Function at 0x1001361a
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10084f00
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x258
push esi
and dword [ebp - 0xc4], 0
mov dword [ebp - 0x54], 0x9fdf99ff
mov dword [ebp - 0x1e0], 0xbf25cbd9
mov dword [ebp - 0x1b4], 0xfffffff9
mov dword [ebp - 0x1bc], 0xe673292c
mov dword [ebp - 0x1c4], 0x887e08a1
mov dword [ebp - 0x1cc], 0xbdb88dcf
mov dword [ebp - 0x1c], 0
jmp 0x10013689
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1001369f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x24c], 4
jmp 0x10013682
mov dword [ebp - 0x1c], 0
jmp 0x100136af
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x100136c5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x264], 0x5bb00289
jmp 0x100136a8
mov dword [ebp - 0x54], 0
jmp 0x100136d5
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xfffffffa
jle 0x100137a3
mov dword [ebp - 0x1d4], 0x95364446
mov dword [ebp - 0x1dc], 0xffffffff
mov dword [ebp - 0x1e4], 0xf1a0734f
mov dword [ebp - 0x1ec], 0x6141e4f1
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x21c], 1
push 2
lea ecx, [ebp - 0x1fc]
call fcn.10016b30
and dword [ebp - 4], 0
mov dword [ebp - 0xcc], 0x11378331
mov dword [ebp - 0x50], 0
jmp 0x10013746
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x10013762
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1fc]
call fcn.10016b9d
mov dword [eax], 4
jmp 0x1001373f
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x10013782
push 0x465e
push 0x2e2a
push 0
call fcn.100131cb
add esp, 0xc
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1fc]
call fcn.10016b98
jmp 0x100136ce
lea ecx, [ebp - 0x234]
call fcn.1001690d
mov dword [ebp - 4], 1
mov dword [ebp - 0x11c], 0xffffffff
push 3
lea ecx, [ebp - 0x18c]
call fcn.10016b30
mov byte [ebp - 4], 2
mov dword [ebp - 0x124], 1
push 2
lea ecx, [ebp - 0x198]
call fcn.10016b30
mov byte [ebp - 4], 3
mov dword [ebp - 0x12c], 0x421dd2eb
lea eax, [ebp - 0xf4]
push eax
push 0
lea eax, [ebp - 0x18c]
push eax
push 0x3dd4
push 0x1dba
call fcn.10013121
add esp, 0x14
push 0x4f0d
push 1
push 0x2fa6
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.10013121
add esp, 0x14
lea eax, [ebp - 0x18c]
push eax
push 0
push 0x6389
push 0x4b05
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x124]
push eax
push 0x1e21
lea eax, [ebp - 0x12c]
push eax
call fcn.1001323c
add esp, 0x24
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x198]
call fcn.10016b98
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18c]
call fcn.10016b98
push 0
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.10014926
add esp, 0xc
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x68], 0x711e7bff
mov dword [ebp - 0xd0], 0xbe02189f
mov dword [ebp - 0x108], 0xdd2eb2fc
mov byte [ebp - 0x24], 0
movzx eax, byte [ebp - 0x24]
test eax, eax
je 0x100138ea
push 0
push 0x3291
push 0x14e7
call fcn.1001659b
add esp, 0xc
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x2c], 0
jne 0x10013907
xor eax, eax
inc eax
jne 0x10013907
and dword [ebp - 0xd4], 0
jmp 0x10013911
mov dword [ebp - 0xd4], 1
mov eax, dword [ebp - 0xd4]
add eax, 9
mov dword [ebp - 0x68], eax
imul eax, dword [ebp - 0x68], 0xfffffffb
cmp eax, 0xffffffff
jb 0x10013932
mov dword [ebp - 0xa0], 1
jmp 0x10013939
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xd0], eax
jne 0x10013959
mov eax, 0xfffe
test eax, eax
jne 0x1001395f
cmp dword [ebp - 0x2c], 0
je 0x10013963
cmp dword [ebp - 0x2c], 0
cmp dword [ebp - 0x2c], 0
je 0x1001396f
cmp dword [ebp - 0x68], 0
jne 0x10013981
mov eax, 0xc097
test eax, eax
jne 0x10013981
and dword [ebp - 0x94], 0
jmp 0x1001398b
mov dword [ebp - 0x94], 1
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x108], eax
and dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp + 0xc]
