Function at 0x10019ea0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1004ea68
mov eax, dword fs:[0]
push eax
sub esp, 0x678
mov eax, dword [0x1005d500]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor ebx, ebx
push ebx
push 0x10053510
lea ecx, [ebp - 0x53c]
mov dword [ebp - 0x680], eax
mov dword [ebp - 0x528], 0xf
mov dword [ebp - 0x52c], ebx
mov byte [ebp - 0x53c], bl
call fcn.100028b0
lea ecx, [ebp - 0x53c]
mov dword [ebp - 4], ebx
call fcn.1001bcd0
test al, al
jne 0x10019f31
cmp dword [ebp - 0x528], 0x10
jb 0x10019f2a
mov ecx, dword [ebp - 0x53c]
push ecx
call fcn.10032d80
add esp, 4
xor al, al
jmp 0x1001ad1e
mov dword [ebp - method.SysService.virtual_0], vtable.SysService.0
mov byte [ebp - 4], 1
push ebx
push 0x10053510
lea ecx, [ebp - 0x4b0]
mov dword [ebp - 0x49c], 0xf
mov dword [ebp - 0x4a0], ebx
mov byte [ebp - 0x4b0], bl
call fcn.100028b0
push 2
push 0x100544ec
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 2
call fcn.100028b0
push 7
mov eax, 0x100536bc
lea ecx, [ebp - 0x4b0]
call fcn.10002620
mov edx, dword [0x100a20e0]
push edx
lea eax, [ebp - 0x20]
push 0x10053b58
push eax
call fcn.100366bd
add esp, 0xc
lea ecx, [ebp - 0x670]
call fcn.100301b0
mov edi, eax
lea ecx, [ebp - 0x5c8]
mov byte [ebp - 4], 3
call fcn.100304b0
mov dword [ebp - 0x674], eax
lea esi, [ebp - 0x654]
mov byte [ebp - 4], 4
call fcn.10030020
mov esi, eax
lea ecx, [ebp - 0x61c]
push str.r1
push ecx
lea ebx, [ebp - 0x53c]
mov byte [ebp - 4], 5
call fcn.1001de00
push eax
mov eax, str.tm
lea ecx, [ebp - 0x5e4]
mov byte [ebp - 4], 6
call fcn.1000b710
add esp, 0xc
mov ecx, eax
lea edx, [ebp - 0x590]
push edx
mov eax, esi
mov byte [ebp - 4], 7
call fcn.1000d700
add esp, 4
push eax
mov eax, str.os
lea ecx, [ebp - 0x574]
mov byte [ebp - 4], 8
call fcn.1000b710
add esp, 4
mov ecx, eax
lea eax, [ebp - 0x600]
mov byte [ebp - 4], 9
push eax
mov eax, dword [ebp - 0x674]
call fcn.1000d700
add esp, 4
push eax
mov byte [ebp - 4], 0xa
mov eax, str.uid
lea ecx, [ebp - 0x638]
call fcn.1000b710
add esp, 4
mov ecx, eax
lea edx, [ebp - 0x558]
push edx
mov eax, edi
mov byte [ebp - 4], 0xb
call fcn.1000d700
add esp, 4
push eax
mov eax, str.cht
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 4], 0xc
call fcn.1000b710
add esp, 4
push eax
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x45c]
mov byte [ebp - 4], 0xd
call fcn.1000b710
add esp, 4
xor ebx, ebx
push ebx
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x4b0]
mov byte [ebp - 4], 0xe
call fcn.10002530
mov esi, 0x10
cmp dword [ebp - 0x448], esi
jb 0x1001a0e5
mov eax, dword [ebp - 0x45c]
push eax
call fcn.10032d80
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x448], edi
mov dword [ebp - 0x44c], ebx
mov byte [ebp - 0x45c], bl
cmp dword [ebp - 0x598], esi
jb 0x1001a113
mov ecx, dword [ebp - 0x5ac]
push ecx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x598], edi
