Function at 0x102fc85
Capabilities:
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xd8
mov eax, dword [0x111027c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp + 0x14]
push ebx
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0x18]
push esi
mov esi, dword [ebp + 0x1c]
push edi
xor edi, edi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0x20]
mov ebx, ecx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x4c], edi
mov byte [ebp - 0x36], 0
mov byte [ebp - 0x35], 0
mov byte [ebp - 0x47], 0
mov dword [ebp - 0x5c], edi
mov byte [ebp - 0x45], 0
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x102fd35
test byte [eax + 0x1c], 1
je 0x102fd35
cmp byte [eax + 0x19], 4
jb 0x102fd35
push 0x10023f8
push 0x1bb
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0101894a
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebx + 0xfc]
je 0x102fd54
push 0x1003538
push 0x292a
push 0x1002460
call fcn.0107b644
mov eax, dword [ebp - 0xbc]
mov byte [esi], 0
lea esi, [ebx + 0x80]
lea ecx, [ebx + 0xc]
push esi
mov dword [eax], edi
call fcn.0101fba8
mov eax, dword [esi]
mov ecx, dword [ebp - 0x28]
mov dword [ecx + 0xc], eax
lea eax, [ebp - 0x45]
push eax
call fcn.01082380
cmp eax, edi
mov dword [ebp - 0x34], eax
jge 0x102fdc7
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x10311e7
test byte [eax + 0x1c], 1
je 0x10311e7
cmp byte [eax + 0x19], 2
jb 0x10311e7
push dword [ebp - 0x34]
push 0x10023f8
push 0x1bc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019fa8
jmp 0x10311e7
lea eax, [ebp - 0x80]
push eax
push dword [ebx + 0xf0]
call fcn.010d40a7
cmp eax, edi
mov dword [ebp - 0x34], eax
jl 0x10311e7
mov edi, dword [ebp + 0x10]
mov esi, dword [sym.imp.ole32.dll_CoTaskMemAlloc]
shl edi, 4
push edi
call esi
mov dword [ebp - 0x74], eax
test eax, eax
jne 0x102fe03
mov dword [ebp - 0x34], 0x8007000e
jmp 0x10311e7
push edi
push 0
push dword [ebp - 0x74]
call sub.msvcrt.dll_memset
add esp, 0xc
push edi
call esi
mov dword [ebp - 0x70], eax
test eax, eax
je 0x102fdf7
push edi
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
jmp 0x10310fe
cmp byte [ebp - 0x35], 0
mov byte [ebp - 0x15], 0
mov byte [ebp - 0x29], 0
jne 0x102fe3e
and dword [ebp - 0x5c], 0
mov eax, dword [edi + 4]
mov ecx, dword [ebp - 0xb8]
mov ecx, dword [ecx + eax*4]
mov esi, eax
imul esi, esi, 0x138
add esi, dword [ebx + 0x7c]
push eax
lea eax, [ebx + 0x100]
mov dword [ebp - 0x30], ecx
push eax
lea ecx, [ebx + 0xc]
mov byte [ebp - 0x35], 0
mov dword [ebp - 0x40], esi
call fcn.0101fbce
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.RPCRT4.dll_UuidCreate]
push dword [esi + 0x54]
call fcn.0107dd0d
test al, al
je 0x102fe9a
mov ecx, dword [ebp - 0xb8]
lea eax, [ebp - 0x54]
push eax
mov eax, dword [edi + 4]
push dword [ecx + eax*4]
jmp 0x102ff94
mov eax, dword [ebx + 0x12c]
xor edi, edi
xor esi, esi
cmp dword [eax + 0x40], edi
jbe 0x102fed5
mov eax, dword [eax + 0x44]
push dword [ebp - 0x30]
add eax, edi
push dword [eax + 0x10]
mov dword [ebp - 0xc4], eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x102fed5
mov eax, dword [ebx + 0x12c]
inc esi
add edi, 0x20
cmp esi, dword [eax + 0x40]
jb 0x102fea9
mov eax, dword [ebx + 0x12c]
cmp esi, dword [eax + 0x40]
jne 0x102ff2f
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x20]
test eax, eax
jge 0x102feef
mov dword [ebp - 0x1c], eax
jmp 0x102ff26
mov dword [ebp - 0x1c], 0x80780020
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x102ff26
test byte [eax + 0x1c], 1
je 0x102ff26
cmp byte [eax + 0x19], 2
jb 0x102ff26
push dword [ebp - 0x30]
push 0x10023f8
push 0x1bd
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019633
mov byte [ebp - 0x29], 1
jmp 0x1030fbf
cmp dword [ebp - 0x54], 0
je 0x102ff42
push dword [ebp - 0x54]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
and dword [ebp - 0x54], 0
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x102ff8f
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x102ff7f
test byte [eax + 0x1c], 1
je 0x102ff7f
cmp byte [eax + 0x19], 2
