Function at 0x102fbac
Capabilities:
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xd8
mov eax, dword [0x111127c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp + 0x14]
push ebx
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0x18]
push esi
mov esi, dword [ebp + 0x1c]
push edi
xor edi, edi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0x20]
mov ebx, ecx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x4c], edi
mov byte [ebp - 0x36], 0
mov byte [ebp - 0x35], 0
mov byte [ebp - 0x47], 0
mov dword [ebp - 0x5c], edi
mov byte [ebp - 0x45], 0
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x102fc5c
test byte [eax + 0x1c], 1
je 0x102fc5c
cmp byte [eax + 0x19], 4
jb 0x102fc5c
push 0x10023f8
push 0x1bc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebx + 0xfc]
je 0x102fc7b
push 0x1003530
push 0x2934
push 0x1002460
call fcn.0107b4be
mov eax, dword [ebp - 0xbc]
mov byte [esi], 0
lea esi, [ebx + 0x80]
lea ecx, [ebx + 0xc]
push esi
mov dword [eax], edi
call fcn.0101fc6b
mov eax, dword [esi]
mov ecx, dword [ebp - 0x28]
mov dword [ecx + 0xc], eax
lea eax, [ebp - 0x45]
push eax
call fcn.010822cd
cmp eax, edi
mov dword [ebp - 0x34], eax
jge 0x102fcee
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x103110e
test byte [eax + 0x1c], 1
je 0x103110e
cmp byte [eax + 0x19], 2
jb 0x103110e
push dword [ebp - 0x34]
push 0x10023f8
push 0x1bd
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189f6
jmp 0x103110e
lea eax, [ebp - 0x80]
push eax
push dword [ebx + 0xf0]
call fcn.010d4141
cmp eax, edi
mov dword [ebp - 0x34], eax
jl 0x103110e
mov edi, dword [ebp + 0x10]
mov esi, dword [sym.imp.ole32.dll_CoTaskMemAlloc]
shl edi, 4
push edi
call esi
mov dword [ebp - 0x74], eax
test eax, eax
jne 0x102fd2a
mov dword [ebp - 0x34], 0x8007000e
jmp 0x103110e
push edi
push 0
push dword [ebp - 0x74]
call sub.msvcrt.dll_memset
add esp, 0xc
push edi
call esi
mov dword [ebp - 0x70], eax
test eax, eax
je 0x102fd1e
push edi
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
jmp 0x1031025
cmp byte [ebp - 0x35], 0
mov byte [ebp - 0x15], 0
mov byte [ebp - 0x29], 0
jne 0x102fd65
and dword [ebp - 0x5c], 0
mov eax, dword [edi + 4]
mov ecx, dword [ebp - 0xb8]
mov ecx, dword [ecx + eax*4]
mov esi, eax
imul esi, esi, 0x138
add esi, dword [ebx + 0x7c]
push eax
lea eax, [ebx + 0x100]
mov dword [ebp - 0x30], ecx
push eax
lea ecx, [ebx + 0xc]
mov byte [ebp - 0x35], 0
mov dword [ebp - 0x40], esi
call fcn.0101fc91
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.RPCRT4.dll_UuidCreate]
push dword [esi + 0x54]
call fcn.0107db82
test al, al
je 0x102fdc1
mov ecx, dword [ebp - 0xb8]
lea eax, [ebp - 0x54]
push eax
mov eax, dword [edi + 4]
push dword [ecx + eax*4]
jmp 0x102febb
mov eax, dword [ebx + 0x12c]
xor edi, edi
xor esi, esi
cmp dword [eax + 0x40], edi
jbe 0x102fdfc
mov eax, dword [eax + 0x44]
push dword [ebp - 0x30]
add eax, edi
push dword [eax + 0x10]
mov dword [ebp - 0xc4], eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x102fdfc
mov eax, dword [ebx + 0x12c]
inc esi
add edi, 0x20
cmp esi, dword [eax + 0x40]
jb 0x102fdd0
mov eax, dword [ebx + 0x12c]
cmp esi, dword [eax + 0x40]
jne 0x102fe56
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x20]
test eax, eax
jge 0x102fe16
mov dword [ebp - 0x1c], eax
jmp 0x102fe4d
mov dword [ebp - 0x1c], 0x80780020
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x102fe4d
test byte [eax + 0x1c], 1
je 0x102fe4d
cmp byte [eax + 0x19], 2
jb 0x102fe4d
push dword [ebp - 0x30]
push 0x10023f8
push 0x1be
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
mov byte [ebp - 0x29], 1
jmp 0x1030ee6
cmp dword [ebp - 0x54], 0
je 0x102fe69
push dword [ebp - 0x54]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
and dword [ebp - 0x54], 0
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x102feb6
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x102fea6
test byte [eax + 0x1c], 1
je 0x102fea6
cmp byte [eax + 0x19], 2
jb 0x102fea6
push dword [ebp - 0x30]
