Function at 0x1000c8e0
Capabilities:
Inspect section memory permissions
Link many functions at runtime
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3a24
call fcn.10016210
mov eax, dword [0x100a9cf8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x3a24], eax
xor eax, eax
mov dword [ebp - 0x3a20], eax
mov dword [ebp - 0x3a20], eax
mov ecx, dword [edx]
mov dword [0x100ac9b0], ecx
mov dword [ebp - 0x39ec], eax
mov dword [ebp - 0x39cc], eax
mov dword [ebp - 0x39f4], eax
mov dword [ebp - 0x39f0], eax
mov dword [ebp - 0x39e8], eax
mov dword [ebp - 0x39dc], eax
mov dword [ebp - 0x39f8], eax
mov dword [ebp - 0x39d0], eax
mov dword [ebp - 0x39e0], eax
mov dword [ebp - 0x39d8], eax
mov dword [ebp - 0x39d4], eax
mov dword [ebp - 0x39e4], eax
mov dword [ebp - 0x39fc], eax
mov eax, dword [edx + 4]
sub eax, dword [edx]
mov dword [0x100ac9b4], eax
mov edx, dword [ecx + 0x3c]
add edx, ecx
xor ebx, ebx
mov dword [ebp - 0x3a10], edx
mov eax, dword [edx + 0x34]
mov dword [0x100ac9ac], eax
mov dword [ebp - 0x3a14], ebx
cmp dword [edx + 0xa4], ebx
je 0x1000e4dd
movzx eax, byte [0x100a9c83]
lea ecx, [ebp - 0x6c4]
mov byte [ebp - 0x39c8], al
push dword [ebp - 0x39c8]
mov dword [ebp - 0x6b4], ebx
push 1
push ebx
mov dword [ebp - 0x6b0], 0xf
mov byte [ebp - 0x6c4], bl
call fcn.10002360
mov esi, 0x100a9cc0
lea ecx, [ebp - 0x694]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x10b4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x10a4], xmm0
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], 0xf
mov byte [eax], bl
mov eax, 0x100a98f0
cmp dword [0x100a9cd4], 0x10
mov dword [ebp - 0x69c], ebx
cmovae esi, dword [0x100a9cc0]
cmp dword [0x100a9904], 0x10
mov dword [ebp - 0x698], 0xf
cmovae eax, dword [0x100a98f0]
mov byte [ebp - 0x6ac], bl
mov dword [ebp - 0x684], ebx
mov dword [ebp - 0x680], 0xf
mov byte [ebp - 0x694], bl
movzx eax, byte [eax + 6]
mov byte [ebp - 0x39c8], al
push dword [ebp - 0x39c8]
push 1
push ebx
call fcn.10002360
mov ecx, 0x100a9a60
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x109c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x108c], xmm0
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], 0xf
mov byte [eax], bl
lea eax, [ebp - 0x10b4]
push eax
cmp dword [0x100a9a74], 0x10
mov dword [ebp - 0x66c], ebx
cmovae ecx, dword [0x100a9a60]
mov dword [ebp - 0x668], 0xf
mov byte [ebp - 0x67c], bl
mov dword [ebp - 0x654], ebx
mov dword [ebp - 0x650], 0xf
mov byte [ebp - 0x664], bl
mov dword [ebp - 0x63c], ebx
mov dword [ebp - 0x638], 0xf
mov byte [ebp - 0x64c], bl
mov dword [ebp - 0x624], ebx
mov dword [ebp - 0x620], 0xf
mov byte [ebp - 0x634], bl
mov dword [ebp - 0x60c], ebx
mov dword [ebp - 0x608], 0xf
mov byte [ebp - 0x61c], bl
movzx eax, byte [esi + 1]
push eax
lea eax, [ebp - 0x6ac]
push eax
lea eax, [ebp - 0x109c]
push eax
movzx eax, byte [0x100a975b]
push eax
lea eax, [ebp - 0x67c]
push eax
movzx eax, byte [0x100a990e]
push eax
lea eax, [ebp - 0x664]
push eax
lea eax, [ebp - 0x64c]
push eax
movzx eax, byte [ecx + 5]
push eax
movzx eax, byte [0x100a975b]
push eax
lea eax, [ebp - 0x634]
push eax
lea eax, [ebp - 0x1a2c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
movsx eax, byte [0x100a98b6]
push eax
call fcn.10041615
push eax
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x1a14]
push eax
call fcn.10001cd5
add esp, 0x10
push eax
lea eax, [ebp - 0x19fc]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x19e4]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x19cc]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x19b4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x199c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1984]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x196c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1954]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x193c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1924]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x190c]
push eax
call fcn.10001cf3
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x1000cc48
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x100ac9c0], eax
test eax, eax
je 0x1000d0d6
cmp dword [0x100a995c], 0x10
mov eax, 0x100a9948
mov ecx, dword [0x100a98f0]
cmovae eax, dword [0x100a9948]
cmp dword [0x100a9904], 0x10
mov dword [ebp - 0x3a1c], eax
mov eax, 0x100a98f0
cmovae eax, ecx
mov dword [ebp - 0x5f4], ebx
mov dword [ebp - 0x3a08], eax
mov eax, 0x100a98f0
cmovae eax, ecx
mov dword [ebp - 0x5f0], 0xf
cmp dword [0x100a9590], 0x10
mov dword [ebp - 0x3a04], eax
mov eax, 0x100a957c
cmovae eax, dword [0x100a957c]
cmp dword [0x100a9904], 0x10
mov dword [ebp - 0x3a00], eax
mov eax, 0x100a98f0
cmovae eax, ecx
mov byte [ebp - 0x604], bl
mov dword [ebp - 0x5dc], ebx
lea ecx, [ebp - 0x58c]
mov dword [ebp - 0x5d8], 0xf
mov byte [ebp - 0x5ec], bl
mov dword [ebp - 0x5c4], ebx
mov dword [ebp - 0x5c0], 0xf
mov byte [ebp - 0x5d4], bl
mov dword [ebp - 0x5ac], ebx
mov dword [ebp - 0x5a8], 0xf
mov byte [ebp - 0x5bc], bl
mov dword [ebp - 0x594], ebx
mov dword [ebp - 0x590], 0xf
mov byte [ebp - 0x5a4], bl
mov dword [ebp - 0x57c], ebx
mov dword [ebp - 0x578], 0xf
mov byte [ebp - 0x58c], bl
movzx eax, byte [eax + 3]
mov byte [ebp - 0x39c8], al
push dword [ebp - 0x39c8]
push 1
push 0
call fcn.10002360
lea ecx, [ebp - 0x574]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1084], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1074], xmm0
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], 0xf
mov byte [eax], bl
mov eax, 0x100a957c
cmp dword [0x100a9590], 0x10
mov dword [ebp - 0x564], ebx
cmovae eax, dword [0x100a957c]
mov dword [ebp - 0x560], 0xf
mov byte [ebp - 0x574], bl
movzx eax, byte [eax + 3]
mov byte [ebp - 0x39c8], al
push dword [ebp - 0x39c8]
push 1
push 0
call fcn.10002360
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x106c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x105c], xmm0
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], 0xf
mov byte [eax], bl
mov eax, 0x100a9a60
mov dword [ebp - 0x54c], ebx
mov dword [ebp - 0x548], 0xf
mov byte [ebp - 0x55c], bl
mov dword [ebp - 0x534], ebx
mov dword [ebp - 0x530], 0xf
mov byte [ebp - 0x544], bl
mov dword [ebp - 0x51c], ebx
mov dword [ebp - 0x518], 0xf
mov byte [ebp - 0x52c], bl
cmp dword [0x100a9a74], 0x10
mov esi, 0x100a9898
mov dword [ebp - 0x504], ebx
mov edi, 0x100a9c38
cmovae eax, dword [0x100a9a60]
cmp dword [0x100a98ac], 0x10
mov dword [ebp - 0x39c8], eax
lea eax, [ebp - 0x604]
cmovae esi, dword [0x100a9898]
cmp dword [0x100a9c4c], 0x10
push eax
movzx eax, byte [0x100a95d9]
cmovae edi, dword [0x100a9c38]
push eax
mov eax, dword [ebp - 0x3a1c]
mov dword [ebp - 0x500], 0xf
mov byte [ebp - 0x514], bl
mov dword [ebp - 0x4ec], ebx
mov dword [ebp - 0x4e8], 0xf
mov byte [ebp - 0x4fc], bl
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0x5ec]
push eax
lea eax, [ebp - 0x18f4]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
mov eax, dword [ebp - 0x3a08]
movzx eax, byte [eax + 6]
push eax
lea eax, [ebp - 0x5d4]
push eax
mov eax, dword [ebp - 0x3a04]
movzx eax, byte [eax + 3]
push eax
lea eax, [ebp - 0x5bc]
push eax
mov eax, dword [ebp - 0x3a00]
movsx eax, byte [eax + 5]
push eax
call fcn.10041615
push eax
lea eax, [ebp - 0x5a4]
push eax
lea eax, [ebp - 0x18dc]
push eax
call fcn.10001cd5
add esp, 0x10
push eax
lea eax, [ebp - 0x1084]
push eax
lea eax, [ebp - 0x106c]
push eax
movzx eax, byte [0x100a9bfa]
push eax
lea eax, [ebp - 0x55c]
push eax
lea eax, [ebp - 0x18c4]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
movzx eax, byte [0x100a9afb]
push eax
lea eax, [ebp - 0x544]
push eax
lea eax, [ebp - 0x18ac]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x52c]
push eax
mov eax, dword [ebp - 0x39c8]
movzx eax, byte [eax + 3]
push eax
movzx eax, byte [esi + 3]
push eax
lea eax, [ebp - 0x514]
push eax
lea eax, [ebp - 0x1894]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
movsx eax, byte [edi + 2]
push eax
call fcn.10041615
push eax
lea eax, [ebp - 0x4fc]
push eax
lea eax, [ebp - 0x187c]
push eax
call fcn.10001cd5
add esp, 0x10
push eax
lea eax, [ebp - 0x1864]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x184c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1834]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x181c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1804]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x17ec]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x17d4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x17bc]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x17a4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x178c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1774]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x175c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1744]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x172c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1714]
push eax
call fcn.10001cf3
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x1000d0b3
mov eax, dword [eax]
push eax
push dword [0x100ac9c0]
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
mov edx, eax
mov ecx, 7
or eax, 0xffffffff
mov dword [ebp - 0x39ec], eax
jmp 0x1000d794
cmp dword [0x100a9cd4], 0x10
mov eax, 0x100a9cc0
mov esi, 0x100a98f0
mov dword [ebp - 0x4d4], ebx
cmovae eax, dword [0x100a9cc0]
mov edi, 0x100a9a60
cmp dword [0x100a9904], 0x10
mov dword [ebp - 0x3a00], eax
lea eax, [ebp - 0x4e4]
cmovae esi, dword [0x100a98f0]
cmp dword [0x100a9a74], 0x10
push eax
movzx eax, byte [0x100a9c83]
cmovae edi, dword [0x100a9a60]
push eax
lea eax, [ebp - 0x16fc]
mov dword [ebp - 0x4d0], 0xf
push eax
mov byte [ebp - 0x4e4], bl
mov dword [ebp - 0x4bc], ebx
mov dword [ebp - 0x4b8], 0xf
mov byte [ebp - 0x4cc], bl
mov dword [ebp - 0x4a4], ebx
mov dword [ebp - 0x4a0], 0xf
mov byte [ebp - 0x4b4], bl
mov dword [ebp - 0x48c], ebx
mov dword [ebp - 0x488], 0xf