jb 0x102ff7f
push dword [ebp - 0x30]
push 0x10023f8
push 0x1be
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019633
mov dword [ebp - 0x1c], 0x80780020
mov byte [ebp - 0x29], 1
jmp 0x103106d
lea ecx, [ebp - 0x54]
push ecx
push eax
call fcn.0107d1fe
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x1030fbf
mov edi, dword [ebp - 0x40]
mov eax, dword [edi + 0x54]
test al, 0x40
je 0x102fff7
push edi
mov ecx, ebx
call fcn.0102ee03
mov dword [ebp - 0x34], eax
test eax, eax
jl 0x10311e7
lea esi, [ebx + 0x84]
push esi
lea ecx, [ebx + 0xc]
call fcn.0101fba8
mov eax, dword [esi]
mov ecx, dword [ebp - 0x28]
mov dword [ecx + 8], eax
mov edi, dword [ebx + 0x100]
shl edi, 4
add edi, dword [ebp - 0x74]
lea esi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, ecx
movsd dword es:[edi], dword [esi]
inc dword [eax + 4]
mov edi, eax
jmp 0x1031101
test al, 8
jne 0x103007f
test al, 0x20
jne 0x1030017
push 0x10028f0
push 0x29c6
push 0x1002460
call fcn.0107b644
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x103005e
test byte [eax + 0x1c], 1
je 0x103005e
cmp byte [eax + 0x19], 4
jb 0x103005e
add edi, 0x44
push edi
lea ecx, [ebp - 0xc0]
call fcn.01021ad0
push dword [eax]
mov eax, dword [0x111024c]
or dword [ebp - 0x60], 1
push 0x10023f8
push 0x1bf
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019633
test byte [ebp - 0x60], 1
je 0x1030074
push dword [ebp - 0xc0]
and dword [ebp - 0x60], 0xfffffffe
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [ebp - 0x28]
inc dword [edi + 4]
jmp 0x1031101
push 1
push 8
pop esi
push esi
mov ecx, ebx
call fcn.01023fd2
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 4]
mov edx, dword [ebp - 0x64]
mov dword [ecx + 0x24], esi
xor esi, esi
cmp eax, dword [edx + 4]
jne 0x10301ad
mov eax, dword [edx + 0x28]
cmp eax, esi
je 0x10301ad
mov dword [ebp - 0x3c], eax
mov edi, ecx
mov eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x64]
mov dword [edi + 0x28], eax
mov eax, dword [edi + 4]
cmp eax, dword [esi + 4]
jne 0x10300df
cmp dword [esi + 0x28], 0
jne 0x10300df
mov eax, dword [ebp - 0x40]
push dword [eax + 0x54]
call fcn.0107dd0d
test al, al
jne 0x10300df
mov eax, dword [ebp - 0x3c]
mov dword [esi + 0x28], eax
mov eax, dword [edi + 4]
cmp eax, dword [esi + 4]
jne 0x10304d9
mov eax, dword [esi + 0x2c]
test eax, eax
je 0x10304d9
mov dword [ebp - 0x58], eax
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x58]
mov esi, dword [ebp - 0x64]
mov dword [edi + 0x2c], eax
mov eax, dword [ebp - 0x88]
mov dword [edi + 0x30], eax
mov eax, dword [edi + 4]
cmp eax, dword [esi + 4]
jne 0x1030140
cmp dword [esi + 0x2c], 0
jne 0x1030140
mov eax, dword [ebp - 0x40]
push dword [eax + 0x54]
call fcn.0107dd0d
test al, al
jne 0x1030140
mov eax, dword [ebp - 0x58]
mov dword [esi + 0x2c], eax
mov eax, dword [ebp - 0x88]
mov dword [esi + 0x30], eax
push 1
push 9
mov ecx, ebx
call fcn.01023fd2
push 9
mov ecx, edi
call fcn.01021280
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x88]
push dword [ebp - 0x58]
push dword [ebp - 0x3c]
call fcn.0109ed61
mov esi, eax
test esi, esi
je 0x1030557
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030415
test byte [eax + 0x1c], 1
je 0x1030415
cmp byte [eax + 0x19], 2
jb 0x1030415
push dword [ebp - 0x24]
push esi
push dword [ebp - 0x30]
push 0x10023f8
push 0x1c7
jmp 0x103040a
mov eax, dword [ebp - 0x3c]
cmp eax, esi
je 0x10301c4
cmp eax, dword [ecx + 0x28]
je 0x10301c4
cmp eax, dword [edx + 0x28]
je 0x10301c4
push eax
call fcn.0109f36b
mov dword [ebp - 0x3c], esi
push dword [edi + 0x54]
call fcn.0107dd0d
test al, al
je 0x1030222
mov ecx, ebx
call fcn.0102471a
cmp eax, esi
mov dword [ebp - 0x1c], eax
jge 0x1030222
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030fbf
test byte [eax + 0x1c], 1
je 0x1030fbf
cmp byte [eax + 0x19], 2
jb 0x1030fbf
push dword [ebp - 0x34]
push 0x10023f8
push 0x1c0
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019fa8
jmp 0x1030fbf
push esi
push esi
push esi
push esi
mov ecx, ebx
call fcn.0101fdfe