jae 0x1001403c
mov dword [ebp - 0x174], 0x324ec2e0
mov dword [ebp - 0x170], 0x324ec2e0
mov dword [ebp - 0x16c], 0x324ec2e0
mov dword [ebp - 0x168], 0x324ec2e0
lea ecx, [ebp - 0x61]
call fcn.100091a3
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x23c]
call fcn.10016bac
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x78]
call fcn.10016b72
mov byte [ebp - 4], 4
mov dword [ebp - 0x160], 4
mov dword [ebp - 0x15c], 4
mov dword [ebp - 0x158], 4
mov dword [ebp - 0x154], 4
lea ecx, [ebp - 0x59]
call fcn.100091a3
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x254]
call fcn.10016bac
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x118]
call fcn.10016b72
mov byte [ebp - 4], 5
mov dword [ebp - 0x60], 0xffffffff
push 0
lea ecx, [ebp - 0x78]
call fcn.10016b9d
mov dword [eax], 2
jmp 0x10013a9a
push 0
lea ecx, [ebp - 0x78]
call fcn.10016b9d
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xb8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x78]
call fcn.10016b9d
cmp dword [eax], 0xfffffffd
jl 0x10013ac2
mov byte [ebp - 0x23], 0
push 0
lea eax, [ebp - 0x23]
push eax
push 0x6808
call fcn.1001450e
add esp, 0xc
jmp 0x10013a79
push 1
lea ecx, [ebp - 0x118]
call fcn.10016b9d
and dword [eax], 0
jmp 0x10013af8
push 1
lea ecx, [ebp - 0x118]
call fcn.10016b9d
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x88]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x118]
call fcn.10016b9d
cmp dword [eax], 7
jle 0x10013d3f
mov dword [ebp - 0x10], 0xfffffff7
mov dword [ebp - 0x30], 9
push 1
lea ecx, [ebp - 0x84]
call fcn.10016b30
mov byte [ebp - 4], 6
mov dword [ebp - 0x58], 0
jmp 0x10013b3d
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10013b56
push dword [ebp - 0x58]
lea ecx, [ebp - 0x84]
call fcn.10016b9d
and dword [eax], 0
jmp 0x10013b36
mov dword [ebp - 0x10], 0
jmp 0x10013b66
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x10013b98
mov dword [ebp - 0x1ac], 6
mov dword [ebp - 0x1a4], 0xffffffff
push 0x15a2
push 0
lea eax, [ebp - 0x84]
push eax
call fcn.100167c6
add esp, 0xc
jmp 0x10013b5f
mov dword [ebp - 0x30], 0
jmp 0x10013ba8
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x10013d2b
mov dword [ebp - 0x48], 0xb71808ad
mov dword [ebp - 0xc8], 0x43253674
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x10], 0
jmp 0x10013bdd
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x10013d26
mov eax, dword [ebp - 0x10]
add eax, 3
push eax
lea ecx, [ebp - 0x78]
call fcn.10016b9d
push dword [ebp - 0x10]
lea ecx, [ebp - 0x84]
call fcn.10016b9d
mov esi, dword [ebp - 0x30]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x84]
call fcn.10016b9d
sub esi, dword [eax]
je 0x10013c34
push 1
lea ecx, [ebp - 0x78]
call fcn.10016b9d
cmp dword [eax], 0
je 0x10013c34
mov dword [ebp - 0x9c], 1
jmp 0x10013c3b
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x60], eax
mov esi, dword [ebp - 0x60]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x84]
call fcn.10016b9d
add esi, dword [eax]
push 2
lea ecx, [ebp - 0x78]
call fcn.10016b9d
mov eax, dword [eax]
imul eax, esi
mov dword [ebp - 0x100], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x84]
call fcn.10016b9d
mov ecx, dword [ebp - 0x100]
mov dword [eax], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x210], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x84]
call fcn.10016b9d
mov esi, dword [eax]
sub esi, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10]
add eax, 3
push eax
lea ecx, [ebp - 0x78]
call fcn.10016b9d
add esi, dword [eax]
cmp esi, dword [ebp - 0x48]
jge 0x10013cc0
mov dword [ebp - 0xe4], 1
jmp 0x10013cc7
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1b0], eax
mov esi, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x10]
inc eax
push eax
lea ecx, [ebp - 0x78]
