Function at 0x10eddd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x11b59e8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa8c
push esi
push edi
mov dword [ebp - 0x9c0], ecx
push 1
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
call eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0x9c0]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp - 0x9c0]
mov ecx, dword [ecx + 0x18]
mov edx, dword [eax]
mov eax, dword [edx + 0x24]
call eax
push eax
call fcn.010d0510
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
call fcn.010d0510
mov dword [ebp - 0x114], eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x114]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x114]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x20]
mov dword [ebp - 0x10c], edx
cmp dword [ebp - 0x10c], 0
jne 0x10edfa1
mov eax, dword [ebp - 0xf8]
push eax
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x114]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 0x118]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x118]
mov eax, dword [edx + 8]
call eax
push 0
push 0
mov ecx, dword [ebp - 0x118]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x118]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10edf8f
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10edf8f
push 6
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
call fcn.010947d0
mov dword [ebp - 0x9c4], eax
push 0x1c25
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100d368
mov ecx, dword [ebp - 0x9c4]
push ecx
mov edx, dword [ebp - 0x9c4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10f0cc0
mov edx, dword [ebp - 0x118]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x118]
mov edx, dword [eax]
call edx
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x9c8], eax
mov ecx, dword [ebp - 0x9c8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9c8]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x114]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x9cc], eax
mov ecx, dword [ebp - 0x9cc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9cc]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x104], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x100], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0x18], 0
cmp dword [ebp - 0x104], 0
jne 0x10ee07b
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xf8]
mov edx, dword [eax + 0x30]
call edx
test eax, eax
jne 0x10ee07b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov ecx, dword [ebp - 0x9c0]
call fcn.010e8080
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x18], 1
mov edx, dword [ebp - 0x104]
push edx
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x64]
call eax
mov dword [ebp - 0x28], 0
cmp dword [ebp - 0x10c], 0
je 0x10ee767
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x9d4], esi
mov dword [ebp - 0x9d0], edi
mov dword [ebp - 0x9dc], eax
mov dword [ebp - 0x9d8], edx
mov ecx, dword [ebp - 0x9d0]
cmp ecx, dword [ebp - 0x9d8]
ja 0x10ee139
jb 0x10ee0e9
mov edx, dword [ebp - 0x9d4]
cmp edx, dword [ebp - 0x9dc]
jae 0x10ee139
call fcn.010947d0
mov dword [ebp - 0x9e0], eax
push 0x1c43
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100d2d0
mov eax, dword [ebp - 0x9e0]
push eax
mov ecx, dword [ebp - 0x9e0]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
push 0xd6
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
xor eax, eax
jmp 0x10f0cc0
push 0x60
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
push 0x30
push 0
lea ecx, [ebp - 0x19c]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x19c], 0xffffffff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x198], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x18c], edx
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x17c], 0
lea ecx, [ebp - 0x19c]
push ecx
lea ecx, [ebp - 0x16c]
call fcn.0111e550
mov dword [ebp - 4], 0
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x16c]
call fcn.0111e5a0
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10ee249
push 4
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
push 0x64
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x9a4], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16c]
call fcn.01092b10
mov eax, dword [ebp - 0x9a4]
jmp 0x10f0cc0
cmp dword [ebp - 0x20], 0
je 0x10ee750
push 4
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
push 0x100d28c
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x1a0], 0x100cb60
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xc0]
call eax
mov dword [ebp - 0x1c0], eax
xor ecx, ecx
mov byte [ebp - 0x9a5], cl
lea edx, [ebp - 0x9a5]
push edx
mov eax, dword [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0x1bc]
call fcn.01089110
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x1a0]
push ecx
lea ecx, [ebp - 0x1bc]
call fcn.0109e490
lea ecx, [ebp - 0x1bc]
call fcn.01089160
push eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0xbc]
call edx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1bc]
call fcn.01089140
push 0
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10ee334
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x9c0]
call fcn.010e8080
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
push eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x64]
call eax
push 0
push 0
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x114]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10ee3d6
push 6
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
call fcn.010947d0
mov dword [ebp - 0x9e4], eax
push 0x1c78
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100d368
mov ecx, dword [ebp - 0x9e4]
push ecx
mov edx, dword [ebp - 0x9e4]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov dword [ebp - 0x9ac], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16c]
call fcn.01092b10
mov eax, dword [ebp - 0x9ac]
jmp 0x10f0cc0
push 0x9c4
call fcn.0108fe30
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x9c0]
call fcn.010e8540
mov dword [ebp - 0x1a8], eax
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x104]
cmp edx, dword [ebp - 0x24]
je 0x10ee418