mov dword [ebp - 0x59c], ebx
mov byte [ebp - 0x5ac], bl
cmp dword [ebp - 0x544], esi
jb 0x1001a13c
mov edx, dword [ebp - 0x558]
push edx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x544], edi
mov dword [ebp - 0x548], ebx
mov byte [ebp - 0x558], bl
cmp dword [ebp - 0x624], esi
jb 0x1001a165
mov eax, dword [ebp - 0x638]
push eax
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x624], edi
mov dword [ebp - 0x628], ebx
mov byte [ebp - 0x638], bl
cmp dword [ebp - 0x5ec], esi
jb 0x1001a18e
mov ecx, dword [ebp - 0x600]
push ecx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x5ec], edi
mov dword [ebp - 0x5f0], ebx
mov byte [ebp - 0x600], bl
cmp dword [ebp - 0x560], esi
jb 0x1001a1b7
mov edx, dword [ebp - 0x574]
push edx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x560], edi
mov dword [ebp - 0x564], ebx
mov byte [ebp - 0x574], bl
cmp dword [ebp - 0x57c], esi
jb 0x1001a1e0
mov eax, dword [ebp - 0x590]
push eax
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x57c], edi
mov dword [ebp - 0x580], ebx
mov byte [ebp - 0x590], bl
cmp dword [ebp - 0x5d0], esi
jb 0x1001a209
mov ecx, dword [ebp - 0x5e4]
push ecx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x5d0], edi
mov dword [ebp - 0x5d4], ebx
mov byte [ebp - 0x5e4], bl
cmp dword [ebp - 0x608], esi
jb 0x1001a232
mov edx, dword [ebp - 0x61c]
push edx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x608], edi
mov dword [ebp - 0x60c], ebx
mov byte [ebp - 0x61c], bl
cmp dword [ebp - 0x640], esi
jb 0x1001a25b
mov eax, dword [ebp - 0x654]
push eax
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x640], edi
mov dword [ebp - 0x644], ebx
mov byte [ebp - 0x654], bl
cmp dword [ebp - 0x5b4], esi
jb 0x1001a284
mov ecx, dword [ebp - 0x5c8]
push ecx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x5b4], edi
mov dword [ebp - 0x5b8], ebx
mov byte [ebp - 0x5c8], bl
cmp dword [ebp - 0x65c], esi
jb 0x1001a2ad
mov edx, dword [ebp - 0x670]
push edx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x450], ebx
mov dword [ebp - 0x44c], ebx
mov dword [ebp - 0x448], ebx
mov dword [ebp - method.CodeService.virtual_0], vtable.CodeService.0
push 0x3ff
lea eax, [ebp - 0x423]
push ebx
mov byte [ebp - 4], 0x10
push eax
mov byte [ebp - 0x424], bl
call fcn.10037e20
add esp, 0xc
push ebx
push 0x10053510
lea ecx, [ebp - 0x478]
mov dword [ebp - 0x464], edi
mov dword [ebp - 0x468], ebx
mov byte [ebp - 0x478], bl
call fcn.100028b0
push 0x2b
lea ecx, [ebp - 0x424]
push 0x100536c4
push ecx
mov byte [ebp - 4], 0x11
call fcn.10037f30
add esp, 0xc
xor eax, eax
jmp 0x1001a330
mov edx, eax
and edx, 0x8000000f
jns 0x1001a33f
dec edx
or edx, 0xfffffff0
inc edx
mov cl, byte [ebp + eax - 0x424]
sub cl, al
xor cl, byte [edx + 0x100537fc]
inc eax
mov byte [ebp + eax - 0x425], cl
cmp eax, 0x2b
jl 0x1001a330
lea eax, [ebp - 0x424]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1001a364
