mov esi, dword [ebp - 0x80]
jmp case.0x10017735.30988
cmp dword [ebp - 0xac], 1
jg case.0x10017735.30988
mov eax, 0x7e12
cmp eax, eax
je 0x1001826e
add eax, 9
cmp eax, 0x7e12
jbe 0x100175bb
jmp case.0x10017735.30988
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 8], edx
jmp case.0x10017735.30988
cmp esi, 0x6843
je case.0x100181ca.32487
cmp esi, 0x7893
jne case.0x10017735.30988
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x84], ecx
jmp case.0x10017735.30988
push 0x10047f00
lea eax, [ebp - 0x36]
push eax
lea ecx, [ebp - 0x74]
xor edx, edx
push ecx
mov dword [ebp - 0x74], 0x40003
mov dword [ebp - 0x70], 0x60005
mov dword [ebp - 0x6c], 0x80007
mov dword [ebp - 0x68], 0xa0009
mov dword [ebp - 0x64], 0xd000b
mov dword [ebp - 0x60], 0x11000f
mov dword [ebp - 0x5c], 0x170013
mov dword [ebp - 0x58], 0x1f001b
mov dword [ebp - 0x54], 0x2b0023
mov dword [ebp - 0x50], 0x3b0033
mov dword [ebp - 0x4c], 0x530043
mov dword [ebp - 0x48], 0x730063
mov dword [ebp - 0x44], 0xa30083
mov dword [ebp - 0x40], 0xe300c3
mov dword [ebp - 0x3c], 0x102
mov word [ebp - 0x38], dx
call fcn.1002a000
add esp, 0xc
push 0x10047ec0
lea eax, [ebp - 0x36]
push eax
lea ecx, [ebp - 0x74]
mov edx, 0x44
push ecx
mov dword [ebp - 0x74], 0x100010
mov dword [ebp - 0x70], 0x100010
mov dword [ebp - 0x6c], 0x100010
mov dword [ebp - 0x68], 0x100010
mov dword [ebp - 0x64], 0x110011
mov dword [ebp - 0x60], 0x110011
mov dword [ebp - 0x5c], 0x120012
mov dword [ebp - 0x58], 0x120012
mov dword [ebp - 0x54], 0x130013
mov dword [ebp - 0x50], 0x130013
mov dword [ebp - 0x4c], 0x140014
mov dword [ebp - 0x48], 0x140014
mov dword [ebp - 0x44], 0x150015
mov dword [ebp - 0x40], 0x150015
mov dword [ebp - 0x3c], 0x4e0010
mov word [ebp - 0x38], dx
call fcn.1002a000
add esp, 0xc
jmp case.0x10017735.30988
lea eax, [esi - 0x790b]
cmp eax, 0xb4
ja case.0x10017735.30988
movzx edx, byte [eax + 0x100183bc]
jmp dword [edx*4 + 0x100183a8]
xor eax, eax
movzx ecx, ax
mov eax, ecx
shl ecx, 0x10
or eax, ecx
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x10], 0x10
jmp case.0x10017735.30988
push 0x10047e80
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x74]
push edx
mov dword [ebp - 0x74], 0x100010
mov dword [ebp - 0x70], 0x100010
mov dword [ebp - 0x6c], 0x110011
mov dword [ebp - 0x68], 0x120012
mov dword [ebp - 0x64], 0x130013
mov dword [ebp - 0x60], 0x140014
mov dword [ebp - 0x5c], 0x150015
mov dword [ebp - 0x58], 0x160016
mov dword [ebp - 0x54], 0x170017
mov dword [ebp - 0x50], 0x180018
mov dword [ebp - 0x4c], 0x190019
mov dword [ebp - 0x48], 0x1a001a
mov dword [ebp - 0x44], 0x1b001b
mov dword [ebp - 0x40], 0x1c001c
mov dword [ebp - 0x3c], 0x1d001d
mov dword [ebp - 0x38], 0x400040
call fcn.1002a000
add esp, 0xc
jmp case.0x10017735.30988
xor eax, eax
push 0x10047e40
lea edx, [ebp - 0x34]