cmp dword [ebp - 0x104], 0
jne 0x10ee447
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10ee447
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x9c0]
call fcn.010e8080
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x114]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x114]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x1a4], eax
jmp 0x10ee485
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x114]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
je 0x10ee6cb
mov ecx, dword [ebp - 0x1a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [edx + 0x3c]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10ee4ae
jmp 0x10ee46c
mov edx, dword [ebp - 0x1ac]
mov dword [ebp - 0x9e8], edx
mov eax, dword [ebp - 0x9e8]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x9c0]
call fcn.0110ca80
mov dword [ebp - 0x1d0], eax
mov edx, dword [ebp - 0x1ac]
add edx, 1
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0x1a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
je 0x10ee537
mov ecx, dword [ebp - 0x1a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x1a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x9c0]
call fcn.010e7900
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 8]
cmp edx, dword [ecx + 0xc]
je 0x10ee5c0
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x54]
call eax
mov dword [ebp - 0x1e4], eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x50]
call eax
mov dword [ebp - 0x1e0], eax
mov ecx, dword [ebp - 0x1a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x1e0]
push ecx
mov edx, dword [ebp - 0x1e4]
push edx
mov eax, dword [ebp - 0x1a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x9c0]
call fcn.010e7ce0
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x1a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp - 0x1a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x9c0]
call fcn.010d5fd0
test eax, eax
jne 0x10ee63a
call fcn.010947d0
mov dword [ebp - 0x9ec], eax
push 0x1c9f
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100d248
mov ecx, dword [ebp - 0x9ec]
push ecx
mov edx, dword [ebp - 0x9ec]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x1d0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1d0]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1c8], edx
mov eax, dword [ebp - 0x1a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], edx
mov ecx, dword [ebp - 0x1d8]
push ecx
mov edx, dword [ebp - 0x1dc]
push edx
mov eax, dword [ebp - 0x1c8]
push eax
mov ecx, dword [ebp - 0x1cc]
push ecx
mov edx, dword [ebp - 0x1a4]
push edx
mov eax, dword [ebp - 0x104]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x9c0]
call fcn.010f2cd0
push 0x100cfa0
mov eax, dword [ebp - 0x1a4]
push eax
call fcn.011144e0
jmp 0x10ee46c
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xc0]
call eax
mov dword [ebp - 0x1f8], eax
xor ecx, ecx
mov byte [ebp - 0x9ad], cl
lea edx, [ebp - 0x9ad]
push edx
mov eax, dword [ebp - 0x1f8]
push eax
lea ecx, [ebp - 0x1f4]
call fcn.01089110
mov byte [ebp - 4], 2
push 0x1001464
lea ecx, [ebp - 0x1f4]
call fcn.0109e490
lea ecx, [ebp - 0x1f4]
call fcn.01089160
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xbc]
call eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1f4]
call fcn.01089140
push 0x32
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16c]
call fcn.01092b10
jmp 0x10f0808
xor ecx, ecx
mov byte [ebp - 0x9ae], cl
lea edx, [ebp - 0x9ae]
push edx
lea ecx, [ebp - 0x22c]
call fcn.010c29f0
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x218], eax
jmp 0x10ee7b0
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0
je 0x10ee87d
mov dword [ebp - 0x3bc], 0
mov dword [ebp - 0x3b8], 0
push 0x172
push 0
lea ecx, [ebp - 0x3b4]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x218]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x218]
mov edx, dword [eax + 0xc]
call edx
mov ecx, 0x5e
mov esi, eax
lea edi, [ebp - 0x3bc]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0x218]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x218]
mov eax, dword [edx + 0x24]
call eax
cmp eax, 0xb
je 0x10ee835
lea ecx, [ebp - 0x3bc]
push ecx
lea ecx, [ebp - 0x22c]
call fcn.010c2cb0
mov edx, dword [ebp - 0x218]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x218]
mov edx, dword [eax + 0x64]
call edx
test eax, eax
je 0x10ee858
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x218]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x218]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10ee878
mov ecx, dword [ebp - 0x218]
mov dword [ebp - 0x30], ecx
jmp 0x10ee79d
mov dword [ebp - 0x208], 0xffffffff
mov dword [ebp - 0x23c], 0xffffffff
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x3c0], 0
jmp 0x10ee8c0
mov edx, dword [ebp - 0x3c0]
add edx, 1
mov dword [ebp - 0x3c0], edx
lea ecx, [ebp - 0x22c]
call fcn.010c2c40
cmp dword [ebp - 0x3c0], eax
jae 0x10ee95a
mov eax, dword [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x22c]
call fcn.010c2c80
cmp dword [eax + 0xb9], 0
je 0x10ee916
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x208], ecx
mov edx, dword [ebp - 0x3c0]
push edx
lea ecx, [ebp - 0x22c]
call fcn.010c2c80
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x22c]
call fcn.010c2c80
cmp dword [eax + 0xbd], 0
je 0x10ee955
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x23c], ecx
mov edx, dword [ebp - 0x3c0]
push edx
lea ecx, [ebp - 0x22c]
call fcn.010c2c80
mov dword [ebp - 0x214], eax
jmp 0x10ee8b1
lea ecx, [ebp - 0x22c]
call fcn.010c2c40
cmp eax, 3
jbe 0x10ee9b7
cmp dword [ebp - 0x208], 3
jl 0x10ee989
lea ecx, [ebp - 0x22c]
call fcn.010c2c40
sub eax, 4
cmp dword [ebp - 0x208], eax
jbe 0x10ee9b5
mov dword [ebp - 0x23c], 0xffffffff
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x214], 0
mov ecx, dword [ebp - 0x214]
mov dword [ebp - 0x238], ecx
jmp 0x10ee9e3
mov dword [ebp - 0x23c], 0xffffffff
mov edx, dword [ebp - 0x23c]
mov dword [ebp - 0x208], edx
mov dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x114]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x204], 0
jmp 0x10eea21
