Function at 0x100099f0
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10037dbe
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x15ac
call fcn.1001a5a0
mov eax, dword [0x1004e01c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x14]
mov edi, dword [0x1004fe3c]
mov dword [ebp - 0x1578], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1584], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x15ac], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x15a4], eax
mov dword [ebp - 0x15b8], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1570], ecx
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x1588], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x15a0], ecx
mov dword [ebp - 0x15a8], eax
mov dword [ebp - 0x1590], edi
test edi, edi
jne 0x10009af1
push 0x1004fed4
mov dword [ebp - 0x15b4], 0x1004fed4
call fcn.10018734
add esp, 4
test eax, eax
jne 0x1000c3e5
mov dword [ebp - 4], eax
cmp dword [0x1004fe3c], eax
jne 0x10009ad1
push 0x8a0
call fcn.10019681
add esp, 4
mov dword [ebp - 0x121c], eax
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.1000c8c0
mov dword [0x1004fe3c], eax
push 0x1004fed4
mov dword [ebp - 4], 0xffffffff
call fcn.10018745
mov edi, dword [0x1004fe3c]
add esp, 4
mov dword [ebp - 0x1590], edi
cmp dword [0x1004fe40], 0
mov dword [ebp - 0x15b4], edi
jne 0x10009b29
push 0x1004ff04
call fcn.10018734
add esp, 4
test eax, eax
jne 0x1000c3eb
push 0x1004ff04
mov dword [ebp - 4], 0xffffffff
call fcn.10018745
add esp, 4
sub esp, 0x18
mov dword [ebp - 0x144c], 0x200
mov edx, esp
lea ecx, [ebp - 0x214]
lea esi, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10009b55
sub ecx, esi
lea eax, [ebp - 0x214]
push ecx
push eax
mov ecx, edx
call fcn.10001930
lea eax, [ebp - 0x1354]
push eax
call fcn.1000eba0
sub esp, 0x18
mov dword [ebp - 4], 3
mov dword [ebp - 0x121c], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
push edi
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 4
lea eax, [edi + 0x300]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x127c]
mov byte [ebp - 4], 3
push eax
call fcn.1000ea80
sub esp, 0x18
mov byte [ebp - 4], 5
lea eax, [ebp - 0x127c]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1264]
push eax
call fcn.1000eba0
sub esp, 0x18
mov byte [ebp - 4], 6
mov dword [ebp - 0x121c], esp
lea eax, [edi + 0x18]
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 7
lea eax, [edi + 0x318]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x124c]
mov byte [ebp - 4], 6
push eax
call fcn.1000ea80
sub esp, 0x18
mov byte [ebp - 4], 8
mov dword [ebp - 0x121c], esp
lea eax, [edi + 0xd8]
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 9
mov ecx, esp
lea eax, [edi + 0x480]
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1294]
mov byte [ebp - 4], 8
push eax
call fcn.1000ea80
mov eax, dword [ebp - 0x1590]
sub esp, 0x18
mov edi, esp
mov byte [ebp - 4], 0xa
sub esp, 0x18
add eax, 0x1c8
mov dword [ebp - 0x121c], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
mov eax, dword [ebp - 0x1590]
sub esp, 0x18
add eax, 0x3a8
mov byte [ebp - 4], 0xb
mov ecx, esp
push eax
call fcn.10008ce0
push edi
mov byte [ebp - 4], 0xa
call fcn.1000ea80
lea eax, [ebp - 0x1234]
push eax
call fcn.1000eba0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x124c]
cmp dword [ebp - 0x1238], 0x10
lea eax, [ebp - 0x1264]
cmovae ecx, dword [ebp - 0x124c]
cmp dword [ebp - 0x1250], 8
push ecx
cmovae eax, dword [ebp - 0x1264]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [ebp - 0x1220], 8
lea ecx, [ebp - 0x1234]
mov dword [ebp - 0x158c], eax
cmovae ecx, dword [ebp - 0x1234]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x15b0], eax
test eax, eax
jne 0x10009f3f
mov edx, dword [ebp - 0x1220]
cmp edx, 8
jb 0x10009d7f
mov ecx, dword [ebp - 0x1234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10009d75
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1280]
xor eax, eax
mov dword [ebp - 0x1224], 0
mov dword [ebp - 0x1220], 7
mov word [ebp - 0x1234], ax
cmp edx, 0x10
jb 0x10009dd6
mov ecx, dword [ebp - 0x1294]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10009dcc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1238]
mov dword [ebp - 0x1284], 0
mov dword [ebp - 0x1280], 0xf
mov byte [ebp - 0x1294], 0
cmp edx, 0x10
jb 0x10009e2b
mov ecx, dword [ebp - 0x124c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10009e21
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1250]
mov dword [ebp - 0x123c], 0
mov dword [ebp - 0x1238], 0xf
mov byte [ebp - 0x124c], 0
cmp edx, 8
jb 0x10009e86
mov ecx, dword [ebp - 0x1264]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10009e7c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1268]
xor eax, eax
mov dword [ebp - 0x1254], 0
mov dword [ebp - 0x1250], 7
mov word [ebp - 0x1264], ax
cmp edx, 0x10
jb 0x10009edd
mov ecx, dword [ebp - 0x127c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10009ed3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1340]
mov dword [ebp - 0x126c], 0
mov dword [ebp - 0x1268], 0xf
mov byte [ebp - 0x127c], 0
cmp edx, 8
jb 0x10009f38
mov ecx, dword [ebp - 0x1354]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10009f2e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov al, 1
jmp 0x1000c17c
mov edi, dword [ebp - 0x1590]