call fcn.10016b9d
mov dword [eax], esi
push 0x443f
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0xc8]
push eax
push 0x3f9e
lea eax, [ebp - 0x10c]
push eax
push 0
lea eax, [ebp - 0x30]
push eax
call fcn.1001340f
add esp, 0x28
jmp 0x10013bd6
jmp 0x10013ba1
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x84]
call fcn.10016b98
jmp 0x10013ad4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x118]
call fcn.10016b98
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x78]
call fcn.10016b98
lea eax, [ebp - 0x120]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x3c], 0xffff
push 4
lea ecx, [ebp - 0x138]
call fcn.10016b30
mov byte [ebp - 4], 7
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x138]
push eax
push 1
call fcn.100131cb
add esp, 0xc
mov esi, dword [ebp - 0x3c]
push 3
lea ecx, [ebp - 0x138]
call fcn.10016b9d
mov dword [eax], esi
mov dword [ebp - 0x3c], 0
jmp 0x10013db8
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x27
jne 0x10013ed5
mov dword [ebp - 0x20], 0xad86e52d
mov dword [ebp - 0x20], 0
jmp 0x10013dd9
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffffe
jl 0x10013dff
push 0
call fcn.100149ba
pop ecx
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x10013dfd
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
jmp 0x10013dd2
mov dword [ebp - 0x20], 0xffffffea
jmp 0x10013e0f
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffff2
jne 0x10013ed0
mov dword [ebp - 0x44], 0x7af5af8b
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x10013e3b
push 0
push 0x212
push 0
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebp - 0x44], 0
jmp 0x10013e4b
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1b
je 0x10013ecb
mov dword [ebp - 0x34], 0xd42ca8cd
mov dword [ebp - 0xfc], 3
mov dword [ebp - 0x34], 0
jmp 0x10013e72
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x10013ec6
push 0x752
push 1
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x6c9a
push 0x524b
push 0x7ebc
lea eax, [ebp - 0xfc]
push eax
push 0x19b5
call fcn.1001323c
add esp, 0x24
mov byte [ebp - 0x22], 0
push 0x1b08
lea eax, [ebp - 0x22]
push eax
push 0
call fcn.100133b7
add esp, 0xc
jmp 0x10013e6b
jmp 0x10013e44
jmp 0x10013e08
jmp 0x10013db1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x138]
call fcn.10016b98
and dword [ebp - 0x4c], 0
jmp 0x10013ef8
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x4c], 2
jae 0x10014026
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x200], 0x69ad59e5
mov dword [ebp - 0x14c], 0x17ca0029
mov dword [ebp - 0x148], 0x17ca0029
mov dword [ebp - 0x144], 0x17ca0029
mov dword [ebp - 0x140], 0x17ca0029
lea ecx, [ebp - 0x69]
call fcn.100091a3
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x244]
call fcn.10016bac
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x20c]
call fcn.10016b72
mov byte [ebp - 4], 8
mov dword [ebp - 0x1c0], 0x1d01
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1c8], 0xfffffff8
mov dword [ebp - 0x128], 0x9105fa2e
mov dword [ebp - 0x218], 0x811fc80a
lea eax, [ebp - 0x128]
push eax
push 0x3371
push 1
call fcn.100133b7
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
push 0
push 0x4b5f
push 0x24d5
call fcn.10014567
add esp, 0x10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x20c]
call fcn.10016b98
mov eax, dword [ebp + 0x10]
add eax, dword [ebp - 0x38]
xor edx, edx
div dword [0x1008c5cc]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 4]
movzx eax, byte [eax + edx]
push eax
mov eax, dword [ebp + 0x10]
add eax, dword [ebp - 0x38]
mov ecx, dword [ebp + 0x14]
mov ecx, dword [ecx]
movzx eax, byte [ecx + eax]
push eax
call fcn.10009313
pop ecx
pop ecx
mov ecx, dword [ebp - 0x104]
add ecx, dword [ebp - 0x4c]
mov byte [ecx], al
jmp 0x10013eea
push dword [ebp - 0x120]
lea ecx, [ebp - 0x234]