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x114]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
je 0x10eea57
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x3c]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10eea46
jmp 0x10eea08
mov edx, dword [ebp - 0x204]
add edx, 1
mov dword [ebp - 0x204], edx
jmp 0x10eea08
mov dword [ebp - 0x21c], 0
mov eax, 0x64
cdq
idiv dword [ebp - 0x204]
mov dword [ebp - 0x230], eax
mov eax, 0x64
cdq
idiv dword [ebp - 0x204]
mov dword [ebp - 0x210], edx
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x114]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x114]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x200], eax
mov byte [ebp - 0x1f9], 0
jmp 0x10eead4
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x114]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
je 0x10f07d9
mov dword [ebp - 0x21c], 0
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x3c]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10eeb07
jmp 0x10eeabb
mov edx, dword [ebp - 0x234]
mov dword [ebp - 0x9f0], edx
mov eax, dword [ebp - 0x9f0]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x9c0]
call fcn.0110ca80
mov dword [ebp - 0x3d4], eax
mov edx, dword [ebp - 0x234]
add edx, 1
mov dword [ebp - 0x234], edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x30]
call eax
mov esi, eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x30]
call eax
cmp esi, eax
jne 0x10eebe2
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x70]
call eax
push eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xf4]
call eax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x64]
call eax
push eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xec]
call eax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x68]
call eax
push eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xf0]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x30]
call eax
mov esi, eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x30]
call eax
cmp esi, eax
jne 0x10eec9f
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x58]
call eax
mov ecx, 0x22
mov esi, eax
lea edi, [ebp - 0x464]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x58]
call eax
mov ecx, dword [eax]
mov dword [ebp - 0x464], ecx
mov edx, dword [ebp - 0x3d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [eax + 0x58]
call edx
add eax, 0x68
mov ecx, dword [eax]
mov dword [ebp - 0x3fc], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x3f8], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x3f4], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x3f0], edx
lea eax, [ebp - 0x464]
push eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xe8]
call eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x100]
call eax
test eax, eax
je 0x10eecf2
mov ecx, dword [ebp - 0x200]
mov dword [ebp - 0x108], ecx
mov edx, dword [ebp - 0x200]
mov dword [ebp - 0x2c], edx
movzx eax, byte [ebp - 0x1f9]
test eax, eax
jne 0x10eecf2
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [edx + 0x48]
call eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], edx
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xfc]
call eax
test eax, eax
je 0x10eed28
mov ecx, dword [ebp - 0x200]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax + 0x48]
call edx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xfc]
call eax
test eax, eax
jne 0x10eed60
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x100]
call eax
test eax, eax
je 0x10eee5a
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x9f4], eax
mov ecx, dword [ebp - 0x9f4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9f4]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10eee55
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x9f8], eax
mov ecx, dword [ebp - 0x9f8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9f8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10eee55
cmp dword [ebp - 0x208], 0xffffffff
je 0x10eee55
cmp dword [ebp - 0x23c], 0xffffffff
je 0x10eee55
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xfc]
call eax
test eax, eax
je 0x10eee19
mov ecx, dword [ebp - 0x110]
mov dword [ebp - 0x3d4], ecx
mov edx, dword [ebp - 0x234]
sub edx, 1
mov dword [ebp - 0x234], edx
mov dword [ebp - 0x21c], 1
jmp 0x10eee55
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x100]
call eax
test eax, eax
je 0x10eee55
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x3d4], ecx
mov edx, dword [ebp - 0x234]
sub edx, 1
mov dword [ebp - 0x234], edx
mov dword [ebp - 0x21c], 1
jmp 0x10ef10c
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x9fc], eax
mov ecx, dword [ebp - 0x9fc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9fc]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10ef10c
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xa00], eax
mov ecx, dword [ebp - 0xa00]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa00]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10ef10c
cmp dword [ebp - 0x208], 0xffffffff
je 0x10ef10c
cmp dword [ebp - 0x23c], 0xffffffff
je 0x10ef10c
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x64]
call eax
test eax, eax
jne 0x10eef04
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
je 0x10eef7b
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0xa04], ecx
mov edx, dword [ebp - 0xa04]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x9c0]
call fcn.0110ca80
mov dword [ebp - 0x3d4], eax
mov ecx, dword [ebp - 0x234]
add ecx, 1
mov dword [ebp - 0x234], ecx
cmp dword [ebp - 0x3d4], 0
jne 0x10eef46
jmp 0x10eef7b
mov edx, dword [ebp - 0x3d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [eax + 0x64]
call edx
test eax, eax
jne 0x10eef76
mov eax, dword [ebp - 0x3d4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x68]
call eax
test eax, eax
jne 0x10eef76
jmp 0x10eef7b
jmp 0x10eeed6
cmp dword [ebp - 0x3d4], 0
je 0x10eefae
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x30]
call eax
push eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x94]
call eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x24]
call eax
test eax, eax
jne 0x10ef10c