test byte [ebx + 0xec], 0x10
jne 0x103025c
cmp byte [ebx + 0x108], 0
jne 0x1030248
cmp byte [ebx + 0x109], 0
je 0x103025c
push 0x10034e8
push 0x2a00
push 0x1002460
call fcn.0107b644
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x103028f
test byte [eax + 0x1c], 1
je 0x103028f
cmp byte [eax + 0x19], 4
jb 0x103028f
push dword [ebp - 0x54]
push dword [ebp - 0x30]
push 0x10023f8
push 0x1c1
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010197e6
mov ecx, dword [ebx + 0x7c]
lea edi, [ebx + 0x100]
mov eax, dword [edi]
imul eax, eax, 0x138
lea eax, [eax + ecx + 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebx + 0x18]
call fcn.0101f576
push eax
movzx eax, byte [ebx + 0x109]
push ebx
push 0x10227f1
push eax
movzx eax, byte [ebx + 0x108]
push eax
mov eax, dword [ebx + 0xec]
shr eax, 4
and al, 1
movzx eax, al
push eax
push dword [ebp - 0x54]
call fcn.010aa2ac
mov ecx, dword [ebx + 0x7c]
mov esi, eax
mov eax, dword [edi]
imul eax, eax, 0x138
lea eax, [eax + ecx + 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x103036a
test byte [eax + 0x1c], 1
je 0x103036a
cmp byte [eax + 0x19], 4
jb 0x103036a
mov eax, dword [edi]
mov ecx, dword [ebx + 0x7c]
imul eax, eax, 0x138
add eax, ecx
lea ecx, [eax + 0x84]
push ecx
add eax, 0x7c
push eax
call fcn.0108234e
push edx
push eax
mov eax, dword [0x111024c]
push 0x10023f8
push 0x1c2
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010194e4
push dword [ebp - 0x98]
mov ecx, ebx
push dword [ebp - 0x9c]
push dword [ebp - 0x90]
push dword [ebp - 0x94]
call fcn.0101fdfe
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x9c]
mov dword [edi + 0x18], eax
mov eax, dword [ebp - 0x98]
mov dword [edi + 0x1c], eax
mov eax, dword [ebp - 0x94]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0x90]
mov dword [edi + 0x14], eax
mov eax, esi
sub eax, 0
je 0x10300b3
dec eax
je 0x10304bd
sub eax, 3
je 0x1030477
dec eax
je 0x103042a
dec eax
je 0x1030477
dec eax
je 0x103042a
sub eax, 0xf
je 0x1030477
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030415
test byte [eax + 0x1c], 1
je 0x1030415
cmp byte [eax + 0x19], 2
jb 0x1030415
push dword [ebp - 0x24]
push esi
push dword [ebp - 0x30]
push 0x10023f8
push 0x1c5
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019c0f
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push esi
call fcn.010d41ac
mov dword [ebp - 0x1c], eax
jmp 0x1030fbf
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x103045e
test byte [eax + 0x1c], 1
je 0x103045e
cmp byte [eax + 0x19], 2
jb 0x103045e
push dword [ebp - 0x24]
push esi
push dword [ebp - 0x30]
push 0x10023f8
push 0x1c4
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019c0f
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push esi
call fcn.010d41ac
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x15], 1
jmp 0x1030fbf
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x10304ab
test byte [eax + 0x1c], 1
je 0x10304ab
cmp byte [eax + 0x19], 2
jb 0x10304ab
push dword [ebp - 0x24]
push esi
push dword [ebp - 0x30]
push 0x10023f8
push 0x1c3
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019c0f
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push esi
call fcn.010d41ac
jmp 0x102feea
lea ecx, [ebx + 0xc]
mov eax, dword [ecx]
call dword [eax + 8]
test al, al
je 0x1030fbf
mov dword [ebp - 0x1c], 0x8078001d
jmp 0x1030fbf
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x10304f1
cmp eax, dword [edi + 0x2c]
je 0x10304f1
cmp eax, dword [esi + 0x2c]
je 0x10304f1
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
and dword [ebp - 0x58], 0
and dword [ebp - 0x88], 0
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x58]
push eax
push dword [ebp - 0x3c]
call fcn.0109ebf3
mov esi, eax
test esi, esi
je 0x1030102
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030415
test byte [eax + 0x1c], 1
je 0x1030415
cmp byte [eax + 0x19], 2
jb 0x1030415
push dword [ebp - 0x24]
push esi
push dword [ebp - 0x30]
push 0x10023f8
push 0x1c6
jmp 0x103040a
cmp dword [ebp - 0x4c], 0
je 0x103056a
