Function at 0x10020790
Capabilities:
Access peb ldr_data

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100e5d92
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x268
mov eax, dword [0x10138008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, dword [ebx + 0xc]
mov edi, dword [ebx + 8]
mov esi, dword [ebx + 0x10]
mov dword [ebp - 0x250], edx
mov dword [ebp - 4], 0
mov ecx, edx
call fcn.10008ca0
mov eax, dword [ebp - 0x250]
mov edx, dword [edx + 0x28]
push ecx
mov ecx, dword [eax + 0x24]
call fcn.10016820
mov ecx, dword [ebp - 0x250]
mov eax, dword [ecx + 0x24]
mov dword [ecx + 0x28], eax
lea eax, [ecx + 0x30]
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [ebp - 0x25c], eax
call fcn.1001f010
mov ecx, dword [ebp - 0x25c]
add esp, 4
mov eax, dword [ecx]
mov dword [ecx + 4], eax
mov ecx, edi
call fcn.10004710
test al, al
je 0x10020844
mov byte [ebp - 0x241], 0
jmp 0x100216e7
lea ecx, [ebx + 0x14]
call fcn.10004710
test al, al
je 0x1002086b
push str.KoH3PNlg9zjHkr7LqEIrUUBJ1BQ8TWG
call fcn.10004660
add esp, 4
lea ecx, [ebx + 0x14]
push eax
push str.KoH3PNlg9zjHkr7LqEIrUUBJ1BQ8TWG
call fcn.10004b10
lea ecx, [ebp - 0x1b0]
call fcn.100048f0
mov byte [ebp - 4], 2
lea ecx, [ebx + 0x14]
call fcn.10004910
mov ecx, eax
cmp dword [eax + 0x14], 0x10
jb 0x1002088c
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x1b0]
call fcn.10004b10
push esi
push edi
lea ecx, [ebp - 0x1b0]
call fcn.1000fb20
test al, al
jne 0x100208b7
mov byte [ebp - 0x241], al
jmp 0x100216d8
push 0x74
lea eax, [ebp - 0x240]
push 0
push eax
call fcn.100bea00
add esp, 0xc
lea ecx, [ebp - 0x240]
call fcn.100ac610
mov byte [ebp - 4], 3
xorps xmm0, xmm0
movups xmmword [ebp - 0x90], xmm0
mov dword [ebp - 0x88], 0
movq qword [ebp - 0x80], xmm0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov byte [ebp - 4], 7
lea eax, [ebp - 0x90]
push ecx
push eax
push esi
lea ecx, [ebp - 0x240]
call fcn.100ac770
test al, al
jne 0x1002093b
mov byte [ebp - 0x241], al
jmp 0x100216ba
xorps xmm0, xmm0
lea ecx, [ebp - 0x90]
push 0x1010c082
push 0x1010c074
movups xmmword [ebp - 0x168], xmm0
movq qword [ebp - 0x158], xmm0
call fcn.100aad60
push eax
lea ecx, [ebp - 0x168]
call fcn.100aa100
mov byte [ebp - 4], 8
cmp byte [ebp - 0x160], 4
je 0x10020987
mov byte [ebp - 0x241], 0
jmp 0x100216ab
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x168]
call fcn.100aa500
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xd8]
call fcn.10004710
test al, al
jne 0x100209df
lea ecx, [ebp - 0xd8]
call fcn.10004910
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x100209c1
mov esi, dword [esi]
mov eax, dword [ebp - 0x250]
lea ecx, [ebp - 0xd8]
push eax
call fcn.100049a0
mov edx, eax
mov ecx, esi
call fcn.10026010
add esp, 4
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xd8]
call fcn.100046c0
xorps xmm0, xmm0
lea ecx, [ebp - 0x90]
push 0x1010c0c7
push str.download_config
movups xmmword [ebp - 0x108], xmm0
movq qword [ebp - 0xf8], xmm0
call fcn.100aad60
push eax
lea ecx, [ebp - 0x108]
call fcn.100aa100
mov byte [ebp - 4], 0xa
cmp byte [ebp - 0x100], 7
jne 0x10020cdb
lea eax, [ebp - 0x20]
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x108]
push eax
movq qword [ebp - 0x20], xmm0
call fcn.100ab0f0
mov byte [ebp - 4], 0xb
xor ecx, ecx
mov esi, dword [ebp - 0x20]
mov eax, 0x2aaaaaab
mov dword [ebp - 0x24c], ecx
mov ecx, dword [ebp - 0x1c]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x10020c5f
xor edi, edi
mov dword [ebp - 0x248], edi
add edi, esi
mov ecx, edi
call fcn.10004710
test al, al
jne 0x10020c28
lea ecx, [ebp - 0x5c]
call fcn.100047b0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x44]
call fcn.100047b0
mov byte [ebp - 4], 0xe
mov ecx, edi
call fcn.10004910
mov esi, eax
mov dword [ebp - 0x254], esi
cmp dword [esi + 0x14], 0x10
jb 0x10020ac9
mov eax, dword [esi]
mov dword [ebp - 0x254], eax