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xa0c], esi
mov dword [ebp - 0xa08], edi
mov dword [ebp - 0xa14], eax
mov dword [ebp - 0xa10], edx
mov ecx, dword [ebp - 0xa0c]
cmp ecx, dword [ebp - 0xa14]
jne 0x10ef02b
mov edx, dword [ebp - 0xa08]
cmp edx, dword [ebp - 0xa10]
je 0x10ef10c
mov eax, dword [ebp - 0x200]
push eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x20]
call eax
push edx
push eax
call fcn.010a0a20
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xa1c], esi
mov dword [ebp - 0xa18], edi
mov dword [ebp - 0xa24], eax
mov dword [ebp - 0xa20], edx
mov ecx, dword [ebp - 0xa18]
cmp ecx, dword [ebp - 0xa20]
jl 0x10ef0b8
jg 0x10ef0ac
mov edx, dword [ebp - 0xa1c]
cmp edx, dword [ebp - 0xa24]
jbe 0x10ef0b8
mov dword [ebp - 0xa28], 1
jmp 0x10ef0c2
mov dword [ebp - 0xa28], 0
mov eax, dword [ebp - 0xa28]
mov dword [ebp - 0x468], eax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
push ecx
mov edx, dword [ebp - 0x468]
push edx
mov eax, dword [ebp - 0x200]
push eax
call fcn.01121e40
cmp dword [ebp - 0x110], 0
je 0x10ef610
cmp dword [ebp - 0x30], 0
je 0x10ef610
mov ecx, dword [ebp - 0x110]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x110]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x30]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0xa30], esi
mov dword [ebp - 0xa2c], edi
mov dword [ebp - 0xa38], eax
mov dword [ebp - 0xa34], edx
mov ecx, dword [ebp - 0xa30]
cmp ecx, dword [ebp - 0xa38]
jne 0x10ef610
mov edx, dword [ebp - 0xa2c]
cmp edx, dword [ebp - 0xa34]
jne 0x10ef610
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10ef610
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10ef610
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xfc]
call eax
test eax, eax
jne 0x10ef1eb
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x100]
call eax
test eax, eax
je 0x10ef610
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x58]
call eax
mov ecx, eax
mov eax, 0x6400000
xor edx, edx
div ecx
xor edx, edx
mov dword [ebp - 0x474], eax
mov dword [ebp - 0x470], edx
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x49c], eax
mov dword [ebp - 0x498], edx
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x47c], eax
mov dword [ebp - 0x478], edx
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x4a0], 0
call fcn.0114bb20
mov dword [ebp - 0x4a4], eax
mov ecx, dword [ebp - 0x49c]
add ecx, dword [ebp - 0x474]
mov edx, dword [ebp - 0x498]
adc edx, dword [ebp - 0x470]
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0x498], edx
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x50]
call eax
mov esi, eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x54]
call eax
imul esi, eax
mov dword [ebp - 0x490], esi
mov eax, dword [ebp - 0x490]
cdq
push edx
push eax
mov ecx, dword [ebp - 0x498]
push ecx
mov edx, dword [ebp - 0x49c]
push edx
call sub.ntdll.dll__allrem
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0
jle 0x10ef34d
mov eax, dword [ebp - 0x490]
sub eax, dword [ebp - 0x484]
cdq
add eax, dword [ebp - 0x49c]
mov ecx, dword [ebp - 0x498]
adc ecx, edx
mov dword [ebp - 0x49c], eax
mov dword [ebp - 0x498], ecx
mov edx, dword [ebp - 0x49c]
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0xf0], eax
mov byte [ebp - 0x1f9], 1
mov ecx, dword [ebp - 0x498]
push ecx
mov edx, dword [ebp - 0x49c]
push edx
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x80]
call eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x20]
call eax
mov ecx, dword [ebp - 0x49c]
sub ecx, dword [ebp - 0x47c]
mov esi, dword [ebp - 0x498]
sbb esi, dword [ebp - 0x478]
sub eax, ecx
sbb edx, esi
push edx
push eax
mov edx, dword [ebp - 0x200]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x200]
mov edx, dword [eax + 0x84]
call edx
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x20]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xa8]
call eax
push 0xb0
push 0
lea ecx, [ebp - 0x554]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
push 0
lea edx, [ebp - 0x4a0]
push edx
lea eax, [ebp - 0x480]
push eax
lea ecx, [ebp - 0x558]
push ecx
lea edx, [ebp - 0x48c]
push edx
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x554], eax
mov word [ebp - 0x4b0], 2
mov dword [ebp - 0x4b4], 0
mov ecx, dword [ebp - 0x47c]
mov dword [ebp - 0x53c], ecx
mov edx, dword [ebp - 0x478]
mov dword [ebp - 0x538], edx
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x54c], eax
mov ecx, dword [ebp - 0x478]
mov dword [ebp - 0x548], ecx
mov edx, dword [ebp - 0x474]
mov dword [ebp - 0x544], edx
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x540], eax
mov cx, word [ebp - 0x558]
mov word [ebp - 0x4ae], cx
mov dx, word [ebp - 0x480]
mov word [ebp - 0x4ac], dx
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x554]
push ecx
mov edx, dword [ebp - 0x4a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4a4]
mov edx, dword [eax + 0x14]
call edx
test eax, eax
jne 0x10ef53e
call fcn.010947d0
mov dword [ebp - 0xa3c], eax
push 0x1d7f
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100d344
mov eax, dword [ebp - 0xa3c]
push eax
mov ecx, dword [ebp - 0xa3c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
mov dword [ebp - 0x20], 0
jmp 0x10f07d9
push 0xa9
push 0
lea ecx, [ebp - 0xec]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x47c]
mov dword [ebp - 0xec], edx
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0xe8], eax
mov ecx, dword [ebp - 0x474]
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0x470]
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0x4e], 0
mov dword [ebp - 0xd2], 1
mov dword [ebp - 0xda], 1
mov word [ebp - 0x4a], 2
mov byte [ebp - 0x44], 0xb
mov dword [ebp - 0x28], 1
push 0
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xc8]
call eax
push 0
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xbc]
call eax
push 0
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xf4]
call eax
push 0
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xec]
call eax
mov ecx, dword [ebp - 0x20c]
add ecx, 1
mov dword [ebp - 0x20c], ecx
mov edx, dword [ebp - 0x3d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x3c8], edx