sub eax, edx
push eax
lea edx, [ebp - 0x424]
push edx
lea ecx, [ebp - 0x478]
call fcn.100028b0
push ebx
lea eax, [ebp - 0x4b0]
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x478]
call fcn.10002530
mov ecx, esi
lea edi, [ebp - 0x450]
call fcn.1000b440
push 0x26
lea ecx, [ebp - 0x424]
push 0x10053714
push ecx
call fcn.10037f30
add esp, 0xc
xor eax, eax
jmp 0x1001a3c0
mov edx, eax
and edx, 0x8000000f
jns 0x1001a3cf
dec edx
or edx, 0xfffffff0
inc edx
mov cl, byte [ebp + eax - 0x424]
sub cl, al
xor cl, byte [edx + 0x100537fc]
inc eax
mov byte [ebp + eax - 0x425], cl
cmp eax, 0x26
jl 0x1001a3c0
lea eax, [ebp - 0x424]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1001a3f4
sub eax, edx
push eax
lea edx, [ebp - 0x424]
push edx
lea ecx, [ebp - 0x478]
call fcn.100028b0
push ebx
lea eax, [ebp - 0x4b0]
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x478]
call fcn.10002530
mov ecx, esi
lea edi, [ebp - 0x450]
call fcn.1000b440
push 0x29
lea ecx, [ebp - 0x424]
push 0x1005375c
push ecx
call fcn.10037f30
add esp, 0xc
xor eax, eax
jmp 0x1001a450
mov edx, eax
and edx, 0x8000000f
jns 0x1001a45f
dec edx
or edx, 0xfffffff0
inc edx
mov cl, byte [ebp + eax - 0x424]
sub cl, al
xor cl, byte [edx + 0x100537fc]
inc eax
mov byte [ebp + eax - 0x425], cl
cmp eax, 0x29
jl 0x1001a450
lea eax, [ebp - 0x424]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1001a484
sub eax, edx
push eax
lea edx, [ebp - 0x424]
push edx
lea ecx, [ebp - 0x478]
call fcn.100028b0
push ebx
lea eax, [ebp - 0x4b0]
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x478]
call fcn.10002530
mov ecx, esi
lea edi, [ebp - 0x450]
call fcn.1000b440
push 0x29
lea ecx, [ebp - 0x424]
push 0x100537ac
push ecx
call fcn.10037f30
add esp, 0xc
xor eax, eax
jmp 0x1001a4e0
mov edx, eax
and edx, 0x8000000f
jns 0x1001a4ef
dec edx
or edx, 0xfffffff0
inc edx
mov cl, byte [ebp + eax - 0x424]
sub cl, al
xor cl, byte [edx + 0x100537fc]
inc eax
mov byte [ebp + eax - 0x425], cl
cmp eax, 0x29
jl 0x1001a4e0
lea eax, [ebp - 0x424]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1001a514
sub eax, edx
push eax
lea edx, [ebp - 0x424]
push edx
lea ecx, [ebp - 0x478]
call fcn.100028b0
push ebx
lea eax, [ebp - 0x4b0]
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x478]
call fcn.10002530
mov ecx, esi
lea edi, [ebp - 0x450]
call fcn.1000b440
push ebx
push 0x10053510
lea ecx, [ebp - 0x494]
mov dword [ebp - 0x480], 0xf
mov dword [ebp - 0x484], ebx
mov byte [ebp - 0x494], bl
call fcn.100028b0
lea ecx, [ebp - 0x494]
push ecx
sub esp, 0x1c
mov byte [ebp - 4], 0x12
mov edx, esp
mov eax, edi
mov dword [ebp - 0x678], esp
push eax
push edx
call fcn.10018e60
add esp, 8
call fcn.100188c0
add esp, 0x20
cmp al, bl
jne 0x1001a67d
mov esi, 0x10
cmp dword [ebp - 0x480], esi
jb 0x1001a5c8
mov ecx, dword [ebp - 0x494]
push ecx
call fcn.10032d80
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x480], edi
mov dword [ebp - 0x484], ebx
mov byte [ebp - 0x494], bl
cmp dword [ebp - 0x464], esi
jb 0x1001a5f6
mov edx, dword [ebp - 0x478]
push edx
call fcn.10032d80
add esp, 4
mov esi, dword [ebp - 0x450]
mov dword [ebp - 0x464], edi
mov dword [ebp - 0x468], ebx
mov byte [ebp - 0x478], bl
cmp esi, ebx
je 0x1001a62d
mov edi, dword [ebp - 0x44c]
mov eax, esi
call fcn.10009040
push esi
call fcn.10032d80
add esp, 4
mov edi, 0xf
mov esi, 0x10
cmp dword [ebp - 0x49c], esi
jb 0x1001a649
mov eax, dword [ebp - 0x4b0]
push eax
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x49c], edi
mov dword [ebp - 0x4a0], ebx
mov byte [ebp - 0x4b0], bl
cmp dword [ebp - 0x528], esi
jb 0x10019f2a
mov ecx, dword [ebp - 0x53c]
push ecx
call fcn.10032d80
add esp, 4
xor al, al
jmp 0x1001ad1e
mov ecx, dword [ebp - 0x450]
mov edi, dword [ebp - 0x44c]
cmp ecx, edi
je 0x1001a6ac
mov edx, dword [ebp - 0x678]
push edx
push edi
mov eax, edi
call fcn.100093e0
add esp, 8
mov esi, eax
call fcn.10009040
mov dword [ebp - 0x44c], esi
push ebx
mov esi, 0xf
push 0x10053510
lea ecx, [ebp - 0x440]
mov dword [ebp - 0x42c], esi
mov dword [ebp - 0x430], ebx
mov byte [ebp - 0x440], bl
call fcn.100028b0
mov byte [ebp - 4], 0x13
push ebx
push 0x10053510
lea ecx, [ebp - 0x4cc]
mov dword [ebp - 0x4b8], esi
mov dword [ebp - 0x4bc], ebx
mov byte [ebp - 0x4cc], bl
call fcn.100028b0
mov byte [ebp - 4], 0x14
push ebx
push 0x10053510
lea ecx, [ebp - 0x504]
mov dword [ebp - 0x4f0], esi
mov dword [ebp - 0x4f4], ebx
mov byte [ebp - 0x504], bl
call fcn.100028b0
mov byte [ebp - 4], 0x15
push ebx
push 0x10053510
lea ecx, [ebp - 0x4e8]
mov dword [ebp - 0x4d4], esi
mov dword [ebp - 0x4d8], ebx
mov byte [ebp - 0x4e8], bl
call fcn.100028b0
push 5
mov eax, str.http:
lea ecx, [ebp - 0x440]
mov byte [ebp - 4], 0x16
call fcn.10002620
push 6
mov eax, str.__343.
lea ecx, [ebp - 0x440]
call fcn.10002620
push ebx
lea eax, [ebp - 0x440]
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x4cc]
call fcn.10002530
push ebx
lea ecx, [ebp - 0x440]
push ecx
or eax, 0xffffffff
lea esi, [ebp - 0x504]
call fcn.10002530
push ebx
lea edx, [ebp - 0x440]
push edx
or eax, 0xffffffff
lea esi, [ebp - 0x4e8]
call fcn.10002530
push 3
mov eax, 0x10054528
lea ecx, [ebp - 0x440]
call fcn.10002620
push 2
mov eax, 0x1005452c
lea ecx, [ebp - 0x4cc]
call fcn.10002620
push 3
mov eax, 0x10054530
lea ecx, [ebp - 0x504]
call fcn.10002620
push 3
mov eax, 0x10054534
mov ecx, esi
call fcn.10002620
push 4
mov eax, str.lans
lea ecx, [ebp - 0x440]
call fcn.10002620
push 3
mov eax, 0x10054540
lea ecx, [ebp - 0x4cc]
call fcn.10002620
push 3
mov eax, 0x10054544
lea ecx, [ebp - 0x504]
call fcn.10002620
push 3
mov eax, 0x10054548
mov ecx, esi
call fcn.10002620
push 5
mov eax, str..com_
lea ecx, [ebp - 0x440]
call fcn.10002620
push 4
mov eax, str..cn_
lea ecx, [ebp - 0x4cc]
call fcn.10002620
push 5
mov eax, str..com_
lea ecx, [ebp - 0x504]
call fcn.10002620
push 5
mov eax, str..com_
mov ecx, esi
call fcn.10002620
lea ecx, [ebp - 0x440]
lea edi, [ebp - 0x450]
call fcn.1000b440
lea ecx, [ebp - 0x4cc]
call fcn.1000b440
lea ecx, [ebp - 0x504]
call fcn.1000b440
mov ecx, esi
call fcn.1000b440
mov eax, edi
push eax
lea ecx, [ebp - 0x520]
push ecx
call fcn.10018e60
add esp, 8
lea eax, [ebp - 0x440]
lea edx, [ebp - 0x520]
mov byte [ebp - 4], 0x17
call fcn.1001ded0
test al, al
je 0x1001a999
cmp dword [ebp - 0x42c], 0x10
mov eax, dword [ebp - 0x440]
jae 0x1001a8f1
lea eax, [ebp - 0x440]
mov edx, dword [ebp - 0x430]
push edx
push eax
lea eax, [ebp - 0x494]
push eax
xor eax, eax
call fcn.1000b660
lea ecx, [ebp - 0x520]
push ecx
mov edi, eax
lea esi, [ebp - 0x494]
call fcn.1001dc00
cmp dword [ebp - 0x42c], 0x10
mov eax, dword [ebp - 0x440]
jae 0x1001a930
lea eax, [ebp - 0x440]
mov edx, dword [ebp - 0x430]
push edx
push eax
lea eax, [ebp - 0x494]
push eax
xor eax, eax
call fcn.1000b660
lea ecx, [ebp - 0x520]
push ecx
mov edi, eax
lea esi, [ebp - 0x494]
call fcn.1001dc00
cmp dword [ebp - 0x42c], 0x10
mov eax, dword [ebp - 0x440]
jae 0x1001a96f
lea eax, [ebp - 0x440]
mov edx, dword [ebp - 0x430]
push edx
push eax
lea eax, [ebp - 0x494]
push eax
xor eax, eax
call fcn.1000b660
lea ecx, [ebp - 0x520]
push ecx
mov edi, eax
lea esi, [ebp - 0x494]
call fcn.1001dc00
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x678], esp
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x494]
mov esi, 0xf
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.10002da0
call fcn.1001c650
cmp al, bl
jne 0x1001ab69
mov edi, 0x10
cmp dword [ebp - 0x50c], edi
jb 0x1001a9e9
mov eax, dword [ebp - 0x520]
push eax
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x50c], esi
mov dword [ebp - 0x510], ebx
mov byte [ebp - 0x520], bl
cmp dword [ebp - 0x4d4], edi
jb 0x1001aa12
mov ecx, dword [ebp - 0x4e8]
push ecx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x4d4], esi
mov dword [ebp - 0x4d8], ebx
mov byte [ebp - 0x4e8], bl
cmp dword [ebp - 0x4f0], edi
jb 0x1001aa3b
mov edx, dword [ebp - 0x504]
push edx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x4f0], esi
mov dword [ebp - 0x4f4], ebx
mov byte [ebp - 0x504], bl
cmp dword [ebp - 0x4b8], edi
jb 0x1001aa64
mov eax, dword [ebp - 0x4cc]
push eax
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x4b8], esi
mov dword [ebp - 0x4bc], ebx
mov byte [ebp - 0x4cc], bl
cmp dword [ebp - 0x42c], edi
jb 0x1001aa8d
mov ecx, dword [ebp - 0x440]
push ecx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x42c], esi
mov dword [ebp - 0x430], ebx
mov byte [ebp - 0x440], bl
cmp dword [ebp - 0x480], edi
jb 0x1001aab6
mov edx, dword [ebp - 0x494]
push edx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x480], esi
mov dword [ebp - 0x484], ebx
mov byte [ebp - 0x494], bl
cmp dword [ebp - 0x464], edi
jb 0x1001aadf
mov eax, dword [ebp - 0x478]
push eax
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x464], esi
mov dword [ebp - 0x468], ebx
mov byte [ebp - 0x478], bl
cmp dword [ebp - 0x450], ebx
je 0x1001ab1e
mov edi, dword [ebp - 0x44c]
mov eax, dword [ebp - 0x450]
call fcn.10009040
mov ecx, dword [ebp - 0x450]
push ecx
call fcn.10032d80
add esp, 4
mov edi, 0x10
cmp dword [ebp - 0x49c], edi
jb 0x1001ab35
mov edx, dword [ebp - 0x4b0]
push edx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x49c], esi
mov dword [ebp - 0x4a0], ebx
mov byte [ebp - 0x4b0], bl
cmp dword [ebp - 0x528], edi
jb 0x10019f2a
mov eax, dword [ebp - 0x53c]
push eax
call fcn.10032d80
add esp, 4
xor al, al
jmp 0x1001ad1e
mov edx, dword [ebp - 0x680]
lea ecx, [ebp - 0x67c]
push ecx
push ebx
push edx
push 0x1001bc80
push ebx
push ebx
mov dword [ebp - 0x67c], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, 0x10
cmp dword [ebp - 0x50c], edi
jb 0x1001aba7
mov eax, dword [ebp - 0x520]
push eax
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x50c], esi
mov dword [ebp - 0x510], ebx
mov byte [ebp - 0x520], bl
cmp dword [ebp - 0x4d4], edi
jb 0x1001abd0
mov ecx, dword [ebp - 0x4e8]
push ecx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x4d4], esi
mov dword [ebp - 0x4d8], ebx
mov byte [ebp - 0x4e8], bl
cmp dword [ebp - 0x4f0], edi
jb 0x1001abf9
mov edx, dword [ebp - 0x504]
push edx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x4f0], esi
mov dword [ebp - 0x4f4], ebx
mov byte [ebp - 0x504], bl
cmp dword [ebp - 0x4b8], edi
jb 0x1001ac22
mov eax, dword [ebp - 0x4cc]
push eax
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x4b8], esi
mov dword [ebp - 0x4bc], ebx
mov byte [ebp - 0x4cc], bl
cmp dword [ebp - 0x42c], edi
jb 0x1001ac4b
mov ecx, dword [ebp - 0x440]
push ecx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x42c], esi
mov dword [ebp - 0x430], ebx
mov byte [ebp - 0x440], bl
cmp dword [ebp - 0x480], edi
jb 0x1001ac74
mov edx, dword [ebp - 0x494]
push edx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x480], esi
mov dword [ebp - 0x484], ebx
mov byte [ebp - 0x494], bl
cmp dword [ebp - 0x464], edi
jb 0x1001ac9d
mov eax, dword [ebp - 0x478]
push eax
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x464], esi
mov dword [ebp - 0x468], ebx
mov byte [ebp - 0x478], bl
cmp dword [ebp - 0x450], ebx
je 0x1001acdc
mov edi, dword [ebp - 0x44c]
mov eax, dword [ebp - 0x450]
call fcn.10009040
mov ecx, dword [ebp - 0x450]
push ecx
call fcn.10032d80
add esp, 4
mov edi, 0x10
cmp dword [ebp - 0x49c], edi
jb 0x1001acf3
mov edx, dword [ebp - 0x4b0]
push edx
call fcn.10032d80
add esp, 4
mov dword [ebp - 0x49c], esi
mov dword [ebp - 0x4a0], ebx
mov byte [ebp - 0x4b0], bl
cmp dword [ebp - 0x528], edi
jb 0x1001ad1c
mov eax, dword [ebp - 0x53c]
push eax
call fcn.10032d80
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10034d1a
mov esp, ebp
pop ebp
ret 4