push dword [ebp - 0x4c]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
and dword [ebp - 0x4c], 0
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x40]
push dword [eax + 0x54]
add eax, 0x44
push eax
push dword [ebx + 0x140]
call fcn.010df4ce
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x1030fbf
lea edi, [ebx + 0x18]
push 0
mov ecx, edi
call fcn.010d19a2
mov dword [ebp - 0x34], eax
test eax, eax
jl 0x10311e7
xor esi, esi
push esi
push esi
push dword [ebx + 0xe8]
push dword [ebx + 0x140]
call fcn.010d353f
cmp eax, esi
mov dword [ebp - 0x1c], eax
jl 0x103046e
push 1
push esi
push dword [ebx + 0xe8]
push dword [ebp - 0x4c]
call fcn.010d353f
cmp eax, esi
mov dword [ebp - 0x1c], eax
jl 0x103046e
mov ecx, edi
call fcn.010d1aee
push dword [ebp - 0x4c]
mov ecx, ebx
call fcn.0101caf7
cmp eax, esi
mov dword [ebp - 0x1c], eax
jge 0x1030641
mov byte [ebp - 0x15], 1
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030fbf
test byte [eax + 0x1c], 1
je 0x1030fbf
cmp byte [eax + 0x19], 2
jb 0x1030fbf
push dword [ebp - 0x1c]
push dword [ebp - 0x4c]
push 0x10023f8
push 0x1c8
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01048c37
jmp 0x1030fbf
push esi
mov ecx, edi
call fcn.010d19a2
cmp eax, esi
mov dword [ebp - 0x34], eax
jl 0x10311e7
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0xd0]
push eax
push dword [ebp - 0x80]
call fcn.010f1c30
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x78]
push eax
push 1
xor edi, edi
push edi
mov esi, 0x1003490
push esi
push 0x80000002
mov dword [ebp - 0x78], edi
mov byte [ebp - 0x46], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1030756
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x50]
push eax
push edi
push edi
push 0x1003478
push dword [ebp - 0x78]
mov dword [ebp - 0x50], edi
mov dword [ebp - 0xc8], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x10306e9
mov eax, dword [ebp - 0x50]
mov ecx, 0x100000
mul ecx
cmp edx, edi
ja 0x10306d1
cmp eax, edi
jbe 0x1030717
cmp edx, dword [ebp - 0x68]
ja 0x1030717
jb 0x10306dd
cmp eax, dword [ebp - 0x6c]
jae 0x1030717
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
mov byte [ebp - 0x46], 1
jmp 0x1030717
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x103074b
test byte [eax + 0x1c], 1
je 0x103071c
cmp byte [eax + 0x19], 5
jb 0x103071c
push esi
push 0x10023f8
push 0x1c9
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019633
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x103074b
test byte [eax + 0x1c], 1
je 0x103074b
cmp byte [eax + 0x19], 4
jb 0x103074b
push esi
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push 0x10023f8
push 0x1ca
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019e8a
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1030784
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030789
test byte [eax + 0x1c], 1
je 0x1030789
cmp byte [eax + 0x19], 5
jb 0x1030789
push esi
push 0x10023f8
push 0x1cb
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019633
mov eax, dword [0x111024c]
cmp dword [ebp - 0x1c], edi
jl 0x103046e
cmp eax, 0x111024c
je 0x10307cc
test byte [eax + 0x1c], 1
je 0x10307cc
cmp byte [eax + 0x19], 4
jb 0x10307cc
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0xcc]
push dword [ebp - 0xd0]
push 0x10023f8
push 0x1cc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109ba9c
lea ecx, [ebx + 0x18]
call fcn.010d1aee
test byte [ebx + 0xec], 2
je 0x10309a5
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x64]
mov ecx, dword [eax + 8]
mov edx, dword [esi + 8]
cmp ecx, edx
jne 0x103081b
mov byte [ebp - 0x1d], 1
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030870
test byte [eax + 0x1c], 1
je 0x1030870
cmp byte [eax + 0x19], 4
jb 0x1030870
push ecx
push edx
push 0x10023f8
push 0x1cd
jmp 0x1030860
ja 0x1030831
push 0x100343c
push 0x2b1e
push 0x1002460
call fcn.0107b644
mov byte [ebp - 0x1d], 0
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030870
test byte [eax + 0x1c], 1
je 0x1030870
cmp byte [eax + 0x19], 4