mov byte [ebp - 0x49c], bl
mov dword [ebp - 0x474], ebx
mov dword [ebp - 0x470], 0xf
mov byte [ebp - 0x484], bl
mov dword [ebp - 0x45c], ebx
mov dword [ebp - 0x458], 0xf
mov byte [ebp - 0x46c], bl
mov dword [ebp - 0x444], ebx
mov dword [ebp - 0x440], 0xf
mov byte [ebp - 0x454], bl
mov dword [ebp - 0x2dc], ebx
mov dword [ebp - 0x2d8], 0xf
mov byte [ebp - 0x2ec], bl
call fcn.10001d31
add esp, 0xc
push eax
mov eax, dword [ebp - 0x3a00]
movzx eax, byte [eax + 1]
push eax
lea eax, [ebp - 0x4cc]
push eax
lea eax, [ebp - 0x4b4]
push eax
movzx eax, byte [esi + 6]
push eax
lea eax, [ebp - 0x16e4]
push eax
call fcn.10001d31
add esp, 0xc
push eax
movzx eax, byte [0x100a975b]
push eax
lea eax, [ebp - 0x49c]
push eax
movzx eax, byte [0x100a990e]
push eax
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x46c]
push eax
movzx eax, byte [edi + 5]
push eax
movzx eax, byte [0x100a975b]
push eax
lea eax, [ebp - 0x454]
push eax
lea eax, [ebp - 0x16cc]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
movsx eax, byte [0x100a98b6]
push eax
call fcn.10041615
push eax
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x16b4]
push eax
call fcn.10001cd5
add esp, 0x10
push eax
lea eax, [ebp - 0x169c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1684]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x166c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1654]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x163c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1624]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x160c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x15f4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x15dc]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x15c4]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x15ac]
push eax
call fcn.10001cf3
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x1000d337
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x100ac9c0], eax
test eax, eax
je 0x1000d78d
cmp dword [0x100a995c], 0x10
mov eax, 0x100a9948
mov edx, dword [0x100a98f0]
mov edi, 0x100a957c
cmovae eax, dword [0x100a9948]
cmp dword [0x100a9904], 0x10
mov dword [ebp - 0x3a04], eax
mov eax, 0x100a98f0
cmovae eax, edx
mov dword [ebp - 0x3a00], 0x100a98f0
mov esi, dword [ebp - 0x3a00]
mov dword [ebp - 0x3a08], eax
mov eax, 0x100a98f0
cmovae eax, edx
mov dword [ebp - 0x414], ebx
cmp dword [0x100a9590], 0x10
mov dword [ebp - 0x3a1c], eax
mov eax, 0x100a9a60
cmovae edi, dword [0x100a957c]
cmp dword [0x100a9904], 0x10
mov dword [ebp - 0x410], 0xf
cmovae esi, edx
mov byte [ebp - 0x424], bl
cmp dword [0x100a9590], 0x10
mov edx, 0x100a957c
mov dword [ebp - 0x3fc], ebx
cmovae edx, dword [0x100a957c]
cmp dword [0x100a9a74], 0x10
mov dword [ebp - 0x3f8], 0xf
cmovae eax, dword [0x100a9a60]
cmp dword [0x100a98ac], 0x10
mov dword [ebp - 0x39c8], eax
mov eax, 0x100a9898
cmovae eax, dword [0x100a9898]
cmp dword [0x100a9c4c], 0x10
mov dword [ebp - 0x3a18], eax
mov eax, 0x100a9c38
cmovae eax, dword [0x100a9c38]
mov dword [ebp - 0x3a0c], eax
lea eax, [ebp - 0x424]
push eax
movzx eax, byte [0x100a95d9]
push eax
mov eax, dword [ebp - 0x3a04]
mov byte [ebp - 0x40c], bl
mov dword [ebp - 0x3e4], ebx
mov dword [ebp - 0x3e0], 0xf
mov byte [ebp - 0x3f4], bl
mov dword [ebp - 0x3cc], ebx
mov dword [ebp - 0x3c8], 0xf
mov byte [ebp - 0x3dc], bl
mov dword [ebp - 0x3b4], ebx
mov dword [ebp - 0x3b0], 0xf
mov byte [ebp - 0x3c4], bl
mov dword [ebp - 0x39c], ebx
mov dword [ebp - 0x398], 0xf
mov byte [ebp - 0x3ac], bl
mov dword [ebp - 0x384], ebx
mov dword [ebp - 0x380], 0xf
mov byte [ebp - 0x394], bl
mov dword [ebp - 0x36c], ebx
mov dword [ebp - 0x368], 0xf
mov byte [ebp - 0x37c], bl
mov dword [ebp - 0x354], ebx
mov dword [ebp - 0x350], 0xf
mov byte [ebp - 0x364], bl
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x338], 0xf
mov byte [ebp - 0x34c], bl
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], 0xf
mov byte [ebp - 0x334], bl
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 0x308], 0xf
mov byte [ebp - 0x31c], bl
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0x40c]
mov dword [ebp - 0x3a00], edx
push eax
lea eax, [ebp - 0x1594]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
mov eax, dword [ebp - 0x3a08]
movzx eax, byte [eax + 6]
push eax
lea eax, [ebp - 0x3f4]
push eax
mov eax, dword [ebp - 0x3a1c]
movzx eax, byte [eax + 3]
push eax
lea eax, [ebp - 0x3dc]
push eax
movsx eax, byte [edi + 5]
push eax
call fcn.10041615
push eax
lea eax, [ebp - 0x3c4]
push eax
lea eax, [ebp - 0x157c]
push eax
call fcn.10001cd5
add esp, 0x10
push eax
lea eax, [ebp - 0x3ac]
push eax
movzx eax, byte [esi + 3]
push eax
lea eax, [ebp - 0x1564]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0x394]
push eax
mov eax, dword [ebp - 0x3a00]
movzx eax, byte [eax + 3]
push eax
lea eax, [ebp - 0x154c]
push eax
call fcn.10001d31
add esp, 0xc
push eax
movzx eax, byte [0x100a9bfa]
push eax
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x1534]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
movzx eax, byte [0x100a9afb]
push eax
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x151c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x34c]
push eax
mov eax, dword [ebp - 0x39c8]
movzx eax, byte [eax + 3]
push eax
mov eax, dword [ebp - 0x3a18]
movzx eax, byte [eax + 3]
push eax
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x1504]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
mov eax, dword [ebp - 0x3a0c]
movsx eax, byte [eax + 2]
push eax
call fcn.10041615
push eax
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x14ec]
push eax
call fcn.10001cd5
add esp, 0x10
push eax
lea eax, [ebp - 0x14d4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x14bc]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x14a4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x148c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1474]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x145c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1444]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x142c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1414]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x13fc]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x13e4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x13cc]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x13b4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x139c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1384]
push eax
call fcn.10001cf3
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x1000d76b
mov eax, dword [eax]
push eax
push dword [0x100ac9c0]
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
mov edx, eax
mov ecx, 0xfffffff8
mov eax, 0x1fffffff
mov dword [ebp - 0x39cc], eax
jmp 0x1000d794
xor edx, edx
mov ecx, 0x3fffff8
mov eax, dword [ebp - 0x3a10]
push 0x40
push 0x1000
mov dword [ebp - 0x39c8], ecx
push dword [eax + 0x50]
push 0
call edx
mov dword [0x100ac9ac], eax
mov eax, dword [ebp - 0x39cc]
test eax, 0x10000000
je 0x1000d7dc
and eax, 0xefffffff
lea ecx, [ebp - 0x1384]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x8000000
je 0x1000d7ff
and eax, 0xf7ffffff
lea ecx, [ebp - 0x139c]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x4000000
je 0x1000d822
and eax, 0xfbffffff
lea ecx, [ebp - 0x13b4]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x2000000
je 0x1000d845
and eax, 0xfdffffff
lea ecx, [ebp - 0x13cc]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x1000000
je 0x1000d868
and eax, 0xfeffffff
lea ecx, [ebp - 0x13e4]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x800000
je 0x1000d88b
and eax, 0xff7fffff
lea ecx, [ebp - 0x13fc]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x400000
je 0x1000d8ae
and eax, 0xffbfffff
lea ecx, [ebp - 0x1414]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x200000
je 0x1000d8d1
and eax, 0xffdfffff
lea ecx, [ebp - 0x142c]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x100000
je 0x1000d8f4
and eax, 0xffefffff
lea ecx, [ebp - 0x1444]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x80000
je 0x1000d917
and eax, 0xfff7ffff
lea ecx, [ebp - 0x145c]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x40000
je 0x1000d93a
and eax, 0xfffbffff
lea ecx, [ebp - 0x1474]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x20000
je 0x1000d95d
and eax, 0xfffdffff
lea ecx, [ebp - 0x148c]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x10000
je 0x1000d980
and eax, 0xfffeffff
lea ecx, [ebp - 0x14a4]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x8000
je 0x1000d9a3
and eax, 0xffff7fff
lea ecx, [ebp - 0x14bc]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x4000
je 0x1000d9c6
and eax, 0xffffbfff
lea ecx, [ebp - 0x14d4]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x2000
je 0x1000d9e9
and eax, 0xffffdfff
lea ecx, [ebp - 0x14ec]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x1000
je 0x1000da0c
and eax, 0xffffefff
lea ecx, [ebp - 0x31c]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x800
je 0x1000da2f
and eax, 0xfffff7ff
lea ecx, [ebp - 0x1504]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x400
je 0x1000da52
and eax, 0xfffffbff
lea ecx, [ebp - 0x334]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x200
je 0x1000da75
and eax, 0xfffffdff
lea ecx, [ebp - 0x34c]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test eax, 0x100
je 0x1000da98
and eax, 0xfffffeff
lea ecx, [ebp - 0x151c]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test al, al
jns 0x1000dab8
and eax, 0xffffff7f
lea ecx, [ebp - 0x364]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test al, 0x40
je 0x1000dad6
and eax, 0xffffffbf
lea ecx, [ebp - 0x1534]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test al, 0x20
je 0x1000daf4
and eax, 0xffffffdf
lea ecx, [ebp - 0x37c]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test al, 0x10
je 0x1000db12
and eax, 0xffffffef
lea ecx, [ebp - 0x154c]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test al, 8
je 0x1000db30
and eax, 0xfffffff7
lea ecx, [ebp - 0x394]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test al, 4
je 0x1000db4e
and eax, 0xfffffffb
lea ecx, [ebp - 0x1564]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test al, 2
je 0x1000db6c
and eax, 0xfffffffd
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39cc]
test al, 1
je 0x1000db84
and eax, 0xfffffffe
lea ecx, [ebp - 0x157c]
mov dword [ebp - 0x39cc], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, eax
jns 0x1000dbaa
and eax, 0x7fffffff
lea ecx, [ebp - 0x3c4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x40000000
je 0x1000dbcd
and eax, 0xbfffffff
lea ecx, [ebp - 0x3dc]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x20000000
je 0x1000dbf0
and eax, 0xdfffffff
lea ecx, [ebp - 0x3f4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x10000000
je 0x1000dc13
and eax, 0xefffffff
lea ecx, [ebp - 0x1594]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x8000000
je 0x1000dc36
and eax, 0xf7ffffff
lea ecx, [ebp - 0x40c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x4000000
je 0x1000dc59
and eax, 0xfbffffff
lea ecx, [ebp - 0x424]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x2000000
je 0x1000dc7c
and eax, 0xfdffffff
lea ecx, [ebp - 0x15ac]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x1000000
je 0x1000dc9f
and eax, 0xfeffffff
lea ecx, [ebp - 0x15c4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x800000
je 0x1000dcc2
and eax, 0xff7fffff
lea ecx, [ebp - 0x15dc]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x400000
je 0x1000dce5
and eax, 0xffbfffff
lea ecx, [ebp - 0x15f4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x200000
je 0x1000dd08
and eax, 0xffdfffff
lea ecx, [ebp - 0x160c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x100000
je 0x1000dd2b
and eax, 0xffefffff
lea ecx, [ebp - 0x1624]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x80000
je 0x1000dd4e
and eax, 0xfff7ffff
lea ecx, [ebp - 0x163c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x40000
je 0x1000dd71
and eax, 0xfffbffff
lea ecx, [ebp - 0x1654]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x20000
je 0x1000dd94
and eax, 0xfffdffff
lea ecx, [ebp - 0x166c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x10000
je 0x1000ddb7
and eax, 0xfffeffff
lea ecx, [ebp - 0x1684]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x8000
je 0x1000ddda
and eax, 0xffff7fff
lea ecx, [ebp - 0x169c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x4000
je 0x1000ddfd
and eax, 0xffffbfff
lea ecx, [ebp - 0x16b4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x2000
je 0x1000de20
and eax, 0xffffdfff
lea ecx, [ebp - 0x2ec]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x1000
je 0x1000de43
and eax, 0xffffefff
lea ecx, [ebp - 0x16cc]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x800
je 0x1000de66
and eax, 0xfffff7ff
lea ecx, [ebp - 0x454]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x400
je 0x1000de89
and eax, 0xfffffbff
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x200
je 0x1000deac
and eax, 0xfffffdff
lea ecx, [ebp - 0x484]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x100
je 0x1000decf
and eax, 0xfffffeff
lea ecx, [ebp - 0x49c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, al
jns 0x1000deef
and eax, 0xffffff7f
lea ecx, [ebp - 0x16e4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 0x40
je 0x1000df0d
and eax, 0xffffffbf
lea ecx, [ebp - 0x4b4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 0x20
je 0x1000df2b
and eax, 0xffffffdf
lea ecx, [ebp - 0x4cc]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 0x10
je 0x1000df49
and eax, 0xffffffef
lea ecx, [ebp - 0x16fc]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 8
je 0x1000df67
and eax, 0xfffffff7
lea ecx, [ebp - 0x4e4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 4
je 0x1000df85
and eax, 0xfffffffb
lea ecx, [ebp - 0x1714]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 2
je 0x1000dfa3
and eax, 0xfffffffd
lea ecx, [ebp - 0x172c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 1
je 0x1000dfb2
lea ecx, [ebp - 0x1744]
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, eax
jns 0x1000dfd8
and eax, 0x7fffffff
lea ecx, [ebp - 0x175c]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x40000000
je 0x1000dffb
and eax, 0xbfffffff
lea ecx, [ebp - 0x1774]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x20000000
je 0x1000e01e
and eax, 0xdfffffff
lea ecx, [ebp - 0x178c]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x10000000
je 0x1000e041
and eax, 0xefffffff
lea ecx, [ebp - 0x17a4]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x8000000
je 0x1000e064
and eax, 0xf7ffffff
lea ecx, [ebp - 0x17bc]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x4000000
je 0x1000e087
and eax, 0xfbffffff
lea ecx, [ebp - 0x17d4]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x2000000
je 0x1000e0aa
and eax, 0xfdffffff
lea ecx, [ebp - 0x17ec]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x1000000
je 0x1000e0cd
and eax, 0xfeffffff
lea ecx, [ebp - 0x1804]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x800000
je 0x1000e0f0
and eax, 0xff7fffff
lea ecx, [ebp - 0x181c]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x400000
je 0x1000e113
and eax, 0xffbfffff
lea ecx, [ebp - 0x1834]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x200000
je 0x1000e136
and eax, 0xffdfffff
lea ecx, [ebp - 0x184c]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x100000
je 0x1000e159
and eax, 0xffefffff
lea ecx, [ebp - 0x1864]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x80000
je 0x1000e17c
and eax, 0xfff7ffff
lea ecx, [ebp - 0x187c]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x40000
je 0x1000e19f
and eax, 0xfffbffff
lea ecx, [ebp - 0x4fc]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x20000
je 0x1000e1c2
and eax, 0xfffdffff
lea ecx, [ebp - 0x1894]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x10000
je 0x1000e1e5
and eax, 0xfffeffff
lea ecx, [ebp - 0x514]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x8000
je 0x1000e208
and eax, 0xffff7fff
lea ecx, [ebp - 0x52c]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x4000
je 0x1000e22b
and eax, 0xffffbfff
lea ecx, [ebp - 0x18ac]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x2000
je 0x1000e24e
and eax, 0xffffdfff
lea ecx, [ebp - 0x544]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x1000
je 0x1000e271
and eax, 0xffffefff
lea ecx, [ebp - 0x18c4]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x800
je 0x1000e294
and eax, 0xfffff7ff
lea ecx, [ebp - 0x55c]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x400
je 0x1000e2b7
and eax, 0xfffffbff
lea ecx, [ebp - 0x106c]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x200
je 0x1000e2da
and eax, 0xfffffdff
lea ecx, [ebp - 0x574]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test eax, 0x100
je 0x1000e2fd
and eax, 0xfffffeff
lea ecx, [ebp - 0x1084]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test al, al
jns 0x1000e31d
and eax, 0xffffff7f
lea ecx, [ebp - 0x58c]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test al, 0x40
je 0x1000e33b
and eax, 0xffffffbf
lea ecx, [ebp - 0x18dc]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test al, 0x20
je 0x1000e359
and eax, 0xffffffdf
lea ecx, [ebp - 0x5a4]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test al, 0x10
je 0x1000e377
and eax, 0xffffffef
lea ecx, [ebp - 0x5bc]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test al, 8
je 0x1000e395
and eax, 0xfffffff7
lea ecx, [ebp - 0x5d4]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test al, 4
je 0x1000e3b3
and eax, 0xfffffffb
lea ecx, [ebp - 0x18f4]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test al, 2
je 0x1000e3d1
and eax, 0xfffffffd
lea ecx, [ebp - 0x5ec]
mov dword [ebp - 0x39ec], eax
call fcn.10001781
mov eax, dword [ebp - 0x39ec]
test al, 1
je 0x1000e3e0
lea ecx, [ebp - 0x604]
call fcn.10001781
lea ecx, [ebp - 0x190c]
call fcn.10001781
lea ecx, [ebp - 0x1924]
call fcn.10001781
lea ecx, [ebp - 0x193c]
call fcn.10001781
lea ecx, [ebp - 0x1954]
call fcn.10001781
lea ecx, [ebp - 0x196c]
call fcn.10001781
lea ecx, [ebp - 0x1984]
call fcn.10001781
lea ecx, [ebp - 0x199c]
call fcn.10001781
lea ecx, [ebp - 0x19b4]
call fcn.10001781
lea ecx, [ebp - 0x19cc]
call fcn.10001781
lea ecx, [ebp - 0x19e4]
call fcn.10001781
lea ecx, [ebp - 0x19fc]
call fcn.10001781
lea ecx, [ebp - 0x1a14]
call fcn.10001781
lea ecx, [ebp - 0x61c]
call fcn.10001781
lea ecx, [ebp - 0x1a2c]
call fcn.10001781
lea ecx, [ebp - 0x634]
call fcn.10001781
lea ecx, [ebp - 0x64c]
call fcn.10001781
lea ecx, [ebp - 0x664]
call fcn.10001781
lea ecx, [ebp - 0x67c]
call fcn.10001781
lea ecx, [ebp - 0x109c]
call fcn.10001781
lea ecx, [ebp - 0x694]
call fcn.10001781
lea ecx, [ebp - 0x6ac]
call fcn.10001781
lea ecx, [ebp - 0x10b4]
call fcn.10001781
lea ecx, [ebp - 0x6c4]
call fcn.10001781
cmp dword [0x100a9cd4], 0x10
mov eax, 0x100a9cc0
mov esi, 0x100a98f0
mov dword [ebp - 0x3a20], ebx
cmovae eax, dword [0x100a9cc0]
mov edi, 0x100a9a60
cmp dword [0x100a9904], 0x10
mov dword [ebp - 0x3a0c], eax
lea eax, [ebp - 0xae4]
cmovae esi, dword [0x100a98f0]
cmp dword [0x100a9a74], 0x10
push eax
movzx eax, byte [0x100a9c83]
cmovae edi, dword [0x100a9a60]
push eax
lea eax, [ebp - 0x220c]
mov dword [ebp - 0xad4], ebx
push eax
mov dword [ebp - 0xad0], 0xf
mov byte [ebp - 0xae4], bl
mov dword [ebp - 0xabc], ebx
mov dword [ebp - 0xab8], 0xf
mov byte [ebp - 0xacc], bl
mov dword [ebp - 0xaa4], ebx
mov dword [ebp - 0xaa0], 0xf
mov byte [ebp - 0xab4], bl
mov dword [ebp - 0xa8c], ebx
mov dword [ebp - 0xa88], 0xf
mov byte [ebp - 0xa9c], bl
mov dword [ebp - 0xa74], ebx
mov dword [ebp - 0xa70], 0xf
mov byte [ebp - 0xa84], bl
mov dword [ebp - 0xa5c], ebx
mov dword [ebp - 0xa58], 0xf
mov byte [ebp - 0xa6c], bl