mov dword [ebp - 0x38], eax
push edx
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x74], 0x20001
mov dword [ebp - 0x70], 0x40003
mov dword [ebp - 0x6c], 0x70005
mov dword [ebp - 0x68], 0xd0009
mov dword [ebp - 0x64], 0x190011
mov dword [ebp - 0x60], 0x310021
mov dword [ebp - 0x5c], 0x610041
mov dword [ebp - 0x58], 0xc10081
mov dword [ebp - 0x54], 0x1810101
mov dword [ebp - 0x50], 0x3010201
mov dword [ebp - 0x4c], 0x6010401
mov dword [ebp - 0x48], 0xc010801
mov dword [ebp - 0x44], 0x18011001
mov dword [ebp - 0x40], 0x30012001
mov dword [ebp - 0x3c], 0x60014001
call fcn.1002a000
add esp, 0xc
jmp case.0x10017735.30988
mov ecx, dword [ebp + 0x1c]
mov ecx, dword [ecx]
xor edx, edx
mov dword [ebp - 0x2c], edx
test ecx, ecx
je case.0x10017735.30988
mov edi, dword [ebp + 0x18]
jmp 0x100178b0
movzx eax, word [edi + edx*2]
inc word [ebp + eax*2 - 0xf8]
lea eax, [ebp + eax*2 - 0xf8]
inc edx
cmp edx, ecx
jb 0x100178b0
mov dword [ebp - 0x2c], edx
jmp case.0x10017735.30988
mov edx, dword [ebp + 0x20]
mov eax, dword [edx]
mov dword [ebp - 0x18], eax
mov eax, 0xf
lea ecx, [ecx]
cmp word [ebp + eax*2 - 0xf8], 0
jne 0x10017956
dec eax
cmp eax, 1
jae 0x100178e0
mov dword [ebp - 0x14], eax
jmp case.0x10017735.30988
cmp esi, 0x7c8f
ja 0x10017d1c
je 0x10017d07
cmp esi, 0x7b63
ja 0x10017ab0
je 0x10017a0b
lea eax, [esi - 0x7a37]
cmp eax, 0xf0
ja case.0x10017735.30988
movzx edx, byte [eax + 0x1001848c]
jmp dword [edx*4 + 0x10018474]
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x18], eax
jae 0x1001794a
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], 1
jmp case.0x10017735.30988
mov dword [ebp - 0x14], eax
mov esi, 0x7a37
jmp case.0x10017735.30988
cmp dword [ebp - 0x14], 0
jne 0x100179c7
xor eax, eax
cmp eax, 0xe4
ja case.0x10017979.1
movzx edx, byte [eax + 0x10018598]
jmp dword [edx*4 + 0x10018580]
mov word [ebp - 0xc], 0x140
jmp case.0x10017979.1
xor edx, edx
mov word [ebp - 0xa], dx
mov edx, dword [ecx]
mov edi, dword [ebp - 0xc]
mov dword [edx], edi
add dword [ecx], 4
jmp case.0x10017979.1
mov dword [ebp - 8], 0
jmp case.0x10017979.1
mov edx, dword [ecx]
mov edi, dword [ebp - 0xc]
mov dword [edx], edi
mov edx, dword [ebp + 0x20]
add dword [ecx], 4
mov dword [edx], 1
add eax, 0x39
lea edx, [eax + 0x1579]
cmp edx, 0x165d
jbe 0x1001796b
mov eax, 1
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x14], eax
jbe case.0x10017735.30988
mov ecx, dword [ebp - 0x14]
mov edi, edi
cmp word [ebp + eax*2 - 0xf8], 0
jne 0x100179fb
inc eax
cmp eax, ecx
jb 0x100179e0
mov dword [ebp - 0x88], eax
jmp case.0x10017735.30988
mov dword [ebp - 0x88], eax
mov esi, 0x7aeb
jmp case.0x10017735.30988
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 1
mov edi, dword [ebp - 0x10]
jmp 0x10017a20
mov ecx, 0x7e24
mov eax, ecx
sub eax, 0x7e24
je 0x10017a61
sub eax, 0x4c