push 0x10023f8
push 0x1bf
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
mov dword [ebp - 0x1c], 0x80780020
mov byte [ebp - 0x29], 1
jmp 0x1030f94
lea ecx, [ebp - 0x54]
push ecx
push eax
call fcn.0107d073
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x1030ee6
mov edi, dword [ebp - 0x40]
mov eax, dword [edi + 0x54]
test al, 0x40
je 0x102ff1e
push edi
mov ecx, ebx
call fcn.0102ed2a
mov dword [ebp - 0x34], eax
test eax, eax
jl 0x103110e
lea esi, [ebx + 0x84]
push esi
lea ecx, [ebx + 0xc]
call fcn.0101fc6b
mov eax, dword [esi]
mov ecx, dword [ebp - 0x28]
mov dword [ecx + 8], eax
mov edi, dword [ebx + 0x100]
shl edi, 4
add edi, dword [ebp - 0x74]
lea esi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, ecx
movsd dword es:[edi], dword [esi]
inc dword [eax + 4]
mov edi, eax
jmp 0x1031028
test al, 8
jne 0x102ffa6
test al, 0x20
jne 0x102ff3e
push 0x10028f0
push 0x29d0
push 0x1002460
call fcn.0107b4be
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x102ff85
test byte [eax + 0x1c], 1
je 0x102ff85
cmp byte [eax + 0x19], 4
jb 0x102ff85
add edi, 0x44
push edi
lea ecx, [ebp - 0xc0]
call fcn.01021b57
push dword [eax]
mov eax, dword [0x111124c]
or dword [ebp - 0x60], 1
push 0x10023f8
push 0x1c0
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
test byte [ebp - 0x60], 1
je 0x102ff9b
push dword [ebp - 0xc0]
and dword [ebp - 0x60], 0xfffffffe
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [ebp - 0x28]
inc dword [edi + 4]
jmp 0x1031028
push 1
push 8
pop esi
push esi
mov ecx, ebx
call fcn.01024068
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 4]
mov edx, dword [ebp - 0x64]
mov dword [ecx + 0x24], esi
xor esi, esi
cmp eax, dword [edx + 4]
jne 0x10300d4
mov eax, dword [edx + 0x28]
cmp eax, esi
je 0x10300d4
mov dword [ebp - 0x3c], eax
mov edi, ecx
mov eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x64]
mov dword [edi + 0x28], eax
mov eax, dword [edi + 4]
cmp eax, dword [esi + 4]
jne 0x1030006
cmp dword [esi + 0x28], 0
jne 0x1030006
mov eax, dword [ebp - 0x40]
push dword [eax + 0x54]
call fcn.0107db82
test al, al
jne 0x1030006
mov eax, dword [ebp - 0x3c]
mov dword [esi + 0x28], eax
mov eax, dword [edi + 4]
cmp eax, dword [esi + 4]
jne 0x1030400
mov eax, dword [esi + 0x2c]
test eax, eax
je 0x1030400
mov dword [ebp - 0x58], eax
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x58]
mov esi, dword [ebp - 0x64]
mov dword [edi + 0x2c], eax
mov eax, dword [ebp - 0x88]
mov dword [edi + 0x30], eax
mov eax, dword [edi + 4]
cmp eax, dword [esi + 4]
jne 0x1030067
cmp dword [esi + 0x2c], 0
jne 0x1030067
mov eax, dword [ebp - 0x40]
push dword [eax + 0x54]
call fcn.0107db82
test al, al
jne 0x1030067
mov eax, dword [ebp - 0x58]
mov dword [esi + 0x2c], eax
mov eax, dword [ebp - 0x88]
mov dword [esi + 0x30], eax
push 1
push 9
mov ecx, ebx
call fcn.01024068
push 9
mov ecx, edi
call fcn.01021307
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x88]
push dword [ebp - 0x58]
push dword [ebp - 0x3c]
call fcn.0109ee73
mov esi, eax
test esi, esi
je 0x103047e
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x103033c
test byte [eax + 0x1c], 1
je 0x103033c
cmp byte [eax + 0x19], 2
jb 0x103033c
push dword [ebp - 0x24]
push esi
push dword [ebp - 0x30]
push 0x10023f8
push 0x1c8
jmp 0x1030331
mov eax, dword [ebp - 0x3c]
cmp eax, esi
je 0x10300eb
cmp eax, dword [ecx + 0x28]
je 0x10300eb
cmp eax, dword [edx + 0x28]
je 0x10300eb
push eax
call fcn.0109f47d
mov dword [ebp - 0x3c], esi
push dword [edi + 0x54]
call fcn.0107db82
test al, al
je 0x1030149
mov ecx, ebx
call fcn.010247b0
cmp eax, esi
mov dword [ebp - 0x1c], eax
jge 0x1030149
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030ee6
test byte [eax + 0x1c], 1
je 0x1030ee6
cmp byte [eax + 0x19], 2
jb 0x1030ee6
push dword [ebp - 0x34]
push 0x10023f8
push 0x1c1
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189f6
jmp 0x1030ee6
push esi
push esi
push esi
push esi
mov ecx, ebx
call fcn.0101feca
test byte [ebx + 0xec], 0x10