sub esp, 0x18
mov dword [ebp - 0x121c], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
lea eax, [edi + 0x1f8]
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0xd
lea eax, [edi + 0x3d8]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x13e8]
mov byte [ebp - 4], 0xc
push eax
call fcn.1000ea80
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x13e8]
cmp dword [ebp - 0x13d4], 0x10
cmovae eax, dword [ebp - 0x13e8]
push eax
push dword [ebp - 0x15b0]
call dword [ebp - 0x158c]
test eax, eax
je 0x10009fc7
lea ecx, [ebp - 0x144c]
push ecx
lea ecx, [ebp - 0x214]
push ecx
push 0
call eax
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x13d4]
cmp edx, 0x10
jb 0x1000a005
mov ecx, dword [ebp - 0x13e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10009ffb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f1
push edx
push ecx
call fcn.10019650
add esp, 8
mov eax, dword [ebp - 0x1590]
sub esp, 0x18
mov edi, esp
add eax, 0x78
sub esp, 0x18
mov dword [ebp - 0x121c], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
mov eax, dword [ebp - 0x1590]
sub esp, 0x18
add eax, 0x3c0
mov byte [ebp - 4], 0xf
mov ecx, esp
push eax
call fcn.10008ce0
push edi
mov byte [ebp - 4], 0xc
call fcn.1000ea80
lea eax, [ebp - 0x12ac]
push eax
call fcn.1000eba0
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x12ac]
cmp dword [ebp - 0x1298], 8
cmovae eax, dword [ebp - 0x12ac]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x1594], eax
test eax, eax
jne 0x1000a2e5
mov edx, dword [ebp - 0x1298]
cmp edx, 8
jb 0x1000a0cc
mov ecx, dword [ebp - 0x12ac]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a0c2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1220]
xor eax, eax
mov dword [ebp - 0x129c], 0
mov dword [ebp - 0x1298], 7
mov word [ebp - 0x12ac], ax
cmp edx, 8
jb 0x1000a129
mov ecx, dword [ebp - 0x1234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a11f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1280]
xor eax, eax
mov dword [ebp - 0x1224], 0
mov dword [ebp - 0x1220], 7
mov word [ebp - 0x1234], ax
cmp edx, 0x10
jb 0x1000a180
mov ecx, dword [ebp - 0x1294]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a176
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1238]
mov dword [ebp - 0x1284], 0
mov dword [ebp - 0x1280], 0xf
mov byte [ebp - 0x1294], 0
cmp edx, 0x10
jb 0x1000a1d5
mov ecx, dword [ebp - 0x124c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a1cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1250]
mov dword [ebp - 0x123c], 0
mov dword [ebp - 0x1238], 0xf
mov byte [ebp - 0x124c], 0
cmp edx, 8
jb 0x1000a230
mov ecx, dword [ebp - 0x1264]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a226
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1268]
xor eax, eax
mov dword [ebp - 0x1254], 0
mov dword [ebp - 0x1250], 7
mov word [ebp - 0x1264], ax
cmp edx, 0x10
jb 0x1000a287
mov ecx, dword [ebp - 0x127c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a27d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1340]
mov dword [ebp - 0x126c], 0
mov dword [ebp - 0x1268], 0xf
mov byte [ebp - 0x127c], 0
cmp edx, 8
jb 0x1000c17a
mov ecx, dword [ebp - 0x1354]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c170
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
jmp 0x1000c170
mov edi, dword [ebp - 0x1590]
sub esp, 0x18
mov dword [ebp - 0x1598], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
lea eax, [edi + 0x150]
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x11
lea eax, [edi + 0x3f0]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x12dc]
mov byte [ebp - 4], 0x10
push eax
call fcn.1000ea80
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x12dc]
cmp dword [ebp - 0x12c8], 0x10
cmovae eax, dword [ebp - 0x12dc]
push eax
push dword [ebp - 0x1594]
call dword [ebp - 0x158c]
test eax, eax
je 0x1000c19a
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x214]
push ecx
call eax
mov edx, dword [ebp - 0x1578]
mov ecx, edx
mov dword [ebp - 0x12c4], 0
mov dword [ebp - 0x1598], eax
mov dword [ebp - 0x12b4], 0
mov dword [ebp - 0x12b0], 0xf
lea esi, [ecx + 1]
mov byte [ebp - 0x12c4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000a3a6
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x12c4]
call fcn.10001930
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x12c4]
cmp dword [ebp - 0x12b0], 0x10
cmovae eax, dword [ebp - 0x12c4]
sub esp, 0x18
mov dword [ebp - 0x1574], esp
mov esi, esp
sub esp, 0x18
mov dword [ebp - 0x1578], eax
lea eax, [edi + 0x258]
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x14
lea eax, [edi + 0x408]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x12f4]
mov byte [ebp - 4], 0x13
push eax
call fcn.1000ea80
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x12f4]
cmp dword [ebp - 0x12e0], 0x10
cmovae eax, dword [ebp - 0x12f4]
push eax
push dword [ebp - 0x1594]
call dword [ebp - 0x158c]
test eax, eax
je 0x1000be31
push 0
push 0
push 3
push 0
push 0
push 0x1bb
push dword [ebp - 0x1578]
push dword [ebp - 0x1598]
call eax
mov esi, dword [ebp - 0x1584]
mov ecx, esi
mov dword [ebp - 0x130c], 0
mov dword [ebp - 0x1598], eax
mov dword [ebp - 0x12fc], 0
mov dword [ebp - 0x12f8], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x130c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000a4a1