je 0x10017a55
sub eax, 0x4c
jne 0x10017a66
test edx, edx
jns 0x10017a66
mov eax, 0x3a13
cmp eax, eax
je 0x10018277
add eax, 0x56
cmp eax, 0x3a13
jbe 0x10017a43
jmp 0x10017a66
movzx eax, word [ebp + edi*2 - 0xf8]
sub edx, eax
jmp 0x10017a63
add edx, edx
mov dword [ebp - 0x1c], edx
add ecx, 0x4c
cmp ecx, 0x7ebc
jbe 0x10017a25
inc edi
mov dword [ebp - 0x10], edi
cmp edi, 0xf
jbe 0x10017a20
test edx, edx
jle case.0x10017735.30988
mov ecx, dword [ebp + 0x10]
cmp dword [ecx], 0
je 0x10017a94
cmp dword [ebp - 0x14], 1
je case.0x10017735.30988
mov eax, 0x16b3
cmp eax, eax
je 0x10018277
add eax, 0x39
cmp eax, 0x16b3
jbe 0x10017a9b
jmp case.0x10017735.30988
lea eax, [esi - 0x7b9f]
cmp eax, 0xb4
ja case.0x10017735.30988
movzx edx, byte [eax + 0x10018694]
jmp dword [edx*4 + 0x10018680]
mov eax, dword [ebp + 0x1c]
xor edx, edx
mov dword [ebp - 0x2c], edx
cmp dword [eax], edx
jbe case.0x10017735.30988
mov edi, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
cmp word [edi + edx*2], 0
je 0x10017b0f
movzx eax, word [edi + edx*2]
movzx eax, word [ebp + eax*2 - 0x118]
mov word [ecx + eax*2], dx
movzx eax, word [edi + edx*2]
inc word [ebp + eax*2 - 0x118]
lea eax, [ebp + eax*2 - 0x118]
mov eax, dword [ebp + 0x1c]
inc edx
cmp edx, dword [eax]
jb 0x10017ae5
mov dword [ebp - 0x2c], edx
jmp case.0x10017735.30988
xor ecx, ecx
mov word [ebp - 0x116], cx
mov eax, 1
lea ecx, [ecx]
mov dx, word [ebp + eax*2 - 0x118]
add dx, word [ebp + eax*2 - 0xf8]
inc eax
mov word [ebp + eax*2 - 0x118], dx
cmp eax, 0xf
jb 0x10017b30
mov dword [ebp - 0x10], eax
jmp case.0x10017735.30988
mov dword [ebp - 0x20], 0
jmp case.0x10017735.30988
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
sub eax, 0
je 0x10017bb1
dec eax
jne 0x10017cbf
mov edi, 0x526c
jmp 0x10017b80
cmp edi, 0x536c
ja 0x10017c5a
je 0x10017c4b
lea eax, [edi - 0x526c]
cmp eax, 0xc0
ja case.0x10017baa.21101
movzx ecx, byte [eax + 0x10018760]
jmp dword [ecx*4 + 0x1001874c]
mov edx, dword [ebp + 0x14]
mov ecx, 0x885
lea esp, [esp]
mov eax, ecx
sub eax, 0x885
je 0x10017be2
sub eax, 0x48
jne 0x10017bee
mov dword [ebp - 0xb0], 0x13
mov esi, 0x7c17
jmp case.0x10017735.30988
mov dword [ebp - 0x84], edx
mov dword [ebp - 0x8c], edx
add ecx, 0x48
cmp ecx, 0x8cd
jbe 0x10017bc0
jmp 0x10017b73
push 0x208
push 0x40
mov dword [ebp - 0x84], 0x10047ec0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0xb8], eax
jmp case.0x10017baa.21101
sub dword [ebp - 0x84], 0x202
jmp case.0x10017baa.21101
sub dword [ebp - 0x8c], 0x202
mov byte [ebp + 0xb], 1
jmp case.0x10017baa.21101
mov dword [ebp - 0x8c], 0x10047f00
jmp case.0x10017baa.21101
cmp dword [ebp - 0xb8], 0
jne case.0x10017baa.21101
mov byte [ebp + 0xb], 0
jmp case.0x10017baa.21101
mov eax, edi
sub eax, 0x53ac
je 0x10017ca6
sub eax, 0x40
je 0x10017c73
sub eax, 0x40
je 0x10017cfd