mov dword [ebp - 0xa44], ebx
mov dword [ebp - 0xa40], 0xf
mov byte [ebp - 0xa54], bl
mov dword [ebp - 0xa2c], ebx
mov dword [ebp - 0xa28], 0xf
mov byte [ebp - 0xa3c], bl
call fcn.10001d31
add esp, 0xc
push eax
mov eax, dword [ebp - 0x3a0c]
movzx eax, byte [eax + 1]
push eax
lea eax, [ebp - 0xacc]
push eax
lea eax, [ebp - 0xab4]
push eax
movzx eax, byte [esi + 6]
push eax
lea eax, [ebp - 0x21f4]
push eax
call fcn.10001d31
add esp, 0xc
push eax
movzx eax, byte [0x100a975b]
push eax
lea eax, [ebp - 0xa9c]
push eax
movzx eax, byte [0x100a990e]
push eax
lea eax, [ebp - 0xa84]
push eax
lea eax, [ebp - 0xa6c]
push eax
movzx eax, byte [edi + 5]
push eax
movzx eax, byte [0x100a975b]
push eax
lea eax, [ebp - 0xa54]
push eax
lea eax, [ebp - 0x21dc]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
movsx eax, byte [0x100a98b6]
push eax
call fcn.10041615
push eax
lea eax, [ebp - 0xa3c]
push eax
lea eax, [ebp - 0x21c4]
push eax
call fcn.10001cd5
add esp, 0x10
push eax
lea eax, [ebp - 0x21ac]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x2194]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x217c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x2164]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x214c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x2134]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x211c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x2104]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x20ec]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x20d4]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x20bc]
push eax
call fcn.10001cf3
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x1000e744
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x100ac9c0], eax
test eax, eax
je 0x1000ec06
mov eax, dword [ebp - 0x39cc]
mov esi, 0x100a9a60
or eax, 0x20000000
mov dword [ebp - 0xa14], ebx
or eax, 0xc0000000
mov dword [ebp - 0xa10], 0xf
cmp dword [0x100a995c], 0x10
mov edi, 0x100a98f0
mov dword [ebp - 0x39cc], eax
mov edx, 0x100a957c
mov eax, 0x100a9948
mov byte [ebp - 0xa24], bl
cmovae eax, dword [0x100a9948]
cmp dword [0x100a9a74], 0x10
mov dword [ebp - 0x3a0c], eax
mov eax, 0x100a9898
cmovae esi, dword [0x100a9a60]
cmp dword [0x100a9904], 0x10
mov dword [ebp - 0x9fc], ebx
cmovae edi, dword [0x100a98f0]
cmp dword [0x100a9590], 0x10
mov dword [ebp - 0x9f8], 0xf
cmovae edx, dword [0x100a957c]
cmp dword [0x100a9a74], 0x10
mov dword [ebp - 0x3a18], edx
mov edx, 0x100a9a60
cmovae edx, dword [0x100a9a60]
cmp dword [0x100a98ac], 0x10
mov byte [ebp - 0xa0c], bl
cmovae eax, dword [0x100a9898]
cmp dword [0x100a9c4c], 0x10
mov dword [ebp - 0x3a04], eax
mov eax, 0x100a9c38
cmovae eax, dword [0x100a9c38]
mov dword [ebp - 0x3a08], eax
lea eax, [ebp - 0xa24]
push eax
movzx eax, byte [0x100a9afd]
push eax
lea eax, [ebp - 0x20a4]
mov dword [ebp - 0x9e4], ebx
push eax
mov dword [ebp - 0x9e0], 0xf
mov byte [ebp - 0x9f4], bl
mov dword [ebp - 0x9cc], ebx
mov dword [ebp - 0x9c8], 0xf
mov byte [ebp - 0x9dc], bl
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], 0xf
mov byte [ebp - 0x9c4], bl
mov dword [ebp - 0x99c], ebx
mov dword [ebp - 0x998], 0xf
mov byte [ebp - 0x9ac], bl
mov dword [ebp - 0x984], ebx
mov dword [ebp - 0x980], 0xf
mov byte [ebp - 0x994], bl
mov dword [ebp - 0x96c], ebx
mov dword [ebp - 0x968], 0xf
mov byte [ebp - 0x97c], bl
mov dword [ebp - 0x954], ebx
mov dword [ebp - 0x950], 0xf
mov byte [ebp - 0x964], bl
mov dword [ebp - 0x93c], ebx
mov dword [ebp - 0x938], 0xf
mov byte [ebp - 0x94c], bl
mov dword [ebp - 0x924], ebx
mov dword [ebp - 0x920], 0xf
mov byte [ebp - 0x934], bl
mov dword [ebp - 0x90c], ebx
mov dword [ebp - 0x908], 0xf
mov byte [ebp - 0x91c], bl
mov dword [ebp - 0x3a00], edx
mov dword [ebp - 0x8f4], ebx
mov dword [ebp - 0x8f0], 0xf
mov byte [ebp - 0x904], bl
mov dword [ebp - 0x8dc], ebx
mov dword [ebp - 0x8d8], 0xf
mov byte [ebp - 0x8ec], bl
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0xa0c]
push eax
movzx eax, byte [0x100a95dd]
push eax
lea eax, [ebp - 0x208c]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0x9f4]
push eax
movzx eax, byte [0x100a975a]
push eax
movzx eax, byte [0x100a9afb]
push eax
lea eax, [ebp - 0x9dc]
push eax
lea eax, [ebp - 0x2074]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x9c4]
push eax
mov eax, dword [ebp - 0x3a0c]
movzx eax, byte [eax]
push eax
movzx eax, byte [esi + 3]
push eax
lea eax, [ebp - 0x9ac]
push eax
movsx eax, byte [0x100a9961]
push eax
call fcn.10041615
push eax
lea eax, [ebp - 0x994]
push eax
lea eax, [ebp - 0x205c]
push eax
call fcn.10001cd5
add esp, 0x10
push eax
lea eax, [ebp - 0x97c]
push eax
movzx eax, byte [edi + 6]
push eax
lea eax, [ebp - 0x2044]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0x964]
push eax
mov eax, dword [ebp - 0x3a18]
movzx eax, byte [eax + 4]
push eax
lea eax, [ebp - 0x202c]
push eax
call fcn.10001d31
add esp, 0xc
push eax
movzx eax, byte [0x100a9bfa]
push eax
lea eax, [ebp - 0x94c]
push eax
lea eax, [ebp - 0x2014]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x934]
push eax
movzx eax, byte [0x100a9b04]
push eax
lea eax, [ebp - 0x1ffc]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0x91c]
push eax
mov eax, dword [ebp - 0x3a00]
movzx eax, byte [eax + 5]
push eax
mov eax, dword [ebp - 0x3a04]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0x904]
push eax
lea eax, [ebp - 0x8ec]
push eax
mov eax, dword [ebp - 0x3a08]
movsx eax, byte [eax + 2]
push eax
call fcn.10041615
add esp, 4
push eax
lea eax, [ebp - 0x1fe4]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0x1fcc]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1fb4]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1f9c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1f84]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1f6c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1f54]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1f3c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1f24]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1f0c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1ef4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1edc]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1ec4]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1eac]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1e94]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1e7c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1e64]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1e4c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1e34]
push eax
call fcn.10001cf3
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x1000ebe4
mov eax, dword [eax]
push eax
push dword [0x100ac9c0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
mov ecx, 0x3f
or eax, 0xffffffff
mov dword [ebp - 0x39f4], eax
jmp 0x1000f322
cmp dword [0x100a9cd4], 0x10
mov eax, 0x100a9cc0
mov esi, 0x100a98f0
mov dword [ebp - 0x8c4], ebx
cmovae eax, dword [0x100a9cc0]
mov edi, 0x100a9a60
cmp dword [0x100a9904], 0x10
mov dword [ebp - 0x3a0c], eax
lea eax, [ebp - 0x8d4]
cmovae esi, dword [0x100a98f0]
cmp dword [0x100a9a74], 0x10
push eax
movzx eax, byte [0x100a9c83]
cmovae edi, dword [0x100a9a60]
push eax
lea eax, [ebp - 0x1e1c]
mov dword [ebp - 0x8c0], 0xf
push eax
mov byte [ebp - 0x8d4], bl
mov dword [ebp - 0x8ac], ebx
mov dword [ebp - 0x8a8], 0xf
mov byte [ebp - 0x8bc], bl
mov dword [ebp - 0x894], ebx
mov dword [ebp - 0x890], 0xf
mov byte [ebp - 0x8a4], bl
mov dword [ebp - 0x87c], ebx
mov dword [ebp - 0x878], 0xf
mov byte [ebp - 0x88c], bl
mov dword [ebp - 0x864], ebx
mov dword [ebp - 0x860], 0xf
mov byte [ebp - 0x874], bl
mov dword [ebp - 0x84c], ebx
mov dword [ebp - 0x848], 0xf
mov byte [ebp - 0x85c], bl
mov dword [ebp - 0x834], ebx
mov dword [ebp - 0x830], 0xf
mov byte [ebp - 0x844], bl
mov dword [ebp - 0x81c], ebx
mov dword [ebp - 0x818], 0xf
mov byte [ebp - 0x82c], bl
call fcn.10001d31
add esp, 0xc
push eax
mov eax, dword [ebp - 0x3a0c]
movzx eax, byte [eax + 1]
push eax
lea eax, [ebp - 0x8bc]
push eax
lea eax, [ebp - 0x8a4]
push eax
movzx eax, byte [esi + 6]
push eax
lea eax, [ebp - 0x1e04]
push eax
call fcn.10001d31
add esp, 0xc
push eax
movzx eax, byte [0x100a975b]
push eax
lea eax, [ebp - 0x88c]
push eax
movzx eax, byte [0x100a990e]
push eax
lea eax, [ebp - 0x874]
push eax
lea eax, [ebp - 0x85c]
push eax
movzx eax, byte [edi + 5]
push eax
movzx eax, byte [0x100a975b]
push eax
lea eax, [ebp - 0x844]
push eax
lea eax, [ebp - 0x1dec]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
movsx eax, byte [0x100a98b6]
push eax
call fcn.10041615
push eax
lea eax, [ebp - 0x82c]
push eax
lea eax, [ebp - 0x1dd4]
push eax
call fcn.10001cd5
add esp, 0x10
push eax
lea eax, [ebp - 0x1dbc]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1da4]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1d8c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1d74]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1d5c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1d44]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1d2c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1d14]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1cfc]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1ce4]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1ccc]
push eax
call fcn.10001cf3
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x1000ee67
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x100ac9c0], eax
test eax, eax
je 0x1000f31b
cmp dword [0x100a995c], 0x10
mov eax, 0x100a9948
mov esi, 0x100a9a60
mov dword [ebp - 0x804], ebx
cmovae eax, dword [0x100a9948]
mov edi, 0x100a98f0
cmp dword [0x100a9a74], 0x10
mov edx, 0x100a957c
mov dword [ebp - 0x3a0c], eax
mov eax, 0x100a9898
cmovae esi, dword [0x100a9a60]
cmp dword [0x100a9904], 0x10
mov dword [ebp - 0x800], 0xf
cmovae edi, dword [0x100a98f0]
cmp dword [0x100a9590], 0x10
mov byte [ebp - 0x814], bl
cmovae edx, dword [0x100a957c]
cmp dword [0x100a9a74], 0x10
mov dword [ebp - 0x3a18], edx
mov edx, 0x100a9a60
cmovae edx, dword [0x100a9a60]
cmp dword [0x100a98ac], 0x10
mov dword [ebp - 0x7ec], ebx
cmovae eax, dword [0x100a9898]
cmp dword [0x100a9c4c], 0x10
mov dword [ebp - 0x3a04], eax
mov eax, 0x100a9c38
cmovae eax, dword [0x100a9c38]
mov dword [ebp - 0x3a08], eax
lea eax, [ebp - 0x814]
push eax
movzx eax, byte [0x100a9afd]
push eax
lea eax, [ebp - 0x1cb4]
mov dword [ebp - 0x7e8], 0xf
push eax
mov byte [ebp - 0x7fc], bl
mov dword [ebp - 0x7d4], ebx
mov dword [ebp - 0x7d0], 0xf
mov byte [ebp - 0x7e4], bl
mov dword [ebp - 0x7bc], ebx
mov dword [ebp - 0x7b8], 0xf
mov byte [ebp - 0x7cc], bl
mov dword [ebp - 0x7a4], ebx
mov dword [ebp - 0x7a0], 0xf
mov byte [ebp - 0x7b4], bl
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], bl
mov dword [ebp - 0x774], ebx
mov dword [ebp - 0x770], 0xf
mov byte [ebp - 0x784], bl
mov dword [ebp - 0x75c], ebx
mov dword [ebp - 0x758], 0xf
mov byte [ebp - 0x76c], bl
mov dword [ebp - 0x744], ebx
mov dword [ebp - 0x740], 0xf
mov byte [ebp - 0x754], bl
mov dword [ebp - 0x72c], ebx
mov dword [ebp - 0x728], 0xf
mov byte [ebp - 0x73c], bl
mov dword [ebp - 0x714], ebx
mov dword [ebp - 0x710], 0xf
mov byte [ebp - 0x724], bl
mov dword [ebp - 0x6fc], ebx
mov dword [ebp - 0x6f8], 0xf
mov byte [ebp - 0x70c], bl
mov dword [ebp - 0x3a00], edx
mov dword [ebp - 0x6e4], ebx
mov dword [ebp - 0x6e0], 0xf
mov byte [ebp - 0x6f4], bl
mov dword [ebp - 0x6cc], ebx
mov dword [ebp - 0x6c8], 0xf
mov byte [ebp - 0x6dc], bl
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0x7fc]
push eax
movzx eax, byte [0x100a95dd]
push eax
lea eax, [ebp - 0x1c9c]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0x7e4]
push eax
movzx eax, byte [0x100a975a]
push eax
movzx eax, byte [0x100a9afb]
push eax
lea eax, [ebp - 0x7cc]
push eax
lea eax, [ebp - 0x1c84]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x7b4]
push eax
mov eax, dword [ebp - 0x3a0c]
movzx eax, byte [eax]
push eax
movzx eax, byte [esi + 3]
push eax
lea eax, [ebp - 0xdc]
push eax
movsx eax, byte [0x100a9961]
push eax
call fcn.10041615
push eax
lea eax, [ebp - 0x784]
push eax
lea eax, [ebp - 0x1c6c]
push eax
call fcn.10001cd5
add esp, 0x10
push eax
lea eax, [ebp - 0x76c]
push eax
movzx eax, byte [edi + 6]
push eax
lea eax, [ebp - 0x1c54]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0x754]
push eax
mov eax, dword [ebp - 0x3a18]
movzx eax, byte [eax + 4]
push eax
lea eax, [ebp - 0x1c3c]
push eax
call fcn.10001d31
add esp, 0xc
push eax
movzx eax, byte [0x100a9bfa]
push eax
lea eax, [ebp - 0x73c]
push eax
lea eax, [ebp - 0x1c24]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x724]
push eax
movzx eax, byte [0x100a9b04]
push eax
lea eax, [ebp - 0x1c0c]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0x70c]
push eax
mov eax, dword [ebp - 0x3a00]
movzx eax, byte [eax + 5]
push eax
mov eax, dword [ebp - 0x3a04]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0x6f4]
push eax
lea eax, [ebp - 0x6dc]
push eax
mov eax, dword [ebp - 0x3a08]
movsx eax, byte [eax + 2]
push eax
call fcn.10041615
add esp, 4
push eax
lea eax, [ebp - 0x1bf4]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0x1bdc]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1bc4]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1bac]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1b94]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1b7c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1b64]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1b4c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1b34]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1b1c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1b04]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1aec]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1ad4]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1abc]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1aa4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1a8c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x1a74]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1a5c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x1a44]
push eax
call fcn.10001cf3
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x1000f2f1
mov eax, dword [eax]
push eax
push dword [0x100ac9c0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
mov ecx, 0xffffffc0
or eax, 0xffffffff
mov dword [ebp - 0x39f0], eax
mov eax, 0x3f
mov dword [ebp - 0x39e8], eax
jmp 0x1000f322
xor edx, edx
mov ecx, 0x1fffffc0
lea eax, [ebp - 0x3a20]
mov dword [ebp - 0x39c8], ecx
push eax
mov eax, dword [ebp - 0x3a10]
push 0x40
push dword [eax + 0x50]
push dword [0x100ac9ac]
call edx
mov edi, eax
mov eax, dword [ebp - 0x39e8]
test al, 0x20
je 0x1000f368
and eax, 0xffffffdf
lea ecx, [ebp - 0x1a44]
mov dword [ebp - 0x39e8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39e8]
test al, 0x10
je 0x1000f386
and eax, 0xffffffef
lea ecx, [ebp - 0x1a5c]
mov dword [ebp - 0x39e8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39e8]
test al, 8
je 0x1000f3a4
and eax, 0xfffffff7
lea ecx, [ebp - 0x1a74]
mov dword [ebp - 0x39e8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39e8]
test al, 4
je 0x1000f3c2
and eax, 0xfffffffb
lea ecx, [ebp - 0x1a8c]
mov dword [ebp - 0x39e8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39e8]
test al, 2
je 0x1000f3e0
and eax, 0xfffffffd
lea ecx, [ebp - 0x1aa4]
mov dword [ebp - 0x39e8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39e8]
test al, 1
je 0x1000f3f8
and eax, 0xfffffffe
lea ecx, [ebp - 0x1abc]
mov dword [ebp - 0x39e8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, eax
jns 0x1000f41e
and eax, 0x7fffffff
lea ecx, [ebp - 0x1ad4]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x40000000
je 0x1000f441
and eax, 0xbfffffff
lea ecx, [ebp - 0x1aec]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x20000000
je 0x1000f464
and eax, 0xdfffffff
lea ecx, [ebp - 0x1b04]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x10000000
je 0x1000f487
and eax, 0xefffffff
lea ecx, [ebp - 0x1b1c]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x8000000
je 0x1000f4aa
and eax, 0xf7ffffff
lea ecx, [ebp - 0x1b34]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x4000000
je 0x1000f4cd
and eax, 0xfbffffff
lea ecx, [ebp - 0x1b4c]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x2000000
je 0x1000f4f0
and eax, 0xfdffffff
lea ecx, [ebp - 0x1b64]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x1000000
je 0x1000f513
and eax, 0xfeffffff
lea ecx, [ebp - 0x1b7c]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x800000
je 0x1000f536
and eax, 0xff7fffff
lea ecx, [ebp - 0x1b94]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x400000
je 0x1000f559
and eax, 0xffbfffff
lea ecx, [ebp - 0x1bac]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x200000
je 0x1000f57c
and eax, 0xffdfffff
lea ecx, [ebp - 0x1bc4]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x100000
je 0x1000f59f
and eax, 0xffefffff
lea ecx, [ebp - 0x1bdc]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x80000
je 0x1000f5c2
and eax, 0xfff7ffff
lea ecx, [ebp - 0x1bf4]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x40000
je 0x1000f5e5
and eax, 0xfffbffff
lea ecx, [ebp - 0x6dc]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x20000
je 0x1000f608
and eax, 0xfffdffff
lea ecx, [ebp - 0x6f4]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x10000
je 0x1000f62b
and eax, 0xfffeffff
lea ecx, [ebp - 0x70c]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x8000
je 0x1000f64e
and eax, 0xffff7fff
lea ecx, [ebp - 0x1c0c]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x4000
je 0x1000f671
and eax, 0xffffbfff
lea ecx, [ebp - 0x724]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x2000
je 0x1000f694
and eax, 0xffffdfff
lea ecx, [ebp - 0x1c24]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x1000
je 0x1000f6b7
and eax, 0xffffefff
lea ecx, [ebp - 0x73c]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x800
je 0x1000f6da
and eax, 0xfffff7ff
lea ecx, [ebp - 0x1c3c]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x400
je 0x1000f6fd
and eax, 0xfffffbff
lea ecx, [ebp - 0x754]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x200
je 0x1000f720
and eax, 0xfffffdff
lea ecx, [ebp - 0x1c54]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test eax, 0x100
je 0x1000f743
and eax, 0xfffffeff
lea ecx, [ebp - 0x76c]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test al, al
jns 0x1000f763
and eax, 0xffffff7f
lea ecx, [ebp - 0x1c6c]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test al, 0x40
je 0x1000f781
and eax, 0xffffffbf
lea ecx, [ebp - 0x784]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test al, 0x20
je 0x1000f79f
and eax, 0xffffffdf
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test al, 0x10
je 0x1000f7bd
and eax, 0xffffffef
lea ecx, [ebp - 0x7b4]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test al, 8
je 0x1000f7db
and eax, 0xfffffff7
lea ecx, [ebp - 0x1c84]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test al, 4
je 0x1000f7f9
and eax, 0xfffffffb
lea ecx, [ebp - 0x7cc]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test al, 2
je 0x1000f817
and eax, 0xfffffffd
lea ecx, [ebp - 0x7e4]
mov dword [ebp - 0x39f0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f0]
test al, 1
je 0x1000f826
lea ecx, [ebp - 0x1c9c]
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, eax
jns 0x1000f84c
and eax, 0x7fffffff
lea ecx, [ebp - 0x7fc]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x40000000
je 0x1000f86f
and eax, 0xbfffffff
lea ecx, [ebp - 0x1cb4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x20000000
je 0x1000f892
and eax, 0xdfffffff
lea ecx, [ebp - 0x814]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x10000000
je 0x1000f8b5
and eax, 0xefffffff
lea ecx, [ebp - 0x1ccc]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x8000000
je 0x1000f8d8
and eax, 0xf7ffffff
lea ecx, [ebp - 0x1ce4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x4000000
je 0x1000f8fb
and eax, 0xfbffffff
lea ecx, [ebp - 0x1cfc]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x2000000
je 0x1000f91e
and eax, 0xfdffffff
lea ecx, [ebp - 0x1d14]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x1000000
je 0x1000f941
and eax, 0xfeffffff
lea ecx, [ebp - 0x1d2c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x800000
je 0x1000f964
and eax, 0xff7fffff
lea ecx, [ebp - 0x1d44]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x400000
je 0x1000f987
and eax, 0xffbfffff
lea ecx, [ebp - 0x1d5c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x200000
je 0x1000f9aa
and eax, 0xffdfffff
lea ecx, [ebp - 0x1d74]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x100000
je 0x1000f9cd
and eax, 0xffefffff
lea ecx, [ebp - 0x1d8c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x80000
je 0x1000f9f0
and eax, 0xfff7ffff
lea ecx, [ebp - 0x1da4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x40000
je 0x1000fa13
and eax, 0xfffbffff
lea ecx, [ebp - 0x1dbc]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x20000
je 0x1000fa36
and eax, 0xfffdffff
lea ecx, [ebp - 0x1dd4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x10000
je 0x1000fa59
and eax, 0xfffeffff
lea ecx, [ebp - 0x82c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x8000
je 0x1000fa7c
and eax, 0xffff7fff
lea ecx, [ebp - 0x1dec]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x4000
je 0x1000fa9f
and eax, 0xffffbfff
lea ecx, [ebp - 0x844]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x2000
je 0x1000fac2
and eax, 0xffffdfff
lea ecx, [ebp - 0x85c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x1000
je 0x1000fae5
and eax, 0xffffefff
lea ecx, [ebp - 0x874]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x800
je 0x1000fb08
and eax, 0xfffff7ff
lea ecx, [ebp - 0x88c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x400
je 0x1000fb2b
and eax, 0xfffffbff
lea ecx, [ebp - 0x1e04]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x200
je 0x1000fb4e
and eax, 0xfffffdff
lea ecx, [ebp - 0x8a4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test eax, 0x100
je 0x1000fb71
and eax, 0xfffffeff
lea ecx, [ebp - 0x8bc]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, al
jns 0x1000fb91
and eax, 0xffffff7f
lea ecx, [ebp - 0x1e1c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 0x40
je 0x1000fbaf
and eax, 0xffffffbf
lea ecx, [ebp - 0x8d4]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 0x20
je 0x1000fbcd
and eax, 0xffffffdf
lea ecx, [ebp - 0x1e34]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 0x10
je 0x1000fbeb
and eax, 0xffffffef
lea ecx, [ebp - 0x1e4c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 8
je 0x1000fc09
and eax, 0xfffffff7
lea ecx, [ebp - 0x1e64]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 4
je 0x1000fc27
and eax, 0xfffffffb
lea ecx, [ebp - 0x1e7c]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 2
je 0x1000fc45
and eax, 0xfffffffd
lea ecx, [ebp - 0x1e94]
mov dword [ebp - 0x39c8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39c8]
test al, 1
je 0x1000fc54
lea ecx, [ebp - 0x1eac]
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, eax
jns 0x1000fc7a
and eax, 0x7fffffff
lea ecx, [ebp - 0x1ec4]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x40000000
je 0x1000fc9d
and eax, 0xbfffffff
lea ecx, [ebp - 0x1edc]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x20000000
je 0x1000fcc0
and eax, 0xdfffffff
lea ecx, [ebp - 0x1ef4]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x10000000
je 0x1000fce3
and eax, 0xefffffff
lea ecx, [ebp - 0x1f0c]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x8000000
je 0x1000fd06
and eax, 0xf7ffffff
lea ecx, [ebp - 0x1f24]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x4000000
je 0x1000fd29
and eax, 0xfbffffff
lea ecx, [ebp - 0x1f3c]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x2000000
je 0x1000fd4c
and eax, 0xfdffffff
lea ecx, [ebp - 0x1f54]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x1000000
je 0x1000fd6f
and eax, 0xfeffffff
lea ecx, [ebp - 0x1f6c]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x800000
je 0x1000fd92
and eax, 0xff7fffff
lea ecx, [ebp - 0x1f84]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x400000
je 0x1000fdb5
and eax, 0xffbfffff
lea ecx, [ebp - 0x1f9c]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x200000
je 0x1000fdd8
and eax, 0xffdfffff
lea ecx, [ebp - 0x1fb4]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x100000
je 0x1000fdfb
and eax, 0xffefffff
lea ecx, [ebp - 0x1fcc]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x80000
je 0x1000fe1e
and eax, 0xfff7ffff
lea ecx, [ebp - 0x1fe4]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x40000
je 0x1000fe41
and eax, 0xfffbffff
lea ecx, [ebp - 0x8ec]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x20000
je 0x1000fe64
and eax, 0xfffdffff
lea ecx, [ebp - 0x904]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x10000
je 0x1000fe87
and eax, 0xfffeffff
lea ecx, [ebp - 0x91c]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x8000
je 0x1000feaa
and eax, 0xffff7fff
lea ecx, [ebp - 0x1ffc]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x4000
je 0x1000fecd
and eax, 0xffffbfff
lea ecx, [ebp - 0x934]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x2000
je 0x1000fef0
and eax, 0xffffdfff
lea ecx, [ebp - 0x2014]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x1000
je 0x1000ff13
and eax, 0xffffefff
lea ecx, [ebp - 0x94c]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x800
je 0x1000ff36
and eax, 0xfffff7ff
lea ecx, [ebp - 0x202c]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x400
je 0x1000ff59
and eax, 0xfffffbff
lea ecx, [ebp - 0x964]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x200
je 0x1000ff7c
and eax, 0xfffffdff
lea ecx, [ebp - 0x2044]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test eax, 0x100
je 0x1000ff9f
and eax, 0xfffffeff
lea ecx, [ebp - 0x97c]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test al, al
jns 0x1000ffbf
and eax, 0xffffff7f
lea ecx, [ebp - 0x205c]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test al, 0x40
je 0x1000ffdd
and eax, 0xffffffbf
lea ecx, [ebp - 0x994]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test al, 0x20
je 0x1000fffb
and eax, 0xffffffdf
lea ecx, [ebp - 0x9ac]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test al, 0x10
je 0x10010019
and eax, 0xffffffef
lea ecx, [ebp - 0x9c4]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test al, 8
je 0x10010037
and eax, 0xfffffff7
lea ecx, [ebp - 0x2074]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test al, 4
je 0x10010055
and eax, 0xfffffffb
lea ecx, [ebp - 0x9dc]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test al, 2
je 0x10010073
and eax, 0xfffffffd
lea ecx, [ebp - 0x9f4]
mov dword [ebp - 0x39f4], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f4]
test al, 1
je 0x10010082
lea ecx, [ebp - 0x208c]
call fcn.10001781
mov esi, dword [ebp - 0x39cc]
test esi, esi
jns 0x1001009d
lea ecx, [ebp - 0xa0c]
and esi, 0x7fffffff
call fcn.10001781
test esi, 0x40000000
je 0x100100b6
lea ecx, [ebp - 0x20a4]
and esi, 0xbfffffff
call fcn.10001781
test esi, 0x20000000
je 0x100100c9
lea ecx, [ebp - 0xa24]
call fcn.10001781
lea ecx, [ebp - 0x20bc]
call fcn.10001781
lea ecx, [ebp - 0x20d4]
call fcn.10001781
lea ecx, [ebp - 0x20ec]
call fcn.10001781
lea ecx, [ebp - 0x2104]
call fcn.10001781
lea ecx, [ebp - 0x211c]
call fcn.10001781
lea ecx, [ebp - 0x2134]
call fcn.10001781
lea ecx, [ebp - 0x214c]
call fcn.10001781
lea ecx, [ebp - 0x2164]
call fcn.10001781
lea ecx, [ebp - 0x217c]
call fcn.10001781
lea ecx, [ebp - 0x2194]
call fcn.10001781
lea ecx, [ebp - 0x21ac]
call fcn.10001781
lea ecx, [ebp - 0x21c4]
call fcn.10001781
lea ecx, [ebp - 0xa3c]
call fcn.10001781
lea ecx, [ebp - 0x21dc]
call fcn.10001781
lea ecx, [ebp - 0xa54]
call fcn.10001781
lea ecx, [ebp - 0xa6c]
call fcn.10001781
lea ecx, [ebp - 0xa84]
call fcn.10001781
lea ecx, [ebp - 0xa9c]
call fcn.10001781
lea ecx, [ebp - 0x21f4]
call fcn.10001781
lea ecx, [ebp - 0xab4]
call fcn.10001781
lea ecx, [ebp - 0xacc]
call fcn.10001781
lea ecx, [ebp - 0x220c]
call fcn.10001781
lea ecx, [ebp - 0xae4]
call fcn.10001781
test edi, edi
je 0x10015733
mov esi, dword [ebp - 0x3a10]
push dword [esi + 0x50]
push 0
push dword [0x100ac9ac]
call fcn.10038380
push dword [esi + 0x54]
push dword [0x100ac9b0]
push dword [0x100ac9ac]
call fcn.10037880
mov ecx, esi
xor eax, eax
add esp, 0x18
xor edi, edi
movzx esi, word [ecx + 0x14]
add esi, 0x2c
cmp ax, word [ecx + 6]
jae 0x10010248
add esi, ecx
mov ebx, ecx
push dword [esi - 4]
mov eax, dword [esi]
add eax, dword [0x100ac9b0]
push eax
mov eax, dword [esi - 8]
add eax, dword [0x100ac9ac]
push eax
call fcn.10037880
movzx eax, word [ebx + 6]
lea esi, [esi + 0x28]
inc edi
add esp, 0xc
cmp edi, eax
jb 0x10010212
mov ebx, dword [ebp - 0x3a14]
mov ecx, dword [ebp - 0x3a10]
mov esi, dword [0x100ac9ac]
mov eax, esi
sub eax, dword [ecx + 0x34]
mov dword [ebp - 0x3a0c], eax
je 0x10010310
cmp dword [ecx + 0xa4], 0
je 0x10010310
mov eax, dword [ecx + 0xa0]
mov ecx, dword [eax + esi]
add eax, esi
mov dword [ebp - 0x39cc], eax
test ecx, ecx
je 0x1001030a
mov edx, dword [eax + 4]
lea ebx, [ecx + esi]
lea ecx, [eax + 8]
mov dword [ebp - 0x3a00], edx
mov dword [ebp - 0x3a18], ecx
lea edi, [edx - 8]
mov edx, 0
shr edi, 1
je 0x100102f0
nop word [eax + eax]
movzx ecx, word [ecx + edx*2]
mov ax, cx
and ecx, 0xfff
shr ax, 0xc
cmp al, 3
je 0x100102c9
cmp al, 0xa
jne 0x100102d4
mov eax, ecx
mov ecx, dword [ebp - 0x3a0c]
add dword [eax + ebx], ecx
mov ecx, dword [ebp - 0x3a18]
inc edx
cmp edx, edi
jb 0x100102b0
mov eax, dword [ebp - 0x39cc]
mov esi, dword [0x100ac9ac]
mov ecx, dword [eax + 4]
jmp 0x100102f6
mov ecx, dword [ebp - 0x3a00]
add eax, ecx
mov dword [ebp - 0x39cc], eax
mov ecx, dword [eax]
test ecx, ecx
jne 0x10010285
mov ebx, dword [ebp - 0x3a14]
mov ecx, dword [ebp - 0x3a10]
mov eax, dword [ecx + 0x80]
add eax, esi
mov dword [ebp - 0x39f4], eax
mov eax, dword [eax + 0xc]
test eax, eax
je 0x100156b0
nop dword [eax]
add eax, esi
mov dword [ebp - 0xe34], 0
mov dword [ebp - 0x39c8], eax
lea ecx, [ebp - 0xe44]
movzx eax, byte [0x100a9c83]
mov byte [ebp - 0x3a0c], al
push dword [ebp - 0x3a0c]
mov dword [ebp - 0xe30], 0xf
push 1
push 0
mov byte [ebp - 0xe44], 0
call fcn.10002360
push eax
lea ecx, [ebp - 0xc4]
call fcn.10001786
cmp dword [0x100a9cd4], 0x10
lea ecx, [ebp - 0xe2c]
mov eax, 0x100a9cc0
mov dword [ebp - 0x54], 0
cmovae eax, dword [0x100a9cc0]
cmp dword [0x100a9904], 0x10
mov dword [ebp - 0x3a04], eax
mov eax, 0x100a98f0
cmovae eax, dword [0x100a98f0]
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
mov dword [ebp - 0xe1c], 0
mov dword [ebp - 0xe18], 0xf
mov byte [ebp - 0xe2c], 0
movzx eax, byte [eax + 6]
mov byte [ebp - 0x3a18], al
push dword [ebp - 0x3a18]
push 1
push 0
call fcn.10002360
push eax
lea ecx, [ebp - 0xac]
call fcn.10001786
cmp dword [0x100a9a74], 0x10
mov eax, 0x100a9a60
mov dword [ebp - 0x3c], 0
cmovae eax, dword [0x100a9a60]
mov dword [ebp - 0x3a00], eax
movzx eax, byte [0x100a975b]
push eax
lea eax, [ebp - 0xe14]
mov dword [ebp - 0x38], 0xf
push eax
lea eax, [ebp - 0x2854]
mov byte [ebp - 0x4c], 0
push eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0xe04], 0
mov dword [ebp - 0xe00], 0xf
mov byte [ebp - 0xe14], 0
mov dword [ebp - 0xdec], 0
mov dword [ebp - 0xde8], 0xf
mov byte [ebp - 0xdfc], 0
call fcn.10001cd5
movsx ecx, byte [0x100a98b6]
mov esi, eax
push ecx
call fcn.10041615
push eax
lea eax, [ebp - 0xdfc]
push eax
lea eax, [ebp - 0x283c]
push eax
call fcn.10001cd5
mov edx, dword [esi + 0x10]
add esp, 0x1c
mov ecx, dword [eax + 0x14]
mov edi, dword [eax + 0x10]
sub ecx, edi
cmp edx, ecx
jbe 0x100104f8
mov ecx, dword [esi + 0x14]
sub ecx, edx
cmp ecx, edi
jb 0x100104f8
cmp dword [eax + 0x14], 0x10
jb 0x100104eb
mov eax, dword [eax]
push edi
push eax
push 0
mov ecx, esi
call fcn.100025ff
jmp 0x10010509
cmp dword [esi + 0x14], 0x10
jb 0x10010500
mov esi, dword [esi]
push edx
push esi
mov ecx, eax
call fcn.10001a84
push eax
lea ecx, [ebp - 0x112c]
call fcn.10001786
mov eax, dword [ebp - 0x3a00]
movzx eax, byte [eax + 5]
push eax
lea eax, [ebp - 0x112c]
push eax
lea eax, [ebp - 0x2824]
push eax
call fcn.10001cd5
mov esi, dword [ebp - 0xc]
mov edx, eax
add esp, 0xc
mov ecx, dword [edx + 0x14]
mov edi, dword [edx + 0x10]
sub ecx, edi
cmp esi, ecx
mov ecx, dword [ebp - 8]
jbe 0x10010568
mov eax, ecx
sub eax, esi
cmp eax, edi
jb 0x10010568
cmp dword [edx + 0x14], 0x10
jb 0x1001055a
mov edx, dword [edx]
push edi
push edx
push 0
lea ecx, [ebp - 0x1c]
call fcn.100025ff
jmp 0x1001057b
cmp ecx, 0x10
lea eax, [ebp - 0x1c]
push esi
cmovae eax, dword [ebp - 0x1c]
mov ecx, edx
push eax
call fcn.10001a84
push eax
lea ecx, [ebp - 0x94]
call fcn.10001786
mov edi, dword [ebp - 0x80]
mov eax, edi
mov ecx, dword [ebp - 0x84]
sub eax, ecx
mov edx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
cmp edx, eax
jbe 0x100105c4
mov eax, esi
sub eax, edx
cmp eax, ecx
jb 0x100105c4
cmp edi, 0x10
lea eax, [ebp - 0x94]
push ecx
cmovae eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x34]
push eax
push 0
call fcn.100025ff
jmp 0x100105db
cmp esi, 0x10
lea eax, [ebp - 0x34]
push edx
cmovae eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x94]
push eax
call fcn.10001a84
push eax
lea ecx, [ebp - 0x10fc]
call fcn.10001786
movzx eax, byte [0x100a990e]
push eax
lea eax, [ebp - 0x10fc]
push eax
lea eax, [ebp - 0x280c]
push eax
call fcn.10001cd5
mov esi, dword [ebp - 0x3c]
mov edx, eax
add esp, 0xc
mov ecx, dword [edx + 0x14]
mov edi, dword [edx + 0x10]
sub ecx, edi
cmp esi, ecx
mov ecx, dword [ebp - 0x38]
jbe 0x10010637
mov eax, ecx
sub eax, esi
cmp eax, edi
jb 0x10010637
cmp dword [edx + 0x14], 0x10
jb 0x10010629
mov edx, dword [edx]
push edi
push edx
push 0
lea ecx, [ebp - 0x4c]
call fcn.100025ff
jmp 0x1001064a
cmp ecx, 0x10
lea eax, [ebp - 0x4c]
push esi
cmovae eax, dword [ebp - 0x4c]
mov ecx, edx
push eax
call fcn.10001a84
push eax
lea ecx, [ebp - 0x1114]
call fcn.10001786
movzx eax, byte [0x100a975b]
push eax
lea eax, [ebp - 0x1114]
push eax
lea eax, [ebp - 0x27f4]
push eax
call fcn.10001cd5
mov esi, dword [ebp - 0x9c]
mov edx, eax
add esp, 0xc
mov ecx, dword [edx + 0x14]
mov edi, dword [edx + 0x10]
sub ecx, edi
cmp esi, ecx
mov ecx, dword [ebp - 0x98]
jbe 0x100106af
mov eax, ecx
sub eax, esi
cmp eax, edi
jb 0x100106af
cmp dword [edx + 0x14], 0x10
jb 0x1001069e
mov edx, dword [edx]
push edi
push edx
push 0
lea ecx, [ebp - 0xac]
call fcn.100025ff
jmp 0x100106c8
cmp ecx, 0x10
lea eax, [ebp - 0xac]
push esi
cmovae eax, dword [ebp - 0xac]
mov ecx, edx
push eax
call fcn.10001a84
push eax
lea ecx, [ebp - 0x7c]
call fcn.10001786
mov edi, dword [ebp - 0x68]
mov eax, edi
mov ecx, dword [ebp - 0x6c]
sub eax, ecx
mov edx, dword [ebp - 0x54]
mov esi, dword [ebp - 0x50]
cmp edx, eax
jbe 0x10010705
mov eax, esi
sub eax, edx
cmp eax, ecx
jb 0x10010705
cmp edi, 0x10
lea eax, [ebp - 0x7c]
push ecx
cmovae eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x64]
push eax
push 0
call fcn.100025ff
jmp 0x10010719
cmp esi, 0x10
lea eax, [ebp - 0x64]
push edx
cmovae eax, dword [ebp - 0x64]
lea ecx, [ebp - 0x7c]
push eax
call fcn.10001a84
push eax
lea ecx, [ebp - 0x10e4]
call fcn.10001786
mov eax, dword [ebp - 0x3a04]
movzx eax, byte [eax + 1]
push eax
lea eax, [ebp - 0x10e4]
push eax
lea eax, [ebp - 0x27dc]
push eax
call fcn.10001cd5
mov esi, dword [ebp - 0xb4]
mov edx, eax
add esp, 0xc
mov ecx, dword [edx + 0x14]
mov edi, dword [edx + 0x10]
sub ecx, edi
cmp esi, ecx
mov ecx, dword [ebp - 0xb0]
jbe 0x10010781
mov eax, ecx
sub eax, esi
cmp eax, edi
jb 0x10010781
cmp dword [edx + 0x14], 0x10
jb 0x10010770
mov edx, dword [edx]
push edi
push edx
push 0
lea ecx, [ebp - 0xc4]
call fcn.100025ff
jmp 0x1001079a
cmp ecx, 0x10
lea eax, [ebp - 0xc4]
push esi
cmovae eax, dword [ebp - 0xc4]
mov ecx, edx
push eax
call fcn.10001a84
push eax
lea ecx, [ebp - 0x10cc]
call fcn.10001786
lea ecx, [ebp - 0x10cc]
call fcn.10001745
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x100ac9c0], eax
test eax, eax
je 0x10010c3d
mov eax, dword [ebp - 0x39e8]
mov ecx, 0x100a957c
or dword [ebp - 0x39dc], 1
or eax, 0x40
push 5
mov dword [ebp - 0x39e8], eax
mov dword [ebp - 0xdd4], 0
mov dword [ebp - 0xdd0], 0xf
mov byte [ebp - 0xde4], 0
mov dword [ebp - 0xdbc], 0
mov dword [ebp - 0xdb8], 0xf
mov byte [ebp - 0xdcc], 0
mov dword [ebp - 0xda4], 0
mov dword [ebp - 0xda0], 0xf
mov byte [ebp - 0xdb4], 0
mov dword [ebp - 0xd8c], 0
mov dword [ebp - 0xd88], 0xf
mov byte [ebp - 0xd9c], 0
mov dword [ebp - 0xd74], 0
mov dword [ebp - 0xd70], 0xf
mov byte [ebp - 0xd84], 0
mov dword [ebp - 0xd5c], 0
mov dword [ebp - 0xd58], 0xf
mov byte [ebp - 0xd6c], 0
mov dword [ebp - 0xd44], 0
mov dword [ebp - 0xd40], 0xf
mov byte [ebp - 0xd54], 0
mov dword [ebp - 0xd2c], 0
mov dword [ebp - 0xd28], 0xf
mov byte [ebp - 0xd3c], 0
mov dword [ebp - 0xd14], 0
mov dword [ebp - 0xd10], 0xf
mov byte [ebp - 0xd24], 0
mov dword [ebp - 0xcfc], 0
mov dword [ebp - 0xcf8], 0xf
mov byte [ebp - 0xd0c], 0
mov dword [ebp - 0xce4], 0
mov dword [ebp - 0xce0], 0xf
mov byte [ebp - 0xcf4], 0
mov dword [ebp - 0xccc], 0
mov dword [ebp - 0xcc8], 0xf
mov byte [ebp - 0xcdc], 0
call fcn.10001750
push 6
mov ecx, 0x100a9c50
mov esi, eax
call fcn.10001750
push 3
mov ecx, 0x100a9a60
mov edi, eax
call fcn.10001750
push 5
mov ecx, 0x100a957c
mov dword [ebp - 0x3a00], eax
call fcn.10001750
push 3
mov ecx, 0x100a9a60
mov dword [ebp - 0x3a04], eax
call fcn.10001750
push 0
mov ecx, 0x100a9898
mov dword [ebp - 0x3a08], eax
call fcn.10001750
push 6
mov ecx, 0x100a98f0
mov dword [ebp - 0x3a1c], eax
call fcn.10001750
push 4
mov ecx, 0x100a957c
mov dword [ebp - 0x3a14], eax
call fcn.10001750
push 0
mov ecx, 0x100a9948
mov dword [ebp - 0x39cc], eax
call fcn.10001750
push 6
mov ecx, 0x100a98f0
mov dword [ebp - 0x39f0], eax
call fcn.10001750
mov dword [ebp - 0x39ec], eax
lea eax, [ebp - 0xde4]
movsx ecx, byte [esi]
push eax
push ecx
call fcn.10041615
add esp, 4
push eax
lea eax, [ebp - 0xdcc]
push eax
movzx eax, byte [edi]
push eax
lea eax, [ebp - 0x27c4]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0xdb4]
push eax
mov eax, dword [ebp - 0x3a00]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0xd9c]
push eax
mov eax, dword [ebp - 0x3a04]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0x27ac]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0xd84]
push eax
mov eax, dword [ebp - 0x3a08]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0x2794]
push eax
call fcn.10001d31
add esp, 0xc
push eax
movzx eax, byte [0x100a959e]
push eax
lea eax, [ebp - 0xd6c]
push eax
mov eax, dword [ebp - 0x3a1c]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0xd54]
push eax
mov eax, dword [ebp - 0x3a14]
movsx eax, byte [eax]
push eax
call fcn.10041615
add esp, 4
push eax
lea eax, [ebp - 0xd3c]
push eax
lea eax, [ebp - 0xd24]
push eax
movzx eax, byte [0x100a965c]
push eax
mov eax, dword [ebp - 0x39cc]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0xd0c]
push eax
lea eax, [ebp - 0x277c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0xcf4]
push eax
mov eax, dword [ebp - 0x39f0]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0x2764]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0xcdc]
push eax
mov eax, dword [ebp - 0x39ec]
movsx eax, byte [eax]
push eax
call fcn.10041615
add esp, 4
push eax
lea eax, [ebp - 0x274c]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0x2734]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x271c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x2704]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x26ec]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x26d4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x26bc]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x26a4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x268c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x2674]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x265c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x2644]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x262c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x2614]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x25fc]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x25e4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x25cc]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x25b4]
push eax
call fcn.10001cf3
add esp, 0xc
mov ecx, eax
call fcn.10001745
push eax
push dword [0x100ac9c0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
or dword [ebp - 0x39e8], 0xffffff80
mov ecx, eax
or dword [ebp - 0x39dc], 0x1fe
jmp 0x1001134e
mov eax, dword [ebp - 0x39dc]
mov ecx, 0x100a9cc0
or eax, 0x200
mov dword [ebp - 0xcb4], 0
or eax, 0xfffffc00
mov dword [ebp - 0xcb0], 0xf
push 1
mov dword [ebp - 0x39dc], eax
mov byte [ebp - 0xcc4], 0
mov dword [ebp - 0xc9c], 0
mov dword [ebp - 0xc98], 0xf
mov byte [ebp - 0xcac], 0
mov dword [ebp - 0xc84], 0
mov dword [ebp - 0xc80], 0xf
mov byte [ebp - 0xc94], 0
mov dword [ebp - 0xc6c], 0
mov dword [ebp - 0xc68], 0xf
mov byte [ebp - 0xc7c], 0
mov dword [ebp - 0xc54], 0
mov dword [ebp - 0xc50], 0xf
mov byte [ebp - 0xc64], 0
mov dword [ebp - 0xc3c], 0
mov dword [ebp - 0xc38], 0xf
mov byte [ebp - 0xc4c], 0
mov dword [ebp - 0xc24], 0
mov dword [ebp - 0xc20], 0xf
mov byte [ebp - 0xc34], 0
mov dword [ebp - 0xc0c], 0
mov dword [ebp - 0xc08], 0xf
mov byte [ebp - 0xc1c], 0
call fcn.10001750
push 6
mov ecx, 0x100a98f0
mov esi, eax
call fcn.10001750
push 5
mov ecx, 0x100a9a60
mov edi, eax
call fcn.10001750
movzx ecx, byte [0x100a9c83]
mov dword [ebp - 0x3a00], eax
lea eax, [ebp - 0xcc4]
push eax
push ecx
lea eax, [ebp - 0x259c]
push eax
call fcn.10001d31
add esp, 0xc
push eax
movzx eax, byte [esi]
push eax
lea eax, [ebp - 0xcac]
push eax
lea eax, [ebp - 0xc94]
push eax
movzx eax, byte [edi]
push eax
lea eax, [ebp - 0x2584]
push eax
call fcn.10001d31
add esp, 0xc
push eax
movzx eax, byte [0x100a975b]
push eax
lea eax, [ebp - 0xc7c]
push eax
movzx eax, byte [0x100a990e]
push eax
lea eax, [ebp - 0xc64]
push eax
lea eax, [ebp - 0xc4c]
push eax
mov eax, dword [ebp - 0x3a00]
movzx eax, byte [eax]
push eax
movzx eax, byte [0x100a975b]
push eax
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0x256c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
movsx eax, byte [0x100a98b6]
push eax
call fcn.10041615
push eax
lea eax, [ebp - 0xc1c]
push eax
lea eax, [ebp - 0x2554]
push eax
call fcn.10001cd5
add esp, 0x10
push eax
lea eax, [ebp - 0x253c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x2524]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x250c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x24f4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x24dc]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x24c4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x24ac]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x2494]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x247c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x2464]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x244c]
push eax
call fcn.10001cf3
add esp, 0xc
mov ecx, eax
call fcn.10001745
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x100ac9c0], eax
test eax, eax
je 0x10011340
or dword [ebp - 0x39d0], 1
mov ecx, 0x100a957c
push 5
mov dword [ebp - 0xbf4], 0
mov dword [ebp - 0xbf0], 0xf
mov byte [ebp - 0xc04], 0
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbd8], 0xf
mov byte [ebp - 0xbec], 0
mov dword [ebp - 0xbc4], 0
mov dword [ebp - 0xbc0], 0xf
mov byte [ebp - 0xbd4], 0
mov dword [ebp - 0xbac], 0
mov dword [ebp - 0xba8], 0xf
mov byte [ebp - 0xbbc], 0
mov dword [ebp - 0xb94], 0
mov dword [ebp - 0xb90], 0xf
mov byte [ebp - 0xba4], 0
mov dword [ebp - 0xb7c], 0
mov dword [ebp - 0xb78], 0xf
mov byte [ebp - 0xb8c], 0
mov dword [ebp - 0xb64], 0
mov dword [ebp - 0xb60], 0xf
mov byte [ebp - 0xb74], 0
mov dword [ebp - 0xb4c], 0
mov dword [ebp - 0xb48], 0xf
mov byte [ebp - 0xb5c], 0
mov dword [ebp - 0xb34], 0
mov dword [ebp - 0xb30], 0xf
mov byte [ebp - 0xb44], 0
mov dword [ebp - 0xb1c], 0
mov dword [ebp - 0xb18], 0xf
mov byte [ebp - 0xb2c], 0
mov dword [ebp - 0xb04], 0
mov dword [ebp - 0xb00], 0xf
mov byte [ebp - 0xb14], 0
mov dword [ebp - 0xaec], 0
mov dword [ebp - 0xae8], 0xf
mov byte [ebp - 0xafc], 0
call fcn.10001750
push 6
mov ecx, 0x100a9c50
mov esi, eax
call fcn.10001750
push 3
mov ecx, 0x100a9a60
mov edi, eax
call fcn.10001750
push 5
mov ecx, 0x100a957c
mov dword [ebp - 0x3a00], eax
call fcn.10001750
push 3
mov ecx, 0x100a9a60
mov dword [ebp - 0x3a04], eax
call fcn.10001750
push 0
mov ecx, 0x100a9898
mov dword [ebp - 0x3a08], eax
call fcn.10001750
push 6
mov ecx, 0x100a98f0
mov dword [ebp - 0x3a1c], eax
call fcn.10001750
push 4
mov ecx, 0x100a957c
mov dword [ebp - 0x3a14], eax
call fcn.10001750
push 0
mov ecx, 0x100a9948
mov dword [ebp - 0x39cc], eax
call fcn.10001750
push 6
mov ecx, 0x100a98f0
mov dword [ebp - 0x39f0], eax
call fcn.10001750
movsx ecx, byte [esi]
mov dword [ebp - 0x39ec], eax
lea eax, [ebp - 0xc04]
push eax
push ecx
call fcn.10041615
add esp, 4
push eax
lea eax, [ebp - 0xbec]
push eax
movzx eax, byte [edi]
push eax
lea eax, [ebp - 0x2434]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0xbd4]
push eax
mov eax, dword [ebp - 0x3a00]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0xbbc]
push eax
mov eax, dword [ebp - 0x3a04]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0x241c]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0xba4]
push eax
mov eax, dword [ebp - 0x3a08]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0x2404]
push eax
call fcn.10001d31
add esp, 0xc
push eax
movzx eax, byte [0x100a959e]
push eax
lea eax, [ebp - 0xb8c]
push eax
mov eax, dword [ebp - 0x3a1c]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0xb74]
push eax
mov eax, dword [ebp - 0x3a14]
movsx eax, byte [eax]
push eax
call fcn.10041615
add esp, 4
push eax
lea eax, [ebp - 0xb5c]
push eax
lea eax, [ebp - 0xb44]
push eax
movzx eax, byte [0x100a965c]
push eax
mov eax, dword [ebp - 0x39cc]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0xb2c]
push eax
lea eax, [ebp - 0x23ec]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0xb14]
push eax
mov eax, dword [ebp - 0x39f0]
movzx eax, byte [eax]
push eax
lea eax, [ebp - 0x23d4]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0xafc]
push eax
mov eax, dword [ebp - 0x39ec]
movsx eax, byte [eax]
push eax
call fcn.10041615
add esp, 4
push eax
lea eax, [ebp - 0x23bc]
push eax
call fcn.10001d31
add esp, 0xc
push eax
lea eax, [ebp - 0x23a4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x238c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x2374]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x235c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x2344]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x232c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x2314]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x22fc]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x22e4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x22cc]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x22b4]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x229c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x2284]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x226c]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x2254]
push eax
call fcn.10001cf3
add esp, 0xc
push eax
lea eax, [ebp - 0x223c]
push eax
call fcn.10001cd5
add esp, 0xc
push eax
lea eax, [ebp - 0x2224]
push eax
call fcn.10001cf3
add esp, 0xc
mov ecx, eax
call fcn.10001745
push eax
push dword [0x100ac9c0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, eax
or eax, 0xffffffff
or dword [ebp - 0x39d0], 6
mov dword [ebp - 0x39f8], eax
jmp 0x1001134e
mov eax, dword [ebp - 0x39dc]
xor ecx, ecx
mov dword [ebp - 0x39dc], eax
push dword [ebp - 0x39c8]
call ecx
mov dword [ebp - 0x3a14], eax
mov eax, dword [ebp - 0x39d0]
test al, 4
je 0x10011380
and eax, 0xfffffffb
lea ecx, [ebp - 0x2224]
mov dword [ebp - 0x39d0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39d0]
test al, 2
je 0x1001139e
and eax, 0xfffffffd
lea ecx, [ebp - 0x223c]
mov dword [ebp - 0x39d0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39d0]
test al, 1
je 0x100113b6
and eax, 0xfffffffe
lea ecx, [ebp - 0x2254]
mov dword [ebp - 0x39d0], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f8]
test eax, eax
jns 0x100113dc
and eax, 0x7fffffff
lea ecx, [ebp - 0x226c]
mov dword [ebp - 0x39f8], eax
call fcn.10001781
mov eax, dword [ebp - 0x39f8]
test eax, 0x40000000
je 0x100113ff
xor edi, edi
cmp dword [ecx + 0x7c], edi
je 0x100156e4
mov edx, dword [ecx + 0x78]
add edx, esi
mov eax, dword [edx + 0x18]
test eax, eax
je 0x100156e4
cmp dword [edx + 0x14], edi
je 0x100156e4
test eax, eax
je 0x100156e4
mov eax, dword [edx + 0x24]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp - 0x3a10]
mov edi, dword [eax + esi]
add edi, esi
mov eax, dword [ecx + 0x28]
push 0
push 1
push esi
add eax, esi
call eax
movzx eax, byte [0x100a9578]
mov ecx, 0x100aada8
mov ebx, dword [ebp - 0x3a24]
push 0x100ac9bc
push 0x1000c8d0
push eax
mov byte [0x100ac9b8], 1
mov esi, dword [ebx]
push 0x10002e00
call fcn.1000169a
push eax
mov eax, dword [ebx + 4]
sub eax, esi
push eax
mov eax, dword [0x100ac848]
push esi
push eax
call edi
add esp, 0x20
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10015b84
mov esp, ebp
pop ebp
ret