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x130c]
call fcn.10001930
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x130c]
cmp dword [ebp - 0x12f8], 0x10
cmovae eax, dword [ebp - 0x130c]
sub esp, 0x18
mov dword [ebp - 0x1580], esp
mov esi, esp
sub esp, 0x18
mov dword [ebp - 0x1578], eax
lea eax, [edi + 0x210]
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x17
lea eax, [edi + 0x420]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1324]
mov byte [ebp - 4], 0x16
push eax
call fcn.1000ea80
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x1324]
cmp dword [ebp - 0x1310], 0x10
cmovae eax, dword [ebp - 0x1324]
push eax
push dword [ebp - 0x1594]
call dword [ebp - 0x158c]
test eax, eax
je 0x1000bd87
push 0
push 0x800000
push 0
push 0
push 0
push dword [ebp - 0x1578]
push dword [ebp - 0x1588]
push dword [ebp - 0x1598]
call eax
sub esp, 0x18
mov dword [ebp - 0x1598], eax
mov dword [ebp - 0x1580], esp
lea ecx, [edi + 0x228]
mov esi, esp
mov dword [ebp - 0x121c], 0x8404f700
sub esp, 0x18
mov edx, esp
push ecx
mov ecx, edx
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x19
lea eax, [edi + 0x450]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x133c]
mov byte [ebp - 4], 0x18
push eax
call fcn.1000ea80
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x133c]
cmp dword [ebp - 0x1328], 0x10
cmovae eax, dword [ebp - 0x133c]
push eax
push dword [ebp - 0x1594]
call dword [ebp - 0x158c]
test eax, eax
je 0x1000bd32
push 4
lea ecx, [ebp - 0x121c]
push ecx
push 0x1f
push dword [ebp - 0x1598]
call eax
mov eax, dword [ebp - 0x15a0]
mov dword [ebp - 0x1584], 0
mov dword [ebp - 0x1578], 0
test eax, eax
je 0x1000a635
mov ecx, eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000a626
sub ecx, edx
mov dword [ebp - 0x1584], ecx
mov eax, dword [ebp - 0x1570]
test eax, eax
je 0x1000a653
mov ecx, eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000a644
sub ecx, edx
mov dword [ebp - 0x1578], ecx
sub esp, 0x18
lea eax, [edi + 0x210]
mov dword [ebp - 0x1580], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x1b
lea eax, [edi + 0x438]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1388]
mov byte [ebp - 4], 0x1a
push eax
call fcn.1000ea80
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x1388]
cmp dword [ebp - 0x1374], 0x10
cmovae eax, dword [ebp - 0x1388]
push eax
push dword [ebp - 0x1594]
call dword [ebp - 0x158c]
test eax, eax
je 0x1000bcdd
push dword [ebp - 0x1584]
mov ecx, dword [ebp - 0x15a0]
push ecx
push dword [ebp - 0x1578]
mov ecx, dword [ebp - 0x1570]
push ecx
push dword [ebp - 0x1598]
call eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1218], 0
mov dword [ebp - 0x1584], 0
cmp eax, 1
jne 0x1000b2ad
sub esp, 0x18
lea eax, [edi + 0x498]
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
lea eax, [ebp - 0x136c]
push eax
call fcn.10010050
mov byte [ebp - 4], 0x1d
lea edx, [ebp - 0x136c]
cmp dword [ebp - 0x1358], 0x10
mov ecx, dword [ebp - 0x135c]
setae byte [ebp - 0x1579]
mov dword [ebp - 0x1590], ecx
jb 0x1000a76c
mov edx, dword [ebp - 0x136c]
lea eax, [edx + ecx]
add ecx, edx
mov dword [ebp - 0x1570], eax
mov esi, eax
jmp 0x1000a77d
lea esi, [ecx + edx]
lea edx, [ebp - 0x136c]
mov dword [ebp - 0x1570], esi
add ecx, edx
mov dword [ebp - 0x1584], ecx
sub ecx, edx
push ecx
push 0
push edx
call fcn.1001b710
mov ecx, dword [ebp - 0x1584]
add esp, 0xc
test eax, eax
cmovne ecx, eax
cmp byte [ebp - 0x1579], 0
mov dword [ebp - 0x1584], ecx
lea eax, [ebp - 0x136c]
je 0x1000a7d8
sub ecx, dword [ebp - 0x136c]
mov edx, dword [ebp - 0x1570]
mov eax, dword [ebp - 0x1590]
sub edx, dword [ebp - 0x1584]
sub eax, ecx
cmp eax, edx
cmovb edx, eax
mov eax, dword [ebp - 0x136c]
jmp 0x1000a7f5
sub ecx, eax
mov edx, esi
mov eax, dword [ebp - 0x1590]
sub edx, dword [ebp - 0x1584]
sub eax, ecx
cmp eax, edx
cmovb edx, eax
lea eax, [ebp - 0x136c]
mov dword [ebp - 0x1578], ecx
add ecx, eax
mov eax, dword [ebp - 0x1590]
sub eax, edx
mov dword [ebp - 0x135c], eax
sub eax, dword [ebp - 0x1578]
inc eax
push eax
lea eax, [ecx + edx]
push eax
push ecx
call fcn.1001b020
sub esp, 0xc
lea eax, [edi + 0x2d0]
mov dword [ebp - 0x1580], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x1e
lea eax, [edi + 0x4b0]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1448]
mov byte [ebp - 4], 0x1d
push eax
call fcn.1000ea80
mov byte [ebp - 4], 0x1f
mov eax, SysReAllocString
mov ecx, dword [ebp - 0x135c]
sub eax, ecx
cmp eax, 1
jb 0x1000c3fb
cmp dword [ebp - 0x1358], 0x10
lea eax, [ebp - 0x136c]
push 1
cmovae eax, dword [ebp - 0x136c]
push 0x1004595c
push ecx
push eax
push ecx
push dword [ebp - 0x1580]
lea ecx, [ebp - 0x13a0]
call fcn.10009490
mov byte [ebp - 4], 0x20
lea edx, [ebp - 0x1448]
cmp dword [ebp - 0x1434], 0x10
mov ecx, dword [ebp - 0x1438]
cmovae edx, dword [ebp - 0x1448]
mov eax, dword [ebp - 0x138c]
mov esi, dword [ebp - 0x1390]
sub eax, esi
mov dword [ebp - 0x1588], ecx
push ecx
push edx
cmp ecx, eax
ja 0x1000a91f
cmp dword [ebp - 0x138c], 0x10
lea eax, [ecx + esi]
mov dword [ebp - 0x1390], eax
lea eax, [ebp - 0x13a0]
cmovae eax, dword [ebp - 0x13a0]
add esi, eax
push esi
call fcn.1001b020
mov eax, dword [ebp - 0x1588]
add esp, 0xc
mov byte [eax + esi], 0
lea eax, [ebp - 0x13a0]
jmp 0x1000a938
mov byte [ebp - 0x1588], 0