jb 0x1030870
mov ecx, dword [ebp - 0x28]
push dword [ecx + 8]
push dword [esi + 8]
push 0x10023f8
push 0x1ce
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01083f04
mov eax, dword [0x111024c]
mov esi, dword [ebp - 0x68]
mov edi, dword [ebp - 0x6c]
test esi, esi
ja 0x10308d8
jb 0x1030884
cmp edi, 0x1400000
ja 0x10308d8
xor ecx, ecx
cmp byte [ebp - 0x1d], cl
mov byte [ebp - 0x15], 1
sete cl
dec ecx
and ecx, 0x44
add ecx, 0x80780030
mov dword [ebp - 0x1c], ecx
cmp eax, 0x111024c
je 0x1030fbf
test byte [eax + 0x1c], 1
je 0x1030fbf
cmp byte [eax + 0x19], 3
jb 0x1030fbf
push esi
push edi
push 0x10023f8
push 0x1cf
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010194e4
jmp 0x1030fbf
cmp byte [ebp - 0x46], 0
jne 0x103093f
test esi, esi
ja 0x103093f
jb 0x10308ec
cmp edi, 0x40000000
ja 0x103093f
cmp byte [ebp - 0x1d], 0
je 0x103093f
mov dword [ebp - 0x1c], 0x80780080
mov byte [ebp - 0x15], 1
cmp eax, 0x111024c
je 0x103106d
test byte [eax + 0x1c], 1
je 0x103106d
cmp byte [eax + 0x19], 3
jb 0x103106d
push 0
push 0x40000000
push esi
push edi
push 0x10023f8
push 0x1d0
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109ba9c
jmp 0x103106d
add edi, 0xfec00000
adc esi, 0xffffffff
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], esi
test esi, esi
ja 0x10309a5
jb 0x103095c
cmp edi, 0x1100000
ja 0x10309a5
xor ecx, ecx
cmp byte [ebp - 0x1d], cl
mov byte [ebp - 0x15], 1
sete cl
dec ecx
and ecx, 0x44
add ecx, 0x80780030
mov dword [ebp - 0x1c], ecx
cmp eax, 0x111024c
je 0x1030fbf
test byte [eax + 0x1c], 1
je 0x1030fbf
cmp byte [eax + 0x19], 3
jb 0x1030fbf
push esi
push edi
push 0x10023f8
push 0x1d1
jmp 0x10308c8
test byte [ebx + 0xec], 4
mov byte [ebp - 0x1d], 1
je 0x10309db
mov eax, dword [ebx + 0x100]
shl eax, 4
add eax, dword [ebp - 0x70]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1d]
push eax
push dword [ebp - 0x84]
call fcn.0101c628
mov dword [ebp - 0x34], eax
test eax, eax
jl 0x10311e7
mov al, byte [ebp - 0x1d]
mov byte [ebp - 0x37], al
xor eax, eax
push eax
push eax
push eax
push eax
mov ecx, ebx
call fcn.0101fdfe
mov eax, dword [0x111024c]
mov esi, 0x111024c
cmp eax, esi
je 0x1030a50
test byte [eax + 0x1c], 1
je 0x1030a28
cmp byte [eax + 0x19], 4
jb 0x1030a28
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push 0x10023f8
push 0x1d2
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010194e4
mov eax, dword [0x111024c]
cmp eax, esi
je 0x1030a50
test byte [eax + 0x1c], 1
je 0x1030a50
cmp byte [eax + 0x19], 4
jb 0x1030a50
push dword [ebp - 0x30]
push 0x10023f8
push 0x1d3
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019633
mov ecx, dword [ebx + 0x7c]
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea esi, [ebx + 0x100]
mov eax, dword [esi]
imul eax, eax, 0x138
lea eax, [eax + ecx + 0x8c]
push eax
call edi
lea eax, [ebp - 0x47]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x9c]
push eax
mov eax, dword [esi]
shl eax, 4
add eax, dword [ebp - 0x70]
lea ecx, [ebx + 0x18]
push eax
lea eax, [ebp - 0x79]
push eax
lea eax, [ebp - 0x37]
push eax
call fcn.0101f576
cmp dword [ebx + 0xe8], 4
push eax
push ebx
push 0x10227f1
push dword [ebp - 0x68]
sete al
push dword [ebp - 0x6c]
movzx eax, al
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x3c]
call fcn.010a4480
mov ecx, dword [ebx + 0x7c]
mov dword [ebp - 0x50], eax
mov eax, dword [esi]
imul eax, eax, 0x138
lea eax, [eax + ecx + 0x94]
push eax
call edi
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030b34
test byte [eax + 0x1c], 1
je 0x1030b34
cmp byte [eax + 0x19], 4
jb 0x1030b34
mov eax, dword [esi]
mov ecx, dword [ebx + 0x7c]
imul eax, eax, 0x138
add eax, ecx
lea ecx, [eax + 0x94]
push ecx
add eax, 0x8c
push eax
call fcn.0108234e
push edx
push eax
mov eax, dword [0x111024c]
mov edi, 0x10023f8
push edi
push 0x1d4
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010194e4
jmp 0x1030b39
mov edi, 0x10023f8
lea esi, [ebx + 0x30]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp byte [ebp - 0x47], 0
je 0x1030b5a