jne 0x1030183
cmp byte [ebx + 0x108], 0
jne 0x103016f
cmp byte [ebx + 0x109], 0
je 0x1030183
push 0x10034e0
push 0x2a0a
push 0x1002460
call fcn.0107b4be
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10301b6
test byte [eax + 0x1c], 1
je 0x10301b6
cmp byte [eax + 0x19], 4
jb 0x10301b6
push dword [ebp - 0x54]
push dword [ebp - 0x30]
push 0x10023f8
push 0x1c2
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019979
mov ecx, dword [ebx + 0x7c]
lea edi, [ebx + 0x100]
mov eax, dword [edi]
imul eax, eax, 0x138
lea eax, [eax + ecx + 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebx + 0x18]
call fcn.0101f639
push eax
movzx eax, byte [ebx + 0x109]
push ebx
push 0x10228f8
push eax
movzx eax, byte [ebx + 0x108]
push eax
mov eax, dword [ebx + 0xec]
shr eax, 4
and al, 1
movzx eax, al
push eax
push dword [ebp - 0x54]
call fcn.010aa3be
mov ecx, dword [ebx + 0x7c]
mov esi, eax
mov eax, dword [edi]
imul eax, eax, 0x138
lea eax, [eax + ecx + 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030291
test byte [eax + 0x1c], 1
je 0x1030291
cmp byte [eax + 0x19], 4
jb 0x1030291
mov eax, dword [edi]
mov ecx, dword [ebx + 0x7c]
imul eax, eax, 0x138
add eax, ecx
lea ecx, [eax + 0x84]
push ecx
add eax, 0x7c
push eax
call fcn.0108229b
push edx
push eax
mov eax, dword [0x111124c]
push 0x10023f8
push 0x1c3
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019531
push dword [ebp - 0x98]
mov ecx, ebx
push dword [ebp - 0x9c]
push dword [ebp - 0x90]
push dword [ebp - 0x94]
call fcn.0101feca
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x9c]
mov dword [edi + 0x18], eax
mov eax, dword [ebp - 0x98]
mov dword [edi + 0x1c], eax
mov eax, dword [ebp - 0x94]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0x90]
mov dword [edi + 0x14], eax
mov eax, esi
sub eax, 0
je 0x102ffda
dec eax
je 0x10303e4
sub eax, 3
je 0x103039e
dec eax
je 0x1030351
dec eax
je 0x103039e
dec eax
je 0x1030351
sub eax, 0xf
je 0x103039e
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x103033c
test byte [eax + 0x1c], 1
je 0x103033c
cmp byte [eax + 0x19], 2
jb 0x103033c
push dword [ebp - 0x24]
push esi
push dword [ebp - 0x30]
push 0x10023f8
push 0x1c6
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109b90b
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push esi
call fcn.010d425e
mov dword [ebp - 0x1c], eax
jmp 0x1030ee6
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030385
test byte [eax + 0x1c], 1
je 0x1030385
cmp byte [eax + 0x19], 2
jb 0x1030385
push dword [ebp - 0x24]
push esi
push dword [ebp - 0x30]
push 0x10023f8
push 0x1c5
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109b90b
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push esi
call fcn.010d425e
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x15], 1
jmp 0x1030ee6
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10303d2
test byte [eax + 0x1c], 1
je 0x10303d2
cmp byte [eax + 0x19], 2
jb 0x10303d2
push dword [ebp - 0x24]
push esi
push dword [ebp - 0x30]
push 0x10023f8
push 0x1c4
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109b90b
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push esi
call fcn.010d425e
jmp 0x102fe11
lea ecx, [ebx + 0xc]
mov eax, dword [ecx]
call dword [eax + 8]
test al, al
je 0x1030ee6
mov dword [ebp - 0x1c], 0x8078001d
jmp 0x1030ee6
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x1030418
cmp eax, dword [edi + 0x2c]
je 0x1030418
cmp eax, dword [esi + 0x2c]
je 0x1030418
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
and dword [ebp - 0x58], 0
and dword [ebp - 0x88], 0
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x58]
push eax
push dword [ebp - 0x3c]
call fcn.0109ed05
mov esi, eax
test esi, esi
je 0x1030029
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x103033c
test byte [eax + 0x1c], 1
je 0x103033c
cmp byte [eax + 0x19], 2
jb 0x103033c
push dword [ebp - 0x24]
push esi
push dword [ebp - 0x30]
push 0x10023f8
push 0x1c7
jmp 0x1030331
cmp dword [ebp - 0x4c], 0
je 0x1030491