push dword [ebp - 0x1588]
push ecx
lea ecx, [ebp - 0x13a0]
call fcn.10009150
mov dword [ebp - 0x1418], 0
mov dword [ebp - 0x1408], 0
mov dword [ebp - 0x1404], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1418], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1408], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x138c]
cmp edx, 0x10
jb 0x1000a9bc
mov ecx, dword [ebp - 0x13a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a9b2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c400
push edx
push ecx
call fcn.10019650
add esp, 8
sub esp, 0x18
mov dword [ebp - 0x1390], 0
mov dword [ebp - 0x1580], esp
mov esi, esp
sub esp, 0x18
mov dword [ebp - 0x138c], 0xf
mov ecx, esp
mov byte [ebp - 0x13a0], 0
push edi
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x23
lea eax, [edi + 0x300]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x14ac]
mov byte [ebp - 4], 0x22
push eax
call fcn.1000ea80
sub esp, 0x18
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x14ac]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1400]
push eax
call fcn.1000eba0
sub esp, 0x18
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x1580], esp
lea eax, [edi + 0x18]
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x26
lea eax, [edi + 0x318]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x147c]
mov byte [ebp - 4], 0x25
push eax
call fcn.1000ea80
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x147c]
cmp dword [ebp - 0x1468], 0x10
lea eax, [ebp - 0x1400]
cmovae ecx, dword [ebp - 0x147c]
cmp dword [ebp - 0x13ec], 8
push ecx
cmovae eax, dword [ebp - 0x1400]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [ebp - 0x13ec], 8
lea ecx, [ebp - 0x1400]
mov dword [ebp - 0x1570], eax
cmovae ecx, dword [ebp - 0x1400]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
sub esp, 0x18
mov dword [ebp - 0x1588], eax
mov dword [ebp - 0x1580], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
lea eax, [edi + 0x78]
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x28
lea eax, [edi + 0x378]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x14dc]
mov byte [ebp - 4], 0x27
push eax
call fcn.1000ea80
mov byte [ebp - 4], 0x29
mov esi, dword [ebp - 0x1588]
test esi, esi
jne 0x1000afef
mov edx, dword [ebp - 0x14c8]
cmp edx, 0x10
jb 0x1000ab73
mov ecx, dword [ebp - 0x14dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000ab69
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c405
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1468]
mov dword [ebp - 0x14cc], 0
mov dword [ebp - 0x14c8], 0xf
mov byte [ebp - 0x14dc], 0
cmp edx, 0x10
jb 0x1000abc8
mov ecx, dword [ebp - 0x147c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000abbe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c405
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x13ec]
mov dword [ebp - 0x146c], 0
mov dword [ebp - 0x1468], 0xf
mov byte [ebp - 0x147c], 0
cmp edx, 8
jb 0x1000ac23
mov ecx, dword [ebp - 0x1400]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000ac19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c405
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1498]
xor eax, eax
mov dword [ebp - 0x13f0], 0
mov dword [ebp - 0x13ec], 7
mov word [ebp - 0x1400], ax
cmp edx, 0x10
jb 0x1000ac7a
mov ecx, dword [ebp - 0x14ac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000ac70
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c405
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1404]
mov dword [ebp - 0x149c], 0
mov dword [ebp - 0x1498], 0xf
mov byte [ebp - 0x14ac], 0
cmp edx, 0x10
jb 0x1000accf
mov ecx, dword [ebp - 0x1418]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000acc5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c405
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1434]
mov dword [ebp - 0x1408], 0
mov dword [ebp - 0x1404], 0xf
mov byte [ebp - 0x1418], 0
cmp edx, 0x10
jb 0x1000ad24
mov ecx, dword [ebp - 0x1448]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000ad1a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c405
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1358]
mov dword [ebp - 0x1438], 0
mov dword [ebp - 0x1434], 0xf
mov byte [ebp - 0x1448], 0
cmp edx, 0x10
jb 0x1000ad79
mov ecx, dword [ebp - 0x136c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000ad6f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c405
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1374]
mov dword [ebp - 0x135c], 0
mov dword [ebp - 0x1358], 0xf
mov byte [ebp - 0x136c], 0
cmp edx, 0x10
jb 0x1000adce
mov ecx, dword [ebp - 0x1388]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000adc4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c405
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1328]
mov dword [ebp - 0x1378], 0
mov dword [ebp - 0x1374], 0xf
mov byte [ebp - 0x1388], 0
cmp edx, 0x10
jb 0x1000ae23
mov ecx, dword [ebp - 0x133c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000ae19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c405
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1310]
mov dword [ebp - 0x132c], 0
mov dword [ebp - 0x1328], 0xf
mov byte [ebp - 0x133c], 0
cmp edx, 0x10
jb 0x1000ae78
mov ecx, dword [ebp - 0x1324]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000ae6e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c405