mov eax, dword [ebp - 0x40]
mov byte [eax + 0x74], 1
cmp byte [ebp - 0x37], 0
jne 0x1030b5a
or dword [eax + 0x54], 0x10
cmp byte [ebp - 0x1d], 0
jne 0x1030ba8
cmp byte [ebp - 0x37], 0
je 0x1030ba8
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030b8f
test byte [eax + 0x1c], 1
je 0x1030b8f
cmp byte [eax + 0x19], 4
jb 0x1030b8f
push edi
push 0x1d5
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0101894a
mov ecx, dword [ebx + 0x114]
mov eax, dword [ebp - 0x40]
mov dword [eax + 0x68], ecx
mov ecx, dword [ebx + 0x118]
and dword [eax + 0x70], 0
mov dword [eax + 0x6c], ecx
push dword [ebp - 0x98]
mov ecx, ebx
push dword [ebp - 0x9c]
mov byte [ebp - 0x36], 1
push dword [ebp - 0x90]
push dword [ebp - 0x94]
call fcn.0101fdfe
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x9c]
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 0x98]
mov dword [esi + 0x1c], eax
mov eax, dword [ebp - 0x94]
mov dword [esi + 0x10], eax
mov eax, dword [ebp - 0x90]
mov dword [esi + 0x14], eax
mov eax, dword [ebp - 0x50]
sub eax, 0
je 0x1030dee
dec eax
je 0x10304bd
sub eax, 3
je 0x1030eae
dec eax
je 0x1030e6d
dec eax
je 0x1030eae
dec eax
je 0x1030c70
sub eax, 0xd
je 0x1030e6d
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030c61
test byte [eax + 0x1c], 1
je 0x1030c61
cmp byte [eax + 0x19], 2
jb 0x1030c61
push dword [ebp - 0x24]
push dword [ebp - 0x50]
push dword [ebp - 0x30]
push edi
push 0x1dc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019c0f
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push dword [ebp - 0x50]
jmp 0x103041d
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030ca1
test byte [eax + 0x1c], 1
je 0x1030ca1
cmp byte [eax + 0x19], 2
jb 0x1030ca1
push dword [ebp - 0x24]
push 7
push dword [ebp - 0x30]
push edi
push 0x1d8
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019c0f
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push 7
call fcn.010d41ac
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x36], 0
cmp eax, 0x8078002a
jne 0x1030de4
cmp dword [ebp - 0x24], 0x70
jne 0x103046e
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030cf7
test byte [eax + 0x1c], 1
je 0x1030cf7
cmp byte [eax + 0x19], 4
jb 0x1030cf7
push dword [ebp - 0x80]
push edi
push 0x1d9
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019633
xor eax, eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0x5c], eax
je 0x1030d24
push 0x1003424
push 0x2bc1
push 0x1002460
call fcn.0107b644
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xa8]
push eax
push dword [ebp - 0x3c]
call fcn.0109e95a
test eax, eax
jne 0x103046e
push dword [ebp - 0xb0]
mov ecx, ebx
push dword [ebp - 0xb4]
call fcn.0101baa2
test eax, eax
jl 0x1030da0
inc dword [ebp - 0x5c]
mov byte [ebp - 0x35], 1
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x10310dd
test byte [eax + 0x1c], 1
je 0x10310dd
cmp byte [eax + 0x19], 4
jb 0x10310dd
push dword [ebp - 0x80]
push dword [ebp - 0x30]
push edi
push 0x1da
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010197e6
jmp 0x10310dd
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x103046e
test byte [eax + 0x1c], 1
je 0x103046e
cmp byte [eax + 0x19], 2
jb 0x103046e
push dword [ebp - 0x34]
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
push edi
push 0x1db
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019f76
cmp dword [ebp - 0x1c], 0
jl 0x103046e
mov esi, dword [ebp - 0x40]
add esi, 0x10
push esi
lea ecx, [ebx + 0xc]
call fcn.0101fba8
mov eax, dword [esi]
mov edi, dword [ebp - 0x28]
lea esi, [ebx + 0x84]
push esi
lea ecx, [ebx + 0xc]
mov dword [edi + 0x20], eax
call fcn.0101fba8
mov eax, dword [esi]
mov dword [edi + 8], eax
mov edi, dword [ebx + 0x100]
shl edi, 4
add edi, dword [ebp - 0x74]
lea esi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0x79], 0
jne 0x1030eef
mov esi, dword [ebp - 0x28]
mov eax, dword [esi + 0x2c]
cmp eax, dword [ebp - 0x58]
je 0x1030e55
push 0x10033fc
push 0x2c09
push 0x1002460
call fcn.0107b644
and dword [esi + 0x2c], 0
and dword [esi + 0x30], 0
mov dword [ebp - 0x1c], 0x80780030
mov byte [ebp - 0x15], 1
jmp 0x1030fdb
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030e9f
test byte [eax + 0x1c], 1
je 0x1030e9f
cmp byte [eax + 0x19], 2
jb 0x1030e9f
push dword [ebp - 0x24]
push dword [ebp - 0x50]
push dword [ebp - 0x30]
push edi
push 0x1d7
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019c0f
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push dword [ebp - 0x50]
jmp 0x1030466
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030ee0
test byte [eax + 0x1c], 1
je 0x1030ee0
cmp byte [eax + 0x19], 2
jb 0x1030ee0
push dword [ebp - 0x24]
push dword [ebp - 0x50]
push dword [ebp - 0x30]
push edi
push 0x1d6
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019c0f
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
push dword [ebp - 0x50]
jmp 0x10304b3
and dword [ebp - 0xa4], 0
and dword [ebp - 0xa0], 0
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x3c]
call fcn.010a04f2
test eax, eax
je 0x1030f24
push 0x10033e8
push 0x2c17
push 0x1002460
call fcn.0107b644
mov eax, dword [ebp - 0xa4]
or eax, dword [ebp - 0xa0]
je 0x1030f6e
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1030f6e
test byte [eax + 0x1c], 1
je 0x1030f6e
cmp byte [eax + 0x19], 2
jb 0x1030f6e
push dword [ebp - 0x30]
push dword [ebp - 0xa0]
push dword [ebp - 0xa4]
push 0x10023f8
push 0x1dd
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019e8a
lea edi, [ebx + 0x30]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0xa0]
mov esi, dword [ebp - 0x40]
mov ecx, dword [ebp - 0xa4]
mov dword [esi + 0x28], ecx
mov dword [esi + 0x2c], eax
test eax, eax
jl 0x1030fa5
jg 0x1030f97
test ecx, ecx
jbe 0x1030fa5
push 0
push 0x8078007d
mov ecx, esi
call fcn.01020fec
push 0xe
mov ecx, esi
call fcn.01021033
mov ecx, dword [ebp - 0x28]
push 0xe
call fcn.01021280
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [ebp - 0x1c], 0x80780030
je 0x1030fdb
cmp dword [ebp - 0x1c], 0x8078002a
jne 0x1031043
cmp dword [ebp - 0x24], 0x70
jne 0x103106d
push 0x10bae04
push dword [ebx + 0x118]
push dword [ebx + 0x114]
push dword [ebx + 0xf4]
push dword [ebx + 0xe8]
push dword [ebx + 0xf0]
call fcn.010d9201
test eax, eax
jge 0x1031043
mov ecx, dword [0x111024c]
cmp ecx, 0x111024c
je 0x1031043
test byte [ecx + 0x1c], 1
je 0x1031043
cmp byte [ecx + 0x19], 2
jb 0x1031043
push eax
push dword [ebx + 0xf4]
push dword [ebx + 0xf0]
push 0x10023f8
push 0x1de
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.010198ad
cmp dword [ebp - 0x1c], 0x80780030
jne 0x1031067
test byte [ebx + 0xec], 2
je 0x103106d
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 8]
mov edx, dword [ebp - 0x64]
cmp eax, dword [edx + 8]
ja 0x10312d1
cmp dword [ebp - 0x1c], 0
jge 0x10310d5
mov ecx, dword [ebp - 0x28]
push 0xc
call fcn.01021280
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x10310aa
test byte [eax + 0x1c], 1
je 0x10310aa
cmp byte [eax + 0x19], 2
jb 0x10310aa
push dword [ebp - 0x1c]
push dword [ebp - 0x30]
push 0x10023f8
push 0x1e0
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01048c37
push dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
push dword [ebp - 0x1c]
call fcn.010210ae
cmp byte [ebp - 0x29], 0
je 0x1031319
cmp byte [ebp - 0x45], 0
je 0x10310d5
mov eax, dword [ebp - 0x40]
cmp byte [eax + 0x60], 0
jne 0x1031319
mov eax, dword [ebp - 0x28]
inc dword [eax + 4]
mov esi, eax
xor eax, eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], 0xf
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], eax
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp + 0x10]
cmp dword [edi + 4], eax
jb 0x102fe2c
push dword [ebp - 0xac]
mov ecx, ebx
call fcn.0102d824
mov dword [ebp - 0x34], eax
test eax, eax
jl 0x10311e7
push 0
lea ecx, [ebx + 0x18]
call fcn.010d19a2
mov dword [ebp - 0x34], eax
test eax, eax
jl 0x10311e7
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 8]
and dword [ebp - 0x60], 0
cmp dword [ebp + 0x10], 0
mov dword [ebp - 0x5c], eax
jbe 0x10311c2
mov ebx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x70]
and dword [ebp - 0x78], 0
sub eax, ebx
mov dword [ebp - 0xa8], eax
push 4
pop ecx
mov edi, 0x1007124
mov esi, ebx
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x10311ad
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ecx + 0x7c]
mov edx, dword [ebp - 0x78]
add eax, edx
push dword [eax + 0x70]
lea edx, [eax + 0x68]
push edx
mov edx, dword [ebp - 0xa8]
add edx, ebx
push edx
push dword [ebp - 0x84]
add eax, 0x44
push dword [eax + 0x10]
push eax
push dword [ebp - 0x5c]
push ebx
call fcn.0102cfdf
inc dword [ebp - 0x5c]
mov dword [ebp - 0x34], eax
test eax, eax
jl 0x10311e1
inc dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
add dword [ebp - 0x78], 0x138
add ebx, 0x10
cmp eax, dword [ebp + 0x10]
jb 0x103115f
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x28]
cmp eax, dword [ecx + 8]
je 0x10311e1
push 0x10033c8
push 0x2ca8
push 0x1002460
call fcn.0107b644
mov ebx, dword [ebp - 0x8c]
mov esi, dword [sym.imp.ole32.dll_CoTaskMemFree]
xor edi, edi
cmp dword [ebp - 0x4c], edi
je 0x10311f9
push dword [ebp - 0x4c]
call esi
mov eax, dword [ebp - 0x58]
cmp eax, edi
je 0x1031217
mov ecx, dword [ebp - 0x28]
cmp eax, dword [ecx + 0x2c]
je 0x1031217
mov ecx, dword [ebp - 0x64]
cmp eax, dword [ecx + 0x2c]
je 0x1031217
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x3c]
cmp eax, edi
je 0x1031234
mov ecx, dword [ebp - 0x28]
cmp eax, dword [ecx + 0x28]
je 0x1031234
mov ecx, dword [ebp - 0x64]
cmp eax, dword [ecx + 0x28]
je 0x1031234
push eax
call fcn.0109f36b
cmp dword [ebp - 0x54], edi
je 0x103123e
push dword [ebp - 0x54]
call esi
cmp dword [ebp - 0x70], edi
je 0x1031248
push dword [ebp - 0x70]
call esi
cmp dword [ebp - 0x74], edi
je 0x1031252
push dword [ebp - 0x74]
call esi
cmp dword [ebp - 0x80], edi
je 0x103125c
push dword [ebp - 0x80]
call esi
lea ecx, [ebx + 0x18]
mov dword [ebp - 0x84], ecx
call fcn.010d1aee
cmp dword [ebp - 0x34], edi
jge 0x10313d5
mov ecx, dword [0x111024c]
mov edi, 0x111024c
cmp ecx, edi
je 0x103133a
test byte [ecx + 0x1c], 1
je 0x103133a
cmp byte [ecx + 0x19], 2
jb 0x103133a
mov eax, dword [ebp - 0xac]
cmp byte [eax], 0
mov eax, 0x10033c7
jne 0x10312af
mov eax, 0x10033c4
push eax
push dword [ebp - 0x34]
mov esi, 0x10023f8
push esi
push 0x1e1
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.010195dd
mov ecx, dword [0x111024c]
jmp 0x103133f
push 4
call fcn.01021280
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x103110d
test byte [eax + 0x1c], 1
je 0x103110d
cmp byte [eax + 0x19], 4
jb 0x103110d
push dword [ebp - 0x30]
push 0x10023f8
push 0x1df
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019633
jmp 0x103110d
mov al, byte [ebp - 0x15]
mov ecx, dword [ebp - 0xac]
mov byte [ecx], al
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xbc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
jmp 0x10311e7
mov esi, 0x10023f8
cmp byte [ebp - 0x36], 0
jne 0x10313e5
test byte [ebx + 0xec], 4
je 0x10313e5
mov ecx, dword [ebp - 0x84]
push 0
call fcn.010d19a2
test eax, eax
jge 0x1031395
mov ecx, dword [0x111024c]
cmp ecx, edi
je 0x1031406
test byte [ecx + 0x1c], 1
je 0x10313e5
cmp byte [ecx + 0x19], 2
jb 0x10313e5
push eax
push esi
push 0x1e2
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.01019fa8
jmp 0x10313df
mov ecx, ebx
call fcn.0101bdcb
test eax, eax
jge 0x10313c8
mov ecx, dword [0x111024c]
cmp ecx, edi
je 0x10313c8
test byte [ecx + 0x1c], 1
je 0x10313c8
cmp byte [ecx + 0x19], 2
jb 0x10313c8
push eax
push esi
push 0x1e3
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.01019fa8
mov ecx, dword [ebp - 0x84]
call fcn.010d1aee
jmp 0x10313df
mov edi, 0x111024c
mov esi, 0x10023f8
mov ecx, dword [0x111024c]
cmp ecx, edi
je 0x1031406
test byte [ecx + 0x1c], 1
je 0x1031406
cmp byte [ecx + 0x19], 4
jb 0x1031406
push esi
push 0x1e4
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.0101894a
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x34]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0106f798
leave
ret 0x1c