lea eax, [ebp - 0x5c]
mov ecx, edi
push eax
call fcn.100049a0
mov ecx, dword [ebp - 0x254]
mov edx, eax
call fcn.10026010
add esp, 4
lea ecx, [ebp - 0x78]
call fcn.100048f0
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
cmp dword [esi + 0x14], 0x10
mov eax, esi
movups xmmword [ebp - 0xc0], xmm0
movq qword [ebp - 0xb0], xmm0
jb 0x10020b0c
mov eax, dword [esi]
mov ecx, dword [esi + 0x10]
jb 0x10020b13
mov esi, dword [esi]
add eax, ecx
lea ecx, [ebp - 0x108]
push eax
push esi
call fcn.100aad60
push eax
lea ecx, [ebp - 0xc0]
call fcn.100aa100
mov byte [ebp - 4], 0x10
cmp byte [ebp - 0xb8], 4
jne 0x10020b69
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0xc0]
call fcn.100aa500
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x78]
push eax
call fcn.10008df0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xf0]
call fcn.100046c0
lea ecx, [ebp - 0x78]
call fcn.10004710
test al, al
jne 0x10020b9f
lea ecx, [ebp - 0x78]
call fcn.10004910
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x10020b87
mov esi, dword [esi]
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x78]
call fcn.100049a0
mov edx, eax
mov ecx, esi
call fcn.10026010
add esp, 4
mov edi, dword [ebp - 0x250]
mov eax, dword [edi + 0x1c]
cmp dword [edi + 0x20], eax
je 0x10020be5
push eax
push 0x30
call fcn.10004640
add esp, 8
mov esi, eax
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x258], esi
mov ecx, esi
push eax
call fcn.100047d0
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x44]
push eax
lea ecx, [esi + 0x18]
call fcn.100047d0
mov byte [ebp - 4], 0x10
add dword [edi + 0x1c], 0x30
jmp 0x10020bf2
lea ecx, [ebp - 0x5c]
push ecx
push eax
lea ecx, [edi + 0x18]
call fcn.1001edb0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xc0]
call fcn.100aa2a0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x78]
call fcn.100046c0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x44]
call fcn.10004720
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x5c]
call fcn.10004720
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x248]
sub ecx, esi
inc dword [ebp - 0x24c]
add edi, 0x18
imul ecx
mov dword [ebp - 0x248], edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x24c], eax
jb 0x10020a83
mov byte [ebp - 4], 0xa
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x10020cdb
mov edi, dword [ebp - 0x1c]
cmp esi, edi
je 0x10020c82
mov ecx, esi
call fcn.100046c0
add esi, 0x18
cmp esi, edi
jne 0x10020c71
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x10020cbc
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002171c
push ecx
push esi
call fcn.100bccb8
add esp, 8
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x90]
push 0x1010c0b5
push str.online_config
movups xmmword [ebp - 0xc0], xmm0
movq qword [ebp - 0xb0], xmm0
call fcn.100aad60
push eax
lea ecx, [ebp - 0xc0]
call fcn.100aa100
mov byte [ebp - 4], 0x16
cmp byte [ebp - 0xb8], 7
jne 0x10020fca
lea eax, [ebp - 0x20]
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push eax
movq qword [ebp - 0x20], xmm0
call fcn.100ab0f0
mov byte [ebp - 4], 0x17
xor ecx, ecx
mov esi, dword [ebp - 0x20]
mov eax, 0x2aaaaaab
mov dword [ebp - 0x24c], ecx
mov ecx, dword [ebp - 0x1c]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x10020f4c
xor edi, edi
mov dword [ebp - 0x254], edi
add edi, esi
mov ecx, edi
call fcn.10004710
test al, al
jne 0x10020f15
lea ecx, [ebp - 0x5c]
call fcn.100047b0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x44]
call fcn.100047b0
mov byte [ebp - 4], 0x1a
mov ecx, edi
call fcn.10004910
mov esi, eax
mov dword [ebp - 0x248], esi
cmp dword [esi + 0x14], 0x10
jb 0x10020db6
mov eax, dword [esi]
mov dword [ebp - 0x248], eax
lea eax, [ebp - 0x5c]
mov ecx, edi
push eax
call fcn.100049a0
mov ecx, dword [ebp - 0x248]
mov edx, eax
call fcn.10026010
add esp, 4
lea ecx, [ebp - 0xa8]
call fcn.100048f0
mov byte [ebp - 4], 0x1b