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x12f8]
mov dword [ebp - 0x1314], 0
mov dword [ebp - 0x1310], 0xf
mov byte [ebp - 0x1324], 0
cmp edx, 0x10
jb 0x1000aecd
mov ecx, dword [ebp - 0x130c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000aec3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c405
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x12e0]
mov dword [ebp - 0x12fc], 0
mov dword [ebp - 0x12f8], 0xf
mov byte [ebp - 0x130c], 0
cmp edx, 0x10
jb 0x1000af22
mov ecx, dword [ebp - 0x12f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000af18
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c405
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x12b0]
mov dword [ebp - 0x12e4], 0
mov dword [ebp - 0x12e0], 0xf
mov byte [ebp - 0x12f4], 0
cmp edx, 0x10
jb 0x1000af77
mov ecx, dword [ebp - 0x12c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000af6d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c405
push edx
push ecx
call fcn.10019650
add esp, 8
mov dword [ebp - 0x12b4], 0
mov dword [ebp - 0x12b0], 0xf
mov byte [ebp - 0x12c4], 0
lea ecx, [ebp - 0x12dc]
call fcn.100018a0
lea ecx, [ebp - 0x12ac]
call fcn.10008b30
lea ecx, [ebp - 0x1234]
call fcn.10008b30
lea ecx, [ebp - 0x1294]
call fcn.100018a0
lea ecx, [ebp - 0x124c]
call fcn.100018a0
lea ecx, [ebp - 0x1264]
call fcn.10008b30
lea ecx, [ebp - 0x127c]
call fcn.100018a0
lea ecx, [ebp - 0x1354]
call fcn.10008b30
jmp 0x1000c17a
lea ecx, [ebp - 0x14dc]
call fcn.10001e00
push eax
push esi
call dword [ebp - 0x1570]
mov dword [ebp - 0x1588], eax
push 0
test eax, eax
je 0x1000b20c
push 0x80
push 1
push 0
push 1
push 0xc0000000
lea ecx, [ebp - 0x1418]
call fcn.10001e00
push eax
call dword [ebp - 0x1588]
lea ecx, [ebp - 0x14dc]
mov dword [ebp - 0x1584], eax
call fcn.100018a0
lea ecx, [ebp - 0x147c]
call fcn.100018a0
lea ecx, [ebp - 0x1400]
call fcn.10008b30
lea ecx, [ebp - 0x14ac]
call fcn.100018a0
lea ecx, [ebp - 0x1418]
call fcn.100018a0
lea ecx, [ebp - 0x1448]
call fcn.100018a0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x136c]
call fcn.100018a0
sub esp, 0x18
lea eax, [edi + 0x240]
mov dword [ebp - 0x1580], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x36
lea eax, [edi + 0x468]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x13e8]
mov byte [ebp - 4], 0x1c
push eax
call fcn.1000ea80
lea ecx, [ebp - 0x13e8]
mov byte [ebp - 4], 0x37
call fcn.10001e00
mov esi, dword [ebp - 0x1594]
push eax
push esi
call dword [ebp - 0x158c]
mov dword [ebp - 0x1588], eax
test eax, eax
je 0x1000ba7a
nop dword [eax]
push 0x400
lea eax, [ebp - 0x1214]
push 0
push eax
call fcn.1001b5a0
add esp, 0xc
lea eax, [ebp - 0x1370]
push eax
push 0x400
lea eax, [ebp - 0x1214]
push eax
push dword [ebp - 0x1598]
call dword [ebp - 0x1588]
mov eax, dword [ebp - 0x1370]
test eax, eax
jne 0x1000b5ed
push dword [ebp - 0x1584]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
push dword [ebp - 0x15b0]
call esi
lea ecx, [ebp - 0x13e8]
call fcn.100018a0
lea ecx, [ebp - 0x1388]
call fcn.100018a0
lea ecx, [ebp - 0x133c]
call fcn.100018a0
lea ecx, [ebp - 0x1324]
call fcn.100018a0
lea ecx, [ebp - 0x130c]
call fcn.100018a0
lea ecx, [ebp - 0x12f4]
call fcn.100018a0
lea ecx, [ebp - 0x12c4]
call fcn.100018a0
lea ecx, [ebp - 0x12dc]
call fcn.100018a0
lea ecx, [ebp - 0x12ac]
call fcn.10008b30
lea ecx, [ebp - 0x1234]
call fcn.10008b30
lea ecx, [ebp - 0x1294]
call fcn.100018a0
lea ecx, [ebp - 0x124c]
call fcn.100018a0
lea ecx, [ebp - 0x1264]
call fcn.10008b30
lea ecx, [ebp - 0x127c]
call fcn.100018a0
lea ecx, [ebp - 0x1354]
call fcn.10008b30
mov al, 1
jmp 0x1000c17c
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x14dc]
call fcn.100018a0
lea ecx, [ebp - 0x147c]
call fcn.100018a0
lea ecx, [ebp - 0x1400]
call fcn.10008b30
lea ecx, [ebp - 0x14ac]
call fcn.100018a0
lea ecx, [ebp - 0x1418]
call fcn.100018a0
lea ecx, [ebp - 0x1448]
call fcn.100018a0
lea ecx, [ebp - 0x136c]
call fcn.100018a0
lea ecx, [ebp - 0x1388]
call fcn.100018a0
lea ecx, [ebp - 0x133c]
call fcn.100018a0
lea ecx, [ebp - 0x1324]
call fcn.100018a0
lea ecx, [ebp - 0x130c]
call fcn.100018a0
lea ecx, [ebp - 0x12f4]
call fcn.100018a0
lea ecx, [ebp - 0x12c4]
call fcn.100018a0
jmp 0x1000af92
cmp eax, 2
jne 0x1000b08b
sub esp, 0x18
lea eax, [edi + 0x498]
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
lea eax, [ebp - 0x14c4]
push eax
call fcn.10010050
lea eax, [ebp - 0x1580]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0x14c4]
mov byte [ebp - 0x1579], 0
call fcn.10001e10
lea ecx, [ebp - 0x14c4]
mov esi, dword [eax]
lea eax, [ebp - 0x1574]
push eax
call fcn.10001e10
mov edi, eax
lea ecx, [ebp - 0x14c4]
lea eax, [ebp - 0x1588]
push eax
call fcn.10001e30
push dword [edi]
lea edx, [ebp - 0x1579]
lea ecx, [ebp - 0x1570]
push dword [eax]
call fcn.10009020
add esp, 8
lea ecx, [ebp - 0x14c4]
push esi
push dword [eax]
lea eax, [ebp - 0x1578]
push eax
call fcn.10008c70
mov edi, dword [ebp - 0x1590]
sub esp, 0x18
mov ecx, esp
lea eax, [edi + 0x870]
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1554]
push eax
call fcn.1000f090
push 0x1004595c
lea edx, [ebp - 0x14c4]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1430]
call fcn.10008fc0
lea ecx, [ebp - 0x1554]
mov byte [ebp - 4], 0x2c
push ecx
mov edx, eax
lea ecx, [ebp - 0x156c]
call fcn.10008f10
add esp, 8
lea ecx, [ebp - 0x1430]
mov byte [ebp - 4], 0x2e
call fcn.100018a0
sub esp, 0x18
mov dword [ebp - 0x1580], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
push edi
call fcn.10008ce0
push esi
call fcn.1000f090
mov byte [ebp - 4], 0x2f
sub esp, 0x18
lea eax, [edi + 0x300]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x153c]
mov byte [ebp - 4], 0x2e
push eax
call fcn.1000ea80
sub esp, 0x18
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0x153c]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x14f4]
push eax
call fcn.1000eba0
sub esp, 0x18
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x1580], esp
lea eax, [edi + 0x18]
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x32
lea eax, [edi + 0x318]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1524]
mov byte [ebp - 4], 0x31
push eax
call fcn.1000ea80
lea ecx, [ebp - 0x1524]
mov byte [ebp - 4], 0x33
call fcn.10001e00
push eax
lea ecx, [ebp - 0x14f4]
call fcn.10008b20
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x14f4]
mov dword [ebp - 0x1588], eax
call fcn.10008b20
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
sub esp, 0x18
mov dword [ebp - 0x1570], eax
mov dword [ebp - 0x1580], esp
lea eax, [edi + 0x78]
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x34
lea eax, [edi + 0x378]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x150c]
mov byte [ebp - 4], 0x33
push eax
call fcn.1000ea80
mov byte [ebp - 4], 0x35
mov esi, dword [ebp - 0x1570]
lea ecx, [ebp - 0x150c]
test esi, esi
je 0x1000b5a6
call fcn.10001e00
push eax
push esi
call dword [ebp - 0x1588]
mov esi, eax
push 0
test esi, esi
je 0x1000b58e
push 0x80
push 1
push 0
push 1
push 0xc0000000
lea ecx, [ebp - 0x156c]
call fcn.10001e00
push eax
call esi
lea ecx, [ebp - 0x150c]
mov dword [ebp - 0x1584], eax
call fcn.100018a0
lea ecx, [ebp - 0x1524]
call fcn.100018a0
lea ecx, [ebp - 0x14f4]
call fcn.10008b30
lea ecx, [ebp - 0x153c]
call fcn.100018a0
lea ecx, [ebp - 0x156c]
call fcn.100018a0
lea ecx, [ebp - 0x1554]
call fcn.100018a0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x14c4]
jmp 0x1000b086
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x1570]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x150c]
call fcn.100018a0
lea ecx, [ebp - 0x1524]
call fcn.100018a0
lea ecx, [ebp - 0x14f4]
call fcn.10008b30
lea ecx, [ebp - 0x153c]
call fcn.100018a0
lea ecx, [ebp - 0x156c]
call fcn.100018a0
lea ecx, [ebp - 0x1554]
call fcn.100018a0
lea ecx, [ebp - 0x14c4]
jmp 0x1000b261
mov ecx, dword [ebp + 8]
test ecx, ecx
jne 0x1000b7eb
lea eax, [ebp - 0x1214]
push eax
lea ecx, [ebp - 0x13b8]
call fcn.100018f0
lea eax, [ebp - 0x1580]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x13b8]
mov byte [ebp - 0x1579], 0x2b
mov byte [ebp - 0x1599], 0x20
call fcn.10001e10
mov esi, eax
lea ecx, [ebp - 0x13b8]
lea eax, [ebp - 0x1574]
push eax
call fcn.10001e30
push dword [esi]
lea edx, [ebp - 0x1579]
lea ecx, [ebp - 0x1599]
push dword [eax]
call fcn.1000c5a0
sub esp, 0x10
lea eax, [ebp - 0x13b8]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x13d0]
push eax
call fcn.1000eba0
lea ecx, [ebp - 0x13d0]
mov byte [ebp - 4], 0x39
call fcn.10008b20
push 0x100459a0
push eax
call fcn.1001ad19
add esp, 8
test eax, eax
je 0x1000b7c6
push 0x3f
sub esp, 0x18
mov dword [ebp - 0x138c], 0
lea eax, [ebp - 0x13d0]
xorps xmm0, xmm0
mov ecx, esp
movq qword [ebp - 0x1394], xmm0
push eax
call fcn.10008b90
lea eax, [ebp - 0x1394]
push eax
call fcn.10009750
lea ecx, [ebp - 0x1394]
mov byte [ebp - 4], 0x3a
call fcn.1000c430
cmp eax, 1
jbe 0x1000b7bb
push 1
call fcn.1000c410
push eax
lea ecx, [ebp - 0x1464]
call fcn.10008b90
push 2
lea ecx, [ebp - 0x1394]
mov byte [ebp - 4], 0x3b
call fcn.1000c410
push eax
lea ecx, [ebp - 0x1430]
call fcn.10008b90
push ecx
lea ecx, [ebp - 0x1464]
mov byte [ebp - 4], 0x3d
call fcn.100096e0
add esp, 4
mov esi, eax
push ecx
lea ecx, [ebp - 0x1430]
call fcn.100096e0
movd xmm0, esi
add esp, 4
cvtdq2pd xmm0, xmm0
movd xmm1, eax
comisd xmm0, xmmword [0x1004a180]
cvtdq2pd xmm1, xmm1
jbe 0x1000b789
push ecx
push 0
lea ecx, [ebp - 0x1394]
call fcn.1000c410
mov ecx, eax
call fcn.1000c4d0
test eax, eax
jne 0x1000b789
mov eax, dword [ebp - 0x15ac]
mov byte [eax], 1
mov eax, dword [ebp - 0x15a4]
movsd qword [eax], xmm0
mov eax, dword [ebp - 0x15a8]
movsd qword [eax], xmm1
mov dword [ebp - 4], 0x3c
jmp 0x1000b7a5
lea ecx, [ebp - 0x1430]
call fcn.10008b30
lea ecx, [ebp - 0x1464]
call fcn.10008b30
lea ecx, [ebp - 0x1394]
call fcn.1000c450
lea ecx, [ebp - 0x13d0]
call fcn.10008b30
lea ecx, [ebp - 0x13b8]
mov byte [ebp - 4], 0x37
call fcn.100018a0
mov esi, dword [ebp - 0x1594]
jmp 0x1000b100
mov edx, dword [ebp - 0x15b8]
sub esp, 0x18
movd xmm0, eax
mov esi, esp
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
mov dword [ebp - 0x1570], esp
sub esp, 0x18
cmp ecx, 1
mov ecx, esp
movsd xmm1, qword [edx]
addsd xmm0, qword [eax*8 + 0x1004a1a0]
mov eax, edx
push edi
addsd xmm0, xmm1
movsd qword [eax], xmm0
jne 0x1000ba85
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x3f
lea eax, [edi + 0x300]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x13d0]
mov byte [ebp - 4], 0x37
push eax
call fcn.1000ea80
sub esp, 0x18
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0x13d0]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x13b8]
push eax
call fcn.1000eba0
sub esp, 0x18
mov byte [ebp - 4], 0x41
mov dword [ebp - 0x1570], esp
lea eax, [edi + 0x18]
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x42
lea eax, [edi + 0x318]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1494]
mov byte [ebp - 4], 0x41
push eax
call fcn.1000ea80
lea ecx, [ebp - 0x1494]
mov byte [ebp - 4], 0x43
call fcn.10001e00
push eax
lea ecx, [ebp - 0x13b8]
call fcn.10008b20
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x13b8]
mov dword [ebp - 0x1578], eax
call fcn.10008b20
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
sub esp, 0x18
mov dword [ebp - 0x1570], eax
mov dword [ebp - 0x15a0], esp
lea ecx, [edi + 0x78]
mov esi, esp
sub esp, 0x18
mov edx, esp
push ecx
mov ecx, edx
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x44
lea eax, [edi + 0x378]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1430]
mov byte [ebp - 4], 0x43
push eax
call fcn.1000ea80
mov byte [ebp - 4], 0x45
cmp dword [ebp - 0x1570], 0
je 0x1000ba4e
sub esp, 0x18
lea eax, [edi + 0x90]
mov dword [ebp - 0x15a0], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x46
lea eax, [edi + 0x390]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1464]
mov byte [ebp - 4], 0x45
push eax
call fcn.1000ea80
lea ecx, [ebp - 0x1464]
mov byte [ebp - 4], 0x47
call fcn.10001e00
mov esi, dword [ebp - 0x1570]
push eax
push esi
call dword [ebp - 0x1578]
test eax, eax
je 0x1000ba30
push 0
lea ecx, [ebp - 0x1218]
push ecx
push dword [ebp - 0x1370]
lea ecx, [ebp - 0x1214]
push ecx
push dword [ebp - 0x1584]
call eax
lea ecx, [ebp - 0x1464]
call fcn.100018a0
lea ecx, [ebp - 0x1430]
call fcn.100018a0
lea ecx, [ebp - 0x1494]
call fcn.100018a0
lea ecx, [ebp - 0x13b8]
call fcn.10008b30
lea ecx, [ebp - 0x13d0]
mov byte [ebp - 4], 0x37
call fcn.100018a0
mov esi, dword [ebp - 0x1594]
jmp 0x1000b100
push dword [ebp - 0x1584]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x1464]
call fcn.100018a0
lea ecx, [ebp - 0x1430]
call fcn.100018a0
lea ecx, [ebp - 0x1494]
call fcn.100018a0
lea ecx, [ebp - 0x13b8]
call fcn.10008b30
lea ecx, [ebp - 0x13d0]
call fcn.100018a0
lea ecx, [ebp - 0x13e8]
jmp 0x1000b261
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x48
lea eax, [edi + 0x300]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1494]
mov byte [ebp - 4], 0x37
push eax
call fcn.1000ea80
sub esp, 0x18
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0x1494]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x13b8]
push eax
call fcn.1000eba0
sub esp, 0x18
mov byte [ebp - 4], 0x4a
mov dword [ebp - 0x1570], esp
lea eax, [edi + 0x18]
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x4b
lea eax, [edi + 0x318]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x13d0]
mov byte [ebp - 4], 0x4a
push eax
call fcn.1000ea80
lea ecx, [ebp - 0x13d0]
mov byte [ebp - 4], 0x4c
call fcn.10001e00
push eax
lea ecx, [ebp - 0x13b8]
call fcn.10008b20
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x13b8]
mov dword [ebp - 0x1578], eax
call fcn.10008b20
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
sub esp, 0x18
mov dword [ebp - 0x1570], eax
mov dword [ebp - 0x15a0], esp
lea ecx, [edi + 0x78]
mov esi, esp
sub esp, 0x18
mov edx, esp
push ecx
mov ecx, edx
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x4d
lea eax, [edi + 0x378]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1464]
mov byte [ebp - 4], 0x4c
push eax
call fcn.1000ea80
mov byte [ebp - 4], 0x4e
cmp dword [ebp - 0x1570], 0
je 0x1000bca6
sub esp, 0x18
lea eax, [edi + 0x90]
mov dword [ebp - 0x15a0], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10008ce0
push esi
call fcn.1000f090
sub esp, 0x18
mov byte [ebp - 4], 0x4f
lea eax, [edi + 0x390]
mov ecx, esp
push eax
call fcn.10008ce0
lea eax, [ebp - 0x1430]
mov byte [ebp - 4], 0x4e
push eax
call fcn.1000ea80
lea ecx, [ebp - 0x1430]
mov byte [ebp - 4], 0x50
call fcn.10001e00
mov esi, dword [ebp - 0x1570]
push eax
push esi
call dword [ebp - 0x1578]
test eax, eax
je 0x1000bc88
push 0
lea ecx, [ebp - 0x1218]
push ecx
push dword [ebp - 0x1370]
lea ecx, [ebp - 0x1214]
push ecx
push dword [ebp - 0x1584]
call eax
lea ecx, [ebp - 0x1430]
call fcn.100018a0
lea ecx, [ebp - 0x1464]
call fcn.100018a0
lea ecx, [ebp - 0x13d0]
call fcn.100018a0
lea ecx, [ebp - 0x13b8]
call fcn.10008b30
lea ecx, [ebp - 0x1494]
mov byte [ebp - 4], 0x37
call fcn.100018a0
mov esi, dword [ebp - 0x1594]
jmp 0x1000b100
push dword [ebp - 0x1584]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x1430]
call fcn.100018a0
lea ecx, [ebp - 0x1464]
call fcn.100018a0
lea ecx, [ebp - 0x13d0]
call fcn.100018a0
lea ecx, [ebp - 0x13b8]
call fcn.10008b30
lea ecx, [ebp - 0x1494]
call fcn.100018a0
lea ecx, [ebp - 0x13e8]
jmp 0x1000b261
mov edx, dword [ebp - 0x1374]
cmp edx, 0x10
jb 0x1000bd17
mov ecx, dword [ebp - 0x1388]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000bd0d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov dword [ebp - 0x1378], 0
mov dword [ebp - 0x1374], 0xf
mov byte [ebp - 0x1388], 0
mov edx, dword [ebp - 0x1328]
cmp edx, 0x10
jb 0x1000bd6c
mov ecx, dword [ebp - 0x133c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000bd62
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov dword [ebp - 0x132c], 0
mov dword [ebp - 0x1328], 0xf
mov byte [ebp - 0x133c], 0
mov edx, dword [ebp - 0x1310]
cmp edx, 0x10
jb 0x1000bdc1
mov ecx, dword [ebp - 0x1324]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000bdb7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x12f8]
mov byte [ebp - 0x1324], 0
mov dword [ebp - 0x1310], 0xf
mov dword [ebp - 0x1314], 0
cmp edx, 0x10
jb 0x1000be16
mov ecx, dword [ebp - 0x130c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000be0c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov byte [ebp - 0x130c], 0
mov dword [ebp - 0x12f8], 0xf
mov dword [ebp - 0x12fc], 0
mov edx, dword [ebp - 0x12e0]
cmp edx, 0x10
jb 0x1000be6b
mov ecx, dword [ebp - 0x12f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000be61
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x12b0]
mov dword [ebp - 0x12e4], 0
mov dword [ebp - 0x12e0], 0xf
mov byte [ebp - 0x12f4], 0
cmp edx, 0x10
jb 0x1000bec0
mov ecx, dword [ebp - 0x12c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000beb6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x12c8]
mov dword [ebp - 0x12b4], 0
mov dword [ebp - 0x12b0], 0xf
mov byte [ebp - 0x12c4], 0
cmp edx, 0x10
jb 0x1000bf15
mov ecx, dword [ebp - 0x12dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000bf0b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1298]
mov dword [ebp - 0x12cc], 0
mov dword [ebp - 0x12c8], 0xf
mov byte [ebp - 0x12dc], 0
cmp edx, 8
jb 0x1000bf70
mov ecx, dword [ebp - 0x12ac]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000bf66
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1220]
xor eax, eax
mov dword [ebp - 0x129c], eax
mov dword [ebp - 0x1298], 7
mov word [ebp - 0x12ac], ax
cmp edx, 8
jb 0x1000bfc9
mov ecx, dword [ebp - 0x1234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000bfbf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1280]
xor eax, eax
mov dword [ebp - 0x1224], eax
mov dword [ebp - 0x1220], 7
mov word [ebp - 0x1234], ax
cmp edx, 0x10
jb 0x1000c01c
mov ecx, dword [ebp - 0x1294]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c012
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1238]
mov dword [ebp - 0x1284], 0
mov dword [ebp - 0x1280], 0xf
mov byte [ebp - 0x1294], 0
cmp edx, 0x10
jb 0x1000c071
mov ecx, dword [ebp - 0x124c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c067
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1250]
mov dword [ebp - 0x123c], 0
mov dword [ebp - 0x1238], 0xf
mov byte [ebp - 0x124c], 0
cmp edx, 8
jb 0x1000c0cc
mov ecx, dword [ebp - 0x1264]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c0c2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1268]
xor eax, eax
mov dword [ebp - 0x1254], eax
mov dword [ebp - 0x1250], 7
mov word [ebp - 0x1264], ax
cmp edx, 0x10
jb 0x1000c11f
mov ecx, dword [ebp - 0x127c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c115
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1340]
mov dword [ebp - 0x126c], 0
mov dword [ebp - 0x1268], 0xf
mov byte [ebp - 0x127c], 0
cmp edx, 8
jb 0x1000c17a
mov ecx, dword [ebp - 0x1354]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c170
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10019642
mov esp, ebp
pop ebp
ret 0x24
mov edx, dword [ebp - 0x12c8]
cmp edx, 0x10
jb 0x1000c1d4
mov ecx, dword [ebp - 0x12dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c1ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1298]
mov dword [ebp - 0x12cc], 0
mov dword [ebp - 0x12c8], 0xf
mov byte [ebp - 0x12dc], 0
cmp edx, 8
jb 0x1000c22f
mov ecx, dword [ebp - 0x12ac]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c225
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1220]
xor eax, eax
mov dword [ebp - 0x129c], 0
mov dword [ebp - 0x1298], 7
mov word [ebp - 0x12ac], ax
cmp edx, 8
jb 0x1000c28c
mov ecx, dword [ebp - 0x1234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c282
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1280]
xor eax, eax
mov dword [ebp - 0x1224], 0
mov dword [ebp - 0x1220], 7
mov word [ebp - 0x1234], ax
cmp edx, 0x10
jb 0x1000c2e3
mov ecx, dword [ebp - 0x1294]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c2d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1238]
mov dword [ebp - 0x1284], 0
mov dword [ebp - 0x1280], 0xf
mov byte [ebp - 0x1294], 0
cmp edx, 0x10
jb 0x1000c338
mov ecx, dword [ebp - 0x124c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c32e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1250]
mov dword [ebp - 0x123c], 0
mov dword [ebp - 0x1238], 0xf
mov byte [ebp - 0x124c], 0
cmp edx, 8
jb 0x1000c38f
mov ecx, dword [ebp - 0x1264]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c385
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
push edx
push ecx
call fcn.10019650
add esp, 8
mov edx, dword [ebp - 0x1268]
xor eax, eax
mov dword [ebp - 0x1254], 0
mov dword [ebp - 0x1250], 7
mov word [ebp - 0x1264], ax
cmp edx, 0x10
jb 0x1000a287
mov ecx, dword [ebp - 0x127c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a27d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c3f6
jmp 0x1000a27d
push eax
call fcn.100183df
push eax
call fcn.100183df
call fcn.1001dfdf
call fcn.1001dfdf
call fcn.10001610
call fcn.1001dfdf
call fcn.1001dfdf
int3