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x3dc], eax
mov dword [ebp - 0x3d8], edx
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x3d0], eax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x88]
call eax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x3c]
call eax
push eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xa0]
call eax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x70]
call eax
push eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xc8]
call eax
cmp dword [ebp - 0x3d0], 5
je 0x10ef740
cmp dword [ebp - 0x3d0], 4
je 0x10ef740
cmp dword [ebp - 0x3d0], 0xc
je 0x10ef740
cmp dword [ebp - 0x3d0], 0xa
je 0x10ef740
cmp dword [ebp - 0x3d0], 6
je 0x10ef740
cmp dword [ebp - 0x3d0], 7
je 0x10ef740
cmp dword [ebp - 0x3d0], 8
je 0x10ef740
cmp dword [ebp - 0x3d0], 9
jne 0x10ef830
mov ecx, dword [ebp - 0x230]
sub ecx, 2
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x2c]
call edx
push 0x30
push 0
lea eax, [ebp - 0x5dc]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x5dc], 0xffffffff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x5d8], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x5cc], ecx
mov edx, dword [ebp - 0x3dc]
mov dword [ebp - 0x5c4], edx
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x5c0], eax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x5d4], eax
mov dword [ebp - 0x5d0], edx
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp - 0x5b4], ecx
mov edx, dword [ebp - 0x3c8]
mov dword [ebp - 0x5b0], edx
mov eax, dword [ebp - 0x3d4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x5bc], eax
lea ecx, [ebp - 0x5dc]
push ecx
lea ecx, [ebp - 0x5ac]
call fcn.0111e550
mov byte [ebp - 4], 4
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x5ac]
call fcn.0111e5a0
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5ac]
call fcn.01092b10
jmp 0x10f012e
cmp dword [ebp - 0x3d0], 1
jne 0x10efe0a
call fcn.01177170
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp - 0x230]
sub eax, 2
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xa44], esi
mov dword [ebp - 0xa40], edi
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa48], edx
mov ecx, dword [ebp - 0xa40]
cmp ecx, dword [ebp - 0xa48]
jl 0x10efc01
jg 0x10ef8c7
mov edx, dword [ebp - 0xa44]
cmp edx, dword [ebp - 0xa4c]
jb 0x10efc01
push 0x50
push 0
lea eax, [ebp - 0x634]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x634], ecx
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x61c], edx
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x62c], eax
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x628], ecx
mov edx, dword [ebp - 0x3dc]
mov dword [ebp - 0x614], edx
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x610], eax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x5fc], eax
mov dword [ebp - 0x5f8], edx
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x5f4], eax
mov dword [ebp - 0x5f0], edx
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x624], eax
mov dword [ebp - 0x620], edx
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x30]
call eax
movzx ecx, ax
mov dword [ebp - 0x604], ecx
mov edx, dword [ebp - 0x3d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [eax + 0x30]
call edx
movzx eax, ax
cdq
push edx
push eax
mov eax, dword [ebp - 0x5f8]
push eax
mov ecx, dword [ebp - 0x5fc]
push ecx
call sub.ntdll.dll__alldiv
mov dword [ebp - 0x60c], eax
mov dword [ebp - 0x608], edx
mov edx, dword [ebp - 0x200]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x200]
mov edx, dword [eax + 0x60]
call edx
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x5ec], 1
push 0
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x634]
push ecx
mov edx, dword [ebp - 0x5e0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5e0]
mov edx, dword [eax + 0x38]
call edx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x10efbfc
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xa54], eax
mov dword [ebp - 0xa50], edx
mov ecx, dword [ebp - 0xa50]
cmp ecx, dword [ebp - 0x5f8]
jl 0x10efbfc
jg 0x10efa68
mov edx, dword [ebp - 0xa54]
cmp edx, dword [ebp - 0x5fc]
jbe 0x10efbfc
push 0x148
push 0
lea eax, [ebp - 0x77c]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x77c], edx
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x774], eax
mov ecx, dword [ebp - 0x3d8]
mov dword [ebp - 0x770], ecx
mov edx, dword [ebp - 0x3d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [eax + 0x44]
call edx
mov dword [ebp - 0x76c], eax
mov dword [ebp - 0x768], edx
mov eax, dword [ebp - 0x3d4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x764], eax
mov dword [ebp - 0x760], edx
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x75c], eax
mov dword [ebp - 0x758], edx
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x750], ax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x754], eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xa58], eax
mov ecx, dword [ebp - 0xa58]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa58]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0x74c], ax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xa5c], eax
mov ecx, dword [ebp - 0xa5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa5c]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0x74e], ax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100c9d0
lea edx, [ebp - 0x74a]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
push 0
push 0
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x77c]
push ecx
mov edx, dword [ebp - 0x5e0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5e0]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x20], eax
jmp 0x10efdc3
push 0x148
push 0
lea eax, [ebp - 0x8c4]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x8c4], edx
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x8bc], eax
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x8b8], ecx
mov edx, dword [ebp - 0x3d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [eax + 0x30]
call edx
mov word [ebp - 0x898], ax
mov eax, dword [ebp - 0x3d4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x8b4], eax