jmp case.0x10017baa.21101
cmp byte [ebp + 0xb], 0
je case.0x10017baa.21101
mov ebx, dword [ebp - 0xb8]
mov esi, 0x139e
cmp esi, esi
jne 0x10017c96
push ebx
call dword [sym.imp.KERNEL32.dll_LocalLock]
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
add esi, 0xb
cmp esi, 0x139e
jbe 0x10017c86
mov ebx, dword [ebp - 0x7c]
jmp case.0x10017baa.21101
mov dword [ebp - 0xb0], 0x100
add edi, 0x40
cmp edi, 0x542c
jbe 0x10017b80
mov ecx, 0x58ef
mov eax, ecx
sub eax, 0x58ef
je 0x10017ce8
sub eax, 0x62
jne 0x10017cf2
mov dword [ebp - 0x84], 0x10047e80
mov dword [ebp - 0xb0], 0xffffffff
jmp 0x10017cf2
mov dword [ebp - 0x8c], 0x10047e40
add ecx, 0x62
cmp ecx, 0x5951
jbe 0x10017cc4
mov esi, 0x7c17
jmp case.0x10017735.30988
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x10], edx
jmp case.0x10017735.30988
cmp esi, 0x7df7
ja 0x100181b2
je 0x10017de0
lea eax, [esi - 0x7ccb]
cmp eax, 0xf0
ja case.0x10017735.30988
movzx eax, byte [eax + 0x1001883c]
jmp dword [eax*4 + 0x10018824]
mov dword [ebp - 0x24], 0
jmp case.0x10017735.30988
mov ecx, dword [ebp - 0x18]
mov eax, 1
shl eax, cl
mov dword [ebp - 0x78], eax
dec eax
mov dword [ebp - 0xc8], eax
jmp case.0x10017735.30988
mov dword [ebp - 0x9c], 0xffffffff
jmp case.0x10017735.30988
mov ecx, dword [ecx]
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x7c], ebx
jmp case.0x10017735.30988
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
cmp eax, 1
jne 0x10017da7
cmp dword [ebp - 0x78], 0x354
jae 0x10017dbd
cmp eax, 2
jne case.0x10017735.30988
cmp dword [ebp - 0x78], 0x250
jb case.0x10017735.30988
mov eax, 0x3eca
cmp eax, eax
je 0x10018281
add eax, 0x4e
cmp eax, 0x3eca
jbe 0x10017dc4
jmp case.0x10017735.30988
mov eax, 0x6240
mov dword [ebp - 0x34], eax
jmp 0x10017df0
mov esi, dword [ebp - 0x20]
add eax, 0xffff9dc0
cmp eax, 0xee
ja case.0x10017e0a.25153
movzx eax, byte [eax + 0x10018954]
jmp dword [eax*4 + 0x10018930]
mov eax, dword [ebp - 0x10]
inc dword [ebp - 0x2c]
lea eax, [ebp + eax*2 - 0xf8]
mov ecx, 0xffff
add word [eax], cx
jne case.0x10017e0a.25153
mov eax, 0x542d
cmp eax, eax
jne 0x10017e55
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x14]
je case.0x100181ca.32307
mov esi, dword [ebp - 0x2c]
mov ecx, dword [ebp + 0x14]
movzx ecx, word [ecx + esi*2]
mov esi, dword [ebp + 0x18]
movzx ecx, word [esi + ecx*2]
mov dword [ebp - 0x10], ecx
add eax, 9
cmp eax, 0x542d
jbe 0x10017e33
jmp case.0x10017e0a.25153
test edi, edi
je 0x10017e8a
mov eax, 0x60a2
cmp eax, eax
jne 0x10017e78
lea ecx, [edi - 1]
and esi, ecx
add esi, edi
add eax, 0x5a
cmp eax, 0x60a2
jbe 0x10017e6f
mov dword [ebp - 0x20], esi
jmp case.0x10017e0a.25153
mov dword [ebp - 0x20], 0
jmp case.0x10017e0a.25153
mov dl, byte [ebp - 0x10]
sub dl, byte [ebp - 0x24]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x2c]
mov byte [ebp - 0xb], dl
movzx edx, word [eax + ecx*2]
mov eax, dword [ebp - 0xb0]
mov ecx, edx
cmp ecx, eax
jge 0x10017eee
mov ecx, 0x4f26
lea ebx, [ebx]
mov eax, ecx
sub eax, 0x4f26
je 0x10017ed4
sub eax, 0x26
jne 0x10017ed8
mov word [ebp - 0xa], dx
jmp 0x10017ed8
mov byte [ebp - 0xc], 0
add ecx, 0x26
cmp ecx, 0x4f4c
jbe 0x10017ec0
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 0x30]
jmp case.0x10017e0a.25153
jle 0x10017f35
mov edx, 0x1a7a
mov eax, edx
sub eax, 0x1a7a
je 0x10017f13
sub eax, 0xd
jne 0x10017f1f
mov eax, dword [ebp - 0x8c]
mov ax, word [eax + ecx*2]
mov word [ebp - 0xa], ax
jmp 0x10017f1f
mov eax, dword [ebp - 0x84]
mov al, byte [eax + ecx*2]
mov byte [ebp - 0xc], al
add edx, 0xd
cmp edx, 0x1a87
jbe 0x10017ef5
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 0x30]
jmp case.0x10017e0a.25153
mov eax, 0x82e
cmp eax, eax
jne 0x10017f48
xor ecx, ecx
mov byte [ebp - 0xc], 0x60
mov word [ebp - 0xa], cx
add eax, 0x52
cmp eax, 0x82e
jbe 0x10017f3c
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 0x30]
jmp case.0x10017e0a.25153
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x24]
mov edi, 1
shl edi, cl
mov edx, 1
mov ecx, ebx
shl edx, cl
mov dword [ebp - 0x30], edx
jmp 0x10018196
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x10], eax
jbe case.0x10017e0a.25153
and esi, dword [ebp - 0xc8]
cmp esi, dword [ebp - 0x9c]
je case.0x10017e0a.25153
mov edi, dword [ebp - 0x1c]
mov edx, 0x3795
mov ecx, dword [ebp + 0xc]
lea eax, [edx - 0x3795]
cmp eax, 0xd2
ja case.0x10017fbc.14230
movzx eax, byte [eax + 0x10018a68]
jmp dword [eax*4 + 0x10018a44]
mov eax, dword [ecx]
mov ecx, dword [ebp - 0x90]
mov edi, dword [ebp - 0x9c]
sub ecx, eax
sar ecx, 2
mov word [eax + edi*4 + 2], cx
mov edi, dword [ebp - 0x1c]
jmp case.0x10017fbc.14230
mov ebx, dword [ebp - 0x10]
sub ebx, dword [ebp - 0x24]
mov dword [ebp - 0x7c], ebx
jmp case.0x10017fbc.14230
mov edx, dword [ebp - 0x24]
lea eax, [ebx + edx]
cmp eax, dword [ebp - 0x14]
jae 0x1001805c
lea esp, [esp]
xor ecx, ecx
lea eax, [ebp + eax*2 - 0xf8]
lea esp, [esp]
cmp ecx, 0xc3
ja case.0x1001801f.1
movzx edx, byte [ecx + 0x10018b50]
jmp dword [edx*4 + 0x10018b3c]
inc ebx
mov dword [ebp - 0x7c], ebx
add eax, 2
jmp case.0x1001801f.1
movzx edx, word [eax]
sub edi, edx
jmp 0x1001803e
test edi, edi
jle 0x1001805c
jmp case.0x1001801f.1
add edi, edi
mov dword [ebp - 0x1c], edi
add ecx, 0x41
lea edx, [ecx + 0x59a5]
cmp edx, 0x5a68
jbe 0x10018010
mov eax, dword [ebp - 0x24]
add eax, ebx
cmp eax, dword [ebp - 0x14]
jb 0x10018000
mov edx, 0x37ef
jmp case.0x10017fbc.14230
mov ecx, dword [ecx]
mov eax, esi
mov dword [ebp - 0x9c], eax
mov byte [ecx + eax*4], bl
jmp case.0x10017fbc.14230
mov edi, 1
mov ecx, ebx
shl edi, cl
mov dword [ebp - 0x1c], edi
jmp case.0x10017fbc.14230
mov ecx, ebx
mov eax, 1