xorps xmm0, xmm0
cmp dword [esi + 0x14], 0x10
mov eax, esi
movups xmmword [ebp - 0x78], xmm0
movq qword [ebp - 0x68], xmm0
jb 0x10020df6
mov eax, dword [esi]
mov ecx, dword [esi + 0x10]
jb 0x10020dfd
mov esi, dword [esi]
add eax, ecx
lea ecx, [ebp - 0xc0]
push eax
push esi
call fcn.100aad60
push eax
lea ecx, [ebp - 0x78]
call fcn.100aa100
mov byte [ebp - 4], 0x1c
cmp byte [ebp - 0x70], 4
jne 0x10020e4d
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x78]
call fcn.100aa500
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xa8]
push eax
call fcn.10008df0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xf0]
call fcn.100046c0
lea ecx, [ebp - 0xa8]
call fcn.10004710
test al, al
jne 0x10020e8c
lea ecx, [ebp - 0xa8]
call fcn.10004910
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x10020e71
mov esi, dword [esi]
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0xa8]
call fcn.100049a0
mov edx, eax
mov ecx, esi
call fcn.10026010
add esp, 4
mov edi, dword [ebp - 0x250]
mov eax, dword [edi + 0x28]
cmp dword [edi + 0x2c], eax
je 0x10020ed2
push eax
push 0x30
call fcn.10004640
add esp, 8
mov esi, eax
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x258], esi
mov ecx, esi
push eax
call fcn.100047d0
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x44]
push eax
lea ecx, [esi + 0x18]
call fcn.100047d0
mov byte [ebp - 4], 0x1c
add dword [edi + 0x28], 0x30
jmp 0x10020edf
lea ecx, [ebp - 0x5c]
push ecx
push eax
lea ecx, [edi + 0x24]
call fcn.1001edb0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x78]
call fcn.100aa2a0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xa8]
call fcn.100046c0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x44]
call fcn.10004720
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x5c]
call fcn.10004720
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x254]
sub ecx, esi
inc dword [ebp - 0x24c]
add edi, 0x18
imul ecx
mov dword [ebp - 0x254], edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x24c], eax
jb 0x10020d70
mov byte [ebp - 4], 0x16
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x10020fca
mov edi, dword [ebp - 0x1c]
cmp esi, edi
je 0x10020f71
nop
mov ecx, esi
call fcn.100046c0
add esi, 0x18
cmp esi, edi
jne 0x10020f60
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x10020fab
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021721
push ecx
push esi
call fcn.100bccb8
add esp, 8
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x90]
push 0x1010c0eb
push str.online_file
movups xmmword [ebp - 0x78], xmm0
movq qword [ebp - 0x68], xmm0
call fcn.100aad60
push eax
lea ecx, [ebp - 0x78]
call fcn.100aa100
mov byte [ebp - 4], 0x22
cmp byte [ebp - 0x70], 7
jne 0x1002167a
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x24], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x78]
push eax
movq qword [ebp - 0x2c], xmm0
call fcn.100ab0f0
mov byte [ebp - 4], 0x23
xor ecx, ecx
mov esi, dword [ebp - 0x2c]
mov eax, 0x2aaaaaab
mov dword [ebp - 0x250], ecx
mov ecx, dword [ebp - 0x28]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100215fd
xor edi, edi
mov dword [ebp - 0x258], edi
add edi, esi
mov ecx, edi
call fcn.10004710
test al, al
jne 0x100215c6
xorps xmm0, xmm0
lea ecx, [ebp - 0x54]
movups xmmword [ebp - 0x54], xmm0
movups xmmword [ebp - 0x44], xmm0
movq qword [ebp - 0x34], xmm0
call fcn.100047b0
mov byte [ebp - 4], 0x24
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x30], 0
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xf0]
call fcn.100047b0
mov byte [ebp - 4], 0x27
mov ecx, edi
call fcn.10004910
mov esi, eax
mov dword [ebp - 0x248], esi
cmp dword [esi + 0x14], 0x10
jb 0x100210cd
mov eax, dword [esi]
mov dword [ebp - 0x248], eax
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
call fcn.100049a0
mov ecx, dword [ebp - 0x248]
mov edx, eax
call fcn.10026010
add esp, 4
lea ecx, [ebp - 0xf0]
call fcn.10004910
lea ecx, [ebp - 0x54]
cmp ecx, eax
je 0x1002111e
lea ecx, [ebp - 0xf0]
call fcn.10004910
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x10021112
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x54]
call fcn.100049b0
lea ecx, [ebp - 0x1c8]
call fcn.100048f0
mov byte [ebp - 4], 0x28
xorps xmm0, xmm0
cmp dword [esi + 0x14], 0x10
mov eax, esi
movups xmmword [ebp - 0xa8], xmm0
movq qword [ebp - 0x98], xmm0
jb 0x10021149
mov eax, dword [esi]
mov edx, dword [esi + 0x10]
jb 0x10021150
mov esi, dword [esi]
add eax, edx
lea ecx, [ebp - 0x78]
push eax
push esi
call fcn.100aad60
push eax
lea ecx, [ebp - 0xa8]
call fcn.100aa100
mov byte [ebp - 4], 0x29
cmp byte [ebp - 0xa0], 7
jne 0x10021522
lea eax, [ebp - 0x20]
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0xa8]
push eax
movq qword [ebp - 0x20], xmm0
call fcn.100ab0f0
mov byte [ebp - 4], 0x2a
xor ecx, ecx
mov esi, dword [ebp - 0x20]
mov eax, 0x2aaaaaab
mov dword [ebp - 0x24c], ecx
mov ecx, dword [ebp - 0x1c]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100214a6
xor edi, edi
mov dword [ebp - 0x254], edi
nop word [eax + eax]
add edi, esi
mov ecx, edi
call fcn.10004710
test al, al
jne 0x1002146f
lea ecx, [ebp - 0x198]
call fcn.100047b0
mov byte [ebp - 4], 0x2b
mov ecx, edi
call fcn.10004910
mov esi, eax
mov dword [ebp - 0x248], esi
cmp dword [esi + 0x14], 0x10
jb 0x1002120d
mov eax, dword [esi]
mov dword [ebp - 0x248], eax
lea eax, [ebp - 0x198]
mov ecx, edi
push eax
call fcn.100049a0
mov ecx, dword [ebp - 0x248]
mov edx, eax
call fcn.10026010
add esp, 4
lea ecx, [ebp - 0x180]
call fcn.100047b0
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xd8]
call fcn.100048f0
mov byte [ebp - 4], 0x2d
xorps xmm0, xmm0
cmp dword [esi + 0x14], 0x10
mov eax, esi
movups xmmword [ebp - 0x150], xmm0
movq qword [ebp - 0x140], xmm0
jb 0x10021265
mov eax, dword [esi]
mov ecx, dword [esi + 0x10]
jb 0x1002126c
mov esi, dword [esi]
add eax, ecx
lea ecx, [ebp - 0xa8]
push eax
push esi
call fcn.100aad60
push eax
lea ecx, [ebp - 0x150]
call fcn.100aa100
mov byte [ebp - 4], 0x2e
cmp byte [ebp - 0x148], 4
jne 0x100212c5
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x150]
call fcn.100aa500
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xd8]
push eax
call fcn.10008df0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x274]
call fcn.100046c0
lea ecx, [ebp - 0xd8]
call fcn.10004710
test al, al
jne 0x10021307
lea ecx, [ebp - 0xd8]
call fcn.10004910
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x100212e9
mov esi, dword [esi]
lea eax, [ebp - 0x180]
push eax
lea ecx, [ebp - 0xd8]
call fcn.100049a0
mov edx, eax
mov ecx, esi
call fcn.10026010
add esp, 4
lea ecx, [ebp - 0x138]
call fcn.100047b0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x120]
call fcn.100047b0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x198]
call fcn.10004910
lea ecx, [ebp - 0x138]
cmp ecx, eax
je 0x1002135e
lea ecx, [ebp - 0x198]
call fcn.10004910
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x1002134f
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x138]
call fcn.100049b0
lea ecx, [ebp - 0x180]
call fcn.10004910
lea ecx, [ebp - 0x120]
cmp ecx, eax
je 0x10021397
lea ecx, [ebp - 0x180]
call fcn.10004910
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x10021388
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x120]
call fcn.100049b0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x34], eax
je 0x100213dd
push eax
push 0x30
call fcn.10004640
add esp, 8
mov esi, eax
lea eax, [ebp - 0x138]
mov dword [ebp - 0x248], esi
mov ecx, esi
push eax
call fcn.100047d0
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x120]
push eax
lea ecx, [esi + 0x18]
call fcn.100047d0
mov byte [ebp - 4], 0x32
add dword [ebp - 0x38], 0x30
jmp 0x100213ed
lea ecx, [ebp - 0x138]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.1001edb0