push dword [ebp - 0x4c]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
and dword [ebp - 0x4c], 0
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x40]
push dword [eax + 0x54]
add eax, 0x44
push eax
push dword [ebx + 0x140]
call fcn.010df5bc
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x1030ee6
lea edi, [ebx + 0x18]
push 0
mov ecx, edi
call fcn.010d19c5
mov dword [ebp - 0x34], eax
test eax, eax
jl 0x103110e
xor esi, esi
push esi
push esi
push dword [ebx + 0xe8]
push dword [ebx + 0x140]
call fcn.010d35d9
cmp eax, esi
mov dword [ebp - 0x1c], eax
jl 0x1030395
push 1
push esi
push dword [ebx + 0xe8]
push dword [ebp - 0x4c]
call fcn.010d35d9
cmp eax, esi
mov dword [ebp - 0x1c], eax
jl 0x1030395
mov ecx, edi
call fcn.010d1b11
push dword [ebp - 0x4c]
mov ecx, ebx
call fcn.0101cbba
cmp eax, esi
mov dword [ebp - 0x1c], eax
jge 0x1030568
mov byte [ebp - 0x15], 1
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030ee6
test byte [eax + 0x1c], 1
je 0x1030ee6
cmp byte [eax + 0x19], 2
jb 0x1030ee6
push dword [ebp - 0x1c]
push dword [ebp - 0x4c]
push 0x10023f8
push 0x1c9
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010196ed
jmp 0x1030ee6
push esi
mov ecx, edi
call fcn.010d19c5
cmp eax, esi
mov dword [ebp - 0x34], eax
jl 0x103110e
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0xd0]
push eax
push dword [ebp - 0x80]
call fcn.010f1d9d
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x78]
push eax
push 1
xor edi, edi
push edi
mov esi, 0x1003488
push esi
push 0x80000002
mov dword [ebp - 0x78], edi
mov byte [ebp - 0x46], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x103067d
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x50]
push eax
push edi
push edi
push 0x1003470
push dword [ebp - 0x78]
mov dword [ebp - 0x50], edi
mov dword [ebp - 0xc8], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1030610
mov eax, dword [ebp - 0x50]
mov ecx, 0x100000
mul ecx
cmp edx, edi
ja 0x10305f8
cmp eax, edi
jbe 0x103063e
cmp edx, dword [ebp - 0x68]
ja 0x103063e
jb 0x1030604
cmp eax, dword [ebp - 0x6c]
jae 0x103063e
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
mov byte [ebp - 0x46], 1
jmp 0x103063e
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030672
test byte [eax + 0x1c], 1
je 0x1030643
cmp byte [eax + 0x19], 5
jb 0x1030643
push esi
push 0x10023f8
push 0x1ca
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030672
test byte [eax + 0x1c], 1
je 0x1030672
cmp byte [eax + 0x19], 4
jb 0x1030672
push esi
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push 0x10023f8
push 0x1cb
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019fda
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x10306ab
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10306b0
test byte [eax + 0x1c], 1
je 0x10306b0
cmp byte [eax + 0x19], 5
jb 0x10306b0
push esi
push 0x10023f8
push 0x1cc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
mov eax, dword [0x111124c]
cmp dword [ebp - 0x1c], edi
jl 0x1030395
cmp eax, 0x111124c
je 0x10306f3
test byte [eax + 0x1c], 1
je 0x10306f3
cmp byte [eax + 0x19], 4
jb 0x10306f3
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0xcc]
push dword [ebp - 0xd0]
push 0x10023f8
push 0x1cd
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109bbad
lea ecx, [ebx + 0x18]
call fcn.010d1b11
test byte [ebx + 0xec], 2
je 0x10308cc
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x64]
mov ecx, dword [eax + 8]
mov edx, dword [esi + 8]
cmp ecx, edx
jne 0x1030742
mov byte [ebp - 0x1d], 1
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030797
test byte [eax + 0x1c], 1
je 0x1030797
cmp byte [eax + 0x19], 4
jb 0x1030797
push ecx
push edx
push 0x10023f8
push 0x1ce
jmp 0x1030787
ja 0x1030758
push 0x1003434
push 0x2b28
push 0x1002460
call fcn.0107b4be
mov byte [ebp - 0x1d], 0
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030797
test byte [eax + 0x1c], 1
je 0x1030797
cmp byte [eax + 0x19], 4
jb 0x1030797
mov ecx, dword [ebp - 0x28]
push dword [ecx + 8]