shl eax, cl
mov ecx, dword [ebp + 0x10]
add dword [ebp - 0x78], eax
mov eax, dword [ecx]
cmp eax, 1
jne 0x100180a8
cmp dword [ebp - 0x78], 0x354
jae 0x100180b6
cmp eax, 2
jne case.0x10017fbc.14230
cmp dword [ebp - 0x78], 0x250
jb case.0x10017fbc.14230
mov ecx, 0x4380
jmp 0x100180c0
mov eax, ecx
sub eax, 0x4380
je 0x100180d4
sub eax, 5
je case.0x100181ca.32487
jmp 0x100180db
mov dword [ebp - 8], 1
add ecx, 5
cmp ecx, 0x4385
jbe 0x100180c0
jmp case.0x10017fbc.14230
mov eax, dword [ecx]
mov edi, dword [ebp - 0x9c]
mov cl, byte [ebp - 0x18]
mov byte [eax + edi*4 + 1], cl
mov edi, dword [ebp - 0x1c]
jmp case.0x10017fbc.14230
cmp dword [ebp - 0x24], 0
jne 0x10018108
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x88]
lea ecx, [eax + ecx*4]
mov dword [ebp - 0x90], ecx
add edx, 0x1e
cmp edx, 0x3867
jbe 0x10017fa1
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 0x30]
jmp case.0x10017e0a.25153
mov dword [ebp - 0x88], edx
jmp case.0x10017e0a.25153
mov eax, 0x45bc
cmp eax, eax
jne 0x10018167
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
shr esi, cl
mov ecx, dword [ebp - 0x90]
sub edx, edi
mov dword [ebp - 0x30], edx
add esi, edx
mov edx, dword [ebp - 0xc]
mov dword [ecx + esi*4], edx
mov edx, dword [ebp - 0x30]
add eax, 0x46
cmp eax, 0x45bc
jbe 0x10018147
test edx, edx
jne case.0x10017e0a.25254
jmp case.0x10017e0a.25153
mov ecx, dword [ebp - 0x10]
dec ecx
mov edi, 1
shl edi, cl
mov dword [ebp - 0x28], edi
test dword [ebp - 0x20], edi
je case.0x10017e0a.25153
mov eax, dword [ebp - 0x20]
lea ecx, [ecx]
shr edi, 1
test eax, edi
jne 0x10018190
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x34]
add eax, 0x22
mov dword [ebp - 0x34], eax
cmp eax, 0x632e
ja 0x10017de0
jmp 0x10017df0
lea eax, [esi - 0x7e33]
cmp eax, 0xb4
ja case.0x10017735.30988
movzx edx, byte [eax + 0x10018c28]
jmp dword [edx*4 + 0x10018c14]
mov eax, dword [ebp - 0x78]
lea edx, [eax*4]
add dword [ecx], edx
jmp case.0x10017735.30988
cmp dword [ebp - 0x20], 0
mov esi, 0x7e33
je case.0x10017735.30988
mov ecx, 0x3604
mov eax, ecx
sub eax, 0x3604
je 0x10018224
sub eax, 0x44
je 0x10018213
sub eax, 0x44
jne 0x10018228
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0xc]
mov edi, dword [ebp - 0x90]
mov dword [edi + eax*4], edx
jmp 0x10018228
mov al, byte [ebp - 0x10]
sub al, byte [ebp - 0x24]
xor edx, edx
mov byte [ebp - 0xb], al
mov word [ebp - 0xa], dx
jmp 0x10018228
mov byte [ebp - 0xc], 0x40
add ecx, 0x44
cmp ecx, 0x368c
jbe 0x100181ef
jmp case.0x10017735.30988
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + 0x20]
mov dword [ecx], eax
mov dword [ebp - 8], 0
add esi, 0x3c
mov dword [ebp - 0x80], esi
cmp esi, dword [ebp - 0xc0]
jbe 0x10016d84
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [ebp - 8], 0
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret