Function at 0x1010f080
Capabilities:
Enumerate network shares

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x268
mov eax, dword [0x102519c8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x23c], edi
call fcn.100de0c0
test eax, eax
jne 0x1010f0b8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.101f99c6
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x250], 0
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
mov dword [ebp - 0x268], eax
jmp 0x1010f0f0
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x248]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x24c]
push eax
push 0x1f6
push 0
call sub.NETAPI32.dll_NetShareEnum
mov dword [ebp - 0x264], eax
test eax, eax
je 0x1010f12f
cmp eax, 0xea
jne 0x1010ff32
mov ebx, dword [ebp - 0x24c]
mov dword [ebp - 0x244], ebx
test ebx, ebx
je 0x1010ff27
mov esi, 1
mov dword [ebp - 0x240], esi
cmp dword [ebp - 0x248], esi
jb 0x1010ff1b
lea ebx, [ebx]
cmp dword [ebx + 4], 0
jne 0x1010fef9
push ebx
mov ecx, edi
call fcn.1010efe0
test eax, eax
jne 0x1010fef9
push ebx
mov ecx, edi
call fcn.1010ef60
test eax, eax
jne 0x1010fef9
mov edi, dword [ebx + 0x18]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x230], eax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x21c], esi
test edi, edi
je 0x1010f2bb
test edi, 0xffff0000
jne 0x1010f2bb
movzx eax, di
mov ecx, 0x1025bea0
push 0
mov dword [ebp - 0x228], eax
call fcn.101beff4
mov edi, eax
mov ebx, 1
test edi, edi
je 0x1010f2cd
mov eax, dword [ebp - 0x228]
shr eax, 4
inc eax
mov dword [ebp - 0x218], eax
lea esp, [esp]
push 0
push eax
push 6
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x1010f224
push dword [ebp - 0x228]
push eax
push edi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x1010f242
push ebx
mov ecx, 0x1025bea0
call fcn.101beff4
mov edi, eax
inc ebx
test edi, edi
je 0x1010f2cd
mov eax, dword [ebp - 0x218]
jmp 0x1010f200
test edi, edi
je 0x1010f2cd
push 6
push dword [ebp - 0x218]
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x1010f2cd
push dword [ebp - 0x228]
push eax
push edi
call fcn.10003980
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x1010f2cd
movzx edx, word [ebx]
mov ecx, 1
mov eax, dword [esi - 8]
mov edi, edx
sub ecx, dword [esi - 4]
sub eax, edi
or eax, ecx
jge 0x1010f29e
push edi
lea ecx, [ebp - 0x21c]
call fcn.10003310
movzx edx, word [ebx]
mov esi, dword [ebp - 0x21c]
movzx ecx, dx
lea eax, [ebx + 2]
push ecx
push eax
push edi
push esi
call fcn.101eb860
add esp, 0x10
mov dword [esi - 0xc], edi
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x1010f2cd
push edi
lea ecx, [ebp - 0x21c]
call fcn.10008170
mov esi, dword [ebp - 0x21c]
mov eax, dword [ebp - 0x234]
lea ecx, [ebp - 0x21c]
push ecx
cmp dword [ebp - 0x230], eax
je 0x1010f2f2
mov ecx, eax
call fcn.1001b810
add dword [ebp - 0x234], 4
jmp 0x1010f2fe
push eax
lea ecx, [ebp - 0x238]
call fcn.1001ddd0
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x1010f316
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push 1
push 0
push ecx
mov esi, esp
mov dword [ebp - 0x214], esi
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi], eax
mov eax, 0x10202940
shr eax, 0x10
mov dword [ebp - 0x21c], eax
test eax, eax
jne 0x1010f443
mov eax, 0x10202940
mov ecx, 0x1025bea0
push 0
movzx ebx, ax
call fcn.101beff4
mov esi, eax
mov edi, 1
test esi, esi
je 0x1010f44f
mov ecx, ebx
shr ecx, 4
lea eax, [ecx + 1]
mov dword [ebp - 0x218], eax
jmp 0x1010f380
push 0
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x1010f39f
push ebx
push eax
push esi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x1010f3bd
push edi
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
inc edi
test esi, esi
je 0x1010f44f
mov eax, dword [ebp - 0x218]
jmp 0x1010f380
test esi, esi
je 0x1010f44f
push 6
push dword [ebp - 0x218]
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x1010f44f
push ebx
push eax
push esi
call fcn.10003980
mov esi, eax
add esp, 0xc
test esi, esi
je 0x1010f44f
mov ebx, dword [ebp - 0x214]
mov ecx, 1
movzx edx, word [esi]
mov edi, edx
mov dword [ebp - 0x214], edx
mov eax, dword [ebx]
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
sub eax, edi
or eax, ecx
jge 0x1010f41a
push edi
mov ecx, ebx
call fcn.10003310
movzx eax, word [esi]
jmp 0x1010f420
mov eax, dword [ebp - 0x214]
mov edx, dword [ebx]
movzx ecx, ax
lea eax, [esi + 2]
push ecx
push eax
push edi
push edx
call fcn.101eb860
mov eax, dword [ebx]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], edi
mov eax, dword [ebx]
mov word [eax + edi*2], cx
jmp 0x1010f44f
push 0x10202940
mov ecx, esi
call fcn.10008170
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
mov esi, esp
mov dword [ebp - 0x214], esi
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
cmp dword [ebp - 0x21c], 0
mov dword [esi], eax
jne 0x1010f573
mov eax, 0x10202940
mov ecx, 0x1025bea0
push 0
movzx ebx, ax
call fcn.101beff4
mov esi, eax
mov edi, 1
test esi, esi
je 0x1010f57f
mov ecx, ebx
shr ecx, 4
lea eax, [ecx + 1]
mov dword [ebp - 0x218], eax
lea ecx, [ecx]
push 0
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x1010f4cf
push ebx
push eax
push esi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x1010f4ed
push edi
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
inc edi
test esi, esi
je 0x1010f57f
mov eax, dword [ebp - 0x218]
jmp 0x1010f4b0
test esi, esi
je 0x1010f57f
push 6
push dword [ebp - 0x218]
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x1010f57f
push ebx
push eax
push esi
call fcn.10003980
mov esi, eax
add esp, 0xc
test esi, esi
je 0x1010f57f
mov ebx, dword [ebp - 0x214]
mov ecx, 1
movzx edx, word [esi]
mov edi, edx
mov dword [ebp - 0x214], edx
mov eax, dword [ebx]
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
sub eax, edi
or eax, ecx
jge 0x1010f54a
push edi
mov ecx, ebx
call fcn.10003310
movzx eax, word [esi]
jmp 0x1010f550
mov eax, dword [ebp - 0x214]
mov edx, dword [ebx]
movzx ecx, ax
lea eax, [esi + 2]
push ecx
push eax
push edi
push edx
call fcn.101eb860
mov eax, dword [ebx]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], edi
mov eax, dword [ebx]
mov word [eax + edi*2], cx
jmp 0x1010f57f
push 0x10202940
mov ecx, esi
call fcn.10008170
push ecx
mov esi, esp
mov dword [ebp - 0x214], esi
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
cmp dword [ebp - 0x21c], 0
mov dword [esi], eax
jne 0x1010f69a
mov eax, 0x10202940
mov ecx, 0x1025bea0
push 0
movzx ebx, ax
call fcn.101beff4
mov esi, eax
mov edi, 1
test esi, esi
je 0x1010f6a6
mov ecx, ebx
shr ecx, 4
lea eax, [ecx + 1]
mov dword [ebp - 0x218], eax
push 0
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x1010f5f6
push ebx
push eax
push esi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x1010f614
push edi
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
inc edi
test esi, esi
je 0x1010f6a6
mov eax, dword [ebp - 0x218]
jmp 0x1010f5d7
test esi, esi
je 0x1010f6a6
push 6
push dword [ebp - 0x218]
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x1010f6a6
push ebx
push eax
push esi
call fcn.10003980
mov esi, eax
add esp, 0xc
test esi, esi
je 0x1010f6a6
mov ebx, dword [ebp - 0x214]
mov ecx, 1
movzx edx, word [esi]
mov edi, edx
mov dword [ebp - 0x214], edx
mov eax, dword [ebx]
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
sub eax, edi
or eax, ecx
jge 0x1010f671
push edi
mov ecx, ebx
call fcn.10003310
movzx eax, word [esi]
jmp 0x1010f677
mov eax, dword [ebp - 0x214]
mov edx, dword [ebx]
movzx ecx, ax
lea eax, [esi + 2]
push ecx
push eax
push edi
push edx
call fcn.101eb860
mov eax, dword [ebx]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], edi
mov eax, dword [ebx]
mov word [eax + edi*2], cx
jmp 0x1010f6a6
push 0x10202940
mov ecx, esi
call fcn.10008170
push ecx
mov esi, esp
mov dword [ebp - 0x214], esi
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
cmp dword [ebp - 0x21c], 0
mov dword [esi], eax
jne 0x1010f7c5
mov eax, 0x10202940
mov ecx, 0x1025bea0
push 0
movzx ebx, ax
call fcn.101beff4
mov esi, eax
mov edi, 1
test esi, esi
je 0x1010f7d1
mov eax, ebx
shr eax, 4
inc eax
mov dword [ebp - 0x218], eax
lea esp, [esp]
push 0
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x1010f71f
push ebx
push eax
push esi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x1010f73d
push edi
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
inc edi
test esi, esi
je 0x1010f7d1
mov eax, dword [ebp - 0x218]
jmp 0x1010f700
test esi, esi
je 0x1010f7d1
push 6
push dword [ebp - 0x218]
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x1010f7d1
push ebx
push eax
push esi
call fcn.10003980
mov edi, eax
add esp, 0xc
test edi, edi
je 0x1010f7d1
mov ebx, dword [ebp - 0x214]
movzx ecx, word [edi]
mov eax, ecx
mov esi, ecx
mov dword [ebp - 0x214], eax
mov ecx, 1
mov edx, dword [ebx]
mov eax, dword [edx - 8]
sub ecx, dword [edx - 4]
sub eax, esi
or ecx, eax
jge 0x1010f79e
push esi
mov ecx, ebx
call fcn.10003310
mov edx, dword [ebx]
movzx eax, word [edi]
jmp 0x1010f7a4
mov eax, dword [ebp - 0x214]
movzx ecx, ax
lea eax, [edi + 2]
push ecx
push eax
push esi
push edx
call fcn.101eb860
mov eax, dword [ebx]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], esi
mov eax, dword [ebx]
mov word [eax + esi*2], cx
jmp 0x1010f7d1
push 0x10202940
mov ecx, esi
call fcn.10008170
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
push 0
mov ecx, 0x1025bea0
lea esi, [eax + 0x10]
mov dword [ebp - 0x228], esi
call fcn.101beff4
mov edi, eax
mov ebx, 1
test edi, edi
je 0x1010f8af
push 0
push 0x281
push 6
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x1010f828
push 0x2807
push eax
push edi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x1010f83c
push ebx
mov ecx, 0x1025bea0
call fcn.101beff4
mov edi, eax
inc ebx
test edi, edi
jne 0x1010f801
jmp 0x1010f8af
test edi, edi
je 0x1010f8af
push 6
push 0x281
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x1010f8af
push 0x2807
push eax
push edi
call fcn.10003980
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x1010f8af
movzx ecx, word [ebx]
mov eax, dword [esi - 8]
mov edi, ecx
mov edx, ecx
sub eax, edi
mov ecx, 1
sub ecx, dword [esi - 4]
or ecx, eax
jge 0x1010f894
push edi
lea ecx, [ebp - 0x228]
call fcn.10003310
movzx edx, word [ebx]
mov esi, dword [ebp - 0x228]
movzx ecx, dx
lea eax, [ebx + 2]
push ecx
push eax
push edi
push esi
call fcn.101eb860
add esp, 0x10
mov dword [esi - 0xc], edi
xor eax, eax
mov word [esi + edi*2], ax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
cmp dword [ebp - 0x21c], 0
mov dword [ebp - 0x224], eax
jne 0x1010f9c5
mov eax, 0x10202940
mov ecx, 0x1025bea0
push 0
movzx ebx, ax
call fcn.101beff4
mov esi, eax
mov edi, 1
test esi, esi
je 0x1010f9d5
mov eax, ebx
shr eax, 4
inc eax
mov dword [ebp - 0x218], eax
push 0
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x1010f91f
push ebx
push eax
push esi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x1010f93d
push edi
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
inc edi
test esi, esi
je 0x1010f9d5
mov eax, dword [ebp - 0x218]
jmp 0x1010f900
test esi, esi
je 0x1010f9d5
push 6
push dword [ebp - 0x218]
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x1010f9d5
push ebx
push eax
push esi
call fcn.10003980
mov esi, eax
add esp, 0xc
test esi, esi
je 0x1010f9d5
mov ecx, dword [ebp - 0x224]
movzx edx, word [esi]
mov edi, edx
mov ebx, edx
mov edx, 1
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, edi
or edx, eax
jge 0x1010f99c
push edi
lea ecx, [ebp - 0x224]
call fcn.10003310
movzx ebx, word [esi]
mov ecx, dword [ebp - 0x224]
movzx edx, bx
lea eax, [esi + 2]
push edx
push eax
push edi
push ecx
call fcn.101eb860
mov eax, dword [ebp - 0x224]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], edi
mov eax, dword [ebp - 0x224]
mov word [eax + edi*2], cx
jmp 0x1010f9d5
push 0x10202940
lea ecx, [ebp - 0x224]
call fcn.10008170
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x260]
push 0x9c8b
push eax
call fcn.100053d0
mov esi, dword [ebp - 0x244]
add esp, 0xc
mov eax, dword [eax]
mov esi, dword [esi]
mov dword [ebp - 0x258], eax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x22c], edi
test esi, esi
je 0x1010fb1d
test esi, 0xffff0000
jne 0x1010fb1d
movzx eax, si
mov ecx, 0x1025bea0
push 0
mov dword [ebp - 0x218], eax
call fcn.101beff4
mov esi, eax
mov ebx, 1
test esi, esi
je 0x1010fb2f
mov eax, dword [ebp - 0x218]
shr eax, 4
inc eax
mov dword [ebp - 0x214], eax
lea ecx, [ecx]
push 0
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x1010fa84
push dword [ebp - 0x218]
push eax
push esi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x1010faa2
push ebx
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
inc ebx
test esi, esi
je 0x1010fb2f
mov eax, dword [ebp - 0x214]
jmp 0x1010fa60
test esi, esi
je 0x1010fb2f
push 6
push dword [ebp - 0x214]
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x1010fb2f
push dword [ebp - 0x218]
push eax
push esi
call fcn.10003980
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x1010fb2f
movzx ecx, word [ebx]
mov eax, dword [edi - 8]
mov esi, ecx
mov edx, ecx
sub eax, esi
mov ecx, 1
sub ecx, dword [edi - 4]
or ecx, eax
jge 0x1010fb00
push esi
lea ecx, [ebp - 0x22c]
call fcn.10003310
movzx edx, word [ebx]
mov edi, dword [ebp - 0x22c]
movzx ecx, dx
lea eax, [ebx + 2]
push ecx
push eax
push esi
push edi
call fcn.101eb860
add esp, 0x10
mov dword [edi - 0xc], esi
xor eax, eax
mov word [edi + esi*2], ax
jmp 0x1010fb2f
push esi
lea ecx, [ebp - 0x22c]
call fcn.10008170
mov edi, dword [ebp - 0x22c]
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
cmp dword [ebp - 0x21c], 0
mov dword [ebp - 0x220], eax
jne 0x1010fc6d
push 0
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
mov ebx, 1
test esi, esi
je 0x1010fc7d
mov ecx, 0x10202940
movzx eax, cx
shr eax, 4
inc eax
mov dword [ebp - 0x214], eax
mov edi, edi
push 0
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x1010fba7
mov edx, 0x10202940
movzx ecx, dx
push ecx
push eax
push esi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x1010fbc5
push ebx
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
inc ebx
test esi, esi
je 0x1010fc7d
mov eax, dword [ebp - 0x214]
jmp 0x1010fb80
test esi, esi
je 0x1010fc7d
push 6
push dword [ebp - 0x214]
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
test ecx, ecx
je 0x1010fc7d
mov edx, 0x10202940
movzx eax, dx
push eax
push ecx
push esi
call fcn.10003980
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x1010fc7d
movzx edx, word [ebx]
mov ecx, dword [ebp - 0x220]
mov eax, edx
mov esi, edx
mov dword [ebp - 0x214], eax
mov edx, 1
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, esi
or edx, eax
jge 0x1010fc3e
push esi
lea ecx, [ebp - 0x220]
call fcn.10003310
movzx eax, word [ebx]
mov ecx, dword [ebp - 0x220]
jmp 0x1010fc44
mov eax, dword [ebp - 0x214]
movzx eax, ax
push eax
lea eax, [ebx + 2]
push eax
push esi
push ecx
call fcn.1010ec10
mov eax, dword [ebp - 0x220]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], esi
mov eax, dword [ebp - 0x220]
mov word [eax + esi*2], cx
jmp 0x1010fc7d
push 0x10202940
lea ecx, [ebp - 0x220]
call fcn.10008170
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x25c]
push 0x284e
push eax
call fcn.100053d0
mov ebx, eax
add esp, 0xc
mov ecx, dword [ebx]
mov ecx, dword [ecx - 0x10]
test ecx, ecx
je 0x1010fcac
mov edx, dword [ecx]
call dword [edx + 0x10]
test eax, eax
jne 0x1010fcb8
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
mov ecx, dword [ebx]
mov dword [ebp - 0x22c], ecx
lea esi, [eax + 0x10]
mov eax, dword [edi - 0xc]
mov edx, dword [ecx - 0xc]
mov ecx, 1
sub ecx, dword [esi - 4]
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x214], esi
lea ebx, [edx + eax]
mov dword [ebp - 0x218], edx
mov eax, dword [esi - 8]
sub eax, ebx
or ecx, eax
jge 0x1010fd0e
push ebx
lea ecx, [ebp - 0x214]
call fcn.10003310
mov esi, dword [ebp - 0x214]
mov edx, dword [ebp - 0x218]
push edx
push dword [ebp - 0x22c]
push edx
push esi
call fcn.10008010
mov eax, dword [ebp - 0x21c]
push eax
push edi
push eax
mov eax, dword [ebp - 0x218]
lea eax, [esi + eax*2]
push eax
call fcn.10008010
add esp, 0x20
mov ecx, dword [ebp - 0x23c]
xor eax, eax
mov dword [esi - 0xc], ebx
mov word [esi + ebx*2], ax
push eax
push 0xffffffffffffffff
push 2
push eax
lea eax, [ebp - 0x238]
push eax
push 0
push 0x10202940
push dword [ebp - 0x228]
push dword [ebp - 0x258]
push esi
call fcn.100cd930
mov ebx, eax
add esi, 0xfffffff0
or ecx, 0xffffffff
lock xadd dword [esi + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x1010fd86
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x25c]
or esi, 0xffffffff
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1010fda6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x220]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1010fdc3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x1010fdda
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x260]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1010fdf7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x224]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1010fe14
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x228]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1010fe31
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x210], ebx
lea eax, [ebp - 0x20c]
mov ebx, dword [ebp - 0x244]
push SysReAllocString
push dword [ebx]
push 0
push 0x104
push eax
call fcn.1010ff80
mov edi, dword [ebp - 0x23c]
mov edx, dword [edi + 0xcc]
lea eax, [edi + 0xc8]
cmp dword [eax + 8], edx
je 0x1010fe8c
mov ecx, 0x83
lea esi, [ebp - 0x210]
mov edi, edx
rep movsd dword es:[edi], dword [esi]
add dword [eax + 4], 0x20c
mov edi, dword [ebp - 0x23c]
jmp 0x1010fe9b
lea ecx, [ebp - 0x210]
push ecx
push edx
mov ecx, eax
call fcn.1010ea00
mov eax, dword [ebp - 0x238]
test eax, eax
je 0x1010fef3
push dword [ebp - 0x234]
lea ecx, [ebp - 0x238]
push eax
call fcn.10006930
mov ecx, dword [ebp - 0x238]
mov eax, dword [ebp - 0x230]
sub eax, ecx
sar eax, 2
push eax
push ecx
lea ecx, [ebp - 0x238]
call fcn.10007210
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0
mov esi, dword [ebp - 0x240]
inc esi
add ebx, 0x28
mov dword [ebp - 0x240], esi
mov dword [ebp - 0x244], ebx
cmp esi, dword [ebp - 0x248]
jbe 0x1010f160
mov ebx, dword [ebp - 0x24c]
push ebx
call sub.NETAPI32.dll_NetApiBufferFree
mov eax, dword [ebp - 0x264]
cmp eax, 0xea
je 0x1010f0f0
mov eax, dword [edi + 0xc0]
xor ecx, ecx
sub eax, dword [edi + 0xbc]
mov ebx, dword [ebp - 0x268]
sar eax, 2
cmp ecx, eax
sbb esi, esi
or edi, 0xffffffff
neg esi
lock xadd dword [ebx + 0xc], edi
dec edi
test edi, edi
jg 0x1010ff64
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.101f99c6
mov esp, ebp
pop ebp
ret