push dword [esi + 8]
push 0x10023f8
push 0x1cf
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109ba57
mov eax, dword [0x111124c]
mov esi, dword [ebp - 0x68]
mov edi, dword [ebp - 0x6c]
test esi, esi
ja 0x10307ff
jb 0x10307ab
cmp edi, 0x1400000
ja 0x10307ff
xor ecx, ecx
cmp byte [ebp - 0x1d], cl
mov byte [ebp - 0x15], 1
sete cl
dec ecx
and ecx, 0x44
add ecx, 0x80780030
mov dword [ebp - 0x1c], ecx
cmp eax, 0x111124c
je 0x1030ee6
test byte [eax + 0x1c], 1
je 0x1030ee6
cmp byte [eax + 0x19], 3
jb 0x1030ee6
push esi
push edi
push 0x10023f8
push 0x1d0
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019531
jmp 0x1030ee6
cmp byte [ebp - 0x46], 0
jne 0x1030866
test esi, esi
ja 0x1030866
jb 0x1030813
cmp edi, 0x40000000
ja 0x1030866
cmp byte [ebp - 0x1d], 0
je 0x1030866
mov dword [ebp - 0x1c], 0x80780080
mov byte [ebp - 0x15], 1
cmp eax, 0x111124c
je 0x1030f94
test byte [eax + 0x1c], 1
je 0x1030f94
cmp byte [eax + 0x19], 3
jb 0x1030f94
push 0
push 0x40000000
push esi
push edi
push 0x10023f8
push 0x1d1
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109bbad
jmp 0x1030f94
add edi, 0xfec00000
adc esi, 0xffffffff
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], esi
test esi, esi
ja 0x10308cc
jb 0x1030883
cmp edi, 0x1100000
ja 0x10308cc
xor ecx, ecx
cmp byte [ebp - 0x1d], cl
mov byte [ebp - 0x15], 1
sete cl
dec ecx
and ecx, 0x44
add ecx, 0x80780030
mov dword [ebp - 0x1c], ecx
cmp eax, 0x111124c
je 0x1030ee6
test byte [eax + 0x1c], 1
je 0x1030ee6
cmp byte [eax + 0x19], 3
jb 0x1030ee6
push esi
push edi
push 0x10023f8
push 0x1d2
jmp 0x10307ef
test byte [ebx + 0xec], 4
mov byte [ebp - 0x1d], 1
je 0x1030902
mov eax, dword [ebx + 0x100]
shl eax, 4
add eax, dword [ebp - 0x70]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1d]
push eax
push dword [ebp - 0x84]
call fcn.0101c6eb
mov dword [ebp - 0x34], eax
test eax, eax
jl 0x103110e
mov al, byte [ebp - 0x1d]
mov byte [ebp - 0x37], al
xor eax, eax
push eax
push eax
push eax
push eax
mov ecx, ebx
call fcn.0101feca
mov eax, dword [0x111124c]
mov esi, 0x111124c
cmp eax, esi
je 0x1030977
test byte [eax + 0x1c], 1
je 0x103094f
cmp byte [eax + 0x19], 4
jb 0x103094f
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push 0x10023f8
push 0x1d3
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019531
mov eax, dword [0x111124c]
cmp eax, esi
je 0x1030977
test byte [eax + 0x1c], 1
je 0x1030977
cmp byte [eax + 0x19], 4
jb 0x1030977
push dword [ebp - 0x30]
push 0x10023f8
push 0x1d4
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
mov ecx, dword [ebx + 0x7c]
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea esi, [ebx + 0x100]
mov eax, dword [esi]
imul eax, eax, 0x138
lea eax, [eax + ecx + 0x8c]
push eax
call edi
lea eax, [ebp - 0x47]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x9c]
push eax
mov eax, dword [esi]
shl eax, 4
add eax, dword [ebp - 0x70]
lea ecx, [ebx + 0x18]
push eax
lea eax, [ebp - 0x79]
push eax
lea eax, [ebp - 0x37]
push eax
call fcn.0101f639
cmp dword [ebx + 0xe8], 4
push eax
push ebx
push 0x10228f8
push dword [ebp - 0x68]
sete al
push dword [ebp - 0x6c]
movzx eax, al
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x3c]
call fcn.010a4592
mov ecx, dword [ebx + 0x7c]
mov dword [ebp - 0x50], eax
mov eax, dword [esi]
imul eax, eax, 0x138
lea eax, [eax + ecx + 0x94]
push eax
call edi
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030a5b
test byte [eax + 0x1c], 1
je 0x1030a5b
cmp byte [eax + 0x19], 4
jb 0x1030a5b
mov eax, dword [esi]
mov ecx, dword [ebx + 0x7c]
imul eax, eax, 0x138
add eax, ecx
lea ecx, [eax + 0x94]
push ecx
add eax, 0x8c
push eax
call fcn.0108229b
push edx
push eax
mov eax, dword [0x111124c]
mov edi, 0x10023f8
push edi
push 0x1d5
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019531
jmp 0x1030a60
mov edi, 0x10023f8
lea esi, [ebx + 0x30]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp byte [ebp - 0x47], 0
je 0x1030a81
mov eax, dword [ebp - 0x40]
mov byte [eax + 0x74], 1