push ecx
lea ecx, [ebp - 0x138]
call fcn.10005480
test al, al
je 0x10021412
lea ecx, [ebp - 0x138]
call fcn.100052a0
mov ecx, eax
call fcn.10024cd0
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x120]
call fcn.10004720
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x138]
call fcn.10004720
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x150]
call fcn.100aa2a0
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xd8]
call fcn.100046c0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x180]
call fcn.10004720
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x198]
call fcn.10004720
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x254]
sub ecx, esi
inc dword [ebp - 0x24c]
add edi, 0x18
imul ecx
mov dword [ebp - 0x254], edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x24c], eax
jb 0x100211d0
mov byte [ebp - 4], 0x29
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x10021522
mov edi, dword [ebp - 0x1c]
cmp esi, edi
je 0x100214c9
mov ecx, esi
call fcn.100046c0
add esi, 0x18
cmp esi, edi
jne 0x100214b8
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x10021503
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002171c
push ecx
push esi
call fcn.100bccb8
add esp, 8
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov edi, dword [ebp - 0x25c]
mov eax, dword [edi + 4]
cmp dword [edi + 8], eax
je 0x10021572
push eax
push 0x28
call fcn.10004640
add esp, 8
mov esi, eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0x248], esi
mov ecx, esi
push eax
call fcn.100047d0
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x3c]
push eax
lea ecx, [esi + 0x18]
call fcn.10023560
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0x30]
mov dword [esi + 0x24], eax
mov byte [ebp - 4], 0x29
add dword [edi + 4], 0x28
jmp 0x1002157e
lea ecx, [ebp - 0x54]
push ecx
push eax
mov ecx, edi
call fcn.10023310
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xa8]
call fcn.100aa2a0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1c8]
call fcn.100046c0
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xf0]
call fcn.10004720
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x3c]
call fcn.100164d0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x54]
call fcn.10004720
mov esi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x258]
sub ecx, esi
inc dword [ebp - 0x250]
add edi, 0x18
imul ecx
mov dword [ebp - 0x258], edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x250], eax
jb 0x10021050
mov byte [ebp - 4], 0x22
mov esi, dword [ebp - 0x2c]
test esi, esi
je 0x1002167a
mov edi, dword [ebp - 0x28]
cmp esi, edi
je 0x10021621
nop
mov ecx, esi
call fcn.100046c0
add esi, 0x18
cmp esi, edi
jne 0x10021610
mov esi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x24]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x1002165b
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021726
push ecx
push esi
call fcn.100bccb8
add esp, 8
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov byte [ebp - 0x241], 1
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x78]
call fcn.100aa2a0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xc0]
call fcn.100aa2a0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x108]
call fcn.100aa2a0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x168]
call fcn.100aa2a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x90]
call fcn.100aa2a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x240]
call fcn.10008a80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1b0]
call fcn.100046c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebx + 0x14]
call fcn.100046c0
mov al, byte [ebp - 0x241]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100bcc77
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x24
call fcn.100c157f
call fcn.100c157f
call fcn.100c157f
int3