mov dword [ebp - 0x8b0], edx
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x8ac], eax
mov dword [ebp - 0x8a8], edx
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x44]
call eax
mov dword [ebp - 0x8a4], eax
mov dword [ebp - 0x8a0], edx
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x89c], eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0xa60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa60]
mov eax, dword [edx + 0x50]
call eax
mov word [ebp - 0x894], ax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xa64], eax
mov ecx, dword [ebp - 0xa64]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa64]
mov eax, dword [edx + 0x54]
call eax
mov word [ebp - 0x896], ax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x28]
call eax
movzx ecx, ax
push ecx
push 0x100c9d0
lea edx, [ebp - 0x892]
push edx
call sub.ntdll.dll_swprintf
add esp, 0x10
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x790], eax
mov ecx, dword [ebp - 0x3dc]
mov dword [ebp - 0x78c], ecx
mov edx, dword [ebp - 0x3d8]
mov dword [ebp - 0x788], edx
mov dword [ebp - 0x784], 1
push 0
push 0
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
mov edx, dword [ebp - 0x5e0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5e0]
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x10efe05
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp - 0x3d8]
push ecx
mov edx, dword [ebp - 0x3dc]
push edx
mov eax, dword [ebp - 0xfc]
push eax
mov ecx, dword [ebp - 0x5e0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5e0]
mov eax, dword [edx + 0x28]
call eax
jmp 0x10f012e
cmp dword [ebp - 0x3d0], 2
je 0x10efe29
cmp dword [ebp - 0x3d0], 3
je 0x10efe29
cmp dword [ebp - 0x3d0], 0
jne 0x10f012e
mov ecx, dword [ebp - 0x230]
sub ecx, 2
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x2c]
call edx
call fcn.0114bb20
mov dword [ebp - 0x8c8], eax
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x20]
call eax
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xa6c], esi
mov dword [ebp - 0xa68], edi
mov dword [ebp - 0xa74], eax
mov dword [ebp - 0xa70], edx
mov ecx, dword [ebp - 0xa6c]
cmp ecx, dword [ebp - 0xa74]
jne 0x10efea9
mov edx, dword [ebp - 0xa68]
cmp edx, dword [ebp - 0xa70]
je 0x10efebf
cmp dword [ebp - 0x3d0], 2
je 0x10efebf
cmp dword [ebp - 0x3d0], 3
jne 0x10effcc
push 0x48
push 0
lea eax, [ebp - 0x914]
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0x914], 0xffffffff
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x910], ecx
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x90c], eax
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x908], ecx
mov edx, dword [ebp - 0x3dc]
mov dword [ebp - 0x8f4], edx
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x8f0], eax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x8e4], eax
mov dword [ebp - 0x8e0], edx
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x8dc], eax
mov dword [ebp - 0x8d8], edx
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x904], eax
mov dword [ebp - 0x900], edx
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x8ec], eax
mov dword [ebp - 0x8d4], 1
push 0
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x914]
push edx
mov eax, dword [ebp - 0x8c8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8c8]
mov eax, dword [edx + 0x30]
call eax
mov dword [ebp - 0x20], eax
jmp 0x10f00ec
cmp dword [ebp - 0x3d0], 0
jne 0x10f00ec
push 0x40
push 0
lea ecx, [ebp - 0x954]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x954], edx
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x92c], eax
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp - 0x94c], ecx
mov edx, dword [ebp - 0x3c8]
mov dword [ebp - 0x948], edx
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x924], eax
mov ecx, dword [ebp - 0x3d8]
mov dword [ebp - 0x920], ecx
mov edx, dword [ebp - 0x3d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [eax + 0x30]
call edx
mov word [ebp - 0x934], ax
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x30]
call eax
mov word [ebp - 0x932], ax
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x944], eax
mov dword [ebp - 0x940], edx
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x93c], eax
mov dword [ebp - 0x938], edx
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x930], eax
mov dword [ebp - 0x91c], 1
push 0
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x954]
push edx
mov eax, dword [ebp - 0x8c8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8c8]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x10f012e
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x2c]
call eax
push eax
mov ecx, dword [ebp - 0x3d8]
push ecx
mov edx, dword [ebp - 0x3dc]
push edx
mov eax, dword [ebp - 0xfc]
push eax
mov ecx, dword [ebp - 0x8c8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x8c8]
mov eax, dword [edx + 0x28]
call eax
cmp dword [ebp - 0x20], 0
jne 0x10f013e
jmp 0x10f07d9
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x3d8]
push ecx
mov edx, dword [ebp - 0x3dc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.010cb6e0
push 2
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x2c]
call edx
push 0x100d28c
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x3c]
call eax
mov dword [ebp - 0x958], 0x100cb60
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xc0]
call eax
mov dword [ebp - 0x96c], eax
xor ecx, ecx
mov byte [ebp - 0x9af], cl
lea edx, [ebp - 0x9af]
push edx
mov eax, dword [ebp - 0x96c]
push eax
lea ecx, [ebp - 0x968]
call fcn.01089110
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x958]
push ecx
lea ecx, [ebp - 0x968]
call fcn.0109e490
lea ecx, [ebp - 0x968]
call fcn.01089160
push eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0xbc]
call edx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x968]
call fcn.01089140
push 0
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x70]
call eax
test eax, eax
jne 0x10f024f
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0xf8]
call eax
test eax, eax
je 0x10f027f
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10f027f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0x9c0]