cmp byte [ebp - 0x37], 0
jne 0x1030a81
or dword [eax + 0x54], 0x10
cmp byte [ebp - 0x1d], 0
jne 0x1030acf
cmp byte [ebp - 0x37], 0
je 0x1030acf
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030ab6
test byte [eax + 0x1c], 1
je 0x1030ab6
cmp byte [eax + 0x19], 4
jb 0x1030ab6
push edi
push 0x1d6
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
mov ecx, dword [ebx + 0x114]
mov eax, dword [ebp - 0x40]
mov dword [eax + 0x68], ecx
mov ecx, dword [ebx + 0x118]
and dword [eax + 0x70], 0
mov dword [eax + 0x6c], ecx
push dword [ebp - 0x98]
mov ecx, ebx
push dword [ebp - 0x9c]
mov byte [ebp - 0x36], 1
push dword [ebp - 0x90]
push dword [ebp - 0x94]
call fcn.0101feca
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x9c]
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 0x98]
mov dword [esi + 0x1c], eax
mov eax, dword [ebp - 0x94]
mov dword [esi + 0x10], eax
mov eax, dword [ebp - 0x90]
mov dword [esi + 0x14], eax
mov eax, dword [ebp - 0x50]
sub eax, 0
je 0x1030d15
dec eax
je 0x10303e4
sub eax, 3
je 0x1030dd5
dec eax
je 0x1030d94
dec eax
je 0x1030dd5
dec eax
je 0x1030b97
sub eax, 0xd
je 0x1030d94
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030b88
test byte [eax + 0x1c], 1
je 0x1030b88
cmp byte [eax + 0x19], 2
jb 0x1030b88
push dword [ebp - 0x24]
push dword [ebp - 0x50]
push dword [ebp - 0x30]
push edi
push 0x1dd
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109b90b
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push dword [ebp - 0x50]
jmp 0x1030344
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030bc8
test byte [eax + 0x1c], 1
je 0x1030bc8
cmp byte [eax + 0x19], 2
jb 0x1030bc8
push dword [ebp - 0x24]
push 7
push dword [ebp - 0x30]
push edi
push 0x1d9
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109b90b
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push 7
call fcn.010d425e
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x36], 0
cmp eax, 0x8078002a
jne 0x1030d0b
cmp dword [ebp - 0x24], 0x70
jne 0x1030395
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030c1e
test byte [eax + 0x1c], 1
je 0x1030c1e
cmp byte [eax + 0x19], 4
jb 0x1030c1e
push dword [ebp - 0x80]
push edi
push 0x1da
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
xor eax, eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0x5c], eax
je 0x1030c4b
push 0x100341c
push 0x2bcb
push 0x1002460
call fcn.0107b4be
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xa8]
push eax
push dword [ebp - 0x3c]
call fcn.0109ea6c
test eax, eax
jne 0x1030395
push dword [ebp - 0xb0]
mov ecx, ebx
push dword [ebp - 0xb4]
call fcn.0101bb65
test eax, eax
jl 0x1030cc7
inc dword [ebp - 0x5c]
mov byte [ebp - 0x35], 1
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1031004
test byte [eax + 0x1c], 1
je 0x1031004
cmp byte [eax + 0x19], 4
jb 0x1031004
push dword [ebp - 0x80]
push dword [ebp - 0x30]
push edi
push 0x1db
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019979
jmp 0x1031004
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030395
test byte [eax + 0x1c], 1
je 0x1030395
cmp byte [eax + 0x19], 2
jb 0x1030395
push dword [ebp - 0x34]
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
push edi
push 0x1dc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109bb43
cmp dword [ebp - 0x1c], 0
jl 0x1030395
mov esi, dword [ebp - 0x40]
add esi, 0x10
push esi
lea ecx, [ebx + 0xc]
call fcn.0101fc6b
mov eax, dword [esi]
mov edi, dword [ebp - 0x28]
lea esi, [ebx + 0x84]
push esi
lea ecx, [ebx + 0xc]
mov dword [edi + 0x20], eax
call fcn.0101fc6b
mov eax, dword [esi]
mov dword [edi + 8], eax
mov edi, dword [ebx + 0x100]
shl edi, 4
add edi, dword [ebp - 0x74]
lea esi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0x79], 0
jne 0x1030e16
mov esi, dword [ebp - 0x28]
mov eax, dword [esi + 0x2c]
cmp eax, dword [ebp - 0x58]
je 0x1030d7c
push 0x10033f4
push 0x2c13
push 0x1002460
call fcn.0107b4be
and dword [esi + 0x2c], 0
and dword [esi + 0x30], 0
mov dword [ebp - 0x1c], 0x80780030
mov byte [ebp - 0x15], 1
jmp 0x1030f02
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030dc6
test byte [eax + 0x1c], 1
je 0x1030dc6
cmp byte [eax + 0x19], 2
jb 0x1030dc6
push dword [ebp - 0x24]
push dword [ebp - 0x50]
push dword [ebp - 0x30]
push edi
push 0x1d8
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109b90b
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push dword [ebp - 0x50]
jmp 0x103038d
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030e07
test byte [eax + 0x1c], 1
je 0x1030e07
cmp byte [eax + 0x19], 2
jb 0x1030e07
push dword [ebp - 0x24]
push dword [ebp - 0x50]
push dword [ebp - 0x30]
push edi
push 0x1d7
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109b90b
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push dword [ebp - 0x50]
jmp 0x10303da
and dword [ebp - 0xa4], 0
and dword [ebp - 0xa0], 0
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x3c]
call fcn.010a0604
test eax, eax
je 0x1030e4b
push 0x10033e0
push 0x2c21
push 0x1002460
call fcn.0107b4be
mov eax, dword [ebp - 0xa4]
or eax, dword [ebp - 0xa0]
je 0x1030e95
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030e95
test byte [eax + 0x1c], 1
je 0x1030e95
cmp byte [eax + 0x19], 2
jb 0x1030e95
push dword [ebp - 0x30]
push dword [ebp - 0xa0]
push dword [ebp - 0xa4]
push 0x10023f8
push 0x1de
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019fda
lea edi, [ebx + 0x30]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0xa0]
mov esi, dword [ebp - 0x40]
mov ecx, dword [ebp - 0xa4]
mov dword [esi + 0x28], ecx
mov dword [esi + 0x2c], eax
test eax, eax
jl 0x1030ecc
jg 0x1030ebe
test ecx, ecx
jbe 0x1030ecc
push 0
push 0x8078007d
mov ecx, esi
call fcn.01021031
push 0xe
mov ecx, esi
call fcn.01021078
mov ecx, dword [ebp - 0x28]
push 0xe
call fcn.01021307
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [ebp - 0x1c], 0x80780030
je 0x1030f02
cmp dword [ebp - 0x1c], 0x8078002a
jne 0x1030f6a
cmp dword [ebp - 0x24], 0x70
jne 0x1030f94
push 0x10bafd8
push dword [ebx + 0x118]
push dword [ebx + 0x114]
push dword [ebx + 0xf4]
push dword [ebx + 0xe8]
push dword [ebx + 0xf0]
call fcn.010d92b4
test eax, eax
jge 0x1030f6a
mov ecx, dword [0x111124c]
cmp ecx, 0x111124c
je 0x1030f6a
test byte [ecx + 0x1c], 1
je 0x1030f6a
cmp byte [ecx + 0x19], 2
jb 0x1030f6a
push eax
push dword [ebx + 0xf4]
push dword [ebx + 0xf0]
push 0x10023f8
push 0x1df
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.01019a40
cmp dword [ebp - 0x1c], 0x80780030
jne 0x1030f8e
test byte [ebx + 0xec], 2
je 0x1030f94
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 8]
mov edx, dword [ebp - 0x64]
cmp eax, dword [edx + 8]
ja 0x10311f8
cmp dword [ebp - 0x1c], 0
jge 0x1030ffc
mov ecx, dword [ebp - 0x28]
push 0xc
call fcn.01021307
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1030fd1
test byte [eax + 0x1c], 1
je 0x1030fd1
cmp byte [eax + 0x19], 2
jb 0x1030fd1
push dword [ebp - 0x1c]
push dword [ebp - 0x30]
push 0x10023f8
push 0x1e1
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010196ed
push dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
push dword [ebp - 0x1c]
call fcn.01021135
cmp byte [ebp - 0x29], 0
je 0x1031240
cmp byte [ebp - 0x45], 0
je 0x1030ffc
mov eax, dword [ebp - 0x40]
cmp byte [eax + 0x60], 0
jne 0x1031240
mov eax, dword [ebp - 0x28]
inc dword [eax + 4]
mov esi, eax
xor eax, eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], 0xf
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], eax
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp + 0x10]
cmp dword [edi + 4], eax
jb 0x102fd53
push dword [ebp - 0xac]
mov ecx, ebx
call fcn.0102d74b
mov dword [ebp - 0x34], eax
test eax, eax
jl 0x103110e
push 0
lea ecx, [ebx + 0x18]
call fcn.010d19c5
mov dword [ebp - 0x34], eax
test eax, eax
jl 0x103110e
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 8]
and dword [ebp - 0x60], 0
cmp dword [ebp + 0x10], 0
mov dword [ebp - 0x5c], eax
jbe 0x10310e9
mov ebx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x70]
and dword [ebp - 0x78], 0
sub eax, ebx
mov dword [ebp - 0xa8], eax
push 4
pop ecx
mov edi, 0x100cbcc
mov esi, ebx
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x10310d4
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ecx + 0x7c]
mov edx, dword [ebp - 0x78]
add eax, edx
push dword [eax + 0x70]
lea edx, [eax + 0x68]
push edx
mov edx, dword [ebp - 0xa8]
add edx, ebx
push edx
push dword [ebp - 0x84]
add eax, 0x44
push dword [eax + 0x10]
push eax
push dword [ebp - 0x5c]
push ebx
call fcn.0102cf06
inc dword [ebp - 0x5c]
mov dword [ebp - 0x34], eax
test eax, eax
jl 0x1031108
inc dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
add dword [ebp - 0x78], 0x138
add ebx, 0x10
cmp eax, dword [ebp + 0x10]
jb 0x1031086
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x28]
cmp eax, dword [ecx + 8]
je 0x1031108
push 0x10033c0
push 0x2cb2
push 0x1002460
call fcn.0107b4be
mov ebx, dword [ebp - 0x8c]
mov esi, dword [sym.imp.ole32.dll_CoTaskMemFree]
xor edi, edi
cmp dword [ebp - 0x4c], edi
je 0x1031120
push dword [ebp - 0x4c]
call esi
mov eax, dword [ebp - 0x58]
cmp eax, edi
je 0x103113e
mov ecx, dword [ebp - 0x28]
cmp eax, dword [ecx + 0x2c]
je 0x103113e
mov ecx, dword [ebp - 0x64]
cmp eax, dword [ecx + 0x2c]
je 0x103113e
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x3c]
cmp eax, edi
je 0x103115b
mov ecx, dword [ebp - 0x28]
cmp eax, dword [ecx + 0x28]
je 0x103115b
mov ecx, dword [ebp - 0x64]
cmp eax, dword [ecx + 0x28]
je 0x103115b
push eax
call fcn.0109f47d
cmp dword [ebp - 0x54], edi
je 0x1031165
push dword [ebp - 0x54]
call esi
cmp dword [ebp - 0x70], edi
je 0x103116f
push dword [ebp - 0x70]
call esi
cmp dword [ebp - 0x74], edi
je 0x1031179
push dword [ebp - 0x74]
call esi
cmp dword [ebp - 0x80], edi
je 0x1031183
push dword [ebp - 0x80]
call esi
lea ecx, [ebx + 0x18]
mov dword [ebp - 0x84], ecx
call fcn.010d1b11
cmp dword [ebp - 0x34], edi
jge 0x10312fc
mov ecx, dword [0x111124c]
mov edi, 0x111124c
cmp ecx, edi
je 0x1031261
test byte [ecx + 0x1c], 1
je 0x1031261
cmp byte [ecx + 0x19], 2
jb 0x1031261
mov eax, dword [ebp - 0xac]
cmp byte [eax], 0
mov eax, 0x10033bf
jne 0x10311d6
mov eax, 0x10033bc
push eax
push dword [ebp - 0x34]
mov esi, 0x10023f8
push esi
push 0x1e2
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.0101962a
mov ecx, dword [0x111124c]
jmp 0x1031266
push 4
call fcn.01021307
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1031034
test byte [eax + 0x1c], 1
je 0x1031034
cmp byte [eax + 0x19], 4
jb 0x1031034
push dword [ebp - 0x30]
push 0x10023f8
push 0x1e0
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
jmp 0x1031034
mov al, byte [ebp - 0x15]
mov ecx, dword [ebp - 0xac]
mov byte [ecx], al
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xbc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
jmp 0x103110e
mov esi, 0x10023f8
cmp byte [ebp - 0x36], 0
jne 0x103130c
test byte [ebx + 0xec], 4
je 0x103130c
mov ecx, dword [ebp - 0x84]
push 0
call fcn.010d19c5
test eax, eax
jge 0x10312bc
mov ecx, dword [0x111124c]
cmp ecx, edi
je 0x103132d
test byte [ecx + 0x1c], 1
je 0x103130c
cmp byte [ecx + 0x19], 2
jb 0x103130c
push eax
push esi
push 0x1e3
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.010189f6
jmp 0x1031306
mov ecx, ebx
call fcn.0101be8e
test eax, eax
jge 0x10312ef
mov ecx, dword [0x111124c]
cmp ecx, edi
je 0x10312ef
test byte [ecx + 0x1c], 1
je 0x10312ef
cmp byte [ecx + 0x19], 2
jb 0x10312ef
push eax
push esi
push 0x1e4
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.010189f6
mov ecx, dword [ebp - 0x84]
call fcn.010d1b11
jmp 0x1031306
mov edi, 0x111124c
mov esi, 0x10023f8
mov ecx, dword [0x111124c]
cmp ecx, edi
je 0x103132d
test byte [ecx + 0x1c], 1
je 0x103132d
cmp byte [ecx + 0x19], 4
jb 0x103132d
push esi
push 0x1e5
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.010189d0
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x34]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0106f5f8
leave
ret 0x1c