call fcn.10016992
jmp 0x1001399b
mov dword [ebp - 0x14], 0xfffffff8
push 4
lea ecx, [ebp - 0xe0]
call fcn.10016b30
mov byte [ebp - 4], 9
push 1
lea ecx, [ebp - 0x180]
call fcn.10016b30
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x40], 0
jmp 0x10014075
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x1001408e
push dword [ebp - 0x40]
lea ecx, [ebp - 0xe0]
call fcn.10016b9d
or dword [eax], 0xffffffff
jmp 0x1001406e
lea eax, [ebp - 0x180]
push eax
push 0x7eed
push 0x4cfc
push 0x4478
push 0x5c0e
push 0x2c72
lea eax, [ebp - 0x40]
push eax
push 0x58bf
push 1
push 0x2be6
call fcn.1001340f
add esp, 0x28
mov dword [ebp - 0x14], 0x16
jmp 0x100140d6
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffec
jle 0x1001432d
mov dword [ebp - 0x18], 0xfffffffd
mov byte [ebp - 0x27], 0
lea eax, [ebp - 0x27]
push eax
push 1
call fcn.100135c8
pop ecx
pop ecx
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x14], eax
jge 0x1001410c
mov dword [ebp - 0xec], 1
jmp 0x10014113
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x18], 0x698dc509
jle 0x10014131
mov dword [ebp - 0xa8], 1
jmp 0x10014138
and dword [ebp - 0xa8], 0
cmp dword [ebp - 0xa8], 1
jb 0x1001414d
mov dword [ebp - 0xc0], 1
jmp 0x10014154
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
sub eax, 0x2e633725
je 0x10014173
cmp dword [ebp - 0x14], 0
je 0x10014173
mov dword [ebp - 0xb0], 1
jmp 0x1001417a
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
dec eax
cmp eax, dword [ebp - 0x18]
jge 0x10014192
mov dword [ebp - 0x8c], 1
jmp 0x10014199
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x8c], eax
je 0x100141b6
cmp dword [ebp - 0x14], 0
jne 0x100141b6
mov dword [ebp - 0x90], 1
jmp 0x100141bd
and dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x90]
jg 0x100141d4
mov dword [ebp - 0x98], 1
jmp 0x100141db
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x98]
dec eax
cmp eax, dword [ebp - 0x14]
jne 0x100141f3
mov dword [ebp - 0xf0], 1
jmp 0x100141fa
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
jne 0x10014212
push 9
pop eax
test eax, eax
jne 0x10014212
and dword [ebp - 0xa4], 0
jmp 0x1001421c
mov dword [ebp - 0xa4], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xa4], eax
jle 0x10014233
mov dword [ebp - 0xac], 1
jmp 0x1001423a
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0xac]
test eax, eax
je 0x10014266
push 3
lea ecx, [ebp - 0xe0]
call fcn.10016b9d
cmp dword [eax], 0
je 0x10014266
mov dword [ebp - 0xb4], 1
jmp 0x1001426d
and dword [ebp - 0xb4], 0
cmp dword [ebp - 0xb4], 0x7eed050b
je 0x10014285
mov dword [ebp - 0xf8], 1
jmp 0x1001428c
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1f0], eax
mov esi, dword [ebp - 0x18]
push 2
lea ecx, [ebp - 0xe0]
call fcn.10016b9d
imul esi, dword [eax]
inc esi
imul esi, dword [ebp - 0x14]
test esi, esi
jne 0x100142cc
push 3
lea ecx, [ebp - 0xe0]
call fcn.10016b9d
cmp dword [eax], 0
jne 0x100142cc
and dword [ebp - 0xbc], 0
jmp 0x100142d6
mov dword [ebp - 0xbc], 1
cmp dword [ebp - 0xbc], 0xffffffff
jbe 0x100142eb
mov dword [ebp - 0xe8], 1
jmp 0x100142f2
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1a0], eax
mov esi, dword [ebp - 0x18]
sub esi, dword [ebp - 0x18]
push 3
lea ecx, [ebp - 0xe0]
call fcn.10016b9d
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x180]
call fcn.10016b9d
mov dword [eax], esi
jmp 0x100140cf
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x180]
call fcn.10016b98
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xe0]
call fcn.10016b98
lea eax, [ebp - 0x234]
push eax
mov ecx, dword [ebp + 8]
call fcn.10016920
mov eax, dword [ebp - 0xc4]
or eax, 1
mov dword [ebp - 0xc4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x234]
call fcn.1001696a
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret