Function at 0x10006330
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x414
push ebx
push esi
lea ecx, [eax + 0xa80]
push edi
mov edi, eax
mov dword [esp + 0x34], edi
mov dword [esp + 0x6c], ecx
cmp eax, ecx
ja case.0x1000649c.4003
mov esi, dword [esp + 0x6c]
mov ebx, dword [esp + 0x6c]
nop
mov eax, dword [esp + 0x38]
cmp edi, 0x1dab
ja 0x100072ba
je 0x100072aa
cmp edi, 0xec3
ja 0x10006484
je 0x1000646e
lea eax, [edi - 0xde3]
cmp eax, 0xc0
ja case.0x10007432.7884
movzx eax, byte [eax + 0x100075c8]
jmp dword [eax*4 + 0x100075a8]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0x28]
lea edx, [eax + ecx - 5]
mov dword [esp + 0x98], edx
jmp case.0x10007432.7884
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x38]
mov dword [esp + 0x90], ecx
mov dword [esp + 0x14], edx
jmp case.0x10007432.7884
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x28]
mov dword [esp + 0xa4], ecx
jmp case.0x10007432.7884
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x6c]
mov ecx, dword [ebp + 8]
mov dword [esp + 0x80], edx
mov edx, dword [ecx]
mov dword [esp + 0x7c], eax
mov eax, dword [edx + 0x1c]
mov dword [esp + 0x38], eax
jmp case.0x10007432.7884
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x2c]
mov edx, dword [eax + 0x30]
mov dword [esp + 0xb4], ecx
mov dword [esp + 0x50], edx
jmp case.0x10007432.7884
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov edx, dword [ebp + 0xc]
mov ecx, eax
sub ecx, dword [edx]
dec esi
add ecx, esi
lea eax, [eax + esi - 0x101]
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xa0], eax
jmp case.0x10007432.7884
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [edx]
dec eax
mov dword [esp + 0x28], eax
jmp case.0x10007432.7884
mov ecx, dword [eax + 0x3c]
mov edx, dword [eax + 0x4c]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x80], edx
jmp case.0x10007432.7884
lea eax, [edi - 0xee3]
cmp eax, 0xc0
ja case.0x10007432.7884
movzx eax, byte [eax + 0x100076ac]
jmp dword [eax*4 + 0x1000768c]
mov edi, dword [esp + 0x38]
mov ecx, dword [edi + 0x50]
mov dword [esp + 0x7c], ecx
mov ecx, dword [edi + 0x54]
mov eax, 1
shl eax, cl
mov ecx, dword [edi + 0x58]
mov edi, dword [esp + 0x34]
dec eax
mov dword [esp + 0xac], eax
mov eax, 1
shl eax, cl
dec eax
mov dword [esp + 0xa8], eax
jmp case.0x10007432.7884
mov eax, dword [esp + 0xa0]
mov edx, dword [ebp + 8]
mov ecx, dword [edx]
mov edx, dword [esp + 0x14]
sub eax, esi
add eax, 0x101
mov dword [ecx + 0x10], eax
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x38], edx
mov dword [eax + 0x3c], ecx
jmp case.0x10007432.7884
mov eax, dword [esp + 0x20]
sub dword [esp + 0x28], eax
lea edx, [eax*8]
sub dword [esp + 0x10], edx
jmp case.0x10007432.7884
mov eax, dword [esp + 0x10]
shr eax, 3
mov dword [esp + 0x20], eax
jmp case.0x10007432.7884
mov ecx, dword [esp + 0x10]
mov edi, dword [ebp + 8]
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x28]
lea edx, [ecx + 1]
dec eax
and dword [esp + 0x14], eax
mov eax, dword [edi]
mov dword [eax], edx
mov eax, dword [edi]
lea edx, [esi + 1]
mov dword [eax + 0xc], edx
mov eax, dword [esp + 0x98]
sub eax, ecx
mov ecx, dword [edi]
mov edi, dword [esp + 0x34]
add eax, 5
mov dword [ecx + 4], eax
jmp case.0x10007432.7884
mov edx, dword [esp + 0x18]
jmp 0x10006580
mov edi, 0x3303
mov dword [esp + 0x34], edi
cmp edi, 0x34fb
ja 0x10007073
je 0x10007066
cmp edi, 0x33e3
ja 0x1000667c
je 0x1000666d
lea eax, [edi - 0x3303]
cmp eax, 0xa8
ja case.0x1000709d.13620
movzx eax, byte [eax + 0x10007784]
jmp dword [eax*4 + 0x10007770]
mov ecx, edx
shr dword [esp + 0x14], cl
sub dword [esp + 0x10], edx
movzx edx, byte [esp + 0x3c]
mov dword [esp + 0x18], edx
jmp case.0x1000709d.13620
movzx edx, byte [esp + 0x3d]
mov dword [esp + 0x18], edx
jmp case.0x1000709d.13620
test edx, edx
sete al
mov byte [esp + 0x26], al
test al, al
je case.0x1000709d.13620
mov cl, byte [esp + 0x3e]
inc esi
mov byte [esi], cl
jmp case.0x1000709d.13620
cmp dword [esp + 0x10], 0xf
jae 0x1000665d
xor eax, eax
lea edi, [eax + 4]
jmp 0x10006620
cmp eax, 0xea
ja case.0x1000662e.1
movzx ecx, byte [eax + 0x1000783c]
jmp dword [ecx*4 + 0x10007830]
mov ecx, dword [esp + 0x28]
movzx edx, byte [ecx + 1]
inc ecx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x10]
shl edx, cl
add dword [esp + 0x14], edx
mov edx, dword [esp + 0x18]
jmp case.0x1000662e.1
add dword [esp + 0x10], 8
add eax, 0x4e
dec edi
jne 0x10006620
mov eax, dword [esp + 0x14]
and eax, dword [esp + 0xac]
jmp 0x100070cc
cmp byte [esp + 0x26], 0
sete byte [esp + 0x5b]
jmp case.0x1000709d.13620
lea eax, [edi - 0x341b]
cmp eax, 0xa8
ja case.0x1000709d.13620
movzx ecx, byte [eax + 0x1000793c]
jmp dword [ecx*4 + 0x10007928]
mov byte [esp + 0x41], 0
jmp case.0x1000709d.13620
cmp byte [esp + 0x1f], 0
je 0x10006fff
mov al, byte [esp + 0x41]
mov byte [esp + 0x1f], al
test al, al
je 0x10006fff
mov dword [esp + 0x74], 0x1072
mov eax, dword [esp + 0x74]
add eax, 0xffffef8e
cmp eax, 0x30
ja case.0x100066e1.4211
movzx eax, byte [eax + 0x10007a10]
jmp dword [eax*4 + 0x100079e8]
mov ecx, dword [esp + 0x14]
and ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x7c]
mov eax, dword [edx + ecx*4]
jmp 0x10006ef9
mov ecx, edx
shr dword [esp + 0x14], cl
jmp case.0x100066e1.4211
sub dword [esp + 0x10], edx
movzx edx, byte [esp + 0x3c]
mov ecx, edx
shr ecx, 4
and cl, 1
mov dword [esp + 0x18], edx
mov byte [esp + 0x42], cl
je case.0x100066e1.4211
mov edi, dword [esp + 0x50]
mov eax, 0x40cf
mov dword [esp + 0x84], eax
jmp 0x10006747
mov eax, dword [esp + 0x84]
cmp eax, 0x41a1
ja 0x10006877
je 0x10006860
add eax, 0xffffbf31
cmp eax, 0xa8
ja case.0x1000676f.16592
movzx eax, byte [eax + 0x10007a5c]
jmp dword [eax*4 + 0x10007a44]
mov dword [esp + 0x128], 0x770054
mov dword [esp + 0x12c], 0x53006f
mov dword [esp + 0x130], 0x720074
jmp case.0x1000676f.16592
movzx ecx, word [esp + 0x3e]
mov dword [esp + 0x54], ecx
jmp case.0x1000676f.16592
xor eax, eax
mov word [esp + 0x13a], ax
jmp case.0x1000676f.16592
mov ecx, 0x67
mov dword [esp + 0x134], 0x6e0069
mov word [esp + 0x138], cx
jmp case.0x1000676f.16592
and edx, 0xf
mov dword [esp + 0x18], edx
cmp dword [esp + 0x10], edx
jae case.0x1000676f.16592
mov edi, 0xc1f
mov eax, edi
sub eax, 0xc1f
je 0x10006836
sub eax, 0x1e
je 0x10006822
sub eax, 0x1e
jne 0x1000684c
cmp byte [esp + 0x6b], al
je 0x1000684c
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
inc eax
mov dword [esp + 0x28], eax
movzx eax, byte [eax]
shl eax, cl
add dword [esp + 0x14], eax
add dword [esp + 0x10], 8
jmp 0x1000684c
mov eax, dword [esp + 0x10]
add eax, 8
cmp eax, edx
mov dword [esp + 0x10], eax
setb byte [esp + 0x6b]
jmp 0x1000684c
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
inc eax
mov dword [esp + 0x28], eax
movzx eax, byte [eax]
shl eax, cl
add dword [esp + 0x14], eax
add edi, 0x1e
cmp edi, 0xc5b
jbe 0x100067ec
mov edi, dword [esp + 0x50]
jmp case.0x1000676f.16592
mov eax, 1
mov ecx, edx
shl eax, cl
dec eax
and eax, dword [esp + 0x14]
add dword [esp + 0x54], eax
jmp case.0x1000676f.16592
add eax, 0xffffbe35
cmp eax, 0xa8
ja case.0x1000676f.16592
movzx ecx, byte [eax + 0x10007b20]
jmp dword [ecx*4 + 0x10007b08]
mov ecx, edx
shr dword [esp + 0x14], cl
mov dword [esp + 0xb8], 0xa
jmp case.0x1000676f.16592
cmp byte [esp + 0x48], 0
je 0x10006b41
mov ecx, dword [esp + 0x20]
xor eax, eax
mov dword [esp + 0x88], 0x6966
mov dword [esp + 0x8c], eax
jmp 0x100068d7
mov eax, dword [esp + 0x8c]
cmp eax, 0xa8
ja case.0x100068e9.1
movzx eax, byte [eax + 0x10007bec]
jmp dword [eax*4 + 0x10007bcc]
cmp byte [esp + 0x2e], 0
je 0x100068fe
cmp edi, edx
setb byte [esp + 0x33]
mov al, byte [esp + 0x2e]
mov byte [esp + 0x47], al
test al, al
je case.0x100068e9.1
mov al, byte [esp + 0x33]
mov byte [esp + 0x47], al
test al, al
je case.0x100068e9.1
mov dword [esp + 0x60], 0x3a24
jmp 0x10006930
mov eax, dword [esp + 0x60]
sub eax, 0x3a24
je 0x100069fb
sub eax, 0x56
jne 0x10006a15
cmp byte [esp + 0x68], al
je 0x10006a15
mov dword [esp + 0x18], eax
mov dword [esp + 0x70], 5
mov edi, edi
mov eax, dword [esp + 0x18]
cmp eax, 0x24
ja case.0x10006974.1
movzx eax, byte [eax + 0x10007cb0]
jmp dword [eax*4 + 0x10007c98]
sub ecx, edx
mov dword [esp + 0x20], ecx
jmp case.0x10006974.1
cmp byte [esp + 0x5c], 0
je case.0x10006974.1
mov ecx, 0xef8
nop
mov eax, ecx
sub eax, 0xef8
je 0x100069b6
sub eax, 0x28
jne 0x100069bc
sub ebx, esi
mov al, byte [ebx + esi + 1]
inc esi
dec edx
mov byte [esi], al
jne 0x100069a0
mov edi, dword [esp + 0x50]
mov ebx, esi
sub ebx, dword [esp + 0x54]
jmp 0x100069bc
sub dword [esp + 0x20], edi
mov edx, edi
add ecx, 0x28
cmp ecx, 0xf20
jbe 0x10006990
mov ecx, dword [esp + 0x20]
jmp case.0x10006974.1
mov ebx, dword [esp + 0x90]
dec ebx
jmp case.0x10006974.1
mov al, byte [ebx + 1]
inc ebx
inc esi
dec edx
mov byte [esi], al
jne case.0x10006974.9
jmp case.0x10006974.1
cmp edi, ecx
setb byte [esp + 0x5c]
add dword [esp + 0x18], 9
dec dword [esp + 0x70]
jne 0x10006960
jmp 0x10006a15
mov ecx, edi
sub ecx, edx
add ecx, dword [esp + 0xa4]
sub edx, edi
add ebx, ecx
mov ecx, dword [esp + 0x20]
cmp edx, ecx
setb byte [esp + 0x68]
mov eax, dword [esp + 0x60]
add eax, 0x56
mov dword [esp + 0x60], eax
cmp eax, 0x3a7a
jbe 0x10006930
mov dword [esp + 0x18], edx
jmp case.0x100068e9.1
cmp byte [esp + 0x4b], 0
mov byte [esp + 0x33], 0
sete byte [esp + 0x2e]
jmp case.0x100068e9.1
cmp byte [esp + 0x5f], 0
je case.0x100068e9.1
mov al, byte [ebx + 1]
inc ebx
inc esi
mov byte [esi], al
cmp ecx, 1
jbe case.0x100068e9.1
mov al, byte [ebx + 1]
inc ebx
inc esi
mov byte [esi], al
jmp case.0x100068e9.1
mov eax, dword [esp + 0x54]
sub eax, edx
mov edx, eax
cmp edx, dword [esp + 0xb4]
mov dword [esp + 0x18], edx
seta byte [esp + 0x5e]
jmp case.0x100068e9.1
cmp byte [esp + 0x4b], 0
sete al
test al, al
je 0x10006ac8
cmp byte [esp + 0x47], 0
sete al
test al, al
je 0x10006ac8
mov eax, edi
sub eax, edx
add ebx, eax
cmp edx, ecx
jae 0x10006ac8
sub ecx, edx
mov dword [esp + 0x20], ecx
mov al, byte [ebx + 1]
inc ebx
inc esi
dec edx
mov byte [esi], al
jne 0x10006ab4
mov ebx, esi
sub ebx, dword [esp + 0x54]
mov dword [esp + 0x18], edx
cmp ecx, 2
jbe case.0x100068e9.1
lea ecx, [ecx]
mov ecx, 0x1fa8
mov eax, ecx
sub eax, 0x1fa8
je 0x10006aef
sub eax, 0x3c
jne 0x10006b05
mov al, byte [ebx + 1]
inc ebx
inc esi
sub dword [esp + 0x20], 3
jmp 0x10006aff
movzx eax, byte [ebx + 1]
add ebx, 2
mov byte [esi + 1], al
movzx eax, byte [ebx]
add esi, 2
mov edi, dword [esp + 0x50]
mov byte [esi], al
add ecx, 0x3c
cmp ecx, 0x1fe4
jbe 0x10006ad5
cmp dword [esp + 0x20], 2
ja 0x10006ad0
mov ecx, dword [esp + 0x20]
add dword [esp + 0x88], 0x1c
add dword [esp + 0x8c], 0x1c
cmp dword [esp + 0x88], 0x6a0e
jbe 0x100068d0
cmp byte [esp + 0x48], 0
sete byte [esp + 0x67]
jmp case.0x1000676f.16592
cmp byte [esp + 0x5e], 0
je 0x10006c9a
mov ecx, dword [esp + 0x38]
cmp dword [ecx + 0x1bc0], 0
je 0x10006c9a
mov ecx, 0x13fa
mov dword [esp + 0x60], ecx
cmp ecx, 0x14bc
ja 0x10006c7b
je 0x10006c2b
mov eax, ecx
sub eax, 0x13fa
je 0x10006bd6
sub eax, 0x61
jne 0x10006c87
lea edi, [esp + 0xc4]
dec edi
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10006ba0
movzx eax, word [0x10161898]
mov word [edi], ax
movzx eax, word [0x1016189c]
mov edi, dword [esp + 0x50]
mov word [esp + 0xce], ax
mov al, byte [0x1016189e]
mov byte [esp + 0xd0], al
jmp 0x10006c87
mov ecx, dword [str.inval]
mov dx, word [0x101618a4]
push 3
lea eax, [esp + 0xcd]
push 0x101618a8
push eax
mov dword [esp + 0xd0], ecx
mov word [esp + 0xd4], dx
call fcn.100fdb50
push 2
lea ecx, [esp + 0xd4]
push 0x101618ac
push ecx
call fcn.100fda10
mov edi, dword [esp + 0x68]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x78]
add esp, 0x18
jmp 0x10006c87
push 4
lea edx, [esp + 0xd4]
push 0x101618b0
push edx
call fcn.100fdb50
push 7
lea eax, [esp + 0xd4]
push str.e_too_f
push eax
call fcn.100fda10
push 6
lea ecx, [esp + 0xe0]
push str.ar_bac
push ecx
call fcn.100fda10
mov edi, dword [esp + 0x74]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x84]
add esp, 0x24
jmp 0x10006c87
cmp ecx, 0x151d
je 0x1000727b
add ecx, 0x61
mov dword [esp + 0x60], ecx
cmp ecx, 0x151d
jbe 0x10006b70
mov ebx, dword [esp + 0x90]
dec ebx
test edi, edi
sete al
mov byte [esp + 0x4b], al
test al, al
je 0x10006b17
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x20]
sub eax, edx
add ebx, eax
cmp edx, ecx
jae case.0x100068e9.1
sub ecx, edx
mov dword [esp + 0x20], ecx
mov al, byte [ebx + 1]
inc ebx
inc esi
dec edx
mov byte [esi], al
jne 0x10006cd0
mov ebx, esi
sub ebx, dword [esp + 0x54]
mov dword [esp + 0x18], edx
jmp case.0x100068e9.1
test ecx, ecx
setne byte [esp + 0x5f]
jmp case.0x100068e9.1
cmp byte [esp + 0x67], 0
je case.0x1000676f.16592
mov edi, 0x133a
mov eax, edi
sub eax, 0x133a
je 0x10006d96
sub eax, 0x38
je 0x10006d41
sub eax, 0x38
jne 0x10006d9c
cmp byte [esp + 0x6a], al
je 0x10006d9c
mov cl, byte [ebx + 1]
inc ebx
inc esi
cmp dword [esp + 0x20], 1
mov byte [esi], cl
jbe 0x10006d9c
mov al, byte [ebx + 1]
inc ebx
inc esi
mov byte [esi], al
jmp 0x10006d9c
mov ecx, 0x40bb
mov eax, ecx
sub eax, 0x40bb
je 0x10006d72
sub eax, 0x58
je 0x10006d60
sub eax, 0x58
jne 0x10006d79
sub dword [esp + 0x20], 3
jmp 0x10006d79
movzx eax, byte [ebx + 1]
add ebx, 2
mov byte [esi + 1], al
movzx eax, byte [ebx]
add esi, 2
jmp 0x10006d77
mov al, byte [ebx + 1]
inc ebx
inc esi
mov byte [esi], al
add ecx, 0x58
cmp ecx, 0x416b
jbe 0x10006d46
mov eax, dword [esp + 0x20]
cmp eax, 2
ja 0x10006d41
test eax, eax
setne byte [esp + 0x6a]
jmp 0x10006d9c
mov ebx, esi
sub ebx, dword [esp + 0x54]
add edi, 0x38
cmp edi, 0x13aa
jbe 0x10006d05
mov edi, dword [esp + 0x50]
jmp case.0x1000676f.16592
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xb8]
sub dword [esp + 0x10], ecx
mov edx, esi
sub edx, dword [esp + 0xbc]
push eax
lea ecx, [esp + 0x12c]
mov dword [esp + 0x1c], edx
push ecx
lea edx, [esp + 0x144]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x18]
jmp case.0x1000676f.16592
cmp dword [esp + 0x54], edx
seta byte [esp + 0x48]
mov eax, dword [esp + 0x84]
add eax, 0x2a
mov dword [esp + 0x84], eax
cmp eax, 0x4273
jbe 0x10006740
jmp case.0x100066e1.4211
movzx eax, word [esp + 0x3e]
and edx, 0xf
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], edx
jmp case.0x100066e1.4211
cmp byte [esp + 0x43], 0
je case.0x100066e1.4211
mov eax, 0x5df7
cmp eax, 0x5e7b
ja 0x10006e50
je 0x10006e8e
mov ecx, eax
sub ecx, 0x5df7
jmp 0x10006e8e
mov ecx, eax
sub ecx, 0x5ea7
je 0x10006e8e
sub ecx, 0x2c
je 0x10006e7f
sub ecx, 0x2c
jne 0x10006e8e
mov edx, dword [esp + 0x38]
mov dword [esp + 0x34], 0xf03
mov edi, dword [esp + 0x34]
mov dword [edx], 0x1d
jmp case.0x10007432.7884
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
lea edi, [esp + 0xc4]
mov dword [ecx + 0x18], edi
add eax, 0x2c
cmp eax, 0x5eff
jbe 0x10006e3d
jmp case.0x100066e1.4211
xor al, al
cmp byte [esp + 0x2f], al
je 0x10006eae
mov eax, edx
shr eax, 6
not al
and al, 1
mov cl, byte [esp + 0x2f]
mov byte [esp + 0x4d], cl
test cl, cl
je case.0x100066e1.4211
mov byte [esp + 0x4d], al
jmp case.0x100066e1.4211
cmp byte [esp + 0x42], 0
sete byte [esp + 0x2f]
jmp case.0x100066e1.4211
cmp byte [esp + 0x4d], 0
je 0x10006f16
mov ecx, edx
mov edx, dword [esp + 0x7c]
mov eax, 1
shl eax, cl
movzx ecx, word [esp + 0x3e]
dec eax
and eax, dword [esp + 0x14]
add eax, ecx
mov eax, dword [edx + eax*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
mov dword [esp + 0x3c], eax
mov dword [esp + 0x74], 0x107e
mov dword [esp + 0x18], edx
jmp case.0x100066e1.4211
cmp byte [esp + 0x42], 0
sete al
mov byte [esp + 0x43], al
test al, al
je case.0x100066e1.4211
mov byte [esp + 0x43], 1
jmp case.0x100066e1.4211
test edx, edx
je 0x10006f9c
mov edi, 0x18e9
mov eax, edi
sub eax, 0x18e9
je 0x10006f70
sub eax, 0x35
je 0x10006f5c
sub eax, 0x35
jne 0x10006f91
mov ecx, edx
shr dword [esp + 0x14], cl
sub dword [esp + 0x10], edx
jmp 0x10006f91
mov eax, 1
mov ecx, edx
shl eax, cl
dec eax
and eax, dword [esp + 0x14]
add dword [esp + 0x20], eax
jmp 0x10006f91
cmp dword [esp + 0x10], edx
jae 0x10006f91
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
inc eax
mov dword [esp + 0x28], eax
movzx eax, byte [eax]
shl eax, cl
add dword [esp + 0x14], eax
add dword [esp + 0x10], 8
add edi, 0x35
cmp edi, 0x1953
jbe 0x10006f3d
cmp dword [esp + 0x10], 0xf
jae case.0x100066e1.4211
xor eax, eax
lea edi, [eax + 4]
cmp eax, 0xc9
ja case.0x10006fb6.1
movzx ecx, byte [eax + 0x10007ce4]
jmp dword [ecx*4 + 0x10007cd8]
mov ecx, dword [esp + 0x28]
movzx edx, byte [ecx + 1]
inc ecx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x10]
shl edx, cl
add dword [esp + 0x14], edx
mov edx, dword [esp + 0x18]
jmp case.0x10006fb6.1
add dword [esp + 0x10], 8
add eax, 0x43
dec edi
jne 0x10006fa8
mov eax, dword [esp + 0x74]
add eax, 6
mov dword [esp + 0x74], eax
cmp eax, 0x10a2
jbe 0x100066c8
mov edi, dword [esp + 0x34]
cmp byte [esp + 0x26], 0
sete al
mov byte [esp + 0x45], al
test al, al
je case.0x1000709d.13620
cmp byte [esp + 0x1f], 0
sete byte [esp + 0x45]
jmp case.0x1000709d.13620
mov al, byte [esp + 0x45]
mov byte [esp + 0x5d], al
mov byte [esp + 0x4e], 0
test al, al
je case.0x1000709d.13620
mov eax, edx
shr eax, 6
not al
and al, 1
mov byte [esp + 0x4e], al
jmp case.0x1000709d.13620
mov al, byte [esp + 0x5b]
test al, al
je 0x1000705d
mov ecx, edx
shr ecx, 4
and cl, 1
mov byte [esp + 0x41], cl
mov byte [esp + 0x1f], al
jmp case.0x1000709d.13620
mov al, byte [esp + 0x5d]
mov byte [esp + 0x2d], al
jmp case.0x1000709d.13620
cmp edi, 0x3613
ja 0x1000717c
je 0x10007151
lea eax, [edi - 0x3533]
cmp eax, 0xa8
ja case.0x1000709d.13620
movzx ecx, byte [eax + 0x10007dc4]
jmp dword [ecx*4 + 0x10007db0]
cmp byte [esp + 0x2d], 0
je 0x100070e7
mov al, byte [esp + 0x4e]
mov byte [esp + 0x2d], al
test al, al
je 0x100070e7
mov ecx, edx
mov eax, 1
shl eax, cl
movzx ecx, word [esp + 0x3e]
dec eax
and eax, dword [esp + 0x14]
add eax, ecx
mov ecx, dword [esp + 0x80]
mov eax, dword [ecx + eax*4]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x34], 0x3303
jmp 0x10007235
cmp byte [esp + 0x26], 0
sete byte [esp + 0x49]
jmp case.0x1000709d.13620
cmp byte [esp + 0x44], 0
mov byte [esp + 0x4f], 0
je case.0x1000709d.13620
mov ecx, edx
shr ecx, 5
and cl, 1
mov byte [esp + 0x4f], cl
jmp case.0x1000709d.13620
mov al, byte [esp + 0x4a]
test al, al
je 0x1000712b
cmp byte [esp + 0x2d], 0
sete al
mov byte [esp + 0x4a], al
mov byte [esp + 0x44], al
jmp case.0x1000709d.13620
mov al, byte [esp + 0x49]
test al, al
je 0x10007148
cmp byte [esp + 0x1f], 0
sete al
mov byte [esp + 0x49], al
mov byte [esp + 0x4a], al
jmp case.0x1000709d.13620
mov al, byte [esp + 0x44]
mov byte [esp + 0x46], al
test al, al
je 0x1000716d
mov al, byte [esp + 0x4f]
mov byte [esp + 0x46], al
test al, al
jne 0x1000728f
cmp byte [esp + 0x26], 0
sete byte [esp + 0x30]
jmp case.0x1000709d.13620
mov eax, edi
sub eax, 0x364b
je 0x10007210
sub eax, 0x38
je 0x100071fd
sub eax, 0x38
jne case.0x1000709d.13620
cmp byte [esp + 0x32], al
je case.0x1000709d.13620
mov eax, 0x564b
cmp eax, 0x57b8
jbe 0x100071f1
cmp eax, 0x5893
jbe 0x100071f1
mov ecx, eax
sub ecx, 0x58dc
je 0x100071de
sub ecx, 0x49
jne 0x100071f1
mov ecx, dword [esp + 0x38]
mov dword [ecx], 0x1d
mov dword [esp + 0x34], 0xf03
mov edi, dword [esp + 0x34]
jmp case.0x10007432.7884
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
lea edi, [esp + 0xc4]
mov dword [ecx + 0x18], edi
mov edi, dword [esp + 0x34]
add eax, 0x49
cmp eax, 0x5925
jbe 0x100071a6
jmp case.0x1000709d.13620
cmp byte [esp + 0x32], 0
je case.0x1000709d.13620
cmp byte [esp + 0x46], 0
sete byte [esp + 0x32]
jmp case.0x1000709d.13620
cmp byte [esp + 0x30], 0
je 0x10007221
cmp byte [esp + 0x1f], 0
sete byte [esp + 0x30]
mov al, byte [esp + 0x30]
test al, al
je 0x10007231
cmp byte [esp + 0x2d], 0
sete al
mov byte [esp + 0x32], al
mov edi, dword [esp + 0x34]
add edi, 0x38
mov dword [esp + 0x34], edi
cmp edi, 0x36bb
jbe 0x10006589
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x98]
jae 0x100071cd
cmp esi, dword [esp + 0xa0]
jb 0x10006580
mov dword [esp + 0x34], 0xf03
mov edi, dword [esp + 0x34]
jmp case.0x10007432.7884
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
lea eax, [esp + 0xc4]
mov dword [edx + 0x18], eax
jmp 0x100071c3
mov eax, dword [esp + 0x38]
mov dword [esp + 0x34], 0xf03
mov edi, dword [esp + 0x34]
mov dword [eax], 0xb
jmp case.0x10007432.7884
mov dword [esp + 0xe4], 0x650044
jmp case.0x10007432.7884
cmp edi, 0x1eab
ja 0x1000741a
je 0x10007408
lea eax, [edi - 0x1dcb]
cmp eax, 0xc0
ja case.0x10007432.7884
movzx edx, byte [eax + 0x10007e90]
jmp dword [edx*4 + 0x10007e70]
mov dword [esp + 0xf4], 0x65006d
jmp case.0x10007432.7884
mov edx, 0x63
mov eax, 0x61
mov dword [esp + 0xe8], 0x690076
mov word [esp + 0xec], dx
mov dword [esp + 0xee], 0x4e0065
mov word [esp + 0xf2], ax
jmp case.0x10007432.7884
mov dword [esp + 0x102], 0x67
mov byte [esp + 0x27], 1
mov byte [esp + 0x4c], 1
jmp case.0x10007432.7884
mov eax, 0x72
mov word [esp + 0xfc], ax
mov dword [esp + 0xfe], 0x6e0069
jmp case.0x10007432.7884
mov dword [esp + 0xf8], 0x740053
jmp case.0x10007432.7884
xor eax, eax
mov dword [esp + 0x108], eax
push eax
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], eax
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], eax
mov dword [esp + 0x10c], 0x20
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x2cc
mov dword [esp + 0x128], eax
lea eax, [esp + 0x154]
push 0
push eax
call fcn.100fefe0
add esp, 0xc
jmp case.0x10007432.7884
lea ecx, [esp + 0x108]
push ecx
mov dword [esp + 0x110], 0x80
call dword [sym.imp.KERNEL32.dll_CreateActCtxW]
mov dword [esp + 0x78], eax
jmp case.0x10007432.7884
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [esp + 0x94], eax
jmp case.0x10007432.7884
lea eax, [edi - 0x1ecb]
cmp eax, 0xa0
ja case.0x10007432.7884
movzx edx, byte [eax + 0x10007f70]
jmp dword [edx*4 + 0x10007f54]
cmp byte [esp + 0x31], 0
je 0x10007456
mov ecx, dword [esp + 0x94]
lea eax, [esp + 0x150]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
push 0
lea edx, [esp + 0xe8]
push edx
push 7
call dword [sym.imp.KERNEL32.dll_DefineDosDeviceW]
mov eax, dword [esp + 0xc0]
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
jmp case.0x10007432.7884
mov cl, byte [esp + 0x27]
mov byte [esp + 0x5a], cl
jmp case.0x10007432.7884
cmp dword [esp + 0x78], 0xffffffff
jne 0x10007494
mov byte [esp + 0x27], 0
cmp dword [esp + 0x94], 0
jne case.0x10007432.7884
mov byte [esp + 0x4c], 0
jmp case.0x10007432.7884
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
mov dword [esp + 0xc0], eax
jmp case.0x10007432.7884
cmp byte [esp + 0x5a], 0
je 0x1000757b
mov edi, 0x3a90
mov dword [esp + 0x70], edi
mov eax, edi
sub eax, 0x3a90
je 0x1000753f
sub eax, 0x17
je 0x1000751b
sub eax, 0x17
jne 0x10007564
cmp byte [esp + 0x69], al
je 0x10007564
mov edi, dword [esp + 0x78]
push edi
call dword [sym.imp.KERNEL32.dll_ZombifyActCtx]
mov edx, dword [esp + 0x9c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_DeactivateActCtx]
push edi
call dword [sym.imp.KERNEL32.dll_ReleaseActCtx]
mov edi, dword [esp + 0x70]
jmp 0x10007564
cmp dword [esp + 0xb0], 0
jne 0x10007535
mov eax, dword [esp + 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseActCtx]
mov byte [esp + 0x27], 0
mov cl, byte [esp + 0x27]
mov byte [esp + 0x69], cl
jmp 0x10007564
mov eax, dword [esp + 0x78]
lea edx, [esp + 0x9c]
push edx
push eax
mov dword [esp + 0xa4], 0
call dword [sym.imp.KERNEL32.dll_ActivateActCtx]
mov dword [esp + 0xb0], eax
add edi, 0x17
mov dword [esp + 0x70], edi
cmp edi, 0x3abe
jbe 0x100074d2
mov edi, dword [esp + 0x34]
mov cl, byte [esp + 0x4c]
mov byte [esp + 0x31], cl
add edi, 0x20
mov dword [esp + 0x34], edi
cmp edi, dword [esp + 0x6c]
jbe 0x10006360
mov al, byte [esp + 0x31]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov al, 1
pop ebx
mov esp, ebp
pop ebp
ret