call fcn.010e82f0
mov edx, dword [ebp - 0x200]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x200]
mov edx, dword [eax + 0x60]
call edx
test eax, eax
je 0x10f02d1
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x9c0]
call fcn.010e7900
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 8]
cmp edx, dword [ecx + 0xc]
je 0x10f035a
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x54]
call eax
mov dword [ebp - 0x974], eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x50]
call eax
mov dword [ebp - 0x970], eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x24]
call eax
push eax
mov ecx, dword [ebp - 0x970]
push ecx
mov edx, dword [ebp - 0x974]
push edx
mov eax, dword [ebp - 0x200]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x200]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x9c0]
call fcn.010e7ce0
mov eax, dword [ebp - 0xf8]
push eax
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x114]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x980], eax
mov ecx, dword [ebp - 0x980]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x980]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x97c], eax
mov dword [ebp - 0x978], 0
cmp dword [ebp - 0x97c], 0
je 0x10f046a
mov ecx, dword [ebp - 0x97c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x97c]
mov eax, dword [edx + 0x3c]
call eax
movzx ecx, al
test ecx, ecx
jne 0x10f03df
mov edx, dword [ebp - 0x980]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x980]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x97c], eax
jmp 0x10f039d
mov eax, dword [ebp - 0x978]
cmp eax, dword [ebp - 0x20c]
jl 0x10f043d
mov ecx, dword [ebp - 0x97c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x97c]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x980]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x980]
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [ebp - 0x980]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x980]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x97c], eax
mov dword [ebp - 0x978], 0
jmp 0x10f039d
mov ecx, dword [ebp - 0x978]
add ecx, 1
mov dword [ebp - 0x978], ecx
mov edx, dword [ebp - 0x980]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x980]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x97c], eax
jmp 0x10f039d
push 0
push 0
mov eax, dword [ebp - 0x980]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x980]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10f05db
mov ecx, dword [ebp - 0x980]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x980]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0xa78], eax
mov ecx, dword [ebp - 0xa78]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa78]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10f056e
push 1
push 0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x980]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x980]
mov edx, dword [eax + 0x20]
call edx
push eax
mov ecx, dword [ebp - 0x9c0]
call fcn.010f6a80
push 0
push 0
mov eax, dword [ebp - 0x980]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x980]
mov eax, dword [edx + 0x2c]
call eax
test eax, eax
jne 0x10f056c
push 6
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
call eax
call fcn.010947d0
mov dword [ebp - 0xa7c], eax
push 0x1e94
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100d368
mov ecx, dword [ebp - 0xa7c]
push ecx
mov edx, dword [ebp - 0xa7c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov dword [ebp - 0x9b4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22c]
call fcn.010c2a30
mov eax, dword [ebp - 0x9b4]
jmp 0x10f0cc0
jmp 0x10f05db
push 6
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x20]
call edx
call fcn.010947d0
mov dword [ebp - 0xa80], eax
push 0x1e9b
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100d368
mov eax, dword [ebp - 0xa80]
push eax
mov ecx, dword [ebp - 0xa80]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
mov dword [ebp - 0x9b8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22c]
call fcn.010c2a30
mov eax, dword [ebp - 0x9b8]
jmp 0x10f0cc0
mov ecx, dword [ebp - 0x980]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x980]
mov eax, dword [edx]
call eax
push 0x9c4
call fcn.0108fe30
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x200]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x200]
mov edx, dword [eax + 0x1c]
call edx
push edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 0x200]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x200]
mov edx, dword [eax + 0x28]
call edx
push eax
mov ecx, dword [ebp - 0x9c0]
call fcn.010d5fd0
test eax, eax
jne 0x10f0671
call fcn.010947d0
mov dword [ebp - 0xa84], eax
push 0x1ea8
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100d248
mov eax, dword [ebp - 0xa84]
push eax
mov ecx, dword [ebp - 0xa84]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
push 0x32
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp - 0x18], 0
je 0x10f06e8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x9c0]
call fcn.010e8540
mov dword [ebp - 0x984], eax
call fcn.010947d0
mov dword [ebp - 0xa88], eax
mov eax, dword [ebp - 0x984]
push eax
push 0x1eaf
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100d32c
mov ecx, dword [ebp - 0xa88]
push ecx
mov edx, dword [ebp - 0xa88]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0x10
mov edx, dword [ebp - 0x984]
mov dword [ebp - 0x104], edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10f074d
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10f074d
mov ecx, dword [ebp - 0x3d8]
push ecx
mov edx, dword [ebp - 0x3dc]
push edx
mov eax, dword [ebp - 0x3c8]
push eax
mov ecx, dword [ebp - 0x3cc]
push ecx
mov edx, dword [ebp - 0x200]
push edx
mov eax, dword [ebp - 0x104]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x9c0]
call fcn.010f2cd0
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xc0]
call eax
mov dword [ebp - 0x998], eax
xor ecx, ecx
mov byte [ebp - 0x9b9], cl
lea edx, [ebp - 0x9b9]
push edx
mov eax, dword [ebp - 0x998]
push eax
lea ecx, [ebp - 0x994]
call fcn.01089110
mov byte [ebp - 4], 6
push 0x1001464
lea ecx, [ebp - 0x994]
call fcn.0109e490
lea ecx, [ebp - 0x994]
call fcn.01089160
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0xbc]
call eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x994]
call fcn.01089140
push 0x100cfa0
mov ecx, dword [ebp - 0x200]
push ecx
call fcn.011144e0
jmp 0x10eeabb
cmp dword [ebp - 0x210], 0
je 0x10f07f6
mov edx, dword [ebp - 0x210]
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22c]
call fcn.010c2a30
cmp dword [ebp - 0x20], 0
je 0x10f0cbd
mov ecx, dword [ebp - 0xf0]
push ecx
mov edx, dword [ebp - 0xf4]
push edx
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x28]
call eax
push eax
call fcn.010ce9f0
lea ecx, [ebp - 0x114]
push ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xf8]
mov edx, dword [eax + 0x28]
call edx
push eax
call fcn.01113ef0
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10f096c
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
jne 0x10f096c
lea ecx, [ebp - 0x99c]
call fcn.01114a50
mov dword [ebp - 4], 7
cmp dword [ebp - 0x30], 0
je 0x10f093e
cmp dword [ebp - 0x108], 0
je 0x10f093e
mov ecx, dword [ebp - 0x108]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x108]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x28]
call eax
push eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x30]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x28]
call eax
push eax
lea ecx, [ebp - 0x99c]
call fcn.01114f60
test eax, eax
jne 0x10f093e
call fcn.010947d0
mov dword [ebp - 0xa8c], eax
push 0x1ed1
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100cad4
mov ecx, dword [ebp - 0xa8c]
push ecx
mov edx, dword [ebp - 0xa8c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
push 1
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x9c0]
call fcn.010d58b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x99c]
call fcn.01092b10
cmp dword [ebp - 0x28], 0
je 0x10f0acd
mov dword [ebp - 0x9a0], 0
push 0
mov edx, dword [ebp - 0x114]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x114]
mov edx, dword [eax + 0x44]
call edx
lea eax, [ebp - 0x9a0]
push eax
lea ecx, [ebp - 0xec]
push ecx
mov edx, dword [ebp - 0x114]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x114]
mov edx, dword [eax + 0x24]
call edx
test eax, eax
jne 0x10f09f8
call fcn.010947d0
mov dword [ebp - 0xa90], eax
push 0x1ede
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100d308
mov eax, dword [ebp - 0xa90]
push eax
mov ecx, dword [ebp - 0xa90]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
xor eax, eax
jmp 0x10f0cc0
push 1
mov ecx, dword [ebp - 0x9a0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9a0]
mov eax, dword [edx + 0xc8]
call eax
push 0
mov ecx, dword [ebp - 0x9a0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9a0]
mov eax, dword [edx + 0xc0]
call eax
push 1
mov ecx, dword [ebp - 0x9a0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9a0]
mov eax, dword [edx + 0xbc]
call eax
push 1
mov ecx, dword [ebp - 0x9a0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9a0]
mov eax, dword [edx + 0xf4]
call eax
push 0
mov ecx, dword [ebp - 0x9a0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9a0]
mov eax, dword [edx + 0xf0]
call eax
push 1
mov ecx, dword [ebp - 0x9a0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9a0]
mov eax, dword [edx + 0xec]
call eax
mov ecx, dword [ebp - 0x9a0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9a0]
mov eax, dword [edx + 0x58]
call eax
mov dword [eax], 1
push 0
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x114]
mov eax, dword [edx + 0x44]
call eax
push 0
push 0
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x114]
mov eax, dword [edx + 0x2c]
call eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0xf8]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x9c0]
call fcn.010b3b20
test eax, eax
jne 0x10f0b22
call fcn.010947d0
mov dword [ebp - 0xa94], eax
push 0x1eee
push 0x100c14c
call fcn.010d9b60
push eax
push 0x100d2e8
mov ecx, dword [ebp - 0xa94]
push ecx
mov edx, dword [ebp - 0xa94]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
cmp dword [ebp - 0x108], 0
je 0x10f0b3c
push 0x100cfa0
mov edx, dword [ebp - 0x108]
push edx
call fcn.011144e0
mov eax, dword [ebp - 0xf8]
push eax
call fcn.010cb770
push 1
mov ecx, dword [ebp - 0xf0]
push ecx
mov edx, dword [ebp - 0xf4]
push edx
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xf8]
mov edx, dword [eax + 0x28]
call edx
push eax
call fcn.010cc970
mov eax, dword [ebp - 0xf0]
push eax
mov ecx, dword [ebp - 0xf4]
push ecx
mov edx, dword [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x28]
call eax
push eax
call fcn.010cd8d0
mov ecx, dword [ebp - 0x9c0]
mov byte [ecx + 0x1078], 1
mov edx, dword [ebp - 0x9c0]
mov byte [edx + 0x1079], 1
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [ebp - 0x9c0]
mov dword [ecx + 0x107c], eax
mov edx, dword [ebp - 0x9c0]
mov eax, dword [ebp - 0xf4]
mov dword [edx + 0x1080], eax
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 0x1084], ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xf8]
mov edx, dword [eax + 0x28]
call edx
mov ecx, dword [ebp - 0x9c0]
mov dword [ecx + 0x1088], eax
mov edx, dword [ebp - 0x9c0]
mov eax, dword [ebp - 0x3c]
mov dword [edx + 0x1090], eax
mov ecx, dword [ebp - 0x38]
mov dword [edx + 0x1094], ecx
mov edx, dword [ebp - 0x9c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9c0]
mov edx, dword [eax + 0xe0]
call edx
cmp dword [ebp - 0x108], 0
je 0x10f0c9c
mov eax, dword [ebp - 0x108]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x108]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xa98], eax
mov ecx, dword [ebp - 0x108]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x108]
mov eax, dword [edx + 0x48]
call eax
push edx
push eax
mov ecx, dword [ebp - 0xa98]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa98]
mov eax, dword [edx + 0x28]
call eax
push eax
call fcn.010ceae0
push 0x1004afc
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x3c]
call eax
push 0x64
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8